Index: output/eeprom.dat =================================================================== --- /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/output/eeprom.dat (revision 1050) +++ /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/output/eeprom.dat (working copy) @@ -6044,22 +6044,23 @@ 51 aa 55 -0c +0d 00 fc 45 -0b +0c +54 +4d +30 +30 +31 +20 42 54 33 2e 30 20 -4d -6f -75 -73 -65 aa 55 05 @@ -6142,7 +6143,7 @@ 03 aa 55 -14 +15 00 d2 4a @@ -6153,57 +6154,60 @@ 03 00 80 -0c +0d 09 +54 +4d +30 +30 +31 +20 42 54 35 2e 32 20 -4d -6f -75 -73 -65 aa 55 -0e +0f 00 07 44 1f -0c +0d 09 +54 +4d +30 +30 +31 +20 42 54 35 2e 32 20 -4d -6f -75 -73 -65 aa 55 -0c +0d 00 f7 42 -0b +0c +54 +4d +30 +30 +31 +20 42 54 35 2e 32 20 -4d -6f -75 -73 -65 aa 55 0c @@ -6804,14 +6808,10 @@ 02 40 00 -9b +9f 1a -dc -bd -ff -ff -ff -ff +8f +b5 ff ff ff @@ -8188,5 +8188,5 @@ ff ff ff -6c -35 +8c +ea Index: output/flash.dat =================================================================== --- /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/output/flash.dat (revision 1050) +++ /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/output/flash.dat (working copy) @@ -6044,22 +6044,23 @@ 51 aa 55 -0c +0d 00 fc 45 -0b +0c +54 +4d +30 +30 +31 +20 42 54 33 2e 30 20 -4d -6f -75 -73 -65 aa 55 05 @@ -6142,7 +6143,7 @@ 03 aa 55 -14 +15 00 d2 4a @@ -6153,57 +6154,60 @@ 03 00 80 -0c +0d 09 +54 +4d +30 +30 +31 +20 42 54 35 2e 32 20 -4d -6f -75 -73 -65 aa 55 -0e +0f 00 07 44 1f -0c +0d 09 +54 +4d +30 +30 +31 +20 42 54 35 2e 32 20 -4d -6f -75 -73 -65 aa 55 -0c +0d 00 f7 42 -0b +0c +54 +4d +30 +30 +31 +20 42 54 35 2e 32 20 -4d -6f -75 -73 -65 aa 55 0c @@ -6804,14 +6808,10 @@ 02 40 00 -9b +9f 1a -dc -bd -ff -ff -ff -ff +8f +b5 ff ff ff @@ -8188,5 +8188,5 @@ ff ff ff -6c -35 +8c +ea Index: output/program.lis =================================================================== --- /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/output/program.lis (nonexistent) +++ /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/output/program.lis (working copy) @@ -0,0 +1,42332 @@ + include "bt_format " + org 0x0000 +0000 c2840019 bbit1 8 ,pf_patch_ext +0001 c0000024 beq patch00_0 ,p_soft_reset +0002 c0018028 beq patch00_3 ,p_main_loop +0003 c0418041 beq patch10_3 ,p_set_sync_on +0004 c0458082 beq patch11_3 ,p_initialize_radio_cont +0005 c04f808f beq patch13_7 ,p_init_param +0006 c0570091 beq patch15_6 ,p_app_init +0007 c0580076 beq patch16_0 ,p_app_evt_100ms_loop +0008 c061824a beq patch18_3 ,p_mouse_start_work +0009 c0620255 beq patch18_4 ,p_mouse_start_reconnect_device +000a c0638156 beq patch18_7 ,p_mouse_app_enter_hibernate +000b c064815c beq patch19_1 ,p_mouse_setgpio_hibernate +000c c0650190 beq patch19_2 ,p_mouse_lpm_before_common +000d c0660072 beq patch19_4 ,p_mouse_adc_read_start +000e c0670338 beq patch19_6 ,p_mouse_motion +000f c06783d6 beq patch19_7 ,p_mouse_dpi_process +0010 c0680269 beq patch1a_0 ,p_mouse_seting_dpi +0011 c0688363 beq patch1a_1 ,p_mouse_check_key_gpio +0012 c06a0349 beq patch1a_4 ,p_mouse_sensor_poweron +0013 c06b01bb beq patch1a_6 ,p_mouse_priority_bb_event +0014 c06c827a beq patch1b_1 ,p_mouse_bb_event_timer +0015 c06d02dd beq patch1b_2 ,p_mouse_start_discovery +0016 c06f0399 beq patch1b_6 ,p_mouse_idle +0017 c07402ea beq patch1d_0 ,p_hid_rx_process +0018 2020137c branch loop + +pf_patch_ext: +0019 c0198052 beq patch26_3 ,p_adc_init_data +001a c01a0057 beq patch26_4 ,p_enable_adc +001b c04382e6 beq patch30_7 ,p_ui_timer_check +001c c05082fe beq patch34_1 ,p_le_slave_match +001d c0600308 beq patch38_0 ,p_le_parse_l2cap +001e c06e8239 beq patch3b_5 ,p_g24_dispatch +001f c0710214 beq patch3c_2 ,p_g24_pair_dispatch +0020 c074821c beq patch3d_1 ,p_g24_reconn_dispatch +0021 c075011f beq patch3d_2 ,p_g24_transmit_no_interrupt +0022 c076032f beq patch3d_4 ,p_g24_lpm_wait +0023 2020137c branch loop + +p_soft_reset: +0024 20800000 clear_stack +0025 204030f3 call app_param_init +0026 20403bfd call mouse_xtal_init +0027 20200804 branch soft_reset + 3 + +p_main_loop: +0028 2040706c call sp_calc_sequence +0029 20407597 call sp_calc_sequence_256 +002a 20406ea7 call sp_calc_sequence_256_check +002b 20401b93 call le_advertising_dispatch + 1 +002c 2040083a call idle_dispatch +002d 20403108 call app_process_idle + 1 +002e 20400892 call inquiry_dispatch + 1 +002f 20400b08 call inquiry_scan_dispatch + 1 +0030 20400b7b call page_scan_dispatch + 1 +0031 20400823 call connection_dispatch + 1 +0032 204021d3 call g24_dispatch + 2 +0033 20400035 call p_lpm_dispatch +0034 20200813 branch main_loop + +p_lpm_dispatch: +0035 20401465 call lpo_calibration +0036 6fe1c174 fetch 3 ,mem_clks_per_lpo +0037 207a0000 rtn blank +0038 6fe0c099 fetch 1 ,mem_lpm_mode +0039 207a0000 rtn blank +003a 6fe0c764 fetch 1 ,mem_ssp_enable +003b 203a003e branch p_lpm_dispatch_next ,blank +003c 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +003d 207a0000 rtn blank + +p_lpm_dispatch_next: +003e 6fe0c6ba fetch 1 ,mem_sc_calc +003f 247a0000 nrtn blank +0040 202014ea branch lpm_dispatch_next + 3 + +p_set_sync_on: +0041 70890005 jam 0x5 ,modem_en +0042 20000002 nop 2 +0043 70890000 jam 0x0 ,modem_en +0044 6fe0c0c5 fetch 1 ,mem_fcomp_div +0045 c00c1168 beq xtal_24m ,set_sync_on_24m + +p_set_sync_on_16m: +0046 708a8729 jam 0x29 ,core_syn_afc_cfg1 +0047 2020117d branch set_sync_on_16m + +p_g24_load_ota_config_poweron: +0048 20405b94 call iicd_load_gpio_init +0049 20400446 call p_g24_check_ota_data +004a 2034004c branch p_g24_load_ota_config ,user +004b 20600000 rtn + +p_g24_load_ota_config: +004c da605de2 arg iicd_read_eep ,regc +004d 6fe14bf3 fetch 2 ,mem_g24_ota_config_addr +004e 1fe0fe03 increase 3 ,pdata +004f 1ff0fe00 byteswap pdata ,pdata +0050 67e102e4 store 2 ,mem_addr_mi +0051 20205b3f branch load_storage_loop + +p_adc_init_data: +0052 da20099e arg mem_temp_block2 ,rega +0053 d840000c arg 12 ,temp +0054 58000030 setarg efuse_offset_adc_param +0055 20405e63 call efuse_read_data +0056 202060bf branch adc_init_data + 6 + +p_enable_adc: +0057 6a508a12 fetchr regb ,1 ,core_rf_ldo_cfg6 +0058 708a123d jam 0x3d ,core_rf_ldo_cfg6 +0059 708a11aa jam 0xaa ,core_rf_ldo_cfg5 +005a 708a0a0c jam 0x0c ,core_rf_ldo_en0 +005b 6ff08a09 fetch 1 ,core_clkpll_cfg6 +005c 79207e07 set1 7 ,pdata +005d 67f08a09 store 1 ,core_clkpll_cfg6 +005e 708a0b04 jam 0x04 ,core_rf_ldo_en1 +005f 2000003c nop 60 +0060 708a1600 jam 0 ,core_syn_en +0061 708a1706 jam 6 ,core_rx_en0 +0062 2040611a call read_adc_mode +0063 67f08a97 store 1 ,core_gpadc_ctrl +0064 7080dc03 jam 0x03 ,core_sum_ctrl +0065 2000003c nop 60 +0066 6ff08053 fetch 1 ,core_sum_en +0067 79207e07 set1 7 ,pdata +0068 67f08053 store 1 ,core_sum_en +0069 200003e8 nop 1000 +006a 6ff10150 fetch 2 ,core_adc_sum +006b 67e144a2 store 2 ,mem_adc_current_value +006c 6ff08053 fetch 1 ,core_sum_en +006d 793ffe07 set0 7 ,pdata +006e 67f08053 store 1 ,core_sum_en +006f 708a9700 jam 0 ,core_gpadc_ctrl +0070 62508a12 storer regb ,1 ,core_rf_ldo_cfg6 +0071 20600000 rtn + +p_mouse_adc_read_start: +0072 6fe0cbaa fetch 1 ,mem_24g_device_led_status +0073 247a0000 nrtn blank +0074 20400057 call p_enable_adc +0075 20203ebb branch mouse_adc_read_start + 3 + +p_app_evt_100ms_loop: +0076 6fe0830d fetch 1 ,mem_app_evt_timer_count +0077 207a0000 rtn blank +0078 1fe0ffff increase -1 ,pdata +0079 67e0830d store 1 ,mem_app_evt_timer_count +007a 204077c5 call ui_button_polling +007b 204031e3 call app_lpm_wake_auto_lock_timer +007c 204031a4 call app_unsniff_delay_timer +007d 204031aa call app_discovery_timer +007e 20405cdc call flash_write_spi_sm_timer +007f 6fe1446f fetch 2 ,mem_cb_event_timer +0080 20407e05 call callback_func +0081 20200076 branch p_app_evt_100ms_loop + +p_initialize_radio_cont: +0082 708a8be6 jam 0xe6 ,core_syn_aac_cfg1 +0083 2040126a call initialize_syn_afc_cfg1 +0084 20401271 call initialize_rf_ldo_cfg1 +0085 20401277 call initialize_rc_cal +0086 708a6d09 jam 0x09 ,core_rx_bq_cfg0 +0087 708a0305 jam 5 ,core_clkpll_cfg0 +0088 708a7a94 jam 0x94 ,core_rx_iqadc_cfg +0089 708a0e0b jam 0x0b ,core_rf_ldo_cfg2 +008a 708a0f05 jam 0x05 ,core_rf_ldo_cfg3 +008b 708a8390 jam 0x90 ,core_syn_pfd_lkd_cfg +008c 708a8500 jam 0x00 ,core_syn_loopdiv_dsm_cfg +008d 70892140 jam 0x40 ,core_rx_ctrl1 +008e 2020125d branch initialize_radio_cont + 8 + +p_init_param: +008f 70008000 jam 0 ,mem_lmo_tid2 +0090 202013b7 branch init_param_next + 1 + +p_app_init: + +p_mouse_init: +0091 24558048 ncall p_g24_load_ota_config_poweron ,wake +0092 2455809d ncall p_mouse_le_name_load ,wake +0093 20406df3 call enable_authrom +0094 204000c8 call p_mouse_setting_config +0095 204041a7 call mouse_init_sunt +0096 20758000 rtn wake +0097 2040408e call mouse_dpi_config +0098 20403d8a call mouse_usb_check_enable +0099 20404728 call mouse_drawing_optima_init +009a 204000d8 call p_mouse_cb_fuction +009b 2040035b call p_mouse_sensor_powerdown +009c 20203bc9 branch mouse_init + 8 + +p_mouse_le_name_load: +009d 6fe44c1f fetch 8 ,mem_le_name_patch +009e 207a0000 rtn blank +009f 6fe0cc1e fetch 1 ,mem_le_name_patch_len +00a0 1fe22200 copy pdata ,rega +00a1 1fe67c0b sub pdata ,11 ,null +00a2 242100af nbranch p_mouse_le_name_patch_len_overflow ,positive +00a3 d8c04c1f arg mem_le_name_patch ,contr +00a4 d8a04adb arg mem_le_adv_swift_pair + 9 ,contw +00a5 1a227200 copy rega ,loopcnt +00a6 20407d5f call memcpy +00a7 d8c04c1f arg mem_le_name_patch ,contr +00a8 d8a0440a arg mem_le_scan_data + 2 ,contw +00a9 1a227200 copy rega ,loopcnt +00aa 20407d5f call memcpy +00ab d8c04c1f arg mem_le_name_patch ,contr +00ac d8a042f8 arg mem_le_name ,contw +00ad 1a227200 copy rega ,loopcnt +00ae 20207d5f branch memcpy + +p_mouse_le_name_patch_len_overflow: +00af 204000c5 call p_mouse_le_swift_pair_disable +00b0 6fe0cc1e fetch 1 ,mem_le_name_patch_len +00b1 1fe0fe01 increase 1 ,pdata +00b2 67e0cad2 store 1 ,mem_le_adv_swift_pair +00b3 704ad309 jam 9 ,mem_le_adv_swift_pair + 1 +00b4 d8c04c1f arg mem_le_name_patch ,contr +00b5 d8a04ad4 arg mem_le_adv_swift_pair + 2 ,contw +00b6 1a227200 copy rega ,loopcnt +00b7 20407d5f call memcpy +00b8 6fe0cc1e fetch 1 ,mem_le_name_patch_len +00b9 1fe0fe01 increase 1 ,pdata +00ba 67e0c408 store 1 ,mem_le_scan_data +00bb 70440909 jam 9 ,mem_le_scan_data + 1 +00bc d8c04c1f arg mem_le_name_patch ,contr +00bd d8a0440a arg mem_le_scan_data + 2 ,contw +00be 1a227200 copy rega ,loopcnt +00bf 20407d5f call memcpy +00c0 d8c04c1e arg mem_le_name_patch_len ,contr +00c1 d8a042f7 arg mem_le_name_len ,contw +00c2 1a227200 copy rega ,loopcnt +00c3 1f20f201 increase 1 ,loopcnt +00c4 20207d5f branch memcpy + +p_mouse_le_swift_pair_disable: +00c5 d8a04ad2 arg mem_le_adv_swift_pair ,contw +00c6 df200014 arg 20 ,loopcnt +00c7 20207d26 branch clear_mem + +p_mouse_setting_config: +00c8 20758000 rtn wake +00c9 20402607 call g24_transmit_init +00ca 204022ff call g24_chmap_param_init +00cb 20403f1e call mouse_gpio_init +00cc 20403d13 call mouse_param_init +00cd 204000d2 call p_g24_short_sleep_set_8ms +00ce 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +00cf c30c3bf5 bbit0 mouse_enable_24g_250hz ,mouse_setting_config_next +00d0 204000d5 call p_g24_short_sleep_set_4ms +00d1 20203bf5 branch mouse_setting_config_next + +p_g24_short_sleep_set_8ms: +00d2 5800e290 setarg 58000 +00d3 67e1c8ad store 3 ,mem_24g_short_sleep_set +00d4 20600000 rtn + +p_g24_short_sleep_set_4ms: +00d5 58001770 setarg 6000 +00d6 67e1c8ad store 3 ,mem_24g_short_sleep_set +00d7 20600000 rtn + +p_mouse_cb_fuction: +00d8 580000dd setarg p_mouse_24g_package_data +00d9 67e1489b store 2 ,mem_cb_24g_transmit_data +00da 580000f9 setarg p_mouse_24g_search_dongle +00db 67e1489d store 2 ,mem_cb_24g_search_receiver +00dc 20203bd3 branch mouse_cb_fuction + 4 + +p_mouse_24g_package_data: +00dd c6930000 rtnmark0 mark_24g +00de 6fe0cbf6 fetch 1 ,mem_g24_ota_mode +00df 243a04ff nbranch p_mouse_24g_package_ota ,blank +00e0 20403f70 call mouse_motion +00e1 24740000 nrtn user +00e2 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +00e3 c30a80e6 bbit0 mouse_enable_keyboard ,p_mouse_24g_mouse_package_data +00e4 6fe0cb8b fetch 1 ,mem_customer_key +00e5 243a4884 nbranch mouse_24g_keyboard_package_data ,blank + +p_mouse_24g_mouse_package_data: +00e6 204042cb call mouse_data_xy_release +00e7 6fe0c836 fetch 1 ,mem_24g_data_type +00e8 c28080f5 bbit1 1 ,p_mouse_24g_mouse_package_data_now +00e9 6848c7c7 fetcht 1 ,mem_24g_txbuf + 1 +00ea 6fe0c8d0 fetch 1 ,mem_mouse_key +00eb 9841fe00 ior temp ,pdata +00ec 67e0c8d0 store 1 ,mem_mouse_key +00ed 6848c7cc fetcht 1 ,mem_24g_txbuf + 6 +00ee 6fe0c8d5 fetch 1 ,mem_mouse_z +00ef 9840fe00 iadd temp ,pdata +00f0 67e0c8d5 store 1 ,mem_mouse_z +00f1 6848c7cd fetcht 1 ,mem_24g_txbuf + 7 +00f2 6fe0c8d6 fetch 1 ,mem_mouse_tz +00f3 9840fe00 iadd temp ,pdata +00f4 67e0c8d6 store 1 ,mem_mouse_tz + +p_mouse_24g_mouse_package_data_now: +00f5 70483601 jam type_ms ,mem_24g_data_type +00f6 da200007 arg 7 ,rega +00f7 da4048d0 arg mem_mouse_key ,regb +00f8 202026e1 branch g24_transmit_by_interrupt_enable + +p_mouse_24g_search_dongle: +00f9 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +00fa c40b0000 rtnbit0 mouse_enable_24g_search_dongle +00fb 6fe0caae fetch 1 ,mem_mouse_long_mult_flag +00fc 207a0000 rtn blank +00fd 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +00fe 207a0000 rtn blank +00ff 6fe0cba1 fetch 1 ,mem_mouse_search_dongle_interval +0100 1fe0fe01 increase 1 ,pdata +0101 1fe17e03 and_into 3 ,pdata +0102 67e0cba1 store 1 ,mem_mouse_search_dongle_interval +0103 247a0000 nrtn blank +0104 704ba200 jam 0 ,mem_mouse_search_dongle_ch + +p_mouse_24g_search_dongle_loop: +0105 6fe0cba2 fetch 1 ,mem_mouse_search_dongle_ch +0106 1fe0fe01 increase 1 ,pdata +0107 67e0cba2 store 1 ,mem_mouse_search_dongle_ch +0108 1fe67c08 sub pdata ,g24_ch_number ,null +0109 2421010f nbranch p_mouse_24g_search_dongle_loop_end ,positive +010a 2040259a call g24_reconn_data_prep +010b 2040265b call g24_transmit_receive_ack +010c 242c0115 nbranch p_mouse_24g_search_dongle_loop_retry ,sync +010d 24378115 nbranch p_mouse_24g_search_dongle_loop_retry ,user3 +010e 204048b5 call mouse_24g_search_dongle_success + +p_mouse_24g_search_dongle_loop_end: +010f 20402597 call g24_txbuf_clear +0110 6fe0cba3 fetch 1 ,mem_mouse_search_dongle_count +0111 1fe0fe01 increase 1 ,pdata +0112 67e0cba3 store 1 ,mem_mouse_search_dongle_count +0113 c0080117 beq g24_ch_poll_count ,p_mouse_24g_search_dongle_check +0114 20600000 rtn + +p_mouse_24g_search_dongle_loop_retry: +0115 204022cb call g24_ch +0116 20200105 branch p_mouse_24g_search_dongle_loop + +p_mouse_24g_search_dongle_check: +0117 704ba300 jam 0 ,mem_mouse_search_dongle_count +0118 6fe0cba4 fetch 1 ,mem_mouse_search_dongle_action +0119 c3800000 rtnbit1 g24_disconn_state +011a 79207e00 set1 g24_disconn_state ,pdata +011b 67e0cba4 store 1 ,mem_mouse_search_dongle_action +011c 6fe14bbc fetch 2 ,mem_mouse_24g_search_dongle_time_init +011d 67e14ab2 store 2 ,mem_mouse_no_data_timer +011e 2020035b branch p_mouse_sensor_powerdown + +p_g24_transmit_no_interrupt: +011f 20402631 call g24_txdata_prep +0120 243401a2 nbranch p_g24_nodata_transmit ,user + +p_g24_transmit_start: +0121 2040012e call p_g24_transmit_process +0122 204026ee call power_ctrl_start +0123 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +0124 243a0129 nbranch p_g24_short_sleep ,blank +0125 6fe448b0 fetch 8 ,mem_24g_long_sleep_set +0126 67e4485c store 8 ,mem_24g_enter_hibernate +0127 6fe148c2 fetch 2 ,mem_24g_long_sleep_param_update_timer_init +0128 67e148c4 store 2 ,mem_24g_long_sleep_param_update_timer + +p_g24_short_sleep: +0129 204026bb call g24_lpm_wait +012a 24740000 nrtn user +012b 20407fdc call clear_wake +012c 6fe1c8ad fetch 3 ,mem_24g_short_sleep_set +012d 202026b8 branch g24_long_sleep2 + +p_g24_transmit_process: +012e 7048a600 jam 0 ,mem_24g_retry + +p_g24_transmit_loop: +012f 6961015f fetchr timeup ,2 ,mem_param_rx_setup +0130 34730200 until clkn_rt ,meet +0131 2040265b call g24_transmit_receive_ack +0132 6fe0c82c fetch 1 ,mem_24g_no_ack +0133 c000a651 beq no_ack_24g ,g24_transmit_no_ack +0134 242c0147 nbranch p_g24_retransmit ,sync +0135 24378147 nbranch p_g24_retransmit ,user3 +0136 20402672 call g24_ackpayload_parse +0137 20400407 call p_g24_mouse_parse_rx +0138 2040013a call p_mouse_wakeup_24g +0139 20202651 branch g24_transmit_no_ack + +p_mouse_wakeup_24g: +013a 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +013b 245a013e ncall p_mouse_wakeup_24g_from_long_sleep ,blank +013c 704be100 jam 0 ,mem_sensor_shutdown_flag +013d 20600000 rtn + +p_mouse_wakeup_24g_from_long_sleep: +013e 204041aa call mouse_init_sensor_wakeup +013f 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0140 c41e0000 rtnbit0 mouse_enable_wheel_wake_up_cancel + +p_mouse_wheel_set_wakeup: +0141 6fe0c913 fetch 1 ,mem_whee_a_data_gpio +0142 d8400040 arg gpcfg_pullup ,temp +0143 20406093 call gpio_config_function_int +0144 6fe0c914 fetch 1 ,mem_whee_b_data_gpio +0145 d8400040 arg gpcfg_pullup ,temp +0146 20206093 branch gpio_config_function_int + +p_g24_retransmit: +0147 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +0148 247a0000 nrtn blank +0149 6fe148a3 fetch 2 ,mem_24g_txfail_cnt +014a 1fe0fe01 increase 1 ,pdata +014b 67e148a3 store 2 ,mem_24g_txfail_cnt +014c 6fe0c8a4 fetch 1 ,mem_24g_txfail_cnt + 1 +014d c280a679 bbit1 1 ,g24_tx_attempt_fail +014e 2040267e call g24_transmit_hop_process +014f 20400151 call p_delay_40ms +0150 2020012f branch p_g24_transmit_loop + +p_delay_40ms: +0151 6fe0c8a4 fetch 1 ,mem_24g_txfail_cnt + 1 +0152 1fe67c00 sub pdata ,0x00 ,null +0153 20610000 rtn positive +0154 df200028 arg 40 ,loopcnt +0155 20207d13 branch delay_ms_wait + +p_mouse_app_enter_hibernate: +0156 58000006 setarg pan_reg_config +0157 20405b0d call twspi_read +0158 c281be23 bbit1 3 ,mouse_app_enter_hibernate + 3 +0159 20400354 call p_mouse_sensor_reset +015a 2040035b call p_mouse_sensor_powerdown +015b 20203e23 branch mouse_app_enter_hibernate + 3 + +p_mouse_setgpio_hibernate: +015c 204042e9 call mouse_set_sdio_high +015d 20407fdc call clear_wake +015e 2040029f call p_mouse_logo_led_off +015f 20404015 call mouse_before_hibernate_wheel_gpio_set +0160 6848c910 fetcht 1 ,mem_matrix_public_gpio +0161 20406069 call gpio_out_active +0162 6848c910 fetcht 1 ,mem_matrix_public_gpio +0163 20406042 call gpio_clr_wake +0164 6fe0c920 fetch 1 ,mem_mouse_sensor_sdio_gpio +0165 d840003f arg gpcfg_output_high ,temp +0166 20406093 call gpio_config_function_int +0167 d8400003 arg 3 ,temp +0168 20403f56 call mouse_gpio_config_input_pu +0169 20403e40 call mouse_lpm_before_common +016a 20406082 call gpio_pd_idle +016b d8400013 arg 19 ,temp +016c 20403f56 call mouse_gpio_config_input_pu +016d 20400170 call p_mouse_gpio_set_high_impedance +016e 2040017d call p_mouse_adc_gpio_set_before_hibernate +016f 20200184 branch p_mouse_wheel_gpio_set_before_hibernate + +p_mouse_gpio_set_high_impedance: +0170 6fe1cbde fetch 3 ,mem_mouse_set_high_impedance_bit_set +0171 67e1895c store 3 ,mem_pdatatemp +0172 df200014 arg 20 ,loopcnt +0173 d8400000 arg 0 ,temp + +p_mouse_gpio_set_high_impedance_bit_loop: +0174 6fe1895c fetch 3 ,mem_pdatatemp +0175 2feffe00 isolate1 0 ,pdata +0176 2040e07f call gpio_set_high_impedance ,true +0177 6fe1895c fetch 3 ,mem_pdatatemp +0178 1fe37e00 rshift pdata ,pdata +0179 67e1895c store 3 ,mem_pdatatemp +017a 18408401 increase 1 ,temp +017b c2000174 loop p_mouse_gpio_set_high_impedance_bit_loop +017c 20600000 rtn + +p_mouse_adc_gpio_set_before_hibernate: +017d 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +017e c40a0000 rtnbit0 mouse_enable_adc +017f 6fe0c8fd fetch 1 ,mem_adc_config_flag_init +0180 c1810000 rtnne adc_config_gpio +0181 6fe0c8fc fetch 1 ,mem_adc_channel_gpio +0182 d84000c0 arg gpcfg_no_ie ,temp +0183 20206093 branch gpio_config_function_int + +p_mouse_wheel_gpio_set_before_hibernate: +0184 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0185 c41e0000 rtnbit0 mouse_enable_wheel_wake_up_cancel + +p_mouse_wheel_clr_wakeup: +0186 6848c913 fetcht 1 ,mem_whee_a_data_gpio +0187 20406042 call gpio_clr_wake +0188 6848c914 fetcht 1 ,mem_whee_b_data_gpio +0189 20406042 call gpio_clr_wake +018a 6fe0c913 fetch 1 ,mem_whee_a_data_gpio +018b d8400080 arg gpcfg_pulldown ,temp +018c 20406093 call gpio_config_function_int +018d 6fe0c914 fetch 1 ,mem_whee_b_data_gpio +018e d8400080 arg gpcfg_pulldown ,temp +018f 20206093 branch gpio_config_function_int + +p_mouse_lpm_before_common: +0190 6848c913 fetcht 1 ,mem_whee_a_data_gpio +0191 20406050 call gpio_config_input +0192 6848c914 fetcht 1 ,mem_whee_b_data_gpio +0193 20406050 call gpio_config_input +0194 20403f88 call mouse_wheel_check +0195 6fe0c91f fetch 1 ,mem_mouse_sensor_sclk_gpio +0196 d840003f arg gpcfg_output_high ,temp +0197 20406093 call gpio_config_function_int +0198 20203e44 branch mouse_lpm_before_common_next + +p_mouse_24g_hibernate_set: +0199 7048a500 jam 0 ,mem_24g_attempt_fail_flag +019a 20402652 call g24_transmit_next_packet +019b 5fffffff setarg -1 +019c 67e2485c store 4 ,mem_24g_enter_hibernate +019d 58000000 setarg 0 +019e 67e3c8d0 store 7 ,mem_mouse_key +019f 704be101 jam 1 ,mem_sensor_shutdown_flag +01a0 2040035b call p_mouse_sensor_powerdown +01a1 202001a7 branch p_g24_long_sleep + +p_g24_nodata_transmit: +01a2 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +01a3 205a01ad call p_g24_send_abort_packet ,blank +01a4 6fe0c8bd fetch 1 ,mem_24g_transmit_by_interrupt +01a5 c1008000 rtneq g24_tx_timer_int_enable +01a6 2040269f call g24_search_receiver + +p_g24_long_sleep: +01a7 204026bb call g24_lpm_wait +01a8 24740000 nrtn user +01a9 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +01aa 245a3e33 ncall mouse_setgpio_hibernate ,blank +01ab 6fe2485c fetch 4 ,mem_24g_enter_hibernate +01ac 202026b8 branch g24_long_sleep2 + +p_g24_send_abort_packet: +01ad 70483601 jam type_ms ,mem_24g_data_type +01ae 7048a701 jam 1 ,mem_24g_abort_pac +01af 20402642 call g24_transmit_rf_ctrl_clear +01b0 67e0c7c6 store 1 ,mem_24g_txbuf +01b1 58000000 setarg 0 +01b2 67e3c7c7 store 7 ,mem_24g_txbuf + 1 +01b3 6fe248a9 fetch 4 ,mem_24g_device_addr +01b4 67e247ce store 4 ,mem_24g_txbuf + 8 +01b5 7048350c jam 12 ,mem_24g_datalen +01b6 6fe0c836 fetch 1 ,mem_24g_data_type +01b7 79207e03 set1 bit_abort ,pdata +01b8 67e0c836 store 1 ,mem_24g_data_type +01b9 20402291 call g24_transmit_prep +01ba 20200121 branch p_g24_transmit_start + +p_mouse_priority_bb_event: +01bb 1a627e00 copy regc ,pdata +01bc c00081c4 beq bt_evt_bb_connected ,p_mouse_bb_event_connected +01bd c01e01e6 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +01be c01c81e4 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +01bf c01d01ed beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +01c0 c01901d0 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +01c1 c02201d7 beq bt_evt_le_parse_conn_param_accepted ,p_mouse_le_parse_conn_param_accepted +01c2 c00a81c6 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +01c3 20204336 branch mouse_priority_bb_event + 2 + +p_mouse_bb_event_connected: +01c4 20404544 call mouse_no_data_timer_init +01c5 202043fa branch mouse_bb_event_connected + +p_mouse_le_bb_disconnected: +01c6 58000000 setarg 0 +01c7 67e14af2 store 2 ,mem_le_battery_level_updata_timer +01c8 704ac600 jam 0 ,mem_mouse_le_bb_connected_flag +01c9 58000006 setarg le_interval_7_5ms +01ca 67e14372 store 2 ,mem_le_interval_min +01cb 67e14374 store 2 ,mem_le_interval_min + 2 +01cc 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +01cd c28dc366 bbit1 mouse_enable_bt_125hz ,mouse_le_bb_disconnected_next + 2 +01ce 58000007 setarg le_interval_8_75ms +01cf 20204364 branch mouse_le_bb_disconnected_next + +p_mouse_le_ll_start_encryt: +01d0 6fe0cac7 fetch 1 ,mem_mouse_le_reconnect_flag +01d1 c00081d4 beq 1 ,p_mouse_le_ll_reconn_start_encryt +01d2 704b7614 jam 20 ,mem_le_start_encrypt_timer +01d3 20204373 branch mouse_le_ll_enable_start_enc_flag + +p_mouse_le_ll_reconn_start_encryt: +01d4 2040436c call mouse_updata_le_param +01d5 704b7605 jam 5 ,mem_le_start_encrypt_timer +01d6 20204373 branch mouse_le_ll_enable_start_enc_flag + +p_mouse_le_parse_conn_param_accepted: +01d7 6fe082c1 fetch 1 ,mem_le_new_conninterval +01d8 1fe67c0c sub pdata ,le_interval_15ms ,null +01d9 24214384 nbranch mouse_le_conn_param_lpm_disable ,positive +01da 67e14372 store 2 ,mem_le_interval_min +01db 67e14374 store 2 ,mem_le_interval_min + 2 +01dc 6fe082c3 fetch 1 ,mem_le_new_connslavelatency +01dd 203a439a branch mouse_le_lpm_mult_reinit ,blank +01de 6848cb8a fetcht 1 ,mem_lpm_mult_init +01df 98467c00 isub temp ,null +01e0 2021439a branch mouse_le_lpm_mult_reinit ,positive +01e1 6fe082c3 fetch 1 ,mem_le_new_connslavelatency +01e2 67e0cb8a store 1 ,mem_lpm_mult_init +01e3 20204386 branch mouse_le_conn_param_lpm_enable + +p_mouse_24g_pairing_complete: +01e4 20404544 call mouse_no_data_timer_init +01e5 20204857 branch mouse_24g_pairing_complete + +p_mouse_24g_attempt_success: +01e6 6fe2483c fetch 4 ,mem_24g_addr +01e7 67e24891 store 4 ,mem_24g_receiver_addr +01e8 67e24993 store 4 ,mem_mouse_24g_addr +01e9 2040257e call g24_ch_syncword_crc8_init +01ea 204048c6 call mouse_device_poweron_timer_init +01eb 20404544 call mouse_no_data_timer_init +01ec 2020484e branch mouse_24g_attempt_success + +p_mouse_24g_attempt_fail: +01ed 6fe0c8a5 fetch 1 ,mem_24g_attempt_fail_flag +01ee 243a0199 nbranch p_mouse_24g_hibernate_set ,blank +01ef 6fe0c88b fetch 1 ,mem_24g_reconn_type +01f0 c00101f4 beq fast_conn_and_3_0_addr ,p_mouse_24g_fast_conn_attempt_fail +01f1 c00201ff beq pair_and_3_0_addr ,p_mouse_24g_auto_pair_attempt_fail +01f2 c0018204 beq receiver_and_3_0_addr ,p_mouse_reconn_dongle_attempt_fail +01f3 20204839 branch mouse_24g_attempt_fail_enter_hibernate + +p_mouse_24g_fast_conn_attempt_fail: +01f4 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +01f5 c297c811 bbit1 mouse_enable_24g_first_auto_pairing ,mouse_24g_start_auto_pair +01f6 c2984811 bbit1 mouse_enable_auto_24g_paring ,mouse_24g_start_auto_pair +01f7 c31d4806 bbit0 mouse_enable_24g_auto_pair_nerver_been_paired ,mouse_24g_reconn_dongle_start +01f8 6fe24993 fetch 4 ,mem_mouse_24g_addr +01f9 684a4974 fetcht 4 ,mem_mouse_compare_addr_ff +01fa 98467c00 isub temp ,null +01fb 202281fd branch p_mouse_24g_start_pair_mode ,zero +01fc 20204806 branch mouse_24g_reconn_dongle_start + +p_mouse_24g_start_pair_mode: +01fd 70488b00 jam 0 ,mem_24g_reconn_type +01fe 20204827 branch mouse_24g_start_pair_mode + +p_mouse_24g_auto_pair_attempt_fail: +01ff 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0200 c3178209 bbit0 mouse_enable_24g_first_auto_pairing ,p_mouse_24g_attempt_fail_enter_hibernate +0201 6fe0cbb4 fetch 1 ,mem_device_number +0202 c0008209 beq 1 ,p_mouse_24g_attempt_fail_enter_hibernate +0203 2020481a branch mouse_24g_first_bluetooth_reconnect + +p_mouse_reconn_dongle_attempt_fail: +0204 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0205 c3178209 bbit0 mouse_enable_24g_first_auto_pairing ,p_mouse_24g_attempt_fail_enter_hibernate +0206 c2898209 bbit1 mouse_enable_eeprom ,p_mouse_24g_attempt_fail_enter_hibernate +0207 c2890209 bbit1 mouse_enable_flash ,p_mouse_24g_attempt_fail_enter_hibernate +0208 20204812 branch mouse_24g_start_auto_pair + 1 + +p_mouse_24g_attempt_fail_enter_hibernate: +0209 6fe24891 fetch 4 ,mem_24g_receiver_addr +020a 203a020e branch p_mouse_24g_attempt_fail_enter_hibernate_next ,blank +020b 684a4974 fetcht 4 ,mem_mouse_compare_addr_ff +020c 98467c00 isub temp ,null +020d 24228211 nbranch p_mouse_reconn_bt_set ,zero + +p_mouse_24g_attempt_fail_enter_hibernate_next: +020e 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +020f c31e4839 bbit0 mouse_enable_wheel_wake_up_cancel ,mouse_24g_attempt_fail_enter_hibernate +0210 20200199 branch p_mouse_24g_hibernate_set + +p_mouse_reconn_bt_set: +0211 70493801 jam mode_bt_device1 ,mem_device_flag +0212 20404314 call mouse_bluetooth_fast_conn_disable +0213 20203d59 branch mouse_start_reconnect_device + +p_g24_pair_dispatch: +0214 70488b00 jam default_24g_device ,mem_24g_reconn_type +0215 6fe14beb fetch 2 ,mem_24g_pair_count +0216 1fe0fe01 increase 1 ,pdata +0217 67e14beb store 2 ,mem_24g_pair_count +0218 6fe0cbeb fetch 1 ,mem_24g_pair_count +0219 1fe17eff and pdata ,0xff ,pdata +021a c0002341 beq 0 ,g24_pair_dispatch + 1 +021b 20600000 rtn + +p_g24_reconn_dispatch: +021c 6fe14889 fetch 2 ,mem_24g_reconn_count +021d d84001f8 arg 0x01f8 ,temp +021e 98417e00 iand temp ,pdata +021f 203a0224 branch p_g24_reconn_dispatch_next ,blank +0220 6fe14889 fetch 2 ,mem_24g_reconn_count +0221 1fe0fe01 increase 1 ,pdata +0222 67e14889 store 2 ,mem_24g_reconn_count +0223 20600000 rtn + +p_g24_reconn_dispatch_next: +0224 2040259a call g24_reconn_data_prep +0225 2040265b call g24_transmit_receive_ack +0226 242c022a nbranch p_g24_reconn_device_fail ,sync +0227 2437822a nbranch p_g24_reconn_device_fail ,user3 +0228 20402672 call g24_ackpayload_parse +0229 20202586 branch g24_reconn_receiver_succ + +p_g24_reconn_device_fail: +022a 6fe0c88c fetch 1 ,mem_24g_fast_conn_enable +022b 203a22cb branch g24_ch ,blank +022c 6fe14889 fetch 2 ,mem_24g_reconn_count +022d 1fe0fe01 increase 1 ,pdata +022e 67e14889 store 2 ,mem_24g_reconn_count +022f 6fe0c88a fetch 1 ,mem_24g_reconn_count + 1 +0230 2feffe01 isolate1 1 ,pdata +0231 6fe0c88b fetch 1 ,mem_24g_reconn_type +0232 c000a5ad beq fast_conn_and_receiver ,g24_reconn_fast_conn_and_receiver +0233 c00125af beq fast_conn_and_3_0_addr ,g24_reconn_fast_conn_and_3_0 +0234 c001a5b1 beq receiver_and_3_0_addr ,g24_reconn_receiver_and_3_0 +0235 c0020237 beq pair_and_3_0_addr ,p_g24_reconn_pair_and_3_0 +0236 2020256e branch g24_reconn_receiver_addr + +p_g24_reconn_pair_and_3_0: +0237 2020a575 branch g24_reconn_device_3_0_addr ,true +0238 20202339 branch g24_pair_init_param + +p_g24_dispatch: +0239 c61a0000 rtnmark1 mark_adc_enable +023a c513a40e bmark1 mark_24g_rxmode ,g24_receive_dispatch + +p_g24_transmit_dispatch: +023b c6930000 rtnmark0 mark_24g +023c 6fe0c8a1 fetch 1 ,mem_24g_conn_sm +023d c2818411 bbit1 state_24g_ota ,p_g24_ota_dispatch +023e c280a340 bbit1 state_24g_pair ,g24_pair_dispatch +023f c2812580 bbit1 state_24g_reconn ,g24_reconn_dispatch +0240 6fe0c8bd fetch 1 ,mem_24g_transmit_by_interrupt +0241 c0008243 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +0242 20202621 branch g24_transmit_no_interrupt + +p_g24_transmit_by_interrupt: +0243 204022ea call g24_timer_check +0244 2434023b nbranch p_g24_transmit_dispatch ,user +0245 204026db call g24_interval_calibrate +0246 6fe148be fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +0247 1fe0fe01 increase 1 ,pdata +0248 67e148be store 2 ,mem_24g_transmit_by_interrupt_exit_count +0249 20202621 branch g24_transmit_no_interrupt + +p_mouse_start_work: +024a 6fe08989 fetch 1 ,mem_wakup_from_power_flag +024b 2fec0002 isolate0 bit_power_on ,pdata +024c 20408253 call p_mouse_start_work_from_power ,true +024d 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +024e c297c80a bbit1 mouse_enable_24g_first_auto_pairing ,mouse_24g_first_start_auto_pair_mode +024f 6fe0c938 fetch 1 ,mem_device_flag +0250 c000025f beq mode_24g_device ,p_mouse_24g_start_mode + +p_mouse_start_work_next: +0251 20400257 call p_mouse_bt_reconn_led_blink +0252 20203d57 branch mouse_start_work + 5 + +p_mouse_start_work_from_power: +0253 70493800 jam mode_24g_device ,mem_device_flag +0254 20600000 rtn + +p_mouse_start_reconnect_device: +0255 20400257 call p_mouse_bt_reconn_led_blink +0256 20203d5a branch mouse_start_reconnect_device + 1 + +p_mouse_bt_reconn_led_blink: +0257 2040498e call mouse_low_voltage_led_blink_disable +0258 704ba700 jam 0 ,mem_mouse_device_poweron_timer_count +0259 6fe14c37 fetch 2 ,mem_mouse_le_reconn_led_blink_time +025a 202048ce branch mouse_discover_setting_led_gpio + 2 + +p_mouse_awake_from_hibernate: +025b 2040259a call g24_reconn_data_prep +025c 2040265b call g24_transmit_receive_ack +025d 202c480a branch mouse_24g_first_start_auto_pair_mode ,sync +025e 20203d57 branch mouse_start_work + 5 + +p_mouse_24g_start_mode: +025f 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0260 c308c803 bbit0 mouse_enable_24g ,mouse_24g_mode_setup_error +0261 20403d65 call mouse_wakeup_from_power_check +0262 20344806 branch mouse_24g_reconn_dongle_start ,user +0263 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0264 c298480c bbit1 mouse_enable_auto_24g_paring ,mouse_24g_reconn_general_dongle +0265 c318c80c bbit0 mouse_enable_24g_power_on_pairing ,mouse_24g_reconn_general_dongle +0266 20404110 call mouse_key_check_once +0267 1a217e07 and rega ,0x07 ,pdata +0268 202047ff branch mouse_24g_start_mode + 9 + +p_mouse_seting_dpi: +0269 2040408f call mouse_setting_dpi_4_level +026a 2040026c call p_mouse_dpi_led_blink_delay +026b 20204098 branch mouse_seting_sensor_type + +p_mouse_dpi_led_blink_delay: +026c 6fe0c923 fetch 1 ,mem_dpi_led_gpio +026d c17f8000 rtneq gpio_disable +026e 6fe14ac2 fetch 2 ,mem_mouse_discovery_timer +026f 247a0000 nrtn blank +0270 6fe14883 fetch 2 ,mem_24g_pair_timeout +0271 247a0000 nrtn blank +0272 6fe14887 fetch 2 ,mem_24g_reconn_timeout +0273 247a0000 nrtn blank +0274 6fe0cba7 fetch 1 ,mem_mouse_device_poweron_timer_count +0275 247a0000 nrtn blank +0276 6fe0cbc1 fetch 1 ,mem_mouse_dpi_led_delay_count_init +0277 203a02a6 branch p_mouse_dpi_led_blink_init ,blank +0278 67e0cba8 store 1 ,mem_mouse_dpi_led_delay_count +0279 20600000 rtn + +p_mouse_bb_event_timer: +027a 20403e9b call mouse_adc_read +027b 20404956 call mouse_low_voltage_led_timer +027c 2040232b call g24_pair_timeout_timer +027d 20402556 call g24_reconn_timeout_timer +027e 204047cd call mouse_24g_long_sleep_param_update_timer +027f 204048be call mouse_device_poweron_timer +0280 204002a3 call p_mouse_dpi_led_blink_delay_timer +0281 2040407c call mouse_dpi_key_check_long_press +0282 204044cc call mouse_bt_discovery_check +0283 204002bb call p_mouse_commbination_key_process +0284 204044ff call mouse_check_discovery_timeout_timer +0285 20404504 call mouse_check_direct_timeout_timer +0286 20404512 call mouse_le_enable_att_list_timer +0287 204002d2 call p_mouse_le_battery_updata_timer +0288 20404515 call mouse_le_send_smp_security_request_timer +0289 2040452a call mouse_check_hid_handshake_timer +028a 2040452d call mouse_bt_check_sniff_req_timeout_timer +028b 20404532 call mouse_check_reconnect_delay_long_sleep +028c 20404535 call mouse_current_mult_update_timer +028d 20404022 call mouse_wheel_trigger_timer +028e 20404547 call mouse_store_information_delay_timer +028f 20400295 call p_mouse_logo_led_on_timer +0290 204002d5 call p_mouse_check_no_data_timeout_timer +0291 20200292 branch p_mouse_g24_ota_reset_timer + +p_mouse_g24_ota_reset_timer: +0292 da604c1d arg mem_g24_ota_reset_timer ,regc +0293 da405d8c arg soft_reset_chip ,regb +0294 2020318a branch timer_single_step + +p_mouse_logo_led_on_timer: +0295 6fe0cbed fetch 1 ,mem_mouse_logo_led_gpio +0296 c17f8000 rtneq gpio_disable +0297 6fe14ab2 fetch 2 ,mem_mouse_no_data_timer +0298 207a0000 rtn blank +0299 6fe14bbe fetch 2 ,mem_mouse_no_data_timeout +029a 68494ab2 fetcht 2 ,mem_mouse_no_data_timer +029b 98460400 isub temp ,temp +029c 6fe14bee fetch 2 ,mem_mouse_logo_led_on_time_init +029d 98467e00 isub temp ,pdata +029e 202102a1 branch p_mouse_logo_led_on ,positive + +p_mouse_logo_led_off: +029f 6848cbed fetcht 1 ,mem_mouse_logo_led_gpio +02a0 20206065 branch gpio_out_inactive + +p_mouse_logo_led_on: +02a1 6848cbed fetcht 1 ,mem_mouse_logo_led_gpio +02a2 20406069 call gpio_out_active + +p_mouse_dpi_led_blink_delay_timer: +02a3 da604ba8 arg mem_mouse_dpi_led_delay_count ,regc +02a4 da4002a6 arg p_mouse_dpi_led_blink_init ,regb +02a5 2020318a branch timer_single_step + +p_mouse_dpi_led_blink_init: +02a6 6fe0c927 fetch 1 ,mem_config_sensor_type +02a7 c001c8f2 beq p3212 ,mouse_dpi_led_blink_init +02a8 c005c8f2 beq ka8g2 ,mouse_dpi_led_blink_init +02a9 6fe0c923 fetch 1 ,mem_dpi_led_gpio +02aa 67e0c92f store 1 ,mem_mouse_struct_led_gpio +02ab 6fe14bc2 fetch 2 ,mem_mouse_dpi_led_blink_time +02ac 67e14930 store 2 ,mem_mouse_on_time +02ad 67e14932 store 2 ,mem_mouse_off_time +02ae da200000 arg 0 ,rega +02af 6848c992 fetcht 1 ,mem_mouse_dpi +02b0 18408402 increase 2 ,temp +02b1 18467c03 sub temp ,3 ,null +02b2 204102b5 call p_mouse_dpi_led_blink_init_level_4 ,positive +02b3 244102b9 ncall p_mouse_dpi_led_blink_count_clean ,positive +02b4 202048ff branch mouse_dpi_led_blink_init_end + +p_mouse_dpi_led_blink_init_level_4: +02b5 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +02b6 c40e0000 rtnbit0 mouse_enable_dpi_level_4 +02b7 18408401 increase 1 ,temp +02b8 20600000 rtn + +p_mouse_dpi_led_blink_count_clean: +02b9 184085fd increase -3 ,temp +02ba 20600000 rtn + +p_mouse_commbination_key_process: +02bb 6fe0c938 fetch 1 ,mem_device_flag +02bc c00002c1 beq mode_24g_device ,p_mouse_24g_commbination_key_process +02bd 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +02be c41a8000 rtnbit0 mouse_enable_commbination_key_by_bt_discovery +02bf 6848cbca fetcht 1 ,mem_mouse_commbination_key_bt +02c0 202002c4 branch p_mouse_commbination_key_start + +p_mouse_24g_commbination_key_process: +02c1 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +02c2 c4190000 rtnbit0 mouse_enable_commbination_key_by_24g_pairing +02c3 6848cbcb fetcht 1 ,mem_mouse_commbination_key_24g + +p_mouse_commbination_key_start: +02c4 6048cb9d storet 1 ,mem_mouse_commbination_key +02c5 20404115 call mouse_check_key_gpio +02c6 1fe17e07 and pdata ,0x07 ,pdata +02c7 6848cb9d fetcht 1 ,mem_mouse_commbination_key +02c8 98467c00 isub temp ,null +02c9 202282cb branch p_mouse_commbination_key_down ,zero +02ca 202044eb branch mouse_commbination_key_up + +p_mouse_commbination_key_down: +02cb 204002d0 call p_mouse_combination_ui_timer +02cc 6fe0cb9f fetch 1 ,mem_commbination_key_statue +02cd c1008000 rtneq commbination_key_state_down +02ce 704b9f01 jam commbination_key_state_down ,mem_commbination_key_statue +02cf 20600000 rtn + +p_mouse_combination_ui_timer: +02d0 da4001fd arg p_mouse_24g_start_pair_mode ,regb +02d1 202044f7 branch mouse_combination_ui_timer + 1 + +p_mouse_le_battery_updata_timer: +02d2 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +02d3 c39d8000 rtnbit1 mouse_enable_le_battery_service_cancel +02d4 2020451f branch mouse_le_battery_updata_timer + +p_mouse_check_no_data_timeout_timer: +02d5 6fe0c92a fetch 1 ,mem_usb_addr +02d6 c3838000 rtnbit1 7 +02d7 da604ab2 arg mem_mouse_no_data_timer ,regc +02d8 da4002da arg p_mouse_check_no_data_timeout ,regb +02d9 20203191 branch timer_single_step_2b + +p_mouse_check_no_data_timeout: +02da 6fe0c938 fetch 1 ,mem_device_flag +02db c0000199 beq mode_24g_device ,p_mouse_24g_hibernate_set +02dc 2020431b branch mouse_disconnect + +p_mouse_start_discovery: +02dd 6fe1478c fetch 2 ,mem_ui_state_map +02de 2feffe0b isolate1 ui_state_ble_adv ,pdata +02df 2040c581 call mouse_stop_le_adv ,true +02e0 6fe1478c fetch 2 ,mem_ui_state_map +02e1 2feffe07 isolate1 ui_state_bt_reconnect ,pdata +02e2 2040c322 call mouse_cancel_reconnect ,true +02e3 58000000 setarg 0 +02e4 67e14af2 store 2 ,mem_le_battery_level_updata_timer +02e5 20204554 branch mouse_start_discovery + 1 + +p_ui_timer_check: +02e6 6fe0cbe2 fetch 1 ,mem_power_on_flag +02e7 245a7861 ncall ui_timer_init ,blank +02e8 704be200 jam 0 ,mem_power_on_flag +02e9 20207851 branch ui_timer_check + 1 + +p_hid_rx_process: +02ea 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +02eb 1fe20c00 copy pdata ,contr +02ec efe08006 ifetch 1 ,contr +02ed 67e0c5f5 store 1 ,mem_l2cap_rcv_hidtype +02ee 1fe1040f and pdata ,0x0f ,temp +02ef 1ff1fe00 rshift4 pdata ,pdata +02f0 c00482f2 beq hid_type_set_idle ,p_hid_rx_process_handshake +02f1 20204d93 branch hid_rx_process + 7 + +p_hid_rx_process_handshake: +02f2 da200001 arg 1 ,rega +02f3 20404dc0 call hid_malloc_tx_buff +02f4 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +02f5 e7e10005 istore 2 ,contw +02f6 58000000 setarg 0 +02f7 e7e08005 istore 1 ,contw +02f8 70095001 jam 1 ,mem_ui_data_txbuff_length +02f9 6fe0c4e2 fetch 1 ,mem_hid_control_state +02fa 79207e06 set1 l2cap_channel_hid_handshake_done ,pdata +02fb 67e0c4e2 store 1 ,mem_hid_control_state +02fc 70095b12 jam bt_evt_hid_handshake ,mem_fifo_temp +02fd 20207871 branch ui_ipc_send_event + +p_le_slave_match: +02fe 6fe0c3dd fetch 1 ,mem_le_md_count +02ff 1fe0fe01 pincrease 1 +0300 67e0c3dd store 1 ,mem_le_md_count +0301 c006165a beq le_md_max_count ,le_slave_cont +0302 2040191b call le_acknowledge +0303 2040196a call le_prepare_tx +0304 6fe082bd fetch 1 ,mem_le_tx_phy +0305 2040168b call le_enable_phy_by_pdata +0306 20401838 call le_transmit +0307 20201655 branch le_slave_match + 10 + +p_le_parse_l2cap: +0308 efe10006 ifetch 2 ,contr +0309 c002030b beq le_l2cap_cid_att ,p_le_parse_att +030a 202019e4 branch le_parse_l2cap + 10 + +p_le_parse_att: +030b efe18006 ifetch 3 ,contr +030c 67e1c436 store 3 ,mem_le_att_opcode +030d c0050310 beq attop_read_request ,p_le_parse_att_read_request +030e c009031f beq attop_write_request ,p_le_parse_att_write_request +030f 20201cd3 branch le_parse_att + 2 + +p_le_parse_att_read_request: +0310 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +0311 c31d9de7 bbit0 mouse_enable_le_battery_service_cancel ,le_parse_att_read_request +0312 20401e8d call le_check_encrypt_state +0313 68494437 fetcht 2 ,mem_le_att_handle +0314 6fe0c3c0 fetch 1 ,mem_le_configuration +0315 c281831a bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth + +p_le_send_att_read_response: +0316 6fe14437 fetch 2 ,mem_le_att_handle +0317 c0181ec8 beq 0x30 ,le_send_att_error_response_notfound +0318 68494437 fetcht 2 ,mem_le_att_handle +0319 20201deb branch le_send_att_read_response + +p_le_send_att_read_response_check_auth: +031a 6fe143d1 fetch 2 ,mem_le_pairing_handle +031b 98467c00 isub temp ,null +031c 24228316 nbranch p_le_send_att_read_response ,zero +031d 24340316 nbranch p_le_send_att_read_response ,user +031e 20201e10 branch le_send_att_read_response_error_insufficient_auth + +p_le_parse_att_write_request: +031f 18c22200 copy contr ,rega +0320 6fe143d4 fetch 2 ,mem_le_l2cap_size +0321 1fe0a5fd add pdata ,-3 ,regb +0322 20401a25 call le_writeatt_cb +0323 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +0324 c07f9e73 beq 0xff ,le_send_att_write_response_check_auth +0325 6fe0cac7 fetch 1 ,mem_mouse_le_reconnect_flag +0326 203a1e73 branch le_send_att_write_response_check_auth ,blank +0327 6fe0cb75 fetch 1 ,mem_le_connect_status_flag +0328 c2809e73 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +0329 5800001a setarg 0x001a +032a 68494437 fetcht 2 ,mem_le_att_handle +032b 98467c00 isub temp ,null +032c 24229e73 nbranch le_send_att_write_response_check_auth ,zero +032d 7002d805 jam att_err_insufficient_authentication ,mem_le_err_code +032e 20201ec9 branch le_send_att_error_response + +p_g24_lpm_wait: +032f 6fe0cbaa fetch 1 ,mem_24g_device_led_status +0330 245a26e1 ncall g24_transmit_by_interrupt_enable ,blank +0331 78347c00 enable user +0332 20401465 call lpo_calibration +0333 6fe1c174 fetch 3 ,mem_clks_per_lpo +0334 203a7e56 branch disable_user ,blank +0335 6fe0c099 fetch 1 ,mem_lpm_mode +0336 203a7e56 branch disable_user ,blank +0337 202026c4 branch g24_setgpio_lpm_before + +p_mouse_motion: +0338 78547c00 disable user +0339 58000000 setarg 0 +033a 67e348d1 store 6 ,mem_mouse_x +033b 20404240 call mouse_check_sensor_data +033c 2040408e call mouse_dpi_config +033d 20403f7e call mouse_zwheel +033e 20403f83 call mouse_t_zwheel +033f 204040dc call mouse_key +0340 6fe0c8d0 fetch 1 ,mem_mouse_key +0341 1fe17e1f and_into 0x1f ,pdata +0342 67e0c8d0 store 1 ,mem_mouse_key +0343 24344728 nbranch mouse_drawing_optima_init ,user +0344 20400346 call p_mouse_drawing_optima +0345 20204544 branch mouse_no_data_timer_init + +p_mouse_drawing_optima: +0346 6fe0c927 fetch 1 ,mem_config_sensor_type +0347 c1018000 rtneq p3212 +0348 2020471a branch mouse_drawing_optima + +p_mouse_sensor_poweron: +0349 20403f65 call mouse_sensor_spi_init +034a 6fe0c927 fetch 1 ,mem_config_sensor_type +034b c0058350 beq ka8g2 ,p_mouse_ka8g2_sensor_init +034c 20404232 call mouse_sensor_reset +034d da604aa3 arg mem_sensor_poweron_init ,regc +034e 2040422b call mouse_sensor_wr_seq +034f 2020408e branch mouse_dpi_config + +p_mouse_ka8g2_sensor_init: +0350 20400357 call p_mouse_ka8g2_sensor_reset +0351 da604be3 arg mem_ka8g2_sensor_poweron_init ,regc +0352 2040422b call mouse_sensor_wr_seq +0353 2020408e branch mouse_dpi_config + +p_mouse_sensor_reset: +0354 6fe0c927 fetch 1 ,mem_config_sensor_type +0355 c0058357 beq ka8g2 ,p_mouse_ka8g2_sensor_reset +0356 20204232 branch mouse_sensor_reset + +p_mouse_ka8g2_sensor_reset: +0357 58009706 setarg 0x9706 +0358 20405b0c call twspi_write +0359 20002ee0 nop 12000 +035a 20600000 rtn + +p_mouse_sensor_powerdown: +035b 204041a7 call mouse_init_sunt +035c 20403f65 call mouse_sensor_spi_init +035d 6fe0c927 fetch 1 ,mem_config_sensor_type +035e c0058361 beq ka8g2 ,p_mouse_ka8g2_sensor_powerdown +035f 58000806 setarg 0x0806 +0360 20205b0c branch twspi_write + +p_mouse_ka8g2_sensor_powerdown: +0361 58001f06 setarg 0x1f06 +0362 20205b0c branch twspi_write + +p_mouse_check_key_gpio: +0363 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +0364 245a4121 ncall mouse_check_key_gpio_once ,blank +0365 da200000 arg 0 ,rega +0366 2040036c call p_mouse_check_lkey_gpio +0367 20400371 call p_mouse_check_rkey_gpio +0368 20400376 call p_mouse_check_mkey_gpio +0369 2040037b call p_mouse_check_bkkey_gpio +036a 20400388 call p_mouse_check_fwkey_gpio +036b 2020411e branch mouse_check_key_gpio_next + +p_mouse_check_lkey_gpio: +036c 6fe0c918 fetch 1 ,mem_lbutton_gpio +036d 20400395 call p_mouse_gpio_config_output_high +036e 20404124 call mouse_check_lkey_gpio +036f 6848c918 fetcht 1 ,mem_lbutton_gpio +0370 20203f56 branch mouse_gpio_config_input_pu + +p_mouse_check_rkey_gpio: +0371 6fe0c919 fetch 1 ,mem_rbutton_gpio +0372 20400395 call p_mouse_gpio_config_output_high +0373 2040412a call mouse_check_rkey_gpio +0374 6848c919 fetcht 1 ,mem_rbutton_gpio +0375 20203f56 branch mouse_gpio_config_input_pu + +p_mouse_check_mkey_gpio: +0376 6fe0c91a fetch 1 ,mem_mbutton_gpio +0377 20400395 call p_mouse_gpio_config_output_high +0378 20404130 call mouse_check_mkey_gpio +0379 6848c91a fetcht 1 ,mem_mbutton_gpio +037a 20203f56 branch mouse_gpio_config_input_pu + +p_mouse_check_bkkey_gpio: +037b 6fe0c90d fetch 1 ,mem_bk_button_gpio +037c c17f8000 rtneq gpio_disable +037d 704b9603 jam mouse_bk_key ,mem_mouse_key_temp +037e 6fe0cb91 fetch 1 ,mem_mouse_bkkey_press_status +037f 1fe22600 copy pdata ,regc +0380 6848c90d fetcht 1 ,mem_bk_button_gpio +0381 6fe0c910 fetch 1 ,mem_matrix_public_gpio +0382 c07f8384 beq gpio_disable ,p_mouse_3io6key_bk_check +0383 2020413e branch mouse_check_bkkey_gpio_next + +p_mouse_3io6key_bk_check: +0384 6fe0c90d fetch 1 ,mem_bk_button_gpio +0385 20400397 call p_mouse_gpio_config_output_low +0386 6848c90d fetcht 1 ,mem_bk_button_gpio +0387 2020414b branch mouse_3io6key_bk_check + +p_mouse_check_fwkey_gpio: +0388 6fe0c90e fetch 1 ,mem_fw_button_gpio +0389 c17f8000 rtneq gpio_disable +038a 704b9604 jam mouse_fw_key ,mem_mouse_key_temp +038b 6fe0cb92 fetch 1 ,mem_mouse_fwkey_press_status +038c 1fe22600 copy pdata ,regc +038d 6848c90e fetcht 1 ,mem_fw_button_gpio +038e 6fe0c910 fetch 1 ,mem_matrix_public_gpio +038f c07f8391 beq gpio_disable ,p_mouse_3io6key_fw_check +0390 20204157 branch mouse_check_fwkey_gpio_next + +p_mouse_3io6key_fw_check: +0391 6fe0c90e fetch 1 ,mem_fw_button_gpio +0392 20400397 call p_mouse_gpio_config_output_low +0393 6848c90e fetcht 1 ,mem_fw_button_gpio +0394 20204164 branch mouse_3io6key_fw_check + +p_mouse_gpio_config_output_high: +0395 d840003f arg gpcfg_output_high ,temp +0396 20206093 branch gpio_config_function_int + +p_mouse_gpio_config_output_low: +0397 d840003e arg gpcfg_output_low ,temp +0398 20206093 branch gpio_config_function_int + +p_mouse_idle: +0399 20404990 call mouse_low_voltage_led_no_enter_lpm +039a 20407936 call ui_check_paring_button +039b 2040039e call p_mouse_dpi_check +039c 204003b2 call p_mouse_dpi_another_gpio_check +039d 2020464f branch mouse_idle + 4 + +p_mouse_dpi_check: +039e 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +039f c2974036 bbit1 mouse_enable_dpi_key_connect_adc ,mouse_dpi_check_connect_adc +03a0 6fe0c90f fetch 1 ,mem_dpi_button_gpio +03a1 c17f8000 rtneq gpio_disable +03a2 da200000 arg 0 ,rega +03a3 704b9605 jam mouse_dpi_key ,mem_mouse_key_temp +03a4 6848c90f fetcht 1 ,mem_dpi_button_gpio +03a5 204003a7 call p_mouse_dpi_key_check +03a6 2020402f branch mouse_dpi_check_next + +p_mouse_dpi_key_check: +03a7 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +03a8 c2964048 bbit1 mouse_enable_dpi_key_connect_gnd ,mouse_dpi_key_connect_gnd +03a9 6fe0cb93 fetch 1 ,mem_mouse_dpikey_press_status +03aa 1fe22600 copy pdata ,regc +03ab 6fe0c910 fetch 1 ,mem_matrix_public_gpio +03ac c07f83ae beq gpio_disable ,p_mouse_3io6key_dpi_check +03ad 2020403f branch mouse_dpi_key_check_next + +p_mouse_3io6key_dpi_check: +03ae 6fe0c90f fetch 1 ,mem_dpi_button_gpio +03af 20400397 call p_mouse_gpio_config_output_low +03b0 6848c90f fetcht 1 ,mem_dpi_button_gpio +03b1 20204195 branch mouse_3io6key_check + +p_mouse_dpi_another_gpio_check: +03b2 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +03b3 c41e8000 rtnbit0 mouse_enable_double_dpi_key +03b4 6fe0cc32 fetch 1 ,mem_dpi_another_button_gpio +03b5 20400395 call p_mouse_gpio_config_output_high +03b6 204003b9 call p_mouse_dpi_another_check +03b7 6848cc32 fetcht 1 ,mem_dpi_another_button_gpio +03b8 20203f56 branch mouse_gpio_config_input_pu + +p_mouse_dpi_another_check: +03b9 704c3600 jam mouse_dpi_another_key ,mem_mouse_key_temp_patch +03ba 6848cc32 fetcht 1 ,mem_dpi_another_button_gpio +03bb 6fe0cc33 fetch 1 ,mem_dpi_another_press_status +03bc 204003c8 call p_mouse_check_key_connect_gnd_new +03bd 67e0cc33 store 1 ,mem_dpi_another_press_status +03be 6fe0cc35 fetch 1 ,mem_dpi_another_button_down_enable +03bf 203a03c4 branch p_mouse_dpi_another_up ,blank + +p_mouse_dpi_another_down: +03c0 6fe0cc34 fetch 1 ,mem_dpi_another_button_state +03c1 c1008000 rtneq dpi_button_state_down +03c2 704c3401 jam dpi_button_state_down ,mem_dpi_another_button_state +03c3 20204069 branch mouse_dpi_process + +p_mouse_dpi_another_up: +03c4 6fe0cc34 fetch 1 ,mem_dpi_another_button_state +03c5 c1000000 rtneq dpi_button_state_up +03c6 704c3400 jam dpi_button_state_up ,mem_dpi_another_button_state +03c7 20600000 rtn + +p_mouse_check_key_connect_gnd_new: +03c8 1fe3fe00 lshift pdata ,pdata +03c9 1fe22400 copy pdata ,regb +03ca 20406059 call gpio_get_bit +03cb 7920a400 setflag true ,0 ,regb +03cc 1a417e07 and regb ,0x07 ,pdata +03cd 6848cc36 fetcht 1 ,mem_mouse_key_temp_patch +03ce 18420e00 copy temp ,queue +03cf c00383d2 beq 0x07 ,p_mouse_key_press +03d0 c00003d4 beq 0x00 ,p_mouse_key_release +03d1 20600000 rtn + +p_mouse_key_press: +03d2 704c3501 jam 1 ,mem_dpi_another_button_down_enable +03d3 20600000 rtn + +p_mouse_key_release: +03d4 704c3500 jam 0 ,mem_dpi_another_button_down_enable +03d5 20600000 rtn + +p_mouse_dpi_process: +03d6 20404072 call mouse_dpi_ghost_check +03d7 20740000 rtn user +03d8 6fe0c992 fetch 1 ,mem_mouse_dpi +03d9 1fe20400 copy pdata ,temp +03da 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +03db c29e83e2 bbit1 mouse_enable_double_dpi_key ,p_mouse_double_dpi_check +03dc 18427e00 copy temp ,pdata +03dd 1fe0fe01 increase 1 ,pdata +03de 1fe17e03 and pdata ,0x03 ,pdata + +p_mouse_dpi_store: +03df 67e0c992 store 1 ,mem_mouse_dpi +03e0 20404095 call mouse_seting_dpi +03e1 202045ee branch mouse_store_device_info_delay + +p_mouse_double_dpi_check: +03e2 6fe0cc35 fetch 1 ,mem_dpi_another_button_down_enable +03e3 243a03ed nbranch p_mouse_another_dpi_button_down ,blank + +p_mouse_dpi_increase: +03e4 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +03e5 c28e03ea bbit1 mouse_enable_dpi_level_4 ,p_mouse_dpi_increase_level_4 +03e6 18427e00 copy temp ,pdata +03e7 c1010000 rtneq mouse_dpi_level3 + +p_mouse_dpi_increase_level: +03e8 1fe0fe01 increase 1 ,pdata +03e9 202003df branch p_mouse_dpi_store + +p_mouse_dpi_increase_level_4: +03ea 18427e00 copy temp ,pdata +03eb c1018000 rtneq mouse_dpi_level4 +03ec 202003e8 branch p_mouse_dpi_increase_level + +p_mouse_another_dpi_button_down: + +p_mouse_dpi_decrease: +03ed 18427e00 copy temp ,pdata +03ee c1000000 rtneq mouse_dpi_level1 +03ef 1fe0ffff increase -1 ,pdata +03f0 202003df branch p_mouse_dpi_store + +p_g24_parse_rx_ota_sm: +03f1 6fe0cbf6 fetch 1 ,mem_g24_ota_mode +03f2 207a0000 rtn blank +03f3 6fe0cbf7 fetch 1 ,mem_g24_ota_sm +03f4 c00103fd beq g24_ota_sm_tx_version ,p_g24_ota_sm_tx_version +03f5 c00283ff beq g24_ota_sm_tx_info ,p_g24_ota_sm_tx_info +03f6 c0040401 beq g24_ota_sm_tx_config ,p_g24_ota_sm_tx_config +03f7 c0058403 beq g24_ota_sm_tx_set_config_end ,p_g24_ota_sm_tx_config_end +03f8 c0070405 beq g24_ota_sm_tx_data ,p_g24_ota_sm_tx_data +03f9 c00883fb beq g24_ota_sm_tx_reset ,p_g24_ota_sm_tx_reset +03fa 20600000 rtn + +p_g24_ota_sm_tx_reset: +03fb 704bf712 jam g24_ota_sm_tx_reset_ok ,mem_g24_ota_sm +03fc 20600000 rtn + +p_g24_ota_sm_tx_version: +03fd 704bf703 jam g24_ota_sm_tx_version_ok ,mem_g24_ota_sm +03fe 20600000 rtn + +p_g24_ota_sm_tx_info: +03ff 704bf706 jam g24_ota_sm_tx_info_ok ,mem_g24_ota_sm +0400 20600000 rtn + +p_g24_ota_sm_tx_config: +0401 704bf709 jam g24_ota_sm_tx_config_ok ,mem_g24_ota_sm +0402 20600000 rtn + +p_g24_ota_sm_tx_config_end: +0403 704bf70c jam g24_ota_sm_tx_set_config_end_ok ,mem_g24_ota_sm +0404 20600000 rtn + +p_g24_ota_sm_tx_data: +0405 704bf70f jam g24_ota_sm_tx_data_ok ,mem_g24_ota_sm +0406 20600000 rtn + +p_g24_mouse_parse_rx: +0407 6fe0c82a fetch 1 ,mem_24g_rxdata_length +0408 203a03f1 branch p_g24_parse_rx_ota_sm ,blank +0409 1fe22400 copy pdata ,regb +040a 70482a00 jam 0 ,mem_24g_rxdata_length +040b 6fe0c80a fetch 1 ,mem_24g_rxpayload +040c c0578419 beq datatype_ota ,p_g24_rx_ota +040d 20600000 rtn + +p_g24_ota_mode_enable: +040e 704bf601 jam 1 ,mem_g24_ota_mode +040f 70409900 jam 0 ,mem_lpm_mode +0410 202004f9 branch p_ota_init + +p_g24_ota_dispatch: +0411 20600000 rtn + +p_g24_ota_transmit: +0412 7047c6af jam datatype_ota ,mem_24g_txbuf +0413 20402291 call g24_transmit_prep +0414 2040265b call g24_transmit_receive_ack +0415 246c0000 nrtn sync +0416 24778000 nrtn user3 +0417 20402597 call g24_txbuf_clear +0418 20202672 branch g24_ackpayload_parse + +p_g24_rx_ota: +0419 6fe0c80a fetch 1 ,mem_24g_rxpayload +041a c1d78000 rtnne datatype_ota +041b efe08006 ifetch 1 ,contr +041c e8408006 ifetcht 1 ,contr +041d 18467c02 sub temp ,g24_ota_target_mouse ,null +041e 2422937a nbranch assert ,zero +041f c0008428 beq g24_ota_cmd_version ,p_g24_mouse_ota_process_version +0420 c001042b beq g24_ota_cmd_info ,p_g24_mouse_ota_process_info +0421 c001842d beq g24_ota_cmd_config ,p_g24_mouse_ota_process_config +0422 c002042f beq g24_ota_cmd_set_config_end ,p_g24_mouse_ota_process_set_config_end +0423 c0028487 beq g24_ota_cmd_data ,p_g24_mouse_ota_process_data +0424 c00304ad beq g24_ota_cmd_reset ,p_g24_mouse_ota_process_reset +0425 c07f8427 beq g24_ota_cmd_ping ,p_g24_mouse_ota_process_ping +0426 2020137a branch assert + +p_g24_mouse_ota_process_ping: +0427 20600000 rtn + +p_g24_mouse_ota_process_version: +0428 2040040e call p_g24_ota_mode_enable +0429 704bf701 jam g24_ota_sm_rx_version ,mem_g24_ota_sm +042a 20600000 rtn + +p_g24_mouse_ota_process_info: +042b 704bf704 jam g24_ota_sm_rx_info ,mem_g24_ota_sm +042c 20600000 rtn + +p_g24_mouse_ota_process_config: +042d 704bf707 jam g24_ota_sm_rx_config ,mem_g24_ota_sm +042e 20600000 rtn + +p_g24_mouse_ota_process_set_config_end: +042f 704bf70a jam g24_ota_sm_rx_set_config_end ,mem_g24_ota_sm +0430 efe10006 ifetch 2 ,contr +0431 e8410006 ifetcht 2 ,contr +0432 6a214c18 fetchr rega ,2 ,mem_g24_ota_rx_alllen +0433 9a267c00 isub rega ,null +0434 242284a5 nbranch p_g24_mouse_ota_process_fail ,zero +0435 6fe14c1a fetch 2 ,mem_g24_ota_rx_sum +0436 98467c00 isub temp ,null +0437 242284a5 nbranch p_g24_mouse_ota_process_fail ,zero +0438 2040043b call p_g24_check_ota_data_all +0439 243404a5 nbranch p_g24_mouse_ota_process_fail ,user +043a 202004a3 branch p_g24_mouse_ota_process_ok + +p_g24_check_ota_data_all: +043b 20400446 call p_g24_check_ota_data +043c 24740000 nrtn user +043d 6fe14c1a fetch 2 ,mem_g24_ota_rx_sum +043e 9e067c00 isub alarm ,null +043f 2422fe56 nbranch disable_user ,zero +0440 684909e8 fetcht 2 ,mem_temp_block6 +0441 6fe14c18 fetch 2 ,mem_g24_ota_rx_alllen +0442 1fe0fffb increase -5 ,pdata +0443 98467c00 isub temp ,null +0444 2422fe56 nbranch disable_user ,zero +0445 20207e54 branch enable_user + +p_g24_check_ota_data: +0446 6fe14bf3 fetch 2 ,mem_g24_ota_config_addr +0447 1ff0fe00 byteswap pdata ,pdata +0448 67e102e4 store 2 ,mem_addr_mi +0449 d8400003 arg 3 ,temp +044a da2009d2 arg mem_temp_block5 ,rega +044b 20405de2 call iicd_read_eep +044c 6fe089d2 fetch 1 ,mem_temp_block5 +044d c0ad7e56 bne g24_ota_data_header ,disable_user +044e e8410006 ifetcht 2 ,contr +044f 6049095c storet 2 ,mem_pdatatemp +0450 604909e8 storet 2 ,mem_temp_block6 +0451 6fe089d2 fetch 1 ,mem_temp_block5 +0452 dd60ffff arg 0xffff ,rege +0453 d8400000 arg 0 ,temp +0454 d8c009d2 arg mem_temp_block5 ,contr +0455 df200003 arg 3 ,loopcnt +0456 204004bd call p_g24_mouse_data_sum +0457 18426000 copy temp ,alarm +0458 6fe14bf3 fetch 2 ,mem_g24_ota_config_addr +0459 1fe0ee03 add pdata ,3 ,regf +045a 2040046a call p_g24_check_ota_data_loop +045b 1ef0fe00 byteswap regf ,pdata +045c 67e102e4 store 2 ,mem_addr_mi +045d d8400002 arg 2 ,temp +045e da2009d2 arg mem_temp_block5 ,rega +045f 20405de2 call iicd_read_eep +0460 6fe109d2 fetch 2 ,mem_temp_block5 +0461 9d667c00 isub rege ,null +0462 2422fe56 nbranch disable_user ,zero +0463 6fe089d2 fetch 1 ,mem_temp_block5 +0464 9e00e000 iadd alarm ,alarm +0465 efe08006 ifetch 1 ,contr +0466 9e00e000 iadd alarm ,alarm +0467 5800ffff setarg 0xffff +0468 9e016000 iand alarm ,alarm +0469 20207e54 branch enable_user + +p_g24_check_ota_data_loop: +046a 6fe1095c fetch 2 ,mem_pdatatemp +046b 207a0000 rtn blank +046c 1fe20400 copy pdata ,temp +046d 1fe67c10 sub pdata ,16 ,null +046e 20210485 branch p_g24_check_ota_data_loopend ,positive +046f 1fe0fff0 increase -16 ,pdata +0470 d8400010 arg 0x10 ,temp + +p_g24_check_ota_data_loop2: +0471 67e1095c store 2 ,mem_pdatatemp +0472 18425e00 copy temp ,regext +0473 1ee27e00 copy regf ,pdata +0474 1ff0fe00 byteswap pdata ,pdata +0475 67e102e4 store 2 ,mem_addr_mi +0476 da2009d2 arg mem_temp_block5 ,rega +0477 20405de2 call iicd_read_eep +0478 1ee27e00 copy regf ,pdata +0479 9de0ee00 iadd regext ,regf +047a 1de27200 copy regext ,loopcnt +047b 1d627e00 copy rege ,pdata +047c d8c009d2 arg mem_temp_block5 ,contr +047d efe00006 icrc contr +047e 1fe25600 copy pdata ,rege +047f 1de27200 copy regext ,loopcnt +0480 d8c009d2 arg mem_temp_block5 ,contr +0481 1e020400 copy alarm ,temp +0482 204004bd call p_g24_mouse_data_sum +0483 18426000 copy temp ,alarm +0484 2020046a branch p_g24_check_ota_data_loop + +p_g24_check_ota_data_loopend: +0485 58000000 setarg 0 +0486 20200471 branch p_g24_check_ota_data_loop2 + +p_g24_mouse_ota_process_data: +0487 704bf70d jam g24_ota_sm_rx_data ,mem_g24_ota_sm +0488 efe08006 ifetch 1 ,contr +0489 18c22200 copy contr ,rega +048a 6848cc1c fetcht 1 ,mem_g24_ota_rx_data_count +048b 98467c00 isub temp ,null +048c 202284a3 branch p_g24_mouse_ota_process_ok ,zero +048d 204004b4 call p_g24_cmd_ota_data_check_count +048e 243404a5 nbranch p_g24_mouse_ota_process_fail ,user +048f 1a467c04 sub regb ,4 ,null +0490 202104a5 branch p_g24_mouse_ota_process_fail ,positive +0491 1a40a5fc increase -4 ,regb +0492 62410959 storer regb ,2 ,mem_hold_contw +0493 62210957 storer rega ,2 ,mem_hold_contr +0494 20405dd3 call iicd_eeprom_write_enable +0495 204004a7 call p_dongle_usb_cmd_ota_write_data +0496 20405dda call iicd_eeprom_write_disable +0497 6a410959 fetchr regb ,2 ,mem_hold_contw +0498 6a210957 fetchr rega ,2 ,mem_hold_contr +0499 6fe14c18 fetch 2 ,mem_g24_ota_rx_alllen +049a 9a40fe00 iadd regb ,pdata +049b 67e14c18 store 2 ,mem_g24_ota_rx_alllen +049c 1a427200 copy regb ,loopcnt +049d d8400000 arg 0 ,temp +049e 1a220c00 copy rega ,contr +049f 204004bd call p_g24_mouse_data_sum +04a0 6fe14c1a fetch 2 ,mem_g24_ota_rx_sum +04a1 9840fe00 iadd temp ,pdata +04a2 67e14c1a store 2 ,mem_g24_ota_rx_sum + +p_g24_mouse_ota_process_ok: +04a3 704bf500 jam g24_ota_status_success ,mem_g24_ota_rtn_state +04a4 20600000 rtn + +p_g24_mouse_ota_process_fail: +04a5 704bf501 jam g24_ota_status_fail ,mem_g24_ota_rtn_state +04a6 20600000 rtn + +p_dongle_usb_cmd_ota_write_data: +04a7 6fe14bf3 fetch 2 ,mem_g24_ota_config_addr +04a8 207a0000 rtn blank +04a9 68494c18 fetcht 2 ,mem_g24_ota_rx_alllen +04aa 9840fe00 iadd temp ,pdata +04ab 1a420400 copy regb ,temp +04ac 20205e04 branch iicd_write_ota_data + +p_g24_mouse_ota_process_reset: +04ad 6fe0cbf7 fetch 1 ,mem_g24_ota_sm +04ae c1080000 rtneq g24_ota_sm_rx_reset +04af c1088000 rtneq g24_ota_sm_tx_reset +04b0 c1090000 rtneq g24_ota_sm_tx_reset_ok +04b1 704c1d05 jam 5 ,mem_g24_ota_reset_timer +04b2 704bf710 jam g24_ota_sm_rx_reset ,mem_g24_ota_sm +04b3 20600000 rtn + +p_g24_cmd_ota_data_check_count: +04b4 6848cc1c fetcht 1 ,mem_g24_ota_rx_data_count +04b5 67e0cc1c store 1 ,mem_g24_ota_rx_data_count +04b6 c00004ba beq 0 ,p_g24_cmd_ota_data_check_count_0 +04b7 98467e00 isub temp ,pdata +04b8 c000fe54 beq 1 ,enable_user +04b9 20207e56 branch disable_user + +p_g24_cmd_ota_data_check_count_0: +04ba 18467cff sub temp ,0xff ,null +04bb 2022fe54 branch enable_user ,zero +04bc 20207e56 branch disable_user + +p_g24_mouse_data_sum: +04bd efe08006 ifetch 1 ,contr +04be 98408400 iadd temp ,temp +04bf c20004bd loop p_g24_mouse_data_sum +04c0 20600000 rtn + +p_g24_mouse_ota_crc: +04c1 5800ffff setarg 0xffff +04c2 efe00006 icrc contr +04c3 20600000 rtn + +p_g24_mouse_ota_check_crc: +04c4 6f20c82a fetchr loopcnt ,1 ,mem_24g_rxdata_length +04c5 1f267c02 sub loopcnt ,2 ,null +04c6 20217e56 branch disable_user ,positive +04c7 dfe0480a arg mem_24g_rxpayload ,pdata +04c8 9f208c00 iadd loopcnt ,contr +04c9 18c08dfe increase -2 ,contr +04ca e8410006 ifetcht 2 ,contr +04cb d8c0480a arg mem_24g_rxpayload ,contr +04cc 204004c1 call p_g24_mouse_ota_crc +04cd 98467c00 isub temp ,null +04ce 2022fe54 branch enable_user ,zero +04cf 20207e56 branch disable_user + +p_g24_mouse_ota_check_data: +04d0 efe08006 ifetch 1 ,contr +04d1 c0ad04e9 bne 0x5a ,p_g24_mouse_ota_load_fail +04d2 1a220200 copy rega ,1 ,contr +04d3 68490006 fetcht 2 ,contr + +p_g24_mouse_ota_check_data_loop: +04d4 18467c03 sub temp ,3 ,null +04d5 202104e9 branch p_g24_mouse_ota_load_fail ,positive +04d6 18c08c02 increase 2 ,contr +04d7 ef208006 ifetchr loopcnt ,1 ,contr +04d8 1f267c00 sub loopcnt ,0 ,null +04d9 242284e9 nbranch p_g24_mouse_ota_load_fail ,zero +04da 1f227e00 copy loopcnt ,pdata +04db 98c08c00 iadd contr ,contr +04dc 18427e00 copy temp ,pdata +04dd 1f20f203 increase 3 ,loopcnt +04de 9f260400 isub loopcnt ,temp +04df 242284d4 nbranch p_g24_mouse_ota_check_data_loop ,zero +04e0 e8410006 ifetcht 2 ,contr +04e1 1a208c01 add rega ,1 ,contr +04e2 efe10006 ifetch 2 ,contr +04e3 1fe0f202 add pdata ,2 ,loopcnt +04e4 1a208c01 add rega ,1 ,contr +04e5 204004c1 call p_g24_mouse_ota_crc +04e6 98467c00 isub temp ,null +04e7 242284e9 nbranch p_g24_mouse_ota_load_fail ,zero + +p_g24_mouse_ota_load_success: +04e8 20207e54 branch enable_user + +p_g24_mouse_ota_load_fail: +04e9 20207e56 branch disable_user + +p_g24_mouse_ota_get_otaaddr: +04ea 6fe14bf3 fetch 2 ,mem_g24_ota_config_addr +04eb 1fe20c00 copy pdata ,contr +04ec 204004d0 call p_g24_mouse_ota_check_data +04ed 243404f5 nbranch p_g24_mouse_ota_config_end ,user +04ee 6a214bf3 fetchr rega ,2 ,mem_g24_ota_config_addr +04ef 1a208c01 add rega ,1 ,contr +04f0 efe10006 ifetch 2 ,contr +04f1 1fe0fe05 increase 5 ,pdata +04f2 9a20fe00 iadd rega ,pdata +04f3 67e14bf3 store 2 ,mem_g24_ota_config_addr +04f4 202004ea branch p_g24_mouse_ota_get_otaaddr + +p_g24_mouse_ota_config_end: +04f5 6fe14bf1 fetch 2 ,mem_g24_ota_storage_size +04f6 68494bf3 fetcht 2 ,mem_g24_ota_config_addr +04f7 98467e00 isub temp ,pdata +04f8 20600000 rtn + +p_ota_init: +04f9 58000000 setarg 0 +04fa 67e14c18 store 2 ,mem_g24_ota_rx_alllen +04fb 67e14c1a store 2 ,mem_g24_ota_rx_sum +04fc 67e0cc1c store 1 ,mem_g24_ota_rx_data_count +04fd 67e0cbf7 store 1 ,mem_g24_ota_sm +04fe 20600000 rtn + +p_mouse_24g_package_ota: +04ff 20407e56 call disable_user +0500 6fe0cbf7 fetch 1 ,mem_g24_ota_sm +0501 c0008508 beq g24_ota_sm_rx_version ,p_mouse_24g_package_ota_version +0502 c0020512 beq g24_ota_sm_rx_info ,p_mouse_24g_package_ota_info +0503 c0038531 beq g24_ota_sm_rx_config ,p_mouse_24g_package_ota_config +0504 c0050557 beq g24_ota_sm_rx_set_config_end ,p_mouse_24g_package_ota_set_config_end +0505 c006854c beq g24_ota_sm_rx_data ,p_mouse_24g_package_ota_data +0506 c0080535 beq g24_ota_sm_rx_reset ,p_mouse_24g_package_ota_reset +0507 20200560 branch p_mouse_24g_package_ping + +p_mouse_24g_package_ota_version: +0508 7047c6af jam datatype_ota ,mem_24g_txbuf +0509 7047c701 jam g24_ota_cmd_version ,mem_24g_txbuf + 1 +050a 7047c800 jam g24_ota_status_success ,mem_24g_txbuf + 2 +050b 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +050c 58000001 setarg g24_ota_version +050d 67e147ca store 2 ,mem_24g_txbuf + 4 +050e 70483601 jam type_ms ,mem_24g_data_type +050f 70483506 jam 6 ,mem_24g_datalen +0510 704bf702 jam g24_ota_sm_tx_version ,mem_g24_ota_sm +0511 20600000 rtn + +p_mouse_24g_package_ota_info: +0512 7047c6af jam datatype_ota ,mem_24g_txbuf +0513 7047c702 jam g24_ota_cmd_info ,mem_24g_txbuf + 1 +0514 7047c800 jam g24_ota_status_success ,mem_24g_txbuf + 2 +0515 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +0516 6ff10000 fetch 2 ,core_chipid +0517 67e147ca store 2 ,mem_24g_txbuf + 4 +0518 58006661 setarg 0x6661 +0519 e7e10005 istore 2 ,contw +051a 58000001 setarg 1 +051b e7e30005 istore 6 ,contw +051c 58000000 setarg 0 +051d e7e10005 istore 2 ,contw +051e e7e10005 istore 2 ,contw +051f 20400539 call p_mouse_24g_storage_type +0520 e7e08005 istore 1 ,contw +0521 58000000 setarg 0 +0522 e7e08005 istore 1 ,contw +0523 68494bf3 fetcht 2 ,mem_g24_ota_config_addr +0524 e0410005 istoret 2 ,contw +0525 6fe14bf1 fetch 2 ,mem_g24_ota_storage_size +0526 1fed7e00 lshift8 pdata ,pdata +0527 1fe37e00 rshift pdata ,pdata +0528 98467e00 isub temp ,pdata +0529 2421052f nbranch p_dongle_usb_cmd_ota_info_dongle_empty ,positive + +p_dongle_usb_cmd_ota_info_dongle_common: +052a e7e10005 istore 2 ,contw +052b 70483518 jam 24 ,mem_24g_datalen +052c 70483601 jam type_ms ,mem_24g_data_type +052d 704bf705 jam g24_ota_sm_tx_info ,mem_g24_ota_sm +052e 20600000 rtn + +p_dongle_usb_cmd_ota_info_dongle_empty: +052f 58000000 setarg 0 +0530 2020052a branch p_dongle_usb_cmd_ota_info_dongle_common + +p_mouse_24g_package_ota_config: +0531 704bf708 jam g24_ota_sm_tx_config ,mem_g24_ota_sm +0532 7047c703 jam g24_ota_cmd_config ,mem_24g_txbuf + 1 +0533 70483504 jam 4 ,mem_24g_datalen +0534 20200542 branch p_mouse_24g_package_ota_common_ok + +p_mouse_24g_package_ota_reset: +0535 704bf711 jam g24_ota_sm_tx_reset ,mem_g24_ota_sm +0536 7047c706 jam g24_ota_cmd_reset ,mem_24g_txbuf + 1 +0537 70483504 jam 4 ,mem_24g_datalen +0538 20200542 branch p_mouse_24g_package_ota_common_ok + +p_mouse_24g_storage_type: +0539 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +053a c289853e bbit1 mouse_enable_eeprom ,p_mouse_24g_storage_type_eeprom +053b c2890540 bbit1 mouse_enable_flash ,p_mouse_24g_storage_type_flash +053c 58000000 setarg g24_ota_storage_error +053d 20600000 rtn + +p_mouse_24g_storage_type_eeprom: +053e 58000002 setarg g24_ota_storage_eeprom +053f 20600000 rtn + +p_mouse_24g_storage_type_flash: +0540 58000004 setarg g24_ota_storage_flash +0541 20600000 rtn + +p_mouse_24g_package_ota_common_ok: +0542 70483601 jam type_ms ,mem_24g_data_type +0543 7047c6af jam datatype_ota ,mem_24g_txbuf +0544 7047c800 jam g24_ota_status_success ,mem_24g_txbuf + 2 +0545 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +0546 20600000 rtn + +p_mouse_24g_package_ota_common_fail: +0547 7047c801 jam g24_ota_status_fail ,mem_24g_txbuf + 2 +0548 70483601 jam type_ms ,mem_24g_data_type +0549 7047c6af jam datatype_ota ,mem_24g_txbuf +054a 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +054b 20600000 rtn + +p_mouse_24g_package_ota_data: +054c 704bf70f jam g24_ota_sm_tx_data_ok ,mem_g24_ota_sm +054d 7047c705 jam g24_ota_cmd_data ,mem_24g_txbuf + 1 +054e 6fe0cc1c fetch 1 ,mem_g24_ota_rx_data_count +054f 67e0c7ca store 1 ,mem_24g_txbuf + 4 +0550 70483505 jam 5 ,mem_24g_datalen +0551 70483601 jam type_ms ,mem_24g_data_type +0552 7047c6af jam datatype_ota ,mem_24g_txbuf +0553 6fe0cbf5 fetch 1 ,mem_g24_ota_rtn_state +0554 67e0c7c8 store 1 ,mem_24g_txbuf + 2 +0555 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +0556 20600000 rtn + +p_mouse_24g_package_ota_set_config_end: +0557 704bf70c jam g24_ota_sm_tx_set_config_end_ok ,mem_g24_ota_sm +0558 7047c704 jam g24_ota_cmd_set_config_end ,mem_24g_txbuf + 1 +0559 70483504 jam 4 ,mem_24g_datalen +055a 70483601 jam type_ms ,mem_24g_data_type +055b 7047c6af jam datatype_ota ,mem_24g_txbuf +055c 6fe0cbf5 fetch 1 ,mem_g24_ota_rtn_state +055d 67e0c7c8 store 1 ,mem_24g_txbuf + 2 +055e 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +055f 20600000 rtn + +p_mouse_24g_package_ping: +0560 7047c6af jam datatype_ota ,mem_24g_txbuf +0561 7047c7ff jam g24_ota_cmd_ping ,mem_24g_txbuf + 1 +0562 7047c800 jam g24_ota_status_success ,mem_24g_txbuf + 2 +0563 7047c902 jam g24_ota_target_mouse ,mem_24g_txbuf + 3 +0564 70483601 jam type_ms ,mem_24g_data_type +0565 70483504 jam 4 ,mem_24g_datalen +0566 20600000 rtn + +p_mouse_24g_package_data_ota: +0567 1fe22200 copy pdata ,rega +0568 704bf800 jam 0 ,mem_g24_ota_prepare_send_len +0569 70483601 jam type_ms ,mem_24g_data_type +056a da404bf9 arg mem_g24_ota_txbuf ,regb +056b 20600000 rtn + org 0x800 + +start: +0800 20401410 call lpmstate + +soft_reset: +0801 44804000 bpatch patch00_0 ,mem_patch00 +0802 20800000 clear_stack +0803 204030f3 call app_param_init +0804 2040124a call initialize_radio +0805 20405d96 call iic_init_360khz +0806 20401384 call init_param +0807 20404dc7 call l2cap_init +0808 4480c000 bpatch patch00_1 ,mem_patch00 +0809 204062bb call rfcomm_init +080a 20405381 call init_lmp +080b 204077b4 call ui_init +080c 204030dc call app_init +080d 2455e0b9 ncall adc_init_data ,wake +080e 44814000 bpatch patch00_2 ,mem_patch00 +080f 2055b0ea call app_lpm_init ,wake +0810 20406ea4 call publickey_init +0811 20406ec6 call sp_wait_pubkey_calc_done +0812 205594b5 call lpm_recover_clk ,wake + +main_loop: +0813 4481c000 bpatch patch00_3 ,mem_patch00 +0814 2040706c call sp_calc_sequence +0815 20407597 call sp_calc_sequence_256 +0816 20406ea7 call sp_calc_sequence_256_check +0817 20401b92 call le_advertising_dispatch +0818 2040083a call idle_dispatch +0819 20403107 call app_process_idle +081a 44824000 bpatch patch00_4 ,mem_patch00 +081b 20400891 call inquiry_dispatch +081c 20400b07 call inquiry_scan_dispatch +081d 20400b7a call page_scan_dispatch +081e 20400822 call connection_dispatch +081f 204021d1 call g24_dispatch +0820 204014dd call lpm_dispatch +0821 20200813 branch main_loop + +connection_dispatch: +0822 c61a0000 rtnmark1 mark_adc_enable +0823 20400828 call connection_incontext +0824 c6848000 rtnmark0 mark_context +0825 793f8009 set0 mark_context ,mark +0826 20400a32 call context_save +0827 202016b2 branch le_disable + +connection_incontext: +0828 4482c000 bpatch patch00_5 ,mem_patch00 +0829 20400a6d call context_search_insniff +082a 24228831 nbranch connection_nosniff ,zero +082b 20400a19 call context_load +082c 1a208c01 add rega ,coffset_mode ,contr +082d efe08006 ifetch 1 ,contr +082e c280161f bbit1 mode_le ,le_conn_dispatch +082f c280896b bbit1 mode_master ,master_dispatch +0830 20200be0 branch slave_dispatch + +connection_nosniff: +0831 20400a3a call context_get_next +0832 1f227c00 copy loopcnt ,null +0833 20628000 rtn zero +0834 20400a19 call context_load +0835 6fe08031 fetch 1 ,mem_state +0836 c28188d5 bbit1 state_inpage ,master_page +0837 6fe08032 fetch 1 ,mem_mode +0838 c280896b bbit1 mode_master ,master_dispatch +0839 20200be0 branch slave_dispatch + +idle_dispatch: +083a 6fe0c1db fetch 1 ,mem_hci_cmd +083b 207a0000 rtn blank +083c c000884a beq hci_cmd_inquiry ,idle_inquiry +083d c001084f beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +083e c0018852 beq hci_cmd_remote_name_req ,idle_remote_name_req +083f c0028857 beq hci_cmd_create_conn ,idle_create_conn +0840 c00d8847 beq hci_cmd_le_create_conn ,idle_le_create_conn +0841 20400a66 call context_search_conn_handle +0842 20628000 rtn zero +0843 20400a69 call context_search_plap +0844 20628000 rtn zero + +idle_exit: +0845 7041db00 jam 0 ,mem_hci_cmd +0846 20600000 rtn + +idle_le_create_conn: +0847 7002e01b jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +0848 7041db00 jam 0 ,mem_hci_cmd +0849 20600000 rtn + +idle_inquiry: +084a 7920001c set1 mark_inquiry_on ,mark +084b 793f801e set0 mark_inquiry_trainb ,mark +084c 70008dff jam param_ninquiry ,mem_ninqy_index +084d 70008b1f jam 31 ,mem_nfreq_index_inq +084e 20200845 branch idle_exit + +idle_inquiry_cancel: +084f 793f801c set0 mark_inquiry_on ,mark +0850 18003600 force 0 ,stop_watch +0851 20200845 branch idle_exit + +idle_remote_name_req: +0852 20400a69 call context_search_plap +0853 20628000 rtn zero +0854 18000401 force lmp_name_req ,temp +0855 7000be05 jam 5 ,mem_nameres_cnt +0856 2020085e branch idle_start_page + +idle_create_conn: +0857 44834000 bpatch patch00_6 ,mem_patch00 + +idle_create_conn_device: +0858 6fe341dd fetch 6 ,mem_hci_plap +0859 20000001 nop 1 +085a 70478b01 jam reconnect_hid ,memui_reconnect_mode +085b 70005603 jam conn_sm_wait_features_res ,mem_conn_sm +085c 2020085d branch idle_create_conn_cont + +idle_create_conn_cont: +085d 18000425 force lmp_version_req ,temp + +idle_start_page: +085e 4483c000 bpatch patch00_7 ,mem_patch00 +085f 6fe080a8 fetch 1 ,mem_page_mode +0860 203a0864 branch idle_page_mode_r0 ,blank +0861 1fe9fe00 lshift3 pdata ,pdata +0862 1ff27e00 lshift4 pdata ,pdata +0863 1fe0ffff increase -1 ,pdata + +idle_page_mode_r0: +0864 67e0c0ae store 1 ,mem_npage +0865 67e080a7 store 1 ,mem_npage_index +0866 70008c1f jam 31 ,mem_nfreq_index_page +0867 793f800c set0 mark_page_trainb ,mark +0868 20400a4a call context_new +0869 24228885 nbranch idle_page_fail ,zero +086a 2040135d call get_free_amaddr +086b 67e08078 store 1 ,mem_amaddr +086c 6048807d storet 1 ,mem_lmo_opcode2 +086d 6fe341dd fetch 6 ,mem_hci_plap +086e 67e30041 store 6 ,mem_plap +086f 44844001 bpatch patch01_0 ,mem_patch01 +0870 20407d73 call timer_reinit +0871 18007e00 force 0 ,pdata +0872 2841fe01 compare lmp_name_req ,temp ,0xff +0873 7d20fe05 nsetflag true ,state_init_seq ,pdata +0874 79207e03 set1 state_inpage ,pdata +0875 67e08031 store 1 ,mem_state +0876 70095b03 jam bt_evt_reconn_started ,mem_fifo_temp +0877 20407871 call ui_ipc_send_event +0878 18007e00 force 0 ,pdata +0879 7920fe04 setflag true ,smap_name_req ,pdata +087a 67e0804d store 1 ,mem_state_map +087b 58000000 setarg 0 +087c 79207e01 set1 mode_master ,pdata +087d 67e08032 store 1 ,mem_mode +087e 7834fc00 enable master +087f 20400a32 call context_save +0880 7854fc00 disable master +0881 18000e03 force page_length_timer ,queue +0882 6fe140c1 fetch 2 ,mem_page_to +0883 20407d66 call timer_init +0884 20200845 branch idle_exit + +idle_page_fail: +0885 4484c001 bpatch patch01_1 ,mem_patch01 +0886 6fe341dd fetch 6 ,mem_hci_plap +0887 67e30041 store 6 ,mem_plap +0888 2841fe01 compare lmp_name_req ,temp ,0xff +0889 2020888b branch idle_name_fail ,true +088a 20200845 branch idle_exit + +idle_name_fail: +088b d8a00a01 arg mem_tmp_buffer ,contw +088c df200008 arg 8 ,loopcnt +088d 20407d17 call memset0 +088e 70095b04 jam bt_evt_reconn_failed ,mem_fifo_temp +088f 20407871 call ui_ipc_send_event +0890 20200845 branch idle_exit + +inquiry_dispatch: +0891 c61a0000 rtnmark1 mark_adc_enable +0892 c68e0000 rtnmark0 mark_inquiry_on +0893 18000e01 force inquiry_length_timer ,queue +0894 20407d74 call timer_check +0895 7d3a001c nsetflag blank ,mark_inquiry_on ,mark +0896 243a0898 nbranch inquiry_start ,blank +0897 20600000 rtn + +inquiry_start: +0898 44854001 bpatch patch01_2 ,mem_patch01 +0899 684940c3 fetcht 2 ,mem_inq_window +089a 18000e04 force 4 ,queue +089b 20400f44 call sniff_check_window +089c 20740000 rtn user +089d 204010fa call afh_clear +089e 18004800 force 0 ,freq_mode + +inquiry_restart: +089f 20618000 rtn timeout +08a0 793f800b set0 mark_fhs_already_good ,mark +08a1 793f8000 set0 mark_fhs_eir ,mark + +inquiry_rx_restart: +08a2 1c40c201 add clkn_bt ,1 ,bt_clk +08a3 280ffe1e isolate1 mark_inquiry_trainb ,mark +08a4 7920c802 setflag true ,2 ,freq_mode +08a5 2c200400 compare 0x00 ,bt_clk ,0x02 +08a6 242088c1 nbranch inquiry_receive ,true + +inquiry_transmit: +08a7 4485c001 bpatch patch01_3 ,mem_patch01 +08a8 6fe08012 fetch 1 ,mem_inquiry_transmit +08a9 1fe0fe01 increase 1 ,pdata +08aa 67e08012 store 1 ,mem_inquiry_transmit +08ab 2040112e call fetch_giac +08ac 20401128 call tx_radio_freq +08ad 20401148 call fetch_diac +08ae 2040133e call start_transmitter +08af 20401343 call start_tx_native +08b0 20401351 call send_access_word +08b1 20400e80 call end_of_packet +08b2 204008b4 call inquiry_check_train +08b3 2020089f branch inquiry_restart + +inquiry_check_train: +08b4 44864001 bpatch patch01_4 ,mem_patch01 +08b5 6fe0808b fetch 1 ,mem_nfreq_index_inq +08b6 1fe0ffff increase -1 ,pdata +08b7 67e0808b store 1 ,mem_nfreq_index_inq +08b8 20610000 rtn positive +08b9 70008b1f jam 31 ,mem_nfreq_index_inq +08ba 6fe0808d fetch 1 ,mem_ninqy_index +08bb 1fe0ffff increase -1 ,pdata +08bc 67e0808d store 1 ,mem_ninqy_index +08bd 20610000 rtn positive +08be 7940001e setflip mark_inquiry_trainb ,mark +08bf 70008dff jam param_ninquiry ,mem_ninqy_index +08c0 20600000 rtn + +inquiry_receive: +08c1 4486c001 bpatch patch01_5 ,mem_patch01 +08c2 2040112e call fetch_giac +08c3 20401122 call rx_radio_freq +08c4 20401148 call fetch_diac +08c5 20401348 call start_rx_native +08c6 204012d3 call start_receiver +08c7 204012f9 call wait_access_clkn_rt +08c8 202c08cb branch inquiry_sync ,sync +08c9 204008b4 call inquiry_check_train +08ca 202008a2 branch inquiry_rx_restart + +inquiry_sync: +08cb 44874001 bpatch patch01_6 ,mem_patch01 +08cc 2040127d call save_rssi +08cd 20401359 call scan_mode_whiten +08ce 20400d47 call receive_packet_whitened +08cf 793f8001 set0 mark_rxbuf_inuse ,mark +08d0 c6858000 rtnmark0 mark_fhs_already_good + +inquiry_receive_rtn: + +inquiry_receive_eir_rtn: +08d1 6fe08013 fetch 1 ,mem_inquiry_rcv +08d2 1fe0fe01 increase 1 ,pdata +08d3 67e08013 store 1 ,mem_inquiry_rcv +08d4 20600000 rtn + +master_page: +08d5 4487c001 bpatch patch01_7 ,mem_patch01 +08d6 7834fc00 enable master +08d7 78387c00 enable clknt +08d8 6fe140bd fetch 2 ,mem_page_interval +08d9 203a08dd branch master_page_no_interval ,blank +08da 18000e08 force page_interval_timer ,queue +08db 20407d74 call timer_check +08dc 247a0000 nrtn blank + +master_page_no_interval: +08dd 44884002 bpatch patch02_0 ,mem_patch02 +08de 684940bf fetcht 2 ,mem_page_window +08df 18000e28 force 40 ,queue +08e0 20400f44 call sniff_check_window +08e1 20340916 branch page_exit ,user +08e2 18000e03 force page_length_timer ,queue +08e3 20407d74 call timer_check +08e4 243a08f2 nbranch page_start ,blank +08e5 6fe0804d fetch 1 ,mem_state_map +08e6 c28208e8 bbit1 smap_name_req ,master_npage_timeout +08e7 202008eb branch master_page_timeout + +master_npage_timeout: +08e8 d8a00a01 arg mem_tmp_buffer ,contw +08e9 df200008 arg 8 ,loopcnt +08ea 20407d17 call memset0 + +master_page_timeout: +08eb 4488c002 bpatch patch02_1 ,mem_patch02 +08ec 70003100 jam 0 ,mem_state +08ed 20405382 call init_lmp_work +08ee 70478b00 jam 0 ,memui_reconnect_mode +08ef 70095b13 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +08f0 20407871 call ui_ipc_send_event +08f1 20200916 branch page_exit + +page_start: +08f2 44894002 bpatch patch02_2 ,mem_patch02 +08f3 18001600 force 0 ,timeup +08f4 34730200 until clkn_rt ,meet +08f5 6fe080a9 fetch 1 ,mem_page_clk +08f6 1fe0ffff increase -1 ,pdata +08f7 9c42fe00 ixor clkn_bt ,pdata +08f8 2fe00600 compare 0 ,pdata ,3 +08f9 242088f2 nbranch page_start ,true +08fa 18827e00 deposit am_addr +08fb 67e080e6 store 1 ,mem_fhs_am_addr +08fc 18004c00 force 0 ,n_tx_slot +08fd 18004800 force 0 ,freq_mode + +page_restart: +08fe 4489c002 bpatch patch02_3 ,mem_patch02 +08ff 20218916 branch page_exit ,timeout +0900 20401132 call fetch_page_bt_adr +0901 69610157 fetchr timeup ,2 ,mem_param_rf_setup +0902 34730200 until clkn_rt ,meet + +page_rx_restart: +0903 448a4002 bpatch patch02_4 ,mem_patch02 +0904 6fe200a9 fetch 4 ,mem_page_clk +0905 98004200 iforce bt_clk +0906 1fe0fe01 increase 1 ,pdata +0907 67e200a9 store 4 ,mem_page_clk +0908 280ffe0c isolate1 mark_page_trainb ,mark +0909 7920c802 setflag true ,2 ,freq_mode +090a 2c200400 compare 0x00 ,bt_clk ,0x02 +090b 2420892a nbranch page_receive ,true +090c 6fe0800c fetch 1 ,mem_page_transmit +090d 1fe0fe01 increase 1 ,pdata +090e 67e0800c store 1 ,mem_page_transmit +090f 20401128 call tx_radio_freq +0910 2040133e call start_transmitter +0911 20401343 call start_tx_native +0912 20401351 call send_access_word +0913 20400e80 call end_of_packet +0914 2040091c call page_check_train +0915 202008fe branch page_restart + +page_exit: +0916 448ac002 bpatch patch02_5 ,mem_patch02 +0917 7854fc00 disable master +0918 6fe140bd fetch 2 ,mem_page_interval +0919 207a0000 rtn blank +091a 18000e08 force page_interval_timer ,queue +091b 20207d66 branch timer_init + +page_check_train: +091c 448b4002 bpatch patch02_6 ,mem_patch02 +091d 6fe0808c fetch 1 ,mem_nfreq_index_page +091e 1fe0ffff increase -1 ,pdata +091f 67e0808c store 1 ,mem_nfreq_index_page +0920 20610000 rtn positive +0921 70008c1f jam 31 ,mem_nfreq_index_page +0922 6fe080a7 fetch 1 ,mem_npage_index +0923 1fe0ffff increase -1 ,pdata +0924 67e080a7 store 1 ,mem_npage_index +0925 20610000 rtn positive +0926 7940000c setflip mark_page_trainb ,mark +0927 6fe0c0ae fetch 1 ,mem_npage +0928 67e080a7 store 1 ,mem_npage_index +0929 20600000 rtn + +page_receive: +092a 448bc002 bpatch patch02_7 ,mem_patch02 +092b 20401122 call rx_radio_freq +092c 20401348 call start_rx_native +092d 204012d3 call start_receiver +092e 204012f9 call wait_access_clkn_rt +092f 202c0932 branch page_sync ,sync +0930 2040091c call page_check_train +0931 20200903 branch page_rx_restart + +page_sync: +0932 20400e80 call end_of_packet +0933 6fe0800d fetch 1 ,mem_page_rcv +0934 1fe0fe01 increase 1 ,pdata +0935 67e0800d store 1 ,mem_page_rcv +0936 18003600 force 0 ,stop_watch +0937 6fe200a9 fetch 4 ,mem_page_clk + +page_send_fhs: +0938 448c4003 bpatch patch03_0 ,mem_patch03 +0939 2040133c call rf_setup_time_master_slot +093a 20401132 call fetch_page_bt_adr +093b 1cc0cc01 increase 1 ,n_tx_slot + +page_send_fhs_continue: +093c 1c2143fd and_into 0x1fd ,bt_clk +093d 1c8149fc and_into 0x1fc ,freq_mode +093e 20401128 call tx_radio_freq +093f 2040133e call start_transmitter +0940 20401343 call start_tx_native +0941 20401351 call send_access_word +0942 1c427e00 deposit clkn_bt +0943 67e200b1 store 4 ,mem_clkn_bt +0944 18000800 force 0 ,am_addr +0945 18000202 force type_fhs ,type +0946 20401359 call scan_mode_whiten +0947 20400f8e call transmit_packet_whitened + +page_wait_fhs_reply: +0948 448cc003 bpatch patch03_1 ,mem_patch03 +0949 2040133a call rf_setup_time_slave_slot +094a 1c21c202 or_into 0x02 ,bt_clk +094b 1c8149fc and_into 0x1fc ,freq_mode +094c 20401122 call rx_radio_freq +094d 20401348 call start_rx_native +094e 204012d3 call start_receiver +094f 204012f9 call wait_access_clkn_rt +0950 204c0e80 call end_of_packet ,sync +0951 202c0957 branch page_wait_fhs_reply_ok ,sync +0952 6fe08010 fetch 1 ,mem_fhs_wait_counter +0953 203a08fe branch page_restart ,blank +0954 1fe0ffff increase -1 ,pdata +0955 67e08010 store 1 ,mem_fhs_wait_counter +0956 20200938 branch page_send_fhs + +page_wait_fhs_reply_ok: +0957 448d4003 bpatch patch03_2 ,mem_patch03 +0958 6fe0800e fetch 1 ,mem_page_rcv_fhs +0959 1fe0fe01 increase 1 ,pdata +095a 67e0800e store 1 ,mem_page_rcv_fhs +095b 20400c46 call prepare_newconn + +master_newconn_loop: +095c 79200033 set1 mark_first_packet ,mark +095d 20400b01 call master_newconn_once +095e 202c0963 branch newconn_poll_responded ,sync +095f 793f8033 set0 mark_first_packet ,mark +0960 20400c66 call new_conn_timeout +0961 243a095c nbranch master_newconn_loop ,blank +0962 202008fe branch page_restart + +newconn_poll_responded: +0963 448dc003 bpatch patch03_3 ,mem_patch03 +0964 793f8033 set0 mark_first_packet ,mark +0965 6fe08031 fetch 1 ,mem_state +0966 793ffe03 set0 state_inpage ,pdata +0967 67e08031 store 1 ,mem_state +0968 20400c51 call newconn_init +0969 7854fc00 disable master +096a 20600000 rtn + +master_dispatch: +096b 448e4003 bpatch patch03_4 ,mem_patch03 +096c 7834fc00 enable master +096d 78387c00 enable clknt +096e 204009e5 call role_switch_master +096f 20740000 rtn user +0970 2040133c call rf_setup_time_master_slot +0971 1c40c201 add clkn_bt ,1 ,bt_clk +0972 20401138 call fetch_self_bt_adr +0973 18004803 force 0x03 ,freq_mode +0974 20406579 call scheduler_tx_l2cap_pkt +0975 20400c9a call prepare_tx +0976 20401128 call tx_radio_freq +0977 2040133e call start_transmitter +0978 20401343 call start_tx_native +0979 20401351 call send_access_word +097a 20400f8a call transmit_packet + +master_loop: +097b 448ec003 bpatch patch03_5 ,mem_patch03 +097c 20405394 call parse_lmp +097d 20400af3 call master_conn_recv_packet +097e 24368984 nbranch master_notmatch ,match +097f 20401376 call supervision_flush +0980 20400f50 call parse_l2cap +0981 6fe0800f fetch 1 ,mem_master_rcvcnt +0982 1fe0fe01 increase 1 ,pdata +0983 67e0800f store 1 ,mem_master_rcvcnt + +master_notmatch: +0984 448f4003 bpatch patch03_6 ,mem_patch03 +0985 20406561 call scheduler_process +0986 2040098f call check_master_disconnect +0987 24748000 nrtn master +0988 20400f20 call check_attempt +0989 243a098c nbranch master_attempt ,blank + +master_exit: +098a 7854fc00 disable master +098b 20600000 rtn + +master_attempt: +098c 20400c9a call prepare_tx +098d 20400ae9 call master_conn_send_packet +098e 2020097b branch master_loop + +check_master_disconnect: +098f 20368992 branch check_master_match ,match +0990 2040136d call supervision_update +0991 202109a0 branch master_disconnect ,positive + +check_master_match: +0992 204009ab call check_disconnect_timeout +0993 243409a0 nbranch master_disconnect ,user +0994 6fe0804d fetch 1 ,mem_state_map +0995 c4020000 rtnbit0 smap_name_req +0996 c3818000 rtnbit1 smap_name_res +0997 6fe0804c fetch 1 ,mem_op +0998 c3818000 rtnbit1 op_disconn +0999 204009b2 call conn_timer_expired +099a 247a0000 nrtn blank +099b 6fe080be fetch 1 ,mem_nameres_cnt +099c 1fe0ffff increase -1 ,pdata +099d 67e080be store 1 ,mem_nameres_cnt +099e 247a0000 nrtn blank +099f 202056f7 branch lmp_disconnect + +master_disconnect: +09a0 448fc003 bpatch patch03_7 ,mem_patch03 +09a1 20400c6e call quit_connection +09a2 7854fc00 disable master +09a3 6fe0804d fetch 1 ,mem_state_map +09a4 c28209a6 bbit1 smap_name_req ,master_name_disconnect +09a5 20600000 rtn + +master_name_disconnect: +09a6 6fe0804d fetch 1 ,mem_state_map +09a7 c3818000 rtnbit1 smap_name_res + +master_name_error: +09a8 d8a00a01 arg mem_tmp_buffer ,contw +09a9 df200008 arg 8 ,loopcnt +09aa 20207d17 branch memset0 + +check_disconnect_timeout: +09ab 44904004 bpatch patch04_0 ,mem_patch04 +09ac 78347c00 enable user +09ad 6fe0804c fetch 1 ,mem_op +09ae c4018000 rtnbit0 op_disconn +09af 204009b2 call conn_timer_expired +09b0 247a0000 nrtn blank +09b1 20207e56 branch disable_user + +conn_timer_expired: +09b2 6fe08073 fetch 1 ,mem_conn_timer +09b3 1fe0ffff increase -1 ,pdata +09b4 67e08073 store 1 ,mem_conn_timer +09b5 20600000 rtn + +linkkey_ready: +09b6 4490c004 bpatch patch04_1 ,mem_patch04 +09b7 6fe08031 fetch 1 ,mem_state +09b8 c28389bf bbit1 state_linkkey ,linkkey_set +09b9 6fe08877 fetch 1 ,mem_pairing_auth +09ba 203a09bf branch linkkey_set ,blank +09bb 70087700 jam defalt_pairing_auth ,mem_pairing_auth +09bc 70095b18 jam bt_evt_linkkey_generate ,mem_fifo_temp +09bd 20407871 call ui_ipc_send_event +09be 202009bf branch linkkey_set + +linkkey_set: +09bf 44914004 bpatch patch04_2 ,mem_patch04 +09c0 20400a63 call context_traverse_linkkey +09c1 6fe08031 fetch 1 ,mem_state +09c2 79207e07 set1 state_linkkey ,pdata +09c3 67e08031 store 1 ,mem_state +09c4 7041ca01 jam 1 ,mem_link_key_exists +09c5 6fe08056 fetch 1 ,mem_conn_sm +09c6 c08b09c7 bne conn_sm_pairing ,linkkey_set_continue + +linkkey_set_continue: +09c7 20600000 rtn + +generate_linkkey_continue: +09c8 70087701 jam pairing_auth ,mem_pairing_auth + +clear_linkstate: +09c9 6fe08031 fetch 1 ,mem_state +09ca 793ffe07 set0 state_linkkey ,pdata +09cb 67e08031 store 1 ,mem_state +09cc 20600000 rtn + +role_switch_check: +09cd 4491c004 bpatch patch04_3 ,mem_patch04 +09ce 78547c00 disable user +09cf 6fe10033 fetch 2 ,mem_tsniff +09d0 d840ffff arg 0xffff ,temp +09d1 98467c00 isub temp ,null +09d2 24628000 nrtn zero +09d3 6fe20035 fetch 4 ,mem_sniff_anchor +09d4 203809d7 branch role_switch_clkn ,clknt +09d5 9d067e00 isub clke_bt ,pdata +09d6 202009d8 branch role_switch_clke + +role_switch_clkn: +09d7 9c467e00 isub clkn_bt ,pdata + +role_switch_clke: +09d8 1fe67c04 sub pdata ,4 ,null +09d9 24610000 nrtn positive +09da 18007e00 force 0 ,pdata +09db 67e10033 store 2 ,mem_tsniff +09dc 20207e54 branch enable_user + +role_switch_prepare: +09dd 1fe20400 copy pdata ,temp +09de 604a0035 storet 4 ,mem_sniff_anchor + +role_switch_prepare0: +09df 44924004 bpatch patch04_4 ,mem_patch04 +09e0 70464201 jam switch_flag_accept ,mem_switch_flag +09e1 5800ffff setarg 0xffff +09e2 67e10033 store 2 ,mem_tsniff +09e3 70007401 jam 1 ,mem_sniff_attempt +09e4 20600000 rtn + +role_switch_master: +09e5 4492c004 bpatch patch04_5 ,mem_patch04 +09e6 204009cd call role_switch_check +09e7 24740000 nrtn user +09e8 78547c00 disable user +09e9 70001120 jam param_newconnto ,mem_newconnto_counter +09ea 793f800b set0 mark_fhs_already_good ,mark +09eb 793f8031 set0 mark_role_switch_receive_fhs ,mark + +roles_waitfhs_loop: +09ec 2040133c call rf_setup_time_master_slot +09ed 20400af5 call master_recv_packet +09ee c50589fa bmark1 mark_fhs_already_good ,roles_replyto_fhs +09ef 20400c66 call new_conn_timeout +09f0 243a09ec nbranch roles_waitfhs_loop ,blank +09f1 c5188a04 bmark1 mark_role_switch_receive_fhs ,roles_replyto_fhs_rcvd + +role_switch_fail_master: +09f2 44934004 bpatch patch04_6 ,mem_patch04 +09f3 78547c00 disable user +09f4 1c427e00 deposit clkn_bt +09f5 67e240d1 store 4 ,mem_next_btclk +09f6 78387c00 enable clknt +09f7 7834fc00 enable master +09f8 70095b2a jam bt_evt_switch_fail_master ,mem_fifo_temp +09f9 20207871 branch ui_ipc_send_event + +roles_replyto_fhs: +09fa 4493c004 bpatch patch04_7 ,mem_patch04 +09fb 2040133a call rf_setup_time_slave_slot +09fc d8200010 arg type_id ,type +09fd 20400aeb call master_send_packet +09fe 79200031 set1 mark_role_switch_receive_fhs ,mark +09ff 793f800b set0 mark_fhs_already_good ,mark +0a00 6fe08078 fetch 1 ,mem_amaddr +0a01 98000800 iforce am_addr +0a02 70001102 jam 2 ,mem_newconnto_counter +0a03 202009ec branch roles_waitfhs_loop + +roles_replyto_fhs_rcvd: +0a04 6fe200b5 fetch 4 ,mem_clke_bt +0a05 1fe0fe08 pincrease 8 +0a06 67e200b5 store 4 ,mem_clke_bt +0a07 78587c00 disable clknt +0a08 7854fc00 disable master +0a09 20401039 call apply_switch_clke +0a0a 20400c46 call prepare_newconn + +roles_newconns_loop: +0a0b 44944005 bpatch patch05_0 ,mem_patch05 +0a0c 20400c8d call slave_newconn_once +0a0d 20368a11 branch roles_newconns_responded ,match +0a0e 20400c66 call new_conn_timeout +0a0f 243a0a0b nbranch roles_newconns_loop ,blank +0a10 202009f2 branch role_switch_fail_master + +roles_newconns_responded: +0a11 6fe08032 fetch 1 ,mem_mode +0a12 793ffe01 set0 mode_master ,pdata +0a13 67e08032 store 1 ,mem_mode +0a14 20401376 call supervision_flush +0a15 20401061 call calc_clke_offset +0a16 78347c00 enable user +0a17 70095b2b jam bt_evt_switch_success_master ,mem_fifo_temp +0a18 20207871 branch ui_ipc_send_event + +context_load: +0a19 4494c005 bpatch patch05_1 ,mem_patch05 +0a1a 79200009 set1 mark_context ,mark +0a1b 1a227e00 deposit rega +0a1c 67e1001f store 2 ,mem_context_ptr +0a1d 18007258 force context_size ,loopcnt +0a1e d8a00287 arg mem_le_state ,contw +0a1f 1a208c01 add rega ,coffset_mode ,contr +0a20 efe08006 ifetch 1 ,contr +0a21 1a220c00 copy rega ,contr +0a22 c2807d5f bbit1 mode_le ,memcpy +0a23 d8a00031 arg mem_state ,contw +0a24 20407d5f call memcpy +0a25 78577c00 disable attempt +0a26 6fe08078 fetch 1 ,mem_amaddr +0a27 98000800 iforce am_addr +0a28 70008901 jam 1 ,mem_current_sniff_attempt +0a29 20348a2b branch context_load_master ,master +0a2a 70008901 jam 1 ,mem_current_sniff_attempt + +context_load_master: +0a2b 6fe08031 fetch 1 ,mem_state +0a2c c4008000 rtnbit0 state_insniff +0a2d 6fe08074 fetch 1 ,mem_sniff_attempt +0a2e 67e08089 store 1 ,mem_current_sniff_attempt +0a2f 6fe08075 fetch 1 ,mem_sniff_timeout +0a30 67e0808a store 1 ,mem_current_sniff_timeout +0a31 20600000 rtn + +context_save: +0a32 44954005 bpatch patch05_2 ,mem_patch05 +0a33 6fe1001f fetch 2 ,mem_context_ptr +0a34 98000a00 iforce contw +0a35 18007258 force context_size ,loopcnt +0a36 d8c00287 arg mem_le_state ,contr +0a37 203b7d5f branch memcpy ,le +0a38 d8c00031 arg mem_state ,contr +0a39 20207d5f branch memcpy + +context_get_next: +0a3a df200001 arg context_num ,loopcnt +0a3b 68488015 fetcht 1 ,mem_current_context + +context_get_next_loop: +0a3c 18408401 increase 1 ,temp +0a3d 2841fe01 compare context_num ,temp ,0xff +0a3e 24208a40 nbranch context_get_next_cont ,true +0a3f d8400000 arg 0 ,temp + +context_get_next_cont: +0a40 60488015 storet 1 ,mem_current_context +0a41 184ffe58 mul32 temp ,context_size ,pdata +0a42 da204040 arg mem_context ,rega +0a43 9a20a200 iadd rega ,rega +0a44 efe08011 ifetch 1 ,rega +0a45 c2808a48 bbit1 state_insniff ,context_get_next_sniff +0a46 c3800000 rtnbit1 state_inconn +0a47 c3818000 rtnbit1 state_inpage + +context_get_next_sniff: +0a48 c2000a3c loop context_get_next_loop +0a49 20600000 rtn + +context_new: +0a4a 4495c005 bpatch patch05_3 ,mem_patch05 +0a4b da600a79 arg context_search_empty ,regc +0a4c 20400a70 call context_search +0a4d 24628000 nrtn zero +0a4e 1a227e00 deposit rega +0a4f 67e1001f store 2 ,mem_context_ptr +0a50 18007c00 force 0 ,null +0a51 20600000 rtn + +context_check_all_wack: +0a52 20400f4d call check_esco_amaddr +0a53 20208a5a branch context_check_esco_wack ,true +0a54 6fe1001f fetch 2 ,mem_context_ptr +0a55 1fe08a17 add pdata ,coffset_arq ,contw +0a56 6fe08048 fetch 1 ,mem_arq +0a57 e7e08005 istore 1 ,contw +0a58 da600ab9 arg context_check_a_wack ,regc +0a59 20200a70 branch context_search + +context_check_esco_wack: +0a5a 6fe08048 fetch 1 ,mem_arq +0a5b 2feffe03 isolate1 wack ,pdata +0a5c 20208a5f branch context_esco_wack ,true +0a5d 18007c01 force 1 ,null +0a5e 20600000 rtn + +context_esco_wack: +0a5f 18007c00 force 0 ,null +0a60 20600000 rtn + +context_check_idle: +0a61 da600ab6 arg context_check_inconn ,regc +0a62 20200a70 branch context_search + +context_traverse_linkkey: +0a63 6849001f fetcht 2 ,mem_context_ptr +0a64 da600ade arg context_traverse_clearkey ,regc +0a65 20200a70 branch context_search + +context_search_conn_handle: +0a66 6848c1dc fetcht 1 ,mem_hci_conn_handle + +context_search_conn_handle2: +0a67 da600a84 arg context_search_handle ,regc +0a68 20200a70 branch context_search + +context_search_plap: +0a69 44964005 bpatch patch05_4 ,mem_patch05 +0a6a 684b41dd fetcht 6 ,mem_hci_plap + +context_search_plap2: +0a6b da600a7d arg context_search_lap ,regc +0a6c 20200a70 branch context_search + +context_search_insniff: +0a6d da600a8a arg context_search_sniff ,regc +0a6e 20200a70 branch context_search + +context_search_sniff_window: +0a6f da600ad5 arg context_search_window ,regc + +context_search: +0a70 4496c005 bpatch patch05_5 ,mem_patch05 +0a71 da204040 arg mem_context ,rega +0a72 df200001 arg context_num ,loopcnt + +context_search_loop: +0a73 efe08011 ifetch 1 ,rega +0a74 1a627a00 copy regc ,pc + +context_search_next: +0a75 1a20a258 increase context_size ,rega +0a76 c2000a73 loop context_search_loop +0a77 18007c01 force 1 ,null +0a78 20600000 rtn + +context_search_empty: +0a79 c2800a75 bbit1 state_inconn ,context_search_next +0a7a c2818a75 bbit1 state_inpage ,context_search_next +0a7b 18007c00 force 0 ,null +0a7c 20600000 rtn + +context_search_lap: +0a7d c2818a7f bbit1 state_inpage ,context_search_lap_cont +0a7e c3000a75 bbit0 state_inconn ,context_search_next + +context_search_lap_cont: +0a7f 1a208c10 add rega ,coffset_plap ,contr +0a80 efe30006 ifetch 6 ,contr +0a81 98467c00 isub temp ,null +0a82 20628000 rtn zero +0a83 20200a75 branch context_search_next + +context_search_handle: +0a84 c3000a75 bbit0 state_inconn ,context_search_next +0a85 1a208c16 add rega ,coffset_conn_handle ,contr +0a86 efe08006 ifetch 1 ,contr +0a87 98467c00 isub temp ,null +0a88 20628000 rtn zero +0a89 20200a75 branch context_search_next + +context_search_sniff: +0a8a c3008a75 bbit0 state_insniff ,context_search_next + +context_search_sniff_loop: +0a8b 20400ac2 call context_get_anchor +0a8c 20400aa6 call sign_pdata_temp +0a8d 98467e00 isub temp ,pdata +0a8e 1fe0fe01 increase 1 ,pdata +0a8f 20210aa0 branch context_search_sniff_miss ,positive +0a90 18c22400 copy contr ,regb +0a91 67e48964 store 9 ,mem_temp +0a92 6fe0c6ba fetch 1 ,mem_sc_calc +0a93 243a0a98 nbranch context_search_sniff_sc ,blank +0a94 6fe48964 fetch 9 ,mem_temp +0a95 1a420c00 copy regb ,contr +0a96 1fe0fe05 increase 5 ,pdata +0a97 20200a9b branch context_search_meet1 + +context_search_sniff_sc: +0a98 6fe48964 fetch 9 ,mem_temp +0a99 1a420c00 copy regb ,contr +0a9a 1fe0fe14 increase 20 ,pdata + +context_search_meet1: +0a9b 24210a75 nbranch context_search_next ,positive + +context_search_meet: +0a9c 18424200 copy temp ,bt_clk +0a9d 20400ace call context_next_anchor +0a9e 18007c00 force 0 ,null +0a9f 20600000 rtn + +context_search_sniff_miss: +0aa0 98002400 iforce regb +0aa1 1a208c02 add rega ,coffset_tsniff ,contr +0aa2 efe10006 ifetch 2 ,contr +0aa3 203a0a9c branch context_search_meet ,blank +0aa4 20400ace call context_next_anchor +0aa5 20200a8b branch context_search_sniff_loop + +sign_pdata_temp: +0aa6 1ff11600 rshift16 pdata ,timeup +0aa7 196c9600 rshift8 timeup ,timeup +0aa8 20228ab0 branch sign_pdata_temp_p0 ,zero +0aa9 29601e0f compare 0xf ,timeup ,0xf +0aaa 24608000 nrtn true +0aab 18511600 rshift16 temp ,timeup +0aac 196c9600 rshift8 timeup ,timeup +0aad 24628000 nrtn zero +0aae 7920041c set1 28 ,temp +0aaf 20600000 rtn + +sign_pdata_temp_p0: +0ab0 18511600 rshift16 temp ,timeup +0ab1 196c9600 rshift8 timeup ,timeup +0ab2 29601e0f compare 0xf ,timeup ,0xf +0ab3 24608000 nrtn true +0ab4 79207e1c set1 28 ,pdata +0ab5 20600000 rtn + +context_check_inconn: +0ab6 c3000a75 bbit0 state_inconn ,context_search_next +0ab7 18007c00 force 0 ,null +0ab8 20600000 rtn + +context_check_a_wack: +0ab9 c3000a75 bbit0 state_inconn ,context_search_next +0aba 1a208c01 add rega ,coffset_mode ,contr +0abb efe08006 ifetch 1 ,contr +0abc c2800a75 bbit1 mode_le ,context_search_next +0abd 1a208c17 add rega ,coffset_arq ,contr +0abe efe08006 ifetch 1 ,contr +0abf c3018a75 bbit0 wack ,context_search_next +0ac0 18007c00 force 0 ,null +0ac1 20600000 rtn + +context_get_anchor: +0ac2 1a208c01 add rega ,coffset_mode ,contr +0ac3 e8408006 ifetcht 1 ,contr +0ac4 1c427e00 deposit clkn_bt +0ac5 284ffe01 isolate1 mode_master ,temp +0ac6 1a208c04 add rega ,coffset_sniff_anchor ,contr +0ac7 e8420006 ifetcht 4 ,contr +0ac8 20608000 rtn true +0ac9 1a208c08 add rega ,coffset_clk_offset ,contr +0aca efe30006 ifetch 6 ,contr +0acb 20401077 call calc_clke2 +0acc 1d027e00 deposit clke_bt +0acd 20600000 rtn + +context_next_anchor: +0ace 1a208c02 add rega ,coffset_tsniff ,contr +0acf 1a208a04 add rega ,coffset_sniff_anchor ,contw +0ad0 efe10006 ifetch 2 ,contr +0ad1 98409600 iadd temp ,timeup +0ad2 19627e00 deposit timeup +0ad3 e7e20005 istore 4 ,contw +0ad4 20201705 branch le_context_nextevent + +context_search_window: +0ad5 c3008a75 bbit0 state_insniff ,context_search_next +0ad6 20400ac2 call context_get_anchor +0ad7 9b60fe00 iadd stop_watch ,pdata +0ad8 9b60fe00 iadd stop_watch ,pdata +0ad9 98e0fe00 iadd queue ,pdata +0ada 98467c00 isub temp ,null +0adb 24210a75 nbranch context_search_next ,positive +0adc 18007c00 force 0 ,null +0add 20600000 rtn + +context_traverse_clearkey: +0ade c3000a75 bbit0 state_inconn ,context_search_next +0adf 18427e00 deposit temp +0ae0 9a267c00 isub rega ,null +0ae1 203f0a75 branch context_search_next ,null +0ae2 1a208c01 add rega ,coffset_mode ,contr +0ae3 efe08006 ifetch 1 ,contr +0ae4 c2800a75 bbit1 mode_le ,context_search_next +0ae5 efe08011 ifetch 1 ,rega +0ae6 793ffe07 set0 state_linkkey ,pdata +0ae7 e7e08011 istore 1 ,rega +0ae8 20200a75 branch context_search_next + +master_conn_send_packet: +0ae9 44974005 bpatch patch05_6 ,mem_patch05 +0aea 2040133c call rf_setup_time_master_slot + +master_send_packet: +0aeb 1c40c201 add clkn_bt ,1 ,bt_clk +0aec 20401138 call fetch_self_bt_adr +0aed 18004803 force 0x03 ,freq_mode +0aee 20401128 call tx_radio_freq +0aef 2040133e call start_transmitter +0af0 20401343 call start_tx_native +0af1 20401351 call send_access_word +0af2 20200f8a branch transmit_packet + +master_conn_recv_packet: +0af3 4497c005 bpatch patch05_7 ,mem_patch05 +0af4 2040133a call rf_setup_time_slave_slot + +master_recv_packet: +0af5 1c40c201 add clkn_bt ,1 ,bt_clk +0af6 20401138 call fetch_self_bt_adr +0af7 18004803 force 0x03 ,freq_mode +0af8 20401122 call rx_radio_freq +0af9 20400c3b call init_rx_packet_flags +0afa 204012d8 call prep_crypt +0afb 20401348 call start_rx_native +0afc 204012d3 call start_receiver + +master_rx_conn_finish_packet: +0afd 204012f9 call wait_access_clkn_rt +0afe 246c0000 nrtn sync +0aff 2040127d call save_rssi +0b00 20200d44 branch receive_packet + +master_newconn_once: +0b01 44984006 bpatch patch06_0 ,mem_patch06 +0b02 6fe080e6 fetch 1 ,mem_fhs_am_addr +0b03 98000800 iforce am_addr +0b04 18000201 force type_poll ,type +0b05 20400ae9 call master_conn_send_packet +0b06 20200af3 branch master_conn_recv_packet + +inquiry_scan_dispatch: +0b07 c61a0000 rtnmark1 mark_adc_enable +0b08 6fe0c09b fetch 1 ,mem_scan_mode +0b09 c4000000 rtnbit0 inq_scan_mode +0b0a 18000e04 force iscan_interval_timer ,queue +0b0b 20407d74 call timer_check +0b0c 247a0000 nrtn blank +0b0d 684940b5 fetcht 2 ,mem_iscan_window +0b0e 18000e04 force 4 ,queue +0b0f 20400f44 call sniff_check_window +0b10 20740000 rtn user +0b11 20400b18 call inquiry_scan_start +0b12 18000e04 force iscan_interval_timer ,queue +0b13 6fe140b7 fetch 2 ,mem_iscan_interval +0b14 242c7d66 nbranch timer_init ,sync +0b15 180a7e00 random pdata +0b16 9ea17e00 iand mask3ff ,pdata +0b17 20207d66 branch timer_init + +inquiry_scan_start: +0b18 4498c006 bpatch patch06_1 ,mem_patch06 +0b19 7000e600 jam 0 ,mem_fhs_am_addr +0b1a 78587c00 disable clknt +0b1b 78577c00 disable attempt +0b1c 204010fa call afh_clear +0b1d 1c4143fc and clkn_bt ,0x1fc ,bt_clk +0b1e 18004801 force 0x01 ,freq_mode +0b1f 2040112e call fetch_giac +0b20 20401122 call rx_radio_freq +0b21 7940001d setflip mark_inquiry_state ,mark +0b22 6fe08006 fetch 1 ,mem_inquiryscan_waitcnt +0b23 1fe0fe01 increase 1 ,pdata +0b24 67e08006 store 1 ,mem_inquiryscan_waitcnt +0b25 20401148 call fetch_diac +0b26 204012d3 call start_receiver +0b27 20401300 call wait_access_forever +0b28 246c0000 nrtn sync +0b29 44994006 bpatch patch06_2 ,mem_patch06 +0b2a 18003600 force 0 ,stop_watch +0b2b 2040114f call shutdown_radio +0b2c 6fe08007 fetch 1 ,mem_inquiryscan_rcvcnt +0b2d 1fe0fe01 increase 1 ,pdata +0b2e 67e08007 store 1 ,mem_inquiryscan_rcvcnt +0b2f 2040112e call fetch_giac +0b30 2040133a call rf_setup_time_slave_slot +0b31 1c21c202 or_into 0x002 ,bt_clk +0b32 18004801 force 0x01 ,freq_mode +0b33 20401128 call tx_radio_freq +0b34 20401148 call fetch_diac +0b35 2040133e call start_transmitter +0b36 2040134c call start_tx_external +0b37 1c427e00 deposit clkn_bt +0b38 67e200b1 store 4 ,mem_clkn_bt +0b39 20401351 call send_access_word +0b3a 18000202 force type_fhs ,type +0b3b 18000800 force 0 ,am_addr +0b3c 20401359 call scan_mode_whiten +0b3d 20400f8e call transmit_packet_whitened +0b3e 20400b42 call send_eir +0b3f 1c2143fd and_into 0x1fd ,bt_clk +0b40 1cc0cc01 increase 1 ,n_tx_slot +0b41 20600000 rtn + +send_eir: +0b42 4499c006 bpatch patch06_3 ,mem_patch06 +0b43 6fe0c0d8 fetch 1 ,mem_eir_enable +0b44 207a0000 rtn blank +0b45 d8a000f1 arg mem_eir ,contw +0b46 6fe0c5fc fetch 1 ,mem_local_name_length +0b47 1fe27200 copy pdata ,loopcnt +0b48 1fe0fe01 increase 1 ,pdata +0b49 e7e08005 istore 1 ,contw +0b4a 18a20400 copy contw ,temp +0b4b 1fe0fe01 increase 1 ,pdata +0b4c 67e141e6 store 2 ,mem_tx_len +0b4d 18420a00 copy temp ,contw +0b4e 58000009 setarg 0x09 +0b4f e7e08005 istore 1 ,contw +0b50 d8c045fd arg mem_local_name ,contr +0b51 20407d5f call memcpy +0b52 da604678 arg mem_all_uuid_128bits ,regc +0b53 df200004 arg 4 ,loopcnt +0b54 20400b64 call get_all_uuid +0b55 da604662 arg mem_all_uuid_16bits ,regc +0b56 df200001 arg 1 ,loopcnt +0b57 20400b64 call get_all_uuid +0b58 1800020a force type_dm3 ,type +0b59 7041e502 jam 2 ,mem_tx_lch +0b5a 580000f1 setarg mem_eir +0b5b 67e100bf store 2 ,mem_txptr +0b5c 2040133a call rf_setup_time_slave_slot +0b5d 20401128 call tx_radio_freq +0b5e 2040133e call start_transmitter +0b5f 2040134c call start_tx_external +0b60 20401351 call send_access_word +0b61 20401359 call scan_mode_whiten +0b62 20400f8e call transmit_packet_whitened +0b63 20600000 rtn + +get_all_uuid: +0b64 18a20400 copy contw ,temp +0b65 1a620c00 copy regc ,contr +0b66 efe08006 ifetch 1 ,contr +0b67 207a0000 rtn blank + +lshift_loop: +0b68 1fe3fe00 lshift pdata ,pdata +0b69 c2000b68 loop lshift_loop +0b6a 1fe22200 copy pdata ,rega +0b6b 1fe0fe02 increase 2 ,pdata +0b6c 1fe20e00 copy pdata ,queue +0b6d 6fe141e6 fetch 2 ,mem_tx_len +0b6e 98e0fe00 iadd queue ,pdata +0b6f 67e141e6 store 2 ,mem_tx_len +0b70 18420a00 copy temp ,contw +0b71 1a227e00 copy rega ,pdata +0b72 1fe0fe01 increase 1 ,pdata +0b73 e7e08005 istore 1 ,contw +0b74 1a620c00 copy regc ,contr +0b75 efe08006 ifetch 1 ,contr +0b76 efe08006 ifetch 1 ,contr +0b77 e7e08005 istore 1 ,contw +0b78 1a227200 copy rega ,loopcnt +0b79 20207d5f branch memcpy + +page_scan_dispatch: +0b7a c61a0000 rtnmark1 mark_adc_enable +0b7b 6fe0c09b fetch 1 ,mem_scan_mode +0b7c c4008000 rtnbit0 page_scan_mode +0b7d 18000e05 force pscan_interval_timer ,queue +0b7e 20407d74 call timer_check +0b7f 247a0000 nrtn blank +0b80 684940b9 fetcht 2 ,mem_pscan_window +0b81 18000e28 force 40 ,queue +0b82 20400f44 call sniff_check_window +0b83 20740000 rtn user +0b84 18000800 force 0 ,am_addr +0b85 70001008 jam param_pagerespto ,mem_fhs_wait_counter +0b86 793f800b set0 mark_fhs_already_good ,mark +0b87 20400b8b call page_scan_start +0b88 18000e05 force pscan_interval_timer ,queue +0b89 6fe140bb fetch 2 ,mem_pscan_interval +0b8a 20207d66 branch timer_init + +page_scan_start: +0b8b 449a4006 bpatch patch06_4 ,mem_patch06 +0b8c 78587c00 disable clknt +0b8d 204010fa call afh_clear +0b8e 6fe08008 fetch 1 ,mem_pagescan_waitcnt +0b8f 1fe0fe01 increase 1 ,pdata +0b90 67e08008 store 1 ,mem_pagescan_waitcnt +0b91 18004c00 force 0 ,n_tx_slot +0b92 20401138 call fetch_self_bt_adr +0b93 1c40c201 add clkn_bt ,1 ,bt_clk +0b94 18004802 force 0x02 ,freq_mode +0b95 449ac006 bpatch patch06_5 ,mem_patch06 +0b96 20401122 call rx_radio_freq +0b97 204012d3 call start_receiver +0b98 20401300 call wait_access_forever +0b99 246c0000 nrtn sync +0b9a 2040114f call shutdown_radio +0b9b 6fe08009 fetch 1 ,mem_pagescan_rcvcnt +0b9c 1fe0fe01 increase 1 ,pdata +0b9d 67e08009 store 1 ,mem_pagescan_rcvcnt +0b9e 18003600 force 0 ,stop_watch +0b9f 2040133a call rf_setup_time_slave_slot +0ba0 1c21c202 or_into 0x002 ,bt_clk +0ba1 18004801 force 0x01 ,freq_mode +0ba2 20401128 call tx_radio_freq +0ba3 2040133e call start_transmitter +0ba4 2040134c call start_tx_external +0ba5 20401351 call send_access_word +0ba6 20400e80 call end_of_packet +0ba7 18000800 force 0 ,am_addr +0ba8 69610157 fetchr timeup ,2 ,mem_param_rf_setup +0ba9 35330200 until clke_rt ,meet +0baa 1d01d003 or_into 0x03 ,clke_bt +0bab 1c2143fd and_into 0x1fd ,bt_clk + +page_scan_wait_fhs_restart: +0bac 449b4006 bpatch patch06_6 ,mem_patch06 +0bad 1cc0cc01 increase 1 ,n_tx_slot +0bae 20401122 call rx_radio_freq +0baf 204012d3 call start_receiver +0bb0 204012f3 call wait_access_mhalfbnd +0bb1 242c0bb5 nbranch page_scan_wait_fhs_again ,sync +0bb2 20401359 call scan_mode_whiten +0bb3 20400d47 call receive_packet_whitened +0bb4 c5058bbc bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs + +page_scan_wait_fhs_again: +0bb5 449bc006 bpatch patch06_7 ,mem_patch06 +0bb6 6fe08010 fetch 1 ,mem_fhs_wait_counter +0bb7 207a0000 rtn blank +0bb8 1fe0ffff increase -1 ,pdata +0bb9 67e08010 store 1 ,mem_fhs_wait_counter +0bba 2040133c call rf_setup_time_master_slot +0bbb 20200bac branch page_scan_wait_fhs_restart + +page_scan_reply_to_fhs: +0bbc 449c4007 bpatch patch07_0 ,mem_patch07 +0bbd 793fd001 set0 1 ,clke_bt +0bbe 79205000 set1 0 ,clke_bt +0bbf 6fe0800a fetch 1 ,mem_pagescan_rcvfhscnt +0bc0 1fe0fe01 increase 1 ,pdata +0bc1 67e0800a store 1 ,mem_pagescan_rcvfhscnt +0bc2 2040133a call rf_setup_time_slave_slot +0bc3 1c21c202 or_into 0x02 ,bt_clk +0bc4 20401128 call tx_radio_freq +0bc5 2040133e call start_transmitter +0bc6 2040134c call start_tx_external +0bc7 20401351 call send_access_word +0bc8 20400e80 call end_of_packet + +slave_apply_clke_bt: +0bc9 2d000603 compare 0x03 ,clke_bt ,0x03 +0bca 20208bcd branch slave_apply_clke_bt_now ,true +0bcb 37cb8200 until null ,mhalfbnd +0bcc 20200bc9 branch slave_apply_clke_bt + +slave_apply_clke_bt_now: +0bcd 6fe200b5 fetch 4 ,mem_clke_bt +0bce 1fe1fe03 or_into 0x03 ,pdata +0bcf 1fe25000 icopy clke_bt + +start_slave_connection: +0bd0 449cc007 bpatch patch07_1 ,mem_patch07 +0bd1 6fe300c8 fetch 6 ,extm_lap +0bd2 67e30041 store 6 ,mem_plap +0bd3 20400c46 call prepare_newconn + +slave_newconn_loop: +0bd4 20400c8d call slave_newconn_once +0bd5 20368bd9 branch sconn_successful ,match +0bd6 20400c66 call new_conn_timeout +0bd7 243a0bd4 nbranch slave_newconn_loop ,blank +0bd8 20600000 rtn + +sconn_successful: +0bd9 449d4007 bpatch patch07_2 ,mem_patch07 +0bda 20400c51 call newconn_init +0bdb 20400a4a call context_new +0bdc 24628000 nrtn zero +0bdd 70003200 jam 0 ,mem_mode +0bde 20401061 call calc_clke_offset +0bdf 20200a32 branch context_save + +slave_dispatch: +0be0 449dc007 bpatch patch07_3 ,mem_patch07 +0be1 20401073 call calc_clke +0be2 20400c05 call role_switch_slave +0be3 20740000 rtn user + +slave_loop: +0be4 449e4007 bpatch patch07_4 ,mem_patch07 +0be5 20406561 call scheduler_process +0be6 20400d3c call slave_conn_recv_packet +0be7 24368bf4 nbranch slave_notmatch ,match +0be8 6fe14477 fetch 2 ,mem_cb_bt_slave_match +0be9 20407e05 call callback_func +0bea 20401376 call supervision_flush +0beb 20406579 call scheduler_tx_l2cap_pkt +0bec 20400c9a call prepare_tx +0bed 20400f7f call slave_conn_send_packet +0bee 20400f50 call parse_l2cap +0bef 20405394 call parse_lmp +0bf0 6fe0800b fetch 1 ,mem_slave_rcvcnt +0bf1 1fe0fe01 increase 1 ,pdata +0bf2 67e0800b store 1 ,mem_slave_rcvcnt +0bf3 20401061 call calc_clke_offset + +slave_notmatch: +0bf4 449ec007 bpatch patch07_5 ,mem_patch07 +0bf5 20401527 call lpm_set_mult +0bf6 2040136d call supervision_update +0bf7 20210bfd branch slave_disconnect ,positive +0bf8 204009ab call check_disconnect_timeout +0bf9 24340bfd nbranch slave_disconnect ,user +0bfa 20400f20 call check_attempt +0bfb 243a0be4 nbranch slave_loop ,blank +0bfc 20600000 rtn + +slave_disconnect: +0bfd 449f4007 bpatch patch07_6 ,mem_patch07 +0bfe 700a5100 jam 0 ,mem_tester_emulate +0bff 7000e400 jam 0 ,mem_debug_config +0c00 20400c6e call quit_connection +0c01 793f8011 set0 mark_testmode ,mark +0c02 20407e1d call test_enable_white +0c03 6fe08031 fetch 1 ,mem_state +0c04 20600000 rtn + +role_switch_slave: +0c05 204009cd call role_switch_check +0c06 24740000 nrtn user +0c07 18820400 copy am_addr ,temp +0c08 2040135d call get_free_amaddr +0c09 67e080e6 store 1 ,mem_fhs_am_addr +0c0a 18420800 copy temp ,am_addr +0c0b 70001120 jam param_newconnto ,mem_newconnto_counter + +roles_sendfhs_loop: +0c0c 449fc007 bpatch patch07_7 ,mem_patch07 +0c0d 2040133c call rf_setup_time_master_slot +0c0e 18000202 force type_fhs ,type +0c0f 20400f77 call slave_send_access +0c10 1c427e00 deposit clkn_bt +0c11 67e200b1 store 4 ,mem_clkn_bt +0c12 20400f8a call transmit_packet +0c13 2040133a call rf_setup_time_slave_slot +0c14 7837fc00 enable user3 +0c15 20400d1d call slave_receive_access +0c16 202c0c1e branch roles_got_fhs_reply ,sync +0c17 2040114f call shutdown_radio +0c18 20400c66 call new_conn_timeout +0c19 243a0c0c nbranch roles_sendfhs_loop ,blank +0c1a c6820000 rtnmark0 mark_accept_switch +0c1b 70007d34 jam lmp_slot_offset ,mem_lmo_opcode2 +0c1c 79200003 set1 mark_switch_initiated ,mark +0c1d 20600000 rtn + +roles_got_fhs_reply: +0c1e 78387c00 enable clknt +0c1f 20400c46 call prepare_newconn +0c20 204010fa call afh_clear + +roles_newconn_loop: +0c21 44a04008 bpatch patch08_0 ,mem_patch08 +0c22 20400b01 call master_newconn_once +0c23 202c0c2a branch roles_newconn_responded ,sync +0c24 20400c66 call new_conn_timeout +0c25 243a0c21 nbranch roles_newconn_loop ,blank +0c26 78587c00 disable clknt +0c27 1d027e00 deposit clke_bt +0c28 67e240d1 store 4 ,mem_next_btclk +0c29 20600000 rtn + +roles_newconn_responded: +0c2a 7834fc00 enable master +0c2b c5820c30 bmark0 mark_accept_switch ,roles_newconn_nolmp +0c2c 793f8004 set0 mark_accept_switch ,mark +0c2d 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +0c2e 70007e33 jam lmp_host_connection_req ,mem_lmi_opcode2 +0c2f 20405a1d call tid_set_reply + +roles_newconn_nolmp: +0c30 18827e00 deposit am_addr +0c31 67e08078 store 1 ,mem_amaddr +0c32 18007e00 force 0 ,pdata +0c33 67e30039 store 6 ,mem_clk_offset +0c34 6fe08032 fetch 1 ,mem_mode +0c35 79207e01 set1 mode_master ,pdata +0c36 67e08032 store 1 ,mem_mode +0c37 20401376 call supervision_flush +0c38 7854fc00 disable master +0c39 78347c00 enable user +0c3a 20600000 rtn + +init_rx_packet_flags: +0c3b 44a0c008 bpatch patch08_1 ,mem_patch08 +0c3c 7856fc00 disable match +0c3d 793f8005 set0 mark_loopback ,mark +0c3e 793f800a set0 mark_am_addr_broadcast ,mark +0c3f 793f8010 set0 mark_longpacket ,mark +0c40 793f800f set0 mark_old_packet ,mark +0c41 6fe08048 fetch 1 ,mem_arq +0c42 793ffe05 set0 arqnx ,pdata +0c43 79207e04 set1 flowx ,pdata +0c44 67e08048 store 1 ,mem_arq +0c45 20600000 rtn + +prepare_newconn: +0c46 44a14008 bpatch patch08_2 ,mem_patch08 +0c47 70001120 jam param_newconnto ,mem_newconnto_counter +0c48 70004850 jam param_newconn_arq ,mem_arq +0c49 6fe140c6 fetch 2 ,mem_rx_window_init +0c4a 67e1003f store 2 ,mem_rx_window +0c4b 1c427e00 deposit clkn_bt +0c4c 67e240d1 store 4 ,mem_next_btclk +0c4d 20780000 rtn clknt +0c4e 1d027e00 deposit clke_bt +0c4f 67e240d1 store 4 ,mem_next_btclk +0c50 20600000 rtn + +newconn_init: +0c51 44a1c008 bpatch patch08_3 ,mem_patch08 +0c52 20405390 call init_lmp_reinit +0c53 20400c6a call new_conn_handle +0c54 67e08047 store 1 ,mem_conn_handle +0c55 58000000 setarg 0 +0c56 67e1030e store 2 ,mem_l2cap_rxbuff1_len +0c57 58001c80 setarg param_supervision_to +0c58 67e10052 store 2 ,mem_supervision_to +0c59 6fe08031 fetch 1 ,mem_state +0c5a 79207e00 set1 state_inconn ,pdata +0c5b 67e08031 store 1 ,mem_state +0c5c 70004c00 jam 0 ,mem_op +0c5d 70004d00 jam 0 ,mem_state_map +0c5e 70009e00 jam 0 ,mem_lpm_current_mult +0c5f 20201376 branch supervision_flush + +clear_linkkey: +0c60 44a24008 bpatch patch08_4 ,mem_patch08 +0c61 18007e00 force 0 ,pdata +0c62 67e441cb store 8 ,mem_link_key +0c63 e7e40005 istore 8 ,contw +0c64 204009c9 call clear_linkstate +0c65 20200a63 branch context_traverse_linkkey + +new_conn_timeout: +0c66 6fe08011 fetch 1 ,mem_newconnto_counter +0c67 1fe0ffff increase -1 ,pdata +0c68 67e08011 store 1 ,mem_newconnto_counter +0c69 20600000 rtn + +new_conn_handle: +0c6a 6fe0c0d6 fetch 1 ,mem_handle_num +0c6b 1fe0fe01 increase 1 ,pdata +0c6c 67e0c0d6 store 1 ,mem_handle_num +0c6d 20600000 rtn + +quit_connection: +0c6e 44a2c008 bpatch patch08_5 ,mem_patch08 +0c6f 6fe0c1db fetch 1 ,mem_hci_cmd +0c70 c0018c73 beq hci_cmd_remote_name_req ,quit_connection_name +0c71 6fe08049 fetch 1 ,mem_lmp_to_send +0c72 c0808c77 bne lmp_name_req ,quit_connection_cont + +quit_connection_name: +0c73 20404d88 call cmd_check_plap +0c74 24228c77 nbranch quit_connection_cont ,zero +0c75 204009a8 call master_name_error +0c76 7041db00 jam 0 ,mem_hci_cmd + +quit_connection_cont: +0c77 44a34008 bpatch patch08_6 ,mem_patch08 +0c78 204031cc call app_disconn_reason_collect_bt +0c79 20400f16 call sniff_exit +0c7a 70095b02 jam bt_evt_bb_disconnected ,mem_fifo_temp +0c7b 20407871 call ui_ipc_send_event +0c7c 20405382 call init_lmp_work +0c7d 20404dc8 call l2cap_init_work +0c7e 20406ecc call sp_clear_flags +0c7f 6fe08031 fetch 1 ,mem_state +0c80 793ffe00 set0 state_inconn ,pdata +0c81 67e08031 store 1 ,mem_state +0c82 70478b00 jam 0 ,memui_reconnect_mode +0c83 6fe0804d fetch 1 ,mem_state_map +0c84 2fe18000 compare 0x0 ,pdata ,0xc0 +0c85 20208c87 branch quit_connection_not_clear_mark ,true +0c86 793f8001 set0 mark_rxbuf_inuse ,mark + +quit_connection_not_clear_mark: +0c87 6fe08048 fetch 1 ,mem_arq +0c88 c3018c89 bbit0 wack ,quit_connection_not_clear_tx + +quit_connection_not_clear_tx: +0c89 6fe0804c fetch 1 ,mem_op +0c8a c4030000 rtnbit0 op_txl2cap +0c8b 793f8002 set0 mark_tx_l2cap ,mark +0c8c 20600000 rtn + +slave_newconn_once: +0c8d 44a3c008 bpatch patch08_7 ,mem_patch08 +0c8e 6fe080c4 fetch 1 ,extm_newconn_am_addr +0c8f 207a0000 rtn blank +0c90 1fe20800 icopy am_addr +0c91 20400d3c call slave_conn_recv_packet +0c92 24768000 nrtn match +0c93 18000200 force type_null ,type +0c94 20400f7f call slave_conn_send_packet +0c95 18827e00 deposit am_addr +0c96 67e08078 store 1 ,mem_amaddr +0c97 18007e00 force 0 ,pdata +0c98 67e080c4 store 1 ,extm_newconn_am_addr +0c99 20600000 rtn + +prepare_tx: +0c9a 44a44009 bpatch patch09_0 ,mem_patch09 +0c9b 6fe08031 fetch 1 ,mem_state +0c9c c3010ca7 bbit0 state_insco ,prepare_tx_not_sco +0c9d 18000207 force type_hv3 ,type +0c9e c5838ca6 bmark0 mark_esco ,prepare_tx_not_esco +0c9f 20400f4d call check_esco_amaddr +0ca0 24208ca7 nbranch prepare_tx_not_sco ,true +0ca1 20370ca7 branch prepare_tx_not_sco ,attempt +0ca2 20400ce8 call set_wait_ack +0ca3 58000002 setarg 2 +0ca4 67e140cf store 2 ,mem_retransmission_cnt +0ca5 20600000 rtn + +prepare_tx_not_esco: +0ca6 24770000 nrtn attempt + +prepare_tx_not_sco: +0ca7 44a4c009 bpatch patch09_1 ,mem_patch09 +0ca8 20400a52 call context_check_all_wack +0ca9 24228cb8 nbranch prepare_tx_no_retransmit ,zero +0caa 6fe08048 fetch 1 ,mem_arq +0cab c3018cc1 bbit0 wack ,prepare_tx_pollnull + +prepare_tx_retransmit: +0cac c5028cc5 bmark1 mark_loopback ,prepare_tx_loopback +0cad 6fe080e4 fetch 1 ,mem_debug_config +0cae c2830ccb bbit1 debug_tx_pattern ,prepare_tx_txpat +0caf 6fe140cf fetch 2 ,mem_retransmission_cnt +0cb0 1fe0ffff increase -1 ,pdata +0cb1 67e140cf store 2 ,mem_retransmission_cnt +0cb2 203a0cb6 branch prepare_tx_nomore_retransmit ,blank +0cb3 6fe0c0cc fetch 1 ,mem_last_type +0cb4 98000200 iforce type +0cb5 20600000 rtn + +prepare_tx_nomore_retransmit: +0cb6 44a54009 bpatch patch09_2 ,mem_patch09 +0cb7 20400ebb call clear_got_tx + +prepare_tx_no_retransmit: +0cb8 20400f4d call check_esco_amaddr +0cb9 20208cc1 branch prepare_tx_pollnull ,true +0cba 204056fb call send_lmp +0cbb 20340ccf branch prepare_tx_sendlmp ,user +0cbc 6fe0804c fetch 1 ,mem_op +0cbd c2830cdb bbit1 op_txl2cap ,prepare_tx_sendl2cap +0cbe c5028cc5 bmark1 mark_loopback ,prepare_tx_loopback +0cbf 6fe080e4 fetch 1 ,mem_debug_config +0cc0 c2830ccb bbit1 debug_tx_pattern ,prepare_tx_txpat + +prepare_tx_pollnull: +0cc1 18000201 force type_poll ,type +0cc2 20748000 rtn master +0cc3 18000200 force type_null ,type +0cc4 20600000 rtn + +prepare_tx_loopback: +0cc5 44a5c009 bpatch patch09_3 ,mem_patch09 +0cc6 6fe0801a fetch 1 ,mem_rx_type +0cc7 98000200 iforce type +0cc8 c1808000 rtnne 1 +0cc9 18000200 force type_null ,type +0cca 20600000 rtn + +prepare_tx_txpat: +0ccb 6fe08a58 fetch 1 ,test_mode_packet_type +0ccc 1fe1020f and pdata ,0xf ,type +0ccd 79200005 set1 mark_loopback ,mark +0cce 20600000 rtn + +prepare_tx_sendlmp: +0ccf 18000213 force type_lmp ,type +0cd0 20400ce8 call set_wait_ack + +prepare_tx_ccm_edr_lmp: +0cd1 20400de1 call check_enc_ccm +0cd2 207a0000 rtn blank +0cd3 7041e403 jam 3 ,mem_llid +0cd4 6fe0838a fetch 1 ,mem_lmo_header_length +0cd5 1fe17ff8 and pdata ,0x1f8 ,pdata +0cd6 1fe97e00 rshift3 pdata ,pdata +0cd7 67e146b2 store 2 ,mem_ccm_len +0cd8 1fe22200 copy pdata ,rega +0cd9 da60038b arg mem_lmo_header_opcode ,regc +0cda 20206c9b branch ccm_br_enc_new + +prepare_tx_sendl2cap: +0cdb 20400cf1 call tx_l2cap_type +0cdc 20400ce8 call set_wait_ack + +prepare_tx_ccm_edr: +0cdd 20400de1 call check_enc_ccm +0cde 207a0000 rtn blank +0cdf 6fe0c1e5 fetch 1 ,mem_tx_lch +0ce0 1fe17e03 and_into 3 ,pdata +0ce1 67e0c1e4 store 1 ,mem_llid +0ce2 6fe141e6 fetch 2 ,mem_tx_len +0ce3 1fe22200 copy pdata ,rega +0ce4 67e146b2 store 2 ,mem_ccm_len +0ce5 6fe100bf fetch 2 ,mem_txptr +0ce6 1fe22600 copy pdata ,regc +0ce7 20206c9b branch ccm_br_enc_new + +set_wait_ack: +0ce8 44a64009 bpatch patch09_4 ,mem_patch09 +0ce9 68488048 fetcht 1 ,mem_arq +0cea 79200403 set1 wack ,temp +0ceb 60488048 storet 1 ,mem_arq +0cec 18227e00 deposit type +0ced 67e0c0cc store 1 ,mem_last_type +0cee 5800ffff setarg 0xffff +0cef 67e140cf store 2 ,mem_retransmission_cnt +0cf0 20600000 rtn + +tx_l2cap_type: +0cf1 44a6c009 bpatch patch09_5 ,mem_patch09 +0cf2 6fe0804d fetch 1 ,mem_state_map +0cf3 2feffe05 isolate1 smap_edr ,pdata +0cf4 6fe141e6 fetch 2 ,mem_tx_len +0cf5 20208d07 branch tx_l2cap_type_edr ,true +0cf6 18000203 force type_dm1 ,type +0cf7 1fe67c11 sub pdata ,17 ,null +0cf8 20610000 rtn positive +0cf9 18000204 force type_dh1 ,type +0cfa 1fe67c1b sub pdata ,27 ,null +0cfb 20610000 rtn positive +0cfc 1800020a force type_dm3 ,type +0cfd 1fe67c79 sub pdata ,121 ,null +0cfe 20610000 rtn positive +0cff 1800020b force type_dh3 ,type +0d00 1fe67cb7 sub pdata ,183 ,null +0d01 20610000 rtn positive +0d02 1800020e force type_dm5 ,type +0d03 1fe67ce0 sub pdata ,224 ,null +0d04 20610000 rtn positive +0d05 1800020f force type_dh5 ,type +0d06 20600000 rtn + +tx_l2cap_type_edr: +0d07 18000203 force type_dm1 ,type +0d08 1fe67c11 sub pdata ,17 ,null +0d09 20610000 rtn positive +0d0a 18000204 force type_dh1 ,type +0d0b 1fe67c36 sub pdata ,54 ,null +0d0c 20610000 rtn positive +0d0d 1800020a force type_dm3 ,type +0d0e d840016f arg 367 ,temp +0d0f 98467c00 isub temp ,null +0d10 24610000 nrtn positive +0d11 1800020e force type_dm5 ,type +0d12 d84002a7 arg 679 ,temp +0d13 98467c00 isub temp ,null +0d14 24610000 nrtn positive +0d15 1800020f force type_dh5 ,type +0d16 20600000 rtn + +slave_receive_master_slot: +0d17 6fe08031 fetch 1 ,mem_state +0d18 c3008d1c bbit0 state_insniff ,slave_receive_notsniff +0d19 6fe10033 fetch 2 ,mem_tsniff +0d1a 203a0d1c branch slave_receive_notsniff ,blank +0d1b 24370d1e nbranch slave_receive_sniff ,attempt + +slave_receive_notsniff: +0d1c 2040133c call rf_setup_time_master_slot + +slave_receive_access: +0d1d 1d00c201 add clke_bt ,1 ,bt_clk + +slave_receive_sniff: +0d1e 78287c00 enable swfine +0d1f 6fe1003f fetch 2 ,mem_rx_window +0d20 1fe37e00 rshift pdata ,pdata +0d21 6849015d fetcht 2 ,mem_param_pll_setup +0d22 9840fe00 iadd temp ,pdata +0d23 20401311 call ahead_window +0d24 20401140 call fetch_extm_bt_adr +0d25 18004803 force 0x03 ,freq_mode +0d26 20401122 call rx_radio_freq +0d27 20400c3b call init_rx_packet_flags +0d28 204012d8 call prep_crypt +0d29 44a74009 bpatch patch09_6 ,mem_patch09 +0d2a 6fe1003f fetch 2 ,mem_rx_window +0d2b 1fe37e00 rshift pdata ,pdata +0d2c 20401311 call ahead_window +0d2d 204012d3 call start_receiver +0d2e 7826fc00 enable decode_fec0 +0d2f 6fe1003f fetch 2 ,mem_rx_window +0d30 6849015b fetcht 2 ,mem_param_clke_cal +0d31 9840b600 iadd temp ,stop_watch +0d32 37c18400 correlate null ,timeout +0d33 1b420400 copy clke ,temp +0d34 604b0098 storet 6 ,mem_sync_clke +0d35 7846fc00 disable decode_fec0 +0d36 246c0000 nrtn sync +0d37 6fe1015b fetch 2 ,mem_param_clke_cal +0d38 1fe25200 copy pdata ,clke_rt +0d39 1c225000 copy bt_clk ,clke_bt +0d3a 20359473 branch lpm_adjust_clk ,wake +0d3b 20600000 rtn + +slave_conn_recv_packet: +0d3c 44a7c009 bpatch patch09_7 ,mem_patch09 +0d3d 20400d17 call slave_receive_master_slot +0d3e 242c114f nbranch shutdown_radio ,sync +0d3f 2040127d call save_rssi +0d40 c5888d44 bmark0 mark_testmode ,receive_packet +0d41 6fe109f6 fetch 2 ,mem_tst_pktcnt_sync +0d42 1fe0fe01 increase 1 ,pdata +0d43 67e109f6 store 2 ,mem_tst_pktcnt_sync + +receive_packet: +0d44 20404caf call rf_debug_rx_sync_line +0d45 1c230400 rshift bt_clk ,temp +0d46 18419c40 or temp ,0x40 ,white_init + +receive_packet_whitened: +0d47 44a8400a bpatch patch0a_0 ,mem_patch0a +0d48 7823fc00 enable enable_white +0d49 78257c00 enable enable_hec +0d4a 7825fc00 enable decode_fec1 +0d4b 09800003 parse demod ,bucket ,3 +0d4c 198cfe00 rshift8 pwindow ,pdata +0d4d 67e080ad store 1 ,mem_temp_am_addr +0d4e 09800004 parse demod ,bucket ,4 +0d4f 08008007 inject bucket ,7 +0d50 19827e00 copy pwindow ,pdata +0d51 67e0801a store 1 ,mem_rx_type +0d52 09800003 parse demod ,bucket ,3 +0d53 198cfe00 rshift8 pwindow ,pdata +0d54 67e080ae store 1 ,mem_temp_arq +0d55 6fe0801a fetch 1 ,mem_rx_type +0d56 1fe67c03 sub pdata ,3 ,null +0d57 20210d5c branch receive_packet_noedr ,positive +0d58 c0038d5c beq 7 ,receive_packet_noedr +0d59 6fe0804d fetch 1 ,mem_state_map +0d5a 2feffe05 isolate1 smap_edr ,pdata +0d5b 7920aa01 setflag true ,psk ,radio_ctrl + +receive_packet_noedr: +0d5c 44a8c00a bpatch patch0a_1 ,mem_patch0a +0d5d 09800008 parse demod ,bucket ,8 +0d5e 7845fc00 disable decode_fec1 +0d5f 78457c00 disable enable_hec +0d60 20230e63 branch error_header ,crc_failed +0d61 c5888d65 bmark0 mark_testmode ,receive_packet_amchk +0d62 6fe109f8 fetch 2 ,mem_tst_pktcnt_hec +0d63 1fe0fe01 increase 1 ,pdata +0d64 67e109f8 store 2 ,mem_tst_pktcnt_hec + +receive_packet_amchk: +0d65 44a9400a bpatch patch0a_2 ,mem_patch0a +0d66 6fe080ad fetch 1 ,mem_temp_am_addr +0d67 2fe00e00 compare 0 ,pdata ,0x07 +0d68 7920800a setflag true ,mark_am_addr_broadcast ,mark +0d69 20208d73 branch am_addr_ok ,true +0d6a a8800e00 icompare 0x07 ,am_addr +0d6b 20208d71 branch am_addr_match ,true +0d6c c5838e80 bmark0 mark_esco ,end_of_packet +0d6d 6fe08048 fetch 1 ,mem_arq +0d6e 793ffe05 set0 arqnx ,pdata +0d6f 79207e04 set1 flowx ,pdata +0d70 67e08048 store 1 ,mem_arq + +am_addr_match: +0d71 20404cb2 call rf_debug_rx_match_line +0d72 7836fc00 enable match + +am_addr_ok: +0d73 44a9c00a bpatch patch0a_3 ,mem_patch0a +0d74 6fe0801a fetch 1 ,mem_rx_type +0d75 1fe20200 icopy type +0d76 c5050d82 bmark1 mark_am_addr_broadcast ,arqn_bypass +0d77 684880ae fetcht 1 ,mem_temp_arq +0d78 6fe08048 fetch 1 ,mem_arq +0d79 793ffe00 set0 flow ,pdata +0d7a 284ffe00 isolate1 flow ,temp +0d7b 7920fe00 setflag true ,flow ,pdata +0d7c 284ffe01 isolate1 arqn ,temp +0d7d 7920fe01 setflag true ,arqn ,pdata +0d7e 67e08048 store 1 ,mem_arq +0d7f 284c0001 isolate0 arqn ,temp +0d80 20208d82 branch arqn_bypass ,true +0d81 20400ebb call clear_got_tx + +arqn_bypass: +0d82 44aa400a bpatch patch0a_4 ,mem_patch0a +0d83 d8400000 arg 0 ,temp +0d84 20401309 call reserve_slot +0d85 18217e0f and type ,0xf ,pdata +0d86 c0008d9e beq type_poll ,process_poll +0d87 c0000e80 beq type_null ,end_of_packet +0d88 c0010e8c beq type_fhs ,process_fhs +0d89 684880ae fetcht 1 ,mem_temp_arq +0d8a 6fe08048 fetch 1 ,mem_arq +0d8b a8400800 icompare 0x04 ,temp +0d8c 24208d90 nbranch rx_type_dispatch ,true +0d8d c5850d8f bmark0 mark_am_addr_broadcast ,failed_seqn +0d8e c3038d90 bbit0 bcast1 ,rx_type_dispatch + +failed_seqn: +0d8f 7920000f set1 mark_old_packet ,mark + +rx_type_dispatch: +0d90 44aac00a bpatch patch0a_5 ,mem_patch0a +0d91 18227e00 deposit type +0d92 c0018da0 beq type_dm1 ,process_dm1 +0d93 c0020da4 beq type_dh1 ,process_dh1 +0d94 c0040da3 beq type_3dh1 ,process_3dh1 +0d95 d8400004 arg 4 ,temp +0d96 20401309 call reserve_slot +0d97 c0050d9f beq type_dm3 ,process_dm3 +0d98 c0058da2 beq type_dh3 ,process_dh3 +0d99 d8400008 arg 8 ,temp +0d9a 20401309 call reserve_slot +0d9b c0070d9f beq type_dm5 ,process_dm5 +0d9c c0078da2 beq type_dh5 ,process_dh5 +0d9d 20600000 rtn + +process_poll: +0d9e 20200e80 branch end_of_packet + +process_dm3: + +process_dm5: +0d9f 79200010 set1 mark_longpacket ,mark + +process_dm1: +0da0 78267c00 enable decode_fec2 +0da1 20200da5 branch process_dmh + +process_dh3: + +process_dh5: +0da2 79200010 set1 mark_longpacket ,mark + +process_3dh1: +0da3 79202a02 set1 psk3m ,radio_ctrl + +process_dh1: +0da4 7826fc00 enable decode_fec0 + +process_dmh: +0da5 44ab400a bpatch patch0a_6 ,mem_patch0a +0da6 c5198e80 bmark1 mark_first_packet ,end_of_packet +0da7 c5008e80 bmark1 mark_rxbuf_inuse ,end_of_packet +0da8 2aac0001 isolate0 psk ,radio_ctrl +0da9 20208db2 branch process_dmh_noedr ,true +0daa 7843fc00 disable enable_white +0dab 7826fc00 enable decode_fec0 +0dac 78467c00 disable decode_fec2 +0dad 1c409602 add clkn_bt ,2 ,timeup +0dae 34530400 correlate clkn_bt ,meet +0daf 242c0e6f nbranch error_payload ,sync +0db0 79200010 set1 mark_longpacket ,mark +0db1 7823fc00 enable enable_white + +process_dmh_noedr: +0db2 44abc00a bpatch patch0a_7 ,mem_patch0a +0db3 78277c00 enable encrypt +0db4 7824fc00 enable enable_crc +0db5 09800003 parse demod ,bucket ,3 +0db6 198cfe00 rshift8 pwindow ,pdata +0db7 67e080e5 store 1 ,mem_lch_code +0db8 09800005 parse demod ,bucket ,5 +0db9 c5080dbd bmark1 mark_longpacket ,process_dmh_long +0dba 19897200 rshift3 pwindow ,loopcnt +0dbb 1f297200 rshift3 loopcnt ,loopcnt +0dbc 20200dc0 branch process_dmh_common + +process_dmh_long: +0dbd 09800005 parse demod ,bucket ,5 +0dbe 19837200 rshift pwindow ,loopcnt +0dbf 09800003 parse demod ,bucket ,3 + +process_dmh_common: +0dc0 44ac400b bpatch patch0b_0 ,mem_patch0b +0dc1 1f227e00 deposit loopcnt +0dc2 67e100af store 2 ,mem_len +0dc3 203a0dd8 branch process_dmh_data_0 ,blank +0dc4 20400de1 call check_enc_ccm +0dc5 203a0dc8 branch process_dmh_common2 ,blank + +process_dmh_common2_ccm: +0dc6 1f20f204 increase 4 ,loopcnt +0dc7 1f227e00 deposit loopcnt + +process_dmh_common2: +0dc8 9ea67c00 isub mask3ff ,null +0dc9 20210e6f branch error_payload ,positive +0dca 44acc00b bpatch patch0b_1 ,mem_patch0b +0dcb 793f8000 set0 mark_fhs_eir ,mark +0dcc 6fe080e5 fetch 1 ,mem_lch_code +0dcd 1fe17e03 and_into 0x03 ,pdata +0dce d8a000cf arg mem_rxbuf ,contw +0dcf c0018de6 beq llid_lmp ,process_lmp +0dd0 c5088dd6 bmark1 mark_testmode ,process_dmh_common2_testmode +0dd1 6fe080e5 fetch 1 ,mem_lch_code +0dd2 1fe17e03 and_into 0x03 ,pdata +0dd3 c0010deb beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +0dd4 c0008dff beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +0dd5 20200e6f branch error_payload + +process_dmh_common2_testmode: +0dd6 d8a01000 arg mem_l2cap_rxbuff1 ,contw +0dd7 20200e10 branch process_dmh_data + +process_dmh_data_0: +0dd8 20400de1 call check_enc_ccm +0dd9 203a0e14 branch process_dmh_data_end ,blank +0dda 58000000 setarg 0 +0ddb 67e146b2 store 2 ,mem_ccm_len +0ddc 09800020 parse demod ,bucket ,32 +0ddd 1fef7e00 rshift32 pdata ,pdata +0dde 1fecfe00 rshift8 pdata ,pdata +0ddf 67e20273 store 4 ,mem_le_peer_mic +0de0 20200e14 branch process_dmh_data_end + +check_enc_ccm: +0de1 6fe0804d fetch 1 ,mem_state_map +0de2 c3017e60 bbit0 smap_encryption ,enable_blank +0de3 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +0de4 c0817e60 bne encapsulated_minor_type_p256 ,enable_blank +0de5 20207e5e branch disable_blank + +process_lmp: +0de6 6fe100af fetch 2 ,mem_len +0de7 1fe67c11 sub pdata ,17 ,null +0de8 24210e6f nbranch error_payload ,positive +0de9 c5078e50 bmark1 mark_old_packet ,ack_payload +0dea 20200e10 branch process_dmh_data + +process_dmh_data_l2cap_start_pkt: +0deb 44ad400b bpatch patch0b_2 ,mem_patch0b +0dec c5078e50 bmark1 mark_old_packet ,ack_payload +0ded 6fe100af fetch 2 ,mem_len +0dee d84002e0 arg 0x2e0 ,temp +0def 98467c00 isub temp ,null +0df0 20210e6f branch error_payload ,positive +0df1 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0df2 c3000df5 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +0df3 c3008dfa bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +0df4 20200e80 branch end_of_packet + +process_dmh_data_into_buff1: +0df5 70031201 jam 1 ,mem_l2cap_rxbuff_new +0df6 6fe1030e fetch 2 ,mem_l2cap_rxbuff1_len +0df7 c0800e80 bne 0 ,end_of_packet +0df8 d8a01000 arg mem_l2cap_rxbuff1 ,contw +0df9 20200e10 branch process_dmh_data + +process_dmh_data_into_buff2: +0dfa 70031202 jam 2 ,mem_l2cap_rxbuff_new +0dfb 6fe10310 fetch 2 ,mem_l2cap_rxbuff2_len +0dfc c0800e80 bne 0 ,end_of_packet +0dfd d8a01400 arg mem_l2cap_rxbuff2 ,contw +0dfe 20200e10 branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt: +0dff 44adc00b bpatch patch0b_3 ,mem_patch0b +0e00 c5078e50 bmark1 mark_old_packet ,ack_payload +0e01 6fe100af fetch 2 ,mem_len +0e02 d84002e0 arg 0x2e0 ,temp +0e03 98467c00 isub temp ,null +0e04 20210e6f branch error_payload ,positive +0e05 6fe08312 fetch 1 ,mem_l2cap_rxbuff_new +0e06 c0008e09 beq 1 ,process_dmh_data_l2cap_continue_pkt1 +0e07 c0010e0d beq 2 ,process_dmh_data_l2cap_continue_pkt2 +0e08 20200e80 branch end_of_packet + +process_dmh_data_l2cap_continue_pkt1: +0e09 d8a01000 arg mem_l2cap_rxbuff1 ,contw +0e0a 6fe1030e fetch 2 ,mem_l2cap_rxbuff1_len +0e0b 98a08a00 iadd contw ,contw +0e0c 20200e10 branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt2: +0e0d d8a01400 arg mem_l2cap_rxbuff2 ,contw +0e0e 6fe10310 fetch 2 ,mem_l2cap_rxbuff2_len +0e0f 98a08a00 iadd contw ,contw + +process_dmh_data: +0e10 09800008 parse demod ,bucket ,8 +0e11 19897e00 rshift3 pwindow ,pdata +0e12 e7e08005 istore 1 ,contw +0e13 c2000e10 loop process_dmh_data + +process_dmh_data_end: +0e14 44ae400b bpatch patch0b_4 ,mem_patch0b +0e15 09800010 parse demod ,bucket ,16 +0e16 20230e69 branch error_payload_crc ,crc_failed +0e17 20400de1 call check_enc_ccm +0e18 20407e58 call enable_user2 +0e19 245a6ccc ncall ccm_br_decrypt_new ,blank +0e1a 24360e70 nbranch error_mic_error ,user2 +0e1b 20404cae call rf_debug_rx_crc_line +0e1c 6fe0c5f3 fetch 1 ,mem_l2cap_flow_ctrl_flag +0e1d c0008e70 beq l2cap_flow_ctrl_enable ,flow_ctrl +0e1e c5088e3d bmark1 mark_testmode ,process_dmh_cont +0e1f c5078e7d bmark1 mark_old_packet ,redundant_payload +0e20 6fe080e5 fetch 1 ,mem_lch_code +0e21 2fe00603 compare 3 ,pdata ,3 +0e22 20208e3d branch process_dmh_cont ,true +0e23 6fe100af fetch 2 ,mem_len +0e24 203a0e3d branch process_dmh_cont ,blank +0e25 44aec00b bpatch patch0b_5 ,mem_patch0b +0e26 6fe08312 fetch 1 ,mem_l2cap_rxbuff_new +0e27 c0008e2a beq 1 ,process_l2cap_pass_crc_buff1 +0e28 c0010e34 beq 2 ,process_l2cap_pass_crc_buff2 +0e29 2020137a branch assert + +process_l2cap_pass_crc_buff1: +0e2a 6fe1030e fetch 2 ,mem_l2cap_rxbuff1_len +0e2b 684900af fetcht 2 ,mem_len +0e2c 9840fe00 iadd temp ,pdata +0e2d 67e1030e store 2 ,mem_l2cap_rxbuff1_len +0e2e 207a0000 rtn blank +0e2f 68491000 fetcht 2 ,mem_l2cap_rxbuff1 +0e30 18408404 increase 4 ,temp +0e31 98467c00 isub temp ,null +0e32 20428f6f call l2cap_buff1_inuse ,zero +0e33 20200e3d branch process_dmh_cont + +process_l2cap_pass_crc_buff2: +0e34 6fe10310 fetch 2 ,mem_l2cap_rxbuff2_len +0e35 684900af fetcht 2 ,mem_len +0e36 9840fe00 iadd temp ,pdata +0e37 67e10310 store 2 ,mem_l2cap_rxbuff2_len +0e38 207a0000 rtn blank +0e39 68491400 fetcht 2 ,mem_l2cap_rxbuff2 +0e3a 18408404 add temp ,4 ,temp +0e3b 98467c00 isub temp ,null +0e3c 20428f73 call l2cap_buff2_inuse ,zero + +process_dmh_cont: +0e3d 44af400b bpatch patch0b_6 ,mem_patch0b +0e3e 6848804d fetcht 1 ,mem_state_map +0e3f 6fe080e5 fetch 1 ,mem_lch_code +0e40 2fe00603 compare 3 ,pdata ,0x03 +0e41 79208406 setflag true ,smap_rxlmp ,temp +0e42 7d208407 nsetflag true ,smap_rxl2cap ,temp +0e43 6048804d storet 1 ,mem_state_map +0e44 24208e46 nbranch process_dmh_cont_rxbuf_not_use ,true +0e45 79200001 set1 mark_rxbuf_inuse ,mark + +process_dmh_cont_rxbuf_not_use: +0e46 c5888e50 bmark0 mark_testmode ,ack_payload +0e47 284ffe06 isolate1 smap_rxlmp ,temp +0e48 20208e50 branch ack_payload ,true +0e49 6fe109fa fetch 2 ,mem_tst_pktcnt_crc +0e4a 1fe0fe01 increase 1 ,pdata +0e4b 67e109fa store 2 ,mem_tst_pktcnt_crc +0e4c 79200005 set1 mark_loopback ,mark +0e4d 793f8407 set0 smap_rxl2cap ,temp +0e4e 793f8001 set0 mark_rxbuf_inuse ,mark +0e4f 6048804d storet 1 ,mem_state_map + +ack_payload: +0e50 44afc00b bpatch patch0b_7 ,mem_patch0b +0e51 20400de1 call check_enc_ccm +0e52 245a6cf3 ncall ccm_br_pcnt_rx_add ,blank +0e53 684880ae fetcht 1 ,mem_temp_arq +0e54 6fe08048 fetch 1 ,mem_arq +0e55 79207e05 set1 arqnx ,pdata +0e56 284ffe02 isolate1 seqn ,temp +0e57 7920fe02 setflag true ,seqn ,pdata +0e58 280ffe0a isolate1 mark_am_addr_broadcast ,mark +0e59 7920fe07 setflag true ,bcast1 ,pdata +0e5a 67e08048 store 1 ,mem_arq +0e5b 6fe100af fetch 2 ,mem_len +0e5c 243a0e80 nbranch end_of_packet ,blank +0e5d 6fe0804d fetch 1 ,mem_state_map +0e5e 793ffe07 set0 smap_rxl2cap ,pdata +0e5f 67e0804d store 1 ,mem_state_map +0e60 6fe080e5 fetch 1 ,mem_lch_code +0e61 2fe00e01 compare 0x01 ,pdata ,0x07 +0e62 20200e80 branch end_of_packet + +error_header: +0e63 44b0400c bpatch patch0c_0 ,mem_patch0c +0e64 7856fc00 disable match +0e65 6fe1001b fetch 2 ,mem_rx_hec_err +0e66 1fe0fe01 increase 1 ,pdata +0e67 67e1001b store 2 ,mem_rx_hec_err +0e68 20200e80 branch end_of_packet + +error_payload_crc: +0e69 6fe1001d fetch 2 ,mem_rx_crc_err +0e6a 1fe0fe01 increase 1 ,pdata +0e6b 67e1001d store 2 ,mem_rx_crc_err +0e6c 20400e71 call discard_pkt +0e6d c5888e6f bmark0 mark_testmode ,error_payload +0e6e 79200005 set1 mark_loopback ,mark + +error_payload: +0e6f 20200e80 branch end_of_packet + +flow_ctrl: + +error_mic_error: +0e70 20200e69 branch error_payload_crc + +discard_pkt: +0e71 44b0c00c bpatch patch0c_1 ,mem_patch0c +0e72 6fe080e5 fetch 1 ,mem_lch_code +0e73 2fe00603 compare 3 ,pdata ,0x03 +0e74 24208e79 nbranch discard_pkt_l2cap ,true + +discard_pkt_lmp: +0e75 6848804d fetcht 1 ,mem_state_map +0e76 793f8406 set0 smap_rxlmp ,temp +0e77 6048804d storet 1 ,mem_state_map +0e78 20600000 rtn + +discard_pkt_l2cap: +0e79 6848804d fetcht 1 ,mem_state_map +0e7a 793f8407 set0 smap_rxl2cap ,temp +0e7b 6048804d storet 1 ,mem_state_map +0e7c 20600000 rtn + +redundant_payload: +0e7d 6fe08048 fetch 1 ,mem_arq +0e7e 79207e05 set1 arqnx ,pdata +0e7f 67e08048 store 1 ,mem_arq + +end_of_packet: +0e80 44b1400c bpatch patch0c_2 ,mem_patch0c +0e81 784efc00 disable encode_fec0 +0e82 784e7c00 disable encode_fec2 +0e83 7846fc00 disable decode_fec0 +0e84 78467c00 disable decode_fec2 +0e85 7844fc00 disable enable_crc +0e86 78477c00 disable encrypt +0e87 7843fc00 disable enable_white +0e88 2030914f branch shutdown_radio ,is_rx +0e89 37d38200 until null ,tx_clear +0e8a 20000064 nop 100 +0e8b 2020114f branch shutdown_radio + +process_fhs: +0e8c 44b1c00c bpatch patch0c_3 ,mem_patch0c +0e8d 7824fc00 enable enable_crc +0e8e 78267c00 enable decode_fec2 +0e8f 09800048 parse demod ,bucket ,72 +0e90 2feffe3a isolate1 58 ,pdata +0e91 79208000 setflag true ,mark_fhs_eir ,mark +0e92 1c020400 copy bt_adr ,temp +0e93 57e04000 ialigned bt_adr +0e94 57e03c00 ialigned fhs0 +0e95 782afc00 pulse recalc +0e96 380bffff setsect 2 ,0xfffff +0e97 380cffff setsect 3 ,0x0ffff +0e98 20000020 nop 32 +0e99 29a80000 iverify fhs_parity +0e9a 1d827e00 deposit lap +0e9b 67e180c8 store 3 ,extm_lap +0e9c 1da27e00 deposit uap +0e9d 67e080cb store 1 ,extm_uap +0e9e 18424000 copy temp ,bt_adr +0e9f 20208ea1 branch fhs_parity_ok ,true +0ea0 20200e6f branch error_payload + +fhs_parity_ok: +0ea1 44b2400c bpatch patch0c_4 ,mem_patch0c +0ea2 09800048 parse demod ,bucket ,72 +0ea3 57e03e00 ialigned fhs1 +0ea4 57e00800 ialigned am_addr +0ea5 57e05c00 ialigned nap +0ea6 57e02400 ialigned regb +0ea7 18007e00 force 0 ,pdata +0ea8 09800010 parse demod ,bucket ,16 +0ea9 20230e6f branch error_payload ,crc_failed +0eaa 20404cae call rf_debug_rx_crc_line +0eab 5ffffffc setarg 0x0ffffffc +0eac 9a417e00 iand regb ,pdata +0ead 67e200b5 store 4 ,mem_clke_bt +0eae 1ba27e00 deposit fhs_class +0eaf 67e180c5 store 3 ,extm_class +0eb0 1b827e00 deposit fhs_misc +0eb1 67e080c3 store 1 ,extm_fhs_misc +0eb2 18827e00 deposit am_addr +0eb3 67e080c4 store 1 ,extm_newconn_am_addr +0eb4 1dc27e00 deposit nap +0eb5 67e100cc store 2 ,extm_nap +0eb6 1c227e00 deposit bt_clk +0eb7 08008220 inject rxf ,32 +0eb8 28201e02 compare type_fhs ,type ,0x0f +0eb9 7920800b setflag true ,mark_fhs_already_good ,mark +0eba 20200e80 branch end_of_packet + +clear_got_tx: +0ebb 44b2c00c bpatch patch0c_5 ,mem_patch0c +0ebc 6fe08048 fetch 1 ,mem_arq +0ebd c4018000 rtnbit0 wack +0ebe 793ffe03 set0 wack ,pdata +0ebf 79407e06 setflip seqnx ,pdata +0ec0 67e08048 store 1 ,mem_arq +0ec1 20400de1 call check_enc_ccm +0ec2 245a6cb9 ncall ccm_br_pcnt_tx_add ,blank +0ec3 6fe0c0cc fetch 1 ,mem_last_type +0ec4 c0098ed2 beq type_lmp ,clear_got_txlmp +0ec5 c1038000 rtneq type_hv3 +0ec6 6fe0804c fetch 1 ,mem_op +0ec7 c4030000 rtnbit0 op_txl2cap ,pdata +0ec8 793ffe06 set0 op_txl2cap ,pdata +0ec9 79207e07 set1 op_pkt_comp ,pdata +0eca 67e0804c store 1 ,mem_op +0ecb 793f8002 set0 mark_tx_l2cap ,mark +0ecc 6fe144d6 fetch 2 ,mem_l2cap_tx_multi_offset +0ecd 247a0000 nrtn blank +0ece 6fe0804c fetch 1 ,mem_op +0ecf 793ffe07 set0 op_pkt_comp ,pdata +0ed0 67e0804c store 1 ,mem_op +0ed1 202052e0 branch l2cap_malloc_free + +clear_got_txlmp: +0ed2 44b3400c bpatch patch0c_6 ,mem_patch0c +0ed3 6fe0c5f6 fetch 1 ,mem_lmo_header_opcode_x +0ed4 1fe37e00 rshift pdata ,pdata +0ed5 c0088ee5 beq lmp_start_encryption_req ,start_encryption +0ed6 c0090eef beq lmp_stop_encryption_req ,stop_encryption +0ed7 c00c0f16 beq lmp_unsniff_req ,sniff_exit +0ed8 c03f8edd beq lmp_escape ,clear_lmp_escape +0ed9 c1818000 rtnne lmp_accepted +0eda 6fe0838c fetch 1 ,mem_lmo_payload +0edb c0088ee0 beq lmp_start_encryption_req ,clear_send_setup_complete +0edc 20600000 rtn + +clear_lmp_escape: +0edd 6fe0838c fetch 1 ,mem_lmo_payload +0ede 79207e07 set1 7 ,pdata +0edf 20600000 rtn + +clear_send_setup_complete: +0ee0 20748000 rtn master +0ee1 6fe08031 fetch 1 ,mem_state +0ee2 c3820000 rtnbit1 state_conn_comp +0ee3 70007d31 jam lmp_setup_complete ,mem_lmo_opcode2 +0ee4 20600000 rtn + +start_encryption: +0ee5 44b3c00c bpatch patch0c_7 ,mem_patch0c +0ee6 6fe0804d fetch 1 ,mem_state_map +0ee7 79207e02 set1 smap_encryption ,pdata +0ee8 67e0804d store 1 ,mem_state_map +0ee9 70801101 jam 1 ,core_encrypt +0eea 18007e00 force 0 ,pdata +0eeb 67e2c6a1 store 5 ,mem_ccm_pcnt_rx +0eec 79207e25 set1 br_ccm_directionbit ,pdata +0eed 67e2c69c store 5 ,mem_ccm_pcnt_tx +0eee 20600000 rtn + +stop_encryption: +0eef 44b4400d bpatch patch0d_0 ,mem_patch0d +0ef0 6fe0804d fetch 1 ,mem_state_map +0ef1 793ffe02 set0 smap_encryption ,pdata +0ef2 67e0804d store 1 ,mem_state_map +0ef3 70801100 jam 0 ,core_encrypt +0ef4 20600000 rtn + +sniff_init: +0ef5 44b4c00d bpatch patch0d_1 ,mem_patch0d +0ef6 1c40a203 add clkn_bt ,3 ,rega +0ef7 20348ef9 branch sniff_init_master ,master +0ef8 1d00a203 add clke_bt ,3 ,rega + +sniff_init_master: +0ef9 68490033 fetcht 2 ,mem_tsniff +0efa 1a227e00 deposit rega +0efb 793ffe1b set0 27 ,pdata +0efc 9846fc00 idiv temp +0efd 6fe10076 fetch 2 ,mem_dsniff +0efe 20407def call wait_div_end +0eff 18072600 remainder regc +0f00 9a667e00 isub regc ,pdata +0f01 20210f03 branch sniff_init_nowrap ,positive +0f02 9840fe00 iadd temp ,pdata + +sniff_init_nowrap: +0f03 9a20fe00 iadd rega ,pdata +0f04 67e20035 store 4 ,mem_sniff_anchor +0f05 70464200 jam switch_flag_init ,mem_switch_flag +0f06 6fe08031 fetch 1 ,mem_state +0f07 79207e01 set1 state_insniff ,pdata +0f08 67e08031 store 1 ,mem_state +0f09 6fe08074 fetch 1 ,mem_sniff_attempt +0f0a 67e08089 store 1 ,mem_current_sniff_attempt +0f0b 58000000 setarg 0 +0f0c 67e1c16e store 3 ,mem_sniff_rcv +0f0d 67e1c171 store 3 ,mem_sniff_lost +0f0e 67e0c15e store 1 ,mem_sniff_unint_lost +0f0f 70095b0b jam bt_evt_enter_sniff ,mem_fifo_temp +0f10 20407871 call ui_ipc_send_event +0f11 6fe140c8 fetch 2 ,mem_rx_window_sniff +0f12 67e1003f store 2 ,mem_rx_window +0f13 24748000 nrtn master +0f14 18808fff add am_addr ,-1 ,queue +0f15 20600000 rtn + +sniff_exit: +0f16 44b5400d bpatch patch0d_2 ,mem_patch0d +0f17 6fe08031 fetch 1 ,mem_state +0f18 c4008000 rtnbit0 state_insniff +0f19 793ffe01 set0 state_insniff ,pdata +0f1a 67e08031 store 1 ,mem_state +0f1b 6fe140c6 fetch 2 ,mem_rx_window_init +0f1c 67e1003f store 2 ,mem_rx_window +0f1d 7855fc00 disable wake +0f1e 70095b0c jam bt_evt_exit_sniff ,mem_fifo_temp +0f1f 20207871 branch ui_ipc_send_event + +check_attempt: +0f20 44b5c00d bpatch patch0d_3 ,mem_patch0d +0f21 78377c00 enable attempt +0f22 6fe08031 fetch 1 ,mem_state +0f23 c2808f2d bbit1 state_insniff ,check_attempt_sniff +0f24 c6088000 rtnmark1 mark_testmode +0f25 6fe08048 fetch 1 ,mem_arq +0f26 c3818000 rtnbit1 wack +0f27 6fe08049 fetch 1 ,mem_lmp_to_send +0f28 247a0000 nrtn blank +0f29 6fe0804c fetch 1 ,mem_op +0f2a c3830000 rtnbit1 op_txl2cap + +check_attempt_nomore: +0f2b 18007e00 force 0 ,pdata +0f2c 20600000 rtn + +check_attempt_sniff: +0f2d c3010f37 bbit0 state_insco ,check_attempt_not_sco +0f2e 6fe08089 fetch 1 ,mem_current_sniff_attempt +0f2f c0010f33 beq 2 ,check_attempt_sniff_restore_sco +0f30 6fe08048 fetch 1 ,mem_arq +0f31 c2818f40 bbit1 wack ,check_attempt_notimeout +0f32 c5840f40 bmark0 mark_esco_rxok ,check_attempt_notimeout + +check_attempt_sniff_restore_sco: +0f33 24348f40 nbranch check_attempt_notimeout ,master +0f34 6fe08049 fetch 1 ,mem_lmp_to_send +0f35 243a0f40 nbranch check_attempt_notimeout ,blank + +check_attempt_sco_master: +0f36 20200f2b branch check_attempt_nomore + +check_attempt_not_sco: +0f37 6fe08089 fetch 1 ,mem_current_sniff_attempt +0f38 c0808f40 bne 1 ,check_attempt_notimeout +0f39 6fe0808a fetch 1 ,mem_current_sniff_timeout +0f3a 203a0f40 branch check_attempt_notimeout ,blank +0f3b 1fe0ffff increase -1 ,pdata +0f3c 67e0808a store 1 ,mem_current_sniff_timeout +0f3d 6fe08048 fetch 1 ,mem_arq +0f3e c3818000 rtnbit1 wack +0f3f 24768000 nrtn match + +check_attempt_notimeout: +0f40 6fe08089 fetch 1 ,mem_current_sniff_attempt +0f41 1fe0ffff increase -1 ,pdata +0f42 67e08089 store 1 ,mem_current_sniff_attempt +0f43 20600000 rtn + +sniff_check_window: +0f44 44b6400d bpatch patch0d_4 ,mem_patch0d +0f45 78487c00 disable swfine +0f46 18423600 copy temp ,stop_watch +0f47 20400a6f call context_search_sniff_window +0f48 78547c00 disable user +0f49 24628000 nrtn zero +0f4a 18003600 force 0 ,stop_watch +0f4b 78347c00 enable user +0f4c 20600000 rtn + +check_esco_amaddr: +0f4d 6fe0c15d fetch 1 ,mem_esco_addr +0f4e a881fe00 icompare 0xff ,am_addr +0f4f 20600000 rtn + +parse_l2cap: +0f50 44b6c00d bpatch patch0d_5 ,mem_patch0d +0f51 793f8001 set0 mark_rxbuf_inuse ,mark + +parse_l2cap_cont: +0f52 70031b00 jam l2cap_rx_clear ,mem_l2cap_rx_done +0f53 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0f54 207a0000 rtn blank +0f55 2feffe00 isolate1 l2cap_inuse_buff1 ,pdata +0f56 d8c01000 arg mem_l2cap_rxbuff1 ,contr +0f57 2040cdd6 call process_rx_l2cap_pkt ,true +0f58 44b7400d bpatch patch0d_6 ,mem_patch0d +0f59 6fe0831b fetch 1 ,mem_l2cap_rx_done +0f5a c0008f63 beq l2cap_rx_done ,parse_l2cap_release_buff1 +0f5b 70031b00 jam l2cap_rx_clear ,mem_l2cap_rx_done +0f5c 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0f5d c4008000 rtnbit0 l2cap_inuse_buff2 +0f5e d8c01400 arg mem_l2cap_rxbuff2 ,contr +0f5f 20404dd6 call process_rx_l2cap_pkt +0f60 6fe0831b fetch 1 ,mem_l2cap_rx_done +0f61 c0008f69 beq l2cap_rx_done ,parse_l2cap_release_buff2 +0f62 20600000 rtn + +parse_l2cap_release_buff1: +0f63 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0f64 793ffe00 set0 l2cap_inuse_buff1 ,pdata +0f65 67e08314 store 1 ,mem_l2cap_rxbuff_inuse +0f66 58000000 setarg 0 +0f67 67e1030e store 2 ,mem_l2cap_rxbuff1_len +0f68 20600000 rtn + +parse_l2cap_release_buff2: +0f69 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0f6a 793ffe01 set0 l2cap_inuse_buff2 ,pdata +0f6b 67e08314 store 1 ,mem_l2cap_rxbuff_inuse +0f6c 58000000 setarg 0 +0f6d 67e10310 store 2 ,mem_l2cap_rxbuff2_len +0f6e 20600000 rtn + +l2cap_buff1_inuse: +0f6f 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0f70 79207e00 set1 l2cap_inuse_buff1 ,pdata +0f71 67e08314 store 1 ,mem_l2cap_rxbuff_inuse +0f72 20600000 rtn + +l2cap_buff2_inuse: +0f73 6fe08314 fetch 1 ,mem_l2cap_rxbuff_inuse +0f74 79207e01 set1 l2cap_inuse_buff2 ,pdata +0f75 67e08314 store 1 ,mem_l2cap_rxbuff_inuse +0f76 20600000 rtn + +slave_send_access: +0f77 44b7c00d bpatch patch0d_7 ,mem_patch0d +0f78 1d00c201 add clke_bt ,1 ,bt_clk +0f79 20401140 call fetch_extm_bt_adr +0f7a 18004803 force 0x03 ,freq_mode +0f7b 20401128 call tx_radio_freq +0f7c 2040133e call start_transmitter +0f7d 2040134c call start_tx_external +0f7e 20201351 branch send_access_word + +slave_conn_send_packet: +0f7f 44b8400e bpatch patch0e_0 ,mem_patch0e +0f80 2040133a call rf_setup_time_slave_slot +0f81 1d027e00 deposit clke_bt +0f82 684a40d1 fetcht 4 ,mem_next_btclk +0f83 98467e00 isub temp ,pdata +0f84 c1808000 rtnne 1 +0f85 28203e00 compare type_null ,type ,0x1f +0f86 24208f89 nbranch slave_conn_send_access ,true +0f87 6fe0801a fetch 1 ,mem_rx_type +0f88 207a0000 rtn blank + +slave_conn_send_access: +0f89 20400f77 call slave_send_access + +transmit_packet: +0f8a 28203e10 compare type_id ,type ,0x1f +0f8b 20208e80 branch end_of_packet ,true +0f8c 1c230400 rshift bt_clk ,temp +0f8d 18419c40 or temp ,0x40 ,white_init + +transmit_packet_whitened: +0f8e 44b8c00e bpatch patch0e_1 ,mem_patch0e +0f8f 7823fc00 enable enable_white +0f90 78257c00 enable enable_hec +0f91 782dfc00 enable encode_fec1 +0f92 793f8010 set0 mark_longpacket ,mark +0f93 18827e00 deposit am_addr +0f94 08008603 inject mod ,3 +0f95 18227e00 deposit type +0f96 08008604 inject mod ,4 +0f97 6fe08048 fetch 1 ,mem_arq +0f98 08008004 inject bucket ,4 +0f99 08008603 inject mod ,3 +0f9a 78247c00 enable enable_parity +0f9b 08008608 inject mod ,8 +0f9c 784dfc00 disable encode_fec1 +0f9d 78447c00 disable enable_parity +0f9e 78457c00 disable enable_hec +0f9f 793faa02 set0 psk3m ,radio_ctrl +0fa0 d8400000 arg 0 ,temp +0fa1 20401309 call reserve_slot +0fa2 44b9400e bpatch patch0e_2 ,mem_patch0e +0fa3 18217e1f and type ,0x1f ,pdata +0fa4 c0098fd2 beq type_lmp ,transmit_lmp +0fa5 c0000e80 beq type_null ,end_of_packet +0fa6 c0008e80 beq type_poll ,end_of_packet +0fa7 c0010fb3 beq type_fhs ,transmit_fhs +0fa8 c0018fe1 beq type_dm1 ,transmit_dm1 +0fa9 c0020fe7 beq type_dh1 ,transmit_dh1 +0faa c0040fe6 beq type_3dh1 ,transmit_3dh1 +0fab d8400004 arg 4 ,temp +0fac 20401309 call reserve_slot +0fad c0050fe3 beq type_dm3 ,transmit_dm3 +0fae c0058fe9 beq type_dh3 ,transmit_dh3 +0faf d8400008 arg 8 ,temp +0fb0 20401309 call reserve_slot +0fb1 c0078fe9 beq type_dh5 ,transmit_dh5 +0fb2 20200fe3 branch transmit_dm5 + +transmit_fhs: +0fb3 44b9c00e bpatch patch0e_3 ,mem_patch0e +0fb4 6fe080e6 fetch 1 ,mem_fhs_am_addr +0fb5 1fe20800 icopy am_addr +0fb6 6fe0808e fetch 1 ,mem_fhs_misc +0fb7 1fe23800 icopy fhs_misc +0fb8 6fe1c0b2 fetch 3 ,mem_class +0fb9 1fe23a00 icopy fhs_class +0fba 6fe140ac fetch 2 ,mem_nap +0fbb 1fe25c00 icopy nap +0fbc 7824fc00 enable enable_crc +0fbd 782e7c00 enable encode_fec2 +0fbe 1c022200 copy bt_adr ,rega +0fbf 20401138 call fetch_self_bt_adr +0fc0 782afc00 pulse recalc +0fc1 20000020 nop 32 +0fc2 1c221600 copy bt_clk ,timeup +0fc3 6fe200b1 fetch 4 ,mem_clkn_bt +0fc4 1fe24200 icopy bt_clk +0fc5 53c07e00 preload fhs0 +0fc6 79207e3a set1 58 ,pdata +0fc7 08008648 inject mod ,72 +0fc8 53e07e00 preload fhs1 +0fc9 08008648 inject mod ,72 +0fca 19624200 copy timeup ,bt_clk +0fcb 1a224000 copy rega ,bt_adr +0fcc 78247c00 enable enable_parity +0fcd 08008610 inject mod ,16 +0fce 78447c00 disable enable_parity +0fcf 20200e80 branch end_of_packet + +transmit_lmp_ccm: +0fd0 78477c00 disable encrypt +0fd1 20200fd6 branch transmit_lmp_common + +transmit_lmp: +0fd2 44ba400e bpatch patch0e_4 ,mem_patch0e +0fd3 20400de1 call check_enc_ccm +0fd4 243a0fd0 nbranch transmit_lmp_ccm ,blank +0fd5 78277c00 enable encrypt + +transmit_lmp_common: +0fd6 7824fc00 enable enable_crc +0fd7 782e7c00 enable encode_fec2 +0fd8 6fe0838a fetch 1 ,mem_lmo_header_length +0fd9 1fe105f8 and pdata ,0x1f8 ,temp +0fda d8c0038a arg mem_lmo_header_length ,contr +0fdb 18408408 increase 8 ,temp +0fdc 18497200 rshift3 temp ,loopcnt + +transmit_lmp_loop: +0fdd efe08006 ifetch 1 ,contr +0fde 08008608 inject mod ,8 +0fdf c2000fdd loop transmit_lmp_loop +0fe0 20201013 branch transmit_end + +transmit_dm1: +0fe1 782e7c00 enable encode_fec2 +0fe2 20200fec branch transmit_dmh + +transmit_dm3: + +transmit_dm5: +0fe3 782e7c00 enable encode_fec2 +0fe4 79200010 set1 mark_longpacket ,mark +0fe5 20200fec branch transmit_dmh + +transmit_3dh1: +0fe6 79202a02 set1 psk3m ,radio_ctrl + +transmit_dh1: +0fe7 782efc00 enable encode_fec0 +0fe8 20200fec branch transmit_dmh + +transmit_dh3: + +transmit_dh5: +0fe9 79202a02 set1 psk3m ,radio_ctrl +0fea 782efc00 enable encode_fec0 +0feb 79200010 set1 mark_longpacket ,mark + +transmit_dmh: +0fec 44bac00e bpatch patch0e_5 ,mem_patch0e +0fed 6fe0804d fetch 1 ,mem_state_map +0fee c3029001 bbit0 smap_edr ,transmit_noedr +0fef 18267c03 sub type ,3 ,null +0ff0 20211001 branch transmit_noedr ,positive +0ff1 78477c00 disable encrypt +0ff2 784e7c00 disable encode_fec2 +0ff3 782efc00 enable encode_fec0 +0ff4 7843fc00 disable enable_white +0ff5 79202a01 set1 psk ,radio_ctrl +0ff6 2aaffe02 isolate1 psk3m ,radio_ctrl +0ff7 20208ffb branch transmit_edr3m ,true +0ff8 580abeee setarg 0xabeee +0ff9 08008614 inject mod ,20 +0ffa 20200fff branch transmit_edr_sync_end + +transmit_edr3m: +0ffb 585faeba setarg 0x5faeba +0ffc 08008618 inject mod ,24 +0ffd 58000012 setarg 0x12 +0ffe 08008606 inject mod ,6 + +transmit_edr_sync_end: +0fff 7823fc00 enable enable_white +1000 79200010 set1 mark_longpacket ,mark + +transmit_noedr: +1001 78277c00 enable encrypt +1002 7824fc00 enable enable_crc +1003 c5029021 bmark1 mark_loopback ,transmit_loopback +1004 6fe0c1e5 fetch 1 ,mem_tx_lch +1005 08008603 inject mod ,3 +1006 6fe141e6 fetch 2 ,mem_tx_len +1007 98007200 iforce loopcnt +1008 c508100b bmark1 mark_longpacket ,transmit_long +1009 08008605 inject mod ,5 +100a 2020100c branch transmit_stuff + +transmit_long: +100b 0800860d inject mod ,13 + +transmit_stuff: +100c 1f227e00 deposit loopcnt +100d 203a1013 branch transmit_end ,blank +100e 6fe100bf fetch 2 ,mem_txptr +100f 98000c00 iforce contr + +transmit_stuff_loop: +1010 efe08006 ifetch 1 ,contr +1011 08008608 inject mod ,8 +1012 c2001010 loop transmit_stuff_loop + +transmit_end: +1013 44bb400e bpatch patch0e_6 ,mem_patch0e +1014 20400de1 call check_enc_ccm +1015 203a1018 branch transmit_end2 ,blank +1016 6fe2026f fetch 4 ,mem_le_mic +1017 08008620 inject mod ,32 + +transmit_end2: +1018 78247c00 enable enable_parity +1019 08008610 inject mod ,16 +101a 78447c00 disable enable_parity +101b 20400ce8 call set_wait_ack +101c 6fe0804d fetch 1 ,mem_state_map +101d c3028e80 bbit0 smap_edr ,end_of_packet +101e 18007e00 force 0 ,pdata +101f 08008606 inject mod ,6 +1020 20200e80 branch end_of_packet + +transmit_loopback: +1021 44bbc00e bpatch patch0e_7 ,mem_patch0e +1022 c5081029 bmark1 mark_longpacket ,transmit_loopback_long + +transmit_loopback_short: +1023 6fe080e5 fetch 1 ,mem_lch_code +1024 08008603 inject mod ,3 +1025 6fe080af fetch 1 ,mem_len +1026 98002600 iforce regc +1027 08008605 inject mod ,5 +1028 2020102e branch transmit_loopback_cont + +transmit_loopback_long: +1029 6fe080e5 fetch 1 ,mem_lch_code +102a 08008603 inject mod ,3 +102b 6fe100af fetch 2 ,mem_len +102c 98002600 iforce regc +102d 0800860d inject mod ,13 + +transmit_loopback_cont: +102e d8c01000 arg mem_l2cap_rxbuff1 ,contr + +transmit_loopback_loop: +102f 1a627c00 copy regc ,null +1030 20229035 branch transmit_loopback_end ,zero +1031 efe08006 ifetch 1 ,contr +1032 08008608 inject mod ,8 +1033 1a60a7ff increase -1 ,regc +1034 2020102f branch transmit_loopback_loop + +transmit_loopback_end: +1035 6fe109fc fetch 2 ,mem_tst_pktcnt_dmh +1036 1fe0fe01 increase 1 ,pdata +1037 67e109fc store 2 ,mem_tst_pktcnt_dmh +1038 20201013 branch transmit_end + +apply_switch_clke: +1039 6fe200b5 fetch 4 ,mem_clke_bt +103a 1fe0a207 add pdata ,7 ,rega +103b 6fe100c1 fetch 2 ,mem_slot_offset +103c 243a103f nbranch apply_switch_nozero ,blank +103d 1a20a3fd increase -3 ,rega +103e 20201047 branch apply_switch_wait_loop + +apply_switch_nozero: +103f 1feffe0c mul32 pdata ,12 ,pdata +1040 68590040 fetcht 2 ,core_halfslot +1041 18408401 increase 1 ,temp + +apply_switch_loop: +1042 98467e00 isub temp ,pdata +1043 24211046 nbranch apply_switch_bt ,positive +1044 1a20a3ff increase -1 ,rega +1045 20201042 branch apply_switch_loop + +apply_switch_bt: +1046 1fe67e00 sub pdata ,0 ,pdata + +apply_switch_wait_loop: +1047 37d18200 until null ,oneslot +1048 2c400600 compare 0 ,clkn_bt ,3 +1049 24209047 nbranch apply_switch_wait_loop ,true +104a 98005200 iforce clke_rt +104b 1a225000 copy rega ,clke_bt +104c 98005200 iforce clke_rt +104d 20600000 rtn + +calc_slot_offset: +104e 44bc400f bpatch patch0f_0 ,mem_patch0f +104f 37d10200 until null ,halfslot +1050 1b427e00 deposit clke +1051 98000c00 iforce contr +1052 1ff17e00 rshift16 ,pdata ,pdata +1053 9c467200 isub clkn_bt ,loopcnt +1054 1f217203 and_into 3 ,loopcnt +1055 24229058 nbranch calc_bt_portion ,zero +1056 18007e00 force 0 ,pdata +1057 2020105c branch calc_skip_bt + +calc_bt_portion: +1058 68490163 fetcht 2 ,mem_param_rt_rthalfslot +1059 18007e00 force 0 ,pdata + +calc_slot_offset_loop: +105a 9840fe00 iadd temp ,pdata +105b c200105a loop calc_slot_offset_loop + +calc_skip_bt: +105c 98c0fe00 iadd contr ,pdata +105d 1fe6fc0c div pdata ,12 +105e 20407dec call get_div_result +105f 67e100c1 store 2 ,mem_slot_offset +1060 20600000 rtn + +calc_clke_offset: +1061 44bcc00f bpatch patch0f_1 ,mem_patch0f +1062 1b427e00 deposit clke +1063 1b220400 copy clkn ,temp +1064 98467c00 isub temp ,null +1065 7d217e2c nsetflag positive ,44 ,pdata +1066 98460400 isub temp ,temp +1067 6fe10163 fetch 2 ,mem_param_rt_rthalfslot +1068 284c000f isolate0 15 ,temp +1069 2020906f branch calc_clke_pos ,true +106a 18426000 copy temp ,alarm +106b d8410000 arg 0x10000 ,temp +106c 6fe10163 fetch 2 ,mem_param_rt_rthalfslot +106d 98467e00 isub temp ,pdata +106e 9e008400 iadd alarm ,temp + +calc_clke_pos: +106f 604b028f storet 6 ,mem_le_clk_offset +1070 207b0000 rtn le +1071 604b0039 storet 6 ,mem_clk_offset +1072 20600000 rtn + +calc_clke: +1073 78587c00 disable clknt +1074 6fe3028f fetch 6 ,mem_le_clk_offset +1075 203b1077 branch calc_clke2 ,le +1076 6fe30039 fetch 6 ,mem_clk_offset + +calc_clke2: +1077 9b20e000 iadd clkn ,alarm +1078 1e00e00a increase 10 ,alarm +1079 6fe10163 fetch 2 ,mem_param_rt_rthalfslot +107a 9e067e00 isub alarm ,pdata +107b 2fec000f isolate0 15 ,pdata +107c 20209083 branch calc_clke_pos_adj ,true +107d 58010000 setarg 0x10000 +107e 6b010163 fetchr regd ,2 ,mem_param_rt_rthalfslot +107f 9b067e00 isub regd ,pdata +1080 9e00e000 iadd alarm ,alarm + +calc_clke_pos2: +1081 1e023400 copy alarm ,clke +1082 20600000 rtn + +calc_clke_pos_adj: +1083 18007c00 force 0 ,null +1084 20201081 branch calc_clke_pos2 + +calc_mod_value_scale: +1085 203b10ad branch calc_mod_value_scale_le2 ,le +1086 58402c17 setarg 0x402c17 +1087 67e189ee store 3 ,mem_scale_ratio +1088 19317e00 rshift16 access ,pdata +1089 1fe90400 rshift3 pdata ,temp +108a df200030 arg 48 ,loopcnt + +calc_mod_value_scale_do: +108b 58000000 setarg 0 +108c 67e189f1 store 3 ,mem_xcnt + +calc_mod_vs_loop: +108d 18437e00 rshift temp ,pdata +108e 9842fe00 ixor temp ,pdata +108f 1fe17e03 and_into 3 ,pdata +1090 c3009092 bbit0 1 ,calc_mod_vs01 +1091 1fe0ffff pincrease -1 + +calc_mod_vs01: +1092 d8a009f1 arg mem_xcnt ,contw +1093 98a08a00 iadd contw ,contw +1094 efe08005 ifetch 1 ,contw +1095 1fe0fe01 pincrease 1 +1096 e7e08005 istore 1 ,contw +1097 18430400 rshift temp ,temp +1098 c200108d loop calc_mod_vs_loop +1099 da2009f3 arg mem_xcnt + 2 ,rega +109a da4009ee arg mem_scale_ratio ,regb +109b da600000 arg 0 ,regc +109c df200003 arg 3 ,loopcnt + +calc_mod_vs_loop2: +109d efe08011 ifetch 1 ,rega +109e e8408012 ifetcht 1 ,regb +109f 984ffe00 imul32 temp ,pdata +10a0 9a60a600 iadd regc ,regc +10a1 1a20a3ff increase -1 ,rega +10a2 1a40a401 increase 1 ,regb +10a3 c200109d loop calc_mod_vs_loop2 +10a4 6fe089ef fetch 1 ,mem_scale_ratio + 1 +10a5 1fed7e00 lshift8 pdata ,pdata +10a6 1ff27e00 lshift4 pdata ,pdata +10a7 9a66fc00 idiv regc +10a8 20407def call wait_div_end +10a9 1807fe00 quotient pdata +10aa 67f10938 store 2 ,mod_value_scale1 +10ab 67e109f4 store 2 ,mem_scale_ratio_temp +10ac 20600000 rtn + +calc_mod_value_scale_le2: +10ad 6fe109f4 fetch 2 ,mem_scale_ratio_temp +10ae 67f10938 store 2 ,mod_value_scale1 +10af 20600000 rtn + +calc_mod_value_scale_le: +10b0 58402d19 setarg 0x402d19 +10b1 67e189ee store 3 ,mem_scale_ratio +10b2 192f7e00 rshift32 access ,pdata +10b3 1fe90400 rshift3 pdata ,temp +10b4 df200020 arg 32 ,loopcnt +10b5 2020108b branch calc_mod_value_scale_do + +calc_radio_freq: +10b6 44bd400f bpatch patch0f_2 ,mem_patch0f +10b7 20401161 call set_sync_on +10b8 1c227e00 copy bt_clk ,pdata +10b9 1fe17f80 and_into 0x180 ,pdata +10ba 2c800e03 compare 3 ,freq_mode ,0x07 +10bb 242090bf nbranch freq_not_connection ,true +10bc 1fe97e00 rshift3 pdata ,pdata +10bd 9ae0fe00 iadd freq_index ,pdata +10be 202010c0 branch do_hop_mod_now + +freq_not_connection: +10bf 1ae27e00 copy freq_index ,pdata + +do_hop_mod_now: +10c0 1fe6fc4f div pdata ,79 +10c1 782afc00 pulse recalc +10c2 20407def call wait_div_end +10c3 18072200 remainder rega +10c4 1a2085d8 add rega ,-40 ,temp +10c5 202110c8 branch odd_half ,positive +10c6 1a238400 lshift rega ,temp +10c7 202010ca branch freq_result + +odd_half: +10c8 18438400 lshift temp ,temp +10c9 18408401 increase 1 ,temp + +freq_result: +10ca 44bdc00f bpatch patch0f_3 ,mem_patch0f +10cb 6fe08032 fetch 1 ,mem_mode +10cc c30190db bbit0 afh_change ,afh_process_con + +afh_process_0: +10cd 6fe240d9 fetch 4 ,mem_afh_instant +10ce 9c267c00 isub bt_clk ,null +10cf 202110db branch afh_process_con ,positive +10d0 204010fa call afh_clear +10d1 6fe0c0e0 fetch 1 ,mem_afh_new_mod +10d2 207a0000 rtn blank +10d3 6fe08032 fetch 1 ,mem_mode +10d4 79207e02 set1 afh_enable ,pdata +10d5 67e08032 store 1 ,mem_mode +10d6 6fe2c0ee fetch 5 ,mem_afh_map_new +10d7 67e2c0e1 store 5 ,mem_afh_map_lo +10d8 efe28006 ifetch 5 ,contr +10d9 67e2c0e6 store 5 ,mem_afh_map_hi +10da 204010ff call afh_process_freq_map + +afh_process_con: +10db 6fe08032 fetch 1 ,mem_mode +10dc c4010000 rtnbit0 afh_enable +10dd 2c2ffe01 isolate1 1 ,bt_clk +10de 202090f7 branch afh_same_channel ,true +10df 18492200 rshift3 temp ,rega +10e0 18410e07 and temp ,7 ,queue +10e1 580040e1 setarg mem_afh_map_lo +10e2 9a20a200 iadd rega ,rega +10e3 efe08011 ifetch 1 ,rega +10e4 afec0000 qisolate0 pdata +10e5 202090e8 branch afh_process_1 ,true +10e6 18427e00 deposit temp +10e7 202010f4 branch afh_process_end + +afh_process_1: +10e8 6fe0c0eb fetch 1 ,mem_afh_used +10e9 98002400 iforce regb +10ea 1c227e00 deposit bt_clk +10eb 1fe17f80 and_into 0x180 ,pdata +10ec 1fe97e00 rshift3 pdata ,pdata +10ed 9ae0fe00 iadd freq_index ,pdata +10ee 9a46fc00 idiv regb +10ef 580040f9 setarg mem_afh_map +10f0 20407def call wait_div_end +10f1 18072200 remainder rega +10f2 9a208c00 iadd rega ,contr +10f3 efe08006 ifetch 1 ,contr + +afh_process_end: +10f4 67e0c0ec store 1 ,mem_afh_index +10f5 98000400 iforce temp +10f6 20600000 rtn + +afh_same_channel: +10f7 6fe0c0ec fetch 1 ,mem_afh_index +10f8 98000400 iforce temp +10f9 20600000 rtn + +afh_clear: +10fa 6fe08032 fetch 1 ,mem_mode +10fb 793ffe02 set0 afh_enable ,pdata +10fc 793ffe03 set0 afh_change ,pdata +10fd 67e08032 store 1 ,mem_mode +10fe 20600000 rtn + +afh_process_freq_map: +10ff 44be400f bpatch patch0f_4 ,mem_patch0f +1100 d8a040f9 arg mem_afh_map ,contw +1101 1800720a force 10 ,loopcnt +1102 20407d17 call memset0 +1103 d8a040f9 arg mem_afh_map ,contw +1104 18002600 force 0 ,regc +1105 18000e02 force 2 ,queue + +process_freq_3: +1106 6fe2c0e1 fetch 5 ,mem_afh_map_lo +1107 98000400 iforce temp +1108 28e1fe02 compare 2 ,queue ,0xff +1109 2020910b branch process_freq_1 ,true +110a 18430400 rshift temp ,temp + +process_freq_1: +110b 284c0000 isolate0 0 ,temp +110c 2020910f branch process_freq_0 ,true +110d 1a627e00 deposit regc +110e e7e08005 istore 1 ,contw + +process_freq_0: +110f 184b0400 rshift2 temp ,temp +1110 1a60a602 increase 2 ,regc +1111 2a61fc28 compare 40 ,regc ,0xfe +1112 24209118 nbranch process_freq_2 ,true +1113 6fe2c0e6 fetch 5 ,mem_afh_map_hi +1114 98000400 iforce temp +1115 28e1fe02 compare 2 ,queue ,0xff +1116 20209118 branch process_freq_2 ,true +1117 18430400 rshift temp ,temp + +process_freq_2: +1118 1a667c4e sub regc ,78 ,null +1119 2021110b branch process_freq_1 ,positive +111a 18002601 force 1 ,regc +111b 18e08fff increase -1 ,queue +111c 24229106 nbranch process_freq_3 ,zero +111d da2040f9 arg mem_afh_map ,rega +111e 18a27e00 deposit contw +111f 9a267e00 isub rega ,pdata +1120 67e0c0eb store 1 ,mem_afh_used +1121 20600000 rtn + +rx_radio_freq: +1122 44bec00f bpatch patch0f_5 ,mem_patch0f +1123 204010b6 call calc_radio_freq +1124 6fe080e4 fetch 1 ,mem_debug_config +1125 c3029127 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +1126 684883a0 fetcht 1 ,mem_rx_fixed_freq + +rx_radio_freq_now: +1127 2020118f branch set_freq_rx + +tx_radio_freq: +1128 44bf400f bpatch patch0f_6 ,mem_patch0f +1129 204010b6 call calc_radio_freq +112a 6fe080e4 fetch 1 ,mem_debug_config +112b c302112d bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +112c 6848839f fetcht 1 ,mem_tx_fixed_freq + +tx_radio_freq_now: +112d 20201205 branch set_freq_tx + +fetch_giac: +112e 18005a00 force 0 ,uap +112f 6fe1c0af fetch 3 ,mem_glap +1130 98005800 iforce lap +1131 20600000 rtn + +fetch_page_bt_adr: +1132 44bfc00f bpatch patch0f_7 ,mem_patch0f +1133 6fe0c1e0 fetch 1 ,mem_hci_puap +1134 1fe25a00 icopy uap +1135 6fe1c1dd fetch 3 ,mem_hci_plap +1136 1fe25800 icopy lap +1137 20600000 rtn + +fetch_self_bt_adr: +1138 44c04010 bpatch patch10_0 ,mem_patch10 +1139 6fe140ac fetch 2 ,mem_nap +113a 1fe25c00 icopy nap +113b 6fe0c0ab fetch 1 ,mem_uap +113c 1fe25a00 icopy uap +113d 6fe1c0a8 fetch 3 ,mem_lap +113e 1fe25800 icopy lap +113f 20600000 rtn + +fetch_extm_bt_adr: +1140 44c0c010 bpatch patch10_1 ,mem_patch10 +1141 6fe10045 fetch 2 ,mem_pnap +1142 1fe25c00 icopy nap +1143 6fe08044 fetch 1 ,mem_puap +1144 1fe25a00 icopy uap +1145 6fe18041 fetch 3 ,mem_plap +1146 1fe25800 icopy lap +1147 20600000 rtn + +fetch_diac: +1148 c510114b bmark1 mark_all_diac ,fetch_diac_do +1149 c68e8000 rtnmark0 mark_inquiry_state +114a c68f8000 rtnmark0 mark_periodical_diac + +fetch_diac_do: +114b 1d815900 and_into -256 ,lap +114c 782afc00 pulse recalc +114d 20000020 nop 32 +114e 20600000 rtn + +shutdown_radio: +114f 44c14010 bpatch patch10_2 ,mem_patch10 +1150 20404cad call rf_debug_shutdown_radio_line +1151 18002a08 force 0x08 ,radio_ctrl +1152 18002a00 force 0 ,radio_ctrl +1153 7850fc00 disable is_rx +1154 78507c00 disable is_tx +1155 782f7c00 pulse packet_end +1156 70890005 jam 0x5 ,modem_en +1157 20000002 nop 2 +1158 70890000 jam 0x0 ,modem_en +1159 20401161 call set_sync_on +115a 708a1600 jam 0 ,core_syn_en +115b 708a0a10 jam 0x10 ,core_rf_ldo_en0 +115c 6ff08a09 fetch 1 ,core_clkpll_cfg6 +115d 793ffe07 set0 7 ,pdata +115e 67f08a09 store 1 ,core_clkpll_cfg6 +115f 708a0b00 jam 0 ,core_rf_ldo_en1 +1160 2020129c branch gain_control + +set_sync_on: +1161 44c1c010 bpatch patch10_3 ,mem_patch10 +1162 70890005 jam 0x5 ,modem_en +1163 20000002 nop 2 +1164 70890000 jam 0x0 ,modem_en +1165 6fe0c0c5 fetch 1 ,mem_fcomp_div +1166 c00c1168 beq xtal_24m ,set_sync_on_24m +1167 c004117d beq xtal_16m ,set_sync_on_16m + +set_sync_on_24m: +1168 708a10aa jam 0xaa ,core_rf_ldo_cfg4 +1169 708a11aa jam 0xaa ,core_rf_ldo_cfg5 +116a 708a1215 jam 0x15 ,core_rf_ldo_cfg6 +116b 708a0a78 jam 0x78 ,core_rf_ldo_en0 +116c 6ff08a09 fetch 1 ,core_clkpll_cfg6 +116d 79207e07 set1 7 ,pdata +116e 67f08a09 store 1 ,core_clkpll_cfg6 +116f 708a0b04 jam 0x04 ,core_rf_ldo_en1 +1170 2000003c nop 60 +1171 708a167a jam 0x7a ,core_syn_en +1172 708a1700 jam 0 ,core_rx_en0 +1173 708a1800 jam 0 ,core_rx_en1 +1174 708a1900 jam 0 ,core_tx_en0 +1175 708a1a00 jam 0 ,core_tx_en1 +1176 708a112a jam 0x2a ,core_rf_ldo_cfg5 +1177 708a0a78 jam 0x78 ,core_rf_ldo_en0 + +set_sync_on_next: +1178 6ff08a09 fetch 1 ,core_clkpll_cfg6 +1179 793ffe07 set0 7 ,pdata +117a 67f08a09 store 1 ,core_clkpll_cfg6 +117b 708a4300 jam 0 ,core_syn_cal_ctrl +117c 20600000 rtn + +set_sync_on_16m: +117d 708a8be6 jam 0xe6 ,core_syn_aac_cfg1 +117e 708a10aa jam 0xaa ,core_rf_ldo_cfg4 +117f 708a11aa jam 0xaa ,core_rf_ldo_cfg5 +1180 708a1215 jam 0x15 ,core_rf_ldo_cfg6 +1181 708a0a78 jam 0x78 ,core_rf_ldo_en0 +1182 6ff08a09 fetch 1 ,core_clkpll_cfg6 +1183 79207e07 set1 7 ,pdata +1184 67f08a09 store 1 ,core_clkpll_cfg6 +1185 708a0b04 jam 0x04 ,core_rf_ldo_en1 +1186 2000003c nop 60 +1187 708a163a jam 0x3a ,core_syn_en +1188 708a1700 jam 0 ,core_rx_en0 +1189 708a1800 jam 0 ,core_rx_en1 +118a 708a1900 jam 0 ,core_tx_en0 +118b 708a1a00 jam 0 ,core_tx_en1 +118c 708a112a jam 0x2a ,core_rf_ldo_cfg5 +118d 708a0a38 jam 0x38 ,core_rf_ldo_en0 +118e 20201178 branch set_sync_on_next + +set_freq_rx: +118f 44c24010 bpatch patch10_4 ,mem_patch10 +1190 6fe0c0c5 fetch 1 ,mem_fcomp_div +1191 1fe67c18 sub pdata ,xtal_24m ,null +1192 2042919a call rf_rx_write_freq_24m ,zero +1193 244291a0 ncall rf_rx_write_freq_16m ,zero +1194 60488017 storet 1 ,mem_last_freq +1195 1840fe00 add temp ,0 ,pdata +1196 c5169198 bmark1 mark_ble_2m ,set_rxfreq_2m_offset +1197 1840fe01 add temp ,1 ,pdata + +set_rxfreq_2m_offset: +1198 204011c5 call rf_rx_write_freq +1199 20201085 branch calc_mod_value_scale + +rf_rx_write_freq_24m: +119a 708a4300 jam 0 ,core_syn_cal_ctrl +119b 708a3d04 jam 0x04 ,core_syn_top_ctrl +119c 708a3e00 jam 0 ,core_syn_mmd_cp_ctrl +119d 708a8403 jam 0x03 ,core_syn_cp_lpf_cfg +119e 708a8940 jam 0x40 ,core_syn_afc_cfg3 +119f 20600000 rtn + +rf_rx_write_freq_16m: +11a0 708a4330 jam 0x30 ,core_syn_cal_ctrl +11a1 708a3d06 jam 0x06 ,core_syn_top_ctrl +11a2 708a3e00 jam 0 ,core_syn_mmd_cp_ctrl +11a3 708a8420 jam 0x20 ,core_syn_cp_lpf_cfg +11a4 708a8915 jam 0x15 ,core_syn_afc_cfg3 +11a5 20600000 rtn + +rf_rx_enable: +11a6 44c2c010 bpatch patch10_5 ,mem_patch10 +11a7 20404ca7 call rf_debug_rx_gpio_high +11a8 6fe0c1ea fetch 1 ,mem_gain_fix +11a9 c07f91af beq 0xff ,rf_rx_enable_no_soft_agc +11aa d8c041eb arg mem_gain_table ,contr +11ab 98c08c00 iadd contr ,contr +11ac efe08006 ifetch 1 ,contr +11ad 67f08961 store 1 ,core_rf_rx_gain_fix +11ae 70896027 jam 0x27 ,core_rf_rx_agc_ctrl + +rf_rx_enable_no_soft_agc: +11af 6848c1ee fetcht 1 ,mem_gain_second_agc_en +11b0 6ff08960 fetch 1 ,core_rf_rx_agc_ctrl +11b1 9841fe00 ior temp ,pdata +11b2 67f08960 store 1 ,core_rf_rx_agc_ctrl +11b3 708a10aa jam 0xaa ,core_rf_ldo_cfg4 +11b4 708a112a jam 0x2a ,core_rf_ldo_cfg5 +11b5 708a1213 jam 0x13 ,core_rf_ldo_cfg6 +11b6 708a0a7f jam 0x7f ,core_rf_ldo_en0 +11b7 6ff08a09 fetch 1 ,core_clkpll_cfg6 +11b8 793ffe07 set0 7 ,pdata +11b9 67f08a09 store 1 ,core_clkpll_cfg6 +11ba 2000003c nop 60 +11bb 708a171f jam 0x1f ,core_rx_en0 +11bc 708a18f8 jam 0xf8 ,core_rx_en1 +11bd 708a1918 jam 0x18 ,core_tx_en0 +11be 708a1000 jam 0x00 ,core_rf_ldo_cfg4 +11bf 708a1120 jam 0x20 ,core_rf_ldo_cfg5 +11c0 2000000a nop 10 +11c1 70890004 jam 0x04 ,modem_en +11c2 20000002 nop 2 +11c3 7089000c jam 0x0c ,modem_en +11c4 20600000 rtn + +rf_rx_write_freq: +11c5 44c34010 bpatch patch10_6 ,mem_patch10 +11c6 d8c00960 arg 2400 ,contr +11c7 98c0fe00 iadd contr ,pdata +11c8 6848c0c5 fetcht 1 ,mem_fcomp_div +11c9 202011d4 branch rf_write_freq_calc + +rf_tx_write_freq: +11ca 44c3c010 bpatch patch10_7 ,mem_patch10 +11cb 6fe0c0c5 fetch 1 ,mem_fcomp_div +11cc 1fe67c18 sub pdata ,xtal_24m ,null +11cd 204291f7 call rf_tx_write_freq_24m ,zero +11ce 244291fe ncall rf_tx_write_freq_16m ,zero +11cf 58000960 setarg 2400 +11d0 9a20fe00 iadd rega ,pdata +11d1 1fe3fe00 lshift pdata ,pdata +11d2 6848c0c5 fetcht 1 ,mem_fcomp_div +11d3 184f8403 mul32 temp ,0x03 ,temp + +rf_write_freq_calc: +11d4 18438400 lshift temp ,temp +11d5 9846fc00 idiv temp +11d6 20407def call wait_div_end +11d7 1807fe00 quotient pdata +11d8 67f08a3f store 1 ,core_syn_divr_int +11d9 18077e00 remainder pdata +11da 1ff07e00 lshift16 pdata ,pdata +11db 1fed7e00 lshift8 pdata ,pdata +11dc 9846fc00 idiv temp +11dd 20407def call wait_div_end +11de 1807fe00 quotient pdata +11df 67f08a42 store 1 ,core_syn_divr_int + 3 +11e0 1fecfe00 rshift8 pdata ,pdata +11e1 67f08a41 store 1 ,core_syn_divr_int + 2 +11e2 1fecfe00 rshift8 pdata ,pdata +11e3 67f08a40 store 1 ,core_syn_divr_int + 1 +11e4 68588a43 fetcht 1 ,core_syn_cal_ctrl +11e5 184104f0 and_into 0xf0 ,temp +11e6 60588a43 storet 1 ,core_syn_cal_ctrl +11e7 2000000c nop 12 +11e8 6fe0c0c5 fetch 1 ,mem_fcomp_div +11e9 c00c11eb beq xtal_24m ,rf_write_freq_calc_24m +11ea c00411f1 beq xtal_16m ,rf_write_freq_calc_16m + +rf_write_freq_calc_24m: +11eb 1841840c or_into 0x0c ,temp +11ec 60588a43 storet 1 ,core_syn_cal_ctrl +11ed 2000000c nop 12 +11ee 18418403 or_into 0x03 ,temp +11ef 60588a43 storet 1 ,core_syn_cal_ctrl +11f0 20600000 rtn + +rf_write_freq_calc_16m: +11f1 1841843c or_into 0x3c ,temp +11f2 60588a43 storet 1 ,core_syn_cal_ctrl +11f3 2000000c nop 12 +11f4 18418433 or_into 0x33 ,temp +11f5 60588a43 storet 1 ,core_syn_cal_ctrl +11f6 20600000 rtn + +rf_tx_write_freq_24m: +11f7 708a4300 jam 0 ,core_syn_cal_ctrl +11f8 708a3d12 jam 0x12 ,core_syn_top_ctrl +11f9 708a3e00 jam 0 ,core_syn_mmd_cp_ctrl +11fa 708a8403 jam 0x03 ,core_syn_cp_lpf_cfg +11fb 708a8ba6 jam 0xa6 ,core_syn_aac_cfg1 +11fc 708a8940 jam 0x40 ,core_syn_afc_cfg3 +11fd 20600000 rtn + +rf_tx_write_freq_16m: +11fe 708a4330 jam 0x30 ,core_syn_cal_ctrl +11ff 708a3d15 jam 0x15 ,core_syn_top_ctrl +1200 708a3e00 jam 0 ,core_syn_mmd_cp_ctrl +1201 708a8420 jam 0x20 ,core_syn_cp_lpf_cfg +1202 708a8ba6 jam 0xa6 ,core_syn_aac_cfg1 +1203 708a8915 jam 0x15 ,core_syn_afc_cfg3 +1204 20600000 rtn + +set_freq_tx: +1205 44c44011 bpatch patch11_0 ,mem_patch11 +1206 708a3d12 jam 0x12 ,core_syn_top_ctrl +1207 60488017 storet 1 ,mem_last_freq +1208 1840a202 add temp ,2 ,rega +1209 204011ca call rf_tx_write_freq +120a 200003c0 nop 0x3c0 + +txon: +120b 44c4c011 bpatch patch11_1 ,mem_patch11 +120c 708a10aa jam 0xaa ,core_rf_ldo_cfg4 +120d 708a112a jam 0x2a ,core_rf_ldo_cfg5 +120e 708a1210 jam 0x10 ,core_rf_ldo_cfg6 +120f 708a0a7f jam 0x7f ,core_rf_ldo_en0 +1210 6ff08a09 fetch 1 ,core_clkpll_cfg6 +1211 793ffe07 set0 7 ,pdata +1212 67f08a09 store 1 ,core_clkpll_cfg6 +1213 708a0b07 jam 0x07 ,core_rf_ldo_en1 +1214 2000003c nop 60 +1215 708a190d jam 0x0d ,core_tx_en0 +1216 708a1af9 jam 0xf9 ,core_tx_en1 +1217 708a1000 jam 0x00 ,core_rf_ldo_cfg4 +1218 708a1120 jam 0x20 ,core_rf_ldo_cfg5 +1219 2000000a nop 10 +121a 70890001 jam 0x01 ,modem_en +121b 20000002 nop 2 +121c 70890003 jam 0x03 ,modem_en +121d 44c54011 bpatch patch11_2 ,mem_patch11 +121e 6fe0c1e8 fetch 1 ,mem_tx_power +121f c001922d beq tx_power_3db ,set_tx_power_3db +1220 c0029232 beq tx_power_5db ,set_tx_power_5db +1221 c0031235 beq tx_power_6db ,set_tx_power_6db +1222 c0039238 beq tx_power_7db ,set_tx_power_7db +1223 c005123b beq tx_power_10db ,set_tx_power_10db +1224 c041923e beq tx_power_f3db ,set_tx_power_f3db +1225 c0429241 beq tx_power_f5db ,set_tx_power_f5db +1226 c04a1244 beq tx_power_f20db ,set_tx_power_f20db +1227 c04f1247 beq tx_power_f30db ,set_tx_power_f30db + +set_tx_power_0db: +1228 708a396a jam 0x6a ,core_tx_pwr_ctrl0 +1229 708a3a07 jam 0x07 ,core_tx_pwr_ctrl1 + +set_rf_ldo_cfg89: +122a 708a14a3 jam 0xa3 ,core_rf_ldo_cfg8 +122b 708a1507 jam 0x07 ,core_rf_ldo_cfg9 +122c 20600000 rtn + +set_tx_power_3db: +122d 708a3966 jam 0x66 ,core_tx_pwr_ctrl0 +122e 708a3a0b jam 0x0b ,core_tx_pwr_ctrl1 + +set_rf_ldo_cfg89_2: +122f 708a14aa jam 0xaa ,core_rf_ldo_cfg8 +1230 708a150a jam 0x0a ,core_rf_ldo_cfg9 +1231 20600000 rtn + +set_tx_power_5db: +1232 708a396c jam 0x6c ,core_tx_pwr_ctrl0 +1233 708a3a0d jam 0x0d ,core_tx_pwr_ctrl1 +1234 2020122f branch set_rf_ldo_cfg89_2 + +set_tx_power_6db: +1235 708a396b jam 0x6b ,core_tx_pwr_ctrl0 +1236 708a3a0f jam 0x0f ,core_tx_pwr_ctrl1 +1237 2020122f branch set_rf_ldo_cfg89_2 + +set_tx_power_7db: +1238 708a39a7 jam 0xa7 ,core_tx_pwr_ctrl0 +1239 708a3a0f jam 0x0f ,core_tx_pwr_ctrl1 +123a 2020122f branch set_rf_ldo_cfg89_2 + +set_tx_power_10db: +123b 708a39b6 jam 0xb6 ,core_tx_pwr_ctrl0 +123c 708a3a0f jam 0x0f ,core_tx_pwr_ctrl1 +123d 2020122f branch set_rf_ldo_cfg89_2 + +set_tx_power_f3db: +123e 708a3968 jam 0x68 ,core_tx_pwr_ctrl0 +123f 708a3a05 jam 0x05 ,core_tx_pwr_ctrl1 +1240 2020122a branch set_rf_ldo_cfg89 + +set_tx_power_f5db: +1241 708a3960 jam 0x60 ,core_tx_pwr_ctrl0 +1242 708a3a05 jam 0x05 ,core_tx_pwr_ctrl1 +1243 2020122a branch set_rf_ldo_cfg89 + +set_tx_power_f20db: +1244 708a3953 jam 0x53 ,core_tx_pwr_ctrl0 +1245 708a3a01 jam 0x01 ,core_tx_pwr_ctrl1 +1246 2020122a branch set_rf_ldo_cfg89 + +set_tx_power_f30db: +1247 708a394c jam 0x4c ,core_tx_pwr_ctrl0 +1248 708a3a00 jam 0x00 ,core_tx_pwr_ctrl1 +1249 2020122a branch set_rf_ldo_cfg89 + +initialize_radio: +124a 70804206 jam clksel_rc ,core_clksel + +initialize_radio_wait: +124b 6fe140ca fetch 2 ,mem_rf_init_ptr +124c c307124b bbit0 14 ,initialize_radio_wait +124d 98000c00 iforce contr +124e d8408a00 arg 0x8a00 ,temp + +initialize_radio_loop: +124f efe08006 ifetch 1 ,contr +1250 c07f9255 beq 0xff ,initialize_radio_cont +1251 98418a00 ior temp ,contw +1252 efe08006 ifetch 1 ,contr +1253 e7e08005 istore 1 ,contw +1254 2020124f branch initialize_radio_loop + +initialize_radio_cont: +1255 44c5c011 bpatch patch11_3 ,mem_patch11 +1256 708a8be6 jam 0xe6 ,core_syn_aac_cfg1 +1257 2040126a call initialize_syn_afc_cfg1 +1258 20401271 call initialize_rf_ldo_cfg1 +1259 20401277 call initialize_rc_cal +125a 708a6d09 jam 0x09 ,core_rx_bq_cfg0 +125b 708a0305 jam 5 ,core_clkpll_cfg0 +125c 708a7a94 jam 0x94 ,core_rx_iqadc_cfg +125d 6fe0c0c5 fetch 1 ,mem_fcomp_div +125e c0841260 bne xtal_16m ,initialize_radio_cont_next +125f 708a0834 jam 0x34 ,core_clkpll_cfg5 + +initialize_radio_cont_next: +1260 708a01ff jam 0xff ,core_clkpll_ctrl1 +1261 20000064 nop 100 +1262 708a020e jam 0x0e ,core_clkpll_ctrl2 +1263 708a0003 jam 0x03 ,core_clkpll_ctrl0 +1264 20401228 call set_tx_power_0db +1265 708a9a2b jam 0x2b ,core_tx_mixer_cfg1 +1266 708a9b13 jam 0x13 ,core_tx_mixer_cfg2 +1267 70804205 jam clksel_dpll ,core_clksel +1268 7041f00c jam system_clk_12m ,mem_system_clk +1269 202016b2 branch le_disable + +initialize_syn_afc_cfg1: +126a 6fe0c4d1 fetch 1 ,mem_syn_afc_cfg1 +126b 203a126f branch initialize_syn_afc_cfg1_default ,blank +126c 1fe1fe20 or_into 0x20 ,pdata +126d 67f08a87 store 1 ,core_syn_afc_cfg1 +126e 20600000 rtn + +initialize_syn_afc_cfg1_default: +126f 708a8729 jam 0x29 ,core_syn_afc_cfg1 +1270 20600000 rtn + +initialize_rf_ldo_cfg1: +1271 6fe0c4d2 fetch 1 ,mem_rf_ldo_cfg1 +1272 203a1275 branch initialize_rf_ldo_cfg1_default ,blank +1273 67f08a0d store 1 ,core_rf_ldo_cfg1 +1274 20600000 rtn + +initialize_rf_ldo_cfg1_default: +1275 708a0d00 jam 0x00 ,core_rf_ldo_cfg1 +1276 20600000 rtn + +initialize_rc_cal: +1277 6fe0c4d3 fetch 1 ,mem_rc_cal +1278 203a127b branch initialize_rc_cal_default ,blank +1279 67f08a6c store 1 ,core_rx_bq_bw_cal +127a 20600000 rtn + +initialize_rc_cal_default: +127b 708a6cd3 jam 0xd3 ,core_rx_bq_bw_cal +127c 20600000 rtn + +save_rssi: +127d 44c64011 bpatch patch11_4 ,mem_patch11 +127e 70001920 jam 0x20 ,mem_rssi_hex +127f 6ff089a0 fetch 1 ,modem_rssi +1280 67e0c1e9 store 1 ,mem_modem_rssi +1281 1fe67cfc sub pdata ,0xfc ,null +1282 24610000 nrtn positive +1283 1fe67c7f sub pdata ,0x7f ,null +1284 20610000 rtn positive +1285 6ff089a3 fetch 1 ,modem_gain +1286 1fe1040f and pdata ,0x0f ,temp +1287 18438400 lshift temp ,temp +1288 1ff1fe00 rshift4 pdata ,pdata +1289 98408400 iadd temp ,temp +128a 184f8403 mul32 temp ,3 ,temp +128b 6fe0c1e9 fetch 1 ,mem_modem_rssi +128c 1fe67eff sub pdata ,0xff ,pdata +128d 9840fe00 iadd temp ,pdata +128e 1fe0fffb increase -5 ,pdata +128f 67e08019 store 1 ,mem_rssi_hex +1290 20600000 rtn + +rssi_hex2dec: +1291 6fe08019 fetch 1 ,mem_rssi_hex +1292 20401295 call bcd +1293 67e08018 store 1 ,mem_rssi +1294 20600000 rtn + +bcd: +1295 1fe17eff and_into 0xff ,pdata +1296 1fe6fc0a div pdata ,10 +1297 20407dec call get_div_result +1298 1ff27e00 lshift4 pdata ,pdata +1299 18070400 remainder temp +129a 9841fe00 ior temp ,pdata +129b 20600000 rtn + +gain_control: +129c 6fe0c1ea fetch 1 ,mem_gain_fix +129d c17f8000 rtneq 0xff +129e 242c12c2 nbranch gain_increase ,sync +129f 6fe0c1e9 fetch 1 ,mem_modem_rssi +12a0 1fe67cf0 sub pdata ,0xf0 ,null +12a1 242112c6 nbranch gain_descend ,positive +12a2 1fe67c7f sub pdata ,0x7f ,null +12a3 202112c6 branch gain_descend ,positive +12a4 6a308961 fetchr rega ,1 ,core_rf_rx_gain_fix +12a5 6fe0c1ea fetch 1 ,mem_gain_fix +12a6 c1000000 rtneq 0 +12a7 d8c041eb arg mem_gain_table ,contr +12a8 98c08c00 iadd contr ,contr +12a9 efe08006 ifetch 1 ,contr +12aa 9a267c00 isub rega ,null +12ab 24628000 nrtn zero +12ac 18c08dfe increase -2 ,contr +12ad e8408006 ifetcht 1 ,contr +12ae 1851fe00 rshift4 temp ,pdata +12af 1a31a400 rshift4 rega ,regb +12b0 9a462400 isub regb ,regb +12b1 18417e0f and temp ,0xf ,pdata +12b2 1a21220f and rega ,0xf ,rega +12b3 9a262200 isub rega ,rega +12b4 1a23fe00 lshift rega ,pdata +12b5 9a40a400 iadd regb ,regb +12b6 1a4fa403 mul32 regb ,3 ,regb +12b7 6848c1e9 fetcht 1 ,mem_modem_rssi +12b8 18417e80 and temp ,0x80 ,pdata +12b9 207a0000 rtn blank + +add_negative: +12ba 58000100 setarg 0x100 +12bb 98460400 isub temp ,temp +12bc 1a427e00 copy regb ,pdata +12bd 98467e00 isub temp ,pdata +12be 20610000 rtn positive +12bf 1fe17eff and pdata ,0xff ,pdata +12c0 c17f8000 rtneq 0xff +12c1 c17f0000 rtneq 0xfe + +gain_increase: +12c2 6fe0c1ea fetch 1 ,mem_gain_fix +12c3 c00092cb beq 1 ,set_rx_gain0 +12c4 c00112cd beq 2 ,set_rx_gain1 +12c5 202012cb branch set_rx_gain0 + +gain_descend: +12c6 6fe0c1ea fetch 1 ,mem_gain_fix +12c7 c00012cd beq 0 ,set_rx_gain1 +12c8 c00092c9 beq 1 ,set_rx_gain2 + +set_rx_gain2: +12c9 7041ea02 jam 2 ,mem_gain_fix +12ca 20600000 rtn + +set_rx_gain0: +12cb 7041ea00 jam 0 ,mem_gain_fix +12cc 20600000 rtn + +set_rx_gain1: +12cd 7041ea01 jam 1 ,mem_gain_fix +12ce 20600000 rtn + +xtal_fast_wake: +12cf 58000f0f setarg 0xf0f +12d0 20201591 branch lpm_write_config + +init_lpm_ctrl: +12d1 5800080f setarg 0x80f +12d2 20201591 branch lpm_write_config + +start_receiver: +12d3 44c6c011 bpatch patch11_5 ,mem_patch11 +12d4 78507c00 disable is_tx +12d5 7830fc00 enable is_rx +12d6 782b7c00 pulse init_encrypt +12d7 202011a6 branch rf_rx_enable + +prep_crypt: +12d8 44c74011 bpatch patch11_6 ,mem_patch11 +12d9 20400de1 call check_enc_ccm +12da 243a12e8 nbranch prep_crypt_ccm ,blank +12db 6fe0804d fetch 1 ,mem_state_map +12dc 2feffe02 isolate1 smap_encryption ,pdata +12dd 7920fe00 setflag true ,0 ,pdata +12de 67f08011 store 1 ,core_encrypt +12df d8c00063 arg mem_kc ,contr +12e0 efe48006 ifetch 9 ,contr +12e1 98006400 iforce kc_ls +12e2 efe38006 ifetch 7 ,contr +12e3 98006600 iforce kc_ms +12e4 6fe08055 fetch 1 ,mem_key_size +12e5 1fe0e9ff add pdata ,-1 ,g1l +12e6 782d7c00 pulse kc_p_activate +12e7 20600000 rtn + +prep_crypt_ccm: +12e8 70801100 jam 0 ,core_encrypt +12e9 20600000 rtn + +wait_access_end: +12ea 1b427e00 deposit clke +12eb 67e30098 store 6 ,mem_sync_clke +12ec 7846fc00 disable decode_fec0 +12ed 242c114f nbranch shutdown_radio ,sync +12ee 6fe1015b fetch 2 ,mem_param_clke_cal +12ef 1fe25200 copy pdata ,clke_rt +12f0 1d00d001 increase 1 ,clke_bt +12f1 1d0151fc and_into 0x1fc ,clke_bt +12f2 20600000 rtn + +wait_access_mhalfbnd: +12f3 7826fc00 enable decode_fec0 + +wait_access_mhalfbnd_correlate: +12f4 37cb8400 correlate null ,mhalfbnd +12f5 202c12ea branch wait_access_end ,sync +12f6 2d000402 compare 0x02 ,clke_bt ,0x02 +12f7 242092f4 nbranch wait_access_mhalfbnd_correlate ,true +12f8 202012ea branch wait_access_end + +wait_access_clkn_rt: +12f9 44c7c011 bpatch patch11_7 ,mem_patch11 +12fa 69610159 fetchr timeup ,2 ,mem_param_conn_access +12fb 7826fc00 enable decode_fec0 +12fc 34730400 correlate clkn_rt ,meet +12fd 7846fc00 disable decode_fec0 +12fe 242c114f nbranch shutdown_radio ,sync +12ff 20600000 rtn + +wait_access_forever: +1300 44c84012 bpatch patch12_0 ,mem_patch12 +1301 7826fc00 enable decode_fec0 +1302 37c18400 correlate null ,timeout +1303 7846fc00 disable decode_fec0 +1304 242c114f nbranch shutdown_radio ,sync +1305 6fe1015b fetch 2 ,mem_param_clke_cal +1306 1fe25200 copy pdata ,clke_rt +1307 1d0151fc and_into 0x1fc ,clke_bt +1308 20600000 rtn + +reserve_slot: +1309 44c8c012 bpatch patch12_1 ,mem_patch12 +130a 98002200 iforce rega +130b 1c227e00 deposit bt_clk +130c 98409600 iadd temp ,timeup +130d 19627e00 copy timeup ,pdata +130e 67e240d1 store 4 ,mem_next_btclk +130f 1a227e00 deposit rega +1310 20600000 rtn + +ahead_window: +1311 1fe20400 copy pdata ,temp +1312 44c94012 bpatch patch12_2 ,mem_patch12 +1313 18427e00 copy temp ,pdata +1314 20407db1 call clk2bt +1315 1c307e00 lshift16 bt_clk ,pdata +1316 79207e2c set1 44 ,pdata +1317 20407d97 call clk_diff +1318 793ffe2c set0 44 ,pdata +1319 20401365 call get_clk +131a 20407d97 call clk_diff +131b 20740000 rtn user +131c 20407da4 call clk2rt +131d 98003600 iforce stop_watch +131e 37c18200 until null ,timeout +131f 20600000 rtn + +setup_clk: +1320 44c9c012 bpatch patch12_3 ,mem_patch12 +1321 20381325 branch setup_clkn ,clknt +1322 35330200 until clke_rt ,meet + +skip_setup_clke: +1323 1d020400 copy clke_bt ,temp +1324 20201328 branch setup_clknbt + +setup_clkn: +1325 20371327 branch skip_setup_clkn ,attempt +1326 34730200 until clkn_rt ,meet + +skip_setup_clkn: +1327 1c420400 copy clkn_bt ,temp + +setup_clknbt: +1328 20341334 branch setup_clk11 ,user +1329 28400601 compare 1 ,temp ,3 +132a 24209320 nbranch setup_clk ,true + +setup_complete: +132b 44ca4012 bpatch patch12_4 ,mem_patch12 +132c 6fe08031 fetch 1 ,mem_state +132d c4000000 rtnbit0 state_inconn +132e 6fe240d1 fetch 4 ,mem_next_btclk +132f 98467e00 isub temp ,pdata +1330 24610000 nrtn positive +1331 1fe67cff sub pdata ,0xff ,null +1332 20211320 branch setup_clk ,positive +1333 20600000 rtn + +setup_clk11: +1334 28400603 compare 3 ,temp ,3 +1335 24209320 nbranch setup_clk ,true +1336 2020132b branch setup_complete + +rf_setup_time: +1337 44cac012 bpatch patch12_5 ,mem_patch12 +1338 69610157 fetchr timeup ,2 ,mem_param_rf_setup +1339 20201320 branch setup_clk + +rf_setup_time_slave_slot: +133a 78547c00 disable user +133b 20201337 branch rf_setup_time + +rf_setup_time_master_slot: +133c 78347c00 enable user +133d 20201337 branch rf_setup_time + +start_transmitter: +133e 44cb4012 bpatch patch12_6 ,mem_patch12 +133f 204012d8 call prep_crypt +1340 7850fc00 disable is_rx +1341 78307c00 enable is_tx +1342 20600000 rtn + +start_tx_native: +1343 44cbc012 bpatch patch12_7 ,mem_patch12 +1344 69610155 fetchr timeup ,2 ,mem_param_tx_setup +1345 34730200 until clkn_rt ,meet +1346 782b7c00 pulse init_encrypt +1347 20600000 rtn + +start_rx_native: +1348 44cc4013 bpatch patch13_0 ,mem_patch13 +1349 6961015f fetchr timeup ,2 ,mem_param_rx_setup +134a 34730200 until clkn_rt ,meet +134b 20600000 rtn + +start_tx_external: +134c 44ccc013 bpatch patch13_1 ,mem_patch13 +134d 69610155 fetchr timeup ,2 ,mem_param_tx_setup +134e 35330200 until clke_rt ,meet +134f 782b7c00 pulse init_encrypt +1350 20600000 rtn + +send_access_word: +1351 44cd4013 bpatch patch13_2 ,mem_patch13 +1352 20404cb5 call rf_debug_tx_on_line +1353 51207e00 preload access +1354 782efc00 enable encode_fec0 +1355 79202a00 set1 txgfsk ,radio_ctrl +1356 08008648 inject mod ,72 +1357 784efc00 disable encode_fec0 +1358 20600000 rtn + +scan_mode_whiten: +1359 1ca20400 copy xin ,temp +135a 18418460 or_into 0x60 ,temp +135b 18421c00 copy temp ,white_init +135c 20600000 rtn + +get_free_amaddr: +135d 44cdc013 bpatch patch13_3 ,mem_patch13 +135e 6fe0c098 fetch 1 ,mem_current_amaddr +135f 1fe0fe01 increase 1 ,pdata +1360 c0839362 bne param_esco_addr ,get_free_amaddr_cont +1361 18007e01 force 1 ,pdata + +get_free_amaddr_cont: +1362 67e0c098 store 1 ,mem_current_amaddr +1363 98000800 iforce am_addr +1364 20600000 rtn + +get_clk: +1365 1b220400 copy clkn ,temp +1366 20748000 rtn master +1367 1b420400 copy clke ,temp +1368 20600000 rtn + +get_clkbt: +1369 1c427e00 deposit clkn_bt +136a 20748000 rtn master +136b 1d027e00 deposit clke_bt +136c 20600000 rtn + +supervision_update: +136d 44ce4013 bpatch patch13_4 ,mem_patch13 +136e 684a004e fetcht 4 ,mem_supervision_timer +136f 20401369 call get_clkbt +1370 98461600 isub temp ,timeup +1371 19627e00 deposit timeup +1372 68490052 fetcht 2 ,mem_supervision_to +1373 18438400 lshift temp ,temp +1374 98467e00 isub temp ,pdata +1375 20600000 rtn + +supervision_flush: +1376 44cec013 bpatch patch13_5 ,mem_patch13 +1377 20401369 call get_clkbt +1378 67e2004e store 4 ,mem_supervision_timer +1379 20600000 rtn + +assert: +137a 44cf4013 bpatch patch13_6 ,mem_patch13 +137b 2020137a branch assert + +loop: +137c 2020137c branch loop + +sleep: +137d 207a0000 rtn blank +137e 1fe37e00 rshift pdata ,pdata +137f 1fe0fffd increase -3 ,pdata + +sleep_loop: +1380 1fe0ffff increase -1 ,pdata +1381 24229380 nbranch sleep_loop ,zero +1382 18007e00 force 0 ,pdata +1383 20600000 rtn + +init_param: +1384 df200010 arg 0x10 ,loopcnt +1385 d8a00000 arg 0 ,contw +1386 20407d17 call memset0 +1387 d8a00287 arg mem_le_state ,contw +1388 df20000a arg 10 ,loopcnt +1389 20407d17 call memset0 +138a 70087400 jam 0 ,mem_sp_calc +138b 70095b00 jam 0 ,mem_fifo_temp +138c 7002df00 jam 0 ,mem_le_testtype +138d 7000e400 jam 0 ,mem_debug_config +138e 7003a500 jam 0 ,mem_lmp_conn_state +138f 7000bd00 jam 0 ,mem_connection_options +1390 700a5100 jam 0 ,mem_tester_emulate +1391 700a5c00 jam 0 ,mem_tester_cnt +1392 589e8b33 setarg param_glap +1393 67e1c0af store 3 ,mem_glap +1394 70008e60 jam 0x60 ,mem_fhs_misc +1395 7040d705 jam param_max_slot ,mem_max_slot +1396 70001402 jam 0x02 ,mem_fw_ver +1397 58000e43 setarg param_tx_setup +1398 67e10155 store 2 ,mem_param_tx_setup +1399 58000600 setarg param_rf_setup +139a 67e10157 store 2 ,mem_param_rf_setup +139b 58000600 setarg param_conn_access +139c 67e10159 store 2 ,mem_param_conn_access +139d 58000d00 setarg param_rx_setup +139e 67e1015f store 2 ,mem_param_rx_setup +139f 580003bb setarg param_clke_cal +13a0 67e1015b store 2 ,mem_param_clke_cal +13a1 58000500 setarg param_pll_setup +13a2 67e1015d store 2 ,mem_param_pll_setup +13a3 580007d0 setarg param_dpll_start_delay +13a4 67e10161 store 2 ,mem_param_dpll_start_delay +13a5 58000ea6 setarg param_rt_rthalfslot +13a6 67e10163 store 2 ,mem_param_rt_rthalfslot +13a7 580001e0 setarg param_clke_cal_le_1m +13a8 67e10165 store 2 ,mem_param_clke_cal_le_1m +13a9 58000120 setarg param_clke_cal_le_2m +13aa 67e10167 store 2 ,mem_param_clke_cal_le_2m +13ab 5800011a setarg param_clke_cal_le_coded +13ac 67e10169 store 2 ,mem_param_clke_cal_le_coded +13ad 58001400 setarg mem_ble_tx_buff0 +13ae 67e143de store 2 ,mem_ble_l2cap_tx_buff0_ptr +13af 58000100 setarg mem_ble_l2cap_tx_buff_size +13b0 67e143e0 store 2 ,mem_ble_l2cap_tx_buff_size_ptr +13b1 20406dfb call init_memp +13b2 58000880 setarg mem_sp_state_end +13b3 d8a00870 arg mem_sp_state_start ,contw +13b4 98a67200 isub contw ,loopcnt +13b5 20407d26 call clear_mem + +init_param_next: +13b6 44cfc013 bpatch patch13_7 ,mem_patch13 +13b7 20758000 rtn wake +13b8 7045f709 jam bluetooth_core_specification_5_0 ,mem_lmp_version +13b9 5800050e setarg company_id_yichip +13ba 67e145f8 store 2 ,mem_lmp_compid +13bb 58000008 setarg 0x08 +13bc 67e145fa store 2 ,mem_lmp_subversion +13bd 7044cf7f jam 0x7f ,mem_seqi +13be 58000024 setarg 0x24 +13bf 67e140b5 store 2 ,mem_iscan_window +13c0 67e140b9 store 2 ,mem_pscan_window +13c1 58000200 setarg 0x200 +13c2 67e140b7 store 2 ,mem_iscan_interval +13c3 67e140bb store 2 ,mem_pscan_interval +13c4 58000020 setarg 0x20 +13c5 67e140c3 store 2 ,mem_inq_window +13c6 67e140bf store 2 ,mem_page_window +13c7 58002000 setarg 0x2000 +13c8 67e140c1 store 2 ,mem_page_to +13c9 58000480 setarg 0x480 +13ca 67e140c6 store 2 ,mem_rx_window_init +13cb 58000c00 setarg 0xc00 +13cc 67e140c8 store 2 ,mem_rx_window_sniff +13cd 58000c3f setarg 0xc3f +13ce 67e1417e store 2 ,mem_lpm_xtalcnt + 1 +13cf 58000333 setarg 0x333 +13d0 e7e10005 istore 2 ,contw +13d1 5824109d setarg 0x24109d +13d2 67e1c183 store 3 ,mem_lpm_ctrl3 + 1 +13d3 20407fdc call clear_wake +13d4 58000000 setarg 0 +13d5 67e141e6 store 2 ,mem_tx_len +13d6 1c437e00 rshift clkn_bt ,pdata +13d7 67e2409c store 4 ,mem_last_clkn +13d8 20600000 rtn + +clk24m_init: +13d9 70804206 jam 6 ,core_clksel +13da 70804201 jam 1 ,core_clksel +13db 2000000a nop 10 +13dc 58001d4a setarg 7498 +13dd 67f10040 store 2 ,core_halfslot +13de 20600000 rtn + +test_init: +13df 580013e4 setarg test_proc +13e0 67e14463 store 2 ,mem_cb_bt_process +13e1 580013e4 setarg test_proc +13e2 67e14465 store 2 ,mem_cb_idle_process +13e3 20600000 rtn + +test_proc: +13e4 6fe08031 fetch 1 ,mem_state +13e5 c30093ea bbit0 state_insniff ,check_test_cond +13e6 7920000d set1 mark_lpm_mult_enable ,mark +13e7 6fe3416e fetch 6 ,mem_sniff_rcv +13e8 67e345fd store 6 ,mem_local_name +13e9 20600000 rtn + +check_test_cond: +13ea 6fe08a51 fetch 1 ,mem_tester_emulate +13eb c4010000 rtnbit0 tester_change +13ec 6fe08a5c fetch 1 ,mem_tester_cnt +13ed 1fe0fe01 increase 1 ,pdata +13ee 67e08a5c store 1 ,mem_tester_cnt +13ef c1828000 rtnne 5 +13f0 700a5c00 jam 0 ,mem_tester_cnt +13f1 6fe08a51 fetch 1 ,mem_tester_emulate +13f2 793ffe02 set0 tester_change ,pdata +13f3 67e08a51 store 1 ,mem_tester_emulate +13f4 c281940b bbit1 tester_exit ,check_test_exit +13f5 2feffe07 isolate1 tester_no_whitening ,pdata +13f6 2040fe19 call test_no_white ,true +13f7 2440fe1d ncall test_enable_white ,true +13f8 6fe08a58 fetch 1 ,test_mode_packet_type +13f9 2fe06020 compare 0x20 ,pdata ,0x30 +13fa 6fe0804d fetch 1 ,mem_state_map +13fb 7920fe05 setflag true ,smap_edr ,pdata +13fc 67e0804d store 1 ,mem_state_map +13fd 6fe08a51 fetch 1 ,mem_tester_emulate +13fe 684880e4 fetcht 1 ,mem_debug_config +13ff 2feffe04 isolate1 tester_pattern_test ,pdata +1400 79208406 setflag true ,debug_tx_pattern ,temp +1401 2feffe06 isolate1 tester_fixed_freq ,pdata +1402 79208404 setflag true ,debug_tx_fixed_freq ,temp +1403 79208405 setflag true ,debug_rx_fixed_freq ,temp +1404 604880e4 storet 1 ,mem_debug_config +1405 6fe08a54 fetch 1 ,test_mode_tx_freq +1406 67e0839f store 1 ,mem_tx_fixed_freq +1407 6fe08a55 fetch 1 ,test_mode_rx_freq +1408 67e083a0 store 1 ,mem_rx_fixed_freq +1409 79200011 set1 mark_testmode ,mark +140a 20600000 rtn + +check_test_exit: +140b 793f8011 set0 mark_testmode ,mark +140c 700a5100 jam 0 ,mem_tester_emulate +140d 6fe08a5b fetch 1 ,mem_test_mode_old_debug_config +140e 67e080e4 store 1 ,mem_debug_config +140f 20207e1d branch test_enable_white + +lpmstate: +1410 5800ee21 setarg 0xee21 +1411 67f10050 store 2 ,core_clkoff +1412 6ff2011c fetch 4 ,core_gpio_in +1413 67e2098a store 4 ,mem_saved_gpio_in +1414 6ff0813b fetch 1 ,core_lpm_ctrl + 3 +1415 67e08989 store 1 ,mem_wakup_from_power_flag +1416 6ff0813e fetch 1 ,core_lpm_ldocnt +1417 c301db6a bbit0 gpio_latch ,loadcode +1418 7835fc00 enable wake +1419 c3039421 bbit0 cold_wake ,lpmwake +141a 7855fc00 disable wake +141b 1ce27e00 deposit auxcnt +141c 243a1421 nbranch lpmwake ,blank +141d 6ff0813b fetch 1 ,core_lpm_ctrl + 3 +141e c2811421 bbit1 reload_code ,lpmwake +141f d85fffff arg param_hibernate_clks ,temp +1420 202014b0 branch lpm_enter_sleep + +lpmwake: +1421 6ff20134 fetch 4 ,core_lpm_ctrl2 +1422 67f2004c store 4 ,core_lpm_reg +1423 6ff08135 fetch 1 ,core_lpm_ctrl2 + 1 +1424 1fe17ee0 and_into 0xe0 ,pdata +1425 67f0804d store 1 ,core_lpm_reg + 1 +1426 204015af call lpm_write_ctrl3 +1427 6ff1813c fetch 3 ,core_lpm_xtalcnt +1428 67f1804c store 3 ,core_lpm_reg +1429 efe08006 ifetch 1 ,contr +142a 1fe1feef or_into isogate_mask ,pdata +142b e7e08005 istore 1 ,contw +142c 2040159c call lpm_write_ctrl2 +142d 6ff0804f fetch 1 ,core_lpm_isogate +142e 79207e04 set1 enable_retmem ,pdata +142f 67f0804f store 1 ,core_lpm_isogate +1430 2040159c call lpm_write_ctrl2 +1431 20559453 call lpm_load_context ,wake +1432 6ff0804e fetch 1 ,core_lpm_reg + 2 +1433 793ffe03 set0 gpio_latch ,pdata +1434 67f0804e store 1 ,core_lpm_reg + 2 +1435 2040159c call lpm_write_ctrl2 +1436 2435db6a nbranch loadcode ,wake +1437 2040143b call lpm_save_mpu_lock +1438 c6958000 rtnmark0 mark_otp_encrypt +1439 70800608 jam lock_otp ,core_misc_ctrl +143a 20600000 rtn + +lpm_save_mpu_lock: +143b 6fe1c4cc fetch 3 ,mem_efuse_header +143c 207a0000 rtn blank +143d 67e18a01 store 3 ,mem_tmp_buffer +143e 20205c49 branch app_lpm_peripheral_lock_check + +lpm_ctrl3_cfg_dig_vsel: +143f 6fe0c4d0 fetch 1 ,mem_dig_aon_vsel +1440 c0009447 beq 1 ,lpm_ctrl3_cfg_vsel_108 +1441 c001144b beq 2 ,lpm_ctrl3_cfg_vsel_096 +1442 c001944f beq 3 ,lpm_ctrl3_cfg_vsel_084 + +lpm_ctrl3_cfg_vsel_120: +1443 6fe0c183 fetch 1 ,mem_lpm_ctrl3 + 1 +1444 1fe17ee0 and_into 0xe0 ,pdata + +lpm_ctrl3_cfg_vsel_store: +1445 67e0c183 store 1 ,mem_lpm_ctrl3 + 1 +1446 20600000 rtn + +lpm_ctrl3_cfg_vsel_108: +1447 6fe0c183 fetch 1 ,mem_lpm_ctrl3 + 1 +1448 1fe17ee0 and_into 0xe0 ,pdata +1449 1fe1fe1d or_into 0x1d ,pdata +144a 20201445 branch lpm_ctrl3_cfg_vsel_store + +lpm_ctrl3_cfg_vsel_096: +144b 6fe0c183 fetch 1 ,mem_lpm_ctrl3 + 1 +144c 1fe17ee0 and_into 0xe0 ,pdata +144d 1fe1fe1b or_into 0x1b ,pdata +144e 20201445 branch lpm_ctrl3_cfg_vsel_store + +lpm_ctrl3_cfg_vsel_084: +144f 6fe0c183 fetch 1 ,mem_lpm_ctrl3 + 1 +1450 1fe17ee0 and_into 0xe0 ,pdata +1451 1fe1fe17 or_into 0x17 ,pdata +1452 20201445 branch lpm_ctrl3_cfg_vsel_store + +lpm_load_context: +1453 6fe0c1a5 fetch 1 ,mem_saved_spidctrl +1454 67f08086 store 1 ,core_spid_ctrl +1455 d8c04186 arg mem_saved_gpio ,contr +1456 d8a08070 arg core_gpio_conf ,contw +1457 20407d01 call memcpy20 +1458 6fe4419d fetch 8 ,mem_saved_mark +1459 98000000 iforce mark +145a 6ff40140 fetch 8 ,core_gpio_wakeup_low +145b 67e4009f store 8 ,mem_gpio_wakeup_low +145c 20205c05 branch load_ucode + +lpm_save_context: +145d 18027e00 deposit mark +145e 67e4419d store 8 ,mem_saved_mark +145f d8c08070 arg core_gpio_conf ,contr +1460 d8a04186 arg mem_saved_gpio ,contw +1461 20407d01 call memcpy20 +1462 6ff08086 fetch 1 ,core_spid_ctrl +1463 67e0c1a5 store 1 ,mem_saved_spidctrl +1464 202015b1 branch lpm_write_gpio_wakeup + +lpo_calibration: +1465 6ff08085 fetch 1 ,core_aes_en +1466 1ff1fe00 rshift4 pdata ,pdata +1467 243a146e nbranch lpo_cal_inited ,blank +1468 6fe1c174 fetch 3 ,mem_clks_per_lpo +1469 247a0000 nrtn blank +146a 6ff08085 fetch 1 ,core_aes_en +146b 1fe1fec0 or_into 0xc0 ,pdata +146c 67f08085 store 1 ,core_aes_en +146d 70800680 jam ccnt_start ,core_misc_ctrl + +lpo_cal_inited: +146e 6ff0812d fetch 1 ,core_perf_status +146f c4008000 rtnbit0 1 +1470 6ff18149 fetch 3 ,core_clk_counter +1471 67e1c174 store 3 ,mem_clks_per_lpo +1472 20600000 rtn + +lpm_adjust_clk: +1473 44d04014 bpatch patch14_0 ,mem_patch14 +1474 1b427e00 deposit clke +1475 20407d95 call clk_diff_rt +1476 684a4164 fetcht 4 ,mem_sleep_counter_all +1477 18467cff sub temp ,0xff ,null +1478 20610000 rtn positive +1479 1fed7e00 lshift8 pdata ,pdata +147a 1ff27e00 lshift4 pdata ,pdata +147b 9846fc00 idiv temp +147c 20407dec call get_div_result +147d d84000c8 arg param_lpm_adjmax ,temp +147e 20407dfa call ceiling +147f 67e08097 store 1 ,mem_lpm_adjust +1480 24341482 nbranch lpm_adjust_positive ,user +1481 1fe67e00 sub pdata ,0 ,pdata + +lpm_adjust_positive: +1482 6849c174 fetcht 3 ,mem_clks_per_lpo +1483 9840fe00 iadd temp ,pdata +1484 67e1c174 store 3 ,mem_clks_per_lpo + +lpm_clear_counter: +1485 58000000 setarg 0 +1486 67e24164 store 4 ,mem_sleep_counter_all +1487 20600000 rtn + +lpm_doze: +1488 6fe0c17c fetch 1 ,mem_lpm_config + 2 +1489 79207e02 set1 reload_code ,pdata +148a 67e0c17c store 1 ,mem_lpm_config + 2 +148b 20201490 branch lpm_hibernate_normal + +lpm_hibernate: +148c d85fffff arg param_hibernate_clks ,temp +148d 6fe0c17b fetch 1 ,mem_lpm_config + 1 +148e 793ffe07 set0 7 ,pdata +148f 67e0c17b store 1 ,mem_lpm_config + 1 + +lpm_hibernate_normal: +1490 44d0c014 bpatch patch14_1 ,mem_patch14 +1491 204015b1 call lpm_write_gpio_wakeup +1492 6fe0c15c fetch 1 ,mem_lpm_hibernate_switch +1493 67e0c181 store 1 ,mem_lpm_xtalcnt + 4 +1494 6fe0c17f fetch 1 ,mem_lpm_xtalcnt + 2 +1495 79207e07 set1 cold_wake ,pdata +1496 67e0c17f store 1 ,mem_lpm_xtalcnt + 2 + +lpm_sleep: +1497 44d14014 bpatch patch14_2 ,mem_patch14 +1498 204012cf call xtal_fast_wake +1499 6fe24164 fetch 4 ,mem_sleep_counter_all +149a 9840fe00 iadd temp ,pdata +149b 67e24164 store 4 ,mem_sleep_counter_all +149c 2040145d call lpm_save_context +149d 2040143f call lpm_ctrl3_cfg_dig_vsel +149e 6fe24182 fetch 4 ,mem_lpm_ctrl3 +149f 1fe22400 copy pdata ,regb +14a0 6fe2c17d fetch 5 ,mem_lpm_xtalcnt +14a1 67f2004c store 4 ,core_lpm_reg +14a2 1fef2200 rshift32 pdata ,rega +14a3 37d98200 until null ,lpo_edge +14a4 1b227e00 deposit clkn +14a5 67e34168 store 6 ,mem_sleep_clkn +14a6 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr +14a7 37d98200 until null ,lpo_edge +14a8 37d98200 until null ,lpo_edge +14a9 1a227e00 deposit rega +14aa 67f0804f store 1 ,core_lpm_isogate +14ab 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr +14ac 37d98200 until null ,lpo_edge +14ad 37d98200 until null ,lpo_edge +14ae 6252004c storer regb ,4 ,core_lpm_reg +14af 70800520 jam lpmreg_sel_ctrl3 ,core_lpm_wr + +lpm_enter_sleep: +14b0 37d98200 until null ,lpo_edge +14b1 37d98200 until null ,lpo_edge +14b2 605a004c storet 4 ,core_lpm_reg +14b3 70800510 jam lpmreg_sel_counter ,core_lpm_wr +14b4 37df8200 until null ,never + +lpm_recover_clk: +14b5 44d1c014 bpatch patch14_3 ,mem_patch14 +14b6 58000000 setarg 0 +14b7 1ce27c00 copy auxcnt ,null +14b8 202294c0 branch lpm_recover_timeout ,zero +14b9 6ff0813c fetch 1 ,core_lpm_xtalcnt +14ba 6858813d fetcht 1 ,core_lpm_buckcnt +14bb 98467c00 isub temp ,null +14bc 202114be branch lpm_recover_xtal ,positive +14bd 18427e00 deposit temp + +lpm_recover_xtal: +14be 9ce67e00 isub auxcnt ,pdata +14bf 1fe0fe01 increase 1 ,pdata + +lpm_recover_timeout: +14c0 1fe0fe0a increase 10 ,pdata +14c1 37d98200 until null ,lpo_edge +14c2 9e20fe00 iadd lpo_time ,pdata +14c3 684a4160 fetcht 4 ,mem_sleep_counter +14c4 9840fe00 iadd temp ,pdata +14c5 6849c174 fetcht 3 ,mem_clks_per_lpo +14c6 984ffe00 imul32 temp ,pdata +14c7 1fecfe00 rshift8 pdata ,pdata +14c8 1ff1fe00 rshift4 pdata ,pdata +14c9 1fe0fe6e increase param_lpm_fix ,pdata +14ca 68490163 fetcht 2 ,mem_param_rt_rthalfslot +14cb 9846fc00 idiv temp +14cc 20407dec call get_div_result +14cd 1ff07e00 lshift16 pdata ,pdata +14ce 18070400 remainder temp +14cf 9841fe00 ior temp ,pdata +14d0 684b4168 fetcht 6 ,mem_sleep_clkn +14d1 20407d8a call clk_add +14d2 18423200 copy temp ,clkn +14d3 6fe34048 fetch 6 ,mem_context + coffset_clk_offset +14d4 20401077 call calc_clke2 +14d5 1b427e00 deposit clke +14d6 67e3095c store 6 ,mem_pdatatemp +14d7 1ce27e00 deposit auxcnt +14d8 e7e08005 istore 1 ,contw +14d9 6ff0811d fetch 1 ,core_gpio_in1 +14da 1fe1fef0 or_into 0xf0 ,pdata +14db e7e08005 istore 1 ,contw +14dc 20600000 rtn + +lpm_dispatch: +14dd 44d24014 bpatch patch14_4 ,mem_patch14 +14de 20401465 call lpo_calibration +14df 6fe1c174 fetch 3 ,mem_clks_per_lpo +14e0 207a0000 rtn blank +14e1 6fe0c099 fetch 1 ,mem_lpm_mode +14e2 207a0000 rtn blank +14e3 6fe0c764 fetch 1 ,mem_ssp_enable +14e4 203a14e7 branch lpm_dispatch_next ,blank +14e5 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +14e6 207a0000 rtn blank + +lpm_dispatch_next: +14e7 6fe0c6ba fetch 1 ,mem_sc_calc +14e8 247a0000 nrtn blank +14e9 c61a0000 rtnmark1 mark_adc_enable +14ea da600ab9 arg context_check_a_wack ,regc +14eb 20400a70 call context_search +14ec 20628000 rtn zero +14ed 204015c2 call lpm_check_wake_lock +14ee 247a0000 nrtn blank +14ef 6fe0c040 fetch 1 ,mem_context +14f0 2fe00e03 compare 3 ,pdata ,0x7 +14f1 24209514 nbranch lpm_dispatch_unconn ,true +14f2 6fe14042 fetch 2 ,mem_context + coffset_tsniff +14f3 207a0000 rtn blank +14f4 20758000 rtn wake +14f5 44d2c014 bpatch patch14_5 ,mem_patch14 + +lpm_dispatch_next2: +14f6 6848809e fetcht 1 ,mem_lpm_current_mult +14f7 6fe14042 fetch 2 ,mem_context + coffset_tsniff +14f8 984ffe00 imul32 temp ,pdata +14f9 18518400 rshift4 temp ,temp +14fa 184b0400 rshift2 temp ,temp +14fb 98467e00 isub temp ,pdata +14fc 684a4044 fetcht 4 ,mem_context + coffset_sniff_anchor +14fd 9840fe00 iadd temp ,pdata +14fe 6848c15b fetcht 1 ,mem_lpm_overhead +14ff 98467e00 isub temp ,pdata +1500 1ff06000 lshift16 pdata ,alarm +1501 44d34014 bpatch patch14_6 ,mem_patch14 +1502 6fe1404e fetch 2 ,mem_context + coffset_rx_window +1503 1fe37e00 rshift pdata ,pdata +1504 20407db1 call clk2bt +1505 1e027e00 deposit alarm +1506 20407d97 call clk_diff +1507 1b420400 copy clke ,temp +1508 20407d95 call clk_diff_rt +1509 20740000 rtn user + +lpm_dispatch_sleep: +150a 20407daa call clk2lpo + +lpm_dispatch_lpo: +150b 44d3c014 bpatch patch14_7 ,mem_patch14 +150c 6fe0c17d fetch 1 ,mem_lpm_xtalcnt +150d 98467c00 isub temp ,null +150e 20211485 branch lpm_clear_counter ,positive +150f 604a4160 storet 4 ,mem_sleep_counter +1510 20403143 call app_will_enter_lpm +1511 2040534e call l2cap_lpm_save_txbuf +1512 684a4160 fetcht 4 ,mem_sleep_counter +1513 20201497 branch lpm_sleep + +lpm_dispatch_unconn: +1514 44d44015 bpatch patch15_0 ,mem_patch15 +1515 6fe0c040 fetch 1 ,mem_context +1516 c3800000 rtnbit1 state_inconn +1517 c3818000 rtnbit1 state_inpage +1518 6fe0c764 fetch 1 ,mem_ssp_enable +1519 203a151c branch lpm_unconn_nossp ,blank +151a 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +151b 207a0000 rtn blank + +lpm_unconn_nossp: +151c 6fe0c427 fetch 1 ,mem_le_adv_enable +151d 243a1520 nbranch lpm_unconn_cont ,blank +151e 6fe0c09b fetch 1 ,mem_scan_mode +151f 207a0000 rtn blank + +lpm_unconn_cont: +1520 6fe14159 fetch 2 ,mem_lpm_interval +1521 207a0000 rtn blank + +lpm_sleep_btclk: +1522 6848c15b fetcht 1 ,mem_lpm_overhead +1523 98467e00 isub temp ,pdata +1524 d8401d4c arg 7500 ,temp +1525 984ffe00 imul32 temp ,pdata +1526 2020150a branch lpm_dispatch_sleep + +lpm_set_mult: +1527 44d4c015 bpatch patch15_1 ,mem_patch15 +1528 7855fc00 disable wake +1529 6fe08031 fetch 1 ,mem_state +152a c4008000 rtnbit0 state_insniff +152b 24369549 nbranch lpm_not_match ,match +152c 20401544 call lpm_match +152d 6fe140c8 fetch 2 ,mem_rx_window_sniff +152e 67e1003f store 2 ,mem_rx_window +152f 6fe08048 fetch 1 ,mem_arq +1530 c2819557 bbit1 wack ,lpm_mult_short +1531 c5869557 bmark0 mark_lpm_mult_enable ,lpm_mult_short +1532 204052f7 call l2cap_malloc_is_fifo_empty +1533 243a1557 nbranch lpm_mult_short ,blank +1534 6fe0c643 fetch 1 ,mem_classic_bt_flag +1535 c2809557 bbit1 short_mult_flag ,lpm_mult_short + +lpm_mult_wait_timeout: +1536 6fe14471 fetch 2 ,mem_cb_bt_set_mult +1537 20407e05 call callback_func +1538 243a1557 nbranch lpm_mult_short ,blank +1539 70009e00 jam 0 ,mem_lpm_current_mult +153a c5869557 bmark0 mark_lpm_mult_enable ,lpm_mult_short +153b 6fe0c179 fetch 1 ,mem_lpm_mult_cnt +153c 203a155b branch lpm_mult_long ,blank +153d 1fe0ffff increase -1 ,pdata +153e 67e0c179 store 1 ,mem_lpm_mult_cnt +153f 20600000 rtn + +classic_bt_set_mult_short_flag: +1540 d8e00001 arg short_mult_flag ,queue +1541 202057e4 branch classic_bluetooth_set_flag + +classic_bt_clr_mult_short_flag: +1542 d8e00001 arg short_mult_flag ,queue +1543 202057e8 branch classic_bluetooth_clr_flag + +lpm_match: +1544 70415e00 jam 0 ,mem_sniff_unint_lost +1545 6fe1c16e fetch 3 ,mem_sniff_rcv +1546 1fe0fe01 increase 1 ,pdata +1547 67e1c16e store 3 ,mem_sniff_rcv +1548 20600000 rtn + +lpm_not_match: +1549 44d54015 bpatch patch15_2 ,mem_patch15 +154a 684940c8 fetcht 2 ,mem_rx_window_sniff +154b 18430400 rshift temp ,temp +154c 6fe1003f fetch 2 ,mem_rx_window +154d 9840fe00 iadd temp ,pdata +154e 67e1003f store 2 ,mem_rx_window + +lpm_lost: +154f 70009e00 jam 0 ,mem_lpm_current_mult +1550 6fe1c171 fetch 3 ,mem_sniff_lost +1551 1fe0fe01 increase 1 ,pdata +1552 67e1c171 store 3 ,mem_sniff_lost +1553 6fe0c15e fetch 1 ,mem_sniff_unint_lost +1554 1fe0fe01 increase 1 ,pdata +1555 67e0c15e store 1 ,mem_sniff_unint_lost +1556 20600000 rtn + +lpm_mult_short: +1557 70009e00 jam 0 ,mem_lpm_current_mult +1558 6fe0c178 fetch 1 ,mem_lpm_mult_timeout +1559 67e0c179 store 1 ,mem_lpm_mult_cnt +155a 20600000 rtn + +lpm_mult_long: +155b 6848c177 fetcht 1 ,mem_lpm_mult +155c 6048809e storet 1 ,mem_lpm_current_mult +155d 20600000 rtn + +lpm_cal_xtal_startup: +155e 44d5c015 bpatch patch15_3 ,mem_patch15 +155f 6fe0c17d fetch 1 ,mem_lpm_xtalcnt +1560 247a0000 nrtn blank +1561 70804206 jam clksel_rc ,core_clksel +1562 58000f0c setarg 0xf0c +1563 20401591 call lpm_write_config +1564 58030d40 setarg 200000 +1565 2040137d call sleep +1566 37d98200 until null ,lpo_edge +1567 1e226000 copy lpo_time ,alarm +1568 204012cf call xtal_fast_wake +1569 70804204 jam clksel_xtal ,core_clksel +156a 2000000a nop 10 +156b 37d98200 until null ,lpo_edge +156c 1e227e00 deposit lpo_time +156d 9e067e00 isub alarm ,pdata +156e 1fe0fe30 increase 0x30 ,pdata +156f d84000ff arg 0xff ,temp +1570 20407dfa call ceiling +1571 67e0c17d store 1 ,mem_lpm_xtalcnt +1572 20007530 nop 30000 +1573 20007530 nop 30000 +1574 20007530 nop 30000 +1575 20600000 rtn + +lpm_cal_xtal_startup_by_snooze: +1576 6fe0c17d fetch 1 ,mem_lpm_xtalcnt +1577 247a0000 nrtn blank +1578 708044ff jam 0xff ,core_xtal_stable_time +1579 70804206 jam clksel_rc ,core_clksel +157a 204012cf call xtal_fast_wake +157b 580003e8 setarg 1000 +157c 9e20e000 iadd lpo_time ,alarm +157d 07e00000 snooze +157e 1e227e00 deposit lpo_time +157f 20002ee0 nop 12000 +1580 20002ee0 nop 12000 +1581 20002ee0 nop 12000 +1582 20002ee0 nop 12000 +1583 20002ee0 nop 12000 +1584 20002ee0 nop 12000 +1585 20002ee0 nop 12000 +1586 20002ee0 nop 12000 +1587 20002ee0 nop 12000 +1588 9e067e00 isub alarm ,pdata +1589 1fe0fe30 add pdata ,0x30 ,pdata +158a d84000ff arg 0xff ,temp +158b 20407dfa call ceiling +158c 67e0c17d store 1 ,mem_lpm_xtalcnt +158d 20007530 nop 30000 +158e 20007530 nop 30000 +158f 20007530 nop 30000 +1590 20600000 rtn + +lpm_write_config: +1591 d8a00fff arg 0xfff ,contw +1592 98a10a00 iand contw ,contw +1593 6fe0c17a fetch 1 ,mem_lpm_config +1594 1fe17ef0 and_into 0xf0 ,pdata +1595 1fed7e00 lshift8 pdata ,pdata +1596 98a1fe00 ior contw ,pdata +1597 67f1004c store 2 ,core_lpm_reg +1598 efe10006 ifetch 2 ,contr +1599 e7e10005 istore 2 ,contw + +lpm_write_ctrl: +159a 58000001 setarg lpmreg_sel_ctrl +159b 2020159d branch lpm_write + +lpm_write_ctrl2: +159c 58000002 setarg lpmreg_sel_ctrl2 + +lpm_write: +159d 37d98200 until null ,lpo_edge +159e 67f08005 store 1 ,core_lpm_wr +159f 37d98200 until null ,lpo_edge +15a0 37d98200 until null ,lpo_edge +15a1 20600000 rtn + +lpm_write_sel_vdd3v3: +15a2 70418200 jam 0x00 ,mem_lpm_ctrl3 +15a3 6ff20134 fetch 4 ,core_lpm_ctrl2 +15a4 67f2004c store 4 ,core_lpm_reg +15a5 6ff08134 fetch 1 ,core_lpm_ctrl2 +15a6 1fe17ec1 and_into 0xc1 ,pdata +15a7 67f0804c store 1 ,core_lpm_reg +15a8 202015af branch lpm_write_ctrl3 + +lpm_write_sel_vdd5v: +15a9 7041823e jam 0x3e ,mem_lpm_ctrl3 +15aa 6ff20134 fetch 4 ,core_lpm_ctrl2 +15ab 67f2004c store 4 ,core_lpm_reg +15ac 6ff08134 fetch 1 ,core_lpm_ctrl2 +15ad 1fe1fe3e or_into 0x3e ,pdata +15ae 67f0804c store 1 ,core_lpm_reg + +lpm_write_ctrl3: +15af 58000020 setarg lpmreg_sel_ctrl3 +15b0 2020159d branch lpm_write + +lpm_write_gpio_wakeup: +15b1 44d64015 bpatch patch15_4 ,mem_patch15 +15b2 6fe2009f fetch 4 ,mem_gpio_wakeup_low +15b3 67f2004c store 4 ,core_lpm_reg +15b4 58000004 setarg lpmreg_sel_gpiolow +15b5 2040159d call lpm_write +15b6 6fe200a3 fetch 4 ,mem_gpio_wakeup_high +15b7 67f2004c store 4 ,core_lpm_reg +15b8 58000008 setarg lpmreg_sel_gpiohigh +15b9 2020159d branch lpm_write + +lpm_get_wake_lock: +15ba 6fe14157 fetch 2 ,mem_lpm_wake_lock +15bb f9207e00 qset1 pdata +15bc 67e14157 store 2 ,mem_lpm_wake_lock +15bd 20600000 rtn + +lpm_put_wake_lock: +15be 6fe14157 fetch 2 ,mem_lpm_wake_lock +15bf f93ffe00 qset0 pdata +15c0 67e14157 store 2 ,mem_lpm_wake_lock +15c1 20600000 rtn + +lpm_check_wake_lock: +15c2 44d6c015 bpatch patch15_5 ,mem_patch15 +15c3 20403141 call app_check_wake_lock +15c4 6fe14157 fetch 2 ,mem_lpm_wake_lock +15c5 1fe22200 copy pdata ,rega +15c6 6fe0804d fetch 1 ,mem_state_map +15c7 2feffe06 isolate1 smap_rxlmp ,pdata +15c8 7920a20b setflag true ,wake_lock_lmp_rx ,rega +15c9 6fe08079 fetch 1 ,mem_lmo_opcode1 +15ca 6848807d fetcht 1 ,mem_lmo_opcode2 +15cb 9840fe00 iadd temp ,pdata +15cc 68488049 fetcht 1 ,mem_lmp_to_send +15cd 9840fe00 iadd temp ,pdata +15ce 7d3a220a nsetflag blank ,wake_lock_lmp_tx ,rega +15cf 6fe1c4f0 fetch 3 ,mem_tx_fifo3 +15d0 7d3a2201 nsetflag blank ,wake_lock_ble_tx ,rega +15d1 6fe1030e fetch 2 ,mem_l2cap_rxbuff1_len +15d2 68490310 fetcht 2 ,mem_l2cap_rxbuff2_len +15d3 9840fe00 iadd temp ,pdata +15d4 7d3a220d nsetflag blank ,wake_lock_l2cap_rx ,rega +15d5 6fe44772 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +15d6 7d3a220f nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +15d7 6fe4477a fetch util_fifo_len ,mem_ipc_fifo_c512bt +15d8 7d3a220e nsetflag blank ,wake_lock_ipc_c512bt ,rega +15d9 6fe0c1db fetch 1 ,mem_hci_cmd +15da 7d3a2208 nsetflag blank ,wake_lock_cmd ,rega +15db 6fe0c09a fetch 1 ,mem_device_option +15dc 2fe1fe0a compare dvc_op_module ,pdata ,0xff +15dd 204095e1 call lpm_uart_wake_lock ,true +15de 1a227e00 copy rega ,pdata +15df 67e14157 store 2 ,mem_lpm_wake_lock +15e0 20600000 rtn + +lpm_uart_wake_lock: +15e1 6ff10112 fetch 2 ,core_uart_rxitems +15e2 7d3a2206 nsetflag blank ,wake_lock_uart_rx ,rega +15e3 6ff1010e fetch 2 ,core_uart_txitems +15e4 7d3a2205 nsetflag blank ,wake_lock_uart_tx ,rega +15e5 20600000 rtn + +lpm_shut_down: +15e6 6ff20138 fetch 4 ,core_lpm_ctrl +15e7 793ffe1b set0 27 ,pdata +15e8 67f2004c store 4 ,core_lpm_reg +15e9 2040159a call lpm_write_ctrl +15ea 2020137a branch assert + +lpm_disable_exen_output: +15eb 6ff2013c fetch 4 ,core_lpm_xtalcnt +15ec 793ffe14 set0 20 ,pdata +15ed 67f2004c store 4 ,core_lpm_reg +15ee 2020159c branch lpm_write_ctrl2 + +le_init_conn: +15ef 474dc033 bpatchx patch33_3 ,mem_patch33 +15f0 7855fc00 disable wake +15f1 70029d01 jam 1 ,mem_le_conn_handle +15f2 70028703 jam 3 ,mem_le_state +15f3 70029e01 jam 1 ,mem_le_arq +15f4 5fffffff setarg -1 +15f5 67e102a1 store 2 ,mem_le_event_count +15f6 18007e00 force 0 ,pdata +15f7 67e0829f store 1 ,mem_le_ch +15f8 67e082aa store 1 ,mem_le_op +15f9 67e1c16e store 3 ,mem_sniff_rcv +15fa 67e1c171 store 3 ,mem_sniff_lost +15fb 20401955 call le_clear_enc +15fc 7041f501 jam 1 ,mem_le_txheader +15fd 7041f600 jam 0 ,mem_le_txlen +15fe 7002bc01 jam fun_rx_ll_1m_phy ,mem_le_rx_phy +15ff 7002bd01 jam fun_tx_ll_1m_phy ,mem_le_tx_phy +1600 70443500 jam 0 ,mem_le_l2cap_att_states +1601 20201a30 branch le_supervision_flush + +le_init_master: +1602 474e4033 bpatchx patch33_4 ,mem_patch33 +1603 7834fc00 enable master +1604 70028803 jam lemode_master ,mem_le_mode +1605 70443701 jam 1 ,mem_le_att_handle +1606 70099e01 jam 1 ,mem_le_search_handle_start +1607 5800ffff setarg 0xffff +1608 67e109a0 store 2 ,mem_le_search_handle_end +1609 18007e00 force 0 ,pdata +160a 67e2c6a1 store 5 ,mem_ccm_pcnt_rx +160b 79207e27 set1 le_ccm_directionbit ,pdata +160c 67e2c69c store 5 ,mem_ccm_pcnt_tx +160d 202015ef branch le_init_conn + +le_init_slave: +160e 474ec033 bpatchx patch33_5 ,mem_patch33 +160f 7854fc00 disable master +1610 58000017 setarg 0x17 +1611 67e14382 store 2 ,mem_le_remote_mtu +1612 1fe0fe04 increase 4 ,pdata +1613 67e14444 store 2 ,mem_remote_rx_max_octets +1614 70028801 jam lemode_slave ,mem_le_mode +1615 70442700 jam 0 ,mem_le_adv_enable +1616 70009e00 jam 0 ,mem_lpm_current_mult +1617 2040167a call le_clear_pairing_state +1618 6fe102b5 fetch 2 ,mem_le_superto +1619 67e14394 store 2 ,mem_le_init_superto +161a 6fe10289 fetch 2 ,mem_le_tsniff +161b 1feffe05 mul32 pdata ,5 ,pdata +161c 1ff1fe00 rshift4 pdata ,pdata +161d 67e102b5 store 2 ,mem_le_superto +161e 202015ef branch le_init_conn + +le_conn_dispatch: +161f 474f4033 bpatchx patch33_6 ,mem_patch33 +1620 204016a5 call le_enable +1621 6fe08287 fetch 1 ,mem_le_state +1622 2feffe04 isolate1 lestate_encryption ,pdata +1623 79208032 setflag true ,mark_ble_encryption ,mark +1624 2040310f call app_process_ble +1625 6fe08288 fetch 1 ,mem_le_mode +1626 c2809628 bbit1 mode_master ,le_master_dispatch +1627 2020163a branch le_slave_dispatch + +le_master_dispatch: +1628 474fc033 bpatchx patch33_7 ,mem_patch33 +1629 7834fc00 enable master +162a 20401a27 call le_supervision_update +162b 20211637 branch le_master_disconn ,positive +162c 204016f6 call le_setup +162d 2040196a call le_prepare_tx +162e 7856fc00 disable match +162f 20401828 call le_transmit_receive_sifs +1630 24768000 nrtn match +1631 6fe08005 fetch 1 ,mem_le_conn_rcv +1632 1fe0fe01 increase 1 ,pdata +1633 67e08005 store 1 ,mem_le_conn_rcv +1634 2040191b call le_acknowledge +1635 7854fc00 disable master +1636 20600000 rtn + +le_master_disconn: +1637 2040166e call le_disconnect +1638 7854fc00 disable master +1639 20600000 rtn + +le_slave_dispatch: +163a 47504034 bpatchx patch34_0 ,mem_patch34 +163b 7043dd00 jam 0 ,mem_le_md_count +163c 793f8030 set0 mark_ble_crc_fail ,mark +163d 20407597 call sp_calc_sequence_256 +163e 204020b7 call le_secure_connect_sm +163f 78577c00 disable attempt +1640 20401a27 call le_supervision_update +1641 2021166e branch le_slave_disconn ,positive +1642 6fe082bc fetch 1 ,mem_le_rx_phy +1643 2040168b call le_enable_phy_by_pdata +1644 204016f6 call le_setup +1645 2040174e call le_receive_slave +1646 242c1660 nbranch le_slave_unsync ,sync +1647 2040167e call le_got_first_packet +1648 2036964b branch le_slave_match ,match +1649 c518164b bmark1 mark_ble_crc_fail ,le_slave_crc_fail +164a 2020165a branch le_slave_cont + +le_slave_crc_fail: + +le_slave_match: +164b 4750c034 bpatchx patch34_1 ,mem_patch34 +164c 6fe0c3dd fetch 1 ,mem_le_md_count +164d 1fe0fe01 pincrease 1 +164e 67e0c3dd store 1 ,mem_le_md_count +164f c006165a beq le_md_max_count ,le_slave_cont +1650 2040191b call le_acknowledge +1651 2040196a call le_prepare_tx +1652 6fe082bd fetch 1 ,mem_le_tx_phy +1653 2040168b call le_enable_phy_by_pdata +1654 20401836 call le_transmit_norx +1655 204019cd call le_parse +1656 6fe1446d fetch 2 ,mem_cb_ble_transmit +1657 20407e05 call callback_func +1658 20401663 call le_check_md +1659 20341668 branch le_slave_more_data ,user + +le_slave_cont: +165a 47514034 bpatchx patch34_2 ,mem_patch34 +165b 2040207d call le_pairing_sm +165c 20402074 call le_check_paring_time +165d 20407887 call check_51cmd +165e 6fe082aa fetch 1 ,mem_le_op +165f c281966e bbit1 op_disconn ,le_slave_disconn + +le_slave_unsync: +1660 4751c034 bpatchx patch34_3 ,mem_patch34 +1661 20401afa call le_lpm_set_mult +1662 20201061 branch calc_clke_offset + +le_check_md: +1663 78547c00 disable user +1664 c5157e54 bmark1 mark_ble_rx_md ,enable_user +1665 c514fe54 bmark1 mark_ble_tx_md ,enable_user +1666 c5187e54 bmark1 mark_ble_crc_fail ,enable_user +1667 20600000 rtn + +le_slave_more_data: +1668 47524034 bpatchx patch34_4 ,mem_patch34 +1669 78377c00 enable attempt +166a 2040182c call le_transmit_receive_sifs_notx +166b 2036964b branch le_slave_match ,match +166c c518164b bmark1 mark_ble_crc_fail ,le_slave_crc_fail +166d 2020165a branch le_slave_cont + +le_slave_disconn: + +le_disconnect: +166e 4752c034 bpatchx patch34_5 ,mem_patch34 +166f 20401675 call le_clear_connection_info +1670 204031d1 call app_disconn_reason_collect_ble +1671 2040167a call le_clear_pairing_state +1672 204020c5 call le_sc_state_clear +1673 70095b15 jam bt_evt_le_disconnected ,mem_fifo_temp +1674 20207871 branch ui_ipc_send_event + +le_clear_connection_info: +1675 d8a044e6 arg mem_used_map ,contw +1676 20407d1b call memset0_16 +1677 70029d00 jam 0 ,mem_le_conn_handle +1678 70028800 jam lemode_idle ,mem_le_mode +1679 70028700 jam 0 ,mem_le_state + +le_clear_pairing_state: +167a 47534034 bpatchx patch34_6 ,mem_patch34 +167b 70439c00 jam flag_le_enc_null ,mem_le_enc_state +167c 70439b00 jam flag_le_pairing_null ,mem_le_pairing_state +167d 20206ecc branch sp_clear_flags + +le_got_first_packet: +167e 4753c034 bpatchx patch34_7 ,mem_patch34 +167f 6fe08005 fetch 1 ,mem_le_conn_rcv +1680 1fe0fe01 increase 1 ,pdata +1681 67e08005 store 1 ,mem_le_conn_rcv +1682 6fe08287 fetch 1 ,mem_le_state +1683 c3818000 rtnbit1 lestate_got_first_packet +1684 79207e03 set1 lestate_got_first_packet ,pdata +1685 67e08287 store 1 ,mem_le_state +1686 6fe14394 fetch 2 ,mem_le_init_superto +1687 67e102b5 store 2 ,mem_le_superto +1688 58000000 setarg 0 +1689 67e243bc store 4 ,mem_le_transmit_window +168a 20600000 rtn + +le_enable_phy_by_pdata: +168b 1fe20400 copy pdata ,temp +168c 47544035 bpatchx patch35_0 ,mem_patch35 +168d 18427e00 copy temp ,pdata +168e c28016a5 bbit1 bit_le_1m_phy ,le_enable +168f c2809694 bbit1 bit_le_2m_phy ,le_enable_2m +1690 c30116a5 bbit0 bit_le_coded_phy ,le_enable +1691 c28396a2 bbit1 bit_le_coded_phy_s8 ,le_enable_coded_s8 +1692 c281169a bbit1 bit_le_coded_phy_s2 ,le_enable_coded_s2 +1693 202016a5 branch le_enable + +le_enable_2m: +1694 204016a5 call le_enable +1695 7920002d set1 mark_ble_2m ,mark +1696 793f802f set0 mark_ble_lr ,mark +1697 70890103 jam 0x03 ,0x8901 +1698 70892084 jam 0x84 ,0x8920 +1699 20600000 rtn + +le_enable_coded_s2: + +le_enable_coded: +169a 204016a5 call le_enable +169b 7920002f set1 mark_ble_lr ,mark +169c 793f802e set0 mark_ble_lr_s8 ,mark +169d 70890105 jam 0x05 ,0x8901 +169e 70892080 jam 0x80 ,0x8920 +169f 70893020 jam 0x20 ,0x8930 +16a0 7089340a jam 0x0a ,0x8934 +16a1 20600000 rtn + +le_enable_coded_s8: +16a2 2040169a call le_enable_coded +16a3 7920002e set1 mark_ble_lr_s8 ,mark +16a4 20600000 rtn + +le_enable: +16a5 4754c035 bpatchx patch35_1 ,mem_patch35 +16a6 783b7c00 enable le +16a7 793f802d set0 mark_ble_2m ,mark +16a8 793f802f set0 mark_ble_lr ,mark +16a9 70890101 jam 0x01 ,0x8901 +16aa 70892080 jam 0x80 ,0x8920 +16ab 708925a7 jam 0xa7 ,0x8925 +16ac 70893003 jam 0x03 ,0x8930 +16ad 70893358 jam 0x58 ,0x8933 +16ae 7089340a jam 0x0a ,0x8934 +16af 70893740 jam 0x40 ,0x8937 +16b0 708a6d09 jam 9 ,core_rx_bq_cfg0 +16b1 20600000 rtn + +le_disable: +16b2 47554035 bpatchx patch35_2 ,mem_patch35 +16b3 785b7c00 disable le +16b4 793f8032 set0 mark_ble_encryption ,mark +16b5 70890100 jam 0x00 ,0x8901 +16b6 70892080 jam 0x80 ,0x8920 +16b7 708925a3 jam 0xa3 ,0x8925 +16b8 70893003 jam 0x03 ,0x8930 +16b9 70893368 jam 0x68 ,0x8933 +16ba 70893409 jam 0x09 ,0x8934 +16bb 70893728 jam 0x28 ,0x8937 +16bc 708a6d09 jam 9 ,core_rx_bq_cfg0 +16bd 20600000 rtn + +le_prep: +16be 7844fc00 disable enable_crc +16bf 7843fc00 disable enable_white +16c0 6fe182af fetch 3 ,mem_le_crcinit +16c1 98001e00 iforce crc24_init +16c2 6fe08016 fetch 1 ,mem_le_ch_mapped +16c3 1fed8400 reverse pdata ,temp +16c4 79200401 set1 1 ,temp +16c5 18431c00 rshift temp ,white_init +16c6 20600000 rtn + +le_rx_setfreq: +16c7 204016d0 call le_setfreq + +le_rf_rx_enable: +16c8 2040118f call set_freq_rx +16c9 6fe1015d fetch 2 ,mem_param_pll_setup +16ca 2040137d call sleep +16cb 202011a6 branch rf_rx_enable + +le_tx_setfreq: +16cc 2036920b branch txon ,match +16cd c518120b bmark1 mark_ble_crc_fail ,txon + +le_tx_setfreq0: +16ce 204016d0 call le_setfreq +16cf 20201205 branch set_freq_tx + +le_setfreq: +16d0 4755c035 bpatchx patch35_3 ,mem_patch35 +16d1 20401161 call set_sync_on +16d2 6fe082df fetch 1 ,mem_le_testtype +16d3 243a16e3 nbranch le_ctf_test ,blank +16d4 6fe08016 fetch 1 ,mem_le_ch_mapped +16d5 1fe67c24 sub pdata ,36 ,null +16d6 202116dd branch le_ctf_normal ,positive +16d7 18000400 force 0 ,temp +16d8 c1128000 rtneq 37 +16d9 18000418 force 24 ,temp +16da c1130000 rtneq 38 +16db 1800044e force 78 ,temp +16dc 20600000 rtn + +le_ctf_normal: +16dd 1fe67c0a sub pdata ,10 ,null +16de 202116e0 branch le_ctf_low ,positive +16df 1fe0fe01 increase 1 ,pdata + +le_ctf_low: +16e0 1fe3fe00 lshift pdata ,pdata +16e1 1fe08402 add pdata ,2 ,temp +16e2 20600000 rtn + +le_ctf_test: +16e3 6fe08016 fetch 1 ,mem_le_ch_mapped +16e4 1fe38400 lshift pdata ,temp +16e5 20600000 rtn + +le_sca_map: +16e6 d84001f4 arg 500 ,temp +16e7 207a0000 rtn blank +16e8 d84000fa arg 250 ,temp +16e9 c1008000 rtneq 1 +16ea d8400096 arg 150 ,temp +16eb c1010000 rtneq 2 +16ec d8400064 arg 100 ,temp +16ed c1018000 rtneq 3 +16ee d840004b arg 75 ,temp +16ef c1020000 rtneq 4 +16f0 d8400032 arg 50 ,temp +16f1 c1028000 rtneq 5 +16f2 d8400028 arg 40 ,temp +16f3 c1030000 rtneq 6 +16f4 d8400014 arg 20 ,temp +16f5 20600000 rtn + +le_setup: +16f6 47564035 bpatchx patch35_4 ,mem_patch35 +16f7 78287c00 enable swfine +16f8 6fe202ab fetch 4 ,mem_le_access +16f9 98001200 iforce access +16fa 204010b0 call calc_mod_value_scale_le +16fb 2040172c call le_map_channel +16fc 58000200 setarg 0x200 +16fd 20349700 branch le_setup_master ,master +16fe 6fe10295 fetch 2 ,mem_le_receive_window +16ff 1fe37e00 rshift pdata ,pdata + +le_setup_master: +1700 6849015d fetcht 2 ,mem_param_pll_setup +1701 9840fe00 iadd temp ,pdata +1702 20401311 call ahead_window +1703 1b427e00 deposit clke +1704 20600000 rtn + +le_context_nextevent: +1705 4756c035 bpatchx patch35_5 ,mem_patch35 +1706 20407cd0 call push_stack_rega_b_c +1707 67210987 storer loopcnt ,2 ,mem_loopcnt +1708 1a208c01 add rega ,coffset_mode ,contr +1709 efe08006 ifetch 1 ,contr +170a c4000000 rtnbit0 mode_le +170b 1a208a1a add rega ,coffset_le_event_cnt ,contw +170c efe10005 ifetch 2 ,contw +170d 1fe0fe01 increase 1 ,pdata +170e e7e10005 istore 2 ,contw +170f 20401898 call le_update_param +1710 204018bd call le_update_channel_map +1711 204018c6 call le_update_phy +1712 20401716 call le_context_nexthop +1713 20407cde call pop_stack_rega_b_c +1714 6f210987 fetchr loopcnt ,2 ,mem_loopcnt +1715 20600000 rtn + +le_context_nexthop: +1716 1a208c19 add rega ,coffset_le_hop ,contr +1717 efe08006 ifetch 1 ,contr +1718 1a208a18 add rega ,coffset_le_ch ,contw +1719 e8408005 ifetcht 1 ,contw +171a 9840fe00 iadd temp ,pdata +171b 1fe67c24 sub pdata ,36 ,null +171c 2021171e branch le_nexthop_nowrap ,positive +171d 1fe0ffdb increase -37 ,pdata + +le_nexthop_nowrap: +171e e7e08005 istore 1 ,contw +171f 20600000 rtn + +le_calc_channel_map: +1720 1a208c30 add rega ,coffset_le_channel_map ,contr +1721 efe28006 ifetch 5 ,contr +1722 18000400 force 0 ,temp +1723 18007225 force 37 ,loopcnt + +le_count_channels_loop: +1724 c3001726 bbit0 0 ,le_count_channels_notused +1725 18408401 increase 1 ,temp + +le_count_channels_notused: +1726 1fe37e00 rshift pdata ,pdata +1727 c2001724 loop le_count_channels_loop +1728 1840ffff add temp ,-1 ,pdata +1729 1a208a22 add rega ,coffset_le_channels ,contw +172a e7e08005 istore 1 ,contw +172b 20600000 rtn + +le_map_channel: +172c 47574035 bpatchx patch35_6 ,mem_patch35 +172d 6fe0829f fetch 1 ,mem_le_ch +172e 98000e00 iforce queue +172f 684a82b7 fetcht 5 ,mem_le_channel_map +1730 a84fffff qisolate1 temp +1731 20209741 branch le_map_channel_end ,true + +le_map_channel_next: +1732 6fe082a9 fetch 1 ,mem_le_channels +1733 98e67e00 isub queue ,pdata +1734 20211737 branch le_map_channel_cont ,positive +1735 1fe60fff sub pdata ,-1 ,queue +1736 20201732 branch le_map_channel_next + +le_map_channel_cont: +1737 18e27200 copy queue ,loopcnt +1738 18000e00 force 0 ,queue + +le_map_channel_loop: +1739 a84fffff qisolate1 temp +173a 2020973c branch le_map_channel_skip ,true +173b 1f20f201 increase 1 ,loopcnt + +le_map_channel_skip: +173c 1f227e00 deposit loopcnt +173d 203a1741 branch le_map_channel_end ,blank +173e 18e08e01 increase 1 ,queue +173f 1f20f3ff increase -1 ,loopcnt +1740 20201739 branch le_map_channel_loop + +le_map_channel_end: +1741 18e27e00 deposit queue +1742 67e08016 store 1 ,mem_le_ch_mapped +1743 20600000 rtn + +le_wait_tx: +1744 20349747 branch le_wait_master ,master +1745 37c18200 until null ,timeout +1746 20600000 rtn + +le_wait_master: +1747 d9600ea0 arg 0xea0 ,timeup +1748 34730200 until clkn_rt ,meet +1749 20600000 rtn + +le_receive_adv: +174a 78487c00 disable swfine +174b 6fe143e5 fetch 2 ,mem_le_scan_window +174c 1fe21600 copy pdata ,timeup +174d 20201754 branch le_receive_packet + +le_receive_slave: +174e 4757c035 bpatchx patch35_7 ,mem_patch35 +174f 204017b8 call le_dec_init +1750 78287c00 enable swfine +1751 6fe10295 fetch 2 ,mem_le_receive_window +1752 684a43bc fetcht 4 ,mem_le_transmit_window +1753 98409600 iadd temp ,timeup + +le_receive_packet: +1754 204016c7 call le_rx_setfreq + +le_receive_rxon: +1755 47584036 bpatchx patch36_0 ,mem_patch36 +1756 204016be call le_prep +1757 c597975c bmark0 mark_ble_lr ,le_receive_nolr +1758 783cfc00 pulse dewhiten_code_calc +1759 2000001e nop 30 +175a 204016be call le_prep +175b 19699600 lshift3 timeup ,timeup + +le_receive_nolr: +175c 7856fc00 disable match +175d 7826fc00 enable decode_fec0 +175e 7830fc00 enable is_rx +175f 78507c00 disable is_tx +1760 19623600 copy timeup ,stop_watch +1761 37c18400 correlate null ,timeout +1762 20371765 branch le_receive_on_attempt ,attempt +1763 1b420400 copy clke ,temp +1764 604b0098 storet 6 ,mem_sync_clke + +le_receive_on_attempt: +1765 242c17f3 nbranch le_unsync_end ,sync +1766 4758c036 bpatchx patch36_1 ,mem_patch36 +1767 78287c00 enable swfine +1768 db604eab arg param_t_ifs_150us + param_20ms_init + param_sync_time_difference ,stop_watch +1769 6fe0c1f0 fetch 1 ,mem_system_clk +176a 9b6fb600 imul32 stop_watch ,stop_watch +176b 20404caf call rf_debug_rx_sync_line +176c 20371772 branch le_receive_skip ,attempt +176d 204017f7 call calc_clke_all_modem +176e 6fe08287 fetch 1 ,mem_le_state +176f c3019772 bbit0 lestate_got_first_packet ,le_receive_skip +1770 684b0098 fetcht 6 ,mem_sync_clke +1771 20559473 call lpm_adjust_clk ,wake + +le_receive_skip: +1772 2040127d call save_rssi +1773 7823fc00 enable enable_white +1774 7824fc00 enable enable_crc +1775 09800008 parse demod ,bucket ,8 +1776 19897e00 rshift3 pwindow ,pdata +1777 67e0816b store 1 ,mem_le_rxbuf_data_header +1778 09800008 parse demod ,bucket ,8 +1779 19897e00 rshift3 pwindow ,pdata +177a 67e0816c store 1 ,mem_le_rxbuf_data_length +177b 1fe27200 copy pdata ,loopcnt +177c 20229797 branch le_rx_nopayload ,zero +177d c5191783 bmark1 mark_ble_encryption ,le_rx_dec + +le_rx_loop: +177e 09800008 parse demod ,bucket ,8 +177f 19897e00 rshift3 pwindow ,pdata +1780 e7e08005 istore 1 ,contw +1781 c200177e loop le_rx_loop +1782 20201797 branch le_rx_nopayload + +le_rx_dec: +1783 18a22400 copy contw ,regb +1784 20401914 call le_check_retransmit +1785 6a20816c fetchr rega ,1 ,mem_le_rxbuf_data_length +1786 1a20a3fc increase -4 ,rega +1787 242117eb nbranch le_mic_error ,positive +1788 204017bd call le_dec_start +1789 1a420a00 copy regb ,contw +178a d8400000 arg 0 ,temp +178b 6f20816c fetchr loopcnt ,1 ,mem_le_rxbuf_data_length +178c 1f20f3fc increase -4 ,loopcnt +178d 20229795 branch le_rx_dec_loop_end ,zero + +le_rx_dec_loop: +178e 09800008 parse demod ,bucket ,8 +178f 19897e00 rshift3 pwindow ,pdata +1790 e7e08005 istore 1 ,contw +1791 18408401 increase 1 ,temp +1792 18417c0f and temp ,0xf ,null +1793 204297da call le_dec ,zero +1794 c200178e loop le_rx_dec_loop + +le_rx_dec_loop_end: +1795 204017e2 call le_dec_end +1796 1a420a00 copy regb ,contw + +le_rx_nopayload: +1797 47594036 bpatchx patch36_2 ,mem_patch36 +1798 09800018 parse demod ,bucket ,24 +1799 1fef7e00 rshift32 pdata ,pdata +179a 1ff17e00 rshift16 pdata ,pdata +179b e7e18005 istore 3 ,contw +179c 78287c00 enable swfine +179d 20401805 call le_set_until_tx_timer +179e 202317ef branch le_crc_fail ,crc_failed +179f c59917a9 bmark0 mark_ble_encryption ,le_rx_match +17a0 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +17a1 203a17a9 branch le_rx_match ,blank +17a2 1fe0fffc increase -4 ,pdata +17a3 67e0816c store 1 ,mem_le_rxbuf_data_length +17a4 20406d53 call wait_ccm_done +17a5 6ff08108 fetch 1 ,core_misc_status +17a6 c30397eb bbit0 7 ,le_mic_error +17a7 1800700c force regidx_result ,regext_index +17a8 65e20273 storer regext ,4 ,mem_le_peer_mic + +le_rx_match: +17a9 20404cae call rf_debug_rx_crc_line +17aa 7836fc00 enable match +17ab 793f8030 set0 mark_ble_crc_fail ,mark + +le_crc_fail_tx: +17ac 20406d55 call ccm_ctrl_clr +17ad 6fe082bc fetch 1 ,mem_le_rx_phy +17ae 7d3e7e07 nsetflag ble_coded_info ,bit_le_coded_phy_s8 ,pdata +17af 67e082bc store 1 ,mem_le_rx_phy + +le_match_set_txfreq: +17b0 4759c036 bpatchx patch36_3 ,mem_patch36 +17b1 68488017 fetcht 1 ,mem_last_freq +17b2 1840a202 add temp ,2 ,rega +17b3 c51697b5 bmark1 mark_ble_2m ,le_match_set_txfreq_offset +17b4 1840a202 add temp ,2 ,rega + +le_match_set_txfreq_offset: +17b5 7846fc00 disable decode_fec0 +17b6 20401161 call set_sync_on +17b7 202011ca branch rf_tx_write_freq + +le_dec_init: +17b8 c6990000 rtnmark0 mark_ble_encryption +17b9 20406dc7 call load_sk +17ba 1800700c force regidx_result ,regext_index +17bb 20406dcc call aes_clear +17bc 20206dcb branch aes_clear_data + +le_dec_start: +17bd 7080d500 jam 0 ,core_ccm_aad0 +17be 7080d601 jam 1 ,core_ccm_aad1 +17bf 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +17c0 1fe17e03 and_into 0x3 ,pdata +17c1 67f080d7 store 1 ,core_ccm_aad2 +17c2 5800016d setarg mem_le_rxbuf_data_payload +17c3 67f100d1 store 2 ,core_ccm_input_playload_addr +17c4 67f100d3 store 2 ,core_ccm_output_playload_addr +17c5 6a20816c fetchr rega ,1 ,mem_le_rxbuf_data_length +17c6 1a20a3fc increase -4 ,rega +17c7 684ac6a1 fetcht 5 ,mem_ccm_pcnt_rx +17c8 280ffe0f isolate1 mark_old_packet ,mark +17c9 204097d0 call le_pcnt_rx_sub1 ,true +17ca 20406c61 call ccm_b0 +17cb 58000000 setarg 0 +17cc 67f100da store 2 ,core_ccm_inptr +17cd 70800a06 jam 6 ,core_ccm_ctrl +17ce 70800a07 jam 7 ,core_ccm_ctrl +17cf 20600000 rtn + +le_pcnt_rx_sub1: +17d0 18467c00 sub temp ,0 ,null +17d1 202297d5 branch le_pcnt_rx_sub1_0 ,zero +17d2 184085ff increase -1 ,temp +17d3 79200427 set1 le_ccm_directionbit ,temp +17d4 20600000 rtn + +le_pcnt_rx_sub1_0: +17d5 58ffffff setarg 0xffffff +17d6 1ff07e00 lshift16 pdata ,pdata +17d7 d840ffff arg 0xffff ,temp +17d8 98418400 ior temp ,temp +17d9 20600000 rtn + +le_dec: +17da 18a22400 copy contw ,regb +17db 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +17dc 1fe0fffc increase -4 ,pdata +17dd 98467c00 isub temp ,null +17de 20628000 rtn zero +17df 605900da storet 2 ,core_ccm_inptr +17e0 1a420a00 copy regb ,contw +17e1 20600000 rtn + +le_dec_end: +17e2 09800020 parse demod ,bucket ,32 +17e3 1fef7e00 rshift32 pdata ,pdata +17e4 1fecfe00 rshift8 pdata ,pdata +17e5 e7e20005 istore 4 ,contw +17e6 18a22400 copy contw ,regb +17e7 18007000 force regidx_data ,regext_index +17e8 1fe25e00 copy pdata ,regext +17e9 605900da storet 2 ,core_ccm_inptr +17ea 20600000 rtn + +le_mic_error: +17eb 202017f5 branch le_end_of_packet + +le_retransmit_end_of_packet: +17ec 20401805 call le_set_until_tx_timer +17ed 20400e80 call end_of_packet +17ee 202017a9 branch le_rx_match + +le_crc_fail: +17ef 20404cb0 call rf_debug_rx_crc_fail_line +17f0 c51817f3 bmark1 mark_ble_crc_fail ,le_crc_fail_consecutive +17f1 79200030 set1 mark_ble_crc_fail ,mark +17f2 202017ac branch le_crc_fail_tx + +le_unsync_end: + +le_crc_fail_consecutive: +17f3 793f8030 set0 mark_ble_crc_fail ,mark +17f4 202017f5 branch le_end_of_packet + +le_end_of_packet: +17f5 20406d55 call ccm_ctrl_clr +17f6 20200e80 branch end_of_packet + +calc_clke_all_modem: +17f7 c51797fd bmark1 mark_ble_lr ,calc_clke_modem_coded +17f8 c5169801 bmark1 mark_ble_2m ,calc_clke_modem_2m +17f9 6fe10165 fetch 2 ,mem_param_clke_cal_le_1m +17fa 1fe25200 copy pdata ,clke_rt +17fb 1c225000 copy bt_clk ,clke_bt +17fc 20600000 rtn + +calc_clke_modem_coded: +17fd 6fe10169 fetch 2 ,mem_param_clke_cal_le_coded +17fe 1fe25200 copy pdata ,clke_rt +17ff 1c20d001 add bt_clk ,1 ,clke_bt +1800 20600000 rtn + +calc_clke_modem_2m: +1801 6fe10167 fetch 2 ,mem_param_clke_cal_le_2m +1802 1fe25200 copy pdata ,clke_rt +1803 1c225000 copy bt_clk ,clke_bt +1804 20600000 rtn + +le_set_until_tx_timer: +1805 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +1806 1fe08405 add pdata ,5 ,temp +1807 18498400 lshift3 temp ,temp +1808 6fe082bc fetch 1 ,mem_le_rx_phy +1809 c517980c bmark1 mark_ble_lr ,le_set_until_tx_timer_rx_lr +180a c280180e bbit1 bit_le_1m_phy ,le_set_until_tx_timer_rx_1m +180b c280980f bbit1 bit_le_2m_phy ,le_set_until_tx_timer_rx_2m + +le_set_until_tx_timer_rx_lr: +180c 203e1811 branch le_set_until_tx_timer_rx_coded_s2 ,ble_coded_info +180d 20201814 branch le_set_until_tx_timer_rx_coded_s8 + +le_set_until_tx_timer_rx_1m: +180e 20201819 branch le_calc_stop_watch + +le_set_until_tx_timer_rx_2m: +180f 18430400 rshift temp ,temp +1810 20201819 branch le_calc_stop_watch + +le_set_until_tx_timer_rx_coded_s2: +1811 18408403 add temp ,3 ,temp +1812 18438400 lshift temp ,temp +1813 20201816 branch le_set_until_tx_timer_rx_coded + +le_set_until_tx_timer_rx_coded_s8: +1814 18408403 add temp ,3 ,temp +1815 18498400 lshift3 temp ,temp + +le_set_until_tx_timer_rx_coded: +1816 58000028 setarg param_coded_c1_term1_time_40us +1817 98408400 iadd temp ,temp +1818 20201819 branch le_calc_stop_watch + +le_calc_stop_watch: +1819 6fe0c1f0 fetch 1 ,mem_system_clk +181a 984f8400 imul32 temp ,temp +181b da204e20 arg param_20ms_init ,rega +181c 9a2ffe00 imul32 rega ,pdata +181d 98460400 isub temp ,temp +181e 1b627e00 copy stop_watch ,pdata +181f 98463600 isub temp ,stop_watch +1820 20600000 rtn + +le_transmit_receive_sifs_without_change_mode: +1821 20401838 call le_transmit +1822 68488017 fetcht 1 ,mem_last_freq +1823 2040118f call set_freq_rx +1824 204011a6 call rf_rx_enable +1825 78287c00 enable swfine +1826 d960157c arg 5500 ,timeup +1827 20201755 branch le_receive_rxon + +le_transmit_receive_sifs: +1828 475a4036 bpatchx patch36_4 ,mem_patch36 +1829 6fe082bd fetch 1 ,mem_le_tx_phy +182a 2040168b call le_enable_phy_by_pdata +182b 20401838 call le_transmit + +le_transmit_receive_sifs_notx: +182c 6fe082bc fetch 1 ,mem_le_rx_phy +182d 2040168b call le_enable_phy_by_pdata +182e 68488017 fetcht 1 ,mem_last_freq +182f 2040118f call set_freq_rx +1830 204011a6 call rf_rx_enable +1831 78287c00 enable swfine +1832 d960157c arg 5500 ,timeup +1833 c5979755 bmark0 mark_ble_lr ,le_receive_rxon +1834 d9602134 arg 8500 ,timeup +1835 20201755 branch le_receive_rxon + +le_transmit_norx: +1836 20401838 call le_transmit +1837 20200e80 branch end_of_packet + +le_transmit: +1838 475ac036 bpatchx patch36_5 ,mem_patch36 +1839 204016be call le_prep +183a 204016cc call le_tx_setfreq +183b 20404cb5 call rf_debug_tx_on_line +183c 79202a00 set1 txgfsk ,radio_ctrl +183d 782efc00 enable encode_fec0 +183e 78307c00 enable is_tx +183f 7850fc00 disable is_rx +1840 20401744 call le_wait_tx +1841 785d7c00 disable lr_s2en +1842 c517987a bmark1 mark_ble_lr ,le_transmit_lr +1843 c516988c bmark1 mark_ble_2m ,le_transmit_2m +1844 19317e00 rshift16 access ,pdata +1845 1fecfe00 rshift8 pdata ,pdata +1846 1ff1fe00 rshift4 pdata ,pdata +1847 08008628 inject mod ,40 + +le_transmit_packet: +1848 7823fc00 enable enable_white +1849 7824fc00 enable enable_crc +184a 475b4036 bpatchx patch36_6 ,mem_patch36 +184b 6fe0c1f5 fetch 1 ,mem_le_txheader +184c 08008608 inject mod ,8 +184d efe08006 ifetch 1 ,contr +184e 1fe27200 copy pdata ,loopcnt +184f 08008608 inject mod ,8 +1850 1f267c00 sub loopcnt ,0 ,null +1851 20229859 branch le_tr_nopayload ,zero +1852 6ff0800a fetch 1 ,core_ccm_ctrl +1853 203a1855 branch le_transmit_packet_not_enc ,blank +1854 c519186f bmark1 mark_ble_encryption ,le_transmit_packet_enc + +le_transmit_packet_not_enc: +1855 d8c041f7 arg mem_le_txpayload ,contr + +le_tr_loop: +1856 efe08006 ifetch 1 ,contr +1857 08008608 inject mod ,8 +1858 c2001856 loop le_tr_loop + +le_tr_nopayload: +1859 78247c00 enable enable_parity +185a 08008618 inject mod ,24 +185b 78447c00 disable enable_parity +185c c5979860 bmark0 mark_ble_lr ,le_transmit_skip +185d 7843fc00 disable enable_white +185e 58000000 setarg 0 +185f 08008603 inject mod ,3 + +le_transmit_skip: +1860 37d38200 until null ,tx_clear +1861 20000064 nop 100 +1862 784efc00 disable encode_fec0 +1863 785c7c00 disable encode_fec3 +1864 20401161 call set_sync_on +1865 20404cb3 call rf_debug_tx_off_line + +le_check_start_pause_enc: +1866 6fe0c1f5 fetch 1 ,mem_le_txheader +1867 1fe17e03 and pdata ,llid_le_ll ,pdata +1868 c1818000 rtnne llid_le_ll +1869 6fe0c39c fetch 1 ,mem_le_enc_state +186a c0011955 beq flag_le_enc_pause ,le_clear_enc +186b c1828000 rtnne flag_le_send_start_enc_req +186c 6fe0c1f7 fetch 1 ,mem_le_txpayload +186d c0029950 beq ll_start_enc_req ,le_set_enc +186e 20600000 rtn + +le_transmit_packet_enc: +186f 1f20f3fc increase -4 ,loopcnt +1870 1f220400 copy loopcnt ,temp +1871 20406d40 call ccm_wait_enc +1872 d8c041f7 arg mem_le_txpayload ,contr + +le_transmit_packet_enc_loop: +1873 efe08006 ifetch 1 ,contr +1874 08008608 inject mod ,8 +1875 c2001873 loop le_transmit_packet_enc_loop +1876 20406d45 call ccm_check_enc_done +1877 1de27e00 copy regext ,pdata +1878 08008620 inject mod ,32 +1879 20201859 branch le_tr_nopayload + +le_transmit_lr: +187a df20000a arg 10 ,loopcnt + +le_transmit_lr_preamble_loop: +187b 5800003c setarg 0x3c +187c 08008608 inject mod ,8 +187d c200187b loop le_transmit_lr_preamble_loop +187e 784efc00 disable encode_fec0 +187f 783c7c00 enable encode_fec3 +1880 19317e00 rshift16 access ,pdata +1881 1ff17e00 rshift16 pdata ,pdata +1882 1ff1fe00 rshift4 pdata ,pdata +1883 08008620 inject mod ,32 +1884 c5171889 bmark1 mark_ble_lr_s8 ,le_transmit_lr_s8 + +le_transmit_lr_s2: +1885 58000001 setarg 1 +1886 08008605 inject mod ,5 +1887 783d7c00 enable lr_s2en +1888 20201848 branch le_transmit_packet + +le_transmit_lr_s8: +1889 58000000 setarg 0 +188a 08008605 inject mod ,5 +188b 20201848 branch le_transmit_packet + +le_transmit_2m: +188c 6fe0c1f0 fetch 1 ,mem_system_clk +188d 1fe37200 rshift pdata ,loopcnt + +le_transmit_2m_dealy: +188e 20000002 nop 2 +188f c200188e loop le_transmit_2m_dealy +1890 19317e00 rshift16 access ,pdata +1891 1fecfe00 rshift8 pdata ,pdata +1892 1ff18400 rshift4 pdata ,temp +1893 18427e00 copy temp ,pdata +1894 08008608 inject mod ,8 +1895 18427e00 copy temp ,pdata +1896 08008628 inject mod ,40 +1897 20201848 branch le_transmit_packet + +le_update_param: +1898 da60189c arg le_update_param_ahead1_cb ,regc +1899 da4018b0 arg le_update_param_cb ,regb +189a d8e00005 arg lestate_update_param ,queue +189b 202018f4 branch le_check_update_flag + +le_update_param_ahead1_cb: +189c 1a208c04 add rega ,coffset_sniff_anchor ,contr +189d e8420006 ifetcht 4 ,contr +189e 1a208c37 add rega ,coffest_le_new_transmitwindowsize ,contr +189f efe08006 ifetch 1 ,contr +18a0 1a208a2b add rega ,coffset_le_window_size ,contw +18a1 e7e08005 istore 1 ,contw +18a2 efe10006 ifetch 2 ,contr +18a3 1febfe00 lshift2 pdata ,pdata +18a4 98409600 iadd temp ,timeup +18a5 1a208a04 add rega ,coffset_sniff_anchor ,contw +18a6 19627e00 deposit timeup +18a7 e7e20005 istore 4 ,contw +18a8 efe10006 ifetch 2 ,contr +18a9 1febfe00 lshift2 pdata ,pdata +18aa 1a208a02 add rega ,coffset_tsniff ,contw +18ab e7e10005 istore 2 ,contw +18ac efe20006 ifetch 4 ,contr +18ad 1a208a2c add rega ,coffset_le_slave_latency ,contw +18ae e7e20005 istore 4 ,contw +18af 20201a33 branch le_receive_window_size + +le_update_param_cb: +18b0 efe08011 ifetch 1 ,rega +18b1 793ffe03 set0 lestate_got_first_packet ,pdata +18b2 e7e08011 istore 1 ,rega +18b3 6fe102b5 fetch 2 ,mem_le_superto +18b4 67e14394 store 2 ,mem_le_init_superto +18b5 62210970 storer rega ,2 ,mem_rega +18b6 70095b44 jam bt_evt_le_parse_conn_param_accepted ,mem_fifo_temp +18b7 20407871 call ui_ipc_send_event +18b8 6a210970 fetchr rega ,2 ,mem_rega +18b9 1a208c2e add rega ,coffset_le_slave_superto ,contr +18ba efe10006 ifetch 2 ,contr +18bb 67e14394 store 2 ,mem_le_init_superto +18bc 20600000 rtn + +le_update_channel_map: +18bd da600000 arg 0 ,regc +18be da4018c1 arg le_update_channel_map_cb ,regb +18bf d8e00006 arg lestate_update_map ,queue +18c0 202018f4 branch le_check_update_flag + +le_update_channel_map_cb: +18c1 1a208c37 add rega ,coffset_le_new_map ,contr +18c2 efe28006 ifetch 5 ,contr +18c3 1a208a30 add rega ,coffset_le_channel_map ,contw +18c4 e7e28005 istore 5 ,contw +18c5 20201720 branch le_calc_channel_map + +le_update_phy: +18c6 da600000 arg 0 ,regc +18c7 da4018ca arg le_update_phy_cb ,regb +18c8 d8e00007 arg lestate_update_phy ,queue +18c9 202018f4 branch le_check_update_flag + +le_update_phy_cb: +18ca 1a208c37 add rega ,coffset_le_new_m2s_phy ,contr +18cb efe08006 ifetch 1 ,contr +18cc 204018d7 call le_update_phy_cb_m2s +18cd e7e08005 istore 1 ,contw +18ce 1a208c38 add rega ,coffset_le_new_s2m_phy ,contr +18cf efe08006 ifetch 1 ,contr +18d0 204018e5 call le_update_phy_cb_s2m +18d1 e7e08005 istore 1 ,contw +18d2 62210970 storer rega ,2 ,mem_rega +18d3 70095b42 jam bt_evt_le_update_phy ,mem_fifo_temp +18d4 20407871 call ui_ipc_send_event +18d5 6a210970 fetchr rega ,2 ,mem_rega +18d6 20600000 rtn + +le_update_phy_cb_m2s: +18d7 205a18df call le_update_phy_cb_m2s_no_change ,blank +18d8 1a208a35 add rega ,coffset_le_rx_phy ,contw +18d9 24748000 nrtn master +18da 6848c442 fetcht 1 ,mem_le_tx_phys +18db 284ffe07 isolate1 bit_le_coded_phy_s8 ,temp +18dc 7920fe07 setflag true ,bit_le_coded_phy_s8 ,pdata +18dd 1a208a36 add rega ,coffset_le_tx_phy ,contw +18de 20600000 rtn + +le_update_phy_cb_m2s_no_change: +18df 1a208c35 add rega ,coffset_le_rx_phy ,contr +18e0 efe08006 ifetch 1 ,contr +18e1 24748000 nrtn master +18e2 1a208c36 add rega ,coffset_le_tx_phy ,contr +18e3 efe08006 ifetch 1 ,contr +18e4 20600000 rtn + +le_update_phy_cb_s2m: +18e5 205a18ee call le_update_phy_cb_s2m_no_change ,blank +18e6 6848c442 fetcht 1 ,mem_le_tx_phys +18e7 284ffe07 isolate1 bit_le_coded_phy_s8 ,temp +18e8 7920fe07 setflag true ,bit_le_coded_phy_s8 ,pdata +18e9 1a208a36 add rega ,coffset_le_tx_phy ,contw +18ea 24748000 nrtn master +18eb 793ffe07 set0 bit_le_coded_phy_s8 ,pdata +18ec 1a208a35 add rega ,coffset_le_rx_phy ,contw +18ed 20600000 rtn + +le_update_phy_cb_s2m_no_change: +18ee 1a208c36 add rega ,coffset_le_tx_phy ,contr +18ef efe08006 ifetch 1 ,contr +18f0 24748000 nrtn master +18f1 1a208c35 add rega ,coffset_le_rx_phy ,contr +18f2 efe08006 ifetch 1 ,contr +18f3 20600000 rtn + +le_check_update_flag: +18f4 efe08011 ifetch 1 ,rega +18f5 afec0000 qisolate0 pdata +18f6 20608000 rtn true +18f7 1a208c1a add rega ,coffset_le_event_cnt ,contr +18f8 e8410006 ifetcht 2 ,contr +18f9 1a208c20 add rega ,coffset_le_instant ,contr +18fa efe10006 ifetch 2 ,contr +18fb 98467e00 isub temp ,pdata +18fc 20229903 branch le_update ,zero +18fd 24211908 nbranch le_check_update_small ,positive +18fe 1fe67c01 sub pdata ,1 ,null +18ff 20229901 branch le_update_ahead1 ,zero +1900 20600000 rtn + +le_update_ahead1: +1901 1a627e00 copy regc ,pdata +1902 20207e05 branch callback_func + +le_update: +1903 efe08011 ifetch 1 ,rega +1904 f93ffe00 qset0 pdata +1905 e7e08011 istore 1 ,rega +1906 1a427e00 copy regb ,pdata +1907 20207e05 branch callback_func + +le_check_update_small: +1908 1a208c1a add rega ,coffset_le_event_cnt ,contr +1909 efe10006 ifetch 2 ,contr +190a 1a208c20 add rega ,coffset_le_instant ,contr +190b efe10006 ifetch 2 ,contr +190c 98467e00 isub temp ,pdata +190d d840ffff arg 0xffff ,temp +190e 98467c00 isub temp ,null +190f 20229903 branch le_update ,zero +1910 d840f000 arg 0xf000 ,temp +1911 98467c00 isub temp ,null +1912 24211903 nbranch le_update ,positive +1913 20600000 rtn + +le_check_retransmit: +1914 6848829e fetcht 1 ,mem_le_arq +1915 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +1916 1fe37e00 rshift pdata ,pdata +1917 9842fe00 ixor temp ,pdata +1918 2feffe02 isolate1 nesn ,pdata +1919 7920800f setflag true ,mark_old_packet ,mark +191a 20600000 rtn + +le_acknowledge: +191b 475bc036 bpatchx patch36_7 ,mem_patch36 +191c 20401a30 call le_supervision_flush +191d c6180000 rtnmark1 mark_ble_crc_fail +191e 20401942 call le_check_wak +191f 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +1920 2feffe04 isolate1 md ,pdata +1921 7920802a setflag true ,mark_ble_rx_md ,mark +1922 1fe37e00 rshift pdata ,pdata +1923 9842fe00 ixor temp ,pdata +1924 2feffe02 isolate1 nesn ,pdata +1925 7920800f setflag true ,mark_old_packet ,mark +1926 c6078000 rtnmark1 mark_old_packet +1927 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +1928 203a1934 branch le_ack_unenc ,blank +1929 6fe08287 fetch 1 ,mem_le_state +192a c3021934 bbit0 lestate_encryption ,le_ack_unenc +192b 684a0273 fetcht 4 ,mem_le_peer_mic +192c 6fe246a6 fetch 4 ,mem_ccm_last_mic +192d 98467c00 isub temp ,null +192e 2022937a branch assert ,zero +192f 604a46a6 storet 4 ,mem_ccm_last_mic +1930 6fe2c6a1 fetch 5 ,mem_ccm_pcnt_rx +1931 1fe0fe01 increase 1 ,pdata +1932 79207e27 set1 le_ccm_directionbit ,pdata +1933 67e2c6a1 store 5 ,mem_ccm_pcnt_rx + +le_ack_unenc: +1934 6848829e fetcht 1 ,mem_le_arq +1935 79400402 setflip nesn ,temp +1936 6048829e storet 1 ,mem_le_arq +1937 6fe0c3c0 fetch 1 ,mem_le_configuration +1938 c4030000 rtnbit0 bit_ble_deal_bb_packet +1939 475c4037 bpatchx patch37_0 ,mem_patch37 +193a 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +193b 207a0000 rtn blank +193c 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +193d 2fe00601 compare llid_continue ,pdata ,3 +193e 20209f2a branch le_parse_writing_attribute_continue ,true +193f 2fe00602 compare llid_start ,pdata ,3 +1940 20209f18 branch le_parse_writing_attribute_start ,true +1941 20600000 rtn + +le_check_wak: +1942 475cc037 bpatchx patch37_1 ,mem_patch37 +1943 6848829e fetcht 1 ,mem_le_arq +1944 284c0005 isolate0 wak ,temp +1945 20608000 rtn true +1946 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +1947 1fe3fe00 lshift pdata ,pdata +1948 9842fe00 ixor temp ,pdata +1949 c4018000 rtnbit0 sn +194a 793f8405 set0 wak ,temp +194b 79400403 setflip sn ,temp +194c 6048829e storet 1 ,mem_le_arq +194d 28400603 compare 3 ,temp ,3 +194e 24608000 nrtn true +194f 20600000 rtn + +le_set_enc: +1950 6fe08287 fetch 1 ,mem_le_state +1951 79207e04 set1 lestate_encryption ,pdata +1952 67e08287 store 1 ,mem_le_state +1953 79200032 set1 mark_ble_encryption ,mark +1954 20600000 rtn + +le_clear_enc: +1955 475d4037 bpatchx patch37_2 ,mem_patch37 +1956 70439c00 jam flag_le_enc_null ,mem_le_enc_state +1957 dfe00000 arg 0 ,pdata +1958 67e246a6 store 4 ,mem_ccm_last_mic +1959 67e2c69c store 5 ,mem_ccm_pcnt_tx +195a 79207e27 set1 le_ccm_directionbit ,pdata +195b 67e2c6a1 store 5 ,mem_ccm_pcnt_rx +195c 6fe08287 fetch 1 ,mem_le_state +195d 793ffe04 set0 lestate_encryption ,pdata +195e 67e08287 store 1 ,mem_le_state +195f 793f8032 set0 mark_ble_encryption ,mark +1960 20600000 rtn + +le_scan_check_sender_addr_type: +1961 da200001 arg 1 ,rega +1962 6fe0816b fetch 1 ,mem_le_rxbuf_adv_connect_ind_header +1963 c3830000 rtnbit1 le_sender_addr_bit +1964 da200000 arg 0 ,rega +1965 20600000 rtn + +le_get_master_rx_max: +1966 18c20a00 copy contr ,contw +1967 68494444 fetcht 2 ,mem_remote_rx_max_octets +1968 18a20c00 copy contw ,contr +1969 20600000 rtn + +le_prepare_tx: +196a 475dc037 bpatchx patch37_3 ,mem_patch37 +196b 6fe0829e fetch 1 ,mem_le_arq +196c c3828000 rtnbit1 wak +196d 2040198b call le_check_tx_md +196e 20401b60 call le_fifo_get_first_tx_ptr +196f 203a19af branch le_send_empty ,blank +1970 efe10006 ifetch 2 ,contr +1971 e8410006 ifetcht 2 ,contr +1972 18422200 copy temp ,rega +1973 9a267e00 isub rega ,pdata +1974 20401966 call le_get_master_rx_max +1975 20407e4a call not_greater_than +1976 1fe20400 copy pdata ,temp +1977 e8208006 ifetchr type ,1 ,contr +1978 1a227e00 copy rega ,pdata +1979 98c0fe00 iadd contr ,pdata +197a 67e1097b store 2 ,mem_contr +197b 2040199f call le_update_tx_type +197c 204019b1 call le_send_packet +197d 20401b60 call le_fifo_get_first_tx_ptr +197e efe10006 ifetch 2 ,contr +197f 1fe22200 copy pdata ,rega +1980 18c22600 copy contr ,regc +1981 e8410006 ifetcht 2 ,contr +1982 18422400 copy temp ,regb +1983 9a467e00 isub regb ,pdata +1984 20401966 call le_get_master_rx_max +1985 20407e4a call not_greater_than +1986 9a40fe00 iadd regb ,pdata +1987 e7e10013 istore 2 ,regc +1988 9a267c00 isub rega ,null +1989 24628000 nrtn zero +198a 20201b79 branch le_fifo_release_first_node + +le_check_tx_md: +198b 20401992 call le_check_continue +198c c6148000 rtnmark1 mark_ble_tx_md +198d 6fe0c3c0 fetch 1 ,mem_le_configuration +198e c301199d bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +198f 20401b63 call le_fifo_get_second_tx_ptr +1990 203a199d branch le_clear_md ,blank +1991 2020199b branch le_set_md + +le_check_continue: +1992 20401b60 call le_fifo_get_first_tx_ptr +1993 203a199d branch le_clear_md ,blank +1994 efe10006 ifetch 2 ,contr +1995 e8410006 ifetcht 2 ,contr +1996 98462200 isub temp ,rega +1997 20401966 call le_get_master_rx_max +1998 18427e00 copy temp ,pdata +1999 9a267c00 isub rega ,null +199a 2021199d branch le_clear_md ,positive + +le_set_md: +199b 79200029 set1 mark_ble_tx_md ,mark +199c 20600000 rtn + +le_clear_md: +199d 793f8029 set0 mark_ble_tx_md ,mark +199e 20600000 rtn + +le_update_tx_type: +199f 1a227e00 copy rega ,pdata +19a0 207a0000 rtn blank +19a1 d8200001 arg llid_continue ,type +19a2 20600000 rtn + +le_att_check_notification_enable: +19a3 475e4037 bpatchx patch37_4 ,mem_patch37 +19a4 18408401 increase 1 ,temp +19a5 20401a62 call le_att_get_handle_ptr +19a6 18c08dfe increase -2 ,contr +19a7 efe10006 ifetch 2 ,contr +19a8 d8402902 arg client_charactertic_configuration ,temp +19a9 98467c00 isub temp ,null +19aa 24628000 nrtn zero +19ab 18c08c01 increase 1 ,contr +19ac 18c22200 copy contr ,rega +19ad efe08006 ifetch 1 ,contr +19ae 20600000 rtn + +le_send_empty: +19af 18000400 force 0 ,temp +19b0 18000201 force 1 ,type + +le_send_packet: +19b1 475ec037 bpatchx patch37_5 ,mem_patch37 +19b2 6048c1f6 storet 1 ,mem_le_txlen +19b3 6848829e fetcht 1 ,mem_le_arq +19b4 79200405 set1 wak ,temp +19b5 18417efc and temp ,0xfc ,pdata +19b6 9821fe00 ior type ,pdata +19b7 67e0829e store 1 ,mem_le_arq +19b8 1fe17e1f and_into 0x1f ,pdata +19b9 280ffe29 isolate1 mark_ble_tx_md ,mark +19ba 7920fe04 setflag true ,md ,pdata +19bb 67e0c1f5 store 1 ,mem_le_txheader +19bc 6fe0c1f5 fetch 1 ,mem_le_txheader +19bd 28200601 compare 1 ,type ,3 +19be 242099c1 nbranch le_send_no_txlen ,true +19bf 6fe0c1f6 fetch 1 ,mem_le_txlen +19c0 207a0000 rtn blank + +le_send_no_txlen: +19c1 c51919c7 bmark1 mark_ble_encryption ,le_send_packet_enc +19c2 6f20c1f6 fetchr loopcnt ,1 ,mem_le_txlen +19c3 6fe1097b fetch 2 ,mem_contr +19c4 1fe20c00 copy pdata ,contr +19c5 d8a041f7 arg mem_le_txpayload ,contw +19c6 20207d52 branch memcpy_fast + +le_send_packet_enc: +19c7 20406dc7 call load_sk +19c8 20206d27 branch le_encrypt_new_start + +get_lpm_wake_ble_rx_lock: +19c9 d8e00000 arg wake_lock_ble_rx ,queue +19ca 202015ba branch lpm_get_wake_lock + +put_lpm_wake_ble_rx_lock: +19cb d8e00000 arg wake_lock_ble_rx ,queue +19cc 202015be branch lpm_put_wake_lock + +le_parse: +19cd 475f4037 bpatchx patch37_6 ,mem_patch37 +19ce c6078000 rtnmark1 mark_old_packet +19cf c6180000 rtnmark1 mark_ble_crc_fail +19d0 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +19d1 1fe17e03 and pdata ,0x3 ,pdata +19d2 67e0c3d3 store 1 ,mem_le_packet_llid +19d3 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +19d4 207a0000 rtn blank +19d5 5800016d setarg mem_le_rxbuf_data_payload +19d6 67e143d8 store 2 ,mem_le_payload_ptr +19d7 475fc037 bpatchx patch37_7 ,mem_patch37 +19d8 6fe0c3d3 fetch 1 ,mem_le_packet_llid +19d9 c001a10b beq llid_le_ll ,le_parse_ll + +le_parse_l2cap: +19da 204019e7 call le_check_l2cap_complete +19db 243419c9 nbranch get_lpm_wake_ble_rx_lock ,user +19dc 204019cb call put_lpm_wake_ble_rx_lock +19dd 58000000 setarg 0 +19de 67e143d6 store 2 ,mem_le_packet_len_recved +19df 6fe143d8 fetch 2 ,mem_le_payload_ptr +19e0 1fe08c02 add pdata ,2 ,contr +19e1 47604038 bpatchx patch38_0 ,mem_patch38 +19e2 efe10006 ifetch 2 ,contr +19e3 c0021cd1 beq le_l2cap_cid_att ,le_parse_att +19e4 c0031f8c beq le_l2cap_cid_smp ,le_parse_smp +19e5 c0029f4e beq le_l2cap_cid_signal ,le_parse_signaling +19e6 20600000 rtn + +le_check_l2cap_complete: +19e7 6fe0c3d3 fetch 1 ,mem_le_packet_llid +19e8 c00119f6 beq llid_start ,le_check_l2cap_llid_start +19e9 c0009a0d beq llid_continue ,le_check_l2cap_llid_continue +19ea 20600000 rtn + +le_check_l2cap_cid_legal: +19eb 20407e54 call enable_user +19ec d8400004 arg le_l2cap_cid_att ,temp +19ed 9fe67c00 isub pdata ,null +19ee 20628000 rtn zero +19ef d8400005 arg le_l2cap_cid_signal ,temp +19f0 9fe67c00 isub pdata ,null +19f1 20628000 rtn zero +19f2 d8400006 arg le_l2cap_cid_smp ,temp +19f3 9fe67c00 isub pdata ,null +19f4 20628000 rtn zero +19f5 20207e56 branch disable_user + +le_check_l2cap_llid_start: +19f6 6fe143d8 fetch 2 ,mem_le_payload_ptr +19f7 1fe20c00 copy pdata ,contr +19f8 efe10006 ifetch 2 ,contr +19f9 67e143d4 store 2 ,mem_le_l2cap_size +19fa efe10006 ifetch 2 ,contr +19fb 204019eb call le_check_l2cap_cid_legal +19fc 24740000 nrtn user +19fd 6848816c fetcht 1 ,mem_le_rxbuf_data_length +19fe 604943d6 storet 2 ,mem_le_packet_len_recved +19ff 6fe143d4 fetch 2 ,mem_le_l2cap_size +1a00 1fe0fe04 increase 4 ,pdata +1a01 98467c00 isub temp ,null +1a02 2022fe54 branch enable_user ,zero +1a03 6f20816c fetchr loopcnt ,1 ,mem_le_rxbuf_data_length +1a04 d8a01000 arg mem_le_l2cap_buf ,contw +1a05 6fe143d8 fetch 2 ,mem_le_payload_ptr +1a06 1fe20c00 copy pdata ,contr +1a07 20407d52 call memcpy_fast +1a08 20207e56 branch disable_user + +le_check_l2cap_continue_legal: +1a09 20407e54 call enable_user +1a0a 6fe143d6 fetch 2 ,mem_le_packet_len_recved +1a0b 247a0000 nrtn blank +1a0c 20207e56 branch disable_user + +le_check_l2cap_llid_continue: +1a0d 20401a09 call le_check_l2cap_continue_legal +1a0e 24740000 nrtn user +1a0f 6fe143d6 fetch 2 ,mem_le_packet_len_recved +1a10 d8a01000 arg mem_le_l2cap_buf ,contw +1a11 98a0a200 iadd contw ,rega +1a12 6848816c fetcht 1 ,mem_le_rxbuf_data_length +1a13 9840fe00 iadd temp ,pdata +1a14 67e143d6 store 2 ,mem_le_packet_len_recved +1a15 6f20816c fetchr loopcnt ,1 ,mem_le_rxbuf_data_length +1a16 1a220a00 copy rega ,contw +1a17 6fe143d8 fetch 2 ,mem_le_payload_ptr +1a18 1fe20c00 copy pdata ,contr +1a19 20407d52 call memcpy_fast +1a1a 58001000 setarg mem_le_l2cap_buf +1a1b 67e143d8 store 2 ,mem_le_payload_ptr +1a1c 6fe143d4 fetch 2 ,mem_le_l2cap_size +1a1d 1fe0fe04 increase 4 ,pdata +1a1e 684943d6 fetcht 2 ,mem_le_packet_len_recved +1a1f 98467c00 isub temp ,null +1a20 2022fe54 branch enable_user ,zero +1a21 20207e56 branch disable_user + +le_get_search_att_uuid: +1a22 20407ceb call store_contr +1a23 d8a04359 arg mem_le_search_uuid_length ,contw +1a24 20201f12 branch le_get_search_common + +le_writeatt_cb: +1a25 6fe1446b fetch 2 ,mem_cb_att_write +1a26 20207e05 branch callback_func + +le_supervision_update: +1a27 684a02a3 fetcht 4 ,mem_le_supervision_timer +1a28 20401369 call get_clkbt +1a29 98461600 isub temp ,timeup +1a2a 19627e00 deposit timeup +1a2b 684902b5 fetcht 2 ,mem_le_superto +1a2c 18520400 lshift4 temp ,temp +1a2d 18438400 lshift temp ,temp +1a2e 98467e00 isub temp ,pdata +1a2f 20600000 rtn + +le_supervision_flush: +1a30 20401369 call get_clkbt +1a31 67e202a3 store 4 ,mem_le_supervision_timer +1a32 20600000 rtn + +le_receive_window_size: +1a33 4760c038 bpatchx patch38_1 ,mem_patch38 +1a34 1a208c50 add rega ,coffset_le_peer_sca ,contr +1a35 efe08006 ifetch 1 ,contr +1a36 204016e6 call le_sca_map +1a37 1a208c02 add rega ,coffset_tsniff ,contr +1a38 efe10006 ifetch 2 ,contr +1a39 984ffe00 imul32 temp ,pdata +1a3a 68490163 fetcht 2 ,mem_param_rt_rthalfslot +1a3b 984ffe00 imul32 temp ,pdata +1a3c d84f4240 arg 1000000 ,temp +1a3d 9846fc00 idiv temp +1a3e d8400682 arg param_windown_size ,temp +1a3f 6fe0c1f0 fetch 1 ,mem_system_clk +1a40 984f8400 imul32 temp ,temp +1a41 1a208c2b add rega ,coffset_le_window_size ,contr +1a42 efe08006 ifetch 1 ,contr +1a43 984ffe00 imul32 temp ,pdata +1a44 9840fe00 iadd temp ,pdata +1a45 67e243bc store 4 ,mem_le_transmit_window +1a46 6fe140c8 fetch 2 ,mem_rx_window_sniff +1a47 20407def call wait_div_end +1a48 18078400 quotient temp +1a49 9840fe00 iadd temp ,pdata +1a4a 1a208a0e add rega ,coffset_rx_window ,contw +1a4b e7e10005 istore 2 ,contw +1a4c 20600000 rtn + +le_init_attlist_search: +1a4d 47614038 bpatchx patch38_2 ,mem_patch38 +1a4e 6fe1099e fetch 2 ,mem_le_search_handle_start +1a4f 98002400 iforce regb +1a50 6fe109a0 fetch 2 ,mem_le_search_handle_end +1a51 98002600 iforce regc +1a52 6fe14396 fetch 2 ,mem_ui_le_uuid_table +1a53 98000c00 iforce contr +1a54 78347c00 enable user +1a55 20600000 rtn + +le_att_handle_inrange: +1a56 efe10006 ifetch 2 ,contr +1a57 1fe17eff and_into 0xff ,pdata +1a58 207a0000 rtn blank +1a59 9a467c00 isub regb ,null +1a5a 24610000 nrtn positive +1a5b 9a667c00 isub regc ,null +1a5c 20628000 rtn zero +1a5d 20211a60 branch le_att_handle_blank ,positive +1a5e 18007c01 force 1 ,null +1a5f 20600000 rtn + +le_att_handle_blank: +1a60 18007e00 force 0 ,pdata +1a61 20600000 rtn + +le_att_get_handle_ptr: +1a62 20401a65 call le_att_get_handle_ptr2 +1a63 20229a72 branch le_att_get_handle_ptr_found ,zero +1a64 20600000 rtn + +le_att_get_handle_ptr2: +1a65 4761c038 bpatchx patch38_3 ,mem_patch38 +1a66 6fe14396 fetch 2 ,mem_ui_le_uuid_table +1a67 98000c00 iforce contr + +le_att_get_handle_loop1: +1a68 efe10006 ifetch 2 ,contr +1a69 1fe17eff and_into 0xff ,pdata +1a6a 207a0000 rtn blank +1a6b 98467c00 isub temp ,null +1a6c 20628000 rtn zero +1a6d efe08006 ifetch 1 ,contr +1a6e 98c08c00 iadd contr ,contr +1a6f efe08006 ifetch 1 ,contr +1a70 98c08c00 iadd contr ,contr +1a71 20201a68 branch le_att_get_handle_loop1 + +le_att_get_handle_ptr_found: +1a72 efe08006 ifetch 1 ,contr +1a73 98c08c00 iadd contr ,contr +1a74 20600000 rtn + +le_att_get_short_uuid_ptr: +1a75 47624038 bpatchx patch38_4 ,mem_patch38 +1a76 6fe14396 fetch 2 ,mem_ui_le_uuid_table +1a77 98000c00 iforce contr + +le_att_get_short_uuid_loop: +1a78 efe10006 ifetch 2 ,contr +1a79 1fe17eff and_into 0xff ,pdata +1a7a 207a0000 rtn blank +1a7b efe08006 ifetch 1 ,contr +1a7c 98c08c00 iadd contr ,contr +1a7d 18c08dfe increase -2 ,contr +1a7e efe10006 ifetch 2 ,contr +1a7f 98467c00 isub temp ,null +1a80 20628000 rtn zero +1a81 efe08006 ifetch 1 ,contr +1a82 98c08c00 iadd contr ,contr +1a83 20201a78 branch le_att_get_short_uuid_loop + +le_att_get_last_handle: +1a84 6fe14396 fetch 2 ,mem_ui_le_uuid_table +1a85 98000c00 iforce contr + +le_att_get_last_handle_loop: +1a86 efe10006 ifetch 2 ,contr +1a87 1fe17eff and_into 0xff ,pdata +1a88 207a0000 rtn blank +1a89 1fe08401 add pdata ,1 ,temp +1a8a efe08006 ifetch 1 ,contr +1a8b 98c08c00 iadd contr ,contr +1a8c efe08006 ifetch 1 ,contr +1a8d 98c08c00 iadd contr ,contr +1a8e 18c20a00 copy contr ,contw +1a8f 20201a86 branch le_att_get_last_handle_loop + +le_att_get_handle_info_from_ptr: +1a90 6fe109b4 fetch 2 ,mem_le_cur_attlist_start_ptr +1a91 20201a94 branch le_att_get_handle_info_fast + +le_att_get_handle_info: +1a92 4762c038 bpatchx patch38_5 ,mem_patch38 +1a93 6fe14396 fetch 2 ,mem_ui_le_uuid_table + +le_att_get_handle_info_fast: +1a94 98000c00 iforce contr + +le_att_get_handle_loop: +1a95 efe10006 ifetch 2 ,contr +1a96 1fe17eff and_into 0xff ,pdata +1a97 203a1a9f branch le_att_unfind_handle ,blank +1a98 98467c00 isub temp ,null +1a99 20229aa0 branch le_att_finded_handle ,zero +1a9a efe08006 ifetch 1 ,contr +1a9b 98c08c00 iadd contr ,contr +1a9c efe08006 ifetch 1 ,contr +1a9d 98c08c00 iadd contr ,contr +1a9e 20201a95 branch le_att_get_handle_loop + +le_att_unfind_handle: +1a9f 20207e5e branch disable_blank + +le_att_finded_handle: +1aa0 efe08006 ifetch 1 ,contr +1aa1 67e089ba store 1 ,mem_le_cur_uuid_length +1aa2 1fe27200 copy pdata ,loopcnt +1aa3 d8a009bb arg mem_le_cur_uuid ,contw +1aa4 20407d52 call memcpy_fast +1aa5 efe08006 ifetch 1 ,contr +1aa6 67e089b3 store 1 ,mem_le_curr_att_len +1aa7 20407ceb call store_contr +1aa8 20207e60 branch enable_blank + +le_modified_name: +1aa9 47634038 bpatchx patch38_6 ,mem_patch38 +1aaa 20401aac call le_modified_name_att_list +1aab 20201abe branch le_modified_name_adv + +le_modified_name_att_list: +1aac d8402a00 arg uuid_chrctr_device_name ,temp +1aad 20401a75 call le_att_get_short_uuid_ptr +1aae 207a0000 rtn blank +1aaf efe08006 ifetch 1 ,contr +1ab0 18c20a00 copy contr ,contw +1ab1 6848c2f7 fetcht 1 ,mem_le_name_len +1ab2 18427200 copy temp ,loopcnt +1ab3 98467c00 isub temp ,null +1ab4 24211abb nbranch le_name_length_longer_than_att ,positive +1ab5 98460400 isub temp ,temp +1ab6 d8c042f8 arg mem_le_name ,contr +1ab7 20407d52 call memcpy_fast +1ab8 18427200 copy temp ,loopcnt +1ab9 24429af6 ncall memcpy_empty ,zero +1aba 20600000 rtn + +le_name_length_longer_than_att: +1abb 1fe27200 copy pdata ,loopcnt +1abc d8c042f8 arg mem_le_name ,contr +1abd 20207d52 branch memcpy_fast + +le_modified_name_adv: +1abe da604407 arg mem_le_adv_data_len + 32 ,regc +1abf da2043e8 arg mem_le_adv_data ,rega +1ac0 20401acb call le_modified_name_adv_and_scan +1ac1 58000000 setarg 0 +1ac2 79347e00 setflag user ,0 ,pdata +1ac3 67e0895c store 1 ,mem_pdatatemp +1ac4 da604427 arg mem_le_scan_data_len + 32 ,regc +1ac5 da204408 arg mem_le_scan_data ,rega +1ac6 20401acb call le_modified_name_adv_and_scan +1ac7 20740000 rtn user +1ac8 6fe0895c fetch 1 ,mem_pdatatemp +1ac9 203a137a branch assert ,blank +1aca 20600000 rtn + +le_modified_name_adv_and_scan: +1acb 4763c038 bpatchx patch38_7 ,mem_patch38 +1acc 20407e54 call enable_user +1acd 20407d2c call clear_temp_block +1ace da400000 arg 0 ,regb +1acf d8a0098f arg mem_le_data_temp ,contw +1ad0 20401ae5 call le_modified_name_adv_loop +1ad1 6fe0c2f7 fetch 1 ,mem_le_name_len +1ad2 1fe08401 add pdata ,1 ,temp +1ad3 9a40a200 iadd regb ,rega +1ad4 1a20a202 increase 2 ,rega +1ad5 1a267c1f sub rega ,0x1f ,null +1ad6 24211ae3 nbranch le_modified_name_adv_and_scan_name_overflow ,positive +1ad7 e0408005 istoret 1 ,contw +1ad8 d8400009 arg gap_adtype_local_name_complete ,temp +1ad9 e0408005 istoret 1 ,contw +1ada 98007200 iforce loopcnt +1adb 20407d52 call memcpy_fast +1adc 1a222400 copy rega ,regb + +le_modified_name_adv_and_scan_store_data: +1add 1a427e00 deposit regb +1ade 67e0898e store 1 ,mem_le_data_len_temp +1adf d8c0098e arg mem_le_data_len_temp ,contr +1ae0 5fffffe0 setarg -32 +1ae1 9a608a00 iadd regc ,contw +1ae2 20207d0a branch memcpy32 + +le_modified_name_adv_and_scan_name_overflow: +1ae3 20407e56 call disable_user +1ae4 20201add branch le_modified_name_adv_and_scan_store_data + +le_modified_name_adv_loop: +1ae5 efe08011 ifetch 1 ,rega +1ae6 207a0000 rtn blank +1ae7 1fe0fe01 pincrease 1 +1ae8 e8408006 ifetcht 1 ,contr +1ae9 18467c09 sub temp ,gap_adtype_local_name_complete ,null +1aea 20229af4 branch le_modified_name_adv_found_name ,zero +1aeb 9a40a400 iadd regb ,regb +1aec 1a220c00 copy rega ,contr +1aed 98007200 iforce loopcnt +1aee 20407d52 call memcpy_fast +1aef 18c22200 copy contr ,rega + +le_modified_name_adv_loop2: +1af0 1a227e00 deposit rega +1af1 9a667c00 isub regc ,null +1af2 20610000 rtn positive +1af3 20201ae5 branch le_modified_name_adv_loop + +le_modified_name_adv_found_name: +1af4 9a20a200 iadd rega ,rega +1af5 20201af0 branch le_modified_name_adv_loop2 + +memcpy_empty: +1af6 58000020 setarg space +1af7 e7e08005 istore 1 ,contw +1af8 c2001af6 loop memcpy_empty +1af9 20600000 rtn + +le_lpm_set_mult: +1afa 47644039 bpatchx patch39_0 ,mem_patch39 +1afb 7855fc00 disable wake +1afc 20371afe branch le_lpm_set_mult_attempt ,attempt +1afd 24369b0c nbranch le_lpm_lost ,match + +le_lpm_set_mult_attempt: +1afe 20401544 call lpm_match +1aff 6fe140c8 fetch 2 ,mem_rx_window_sniff +1b00 67e10295 store 2 ,mem_le_receive_window + +le_lpm_set_mult_attempt_match: +1b01 24369557 nbranch lpm_mult_short ,match +1b02 c5079557 bmark1 mark_old_packet ,lpm_mult_short +1b03 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +1b04 243a1557 nbranch lpm_mult_short ,blank +1b05 6fe0c1f6 fetch 1 ,mem_le_txlen +1b06 243a1557 nbranch lpm_mult_short ,blank +1b07 6fe0c3c0 fetch 1 ,mem_le_configuration +1b08 c2829557 bbit1 bit_ble_short_mult ,lpm_mult_short +1b09 6fe08287 fetch 1 ,mem_le_state +1b0a c2829557 bbit1 lestate_update_param ,lpm_mult_short +1b0b 20201536 branch lpm_mult_wait_timeout + +le_lpm_lost: +1b0c 684940c8 fetcht 2 ,mem_rx_window_sniff +1b0d 18430400 rshift temp ,temp +1b0e 6fe10295 fetch 2 ,mem_le_receive_window +1b0f 9840fe00 iadd temp ,pdata +1b10 67e10295 store 2 ,mem_le_receive_window +1b11 2020154f branch lpm_lost + +le_set_config_fixed_tk: +1b12 d8e00000 arg bit_ble_passkey_fixed_key ,queue +1b13 20201b2a branch le_set_config + +le_clr_config_fixed_tk: +1b14 d8e00000 arg bit_ble_passkey_fixed_key ,queue +1b15 20201b2e branch le_clr_config + +le_set_config_fixed_ltk: +1b16 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue +1b17 20201b2a branch le_set_config + +le_clr_config_fixed_ltk: +1b18 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue +1b19 20201b2e branch le_clr_config + +le_set_config_more_data: +1b1a d8e00002 arg bit_ble_transmit_packet_by_md ,queue +1b1b 20201b2a branch le_set_config + +le_clr_config_more_data: +1b1c d8e00002 arg bit_ble_transmit_packet_by_md ,queue +1b1d 20201b2e branch le_clr_config + +le_set_config_read_authentication: +1b1e d8e00003 arg bit_ble_read_auth ,queue +1b1f 20201b2a branch le_set_config + +le_clr_config_read_authentication: +1b20 d8e00003 arg bit_ble_read_auth ,queue +1b21 20201b2e branch le_clr_config + +le_set_config_write_authentication: +1b22 d8e00004 arg bit_ble_write_auth ,queue +1b23 20201b2a branch le_set_config + +le_clr_config_write_authentication: +1b24 d8e00004 arg bit_ble_write_auth ,queue +1b25 20201b2e branch le_clr_config + +le_set_config_short_mult: +1b26 d8e00005 arg bit_ble_short_mult ,queue +1b27 20201b2a branch le_set_config + +le_clr_config_short_mult: +1b28 d8e00005 arg bit_ble_short_mult ,queue +1b29 20201b2e branch le_clr_config + +le_set_config: +1b2a 6fe0c3c0 fetch 1 ,mem_le_configuration +1b2b f9207e00 qset1 pdata +1b2c 67e0c3c0 store 1 ,mem_le_configuration +1b2d 20600000 rtn + +le_clr_config: +1b2e 6fe0c3c0 fetch 1 ,mem_le_configuration +1b2f f93ffe00 qset0 pdata +1b30 67e0c3c0 store 1 ,mem_le_configuration +1b31 20600000 rtn + +le_set_fixed_ltk: +1b32 58112233 setarg 0x112233 +1b33 67e1c3c1 store 3 ,mem_le_fixed_ltk +1b34 58445566 setarg 0x445566 +1b35 e7e18005 istore 3 ,contw +1b36 58778899 setarg 0x778899 +1b37 e7e18005 istore 3 ,contw +1b38 58001122 setarg 0x001122 +1b39 e7e18005 istore 3 ,contw +1b3a 58334455 setarg 0x334455 +1b3b e7e18005 istore 3 ,contw +1b3c 58000066 setarg 0x66 +1b3d e7e08005 istore 1 ,contw +1b3e 20600000 rtn + +le_set_justwork: +1b3f 59000302 setarg 0x01000302 +1b40 67e24350 store 4 ,mem_le_pres +1b41 58010010 setarg 0x010010 +1b42 67e1c354 store 3 ,mem_le_pres_max_keysize +1b43 70439d01 jam 1 ,mem_le_pairing_mode +1b44 20600000 rtn + +le_fifo_malloc_tx_empty: +1b45 da200000 arg 0 ,rega +1b46 d8200001 arg llid_empty ,type +1b47 20201b56 branch le_fifo_malloc_tx + +le_fifo_malloc_tx_ll: +1b48 d8200003 arg llid_le_ll ,type +1b49 20401b56 call le_fifo_malloc_tx +1b4a 1a427e00 copy regb ,pdata +1b4b e7e08005 istore 1 ,contw +1b4c 20600000 rtn + +le_fifo_malloc_tx_l2cap: +1b4d 18000202 force llid_start ,type +1b4e 1a20a204 increase 4 ,rega +1b4f 20401b56 call le_fifo_malloc_tx +1b50 1a20a3fc increase -4 ,rega +1b51 1a227e00 copy rega ,pdata +1b52 e7e10005 istore 2 ,contw +1b53 1a427e00 copy regb ,pdata +1b54 e7e10005 istore 2 ,contw +1b55 20600000 rtn + +le_fifo_malloc_tx: +1b56 1a20a205 increase 5 ,rega +1b57 204052a1 call ble_l2cap_malloc +1b58 1a20a3fb increase -5 ,rega +1b59 1a227e00 copy rega ,pdata +1b5a e7e10005 istore 2 ,contw +1b5b 58000000 setarg 0 +1b5c e7e10005 istore 2 ,contw +1b5d 18227e00 copy type ,pdata +1b5e e7e08005 istore 1 ,contw +1b5f 20600000 rtn + +le_fifo_get_first_tx_ptr: +1b60 204052db call l2cap_malloc_fifo_out +1b61 1fe20c00 copy pdata ,contr +1b62 20600000 rtn + +le_fifo_get_second_tx_ptr: +1b63 6fe144ee fetch 2 ,mem_tx_fifo2_ptr +1b64 20600000 rtn + +le_fifo_get_last_tx_ptr: +1b65 20401b68 call le_fifo_get_last_tx_ptr0 +1b66 1fe20c00 copy pdata ,contr +1b67 20600000 rtn + +le_fifo_get_last_tx_ptr0: +1b68 6fe144f1 fetch 2 ,mem_tx_fifo3_ptr +1b69 20600000 rtn + +le_fifo_get_first_l2cap_ptr: +1b6a 20401b60 call le_fifo_get_first_tx_ptr +1b6b 18c08c05 increase 5 ,contr +1b6c 20600000 rtn + +le_fifo_get_first_att_ptr: +1b6d 20401b60 call le_fifo_get_first_tx_ptr +1b6e 18c08c09 increase 9 ,contr +1b6f 20600000 rtn + +le_fifo_get_last_att_ptr: +1b70 20401b65 call le_fifo_get_last_tx_ptr +1b71 18c08c09 increase 9 ,contr +1b72 20600000 rtn + +le_fifo_get_last_l2cap_ptr: +1b73 20401b65 call le_fifo_get_last_tx_ptr +1b74 18c08c05 increase 5 ,contr +1b75 20600000 rtn + +le_fifo_check_full: +1b76 202052f1 branch l2cap_malloc_is_fifo_full + +le_fifo_check_nearly_full: +1b77 202052f4 branch l2cap_malloc_is_fifo_nearly_full + +le_fifo_check_empty: +1b78 202052f7 branch l2cap_malloc_is_fifo_empty + +le_fifo_release_first_node: +1b79 202052e0 branch l2cap_malloc_free + +le_set_dle: +1b7a 67e4444c store 8 ,mem_local_rx_max_octets +1b7b 20201b8c branch le_set_feature_data_packet_length_extension + +le_set_phys: +1b7c 184122ff and temp ,0xff ,rega +1b7d 20401b80 call le_set_tx_phy +1b7e 184ca200 rshift8 temp ,rega +1b7f 20201b86 branch le_set_rx_phy + +le_set_tx_phy: +1b80 6220c442 storer rega ,1 ,mem_le_tx_phys +1b81 2a2ffe01 isolate1 bit_le_2m_phy ,rega +1b82 20409b88 call le_set_feature_2m_phy ,true +1b83 2a2ffe02 isolate1 bit_le_coded_phy ,rega +1b84 20409b8a call le_set_feature_coded_phy ,true +1b85 20600000 rtn + +le_set_rx_phy: +1b86 6220c443 storer rega ,1 ,mem_le_rx_phys +1b87 20201b81 branch le_set_tx_phy + 1 + +le_set_feature_2m_phy: +1b88 d8e00008 arg bit_ll_feature_le_2m_phy ,queue +1b89 20201b8e branch le_set_feature + +le_set_feature_coded_phy: +1b8a d8e0000b arg bit_ll_feature_le_coded_phy ,queue +1b8b 20201b8e branch le_set_feature + +le_set_feature_data_packet_length_extension: +1b8c d8e00005 arg bit_ll_feature_le_data_packet_length_extension ,queue +1b8d 20201b8e branch le_set_feature + +le_set_feature: +1b8e 6fe4443a fetch 8 ,mem_le_local_feature +1b8f f9207e00 qset1 pdata +1b90 67e4443a store 8 ,mem_le_local_feature +1b91 20600000 rtn + +le_advertising_dispatch: +1b92 c61a0000 rtnmark1 mark_adc_enable +1b93 7002bc01 jam fun_rx_ll_1m_phy ,mem_le_rx_phy +1b94 7002bd01 jam fun_tx_ll_1m_phy ,mem_le_tx_phy +1b95 204016a5 call le_enable +1b96 20401b99 call le_scan +1b97 20401c17 call le_adv +1b98 202016b2 branch le_disable + +le_scan: +1b99 4764c039 bpatchx patch39_1 ,mem_patch39 +1b9a 6fe0c3e2 fetch 1 ,mem_le_scan_enable +1b9b c1808000 rtnne le_scan_enable +1b9c d8e00002 arg le_scan_interval_timer ,queue +1b9d 20407d74 call timer_check +1b9e 247a0000 nrtn blank +1b9f 6fe143e3 fetch 2 ,mem_le_scan_interval +1ba0 684943e5 fetcht 2 ,mem_le_scan_window +1ba1 98467e00 isub temp ,pdata +1ba2 d8e00002 arg le_scan_interval_timer ,queue +1ba3 20407d66 call timer_init +1ba4 7854fc00 disable master +1ba5 20401c38 call le_init_adv +1ba6 20401bb8 call le_wait_adv +1ba7 24768000 nrtn match +1ba8 47654039 bpatchx patch39_2 ,mem_patch39 +1ba9 6fe3016d fetch 6 ,mem_le_rxbuf + 2 +1baa 67e30297 store 6 ,mem_le_plap +1bab 6fe08002 fetch 1 ,mem_le_adv_rcv +1bac 1fe0fe01 increase 1 ,pdata +1bad 67e08002 store 1 ,mem_le_adv_rcv +1bae 20401bbf call le_create_conn +1baf 20748000 rtn master +1bb0 20401c5f call le_send_scan_request +1bb1 24768000 nrtn match +1bb2 6fe08004 fetch 1 ,mem_le_scanrsp_rcv +1bb3 1fe0fe01 increase 1 ,pdata +1bb4 67e08004 store 1 ,mem_le_scanrsp_rcv +1bb5 6fe48173 fetch 9 ,mem_le_rxbuf + 8 +1bb6 67e48a01 store 9 ,mem_tmp_buffer +1bb7 20600000 rtn + +le_wait_adv: +1bb8 4765c039 bpatchx patch39_3 ,mem_patch39 +1bb9 20401caa call le_next_adv_channel +1bba 2040174a call le_receive_adv +1bbb 6fe08001 fetch 1 ,mem_le_adv_waitcnt +1bbc 1fe0fe01 increase 1 ,pdata +1bbd 67e08001 store 1 ,mem_le_adv_waitcnt +1bbe 20600000 rtn + +le_create_conn: +1bbf 47664039 bpatchx patch39_4 ,mem_patch39 +1bc0 6fe082e0 fetch 1 ,mem_cmd_le_create_conn +1bc1 c18d8000 rtnne hci_cmd_le_create_conn +1bc2 6fe30297 fetch 6 ,mem_le_plap +1bc3 684b436b fetcht 6 ,mem_le_conn_peer_addr +1bc4 98467c00 isub temp ,null +1bc5 24628000 nrtn zero +1bc6 20400a4a call context_new +1bc7 24628000 nrtn zero +1bc8 20401bcf call le_connect_request +1bc9 20401602 call le_init_master +1bca 7041db00 jam 0 ,mem_hci_cmd +1bcb 7002d700 jam 0 ,mem_le_peer_sca +1bcc 7043e200 jam 0 ,mem_le_scan_enable +1bcd 7002e000 jam 0 ,mem_cmd_le_create_conn +1bce 20200a32 branch context_save + +le_connect_request: +1bcf 4766c039 bpatchx patch39_5 ,mem_patch39 +1bd0 18007fff force -1 ,pdata +1bd1 38080001 setsect 2 ,1 +1bd2 67e282b7 store 5 ,mem_le_channel_map +1bd3 da200287 arg mem_le_state ,rega +1bd4 20401720 call le_calc_channel_map +1bd5 18007204 force 4 ,loopcnt +1bd6 d8a002ab arg mem_le_access ,contw +1bd7 20405a32 call generate_random_loop +1bd8 6fe14378 fetch 2 ,mem_le_timeout +1bd9 67e102b5 store 2 ,mem_le_superto + +le_con_req_hop_retry: +1bda 180a7e00 random pdata +1bdb 1fe17e0f and_into 0xf ,pdata +1bdc 1fe67c04 sub pdata ,4 ,null +1bdd 20211bda branch le_con_req_hop_retry ,positive +1bde 67e082a0 store 1 ,mem_le_hop +1bdf 67e085a8 store 1 ,mem_tmp1 +1be0 47674039 bpatchx patch39_6 ,mem_patch39 +1be1 684941f3 fetcht 2 ,mem_le_conn_interval +1be2 60490289 storet 2 ,mem_le_tsniff +1be3 18422600 copy temp ,regc +1be4 1c40fe07 add clkn_bt ,7 ,pdata +1be5 9a66fc00 idiv regc +1be6 20407def call wait_div_end +1be7 18072200 remainder rega +1be8 9a267e00 isub rega ,pdata +1be9 9a60fe00 iadd regc ,pdata +1bea 684941f1 fetcht 2 ,mem_le_dsniff +1beb 9840fe00 iadd temp ,pdata +1bec 67e2028b store 4 ,mem_le_anchor +1bed 9c462200 isub clkn_bt ,rega +1bee 1a20a3fa increase -6 ,rega +1bef da402205 arg 0x2205 ,regb +1bf0 6fe0c371 fetch 1 ,mem_le_conn_own_addr_type +1bf1 7d3a2406 nsetflag blank ,le_sender_addr_bit ,regb +1bf2 6fe0c36a fetch 1 ,mem_le_conn_peer_addr_type +1bf3 7d3a2407 nsetflag blank ,le_receiver_addr_bit ,regb +1bf4 1a427e00 copy regb ,pdata +1bf5 67e141f5 store 2 ,mem_le_txheader +1bf6 6fe3437a fetch 6 ,mem_le_lap +1bf7 e7e30005 istore 6 ,contw +1bf8 6fe30297 fetch 6 ,mem_le_plap +1bf9 e7e30005 istore 6 ,contw +1bfa 6fe202ab fetch 4 ,mem_le_access +1bfb e7e20005 istore 4 ,contw +1bfc 180a7e00 random pdata +1bfd e7e10005 istore 2 ,contw +1bfe 180a7e00 random pdata +1bff e7e08005 istore 1 ,contw +1c00 18007e02 force 2 ,pdata +1c01 e7e08005 istore 1 ,contw +1c02 1a2b7e00 rshift2 rega ,pdata +1c03 e7e10005 istore 2 ,contw +1c04 1a6b7e00 rshift2 regc ,pdata +1c05 e7e10005 istore 2 ,contw +1c06 4767c039 bpatchx patch39_7 ,mem_patch39 +1c07 58000000 setarg 0 +1c08 e7e10005 istore 2 ,contw +1c09 6fe14378 fetch 2 ,mem_le_timeout +1c0a e7e10005 istore 2 ,contw +1c0b 6fe282b7 fetch 5 ,mem_le_channel_map +1c0c e7e28005 istore 5 ,contw +1c0d 6fe082a0 fetch 1 ,mem_le_hop +1c0e d84000a0 arg param_le_sca ,temp +1c0f 9841fe00 ior temp ,pdata +1c10 e7e08005 istore 1 ,contw +1c11 20401836 call le_transmit_norx +1c12 580041f5 setarg mem_le_txheader +1c13 1fe08c12 add pdata ,18 ,contr +1c14 efe18006 ifetch 3 ,contr +1c15 67e182af store 3 ,mem_le_crcinit +1c16 20600000 rtn + +le_adv: +1c17 70001624 jam 36 ,mem_le_ch_mapped +1c18 70098e00 jam 0 ,mem_le_adv_channel_map_temp + +le_adv_loop: +1c19 6fe0c427 fetch 1 ,mem_le_adv_enable +1c1a 207a0000 rtn blank +1c1b d8e00000 arg le_adv_interval_timer ,queue +1c1c 20407d74 call timer_check +1c1d 247a0000 nrtn blank +1c1e 4768403a bpatchx patch3a_0 ,mem_patch3a + +le_adv_loop_tx: +1c1f 78287c00 enable swfine +1c20 20401c38 call le_init_adv +1c21 20401caa call le_next_adv_channel +1c22 20401c41 call le_send_adv_ind +1c23 24369c2b nbranch le_adv_not_match ,match +1c24 6fe08003 fetch 1 ,mem_le_req_rcv +1c25 1fe0fe01 increase 1 ,pdata +1c26 67e08003 store 1 ,mem_le_req_rcv +1c27 6fe0816b fetch 1 ,mem_le_rxbuf_adv_header +1c28 1fe17e0f and pdata ,0x0f ,pdata +1c29 c0019c70 beq scan_req ,le_send_scan_response +1c2a c0029c82 beq connect_req ,le_parse_connect_req + +le_adv_not_match: +1c2b 4768c03a bpatchx patch3a_1 ,mem_patch3a +1c2c 6fe0898e fetch 1 ,mem_le_adv_channel_map_temp +1c2d 6848c432 fetcht 1 ,mem_le_adv_channel_map +1c2e 98467c00 isub temp ,null +1c2f 24229c19 nbranch le_adv_loop ,zero +1c30 180a7e00 random pdata +1c31 d84001ff arg 0x1ff ,temp +1c32 98417e00 iand temp ,pdata +1c33 1fe0fefa add pdata ,250 ,pdata +1c34 20407d0e call delay +1c35 d8e00000 arg le_adv_interval_timer ,queue +1c36 6fe14428 fetch 2 ,mem_le_adv_interval +1c37 20207d66 branch timer_init + +le_init_adv: +1c38 4769403a bpatchx patch3a_2 ,mem_patch3a +1c39 7854fc00 disable master + +le_adv_access: +1c3a 588e89be setarg 0x8e89be +1c3b 1fed7e00 lshift8 pdata ,pdata +1c3c 1fe1fed6 or_into 0xd6 ,pdata +1c3d 98001200 iforce access +1c3e 58555555 setarg 0x555555 +1c3f 67e182af store 3 ,mem_le_crcinit +1c40 202010b0 branch calc_mod_value_scale_le + +le_send_adv_ind: +1c41 4769c03a bpatchx patch3a_3 ,mem_patch3a +1c42 6fe0c42a fetch 1 ,mem_le_adv_type +1c43 6848c42b fetcht 1 ,mem_le_adv_own_addr_type +1c44 18520400 lshift4 temp ,temp +1c45 184b8400 lshift2 temp ,temp +1c46 98408400 iadd temp ,temp +1c47 6048c1f5 storet 1 ,mem_le_txheader +1c48 c0009c52 beq adv_direct_ind ,le_send_adv_direct_ind +1c49 6848c3e7 fetcht 1 ,mem_le_adv_data_len +1c4a 1840fe06 add temp ,6 ,pdata +1c4b 67e0c1f6 store 1 ,mem_le_txlen +1c4c 6fe3437a fetch 6 ,mem_le_lap +1c4d 67e341f7 store 6 ,mem_le_txpayload +1c4e 18427200 copy temp ,loopcnt +1c4f d8c043e8 arg mem_le_adv_data ,contr +1c50 20407d52 call memcpy_fast +1c51 20201c58 branch le_send_adv_transmit + +le_send_adv_direct_ind: +1c52 5800000c setarg 12 +1c53 67e0c1f6 store 1 ,mem_le_txlen +1c54 6fe3437a fetch 6 ,mem_le_lap +1c55 67e341f7 store 6 ,mem_le_txpayload +1c56 6fe341dd fetch 6 ,mem_hci_plap +1c57 e7e30005 istore 6 ,contw + +le_send_adv_transmit: +1c58 476a403a bpatchx patch3a_4 ,mem_patch3a +1c59 6fe08000 fetch 1 ,mem_le_adv_transmit +1c5a 1fe0fe01 increase 1 ,pdata +1c5b 67e08000 store 1 ,mem_le_adv_transmit +1c5c db600708 arg 1800 ,stop_watch +1c5d 7856fc00 disable match +1c5e 20201821 branch le_transmit_receive_sifs_without_change_mode + +le_send_scan_request: +1c5f 476ac03a bpatchx patch3a_5 ,mem_patch3a +1c60 6fe0c433 fetch 1 ,mem_le_scan_type +1c61 c1808000 rtnne le_scan_type_active +1c62 6fe08000 fetch 1 ,mem_le_adv_transmit +1c63 1fe0fe01 increase 1 ,pdata +1c64 67e08000 store 1 ,mem_le_adv_transmit +1c65 d8400c03 arg 0x0c03 ,temp +1c66 6fe0c434 fetch 1 ,mem_le_scan_own_addr_type +1c67 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp +1c68 1a227e00 copy rega ,pdata +1c69 7d3a0407 nsetflag blank ,le_receiver_addr_bit ,temp +1c6a 604941f5 storet 2 ,mem_le_txheader +1c6b 6fe3437a fetch 6 ,mem_le_lap +1c6c e7e30005 istore 6 ,contw +1c6d 6fe30297 fetch 6 ,mem_le_plap +1c6e e7e30005 istore 6 ,contw +1c6f 20201821 branch le_transmit_receive_sifs_without_change_mode + +le_send_scan_response: +1c70 6fe30173 fetch 6 ,mem_le_rxbuf_adv_scan_req_adv_address +1c71 684b437a fetcht 6 ,mem_le_lap +1c72 98467c00 isub temp ,null +1c73 24628000 nrtn zero +1c74 d8400004 arg scan_rsp ,temp +1c75 6fe0c42b fetch 1 ,mem_le_adv_own_addr_type +1c76 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp +1c77 6048c1f5 storet 1 ,mem_le_txheader +1c78 6848c407 fetcht 1 ,mem_le_scan_data_len +1c79 1840fe06 add temp ,6 ,pdata +1c7a 67e0c1f6 store 1 ,mem_le_txlen +1c7b 6fe3437a fetch 6 ,mem_le_lap +1c7c 67e341f7 store 6 ,mem_le_txpayload +1c7d d8c04408 arg mem_le_scan_data ,contr +1c7e 18427200 copy temp ,loopcnt +1c7f 20407d52 call memcpy_fast +1c80 20401836 call le_transmit_norx +1c81 20201c2b branch le_adv_not_match + +le_parse_connect_req: +1c82 6fe30173 fetch 6 ,mem_le_rxbuf_adv_connect_ind_adv_address +1c83 684b437a fetcht 6 ,mem_le_lap +1c84 98467c00 isub temp ,null +1c85 24628000 nrtn zero +1c86 20401961 call le_scan_check_sender_addr_type +1c87 6220c36a storer rega ,1 ,mem_le_conn_peer_addr_type +1c88 6fe3016d fetch 6 ,mem_le_rxbuf_adv_connect_ind_init_address +1c89 67e30297 store 6 ,mem_le_plap +1c8a 6fe40179 fetch 8 ,mem_le_rxbuf_adv_connect_ind_access_address +1c8b 67e402ab store 8 ,mem_le_access +1c8c 68490181 fetcht 2 ,mem_le_rxbuf_adv_connect_ind_win_offset +1c8d 476b403a bpatchx patch3a_6 ,mem_patch3a +1c8e 184b8400 lshift2 temp ,temp +1c8f 6fe10183 fetch 2 ,mem_le_rxbuf_adv_connect_ind_interval +1c90 1febfe00 lshift2 pdata ,pdata +1c91 67e10289 store 2 ,mem_le_tsniff +1c92 67e2028b store 4 ,mem_le_anchor +1c93 98467e00 isub temp ,pdata +1c94 1fe0d1fe add pdata ,-2 ,clke_bt +1c95 6fe48185 fetch 9 ,mem_le_rxbuf_adv_connect_ind_latency +1c96 67e482b3 store 9 ,mem_le_slave_latency +1c97 6fe0818e fetch 1 ,mem_le_rxbuf_adv_connect_ind_hop_and_sca +1c98 1fe1041f and pdata ,0x1f ,temp +1c99 604882a0 storet 1 ,mem_le_hop +1c9a 1ff18400 rshift4 pdata ,temp +1c9b 18430400 rshift temp ,temp +1c9c 604882d7 storet 1 ,mem_le_peer_sca +1c9d da200287 arg mem_le_state ,rega +1c9e 20401a33 call le_receive_window_size +1c9f da200287 arg mem_le_state ,rega +1ca0 20401720 call le_calc_channel_map +1ca1 2040160e call le_init_slave +1ca2 20400a4a call context_new +1ca3 24628000 nrtn zero +1ca4 476bc03a bpatchx patch3a_7 ,mem_patch3a +1ca5 20401061 call calc_clke_offset +1ca6 20401f6b call le_l2cap_reset_signaling_identifier +1ca7 70095b14 jam bt_evt_le_connected ,mem_fifo_temp +1ca8 20407871 call ui_ipc_send_event +1ca9 20200a32 branch context_save + +le_next_adv_channel: +1caa 476c403b bpatchx patch3b_0 ,mem_patch3b +1cab 6fe08016 fetch 1 ,mem_le_ch_mapped +1cac c0129cb0 beq 37 ,le_next_adv_channel_curr_channel_37 +1cad c0131cb6 beq 38 ,le_next_adv_channel_curr_channel_38 +1cae c0139cbc beq 39 ,le_next_adv_channel_curr_channel_39 +1caf 20201cbc branch le_next_adv_channel_curr_channel_39 + +le_next_adv_channel_curr_channel_37: +1cb0 6848c432 fetcht 1 ,mem_le_adv_channel_map +1cb1 284ffe01 isolate1 bit_adv_channel_map_38 ,temp +1cb2 20209cc7 branch set_le_next_adv_channel_38 ,true +1cb3 284ffe02 isolate1 bit_adv_channel_map_39 ,temp +1cb4 20209ccc branch set_le_next_adv_channel_39 ,true +1cb5 20201cc2 branch set_le_next_adv_channel_37 + +le_next_adv_channel_curr_channel_38: +1cb6 6848c432 fetcht 1 ,mem_le_adv_channel_map +1cb7 284ffe02 isolate1 bit_adv_channel_map_39 ,temp +1cb8 20209ccc branch set_le_next_adv_channel_39 ,true +1cb9 284ffe00 isolate1 bit_adv_channel_map_37 ,temp +1cba 20209cc2 branch set_le_next_adv_channel_37 ,true +1cbb 20201cc7 branch set_le_next_adv_channel_38 + +le_next_adv_channel_curr_channel_39: +1cbc 6848c432 fetcht 1 ,mem_le_adv_channel_map +1cbd 284ffe00 isolate1 bit_adv_channel_map_37 ,temp +1cbe 20209cc2 branch set_le_next_adv_channel_37 ,true +1cbf 284ffe01 isolate1 bit_adv_channel_map_38 ,temp +1cc0 20209cc7 branch set_le_next_adv_channel_38 ,true +1cc1 20201ccc branch set_le_next_adv_channel_39 + +set_le_next_adv_channel_37: +1cc2 70001625 jam 37 ,mem_le_ch_mapped +1cc3 6fe0898e fetch 1 ,mem_le_adv_channel_map_temp +1cc4 79207e00 set1 bit_adv_channel_map_37 ,pdata +1cc5 67e0898e store 1 ,mem_le_adv_channel_map_temp +1cc6 20600000 rtn + +set_le_next_adv_channel_38: +1cc7 70001626 jam 38 ,mem_le_ch_mapped +1cc8 6fe0898e fetch 1 ,mem_le_adv_channel_map_temp +1cc9 79207e01 set1 bit_adv_channel_map_38 ,pdata +1cca 67e0898e store 1 ,mem_le_adv_channel_map_temp +1ccb 20600000 rtn + +set_le_next_adv_channel_39: +1ccc 70001627 jam 39 ,mem_le_ch_mapped +1ccd 6fe0898e fetch 1 ,mem_le_adv_channel_map_temp +1cce 79207e02 set1 bit_adv_channel_map_39 ,pdata +1ccf 67e0898e store 1 ,mem_le_adv_channel_map_temp +1cd0 20600000 rtn + +le_parse_att: +1cd1 efe18006 ifetch 3 ,contr +1cd2 67e1c436 store 3 ,mem_le_att_opcode +1cd3 c0011ce8 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +1cd4 c0019cf0 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +1cd5 c0021cf3 beq attop_find_information_request ,le_parse_att_find_information_request +1cd6 c0031d1c beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +1cd7 c0041d69 beq attop_read_by_type_request ,le_parse_att_read_by_type_request +1cd8 c0051de7 beq attop_read_request ,le_parse_att_read_request +1cd9 c0061e16 beq attop_read_blob_request ,le_parse_att_read_blob_request +1cda c0081e2c beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +1cdb c0091e6f beq attop_write_request ,le_parse_att_write_request +1cdc c00b1e93 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +1cdd c00c1ea6 beq attop_execute_write_request ,le_parse_att_execute_write_request +1cde c00f1eab beq attop_handle_value_confirmation ,le_parse_handle_value_confirmation +1cdf c0291eaf beq attop_write_command ,le_parse_att_write_command +1ce0 20600000 rtn + +le_send_att_exchange_mtu_requset: +1ce1 18002203 force 3 ,rega +1ce2 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1ce3 58000002 setarg attop_exchange_mtu_request +1ce4 e7e08005 istore 1 ,contw +1ce5 6fe14380 fetch 2 ,mem_le_local_mtu +1ce6 e7e10005 istore 2 ,contw +1ce7 20600000 rtn + +le_parse_att_exchange_mtu_request: +1ce8 20401cf0 call le_parse_att_exchange_mtu_response + +le_send_att_exchange_mtu_response: +1ce9 18002203 force 3 ,rega +1cea 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1ceb 58000003 setarg attop_exchange_mtu_response +1cec e7e08005 istore 1 ,contw +1ced 6fe14380 fetch 2 ,mem_le_local_mtu +1cee e7e10005 istore 2 ,contw +1cef 20600000 rtn + +le_parse_att_exchange_mtu_response: +1cf0 1fecfe00 rshift8 pdata ,pdata +1cf1 67e14382 store 2 ,mem_le_remote_mtu +1cf2 20600000 rtn + +le_parse_att_find_information_request: +1cf3 20401f03 call le_get_search_handle_start_end_common +1cf4 20407e54 call enable_user +1cf5 20201cf6 branch le_send_att_find_information_response + +le_send_att_find_information_response: +1cf6 d9600003 arg 3 ,timeup +1cf7 20401a4d call le_init_attlist_search + +le_send_att_find_information_res_loop: +1cf8 20401a56 call le_att_handle_inrange +1cf9 203a1d1a branch le_send_att_find_information_res_end ,blank +1cfa 24211d17 nbranch le_send_att_find_information_res_next ,positive +1cfb 18c08dfe increase -2 ,contr +1cfc 20407ceb call store_contr +1cfd 20407ce2 call get_contw +1cfe 24341d0a nbranch le_send_att_find_information_res_store_info ,user +1cff 20407cd0 call push_stack_rega_b_c +1d00 20407e56 call disable_user +1d01 6162096c storer timeup ,4 ,mem_timeup +1d02 18002214 force 20 ,rega +1d03 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1d04 6962096c fetchr timeup ,4 ,mem_timeup +1d05 20407cde call pop_stack_rega_b_c +1d06 58000005 setarg attop_find_information_response +1d07 e7e08005 istore 1 ,contw +1d08 58000001 setarg uuid_size_16bit +1d09 e7e08005 istore 1 ,contw + +le_send_att_find_information_res_store_info: +1d0a 20407ce5 call get_contr +1d0b efe10006 ifetch 2 ,contr +1d0c 1fe17eff and_into 0xff ,pdata +1d0d e7e10005 istore 2 ,contw +1d0e efe08006 ifetch 1 ,contr +1d0f 1fe27200 copy pdata ,loopcnt +1d10 20407d5f call memcpy +1d11 20407ce8 call store_contw +1d12 196097ff increase -1 ,timeup +1d13 20229d1a branch le_send_att_find_information_res_end ,zero + +le_send_att_find_information_res_cont: +1d14 efe08006 ifetch 1 ,contr +1d15 98c08c00 iadd contr ,contr +1d16 20201cf8 branch le_send_att_find_information_res_loop + +le_send_att_find_information_res_next: +1d17 efe08006 ifetch 1 ,contr +1d18 98c08c00 iadd contr ,contr +1d19 20201d14 branch le_send_att_find_information_res_cont + +le_send_att_find_information_res_end: +1d1a 20341ec8 branch le_send_att_error_response_notfound ,user +1d1b 20201ef7 branch le_send_auto_len_by_mem + +le_parse_att_find_by_type_value_request: +1d1c 20401f03 call le_get_search_handle_start_end_common +1d1d efe10006 ifetch 2 ,contr +1d1e 67e1435a store 2 ,mem_le_search_uuid +1d1f 20407ceb call store_contr +1d20 d8a009a2 arg mem_le_search_att_type_length ,contw +1d21 6fe143d4 fetch 2 ,mem_le_l2cap_size +1d22 1fe0fff9 increase -7 ,pdata +1d23 20401f14 call le_get_search_common2 +1d24 20201d2f branch le_send_att_find_by_type_value_response + +le_start_end_handle_check_1: +1d25 78547c00 disable user +1d26 6849099e fetcht 2 ,mem_le_search_handle_start +1d27 6fe109a0 fetch 2 ,mem_le_search_handle_end +1d28 98467c00 isub temp ,null +1d29 24211d2c nbranch le_start_end_handle_check_1_fail ,positive +1d2a 18427e00 deposit temp +1d2b c1800000 rtnne 0 + +le_start_end_handle_check_1_fail: +1d2c 78347c00 enable user +1d2d 7002d801 jam att_err_invalid_handle ,mem_le_err_code +1d2e 20201ec9 branch le_send_att_error_response + +le_send_att_find_by_type_value_response: +1d2f 20401d25 call le_start_end_handle_check_1 +1d30 20740000 rtn user +1d31 6849435a fetcht 2 ,mem_le_search_uuid +1d32 58002800 setarg uuid_gatt_primary_service +1d33 98467c00 isub temp ,null +1d34 20229d36 branch le_send_att_find_by_type_value_res_primary ,zero +1d35 20201ec8 branch le_send_att_error_response_notfound + +le_send_att_find_by_type_value_res_primary: +1d36 70443900 jam le_find_by_type_val_res_not_found ,mem_le_search_res +1d37 6849099e fetcht 2 ,mem_le_search_handle_start +1d38 60490964 storet 2 ,mem_temp +1d39 20401a92 call le_att_get_handle_info +1d3a 243a1ec8 nbranch le_send_att_error_response_notfound ,blank + +le_send_att_find_primary_search_loop: +1d3b 68490964 fetcht 2 ,mem_temp +1d3c 20401a92 call le_att_get_handle_info +1d3d 243a1d4f nbranch le_send_att_error_response_notfound2 ,blank +1d3e 18c22200 copy contr ,rega +1d3f 6fe089b3 fetch 1 ,mem_le_curr_att_len +1d40 1fe27200 copy pdata ,loopcnt +1d41 684889a2 fetcht 1 ,mem_le_search_att_type_length +1d42 98467c00 isub temp ,null +1d43 24229d4b nbranch le_send_att_find_primary_search_loop1 ,zero +1d44 da4009a3 arg mem_le_search_att_type ,regb +1d45 20407df1 call string_compare +1d46 20229d52 branch le_send_att_find_primary_search_end_start_handle_found ,zero +1d47 6fe109bb fetch 2 ,mem_le_cur_uuid +1d48 6849435a fetcht 2 ,mem_le_search_uuid +1d49 98467c00 isub temp ,null +1d4a 20229d5a branch le_send_att_find_primary_search_end_ending_handle_found ,zero + +le_send_att_find_primary_search_loop1: +1d4b 6fe10964 fetch 2 ,mem_temp +1d4c 1fe0fe01 increase 1 ,pdata +1d4d 67e10964 store 2 ,mem_temp +1d4e 20201d3b branch le_send_att_find_primary_search_loop + +le_send_att_error_response_notfound2: +1d4f 6fe0c439 fetch 1 ,mem_le_search_res +1d50 c0009d5a beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +1d51 20201ec8 branch le_send_att_error_response_notfound + +le_send_att_find_primary_search_end_start_handle_found: +1d52 6fe109bb fetch 2 ,mem_le_cur_uuid +1d53 6849435a fetcht 2 ,mem_le_search_uuid +1d54 98467c00 isub temp ,null +1d55 24229d4b nbranch le_send_att_find_primary_search_loop1 ,zero +1d56 70443901 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +1d57 68490964 fetcht 2 ,mem_temp +1d58 604909b6 storet 2 ,mem_le_cur_handle_start +1d59 20201d4b branch le_send_att_find_primary_search_loop1 + +le_send_att_find_primary_search_end_ending_handle_found: +1d5a 6fe0c439 fetch 1 ,mem_le_search_res +1d5b c0001d4b beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +1d5c 70443902 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +1d5d 68490964 fetcht 2 ,mem_temp +1d5e 184085ff increase -1 ,temp +1d5f 604909b8 storet 2 ,mem_le_cur_handle_end + +le_send_att_find_primary_search_end: +1d60 da200005 arg 5 ,rega +1d61 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1d62 58000007 setarg attop_find_by_type_value_response +1d63 e7e08005 istore 1 ,contw +1d64 6fe109b6 fetch 2 ,mem_le_cur_handle_start +1d65 e7e10005 istore 2 ,contw +1d66 6fe109b8 fetch 2 ,mem_le_cur_handle_end +1d67 e7e10005 istore 2 ,contw +1d68 20600000 rtn + +le_parse_att_read_by_type_request: +1d69 20401f03 call le_get_search_handle_start_end_common +1d6a 20401f10 call le_get_search_att_type +1d6b 20201d6c branch le_send_att_read_by_type_response + +le_send_att_read_by_type_response: +1d6c 6849099e fetcht 2 ,mem_le_search_handle_start +1d6d 60490964 storet 2 ,mem_temp +1d6e 20401a4d call le_init_attlist_search +1d6f 20401a65 call le_att_get_handle_ptr2 +1d70 18c08dfe increase -2 ,contr +1d71 18c27e00 copy contr ,pdata +1d72 67e109b4 store 2 ,mem_le_cur_attlist_start_ptr +1d73 684909a3 fetcht 2 ,mem_le_search_att_type +1d74 58002a00 setarg uuid_chrctr_device_name +1d75 98467c00 isub temp ,null +1d76 20229dd3 branch le_send_att_read_by_type_res_device_name ,zero +1d77 58002803 setarg uuid_gatt_characteristic +1d78 98467c00 isub temp ,null +1d79 24229dbf nbranch le_send_att_read_by_type_res_not_characteristic ,zero +1d7a d9600002 arg 2 ,timeup + +le_send_att_read_by_type_response_loop: +1d7b 20401eda call le_att_check_handle_end +1d7c 24211d9c nbranch le_send_att_read_by_type_response_end ,positive +1d7d 68490964 fetcht 2 ,mem_temp +1d7e 20401a90 call le_att_get_handle_info_from_ptr +1d7f 243a1d9c nbranch le_send_att_read_by_type_response_end ,blank +1d80 20401ede call le_att_same_type +1d81 24229d9a nbranch le_send_att_read_by_type_response_next_handle ,zero +1d82 24341d9e nbranch le_send_att_read_by_type_res_found_next ,user +1d83 78547c00 disable user +1d84 da200014 arg 20 ,rega +1d85 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1d86 58000009 setarg attop_read_by_type_response +1d87 e7e08005 istore 1 ,contw +1d88 18a26000 copy contw ,alarm +1d89 18a08a01 increase 1 ,contw +1d8a 20401dac call le_send_att_read_by_type_write_properties +1d8b 20401ed6 call le_att_next_handle +1d8c 20401a90 call le_att_get_handle_info_from_ptr +1d8d 20401db3 call le_send_att_read_by_type_write_uuid +1d8e 6fe089ba fetch 1 ,mem_le_cur_uuid_length +1d8f 1fe0a205 add pdata ,5 ,rega +1d90 e2208030 istorer rega ,1 ,alarm +1d91 1a267c07 sub rega ,7 ,null +1d92 2442fe58 ncall enable_user2 ,zero +1d93 2042fe5a call disable_user2 ,zero +1d94 20401f08 call le_get_search_max_mtu_data +1d95 9a26fc00 idiv rega +1d96 20407def call wait_div_end +1d97 18079600 quotient timeup +1d98 196097ff increase -1 ,timeup +1d99 20229d9c branch le_send_att_read_by_type_response_end ,zero + +le_send_att_read_by_type_response_next_handle: +1d9a 20401ed6 call le_att_next_handle +1d9b 20201d7b branch le_send_att_read_by_type_response_loop + +le_send_att_read_by_type_response_end: +1d9c 20341ec8 branch le_send_att_error_response_notfound ,user +1d9d 20201ef7 branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_found_next: +1d9e 20401ee9 call le_store_att_record +1d9f 20401ed6 call le_att_next_handle +1da0 20401a90 call le_att_get_handle_info_from_ptr +1da1 20401e5d call le_send_att_read_by_type_res_check_pair_length_type +1da2 243a1d9c nbranch le_send_att_read_by_type_response_end ,blank +1da3 20407ce2 call get_contw +1da4 6fe10964 fetch 2 ,mem_temp +1da5 1fe0ffff increase -1 ,pdata +1da6 e7e10005 istore 2 ,contw +1da7 20401ef3 call le_write_att_record_common +1da8 20401db3 call le_send_att_read_by_type_write_uuid +1da9 196097ff increase -1 ,timeup +1daa 20229d9c branch le_send_att_read_by_type_response_end ,zero +1dab 20201d9a branch le_send_att_read_by_type_response_next_handle + +le_send_att_read_by_type_write_properties: +1dac 6fe10964 fetch 2 ,mem_temp +1dad e7e10005 istore 2 ,contw +1dae 6fe089b3 fetch 1 ,mem_le_curr_att_len +1daf 1fe27200 copy pdata ,loopcnt +1db0 20407ce5 call get_contr +1db1 20407d52 call memcpy_fast +1db2 20207ce8 branch store_contw + +le_send_att_read_by_type_write_uuid: +1db3 20407ce2 call get_contw +1db4 6fe10964 fetch 2 ,mem_temp +1db5 e7e10005 istore 2 ,contw +1db6 20407ce8 call store_contw +1db7 6fe089ba fetch 1 ,mem_le_cur_uuid_length +1db8 1fe27200 copy pdata ,loopcnt +1db9 20407ce2 call get_contw +1dba 20407ce5 call get_contr +1dbb 9f260c00 isub loopcnt ,contr +1dbc 18c08dff increase -1 ,contr +1dbd 20407d52 call memcpy_fast +1dbe 20207ce8 branch store_contw + +le_send_att_read_by_type_res_not_characteristic: +1dbf 20401a75 call le_att_get_short_uuid_ptr +1dc0 203a1ec8 branch le_send_att_error_response_notfound ,blank +1dc1 18c22600 copy contr ,regc +1dc2 18c08dfb increase -5 ,contr +1dc3 efe10006 ifetch 2 ,contr +1dc4 67e10964 store 2 ,mem_temp +1dc5 da200014 arg 20 ,rega +1dc6 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1dc7 58000009 setarg attop_read_by_type_response +1dc8 e7e08005 istore 1 ,contw +1dc9 efe08013 ifetch 1 ,regc +1dca 1fe27200 copy pdata ,loopcnt +1dcb 1fe0fe02 increase 2 ,pdata +1dcc e7e08005 istore 1 ,contw +1dcd 6fe10964 fetch 2 ,mem_temp +1dce e7e10005 istore 2 ,contw +1dcf 1a608c01 add regc ,1 ,contr +1dd0 20407d52 call memcpy_fast +1dd1 20407ce8 call store_contw +1dd2 20201ef7 branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_device_name: +1dd3 d8402a00 arg uuid_chrctr_device_name ,temp +1dd4 20401a75 call le_att_get_short_uuid_ptr +1dd5 207a0000 rtn blank +1dd6 18c08dfb increase -5 ,contr +1dd7 efe10006 ifetch 2 ,contr +1dd8 67e10964 store 2 ,mem_temp +1dd9 da200014 arg 20 ,rega +1dda 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1ddb 58000009 setarg attop_read_by_type_response +1ddc e7e08005 istore 1 ,contw +1ddd 6fe0c2f7 fetch 1 ,mem_le_name_len +1dde 1fe27200 copy pdata ,loopcnt +1ddf 1fe0fe02 increase 2 ,pdata +1de0 e7e08005 istore 1 ,contw +1de1 6fe10964 fetch 2 ,mem_temp +1de2 e7e10005 istore 2 ,contw +1de3 d8c042f8 arg mem_le_name ,contr +1de4 20407d52 call memcpy_fast +1de5 20407ce8 call store_contw +1de6 20201ef7 branch le_send_auto_len_by_mem + +le_parse_att_read_request: +1de7 20401e8d call le_check_encrypt_state +1de8 68494437 fetcht 2 ,mem_le_att_handle +1de9 6fe0c3c0 fetch 1 ,mem_le_configuration +1dea c2819e0c bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth + +le_send_att_read_response: +1deb 20401a65 call le_att_get_handle_ptr2 +1dec 24229ec8 nbranch le_send_att_error_response_notfound ,zero +1ded 20541e12 call le_send_att_read_response_check_handle ,user +1dee 20740000 rtn user +1def 20401a72 call le_att_get_handle_ptr_found +1df0 18c08dfe increase -2 ,contr +1df1 efe10006 ifetch 2 ,contr +1df2 d8402a00 arg uuid_chrctr_device_name ,temp +1df3 98467c00 isub temp ,null +1df4 20229e02 branch le_send_device_name ,zero +1df5 efe08006 ifetch 1 ,contr +1df6 1fe67c16 sub pdata ,22 ,null +1df7 20211df9 branch le_send_att_read_response_less ,positive +1df8 18007e16 force 22 ,pdata + +le_send_att_read_response_less: +1df9 1fe22600 copy pdata ,regc +1dfa 20407ceb call store_contr +1dfb 1a60a201 add regc ,1 ,rega +1dfc 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1dfd 5800000b setarg attop_read_response +1dfe e7e08005 istore 1 ,contw +1dff 1a627200 copy regc ,loopcnt +1e00 20407ce5 call get_contr +1e01 20207d5f branch memcpy + +le_send_device_name: +1e02 20407ceb call store_contr +1e03 6fe0c2f7 fetch 1 ,mem_le_name_len +1e04 1fe0a201 add pdata ,1 ,rega +1e05 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1e06 5800000b setarg attop_read_response +1e07 e7e08005 istore 1 ,contw +1e08 6fe0c2f7 fetch 1 ,mem_le_name_len +1e09 1fe27200 copy pdata ,loopcnt +1e0a d8c042f8 arg mem_le_name ,contr +1e0b 20207d5f branch memcpy + +le_send_att_read_response_check_auth: +1e0c 6fe143d1 fetch 2 ,mem_le_pairing_handle +1e0d 98467c00 isub temp ,null +1e0e 24229deb nbranch le_send_att_read_response ,zero +1e0f 24341deb nbranch le_send_att_read_response ,user + +le_send_att_read_response_error_insufficient_auth: +1e10 7002d805 jam att_err_insufficient_authentication ,mem_le_err_code +1e11 20201ec9 branch le_send_att_error_response + +le_send_att_read_response_check_handle: +1e12 18c08dfe increase -2 ,contr +1e13 efe10006 ifetch 2 ,contr +1e14 c2871e10 bbit1 bit_of_att_handle_read_authenticated ,le_send_att_read_response_error_insufficient_auth +1e15 20207e56 branch disable_user + +le_parse_att_read_blob_request: +1e16 efe10006 ifetch 2 ,contr +1e17 67e109a2 store 2 ,mem_le_att_offset + +le_send_att_read_blob_response: +1e18 da200014 arg 20 ,rega +1e19 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1e1a 5800000d setarg attop_read_blob_response +1e1b e7e08005 istore 1 ,contw +1e1c 6fe109a2 fetch 2 ,mem_le_att_offset +1e1d 98002200 iforce rega +1e1e 68494437 fetcht 2 ,mem_le_att_handle +1e1f 20401a62 call le_att_get_handle_ptr +1e20 203a1ec8 branch le_send_att_error_response_notfound ,blank +1e21 efe08006 ifetch 1 ,contr +1e22 9a267200 isub rega ,loopcnt +1e23 24211ec8 nbranch le_send_att_error_response_notfound ,positive +1e24 1f267c16 sub loopcnt ,22 ,null +1e25 20211e27 branch le_send_att_read_blob_response_less ,positive +1e26 18007216 force 22 ,loopcnt + +le_send_att_read_blob_response_less: +1e27 1a227e00 deposit rega +1e28 98c08c00 iadd contr ,contr +1e29 20407d52 call memcpy_fast +1e2a 20407ce8 call store_contw +1e2b 20201ef7 branch le_send_auto_len_by_mem + +le_parse_att_read_by_group_type_request: +1e2c 20401f03 call le_get_search_handle_start_end_common +1e2d 20401f10 call le_get_search_att_type +1e2e 20201e2f branch le_send_att_read_by_group_type_response + +le_send_att_read_by_group_type_response: +1e2f d9600002 arg 2 ,timeup +1e30 6849099e fetcht 2 ,mem_le_search_handle_start +1e31 60490964 storet 2 ,mem_temp +1e32 20401a65 call le_att_get_handle_ptr2 +1e33 18c08dfe increase -2 ,contr +1e34 18c27e00 copy contr ,pdata +1e35 67e109b4 store 2 ,mem_le_cur_attlist_start_ptr + +le_send_att_read_by_group_type_response_loop: +1e36 20401eda call le_att_check_handle_end +1e37 24211e65 nbranch le_send_att_read_by_group_type_end0 ,positive +1e38 68490964 fetcht 2 ,mem_temp +1e39 20401a90 call le_att_get_handle_info_from_ptr +1e3a 243a1e68 nbranch le_send_att_read_by_group_type_end1 ,blank +1e3b 20401ede call le_att_same_type +1e3c 24229e5b nbranch le_send_att_read_by_group_type_next_handle ,zero +1e3d 19627e00 copy timeup ,pdata +1e3e c0001e68 beq 0 ,le_send_att_read_by_group_type_end1 +1e3f 24341e51 nbranch le_send_att_read_by_group_type_store_write_record ,user +1e40 78547c00 disable user +1e41 da200014 arg 20 ,rega +1e42 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1e43 58000011 setarg attop_read_by_group_type_response +1e44 e7e08005 istore 1 ,contw +1e45 6fe089b3 fetch 1 ,mem_le_curr_att_len +1e46 1fe0a204 add pdata ,4 ,rega +1e47 e2208005 istorer rega ,1 ,contw +1e48 20407ce8 call store_contw +1e49 1a267c06 sub rega ,6 ,null +1e4a 2442fe58 ncall enable_user2 ,zero +1e4b 2042fe5a call disable_user2 ,zero +1e4c 20401f08 call le_get_search_max_mtu_data +1e4d 9a26fc00 idiv rega +1e4e 20407def call wait_div_end +1e4f 18079600 quotient timeup +1e50 20201e57 branch le_send_att_read_by_group_type_store_record + +le_send_att_read_by_group_type_store_write_record: +1e51 20401e5f call le_send_att_read_by_group_type_check_pair_length_type +1e52 243a1e68 nbranch le_send_att_read_by_group_type_end1 ,blank +1e53 6fe10964 fetch 2 ,mem_temp +1e54 1fe0ffff increase -1 ,pdata +1e55 67e109b8 store 2 ,mem_le_cur_handle_end +1e56 20401eee call le_write_att_record + +le_send_att_read_by_group_type_store_record: +1e57 6fe10964 fetch 2 ,mem_temp +1e58 67e109b6 store 2 ,mem_le_cur_handle_start +1e59 20401ee9 call le_store_att_record +1e5a 196097ff increase -1 ,timeup + +le_send_att_read_by_group_type_next_handle: +1e5b 20401ed6 call le_att_next_handle +1e5c 20201e36 branch le_send_att_read_by_group_type_response_loop + +le_send_att_read_by_type_res_check_pair_length_type: +1e5d 6fe089ba fetch 1 ,mem_le_cur_uuid_length +1e5e 20201e60 branch le_send_att_read_by_group_type_check_pair_length_type + 1 + +le_send_att_read_by_group_type_check_pair_length_type: +1e5f 6fe089b3 fetch 1 ,mem_le_curr_att_len +1e60 20361e63 branch le_send_att_read_by_group_type_check_pair_length_type_16byte ,user2 +1e61 1fe0fffe increase -2 ,pdata +1e62 20600000 rtn + +le_send_att_read_by_group_type_check_pair_length_type_16byte: +1e63 1fe0fff0 increase -16 ,pdata +1e64 20600000 rtn + +le_send_att_read_by_group_type_end0: +1e65 6fe10964 fetch 2 ,mem_temp +1e66 67e109b8 store 2 ,mem_le_cur_handle_end +1e67 20201e6c branch le_send_att_read_by_group_type_end_common + +le_send_att_read_by_group_type_end1: +1e68 6fe10964 fetch 2 ,mem_temp +1e69 1fe0ffff increase -1 ,pdata +1e6a 67e109b8 store 2 ,mem_le_cur_handle_end +1e6b 20201e6c branch le_send_att_read_by_group_type_end_common + +le_send_att_read_by_group_type_end_common: +1e6c 20341ec8 branch le_send_att_error_response_notfound ,user +1e6d 20401eee call le_write_att_record +1e6e 20201ef7 branch le_send_auto_len_by_mem + +le_parse_att_write_request: +1e6f 18c22200 copy contr ,rega +1e70 6fe143d4 fetch 2 ,mem_le_l2cap_size +1e71 1fe0a5fd add pdata ,-3 ,regb +1e72 20401a25 call le_writeatt_cb + +le_send_att_write_response_check_auth: +1e73 20401e8d call le_check_encrypt_state +1e74 68494437 fetcht 2 ,mem_le_att_handle +1e75 20401a65 call le_att_get_handle_ptr2 +1e76 24229e8b nbranch le_send_att_write_response_error_invalid_handle ,zero +1e77 20541e87 call le_send_att_write_response_check_handle ,user +1e78 20740000 rtn user +1e79 6fe0c3c0 fetch 1 ,mem_le_configuration +1e7a c3021e82 bbit0 bit_ble_write_auth ,le_send_att_write_response +1e7b 68494437 fetcht 2 ,mem_le_att_handle +1e7c 6fe143d1 fetch 2 ,mem_le_pairing_handle +1e7d 98467c00 isub temp ,null +1e7e 24229e82 nbranch le_send_att_write_response ,zero +1e7f 20401e8d call le_check_encrypt_state +1e80 24341e82 nbranch le_send_att_write_response ,user +1e81 20201e10 branch le_send_att_read_response_error_insufficient_auth + +le_send_att_write_response: +1e82 18002201 force 1 ,rega +1e83 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1e84 58000013 setarg attop_write_response +1e85 e7e08005 istore 1 ,contw +1e86 20600000 rtn + +le_send_att_write_response_check_handle: +1e87 18c08dfe increase -2 ,contr +1e88 efe10006 ifetch 2 ,contr +1e89 c2879e10 bbit1 bit_of_att_handle_write_authenticated ,le_send_att_read_response_error_insufficient_auth +1e8a 20207e56 branch disable_user + +le_send_att_write_response_error_invalid_handle: +1e8b 7002d801 jam att_err_invalid_handle ,mem_le_err_code +1e8c 20201ec9 branch le_send_att_error_response + +le_check_encrypt_state: +1e8d 20407e56 call disable_user +1e8e 6fe0c39d fetch 1 ,mem_le_pairing_mode +1e8f c1000000 rtneq le_pairing_mode_none +1e90 6fe0c040 fetch 1 ,mem_context +1e91 c3820000 rtnbit1 lestate_encryption +1e92 20207e54 branch enable_user + +le_parse_att_prepare_write_request: +1e93 18c0a202 add contr ,2 ,rega +1e94 6fe143d4 fetch 2 ,mem_le_l2cap_size +1e95 1fe0a5fb add pdata ,-5 ,regb +1e96 20401a25 call le_writeatt_cb +1e97 20201e98 branch le_send_att_prepare_write_response + +le_send_att_prepare_write_response: +1e98 6fe143d4 fetch 2 ,mem_le_l2cap_size +1e99 1fe22200 copy pdata ,rega +1e9a 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1e9b 58000017 setarg attop_prepare_write_response +1e9c e7e08005 istore 1 ,contw +1e9d 6fe14437 fetch 2 ,mem_le_att_handle +1e9e e7e10005 istore 2 ,contw +1e9f 6fe143d4 fetch 2 ,mem_le_l2cap_size +1ea0 1fe0f3fb add pdata ,-5 ,loopcnt +1ea1 6fe143d8 fetch 2 ,mem_le_payload_ptr +1ea2 1fe08c07 add pdata ,7 ,contr +1ea3 efe10006 ifetch 2 ,contr +1ea4 e7e10005 istore 2 ,contw +1ea5 20207d52 branch memcpy_fast + +le_parse_att_execute_write_request: + +le_send_att_execute_write_response: +1ea6 18002201 force 1 ,rega +1ea7 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1ea8 58000019 setarg attop_execute_write_response +1ea9 e7e08005 istore 1 ,contw +1eaa 20600000 rtn + +le_parse_handle_value_confirmation: +1eab 6fe0c435 fetch 1 ,mem_le_l2cap_att_states +1eac 793ffe00 set0 ble_l2cap_recv_confirmation_packet ,pdata +1ead 67e0c435 store 1 ,mem_le_l2cap_att_states +1eae 20600000 rtn + +le_parse_att_write_command: +1eaf 18c22200 copy contr ,rega +1eb0 6fe143d4 fetch 2 ,mem_le_l2cap_size +1eb1 1fe0a5fd add pdata ,-3 ,regb +1eb2 20201a25 branch le_writeatt_cb + +le_att_malloc_tx_notify: +1eb3 18422600 copy temp ,regc +1eb4 1a20a203 increase 3 ,rega +1eb5 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1eb6 1a20a3fd increase -3 ,rega +1eb7 5800001b setarg attop_handle_value_notification +1eb8 e7e08005 istore 1 ,contw +1eb9 1a620400 copy regc ,temp +1eba e0410005 istoret 2 ,contw +1ebb 20600000 rtn + +le_att_malloc_tx_indication: +1ebc 6fe0c435 fetch 1 ,mem_le_l2cap_att_states +1ebd 79207e00 set1 ble_l2cap_send_indication_packet ,pdata +1ebe 67e0c435 store 1 ,mem_le_l2cap_att_states +1ebf 18422600 copy temp ,regc +1ec0 1a20a203 increase 3 ,rega +1ec1 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1ec2 1a20a3fd increase -3 ,rega +1ec3 5800001d setarg attop_handle_value_indication +1ec4 e7e08005 istore 1 ,contw +1ec5 1a620400 copy regc ,temp +1ec6 e0410005 istoret 2 ,contw +1ec7 20600000 rtn + +le_send_att_error_response_notfound: +1ec8 7002d80a jam att_err_attribute_not_found ,mem_le_err_code + +le_send_att_error_response: +1ec9 18002205 force 5 ,rega +1eca 20401ed4 call le_fifo_malloc_tx_l2cap_gatt +1ecb 58000001 setarg attop_error_response +1ecc e7e08005 istore 1 ,contw +1ecd 6fe0c436 fetch 1 ,mem_le_att_opcode +1ece e7e08005 istore 1 ,contw +1ecf 6fe14437 fetch 2 ,mem_le_att_handle +1ed0 e7e10005 istore 2 ,contw +1ed1 6fe082d8 fetch 1 ,mem_le_err_code +1ed2 e7e08005 istore 1 ,contw +1ed3 20600000 rtn + +le_fifo_malloc_tx_l2cap_gatt: +1ed4 18002404 force le_l2cap_cid_att ,regb +1ed5 20201b4d branch le_fifo_malloc_tx_l2cap + +le_att_next_handle: +1ed6 68490964 fetcht 2 ,mem_temp +1ed7 18408401 increase 1 ,temp +1ed8 60490964 storet 2 ,mem_temp +1ed9 20600000 rtn + +le_att_check_handle_end: +1eda 68490964 fetcht 2 ,mem_temp +1edb 6fe109a0 fetch 2 ,mem_le_search_handle_end +1edc 98467c00 isub temp ,null +1edd 20600000 rtn + +le_att_same_type: +1ede 684889a2 fetcht 1 ,mem_le_search_att_type_length +1edf da2009a3 arg mem_le_search_att_type ,rega + +le_att_check_same_common: +1ee0 6fe089ba fetch 1 ,mem_le_cur_uuid_length +1ee1 1fe27200 copy pdata ,loopcnt +1ee2 98467c00 isub temp ,null +1ee3 24628000 nrtn zero +1ee4 da4009bb arg mem_le_cur_uuid ,regb +1ee5 20207df1 branch string_compare + +le_att_same_uuid: +1ee6 6848c359 fetcht 1 ,mem_le_search_uuid_length +1ee7 da20435a arg mem_le_search_uuid ,rega +1ee8 20201ee0 branch le_att_check_same_common + +le_store_att_record: +1ee9 6fe089b3 fetch 1 ,mem_le_curr_att_len +1eea 67e08a01 store 1 ,mem_tmp_buffer +1eeb 1fe27200 copy pdata ,loopcnt +1eec 20407ce5 call get_contr +1eed 20207d52 branch memcpy_fast + +le_write_att_record: +1eee 20407ce2 call get_contw +1eef 6fe109b6 fetch 2 ,mem_le_cur_handle_start +1ef0 e7e10005 istore 2 ,contw +1ef1 6fe109b8 fetch 2 ,mem_le_cur_handle_end +1ef2 e7e10005 istore 2 ,contw + +le_write_att_record_common: +1ef3 6fe08a01 fetch 1 ,mem_tmp_buffer +1ef4 1fe27200 copy pdata ,loopcnt +1ef5 20407d52 call memcpy_fast +1ef6 20207ce8 branch store_contw + +le_send_auto_len_by_mem: +1ef7 20407ce2 call get_contw +1ef8 20401b70 call le_fifo_get_last_att_ptr +1ef9 18a27e00 copy contw ,pdata +1efa 98c62200 isub contr ,rega +1efb 20401b73 call le_fifo_get_last_l2cap_ptr +1efc 1a227e00 copy rega ,pdata +1efd e7e10006 istore 2 ,contr +1efe 1a20a204 increase 4 ,rega +1eff 20401b65 call le_fifo_get_last_tx_ptr +1f00 1a227e00 copy rega ,pdata +1f01 e7e08006 istore 1 ,contr +1f02 20600000 rtn + +le_get_search_handle_start_end_common: +1f03 1fecfe00 rshift8 pdata ,pdata +1f04 67e1099e store 2 ,mem_le_search_handle_start +1f05 efe10006 ifetch 2 ,contr +1f06 67e109a0 store 2 ,mem_le_search_handle_end +1f07 20600000 rtn + +le_get_search_max_mtu_data: +1f08 6fe14382 fetch 2 ,mem_le_remote_mtu +1f09 1fe0fffe increase -2 ,pdata +1f0a 68494380 fetcht 2 ,mem_le_local_mtu +1f0b 184085fe increase -2 ,temp +1f0c 20407e4a call not_greater_than +1f0d d84000f0 arg 240 ,temp +1f0e 20407e4a call not_greater_than +1f0f 20600000 rtn + +le_get_search_att_type: +1f10 20407ceb call store_contr +1f11 d8a009a2 arg mem_le_search_att_type_length ,contw + +le_get_search_common: +1f12 6fe143d4 fetch 2 ,mem_le_l2cap_size +1f13 1fe0fffb increase -5 ,pdata + +le_get_search_common2: +1f14 e7e08005 istore 1 ,contw +1f15 1fe27200 copy pdata ,loopcnt +1f16 20407ce5 call get_contr +1f17 20207d52 branch memcpy_fast + +le_parse_writing_attribute_start: +1f18 6fe1016f fetch 2 ,mem_le_rxbuf_data_att_cid +1f19 c1820000 rtnne le_l2cap_cid_att +1f1a 6fe0c435 fetch 1 ,mem_le_l2cap_att_states +1f1b 79207e01 set1 ble_l2cap_deal_with_continue_packet ,pdata +1f1c 67e0c435 store 1 ,mem_le_l2cap_att_states +1f1d 6fe18171 fetch 3 ,mem_le_rxbuf_data_att_opcode +1f1e 67e1c436 store 3 ,mem_le_att_opcode +1f1f 7920000f set1 mark_old_packet ,mark +1f20 c0091f33 beq attop_write_request ,le_parse_attribute_write_request +1f21 c0291f38 beq attop_write_command ,le_parse_attribute_write_command +1f22 c00c1ea6 beq attop_execute_write_request ,le_parse_att_execute_write_request +1f23 c0011ce8 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +1f24 c00f1eab beq attop_handle_value_confirmation ,le_parse_handle_value_confirmation +1f25 793f800f set0 mark_old_packet ,mark + +le_clear_l2cap_att_states_deal_with_contiune_packet: +1f26 6fe0c435 fetch 1 ,mem_le_l2cap_att_states +1f27 793ffe01 set0 ble_l2cap_deal_with_continue_packet ,pdata +1f28 67e0c435 store 1 ,mem_le_l2cap_att_states +1f29 20600000 rtn + +le_parse_writing_attribute_continue: +1f2a 6fe0c435 fetch 1 ,mem_le_l2cap_att_states +1f2b c4008000 rtnbit0 ble_l2cap_deal_with_continue_packet +1f2c 7920000f set1 mark_old_packet ,mark +1f2d 20401f42 call le_parse_l2cap_continue_common +1f2e 20401f48 call le_parse_attribute_check_complete_packet +1f2f 20541f26 call le_clear_l2cap_att_states_deal_with_contiune_packet ,user +1f30 6fe0c436 fetch 1 ,mem_le_att_opcode +1f31 c0091e73 beq attop_write_request ,le_send_att_write_response_check_auth +1f32 20600000 rtn + +le_parse_attribute_write_request: +1f33 20401f38 call le_parse_attribute_write_command +1f34 20201f35 branch le_send_attribute_write_response_check_auth + +le_send_attribute_write_response_check_auth: +1f35 20401f48 call le_parse_attribute_check_complete_packet +1f36 24740000 nrtn user +1f37 20201e73 branch le_send_att_write_response_check_auth + +le_parse_attribute_write_command: +1f38 20401f3b call le_parse_attribute_check_complete_packet_init +1f39 da200174 arg mem_le_rxbuf_data_att_write_payload ,rega +1f3a 20201a25 branch le_writeatt_cb + +le_parse_attribute_check_complete_packet_init: +1f3b 6fe0816c fetch 1 ,mem_le_rxbuf_data_att_write_length +1f3c 1fe0a5f9 add pdata ,-7 ,regb +1f3d 1fe0fffc increase -4 ,pdata +1f3e 67e143d6 store 2 ,mem_le_packet_len_recved +1f3f 6849016d fetcht 2 ,mem_le_rxbuf_data_att_write_l2cap_length +1f40 604943d4 storet 2 ,mem_le_l2cap_size +1f41 20600000 rtn + +le_parse_l2cap_continue_common: +1f42 6a40816c fetchr regb ,1 ,mem_le_rxbuf_data_continue_length +1f43 6fe143d6 fetch 2 ,mem_le_packet_len_recved +1f44 9a408400 iadd regb ,temp +1f45 604943d6 storet 2 ,mem_le_packet_len_recved +1f46 da20016d arg mem_le_rxbuf_data_continue_payload ,rega +1f47 20201a25 branch le_writeatt_cb + +le_parse_attribute_check_complete_packet: +1f48 20407e56 call disable_user +1f49 6fe143d6 fetch 2 ,mem_le_packet_len_recved +1f4a 684943d4 fetcht 2 ,mem_le_l2cap_size +1f4b 98467c00 isub temp ,null +1f4c 24628000 nrtn zero +1f4d 20207e54 branch enable_user + +le_parse_signaling: +1f4e efe08006 ifetch 1 ,contr +1f4f e8408006 ifetcht 1 ,contr +1f50 e8410006 ifetcht 2 ,contr +1f51 c0099f53 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +1f52 20600000 rtn + +le_l2cap_parse_conn_parameter_update_rsp: +1f53 efe10006 ifetch 2 ,contr +1f54 67e143db store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +1f55 70095b40 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +1f56 20207871 branch ui_ipc_send_event + +le_l2cap_tx_update_req: +1f57 da20000c arg 0x0c ,rega +1f58 da600012 arg l2cap_connection_parameter_update_request ,regc +1f59 20401f5f call le_fifo_malloc_tx_l2cap_signaling +1f5a 58000008 setarg 0x08 +1f5b e7e10005 istore 2 ,contw +1f5c 6fe44372 fetch 8 ,mem_le_interval_min +1f5d e7e40005 istore 8 ,contw +1f5e 20600000 rtn + +le_fifo_malloc_tx_l2cap_signaling: +1f5f 20401f67 call le_l2cap_update_signaling_identifier +1f60 da400005 arg le_l2cap_cid_signal ,regb +1f61 20401b4d call le_fifo_malloc_tx_l2cap +1f62 1a627e00 copy regc ,pdata +1f63 e7e08005 istore 1 ,contw +1f64 6fe0c3da fetch 1 ,mem_le_signaling_identifier +1f65 e7e08005 istore 1 ,contw +1f66 20600000 rtn + +le_l2cap_update_signaling_identifier: +1f67 6fe0c3da fetch 1 ,mem_le_signaling_identifier +1f68 1fe0fe01 pincrease 1 +1f69 67e0c3da store 1 ,mem_le_signaling_identifier +1f6a c1800000 rtnne 0 + +le_l2cap_reset_signaling_identifier: +1f6b 7043da01 jam 1 ,mem_le_signaling_identifier +1f6c 20600000 rtn + +le_pairing_mode_init: +1f6d 6fe0c39d fetch 1 ,mem_le_pairing_mode +1f6e c0001f7c beq le_pairing_mode_none ,le_set_no_pairing +1f6f c0009f7f beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +1f70 c0011f81 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +1f71 c0409f75 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +1f72 c0411f77 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +1f73 c0419f7a beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +1f74 20600000 rtn + +le_set_pairing_mode_secure_justwork: +1f75 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +1f76 20201f7d branch le_set_noinputnooutput + +le_set_pairing_mode_secure_numeric: +1f77 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +1f78 70435101 jam flag_iocap_displayyesno ,mem_le_pres_iocap +1f79 20600000 rtn + +le_set_pairing_mode_secure_passkey: +1f7a 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +1f7b 20201f82 branch le_set_displayonly + +le_set_no_pairing: +1f7c 70435300 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth + +le_set_noinputnooutput: +1f7d 70435103 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +1f7e 20600000 rtn + +le_set_pairing_mode_lagacy_just_work: +1f7f 70435305 jam flag_le_bonding_mitm ,mem_le_pres_auth +1f80 20201f7d branch le_set_noinputnooutput + +le_set_pairing_mode_lagacy_passkey: +1f81 70435305 jam flag_le_bonding_mitm ,mem_le_pres_auth + +le_set_displayonly: +1f82 70435100 jam flag_iocap_displayonly ,mem_le_pres_iocap +1f83 20600000 rtn + +le_secure_connection_enable: +1f84 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +1f85 79207e00 set1 secure_connections_le_bit ,pdata +1f86 67e0c6b8 store 1 ,mem_secure_connections_enable +1f87 20600000 rtn + +le_secure_connection_disable: +1f88 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +1f89 793ffe00 set0 secure_connections_le_bit ,pdata +1f8a 67e0c6b8 store 1 ,mem_secure_connections_enable +1f8b 20600000 rtn + +le_parse_smp: +1f8c efe08006 ifetch 1 ,contr +1f8d c0009fa0 beq smp_pairing_request ,le_parse_smp_pairing_request +1f8e c0019fc7 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +1f8f c0021fe8 beq smp_pairing_random ,le_parse_smp_pairing_random +1f90 c0029ff5 beq smp_pairing_failed ,le_parse_smp_pairing_failed +1f91 c003a05d beq smp_master_identification ,le_parse_smp_master_identification +1f92 c0042049 beq smp_identity_information ,le_parse_smp_identity_information +1f93 c004a059 beq smp_identity_address_information ,le_parse_smp_identity_address_information +1f94 c005205d beq smp_signing_information ,le_parse_smp_signing_information +1f95 c005a05d beq smp_security_request ,le_parse_smp_security_request +1f96 c006205e beq smp_pairing_public_key ,le_parse_smp_public_key +1f97 c006a063 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +1f98 20600000 rtn + +le_send_smp_security_request: +1f99 18002202 force 2 ,rega +1f9a 20402109 call le_fifo_malloc_tx_l2cap_smp +1f9b 5800000b setarg smp_security_request +1f9c e7e08005 istore 1 ,contw +1f9d 6fe0c353 fetch 1 ,mem_le_pres_auth +1f9e e7e08005 istore 1 ,contw +1f9f 20600000 rtn + +le_parse_smp_pairing_request: +1fa0 67e0c349 store 1 ,mem_le_preq +1fa1 efe30006 ifetch 6 ,contr +1fa2 e7e30005 istore 6 ,contw +1fa3 6fe0c39d fetch 1 ,mem_le_pairing_mode +1fa4 c0001ffa beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +1fa5 20401fc2 call le_send_smp_pairing_response +1fa6 6fe0c6b6 fetch 1 ,mem_sc_only_mode +1fa7 203a1fac branch le_parse_smp_pairing_request2 ,blank +1fa8 6fe0c34c fetch 1 ,mem_le_preq_auth +1fa9 c301b20f bbit0 le_auth_secure_connection_pairing_bit ,app_ble_disconnect +1faa 6fe0c39d fetch 1 ,mem_le_pairing_mode +1fab c303b20f bbit0 le_pairing_mode_secure_connect_bit ,app_ble_disconnect + +le_parse_smp_pairing_request2: +1fac 70439b03 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +1fad 6fe0c34a fetch 1 ,mem_le_preq_iocap +1fae c0001fb4 beq flag_iocap_displayonly ,le_set_tk_0 +1faf c0009fb4 beq flag_iocap_displayyesno ,le_set_tk_0 +1fb0 c0019fb4 beq flag_iocap_noinputnooutput ,le_set_tk_0 +1fb1 6fe0c39d fetch 1 ,mem_le_pairing_mode +1fb2 c0011fb7 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +1fb3 c1418000 rtneq le_pairing_mode_secure_connect_passkey + +le_set_tk_0: +1fb4 dfe00000 arg 0 ,pdata +1fb5 67e2439e store 4 ,mem_le_tk +1fb6 20600000 rtn + +le_parse_smp_pairing_req_passkey: +1fb7 6fe0c3c0 fetch 1 ,mem_le_configuration +1fb8 c2801fc0 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey + +le_genernate_tk: +1fb9 da20439e arg mem_le_tk ,rega +1fba 1a220a00 copy rega ,contw +1fbb df200003 arg 3 ,loopcnt +1fbc 20405a32 call generate_random_loop +1fbd 6fe143a0 fetch 2 ,mem_le_tk + 2 +1fbe 1fe17e07 and_into 0x7 ,pdata +1fbf 67e143a0 store 2 ,mem_le_tk + 2 + +le_parse_smp_pairing_req_fixed_passkey: +1fc0 70095b34 jam bt_evt_le_tk_generate ,mem_fifo_temp +1fc1 20207871 branch ui_ipc_send_event + +le_send_smp_pairing_response: +1fc2 18002207 force 7 ,rega +1fc3 20402109 call le_fifo_malloc_tx_l2cap_smp +1fc4 6fe3c350 fetch 7 ,mem_le_pres +1fc5 e7e38005 istore 7 ,contw +1fc6 20600000 rtn + +le_parse_smp_pairing_confirm: +1fc7 70439b05 jam flag_le_pairing_receive_pairing_confirm ,mem_le_pairing_state +1fc8 d8a04327 arg mem_le_rconfirm ,contw +1fc9 20407d0c call memcpy16 +1fca 6fe0c39d fetch 1 ,mem_le_pairing_mode +1fcb c0419fcf beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +1fcc c0021fd2 beq le_pairing_mode_lagacy_passkey_res_input ,le_parse_smp_pairing_confirm_passkey_res_input +1fcd c0421fd4 beq le_pairing_mode_secure_connect_passkey_res_input ,le_parse_smp_pairing_confirm_sc_passkey_res_input +1fce 20201fd7 branch le_send_smp_pairing_confirm + +le_parse_smp_pairing_confirm_secure_passkey: +1fcf 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +1fd0 70439908 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +1fd1 20600000 rtn + +le_parse_smp_pairing_confirm_passkey_res_input: +1fd2 70095b43 jam bt_evt_le_get_passkey ,mem_fifo_temp +1fd3 20207871 branch ui_ipc_send_event + +le_parse_smp_pairing_confirm_sc_passkey_res_input: +1fd4 6fe2439e fetch 4 ,mem_le_tk +1fd5 203a1fd2 branch le_parse_smp_pairing_confirm_passkey_res_input ,blank +1fd6 20201fcf branch le_parse_smp_pairing_confirm_secure_passkey + +le_send_smp_pairing_confirm: +1fd7 70439b06 jam flag_le_pairing_send_pairing_confirm ,mem_le_pairing_state +1fd8 6fe0c39d fetch 1 ,mem_le_pairing_mode +1fd9 c2839fe0 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +1fda 20406c52 call generate_confirm +1fdb 18002211 force 17 ,rega +1fdc 20402109 call le_fifo_malloc_tx_l2cap_smp +1fdd 58000003 setarg smp_pairing_confirm +1fde e7e08005 istore 1 ,contw +1fdf 20206dd1 branch store_aes_result + +le_send_smp_pairing_confirm_sc: +1fe0 d8a04337 arg mem_le_srand ,contw +1fe1 20405a31 call generate_random +1fe2 20406a7b call function_f4_cb +1fe3 18002211 force 17 ,rega +1fe4 20402109 call le_fifo_malloc_tx_l2cap_smp +1fe5 58000003 setarg smp_pairing_confirm +1fe6 e7e08005 istore 1 ,contw +1fe7 20206ab7 branch load_inverse_result + +le_parse_smp_pairing_random: +1fe8 18c22200 copy contr ,rega +1fe9 6fe0c39d fetch 1 ,mem_le_pairing_mode +1fea c2839ffc bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +1feb 1a220c00 copy rega ,contr +1fec 20406c4a call authenticate_rconfirm +1fed 2022a011 branch le_parse_smp_pairing_random_success ,zero + +le_send_pairing_confirm_value_failed: +1fee 7002d904 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason + +le_send_pairing_failed: +1fef 18002202 force 2 ,rega +1ff0 20402109 call le_fifo_malloc_tx_l2cap_smp +1ff1 58000005 setarg smp_pairing_failed +1ff2 e7e08005 istore 1 ,contw +1ff3 6fe082d9 fetch 1 ,mem_le_ll_pairing_fail_reason +1ff4 e7e08005 istore 1 ,contw + +le_parse_smp_pairing_failed: +1ff5 18000e0a force smp_pairing_timer ,queue +1ff6 20407d65 call timer_stop +1ff7 70439b00 jam flag_le_pairing_null ,mem_le_pairing_state +1ff8 70095b30 jam bt_evt_le_pairing_fail ,mem_fifo_temp +1ff9 20207871 branch ui_ipc_send_event + +le_smp_pairing_fail_reason_not_support_pairing: +1ffa 7002d905 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +1ffb 20201fef branch le_send_pairing_failed + +le_parse_smp_pairing_random_sc: +1ffc d8a00277 arg mem_le_mrand ,contw +1ffd 1a220c00 copy rega ,contr +1ffe 20407d0c call memcpy16 +1fff 6fe0c39d fetch 1 ,mem_le_pairing_mode +2000 c041a008 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +2001 c0422008 beq le_pairing_mode_secure_connect_passkey_res_input ,le_parse_smp_pairing_random_sc_passkey +2002 20406a05 call function_g2 +2003 20402016 call le_send_smp_pairing_random +2004 6fe0c39d fetch 1 ,mem_le_pairing_mode +2005 c1c10000 rtnne le_pairing_mode_secure_connect_numeric +2006 70095b3b jam bt_evt_le_gkey_generate ,mem_fifo_temp +2007 20207871 branch ui_ipc_send_event + +le_parse_smp_pairing_random_sc_passkey: +2008 20406a70 call function_f4_ca +2009 d8a009be arg mem_aes_cmac_temp ,contw +200a 20406ab7 call load_inverse_result +200b da2009be arg mem_aes_cmac_temp ,rega +200c da404327 arg mem_le_rconfirm ,regb +200d df200010 arg 16 ,loopcnt +200e 20407df1 call string_compare +200f 24229fee nbranch le_send_pairing_confirm_value_failed ,zero +2010 20202016 branch le_send_smp_pairing_random + +le_parse_smp_pairing_random_success: +2011 20406c46 call generate_stk +2012 70095b31 jam bt_evt_le_pairing_success ,mem_fifo_temp +2013 20407871 call ui_ipc_send_event +2014 70432601 jam 1 ,mem_ltk_exists +2015 70439b09 jam flag_le_pairing_after_auth ,mem_le_pairing_state + +le_send_smp_pairing_random: +2016 18002211 force 17 ,rega +2017 20402109 call le_fifo_malloc_tx_l2cap_smp +2018 58000004 setarg smp_pairing_random +2019 e7e08005 istore 1 ,contw +201a d8c04337 arg mem_le_srand ,contr +201b 20207d0c branch memcpy16 + +le_send_smp_encryption_information: +201c 18002211 force 17 ,rega +201d 20402109 call le_fifo_malloc_tx_l2cap_smp +201e 58000006 setarg smp_encryption_information +201f e7e08005 istore 1 ,contw +2020 6fe0c3c0 fetch 1 ,mem_le_configuration +2021 c280a024 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +2022 d8c04316 arg mem_le_ltk ,contr +2023 20207d0c branch memcpy16 + +le_send_fixed_ltk: +2024 d8c043c1 arg mem_le_fixed_ltk ,contr +2025 20207d0c branch memcpy16 + +le_send_smp_master_identification: +2026 d8a043a2 arg mem_le_ediv ,contw +2027 1800720a force 10 ,loopcnt +2028 20405a32 call generate_random_loop +2029 1800220b force 11 ,rega +202a 20402109 call le_fifo_malloc_tx_l2cap_smp +202b 58000007 setarg smp_master_identification +202c e7e08005 istore 1 ,contw +202d 6fe143a2 fetch 2 ,mem_le_ediv +202e e7e10005 istore 2 ,contw +202f 6fe443a4 fetch 8 ,mem_le_rand +2030 e7e40005 istore 8 ,contw +2031 20600000 rtn + +le_send_smp_identity_information: +2032 18002211 force 17 ,rega +2033 20402109 call le_fifo_malloc_tx_l2cap_smp +2034 58000008 setarg smp_identity_information +2035 e7e08005 istore 1 ,contw +2036 58000000 setarg 0 +2037 e7e40005 istore 8 ,contw +2038 e7e40005 istore 8 ,contw +2039 20600000 rtn + +le_send_smp_identity_address_information: +203a 18002208 force 8 ,rega +203b 20402109 call le_fifo_malloc_tx_l2cap_smp +203c 58000009 setarg smp_identity_address_information +203d e7e08005 istore 1 ,contw +203e 6fe0c371 fetch 1 ,mem_le_conn_own_addr_type +203f e7e08005 istore 1 ,contw +2040 6fe3437a fetch 6 ,mem_le_lap +2041 e7e30005 istore 6 ,contw +2042 20600000 rtn + +le_send_pairing_fail_unspecified_reason: +2043 7002d908 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +2044 20201fef branch le_send_pairing_failed + +le_check_init_key_distribution: +2045 6fe0c355 fetch 1 ,mem_le_pres_init_key_distribution +2046 6848c355 fetcht 1 ,mem_le_pres_init_key_distribution +2047 98417e00 iand temp ,pdata +2048 20600000 rtn + +le_parse_smp_identity_information: +2049 d8a043ac arg mem_le_irk ,contw +204a 20407d0c call memcpy16 +204b 20402045 call le_check_init_key_distribution +204c 2fec0001 isolate0 le_initator_irk_bit ,pdata +204d 2020a043 branch le_send_pairing_fail_unspecified_reason ,true +204e 6fe0c09a fetch 1 ,mem_device_option +204f c1850000 rtnne dvc_op_module +2050 20402053 call le_check_master_addr_type +2051 24740000 nrtn user +2052 2020321d branch app_ble_store_reconn_info + +le_check_master_addr_type: +2053 20407e56 call disable_user +2054 6fe0c36a fetch 1 ,mem_le_conn_peer_addr_type +2055 c1000000 rtneq master_public_addr +2056 6fe0c34e fetch 1 ,mem_le_preq_init_key_distribution +2057 c4008000 rtnbit0 le_initator_irk_bit +2058 20207e54 branch enable_user + +le_parse_smp_identity_address_information: +2059 20402045 call le_check_init_key_distribution +205a 2fec0001 isolate0 le_initator_irk_bit ,pdata +205b 2020a043 branch le_send_pairing_fail_unspecified_reason ,true +205c 20600000 rtn + +le_parse_smp_master_identification: + +le_parse_smp_signing_information: + +le_parse_smp_security_request: +205d 20600000 rtn + +le_parse_smp_public_key: +205e d8a00880 arg mem_le_pubkey_remote_x_256 ,contw +205f 20407cff call memcpy64 +2060 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +2061 70439901 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +2062 20600000 rtn + +le_parse_smp_dhkey_check: +2063 d8a00930 arg mem_sp_confirm_remote ,contw +2064 20407d0c call memcpy16 +2065 70439906 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +2066 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +2067 20600000 rtn + +le_send_smp_pairing_public_key: +2068 18002241 force 65 ,rega +2069 20402109 call le_fifo_malloc_tx_l2cap_smp +206a 5800000c setarg smp_pairing_public_key +206b e7e08005 istore 1 ,contw +206c d8c046dc arg mem_sc_pubkey_local_x_256 ,contr +206d 20207cff branch memcpy64 + +le_send_smp_pairing_dhkey_check: +206e 20406a1c call function_f6_eb +206f 18002211 force 17 ,rega +2070 20402109 call le_fifo_malloc_tx_l2cap_smp +2071 5800000d setarg smp_pairing_dhkey_check +2072 e7e08005 istore 1 ,contw +2073 20206ab7 branch load_inverse_result + +le_check_paring_time: +2074 6fe0c39b fetch 1 ,mem_le_pairing_state +2075 c17f8000 rtneq flag_le_pairing_end +2076 d8400003 arg flag_le_pairing_rcv_pairing_req ,temp +2077 98467c00 isub temp ,null +2078 24610000 nrtn positive +2079 d8e0000a arg smp_pairing_timer ,queue +207a 20407d74 call timer_check +207b 247a0000 nrtn blank +207c 20202043 branch le_send_pairing_fail_unspecified_reason + +le_pairing_sm: +207d 476cc03b bpatchx patch3b_1 ,mem_patch3b +207e 20401b77 call le_fifo_check_nearly_full +207f 247a0000 nrtn blank +2080 6fe0c39b fetch 1 ,mem_le_pairing_state +2081 c000208a beq flag_le_pairing_null ,le_pairing_sm_null +2082 c000a090 beq flag_le_pairing_start ,le_pairing_sm_start +2083 c001208a beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +2084 c001a092 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +2085 c004a096 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +2086 c005a0a6 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +2087 c00620a8 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +2088 c006a0af beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +2089 20600000 rtn + +le_pairing_sm_null: + +le_pairing_sm_send_sec_req: +208a 6fe0c39c fetch 1 ,mem_le_enc_state +208b c1820000 rtnne flag_le_send_start_enc_rsp +208c 70439cff jam flag_le_enc_end ,mem_le_enc_state +208d 70439bff jam flag_le_pairing_end ,mem_le_pairing_state +208e 70095b3f jam bt_evt_le_reconnect_complete ,mem_fifo_temp +208f 20207871 branch ui_ipc_send_event + +le_pairing_sm_start: +2090 70439b02 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +2091 20201f99 branch le_send_smp_security_request + +le_pairing_sm_rcv_pairing_req: +2092 70439b04 jam flag_le_pairing_wait_stk_generation ,mem_le_pairing_state +2093 58017700 setarg timer_smp_pairing_timeout +2094 d8e0000a arg smp_pairing_timer ,queue +2095 20207d66 branch timer_init + +le_pairing_sm_after_auth: +2096 6fe0c39c fetch 1 ,mem_le_enc_state +2097 c0022099 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +2098 20600000 rtn + +le_pairing_sm_after_auth_start_enc: +2099 6fe0c39d fetch 1 ,mem_le_pairing_mode +209a c283a0a4 bbit1 le_pairing_mode_secure_connect_bit ,le_pairing_sm_after_auth_start_enc_sc +209b 70439b0b jam flag_le_paring_send_enc_information ,mem_le_pairing_state +209c 2040201c call le_send_smp_encryption_information + +le_pairing_sm_after_auth_start_enc_common: +209d 70095b29 jam bt_evt_le_enc_info ,mem_fifo_temp +209e 20407871 call ui_ipc_send_event +209f 6fe0c09a fetch 1 ,mem_device_option +20a0 c1850000 rtnne dvc_op_module +20a1 20402053 call le_check_master_addr_type +20a2 20740000 rtn user +20a3 2020321d branch app_ble_store_reconn_info + +le_pairing_sm_after_auth_start_enc_sc: +20a4 70439b0c jam flag_le_paring_send_master_identification ,mem_le_pairing_state +20a5 2020209d branch le_pairing_sm_after_auth_start_enc_common + +le_pairng_sm_send_enc_information: +20a6 70439b0c jam flag_le_paring_send_master_identification ,mem_le_pairing_state +20a7 20202026 branch le_send_smp_master_identification + +le_pairng_sm_send_master_indentification: +20a8 6fe0c34f fetch 1 ,mem_le_preq_resp_key_distribution +20a9 6848c356 fetcht 1 ,mem_le_pres_resp_key_distribution +20aa 98417e00 iand temp ,pdata +20ab 2fec0001 isolate0 le_initator_irk_bit ,pdata +20ac 2020a0b1 branch le_parse_start_enc_rsp_after_auth_end ,true +20ad 70439b0d jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +20ae 20202032 branch le_send_smp_identity_information + +le_pairng_sm_send_indentity_information: +20af 2040203a call le_send_smp_identity_address_information +20b0 202020b1 branch le_parse_start_enc_rsp_after_auth_end + +le_parse_start_enc_rsp_after_auth_end: +20b1 18000e0a force smp_pairing_timer ,queue +20b2 20407d65 call timer_stop +20b3 70439cff jam flag_le_enc_end ,mem_le_enc_state +20b4 70439bff jam flag_le_pairing_end ,mem_le_pairing_state +20b5 70095b3e jam bt_evt_le_pairing_complete ,mem_fifo_temp +20b6 20207871 branch ui_ipc_send_event + +le_secure_connect_sm: +20b7 476d403b bpatchx patch3b_2 ,mem_patch3b +20b8 6fe0c39d fetch 1 ,mem_le_pairing_mode +20b9 c4038000 rtnbit0 le_pairing_mode_secure_connect_bit +20ba 6fe0c398 fetch 1 ,mem_le_secure_connect_flag +20bb c1810000 rtnne le_sp_flag_commit_256 +20bc 70439800 jam sp_flag_standby ,mem_le_secure_connect_flag +20bd 6fe0c399 fetch 1 ,mem_le_secure_connect_state +20be c000a0ff beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +20bf c0012106 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +20c0 c001a0f7 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +20c1 c00320dc beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +20c2 c003a0d3 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +20c3 c00420c9 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +20c4 20600000 rtn + +le_sc_state_clear: +20c5 70439800 jam sp_flag_standby ,mem_le_secure_connect_flag +20c6 70439900 jam le_sc_stat_null ,mem_le_secure_connect_state +20c7 70439a00 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +20c8 20600000 rtn + +le_sc_sm_passkey_wait_confirm: +20c9 6fe0c76d fetch 1 ,mem_authentication_passkey_times +20ca 1fe20e00 copy pdata ,queue +20cb 1fe0fe01 increase 1 ,pdata +20cc 67e0c76d store 1 ,mem_authentication_passkey_times +20cd 6fe2439e fetch 4 ,mem_le_tk +20ce afefffff qisolate1 pdata +20cf 58000080 setarg 0x80 +20d0 7920fe00 setflag true ,0 ,pdata +20d1 67e0c76e store 1 ,mem_passkey_1bit +20d2 202020fb branch le_sc_sm_ready_send_pairing_confirm + +le_sc_sm_wait_confirm_gkey: +20d3 6fe0c39a fetch 1 ,mem_le_sc_confirm_gkey_flag +20d4 70439a00 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +20d5 c000a0d8 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +20d6 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +20d7 20600000 rtn + +le_sc_confirm_gkey_ok: +20d8 70095b31 jam bt_evt_le_pairing_success ,mem_fifo_temp +20d9 20407871 call ui_ipc_send_event +20da 70439b09 jam flag_le_pairing_after_auth ,mem_le_pairing_state +20db 2020206e branch le_send_smp_pairing_dhkey_check + +le_sc_sm_receive_dhkey: +20dc 6fe0887b fetch 1 ,mem_sp_dhkey_invalid +20dd c001a0e0 beq sp_key_valid_256 ,le_dhkey_ready +20de 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +20df 20600000 rtn + +le_dhkey_ready: +20e0 20406a43 call function_f5 +20e1 6fe0c39d fetch 1 ,mem_le_pairing_mode +20e2 c041a0e5 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +20e3 c04220e5 beq le_pairing_mode_secure_connect_passkey_res_input ,le_dhkey_ready_common +20e4 20401fb4 call le_set_tk_0 + +le_dhkey_ready_common: +20e5 20406a30 call function_f6_ea +20e6 da2009be arg mem_aes_cmac_temp ,rega +20e7 da400930 arg mem_sp_confirm_remote ,regb +20e8 df200010 arg 16 ,loopcnt +20e9 20407df1 call string_compare +20ea 2022a0ed branch le_dhkey_check_ok ,zero + +le_dhkey_check_fail: +20eb 7002d90b jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +20ec 20201fef branch le_send_pairing_failed + +le_dhkey_check_ok: +20ed 20406eed call sp_calc_check_publickey_256 +20ee 2422a0eb nbranch le_dhkey_check_fail ,zero +20ef 70432601 jam 1 ,mem_ltk_exists +20f0 6fe0c39d fetch 1 ,mem_le_pairing_mode +20f1 c040a0d8 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +20f2 c041a0d8 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +20f3 c04220d8 beq le_pairing_mode_secure_connect_passkey_res_input ,le_sc_confirm_gkey_ok +20f4 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +20f5 70439907 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +20f6 20600000 rtn + +le_sc_sm_send_public_key: +20f7 6fe0c39d fetch 1 ,mem_le_pairing_mode +20f8 c041a0fc beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +20f9 c04220fc beq le_pairing_mode_secure_connect_passkey_res_input ,le_sc_sm_send_public_key_passkey +20fa 70476e00 jam 0 ,mem_passkey_1bit + +le_sc_sm_ready_send_pairing_confirm: +20fb 20201fd7 branch le_send_smp_pairing_confirm + +le_sc_sm_send_public_key_passkey: +20fc 70476d00 jam 0 ,mem_authentication_passkey_times +20fd c1420000 rtneq le_pairing_mode_secure_connect_passkey_res_input +20fe 20201fb7 branch le_parse_smp_pairing_req_passkey + +le_sc_sm_receive_public_key: +20ff 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +2100 6fe0c6bb fetch 1 ,mem_sc_local_key_invalid +2101 c001a103 beq sp_key_valid_256 ,le_public_key_ready +2102 20600000 rtn + +le_public_key_ready: +2103 70439902 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +2104 70087b00 jam sp_key_invalid ,mem_sp_dhkey_invalid +2105 20207581 branch sp_dhkey_calc_256 + +le_sc_sm_wait_send_public_key: +2106 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +2107 70439903 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +2108 20202068 branch le_send_smp_pairing_public_key + +le_fifo_malloc_tx_l2cap_smp: +2109 18002406 force le_l2cap_cid_smp ,regb +210a 20201b4d branch le_fifo_malloc_tx_l2cap + +le_parse_ll: +210b 6fe0816d fetch 1 ,mem_le_rxbuf_data_ll_opcode +210c c0002122 beq ll_connection_update_ind ,le_parse_connection_update_ind +210d c000a12a beq ll_channel_map_ind ,le_parse_channel_map_ind +210e c0012132 beq ll_terminate_ind ,le_parse_terminate_ind +210f c001a136 beq ll_enc_req ,le_parse_enc_req +2110 c0022155 beq ll_enc_rsp ,le_parse_enc_rsp +2111 c002a15a beq ll_start_enc_req ,le_parse_start_enc_req +2112 c003215e beq ll_start_enc_rsp ,le_parse_start_enc_rsp +2113 c003a163 beq ll_unknown_rsp ,le_parse_unknown_rsp +2114 c0042164 beq ll_feature_req ,le_parse_feature_req +2115 c004a165 beq ll_feature_rsp ,le_parse_feature_rsp +2116 c0052166 beq ll_pause_enc_req ,le_parse_pause_enc_req +2117 c005a16a beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +2118 c006216b beq ll_version_ind ,le_parse_version_ind +2119 c006a16d beq ll_reject_ind ,le_parse_reject_ind +211a c009216e beq ll_ping_req ,le_parse_ping_req +211b c009a16f beq ll_ping_rsp ,le_parse_ping_rsp +211c c00a2170 beq ll_length_req ,le_parse_length_req +211d c00aa172 beq ll_length_rsp ,le_parse_length_rsp +211e c00b217d beq ll_phy_req ,le_parse_phy_req +211f c00c217e beq ll_phy_update_ind ,le_parse_phy_update_ind +2120 6a60816d fetchr regc ,1 ,mem_le_rxbuf_data_ll_opcode +2121 202021a1 branch le_send_unknown_rsp + +le_parse_connection_update_ind: +2122 efe48006 ifetch 9 ,contr +2123 67e482be store 9 ,mem_le_new_param +2124 efe10006 ifetch 2 ,contr +2125 67e102a7 store 2 ,mem_le_instant +2126 6fe08287 fetch 1 ,mem_le_state +2127 79207e05 set1 lestate_update_param ,pdata +2128 67e08287 store 1 ,mem_le_state +2129 20600000 rtn + +le_parse_channel_map_ind: +212a efe28006 ifetch 5 ,contr +212b 67e282be store 5 ,mem_le_new_map +212c efe10006 ifetch 2 ,contr +212d 67e102a7 store 2 ,mem_le_instant + +le_update_map_enable: +212e 6fe08287 fetch 1 ,mem_le_state +212f 79207e06 set1 lestate_update_map ,pdata +2130 67e08287 store 1 ,mem_le_state +2131 20600000 rtn + +le_parse_terminate_ind: +2132 58000014 setarg 20 +2133 67e102b5 store 2 ,mem_le_superto +2134 67e14394 store 2 ,mem_le_init_superto +2135 20600000 rtn + +le_parse_enc_req: +2136 efe40006 ifetch 8 ,contr +2137 67e443a4 store 8 ,mem_le_rand +2138 efe10006 ifetch 2 ,contr +2139 67e143a2 store 2 ,mem_le_ediv +213a efe40006 ifetch 8 ,contr +213b 67e44384 store 8 ,mem_le_skdm +213c efe20006 ifetch 4 ,contr +213d 67e246aa store 4 ,mem_ccm_ivm +213e 2040218e call le_send_enc_rsp +213f 476dc03b bpatchx patch3b_3 ,mem_patch3b +2140 6fe0c39b fetch 1 ,mem_le_pairing_state +2141 c004a148 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +2142 6fe0c3c0 fetch 1 ,mem_le_configuration +2143 c280a14b bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +2144 6fe0c489 fetch 1 ,mem_nv_data_number +2145 245a6016 ncall load_device_list_mode_4 ,blank +2146 6fe0c326 fetch 1 ,mem_ltk_exists +2147 c0002150 beq 0 ,le_ltk_lost + +le_parse_enc_req_after_auth: +2148 70439c01 jam flag_le_rcv_enc_start ,mem_le_enc_state +2149 2040219c call le_send_start_enc_req +214a 20206c58 branch generate_sk + +le_parse_enc_req_fixed_ltk: +214b 70432601 jam 1 ,mem_ltk_exists +214c d8c043c1 arg mem_le_fixed_ltk ,contr +214d d8a04316 arg mem_le_ltk ,contw +214e 20407d0c call memcpy16 +214f 20202148 branch le_parse_enc_req_after_auth + +le_ltk_lost: +2150 476e403b bpatchx patch3b_4 ,mem_patch3b +2151 70439c00 jam flag_le_enc_null ,mem_le_enc_state +2152 70439b00 jam flag_le_enc_null ,mem_le_pairing_state +2153 70095b41 jam bt_evt_le_ltk_lost ,mem_fifo_temp +2154 20207871 branch ui_ipc_send_event + +le_parse_enc_rsp: +2155 efe40006 ifetch 8 ,contr +2156 67e4438c store 8 ,mem_le_skds +2157 efe20006 ifetch 4 ,contr +2158 67e246ae store 4 ,mem_ccm_ivs +2159 20206c58 branch generate_sk + +le_parse_start_enc_req: +215a 6fe08287 fetch 1 ,mem_le_state +215b 79207e04 set1 lestate_encryption ,pdata +215c 67e08287 store 1 ,mem_le_state +215d 20600000 rtn + +le_parse_start_enc_rsp: +215e 20748000 rtn master +215f 70095b32 jam bt_evt_le_start_enc ,mem_fifo_temp +2160 20407871 call ui_ipc_send_event +2161 70439c04 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +2162 2020219f branch le_send_start_enc_rsp + +le_parse_unknown_rsp: +2163 20600000 rtn + +le_parse_feature_req: +2164 202021a6 branch le_send_feature_rsp + +le_parse_feature_rsp: +2165 20600000 rtn + +le_parse_pause_enc_req: +2166 70439c02 jam flag_le_enc_pause ,mem_le_enc_state +2167 204021ad call le_send_pause_enc_rsp +2168 70095b33 jam bt_evt_le_pause_enc ,mem_fifo_temp +2169 20207871 branch ui_ipc_send_event + +le_parse_pause_enc_rsp: +216a 20600000 rtn + +le_parse_version_ind: +216b 20748000 rtn master +216c 202021af branch le_send_version_ind + +le_parse_reject_ind: +216d 20600000 rtn + +le_parse_ping_req: +216e 202021bb branch le_send_ping_rsp + +le_parse_ping_rsp: +216f 20600000 rtn + +le_parse_length_req: +2170 20402172 call le_parse_length_rsp +2171 202021bf branch le_send_data_length_res + +le_parse_length_rsp: +2172 efe40006 ifetch 8 ,contr +2173 67e44444 store 8 ,mem_remote_rx_max_octets +2174 6fe14444 fetch 2 ,mem_remote_rx_max_octets +2175 68494450 fetcht 2 ,mem_local_tx_max_octets +2176 20407e4a call not_greater_than +2177 67e14444 store 2 ,mem_remote_rx_max_octets +2178 6fe14448 fetch 2 ,mem_remote_tx_max_octets +2179 6849444c fetcht 2 ,mem_local_rx_max_octets +217a 20407e4a call not_greater_than +217b 67e14448 store 2 ,mem_remote_tx_max_octets +217c 20600000 rtn + +le_parse_phy_req: +217d 202021c5 branch le_send_phy_rsp + +le_parse_phy_update_ind: +217e efe10006 ifetch 2 ,contr +217f 67e102be store 2 ,mem_le_new_m2s_phy +2180 efe10006 ifetch 2 ,contr +2181 67e102a7 store 2 ,mem_le_instant +2182 207a0000 rtn blank +2183 6fe08287 fetch 1 ,mem_le_state +2184 79207e07 set1 lestate_update_phy ,pdata +2185 67e08287 store 1 ,mem_le_state +2186 20600000 rtn + +le_send_terminate_ind_user_terminated: +2187 da600013 arg error_remote_user_terminated_connection ,regc + +le_send_terminate_ind: +2188 da200002 arg 2 ,rega +2189 da400002 arg ll_terminate_ind ,regb +218a 20401b48 call le_fifo_malloc_tx_ll +218b 1a627e00 copy regc ,pdata +218c e7e08005 istore 1 ,contw +218d 20600000 rtn + +le_send_enc_rsp: +218e d8a0438c arg mem_le_skds ,contw +218f 18007208 force 8 ,loopcnt +2190 20405a32 call generate_random_loop +2191 d8a046ae arg mem_ccm_ivs ,contw +2192 18007204 force 4 ,loopcnt +2193 20405a32 call generate_random_loop +2194 da20000d arg 13 ,rega +2195 da400004 arg ll_enc_rsp ,regb +2196 20401b48 call le_fifo_malloc_tx_ll +2197 6fe4438c fetch 8 ,mem_le_skds +2198 e7e40005 istore 8 ,contw +2199 6fe246ae fetch 4 ,mem_ccm_ivs +219a e7e20005 istore 4 ,contw +219b 20600000 rtn + +le_send_start_enc_req: +219c 70439c05 jam flag_le_send_start_enc_req ,mem_le_enc_state +219d da400005 arg ll_start_enc_req ,regb +219e 202021cf branch le_send_ll_one_lenth + +le_send_start_enc_rsp: +219f da400006 arg ll_start_enc_rsp ,regb +21a0 202021cf branch le_send_ll_one_lenth + +le_send_unknown_rsp: +21a1 da200002 arg 2 ,rega +21a2 da400007 arg ll_unknown_rsp ,regb +21a3 20401b48 call le_fifo_malloc_tx_ll +21a4 e2608005 istorer regc ,1 ,contw +21a5 20600000 rtn + +le_send_feature_rsp: +21a6 da200009 arg 9 ,rega +21a7 da400009 arg ll_feature_rsp ,regb +21a8 20401b48 call le_fifo_malloc_tx_ll +21a9 6fe4443a fetch 8 ,mem_le_local_feature +21aa 1fe1fe01 or pdata ,fun_ll_feature_le_encryption ,pdata +21ab e7e40005 istore 8 ,contw +21ac 20600000 rtn + +le_send_pause_enc_rsp: +21ad da40000b arg ll_pause_enc_rsp ,regb +21ae 202021cf branch le_send_ll_one_lenth + +le_send_version_ind: +21af da200006 arg 6 ,rega +21b0 da40000c arg ll_version_ind ,regb +21b1 20401b48 call le_fifo_malloc_tx_ll +21b2 6fe2c5f7 fetch 5 ,mem_lmp_version +21b3 e7e28005 istore 5 ,contw +21b4 20600000 rtn + +le_send_reject_ind: +21b5 da200002 arg 2 ,rega +21b6 da40000d arg ll_reject_ind ,regb +21b7 20401b48 call le_fifo_malloc_tx_ll +21b8 58000006 setarg le_err_pin_or_key_missing +21b9 e7e08005 istore 1 ,contw +21ba 20600000 rtn + +le_send_ping_rsp: +21bb da400013 arg ll_ping_rsp ,regb +21bc 202021cf branch le_send_ll_one_lenth + +le_send_data_length_req: +21bd da400014 arg ll_length_req ,regb +21be 202021c0 branch le_send_data_length + +le_send_data_length_res: +21bf da400015 arg ll_length_rsp ,regb + +le_send_data_length: +21c0 da200009 arg 9 ,rega +21c1 20401b48 call le_fifo_malloc_tx_ll +21c2 6fe4444c fetch 8 ,mem_local_rx_max_octets +21c3 e7e40005 istore 8 ,contw +21c4 20600000 rtn + +le_send_phy_rsp: +21c5 da200003 arg 3 ,rega +21c6 da400017 arg ll_phy_rsp ,regb +21c7 20401b48 call le_fifo_malloc_tx_ll +21c8 6fe0c442 fetch 1 ,mem_le_tx_phys +21c9 1fe17e07 and pdata ,0x07 ,pdata +21ca e7e08005 istore 1 ,contw +21cb 6fe0c443 fetch 1 ,mem_le_rx_phys +21cc 1fe17e07 and pdata ,0x07 ,pdata +21cd e7e08005 istore 1 ,contw +21ce 20600000 rtn + +le_send_ll_one_lenth: +21cf da200001 arg 1 ,rega +21d0 20201b48 branch le_fifo_malloc_tx_ll + +g24_dispatch: +21d1 476ec03b bpatchx patch3b_5 ,mem_patch3b +21d2 c61a0000 rtnmark1 mark_adc_enable +21d3 c513a40e bmark1 mark_24g_rxmode ,g24_receive_dispatch +21d4 2020261b branch g24_transmit_dispatch + +g24_prep: +21d5 7844fc00 disable enable_crc +21d6 7843fc00 disable enable_white +21d7 58555555 setarg 0x555555 +21d8 98001e00 iforce crc24_init +21d9 6fe0c83a fetch 1 ,mem_24g_ch +21da 202016c3 branch le_prep + 5 + +g24_receive_packet: +21db 476f403b bpatchx patch3b_6 ,mem_patch3b +21dc 6fe0c864 fetch 1 ,mem_24g_rx_phy +21dd 2040168b call le_enable_phy_by_pdata +21de 6fe2483c fetch 4 ,mem_24g_addr +21df 98001200 iforce access +21e0 204010b0 call calc_mod_value_scale_le +21e1 20401161 call set_sync_on +21e2 6848c83a fetcht 1 ,mem_24g_ch +21e3 204016c8 call le_rf_rx_enable + +g24_receive_rxon: +21e4 204021d5 call g24_prep +21e5 c597a1e9 bmark0 mark_ble_lr ,g24_receive_nolr +21e6 783cfc00 pulse dewhiten_code_calc +21e7 2000001e nop 30 +21e8 204021d5 call g24_prep + +g24_receive_nolr: +21e9 7857fc00 disable user3 +21ea 7826fc00 enable decode_fec0 +21eb 7830fc00 enable is_rx +21ec 78507c00 disable is_tx +21ed 78287c00 enable swfine +21ee 6fe14838 fetch 2 ,mem_24g_rx_window +21ef 98003600 iforce stop_watch +21f0 37c18400 correlate null ,timeout +21f1 242c223d nbranch g24_sync_timeout ,sync +21f2 20404caf call rf_debug_rx_sync_line +21f3 c517a1f6 bmark1 mark_ble_lr ,g24_receive_skip_fec1 +21f4 7846fc00 disable decode_fec0 +21f5 7825fc00 enable decode_fec1 + +g24_receive_skip_fec1: +21f6 7823fc00 enable enable_white +21f7 7824fc00 enable enable_crc +21f8 2040223a call g24_receive_byte +21f9 67e0c85a store 1 ,mem_24g_get_syncword_crc8 +21fa 6848c859 fetcht 1 ,mem_24g_syncword_crc8 +21fb 98467c00 isub temp ,null +21fc 2422a23f nbranch g24_end_of_packet ,zero +21fd 476fc03b bpatchx patch3b_7 ,mem_patch3b +21fe 7858fc00 disable user7 +21ff 280ffe2f isolate1 mark_ble_lr ,mark +2200 2040a22c call g24_lr_receive_pdu_len ,true +2201 2038a23f branch g24_end_of_packet ,user7 +2202 2040223a call g24_receive_byte +2203 67e0c7a4 store 1 ,mem_24g_rxbuf +2204 c513a209 bmark1 mark_24g_rxmode ,g24_receive_skip +2205 6fe0c7a4 fetch 1 ,mem_24g_rxbuf +2206 6848c836 fetcht 1 ,mem_24g_data_type +2207 a8400e00 icompare bits_data ,temp +2208 2420a23f nbranch g24_end_of_packet ,true + +g24_receive_skip: +2209 2040223a call g24_receive_byte +220a 280ffe2f isolate1 mark_ble_lr ,mark +220b 2040a235 call g24_lr_receive_payload_len ,true +220c e7e08005 istore 1 ,contw +220d 1fe97e00 rshift3 pdata ,pdata +220e 1fe67c1f sub pdata ,0x1f ,null +220f 2421223f nbranch g24_end_of_packet ,positive +2210 1fe27200 copy pdata ,loopcnt +2211 2022a215 branch g24rx_nopayload ,zero + +g24rx_loop: +2212 2040223a call g24_receive_byte +2213 e7e08005 istore 1 ,contw +2214 c2002212 loop g24rx_loop + +g24rx_nopayload: +2215 c513a21a bmark1 mark_24g_rxmode ,g24_receive_skip_rssi +2216 18a22200 copy contw ,rega +2217 2040223a call g24_receive_byte +2218 67e0c87e store 1 ,mem_rssi_hex_received +2219 1a220a00 copy rega ,contw + +g24_receive_skip_rssi: +221a 09800018 parse demod ,bucket ,24 +221b 1fef7e00 rshift32 pdata ,pdata +221c 1ff17e00 rshift16 pdata ,pdata +221d e7e18005 istore 3 ,contw +221e 7845fc00 disable decode_fec1 +221f 280ffe27 isolate1 mark_24g_rxmode ,mark +2220 2040a5de call save_rssi_dec ,true +2221 2023223f branch g24_end_of_packet ,crc_failed +2222 20404cae call rf_debug_rx_crc_line +2223 7837fc00 enable user3 +2224 204017b0 call le_match_set_txfreq +2225 4770403c bpatchx patch3c_0 ,mem_patch3c +2226 c6138000 rtnmark1 mark_24g_rxmode +2227 6fe0c87e fetch 1 ,mem_rssi_hex_received +2228 6848c8cd fetcht 1 ,mem_rssi_hex_received_max_value +2229 98467c00 isub temp ,null +222a 20417e4c call copy_temp2pdata ,positive +222b 202025e2 branch rssi_signal + +g24_lr_receive_pdu_len: +222c 2040223a call g24_receive_byte +222d 1fe67c01 sub pdata ,1 ,null +222e 20217e5c branch enable_user7 ,positive +222f 1fe0fffe increase -2 ,pdata +2230 c513a233 bmark1 mark_24g_rxmode ,g24_lr_receive_pdu_norssi +2231 203a7e5c branch enable_user7 ,blank +2232 1fe0ffff increase -1 ,pdata + +g24_lr_receive_pdu_norssi: +2233 67e08964 store 1 ,mem_temp +2234 20600000 rtn + +g24_lr_receive_payload_len: +2235 1fe17e07 and_into 0x07 ,pdata +2236 68488964 fetcht 1 ,mem_temp +2237 18498400 lshift3 temp ,temp +2238 9841fe00 ior temp ,pdata +2239 20600000 rtn + +g24_receive_byte: +223a 09800008 parse demod ,bucket ,8 +223b 19897e00 rshift3 pwindow ,pdata +223c 20600000 rtn + +g24_sync_timeout: +223d 280ffe27 isolate1 mark_24g_rxmode ,mark +223e 2040a5fa call rssi_noise ,true + +g24_end_of_packet: +223f 204016b2 call le_disable +2240 784dfc00 disable encode_fec1 +2241 7845fc00 disable decode_fec1 +2242 20200e80 branch end_of_packet + +g24_set_freq_tx: +2243 20401161 call set_sync_on +2244 6848c83a fetcht 1 ,mem_24g_ch +2245 20201205 branch set_freq_tx + +g24_transmit: +2246 4770c03c bpatchx patch3c_1 ,mem_patch3c +2247 6fe0c865 fetch 1 ,mem_24g_tx_phy +2248 2040168b call le_enable_phy_by_pdata +2249 6fe2483c fetch 4 ,mem_24g_addr +224a 98001200 iforce access +224b 204021d5 call g24_prep +224c 20402243 call g24_set_freq_tx +224d 79202a00 set1 txgfsk ,radio_ctrl +224e 782efc00 enable encode_fec0 +224f 78307c00 enable is_tx +2250 7850fc00 disable is_rx +2251 20404cb5 call rf_debug_tx_on_line +2252 785d7c00 disable lr_s2en +2253 c517a273 bmark1 mark_ble_lr ,g24_transmit_lr +2254 c516a285 bmark1 mark_ble_2m ,g24_transmit_2m +2255 19317e00 rshift16 access ,pdata +2256 1fecfe00 rshift8 pdata ,pdata +2257 1ff1fe00 rshift4 pdata ,pdata +2258 08008628 inject mod ,40 + +g24_transmit_packet: +2259 c517a25c bmark1 mark_ble_lr ,g24_transmit_nolr +225a 784efc00 disable encode_fec0 +225b 782dfc00 enable encode_fec1 + +g24_transmit_nolr: +225c 7823fc00 enable enable_white +225d 7824fc00 enable enable_crc +225e 6fe0c837 fetch 1 ,mem_24g_txlen +225f 98007200 iforce loopcnt +2260 d8c047e6 arg mem_24g_txpayload ,contr + +g24tr_loop: +2261 efe08006 ifetch 1 ,contr +2262 08008608 inject mod ,8 +2263 c2002261 loop g24tr_loop +2264 78247c00 enable enable_parity +2265 08008618 inject mod ,24 +2266 78447c00 disable enable_parity +2267 c597a26b bmark0 mark_ble_lr ,g24_transmit_skip +2268 7843fc00 disable enable_white +2269 58000000 setarg 0 +226a 08008603 inject mod ,3 + +g24_transmit_skip: +226b 37d38200 until null ,tx_clear +226c 20000064 nop 100 +226d 785d7c00 disable lr_s2en +226e 784efc00 disable encode_fec0 +226f 784dfc00 disable encode_fec1 +2270 785c7c00 disable encode_fec3 +2271 20401161 call set_sync_on +2272 20204cb3 branch rf_debug_tx_off_line + +g24_transmit_lr: +2273 df20000a arg 10 ,loopcnt + +g24_transmit_lr_preamble_loop: +2274 5800003c setarg 0x3c +2275 08008608 inject mod ,8 +2276 c2002274 loop g24_transmit_lr_preamble_loop +2277 784efc00 disable encode_fec0 +2278 783c7c00 enable encode_fec3 +2279 19317e00 rshift16 access ,pdata +227a 1ff17e00 rshift16 pdata ,pdata +227b 1ff1fe00 rshift4 pdata ,pdata +227c 08008620 inject mod ,32 +227d c5172282 bmark1 mark_ble_lr_s8 ,g24_transmit_lr_s8 + +g24_transmit_lr_s2: +227e 58000001 setarg 1 +227f 08008605 inject mod ,5 +2280 783d7c00 enable lr_s2en +2281 20202259 branch g24_transmit_packet + +g24_transmit_lr_s8: +2282 58000000 setarg 0 +2283 08008605 inject mod ,5 +2284 20202259 branch g24_transmit_packet + +g24_transmit_2m: +2285 6fe0c1f0 fetch 1 ,mem_system_clk +2286 1fe37200 rshift pdata ,loopcnt + +g24_transmit_2m_dealy: +2287 20000002 nop 2 +2288 c2002287 loop g24_transmit_2m_dealy +2289 19317e00 rshift16 access ,pdata +228a 1fecfe00 rshift8 pdata ,pdata +228b 1ff18400 rshift4 pdata ,temp +228c 18427e00 copy temp ,pdata +228d 08008608 inject mod ,8 +228e 18427e00 copy temp ,pdata +228f 08008628 inject mod ,40 +2290 20202259 branch g24_transmit_packet + +g24_transmit_prep: +2291 6fe0c865 fetch 1 ,mem_24g_tx_phy +2292 c28122b0 bbit1 bit_le_coded_phy ,g24_lr_transmit_prep +2293 6fe0c835 fetch 1 ,mem_24g_datalen +2294 1fe0fe03 increase 3 ,pdata +2295 67e0c837 store 1 ,mem_24g_txlen +2296 6fe0c859 fetch 1 ,mem_24g_syncword_crc8 +2297 67e0c7e6 store 1 ,mem_24g_txpayload +2298 6fe0c836 fetch 1 ,mem_24g_data_type +2299 e7e08005 istore 1 ,contw +229a 6fe0c835 fetch 1 ,mem_24g_datalen + +g24_transmit_prep_pdu: +229b 1fe9fe00 lshift3 pdata ,pdata +229c 6848c82b fetcht 1 ,mem_24g_pid +229d 18410403 and temp ,0x03 ,temp +229e 18438400 lshift temp ,temp +229f 9841fe00 ior temp ,pdata +22a0 6848c82c fetcht 1 ,mem_24g_no_ack +22a1 9840fe00 iadd temp ,pdata +22a2 e7e08005 istore 1 ,contw +22a3 6fe0c835 fetch 1 ,mem_24g_datalen +22a4 98007200 iforce loopcnt +22a5 d8c047c6 arg mem_24g_txbuf ,contr +22a6 20407d5f call memcpy +22a7 c6938000 rtnmark0 mark_24g_rxmode +22a8 6fe08019 fetch 1 ,mem_rssi_hex +22a9 e7e08005 istore 1 ,contw +22aa 6fe0c865 fetch 1 ,mem_24g_tx_phy +22ab c3810000 rtnbit1 bit_le_coded_phy +22ac 6fe0c837 fetch 1 ,mem_24g_txlen +22ad 1fe0fe01 increase 1 ,pdata +22ae 67e0c837 store 1 ,mem_24g_txlen +22af 20600000 rtn + +g24_lr_transmit_prep: +22b0 6fe0c835 fetch 1 ,mem_24g_datalen +22b1 1fe0fe04 increase 4 ,pdata +22b2 c593a2b4 bmark0 mark_24g_rxmode ,g24_lr_transmit_prep_skip +22b3 1fe0fe01 increase 1 ,pdata + +g24_lr_transmit_prep_skip: +22b4 67e0c837 store 1 ,mem_24g_txlen +22b5 6fe0c859 fetch 1 ,mem_24g_syncword_crc8 +22b6 67e0c7e6 store 1 ,mem_24g_txpayload +22b7 6fe0c837 fetch 1 ,mem_24g_txlen +22b8 1fe0fffe increase -2 ,pdata +22b9 e7e08005 istore 1 ,contw +22ba 6fe0c836 fetch 1 ,mem_24g_data_type +22bb e7e08005 istore 1 ,contw +22bc 58000000 setarg 0 +22bd 2020229b branch g24_transmit_prep_pdu + +g24_read_len_pid_crc: +22be 6fe0c7a5 fetch 1 ,mem_24g_rxbuf + 1 +22bf 1fe97e00 rshift3 pdata ,pdata +22c0 67e0c82a store 1 ,mem_24g_rxdata_length +22c1 1fe0fe01 increase 1 ,pdata +22c2 d8c047a5 arg mem_24g_rxbuf + 1 ,contr +22c3 98c08c00 iadd contr ,contr +22c4 efe18006 ifetch 3 ,contr +22c5 67e1c82d store 3 ,mem_24g_sta_crc +22c6 6fe0c7a5 fetch 1 ,mem_24g_rxbuf + 1 +22c7 1fe37e00 rshift pdata ,pdata +22c8 1fe17e03 and pdata ,0x03 ,pdata +22c9 67e0c833 store 1 ,mem_24g_sta_pid +22ca 20600000 rtn + +g24_ch: +22cb 6848c83b fetcht 1 ,mem_24g_current_ch_number +22cc 204022cf call g24_ch_map_size +22cd 6048c83b storet 1 ,mem_24g_current_ch_number +22ce 20600000 rtn + +g24_ch_map_size: +22cf 204022d3 call g24_ch_calc +22d0 18408401 increase 1 ,temp +22d1 18410403 and_into 3 ,temp +22d2 20600000 rtn + +g24_ch_calc: +22d3 6fe0c83c fetch 1 ,mem_24g_addr +22d4 1fe17e03 and_into 0x03 ,pdata +22d5 1fefa204 mul32 pdata ,4 ,rega +22d6 58004840 setarg mem_24g_ch_map1 +22d7 9a20fe00 iadd rega ,pdata +22d8 98408c00 iadd temp ,contr +22d9 efe08006 ifetch 1 ,contr +22da 67e0c83a store 1 ,mem_24g_ch +22db 20600000 rtn + +g24_update_addr_and_synccrc8: +22dc 67e2483c store 4 ,mem_24g_addr + +g24_syncword_crc8: +22dd da200000 arg 0 ,rega +22de df200004 arg 4 ,loopcnt +22df d8c0483c arg mem_24g_addr ,contr + +g24_syncword_crc8_loop: +22e0 efe08006 ifetch 1 ,contr +22e1 9a20a200 iadd rega ,rega +22e2 c20022e0 loop g24_syncword_crc8_loop +22e3 1a227e00 copy rega ,pdata +22e4 67e14857 store 2 ,mem_24g_syncword +22e5 6fe0c857 fetch 1 ,mem_24g_syncword +22e6 6848c858 fetcht 1 ,mem_24g_syncword + 1 +22e7 9840fe00 iadd temp ,pdata +22e8 67e0c859 store 1 ,mem_24g_syncword_crc8 +22e9 20600000 rtn + +g24_timer_check: +22ea 20407e56 call disable_user +22eb 684a4850 fetcht 4 ,mem_24g_tx_btclk +22ec 1c427e00 copy clkn_bt ,pdata +22ed 98467c00 isub temp ,null +22ee 244122f9 ncall g24_timer_timeout ,positive +22ef 1fe22400 copy pdata ,regb +22f0 6fe24850 fetch 4 ,mem_24g_tx_btclk +22f1 6848c854 fetcht 1 ,mem_24g_interval +22f2 98408400 iadd temp ,temp +22f3 1a427e00 copy regb ,pdata +22f4 98467c00 isub temp ,null +22f5 24610000 nrtn positive +22f6 793ffe1c set0 28 ,pdata +22f7 67e24850 store 4 ,mem_24g_tx_btclk +22f8 20207e54 branch enable_user + +g24_timer_timeout: +22f9 20628000 rtn zero +22fa 79207e1c set1 28 ,pdata +22fb 20600000 rtn + +g24_timer_init: +22fc 58000000 setarg 0 +22fd 67e24850 store 4 ,mem_24g_tx_btclk +22fe 20600000 rtn + +g24_chmap_param_init: +22ff 38001300 setsect 0 ,0x1300 +2300 3805908b setsect 1 ,0x1908b +2301 380b6150 setsect 2 ,0x36150 +2302 380c3d20 setsect 3 ,0x3d20 +2303 67e4c840 store 9 ,mem_24g_ch_map1 +2304 38003a1a setsect 0 ,0x3a1a +2305 3804c453 setsect 1 ,0xc453 +2306 3808d312 setsect 2 ,0xd312 +2307 380c0001 setsect 3 ,0x1 +2308 e7e38005 istore 7 ,contw +2309 6fe0c866 fetch 1 ,mem_24g_ch_map_update +230a 207a0000 rtn blank +230b d8c04867 arg mem_24g_ch_update_map1 ,contr +230c d8a04840 arg mem_24g_ch_map1 ,contw +230d 20207d0c branch memcpy16 + +g24_chamap_param_update: +230e 584e001e setarg 0x4e001e +230f 67e1c868 store 3 ,mem_24g_ch_update_map1 + 1 +2310 58032303 setarg 0x032303 +2311 e7e18005 istore 3 ,contw +2312 58250642 setarg 0x250642 +2313 e7e18005 istore 3 ,contw +2314 58094c06 setarg 0x094c06 +2315 e7e18005 istore 3 ,contw +2316 583c0927 setarg 0x3c0927 +2317 e7e18005 istore 3 ,contw +2318 70486601 jam 1 ,mem_24g_ch_map_update +2319 20600000 rtn + +g24_rx_window_init: +231a d8407530 arg 0x7530 ,temp +231b c513a320 bmark1 mark_24g_rxmode ,g24_rx_window_store +231c d84012c0 arg 0x12c0 ,temp +231d 6fe0c864 fetch 1 ,mem_24g_rx_phy +231e c3012320 bbit0 2 ,g24_rx_window_store +231f d8402ee0 arg 0x2ee0 ,temp + +g24_rx_window_store: +2320 60494838 storet 2 ,mem_24g_rx_window +2321 20600000 rtn + +g24_enable_1m: +2322 70486401 jam 0x01 ,mem_24g_rx_phy +2323 70486501 jam 0x01 ,mem_24g_tx_phy +2324 20600000 rtn + +g24_pair_param_init: +2325 70487b4e jam 0x4e ,mem_24g_pair_ch +2326 58101520 setarg 0x101520 +2327 67e1c877 store 3 ,mem_24g_pair_addr +2328 58000005 setarg 0x05 +2329 e7e08005 istore 1 ,contw +232a 20600000 rtn + +g24_pair_timeout_timer: +232b da604883 arg mem_24g_pair_timeout ,regc +232c da40267c arg g24_stop_24g_mode ,regb +232d 20203191 branch timer_single_step_2b + +g24_pair_start: +232e 79200026 set1 mark_24g ,mark +232f 6fe0c8a1 fetch 1 ,mem_24g_conn_sm +2330 793ffe02 set0 state_24g_reconn ,pdata +2331 79207e01 set1 state_24g_pair ,pdata +2332 67e0c8a1 store 1 ,mem_24g_conn_sm +2333 58000000 setarg 0 +2334 67e14887 store 2 ,mem_24g_reconn_timeout +2335 6fe14881 fetch 2 ,mem_24g_pair_timeout_init +2336 67e14883 store 2 ,mem_24g_pair_timeout +2337 70488000 jam 0 ,mem_24g_pair_no_ack +2338 2040236c call g24_pair_sm_reinit + +g24_pair_init_param: +2339 70482b00 jam 0 ,mem_24g_pid +233a 6fe0c87b fetch 1 ,mem_24g_pair_ch +233b 67e0c83a store 1 ,mem_24g_ch +233c 6fe0c87c fetch 1 ,mem_24g_pair_tx_power +233d 67e0c1e8 store 1 ,mem_tx_power +233e 6fe24877 fetch 4 ,mem_24g_pair_addr +233f 202022dc branch g24_update_addr_and_synccrc8 + +g24_pair_dispatch: +2340 4771403c bpatchx patch3c_2 ,mem_patch3c +2341 6fe0c87f fetch 1 ,mem_24g_pair_sm +2342 c07fa38e beq state_24g_pairing_success ,g24_pair_exit +2343 c000a348 beq state_24g_pairing_1 ,g24_pair_sm_1 +2344 c001234a beq state_24g_pairing_2 ,g24_pair_sm_2 +2345 c001a350 beq state_24g_pairing_3 ,g24_pair_sm_3 +2346 c0022356 beq state_24g_pairing_4 ,g24_pair_sm_4 +2347 20600000 rtn + +g24_pair_sm_1: +2348 7047c6ff jam datatype_attemp ,mem_24g_txbuf +2349 20202357 branch g24_pair_sm_prep + +g24_pair_sm_2: +234a 6fe0c85b fetch 1 ,mem_24g_pair_switch +234b 203a234e branch g24_pair_sm_2_skip ,blank +234c 6fe248a9 fetch 4 ,mem_24g_device_addr +234d 204022dc call g24_update_addr_and_synccrc8 + +g24_pair_sm_2_skip: +234e 7047c6aa jam datatype_bind ,mem_24g_txbuf +234f 20202357 branch g24_pair_sm_prep + +g24_pair_sm_3: +2350 7047c655 jam datatype_config ,mem_24g_txbuf +2351 6fe0c85b fetch 1 ,mem_24g_pair_switch +2352 203a2357 branch g24_pair_sm_prep ,blank +2353 6fe24891 fetch 4 ,mem_24g_receiver_addr +2354 67e247c8 store 4 ,mem_24g_txbuf + 2 +2355 20202359 branch g24_pair_sm_common + +g24_pair_sm_4: +2356 7047c622 jam datatype_ok ,mem_24g_txbuf + +g24_pair_sm_prep: +2357 6fe248a9 fetch 4 ,mem_24g_device_addr +2358 67e247c8 store 4 ,mem_24g_txbuf + 2 + +g24_pair_sm_common: +2359 6fe0c836 fetch 1 ,mem_24g_data_type +235a 1fe17e07 and_into bits_data ,pdata +235b 67e0c7c7 store 1 ,mem_24g_txbuf + 1 +235c 7047cc00 jam 0 ,mem_24g_txbuf + 6 +235d 70483507 jam 7 ,mem_24g_datalen +235e 20402291 call g24_transmit_prep +235f 2040265b call g24_transmit_receive_ack +2360 246c0000 nrtn sync +2361 24778000 nrtn user3 +2362 20402597 call g24_txbuf_clear +2363 20402672 call g24_ackpayload_parse +2364 4771c03c bpatchx patch3c_3 ,mem_patch3c +2365 6fe0c87f fetch 1 ,mem_24g_pair_sm +2366 c17f8000 rtneq state_24g_pairing_success +2367 c000a371 beq state_24g_pairing_1 ,g24_pair_sm_1_waiting_ack +2368 c0012373 beq state_24g_pairing_2 ,g24_pair_sm_2_waiting_ack +2369 c001a379 beq state_24g_pairing_3 ,g24_pair_sm_3_waiting_ack +236a c0022381 beq state_24g_pairing_4 ,g24_pair_sm_4_waiting_ack +236b 20600000 rtn + +g24_pair_sm_reinit: +236c 70487f02 jam state_24g_pairing_2 ,mem_24g_pair_sm +236d 6fe0c85b fetch 1 ,mem_24g_pair_switch +236e 207a0000 rtn blank +236f 70487f01 jam state_24g_pairing_1 ,mem_24g_pair_sm +2370 20600000 rtn + +g24_pair_sm_1_waiting_ack: +2371 70487f02 jam state_24g_pairing_2 ,mem_24g_pair_sm +2372 20202657 branch g24_transmit_abandon + +g24_pair_sm_2_waiting_ack: +2373 6fe0c85b fetch 1 ,mem_24g_pair_switch +2374 203a2377 branch g24_pair_sm_2_waiting_ack_skip ,blank +2375 6fe2480c fetch 4 ,mem_24g_rxpayload + 2 +2376 67e24891 store 4 ,mem_24g_receiver_addr + +g24_pair_sm_2_waiting_ack_skip: +2377 70487f03 jam state_24g_pairing_3 ,mem_24g_pair_sm +2378 20202657 branch g24_transmit_abandon + +g24_pair_sm_3_waiting_ack: +2379 6fe0c85b fetch 1 ,mem_24g_pair_switch +237a 203a237f branch g24_pair_sm_3_waiting_ack_skip ,blank +237b 6fe2480c fetch 4 ,mem_24g_rxpayload + 2 +237c 684a48a9 fetcht 4 ,mem_24g_device_addr +237d 98467c00 isub temp ,null +237e 24628000 nrtn zero + +g24_pair_sm_3_waiting_ack_skip: +237f 70487f04 jam state_24g_pairing_4 ,mem_24g_pair_sm +2380 20202657 branch g24_transmit_abandon + +g24_pair_sm_4_waiting_ack: +2381 6fe0c85b fetch 1 ,mem_24g_pair_switch +2382 203a2387 branch g24_pair_sm_4_waiting_ack_skip ,blank +2383 6fe2480c fetch 4 ,mem_24g_rxpayload + 2 +2384 684a4891 fetcht 4 ,mem_24g_receiver_addr +2385 98467c00 isub temp ,null +2386 24628000 nrtn zero + +g24_pair_sm_4_waiting_ack_skip: +2387 70487fff jam state_24g_pairing_success ,mem_24g_pair_sm +2388 70095b39 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +2389 20407871 call ui_ipc_send_event +238a 58000000 setarg 0 +238b 67e14883 store 2 ,mem_24g_pair_timeout +238c 6fe2480c fetch 4 ,mem_24g_rxpayload + 2 +238d 204022dc call g24_update_addr_and_synccrc8 + +g24_pair_exit: +238e 6fe0c8a1 fetch 1 ,mem_24g_conn_sm +238f 793ffe01 set0 state_24g_pair ,pdata +2390 67e0c8a1 store 1 ,mem_24g_conn_sm +2391 20202657 branch g24_transmit_abandon + +g24_bind_mode_enable: +2392 7048bf01 jam dongle_bind ,mem_24g_work_mode +2393 7048be00 jam clear_init ,mem_24g_mode_init +2394 20600000 rtn + +g24_bind_init: +2395 6fe0c8be fetch 1 ,mem_24g_mode_init +2396 c3808000 rtnbit1 dongle_bind +2397 79207e01 set1 dongle_bind ,pdata +2398 67e0c8be store 1 ,mem_24g_mode_init +2399 58000000 setarg 0 +239a 67e1c87e store 3 ,mem_24g_device1_bind_step +239b 67e248cd store 4 ,mem_24g_transmitter_addr +239c 7048ba01 jam 1 ,mem_24g_ackpayload_enable +239d 20202339 branch g24_pair_init_param + +g24_bind_ackpayload_prep: +239e 7048ba01 jam 1 ,mem_24g_ackpayload_enable +239f 70483508 jam 0x08 ,mem_24g_datalen +23a0 d8c04881 arg mem_24g_bind_payload ,contr +23a1 d8a047c6 arg mem_24g_txbuf ,contw +23a2 20207d06 branch memcpy8 + +g24_bind_data_process: +23a3 20402427 call g24_rx_interrupt_clear +23a4 204021db call g24_receive_packet +23a5 2437a427 nbranch g24_rx_interrupt_clear ,user3 +23a6 204023b0 call g24_bind_data_parse +23a7 243423ae nbranch g24_bind_data_error ,user +23a8 20402455 call g24_transmit_ack +23a9 6fe0c85b fetch 1 ,mem_24g_pair_switch +23aa 207a0000 rtn blank +23ab 6fe248cd fetch 4 ,mem_24g_transmitter_addr +23ac 207a0000 rtn blank +23ad 202022dc branch g24_update_addr_and_synccrc8 + +g24_bind_data_error: +23ae 20402427 call g24_rx_interrupt_clear +23af 2020223f branch g24_end_of_packet + +g24_bind_data_parse: +23b0 7048cb05 jam bind_mode_continue ,mem_24g_bind_mode_continue +23b1 20407e56 call disable_user +23b2 d8c047a4 arg mem_24g_rxbuf ,contr +23b3 d8a04891 arg mem_24g_rxdata_temp ,contw +23b4 20407d06 call memcpy8 +23b5 4772403c bpatchx patch3c_4 ,mem_patch3c +23b6 6fe0c893 fetch 1 ,mem_24g_rxdata_temp + 2 +23b7 c05523bc beq datatype_bind ,g24_bind_first_step +23b8 c02aa3c9 beq datatype_config ,g24_bind_second_step +23b9 c01123e6 beq datatype_ok ,g24_bind_third_step +23ba c07fa5b5 beq datatype_attemp ,g24_data_attemp +23bb 20202427 branch g24_rx_interrupt_clear + +g24_bind_first_step: +23bc 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +23bd c000a3c0 beq datatype_device1 ,g24_bind_first_step_device1 +23be c00123c6 beq datatype_device2 ,g24_bind_first_step_device2 +23bf 20600000 rtn + +g24_bind_first_step_device1: +23c0 70487e01 jam 1 ,mem_24g_device1_bind_step + +g24_bind_dvc1_payload_cfg: +23c1 70488101 jam datatype_device1 ,mem_24g_bind_payload + +g24_bind_payload_cfg: +23c2 70488280 jam 0x80 ,mem_24g_bind_payload + 1 +23c3 6fe340a8 fetch 6 ,mem_lap +23c4 67e34883 store 6 ,mem_24g_bind_payload + 2 +23c5 20207e54 branch enable_user + +g24_bind_first_step_device2: +23c6 70487f01 jam 1 ,mem_24g_device2_bind_step + +g24_bind_dvc2_payload_cfg: +23c7 70488102 jam datatype_device2 ,mem_24g_bind_payload +23c8 202023c2 branch g24_bind_payload_cfg + +g24_bind_second_step: +23c9 6fe0c85b fetch 1 ,mem_24g_pair_switch +23ca 203a23cf branch g24_bind_second_step_skip ,blank +23cb 6fe24895 fetch 4 ,mem_24g_rxdata_temp + 4 +23cc 684a40a8 fetcht 4 ,mem_lap +23cd 98467c00 isub temp ,null +23ce 24628000 nrtn zero + +g24_bind_second_step_skip: +23cf 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +23d0 c000a3d3 beq datatype_device1 ,g24_bind_second_step_device1 +23d1 c00123de beq datatype_device2 ,g24_bind_second_step_device2 +23d2 20600000 rtn + +g24_bind_second_step_device1: +23d3 6fe0c87e fetch 1 ,mem_24g_device1_bind_step +23d4 c000a3d6 beq 1 ,g24_bind_dvc1_step_set2 +23d5 20600000 rtn + +g24_bind_dvc1_step_set2: +23d6 70487e02 jam 2 ,mem_24g_device1_bind_step +23d7 6fe0c85b fetch 1 ,mem_24g_pair_switch +23d8 203a23c1 branch g24_bind_dvc1_payload_cfg ,blank + +g24_bind_dvc1_payload_cfg_transmitter_addr: +23d9 70488101 jam datatype_device1 ,mem_24g_bind_payload + +g24_bind_payload_cfg_transmitter_addr: +23da 70488280 jam 0x80 ,mem_24g_bind_payload + 1 +23db 6fe248cd fetch 4 ,mem_24g_transmitter_addr +23dc 67e24883 store 4 ,mem_24g_bind_payload + 2 +23dd 20207e54 branch enable_user + +g24_bind_second_step_device2: +23de 6fe0c87f fetch 1 ,mem_24g_device2_bind_step +23df c000a3e1 beq 1 ,g24_bind_dvc2_step_set2 +23e0 20600000 rtn + +g24_bind_dvc2_step_set2: +23e1 70487f02 jam 2 ,mem_24g_device2_bind_step +23e2 6fe0c85b fetch 1 ,mem_24g_pair_switch +23e3 203a23c7 branch g24_bind_dvc2_payload_cfg ,blank +23e4 70488102 jam datatype_device2 ,mem_24g_bind_payload +23e5 202023da branch g24_bind_payload_cfg_transmitter_addr + +g24_bind_third_step: +23e6 6fe0c85b fetch 1 ,mem_24g_pair_switch +23e7 203a23ec branch g24_bind_third_step_skip ,blank +23e8 6fe24895 fetch 4 ,mem_24g_rxdata_temp + 4 +23e9 684a48cd fetcht 4 ,mem_24g_transmitter_addr +23ea 98467c00 isub temp ,null +23eb 24628000 nrtn zero + +g24_bind_third_step_skip: +23ec 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +23ed c000a3f0 beq datatype_device1 ,g24_bind_third_step_device1 +23ee c00123fa beq datatype_device2 ,g24_bind_third_step_device2 +23ef 20600000 rtn + +g24_bind_third_step_device1: +23f0 6fe0c87e fetch 1 ,mem_24g_device1_bind_step +23f1 c00123f3 beq 2 ,g24_bind_dvc1_step_success +23f2 20600000 rtn + +g24_bind_dvc1_step_success: +23f3 204023c1 call g24_bind_dvc1_payload_cfg +23f4 6fe0c880 fetch 1 ,mem_24g_bind_device_status +23f5 1fe1fe01 or_into 0x01 ,pdata +23f6 67e0c880 store 1 ,mem_24g_bind_device_status + +g24_bind_exit: +23f7 58000000 setarg 0 +23f8 67e1487e store 2 ,mem_24g_device1_bind_step +23f9 20600000 rtn + +g24_bind_third_step_device2: +23fa 6fe0c87f fetch 1 ,mem_24g_device2_bind_step +23fb c08023fd bne 0 ,g24_bind_dvc2_step_success +23fc 20600000 rtn + +g24_bind_dvc2_step_success: +23fd 204023c7 call g24_bind_dvc2_payload_cfg +23fe 6fe0c880 fetch 1 ,mem_24g_bind_device_status +23ff 1fe1fe02 or_into 0x02 ,pdata +2400 67e0c880 store 1 ,mem_24g_bind_device_status +2401 204023f7 call g24_bind_exit + +g24_store_dvc2_bind_flag: +2402 6fe0c09a fetch 1 ,mem_device_option +2403 c1820000 rtnne dvc_op_dongle +2404 6fe0c8e9 fetch 1 ,mem_dg_kb_bind_flag +2405 c12d8000 rtneq dongle_kb_bind_success +2406 7048e95b jam dongle_kb_bind_success ,mem_dg_kb_bind_flag +2407 20403657 call dongle_write_kb_bind_status +2408 20205d8c branch soft_reset_chip + +g24_receive_init: +2409 79200027 set1 mark_24g_rxmode ,mark +240a 6fe0c1e8 fetch 1 ,mem_tx_power +240b 67e0c8cc store 1 ,mem_tx_power_temp +240c 2040231a call g24_rx_window_init +240d 202025ed branch rssi_receiver_buff_init + +g24_receive_dispatch: +240e 6fe14889 fetch 2 ,mem_cb_24g_receive_process +240f 20207e05 branch callback_func + +g24_ackpayload_prep: +2410 70483500 jam 0 ,mem_24g_datalen +2411 6fe0c8ba fetch 1 ,mem_24g_ackpayload_enable +2412 207a0000 rtn blank +2413 6fe1488b fetch 2 ,mem_cb_24g_ackpayload +2414 20207e05 branch callback_func + +g24_receive_packet_start: +2415 20402452 call g24_receive_transmit_ack +2416 2437a427 nbranch g24_rx_interrupt_clear ,user3 + +g24_receive_packet_parse: +2417 20402444 call g24_receive_packet_parse_pid_crc +2418 24342427 nbranch g24_rx_interrupt_clear ,user +2419 6fe0c82a fetch 1 ,mem_24g_rxdata_length +241a 203a2427 branch g24_rx_interrupt_clear ,blank +241b 1fe0fe02 increase 2 ,pdata +241c 98007200 iforce loopcnt +241d d8c047a4 arg mem_24g_rxbuf ,contr +241e d8a04891 arg mem_24g_rxdata_temp ,contw +241f 20407d5f call memcpy +2420 7048bc00 jam 0 ,mem_24g_mode_switch +2421 6fe0c8b9 fetch 1 ,mem_24g_pair_mode +2422 205a245f call g24_enable_nodata_timer ,blank +2423 6fe0c893 fetch 1 ,mem_24g_rxdata_temp + 2 +2424 c000a42a beq datatype_device1 ,g24_data_device1 +2425 c0012438 beq datatype_device2 ,g24_data_device2 +2426 c07fa5b5 beq datatype_attemp ,g24_data_attemp + +g24_rx_interrupt_clear: +2427 d8a047a4 arg mem_24g_rxbuf ,contw +2428 df200042 arg 66 ,loopcnt +2429 20207d26 branch clear_mem + +g24_data_device1: +242a 20402553 call g24_ch_timer_reinit +242b 6fe0c8b3 fetch 1 ,mem_24g_abort_packet +242c 6848c891 fetcht 1 ,mem_24g_rxdata_temp +242d 284ffe03 isolate1 bit_abort ,temp +242e 7920fe00 setflag true ,0 ,pdata +242f 67e0c8b3 store 1 ,mem_24g_abort_packet +2430 c000a43d beq 1 ,g24_data_attemp_device1_abort +2431 6fe0c8bb fetch 1 ,mem_24g_hop_packet +2432 6848c891 fetcht 1 ,mem_24g_rxdata_temp +2433 284ffe04 isolate1 bit_hop ,temp +2434 7920fe00 setflag true ,0 ,pdata +2435 67e0c8bb store 1 ,mem_24g_hop_packet +2436 6fe1488d fetch 2 ,mem_cb_24g_data_device1 +2437 20207e05 branch callback_func + +g24_data_device2: +2438 6848c891 fetcht 1 ,mem_24g_rxdata_temp +2439 284ffe03 isolate1 bit_abort ,temp +243a 2020a442 branch g24_data_attemp_device2_abort ,true +243b 6fe1488f fetch 2 ,mem_cb_24g_data_device2 +243c 20207e05 branch callback_func + +g24_data_attemp_device1_abort: +243d 6fe0c09a fetch 1 ,mem_device_option +243e 1fe67c0e sub pdata ,dvc_op_car ,null +243f 2042b476 call car_stop_blink ,zero +2440 6fe2489b fetch 4 ,mem_24g_rxdata_temp + 10 +2441 202025bc branch g24_store_device1_addr + +g24_data_attemp_device2_abort: +2442 6fe2489b fetch 4 ,mem_24g_rxdata_temp + 10 +2443 202025c1 branch g24_store_device2_addr + +g24_receive_packet_parse_pid_crc: +2444 20407e56 call disable_user +2445 6fe0c833 fetch 1 ,mem_24g_sta_pid +2446 6848c834 fetcht 1 ,mem_24g_last_pid +2447 98467c00 isub temp ,null +2448 2442fe54 ncall enable_user ,zero +2449 6fe0c833 fetch 1 ,mem_24g_sta_pid +244a 67e0c834 store 1 ,mem_24g_last_pid +244b 6fe1c82d fetch 3 ,mem_24g_sta_crc +244c 6849c830 fetcht 3 ,mem_24g_last_crc +244d 98467c00 isub temp ,null +244e 2442fe54 ncall enable_user ,zero +244f 6fe1c82d fetch 3 ,mem_24g_sta_crc +2450 67e1c830 store 3 ,mem_24g_last_crc +2451 20600000 rtn + +g24_receive_transmit_ack: +2452 20402427 call g24_rx_interrupt_clear +2453 204021db call g24_receive_packet +2454 24778000 nrtn user3 + +g24_transmit_ack: +2455 6fe0c7a4 fetch 1 ,mem_24g_rxbuf +2456 67e0c836 store 1 ,mem_24g_data_type +2457 204022be call g24_read_len_pid_crc +2458 6fe0c7a5 fetch 1 ,mem_24g_rxbuf + 1 +2459 2feffe00 isolate1 bit_ack_24g ,pdata +245a 2020a45e branch g24tx_no_ack ,true + +g24tx_with_ack: +245b 20402410 call g24_ackpayload_prep +245c 20402291 call g24_transmit_prep +245d 20402246 call g24_transmit + +g24tx_no_ack: +245e 2020223f branch g24_end_of_packet + +g24_enable_nodata_timer: +245f 7048bd01 jam 1 ,mem_24g_nodata_timer_enable + +g24_enable_nodata_timer_init: +2460 58000280 setarg timer_nodata_delay +2461 d8e00008 arg timer_nodata ,queue +2462 20207d66 branch timer_init + +g24_mode_switch_init: +2463 7048bc01 jam 1 ,mem_24g_mode_switch +2464 7048c000 jam 0 ,mem_24g_time_slice +2465 704854ff jam 0xff ,mem_24g_interval +2466 202022fc branch g24_timer_init + +g24_mode_switch: +2467 4772c03c bpatchx patch3c_5 ,mem_patch3c +2468 6fe0c8bc fetch 1 ,mem_24g_mode_switch +2469 207a0000 rtn blank +246a 204022ea call g24_timer_check +246b 24740000 nrtn user +246c 20402474 call g24_bind_mode_continue +246d 6fe0c8c0 fetch 1 ,mem_24g_time_slice +246e 1fe0fe01 increase 1 ,pdata +246f 1fe17e01 and_into 1 ,pdata +2470 67e0c8c0 store 1 ,mem_24g_time_slice +2471 c0002479 beq 0 ,g24_work_mode_switch +2472 c000a47c beq 1 ,g24_bind_mode_switch +2473 20600000 rtn + +g24_bind_mode_continue: +2474 6fe0c8cb fetch 1 ,mem_24g_bind_mode_continue +2475 207a0000 rtn blank +2476 1fe0ffff increase -1 ,pdata +2477 67e0c8cb store 1 ,mem_24g_bind_mode_continue +2478 20600000 rtn + +g24_work_mode_switch: +2479 6fe0c8cb fetch 1 ,mem_24g_bind_mode_continue +247a 247a0000 nrtn blank +247b 2020248d branch g24_switch_work_mode + +g24_bind_mode_switch: +247c 6fe0c8cb fetch 1 ,mem_24g_bind_mode_continue +247d 247a0000 nrtn blank +247e 20202392 branch g24_bind_mode_enable + +g24_work_init: +247f 6fe0c8be fetch 1 ,mem_24g_mode_init +2480 c3800000 rtnbit1 dongle_work +2481 79207e00 set1 dongle_work ,pdata +2482 67e0c8be store 1 ,mem_24g_mode_init +2483 6fe0c8cc fetch 1 ,mem_tx_power_temp +2484 67e0c1e8 store 1 ,mem_tx_power +2485 7048ba00 jam 0 ,mem_24g_ackpayload_enable +2486 700bf900 jam 0 ,mem_usb_tx_enable +2487 7048b301 jam 1 ,mem_24g_abort_packet +2488 70482b00 jam 0 ,mem_24g_pid +2489 6fe240a8 fetch 4 ,mem_lap +248a 204022dc call g24_update_addr_and_synccrc8 +248b 204022cb call g24_ch +248c 20202427 branch g24_rx_interrupt_clear + +g24_switch_work_mode: +248d 7048ba00 jam 0 ,mem_24g_ackpayload_enable + +g24_work_mode_enable: +248e 7048bf00 jam dongle_work ,mem_24g_work_mode +248f 7048be00 jam clear_init ,mem_24g_mode_init +2490 20600000 rtn + +g24_work_mode_start: +2491 6fe0c8bf fetch 1 ,mem_24g_work_mode +2492 c1800000 rtnne dongle_work +2493 2040247f call g24_work_init +2494 2040253e call g24_ch_process +2495 20202415 branch g24_receive_packet_start + +g24_bind_mode_auto: +2496 4773403c bpatchx patch3c_6 ,mem_patch3c +2497 6fe0c8bf fetch 1 ,mem_24g_work_mode +2498 c1808000 rtnne dongle_bind +2499 20402395 call g24_bind_init +249a 204023a3 call g24_bind_data_process +249b 6fe0c8b9 fetch 1 ,mem_24g_pair_mode +249c 247a0000 nrtn blank +249d 6fe0c880 fetch 1 ,mem_24g_bind_device_status +249e 207a0000 rtn blank +249f 7048bc00 jam 0 ,mem_24g_mode_switch +24a0 2040248d call g24_switch_work_mode +24a1 2040245f call g24_enable_nodata_timer +24a2 202022fc branch g24_timer_init + +g24_search_mode_init: +24a3 6fe0c8be fetch 1 ,mem_24g_mode_init +24a4 c3838000 rtnbit1 dongle_search +24a5 79207e07 set1 dongle_search ,pdata +24a6 67e0c8be store 1 ,mem_24g_mode_init +24a7 7048c000 jam 0 ,mem_24g_time_slice +24a8 7048ba01 jam 1 ,mem_24g_ackpayload_enable +24a9 58000000 setarg 0 +24aa 67e1c8de store 3 ,mem_rssi_noise_self_index +24ab 67e3c8c3 store 7 ,mem_24g_self_config_ch_once +24ac 2040252e call g24_receiver_addr_check +24ad 24628000 nrtn zero +24ae 6fe0c83b fetch 1 ,mem_24g_current_ch_number +24af 67e0c8c2 store 1 ,mem_24g_self_ch_number +24b0 6fe0c83a fetch 1 ,mem_24g_ch +24b1 67e0c8c1 store 1 ,mem_24g_self_last_ch +24b2 20600000 rtn + +g24_search_mode_auto: +24b3 4773c03c bpatchx patch3c_7 ,mem_patch3c +24b4 6fe0c8bf fetch 1 ,mem_24g_work_mode +24b5 c1838000 rtnne dongle_search +24b6 204024a3 call g24_search_mode_init +24b7 204024d7 call g24_auto_addr_ch_search +24b8 20402452 call g24_receive_transmit_ack +24b9 2437a427 nbranch g24_rx_interrupt_clear ,user3 +24ba 2040252e call g24_receiver_addr_check +24bb 2042a417 call g24_receive_packet_parse ,zero +24bc 7048bf00 jam dongle_work ,mem_24g_work_mode +24bd 6fe0c8be fetch 1 ,mem_24g_mode_init +24be 79207e00 set1 dongle_work ,pdata +24bf 67e0c8be store 1 ,mem_24g_mode_init +24c0 6fe0c8ba fetch 1 ,mem_24g_ackpayload_enable +24c1 1fe67c02 sub pdata ,2 ,null +24c2 2442a52c ncall g24_ackpayload_disable ,zero +24c3 20402427 call g24_rx_interrupt_clear +24c4 2040245f call g24_enable_nodata_timer +24c5 2040252e call g24_receiver_addr_check +24c6 2022a4d0 branch g24_self_ch_num_reinit ,zero +24c7 6fe2483c fetch 4 ,mem_24g_addr +24c8 684a48d5 fetcht 4 ,mem_24g_device2_addr +24c9 98467c00 isub temp ,null +24ca 2022a4d3 branch g24_device2_ch_num_reinit ,zero +24cb 6fe2483c fetch 4 ,mem_24g_addr +24cc 684a48d1 fetcht 4 ,mem_24g_device1_addr +24cd 98467c00 isub temp ,null +24ce 2022a4d5 branch g24_device1_ch_num_reinit ,zero +24cf 20600000 rtn + +g24_self_ch_num_reinit: +24d0 6fe0c8c2 fetch 1 ,mem_24g_self_ch_number + +g24_current_ch_num_reinit: +24d1 67e0c83b store 1 ,mem_24g_current_ch_number +24d2 20600000 rtn + +g24_device2_ch_num_reinit: +24d3 6fe0c8c8 fetch 1 ,mem_24g_device2_ch_number +24d4 202024d1 branch g24_current_ch_num_reinit + +g24_device1_ch_num_reinit: +24d5 6fe0c8c5 fetch 1 ,mem_24g_device1_ch_number +24d6 202024d1 branch g24_current_ch_num_reinit + +g24_auto_addr_ch_search: +24d7 6fe0c8c0 fetch 1 ,mem_24g_time_slice +24d8 1fe0fe01 increase 1 ,pdata +24d9 1fe17e03 and_into 3 ,pdata +24da 67e0c8c0 store 1 ,mem_24g_time_slice +24db c00024fa beq 0 ,g24_auto_bind_config_device2 +24dc c000a514 beq 1 ,g24_auto_bind_config_self +24dd c00124e0 beq 2 ,g24_auto_bind_config_device1 +24de c001a514 beq 3 ,g24_auto_bind_config_self +24df 20600000 rtn + +g24_auto_bind_config_device1: +24e0 204023c1 call g24_bind_dvc1_payload_cfg +24e1 6fe248d1 fetch 4 ,mem_24g_device1_addr +24e2 203a24d7 branch g24_auto_addr_ch_search ,blank +24e3 204022dc call g24_update_addr_and_synccrc8 +24e4 6fe0c8c6 fetch 1 ,mem_24g_device1_config_ch_once +24e5 205a24f5 call g24_device1_config_ch_once ,blank +24e6 6fe0c8c4 fetch 1 ,mem_24g_device1_last_ch +24e7 67e0c83a store 1 ,mem_24g_ch +24e8 6848c8df fetcht 1 ,mem_rssi_noise_device1_index +24e9 6a2148e5 fetchr rega ,2 ,mem_rssi_noise_device1_buffer_ptr +24ea 204025c3 call rssi_store +24eb 6048c8df storet 1 ,mem_rssi_noise_device1_index +24ec 204025cb call rssi_average +24ed 6048c8dc storet 1 ,mem_rssi_noise_device1_avg +24ee 18467c50 sub temp ,rssi_thresh_noise ,null +24ef 24610000 nrtn positive +24f0 6848c8c5 fetcht 1 ,mem_24g_device1_ch_number +24f1 204022cf call g24_ch_map_size +24f2 6048c8c5 storet 1 ,mem_24g_device1_ch_number +24f3 67e0c8c4 store 1 ,mem_24g_device1_last_ch +24f4 20600000 rtn + +g24_device1_config_ch_once: +24f5 7048c601 jam 1 ,mem_24g_device1_config_ch_once +24f6 d8400000 arg 0 ,temp +24f7 204022d3 call g24_ch_calc +24f8 67e0c8c4 store 1 ,mem_24g_device1_last_ch +24f9 20600000 rtn + +g24_auto_bind_config_device2: +24fa 204023c7 call g24_bind_dvc2_payload_cfg +24fb 6fe248d5 fetch 4 ,mem_24g_device2_addr +24fc 203a24d7 branch g24_auto_addr_ch_search ,blank +24fd 204022dc call g24_update_addr_and_synccrc8 +24fe 6fe0c8c9 fetch 1 ,mem_24g_device2_config_ch_once +24ff 205a250f call g24_device2_config_ch_once ,blank +2500 6fe0c8c7 fetch 1 ,mem_24g_device2_last_ch +2501 67e0c83a store 1 ,mem_24g_ch +2502 6848c8e0 fetcht 1 ,mem_rssi_noise_device2_index +2503 6a2148e7 fetchr rega ,2 ,mem_rssi_noise_device2_buffer_ptr +2504 204025c3 call rssi_store +2505 6048c8e0 storet 1 ,mem_rssi_noise_device2_index +2506 204025cb call rssi_average +2507 6048c8dd storet 1 ,mem_rssi_noise_device2_avg +2508 18467c50 sub temp ,rssi_thresh_noise ,null +2509 24610000 nrtn positive +250a 6848c8c8 fetcht 1 ,mem_24g_device2_ch_number +250b 204022cf call g24_ch_map_size +250c 6048c8c8 storet 1 ,mem_24g_device2_ch_number +250d 67e0c8c7 store 1 ,mem_24g_device2_last_ch +250e 20600000 rtn + +g24_device2_config_ch_once: +250f 7048c901 jam 1 ,mem_24g_device2_config_ch_once +2510 d8400000 arg 0 ,temp +2511 204022d3 call g24_ch_calc +2512 67e0c8c7 store 1 ,mem_24g_device2_last_ch +2513 20600000 rtn + +g24_auto_bind_config_self: +2514 204023c1 call g24_bind_dvc1_payload_cfg +2515 6fe240a8 fetch 4 ,mem_lap +2516 204022dc call g24_update_addr_and_synccrc8 +2517 6fe0c8c3 fetch 1 ,mem_24g_self_config_ch_once +2518 205a2528 call g24_self_config_ch_once ,blank +2519 6fe0c8c1 fetch 1 ,mem_24g_self_last_ch +251a 67e0c83a store 1 ,mem_24g_ch +251b 6848c8de fetcht 1 ,mem_rssi_noise_self_index +251c 6a2148e3 fetchr rega ,2 ,mem_rssi_noise_self_buffer_ptr +251d 204025c3 call rssi_store +251e 6048c8de storet 1 ,mem_rssi_noise_self_index +251f 204025cb call rssi_average +2520 6048c8db storet 1 ,mem_rssi_noise_self_avg +2521 18467c50 sub temp ,rssi_thresh_noise ,null +2522 24610000 nrtn positive +2523 6848c8c2 fetcht 1 ,mem_24g_self_ch_number +2524 204022cf call g24_ch_map_size +2525 6048c8c2 storet 1 ,mem_24g_self_ch_number +2526 67e0c8c1 store 1 ,mem_24g_self_last_ch +2527 20600000 rtn + +g24_self_config_ch_once: +2528 7048c301 jam 1 ,mem_24g_self_config_ch_once +2529 6fe0c8c1 fetch 1 ,mem_24g_self_last_ch +252a 67e0c83a store 1 ,mem_24g_ch +252b 20600000 rtn + +g24_ackpayload_disable: +252c 7048ba00 jam 0 ,mem_24g_ackpayload_enable +252d 20600000 rtn + +g24_receiver_addr_check: +252e 6fe2483c fetch 4 ,mem_24g_addr +252f 684a40a8 fetcht 4 ,mem_lap +2530 98467c00 isub temp ,null +2531 20600000 rtn + +g24_nodata_process: +2532 6fe0c8ba fetch 1 ,mem_24g_ackpayload_enable +2533 c1010000 rtneq 2 +2534 6fe0c8bd fetch 1 ,mem_24g_nodata_timer_enable +2535 207a0000 rtn blank +2536 d8e00008 arg timer_nodata ,queue +2537 20407d74 call timer_check +2538 247a0000 nrtn blank +2539 7048bd00 jam 0 ,mem_24g_nodata_timer_enable +253a 7048cb00 jam 0 ,mem_24g_bind_mode_continue +253b 7048bf07 jam dongle_search ,mem_24g_work_mode +253c 7048be00 jam clear_init ,mem_24g_mode_init +253d 20202427 branch g24_rx_interrupt_clear + +g24_ch_process: +253e 6fe0c8b3 fetch 1 ,mem_24g_abort_packet +253f c000a601 beq 1 ,rssi_noise_monitor +2540 6fe0c8bb fetch 1 ,mem_24g_hop_packet +2541 c000a551 beq 1 ,g24_ch_receive_hop_pac +2542 684a48b4 fetcht 4 ,mem_24g_hop_btclk +2543 1c427e00 copy clkn_bt ,pdata +2544 98467c00 isub temp ,null +2545 244122f9 ncall g24_timer_timeout ,positive +2546 1fe22400 copy pdata ,regb +2547 6fe248b4 fetch 4 ,mem_24g_hop_btclk +2548 6848c8b8 fetcht 1 ,mem_24g_hop_interval +2549 98408400 iadd temp ,temp +254a 1a427e00 copy regb ,pdata +254b 98467c00 isub temp ,null +254c 24610000 nrtn positive +254d 793ffe1c set0 28 ,pdata +254e 67e248b4 store 4 ,mem_24g_hop_btclk +254f 7048b301 jam 1 ,mem_24g_abort_packet +2550 202022cb branch g24_ch + +g24_ch_receive_hop_pac: +2551 7048bb00 jam 0 ,mem_24g_hop_packet +2552 202022cb branch g24_ch + +g24_ch_timer_reinit: +2553 1c427e00 copy clkn_bt ,pdata +2554 67e248b4 store 4 ,mem_24g_hop_btclk +2555 20600000 rtn + +g24_reconn_timeout_timer: +2556 da604887 arg mem_24g_reconn_timeout ,regc +2557 da40267c arg g24_stop_24g_mode ,regb +2558 20203191 branch timer_single_step_2b + +g24_reconn_start: +2559 4774403d bpatchx patch3d_0 ,mem_patch3d +255a 79200026 set1 mark_24g ,mark +255b 6fe0c8a1 fetch 1 ,mem_24g_conn_sm +255c 793ffe01 set0 state_24g_pair ,pdata +255d 79207e02 set1 state_24g_reconn ,pdata +255e 67e0c8a1 store 1 ,mem_24g_conn_sm +255f 6fe0c88c fetch 1 ,mem_24g_fast_conn_enable +2560 203a256e branch g24_reconn_receiver_addr ,blank +2561 6fe0c88b fetch 1 ,mem_24g_reconn_type +2562 c000a566 beq fast_conn_and_receiver ,g24_reconn_fast_conn +2563 c0012566 beq fast_conn_and_3_0_addr ,g24_reconn_fast_conn +2564 c001a575 beq receiver_and_3_0_addr ,g24_reconn_device_3_0_addr +2565 c0022575 beq pair_and_3_0_addr ,g24_reconn_device_3_0_addr + +g24_reconn_fast_conn: +2566 6fe0c87c fetch 1 ,mem_24g_pair_tx_power +2567 67e0c1e8 store 1 ,mem_tx_power +2568 6848c895 fetcht 1 ,mem_24g_fast_conn_temp_ch +2569 6048c83b storet 1 ,mem_24g_current_ch_number +256a 6fe2488d fetch 4 ,mem_24g_fast_conn_addr +256b 2040257e call g24_ch_syncword_crc8_init +256c 6048c895 storet 1 ,mem_24g_fast_conn_temp_ch +256d 20600000 rtn + +g24_reconn_receiver_addr: +256e 7041e803 jam tx_power_3db ,mem_tx_power +256f 6848c896 fetcht 1 ,mem_24g_receiver_temp_ch +2570 6048c83b storet 1 ,mem_24g_current_ch_number +2571 6fe24891 fetch 4 ,mem_24g_receiver_addr +2572 2040257e call g24_ch_syncword_crc8_init +2573 6048c896 storet 1 ,mem_24g_receiver_temp_ch +2574 20600000 rtn + +g24_reconn_device_3_0_addr: +2575 7041e803 jam tx_power_3db ,mem_tx_power +2576 6848c897 fetcht 1 ,mem_24g_device_temp_ch +2577 6048c83b storet 1 ,mem_24g_current_ch_number +2578 6fe248a9 fetch 4 ,mem_24g_device_addr +2579 2040257e call g24_ch_syncword_crc8_init +257a 6048c897 storet 1 ,mem_24g_device_temp_ch +257b 20600000 rtn + +g24_store_receiver_addr: +257c 6fe2480c fetch 4 ,mem_24g_rxpayload + 2 +257d 67e24891 store 4 ,mem_24g_receiver_addr + +g24_ch_syncword_crc8_init: +257e 204022dc call g24_update_addr_and_synccrc8 +257f 202022cb branch g24_ch + +g24_reconn_dispatch: +2580 4774c03d bpatchx patch3d_1 ,mem_patch3d +2581 2040259a call g24_reconn_data_prep +2582 2040265b call g24_transmit_receive_ack +2583 242c25a1 nbranch g24_reconn_device_fail ,sync +2584 2437a5a1 nbranch g24_reconn_device_fail ,user3 +2585 20402672 call g24_ackpayload_parse + +g24_reconn_receiver_succ: +2586 6fe0c8a1 fetch 1 ,mem_24g_conn_sm +2587 793ffe02 set0 state_24g_reconn ,pdata +2588 67e0c8a1 store 1 ,mem_24g_conn_sm +2589 58000000 setarg 0 +258a 67e14883 store 2 ,mem_24g_pair_timeout +258b 67e14889 store 2 ,mem_24g_reconn_count +258c 67e14887 store 2 ,mem_24g_reconn_timeout +258d 6fe24877 fetch 4 ,mem_24g_pair_addr +258e 684a483c fetcht 4 ,mem_24g_addr +258f 98467c00 isub temp ,null +2590 2022a32e branch g24_pair_start ,zero +2591 6fe248a9 fetch 4 ,mem_24g_device_addr +2592 684a483c fetcht 4 ,mem_24g_addr +2593 98467c00 isub temp ,null +2594 2042a57c call g24_store_receiver_addr ,zero +2595 70095b3c jam bt_evt_24g_attempt_success ,mem_fifo_temp +2596 20407871 call ui_ipc_send_event + +g24_txbuf_clear: +2597 df200004 arg 4 ,loopcnt +2598 d8a047c6 arg mem_24g_txbuf ,contw +2599 20207d17 branch memset0 + +g24_reconn_data_prep: +259a 7047c6ff jam datatype_attemp ,mem_24g_txbuf +259b 6fe0c836 fetch 1 ,mem_24g_data_type +259c 67e0c7c7 store 1 ,mem_24g_txbuf + 1 +259d 6fe248a9 fetch 4 ,mem_24g_device_addr +259e 67e247c8 store 4 ,mem_24g_txbuf + 2 +259f 70483506 jam 6 ,mem_24g_datalen +25a0 20202291 branch g24_transmit_prep + +g24_reconn_device_fail: +25a1 6fe0c88c fetch 1 ,mem_24g_fast_conn_enable +25a2 203a22cb branch g24_ch ,blank +25a3 6fe14889 fetch 2 ,mem_24g_reconn_count +25a4 1fe0fe01 increase 1 ,pdata +25a5 67e14889 store 2 ,mem_24g_reconn_count +25a6 2feffe03 isolate1 3 ,pdata +25a7 6fe0c88b fetch 1 ,mem_24g_reconn_type +25a8 c000a5ad beq fast_conn_and_receiver ,g24_reconn_fast_conn_and_receiver +25a9 c00125af beq fast_conn_and_3_0_addr ,g24_reconn_fast_conn_and_3_0 +25aa c001a5b1 beq receiver_and_3_0_addr ,g24_reconn_receiver_and_3_0 +25ab c00225b3 beq pair_and_3_0_addr ,g24_reconn_pair_and_3_0 +25ac 2020256e branch g24_reconn_receiver_addr + +g24_reconn_fast_conn_and_receiver: +25ad 2020a56e branch g24_reconn_receiver_addr ,true +25ae 20202566 branch g24_reconn_fast_conn + +g24_reconn_fast_conn_and_3_0: +25af 2020a575 branch g24_reconn_device_3_0_addr ,true +25b0 20202566 branch g24_reconn_fast_conn + +g24_reconn_receiver_and_3_0: +25b1 2020a575 branch g24_reconn_device_3_0_addr ,true +25b2 2020256e branch g24_reconn_receiver_addr + +g24_reconn_pair_and_3_0: +25b3 2020a339 branch g24_pair_init_param ,true +25b4 20202575 branch g24_reconn_device_3_0_addr + +g24_data_attemp: +25b5 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +25b6 c000a5b9 beq datatype_device1 ,g24_data_attemp_device1 +25b7 c00125be beq datatype_device2 ,g24_data_attemp_device2 +25b8 20600000 rtn + +g24_data_attemp_device1: +25b9 20407e54 call enable_user +25ba 6fe24895 fetch 4 ,mem_24g_rxdata_temp + 4 +25bb 67e248cd store 4 ,mem_24g_transmitter_addr + +g24_store_device1_addr: +25bc 67e248d1 store 4 ,mem_24g_device1_addr +25bd 20600000 rtn + +g24_data_attemp_device2: +25be 20407e54 call enable_user +25bf 6fe24895 fetch 4 ,mem_24g_rxdata_temp + 4 +25c0 67e248cd store 4 ,mem_24g_transmitter_addr + +g24_store_device2_addr: +25c1 67e248d5 store 4 ,mem_24g_device2_addr +25c2 20600000 rtn + +rssi_store: +25c3 1a227e00 copy rega ,pdata +25c4 98408a00 iadd temp ,contw +25c5 6fe08018 fetch 1 ,mem_rssi +25c6 e7e08005 istore 1 ,contw +25c7 18408401 increase 1 ,temp +25c8 6fe0c87d fetch 1 ,mem_rssi_buff_index +25c9 98410400 iand temp ,temp +25ca 20600000 rtn + +rssi_average: +25cb 6fe0c87d fetch 1 ,mem_rssi_buff_index +25cc 1fe0fe01 increase 1 ,pdata +25cd 67e10987 store 2 ,mem_loopcnt +25ce 1fe27200 copy pdata ,loopcnt +25cf 1a220c00 copy rega ,contr +25d0 dfe00000 arg 0 ,pdata + +rssi_average_loop: +25d1 e8408006 ifetcht 1 ,contr +25d2 9840fe00 iadd temp ,pdata +25d3 c20025d1 loop rssi_average_loop +25d4 68490987 fetcht 2 ,mem_loopcnt +25d5 9846fc00 idiv temp +25d6 20407def call wait_div_end +25d7 18078400 quotient temp +25d8 c6138000 rtnmark1 mark_24g_rxmode +25d9 18427e00 copy temp ,pdata +25da c6930000 rtnmark0 mark_24g +25db 20401295 call bcd +25dc 1fe20400 copy pdata ,temp +25dd 20600000 rtn + +save_rssi_dec: +25de 2040127d call save_rssi +25df 20201291 branch rssi_hex2dec + +rssi_transmitter_buff_init: +25e0 6fe14899 fetch 2 ,mem_rssi_signal_buf_ptr +25e1 202025f4 branch rssi_buff_clear + +rssi_signal: +25e2 1fe22200 copy pdata ,rega +25e3 6848c898 fetcht 1 ,mem_rssi_signal_index +25e4 6fe14899 fetch 2 ,mem_rssi_signal_buf_ptr +25e5 98408a00 iadd temp ,contw +25e6 1a227e00 copy rega ,pdata +25e7 e7e08005 istore 1 ,contw +25e8 18408401 increase 1 ,temp +25e9 6fe0c87d fetch 1 ,mem_rssi_buff_index +25ea 98410400 iand temp ,temp +25eb 6048c898 storet 1 ,mem_rssi_signal_index +25ec 20600000 rtn + +rssi_receiver_buff_init: +25ed 6fe148e1 fetch 2 ,mem_rssi_noise_buffer_ptr +25ee 204025f4 call rssi_buff_clear +25ef 6fe148e3 fetch 2 ,mem_rssi_noise_self_buffer_ptr +25f0 204025f4 call rssi_buff_clear +25f1 6fe148e5 fetch 2 ,mem_rssi_noise_device1_buffer_ptr +25f2 204025f4 call rssi_buff_clear +25f3 6fe148e7 fetch 2 ,mem_rssi_noise_device2_buffer_ptr + +rssi_buff_clear: +25f4 207a0000 rtn blank +25f5 1fe20a00 copy pdata ,contw +25f6 6fe0c87d fetch 1 ,mem_rssi_buff_index +25f7 1fe0fe01 increase 1 ,pdata +25f8 1fe27200 copy pdata ,loopcnt +25f9 20207d26 branch clear_mem + +rssi_noise: +25fa 204025de call save_rssi_dec +25fb 207a0000 rtn blank +25fc 6848c8da fetcht 1 ,mem_rssi_noise_index +25fd 6a2148e1 fetchr rega ,2 ,mem_rssi_noise_buffer_ptr +25fe 204025c3 call rssi_store +25ff 6048c8da storet 1 ,mem_rssi_noise_index +2600 20600000 rtn + +rssi_noise_monitor: +2601 6a2148e1 fetchr rega ,2 ,mem_rssi_noise_buffer_ptr +2602 204025cb call rssi_average +2603 6048c8d9 storet 1 ,mem_rssi_noise_avg +2604 18467c50 sub temp ,rssi_thresh_noise ,null +2605 24610000 nrtn positive +2606 202022cb branch g24_ch + +g24_transmit_init: +2607 6fe240a8 fetch 4 ,mem_lap +2608 67e248a9 store 4 ,mem_24g_device_addr +2609 2040231a call g24_rx_window_init +260a 202025e0 branch rssi_transmitter_buff_init + +g24_interval_param_4ms: +260b 58002fb2 setarg g24_4ms_interval_param +260c 67e1c8ad store 3 ,mem_24g_short_sleep_set +260d 58100c0c setarg 0x100c0c +260e 67e1c854 store 3 ,mem_24g_interval +260f 5800bb80 setarg 0x00bb80 +2610 67e1c8b0 store 3 ,mem_24g_long_sleep_set +2611 7048c605 jam 5 ,mem_24g_fast_hop_count +2612 20600000 rtn + +g24_interval_param_8ms: +2613 5800f80c setarg g24_8ms_interval_param +2614 67e1c8ad store 3 ,mem_24g_short_sleep_set +2615 581c1919 setarg 0x1c1919 +2616 67e1c854 store 3 ,mem_24g_interval +2617 58017700 setarg 0x017700 +2618 67e1c8b0 store 3 ,mem_24g_long_sleep_set +2619 7048c60b jam 11 ,mem_24g_fast_hop_count +261a 20600000 rtn + +g24_transmit_dispatch: +261b c6930000 rtnmark0 mark_24g +261c 6fe0c8a1 fetch 1 ,mem_24g_conn_sm +261d c280a340 bbit1 state_24g_pair ,g24_pair_dispatch +261e c2812580 bbit1 state_24g_reconn ,g24_reconn_dispatch +261f 6fe0c8bd fetch 1 ,mem_24g_transmit_by_interrupt +2620 c000a6c6 beq g24_tx_timer_int_enable ,g24_transmit_by_interrupt + +g24_transmit_no_interrupt: +2621 4775403d bpatchx patch3d_2 ,mem_patch3d +2622 20402631 call g24_txdata_prep +2623 243426a1 nbranch g24_nodata_transmit ,user + +g24_transmit_start: +2624 20402646 call g24_transmit_process +2625 204026ee call power_ctrl_start +2626 6fe0c09a fetch 1 ,mem_device_option +2627 c00447ef beq dvc_op_mouse ,mouse_24g_transmit_start + +g24_transmit_start_next: +2628 6fe448b0 fetch 8 ,mem_24g_long_sleep_set +2629 67e4485c store 8 ,mem_24g_enter_hibernate +262a 6fe148c2 fetch 2 ,mem_24g_long_sleep_param_update_timer_init +262b 67e148c4 store 2 ,mem_24g_long_sleep_param_update_timer + +g24_short_sleep: +262c 204026bb call g24_lpm_wait +262d 24740000 nrtn user +262e 20407fdc call clear_wake +262f 6fe1c8ad fetch 3 ,mem_24g_short_sleep_set +2630 2020150a branch lpm_dispatch_sleep + +g24_txdata_prep: +2631 20402634 call g24_package_data +2632 24740000 nrtn user +2633 20202291 branch g24_transmit_prep + +g24_package_data: +2634 6fe1489b fetch 2 ,mem_cb_24g_transmit_data +2635 20407e05 call callback_func +2636 2034263a branch g24_accumulate_data ,user +2637 6fe3c7c7 fetch 7 ,mem_24g_txbuf + 1 +2638 207a0000 rtn blank +2639 20207e54 branch enable_user + +g24_accumulate_data: +263a 7048a700 jam 0 ,mem_24g_abort_pac +263b 1a20fe01 add rega ,1 ,pdata +263c 67e0c835 store 1 ,mem_24g_datalen +263d 20402642 call g24_transmit_rf_ctrl_clear +263e 67e0c7c6 store 1 ,mem_24g_txbuf +263f 1a420c00 copy regb ,contr +2640 1a227200 copy rega ,loopcnt +2641 20207d5f branch memcpy + +g24_transmit_rf_ctrl_clear: +2642 6fe0c836 fetch 1 ,mem_24g_data_type +2643 1fe17e07 and_into bits_data ,pdata +2644 67e0c836 store 1 ,mem_24g_data_type +2645 20600000 rtn + +g24_transmit_process: +2646 7048a600 jam 0 ,mem_24g_retry + +g24_transmit_loop: +2647 6961015f fetchr timeup ,2 ,mem_param_rx_setup +2648 34730200 until clkn_rt ,meet +2649 2040265b call g24_transmit_receive_ack +264a 6fe0c82c fetch 1 ,mem_24g_no_ack +264b c000a651 beq no_ack_24g ,g24_transmit_no_ack +264c 242c2669 nbranch g24_retransmit ,sync +264d 2437a669 nbranch g24_retransmit ,user3 +264e 20402672 call g24_ackpayload_parse +264f 6fe0c09a fetch 1 ,mem_device_option +2650 c00447eb beq dvc_op_mouse ,mouse_wakeup_24g + +g24_transmit_no_ack: +2651 20402720 call power_ctrl_pac_succ_incrs + +g24_transmit_next_packet: +2652 20402597 call g24_txbuf_clear +2653 6fe0c82b fetch 1 ,mem_24g_pid +2654 1fe0fe01 increase 1 ,pdata +2655 67e0c82b store 1 ,mem_24g_pid +2656 20402694 call g24_hop_enable_packet + +g24_transmit_abandon: +2657 58000000 setarg 0 +2658 67e0c8a2 store 1 ,mem_24g_ensure +2659 67e148a3 store 2 ,mem_24g_txfail_cnt +265a 20600000 rtn + +g24_transmit_receive_ack: +265b 7857fc00 disable user3 +265c 20402246 call g24_transmit +265d 6fe0c82c fetch 1 ,mem_24g_no_ack +265e c000a23f beq no_ack_24g ,g24_end_of_packet +265f 18002a00 force 0 ,radio_ctrl +2660 6fe2483c fetch 4 ,mem_24g_addr +2661 98001200 iforce access +2662 204010b0 call calc_mod_value_scale_le +2663 68488017 fetcht 1 ,mem_last_freq +2664 2040118f call set_freq_rx +2665 204011a6 call rf_rx_enable +2666 204021e4 call g24_receive_rxon +2667 2057a23f call g24_end_of_packet ,user3 +2668 20600000 rtn + +g24_retransmit: +2669 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +266a 247a0000 nrtn blank +266b 6fe148a3 fetch 2 ,mem_24g_txfail_cnt +266c 1fe0fe01 increase 1 ,pdata +266d 67e148a3 store 2 ,mem_24g_txfail_cnt +266e 6fe0c8a4 fetch 1 ,mem_24g_txfail_cnt + 1 +266f c2822679 bbit1 4 ,g24_tx_attempt_fail +2670 2040267e call g24_transmit_hop_process +2671 20202647 branch g24_transmit_loop + +g24_ackpayload_parse: +2672 204022be call g24_read_len_pid_crc +2673 6fe0c82a fetch 1 ,mem_24g_rxdata_length +2674 207a0000 rtn blank +2675 98007200 iforce loopcnt +2676 d8c047a6 arg mem_24g_rxbuf + 2 ,contr +2677 d8a0480a arg mem_24g_rxpayload ,contw +2678 20207d5f branch memcpy + +g24_tx_attempt_fail: +2679 58000000 setarg 0 +267a 67e148a3 store 2 ,mem_24g_txfail_cnt +267b 7048a501 jam 1 ,mem_24g_attempt_fail_flag + +g24_stop_24g_mode: +267c 70095b3a jam bt_evt_24g_attempt_fail ,mem_fifo_temp +267d 20207871 branch ui_ipc_send_event + +g24_transmit_hop_process: +267e 4775c03d bpatchx patch3d_3 ,mem_patch3d +267f 6848c8a6 fetcht 1 ,mem_24g_retry +2680 6fe0c8c6 fetch 1 ,mem_24g_fast_hop_count +2681 98467c00 isub temp ,null +2682 2421269c nbranch g24_tx_fast_hop ,positive +2683 18408401 increase 1 ,temp +2684 6048c8a6 storet 1 ,mem_24g_retry +2685 6fe0c8c6 fetch 1 ,mem_24g_fast_hop_count +2686 c002a68b beq 5 ,g24_transmit_hop_process_4ms +2687 6fe0c8a6 fetch 1 ,mem_24g_retry +2688 c0032696 beq 6 ,g24_hop_ch_disable +2689 c0062696 beq 12 ,g24_hop_ch_disable +268a 20600000 rtn + +g24_transmit_hop_process_4ms: +268b 6fe0c8a6 fetch 1 ,mem_24g_retry +268c c001a696 beq 3 ,g24_hop_ch_disable +268d c0032696 beq 6 ,g24_hop_ch_disable +268e 20600000 rtn + +g24_hop_ch_enable: + +g24_txpayload_type_update: +268f c517a692 bmark1 mark_ble_lr ,g24_lr_type_update +2690 67e0c7e7 store 1 ,mem_24g_txpayload + offset_data_type +2691 20600000 rtn + +g24_lr_type_update: +2692 67e0c7e8 store 1 ,mem_24g_txpayload + offset_lr_data_type +2693 20600000 rtn + +g24_hop_enable_packet: +2694 6fe0c836 fetch 1 ,mem_24g_data_type +2695 c4020000 rtnbit0 bit_hop + +g24_hop_ch_disable: +2696 6fe0c836 fetch 1 ,mem_24g_data_type +2697 793ffe04 set0 bit_hop ,pdata +2698 67e0c836 store 1 ,mem_24g_data_type +2699 2040268f call g24_txpayload_type_update +269a 20402724 call power_ctrl_pac_succ_decrs +269b 202022cb branch g24_ch + +g24_tx_fast_hop: +269c 20402714 call power_ctrl_txpower_incrs +269d 20402724 call power_ctrl_pac_succ_decrs +269e 202022cb branch g24_ch + +g24_search_receiver: +269f 6fe1489d fetch 2 ,mem_cb_24g_search_receiver +26a0 20207e05 branch callback_func + +g24_nodata_transmit: +26a1 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +26a2 205a26a7 call g24_send_abort_packet ,blank +26a3 6fe0c8bd fetch 1 ,mem_24g_transmit_by_interrupt +26a4 c1008000 rtneq g24_tx_timer_int_enable +26a5 2040269f call g24_search_receiver +26a6 202026b5 branch g24_long_sleep + +g24_send_abort_packet: +26a7 70483601 jam type_ms ,mem_24g_data_type +26a8 7048a701 jam 1 ,mem_24g_abort_pac +26a9 20402642 call g24_transmit_rf_ctrl_clear +26aa 67e0c7c6 store 1 ,mem_24g_txbuf +26ab 58000000 setarg 0 +26ac 67e3c7c7 store 7 ,mem_24g_txbuf + 1 +26ad 6fe248a9 fetch 4 ,mem_24g_device_addr +26ae 67e247ce store 4 ,mem_24g_txbuf + 8 +26af 7048350c jam 12 ,mem_24g_datalen +26b0 6fe0c836 fetch 1 ,mem_24g_data_type +26b1 79207e03 set1 bit_abort ,pdata +26b2 67e0c836 store 1 ,mem_24g_data_type +26b3 20402291 call g24_transmit_prep +26b4 20202624 branch g24_transmit_start + +g24_long_sleep: +26b5 204026bb call g24_lpm_wait +26b6 24740000 nrtn user +26b7 6fe4485c fetch 8 ,mem_24g_enter_hibernate + +g24_long_sleep2: +26b8 20407daa call clk2lpo +26b9 604a4160 storet 4 ,mem_sleep_counter +26ba 20201497 branch lpm_sleep + +g24_lpm_wait: +26bb 4776403d bpatchx patch3d_4 ,mem_patch3d +26bc 78347c00 enable user +26bd 20401465 call lpo_calibration +26be 6fe1c174 fetch 3 ,mem_clks_per_lpo +26bf 203a7e56 branch disable_user ,blank +26c0 6fe0c099 fetch 1 ,mem_lpm_mode +26c1 203a7e56 branch disable_user ,blank +26c2 6fe0c8bd fetch 1 ,mem_24g_transmit_by_interrupt +26c3 c000fe56 beq g24_tx_timer_int_enable ,disable_user + +g24_setgpio_lpm_before: +26c4 6fe1489f fetch 2 ,mem_cb_24g_lpm_before +26c5 20207e05 branch callback_func + +g24_transmit_by_interrupt: +26c6 204022ea call g24_timer_check +26c7 24740000 nrtn user +26c8 204026db call g24_interval_calibrate +26c9 6fe148be fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +26ca 1fe0fe01 increase 1 ,pdata +26cb 67e148be store 2 ,mem_24g_transmit_by_interrupt_exit_count +26cc 684948c0 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init +26cd 98467c00 isub temp ,null +26ce 2042a6d0 call g24_transmit_by_interrupt_exit ,zero +26cf 20202621 branch g24_transmit_no_interrupt + +g24_transmit_by_interrupt_exit: +26d0 7048bd00 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +26d1 58000000 setarg 0 +26d2 67e148be store 2 ,mem_24g_transmit_by_interrupt_exit_count +26d3 58000064 setarg 100 +26d4 67e148c0 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init + +g24_interval_min: +26d5 7048bc00 jam 0 ,mem_24g_pac_index +26d6 6fe0c855 fetch 1 ,mem_24g_interval_min + +g24_interval_store: +26d7 67e0c854 store 1 ,mem_24g_interval +26d8 20600000 rtn + +g24_interval_max: +26d9 6fe0c856 fetch 1 ,mem_24g_interval_max +26da 202026d7 branch g24_interval_store + +g24_interval_calibrate: +26db 6fe0c8bc fetch 1 ,mem_24g_pac_index +26dc 1fe0fe01 increase 1 ,pdata +26dd 67e0c8bc store 1 ,mem_24g_pac_index +26de c00226d9 beq 4 ,g24_interval_max +26df c002a6d5 beq 5 ,g24_interval_min +26e0 20600000 rtn + +g24_transmit_by_interrupt_enable: +26e1 7048bd01 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +26e2 58000000 setarg 0 +26e3 67e148be store 2 ,mem_24g_transmit_by_interrupt_exit_count +26e4 20600000 rtn + +g24_factory_check: +26e5 df200002 arg 2 ,loopcnt +26e6 d8c0483c arg mem_24g_addr ,contr + +pdata_0xff_check: +26e7 20407e54 call enable_user +26e8 5800ffff setarg 0xffff + +pdata_0xff_check_loop: +26e9 e8410006 ifetcht 2 ,contr +26ea 98467c00 isub temp ,null +26eb 2442fe56 ncall disable_user ,zero +26ec c20026e9 loop pdata_0xff_check_loop +26ed 20600000 rtn + +power_ctrl_start: +26ee 4776c03d bpatchx patch3d_5 ,mem_patch3d +26ef 6fe1478c fetch 2 ,mem_ui_state_map +26f0 c3858000 rtnbit1 ui_state_ble_adv +26f1 c3838000 rtnbit1 ui_state_bt_reconnect +26f2 c3830000 rtnbit1 ui_state_bt_discovery +26f3 6a214899 fetchr rega ,2 ,mem_rssi_signal_buf_ptr +26f4 204025cb call rssi_average +26f5 6048c8c7 storet 1 ,mem_rssi_avg_received +26f6 6fe0c8cc fetch 1 ,mem_rssi_dis_max_24g +26f7 c51326f9 bmark1 mark_24g ,power_ctrl_start_next +26f8 6fe0c8cf fetch 1 ,mem_rssi_dis_max_ble + +power_ctrl_start_next: +26f9 98467c00 isub temp ,null +26fa 24212713 nbranch power_ctrl_txpower_incrs_force ,positive +26fb 6fe0c8c9 fetch 1 ,mem_power_ctrl_pac_succ_cnt +26fc 1fe67c02 sub pdata ,2 ,null +26fd 24212701 nbranch power_ctrl_txpower_decrs_check ,positive +26fe 6fe0c8c9 fetch 1 ,mem_power_ctrl_pac_succ_cnt +26ff c0002714 beq 0 ,power_ctrl_txpower_incrs +2700 20600000 rtn + +power_ctrl_txpower_decrs_check: +2701 6fe0c8c9 fetch 1 ,mem_power_ctrl_pac_succ_cnt +2702 6848c8ca fetcht 1 ,mem_power_ctrl_pac_succ_cnt_init +2703 98467c00 isub temp ,null +2704 24628000 nrtn zero +2705 7048c900 jam 0 ,mem_power_ctrl_pac_succ_cnt + +power_ctrl_txpower_decrs: +2706 6848c8c7 fetcht 1 ,mem_rssi_avg_received +2707 6fe0c8cb fetch 1 ,mem_rssi_dis_min_24g +2708 c513270a bmark1 mark_24g ,power_ctrl_txpower_decrs_next +2709 6fe0c8ce fetch 1 ,mem_rssi_dis_min_ble + +power_ctrl_txpower_decrs_next: +270a 98467c00 isub temp ,null +270b 24610000 nrtn positive +270c 6fe0c8c8 fetch 1 ,mem_power_ctrl_level +270d c000271b beq 0 ,power_ctrl_decrs_level0 +270e 1fe0ffff increase -1 ,pdata +270f 67e0c8c8 store 1 ,mem_power_ctrl_level +2710 c000271b beq 0 ,power_ctrl_decrs_level0 + +power_ctrl_decrs_level1: + +power_ctrl_incrs_level1: +2711 7041e800 jam tx_power_0db ,mem_tx_power +2712 20600000 rtn + +power_ctrl_txpower_incrs_force: +2713 7048c900 jam 0 ,mem_power_ctrl_pac_succ_cnt + +power_ctrl_txpower_incrs: +2714 6fe0c8c8 fetch 1 ,mem_power_ctrl_level +2715 c0012719 beq 2 ,power_ctrl_incrs_level2 +2716 1fe0fe01 increase 1 ,pdata +2717 67e0c8c8 store 1 ,mem_power_ctrl_level +2718 c000a711 beq 1 ,power_ctrl_incrs_level1 + +power_ctrl_incrs_level2: +2719 7041e806 jam tx_power_6db ,mem_tx_power +271a 20600000 rtn + +power_ctrl_decrs_level0: +271b 7041e885 jam tx_power_f5db ,mem_tx_power +271c 20600000 rtn + +power_ctrl_pac_succ_cnt_init: +271d 7048c801 jam 1 ,mem_power_ctrl_level +271e 7048c900 jam 0 ,mem_power_ctrl_pac_succ_cnt +271f 20600000 rtn + +power_ctrl_pac_succ_incrs: +2720 6fe0c8c9 fetch 1 ,mem_power_ctrl_pac_succ_cnt +2721 1fe0fe01 increase 1 ,pdata +2722 67e0c8c9 store 1 ,mem_power_ctrl_pac_succ_cnt +2723 20600000 rtn + +power_ctrl_pac_succ_decrs: +2724 6fe0c8c9 fetch 1 ,mem_power_ctrl_pac_succ_cnt +2725 1fe67c02 sub pdata ,2 ,null +2726 2441272c ncall power_ctrl_pac_succ_cnt_reinit ,positive +2727 6fe0c8c9 fetch 1 ,mem_power_ctrl_pac_succ_cnt +2728 c1000000 rtneq 0 +2729 1fe0ffff increase -1 ,pdata +272a 67e0c8c9 store 1 ,mem_power_ctrl_pac_succ_cnt +272b 20600000 rtn + +power_ctrl_pac_succ_cnt_reinit: +272c 7048c903 jam 3 ,mem_power_ctrl_pac_succ_cnt +272d 20600000 rtn + +ali_mesh_access_layer_resolve_message: +272e 6fe08be0 fetch 1 ,mem_ccm_data_len +272f 67e089f6 store 1 ,mem_mesh_receive_model_message_payload_len +2730 1e020c00 copy alarm ,contr +2731 20407d0b call memcpy24 +2732 20402785 call logging_tx_info_receive_access_message +2733 6fe149b7 fetch 2 ,mem_mesh_cb_receive_access_message +2734 20207e05 branch callback_func + +ali_mesh_access_layer_check_access_message_opcode: +2735 6fe089f7 fetch 1 ,mem_mesh_receive_model_message_payload_opcode +2736 c000273d beq mesh_message_opcode_config_appkey_add ,ali_mesh_access_layer_message_opcode_config_appkey_add +2737 c0402d68 beq mesh_configuration_and_health_message_opcode_header ,ali_mesh_access_layer_config_or_health_message_opcode +2738 c0412e5e beq mesh_module_message_opcode_header ,ali_mesh_model_layer_check_model_message_opcode +2739 c068a789 beq vendor_message_attr_set ,ali_mesh_ali_vendor_message_attribute_set +273a c06827a2 beq vendor_message_attr_get ,ali_mesh_ali_vendor_message_opcode_attr_get +273b c06aa7a2 beq vendor_message_attr_confirmation ,ali_mesh_ali_vendor_message_opcode_attr_confrimation +273c 20600000 rtn + +ali_mesh_access_layer_message_opcode_config_appkey_add: +273d d8c009fb arg mem_mesh_receive_application_key ,contr +273e d8a04afe arg mem_mesh_application_key ,contw +273f 20407d0c call memcpy16 +2740 70493300 jam paired_status ,mem_mesh_provisioned_flag +2741 20402ae5 call ali_mesh_encrypt_base_function_k4 +2742 20402757 call ali_mesh_access_layer_finish_pairing_init_subscription_list +2743 20402748 call ali_mesh_accesss_layer_check_message_type +2744 2040274d call ali_mesh_access_layer_send_config_appkey_status +2745 70493300 jam paired_status ,mem_mesh_provisioned_flag +2746 6fe149b9 fetch 2 ,mem_mesh_cb_receive_config_appkey_add +2747 20207e05 branch callback_func + +ali_mesh_accesss_layer_check_message_type: +2748 6fe08c3a fetch 1 ,mem_mesh_network_packet_type +2749 70493304 jam received_config_appkey_add ,mem_mesh_provisioned_flag +274a c1008000 rtneq mesh_message_app +274b 70493300 jam paired_status ,mem_mesh_provisioned_flag +274c 20600000 rtn + +ali_mesh_access_layer_send_config_appkey_status: +274d 58000080 setarg mesh_configuration_and_health_message_opcode_header +274e 67e08a10 store 1 ,mem_mesh_access_layer_payload +274f 58000003 setarg mesh_message_opcode_config_config_model_publication_set +2750 e7e08005 istore 1 ,contw +2751 58000000 setarg status_code_success +2752 e7e08005 istore 1 ,contw +2753 6fe189f8 fetch 3 ,mem_mesh_netkeyindex_and_appkeyindex +2754 e7e18005 istore 3 ,contw +2755 700a0f06 jam 6 ,mem_mesh_access_layer_payload_len +2756 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +ali_mesh_access_layer_finish_pairing_init_subscription_list: +2757 6fe149d9 fetch 2 ,mem_mesh_core_feature +2758 c3810000 rtnbit1 mesh_feature_disable_subscription +2759 20402de1 call mesh_get_element_info_config + +ali_mesh_access_layer_finish_pairing_init_subscription_list_loop: +275a 1a20a606 add rega ,element_device_subscription_label ,regc +275b 5fffffff setarg -1 +275c e7e40013 istore subscription_max_count ,regc +275d e7e40005 istore subscription_max_count ,contw +275e efe10011 ifetch 2 ,rega +275f e7e10013 istore 2 ,regc +2760 1a427e00 copy regb ,pdata +2761 9a20a200 iadd rega ,rega +2762 c200275a loop ali_mesh_access_layer_finish_pairing_init_subscription_list_loop +2763 6fe149d5 fetch 2 ,mem_mesh_cb_subscriptuion_list_changed +2764 20207e05 branch callback_func + +ali_mesh_access_layer_send_generic_onoff_status: +2765 58000082 setarg mesh_module_message_opcode_header +2766 67e08a10 store 1 ,mem_mesh_access_layer_payload +2767 58000004 setarg mesh_module_message_opcode_generic_onoff_status_no_head +2768 e7e08005 istore 1 ,contw +2769 6fe089f9 fetch 1 ,mem_mesh_generic_onoff_set_payload_onoff +276a e7e08005 istore 1 ,contw +276b 700a0f03 jam 3 ,mem_mesh_access_layer_payload_len +276c 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +ali_mesh_access_layer_send_light_lightness_status: +276d 58000082 setarg mesh_module_message_opcode_header +276e 67e08a10 store 1 ,mem_mesh_access_layer_payload +276f 5800004e setarg mesh_module_message_opcode_light_lightness_status_no_head +2770 e7e08005 istore 1 ,contw +2771 6fe109f9 fetch 2 ,mem_mesh_light_lightness_set_payload_lightness +2772 e7e10005 istore 2 ,contw +2773 700a0f04 jam 4 ,mem_mesh_access_layer_payload_len +2774 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +ali_mesh_access_layer_send_light_ctl_stauts: +2775 58000082 setarg mesh_module_message_opcode_header +2776 67e08a10 store 1 ,mem_mesh_access_layer_payload +2777 58000060 setarg mesh_module_message_opcode_light_ctl_status_no_head +2778 e7e08005 istore 1 ,contw +2779 6fe209f9 fetch 4 ,mem_mesh_ctl_lightness +277a e7e20005 istore 4 ,contw +277b 700a0f06 jam 6 ,mem_mesh_access_layer_payload_len +277c 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +ali_mesh_access_layer_send_scene_status: +277d 5800005e setarg mesh_module_message_opcode_scene_status +277e 67e08a10 store 1 ,mem_mesh_access_layer_payload +277f 58000000 setarg mesh_success +2780 e7e08005 istore 1 ,contw +2781 6fe109f9 fetch 2 ,mem_mesh_scene_recall_payload_scene_number +2782 e7e10005 istore 2 ,contw +2783 700a0f04 jam 4 ,mem_mesh_access_layer_payload_len +2784 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +logging_tx_info_receive_access_message: +2785 6f208be0 fetchr loopcnt ,1 ,mem_ccm_data_len +2786 1e022200 copy alarm ,rega +2787 da400050 arg mesh_access_receive_message ,regb +2788 202029db branch logging_tx_info + +ali_mesh_ali_vendor_message_attribute_set: +2789 204027a3 call ali_mesh_ali_vendor_message_attrbute_check_company_id_and_tid +278a 24740000 nrtn user +278b 6fe109fb fetch 2 ,mem_mesh_vendor_message_attr_type +278c d840f01f arg vendor_message_attr_type_time ,temp +278d 98467c00 isub temp ,null +278e 2022a7b7 branch ali_mesh_ali_vendor_message_opcode_timer_set_curr_time ,zero +278f d840f010 arg vendor_message_attr_type_timing ,temp +2790 98467c00 isub temp ,null +2791 2022a7bb branch ali_mesh_ali_vendor_message_opcode_timer_set_timing ,zero +2792 d840f011 arg vendor_message_attr_type_cycle_timing ,temp +2793 98467c00 isub temp ,null +2794 2022a7c4 branch ali_mesh_ali_vendor_message_opcode_timer_set_timing_cyclically ,zero +2795 d840f012 arg vendor_message_attr_type_delete_timing ,temp +2796 98467c00 isub temp ,null +2797 2022a7cd branch ali_mesh_ali_vendor_message_opcode_timer_delete_timing ,zero +2798 d8400534 arg vendor_message_attr_type_main_light ,temp +2799 98467c00 isub temp ,null +279a 2022a7ae branch ali_mesh_ali_vendor_message_attribute_set_main_light ,zero +279b d8400533 arg vendor_message_attr_type_background_light ,temp +279c 98467c00 isub temp ,null +279d 2022a7b1 branch ali_mesh_ali_vendor_message_attribute_set_background_light ,zero +279e d8400123 arg vendor_message_attr_type_color ,temp +279f 98467c00 isub temp ,null +27a0 2022a7b4 branch ali_mesh_ali_vendor_message_attribute_set_color ,zero +27a1 20600000 rtn + +ali_mesh_ali_vendor_message_opcode_attr_get: + +ali_mesh_ali_vendor_message_opcode_attr_confrimation: +27a2 20600000 rtn + +ali_mesh_ali_vendor_message_attrbute_check_company_id_and_tid: +27a3 20407e56 call disable_user +27a4 6fe109f8 fetch 2 ,mem_mesh_vendor_message_cid +27a5 d84001a8 arg vendor_message_opcode_company_id ,temp +27a6 98467c00 isub temp ,null +27a7 24628000 nrtn zero +27a8 6848c7a4 fetcht 1 ,mem_mesh_vendor_mesh_receive_tid +27a9 6fe089fa fetch 1 ,mem_mesh_vendor_message_tid +27aa 98467c00 isub temp ,null +27ab 20628000 rtn zero +27ac 67e0c7a4 store 1 ,mem_mesh_vendor_mesh_receive_tid +27ad 20207e54 branch enable_user + +ali_mesh_ali_vendor_message_attribute_set_main_light: +27ae 2040281f call ali_mesh_ali_vendor_message_ack_attr_status_uint8 +27af 6fe149c9 fetch 2 ,mem_mesh_cb_main_light_onoff_set +27b0 20207e05 branch callback_func + +ali_mesh_ali_vendor_message_attribute_set_background_light: +27b1 2040281f call ali_mesh_ali_vendor_message_ack_attr_status_uint8 +27b2 6fe149cb fetch 2 ,mem_mesh_cb_background_onoff_set +27b3 20207e05 branch callback_func + +ali_mesh_ali_vendor_message_attribute_set_color: +27b4 20402819 call ali_mesh_ali_vendor_message_ack_attr_status_uint48 +27b5 6fe149cd fetch 2 ,mem_mesh_cb_color_set +27b6 20207e05 branch callback_func + +ali_mesh_ali_vendor_message_opcode_timer_set_curr_time: +27b7 2040281b call ali_mesh_ali_vendor_message_ack_attr_status_uint32 +27b8 6fe209fd fetch 4 ,mem_mesh_vendor_message_current_time +27b9 67e247a6 store 4 ,mem_mesh_vendor_timer_current_time +27ba 20202850 branch ali_mesh_time_init_system_time + +ali_mesh_ali_vendor_message_opcode_timer_set_timing: +27bb 20402815 call ali_mesh_ali_vendor_message_ack_attr_status_uint64 +27bc 204027e6 call ali_mesh_ali_vendor_message_calc_timing_address +27bd 207a0000 rtn blank +27be 6fe089fd fetch 1 ,mem_mesh_vendor_timer_timing_index +27bf 204027e2 call ali_mesh_vendor_timer_buffer_offset_cal +27c0 684c09fd fetcht 8 ,mem_mesh_vendor_timer_timing_index +27c1 e0440005 istoret 8 ,contw + +ali_mesh_ali_vendor_message_cb_timing_changed: +27c2 6fe149d7 fetch 2 ,mem_mesh_cb_vendor_timing_changed +27c3 20207e05 branch callback_func + +ali_mesh_ali_vendor_message_opcode_timer_set_timing_cyclically: +27c4 20402817 call ali_mesh_ali_vendor_message_ack_attr_status_uint56 +27c5 204027e6 call ali_mesh_ali_vendor_message_calc_timing_address +27c6 207a0000 rtn blank +27c7 700a0459 jam timer_cyclical_falg ,mem_mesh_vendor_timer_timing_cyclic_flag +27c8 6fe089fd fetch 1 ,mem_mesh_vendor_timer_timing_index_cyclic +27c9 204027e2 call ali_mesh_vendor_timer_buffer_offset_cal +27ca 6fe409fd fetch 8 ,mem_mesh_vendor_timer_timing_index_cyclic +27cb e7e40005 istore 8 ,contw +27cc 202027c2 branch ali_mesh_ali_vendor_message_cb_timing_changed + +ali_mesh_ali_vendor_message_opcode_timer_delete_timing: +27cd 204027df call ali_mesh_ali_vendor_message_opcode_timer_delete_timing_ack +27ce 204027e6 call ali_mesh_ali_vendor_message_calc_timing_address +27cf 207a0000 rtn blank +27d0 6fe089fd fetch 1 ,mem_mesh_vendor_timer_timing_index +27d1 207a0000 rtn blank +27d2 204027e2 call ali_mesh_vendor_timer_buffer_offset_cal +27d3 d8400000 arg 0 ,temp +27d4 e0408005 istoret 1 ,contw +27d5 6fe089f6 fetch 1 ,mem_mesh_receive_model_message_payload_len +27d6 1fe67c08 sub pdata ,8 ,null +27d7 2042a7d9 call ali_mesh_ali_vendor_message_opcode_timer_delete_timing_delete_second ,zero +27d8 202027c2 branch ali_mesh_ali_vendor_message_cb_timing_changed + +ali_mesh_ali_vendor_message_opcode_timer_delete_timing_delete_second: +27d9 204027e6 call ali_mesh_ali_vendor_message_calc_timing_address +27da 6fe089fe fetch 1 ,mem_mesh_vendor_timer_timing_index1 +27db 204027e2 call ali_mesh_vendor_timer_buffer_offset_cal +27dc d8400000 arg 0 ,temp +27dd e0408005 istoret 1 ,contw +27de 20600000 rtn + +ali_mesh_ali_vendor_message_opcode_timer_delete_timing_ack: +27df 6fe089f6 fetch 1 ,mem_mesh_receive_model_message_payload_len +27e0 c003a81f beq 7 ,ali_mesh_ali_vendor_message_ack_attr_status_uint8 +27e1 2020281d branch ali_mesh_ali_vendor_message_ack_attr_status_uint16 + +ali_mesh_vendor_timer_buffer_offset_cal: +27e2 1fe0ffff pincrease -1 +27e3 1fe9fe00 lshift3 pdata ,pdata +27e4 98a08a00 iadd contw ,contw +27e5 20600000 rtn + +ali_mesh_ali_vendor_message_calc_timing_address: +27e6 20402de1 call mesh_get_element_info_config +27e7 1a20a204 add rega ,element_device_vendor_time_ptr ,rega +27e8 6fe0ca12 fetch 1 ,mem_mesh_receive_element_number +27e9 9a4ffe00 imul32 regb ,pdata +27ea 9a20a200 iadd rega ,rega +27eb efe10011 ifetch 2 ,rega +27ec 1fe20a00 copy pdata ,contw +27ed 20600000 rtn + +ali_mesh_ali_vendor_message_status_add_head: +27ee 580000d3 setarg vendor_message_attr_status +27ef 67e08a10 store 1 ,mem_mesh_access_layer_payload +27f0 580001a8 setarg vendor_message_opcode_company_id +27f1 e7e10005 istore 2 ,contw +27f2 6fe0c7a4 fetch 1 ,mem_mesh_vendor_mesh_receive_tid +27f3 e7e08005 istore 1 ,contw +27f4 e0410005 istoret 2 ,contw +27f5 20600000 rtn + +ali_mesh_ali_vendor_message_opcode_device_power_on: +27f6 d8e00000 arg 0 ,queue +27f7 d8400003 arg vendor_message_event_device_power_on ,temp +27f8 da20f009 arg vendor_attr_type_event_trigger ,rega +27f9 20202827 branch ali_mesh_ali_vendor_message_opcode_para_uint8 + +ali_mesh_ali_vendor_message_opcode_generic_onoff: +27fa da200100 arg vendor_attr_generic_onoff_server ,rega +27fb 20202827 branch ali_mesh_ali_vendor_message_opcode_para_uint8 + +ali_mesh_ali_vendor_message_opcode_scene_server_first_element: +27fc d8e00000 arg 0 ,queue + +ali_mesh_ali_vendor_message_opcode_scene_server: +27fd da20f004 arg vendor_attr_scene_server ,rega +27fe 2020282c branch ali_mesh_ali_vendor_message_opcode_para_uint16 + +ali_mesh_ali_vendor_message_opcode_main_light_onoff_first_element: +27ff d8e00000 arg 0 ,queue + +ali_mesh_ali_vendor_message_opcode_main_light_onoff: +2800 da200534 arg vendor_attr_main_light_server ,rega +2801 20202827 branch ali_mesh_ali_vendor_message_opcode_para_uint8 + +ali_mesh_ali_vendor_message_opcode_background_light_onoff_first_element: +2802 d8e00000 arg 0 ,queue + +ali_mesh_ali_vendor_message_opcode_background_light_onoff: +2803 da200533 arg vendor_attr_background_light_onoff_server ,rega +2804 20202827 branch ali_mesh_ali_vendor_message_opcode_para_uint8 + +ali_mesh_ali_vendor_message_opcode_brightness_first_element: +2805 d8e00000 arg 0 ,queue + +ali_mesh_ali_vendor_message_opcode_brightness: +2806 20402e94 call ali_mesh_model_layer_message_calc_actual_lightness +2807 da200121 arg vendor_attr_lightness_level_server ,rega +2808 2020282c branch ali_mesh_ali_vendor_message_opcode_para_uint16 + +ali_mesh_ali_vendor_message_opcode_color_temperature_first_element: +2809 d8e00000 arg 0 ,queue + +ali_mesh_ali_vendor_message_opcode_color_temperature: +280a 20402ea2 call ali_mesh_model_layer_message_calc_actual_temperature +280b da200122 arg vendor_attr_color_temperature_server ,rega +280c 2020282c branch ali_mesh_ali_vendor_message_opcode_para_uint16 + +ali_mesh_ali_vendor_message_opcode_timing_finish: +280d 18438400 lshift temp ,temp +280e 18418411 or temp ,vendor_message_event_finish_timing ,temp +280f da20f009 arg vendor_attr_type_event_trigger ,rega +2810 2020282c branch ali_mesh_ali_vendor_message_opcode_para_uint16 + +ali_mesh_ali_vendor_message_indication_info_add_head_event_trigger: +2811 20402833 call ali_mesh_ali_vendor_message_indication_info_add_head +2812 5800f009 setarg vendor_attr_type_event_trigger +2813 e7e10005 istore 2 ,contw +2814 20600000 rtn + +ali_mesh_ali_vendor_message_ack_attr_status_uint64: +2815 df200008 arg 8 ,loopcnt +2816 20202821 branch ali_mesh_ali_vendor_message_ack_attr_status + +ali_mesh_ali_vendor_message_ack_attr_status_uint56: +2817 df200008 arg 8 ,loopcnt +2818 20202821 branch ali_mesh_ali_vendor_message_ack_attr_status + +ali_mesh_ali_vendor_message_ack_attr_status_uint48: +2819 df200006 arg 6 ,loopcnt +281a 20202821 branch ali_mesh_ali_vendor_message_ack_attr_status + +ali_mesh_ali_vendor_message_ack_attr_status_uint32: +281b df200004 arg 4 ,loopcnt +281c 20202821 branch ali_mesh_ali_vendor_message_ack_attr_status + +ali_mesh_ali_vendor_message_ack_attr_status_uint16: +281d df200002 arg 2 ,loopcnt +281e 20202821 branch ali_mesh_ali_vendor_message_ack_attr_status + +ali_mesh_ali_vendor_message_ack_attr_status_uint8: +281f df200001 arg 1 ,loopcnt +2820 20202821 branch ali_mesh_ali_vendor_message_ack_attr_status + +ali_mesh_ali_vendor_message_ack_attr_status: +2821 1f20fe06 add loopcnt ,6 ,pdata +2822 67e08a0f store 1 ,mem_mesh_access_layer_payload_len +2823 204027ee call ali_mesh_ali_vendor_message_status_add_head +2824 d8c009fd arg mem_mesh_vendor_attr_parameter ,contr +2825 20407d5f call memcpy +2826 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +ali_mesh_ali_vendor_message_opcode_para_uint8: +2827 20402833 call ali_mesh_ali_vendor_message_indication_info_add_head +2828 e2210005 istorer rega ,2 ,contw +2829 e0408005 istoret 1 ,contw +282a 700a0f07 jam 7 ,mem_mesh_access_layer_payload_len +282b 20202831 branch ali_mesh_ali_vendor_message_send_message + +ali_mesh_ali_vendor_message_opcode_para_uint16: +282c 20402833 call ali_mesh_ali_vendor_message_indication_info_add_head +282d e2210005 istorer rega ,2 ,contw +282e e0410005 istoret 2 ,contw +282f 700a0f08 jam 8 ,mem_mesh_access_layer_payload_len +2830 20202831 branch ali_mesh_ali_vendor_message_send_message + +ali_mesh_ali_vendor_message_send_message: +2831 20402ef8 call ali_mesh_more_element_calc_queue_address +2832 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message_without_cleat_tx_buffer + +ali_mesh_ali_vendor_message_indication_info_add_head: +2833 6fe0c932 fetch 1 ,mem_mesh_transport_aid +2834 67e08c14 store 1 ,mem_mesh_message_transport_head +2835 580000f0 setarg vendor_message_tmall_dst +2836 67e10c35 store 2 ,mem_mesh_send_message_dst +2837 6fe0c7a5 fetch 1 ,mem_mesh_vendor_mesh_send_tid +2838 1fe0fe01 pincrease 1 +2839 67e0c7a5 store 1 ,mem_mesh_vendor_mesh_send_tid +283a c0602842 beq vendor_message_send_tid_max ,ali_mesh_ali_vendor_message_indication_info_reset_tid +283b 580000d4 setarg vendor_message_attr_indication +283c 67e08a10 store 1 ,mem_mesh_access_layer_payload +283d 580001a8 setarg vendor_message_opcode_company_id +283e e7e10005 istore 2 ,contw +283f 6fe0c7a5 fetch 1 ,mem_mesh_vendor_mesh_send_tid +2840 e7e08005 istore 1 ,contw +2841 20600000 rtn + +ali_mesh_ali_vendor_message_indication_info_reset_tid: +2842 7047a580 jam vendor_message_send_tid_min ,mem_mesh_vendor_mesh_send_tid +2843 20600000 rtn + +ali_mesh_time_function: +2844 1c420400 copy clkn_bt ,temp +2845 6fe247aa fetch 4 ,mem_system_time +2846 98467c00 isub temp ,null +2847 20412856 call ali_mesh_timer_timeout ,positive +2848 2040285d call ali_mesh_clkn_bt_add_1s +2849 98467c00 isub temp ,null +284a 20610000 rtn positive +284b 20402851 call ali_mesh_time_init_system_time_without_clk +284c 6fe247a6 fetch 4 ,mem_mesh_vendor_timer_current_time +284d 1fe0fe01 pincrease 1 +284e 67e247a6 store 4 ,mem_mesh_vendor_timer_current_time +284f 20202861 branch ali_mesh_ali_vendor_check_time + +ali_mesh_time_init_system_time: +2850 1c427e00 copy clkn_bt ,pdata + +ali_mesh_time_init_system_time_without_clk: +2851 67e247aa store 4 ,mem_system_time +2852 6fe0c7ad fetch 1 ,mem_system_time + 3 +2853 1fe17e0f and_into 0x0f ,pdata +2854 67e0c7ad store 1 ,mem_system_time + 3 +2855 20600000 rtn + +ali_mesh_timer_timeout: +2856 20628000 rtn zero +2857 1fe22400 copy pdata ,regb +2858 58100000 setarg 0x100000 +2859 1fed7e00 lshift8 pdata ,pdata +285a 98408400 iadd temp ,temp +285b 1a427e00 copy regb ,pdata +285c 20600000 rtn + +ali_mesh_clkn_bt_add_1s: +285d df200014 arg 20 ,loopcnt + +ali_mesh_time_loop: +285e 1fe0fea0 pincrease 160 +285f c200285e loop ali_mesh_time_loop +2860 20600000 rtn + +ali_mesh_ali_vendor_check_time: +2861 20402de1 call mesh_get_element_info_config +2862 1a20a204 add rega ,element_device_vendor_time_ptr ,rega +2863 704a1200 jam 0 ,mem_mesh_receive_element_number + +ali_mesh_ali_vendor_check_time_loop: +2864 20402eee call ali_mesh_more_element_push_stack +2865 efe10011 ifetch 2 ,rega +2866 203a2869 branch ali_mesh_ali_vendor_check_time_next_element ,blank +2867 1fe26000 copy pdata ,alarm +2868 20402873 call ali_mesh_ali_vendor_check_time_one_element + +ali_mesh_ali_vendor_check_time_next_element: +2869 20402ef3 call ali_mesh_more_element_pop_stack +286a 6fe0ca12 fetch 1 ,mem_mesh_receive_element_number +286b 1fe0fe01 pincrease 1 +286c 67e0ca12 store 1 ,mem_mesh_receive_element_number +286d 6848c9db fetcht 1 ,mem_mesh_element_number +286e 98467e00 isub temp ,pdata +286f 20628000 rtn zero +2870 1a427e00 copy regb ,pdata +2871 9a20a200 iadd rega ,rega +2872 20202864 branch ali_mesh_ali_vendor_check_time_loop + +ali_mesh_ali_vendor_check_time_one_element: +2873 df200028 arg 40 ,loopcnt + +ali_mesh_ali_vendor_check_time_one_element_loop: +2874 1f227e00 copy loopcnt ,pdata +2875 67e08c00 store 1 ,mem_mesh_loopcnt_tmep +2876 efe08030 ifetch 1 ,alarm +2877 245a287d ncall ali_mesh_ali_vendor_had_timing ,blank +2878 1e00e008 increase 8 ,alarm +2879 6fe08c00 fetch 1 ,mem_mesh_loopcnt_tmep +287a 1fe27200 copy pdata ,loopcnt +287b c2002874 loop ali_mesh_ali_vendor_check_time_one_element_loop +287c 20600000 rtn + +ali_mesh_ali_vendor_had_timing: +287d e8440030 ifetcht 8 ,alarm +287e 604c09fd storet 8 ,mem_mesh_vendor_timer_timing_index_cyclic +287f 6fe08a04 fetch 1 ,mem_mesh_vendor_timer_timing_attr_para +2880 c02ca897 beq timer_cyclical_falg ,ali_mesh_ali_vendor_had_timing_cyclically +2881 684a47a6 fetcht 4 ,mem_mesh_vendor_timer_current_time +2882 6fe209fe fetch 4 ,mem_mesh_vendor_timer_timing_time +2883 98467c00 isub temp ,null +2884 6fe08a04 fetch 1 ,mem_mesh_vendor_timer_timing_attr_para +2885 2022a887 branch ali_mesh_ali_vendor_time_timeout ,zero +2886 20600000 rtn + +ali_mesh_ali_vendor_time_timeout: +2887 67e089f9 store 1 ,mem_mesh_generic_onoff_set_payload_onoff +2888 6fe149bf fetch 2 ,mem_mesh_cb_generic_onoff_set +2889 20407e05 call callback_func +288a 1e027e00 copy alarm ,pdata +288b 67e10c08 store 2 ,mem_mesh_alarm_temp +288c 68e0ca12 fetchr queue ,1 ,mem_mesh_receive_element_number +288d e8408030 ifetcht 1 ,alarm +288e 2040280d call ali_mesh_ali_vendor_message_opcode_timing_finish +288f 684889f9 fetcht 1 ,mem_mesh_generic_onoff_set_payload_onoff +2890 68e0ca12 fetchr queue ,1 ,mem_mesh_receive_element_number +2891 204027fa call ali_mesh_ali_vendor_message_opcode_generic_onoff +2892 6fe10c08 fetch 2 ,mem_mesh_alarm_temp +2893 1fe26000 copy pdata ,alarm +2894 58000000 setarg 0 +2895 e7e08030 istore 1 ,alarm +2896 202027c2 branch ali_mesh_ali_vendor_message_cb_timing_changed + +ali_mesh_ali_vendor_had_timing_cyclically: +2897 6fe247a6 fetch 4 ,mem_mesh_vendor_timer_current_time +2898 d840003c arg seconds_of_min ,temp +2899 9846fc00 idiv temp +289a 20407def call wait_div_end +289b 18077e00 remainder pdata +289c 247a0000 nrtn blank +289d 6fe247a6 fetch 4 ,mem_mesh_vendor_timer_current_time +289e d8454600 arg seconds_of_four_days ,temp +289f 98467e00 isub temp ,pdata +28a0 d8493a80 arg seconds_of_week ,temp +28a1 9846fc00 idiv temp +28a2 20407def call wait_div_end +28a3 18077e00 remainder pdata +28a4 d8415180 arg seconds_of_day ,temp +28a5 9846fc00 idiv temp +28a6 20407def call wait_div_end +28a7 18072200 remainder rega +28a8 18078e00 quotient queue +28a9 58000000 setarg 0 +28aa f9207e00 qset1 pdata +28ab 68488a00 fetcht 1 ,mem_mesh_vendor_timer_timing_weekdays_cyclic +28ac 98417e00 iand temp ,pdata +28ad 207a0000 rtn blank +28ae 1a227e00 deposit rega +28af d840003c arg seconds_of_min ,temp +28b0 9846fc00 idiv temp +28b1 20407def call wait_div_end +28b2 18078400 quotient temp +28b3 580001e0 setarg eight_hours_time_zone_offset +28b4 98408400 iadd temp ,temp +28b5 6fe109fe fetch 2 ,mem_mesh_vendor_timer_timing_time_cyclic +28b6 98467c00 isub temp ,null +28b7 24628000 nrtn zero +28b8 6fe08a03 fetch 1 ,mem_mesh_vendor_timer_timing_attr_para_cyclic +28b9 20202887 branch ali_mesh_ali_vendor_time_timeout + +ali_mesh_bearer_layer_send_packet_by_network_layer: +28ba 4777403d bpatchx patch3d_6 ,mem_patch3d +28bb 700a7414 jam adv_pairing_mesh_message_duration ,mem_mesh_queue_ele_duration +28bc 6fe0c957 fetch 1 ,mem_mesh_gatt_package_send_msg_id +28bd 67e08a75 store 1 ,mem_mesh_queue_ele_gatt_msg_id +28be 6fe08bff fetch 1 ,mem_mesh_lower_transport_layer_payload_len +28bf 1fe0fe0b pincrease 11 +28c0 1fe0f3fe add pdata ,-2 ,loopcnt +28c1 67e08a76 store 1 ,mem_mesh_queue_ele_len +28c2 1fe0ffff pincrease -1 +28c3 e7e08005 istore 1 ,contw +28c4 5800002a setarg gap_adtype_mesh_message +28c5 e7e08005 istore 1 ,contw +28c6 d8c04b3d arg mem_mesh_send_upper_layer_ivi_and_nid ,contr +28c7 20407d52 call memcpy_fast +28c8 6a210c02 fetchr rega ,2 ,mem_mesh_rega_temp +28c9 204028cb call ali_mesh_advertising_bearer_layer_init_queue_param +28ca 2020793f branch queue_push + +ali_mesh_advertising_bearer_layer_init_queue_param: +28cb 1a208c02 add rega ,element_device_queue_buffer_ptr ,contr +28cc efe10006 ifetch 2 ,contr +28cd 67e1448a store 2 ,mem_queue_ptr +28ce da200a74 arg mem_mesh_queue_ele_temp ,rega +28cf 20600000 rtn + +ali_mesh_advertising_bearer_layer_load_packet_from_advertising_queue: +28d0 da6028d2 arg ali_mesh_advertising_bearer_layer_load_packet_from_advertising_queue_deal ,regc +28d1 20202dec branch ali_mesh_check_all_element_info + +ali_mesh_advertising_bearer_layer_load_packet_from_advertising_queue_deal: +28d2 1a208c16 add rega ,element_device_upper_adv_flag ,contr +28d3 efe08006 ifetch 1 ,contr +28d4 c1808000 rtnne packet_in_bearer +28d5 58000002 setarg packet_in_adverting +28d6 1a208a16 add rega ,element_device_upper_adv_flag ,contw +28d7 e7e08005 istore 1 ,contw +28d8 20202a09 branch ali_mesh_control_ble_advertising_on_advertising + +ali_mesh_advertising_bearer_layer_send_packet_by_app_bearer: +28d9 204028e7 call ali_mesh_advertising_bearer_layer_generate_header +28da 1840fe0d add temp ,13 ,pdata +28db 67e0c7ae store 1 ,mem_mesh_adv_data_len +28dc 204028fe call ali_mesh_advertising_add_adtype_flags +28dd 1840fe09 add temp ,9 ,pdata +28de e7e08005 istore 1 ,contw +28df 580000ff setarg gap_adtype_manufacturer_specific +28e0 e7e08005 istore 1 ,contw +28e1 6fe40bec fetch 8 ,mem_mesh_receive_service_uuid_ios_data_company_id +28e2 e7e40005 istore 8 ,contw +28e3 1a220c00 copy rega ,contr +28e4 18427200 copy temp ,loopcnt +28e5 20407d5f call memcpy +28e6 20202943 branch mesh_le_send_adv + +ali_mesh_advertising_bearer_layer_generate_header: +28e7 580ea801 setarg company_id_alibaba_and_vid_gatt +28e8 67e18bec store 3 ,mem_mesh_receive_service_uuid_ios_data_company_id +28e9 58000007 setarg provisioning_send_ios_data +28ea 67e08bef store 1 ,mem_mesh_receive_service_uuid_ios_data_provisioning_type +28eb 6fe0c8d1 fetch 1 ,mem_k2_nid +28ec 67e08bf0 store 1 ,mem_mesh_receive_service_uuid_ios_data_nid +28ed 6fe08a75 fetch 1 ,mem_mesh_queue_ele_gatt_msg_id +28ee 67e08bf1 store 1 ,mem_mesh_receive_service_uuid_ios_data_msg_id +28ef 6fe08a74 fetch 1 ,mem_mesh_queue_ele_duration +28f0 2feffe07 isolate1 bit_of_app_package_num ,pdata +28f1 204028f5 call ali_mesh_advertising_bearer_layer_send_packet_by_app_bearer_calc_param +28f2 67e08bf2 store 1 ,mem_mesh_receive_service_uuid_ios_data_package_num +28f3 60488bf3 storet 1 ,mem_mesh_receive_service_uuid_ios_data_length +28f4 20600000 rtn + +ali_mesh_advertising_bearer_layer_send_packet_by_app_bearer_calc_param: +28f5 da200a79 arg mem_mesh_queue_ele_payload + 2 ,rega +28f6 d8400012 arg max_app_mssage_payload_length ,temp +28f7 58000021 setarg 0x21 +28f8 24608000 nrtn true +28f9 da200a8b arg mem_mesh_queue_ele_payload + 20 ,rega +28fa 68488a76 fetcht 1 ,mem_mesh_queue_ele_len +28fb 184085ee increase -18 ,temp +28fc 58000022 setarg 0x22 +28fd 20600000 rtn + +ali_mesh_advertising_add_adtype_flags: +28fe d8a047af arg mem_mesh_adv_data ,contw +28ff 58000002 setarg 0x02 +2900 e7e08005 istore 1 ,contw +2901 58000001 setarg gap_adtype_flags +2902 e7e08005 istore 1 ,contw +2903 58000002 setarg 0x02 +2904 e7e08005 istore 1 ,contw +2905 20600000 rtn + +ali_mesh_advertising_add_adtype_16bit_complete: +2906 d8401827 arg mesh_provisioning_uuid ,temp +2907 58000003 setarg 0x03 +2908 e7e08005 istore 1 ,contw +2909 58000003 setarg gap_adtype_16bit_complete +290a e7e08005 istore 1 ,contw +290b e0410005 istoret 2 ,contw +290c 20600000 rtn + +mesh_receive_advertising: +290d 2020290e branch mesh_le_scan_adv + +mesh_le_scan_adv: +290e 204016a5 call le_enable +290f 20401c38 call le_init_adv +2910 20402918 call mesh_le_wait_adv +2911 24768000 nrtn match +2912 6fe08002 fetch 1 ,mem_le_adv_rcv +2913 1fe0fe01 pincrease 1 +2914 67e08002 store 1 ,mem_le_adv_rcv +2915 6fe149b5 fetch 2 ,mem_mesh_cb_receive_advertising +2916 20407e05 call callback_func +2917 202016b2 branch le_disable + +mesh_le_wait_adv: +2918 2040291a call mesh_le_calc_next_scan_channel +2919 2020174a branch le_receive_adv + +mesh_le_calc_next_scan_channel: +291a 6fe0c7ce fetch 1 ,mem_mesh_adv_scan_channel +291b 1fe0fe01 pincrease 1 +291c 67e0c7ce store 1 ,mem_mesh_adv_scan_channel +291d 67e08016 store 1 ,mem_le_ch_mapped +291e c1940000 rtnne 40 +291f 7047ce25 jam 37 ,mem_mesh_adv_scan_channel +2920 70001625 jam 37 ,mem_le_ch_mapped +2921 20600000 rtn + +mesh_check_ble_rx_packet: +2922 6fe0816b fetch 1 ,mem_le_rxbuf +2923 1fe17e0f and pdata ,0x0f ,pdata +2924 c0002927 beq adv_ind ,ali_mesh_match_advertising_packet +2925 c0012927 beq adv_nonconn_ind ,ali_mesh_match_advertising_packet +2926 20600000 rtn + +ali_mesh_match_advertising_packet: +2927 e8408006 ifetcht 1 ,contr +2928 18467c06 sub temp ,adv_packet_min_length ,null +2929 20610000 rtn positive +292a 18467c25 sub temp ,adv_packet_max_length ,null +292b 24610000 nrtn positive +292c 1840a3fa add temp ,-6 ,rega +292d 18c0a406 add contr ,6 ,regb + +ali_mesh_find_adv_ind_packet: +292e e8408012 ifetcht 1 ,regb +292f 18467c01 sub temp ,ad_type_min_length ,null +2930 20610000 rtn positive +2931 18467c1e sub temp ,ad_type_max_length ,null +2932 24610000 nrtn positive +2933 18427e00 copy temp ,pdata +2934 207a0000 rtn blank +2935 4777c03d bpatchx patch3d_7 ,mem_patch3d +2936 efe08006 ifetch 1 ,contr +2937 c07fac3d beq gap_adtype_manufacturer_specific ,ali_mesh_receive_adtype_manufacturer_specific +2938 c0152f06 beq gap_adtype_mesh_message ,ali_mesh_receive_adtype_mesh_message +2939 c003acb5 beq gap_adtype_128bit_complete ,ali_mesh_receive_adtype_128bit_uuid_complete +293a 1840fe01 add temp ,1 ,pdata +293b 9a267c00 isub rega ,null +293c 20610000 rtn positive +293d 9a40a400 iadd regb ,regb +293e 18467fff sub temp ,-1 ,pdata +293f 9a20a200 iadd rega ,rega +2940 1a227e00 copy rega ,pdata +2941 207a0000 rtn blank +2942 2020292e branch ali_mesh_find_adv_ind_packet + +mesh_le_send_adv: +2943 6fe08000 fetch 1 ,mem_le_adv_transmit +2944 1fe0fe01 pincrease 1 +2945 67e08000 store 1 ,mem_le_adv_transmit +2946 4778403e bpatchx patch3e_0 ,mem_patch3e +2947 204016a5 call le_enable +2948 df200027 arg 39 ,loopcnt +2949 d8c041f5 arg mem_le_txheader ,contr +294a d8a00a97 arg mem_le_txheader_mesh_temp ,contw +294b 20407d52 call memcpy_fast +294c 70001625 jam 37 ,mem_le_ch_mapped +294d db600708 arg 1800 ,stop_watch +294e 7856fc00 disable match + +mesh_le_send_adv_loop: +294f 20401c38 call le_init_adv +2950 2040295f call mesh_le_send_adv_nonconn_ind +2951 180a7e00 random pdata +2952 d84001ff arg 0x1ff ,temp +2953 98417e00 iand temp ,pdata +2954 1fe0fe64 add pdata ,100 ,pdata +2955 20407d0e call delay +2956 6fe08016 fetch 1 ,mem_le_ch_mapped +2957 1fe0fe01 pincrease 1 +2958 67e08016 store 1 ,mem_le_ch_mapped +2959 c094294f bne 40 ,mesh_le_send_adv_loop +295a df200027 arg 39 ,loopcnt +295b d8a041f5 arg mem_le_txheader ,contw +295c d8c00a97 arg mem_le_txheader_mesh_temp ,contr +295d 20407d52 call memcpy_fast +295e 202016b2 branch le_disable + +mesh_le_send_adv_nonconn_ind: +295f d8400002 arg adv_nonconn_ind ,temp +2960 6048c1f5 storet 1 ,mem_le_txheader +2961 6848c7ae fetcht 1 ,mem_mesh_adv_data_len +2962 1840fe06 add temp ,6 ,pdata +2963 67e0c1f6 store 1 ,mem_le_txlen +2964 6fe3437a fetch 6 ,mem_le_lap +2965 67e341f7 store 6 ,mem_le_txpayload +2966 18427200 copy temp ,loopcnt +2967 d8c047af arg mem_mesh_adv_data ,contr +2968 20407d52 call memcpy_fast +2969 20201836 branch le_transmit_norx + +ali_mesh_base_adt_cache: +296a 4778c03e bpatchx patch3e_1 ,mem_patch3e +296b 68490be1 fetcht 2 ,mem_ccm_data_ptr +296c 6fe08be0 fetch 1 ,mem_ccm_data_len +296d 18420c00 copy temp ,contr +296e da2048f2 arg mem_k4_salt ,rega +296f de004902 arg mem_k4_t ,alarm +2970 20402b88 call ali_mesh_encrypt_base_function_aes_cmac +2971 20407e56 call disable_user +2972 1a627e00 copy regc ,pdata +2973 9e008c00 iadd alarm ,contr +2974 684a4902 fetcht 4 ,mem_k4_t +2975 6fe10bfd fetch 2 ,mem_mesh_mic_cache_ptr +2976 1fe22200 copy pdata ,rega +2977 df20000a arg transport_mic_cache_space_num ,loopcnt + +ali_mesh_base_adt_cache_loop: +2978 efe20011 ifetch 4 ,rega +2979 203a2985 branch ali_mesh_base_adt_cache_empty_space ,blank +297a 98467c00 isub temp ,null +297b 20628000 rtn zero +297c 1a20a204 increase transport_mic_cache_space_size ,rega +297d c2002978 loop ali_mesh_base_adt_cache_loop +297e 6fe10bfd fetch 2 ,mem_mesh_mic_cache_ptr +297f 1fe20a00 copy pdata ,contw +2980 1fe08c04 add pdata ,transport_mic_cache_space_size ,contr +2981 df200024 arg transport_mic_cache_total_size ,loopcnt +2982 20407d52 call memcpy_fast +2983 e0420005 istoret 4 ,contw +2984 20207e54 branch enable_user + +ali_mesh_base_adt_cache_empty_space: +2985 e0420011 istoret 4 ,rega +2986 20207e54 branch enable_user + +ali_mesh_chip_peripherals_load_data_from_eep: +2987 2040298e call ali_mesh_chip_peripherals_load_three_tuple_from_eep +2988 20402992 call ali_mesh_chip_peripherals_load_network_key_from_eep +2989 20402999 call ali_mesh_chip_peripherals_load_application_key_from_eep +298a 2040299d call ali_mesh_chip_peripherals_load_device_key_from_eep +298b 204029a1 call ali_mesh_chip_peripherals_load_reset_count_from_eep +298c 204029a5 call ali_mesh_chip_peripherals_load_seq_from_eep +298d 202029a9 branch ali_mesh_chip_peripherals_load_subscription_from_eep + +ali_mesh_chip_peripherals_load_three_tuple_from_eep: +298e d840001a arg mesh_eep_three_tuple_length ,temp +298f da20499b arg mem_mesh_three_tuple_productid ,rega +2990 da400000 arg mesh_eep_three_tuple_offset ,regb +2991 20205ddc branch iicd_read_eep_data + +ali_mesh_chip_peripherals_load_network_key_from_eep: +2992 d8400013 arg mesh_eep_network_key_length ,temp +2993 da20493e arg mem_mesh_network_key ,rega +2994 da40001a arg mesh_eep_network_key_offset ,regb +2995 20405ddc call iicd_read_eep_data +2996 6fe0c94e fetch 1 ,mem_mesh_last_iv_index_byte +2997 67e0ca16 store 1 ,mem_mesh_iv_index + 3 +2998 20600000 rtn + +ali_mesh_chip_peripherals_load_application_key_from_eep: +2999 d8400010 arg mesh_eep_application_key_length ,temp +299a da204afe arg mem_mesh_application_key ,rega +299b da40002d arg mesh_eep_application_key_offset ,regb +299c 20205ddc branch iicd_read_eep_data + +ali_mesh_chip_peripherals_load_device_key_from_eep: +299d d8400010 arg mesh_eep_device_key_length ,temp +299e da204824 arg mem_mesh_device_key ,rega +299f da40003d arg mesh_eep_device_key_offset ,regb +29a0 20205ddc branch iicd_read_eep_data + +ali_mesh_chip_peripherals_load_reset_count_from_eep: +29a1 20600000 rtn +29a2 d8400001 arg mesh_eep_reset_count_length ,temp +29a3 da40004d arg mesh_eep_reset_count_offset ,regb +29a4 20205ddc branch iicd_read_eep_data + +ali_mesh_chip_peripherals_load_seq_from_eep: +29a5 d8400003 arg mesh_eep_seq_length ,temp +29a6 da204b37 arg mem_mesh_send_message_seq ,rega +29a7 da40004e arg mesh_eep_seq_offset ,regb +29a8 20205ddc branch iicd_read_eep_data + +ali_mesh_chip_peripherals_load_subscription_from_eep: +29a9 6fe149d9 fetch 2 ,mem_mesh_core_feature +29aa c3810000 rtnbit1 mesh_feature_disable_subscription +29ab d8400040 arg mesh_eep_subscription_total_length ,temp +29ac da20098e arg mem_mesh_subscription_eep_temp ,rega +29ad da400051 arg mesh_eep_subscription_offset ,regb +29ae 20405ddc call iicd_read_eep_data +29af 20402de1 call mesh_get_element_info_config +29b0 d8c0098e arg mem_mesh_subscription_eep_temp ,contr +29b1 1a20a206 add rega ,element_device_subscription_label ,rega + +ali_mesh_chip_peripherals_load_subscription_from_eep_loop: +29b2 1a220a00 copy rega ,contw +29b3 20407d0c call memcpy16 +29b4 1a427e00 copy regb ,pdata +29b5 9a20a200 iadd rega ,rega +29b6 c20029b2 loop ali_mesh_chip_peripherals_load_subscription_from_eep_loop +29b7 20600000 rtn + +mesh_receive_config_appkey_add_cb: +29b8 204029bb call ali_mesh_chip_peripherals_save_network_key_from_eep +29b9 204029bf call ali_mesh_chip_peripherals_save_application_key_from_eep +29ba 202029c3 branch ali_mesh_chip_peripherals_save_device_key_from_eep + +ali_mesh_chip_peripherals_save_network_key_from_eep: +29bb d8400013 arg mesh_eep_network_key_length ,temp +29bc da20493e arg mem_mesh_network_key ,rega +29bd da40001a arg mesh_eep_network_key_offset ,regb +29be 20205e02 branch iicd_write_eep_data + +ali_mesh_chip_peripherals_save_application_key_from_eep: +29bf d8400010 arg mesh_eep_application_key_length ,temp +29c0 da204afe arg mem_mesh_application_key ,rega +29c1 da40002d arg mesh_eep_application_key_offset ,regb +29c2 20205e02 branch iicd_write_eep_data + +ali_mesh_chip_peripherals_save_device_key_from_eep: +29c3 d8400010 arg mesh_eep_device_key_length ,temp +29c4 da204824 arg mem_mesh_device_key ,rega +29c5 da40003d arg mesh_eep_device_key_offset ,regb +29c6 20205e02 branch iicd_write_eep_data + +mesh_store_new_seq_data: + +ali_mesh_chip_peripherals_save_seq_from_eep: +29c7 d8400003 arg mesh_eep_seq_length ,temp +29c8 da204b37 arg mem_mesh_send_message_seq ,rega +29c9 da40004e arg mesh_eep_seq_offset ,regb +29ca 20205e02 branch iicd_write_eep_data + +mesh_store_new_subscriptuion_list_data: +29cb 204029d0 call ali_mesh_chip_peripherals_save_subscriptuion_list_from_eep +29cc d8400040 arg mesh_eep_subscription_total_length ,temp +29cd da20098e arg mem_mesh_subscription_eep_temp ,rega +29ce da400051 arg mesh_eep_subscription_offset ,regb +29cf 20205e02 branch iicd_write_eep_data + +ali_mesh_chip_peripherals_save_subscriptuion_list_from_eep: +29d0 20402de1 call mesh_get_element_info_config +29d1 d8a0098e arg mem_mesh_subscription_eep_temp ,contw +29d2 1a20a206 add rega ,element_device_subscription_label ,rega + +ali_mesh_chip_peripherals_save_subscriptuion_list_from_eep_loop: +29d3 1a220c00 copy rega ,contr +29d4 20407d0c call memcpy16 +29d5 1a427e00 copy regb ,pdata +29d6 9a20a200 iadd rega ,rega +29d7 c20029d3 loop ali_mesh_chip_peripherals_save_subscriptuion_list_from_eep_loop +29d8 20600000 rtn + +logging_tx_debug: +29d9 d8400000 arg logging_debug ,temp +29da 202029e3 branch logging_tx_common + +logging_tx_info: +29db d8400001 arg logging_info ,temp +29dc 202029e3 branch logging_tx_common + +logging_tx_warning: +29dd d8400002 arg logging_warning ,temp +29de 202029e3 branch logging_tx_common + +logging_tx_error: +29df d8400003 arg logging_error ,temp +29e0 202029e3 branch logging_tx_common + +logging_tx_critical: +29e1 d8400004 arg logging_critical ,temp +29e2 202029e3 branch logging_tx_common + +logging_tx_common: +29e3 4779403e bpatchx patch3e_2 ,mem_patch3e +29e4 20407cc8 call push_stack +29e5 20405f11 call uartb_prepare_tx_register_push +29e6 580000aa setarg lua_log_packet_header +29e7 e7e08003 istore 1 ,contwu +29e8 58000003 setarg lua_log_pakcet_type +29e9 e7e08003 istore 1 ,contwu +29ea 1f20fe04 add loopcnt ,4 ,pdata +29eb e7e08003 istore 1 ,contwu +29ec e0410003 istorer temp ,2 ,contwu +29ed e2410003 istorer regb ,2 ,contwu +29ee 1a220c00 copy rega ,contr +29ef 20405f1f call uart_copy_tx_bytes_fast +29f0 580000bb setarg lua_log_packet_trail +29f1 e7e08003 istore 1 ,contwu +29f2 20405f15 call uartb_send_register_pop +29f3 20207cd4 branch pop_stack + +mesh_uart_init: +29f4 204029fb call mesh_uart_init_buffer +29f5 d84e1000 arg 921600 ,temp +29f6 20405eca call uartb_calc_baud_rate_config +29f7 20405ed7 call uart_clock_select_main_freq_crystal +29f8 d8400081 arg fun_uart_control_enable | fun_uart_control_setting_rate_baud ,temp +29f9 60588061 storet 1 ,core_uartb_ctrl +29fa 20600000 rtn + +mesh_uart_init_buffer: +29fb 58001c00 setarg mem_mesh_uart_log_rx_buff +29fc 67e1095c store 2 ,mem_pdatatemp +29fd 58001c01 setarg mem_mesh_uart_log_rx_buff_end +29fe e7e10005 istore 2 ,contw +29ff 58001c02 setarg mem_mesh_uart_log_tx_buff +2a00 e7e10005 istore 2 ,contw +2a01 58001fff setarg mem_mesh_uart_log_tx_buff_end +2a02 e7e10005 istore 2 ,contw +2a03 6fe4095c fetch 8 ,mem_pdatatemp +2a04 20205eb2 branch uartb_init_dma_mem + +ali_mesh_control_ble_adv_process: +2a05 20402a15 call ali_mesh_control_ble_adv_tmall_packet +2a06 20202a0d branch ali_mesh_control_ble_adv_app_packet + +ali_mesh_control_ble_adv_timer_process: +2a07 20402a72 call ali_mesh_advertising_unprovisioned_timer_interval_timer +2a08 20202a68 branch ali_mesh_advertising_unprovisioned_timer + +ali_mesh_control_ble_advertising_on_advertising: +2a09 7047cf01 jam device_beacon_on ,mem_mesh_advertising_unprovisioned_device_beacon_switch +2a0a 20600000 rtn + +ali_mesh_control_ble_advertising_off_advertising: +2a0b 7047cf00 jam device_beacon_off ,mem_mesh_advertising_unprovisioned_device_beacon_switch +2a0c 20600000 rtn + +ali_mesh_control_ble_adv_app_packet: +2a0d da402a11 arg ali_mesh_control_ble_adv_app_packet_paired ,regb +2a0e da200015 arg mesh_adv_app_message_interval ,rega +2a0f d8e0000d arg mesh_ble_adv_app ,queue +2a10 20202a5d branch ali_mesh_chip_timer_check_with_random_timer + +ali_mesh_control_ble_adv_app_packet_paired: +2a11 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2a12 c1800000 rtnne paired_status +2a13 da602a19 arg ali_mesh_control_ble_adv_app_packet_paired_deal ,regc +2a14 20202dec branch ali_mesh_check_all_element_info + +ali_mesh_control_ble_adv_tmall_packet: +2a15 da402a26 arg ali_mesh_control_ble_adv_tmall_packet_send_package ,regb +2a16 da20001d arg mesh_adv_tmall_message_interval ,rega +2a17 d8e0000e arg mesh_ble_adv_tmall ,queue +2a18 20202a5d branch ali_mesh_chip_timer_check_with_random_timer + +ali_mesh_control_ble_adv_app_packet_paired_deal: +2a19 1a208c1a add rega ,element_device_tran_package_type ,contr +2a1a efe08006 ifetch 1 ,contr +2a1b c4008000 rtnbit0 bit_upper_tran_app_message +2a1c 204028cb call ali_mesh_advertising_bearer_layer_init_queue_param +2a1d 20407967 call queue_get_new_ele +2a1e 24740000 nrtn user +2a1f 6fe08a76 fetch 1 ,mem_mesh_queue_ele_len +2a20 1fe0fffe pincrease -2 +2a21 67e08a76 store 1 ,mem_mesh_queue_ele_len +2a22 6fe08a74 fetch 1 ,mem_mesh_queue_ele_duration +2a23 79407e07 setflip bit_of_app_package_num ,pdata +2a24 e7e08012 istore 1 ,regb +2a25 202028d9 branch ali_mesh_advertising_bearer_layer_send_packet_by_app_bearer + +ali_mesh_control_ble_adv_tmall_packet_send_package: +2a26 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2a27 c0002a2a beq paired_status ,ali_mesh_control_ble_advertising_send_paired_packet +2a28 c0012a5b beq pairing_status ,ali_mesh_control_ble_advertising_send_pairing_packet +2a29 20202a4a branch ali_mesh_control_ble_advertising_send_device_beacon_packet + +ali_mesh_control_ble_advertising_send_paired_packet: +2a2a da602a2c arg ali_mesh_control_ble_advertising_send_paired_packet_deal ,regc +2a2b 20202dec branch ali_mesh_check_all_element_info + +ali_mesh_control_ble_advertising_send_paired_packet_deal: +2a2c 204028cb call ali_mesh_advertising_bearer_layer_init_queue_param +2a2d 20407967 call queue_get_new_ele +2a2e 24740000 nrtn user +2a2f 6fe08a74 fetch 1 ,mem_mesh_queue_ele_duration +2a30 1fe0ffff pincrease -1 +2a31 e7e08012 istore 1 ,regb +2a32 c2832a3d bbit1 bit_of_adv_in_off ,ali_mesh_control_ble_advertising_send_paired_packet_adv_in_off +2a33 1fe17e3f and pdata ,0x3f ,pdata +2a34 205a2a44 call ali_mesh_control_ble_advertising_send_paired_packet_end_duration ,blank +2a35 6a210c02 fetchr rega ,2 ,mem_mesh_rega_temp +2a36 1a208c1a add rega ,element_device_tran_package_type ,contr +2a37 efe08006 ifetch 1 ,contr +2a38 c4000000 rtnbit0 bit_upper_tran_tmall_message +2a39 d8a047ae arg mem_mesh_adv_data_len ,contw +2a3a d8c00a76 arg mem_mesh_queue_ele_len ,contr +2a3b 20407d0a call memcpy32 +2a3c 20202943 branch mesh_le_send_adv + +ali_mesh_control_ble_advertising_send_paired_packet_adv_in_off: +2a3d 1fe17e3f and pdata ,0x3f ,pdata +2a3e 247a0000 nrtn blank +2a3f 6a210c02 fetchr rega ,2 ,mem_mesh_rega_temp +2a40 1a208a16 add rega ,element_device_upper_adv_flag ,contw +2a41 58000000 setarg null_packet_advertising +2a42 e7e08005 istore 1 ,contw +2a43 2020793a branch queue_init + +ali_mesh_control_ble_advertising_send_paired_packet_end_duration: +2a44 da200a74 arg mem_mesh_queue_ele_duration ,rega +2a45 20407956 call queue_pop +2a46 20407985 call queue_empty +2a47 247a0000 nrtn blank +2a48 700a7454 jam adv_pairing_mesh_message_interval ,mem_mesh_queue_ele_duration +2a49 2020793f branch queue_push + +ali_mesh_control_ble_advertising_send_device_beacon_packet: +2a4a 20402c16 call ali_mesh_config_device_uuid_by_three_tuple +2a4b 20402c22 call ali_mesh_send_unprovisioned_beacons_tmall +2a4c 20402c30 call ali_mesh_advertising_send_unprovisioned_beacons_gatt +2a4d 20402a53 call ali_mesh_control_ble_advertising_device_beacon_check_duration +2a4e 24628000 nrtn zero +2a4f 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2a50 c001aa57 beq silence_beacon_status ,ali_mesh_end_advertising_silence_device_beacon_packet +2a51 c000aa59 beq unprovisioned_beacon_status ,ali_mesh_end_advertising_unprovisioned_device_beacon_packet +2a52 20600000 rtn + +ali_mesh_control_ble_advertising_device_beacon_check_duration: +2a53 6fe0c7d2 fetch 1 ,mem_mesh_advertising_unprovisioned_device_beacon_duration +2a54 1fe0ffff add pdata ,-1 ,pdata +2a55 67e0c7d2 store 1 ,mem_mesh_advertising_unprovisioned_device_beacon_duration +2a56 20600000 rtn + +ali_mesh_end_advertising_silence_device_beacon_packet: +2a57 7047d358 jam adv_silence_device_beacon_interval ,mem_mesh_advertising_unprovisioned_device_beacon_interval +2a58 20202a0b branch ali_mesh_control_ble_advertising_off_advertising + +ali_mesh_end_advertising_unprovisioned_device_beacon_packet: +2a59 7047d306 jam adv_unprovisioned_device_beacon_duration ,mem_mesh_advertising_unprovisioned_device_beacon_interval +2a5a 20202a0b branch ali_mesh_control_ble_advertising_off_advertising + +ali_mesh_control_ble_advertising_send_pairing_packet: +2a5b 20402c93 call ali_mesh_advertising_timer +2a5c 20202943 branch mesh_le_send_adv + +ali_mesh_chip_timer_check_with_random_timer: +2a5d 180a7e00 random pdata +2a5e 1fe17e07 and pdata ,0x07 ,pdata +2a5f 9a20a200 iadd rega ,rega + +ali_mesh_chip_timer_check: +2a60 6fe0c7cf fetch 1 ,mem_mesh_advertising_unprovisioned_device_beacon_switch +2a61 c1808000 rtnne device_beacon_on +2a62 20407d74 call timer_check +2a63 247a0000 nrtn blank +2a64 1a227e00 copy rega ,pdata +2a65 20407d66 call timer_init +2a66 1a427e00 copy regb ,pdata +2a67 20207e05 branch callback_func + +ali_mesh_advertising_unprovisioned_timer: +2a68 da6047d0 arg mem_mesh_advertising_unprovisioned_device_beacon_timer ,regc +2a69 da402a6b arg ali_mesh_advertising_unprovisioned_timeout ,regb +2a6a 20203191 branch timer_single_step_2b + +ali_mesh_advertising_unprovisioned_timeout: +2a6b 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2a6c c1808000 rtnne unprovisioned_beacon_status +2a6d 6fe0c936 fetch 1 ,mem_mesh_uuid_featureflag +2a6e 79207e00 set1 bit_silence_adv_flag ,pdata +2a6f 67e0c936 store 1 ,mem_mesh_uuid_featureflag +2a70 70493303 jam silence_beacon_status ,mem_mesh_provisioned_flag +2a71 20202a7b branch ali_mesh_send_silence_device_beacon_init_advertising + +ali_mesh_advertising_unprovisioned_timer_interval_timer: +2a72 da6047d3 arg mem_mesh_advertising_unprovisioned_device_beacon_interval ,regc +2a73 da402a75 arg ali_mesh_advertising_unprovisioned_timer_interval_timeout ,regb +2a74 2020318a branch timer_single_step + +ali_mesh_advertising_unprovisioned_timer_interval_timeout: +2a75 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2a76 c001aa7b beq silence_beacon_status ,ali_mesh_send_silence_device_beacon_init_advertising +2a77 c000aa79 beq unprovisioned_beacon_status ,ali_mesh_send_unprovisioned_device_beacon_init_advertising +2a78 20600000 rtn + +ali_mesh_send_unprovisioned_device_beacon_init_advertising: +2a79 7047d206 jam adv_unprovisioned_device_beacon_duration ,mem_mesh_advertising_unprovisioned_device_beacon_duration +2a7a 20202a09 branch ali_mesh_control_ble_advertising_on_advertising + +ali_mesh_send_silence_device_beacon_init_advertising: +2a7b 7047d206 jam adv_silence_device_beacon_duration ,mem_mesh_advertising_unprovisioned_device_beacon_duration +2a7c 20202a09 branch ali_mesh_control_ble_advertising_on_advertising + +ali_mesh_encrypt_calc_random_data: +2a7d 20402a83 call ali_mesh_encrypt_calc_random_data_calc_confirmationkey +2a7e 20402a8b call ali_mesh_encrypt_calc_random_data_calc_authvalueprov +2a7f 20402a90 call ali_mesh_encrypt_calc_random_data_calc_authvaluedevice +2a80 20402a95 call ali_mesh_encrypt_calc_random_data_calc_confirmationcloud +2a81 20402a9d call ali_mesh_encrypt_calc_random_data_calc_confirmationdevice +2a82 20202aa1 branch ali_mesh_encrypt_calc_random_data_calc_devicekey + +ali_mesh_encrypt_calc_random_data_calc_confirmationkey: +2a83 20402aae call ali_mesh_encrypt_load_randomab_to_sha256 +2a84 d8c04844 arg mem_mesh_sha256_confirmationkey_ascii ,contr +2a85 df20000f arg 0xf ,loopcnt +2a86 20402b0e call ali_mesh_encrypt_base_function_sha256_load_data_without_hex2ascii +2a87 20402b28 call ali_mesh_encrypt_base_function_sha256_calc +2a88 d8c00900 arg memresult ,contr +2a89 d8a04834 arg mem_mesh_confirmationkey ,contw +2a8a 20207d0c branch memcpy16 + +ali_mesh_encrypt_calc_random_data_calc_authvalueprov: +2a8b 20402ab1 call ali_mesh_encrypt_load_three_tuple_to_sha256 +2a8c 20402b28 call ali_mesh_encrypt_base_function_sha256_calc +2a8d d8c00900 arg memresult ,contr +2a8e d8a047e4 arg mem_mesh_authvalueprov ,contw +2a8f 20207d0c branch memcpy16 + +ali_mesh_encrypt_calc_random_data_calc_authvaluedevice: +2a90 20402ab1 call ali_mesh_encrypt_load_three_tuple_to_sha256 +2a91 20402b28 call ali_mesh_encrypt_base_function_sha256_calc +2a92 d8c00900 arg memresult ,contr +2a93 d8a04814 arg mem_mesh_authvaluedevice ,contw +2a94 20207d0c branch memcpy16 + +ali_mesh_encrypt_calc_random_data_calc_confirmationcloud: +2a95 6fe44804 fetch 8 ,mem_mesh_provisioning_random_a +2a96 67e447dc store 8 ,mem_mesh_confirmationcloud_randoma +2a97 6fe4480c fetch 8 ,mem_mesh_provisioning_random_b +2a98 67e447d4 store 8 ,mem_mesh_confirmationcloud_randomb +2a99 d8c047d4 arg mem_mesh_calc_confirmationcloud_data ,contr +2a9a da204834 arg mem_mesh_confirmationkey ,rega +2a9b de0047f4 arg mem_mesh_confirmationcloud ,alarm +2a9c 20202b76 branch ali_mesh_encrypt_base_function_aes_cmac_32byte + +ali_mesh_encrypt_calc_random_data_calc_confirmationdevice: +2a9d d8c04804 arg mem_mesh_calc_confirmationdevice_data ,contr +2a9e da204834 arg mem_mesh_confirmationkey ,rega +2a9f de004804 arg mem_mesh_confirmationdevice ,alarm +2aa0 20202b76 branch ali_mesh_encrypt_base_function_aes_cmac_32byte + +ali_mesh_encrypt_calc_random_data_calc_devicekey: +2aa1 d8c047f4 arg mem_mesh_confirmationcloud ,contr +2aa2 df200010 arg 0x10 ,loopcnt +2aa3 20402b0b call ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii +2aa4 d8c0485d arg mem_mesh_sha256_devicekey_ascii ,contr +2aa5 df200009 arg 9 ,loopcnt +2aa6 20402b0e call ali_mesh_encrypt_base_function_sha256_load_data_without_hex2ascii +2aa7 20402b28 call ali_mesh_encrypt_base_function_sha256_calc +2aa8 d8c00900 arg memresult ,contr +2aa9 d8a04824 arg mem_mesh_device_key ,contw +2aaa 20207d0c branch memcpy16 + +ali_mesh_encrypt_load_randomba_to_sha256: +2aab 20402aaf call ali_mesh_encrypt_load_randomb_to_sha256 + +ali_mesh_encrypt_load_randoma_to_sha256: +2aac d8c04804 arg mem_mesh_provisioning_random_a ,contr +2aad 20202b0a branch ali_mesh_encrypt_base_function_sha256_load_data_64bit + +ali_mesh_encrypt_load_randomab_to_sha256: +2aae 20402aac call ali_mesh_encrypt_load_randoma_to_sha256 + +ali_mesh_encrypt_load_randomb_to_sha256: +2aaf d8c0480c arg mem_mesh_provisioning_random_b ,contr +2ab0 20202b0a branch ali_mesh_encrypt_base_function_sha256_load_data_64bit + +ali_mesh_encrypt_load_three_tuple_to_sha256: +2ab1 d8c0499b arg mem_mesh_three_tuple_productid ,contr +2ab2 df200004 arg 4 ,loopcnt +2ab3 20402b11 call ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii_add_comma +2ab4 d8c0499f arg mem_mesh_three_tuple_mac ,contr +2ab5 df200006 arg 6 ,loopcnt +2ab6 20402b11 call ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii_add_comma +2ab7 d8c049a5 arg mem_mesh_three_tuple_secret ,contr +2ab8 df200010 arg 0x10 ,loopcnt +2ab9 20202b0b branch ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii + +ali_mesh_encrypt_calc_provisioning_data: +2aba 20402ac6 call ali_mesh_encrypt_calc_provisioning_data_calc_sessionkey + +ali_mesh_encrypt_calc_provisioning_data_xor_prov_data: +2abb da20493b arg mem_mesh_encrypt_provisioning_data ,rega +2abc da400900 arg memresult ,regb +2abd df20000b arg 0xb ,loopcnt + +ali_mesh_encrypt_calc_provisioning_data_xor_prov_data_loop: +2abe efe10011 ifetch 2 ,rega +2abf e8410012 ifetcht 2 ,regb +2ac0 9842fe00 ixor temp ,pdata +2ac1 e7e10011 istore 2 ,rega +2ac2 1a20a202 increase 2 ,rega +2ac3 1a40a402 increase 2 ,regb +2ac4 c2002abe loop ali_mesh_encrypt_calc_provisioning_data_xor_prov_data_loop +2ac5 20600000 rtn + +ali_mesh_encrypt_calc_provisioning_data_calc_sessionkey: +2ac6 d8c047f4 arg mem_mesh_confirmationcloud ,contr +2ac7 df200010 arg 0x10 ,loopcnt +2ac8 20402b0b call ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii +2ac9 d8c04853 arg mem_mesh_sha256_sessionkey_ascii ,contr +2aca df20000a arg 0xa ,loopcnt +2acb 20402b0e call ali_mesh_encrypt_base_function_sha256_load_data_without_hex2ascii +2acc 20202b28 branch ali_mesh_encrypt_base_function_sha256_calc + +ali_mesh_encrypt_calc_network_key_by_k2: +2acd d8c0493e arg mem_mesh_network_key ,contr +2ace d8a04891 arg mem_k2_n ,contw +2acf 20407d0c call memcpy16 + +ali_mesh_encrypt_base_function_k2: +2ad0 d8c04891 arg mem_k2_n ,contr +2ad1 da2048a1 arg mem_k2_salt ,rega +2ad2 de0048b1 arg mem_k2_t ,alarm +2ad3 20402b78 call ali_mesh_encrypt_base_function_aes_cmac_16byte +2ad4 de0048c1 arg mem_k2_t1 ,alarm +2ad5 da400001 arg 0x01 ,regb +2ad6 58000000 setarg 0 +2ad7 20402b7a call ali_mesh_encrypt_base_function_k2_aes_cmac_t +2ad8 6fe0c8d0 fetch 1 ,mem_k2_t1 + 15 +2ad9 1fe17e7f and pdata ,0x7f ,pdata +2ada 67e0c8d1 store 1 ,mem_k2_nid +2adb de0048e2 arg mem_k2_t2 ,alarm +2adc da400002 arg 0x02 ,regb +2add 58000010 setarg 0x10 +2ade da2048c1 arg mem_k2_t1 ,rega +2adf 20402b7a call ali_mesh_encrypt_base_function_k2_aes_cmac_t +2ae0 de0048d2 arg mem_k2_t3 ,alarm +2ae1 da400003 arg 0x03 ,regb +2ae2 58000010 setarg 0x10 +2ae3 da2048e2 arg mem_k2_t2 ,rega +2ae4 20202b7a branch ali_mesh_encrypt_base_function_k2_aes_cmac_t + +ali_mesh_encrypt_base_function_k4: +2ae5 d8c04afe arg mem_mesh_application_key ,contr +2ae6 da2048f2 arg mem_k4_salt ,rega +2ae7 de004902 arg mem_k4_t ,alarm +2ae8 20402b78 call ali_mesh_encrypt_base_function_aes_cmac_16byte +2ae9 d8c04912 arg mem_k4_id6_01 ,contr +2aea da204902 arg mem_k4_t ,rega +2aeb de004922 arg mem_k4_k4n ,alarm +2aec 58000004 setarg 4 +2aed 20402b88 call ali_mesh_encrypt_base_function_aes_cmac +2aee 6fe0c931 fetch 1 ,mem_k4_k4n + 15 +2aef 1fe17e3f and pdata ,0x3f ,pdata +2af0 79207e06 set1 transport_head_bit_akf ,pdata +2af1 67e0c932 store 1 ,mem_mesh_transport_aid +2af2 20600000 rtn + +ali_mesh_encrypt_obfuscation_deceypt_send_message: +2af3 da204b3e arg mem_mesh_send_upper_layer_ctl_and_ttl ,rega +2af4 6fe3cb44 fetch 7 ,mem_mesh_send_upper_layer_dst +2af5 20202af8 branch ali_mesh_encrypt_obfuscation_deceypt + +ali_mesh_encrypt_obfuscation_deceypt_recevie_message: +2af6 da200c0c arg mem_mesh_message_ttl ,rega +2af7 6fe38c12 fetch 7 ,mem_mesh_message_dst + +ali_mesh_encrypt_obfuscation_deceypt: +2af8 67e38bc7 store 7 ,mem_mesh_privacy_plaintext_privacy_random +2af9 58000000 setarg 0 +2afa 67e28bbe store 5 ,mem_mesh_privacy_plaintext_zero_string +2afb 20402b01 call ali_mesh_encrypt_generate_pecb +2afc 6fe30bce fetch 6 ,mem_mesh_pecb +2afd e8430011 ifetcht 6 ,rega +2afe 9842fe00 ixor temp ,pdata +2aff e7e30011 istore 6 ,rega +2b00 20600000 rtn + +ali_mesh_encrypt_generate_pecb: + +ali_mesh_encrypt_generate_privacy_random: +2b01 6fe24a13 fetch 4 ,mem_mesh_iv_index +2b02 67e20bc3 store 4 ,mem_mesh_privacy_plaintext_iv_index + +ali_mesh_encrypt_base_function_generate_pecb: +2b03 d8c048d2 arg mem_k2_privacykey ,contr +2b04 20406dbe call load_key +2b05 d8c00bbe arg mem_mesh_privacy_plaintext ,contr +2b06 20406dc0 call load_data128 +2b07 20406d59 call do_aes_ocb +2b08 d8a00bce arg mem_mesh_pecb ,contw +2b09 20206dd1 branch store_aes_result + +ali_mesh_encrypt_base_function_sha256_load_data_64bit: +2b0a df200008 arg 8 ,loopcnt + +ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii: +2b0b 20402b18 call ali_mesh_encrypt_base_function_sha256_check_first_load_data +2b0c 20402b67 call ali_mesh_encrypt_base_function_hex2ascii +2b0d 20202b15 branch ali_mesh_encrypt_base_function_sha256_store_dataptr + +ali_mesh_encrypt_base_function_sha256_load_data_without_hex2ascii: +2b0e 20402b18 call ali_mesh_encrypt_base_function_sha256_check_first_load_data +2b0f 20407d5f call memcpy +2b10 20202b15 branch ali_mesh_encrypt_base_function_sha256_store_dataptr + +ali_mesh_encrypt_base_function_sha256_load_data_with_hex2ascii_add_comma: +2b11 20402b18 call ali_mesh_encrypt_base_function_sha256_check_first_load_data +2b12 20402b67 call ali_mesh_encrypt_base_function_hex2ascii +2b13 5800002c setarg comma +2b14 e7e08005 istore 1 ,contw + +ali_mesh_encrypt_base_function_sha256_store_dataptr: +2b15 18a27e00 copy contw ,pdata +2b16 67e14877 store 2 ,mem_mesh_sha256_data_end_addr +2b17 20600000 rtn + +ali_mesh_encrypt_base_function_sha256_check_first_load_data: +2b18 18c20400 copy contr ,temp +2b19 1f222200 copy loopcnt ,rega +2b1a 6fe14877 fetch 2 ,mem_mesh_sha256_data_end_addr +2b1b 1fe20a00 copy pdata ,contw +2b1c 6fe0c866 fetch 1 ,mem_mesh_sha256_load_first_data_flag +2b1d 205a2b21 call ali_mesh_encrypt_base_function_sha256_first_load_data ,blank +2b1e 18420c00 copy temp ,contr +2b1f 1a227200 copy rega ,loopcnt +2b20 20600000 rtn + +ali_mesh_encrypt_base_function_sha256_first_load_data: +2b21 70486601 jam 1 ,mem_mesh_sha256_load_first_data_flag +2b22 20402b25 call ali_mesh_encrypt_base_function_sha256_clear_data_chunk +2b23 d8a00abe arg mem_mesh_sha256_chunk_start ,contw +2b24 20600000 rtn + +ali_mesh_encrypt_base_function_sha256_clear_data_chunk: +2b25 df200020 arg 0x20 ,loopcnt +2b26 d8a00abe arg mem_mesh_sha256_chunk_start ,contw +2b27 20207d17 branch memset0 + +ali_mesh_encrypt_base_function_sha256_calc: +2b28 20402b45 call ali_mesh_encrypt_base_function_sha256_load_data_end +2b29 da400010 arg mesh_encrypt_sha256_function_input ,regb +2b2a da200abe arg mem_mesh_sha256_chunk_start ,rega +2b2b 6f244867 fetchr loopcnt ,8 ,mem_mesh_sha256_data_len_byte +2b2c 204029d9 call logging_tx_debug +2b2d 20402b60 call ali_mesh_encrypt_base_function_sha256_input_data_init_inverse +2b2e 58000abe setarg mem_mesh_sha256_chunk_start +2b2f 67e1487e store 2 ,mem_mesh_sha256_chunk_ptr +2b30 2040729b call sha_init + +ali_mesh_encrypt_base_function_sha256_calc_loop: +2b31 6fe1487e fetch 2 ,mem_mesh_sha256_chunk_ptr +2b32 1fe20c00 copy pdata ,contr +2b33 d8a004a8 arg memdat ,contw +2b34 20407cff call memcpy64 +2b35 204072a2 call sha +2b36 6fe1487e fetch 2 ,mem_mesh_sha256_chunk_ptr +2b37 1fe0fe40 pincrease 64 +2b38 67e1487e store 2 ,mem_mesh_sha256_chunk_ptr +2b39 6fe0c87b fetch 1 ,mem_mesh_sha256_chunk_count +2b3a 1fe0ffff pincrease -1 +2b3b 67e0c87b store 1 ,mem_mesh_sha256_chunk_count +2b3c 243a2b31 nbranch ali_mesh_encrypt_base_function_sha256_calc_loop ,blank +2b3d 204072de call sha_result +2b3e da200900 arg memresult ,rega +2b3f df200020 arg 0x20 ,loopcnt +2b40 20407d37 call inverse_data +2b41 da400011 arg mesh_encrypt_sha256_function_result ,regb +2b42 da200900 arg memresult ,rega +2b43 df200020 arg 0x20 ,loopcnt +2b44 202029d9 branch logging_tx_debug + +ali_mesh_encrypt_base_function_sha256_load_data_end: +2b45 70486600 jam 0 ,mem_mesh_sha256_load_first_data_flag +2b46 6fe14877 fetch 2 ,mem_mesh_sha256_data_end_addr +2b47 1fe20a00 copy pdata ,contw +2b48 d8400080 arg 0x80 ,temp +2b49 e0408005 istoret 1 ,contw +2b4a d8400abe arg mem_mesh_sha256_chunk_start ,temp +2b4b 98467e00 isub temp ,pdata +2b4c 67e44867 store 8 ,mem_mesh_sha256_data_len_byte +2b4d 1fe98400 lshift3 pdata ,temp +2b4e 604c486f storet 8 ,mem_mesh_sha256_data_len_bit +2b4f 1ff1a600 rshift4 pdata ,regc +2b50 1a6b2600 rshift2 regc ,regc +2b51 1fe17e3f and pdata ,0x3f ,pdata +2b52 1fe67c37 sub pdata ,55 ,null +2b53 24412b5e ncall ali_mesh_encrypt_base_function_sha256_add_chunk ,positive +2b54 1a60fe01 add regc ,1 ,pdata +2b55 67e0c87b store 1 ,mem_mesh_sha256_chunk_count +2b56 1fefa240 mul32 pdata ,64 ,rega +2b57 1ff22600 lshift4 pdata ,regc +2b58 1a60a7ff increase -1 ,regc +2b59 58000aba setarg mem_mesh_sha256_chunk_start + decreased_four +2b5a 9a20a200 iadd rega ,rega +2b5b 6fe2486f fetch 4 ,mem_mesh_sha256_data_len_bit +2b5c e7e20011 istore 4 ,rega +2b5d 20600000 rtn + +ali_mesh_encrypt_base_function_sha256_add_chunk: +2b5e 1a60a601 increase 1 ,regc +2b5f 20600000 rtn + +ali_mesh_encrypt_base_function_sha256_input_data_init_inverse: +2b60 da200abe arg mem_mesh_sha256_chunk_start ,rega + +ali_mesh_encrypt_base_function_sha256_data_inverse_4byte: +2b61 df200004 arg 4 ,loopcnt +2b62 20407d37 call inverse_data +2b63 1a20a202 increase 2 ,rega +2b64 1a60a7ff add regc ,-1 ,regc +2b65 2422ab61 nbranch ali_mesh_encrypt_base_function_sha256_data_inverse_4byte ,zero +2b66 20600000 rtn + +ali_mesh_encrypt_base_function_hex2ascii: +2b67 efe08006 ifetch 1 ,contr +2b68 1ff18400 rshift4 pdata ,temp +2b69 20402b70 call ali_mesh_encrypt_base_function_dialog2uchar +2b6a e0408005 istoret 1 ,contw +2b6b 1fe1040f and pdata ,0x0f ,temp +2b6c 20402b70 call ali_mesh_encrypt_base_function_dialog2uchar +2b6d e0408005 istoret 1 ,contw +2b6e c2002b67 loop ali_mesh_encrypt_base_function_hex2ascii +2b6f 20600000 rtn + +ali_mesh_encrypt_base_function_dialog2uchar: +2b70 18467c09 sub temp ,9 ,null +2b71 20212b74 branch ali_mesh_encrypt_base_function_dialog2uchar_num ,positive +2b72 18408457 add temp ,87 ,temp +2b73 20600000 rtn + +ali_mesh_encrypt_base_function_dialog2uchar_num: +2b74 18408430 add temp ,48 ,temp +2b75 20600000 rtn + +ali_mesh_encrypt_base_function_aes_cmac_32byte: +2b76 58000020 setarg 0x20 +2b77 20202b88 branch ali_mesh_encrypt_base_function_aes_cmac + +ali_mesh_encrypt_base_function_aes_cmac_16byte: +2b78 58000010 setarg 0x10 +2b79 20202b88 branch ali_mesh_encrypt_base_function_aes_cmac + +ali_mesh_encrypt_base_function_k2_aes_cmac_t: +2b7a 6848c880 fetcht 1 ,mem_k2_p_len +2b7b 18408401 increase 1 ,temp +2b7c 98408400 iadd temp ,temp +2b7d 604884a7 storet 1 ,mem_aes_cmac_data_length +2b7e 1a220c00 copy rega ,contr +2b7f 1fe27200 copy pdata ,loopcnt +2b80 20407d52 call memcpy_fast +2b81 6848c880 fetcht 1 ,mem_k2_p_len +2b82 18427200 copy temp ,loopcnt +2b83 20407d5f call memcpy +2b84 1a427e00 copy regb ,pdata +2b85 e7e08005 istore 1 ,contw +2b86 da2048b1 arg mem_k2_t ,rega +2b87 20202b8b branch ali_mesh_encrypt_base_function_aes_cmac + 3 + +ali_mesh_encrypt_base_function_aes_cmac: +2b88 67e084a7 store 1 ,mem_aes_cmac_data_length +2b89 1fe27200 copy pdata ,loopcnt +2b8a 20407d52 call memcpy_fast +2b8b 1a220c00 copy rega ,contr +2b8c d8a0098e arg mem_aes_cmac_k ,contw +2b8d 20407d0c call memcpy16 +2b8e da400012 arg mesh_encrypt_aes_cmac_function_input_m ,regb +2b8f da2004a8 arg memdat ,rega +2b90 6f2084a7 fetchr loopcnt ,1 ,mem_aes_cmac_data_length +2b91 204029d9 call logging_tx_debug +2b92 da400013 arg mesh_encrypt_aes_cmac_function_input_k ,regb +2b93 da20098e arg mem_aes_cmac_k ,rega +2b94 df200010 arg 16 ,loopcnt +2b95 204029d9 call logging_tx_debug +2b96 20406a86 call function_aes_cmac +2b97 1e020a00 copy alarm ,contw +2b98 20406dd1 call store_aes_result +2b99 da400014 arg mesh_encrypt_aes_cmac_function_result ,regb +2b9a 1e022200 copy alarm ,rega +2b9b df200010 arg 16 ,loopcnt +2b9c 202029d9 branch logging_tx_debug + +ali_b0_block_generate: +2b9d 68488beb fetcht 1 ,mem_ccm_type +2b9e 20202ba0 branch ali_block_generate + +ali_a_block_generate: +2b9f 18000401 force 0x01 ,temp + +ali_block_generate: +2ba0 18007000 force regidx_data ,regext_index +2ba1 6fe10bde fetch 2 ,mem_nonce_ptr +2ba2 1fe20c00 copy pdata ,contr +2ba3 efe18006 ifetch 3 ,contr +2ba4 1fed7e00 lshift8 pdata ,pdata +2ba5 9841de00 ior temp ,regext +2ba6 1f00f001 increase 1 ,regext_index +2ba7 efe20006 ifetch 4 ,contr +2ba8 1fe25e00 copy pdata ,regext +2ba9 1f00f001 increase 1 ,regext_index +2baa efe20006 ifetch 4 ,contr +2bab 1fe25e00 copy pdata ,regext +2bac 1f00f001 increase 1 ,regext_index +2bad 1a30de00 byteswap rega ,regext +2bae 1df05e00 lshift16 regext ,regext +2baf efe10006 ifetch 2 ,contr +2bb0 9de1de00 ior regext ,regext +2bb1 20600000 rtn + +ali_generate_mic: +2bb2 6fe08be0 fetch 1 ,mem_ccm_data_len +2bb3 1fe22200 copy pdata ,rega +2bb4 20402b9d call ali_b0_block_generate +2bb5 20406d59 call do_aes_ocb +2bb6 1800700c force regidx_result ,regext_index +2bb7 1de27e00 deposit regext +2bb8 1a227200 copy rega ,loopcnt +2bb9 68490be1 fetcht 2 ,mem_ccm_data_ptr +2bba 18420c00 copy temp ,contr +2bbb 20406da8 call padding_data +2bbc 20206c88 branch generate_mic_loop + +ali_ccm_encrypt_64bit: +2bbd 700beb19 jam mic_size_64bit ,mem_ccm_type +2bbe 20202bc1 branch ali_ccm_encrypt_function + +ali_ccm_encrypt: +2bbf 700beb09 jam mic_size_32bit ,mem_ccm_type +2bc0 20202bc1 branch ali_ccm_encrypt_function + +ali_ccm_encrypt_function: +2bc1 67e08be0 store 1 ,mem_ccm_data_len +2bc2 60490be1 storet 2 ,mem_ccm_data_ptr +2bc3 4779c03e bpatchx patch3e_3 ,mem_patch3e +2bc4 20402bb2 call ali_generate_mic +2bc5 18007008 force regidx_xor ,regext_index +2bc6 98005e00 iforce regext +2bc7 1800700d force regidx_result + 1 ,regext_index +2bc8 1de27e00 copy regext ,pdata +2bc9 18007009 force regidx_xor + 1 ,regext_index +2bca 98005e00 iforce regext +2bcb 18002200 force 0 ,rega +2bcc 18422600 copy temp ,regc +2bcd 20402b9f call ali_a_block_generate +2bce 20406d5f call do_aes_ctr +2bcf 20402c00 call ali_fetcht_ccm_mic +2bd0 604c0be3 storet 8 ,mem_ccm_mic +2bd1 6fe08be0 fetch 1 ,mem_ccm_data_len +2bd2 1fe22400 copy pdata ,regb +2bd3 20402c08 call ali_aes_crypt_data +2bd4 68488be0 fetcht 1 ,mem_ccm_data_len +2bd5 6fe10be1 fetch 2 ,mem_ccm_data_ptr +2bd6 9840a200 iadd temp ,rega +2bd7 684c0be3 fetcht 8 ,mem_ccm_mic +2bd8 e0420011 istoret 4 ,rega +2bd9 6fe08beb fetch 1 ,mem_ccm_type +2bda 1fe67e09 sub pdata ,mic_size_32bit ,pdata +2bdb 207a0000 rtn blank +2bdc e0440011 istoret 8 ,rega +2bdd 20600000 rtn + +ali_ccm_decrypt_64bit: +2bde 700beb19 jam mic_size_64bit ,mem_ccm_type +2bdf 20202be2 branch ali_ccm_decrypt_function + +ali_ccm_decrypt: +2be0 700beb09 jam mic_size_32bit ,mem_ccm_type +2be1 20202be2 branch ali_ccm_decrypt_function + +ali_ccm_decrypt_function: +2be2 67e08be0 store 1 ,mem_ccm_data_len +2be3 60490be1 storet 2 ,mem_ccm_data_ptr +2be4 18422600 copy temp ,regc +2be5 1fe22400 copy pdata ,regb +2be6 9a608c00 iadd regc ,contr +2be7 477a403e bpatchx patch3e_4 ,mem_patch3e +2be8 efe40006 ifetch 8 ,contr +2be9 18007008 force regidx_xor ,regext_index +2bea 98005e00 iforce regext +2beb 18007009 force regidx_xor + 1 ,regext_index +2bec 1fef7e00 rshift32 pdata ,pdata +2bed 98005e00 iforce regext +2bee 18002200 force 0 ,rega +2bef 20402b9f call ali_a_block_generate +2bf0 20406d5f call do_aes_ctr +2bf1 20402c00 call ali_fetcht_ccm_mic +2bf2 604c0be3 storet 8 ,mem_ccm_mic +2bf3 20402c08 call ali_aes_crypt_data +2bf4 20402bb2 call ali_generate_mic +2bf5 20402c00 call ali_fetcht_ccm_mic +2bf6 6fe08beb fetch 1 ,mem_ccm_type +2bf7 c00cabfd beq mic_size_64bit ,ali_ccm_decrypt_function_check_mic64 +2bf8 604a0be7 storet 4 ,mem_ccm_mic + 4 +2bf9 6fe20be3 fetch 4 ,mem_ccm_mic +2bfa 684a0be7 fetcht 4 ,mem_ccm_mic + 4 +2bfb 98467e00 isub temp ,pdata +2bfc 20600000 rtn + +ali_ccm_decrypt_function_check_mic64: +2bfd 6fe40be3 fetch 8 ,mem_ccm_mic +2bfe 98467e00 isub temp ,pdata +2bff 20600000 rtn + +ali_fetcht_ccm_mic: +2c00 1800700c force regidx_result ,regext_index +2c01 1de27e00 deposit regext +2c02 1800700d force regidx_result + 1 ,regext_index +2c03 1de20400 copy regext ,temp +2c04 18500400 lshift16 temp ,temp +2c05 18500400 lshift16 temp ,temp +2c06 98418400 ior temp ,temp +2c07 20600000 rtn + +ali_aes_crypt_data: +2c08 1a20a201 increase 1 ,rega +2c09 20402b9f call ali_a_block_generate +2c0a 1a620c00 copy regc ,contr +2c0b 20406dbc call aes_load_xor +2c0c 20406d5f call do_aes_ctr +2c0d 20406dd8 call store_enc_data +2c0e 1a60a610 increase 16 ,regc +2c0f 1a40a5f0 increase -16 ,regb +2c10 20212c08 branch ali_aes_crypt_data ,positive +2c11 20600000 rtn + +mesh_send_unprovisioned_beacons: +2c12 70493301 jam unprovisioned_beacon_status ,mem_mesh_provisioned_flag +2c13 70493400 jam 0x00 ,mem_mesh_provisioning_state_flag +2c14 7047cf01 jam 1 ,mem_mesh_advertising_unprovisioned_device_beacon_switch +2c15 20600000 rtn + +ali_mesh_config_device_uuid_by_three_tuple: +2c16 580001a8 setarg company_identifiers_alibaba +2c17 67e10bec store 2 ,mem_mesh_device_uuid +2c18 6fe0c935 fetch 1 ,mem_mesh_device_pid +2c19 e7e08005 istore 1 ,contw +2c1a 6fe2499b fetch 4 ,mem_mesh_three_tuple_productid +2c1b 20407d4c call inverse_data_4byte +2c1c e7e20005 istore 4 ,contw +2c1d 6fe3437a fetch 6 ,mem_le_lap +2c1e e7e30005 istore 6 ,contw +2c1f 6fe1c936 fetch 3 ,mem_mesh_uuid_featureflag +2c20 e7e18005 istore 3 ,contw +2c21 20600000 rtn + +ali_mesh_send_unprovisioned_beacons_tmall: +2c22 20402c24 call ali_mesh_init_adv_data_tmall_unprovisioned_beacons_package +2c23 20202943 branch mesh_le_send_adv + +ali_mesh_init_adv_data_tmall_unprovisioned_beacons_package: +2c24 7047ae15 jam 0x15 ,mem_mesh_adv_data_len +2c25 58000014 setarg 0x14 +2c26 67e0c7af store 1 ,mem_mesh_adv_data +2c27 5800002b setarg gap_adtype_mesh_beacon +2c28 e7e08005 istore 1 ,contw +2c29 58000000 setarg unprovisioned_device_beacon +2c2a e7e08005 istore 1 ,contw + +ali_mesh_advertising_send_unprovisioned_beacons_store_device_uuid: +2c2b d8c00bec arg mem_mesh_device_uuid ,contr +2c2c 20407d0c call memcpy16 +2c2d 6fe14939 fetch 2 ,mem_mesh_oob_information +2c2e e7e10005 istore 2 ,contw +2c2f 20600000 rtn + +ali_mesh_advertising_send_unprovisioned_beacons_gatt: +2c30 20402c32 call ali_mesh_init_adv_data_gatt_unprovisioned_beacons_package +2c31 20202943 branch mesh_le_send_adv + +ali_mesh_init_adv_data_gatt_unprovisioned_beacons_package: +2c32 7047ae1d jam 0x1d ,mem_mesh_adv_data_len +2c33 204028fe call ali_mesh_advertising_add_adtype_flags +2c34 20402906 call ali_mesh_advertising_add_adtype_16bit_complete +2c35 20402c37 call ali_mesh_advertising_add_adtype_service_data +2c36 20202c2b branch ali_mesh_advertising_send_unprovisioned_beacons_store_device_uuid + +ali_mesh_advertising_add_adtype_service_data: +2c37 58000015 setarg 0x15 +2c38 e7e08005 istore 1 ,contw +2c39 58000016 setarg gap_adtype_service_data +2c3a e7e08005 istore 1 ,contw +2c3b e0410005 istoret 2 ,contw +2c3c 20600000 rtn + +ali_mesh_receive_adtype_manufacturer_specific: +2c3d 1840f3ff add temp ,-1 ,loopcnt +2c3e 20402d01 call ali_mesh_receive_provisioning_package_check_header +2c3f 24740000 nrtn user +2c40 efe08006 ifetch 1 ,contr +2c41 c0002c45 beq provisioning_random ,ali_mesh_advertising_receive_privisioning_random +2c42 c0012c60 beq provisioning_data ,ali_mesh_advertising_receive_privisioning_data +2c43 c0032c7f beq provisioning_ios_data ,ali_mesh_advertising_receive_privisioning_ios_data +2c44 20600000 rtn + +ali_mesh_advertising_receive_privisioning_random: +2c45 20402c52 call ali_mesh_advertising_receive_privisioning_random_check_states +2c46 24740000 nrtn user + +ali_mesh_advertising_calc_encrypt_random_data: +2c47 20402a7d call ali_mesh_encrypt_calc_random_data +2c48 20402c4a call ali_mesh_advertising_send_provisioning_confirmation +2c49 20202ca9 branch loggint_tx_info_send_confirmation_packet + +ali_mesh_advertising_send_provisioning_confirmation: +2c4a d8400012 arg provisioning_packet_confirmation_mac + provisioning_packet_confirmation_device ,temp +2c4b 20402c81 call ali_mesh_advertising_send_packet_common +2c4c 58000001 setarg provisioning_confirmation +2c4d e7e08005 istore 1 ,contw +2c4e 6fe149a3 fetch 2 ,mem_mesh_three_tuple_mac + 4 +2c4f e7e10005 istore 2 ,contw +2c50 d8c04804 arg mem_mesh_confirmationdevice ,contr +2c51 20207d0c branch memcpy16 + +ali_mesh_advertising_receive_privisioning_random_check_states: +2c52 20407e56 call disable_user +2c53 e8410006 ifetcht 2 ,contr +2c54 d8a04804 arg mem_mesh_provisioning_random_a ,contw +2c55 20407d0c call memcpy16 +2c56 6fe149a3 fetch 2 ,mem_mesh_three_tuple_mac + 4 +2c57 98467c00 isub temp ,null +2c58 24628000 nrtn zero +2c59 6fe0c934 fetch 1 ,mem_mesh_provisioning_state_flag +2c5a c3808000 rtnbit1 receive_provisioning_random +2c5b 79207e01 set1 receive_provisioning_random ,pdata +2c5c 67e0c934 store 1 ,mem_mesh_provisioning_state_flag +2c5d 70493302 jam pairing_status ,mem_mesh_provisioned_flag +2c5e 20402ca5 call loggint_tx_info_receive_random_packet +2c5f 20207e54 branch enable_user + +ali_mesh_advertising_receive_privisioning_data: +2c60 18c22200 copy contr ,rega +2c61 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2c62 c1000000 rtneq paired_status +2c63 6fe0c934 fetch 1 ,mem_mesh_provisioning_state_flag +2c64 c4008000 rtnbit0 receive_provisioning_random +2c65 c3810000 rtnbit1 receive_provisioning_data +2c66 1a220c00 copy rega ,contr +2c67 df200016 arg 0x16 ,loopcnt +2c68 d8a0493b arg mem_mesh_encrypt_provisioning_data ,contw +2c69 20407d5f call memcpy +2c6a 20402aba call ali_mesh_encrypt_calc_provisioning_data +2c6b 6849493b fetcht 2 ,mem_mesh_provisioning_data_mac_addr +2c6c 6fe149a3 fetch 2 ,mem_mesh_three_tuple_mac + 4 +2c6d 98467c00 isub temp ,null +2c6e 24628000 nrtn zero + +ali_mesh_resolve_privisioning_data_package: +2c6f 20402cad call loggint_tx_info_receive_data_packet +2c70 6fe0c934 fetch 1 ,mem_mesh_provisioning_state_flag +2c71 79207e02 set1 receive_provisioning_data ,pdata +2c72 67e0c934 store 1 ,mem_mesh_provisioning_state_flag +2c73 20402acd call ali_mesh_encrypt_calc_network_key_by_k2 +2c74 6fe0c94e fetch 1 ,mem_mesh_last_iv_index_byte +2c75 67e0ca16 store 1 ,mem_mesh_iv_index + 3 +2c76 20402c78 call ali_mesh_advertising_send_provisioning_complete +2c77 20202cb1 branch loggint_tx_info_send_complete_packet + +ali_mesh_advertising_send_provisioning_complete: +2c78 d8400006 arg provisioning_packet_complete_mac ,temp +2c79 20402c81 call ali_mesh_advertising_send_packet_common +2c7a 58000003 setarg provisioning_complete +2c7b e7e08005 istore 1 ,contw +2c7c 6fe3499f fetch 6 ,mem_mesh_three_tuple_mac +2c7d e7e30005 istore 6 ,contw +2c7e 20600000 rtn + +ali_mesh_advertising_receive_privisioning_ios_data: +2c7f da400012 arg max_length_privisioning_control_msg_android ,regb +2c80 20202ceb branch ali_mesh_resolve_app_control_msg_package + +ali_mesh_advertising_send_packet_common: +2c81 477ac03e bpatchx patch3e_5 ,mem_patch3e +2c82 20402c9f call ali_mesh_advertising_reset_adv_timer +2c83 58008fff setarg 0x8fff +2c84 67e14955 store 2 ,mem_mesh_send_packet_timeout +2c85 20402a09 call ali_mesh_control_ble_advertising_on_advertising +2c86 1840fe09 add temp ,provisioning_packet_length_ad_type_company_id_vid_provisioning_type + provisioning_packet_length_flags ,pdata +2c87 67e0c7ae store 1 ,mem_mesh_adv_data_len +2c88 204028fe call ali_mesh_advertising_add_adtype_flags +2c89 1840fe05 add temp ,provisioning_packet_ad_type_company_id_vid_provisioning_type ,pdata +2c8a e7e08005 istore 1 ,contw +2c8b 580000ff setarg gap_adtype_manufacturer_specific +2c8c e7e08005 istore 1 ,contw +2c8d 580001a8 setarg company_identifiers_alibaba +2c8e 1ff0fe00 byteswap pdata ,pdata +2c8f e7e10005 istore 2 ,contw +2c90 6fe08bfc fetch 1 ,mem_mesh_receive_vid +2c91 e7e08005 istore 1 ,contw +2c92 20600000 rtn + +ali_mesh_advertising_timer: +2c93 6fe24951 fetch 4 ,mem_mesh_adv_last_time +2c94 243a2c96 nbranch ali_mesh_advertising_check_adv_timer ,blank +2c95 20202c9f branch ali_mesh_advertising_reset_adv_timer + +ali_mesh_advertising_check_adv_timer: +2c96 1c427e00 deposit clkn_bt +2c97 684a4951 fetcht 4 ,mem_mesh_adv_last_time +2c98 98460400 isub temp ,temp +2c99 6fe14955 fetch 2 ,mem_mesh_send_packet_timeout +2c9a 98467c00 isub temp ,null +2c9b 20610000 rtn positive + +ali_mesh_advertising_adv_timer_timeout: +2c9c 20402a0b call ali_mesh_control_ble_advertising_off_advertising +2c9d 6fe149bb fetch 2 ,mem_mesh_cb_pairing_fail +2c9e 20207e05 branch callback_func + +ali_mesh_advertising_reset_adv_timer: +2c9f 1c427e00 deposit clkn_bt +2ca0 67e24951 store 4 ,mem_mesh_adv_last_time +2ca1 20600000 rtn + +logging_tx_debug_receive_provisioning_packet: +2ca2 18c0a3fd add contr ,-3 ,rega +2ca3 da400001 arg mesh_receive_provisioning_packet ,regb +2ca4 202029d9 branch logging_tx_debug + +loggint_tx_info_receive_random_packet: +2ca5 df200001 arg 1 ,loopcnt +2ca6 da400002 arg mesh_receive_provisioning_random_packet ,regb +2ca7 da204934 arg mem_mesh_provisioning_state_flag ,rega +2ca8 202029db branch logging_tx_info + +loggint_tx_info_send_confirmation_packet: +2ca9 6f20c7ae fetchr loopcnt ,1 ,mem_mesh_adv_data_len +2caa da400003 arg mesh_send_provisioning_confirmation_packet ,regb +2cab da2047af arg mem_mesh_adv_data ,rega +2cac 202029db branch logging_tx_info + +loggint_tx_info_receive_data_packet: +2cad df200001 arg 1 ,loopcnt +2cae da400004 arg mesh_receive_provisioning_data_packet ,regb +2caf da204934 arg mem_mesh_provisioning_state_flag ,rega +2cb0 202029db branch logging_tx_info + +loggint_tx_info_send_complete_packet: +2cb1 6f20c7ae fetchr loopcnt ,1 ,mem_mesh_adv_data_len +2cb2 da400005 arg mesh_send_provisioning_complete_packet ,regb +2cb3 da2047af arg mem_mesh_adv_data ,rega +2cb4 202029db branch logging_tx_info + +ali_mesh_receive_adtype_128bit_uuid_complete: +2cb5 20402cf9 call ali_mesh_receive_adtype_128bit_uuid_complete_store_uuid +2cb6 24740000 nrtn user +2cb7 6fe08bef fetch 1 ,mem_mesh_receive_service_uuid_ios_data_provisioning_type +2cb8 c0032ce9 beq provisioning_ios_data ,ali_mesh_ios_gatt_packet_parse_provisioning_app_control + +ali_mesh_ios_gatt_packet_pairing_type: +2cb9 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2cba c1000000 rtneq paired_status +2cbb c1018000 rtneq silence_beacon_status +2cbc 6fe10bf0 fetch 2 ,mem_mesh_receive_service_uuid_mac +2cbd 684949a3 fetcht 2 ,mem_mesh_three_tuple_mac + 4 +2cbe 98467c00 isub temp ,null +2cbf 24628000 nrtn zero +2cc0 da200bf2 arg mem_mesh_receive_service_uuid_msg_id ,rega +2cc1 da400007 arg max_length_privisioning_pairing_msg_ios ,regb +2cc2 20402d0b call ali_mesh_app_control_package_check_integrity +2cc3 20740000 rtn user +2cc4 477b403e bpatchx patch3e_6 ,mem_patch3e +2cc5 6fe08bef fetch 1 ,mem_mesh_receive_service_uuid_provisioning_type +2cc6 c0002cca beq provisioning_random ,ali_mesh_ios_gatt_packet_parse_provisioning_random +2cc7 c0012cce beq provisioning_data ,ali_mesh_ios_gatt_packet_parse_provisioning_data +2cc8 c0022cdd beq provisioning_config ,ali_mesh_ios_gatt_packet_parse_provisioning_config +2cc9 20600000 rtn + +ali_mesh_ios_gatt_packet_parse_provisioning_random: +2cca 6fe149a3 fetch 2 ,mem_mesh_three_tuple_mac + 4 +2ccb 67e10a78 store 2 ,mem_mesh_gatt_package_receive_mac +2ccc d8c00a78 arg mem_mesh_gatt_package_receive_mac ,contr +2ccd 20202c45 branch ali_mesh_advertising_receive_privisioning_random + +ali_mesh_ios_gatt_packet_parse_provisioning_data: +2cce 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2ccf c1000000 rtneq paired_status +2cd0 6fe0c934 fetch 1 ,mem_mesh_provisioning_state_flag +2cd1 c4008000 rtnbit0 receive_provisioning_random +2cd2 c3810000 rtnbit1 receive_provisioning_data +2cd3 d8c00a7a arg mem_mesh_gatt_package_receive_msg_payload ,contr +2cd4 df200014 arg 0x14 ,loopcnt +2cd5 d8a0493d arg mem_mesh_keyfresh_and_update_flag ,contw +2cd6 20407d5f call memcpy +2cd7 20402ac6 call ali_mesh_encrypt_calc_provisioning_data_calc_sessionkey +2cd8 da20493d arg mem_mesh_keyfresh_and_update_flag ,rega +2cd9 da400900 arg memresult ,regb +2cda df20000a arg 0x0a ,loopcnt +2cdb 20402abe call ali_mesh_encrypt_calc_provisioning_data_xor_prov_data_loop +2cdc 20202c6f branch ali_mesh_resolve_privisioning_data_package + +ali_mesh_ios_gatt_packet_parse_provisioning_config: +2cdd 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2cde c1808000 rtnne unprovisioned_beacon_status +2cdf 70493302 jam pairing_status ,mem_mesh_provisioned_flag + +ali_mesh_ios_gatt_packet_send_provisioning_config_ack: +2ce0 d8400003 arg provisioning_config_ack_mac + provisioning_config_ack_field ,temp +2ce1 20402c81 call ali_mesh_advertising_send_packet_common +2ce2 58000005 setarg provisioning_config_ack +2ce3 e7e08005 istore 1 ,contw +2ce4 6fe149a3 fetch 2 ,mem_mesh_three_tuple_mac + 4 +2ce5 e7e10005 istore 2 ,contw +2ce6 58000001 setarg provisioning_config_ack_note +2ce7 e7e08005 istore 1 ,contw +2ce8 20600000 rtn + +ali_mesh_ios_gatt_packet_parse_provisioning_app_control: +2ce9 d8c00bf0 arg mem_mesh_receive_service_uuid_ios_data_nid ,contr +2cea da400008 arg max_length_privisioning_control_msg_ios ,regb + +ali_mesh_resolve_app_control_msg_package: +2ceb 477bc03e bpatchx patch3e_7 ,mem_patch3e +2cec efe08006 ifetch 1 ,contr +2ced 18c22200 copy contr ,rega +2cee 6848c8d1 fetcht 1 ,mem_k2_nid +2cef 98467c00 isub temp ,null +2cf0 24628000 nrtn zero +2cf1 20402c9f call ali_mesh_advertising_reset_adv_timer +2cf2 20402d0b call ali_mesh_app_control_package_check_integrity +2cf3 20740000 rtn user +2cf4 700c3a01 jam mesh_message_app ,mem_mesh_network_packet_type +2cf5 68488a79 fetcht 1 ,mem_mesh_gatt_package_receive_msg_total_length +2cf6 18408401 increase 1 ,temp +2cf7 d8c00a7a arg mem_mesh_gatt_package_receive_msg_payload ,contr +2cf8 20202f07 branch ali_mesh_network_layer_recevice_network_pdu + +ali_mesh_receive_adtype_128bit_uuid_complete_store_uuid: +2cf9 d8a00bec arg mem_mesh_receive_service_uuid_company_id ,contw +2cfa 20407d0c call memcpy16 +2cfb da200bec arg mem_mesh_receive_service_uuid_company_id ,rega +2cfc df200010 arg 16 ,loopcnt +2cfd 20407d37 call inverse_data +2cfe df200010 arg 16 ,loopcnt +2cff d8c00bec arg mem_mesh_receive_service_uuid_company_id ,contr +2d00 20202d01 branch ali_mesh_receive_provisioning_package_check_header + +ali_mesh_receive_provisioning_package_check_header: +2d01 20407e56 call disable_user +2d02 e8410006 ifetcht 2 ,contr +2d03 580001a8 setarg company_identifiers_alibaba +2d04 1ff0fe00 byteswap pdata ,pdata +2d05 98467c00 isub temp ,null +2d06 24628000 nrtn zero +2d07 efe08006 ifetch 1 ,contr +2d08 67e08bfc store 1 ,mem_mesh_receive_vid +2d09 20407e54 call enable_user +2d0a 20202ca2 branch logging_tx_debug_receive_provisioning_packet + +ali_mesh_app_control_package_check_integrity: +2d0b 477c403f bpatchx patch3f_0 ,mem_patch3f +2d0c 20402d44 call ali_mesh_app_control_package_check_msgid_legal +2d0d 20202d0e branch ali_mesh_app_control_package_check_rev_complete + +ali_mesh_app_control_package_check_rev_complete: +2d0e 1a208c01 add rega ,gatt_package_package_num ,contr +2d0f e8408006 ifetcht 1 ,contr +2d10 1851fe00 rshift4 temp ,pdata +2d11 c000ad3e beq 1 ,ali_mesh_gatt_package_check_integrity_unsegment + +ali_mesh_gatt_package_check_integrity_segment: +2d12 1fe67c04 sub pdata ,max_gatt_package_num ,null +2d13 24217e54 nbranch enable_user ,positive +2d14 1fe27200 copy pdata ,loopcnt +2d15 20402d34 call ali_mesh_gatt_package_check_integrity_segment_expect_package_num +2d16 18410e0f and temp ,0x0f ,queue +2d17 98e67c00 isub queue ,null +2d18 2042ad2d call ali_mesh_gatt_package_check_integrity_segment_calc_total_length ,zero +2d19 18e08fff increase -1 ,queue +2d1a 6fe08a78 fetch 1 ,mem_mesh_gatt_package_receive_msg_num +2d1b afefffff qisolate1 pdata +2d1c 2020fe54 branch enable_user ,true +2d1d f9207e00 qset1 pdata +2d1e 67e08a78 store 1 ,mem_mesh_gatt_package_receive_msg_num +2d1f 1a208c02 add rega ,gatt_package_length ,contr +2d20 efe08006 ifetch 1 ,contr +2d21 1fe27200 copy pdata ,loopcnt +2d22 1a427e00 copy regb ,pdata +2d23 98effe00 imul32 queue ,pdata +2d24 d8a00a7a arg mem_mesh_gatt_package_receive_msg_payload ,contw +2d25 98a08a00 iadd contw ,contw +2d26 20407d52 call memcpy_fast +2d27 6fe08a78 fetch 1 ,mem_mesh_gatt_package_receive_msg_num +2d28 9a667c00 isub regc ,null +2d29 2442fe54 ncall enable_user ,zero +2d2a 2422ad39 nbranch ali_mesh_gatt_package_store_receive_msg_buffer ,zero + +ali_mesh_gatt_package_check_integrity_segment_complete: +2d2b 20402d65 call ali_mesh_gatt_package_clear_receive_msg_buffer +2d2c 20207e56 branch disable_user + +ali_mesh_gatt_package_check_integrity_segment_calc_total_length: +2d2d 1fe0ffff pincrease -1 +2d2e 9a4ffe00 imul32 regb ,pdata +2d2f 1a208c02 add rega ,gatt_package_length ,contr +2d30 e8408006 ifetcht 1 ,contr +2d31 9840fe00 iadd temp ,pdata +2d32 67e08a79 store 1 ,mem_mesh_gatt_package_receive_msg_total_length +2d33 20600000 rtn + +ali_mesh_gatt_package_check_integrity_segment_expect_package_num: +2d34 da600000 arg 0 ,regc + +ali_mesh_gatt_package_check_integrity_segment_expect_package_num_loop: +2d35 1f208fff add loopcnt ,-1 ,queue +2d36 f9202600 qset1 regc +2d37 c2002d35 loop ali_mesh_gatt_package_check_integrity_segment_expect_package_num_loop +2d38 20600000 rtn + +ali_mesh_gatt_package_store_receive_msg_buffer: +2d39 6fe10a74 fetch 2 ,mem_mesh_gatt_package_receive_msg_buffer_ptr +2d3a 1fe20a00 copy pdata ,contw +2d3b d8c00a76 arg mem_mesh_gatt_package_receive_msg_buffer_temp ,contr +2d3c df200021 arg 33 ,loopcnt +2d3d 20207d52 branch memcpy_fast + +ali_mesh_gatt_package_check_integrity_unsegment: +2d3e efe08006 ifetch 1 ,contr +2d3f 1fe27200 copy pdata ,loopcnt +2d40 67e08a79 store 1 ,mem_mesh_gatt_package_receive_msg_total_length +2d41 d8a00a7a arg mem_mesh_gatt_package_receive_msg_payload ,contw +2d42 20407d5f call memcpy +2d43 20207e56 branch disable_user + +ali_mesh_app_control_package_check_msgid_legal: +2d44 70495832 jam gatt_receive_timeout ,mem_mesh_gatt_receive_msg_timer +2d45 20402d53 call ali_mesh_gatt_package_get_msgid +2d46 68494959 fetcht 2 ,mem_mesh_gatt_packet_receive_msg_buffer1 +2d47 98467c00 isub temp ,null +2d48 2022ad57 branch ali_mesh_gatt_package_load_receive_msg_buffer1 ,zero +2d49 18467c00 sub temp ,0 ,null +2d4a 2022ad57 branch ali_mesh_gatt_package_load_receive_msg_buffer1 ,zero +2d4b 6849497a fetcht 2 ,mem_mesh_gatt_packet_receive_msg_buffer2 +2d4c 98467c00 isub temp ,null +2d4d 2022ad5a branch ali_mesh_gatt_package_load_receive_msg_buffer2 ,zero +2d4e 18467c00 sub temp ,0 ,null +2d4f 2022ad5a branch ali_mesh_gatt_package_load_receive_msg_buffer2 ,zero +2d50 20402d65 call ali_mesh_gatt_package_clear_receive_msg_buffer +2d51 20402d53 call ali_mesh_gatt_package_get_msgid +2d52 20202d57 branch ali_mesh_gatt_package_load_receive_msg_buffer1 + +ali_mesh_gatt_package_get_msgid: +2d53 efe08011 ifetch 1 ,rega +2d54 207a0000 rtn blank +2d55 79207e08 set1 8 ,pdata +2d56 20600000 rtn + +ali_mesh_gatt_package_load_receive_msg_buffer1: +2d57 67e14959 store 2 ,mem_mesh_gatt_packet_receive_msg_buffer1 +2d58 58004959 setarg mem_mesh_gatt_packet_receive_msg_buffer1 +2d59 20202d5d branch ali_mesh_gatt_package_load_receive_msg_buffer + +ali_mesh_gatt_package_load_receive_msg_buffer2: +2d5a 67e1497a store 2 ,mem_mesh_gatt_packet_receive_msg_buffer2 +2d5b 5800497a setarg mem_mesh_gatt_packet_receive_msg_buffer2 +2d5c 20202d5d branch ali_mesh_gatt_package_load_receive_msg_buffer + +ali_mesh_gatt_package_load_receive_msg_buffer: +2d5d 67e10a74 store 2 ,mem_mesh_gatt_package_receive_msg_buffer_ptr +2d5e 1fe20c00 copy pdata ,contr +2d5f d8a00a76 arg mem_mesh_gatt_package_receive_msg_buffer_temp ,contw +2d60 df200021 arg gatt_receive_msg_buffer_size ,loopcnt +2d61 20207d52 branch memcpy_fast + +ali_mesh_gatt_package_receive_timer: +2d62 da604958 arg mem_mesh_gatt_receive_msg_timer ,regc +2d63 da402d65 arg ali_mesh_gatt_package_clear_receive_msg_buffer ,regb +2d64 2020318a branch timer_single_step + +ali_mesh_gatt_package_clear_receive_msg_buffer: +2d65 d8a04959 arg mem_mesh_gatt_packet_receive_msg_buffer1 ,contw +2d66 df200042 arg gatt_receive_msg_buffer_size + gatt_receive_msg_buffer_size ,loopcnt +2d67 20207d26 branch clear_mem + +ali_mesh_access_layer_config_or_health_message_opcode: +2d68 6fe089f8 fetch 1 ,mem_mesh_configuration_health_message_opcode +2d69 c024ad6d beq mesh_message_opcode_config_node_reset_no_head ,ali_mesh_access_layer_config_or_health_message_opcode_node_reset +2d6a c00dad76 beq mesh_message_opcode_config_model_subscription_add_no_head ,ali_mesh_message_config_modle_subscription_add +2d6b c00e2d7d beq mesh_message_opcode_config_model_subscription_delete_no_head ,ali_mesh_message_config_modle_subscription_delete +2d6c 20600000 rtn + +ali_mesh_access_layer_config_or_health_message_opcode_node_reset: +2d6d 20402d70 call ali_mesh_access_layer_send_config_node_reset_status +2d6e 6fe149d1 fetch 2 ,mem_mesh_cb_receive_node_reset +2d6f 20207e05 branch callback_func + +ali_mesh_access_layer_send_config_node_reset_status: +2d70 58000080 setarg mesh_configuration_and_health_message_opcode_header +2d71 67e08a10 store 1 ,mem_mesh_access_layer_payload +2d72 5800004a setarg mesh_message_opcode_config_node_reset_status_no_head +2d73 e7e08005 istore 1 ,contw +2d74 700a0f02 jam 2 ,mem_mesh_access_layer_payload_len +2d75 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message + +ali_mesh_message_config_modle_subscription_add: +2d76 20402d9b call ali_mesh_message_config_modle_subscription_status +2d77 6fe149d9 fetch 2 ,mem_mesh_core_feature +2d78 c3810000 rtnbit1 mesh_feature_disable_subscription +2d79 20402da5 call ali_mesh_message_config_modle_subscription_check_element +2d7a 20402dae call ali_mesh_message_config_modle_subscription_add_value_address +2d7b 6fe149d5 fetch 2 ,mem_mesh_cb_subscriptuion_list_changed +2d7c 20207e05 branch callback_func + +ali_mesh_message_config_modle_subscription_delete: +2d7d 20402d9b call ali_mesh_message_config_modle_subscription_status +2d7e 6fe149d9 fetch 2 ,mem_mesh_core_feature +2d7f c3810000 rtnbit1 mesh_feature_disable_subscription +2d80 20402da5 call ali_mesh_message_config_modle_subscription_check_element +2d81 684909fb fetcht 2 ,mem_mesh_subscription_value_address +2d82 184cfe00 rshift8 temp ,pdata +2d83 1ff1fe00 rshift4 pdata ,pdata +2d84 c0062d8b beq 0x0c ,ali_mesh_message_config_modle_subscription_delete_group_addr +2d85 20402d90 call ali_mesh_message_config_modle_subscription_check_value_address +2d86 24740000 nrtn user +2d87 58000000 setarg 0 +2d88 e7e10011 istore 2 ,rega +2d89 6fe149d5 fetch 2 ,mem_mesh_cb_subscriptuion_list_changed +2d8a 20207e05 branch callback_func + +ali_mesh_message_config_modle_subscription_delete_group_addr: +2d8b 5fffffff setarg -1 +2d8c e7e40011 istore subscription_max_count ,rega +2d8d e7e40005 istore subscription_max_count ,contw +2d8e 6fe149d5 fetch 2 ,mem_mesh_cb_subscriptuion_list_changed +2d8f 20207e05 branch callback_func + +ali_mesh_message_config_modle_subscription_check_value_address: +2d90 df200008 arg subscription_max_count ,loopcnt + +ali_mesh_message_config_modle_subscription_check_value_address_loop: +2d91 efe10011 ifetch 2 ,rega +2d92 da40ffff arg 0xffff ,regb +2d93 9a467c00 isub regb ,null +2d94 2022fe54 branch enable_user ,zero +2d95 98467c00 isub temp ,null +2d96 2022fe54 branch enable_user ,zero + +ali_mesh_message_config_modle_subscription_check_value_address_loop_empty: +2d97 1a20a202 increase 2 ,rega +2d98 c2002d91 loop ali_mesh_message_config_modle_subscription_check_value_address_loop +2d99 20407e56 call disable_user +2d9a 20600000 rtn + +ali_mesh_message_config_modle_subscription_status: +2d9b 58000080 setarg mesh_configuration_and_health_message_opcode_header +2d9c 67e08a10 store 1 ,mem_mesh_access_layer_payload +2d9d 5800001f setarg mesh_message_opcode_config_model_subscription_status_no_head +2d9e e7e08005 istore 1 ,contw +2d9f 58000000 setarg mesh_success +2da0 e7e08005 istore 1 ,contw +2da1 6fe309f9 fetch 6 ,mem_mesh_subscription_element_address +2da2 e7e30005 istore 6 ,contw +2da3 700a0f09 jam 9 ,mem_mesh_access_layer_payload_len +2da4 20202ff2 branch ali_mesh_upper_transport_layer_send_access_message_without_cleat_tx_buffer + +ali_mesh_message_config_modle_subscription_check_element: +2da5 20402de1 call mesh_get_element_info_config +2da6 1a20a206 add rega ,element_device_subscription_label ,rega +2da7 6fe109f9 fetch 2 ,mem_mesh_subscription_element_address +2da8 6849494f fetcht 2 ,mem_mesh_unicast_address +2da9 18508400 byteswap temp ,temp +2daa 98467e00 isub temp ,pdata +2dab 9a4ffe00 imul32 regb ,pdata +2dac 9a20a200 iadd rega ,rega +2dad 20600000 rtn + +ali_mesh_message_config_modle_subscription_add_value_address: +2dae 684909fb fetcht 2 ,mem_mesh_subscription_value_address +2daf df200008 arg subscription_max_count ,loopcnt + +ali_mesh_message_config_modle_subscription_add_value_address_loop: +2db0 efe10011 ifetch 2 ,rega +2db1 203a2db8 branch ali_mesh_message_config_modle_subscription_add_value_address_in ,blank +2db2 da40ffff arg 0xffff ,regb +2db3 9a467c00 isub regb ,null +2db4 2022adb8 branch ali_mesh_message_config_modle_subscription_add_value_address_in ,zero +2db5 1a20a202 increase 2 ,rega +2db6 c2002db0 loop ali_mesh_message_config_modle_subscription_add_value_address_loop +2db7 20600000 rtn + +ali_mesh_message_config_modle_subscription_add_value_address_in: +2db8 18508400 byteswap temp ,temp +2db9 e0410011 istoret 2 ,rega +2dba 20600000 rtn + +ali_mesh_init: +2dbb 20406dfb call init_memp +2dbc 58002922 setarg mesh_check_ble_rx_packet +2dbd 67e149b5 store 2 ,mem_mesh_cb_receive_advertising +2dbe 58002de5 setarg mesh_idle_process +2dbf 67e14465 store 2 ,mem_cb_idle_process +2dc0 58002f68 setarg ali_mesh_network_layer_relay_access_message +2dc1 67e149cf store 2 ,mem_mesh_cb_network_relay +2dc2 580029b8 setarg mesh_receive_config_appkey_add_cb +2dc3 67e149b9 store 2 ,mem_mesh_cb_receive_config_appkey_add +2dc4 580029cb setarg mesh_store_new_subscriptuion_list_data +2dc5 67e149d5 store 2 ,mem_mesh_cb_subscriptuion_list_changed +2dc6 580029c7 setarg mesh_store_new_seq_data +2dc7 67e149d3 store 2 ,mem_mesh_cb_seq_changed +2dc8 58002dea setarg mesh_cb_event_timer +2dc9 67e1446f store 2 ,mem_cb_event_timer +2dca 58002735 setarg ali_mesh_access_layer_check_access_message_opcode +2dcb 67e149b7 store 2 ,mem_mesh_cb_receive_access_message +2dcc 20758000 rtn wake +2dcd 7047ce24 jam 36 ,mem_mesh_adv_scan_channel +2dce 20402842 call ali_mesh_ali_vendor_message_indication_info_reset_tid +2dcf 477cc03f bpatchx patch3f_1 ,mem_patch3f +2dd0 204029f4 call mesh_uart_init +2dd1 20402df5 call mesh_iic_init +2dd2 da20493e arg mem_mesh_network_key ,rega +2dd3 da400000 arg mesh_code_init ,regb +2dd4 df200001 arg 1 ,loopcnt +2dd5 204029db call logging_tx_info +2dd6 20402987 call ali_mesh_chip_peripherals_load_data_from_eep +2dd7 20402ddd call mesh_inverse_three_tuple_mac +2dd8 6fe0c93e fetch 1 ,mem_mesh_network_key +2dd9 c07fac12 beq 0xff ,mesh_send_unprovisioned_beacons +2dda 20402ae5 call ali_mesh_encrypt_base_function_k4 +2ddb 20402acd call ali_mesh_encrypt_calc_network_key_by_k2 +2ddc 202027f6 branch ali_mesh_ali_vendor_message_opcode_device_power_on + +mesh_inverse_three_tuple_mac: +2ddd 6fe3499f fetch 6 ,mem_mesh_three_tuple_mac +2dde 20407d46 call inverse_data_6byte +2ddf 67e3437a store 6 ,mem_le_lap +2de0 20600000 rtn + +mesh_get_element_info_config: +2de1 6f20c9db fetchr loopcnt ,1 ,mem_mesh_element_number +2de2 6a2149dc fetchr rega ,2 ,mem_mesh_element_device_ptr +2de3 6a4149de fetchr regb ,2 ,mem_mesh_element_device_length +2de4 20600000 rtn + +mesh_idle_process: +2de5 20402844 call ali_mesh_time_function +2de6 20402a05 call ali_mesh_control_ble_adv_process +2de7 20403018 call ali_mesh_upper_transport_layer_control_packet +2de8 204028d0 call ali_mesh_advertising_bearer_layer_load_packet_from_advertising_queue +2de9 2020290d branch mesh_receive_advertising + +mesh_cb_event_timer: +2dea 20402a07 call ali_mesh_control_ble_adv_timer_process +2deb 20202d62 branch ali_mesh_gatt_package_receive_timer + +ali_mesh_check_all_element_info: +2dec 20402de1 call mesh_get_element_info_config + +ali_mesh_check_all_element_info_loop: +2ded 20402eee call ali_mesh_more_element_push_stack +2dee 1a627e00 copy regc ,pdata +2def 20407e05 call callback_func +2df0 20402ef3 call ali_mesh_more_element_pop_stack +2df1 1a427e00 copy regb ,pdata +2df2 9a20a200 iadd rega ,rega +2df3 c2002ded loop ali_mesh_check_all_element_info_loop +2df4 20600000 rtn + +mesh_iic_init: +2df5 7080700c jam gpcfg_uartb_txd ,core_gpio_conf +2df6 7080734d jam gpcfg_uartb_rxd | gpcfg_pullup ,core_gpio_conf + 3 +2df7 7080722c jam gpcfg_iic_scl ,core_gpio_conf + 2 +2df8 7080712d jam gpcfg_iic_sda ,core_gpio_conf + 1 +2df9 7080743e jam gpcfg_output_low ,core_gpio_conf + 4 +2dfa 20205dbf branch clear_eeprom_size_2k + +ali_mesh_lower_transport_layer_receive_lower_transport_pdu: +2dfb 477d403f bpatchx patch3f_2 ,mem_patch3f +2dfc 6fe08c14 fetch 1 ,mem_mesh_message_transport_head +2dfd c283ae00 bbit1 transport_head_bit_seg ,ali_mesh_lower_transport_layer_receive_lower_transport_pdu_segmented_message +2dfe 704b0e00 jam 0 ,mem_mesh_aszmic +2dff 20202fb6 branch ali_mesh_upper_transport_layer_receive_unsegmented_access_message + +ali_mesh_lower_transport_layer_receive_lower_transport_pdu_segmented_message: +2e00 20402e05 call ali_mesh_lower_transport_layer_receive_segaccmess_resolve_szmic_seqzero_segon +2e01 20402e22 call ali_mesh_lower_transport_layer_receive_segmented_access_message_check_blockack +2e02 20740000 rtn user +2e03 20402e32 call ali_mesh_lower_transport_layer_receive_segmented_access_message_store_segment +2e04 20202e3e branch ali_mesh_lower_transport_layer_receive_segmented_access_message_decrypt_segment + +ali_mesh_lower_transport_layer_receive_segaccmess_resolve_szmic_seqzero_segon: +2e05 df200003 arg 3 ,loopcnt +2e06 da200c15 arg mem_mesh_message_segment_access_szmic_seqzero_sego_segn ,rega +2e07 20407d37 call inverse_data +2e08 6fe18c15 fetch 3 ,mem_mesh_message_segment_access_szmic_seqzero_sego_segn +2e09 1fe1041f and pdata ,0x1f ,temp +2e0a 6048c9e4 storet 1 ,mem_mesh_segmented_access_message_segn +2e0b 1ff1fe00 rshift4 pdata ,pdata +2e0c 1fe37e00 rshift pdata ,pdata +2e0d 1fe1041f and pdata ,0x1f ,temp +2e0e 6048c9e3 storet 1 ,mem_mesh_segmented_access_message_sego +2e0f 1ff1fe00 rshift4 pdata ,pdata +2e10 1fe37e00 rshift pdata ,pdata +2e11 da201fff arg 0x1fff ,rega +2e12 9a210400 iand rega ,temp +2e13 1fe22400 copy pdata ,regb +2e14 6fe149e1 fetch 2 ,mem_mesh_segmented_access_message_seqzero +2e15 98467c00 isub temp ,null +2e16 2442ae1e ncall ali_mesh_lower_transport_layer_receive_segmented_access_message_recover_seqzero ,zero +2e17 604949e1 storet 2 ,mem_mesh_segmented_access_message_seqzero +2e18 1a4cfe00 rshift8 regb ,pdata +2e19 1ff1fe00 rshift4 pdata ,pdata +2e1a 1fe37e00 rshift pdata ,pdata +2e1b 67e0c9e0 store 1 ,mem_mesh_segmented_access_message_szmic +2e1c 67e0cb0e store 1 ,mem_mesh_aszmic +2e1d 20600000 rtn + +ali_mesh_lower_transport_layer_receive_segmented_access_message_recover_seqzero: +2e1e 58000000 setarg 0 +2e1f 67e249e5 store 4 ,mem_mesh_segmented_access_message_blockack +2e20 7049ea00 jam 0 ,mem_mesh_segmented_access_message_current_length +2e21 20600000 rtn + +ali_mesh_lower_transport_layer_receive_segmented_access_message_check_blockack: +2e22 20407e56 call disable_user +2e23 6fe0c9e3 fetch 1 ,mem_mesh_segmented_access_message_sego +2e24 1fe20e00 copy pdata ,queue +2e25 6fe249e5 fetch 4 ,mem_mesh_segmented_access_message_blockack +2e26 afefffff qisolate1 pdata +2e27 2020fe54 branch enable_user ,true +2e28 f9207e00 qset1 pdata +2e29 67e249e5 store 4 ,mem_mesh_segmented_access_message_blockack +2e2a 6848c9e4 fetcht 1 ,mem_mesh_segmented_access_message_segn +2e2b 1840f201 add temp ,1 ,loopcnt + +ali_mesh_lower_transport_layer_receive_segmented_access_message_check_blockack_loop: +2e2c 1f208fff add loopcnt ,-1 ,queue +2e2d afefffff qisolate1 pdata +2e2e 24608000 nrtn true +2e2f c2002e2c loop ali_mesh_lower_transport_layer_receive_segmented_access_message_check_blockack_loop +2e30 7049e901 jam 1 ,mem_mesh_segmented_access_message_receive_finish +2e31 20600000 rtn + +ali_mesh_lower_transport_layer_receive_segmented_access_message_store_segment: +2e32 6fe08c0a fetch 1 ,mem_mesh_message_transport_netmic_length +2e33 1fe0fffa pincrease -6 +2e34 1fe27200 copy pdata ,loopcnt +2e35 6848c9ea fetcht 1 ,mem_mesh_segmented_access_message_current_length +2e36 98408400 iadd temp ,temp +2e37 6048c9ea storet 1 ,mem_mesh_segmented_access_message_current_length +2e38 d8a049eb arg mem_mesh_segmented_access_message_segment ,contw +2e39 6fe0c9e3 fetch 1 ,mem_mesh_segmented_access_message_sego +2e3a 1feffe0c mul32 pdata ,12 ,pdata +2e3b 98a08a00 iadd contw ,contw +2e3c d8c00c18 arg mem_mesh_message_transport_segmented_access_messagepdu_segment ,contr +2e3d 20207d5f branch memcpy + +ali_mesh_lower_transport_layer_receive_segmented_access_message_decrypt_segment: +2e3e 6fe0c9e9 fetch 1 ,mem_mesh_segmented_access_message_receive_finish +2e3f c1000000 rtneq 0 +2e40 58000000 setarg 0 +2e41 67e2c9e5 store 5 ,mem_mesh_segmented_access_message_blockack +2e42 68490c0e fetcht 2 ,mem_mesh_message_seq + 1 +2e43 18508400 byteswap temp ,temp +2e44 5800e000 setarg 0xe000 +2e45 98410400 iand temp ,temp +2e46 6fe149e1 fetch 2 ,mem_mesh_segmented_access_message_seqzero +2e47 9841fe00 ior temp ,pdata +2e48 1ff0fe00 byteswap pdata ,pdata +2e49 67e10c0e store 2 ,mem_mesh_message_seq + 1 +2e4a 20202fc0 branch ali_mesh_upper_transport_layer_receive_segmented_access_message + +ali_mesh_lower_transport_layer_send_unsegmented_access_message: +2e4b 6fe08a0f fetch 1 ,mem_mesh_upper_transport_layer_payload_len +2e4c 1fe08401 add pdata ,1 ,temp +2e4d 1fe27200 copy pdata ,loopcnt +2e4e 60488bff storet 1 ,mem_mesh_lower_transport_layer_payload_len +2e4f 6fe08c14 fetch 1 ,mem_mesh_message_transport_head +2e50 793ffe07 set0 transport_head_bit_seg ,pdata +2e51 67e0cb46 store 1 ,mem_mesh_unsegmented_access_lower_transport_layer_head +2e52 d8c00a10 arg mem_mesh_access_layer_payload ,contr +2e53 20407d52 call memcpy_fast +2e54 20202f9e branch ali_mesh_network_layer_send_access_message + +ali_mesh_lower_transport_layer_send_segmented_access_message: +2e55 1a208404 add rega ,4 ,temp +2e56 1a227200 copy rega ,loopcnt +2e57 60488bff storet 1 ,mem_mesh_lower_transport_layer_payload_len +2e58 d8a04b4a arg mem_mesh_segmented_access_lower_transport_layer_parameters ,contw +2e59 20407d52 call memcpy_fast +2e5a 6fe08c14 fetch 1 ,mem_mesh_message_transport_head +2e5b 79207e07 set1 transport_head_bit_seg ,pdata +2e5c 67e0cb46 store 1 ,mem_mesh_segmented_access_lower_transport_layer_head +2e5d 20202f9e branch ali_mesh_network_layer_send_access_message + +ali_mesh_model_layer_check_model_message_opcode: +2e5e 6fe089f8 fetch 1 ,mem_mesh_module_message_opcode + +ali_mesh_model_layer_check_generic_onoff_message_opcde: +2e5f c000ae65 beq mesh_module_message_opcode_generic_onoff_get_no_head ,ali_mesh_model_layer_message_opcode_generic_onoff_get +2e60 c0012e6b beq mesh_module_message_opcode_generic_onoff_set_no_head ,ali_mesh_model_layer_message_opcde_generic_onoff_set +2e61 c0212e70 beq mesh_module_message_opcode_scene_recall_no_head ,ali_mesh_model_layer_message_opcde_scene_recall +2e62 c0262e73 beq mesh_module_message_opcode_light_lightness_set_no_head ,ali_mesh_model_layer_message_opcde_light_lightness_set +2e63 c02f2e79 beq mesh_module_message_opcode_light_ctl_set_no_head ,ali_mesh_model_layer_message_opcde_light_ctl_set +2e64 20600000 rtn + +ali_mesh_model_layer_message_opcode_generic_onoff_get: +2e65 da602e67 arg ali_mesh_model_layer_message_opcode_generic_onoff_get_cb ,regc +2e66 20202edd branch ali_mesh_more_element_check_element_address + +ali_mesh_model_layer_message_opcode_generic_onoff_get_cb: +2e67 6fe149bd fetch 2 ,mem_mesh_cb_generic_onoff_get +2e68 20407e05 call callback_func +2e69 67e089f9 store 1 ,mem_mesh_generic_onoff_set_payload_onoff +2e6a 20202765 branch ali_mesh_access_layer_send_generic_onoff_status + +ali_mesh_model_layer_message_opcde_generic_onoff_set: +2e6b da602e6d arg ali_mesh_model_layer_message_opcde_generic_onoff_set_cb ,regc +2e6c 20202edd branch ali_mesh_more_element_check_element_address + +ali_mesh_model_layer_message_opcde_generic_onoff_set_cb: +2e6d 20402765 call ali_mesh_access_layer_send_generic_onoff_status +2e6e 6fe149bf fetch 2 ,mem_mesh_cb_generic_onoff_set +2e6f 20207e05 branch callback_func + +ali_mesh_model_layer_message_opcde_scene_recall: +2e70 2040277d call ali_mesh_access_layer_send_scene_status +2e71 6fe149c1 fetch 2 ,mem_mesh_cb_scene_recall +2e72 20207e05 branch callback_func + +ali_mesh_model_layer_message_opcde_light_lightness_set: +2e73 6fe109f9 fetch 2 ,mem_mesh_light_lightness_set_payload_lightness +2e74 20402e88 call ali_mesh_model_layer_message_calc_lightness +2e75 67e089fe store 1 ,mem_mesh_light_lightness_calc_lightness +2e76 2040276d call ali_mesh_access_layer_send_light_lightness_status +2e77 6fe149c3 fetch 2 ,mem_mesh_cb_light_lightness_set +2e78 20207e05 branch callback_func + +ali_mesh_model_layer_message_opcde_light_ctl_set: +2e79 6fe14a0f fetch 2 ,mem_mesh_last_ctl_temperature +2e7a 684909fb fetcht 2 ,mem_mesh_ctl_temperature +2e7b 98467c00 isub temp ,null +2e7c 20628000 rtn zero +2e7d 6fe109fb fetch 2 ,mem_mesh_ctl_temperature +2e7e 20402e9a call ali_mesh_model_layer_message_calc_temperature +2e7f 67e08a03 store 1 ,mem_mesh_ctl_calc_temperature +2e80 6fe109fb fetch 2 ,mem_mesh_ctl_temperature +2e81 67e14a0f store 2 ,mem_mesh_last_ctl_temperature +2e82 6fe149c5 fetch 2 ,mem_mesh_cb_light_lightness_get +2e83 20407e05 call callback_func +2e84 604909f9 storet 2 ,mem_mesh_ctl_lightness +2e85 20402775 call ali_mesh_access_layer_send_light_ctl_stauts +2e86 6fe149c7 fetch 2 ,mem_mesh_cb_light_ctl_set +2e87 20207e05 branch callback_func + +ali_mesh_model_layer_message_calc_lightness: +2e88 207a0000 rtn blank +2e89 1feffe64 mul32 pdata ,ali_mesh_lightness_level ,pdata +2e8a d840ffff arg ali_mesh_lightness_max ,temp +2e8b 9846fc00 idiv temp +2e8c 20407def call wait_div_end +2e8d 18070400 remainder temp +2e8e 184c8400 rshift8 temp ,temp +2e8f 1807fe00 quotient pdata +2e90 18467cff sub temp ,0xff ,null +2e91 24628000 nrtn zero +2e92 1fe0fe01 pincrease 1 +2e93 20600000 rtn + +ali_mesh_model_layer_message_calc_actual_lightness: +2e94 dfe0ffff arg ali_mesh_lightness_max ,pdata +2e95 984ffe00 imul32 temp ,pdata +2e96 1fe6fc64 div pdata ,ali_mesh_lightness_level +2e97 20407def call wait_div_end +2e98 18078400 quotient temp +2e99 20600000 rtn + +ali_mesh_model_layer_message_calc_temperature: +2e9a d8400320 arg ali_mesh_temperature_min ,temp +2e9b 98462200 isub temp ,rega +2e9c 20402ea9 call ali_mesh_model_layer_message_calc_temperature_k +2e9d 1a227e00 copy rega ,pdata +2e9e 9846fc00 idiv temp +2e9f 20407def call wait_div_end +2ea0 1807fe00 quotient pdata +2ea1 20600000 rtn + +ali_mesh_model_layer_message_calc_actual_temperature: +2ea2 18422200 copy temp ,rega +2ea3 20402ea9 call ali_mesh_model_layer_message_calc_temperature_k +2ea4 1a227e00 copy rega ,pdata +2ea5 984ffe00 imul32 temp ,pdata +2ea6 d8400320 arg ali_mesh_temperature_min ,temp +2ea7 98408400 iadd temp ,temp +2ea8 20600000 rtn + +ali_mesh_model_layer_message_calc_temperature_k: +2ea9 58004e20 setarg ali_mesh_temperature_max +2eaa d8400320 arg ali_mesh_temperature_min ,temp +2eab 98467e00 isub temp ,pdata +2eac 1fe6fc64 div pdata ,ali_mesh_temperature_level +2ead 20407def call wait_div_end +2eae 18078400 quotient temp +2eaf 20600000 rtn + +ali_mesh_more_element_check_unicast_address: +2eb0 d8e00000 arg 0 ,queue +2eb1 6f20c9db fetchr loopcnt ,1 ,mem_mesh_element_number +2eb2 20407e56 call disable_user +2eb3 6fe1494f fetch 2 ,mem_mesh_unicast_address + +ali_mesh_more_element_check_unicast_address_loop: +2eb4 98467c00 isub temp ,null +2eb5 2022aebc branch ali_mesh_more_element_found_unicast_address_element ,zero +2eb6 1ff0fe00 byteswap pdata ,pdata +2eb7 1fe0fe01 pincrease 1 +2eb8 1ff0fe00 byteswap pdata ,pdata +2eb9 18e08e01 increase 1 ,queue +2eba c2002eb4 loop ali_mesh_more_element_check_unicast_address_loop +2ebb 20600000 rtn + +ali_mesh_more_element_found_unicast_address_element: +2ebc 704a1100 jam 0 ,mem_mesh_receive_group_address +2ebd 60e0ca12 storer queue ,1 ,mem_mesh_receive_element_number +2ebe 20402ef8 call ali_mesh_more_element_calc_queue_address +2ebf 20207e54 branch enable_user + +ali_mesh_more_element_check_group_address: +2ec0 d8e00000 arg 0 ,queue +2ec1 da600000 arg 0 ,regc +2ec2 20402de1 call mesh_get_element_info_config +2ec3 20407e56 call disable_user + +ali_mesh_more_element_check_group_address_loop: +2ec4 6fe149d9 fetch 2 ,mem_mesh_core_feature +2ec5 c3012ed3 bbit0 mesh_feature_disable_subscription ,ali_mesh_more_element_check_subscription_address +2ec6 efe10011 ifetch 2 ,rega +2ec7 98467c00 isub temp ,null +2ec8 2042aed1 call ali_mesh_more_element_found_group_address_element ,zero + +ali_mesh_more_element_check_address_common: +2ec9 1a427e00 copy regb ,pdata +2eca 9a20a200 iadd rega ,rega +2ecb 18e08e01 increase 1 ,queue +2ecc c2002ec4 loop ali_mesh_more_element_check_group_address_loop +2ecd 1a627e00 copy regc ,pdata +2ece 207a0000 rtn blank +2ecf 67e0ca11 store 1 ,mem_mesh_receive_group_address +2ed0 20207e54 branch enable_user + +ali_mesh_more_element_found_group_address_element: +2ed1 f9202600 qset1 regc +2ed2 20600000 rtn + +ali_mesh_more_element_check_subscription_address: +2ed3 1a208c06 add rega ,element_device_subscription_label ,contr +2ed4 de000008 arg subscription_max_count ,alarm + +ali_mesh_more_element_check_subscription_address_loop: +2ed5 efe10006 ifetch 2 ,contr +2ed6 98467c00 isub temp ,null +2ed7 2022aedb branch ali_mesh_more_element_found_subscription_address_element ,zero +2ed8 1e00e1ff increase -1 ,alarm +2ed9 2022aec9 branch ali_mesh_more_element_check_address_common ,zero +2eda 20202ed5 branch ali_mesh_more_element_check_subscription_address_loop + +ali_mesh_more_element_found_subscription_address_element: +2edb 20402ed1 call ali_mesh_more_element_found_group_address_element +2edc 20202ec9 branch ali_mesh_more_element_check_address_common + +ali_mesh_more_element_check_element_address: +2edd d8e00000 arg 0 ,queue +2ede 6fe0ca11 fetch 1 ,mem_mesh_receive_group_address +2edf 203a2ee9 branch ali_mesh_more_element_check_element_address_no_group_address ,blank +2ee0 1fe22400 copy pdata ,regb +2ee1 6f20c9db fetchr loopcnt ,1 ,mem_mesh_element_number + +ali_mesh_more_element_check_element_address_loop: +2ee2 60e0ca12 storer queue ,1 ,mem_mesh_receive_element_number +2ee3 aa4fffff qisolate1 regb +2ee4 2040aee9 call ali_mesh_more_element_check_element_address_no_group_address ,true +2ee5 68e0ca12 fetchr queue ,1 ,mem_mesh_receive_element_number +2ee6 18e08e01 increase 1 ,queue +2ee7 c2002ee2 loop ali_mesh_more_element_check_element_address_loop +2ee8 20600000 rtn + +ali_mesh_more_element_check_element_address_no_group_address: +2ee9 20402eee call ali_mesh_more_element_push_stack +2eea 20402ef8 call ali_mesh_more_element_calc_queue_address +2eeb 1a627e00 copy regc ,pdata +2eec 20407e05 call callback_func +2eed 20202ef3 branch ali_mesh_more_element_pop_stack + +ali_mesh_more_element_push_stack: +2eee 67210c00 storer loopcnt ,2 ,mem_mesh_loopcnt_tmep +2eef 62210c02 storer rega ,2 ,mem_mesh_rega_temp +2ef0 62410c04 storer regb ,2 ,mem_mesh_regb_temp +2ef1 62610c06 storer regc ,2 ,mem_mesh_regc_temp +2ef2 20600000 rtn + +ali_mesh_more_element_pop_stack: +2ef3 6f210c00 fetchr loopcnt ,2 ,mem_mesh_loopcnt_tmep +2ef4 6a210c02 fetchr rega ,2 ,mem_mesh_rega_temp +2ef5 6a410c04 fetchr regb ,2 ,mem_mesh_regb_temp +2ef6 6a610c06 fetchr regc ,2 ,mem_mesh_regc_temp +2ef7 20600000 rtn + +ali_mesh_more_element_calc_queue_address: +2ef8 477dc03f bpatchx patch3f_3 ,mem_patch3f +2ef9 6fe1494f fetch 2 ,mem_mesh_unicast_address +2efa 1ff0fe00 byteswap pdata ,pdata +2efb 98e0fe00 iadd queue ,pdata +2efc 1ff0fe00 byteswap pdata ,pdata +2efd 67e14b3a store 2 ,mem_mesh_send_message_src +2efe 20402de1 call mesh_get_element_info_config +2eff 18e27e00 copy queue ,pdata +2f00 9a4ffe00 imul32 regb ,pdata +2f01 9a20a200 iadd rega ,rega +2f02 1a208c17 add rega ,element_device_upper_queue_ptr ,contr +2f03 efe10006 ifetch 2 ,contr +2f04 67e1448a store ,2 ,mem_queue_ptr +2f05 20600000 rtn + +ali_mesh_receive_adtype_mesh_message: +2f06 700c3a00 jam mesh_message_tmall ,mem_mesh_network_packet_type + +ali_mesh_network_layer_recevice_network_pdu: +2f07 18467c0c sub temp ,mesh_network_packet_min_length ,null +2f08 20610000 rtn positive +2f09 18467c1e sub temp ,mesh_network_packet_max_length ,null +2f0a 24610000 nrtn positive +2f0b 477e403f bpatchx patch3f_4 ,mem_patch3f +2f0c 20402f60 call ali_mesh_network_store_in_mem + +ali_mesh_network_layer_recevice_network_pdu_check_nid: +2f0d 20402f2e call ali_mesh_network_layer_check_nid_ivi +2f0e 24740000 nrtn user + +ali_mesh_network_layer_recevice_network_pdu_deceypt_obfuscation: +2f0f 20402af6 call ali_mesh_encrypt_obfuscation_deceypt_recevie_message + +ali_mesh_network_layer_recevice_network_pdu_decrypt_netmic32: +2f10 20402f57 call ali_mesh_network_load_network_nonce_and_encryptionkey +2f11 6fe08c0a fetch 1 ,mem_mesh_message_transport_netmic_length +2f12 d8400c12 arg mem_mesh_message_dst ,temp +2f13 20402be0 call ali_ccm_decrypt +2f14 24628000 nrtn zero + +ali_mesh_network_layer_recevice_network_pdu_check_dst: +2f15 477ec03f bpatchx patch3f_5 ,mem_patch3f +2f16 68490c12 fetcht 2 ,mem_mesh_message_dst +2f17 20402eb0 call ali_mesh_more_element_check_unicast_address +2f18 20342f3b branch ali_mesh_network_layer_recevice_network_pdu_check_src_and_seq ,user +2f19 df20001d arg 29 ,loopcnt +2f1a d8a00a98 arg mem_mesh_message_nid_temp ,contw +2f1b d8c00c0b arg mem_mesh_message_nid ,contr +2f1c 20407d5f call memcpy +2f1d 20402f24 call ali_mesh_network_layer_recevice_network_pdu_check_dst_group_address +2f1e df20001d arg 29 ,loopcnt +2f1f d8c00a98 arg mem_mesh_message_nid_temp ,contr +2f20 d8a00c0b arg mem_mesh_message_nid ,contw +2f21 20407d5f call memcpy +2f22 6fe149cf fetch 2 ,mem_mesh_cb_network_relay +2f23 20207e05 branch callback_func + +ali_mesh_network_layer_recevice_network_pdu_check_dst_group_address: +2f24 20402ec0 call ali_mesh_more_element_check_group_address +2f25 20342f3b branch ali_mesh_network_layer_recevice_network_pdu_check_src_and_seq ,user +2f26 704a11ff jam 0xff ,mem_mesh_receive_group_address +2f27 5800ffcf setarg group_address_0xcfff_little_endian +2f28 98467c00 isub temp ,null +2f29 2022af3b branch ali_mesh_network_layer_recevice_network_pdu_check_src_and_seq ,zero +2f2a 5800ffff setarg group_address_0xffff_little_endian +2f2b 98467c00 isub temp ,null +2f2c 2022af3b branch ali_mesh_network_layer_recevice_network_pdu_check_src_and_seq ,zero +2f2d 20600000 rtn + +ali_mesh_network_layer_check_nid_ivi: +2f2e 20407e56 call disable_user +2f2f 68488c0b fetcht 1 ,mem_mesh_message_nid +2f30 1851fe00 rshift4 temp ,pdata +2f31 1fe97e00 rshift3 pdata ,pdata +2f32 6a20ca16 fetchr rega ,1 ,mem_mesh_iv_index + 3 +2f33 1a212201 and rega ,0x01 ,rega +2f34 9a267c00 isub rega ,null +2f35 24628000 nrtn zero +2f36 1841047f and temp ,0x7f ,temp +2f37 6fe0c8d1 fetch 1 ,mem_k2_nid +2f38 98467c00 isub temp ,null +2f39 24628000 nrtn zero +2f3a 20207e54 branch enable_user + +ali_mesh_network_layer_recevice_network_pdu_check_src_and_seq: +2f3b da204a17 arg mem_mesh_tmall_cache_start ,rega +2f3c df20000a arg cache_space_num ,loopcnt + +ali_mesh_network_layer_raverse_src_seq_cache: +2f3d 68490c10 fetcht 2 ,mem_mesh_message_src +2f3e efe10011 ifetch 2 ,rega +2f3f 203a2f45 branch ali_mesh_network_layer_find_empty_space ,blank +2f40 98467c00 isub temp ,null +2f41 2022af46 branch ali_mesh_network_layer_find_src_space ,zero +2f42 1a20a205 increase cache_space_size ,rega +2f43 c2002f3d loop ali_mesh_network_layer_raverse_src_seq_cache +2f44 da204a17 arg mem_mesh_tmall_cache_start ,rega + +ali_mesh_network_layer_find_empty_space: +2f45 e0410011 istoret 2 ,rega + +ali_mesh_network_layer_find_src_space: +2f46 60490c35 storet 2 ,mem_mesh_send_message_dst +2f47 1a20a602 add rega ,2 ,regc +2f48 efe18013 ifetch 3 ,regc +2f49 67e18c37 store 3 ,mem_mesh_last_message_seq +2f4a 20202f4b branch ali_mesh_network_layer_recevice_network_pdu_check_seq_legal + +ali_mesh_network_layer_recevice_network_pdu_check_seq_legal: +2f4b 20402f54 call ali_mesh_inverse_seq +2f4c 6fe18c37 fetch 3 ,mem_mesh_last_message_seq +2f4d 68498c0d fetcht 3 ,mem_mesh_message_seq +2f4e 98467c00 isub temp ,null +2f4f 20610000 rtn positive +2f50 e0418013 istoret 3 ,regc +2f51 20402f54 call ali_mesh_inverse_seq +2f52 20402fb1 call logging_tx_debug_network_receive_packet +2f53 20202dfb branch ali_mesh_lower_transport_layer_receive_lower_transport_pdu + +ali_mesh_inverse_seq: +2f54 da200c0d arg mem_mesh_message_seq ,rega +2f55 df200003 arg 3 ,loopcnt +2f56 20207d37 branch inverse_data + +ali_mesh_network_load_network_nonce_and_encryptionkey: +2f57 20402f5a call ali_mesh_network_layer_load_network_nonce + +ali_mesh_upper_transport_layer_load_encryptionkey: +2f58 d8c048e2 arg mem_k2_encryptionkey ,contr +2f59 20206dbe branch load_key + +ali_mesh_network_layer_load_network_nonce: +2f5a d8a00c28 arg mem_mesh_network_nonce ,contw +2f5b 58000000 setarg network_nonce +2f5c e7e08005 istore 1 ,contw +2f5d 6fe30c0c fetch 6 ,mem_mesh_message_ttl +2f5e e7e40005 istore 8 ,contw +2f5f 20202fac branch mesh_generate_nonce + +ali_mesh_network_store_in_mem: +2f60 1840fff4 add temp ,-12 ,pdata +2f61 67e08c0a store 1 ,mem_mesh_message_transport_netmic_length +2f62 df20001d arg 29 ,loopcnt +2f63 d8a00c0b arg mem_mesh_message_nid ,contw +2f64 20407d26 call clear_mem +2f65 1840f3ff add temp ,-1 ,loopcnt +2f66 d8a00c0b arg mem_mesh_message_nid ,contw +2f67 20207d52 branch memcpy_fast + +ali_mesh_network_layer_relay_access_message: +2f68 20402f79 call ali_mesh_network_layer_check_relay_states +2f69 24740000 nrtn user +2f6a 20402f8e call ali_mesh_network_layer_encrypt_relay_package +2f6b 700a740a jam adv_relay_mesh_message_duration ,mem_mesh_queue_ele_duration +2f6c 6fe08c0a fetch 1 ,mem_mesh_message_transport_netmic_length +2f6d 1fe0840d add pdata ,13 ,temp +2f6e 60488a76 storet 1 ,mem_mesh_queue_ele_len +2f6f 184085ff increase -1 ,temp +2f70 e0408005 istoret 1 ,contw +2f71 5800002a setarg gap_adtype_mesh_message +2f72 e7e08005 istore 1 ,contw +2f73 1840f3ff add temp ,-1 ,loopcnt +2f74 6fe38c0b fetch 7 ,mem_mesh_message_nid +2f75 d8c00c0b arg mem_mesh_message_nid ,contr +2f76 20407d5f call memcpy +2f77 da200a74 arg mem_mesh_queue_ele_temp ,rega +2f78 2020793f branch queue_push + +ali_mesh_network_layer_check_relay_states: +2f79 20407e56 call disable_user +2f7a 6fe08c3a fetch 1 ,mem_mesh_network_packet_type +2f7b c1008000 rtneq mesh_message_app +2f7c 6fe149d9 fetch 2 ,mem_mesh_core_feature +2f7d c3808000 rtnbit1 mesh_feature_disable_relay +2f7e 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2f7f c1800000 rtnne paired_status +2f80 68490c10 fetcht 2 ,mem_mesh_message_src +2f81 20402eb0 call ali_mesh_more_element_check_unicast_address +2f82 24740000 nrtn user +2f83 20402f93 call ali_mesh_network_layer_check_network_mic_cache +2f84 24740000 nrtn user +2f85 20402f96 call ali_mesh_network_layer_logging_tx_relay_info +2f86 6fe08c0c fetch 1 ,mem_mesh_message_ttl +2f87 207a0000 rtn blank +2f88 1fe0ffff pincrease -1 +2f89 207a0000 rtn blank +2f8a 67e08c0c store 1 ,mem_mesh_message_ttl +2f8b 58004a71 setarg mem_mesh_network_relay_queue +2f8c 67e1448a store 2 ,mem_queue_ptr +2f8d 20207e54 branch enable_user + +ali_mesh_network_layer_encrypt_relay_package: +2f8e 20402f57 call ali_mesh_network_load_network_nonce_and_encryptionkey +2f8f 6fe08c0a fetch 1 ,mem_mesh_message_transport_netmic_length +2f90 d8400c12 arg mem_mesh_message_dst ,temp +2f91 20402bbf call ali_ccm_encrypt +2f92 20202af6 branch ali_mesh_encrypt_obfuscation_deceypt_recevie_message + +ali_mesh_network_layer_check_network_mic_cache: +2f93 58004a49 setarg mem_mesh_transport_message_mic_cache +2f94 67e10bfd store 2 ,mem_mesh_mic_cache_ptr +2f95 2020296a branch ali_mesh_base_adt_cache + +ali_mesh_network_layer_logging_tx_relay_info: +2f96 df200002 arg 2 ,loopcnt +2f97 da200c12 arg mem_mesh_message_dst ,rega +2f98 da400021 arg mesh_network_relay_packet ,regb +2f99 204029db call logging_tx_info +2f9a 6f208be0 fetchr loopcnt ,1 ,mem_ccm_data_len +2f9b 6a210be1 fetchr rega ,2 ,mem_ccm_data_ptr +2f9c da400021 arg mesh_network_relay_packet ,regb +2f9d 202029d9 branch logging_tx_debug + +ali_mesh_network_layer_send_access_message: +2f9e 477f403f bpatchx patch3f_6 ,mem_patch3f +2f9f 20402fa2 call ali_mesh_network_layer_send_access_message_encrypt_netmic +2fa0 20402fab call ali_mesh_network_layer_send_access_message_encrypt_obfuscation +2fa1 202028ba branch ali_mesh_bearer_layer_send_packet_by_network_layer + +ali_mesh_network_layer_send_access_message_encrypt_netmic: +2fa2 6fe08bff fetch 1 ,mem_mesh_lower_transport_layer_payload_len +2fa3 1fe0a202 add pdata ,2 ,rega +2fa4 1fe0fe04 pincrease 4 +2fa5 67e08bff store 1 ,mem_mesh_lower_transport_layer_payload_len +2fa6 d8404b44 arg mem_mesh_send_upper_layer_dst ,temp +2fa7 20202fa8 branch ali_mesh_network_layer_encrypt_by_network_nonce + +ali_mesh_network_layer_encrypt_by_network_nonce: +2fa8 20402f57 call ali_mesh_network_load_network_nonce_and_encryptionkey +2fa9 1a227e00 copy rega ,pdata +2faa 20202bbf branch ali_ccm_encrypt + +ali_mesh_network_layer_send_access_message_encrypt_obfuscation: +2fab 20202af3 branch ali_mesh_encrypt_obfuscation_deceypt_send_message + +mesh_generate_nonce: +2fac 6fe24a13 fetch 4 ,mem_mesh_iv_index +2fad e7e20005 istore 4 ,contw +2fae 18a0fff3 add contw ,-13 ,pdata +2faf 67e10bde store 2 ,mem_nonce_ptr +2fb0 20600000 rtn + +logging_tx_debug_network_receive_packet: +2fb1 6fe08c0a fetch 1 ,mem_mesh_message_transport_netmic_length +2fb2 1fe0f20b add pdata ,11 ,loopcnt +2fb3 da200c0b arg mem_mesh_message_nid ,rega +2fb4 da400020 arg mesh_network_receive_packet ,regb +2fb5 202029d9 branch logging_tx_debug + +ali_mesh_upper_transport_layer_receive_unsegmented_access_message: +2fb6 c3032fb9 bbit0 transport_head_bit_akf ,ali_mesh_uuper_transport_layer_decrypt_unsegment_access_by_device_key + +ali_mesh_uuper_transport_layer_decrypt_unsegment_access_by_application_key: +2fb7 20402fdf call ali_mesh_upper_transport_layer_load_application_nonce_and_application_key +2fb8 20202fbb branch ali_mesh_upper_transport_layer_decrypt_unsegmented_message + +ali_mesh_uuper_transport_layer_decrypt_unsegment_access_by_device_key: +2fb9 20402fec call ali_mesh_upper_transport_layer_load_device_nonce_and_device_key +2fba 20202fbb branch ali_mesh_upper_transport_layer_decrypt_unsegmented_message + +ali_mesh_upper_transport_layer_decrypt_unsegmented_message: +2fbb 6fe08c0a fetch 1 ,mem_mesh_message_transport_netmic_length +2fbc 1fe0fff9 pincrease -7 +2fbd de000c15 arg mem_mesh_message_transport_unsegmented_access_messagepdu ,alarm +2fbe 20407e56 call disable_user +2fbf 20202fcd branch ali_mesh_upper_transport_layer_decrypt_message + +ali_mesh_upper_transport_layer_receive_segmented_access_message: +2fc0 6fe08c14 fetch 1 ,mem_mesh_message_transport_head +2fc1 c3032fc4 bbit0 transport_head_bit_akf ,ali_mesh_uuper_transport_layer_decrypt_segment_access_by_device_key + +ali_mesh_uuper_transport_layer_decrypt_segment_access_by_application_key: +2fc2 20402fdf call ali_mesh_upper_transport_layer_load_application_nonce_and_application_key +2fc3 20202fc6 branch ali_mesh_upper_transport_layer_decrypt_segmented_message + +ali_mesh_uuper_transport_layer_decrypt_segment_access_by_device_key: +2fc4 20402fec call ali_mesh_upper_transport_layer_load_device_nonce_and_device_key +2fc5 20202fc6 branch ali_mesh_upper_transport_layer_decrypt_segmented_message + +ali_mesh_upper_transport_layer_decrypt_segmented_message: +2fc6 6fe0cb0e fetch 1 ,mem_mesh_aszmic +2fc7 245a7e54 ncall enable_user ,blank +2fc8 205a7e56 call disable_user ,blank +2fc9 6fe0c9ea fetch 1 ,mem_mesh_segmented_access_message_current_length +2fca 1fe0fffc pincrease -4 +2fcb 7049ea00 jam 0 ,mem_mesh_segmented_access_message_current_length +2fcc de0049eb arg mem_mesh_segmented_access_message_segment ,alarm + +ali_mesh_upper_transport_layer_decrypt_message: +2fcd 1e020400 copy alarm ,temp +2fce 20402fd9 call ali_mesh_upper_transport_layer_decrypt_message_decrypt_transmic +2fcf 24628000 nrtn zero +2fd0 df200001 arg 1 ,loopcnt +2fd1 da200be0 arg mem_ccm_data_len ,rega +2fd2 da400040 arg mesh_upper_receive_packet ,regb +2fd3 204029db call logging_tx_info +2fd4 20402fdc call ali_mesh_upper_transport_layer_check_transport_mic_cache +2fd5 24740000 nrtn user +2fd6 6fe10be1 fetch 2 ,mem_ccm_data_ptr +2fd7 1fe26000 copy pdata ,alarm +2fd8 2020272e branch ali_mesh_access_layer_resolve_message + +ali_mesh_upper_transport_layer_decrypt_message_decrypt_transmic: +2fd9 24342be0 nbranch ali_ccm_decrypt ,user +2fda 1fe0fffc pincrease -4 +2fdb 20202bde branch ali_ccm_decrypt_64bit + +ali_mesh_upper_transport_layer_check_transport_mic_cache: +2fdc 58004b0f setarg mem_mesh_access_message_mic_cache +2fdd 67e10bfd store 2 ,mem_mesh_mic_cache_ptr +2fde 2020296a branch ali_mesh_base_adt_cache + +ali_mesh_upper_transport_layer_load_application_nonce_and_application_key: +2fdf 20402fe2 call ali_mesh_upper_transport_layer_load_application_nonce + +ali_mesh_upper_transport_layer_load_application_key: +2fe0 d8c04afe arg mem_mesh_application_key ,contr +2fe1 20206dbe branch load_key + +ali_mesh_upper_transport_layer_load_application_nonce: +2fe2 d8a00c28 arg mem_mesh_application_nonce ,contw +2fe3 58000001 setarg application_nonce +2fe4 e7e08005 istore 1 ,contw +2fe5 6fe0cb0e fetch 1 ,mem_mesh_aszmic +2fe6 d8400000 arg 0 ,temp +2fe7 7d3a0407 nsetflag blank ,7 ,temp +2fe8 e0408005 istoret 1 ,contw +2fe9 6fe38c0d fetch 7 ,mem_mesh_message_seq +2fea e7e38005 istore 7 ,contw +2feb 20202fac branch mesh_generate_nonce + +ali_mesh_upper_transport_layer_load_device_nonce_and_device_key: +2fec 20402fef call ali_mesh_upper_transport_layer_load_device_nonce + +ali_mesh_upper_transport_layer_load_device_key: +2fed d8c04824 arg mem_mesh_device_key ,contr +2fee 20206dbe branch load_key + +ali_mesh_upper_transport_layer_load_device_nonce: +2fef d8a00c28 arg mem_mesh_device_nonce ,contw +2ff0 58000002 setarg device_nonce +2ff1 20202fe4 branch ali_mesh_upper_transport_layer_load_application_nonce + 2 + +ali_mesh_upper_transport_layer_send_access_message: + +ali_mesh_upper_transport_layer_send_access_message_without_cleat_tx_buffer: +2ff2 477fc03f bpatchx patch3f_7 ,mem_patch3f +2ff3 204030d7 call ali_mesh_upper_transport_layer_clear_tx_buffer +2ff4 204030d8 call ali_mesh_loggint_tx_info_upper_send_packet +2ff5 204030a7 call ali_mesh_upper_transport_layer_send_access_message_add_nid_src_ttl_seq_dst +2ff6 20402ffb call ali_mesh_upper_transport_layer_store_packet_header +2ff7 20740000 rtn user +2ff8 20403010 call ali_mesh_upper_transport_layer_store_unsegment_msg_original_access_pdu +2ff9 da200c43 arg mem_mesh_upper_tran_layer_queue_temp ,rega +2ffa 2020793f branch queue_push + +ali_mesh_upper_transport_layer_store_packet_header: +2ffb 20407e56 call disable_user +2ffc d8400002 arg upper_retry_count_status ,temp +2ffd 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +2ffe 98408400 iadd temp ,temp +2fff 6fe08c3a fetch 1 ,mem_mesh_network_packet_type +3000 1fe67c01 sub pdata ,mesh_message_app ,null +3001 79228406 setflag zero ,bit_upper_flag_app_control ,temp +3002 60488c43 storet 1 ,mem_mesh_upper_tran_layer_temp_packet_flag +3003 6fe4cb3d fetch 9 ,mem_mesh_send_upper_layer_ivi_and_nid +3004 67e48c47 store 9 ,mem_mesh_upper_tran_layer_temp_packet_header_ivi_nid +3005 6fe08a10 fetch 1 ,mem_mesh_access_layer_payload_vendor_command +3006 c1ea0000 rtnne vendor_message_attr_indication +3007 6fe0c933 fetch 1 ,mem_mesh_provisioned_flag +3008 c0807e54 bne paired_status ,enable_user +3009 6fe08a13 fetch 1 ,mem_mesh_access_layer_payload_vendor_tid +300a 67e08c46 store 1 ,mem_mesh_upper_tran_layer_temp_packet_tid +300b 6fe08c43 fetch 1 ,mem_mesh_upper_tran_layer_temp_packet_flag +300c 1fe0fe01 pincrease upper_retry_count_indication +300d 79207e05 set1 bit_upper_flag_vendor_indication ,pdata +300e 67e08c43 store 1 ,mem_mesh_upper_tran_layer_temp_packet_flag +300f 20600000 rtn + +ali_mesh_upper_transport_layer_store_unsegment_msg_original_access_pdu: +3010 6fe08a0f fetch 1 ,mem_mesh_access_layer_payload_len +3011 1fe27200 copy pdata ,loopcnt +3012 67e08c50 store 1 ,mem_mesh_upper_tran_layer_temp_packet_length +3013 6fe08c14 fetch 1 ,mem_mesh_message_transport_head +3014 67e08c51 store 1 ,mem_mesh_upper_tran_layer_temp_pakcet_akf_aid +3015 d8a00c56 arg mem_mesh_upper_tran_layer_temp_pakcet_upper_tran_access_pdu ,contw +3016 d8c00a10 arg mem_mesh_access_layer_payload ,contr +3017 20207d5f branch memcpy + +ali_mesh_upper_transport_layer_control_packet: +3018 da60301a arg ali_mesh_upper_transport_layer_control_packet_deal ,regc +3019 20202dec branch ali_mesh_check_all_element_info + +ali_mesh_upper_transport_layer_control_packet_deal: +301a 1a208c16 add rega ,element_device_upper_adv_flag ,contr +301b efe08006 ifetch 1 ,contr +301c 247a0000 nrtn blank +301d efe10006 ifetch 2 ,contr +301e 67e1448a store 2 ,mem_queue_ptr +301f da200c43 arg mem_mesh_upper_tran_layer_queue_temp ,rega +3020 20407967 call queue_get_new_ele +3021 24740000 nrtn user +3022 6a210c02 fetchr rega ,2 ,mem_mesh_rega_temp +3023 68488c43 fetcht 1 ,mem_mesh_upper_tran_layer_temp_packet_flag +3024 18417e0f and temp ,data_upper_flag_max_retry_count ,pdata +3025 203a3056 branch ali_mesh_upper_transport_layer_queue_pop ,blank +3026 1a208a16 add rega ,element_device_upper_adv_flag ,contw +3027 58000001 setarg packet_in_bearer +3028 e7e08005 istore 1 ,contw +3029 20403040 call ali_mesh_upper_transport_layer_control_packet_load_header +302a 68488c43 fetcht 1 ,mem_mesh_upper_tran_layer_temp_packet_flag +302b 20403046 call ali_mesh_upper_transport_layer_control_packet_load_app_control +302c 1a208a19 add rega ,element_device_tran_package_tid ,contw +302d e7e08005 istore 1 ,contw +302e 79200404 set1 bit_upper_flag_retransmit ,temp +302f 184085ff increase -1 ,temp +3030 e0408012 istoret 1 ,regb +3031 68488c43 fetcht 1 ,mem_mesh_upper_tran_layer_temp_packet_flag +3032 284ffe04 isolate1 bit_upper_flag_retransmit ,temp +3033 2420b05b nbranch ali_mesh_upper_transport_layer_control_packet_encrypt_access ,true +3034 68488c50 fetcht 1 ,mem_mesh_upper_tran_layer_temp_packet_length +3035 60488a0f storet 1 ,mem_mesh_upper_transport_layer_payload_len +3036 18427200 copy temp ,loopcnt +3037 d8a00a10 arg mem_mesh_access_layer_payload ,contw +3038 d8c00c56 arg mem_mesh_upper_tran_layer_temp_pakcet_upper_tran_access_pdu ,contr +3039 20407d5f call memcpy +303a 18467c0f sub temp ,unsegmented_access_message_max_upper_transport_access_pdu_len ,null +303b 2421303d nbranch ali_mesh_upper_transport_layer_control_packet_segment_msg ,positive + +ali_mesh_upper_transport_layer_control_packet_unsegment_msg: +303c 20202e4b branch ali_mesh_lower_transport_layer_send_unsegmented_access_message + +ali_mesh_upper_transport_layer_control_packet_segment_msg: +303d 6fe20c52 fetch 4 ,mem_mesh_upper_tran_layer_temp_segmented_pakcet_seqzero +303e 67e20c3e store 4 ,mem_mesh_segmented_lower_transport_layer_segzero +303f 2020307c branch ali_mesh_upper_transport_layer_split_segmented_msg_to_lower_tran_layer + +ali_mesh_upper_transport_layer_control_packet_load_header: +3040 6fe08c51 fetch 1 ,mem_mesh_upper_tran_layer_temp_pakcet_akf_aid +3041 67e08c14 store 1 ,mem_mesh_message_transport_head +3042 6fe48c47 fetch 9 ,mem_mesh_upper_tran_layer_temp_packet_header_ivi_nid +3043 67e4cb3d store 9 ,mem_mesh_send_upper_layer_ivi_and_nid +3044 67e48c0b store 9 ,mem_mesh_message_nid +3045 20600000 rtn + +ali_mesh_upper_transport_layer_control_packet_load_app_control: +3046 58000003 setarg upper_tran_tmall_and_app +3047 20403053 call ali_mesh_store_tran_package_type +3048 6fe08c46 fetch 1 ,mem_mesh_upper_tran_layer_temp_packet_tid +3049 284ffe05 isolate1 bit_upper_flag_vendor_indication ,temp +304a 20608000 rtn true +304b 58000001 setarg upper_tran_tmall_message +304c 20403053 call ali_mesh_store_tran_package_type +304d 58000000 setarg 0 +304e 284ffe06 isolate1 bit_upper_flag_app_control ,temp +304f 24608000 nrtn true +3050 58000002 setarg upper_tran_app_message +3051 20403053 call ali_mesh_store_tran_package_type +3052 20207e60 branch enable_blank + +ali_mesh_store_tran_package_type: +3053 1a208a1a add rega ,element_device_tran_package_type ,contw +3054 e7e08005 istore 1 ,contw +3055 20600000 rtn + +ali_mesh_upper_transport_layer_queue_pop: +3056 58000000 setarg 0 +3057 1a208a19 add rega ,element_device_tran_package_tid ,contw +3058 e7e08005 istore 1 ,contw +3059 da200c43 arg mem_mesh_upper_tran_layer_queue_temp ,rega +305a 20207956 branch queue_pop + +ali_mesh_upper_transport_layer_control_packet_encrypt_access: +305b 2040309f call ali_mesh_upper_transport_layer_send_access_message_calc_seq +305c 204030b3 call ali_mesh_upper_transport_layer_send_access_message_add_seq +305d 6fe4cb3d fetch 9 ,mem_mesh_send_upper_layer_ivi_and_nid +305e 67e48c47 store 9 ,mem_mesh_upper_tran_layer_temp_packet_header_ivi_nid +305f 20403074 call ali_mesh_upper_transport_layer_control_packet_encrypt_access_load_payload +3060 58000000 setarg 0 +3061 67e0cb0e store 1 ,mem_mesh_aszmic +3062 20403095 call ali_mesh_upper_transport_layer_calc_transport_mic +3063 68488a0f fetcht 1 ,mem_mesh_upper_transport_layer_payload_len +3064 60488c50 storet 1 ,mem_mesh_upper_tran_layer_temp_packet_length +3065 18427200 copy temp ,loopcnt +3066 d8c00a10 arg mem_mesh_access_layer_payload ,contr +3067 d8a00c56 arg mem_mesh_upper_tran_layer_temp_pakcet_upper_tran_access_pdu ,contw +3068 20407d5f call memcpy +3069 18467c0f sub temp ,unsegmented_access_message_max_upper_transport_access_pdu_len ,null +306a 2421306e nbranch ali_mesh_upper_transport_layer_control_packet_encrypt_access_segment_msg ,positive + +ali_mesh_upper_transport_layer_control_packet_encrypt_access_unsegment_msg: +306b da200c44 arg mem_mesh_upper_tran_layer_temp_packet_transmit_delay ,rega +306c 20407976 call queue_store_new_ele +306d 20202e4b branch ali_mesh_lower_transport_layer_send_unsegmented_access_message + +ali_mesh_upper_transport_layer_control_packet_encrypt_access_segment_msg: +306e 204030bb call ali_mesh_upper_transport_layer_send_segmented_access_message_get_seqzero_segon +306f 6fe20c3e fetch 4 ,mem_mesh_segmented_lower_transport_layer_segzero +3070 67e20c52 store 4 ,mem_mesh_upper_tran_layer_temp_segmented_pakcet_seqzero +3071 da200c44 arg mem_mesh_upper_tran_layer_temp_packet_transmit_delay ,rega +3072 20407976 call queue_store_new_ele +3073 2020307c branch ali_mesh_upper_transport_layer_split_segmented_msg_to_lower_tran_layer + +ali_mesh_upper_transport_layer_control_packet_encrypt_access_load_payload: +3074 6fe08c50 fetch 1 ,mem_mesh_upper_tran_layer_temp_packet_length +3075 1fe27200 copy pdata ,loopcnt +3076 67e08a0f store 1 ,mem_mesh_access_layer_payload_len +3077 6fe08c51 fetch 1 ,mem_mesh_upper_tran_layer_temp_pakcet_akf_aid +3078 67e08c14 store 1 ,mem_mesh_message_transport_head +3079 d8c00c56 arg mem_mesh_upper_tran_layer_temp_pakcet_upper_tran_access_pdu ,contr +307a d8a00a10 arg mem_mesh_access_layer_payload ,contw +307b 20207d5f branch memcpy + +ali_mesh_upper_transport_layer_split_segmented_msg_to_lower_tran_layer: +307c 204030c8 call ali_mesh_upper_transport_layer_send_segmented_access_message_calc_header +307d 58000a10 setarg mem_mesh_access_payload +307e 67e10c3b store 2 ,mem_mesh_upper_transport_layer_payload_ptr + +ali_mesh_upper_transport_layer_send_segmented_access_message_loop: +307f 20403040 call ali_mesh_upper_transport_layer_control_packet_load_header +3080 2040309f call ali_mesh_upper_transport_layer_send_access_message_calc_seq +3081 204030b3 call ali_mesh_upper_transport_layer_send_access_message_add_seq +3082 68488a0f fetcht 1 ,mem_mesh_access_layer_payload_len +3083 5800000c setarg segmented_access_message_unint_pdu_len +3084 20407e4a call not_greater_than +3085 1fe22200 copy pdata ,rega +3086 18427e00 copy temp ,pdata +3087 9a267e00 isub rega ,pdata +3088 67e08a0f store 1 ,mem_mesh_access_layer_payload_len +3089 6fe10c3b fetch 2 ,mem_mesh_upper_transport_layer_payload_ptr +308a 1fe20c00 copy pdata ,contr +308b 9a208400 iadd rega ,temp +308c 60490c3b storet 2 ,mem_mesh_upper_transport_layer_payload_ptr +308d 20402e55 call ali_mesh_lower_transport_layer_send_segmented_access_message +308e 6fe08a0f fetch 1 ,mem_mesh_access_layer_payload_len +308f 207a0000 rtn blank +3090 6fe08c40 fetch 1 ,mem_mesh_segmented_lower_transport_layer_sego +3091 1fe0fe01 pincrease 1 +3092 67e08c40 store 1 ,mem_mesh_segmented_lower_transport_layer_sego +3093 204030c8 call ali_mesh_upper_transport_layer_send_segmented_access_message_calc_header +3094 2020307f branch ali_mesh_upper_transport_layer_send_segmented_access_message_loop + +ali_mesh_upper_transport_layer_calc_transport_mic: +3095 6fe08c14 fetch 1 ,mem_mesh_message_transport_head +3096 c3033099 bbit0 transport_head_bit_akf ,ali_mesh_upper_transport_layer_calc_transport_mic_by_devicekey + +ali_mesh_upper_transport_layer_calc_transport_mic_by_appkey: +3097 20402fdf call ali_mesh_upper_transport_layer_load_application_nonce_and_application_key +3098 2020309a branch ali_mesh_upper_transport_layer_calc_transport_mic_encrypt_aesccm + +ali_mesh_upper_transport_layer_calc_transport_mic_by_devicekey: +3099 20402fec call ali_mesh_upper_transport_layer_load_device_nonce_and_device_key + +ali_mesh_upper_transport_layer_calc_transport_mic_encrypt_aesccm: +309a 6fe08a0f fetch 1 ,mem_mesh_access_layer_payload_len +309b 1fe08404 add pdata ,4 ,temp +309c 60488a0f storet 1 ,mem_mesh_upper_transport_layer_payload_len +309d d8400a10 arg mem_mesh_access_layer_payload ,temp +309e 20202bbf branch ali_ccm_encrypt + +ali_mesh_upper_transport_layer_send_access_message_calc_seq: +309f 6fe1cb37 fetch 3 ,mem_mesh_send_message_seq +30a0 1fe0fe01 pincrease 1 +30a1 67e1cb37 store 3 ,mem_mesh_send_message_seq +30a2 6fe0c957 fetch 1 ,mem_mesh_gatt_package_send_msg_id +30a3 1fe0fe01 pincrease 1 +30a4 67e0c957 store 1 ,mem_mesh_gatt_package_send_msg_id +30a5 6fe149d3 fetch 2 ,mem_mesh_cb_seq_changed +30a6 20207e05 branch callback_func + +ali_mesh_upper_transport_layer_send_access_message_add_nid_src_ttl_seq_dst: +30a7 6fe0ca16 fetch 1 ,mem_mesh_iv_index + 3 +30a8 1ff27e00 lshift4 pdata ,pdata +30a9 1fe9fe00 lshift3 pdata ,pdata +30aa 6848c8d1 fetcht 1 ,mem_k2_nid +30ab 9841fe00 ior temp ,pdata +30ac 67e0cb3d store 1 ,mem_mesh_send_upper_layer_ivi_and_nid +30ad 6fe0cb3c fetch 1 ,mem_mesh_send_message_ttl +30ae 67e0cb3e store 1 ,mem_mesh_send_upper_layer_ctl_and_ttl +30af 6fe14b3a fetch 2 ,mem_mesh_send_message_src +30b0 67e14b42 store 2 ,mem_mesh_send_upper_layer_src +30b1 6fe10c35 fetch 2 ,mem_mesh_send_message_dst +30b2 67e14b44 store 2 ,mem_mesh_send_upper_layer_dst + +ali_mesh_upper_transport_layer_send_access_message_add_seq: +30b3 6fe1cb37 fetch 3 ,mem_mesh_send_message_seq +30b4 67e1cb3f store 3 ,mem_mesh_send_upper_layer_seq +30b5 da204b3f arg mem_mesh_send_upper_layer_seq ,rega +30b6 df200003 arg 3 ,loopcnt +30b7 20407d37 call inverse_data +30b8 6fe44b3e fetch 8 ,mem_mesh_send_upper_layer_ctl_and_ttl +30b9 67e40c0c store 8 ,mem_mesh_message_ttl +30ba 20600000 rtn + +ali_mesh_upper_transport_layer_send_segmented_access_message_get_seqzero_segon: +30bb 6fe08a0f fetch 1 ,mem_mesh_upper_transport_layer_payload_len +30bc 1fe6fc0c div pdata ,segmented_access_message_unint_pdu_len +30bd 20407def call wait_div_end +30be 18078400 quotient temp +30bf 18077e00 remainder pdata +30c0 205a30d5 call ali_mesh_upper_transport_layer_send_segmented_access_message_sub_segn_one ,blank +30c1 60488c41 storet 1 ,mem_mesh_segmented_lower_transport_layer_segn +30c2 700c4000 jam 0 ,mem_mesh_segmented_lower_transport_layer_sego +30c3 6fe1cb37 fetch 3 ,mem_mesh_send_message_seq +30c4 d8401fff arg 0x1fff ,temp +30c5 98417e00 iand temp ,pdata +30c6 67e10c3e store 2 ,mem_mesh_segmented_lower_transport_layer_segzero +30c7 20600000 rtn + +ali_mesh_upper_transport_layer_send_segmented_access_message_calc_header: +30c8 6fe10c3e fetch 2 ,mem_mesh_segmented_lower_transport_layer_segzero +30c9 1ff27e00 lshift4 pdata ,pdata +30ca 1fe3fe00 lshift pdata ,pdata +30cb 68488c40 fetcht 1 ,mem_mesh_segmented_lower_transport_layer_sego +30cc 9841fe00 ior temp ,pdata +30cd 1ff27e00 lshift4 pdata ,pdata +30ce 1fe3fe00 lshift pdata ,pdata +30cf 68488c41 fetcht 1 ,mem_mesh_segmented_lower_transport_layer_segn +30d0 9841fe00 ior temp ,pdata +30d1 67e1cb47 store 3 ,mem_mesh_segmented_access_lower_transport_layer_szmic_seqzero_sego_segn +30d2 df200003 arg 3 ,loopcnt +30d3 da204b47 arg mem_mesh_segmented_access_lower_transport_layer_szmic_seqzero_sego_segn ,rega +30d4 20207d37 branch inverse_data + +ali_mesh_upper_transport_layer_send_segmented_access_message_sub_segn_one: +30d5 184085ff increase -1 ,temp +30d6 20600000 rtn + +ali_mesh_upper_transport_layer_clear_tx_buffer: +30d7 20600000 rtn + +ali_mesh_loggint_tx_info_upper_send_packet: +30d8 da200a10 arg mem_mesh_access_layer_payload ,rega +30d9 6f208a0f fetchr loopcnt ,1 ,mem_mesh_access_layer_payload_len +30da da400041 arg mesh_upper_send_packet ,regb +30db 202029db branch logging_tx_info + +app_init: +30dc 44d74015 bpatch patch15_6 ,mem_patch15 +30dd 6fe0c09a fetch 1 ,mem_device_option +30de 203a30dc branch app_init ,blank +30df c0023620 beq dvc_op_dongle ,dongle_init +30e0 c007b247 beq dvc_op_antilost ,antilost_init +30e1 c004cad6 beq dvc_op_shutter ,shutter_init +30e2 c0053764 beq dvc_op_module ,module_init +30e3 c00733e2 beq dvc_op_car ,car_init +30e4 c006c9c0 beq dvc_op_remote_car ,remote_car_init +30e5 c0064cba beq dvc_op_hci_boot ,hci_init +30e6 c005adbb beq dvc_op_ali_mesh ,ali_mesh_init +30e7 c00293df beq dvc_op_test ,test_init +30e8 c0043bc1 beq dvc_op_mouse ,mouse_init +30e9 20600000 rtn + +app_lpm_init: +30ea 700a5100 jam 0 ,mem_tester_emulate +30eb 7000e400 jam 0 ,mem_debug_config +30ec 7000e500 jam 0 ,mem_lch_code +30ed 58000000 setarg 0 +30ee 67e28870 store 5 ,mem_sp_state_start +30ef 6fe0c09a fetch 1 ,mem_device_option +30f0 203a30ea branch app_lpm_init ,blank +30f1 c005378d beq dvc_op_module ,module_lpm_init + +app_lpm_init0: +30f2 20600000 rtn + +app_param_init: +30f3 20758000 rtn wake +30f4 20405c15 call app_read_efuse_sys_config +30f5 20405c1e call app_read_efuse_dig_aon_vsel +30f6 20405c24 call app_read_efuse_syn_afc_cfg1 +30f7 20405c29 call app_read_efuse_rf_ldo_cfg1 +30f8 20405c2f call app_read_efuse_rc_cal +30f9 20405c33 call app_read_efuse_agc +30fa 6fe0c09a fetch 1 ,mem_device_option +30fb c004cc15 beq dvc_op_shutter ,shutter_default_init +30fc c002362c beq dvc_op_dongle ,dongle_default_init +30fd c0043c02 beq dvc_op_mouse ,mouse_default_init +30fe c006ca90 beq dvc_op_remote_car ,remote_car_default_init +30ff 20600000 rtn + +app_sys_param_init: +3100 7041efff jam 0xff ,mem_rf_init_data +3101 580041ef setarg mem_rf_init_data +3102 67e140ca store 2 ,mem_rf_init_ptr +3103 704790ff jam 0xff ,mem_ui_button_gpio +3104 70417a88 jam 0x88 ,mem_lpm_xtal_ib +3105 70417cce jam 0xce ,mem_lpm_padding +3106 20600000 rtn + +app_process_idle: +3107 204060dc call idle_read_adc_wait +3108 204077b9 call ui_dispatch +3109 20407887 call check_51cmd +310a 20403111 call app_process_bb_event +310b 6fe14465 fetch 2 ,mem_cb_idle_process +310c 20207e05 branch callback_func + +app_process_bt: +310d 6fe14463 fetch 2 ,mem_cb_bt_process +310e 20207e05 branch callback_func + +app_process_ble: +310f 6fe14461 fetch 2 ,mem_cb_le_process +3110 20207e05 branch callback_func + +app_process_bb_event: +3111 44d7c015 bpatch patch15_7 ,mem_patch15 +3112 da204772 arg mem_ipc_fifo_bt2c51 ,rega +3113 20407e31 call fifo_out +3114 207a0000 rtn blank +3115 1fe22600 copy pdata ,regc +3116 2040311a call app_event_normal_process +3117 2020313f branch app_process_bb_event_priority + +app_discard_event: +3118 da600000 arg 0 ,regc +3119 20600000 rtn + +app_event_normal_process: +311a c000b12c beq bt_evt_bb_connected ,app_evt_bt_conn +311b c0083173 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +311c c002b150 beq bt_evt_setup_complete ,app_evt_setup_complete +311d c0093157 beq bt_evt_hid_handshake ,app_evt_hid_handshake +311e c003316f beq bt_evt_hid_connected ,app_bb_event_hid_connected +311f c00231b1 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +3120 c00131b6 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +3121 c009b1b1 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +3122 c00a3166 beq bt_evt_le_connected ,app_le_event_bb_connected +3123 c00ab16a beq bt_evt_le_disconnected ,app_le_event_bb_disconn +3124 c001b149 beq bt_evt_reconn_started ,app_event_reconn_start +3125 c005b15b beq bt_evt_enter_sniff ,app_event_enter_sniff +3126 c0063162 beq bt_evt_exit_sniff ,app_event_exit_sniff +3127 c00b3177 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +3128 c00c3145 beq bt_evt_linkkey_generate ,app_event_linkkey_generate +3129 c0153135 beq bt_evt_switch_fail_master ,app_event_switch_fail_master +312a c015b133 beq bt_evt_switch_success_master ,app_event_switch_success +312b 20600000 rtn + +app_evt_bt_conn: +312c 6fe1478c fetch 2 ,mem_ui_state_map +312d 79207e00 set1 ui_state_bt_connected ,pdata +312e 67e1478c store 2 ,mem_ui_state_map +312f 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3130 793ffe00 set0 app_disc_by_button ,pdata +3131 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +3132 202078c9 branch check_51cmd_stop_discovery + +app_event_switch_success: +3133 70030c00 jam 0 ,mem_switch_fail_master_count +3134 20600000 rtn + +app_event_switch_fail_master: +3135 6fe0830c fetch 1 ,mem_switch_fail_master_count +3136 1fe0fe01 increase 1 ,pdata +3137 67e0830c store 1 ,mem_switch_fail_master_count +3138 1fe67c01 sub pdata ,1 ,null +3139 202131ec branch app_bt_role_switch ,positive +313a 70030c00 jam 0 ,mem_switch_fail_master_count +313b 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +313c 79207e09 set1 app_disc_switch_fail ,pdata +313d 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +313e 202031f6 branch app_bt_disconnect + +app_process_bb_event_priority: +313f 6fe14467 fetch 2 ,mem_cb_bb_event_process +3140 20207e05 branch callback_func + +app_check_wake_lock: +3141 6fe1445b fetch 2 ,mem_cb_check_wakelock +3142 20207e05 branch callback_func + +app_will_enter_lpm: +3143 6fe1445f fetch 2 ,mem_cb_before_lpm +3144 20207e05 branch callback_func + +app_event_linkkey_generate: +3145 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3146 79207e01 set1 app_disc_after_pairing ,pdata +3147 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +3148 2020321f branch app_bt_store_reconn_info + +app_event_reconn_start: +3149 6fe1478c fetch 2 ,mem_ui_state_map +314a 79207e07 set1 ui_state_bt_reconnect ,pdata +314b 67e1478c store 2 ,mem_ui_state_map +314c 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +314d 79207e02 set1 app_disc_after_reconn ,pdata +314e 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +314f 20600000 rtn + +app_evt_setup_complete: +3150 6fe1478c fetch 2 ,mem_ui_state_map +3151 79207e01 set1 ui_state_bt_setup_complete ,pdata +3152 67e1478c store 2 ,mem_ui_state_map +3153 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3154 79207e04 set1 app_disc_after_setup_done ,pdata +3155 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +3156 20600000 rtn + +app_evt_hid_handshake: +3157 6fe1478c fetch 2 ,mem_ui_state_map +3158 79207e03 set1 ui_state_bt_hid_handshake ,pdata +3159 67e1478c store 2 ,mem_ui_state_map +315a 20600000 rtn + +app_event_enter_sniff: +315b 6fe1478c fetch 2 ,mem_ui_state_map +315c 79207e05 set1 ui_state_bt_sniff ,pdata +315d 67e1478c store 2 ,mem_ui_state_map +315e 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +315f 79207e03 set1 app_disc_after_sniff ,pdata +3160 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +3161 20600000 rtn + +app_event_exit_sniff: +3162 6fe1478c fetch 2 ,mem_ui_state_map +3163 793ffe05 set0 ui_state_bt_sniff ,pdata +3164 67e1478c store 2 ,mem_ui_state_map +3165 20600000 rtn + +app_le_event_bb_connected: +3166 6fe1478c fetch 2 ,mem_ui_state_map +3167 79207e09 set1 ui_state_ble_connected ,pdata +3168 67e1478c store 2 ,mem_ui_state_map +3169 20600000 rtn + +app_le_event_bb_disconn: +316a 70443500 jam 0 ,mem_le_l2cap_att_states +316b 6fe1478c fetch 2 ,mem_ui_state_map +316c 793ffe09 set0 ui_state_ble_connected ,pdata +316d 67e1478c store 2 ,mem_ui_state_map +316e 20203225 branch app_lpm_mult_disable + +app_bb_event_hid_connected: +316f 6fe1478c fetch 2 ,mem_ui_state_map +3170 79207e02 set1 ui_state_bt_hid_conn ,pdata +3171 67e1478c store 2 ,mem_ui_state_map +3172 20600000 rtn + +app_evt_button_long_pressed: +3173 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3174 79207e00 set1 app_disc_by_button ,pdata +3175 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +3176 20600000 rtn + +app_event_ml2cap_conn_refused: +3177 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3178 79207e08 set1 app_disc_l2cap_refused ,pdata +3179 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +317a 202031f6 branch app_bt_disconnect + +app_evt_timer: +317b 67e0830d store 1 ,mem_app_evt_timer_count + +app_evt_100ms_loop: +317c 44d84016 bpatch patch16_0 ,mem_patch16 +317d 6fe0830d fetch 1 ,mem_app_evt_timer_count +317e 207a0000 rtn blank +317f 1fe0ffff increase -1 ,pdata +3180 67e0830d store 1 ,mem_app_evt_timer_count +3181 204077c5 call ui_button_polling +3182 204031e3 call app_lpm_wake_auto_lock_timer +3183 204031a4 call app_unsniff_delay_timer +3184 204031aa call app_discovery_timer +3185 20405cdc call flash_write_spi_sm_timer +3186 204060d9 call adc_wait_timer +3187 6fe1446f fetch 2 ,mem_cb_event_timer +3188 20407e05 call callback_func +3189 2020317c branch app_evt_100ms_loop + +timer_single_step: +318a efe08013 ifetch 1 ,regc +318b 207a0000 rtn blank +318c 1fe0ffff pincrease -1 +318d e7e08013 istore 1 ,regc +318e 247a0000 nrtn blank +318f 1a427e00 copy regb ,pdata +3190 20207e05 branch callback_func + +timer_single_step_2b: +3191 efe10013 ifetch 2 ,regc +3192 207a0000 rtn blank +3193 1fe0ffff pincrease -1 +3194 e7e10013 istore 2 ,regc +3195 247a0000 nrtn blank +3196 1a427e00 copy regb ,pdata +3197 20207e05 branch callback_func + +app_power_timer: +3198 684944ca fetcht 2 ,mem_power_param_ptr +3199 1840a601 add temp ,power_timer_offset ,regc +319a da40319c arg app_power_timer_timeout ,regb +319b 2020318a branch timer_single_step + +app_power_timer_timeout: +319c 2040323b call app_got_power_state_common +319d c000b19f beq power_starting ,app_enter_power_stanby_state + +app_enter_power_off_state: +319e 20203217 branch app_enter_hibernate + +app_enter_power_stanby_state: +319f 58000002 setarg power_standby +31a0 e7e08013 istore 1 ,regc +31a1 1840a408 add temp ,power_standby_cb_offset ,regb + +app_power_cb_common: +31a2 efe10012 ifetch 2 ,regb +31a3 20207e05 branch callback_func + +app_unsniff_delay_timer: +31a4 da60447b arg mem_unsniff2sniff_timer_count ,regc +31a5 da4031a7 arg app_unsniff_delay_timeout ,regb +31a6 2020318a branch timer_single_step + +app_unsniff_delay_timeout: +31a7 20400a61 call context_check_idle +31a8 2022b21b branch app_bt_enter_sniff ,zero +31a9 20600000 rtn + +app_discovery_timer: +31aa da604788 arg mem_discovery_timeout_timer_count ,regc +31ab da4031ad arg app_discovery_timeout ,regb +31ac 20203191 branch timer_single_step_2b + +app_discovery_timeout: +31ad 204031fd call app_bt_stop_discovery +31ae 20403215 call app_led_off +31af 6fe14469 fetch 2 ,mem_cb_discovry_timeout +31b0 20207e05 branch callback_func + +app_bb_event_reconn_failed: +31b1 204031c9 call app_disconn_reason_flag_clear + +app_clear_reconnect_flag: +31b2 6fe1478c fetch 2 ,mem_ui_state_map +31b3 793ffe07 set0 ui_state_bt_reconnect ,pdata +31b4 67e1478c store 2 ,mem_ui_state_map +31b5 20600000 rtn + +app_bb_event_bb_disconn: +31b6 70447b00 jam 0 ,mem_unsniff2sniff_timer_count +31b7 6fe1478c fetch 2 ,mem_ui_state_map +31b8 c283b1bb bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +31b9 2fec0001 isolate0 ui_state_bt_setup_complete ,pdata +31ba 2040b118 call app_discard_event ,true + +app_bb_event_bb_reconn_disconn: +31bb 44d8c016 bpatch patch16_1 ,mem_patch16 +31bc 6fe1478c fetch 2 ,mem_ui_state_map +31bd 793ffe00 set0 ui_state_bt_connected ,pdata +31be 793ffe01 set0 ui_state_bt_setup_complete ,pdata +31bf 793ffe02 set0 ui_state_bt_hid_conn ,pdata +31c0 793ffe03 set0 ui_state_bt_hid_handshake ,pdata +31c1 793ffe07 set0 ui_state_bt_reconnect ,pdata +31c2 67e1478c store 2 ,mem_ui_state_map +31c3 20203225 branch app_lpm_mult_disable + +app_bb_hibernate: +31c4 204031c6 call app_disconn_reason_clear +31c5 20203217 branch app_enter_hibernate + +app_disconn_reason_clear: +31c6 58000000 setarg 0 +31c7 67e1447e store app_disc_rsn_size ,mem_app_disconn_reason +31c8 20600000 rtn + +app_disconn_reason_flag_clear: +31c9 58000000 setarg 0 +31ca 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +31cb 20600000 rtn + +app_disconn_reason_collect_bt: +31cc 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +31cd 67e1447e store app_disc_rsn_size ,mem_app_disconn_reason +31ce 58000000 setarg 0 +31cf 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +31d0 20600000 rtn + +app_disconn_reason_collect_ble: +31d1 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +31d2 79207e07 set1 app_disc_ble ,pdata +31d3 67e1447e store app_disc_rsn_size ,mem_app_disconn_reason +31d4 58000000 setarg 0 +31d5 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +31d6 20600000 rtn + +app_check_sniff: +31d7 6fe0c78c fetch 1 ,mem_ui_state_map +31d8 2feffe05 isolate1 ui_state_bt_sniff ,pdata +31d9 20600000 rtn + +app_start_auto_sniff: +31da 6fe0c641 fetch 1 ,mem_unsniff2sniff_timer +31db 67e0c47b store 1 ,mem_unsniff2sniff_timer_count +31dc 20600000 rtn + +app_get_lpm_wake_lock: +31dd d8e00009 arg wake_lock_app ,queue +31de 202015ba branch lpm_get_wake_lock + +app_put_lpm_wake_lock: +31df d8e00009 arg wake_lock_app ,queue +31e0 202015be branch lpm_put_wake_lock + +app_lpm_wake_auto_lock: +31e1 70447c05 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +31e2 202031dd branch app_get_lpm_wake_lock + +app_lpm_wake_auto_lock_timer: +31e3 da60447c arg mem_wake_up_delay_timer ,regc +31e4 da4031df arg app_put_lpm_wake_lock ,regb +31e5 2020318a branch timer_single_step + +app_l2cap_flow_control_enable: +31e6 7045f301 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +31e7 20600000 rtn + +app_l2cap_flow_control_disable: +31e8 7045f300 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +31e9 20600000 rtn + +app_bt_set_pincode: +31ea 70095b0a jam bt_cmd_set_pin_code ,mem_fifo_temp +31eb 2020787a branch ui_ipc_send_cmd + +app_bt_role_switch: +31ec 70095b1d jam bt_cmd_role_switch ,mem_fifo_temp +31ed 2020787a branch ui_ipc_send_cmd + +app_bt_start_reconnect: +31ee 44d94016 bpatch patch16_2 ,mem_patch16 +31ef 6fe0c47d fetch 1 ,mem_app_connection_options +31f0 67e080bd store 1 ,mem_connection_options +31f1 70030b01 jam app_flag_reconnect ,mem_reconnect_flag +31f2 70095b03 jam bt_cmd_reconnect ,mem_fifo_temp +31f3 2020787a branch ui_ipc_send_cmd + +app_bt_reconnect_cancel: +31f4 70095b1e jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +31f5 2020787a branch ui_ipc_send_cmd + +app_bt_disconnect: +31f6 70095b04 jam bt_cmd_disconnect ,mem_fifo_temp +31f7 2020787a branch ui_ipc_send_cmd + +app_bt_start_discovery_short: +31f8 6fe14791 fetch 2 ,mem_discovery_timeout +31f9 67e14788 store 2 ,mem_discovery_timeout_timer_count + +app_bt_start_discovery_led_blink: +31fa 20403211 call app_led_start_blink + +app_bt_start_discovery: +31fb 70095b01 jam bt_cmd_start_discovery ,mem_fifo_temp +31fc 2020787a branch ui_ipc_send_cmd + +app_bt_stop_discovery: +31fd 58000000 setarg 0 +31fe 67e14788 store 2 ,mem_discovery_timeout_timer_count +31ff 70095b02 jam bt_cmd_stop_discovery ,mem_fifo_temp +3200 2020787a branch ui_ipc_send_cmd + +app_ble_start_direct_adv: +3201 70095b0f jam bt_cmd_start_direct_adv ,mem_fifo_temp +3202 2020787a branch ui_ipc_send_cmd + +app_ble_stop_direct_adv: +3203 70095b10 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +3204 2020787a branch ui_ipc_send_cmd + +app_ble_stop_adv: +3205 70095b0e jam bt_cmd_stop_adv ,mem_fifo_temp +3206 2020787a branch ui_ipc_send_cmd + +app_ble_start_adv: +3207 70095b0d jam bt_cmd_start_adv ,mem_fifo_temp +3208 2020787a branch ui_ipc_send_cmd + +app_ble_start_scan: +3209 70095b17 jam bt_cmd_le_start_scan ,mem_fifo_temp +320a 2020787a branch ui_ipc_send_cmd + +app_ble_stop_scan: +320b 70095b18 jam bt_cmd_le_stop_scan ,mem_fifo_temp +320c 2020787a branch ui_ipc_send_cmd + +app_ble_start_conn: +320d 70095b16 jam bt_cmd_le_start_conn ,mem_fifo_temp +320e 2020787a branch ui_ipc_send_cmd + +app_ble_disconnect: +320f 70095b11 jam bt_cmd_le_disconnect ,mem_fifo_temp +3210 2020787a branch ui_ipc_send_cmd + +app_led_start_blink: +3211 70095b15 jam bt_cmd_led_blink ,mem_fifo_temp +3212 2020787a branch ui_ipc_send_cmd + +app_led_on: +3213 70095b14 jam bt_cmd_led_on ,mem_fifo_temp +3214 2020787a branch ui_ipc_send_cmd + +app_led_stop_blink: + +app_led_off: +3215 70095b13 jam bt_cmd_led_off ,mem_fifo_temp +3216 2020787a branch ui_ipc_send_cmd + +app_enter_hibernate: +3217 70095b19 jam bt_cmd_enter_hibernate ,mem_fifo_temp +3218 2020787a branch ui_ipc_send_cmd + +app_bt_sniff_exit: +3219 70095b06 jam bt_cmd_exit_sniff ,mem_fifo_temp +321a 2020787a branch ui_ipc_send_cmd + +app_bt_enter_sniff: +321b 70095b05 jam bt_cmd_enter_sniff ,mem_fifo_temp +321c 2020787a branch ui_ipc_send_cmd + +app_ble_store_reconn_info: +321d 70095b1f jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +321e 2020787a branch ui_ipc_send_cmd + +app_bt_store_reconn_info: +321f 70095b20 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +3220 2020787a branch ui_ipc_send_cmd + +app_store_reconn_info: +3221 70095b25 jam bt_cmd_store_reconn_info ,mem_fifo_temp +3222 2020787a branch ui_ipc_send_cmd + +app_lpm_mult_enable: +3223 7920000d set1 mark_lpm_mult_enable ,mark +3224 20600000 rtn + +app_lpm_mult_disable: +3225 793f800d set0 mark_lpm_mult_enable ,mark +3226 20600000 rtn + +app_button_long_pressed: +3227 2040323b call app_got_power_state_common +3228 c0013231 beq power_standby ,app_power_shutting_down + +app_power_starting: +3229 58000001 setarg power_starting +322a e7e08013 istore 1 ,regc +322b 1840a203 add temp ,power_starting_timeout_offset ,rega +322c 1840a406 add temp ,power_starting_cb_offset ,regb + +app_power_common: +322d e8408011 ifetcht 1 ,rega +322e 1a60a601 increase 1 ,regc +322f e0408013 istoret 1 ,regc +3230 202031a2 branch app_power_cb_common + +app_power_shutting_down: +3231 58000000 setarg power_off +3232 e7e08013 istore 1 ,regc +3233 6fe1478c fetch 2 ,mem_ui_state_map +3234 c304b237 bbit0 ui_state_ble_connected ,app_power_off_end +3235 20402187 call le_send_terminate_ind_user_terminated +3236 2040320f call app_ble_disconnect + +app_power_off_end: +3237 684944ca fetcht 2 ,mem_power_param_ptr +3238 1840a202 add temp ,power_off_timeout_offset ,rega +3239 1840a404 add temp ,power_off_cb_offset ,regb +323a 2020322d branch app_power_common + +app_got_power_state_common: +323b 684944ca fetcht 2 ,mem_power_param_ptr +323c 1840a600 add temp ,power_state_offset ,regc +323d efe08013 ifetch 1 ,regc +323e 20600000 rtn + +app_event_button_up: +323f 2040323b call app_got_power_state_common +3240 c0803242 bne power_off ,app_power_release +3241 20203217 branch app_enter_hibernate + +app_power_release: +3242 1840a40a add temp ,ui_butten_up_cb_offset ,regb +3243 202031a2 branch app_power_cb_common + +app_hid_connected: +3244 58000002 setarg hid_handshake_timeout +3245 67e0c78a store 1 ,mem_hid_handshake_timer_count +3246 20600000 rtn + +antilost_init: +3247 20758000 rtn wake +3248 58003276 setarg antilost_le_before_hibernate +3249 67e1445d store 2 ,mem_cb_before_hibernate +324a 58006197 setarg keyscan_process_lpm_before +324b 67e1445f store 2 ,mem_cb_before_lpm +324c 58003319 setarg antilost_idle_process +324d 67e14465 store 2 ,mem_cb_idle_process +324e 58003318 setarg antilost_le_conn_process +324f 67e14461 store 2 ,mem_cb_le_process +3250 58003291 setarg antilost_bb_event_process +3251 67e14467 store 2 ,mem_cb_bb_event_process +3252 580032ce setarg antilost_le_bb_event_timer +3253 67e1446f store 2 ,mem_cb_event_timer +3254 58003278 setarg antilost_le_notification +3255 67e1446d store 2 ,mem_cb_ble_transmit +3256 58003283 setarg antilost_lpm_lock_process +3257 67e1445b store 2 ,mem_cb_check_wakelock +3258 58003325 setarg antilost_le_receive_data_process +3259 67e1446b store 2 ,mem_cb_att_write +325a 44d9c016 bpatch patch16_3 ,mem_patch16 +325b 204033be call antilost_buzzer_pwm_init +325c 20403274 call antilost_set_ble_version +325d 20406172 call keyscan_key_init +325e 204033d0 call antilost_adc_init +325f 204077f0 call ui_led_init_global +3260 204077bb call ui_button_init +3261 5800332f setarg antilost_key_up_down +3262 67e14870 store 2 ,mem_cb_antl_key +3263 58003320 setarg antilost_power_off_cb +3264 67e14867 store 2 ,mem_antl_power_off_cb +3265 5800331c setarg antilost_power_starting_cb +3266 67e14869 store 2 ,mem_antl_power_starting_cb +3267 5800327f setarg antilost_power_standby_cb +3268 67e1486b store 2 ,mem_antl_power_standby_cb +3269 580033c5 setarg antilost_led_on_cb +326a 67e147b3 store 2 ,mem_antl_led_cb_on +326b 580033c7 setarg antilost_led_off_cb +326c 67e147b5 store 2 ,mem_antl_led_cb_off +326d 580033cc setarg antilost_buzzer_on +326e 67e147be store 2 ,mem_antl_buzzer_cb_on +326f 580033c9 setarg antilost_buzzer_off +3270 67e147c0 store 2 ,mem_antl_buzzer_cb_off +3271 6fe1478c fetch 2 ,mem_ui_state_map +3272 c3860000 rtnbit1 ui_state_btn_down +3273 20203217 branch app_enter_hibernate + +antilost_set_ble_version: +3274 7045f707 jam 7 ,mem_lmp_version +3275 20600000 rtn + +antilost_le_before_hibernate: +3276 204033a9 call antilost_led_buzzer_stop_blink +3277 20203217 branch app_enter_hibernate + +antilost_le_notification: +3278 20401b77 call le_fifo_check_nearly_full +3279 247a0000 nrtn blank +327a da2009d2 arg mem_temp_block5 ,rega +327b 20407956 call queue_pop +327c 24740000 nrtn user +327d d8c009d2 arg mem_temp_block5 ,contr +327e 20204c0d branch le_send_notify_from_list + +antilost_power_standby_cb: +327f 6fe148a1 fetch 2 ,mem_antl_le_sleep_timeout +3280 67e1489b store 2 ,mem_antl_le_sleep_timer +3281 70485d01 jam 1 ,mem_antl_key_scan_enable +3282 202033b2 branch antilost_fast_adv_start + +antilost_lpm_lock_process: +3283 6fe0c8a7 fetch 1 ,mem_antl_key_state +3284 c000b28c beq 1 ,antilost_lpm_ctrl_for_led_buzzer +3285 6fe1478c fetch 2 ,mem_ui_state_map +3286 c304b28c bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +3287 6fe0c8a8 fetch 1 ,mem_antl_lost_mode +3288 c000b1dd beq 1 ,app_get_lpm_wake_lock +3289 6fe0c80a fetch 1 ,mem_antl_queue_curr_num +328a 243a31dd nbranch app_get_lpm_wake_lock ,blank +328b 202031df branch app_put_lpm_wake_lock + +antilost_lpm_ctrl_for_led_buzzer: +328c 6fe0c8a5 fetch 1 ,mem_antl_led_state +328d 6848c8a6 fetcht 1 ,mem_antl_buzzer_state +328e 9841fe00 ior temp ,pdata +328f c000b1dd beq 1 ,app_get_lpm_wake_lock +3290 202031df branch app_put_lpm_wake_lock + +antilost_bb_event_process: +3291 1a627e00 copy regc ,pdata +3292 c016b23f beq bt_evt_button_up ,app_event_button_up +3293 c0083227 beq bt_evt_button_long_pressed ,app_button_long_pressed +3294 c00a3303 beq bt_evt_le_connected ,antilost_le_process_conn +3295 c00ab30c beq bt_evt_le_disconnected ,antilost_le_process_discon +3296 c0203299 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +3297 c02232a3 beq bt_evt_le_parse_conn_param_accepted ,antilost_le_conn_param_accepted +3298 20600000 rtn + +antilost_le_conn_param_update_rsp_recieved: +3299 2040329f call antilost_le_conn_param_updata_judge +329a 6fe143db fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +329b c000b2a9 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected + +antilost_le_conn_param_updata_procedure_sucsess: +329c 70489402 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +329d 7048993c jam 60 ,mem_antl_conn_update_timer +329e 20600000 rtn + +antilost_le_conn_param_updata_judge: +329f 6fe08287 fetch 1 ,mem_le_state +32a0 c3828000 rtnbit1 lestate_update_param +32a1 704a6001 jam 1 ,mem_lestate_update_param_flag +32a2 20600000 rtn + +antilost_le_conn_param_accepted: +32a3 6fe0ca60 fetch 1 ,mem_lestate_update_param_flag +32a4 207a0000 rtn blank +32a5 704a6000 jam 0 ,mem_lestate_update_param_flag +32a6 6fe102c3 fetch 2 ,mem_le_new_connslavelatency +32a7 203a32be branch antilost_master_nonsupport_latency ,blank +32a8 20600000 rtn + +antilost_le_conn_param_rejected: +32a9 6fe14376 fetch 2 ,mem_le_latency +32aa 203a32bc branch antilost_conn_param_updata_procedure_faild ,blank + +antilost_conn_param_retransimiting: +32ab 70489401 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +32ac 684948be fetcht 2 ,mem_interval_increment +32ad 6fe14372 fetch 2 ,mem_le_interval_min +32ae 9840fe00 iadd temp ,pdata +32af 67e14372 store 2 ,mem_le_interval_min +32b0 1fe22200 copy pdata ,rega +32b1 6fe14374 fetch 2 ,mem_le_interval_max +32b2 9840fe00 iadd temp ,pdata +32b3 67e14374 store 2 ,mem_le_interval_max +32b4 9a20fe00 iadd rega ,pdata +32b5 1fe30400 rshift pdata ,temp +32b6 6fe148ca fetch 2 ,mem_antl_le_unnormal_interval_max +32b7 9846fc00 idiv temp +32b8 20407dec call get_div_result +32b9 67e14376 store 2 ,mem_le_latency +32ba 70489a01 jam 1 ,mem_antl_send_updata_le_param_timer +32bb 20600000 rtn + +antilost_conn_param_updata_procedure_faild: +32bc 70489403 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +32bd 20600000 rtn + +antilost_master_nonsupport_latency: +32be 70417700 jam 0 ,mem_lpm_mult +32bf 70489a00 jam 0 ,mem_antl_send_updata_le_param_timer +32c0 6fe102c1 fetch 2 ,mem_le_new_conninterval +32c1 684948c8 fetcht 2 ,mem_antl_le_unnormal_interval_min +32c2 98467c00 isub temp ,null +32c3 79212200 setflag positive ,0 ,rega +32c4 6fe148ca fetch 2 ,mem_antl_le_unnormal_interval_max +32c5 684902c1 fetcht 2 ,mem_le_new_conninterval +32c6 98467e00 isub temp ,pdata +32c7 79212201 setflag positive ,1 ,rega +32c8 2a200603 compare 0x03 ,rega ,0x03 +32c9 20608000 rtn true +32ca 6fe448c8 fetch 8 ,mem_antl_le_unnormal_interval_min +32cb 67e44372 store 8 ,mem_le_interval_min +32cc 70489a01 jam 1 ,mem_antl_send_updata_le_param_timer +32cd 20600000 rtn + +antilost_le_bb_event_timer: +32ce 20403198 call app_power_timer +32cf 204032dd call antilost_double_click_timer +32d0 204032e2 call antilost_le_fast_adv_timer +32d1 204032f9 call antilost_le_sleep_timer +32d2 204032ee call antilost_app_updata_le_param_timer +32d3 204032e8 call antilost_conn_update_timer +32d4 204032d6 call antilost_conn_battery_send_timer +32d5 202032fd branch antilost_adc_check_timer + +antilost_conn_battery_send_timer: +32d6 da604a61 arg mem_antilost_conn_battery_send_timer ,regc +32d7 da4032d9 arg antilost_conn_battery_send ,regb +32d8 2020318a branch timer_single_step + +antilost_conn_battery_send: +32d9 204033d2 call antilost_battery_process +32da 204033d2 call antilost_battery_process +32db 204033d2 call antilost_battery_process +32dc 202033dc branch antilost_battery_calculate_end + +antilost_double_click_timer: +32dd da6048a3 arg mem_double_click_timer ,regc +32de da4032e0 arg antilost_double_click_timeout ,regb +32df 2020318a branch timer_single_step + +antilost_double_click_timeout: +32e0 7048a400 jam 0 ,mem_butten_click_cnt +32e1 20600000 rtn + +antilost_le_fast_adv_timer: +32e2 da60489d arg mem_antl_fast_adv_timer ,regc +32e3 da4032e5 arg antilost_le_fast_adv_timeout ,regb +32e4 20203191 branch timer_single_step_2b + +antilost_le_fast_adv_timeout: +32e5 da6047c9 arg mem_antl_slow_adv_led_style ,regc +32e6 da4047a8 arg mem_antl_slow_adv_lpm_interval ,regb +32e7 202033b4 branch antilost_adv_start_common + +antilost_conn_update_timer: +32e8 da604899 arg mem_antl_conn_update_timer ,regc +32e9 da4032eb arg antilost_conn_update_timer_time_out ,regb +32ea 2020318a branch timer_single_step + +antilost_conn_update_timer_time_out: +32eb 6fe14376 fetch 2 ,mem_le_latency +32ec 67e0c177 store 1 ,mem_lpm_mult +32ed 20600000 rtn + +antilost_app_updata_le_param_timer: +32ee da60489a arg mem_antl_send_updata_le_param_timer ,regc +32ef da4032f1 arg antilost_app_updata_le_param_timeout ,regb +32f0 2020318a branch timer_single_step + +antilost_app_updata_le_param_timeout: +32f1 6fe08287 fetch 1 ,mem_le_state +32f2 2fe0c000 compare 0 ,pdata ,0x60 +32f3 2420b2f7 nbranch antilost_wait_for_updata_param_instant_expire ,true +32f4 70489401 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +32f5 20403223 call app_lpm_mult_enable +32f6 20201f57 branch le_l2cap_tx_update_req + +antilost_wait_for_updata_param_instant_expire: +32f7 70489a01 jam 1 ,mem_antl_send_updata_le_param_timer +32f8 20600000 rtn + +antilost_le_sleep_timer: +32f9 da60489b arg mem_antl_le_sleep_timer ,regc +32fa da4032fc arg antilost_le_sleep_timer_timeout ,regb +32fb 20203191 branch timer_single_step_2b + +antilost_le_sleep_timer_timeout: +32fc 20203227 branch app_button_long_pressed + +antilost_adc_check_timer: +32fd da604897 arg mem_adc_timer ,regc +32fe da403300 arg antilost_adc_check_timer_timeout ,regb +32ff 20203191 branch timer_single_step_2b + +antilost_adc_check_timer_timeout: +3300 6fe148b1 fetch 2 ,mem_adc_timeout +3301 67e14897 store 2 ,mem_adc_timer +3302 202033d2 branch antilost_battery_process + +antilost_le_process_conn: +3303 6fe148b1 fetch 2 ,mem_adc_timeout +3304 67e14897 store 2 ,mem_adc_timer +3305 58000000 setarg 0 +3306 67e1489d store 2 ,mem_antl_fast_adv_timer +3307 67e1489b store 2 ,mem_antl_le_sleep_timer +3308 20403380 call antilost_alert_off +3309 204033a9 call antilost_led_buzzer_stop_blink +330a 70417700 jam 0 ,mem_lpm_mult +330b 20203205 branch app_ble_stop_adv + +antilost_le_process_discon: +330c 58000000 setarg 0 +330d 67e24897 store 4 ,mem_adc_timer +330e 67e1c894 store 3 ,mem_antl_conn_updata_procedure_state +330f 67e143db store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +3310 7048aa01 jam 1 ,mem_alarm_config_notfy_cnt +3311 6fe148a1 fetch 2 ,mem_antl_le_sleep_timeout +3312 67e1489b store 2 ,mem_antl_le_sleep_timer +3313 2040793a call queue_init +3314 6fe0c863 fetch 1 ,mem_antl_power_state +3315 c1000000 rtneq power_off +3316 204033b2 call antilost_fast_adv_start +3317 20203392 branch antilost_on_off_alarm_after_disconn + +antilost_le_conn_process: +3318 2020332c branch antilost_key_process + +antilost_idle_process: +3319 6fe0c863 fetch 1 ,mem_antl_power_state +331a c1810000 rtnne power_standby +331b 2020332c branch antilost_key_process + +antilost_power_starting_cb: +331c da6047d7 arg mem_antl_power_starting_buzzer_style ,regc +331d 204033a5 call antilost_buzzer_configuration +331e da6047d0 arg mem_antl_power_starting_led_style ,regc + +antilost_power_common: +331f 202033a7 branch antilost_led_configuration + +antilost_power_off_cb: +3320 70442700 jam off ,mem_le_adv_enable +3321 da6047e5 arg mem_antl_power_off_buzzer_style ,regc +3322 204033a5 call antilost_buzzer_configuration +3323 da6047de arg mem_antl_power_off_led_style ,regc +3324 2020331f branch antilost_power_common + +antilost_le_receive_data_process: +3325 6fe0c436 fetch 1 ,mem_le_att_opcode +3326 c0093328 beq attop_write_request ,antilost_le_parse_att_write_request +3327 20600000 rtn + +antilost_le_parse_att_write_request: +3328 6fe14437 fetch 2 ,mem_le_att_handle +3329 c006b35a beq new_spec_write_handle ,antilost_cmd_parse_for_application +332a c005b395 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +332b 20600000 rtn + +antilost_key_process: +332c 6fe0c85d fetch 1 ,mem_antl_key_scan_enable +332d 207a0000 rtn blank +332e 202061a3 branch keyscan_key_process + +antilost_key_up_down: +332f 1a227e00 copy rega ,pdata +3330 203a3334 branch antilost_key_is_up ,blank + +antilost_key_is_down: +3331 18e27e00 copy queue ,pdata +3332 c0003337 beq 0 ,antilost_key0_down +3333 20600000 rtn + +antilost_key_is_up: +3334 18e27e00 copy queue ,pdata +3335 c000333f beq 0 ,antilost_key0_up +3336 20600000 rtn + +antilost_key0_down: +3337 7048a701 jam 1 ,mem_antl_key_state +3338 da604801 arg mem_antl_key_buzzer_style ,regc +3339 204033a5 call antilost_buzzer_configuration +333a da6047fa arg mem_antl_key_led_style ,regc +333b 204033a7 call antilost_led_configuration +333c 6fe1478c fetch 2 ,mem_ui_state_map +333d c304b356 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +333e 20203345 branch antilost_butten_down_after_conn + +antilost_key0_up: +333f 7048a700 jam 0 ,mem_antl_key_state +3340 20203341 branch antilost_double_click_timer_init + +antilost_double_click_timer_init: +3341 6fe0c8a4 fetch 1 ,mem_butten_click_cnt +3342 c1808000 rtnne 1 +3343 7048a305 jam 5 ,mem_double_click_timer +3344 20600000 rtn + +antilost_butten_down_after_conn: +3345 6fe0c8a4 fetch 1 ,mem_butten_click_cnt +3346 1fe0fe01 pincrease 1 +3347 67e0c8a4 store 1 ,mem_butten_click_cnt +3348 c000b34b beq 1 ,antilost_click_once +3349 c001334f beq 2 ,antilost_click_twice +334a 20600000 rtn + +antilost_click_once: +334b 20403380 call antilost_alert_off +334c 70487b01 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +334d da604876 arg mem_antl_key0_press ,regc +334e 20203368 branch antilost_prepare_data_and_send + +antilost_click_twice: +334f 7048a400 jam 0 ,mem_butten_click_cnt +3350 70487b02 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +3351 da604876 arg mem_antl_key0_press ,regc +3352 20403368 call antilost_prepare_data_and_send +3353 6fe0c8a8 fetch 1 ,mem_antl_lost_mode +3354 c000b375 beq 1 ,antilost_alert_on +3355 20600000 rtn + +antilost_butten_down_while_disconn: +3356 6fe148a1 fetch 2 ,mem_antl_le_sleep_timeout +3357 67e1489b store 2 ,mem_antl_le_sleep_timer +3358 20403380 call antilost_alert_off +3359 202033b2 branch antilost_fast_adv_start + +antilost_cmd_parse_for_application: +335a 44da4016 bpatch patch16_4 ,mem_patch16 +335b 204034f3 call le_app_receive_data +335c efe08011 ifetch 1 ,rega +335d c001b360 beq opcode3_antl_start_alram ,antilost_on_of_alram +335e c003b364 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +335f 20600000 rtn + +antilost_on_of_alram: +3360 6fe0c8a8 fetch 1 ,mem_antl_lost_mode +3361 c0003375 beq anti_le_alarm_off ,antilost_alert_on +3362 c000b380 beq anti_le_alarm_on ,antilost_alert_off +3363 20600000 rtn + +antilost_configuration_for_alram: +3364 efe08012 ifetch 1 ,regb +3365 c000b388 beq 1 ,antilost_set_start_alarm_after_disconn +3366 c000338d beq 0 ,antilost_set_no_alarm_after_disconn +3367 20600000 rtn + +antilost_prepare_data_and_send: +3368 44dac016 bpatch patch16_5 ,mem_patch16 +3369 6fe0c895 fetch 1 ,mem_client_characteristic_configuration_descriptor +336a 2feffe00 isolate1 notification_enable_bit ,pdata +336b 24608000 nrtn true +336c 1a608c06 add regc ,6 ,contr +336d efe10006 ifetch 2 ,contr +336e 1ff0fe00 byteswap pdata ,pdata +336f 1fe0f205 add pdata ,5 ,loopcnt +3370 1a608c03 add regc ,3 ,contr +3371 204034e7 call calc_check_sum_start +3372 e7e08006 istore 1 ,contr +3373 1a622200 copy regc ,rega +3374 2020793f branch queue_push + +antilost_alert_on: +3375 6fe0c863 fetch 1 ,mem_antl_power_state +3376 207a0000 rtn blank +3377 7048a801 jam 1 ,mem_antl_lost_mode +3378 da6047f3 arg mem_antl_alert_buzzer_stlye ,regc +3379 204033a5 call antilost_buzzer_configuration +337a da6047ec arg mem_antl_alert_led_stlye ,regc +337b 204033a7 call antilost_led_configuration +337c 70488a04 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +337d 70488d01 jam 1 ,mem_antl_key0_release + 8 +337e da604885 arg mem_antl_key0_release ,regc +337f 20203368 branch antilost_prepare_data_and_send + +antilost_alert_off: +3380 6fe0c8a8 fetch 1 ,mem_antl_lost_mode +3381 207a0000 rtn blank +3382 7048a800 jam 0 ,mem_antl_lost_mode +3383 204033a9 call antilost_led_buzzer_stop_blink +3384 70488a04 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +3385 70488d00 jam 0 ,mem_antl_key0_release + 8 +3386 da604885 arg mem_antl_key0_release ,regc +3387 20203368 branch antilost_prepare_data_and_send + +antilost_set_start_alarm_after_disconn: +3388 7048a901 jam 1 ,mem_alarm_config +3389 70488a07 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +338a 70488d01 jam 1 ,mem_antl_key0_release + 8 +338b da604885 arg mem_antl_key0_release ,regc +338c 20203368 branch antilost_prepare_data_and_send + +antilost_set_no_alarm_after_disconn: +338d 7048a900 jam 0 ,mem_alarm_config +338e 70488a07 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +338f 70488d00 jam 0 ,mem_antl_key0_release + 8 +3390 da604885 arg mem_antl_key0_release ,regc +3391 20203368 branch antilost_prepare_data_and_send + +antilost_on_off_alarm_after_disconn: +3392 6fe0c8a9 fetch 1 ,mem_alarm_config +3393 207a0000 rtn blank +3394 20203375 branch antilost_alert_on + +antilost_notify_alarm_config_first_time: +3395 efe10011 ifetch 2 ,rega +3396 67e14895 store 2 ,mem_client_characteristic_configuration_descriptor +3397 2feffe00 isolate1 notification_enable_bit ,pdata +3398 24608000 nrtn true +3399 6fe0c8aa fetch 1 ,mem_alarm_config_notfy_cnt +339a 207a0000 rtn blank +339b 7048aa00 jam 0 ,mem_alarm_config_notfy_cnt +339c 6fe448c0 fetch 8 ,mem_antl_le_interval_min +339d 67e44372 store 8 ,mem_le_interval_min +339e 704a6103 jam 3 ,mem_antilost_conn_battery_send_timer +339f 70488a07 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +33a0 70489a1e jam 30 ,mem_antl_send_updata_le_param_timer +33a1 6fe0c8a9 fetch 1 ,mem_alarm_config +33a2 67e0c88d store 1 ,mem_antl_key0_release + 8 +33a3 da604885 arg mem_antl_key0_release ,regc +33a4 20203368 branch antilost_prepare_data_and_send + +antilost_buzzer_configuration: +33a5 da200001 arg 1 ,rega +33a6 202033a8 branch antilost_configuration_common + +antilost_led_configuration: +33a7 da200000 arg 0 ,rega + +antilost_configuration_common: +33a8 202033af branch antilost_led_buzzer_style_configuration + +antilost_led_buzzer_stop_blink: +33a9 da200000 arg 0 ,rega +33aa 20407801 call ui_led_blink_stop_global +33ab da200001 arg 1 ,rega +33ac 20407801 call ui_led_blink_stop_global +33ad 6fe148ab fetch 2 ,mem_buzzer_pwm_conf +33ae 20206216 branch pwm_disable + +antilost_led_buzzer_style_configuration: +33af 204077ec call calc_curr_struct_prt +33b0 df200007 arg 7 ,loopcnt +33b1 2020780e branch ui_led_set_style_global + 2 + +antilost_fast_adv_start: +33b2 da6047c2 arg mem_antl_fast_adv_led_style ,regc +33b3 da4047a4 arg mem_antl_lpm_interval ,regb + +antilost_adv_start_common: +33b4 204033b9 call antilost_adv_interval_lpm_interval_set +33b5 204033a7 call antilost_led_configuration +33b6 6fe1489f fetch 2 ,mem_antl_fast_adv_timeout +33b7 67e1489d store 2 ,mem_antl_fast_adv_timer +33b8 20203207 branch app_ble_start_adv + +antilost_adv_interval_lpm_interval_set: +33b9 efe10012 ifetch 2 ,regb +33ba 67e14159 store 2 ,mem_lpm_interval +33bb efe10006 ifetch 2 ,contr +33bc 67e14428 store 2 ,mem_le_adv_interval +33bd 20600000 rtn + +antilost_buzzer_pwm_init: +33be da200000 arg 0 ,rega +33bf 204061d1 call pwm_init +33c0 6fe348ab fetch 6 ,mem_buzzer_pwm_conf +33c1 67e3095c store 6 ,mem_pdatatemp +33c2 204061f8 call pwm_out_set +33c3 6fe148ab fetch 2 ,mem_buzzer_pwm_conf +33c4 20206216 branch pwm_disable + +antilost_led_on_cb: +33c5 7048a501 jam 1 ,mem_antl_led_state +33c6 20600000 rtn + +antilost_led_off_cb: +33c7 7048a500 jam 0 ,mem_antl_led_state +33c8 20600000 rtn + +antilost_buzzer_off: +33c9 7048a600 jam 0 ,mem_antl_buzzer_state +33ca 6fe148ab fetch 2 ,mem_buzzer_pwm_conf +33cb 20206216 branch pwm_disable + +antilost_buzzer_on: +33cc 7048a601 jam 1 ,mem_antl_buzzer_state +33cd 6fe348ab fetch 6 ,mem_buzzer_pwm_conf +33ce 67e3095c store 6 ,mem_pdatatemp +33cf 202061f8 branch pwm_out_set + +antilost_adc_init: +33d0 7044a000 jam 0 ,mem_adc_config_flag +33d1 20600000 rtn + +antilost_battery_process: +33d2 20406125 call vdd_calculate_by_mode +33d3 67e148ba store 2 ,mem_battery_current_voltage +33d4 da2048b4 arg mem_battery_calculate_set ,rega +33d5 20406152 call adc_bat_percent_lowpower_out +33d6 67e0c8b3 store 1 ,mem_voltage_remain_percent +33d7 58000065 setarg 0x65 +33d8 c00033e1 beq 0 ,antilost_low_battery +33d9 1fe67c64 sub pdata ,0x64 ,null +33da 242133df nbranch antilost_full_battery ,positive +33db 67e0c88d store 1 ,mem_antl_key0_release + 8 + +antilost_battery_calculate_end: +33dc 70488a05 jam opcode5_batter_information ,mem_antl_key0_release + 5 +33dd da604885 arg mem_antl_key0_release ,regc +33de 20203368 branch antilost_prepare_data_and_send + +antilost_full_battery: +33df 70488d64 jam 100 ,mem_antl_key0_release + 8 +33e0 202033dc branch antilost_battery_calculate_end + +antilost_low_battery: +33e1 20203227 branch app_button_long_pressed + +car_init: +33e2 20758000 rtn wake +33e3 20406df3 call enable_authrom +33e4 580035da setarg car_g24_receive_process +33e5 67e14889 store 2 ,mem_cb_24g_receive_process +33e6 5800239e setarg g24_bind_ackpayload_prep +33e7 67e1488b store 2 ,mem_cb_24g_ackpayload +33e8 5800360c setarg car_g24_cb_data_device1 +33e9 67e1488d store 2 ,mem_cb_24g_data_device1 +33ea 5800345e setarg car_le_before_hibernate +33eb 67e1445d store 2 ,mem_cb_before_hibernate +33ec 58003460 setarg car_le_process_lpm_before +33ed 67e1445f store 2 ,mem_cb_before_lpm +33ee 58003217 setarg app_enter_hibernate +33ef 67e14469 store 2 ,mem_cb_discovry_timeout +33f0 58003462 setarg car_scale_process_idle +33f1 67e14465 store 2 ,mem_cb_idle_process +33f2 58003483 setarg car_scale_process_bb_event +33f3 67e14467 store 2 ,mem_cb_bb_event_process +33f4 580031dd setarg app_get_lpm_wake_lock +33f5 67e1445b store 2 ,mem_cb_check_wakelock +33f6 580034ed setarg car_le_receive_data +33f7 67e1446b store 2 ,mem_cb_att_write +33f8 580034ad setarg car_le_bb_event_timer +33f9 67e1446f store 2 ,mem_cb_event_timer +33fa 44db4016 bpatch patch16_6 ,mem_patch16 +33fb 20403444 call car_init_environment +33fc 20403470 call car_lpm_timer_enable +33fd 2040793a call queue_init +33fe 70417702 jam 2 ,mem_lpm_mult +33ff 704c5800 jam power_on ,mem_car_24g_received_pac +3400 6fe0ca1a fetch 1 ,mem_car_config_soft_switch_enable +3401 67e0c8e9 store 1 ,mem_car_hard_soft_switch +3402 c000340d beq hard_switch ,car_hard_switch_power_on_signal +3403 6fe0ca1b fetch 1 ,mem_car_config_soft_switch_gpio +3404 67e0c790 store 1 ,mem_ui_button_gpio +3405 70442700 jam off ,mem_le_adv_enable + +car_soft_switch_power_on_init: +3406 204077bb call ui_button_init +3407 204077c5 call ui_button_polling +3408 704a4201 jam power_starting ,mem_car_power_state +3409 6fe1478c fetch 2 ,mem_ui_state_map +340a c3860000 rtnbit1 ui_state_btn_down +340b 20203217 branch app_enter_hibernate + +car_power_off_signal: +340c 2020342b branch car_ui_led_init + +car_hard_switch_power_on_signal: +340d 704a4202 jam power_standby ,mem_car_power_state + +car_soft_switch_power_on_signal: +340e 70442701 jam on ,mem_le_adv_enable +340f 58000020 setarg fast_adv_interval_value_car +3410 20404c09 call shutter_ble_adv_interval_set + +car_le_modified_name_adv: +3411 d8a042ff arg mem_le_name + 7 ,contw +3412 6fe0c37a fetch 1 ,mem_le_lap + +car_name_loop: +3413 1fe104f0 and pdata ,0xF0 ,temp +3414 18518400 rshift4 temp ,temp +3415 20403425 call car_hex_to_ascii +3416 e0408005 istoret 1 ,contw +3417 1fe1040f and pdata ,0x0F ,temp +3418 20403425 call car_hex_to_ascii +3419 e0408005 istoret 1 ,contw +341a 20401aac call le_modified_name_att_list +341b 6848c2f7 fetcht 1 ,mem_le_name_len +341c 18427200 copy temp ,loopcnt +341d d8a043ea arg mem_le_adv_data + 2 ,contw +341e d8c042f8 arg mem_le_name ,contr +341f 20407d5f call memcpy + +car_le_modified_name_scan: +3420 6848c2f7 fetcht 1 ,mem_le_name_len +3421 18427200 copy temp ,loopcnt +3422 d8a0440a arg mem_le_scan_data + 2 ,contw +3423 d8c042f8 arg mem_le_name ,contr +3424 20207d5f branch memcpy + +car_hex_to_ascii: +3425 18467c09 sub temp ,9 ,null +3426 20213429 branch car_hex_num ,positive +3427 18408437 add temp ,55 ,temp +3428 20600000 rtn + +car_hex_num: +3429 18408430 add temp ,48 ,temp +342a 20600000 rtn + +car_ui_led_init: +342b 6fe0ca0f fetch 1 ,mem_car_config_blood_led1_gpio +342c c0ffb43d bne invalid_pin_num ,car_blood_led_gpio_set + +car_ui_led_init_1: +342d 6fe0ca0d fetch 1 ,mem_car_config_pairing_led_gpio +342e c0ffb440 bne invalid_pin_num ,car_pairing_led_gpio_set + +car_ui_led_init_2: +342f 6fe0ca18 fetch 1 ,mem_car_config_low_voltage_led_gpio +3430 c0ffb442 bne invalid_pin_num ,car_low_voltage_led_gpio_set + +car_ui_led_init_3: +3431 6fe0c97b fetch 1 ,mem_car_led_num +3432 1fe27200 copy pdata ,loopcnt +3433 5800497c setarg mem_car_led_map +3434 1fe22200 copy pdata ,rega + +car_in_lp1: +3435 1a220c00 copy rega ,contr +3436 efe08006 ifetch 1 ,contr +3437 18c22200 copy contr ,rega +3438 c07fb43b beq invalid_pin_num ,car_in_lp1_end +3439 1fe20400 copy pdata ,temp +343a 20406069 call gpio_config_output + +car_in_lp1_end: +343b c2003435 loop car_in_lp1 + +car_ui_led_init_end: +343c 20600000 rtn + +car_blood_led_gpio_set: +343d 6fe44a0f fetch 8 ,mem_car_config_blood_led1_gpio +343e 67e4497e store 8 ,mem_car_led_map + 2 +343f 2020342d branch car_ui_led_init_1 + +car_pairing_led_gpio_set: +3440 67e0c97c store 1 ,mem_car_led_map +3441 2020342f branch car_ui_led_init_2 + +car_low_voltage_led_gpio_set: +3442 67e0c97d store 1 ,mem_car_led_map + 1 +3443 20203431 branch car_ui_led_init_3 + +car_init_environment: +3444 204035d6 call car_g24_init +3445 da200000 arg 0 ,rega +3446 204061d1 call pwm_init +3447 2040342b call car_ui_led_init +3448 20403478 call car_start_blink +3449 2040345c call car_init_adc_hvin +344a 2020344b branch car_motor_init + +car_motor_init: +344b 6fe0cc45 fetch 1 ,mem_car_motor_gpio_num +344c 1fe27200 copy pdata ,loopcnt +344d 58004c46 setarg mem_car_motor_gpio_map +344e 1fe22200 copy pdata ,rega + +p_in_lp1: +344f 1a220c00 copy rega ,contr +3450 efe08006 ifetch 1 ,contr +3451 18c22200 copy contr ,rega +3452 c07fb456 beq invalid_pin_num ,p_in_lp1_end +3453 1fe20400 copy pdata ,temp +3454 67e0cc4a store 1 ,mem_car_gpio +3455 20403458 call car_ui_gpio_init + +p_in_lp1_end: +3456 c200344f loop p_in_lp1 + +p_car_ui_led_init_end: +3457 20600000 rtn + +car_ui_gpio_init: +3458 6fe0cc4a fetch 1 ,mem_car_gpio +3459 c17f8000 rtneq ui_button_gpio_disable +345a 98000400 iforce temp +345b 20206069 branch gpio_config_output + +car_init_adc_hvin: +345c 704a1e64 jam 100 ,mem_car_notify_vdd_value_last +345d 20600000 rtn + +car_le_before_hibernate: +345e 2040609d call gpio_set_before_lpm_common +345f 20206197 branch keyscan_process_lpm_before + +car_le_process_lpm_before: +3460 20206197 branch keyscan_process_lpm_before + +car_key_scan_process: +3461 202061a3 branch keyscan_key_process + +car_scale_process_idle: +3462 2040347a call car_le_send_packet +3463 20403465 call car_g24_status_process +3464 20203461 branch car_key_scan_process + +car_g24_status_process: +3465 6fe1478c fetch 2 ,mem_ui_state_map +3466 c3848000 rtnbit1 ui_state_ble_connected +3467 6fe0cc58 fetch 1 ,mem_car_24g_received_pac +3468 c000b46a beq work_paired ,car_g24_connected_event +3469 20600000 rtn + +car_g24_connected_event: +346a 6fe0ca39 fetch 1 ,mem_car_24g_status +346b c1008000 rtneq work_paired +346c 704a3901 jam work_paired ,mem_car_24g_status +346d 20403474 call car_lpm_timer_disable +346e 20403476 call car_stop_blink +346f 2020348d branch car_g24_connected + +car_lpm_timer_enable: +3470 6fe14c5d fetch 2 ,mem_car_enter_lpm_timer_count +3471 67e14c5f store 2 ,mem_car_enter_lpm_timer +3472 704c6100 jam 0 ,mem_car_enter_lpm_flag +3473 20600000 rtn + +car_lpm_timer_disable: +3474 58000000 setarg 0 +3475 20203471 branch car_lpm_timer_enable + 1 + +car_stop_blink: +3476 da200000 arg 0 ,rega +3477 20207801 branch ui_led_blink_stop_global + +car_start_blink: +3478 da200000 arg 0 ,rega +3479 20207806 branch ui_led_blink_start_global + +car_le_send_packet: +347a 6fe1478c fetch 2 ,mem_ui_state_map +347b c4048000 rtnbit0 ui_state_ble_connected +347c 20401b77 call le_fifo_check_nearly_full +347d 247a0000 nrtn blank +347e da204967 arg mem_car_pop_queue_buff ,rega +347f 20407956 call queue_pop +3480 24740000 nrtn user +3481 d8c04967 arg mem_car_pop_queue_buff ,contr +3482 20204c0d branch le_send_notify_from_list + +car_scale_process_bb_event: +3483 1a627e00 copy regc ,pdata +3484 c016b23f beq bt_evt_button_up ,app_event_button_up +3485 c0083227 beq bt_evt_button_long_pressed ,app_button_long_pressed +3486 c00a3489 beq bt_evt_le_connected ,car_scale_event_le_conn +3487 c00ab493 beq bt_evt_le_disconnected ,car_scale_event_le_discon +3488 20600000 rtn + +car_scale_event_le_conn: +3489 20403474 call car_lpm_timer_disable +348a 20403476 call car_stop_blink +348b 793f8027 set0 mark_24g_rxmode ,mark +348c 2020348f branch car_scale_process_conn + +car_g24_connected: +348d 6fe14a3a fetch 2 ,mem_car_24g_no_data_timeout_count +348e 67e14a3c store 2 ,mem_car_24g_no_data_timeout_timer + +car_scale_process_conn: +348f 704a1d14 jam 0x14 ,mem_car_notify_vdd_timer +3490 70409900 jam 0 ,mem_lpm_mode +3491 20403205 call app_ble_stop_adv +3492 20203223 branch app_lpm_mult_enable + +car_scale_event_le_discon: +3493 79200027 set1 mark_24g_rxmode ,mark +3494 20403470 call car_lpm_timer_enable +3495 2040358a call car_fb_motor_stop +3496 2040357e call car_lr_motor_stop + +car_g24_disconnect: +3497 58000000 setarg 0 +3498 67e2c9eb store 5 ,mem_car_led_control +3499 58000004 setarg 4 +349a 20406216 call pwm_disable +349b 58000005 setarg 5 +349c 20406216 call pwm_disable +349d 58000014 setarg 20 +349e 20406216 call pwm_disable +349f 58000015 setarg 21 +34a0 20406216 call pwm_disable +34a1 58000016 setarg 22 +34a2 20406216 call pwm_disable +34a3 58000007 setarg 7 +34a4 20406216 call pwm_disable +34a5 2040793a call queue_init +34a6 7049ad0a jam 10 ,mem_motor1_speed +34a7 7049af0a jam 10 ,mem_motor2_speed +34a8 7049b10a jam 10 ,mem_motor3_speed +34a9 70417702 jam 2 ,mem_lpm_mult +34aa 58000020 setarg fast_adv_interval_value_car +34ab 20404c09 call shutter_ble_adv_interval_set +34ac 20203207 branch app_ble_start_adv + +car_le_bb_event_timer: +34ad 2040352b call car_moto1_blank_data_timer +34ae 2040352e call car_moto2_blank_data_timer +34af 20403531 call car_moto3_blank_data_timer +34b0 20403198 call app_power_timer +34b1 204034c3 call car_notify_vdd_timer +34b2 204034bd call car_24g_no_data_timeout_timer +34b3 204034b5 call car_24g_bind_enable_timer +34b4 202034b8 branch car_enter_lpm_timer + +car_24g_bind_enable_timer: +34b5 da604c59 arg mem_car_24g_bind_enable_delay_count ,regc +34b6 da400000 arg 0 ,regb +34b7 2020318a branch timer_single_step + +car_enter_lpm_timer: +34b8 da604c5f arg mem_car_enter_lpm_timer ,regc +34b9 da4034bb arg car_enter_lpm_enable ,regb +34ba 20203191 branch timer_single_step_2b + +car_enter_lpm_enable: +34bb 704c6101 jam 1 ,mem_car_enter_lpm_flag +34bc 20600000 rtn + +car_24g_no_data_timeout_timer: +34bd da604a3c arg mem_car_24g_no_data_timeout_timer ,regc +34be da4034c0 arg car_24g_no_data_timer_timeout ,regb +34bf 20203191 branch timer_single_step_2b + +car_24g_no_data_timer_timeout: +34c0 704a3902 jam work_search ,mem_car_24g_status +34c1 704c5800 jam power_on ,mem_car_24g_received_pac +34c2 20203497 branch car_g24_disconnect + +car_notify_vdd_timer: +34c3 6fe0ca17 fetch 1 ,mem_car_config_bat_notify_enable +34c4 207a0000 rtn blank +34c5 da604a1d arg mem_car_notify_vdd_timer ,regc +34c6 da4034c8 arg car_notify_vdd ,regb +34c7 2020318a branch timer_single_step + +car_notify_vdd: +34c8 6fe0ca1c fetch 1 ,mem_car_notify_vdd_count +34c9 67e0ca1d store 1 ,mem_car_notify_vdd_timer +34ca 6fe0ca20 fetch 1 ,mem_car_working_flag +34cb 247a0000 nrtn blank + +car_read_hvin: +34cc 20406125 call vdd_calculate_by_mode +34cd 67e14a37 store 2 ,mem_vdd_now_vol +34ce da204a31 arg mem_vdd_calculate_set ,rega +34cf 20406152 call adc_bat_percent_lowpower_out +34d0 6848ca1e fetcht 1 ,mem_car_notify_vdd_value_last +34d1 98467c00 isub temp ,null +34d2 202134d5 branch car_notify_vdd_next2 ,positive +34d3 67e0ca1e store 1 ,mem_car_notify_vdd_value_last +34d4 1fe20400 copy pdata ,temp + +car_notify_vdd_next2: +34d5 6048ca1f storet 1 ,mem_car_notify_vdd_percent +34d6 6fe0ca19 fetch 1 ,mem_car_config_low_voltage_percent +34d7 98467c00 isub temp ,null +34d8 204134e0 call car_enter_low_bat ,positive +34d9 6048ca2a storet 1 ,mem_notify_bat_payload +34da df200006 arg 6 ,loopcnt +34db d8c04a25 arg mem_notify_bat_head ,contr +34dc 204034e7 call calc_check_sum_start +34dd 67e0ca2b store 1 ,mem_notify_bat_check_sum +34de da204a22 arg mem_notify_bat_packet ,rega +34df 2020793f branch queue_push + +car_enter_low_bat: +34e0 6fe0ca21 fetch 1 ,mem_low_bat_flag +34e1 247a0000 nrtn blank +34e2 704a2101 jam 1 ,mem_low_bat_flag +34e3 da200001 arg 1 ,rega +34e4 20207806 branch ui_led_blink_start_global + +car_low_bat_led_off: +34e5 da200001 arg 1 ,rega +34e6 20207801 branch ui_led_blink_stop_global + +calc_check_sum_start: +34e7 da200000 arg 0 ,rega + +calc_check_sum_loop: +34e8 efe08006 ifetch 1 ,contr +34e9 9a20a200 iadd rega ,rega +34ea c20034e8 loop calc_check_sum_loop + +calc_check_sum_and: +34eb 1a217eff and rega ,0xff ,pdata +34ec 20600000 rtn + +car_le_receive_data: +34ed 6fe0c436 fetch 1 ,mem_le_att_opcode +34ee c00934f0 beq attop_write_request ,car_le_parse_att_write_request +34ef 20600000 rtn + +car_le_parse_att_write_request: +34f0 6fe14437 fetch 2 ,mem_le_att_handle +34f1 c00a3507 beq att_car_control_handle ,car_control_le_receive +34f2 20600000 rtn + +le_app_receive_data: +34f3 44dbc016 bpatch patch16_7 ,mem_patch16 +34f4 efe28011 ifetch 5 ,rega +34f5 67e289de store 5 ,mem_app_receive_temp +34f6 6fe109de fetch 2 ,mem_app_receive_temp +34f7 d8406b5a arg le_receive_packet_head ,temp +34f8 98467c00 isub temp ,null +34f9 24628000 nrtn zero +34fa 6fe109e1 fetch 2 ,mem_app_receive_temp + 3 +34fb 1ff0fe00 byteswap pdata ,pdata +34fc 67e109e1 store 2 ,mem_app_receive_temp + 3 +34fd 1fe27200 copy pdata ,loopcnt +34fe 1a20a205 increase 5 ,rega +34ff 1a220c00 copy rega ,contr +3500 d8a009e3 arg mem_app_receive_temp + 5 ,contw +3501 20407d5f call memcpy +3502 efe08006 ifetch 1 ,contr +3503 67e089ed store 1 ,mem_app_receive_temp + 15 +3504 da2009e0 arg mem_app_receive_temp + 2 ,rega +3505 da4009e3 arg mem_app_receive_temp + 5 ,regb +3506 20600000 rtn + +car_control_le_receive: +3507 58000000 setarg 0 +3508 67e2c9a1 store 5 ,mem_le_receive_payload +3509 67e2c9a6 store 5 ,mem_le_receive_payload + 5 +350a 204034f3 call le_app_receive_data +350b 1a420c00 copy regb ,contr +350c d8a049a1 arg mem_le_receive_payload ,contw +350d df20000a arg 10 ,loopcnt +350e 20407d5f call memcpy + +car_receive_cmd_select: +350f 44dc4017 bpatch patch17_0 ,mem_patch17 +3510 efe08011 ifetch 1 ,rega +3511 c001353a beq car_cmd_old_car_control ,car_drive_old +3512 c001b54f beq car_cmd_old_speed_control ,car_speed_set_old +3513 c0023556 beq car_cmd_l_r_motor_control ,car_motor_control +3514 c002b556 beq car_cmd_f_b_motor_control ,car_motor_control +3515 c00335c6 beq car_cmd_ir_control ,car_ir_data_rx_from_app +3516 c003b5c7 beq car_cmd_led_control ,car_led_control_receive +3517 c00435ca beq car_cmd_device_info ,car_info_request +3518 20600000 rtn + +car_24g_receive_data: +3519 20403507 call car_control_le_receive +351a 6fe089e0 fetch 1 ,mem_app_receive_temp + 2 +351b c002351e beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +351c c002b51e beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +351d 20600000 rtn + +car_24g_receive_data_next: +351e 6fe0c9a1 fetch 1 ,mem_le_receive_payload +351f 245a3525 ncall car_moto1_enable_blank_data_timer ,blank +3520 6fe0c9a3 fetch 1 ,mem_le_receive_payload + 2 +3521 245a3527 ncall car_moto2_enable_blank_data_timer ,blank +3522 6fe0c9a5 fetch 1 ,mem_le_receive_payload + 4 +3523 245a3529 ncall car_moto3_enable_blank_data_timer ,blank +3524 20600000 rtn + +car_moto1_enable_blank_data_timer: +3525 704c4205 jam 5 ,mem_car_moto1_blank_timer +3526 20600000 rtn + +car_moto2_enable_blank_data_timer: +3527 704c4305 jam 5 ,mem_car_moto2_blank_timer +3528 20600000 rtn + +car_moto3_enable_blank_data_timer: +3529 704c4405 jam 5 ,mem_car_moto3_blank_timer +352a 20600000 rtn + +car_moto1_blank_data_timer: +352b da604c42 arg mem_car_moto1_blank_timer ,regc +352c da403534 arg car_moto1_blank_data ,regb +352d 2020318a branch timer_single_step + +car_moto2_blank_data_timer: +352e da604c43 arg mem_car_moto2_blank_timer ,regc +352f da403536 arg car_moto2_blank_data ,regb +3530 2020318a branch timer_single_step + +car_moto3_blank_data_timer: +3531 da604c44 arg mem_car_moto3_blank_timer ,regc +3532 da403538 arg car_moto3_blank_data ,regb +3533 2020318a branch timer_single_step + +car_moto1_blank_data: +3534 7049a100 jam 0 ,mem_le_receive_payload +3535 20203556 branch car_motor_control + +car_moto2_blank_data: +3536 7049a300 jam 0 ,mem_le_receive_payload + 2 +3537 20203556 branch car_motor_control + +car_moto3_blank_data: +3538 7049a500 jam 0 ,mem_le_receive_payload + 4 +3539 20203556 branch car_motor_control + +car_drive_old: +353a 6fe0c9a1 fetch 1 ,mem_le_receive_payload +353b 67e0c9ac store 1 ,mem_motor1_status +353c 6fe0c9a2 fetch 1 ,mem_le_receive_payload + 1 +353d 67e0c9ae store 1 ,mem_motor2_status +353e 20203560 branch car_motor_control_common + +car_left_right_control_old: +353f 6fe0c9a1 fetch 1 ,mem_le_receive_payload +3540 67e0c9ae store 1 ,mem_motor2_status +3541 2020356e branch car_motor2_control + +car_front_back_control_old: +3542 6fe0c9ad fetch 1 ,mem_motor1_speed +3543 20403547 call car_reset_old_speed +3544 6fe0c9a2 fetch 1 ,mem_le_receive_payload + 1 +3545 67e0c9ac store 1 ,mem_motor1_status +3546 2020356c branch car_motor1_control + +car_reset_old_speed: +3547 c001354b beq speed_level_2 ,car_reset_old_speed2 +3548 c001b54d beq speed_level_3 ,car_reset_old_speed3 +3549 67e0c9ad store 1 ,mem_motor1_speed +354a 20600000 rtn + +car_reset_old_speed2: +354b 7049ad05 jam speed_level_5 ,mem_motor1_speed +354c 20600000 rtn + +car_reset_old_speed3: +354d 7049ad0a jam speed_level_10 ,mem_motor1_speed +354e 20600000 rtn + +car_speed_set_old: +354f 6fe0c9a1 fetch 1 ,mem_le_receive_payload +3550 20403547 call car_reset_old_speed +3551 6fe0c9ad fetch 1 ,mem_motor1_speed +3552 204035ba call car_motor_speed_duty_setting +3553 204035bd call car_motor_speed_duty_transform +3554 70095d00 jam 0x00 ,mem_pdatatemp + 1 +3555 2020620a branch pwm_duty_cycle_set + +car_motor_control: +3556 6fe0ca3f fetch 1 ,mem_car_24g_go_die_flag +3557 247a0000 nrtn blank +3558 6fe349a1 fetch 6 ,mem_le_receive_payload +3559 67e349ac store 6 ,mem_motor1_status +355a 6fe0c9ad fetch 1 ,mem_motor1_speed +355b 6848c9af fetcht 1 ,mem_motor2_speed +355c 98417e00 iand temp ,pdata +355d 6848c9b1 fetcht 1 ,mem_motor3_speed +355e 98417e00 iand temp ,pdata +355f 205a3572 call car_motor_working_flag ,blank + +car_motor_control_common: +3560 44dcc017 bpatch patch17_1 ,mem_patch17 +3561 6fe1478c fetch 2 ,mem_ui_state_map +3562 2feffe09 isolate1 ui_state_ble_connected ,pdata +3563 2440b470 ncall car_lpm_timer_enable ,true +3564 2040356c call car_motor1_control +3565 2040356e call car_motor2_control +3566 20203567 branch car_conn_led_state + +car_conn_led_state: +3567 6fe0c9ac fetch 1 ,mem_motor1_status +3568 6848c9ae fetcht 1 ,mem_motor2_status +3569 9840fe00 iadd temp ,pdata +356a 243a790b nbranch check_51cmd_led_on ,blank +356b 20207909 branch check_51cmd_led_off + +car_motor1_control: +356c d8c049ac arg mem_motor1_status ,contr +356d 20203574 branch car_motor1_status_select + +car_motor2_control: +356e d8c049ae arg mem_motor2_status ,contr +356f 20203579 branch car_motor2_status_select + +car_motor3_control: +3570 d8c049b0 arg mem_motor3_status ,contr +3571 20203596 branch car_motor_status_select + +car_motor_working_flag: +3572 704a2000 jam 0 ,mem_car_working_flag +3573 20600000 rtn + +car_motor1_status_select: +3574 efe08006 ifetch 1 ,contr +3575 c000357e beq turn_front ,car_lr_motor_stop +3576 c000b582 beq turn_left ,car_lr_motor_left +3577 c0013586 beq turn_right ,car_lr_motor_right +3578 20600000 rtn + +car_motor2_status_select: +3579 efe08006 ifetch 1 ,contr +357a c000358a beq motor_stop ,car_fb_motor_stop +357b c001358e beq go_back ,car_fb_motor_front +357c c000b592 beq go_front ,car_fb_motor_back +357d 20600000 rtn + +car_lr_motor_stop: +357e 6848cc46 fetcht 1 ,mem_car_motor_left_gpio +357f 20406065 call gpio_out_inactive +3580 6848cc47 fetcht 1 ,mem_car_motor_right_gpio +3581 20206065 branch gpio_out_inactive + +car_lr_motor_left: +3582 6848cc46 fetcht 1 ,mem_car_motor_left_gpio +3583 20406069 call gpio_out_active +3584 6848cc47 fetcht 1 ,mem_car_motor_right_gpio +3585 20206065 branch gpio_out_inactive + +car_lr_motor_right: +3586 6848cc46 fetcht 1 ,mem_car_motor_left_gpio +3587 20406065 call gpio_out_inactive +3588 6848cc47 fetcht 1 ,mem_car_motor_right_gpio +3589 20206069 branch gpio_out_active + +car_fb_motor_stop: +358a 6848cc48 fetcht 1 ,mem_car_motor_front_gpio +358b 20406065 call gpio_out_inactive +358c 6848cc49 fetcht 1 ,mem_car_motor_back_gpio +358d 20206065 branch gpio_out_inactive + +car_fb_motor_front: +358e 6848cc48 fetcht 1 ,mem_car_motor_front_gpio +358f 20406069 call gpio_out_active +3590 6848cc49 fetcht 1 ,mem_car_motor_back_gpio +3591 20206065 branch gpio_out_inactive + +car_fb_motor_back: +3592 6848cc48 fetcht 1 ,mem_car_motor_front_gpio +3593 20406065 call gpio_out_inactive +3594 6848cc49 fetcht 1 ,mem_car_motor_back_gpio +3595 20206069 branch gpio_out_active + +car_motor_status_select: +3596 44dd4017 bpatch patch17_2 ,mem_patch17 +3597 efe08006 ifetch 1 ,contr +3598 c00035a3 beq motor_stop ,car_motor_stop +3599 c000b59c beq go_front ,car_motor_positive +359a c001359e beq go_back ,car_motor_negative +359b 20600000 rtn + +car_motor_positive: +359c 7049ca00 jam 0 ,mem_motor_select_p_n +359d 2020359f branch car_motor_negative + 1 + +car_motor_negative: +359e 7049ca01 jam 1 ,mem_motor_select_p_n +359f efe08006 ifetch 1 ,contr +35a0 67e0c9cc store 1 ,mem_car_motor_speed +35a1 efe40012 ifetch 8 ,regb +35a2 202035a8 branch car_motor_work + +car_motor_stop: +35a3 efe08012 ifetch 1 ,regb +35a4 20406216 call pwm_disable +35a5 1a40a401 increase 1 ,regb +35a6 efe08012 ifetch 1 ,regb +35a7 20206216 branch pwm_disable + +car_motor_work: +35a8 67e449cd store 8 ,mem_motor_pwm_pin1_set +35a9 704a2001 jam 1 ,mem_car_working_flag +35aa 6fe0c9ca fetch 1 ,mem_motor_select_p_n +35ab c00035b6 beq 0 ,car_motor_select_positive + +car_motor_select_negative: +35ac 6fe0c9ce fetch 1 ,mem_motor_pwm_pin2_set +35ad 67e0c9cf store 1 ,mem_motor_pwm_pin_set +35ae 6fe0c9cd fetch 1 ,mem_motor_pwm_pin1_set + +car_motor_work_next: +35af 20406216 call pwm_disable +35b0 6fe0c9cc fetch 1 ,mem_car_motor_speed +35b1 204035ba call car_motor_speed_duty_setting +35b2 67e0c9d4 store 1 ,mem_motor_pwm_dute_set +35b3 6fe349cf fetch 6 ,mem_motor_pwm_pin_set +35b4 67e3095c store 6 ,mem_pdatatemp +35b5 202061f8 branch pwm_out_set + +car_motor_select_positive: +35b6 6fe0c9cd fetch 1 ,mem_motor_pwm_pin1_set +35b7 67e0c9cf store 1 ,mem_motor_pwm_pin_set +35b8 6fe0c9ce fetch 1 ,mem_motor_pwm_pin2_set +35b9 202035af branch car_motor_work_next + +car_motor_speed_duty_setting: +35ba 1feffe05 mul32 pdata ,5 ,pdata +35bb 1fe0fe32 add pdata ,50 ,pdata +35bc 20600000 rtn + +car_motor_speed_duty_transform: +35bd d8402ee0 arg 12000 ,temp +35be 984ffe00 imul32 temp ,pdata +35bf 1fe6fc64 div pdata ,100 +35c0 20407def call wait_div_end +35c1 18078400 quotient temp +35c2 18422200 copy temp ,rega +35c3 58002ee0 setarg 12000 +35c4 98462400 isub temp ,regb +35c5 20600000 rtn + +car_ir_data_rx_from_app: +35c6 20600000 rtn + +car_led_control_receive: +35c7 6fe449a1 fetch 8 ,mem_le_receive_payload +35c8 67e449eb store 8 ,mem_car_led_control +35c9 20600000 rtn + +car_info_request: +35ca 6fe0ca08 fetch 1 ,mem_car_config_device_select +35cb 67e0c9fe store 1 ,mem_car_info_request_payload +35cc 6fe0ca09 fetch 1 ,mem_car_config_motor_layout +35cd 67e0c9ff store 1 ,mem_car_info_request_payload + 1 +35ce 6fe0ca0a fetch 1 ,mem_car_config_ir_enable +35cf 67e0ca00 store 1 ,mem_car_info_request_payload + 2 +35d0 df20000d arg 13 ,loopcnt +35d1 d8c049f9 arg mem_car_info_request_head ,contr +35d2 204034e7 call calc_check_sum_start +35d3 67e0ca06 store 1 ,mem_car_info_request_checksum +35d4 da2049f6 arg mem_car_info_request ,rega +35d5 2020793f branch queue_push + +car_g24_init: +35d6 58000000 setarg 0 +35d7 67e44881 store 8 ,mem_24g_bind_payload +35d8 20402409 call g24_receive_init +35d9 20202463 branch g24_mode_switch_init + +car_g24_receive_process: +35da 204035de call car_g24_mode_switch +35db 204035e6 call car_g24_work_mode +35dc 204035f5 call car_g24_bind_mode +35dd 20203613 branch car_g24_lpm_dipatch + +car_g24_mode_switch: +35de 20402467 call g24_mode_switch + +car_g24_bind_mode_enable: +35df 6fe0c8bf fetch 1 ,mem_24g_work_mode +35e0 c1808000 rtnne dongle_bind +35e1 6fe0cc59 fetch 1 ,mem_car_24g_bind_enable_delay_count +35e2 243a248d nbranch g24_switch_work_mode ,blank +35e3 6fe0ca39 fetch 1 ,mem_car_24g_status +35e4 c001248d beq work_search ,g24_switch_work_mode +35e5 20600000 rtn + +car_g24_work_mode: +35e6 6fe0c8bf fetch 1 ,mem_24g_work_mode +35e7 c1800000 rtnne dongle_work +35e8 20402491 call g24_work_mode_start +35e9 2037b5f3 branch car_g24_ch_polling_clear ,user3 + +car_g24_receive_ch_polling: +35ea 6fe0cc61 fetch 1 ,mem_car_enter_lpm_flag +35eb 207a0000 rtn blank +35ec 6fe0cc62 fetch 1 ,mem_car_24g_ch_polling +35ed 1fe0fe01 increase 1 ,pdata +35ee 67e0cc62 store 1 ,mem_car_24g_ch_polling +35ef c00235f3 beq 4 ,car_g24_ch_polling_clear +35f0 204022cb call g24_ch +35f1 20402415 call g24_receive_packet_start +35f2 2437b5ea nbranch car_g24_receive_ch_polling ,user3 + +car_g24_ch_polling_clear: +35f3 704c6200 jam 0 ,mem_car_24g_ch_polling +35f4 20600000 rtn + +car_g24_bind_mode: +35f5 6fe0c8bf fetch 1 ,mem_24g_work_mode +35f6 c1808000 rtnne dongle_bind +35f7 20402395 call g24_bind_init +35f8 20403609 call car_g24_bind_device_addr +35f9 204023a3 call g24_bind_data_process +35fa 6fe0c880 fetch 1 ,mem_24g_bind_device_status +35fb 243a3602 nbranch car_g24_bind_mode_exit ,blank +35fc 20402532 call g24_nodata_process +35fd 6fe0c8bd fetch 1 ,mem_24g_nodata_timer_enable +35fe 207a0000 rtn blank +35ff 58000000 setarg 0 +3600 67e248d1 store 4 ,mem_24g_device1_addr +3601 20600000 rtn + +car_g24_bind_mode_exit: +3602 7048bc00 jam 0 ,mem_24g_mode_switch +3603 da200000 arg 0 ,rega +3604 20407801 call ui_led_off_global +3605 2040248d call g24_switch_work_mode +3606 204022fc call g24_timer_init +3607 6fe240a8 fetch 4 ,mem_lap +3608 202022dc branch g24_update_addr_and_synccrc8 + +car_g24_bind_device_addr: +3609 6fe248d1 fetch 4 ,mem_24g_device1_addr +360a 207a0000 rtn blank +360b 202022dc branch g24_update_addr_and_synccrc8 + +car_g24_cb_data_device1: +360c 6fe1478c fetch 2 ,mem_ui_state_map +360d c3848000 rtnbit1 ui_state_ble_connected +360e 6fe14a3a fetch 2 ,mem_car_24g_no_data_timeout_count +360f 67e14a3c store 2 ,mem_car_24g_no_data_timeout_timer +3610 704c5801 jam work_paired ,mem_car_24g_received_pac +3611 da204894 arg mem_24g_rxdata_temp + 3 ,rega +3612 20203519 branch car_24g_receive_data + +car_g24_lpm_dipatch: +3613 6fe0cc61 fetch 1 ,mem_car_enter_lpm_flag +3614 207a0000 rtn blank +3615 2040361b call car_g24_lpm_wait +3616 24740000 nrtn user +3617 6fe1c85c fetch 3 ,mem_24g_enter_hibernate +3618 20407daa call clk2lpo +3619 604a4160 storet 4 ,mem_sleep_counter +361a 20201497 branch lpm_sleep + +car_g24_lpm_wait: +361b 78347c00 enable user +361c 20401465 call lpo_calibration +361d 6fe1c174 fetch 3 ,mem_clks_per_lpo +361e 203a7e56 branch disable_user ,blank +361f 20203460 branch car_le_process_lpm_before + +dongle_init: +3620 5800364e setarg dongle_dispatch +3621 67e14889 store 2 ,mem_cb_24g_receive_process +3622 58003701 setarg dongle_g24_mouse +3623 67e1488d store 2 ,mem_cb_24g_data_device1 +3624 58003712 setarg dongle_g24_kb +3625 67e1488f store 2 ,mem_cb_24g_data_device2 +3626 580036f5 setarg dongle_ackpayload_prep +3627 67e1488b store 2 ,mem_cb_24g_ackpayload +3628 5800365b setarg dongle_usb_config +3629 67e10b45 store 2 ,mem_cb_usb_config +362a 20403653 call dongle_read_kb_bind_status +362b 2020799d branch usb_init + +dongle_default_init: +362c 20403649 call dongle_xtal_select +362d 6fe0c909 fetch 1 ,mem_dg_sys_config +362e 2feffe05 isolate1 dg_enable_eeprom ,pdata +362f 2020b633 branch dongle_default_no_eeprom ,true +3630 6fe0c909 fetch 1 ,mem_dg_sys_config +3631 2feffe06 isolate1 dg_enable_new_chmap ,pdata +3632 2040a30e call g24_chamap_param_update ,true + +dongle_default_no_eeprom: +3633 6fe0c909 fetch 1 ,mem_dg_sys_config +3634 1fe17e1f and_into 0x1f ,pdata +3635 67e0c1e8 store 1 ,mem_tx_power +3636 20403100 call app_sys_param_init +3637 70487dff jam 0xff ,mem_rssi_buff_index +3638 58000c4b setarg mem_dg_rssi_noise_buffer +3639 67e148e1 store 2 ,mem_rssi_noise_buffer_ptr +363a 58000d4b setarg mem_dg_rssi_noise_dg_buffer +363b 67e148e3 store 2 ,mem_rssi_noise_self_buffer_ptr +363c 58000e4b setarg mem_dg_rssi_noise_ms_buffer +363d 67e148e5 store 2 ,mem_rssi_noise_device1_buffer_ptr +363e 58000f4b setarg mem_dg_rssi_noise_kb_buffer +363f 67e148e7 store 2 ,mem_rssi_noise_device2_buffer_ptr +3640 20402322 call g24_enable_1m +3641 20402409 call g24_receive_init +3642 20402325 call g24_pair_param_init +3643 204022ff call g24_chmap_param_init +3644 6fe0c913 fetch 1 ,mem_dg_usb_tx_interval +3645 67e08b47 store 1 ,mem_usb_tx_interval +3646 6fe4c90a fetch 9 ,mem_dg_usb_vid_pid +3647 67e48b48 store 9 ,mem_usb_vid_pid +3648 20600000 rtn + +dongle_xtal_select: +3649 7040c518 jam xtal_24m ,mem_fcomp_div +364a 6fe0c909 fetch 1 ,mem_dg_sys_config +364b c4038000 rtnbit0 dg_enable_xtal_24m +364c 7040c508 jam xtal_16m ,mem_fcomp_div +364d 20600000 rtn + +dongle_dispatch: +364e 6fe0c8b9 fetch 1 ,mem_24g_pair_mode +364f c00036e6 beq 0x00 ,dongle_auto_bind +3650 c000b682 beq 0x01 ,dongle_pc_bind +3651 c007b67e beq 0x0f ,dongle_all_powerful +3652 20600000 rtn + +dongle_read_kb_bind_status: +3653 d8400001 arg 1 ,temp +3654 da2048e9 arg mem_dg_kb_bind_flag ,rega +3655 5800002a setarg dongle_kb_bind_efuse_offect +3656 20205e63 branch efuse_read_data + +dongle_write_kb_bind_status: +3657 df200001 arg 1 ,loopcnt +3658 da2048e9 arg mem_dg_kb_bind_flag ,rega +3659 d840002a arg dongle_kb_bind_efuse_offect ,temp +365a 20205e75 branch efuse_program + +dongle_usb_config: +365b 6fe0c8e9 fetch 1 ,mem_dg_kb_bind_flag +365c c0adb661 bne dongle_kb_bind_success ,dongle_usb_config_param +365d 7048e95b jam dongle_kb_bind_success ,mem_dg_kb_bind_flag +365e 6ff21aac fetch 4 ,usb_devicedata_addr + 9 +365f 79207e1d set1 29 ,pdata +3660 67e20aa0 store 4 ,mem_devicedesc + 9 + +dongle_usb_config_param: +3661 20403678 call dongle_usb_device_name +3662 204079f0 call usb_tx_interval_config +3663 20403665 call dongle_usb_vid_pid_config +3664 2020366e branch dongle_usb_hid_icon_config + +dongle_usb_vid_pid_config: +3665 6fe08b48 fetch 1 ,mem_usb_vid_pid +3666 207a0000 rtn blank +3667 6fe0c8e9 fetch 1 ,mem_dg_kb_bind_flag +3668 c02db66c beq dongle_kb_bind_success ,dongle_usb_vid_pid_for_suit + +dongle_usb_vid_pid_for_mouse_only_auto_pair: +3669 6fe20b49 fetch 4 ,mem_usb_vid_pid + 1 + +dongle_usb_vid_pid_store: +366a 67e20aa0 store 4 ,mem_devicedesc + 9 +366b 20600000 rtn + +dongle_usb_vid_pid_for_suit: +366c 6fe20b4d fetch 4 ,mem_usb_vid_pid + 5 +366d 2020366a branch dongle_usb_vid_pid_store + +dongle_usb_hid_icon_config: +366e 6fe0c8e9 fetch 1 ,mem_dg_kb_bind_flag +366f c02db674 beq dongle_kb_bind_success ,dongle_usb_kb_hidreportdesc +3670 580099a4 setarg usb_kbdata_vendor_define_addr +3671 67e10a93 store 2 ,mem_hidreportdesc_kb +3672 700ac41a jam 0x1a ,mem_confdesc + 26 +3673 20600000 rtn + +dongle_usb_kb_hidreportdesc: +3674 580099bf setarg usb_kbdata_addr +3675 67e10a93 store 2 ,mem_hidreportdesc_kb +3676 700ac43f jam 0x3f ,mem_confdesc + 26 +3677 20600000 rtn + +dongle_usb_device_name: +3678 6fe0c914 fetch 1 ,mem_dg_usb_device_name +3679 207a0000 rtn blank +367a d8c04914 arg mem_dg_usb_device_name ,contr +367b d8a00b09 arg mem_string2 ,contw +367c df20001e arg 30 ,loopcnt +367d 20207d5f branch memcpy + +dongle_all_powerful: +367e 2040248d call g24_switch_work_mode + +dongle_all_powerful_loop: +367f 204036ed call dongle_work_mode_auto +3680 204036b4 call dongle_usb_dispatch +3681 2020367f branch dongle_all_powerful_loop + +dongle_pc_bind: +3682 2040248d call g24_switch_work_mode + +dongle_pc_bind_loop: +3683 204036ed call dongle_work_mode_auto +3684 20402496 call g24_bind_mode_auto +3685 204036b4 call dongle_usb_dispatch +3686 20203683 branch dongle_pc_bind_loop + +dongle_g24_blank_data_process: +3687 2040368a call dongle_g24_ms_blank_data +3688 20403699 call dongle_g24_kb_blank_data +3689 202036a8 branch dongle_g24_kb_mul_blank_data + +dongle_g24_ms_blank_data: +368a 6fe0c908 fetch 1 ,mem_dg_ms_blank_data_enable +368b 207a0000 rtn blank +368c d8e0000b arg timer_ms_blank ,queue +368d 20407d74 call timer_check +368e 247a0000 nrtn blank +368f 70490800 jam 0 ,mem_dg_ms_blank_data_enable +3690 58000001 setarg ms_report_id +3691 67e08bff store 1 ,mem_usb_mouse_data +3692 58000000 setarg 0 +3693 e7e38005 istore 7 ,contw + +dongle_usb_tx_ms_data: +3694 700bf820 jam usb_ep2_ms ,mem_usb_ep2_data + +dongle_usb_tx_enable_ep2: +3695 6fe08bf9 fetch 1 ,mem_usb_tx_enable +3696 79207e02 set1 2 ,pdata +3697 67e08bf9 store 1 ,mem_usb_tx_enable +3698 20600000 rtn + +dongle_g24_kb_blank_data: +3699 6fe0c906 fetch 1 ,mem_dg_kb_blank_data_enable +369a 207a0000 rtn blank +369b d8e0000e arg timer_kb_blank ,queue +369c 20407d74 call timer_check +369d 247a0000 nrtn blank +369e 70490600 jam 0 ,mem_dg_kb_blank_data_enable +369f d8a00c0f arg mem_usb_kb_data ,contw +36a0 df200002 arg 2 ,loopcnt +36a1 20407d17 call memset0 + +dongle_usb_tx_kb_data: +36a2 700c0f00 jam kb_normal_report_id ,mem_usb_kb_data + +dongle_usb_tx_enable_ep1: +36a3 700bf710 jam usb_ep1_kb ,mem_usb_ep1_data +36a4 6fe08bf9 fetch 1 ,mem_usb_tx_enable +36a5 79207e01 set1 1 ,pdata +36a6 67e08bf9 store 1 ,mem_usb_tx_enable +36a7 20600000 rtn + +dongle_g24_kb_mul_blank_data: +36a8 6fe0c907 fetch 1 ,mem_dg_kb_mul_blank_data_enable +36a9 207a0000 rtn blank +36aa d8e0000c arg timer_kb_mul_blank ,queue +36ab 20407d74 call timer_check +36ac 247a0000 nrtn blank +36ad 70490700 jam 0 ,mem_dg_kb_mul_blank_data_enable +36ae d8a00c1f arg mem_usb_kb_multikey ,contw +36af df200002 arg 2 ,loopcnt +36b0 20407d17 call memset0 +36b1 700c1f03 jam kb_multikey_report_id ,mem_usb_kb_multikey + +dongle_usb_tx_multikey_data: +36b2 700bf821 jam usb_ep2_multikey ,mem_usb_ep2_data +36b3 20203695 branch dongle_usb_tx_enable_ep2 + +dongle_usb_dispatch: +36b4 44ddc017 bpatch patch17_3 ,mem_patch17 +36b5 20407991 call usb_isr +36b6 6fe08be3 fetch 1 ,mem_usb0_get_set_report +36b7 207a0000 rtn blank +36b8 700be300 jam 0 ,mem_usb0_get_set_report +36b9 6fe10be1 fetch 2 ,mem_usb_setup_bvalue_temp +36ba d84002ba arg pc_set_report ,temp +36bb 98467c00 isub temp ,null +36bc 24628000 nrtn zero +36bd 6fe08b61 fetch 1 ,mem_usb0_set_report_data +36be c1dd0000 rtnne pc_report_id +36bf 6fe08b62 fetch 1 ,mem_usb0_set_report_data + 1 +36c0 c05036c7 beq command_mode ,dongle_dispose_cmd_mode +36c1 c050b6cd beq command_bind ,dongle_dispose_cmd_bind +36c2 c05336d9 beq command_current_project ,dongle_dispose_cmd_current_project +36c3 c053b6db beq command_current_mode ,dongle_dispose_cmd_current_mode +36c4 c054b6e1 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version + +dongle_usb0_data_ready_report_set0: +36c5 700be400 jam 0 ,mem_usb0_data_ready_report +36c6 20600000 rtn + +dongle_dispose_cmd_mode: +36c7 6fe08b63 fetch 1 ,mem_usb0_set_report_data + 2 +36c8 c040b6ca beq com_mode_bind ,dongle_enter_bind_mode +36c9 202036c5 branch dongle_usb0_data_ready_report_set0 + +dongle_enter_bind_mode: +36ca 20402392 call g24_bind_mode_enable + +dongle_usb0_data_ready_report_set1: +36cb 700be401 jam 1 ,mem_usb0_data_ready_report +36cc 20600000 rtn + +dongle_dispose_cmd_bind: +36cd 6fe08b63 fetch 1 ,mem_usb0_set_report_data + 2 +36ce c000b6d2 beq com_bind_get ,dongle_dispose_cmd_get_bind +36cf c04236d5 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +36d0 c053b6d7 beq com_read_mode ,dongle_dispose_cmd_read_mode +36d1 202036c5 branch dongle_usb0_data_ready_report_set0 + +dongle_dispose_cmd_get_bind: +36d2 6fe0c880 fetch 1 ,mem_24g_bind_device_status +36d3 67e08ba2 store 1 ,mem_usb0_get_report_data + 1 +36d4 202036cb branch dongle_usb0_data_ready_report_set1 + +dongle_dispose_cmd_exit_bind: +36d5 2040248e call g24_work_mode_enable +36d6 202036d2 branch dongle_dispose_cmd_get_bind + +dongle_dispose_cmd_read_mode: + +dongle_dispose_in_bind_mode: +36d7 700ba2a1 jam command_bind ,mem_usb0_get_report_data + 1 +36d8 202036cb branch dongle_usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_project: +36d9 700ba215 jam product_id ,mem_usb0_get_report_data + 1 +36da 202036cb branch dongle_usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_mode: +36db 6fe0c8bf fetch 1 ,mem_24g_work_mode +36dc c00036df beq dongle_work ,dongle_dispose_in_work_mode +36dd c000b6d7 beq dongle_bind ,dongle_dispose_in_bind_mode +36de 20600000 rtn + +dongle_dispose_in_work_mode: +36df 700ba2a0 jam command_mode ,mem_usb0_get_report_data + 1 +36e0 202036cb branch dongle_usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_fw_version: +36e1 700ba200 jam fw_version0 ,mem_usb0_get_report_data + 1 +36e2 700ba300 jam fw_version1 ,mem_usb0_get_report_data + 2 +36e3 700ba401 jam fw_version2 ,mem_usb0_get_report_data + 3 +36e4 700ba507 jam fw_version3 ,mem_usb0_get_report_data + 4 +36e5 202036cb branch dongle_usb0_data_ready_report_set1 + +dongle_auto_bind: +36e6 20402463 call g24_mode_switch_init + +dongle_auto_bind_loop: +36e7 20402467 call g24_mode_switch +36e8 204036ed call dongle_work_mode_auto +36e9 20402496 call g24_bind_mode_auto +36ea 204024b3 call g24_search_mode_auto +36eb 204036b4 call dongle_usb_dispatch +36ec 202036e7 branch dongle_auto_bind_loop + +dongle_work_mode_auto: +36ed 44de4017 bpatch patch17_4 ,mem_patch17 +36ee 6fe0c8bf fetch 1 ,mem_24g_work_mode +36ef c1800000 rtnne dongle_work +36f0 20402491 call g24_work_mode_start +36f1 20403687 call dongle_g24_blank_data_process +36f2 6fe0c8b9 fetch 1 ,mem_24g_pair_mode +36f3 247a0000 nrtn blank +36f4 20202532 branch g24_nodata_process + +dongle_ackpayload_prep: +36f5 6fe0c8ba fetch 1 ,mem_24g_ackpayload_enable +36f6 c000a39e beq bind_ackpayload ,g24_bind_ackpayload_prep +36f7 c001b6f9 beq kb_led_ackpayload ,dongle_g24_kb_led_ackpayload_prep +36f8 20600000 rtn + +dongle_g24_kb_led_ackpayload_prep: +36f9 6fe0c7a6 fetch 1 ,mem_24g_rxbuf + 2 +36fa c000a39e beq datatype_device1 ,g24_bind_ackpayload_prep +36fb c07fa39e beq datatype_attemp ,g24_bind_ackpayload_prep +36fc 700be500 jam 0 ,mem_usb_tx_win_enable +36fd 70483501 jam 0x01 ,mem_24g_datalen +36fe 6fe0c8ca fetch 1 ,mem_24g_led_status +36ff 67e0c7c6 store 1 ,mem_24g_txbuf +3700 20600000 rtn + +dongle_g24_mouse: +3701 58000001 setarg ms_report_id +3702 67e08bff store 1 ,mem_usb_mouse_data +3703 6fe3c894 fetch 7 ,mem_24g_rxdata_temp + 3 +3704 e7e38005 istore 7 ,contw +3705 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +3706 245a370a ncall dongle_g24_ms_enable_blank_data_forcibly ,blank +3707 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +3708 205a370e call dongle_g24_ms_disable_blank_data_forcibly ,blank +3709 20203694 branch dongle_usb_tx_ms_data + +dongle_g24_ms_enable_blank_data_forcibly: +370a 70490801 jam 1 ,mem_dg_ms_blank_data_enable +370b 58000180 setarg timer_ms_blank_delay +370c d8e0000b arg timer_ms_blank ,queue +370d 20207d66 branch timer_init + +dongle_g24_ms_disable_blank_data_forcibly: +370e 70490800 jam 0 ,mem_dg_ms_blank_data_enable +370f 58000000 setarg 0 +3710 d8e0000b arg timer_ms_blank ,queue +3711 20207d66 branch timer_init + +dongle_g24_kb: +3712 6fe0c894 fetch 1 ,mem_24g_rxdata_temp + 3 +3713 c0003717 beq 0 ,dongle_g24_kb_type0 +3714 c001374a beq 2 ,dongle_g24_kb_type2 +3715 c001b732 beq 3 ,dongle_g24_kb_type3 +3716 20202427 branch g24_rx_interrupt_clear + +dongle_g24_kb_type0: +3717 6fe0c896 fetch 1 ,mem_24g_rxdata_temp + 5 +3718 67e0c8ba store 1 ,mem_24g_ackpayload_enable +3719 70489600 jam 0 ,mem_24g_rxdata_temp + 5 +371a d8a00c0f arg mem_usb_kb_data ,contw +371b d8c04895 arg mem_24g_rxdata_temp + 4 ,contr +371c df200008 arg 8 ,loopcnt +371d 20407d5f call memcpy +371e 6fe40c0f fetch 8 ,mem_usb_kb_data +371f 245a372a ncall dongle_g24_kb_enable_blank_data_forcibly ,blank +3720 6fe40c0f fetch 8 ,mem_usb_kb_data +3721 205a372e call dongle_g24_kb_disable_blank_data_forcibly ,blank +3722 6fe40c0f fetch 8 ,mem_usb_kb_data +3723 67e448ea store 8 ,mem_dg_kb_data_sta_data +3724 684c48f2 fetcht 8 ,mem_dg_kb_data_last_data +3725 98467c00 isub temp ,null +3726 2442b6a3 ncall dongle_usb_tx_enable_ep1 ,zero +3727 6fe448ea fetch 8 ,mem_dg_kb_data_sta_data +3728 67e448f2 store 8 ,mem_dg_kb_data_last_data +3729 20202427 branch g24_rx_interrupt_clear + +dongle_g24_kb_enable_blank_data_forcibly: +372a 70490601 jam 1 ,mem_dg_kb_blank_data_enable +372b 58000180 setarg timer_kb_blank_delay +372c d8e0000e arg timer_kb_blank ,queue +372d 20207d66 branch timer_init + +dongle_g24_kb_disable_blank_data_forcibly: +372e 70490600 jam 0 ,mem_dg_kb_blank_data_enable +372f 58000000 setarg 0 +3730 d8e0000e arg timer_kb_blank ,queue +3731 20207d66 branch timer_init + +dongle_g24_kb_type3: +3732 d8a00c1f arg mem_usb_kb_multikey ,contw +3733 d8c04894 arg mem_24g_rxdata_temp + 3 ,contr +3734 df200003 arg 3 ,loopcnt +3735 20407d5f call memcpy +3736 6fe10c20 fetch 2 ,mem_usb_kb_multikey + 1 +3737 245a3742 ncall dongle_g24_kb_mul_enable_blank_data_forcibly ,blank +3738 6fe10c20 fetch 2 ,mem_usb_kb_multikey + 1 +3739 205a3746 call dongle_g24_kb_mul_disable_blank_data_forcibly ,blank +373a 6fe18c1f fetch 3 ,mem_usb_kb_multikey +373b 67e1c8fa store 3 ,mem_dg_kb_multikey_sta_data +373c 6849c8fd fetcht 3 ,mem_dg_kb_multikey_last_data +373d 98467c00 isub temp ,null +373e 2442b6b2 ncall dongle_usb_tx_multikey_data ,zero +373f 6fe1c8fa fetch 3 ,mem_dg_kb_multikey_sta_data +3740 67e1c8fd store 3 ,mem_dg_kb_multikey_last_data +3741 20202427 branch g24_rx_interrupt_clear + +dongle_g24_kb_mul_enable_blank_data_forcibly: +3742 70490701 jam 1 ,mem_dg_kb_mul_blank_data_enable +3743 58000180 setarg timer_kb_mul_blank_delay +3744 d8e0000c arg timer_kb_mul_blank ,queue +3745 20207d66 branch timer_init + +dongle_g24_kb_mul_disable_blank_data_forcibly: +3746 70490700 jam 0 ,mem_dg_kb_mul_blank_data_enable +3747 58000000 setarg 0 +3748 d8e0000c arg timer_kb_mul_blank ,queue +3749 20207d66 branch timer_init + +dongle_g24_kb_type2: +374a d8a00c2f arg mem_usb_kb_system ,contw +374b d8c04894 arg mem_24g_rxdata_temp + 3 ,contr +374c df200002 arg 2 ,loopcnt +374d 20407d5f call memcpy +374e 6fe10c2f fetch 2 ,mem_usb_kb_system +374f 245a375a ncall dongle_g24_kb_sys_enable_blank_data_forcibly ,blank +3750 6fe10c2f fetch 2 ,mem_usb_kb_system +3751 205a375e call dongle_g24_kb_sys_disable_blank_data_forcibly ,blank +3752 6fe10c2f fetch 2 ,mem_usb_kb_system +3753 67e14900 store 2 ,mem_dg_kb_system_sta_data +3754 68494903 fetcht 2 ,mem_dg_kb_system_last_data +3755 98467c00 isub temp ,null +3756 2442b762 ncall dongle_usb_tx_sys_data ,zero +3757 6fe14900 fetch 2 ,mem_dg_kb_system_sta_data +3758 67e14903 store 2 ,mem_dg_kb_system_last_data +3759 20202427 branch g24_rx_interrupt_clear + +dongle_g24_kb_sys_enable_blank_data_forcibly: +375a 70490701 jam 1 ,mem_dg_kb_mul_blank_data_enable +375b 58000180 setarg timer_kb_mul_blank_delay +375c d8e0000c arg timer_kb_mul_blank ,queue +375d 20207d66 branch timer_init + +dongle_g24_kb_sys_disable_blank_data_forcibly: +375e 70490700 jam 0 ,mem_dg_kb_mul_blank_data_enable +375f 58000000 setarg 0 +3760 d8e0000c arg timer_kb_mul_blank ,queue +3761 20207d66 branch timer_init + +dongle_usb_tx_sys_data: +3762 700bf822 jam usb_ep2_systemkey ,mem_usb_ep2_data +3763 20203695 branch dongle_usb_tx_enable_ep2 + +module_init: +3764 20758000 rtn wake +3765 20401aa9 call le_modified_name +3766 580037ab setarg module_process_idle +3767 67e14465 store 2 ,mem_cb_idle_process +3768 58003798 setarg module_bt_conn_process +3769 67e14463 store 2 ,mem_cb_bt_process +376a 580037af setarg module_process_bb_event +376b 67e14467 store 2 ,mem_cb_bb_event_process +376c 58003794 setarg module_lpm_lock +376d 67e1445b store 2 ,mem_cb_check_wakelock +376e 580038e8 setarg module_hci_cmd_transmit_le_notify +376f 67e1446d store 2 ,mem_cb_ble_transmit +3770 58003ae1 setarg module_hci_event_receive_spp_data +3771 67e1465a store 2 ,mem_cb_receive_spp_data +3772 58003b84 setarg module_le_receive_data +3773 67e1446b store 2 ,mem_cb_att_write +3774 58003b9b setarg module_bb_event_timer +3775 67e1446f store 2 ,mem_cb_event_timer +3776 204037a8 call module_spp_clear_last_transmite_clock +3777 44dec017 bpatch patch17_5 ,mem_patch17 +3778 2040377b call module_lpm_uart_init +3779 2040378f call module_gpio_init +377a 20203af7 branch module_hci_event_enter_standby_mode + +module_lpm_uart_init: +377b 6ff08060 fetch 1 ,core_uart_ctrl +377c 793ffe00 set0 bit_uart_control_enable ,pdata +377d 67f08060 store 1 ,core_uart_ctrl +377e 6fe447b4 fetch 8 ,mem_module_uart_rx_buffer +377f 20405eb0 call uarta_init_dma_mem +3780 6fe147bc fetch uart_baud_len ,mem_module_uarta_baud_rate +3781 20405ec4 call uarta_init_baud_rate +3782 20405ed7 call uart_clock_select_main_freq_crystal +3783 70807d08 jam gpcfg_uart_txd ,core_gpio_conf + hci_uart_tx_gpio_num +3784 70807e49 jam gpcfg_uart_rxd | gpcfg_pullup ,core_gpio_conf + hci_uart_rx_gpio_num +3785 7080790a jam gpcfg_uart_rts ,core_gpio_conf + hci_uart_rts_gpio_num +3786 70807a0b jam gpcfg_uart_cts ,core_gpio_conf + hci_uart_cts_gpio_num +3787 d8400081 arg fun_uart_control_enable | fun_uart_control_setting_rate_baud ,temp +3788 6fe147c3 fetch 2 ,mem_module_flag +3789 2feffe00 isolate1 module_flag_uart_flow_control ,pdata +378a 79208404 setflag true ,bit_uart_control_flow_control ,temp +378b 60588060 storet 1 ,core_uart_ctrl +378c 20600000 rtn + +module_lpm_init: +378d 204037a8 call module_spp_clear_last_transmite_clock +378e 2020377b branch module_lpm_uart_init + +module_gpio_init: +378f 6848c7a8 fetcht 1 ,mem_module_connect_state_gpio +3790 20406069 call gpio_config_output +3791 20403812 call module_set_conn_pin_low +3792 6848c7a6 fetcht 1 ,mem_module_wake_up_gpio +3793 20206050 branch gpio_config_input + +module_lpm_lock: +3794 6848c7a6 fetcht 1 ,mem_module_wake_up_gpio +3795 20406059 call gpio_get_bit +3796 2420b1df nbranch app_put_lpm_wake_lock ,true +3797 202031dd branch app_get_lpm_wake_lock + +module_bt_conn_process: +3798 2040379a call module_spp_enter_sniff +3799 20203baa branch module_control_air_flow + +module_spp_enter_sniff: +379a 6fe0c78c fetch 1 ,mem_ui_state_map +379b c30237a8 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +379c 58003eff setarg 0x3eff +379d 684a47cb fetcht 4 ,mem_last_transmite_clock +379e 98408400 iadd temp ,temp +379f 1c427e00 copy clkn_bt ,pdata +37a0 98467c00 isub temp ,null +37a1 24610000 nrtn positive +37a2 6fe1478c fetch 2 ,mem_ui_state_map +37a3 c282b7a8 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +37a4 6fe147c3 fetch 2 ,mem_module_flag +37a5 c3850000 rtnbit1 moudle_task_sniff +37a6 20403bad call module_set_sniff_task_flag +37a7 2040321b call app_bt_enter_sniff + +module_spp_clear_last_transmite_clock: +37a8 1c427e00 copy clkn_bt ,pdata +37a9 67e247cb store 4 ,mem_last_transmite_clock +37aa 20600000 rtn + +module_process_idle: +37ab 20403baa call module_control_air_flow +37ac 204052f1 call l2cap_malloc_is_fifo_full +37ad 247a0000 nrtn blank +37ae 20203817 branch module_process_check_hci_command_complete + +module_process_bb_event: +37af 1a627e00 copy regc ,pdata +37b0 c000b7ff beq bt_evt_bb_connected ,module_process_bb_conn +37b1 c00137ce beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +37b2 c0023802 beq bt_evt_reconn_failed ,module_process_reconn_fail +37b3 c002b7ef beq bt_evt_setup_complete ,module_process_setup_complete +37b4 c00437d5 beq bt_evt_spp_connected ,module_process_spp_connected +37b5 c004b7dc beq bt_evt_spp_disconnected ,module_process_spp_disconnected +37b6 c00537f5 beq bt_evt_pincode_req ,module_process_evt_pincode_req +37b7 c005b7e1 beq bt_evt_enter_sniff ,module_process_enter_sniff +37b8 c00637ed beq bt_evt_exit_sniff ,module_process_exit_sniff +37b9 c009b802 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +37ba c00a37fb beq bt_evt_le_connected ,module_process_le_conn +37bb c00ab7f1 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +37bc c010b7f6 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +37bd c011b7f7 beq bt_evt_unsniff_accept ,module_process_unsniff_accept +37be c01237fa beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +37bf c0183b3f beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +37c0 c018bb41 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +37c1 c0193b4f beq bt_evt_le_start_enc ,module_hci_event_start_enc +37c2 c019bb4d beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +37c3 c01a3b39 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +37c4 c01abb22 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +37c5 c01b3b37 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +37c6 c01bbb43 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +37c7 c01c3b45 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +37c8 c01dbb22 beq bt_evt_le_gkey_generate ,module_hci_event_gkey_generate +37c9 c01ebb19 beq bt_evt_store_nvram ,module_hci_event_store_device +37ca c020b804 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +37cb c0213806 beq bt_evt_le_update_phy ,module_process_ble_update_phy +37cc c021bb37 beq bt_evt_le_get_passkey ,module_hci_event_passkey_entry_mode +37cd 20600000 rtn + +module_process_bb_event_disconned: +37ce 204037a8 call module_spp_clear_last_transmite_clock +37cf 6fe0c76f fetch 1 ,mem_flag_pairing_state +37d0 245a3b43 ncall module_hci_event_bt_pairing_fail ,blank +37d1 20403802 call module_disconn_start +37d2 6fe1478c fetch 2 ,mem_ui_state_map +37d3 c4020000 rtnbit0 ui_state_bt_spp_conn +37d4 202037dc branch module_spp_disconnected + +module_process_spp_connected: +37d5 6fe1478c fetch 2 ,mem_ui_state_map +37d6 79207e04 set1 ui_state_bt_spp_conn ,pdata +37d7 67e1478c store 2 ,mem_ui_state_map +37d8 6fe0c7b1 fetch 1 ,mem_module_spp_lpm_mult +37d9 67e0c177 store 1 ,mem_lpm_mult +37da 20403812 call module_set_conn_pin_low +37db 20203acc branch module_hci_event_spp_connect + +module_process_spp_disconnected: + +module_spp_disconnected: +37dc 6fe1478c fetch 2 ,mem_ui_state_map +37dd c4020000 rtnbit0 ui_state_bt_spp_conn +37de 793ffe04 set0 ui_state_bt_spp_conn ,pdata +37df 67e1478c store 2 ,mem_ui_state_map +37e0 20203ad0 branch module_hci_event_spp_disconnect + +module_process_enter_sniff: + +module_sniff_param_check: +37e1 204037a8 call module_spp_clear_last_transmite_clock +37e2 6fe14042 fetch 2 ,mem_context + coffset_tsniff +37e3 1fe37e00 rshift pdata ,pdata +37e4 68494455 fetcht 2 ,mem_sniff_param_interval +37e5 98467c00 isub temp ,null +37e6 2422b7e8 nbranch module_sniff_param_check_unsniff ,zero +37e7 20203223 branch app_lpm_mult_enable + +module_sniff_param_check_unsniff: +37e8 6fe147c3 fetch 2 ,mem_module_flag +37e9 c3848000 rtnbit1 moudle_task_unsniff +37ea 6ff10112 fetch 2 ,core_uart_rxitems +37eb 245a3bb1 ncall module_set_unsniff_task_flag ,blank +37ec 20203219 branch app_bt_sniff_exit + +module_process_exit_sniff: +37ed 20403baf call module_clear_sniff_task_flag +37ee 20203225 branch app_lpm_mult_disable + +module_process_setup_complete: +37ef 204037a8 call module_spp_clear_last_transmite_clock +37f0 20203809 branch module_conn_start + +module_process_bb_even_le_disconn: +37f1 20401b1c call le_clr_config_more_data +37f2 7047c500 jam 0 ,mem_module_hci_notify_len +37f3 20403802 call module_disconn_start +37f4 20203ad2 branch module_hci_event_le_disconnect + +module_process_evt_pincode_req: +37f5 202031ea branch app_bt_set_pincode + +module_process_sniff_not_accept: +37f6 20203baf branch module_clear_sniff_task_flag + +module_process_unsniff_accept: +37f7 6fe147c3 fetch 2 ,mem_module_flag +37f8 c304b21b bbit0 moudle_task_unsniff ,app_bt_enter_sniff +37f9 20203bb3 branch module_clear_unsniff_task_flag + +module_process_unsniff_not_accept: +37fa 20203bb3 branch module_clear_unsniff_task_flag + +module_process_le_conn: +37fb 20403809 call module_conn_start +37fc 6fe0c7b2 fetch 1 ,mem_module_le_lpm_mult +37fd 67e0c177 store 1 ,mem_lpm_mult +37fe 20203ace branch module_hci_event_le_connect + +module_process_bb_conn: +37ff 70476b00 jam 0 ,mem_flag_mode_ssp_pin +3800 20403baf call module_clear_sniff_task_flag +3801 20203bb3 branch module_clear_unsniff_task_flag + +module_process_page_time_out: + +module_process_reconn_fail: + +module_disconn_start: +3802 2040387f call module_start_adv_discovery_by_command +3803 20203807 branch module_set_conn_pin_high + +module_process_ble_ltk_lost: +3804 204021b5 call le_send_reject_ind +3805 20201f99 branch le_send_smp_security_request + +module_process_ble_update_phy: +3806 20203b65 branch module_hci_event_le_update_phy + +module_set_conn_pin_high: +3807 6848c7a8 fetcht 1 ,mem_module_connect_state_gpio +3808 20206069 branch gpio_out_active + +module_conn_start: +3809 2040380b call module_stop_adv_discovery +380a 20203812 branch module_set_conn_pin_low + +module_stop_adv_discovery: +380b 6fe0c7ab fetch 1 ,mem_module_state +380c 2feffe00 isolate1 moudle_state_bt_bit ,pdata +380d 2040b1fd call app_bt_stop_discovery ,true +380e 6fe0c7ab fetch 1 ,mem_module_state +380f 2feffe01 isolate1 moudle_state_ble_bit ,pdata +3810 2040b205 call app_ble_stop_adv ,true +3811 20600000 rtn + +module_set_conn_pin_low: +3812 6848c7a8 fetcht 1 ,mem_module_connect_state_gpio +3813 20206065 branch gpio_out_inactive + +module_process_with_credit: +3814 6fe0c656 fetch 1 ,mem_rfcomm_credit_flag +3815 c1000000 rtneq credit_disable +3816 202064df branch rfcomm_send_uih_without_payload + +module_process_check_hci_command_complete: +3817 6ff0810b fetch 1 ,core_uart_status +3818 c2813814 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +3819 20405ef7 call uarta_prepare_rx +381a efe08003 ifetch 1 ,contru +381b c080b82d bne 0x01 ,module_hci_in_excp +381c 6ff10112 fetch 2 ,core_uart_rxitems +381d 1fe67c02 sub pdata ,2 ,null +381e 20610000 rtn positive +381f efe08003 ifetch 1 ,contru +3820 67e089cf store 1 ,mem_module_uart_opcode +3821 e8408003 ifetcht 1 ,contru +3822 18622200 copy contru ,rega +3823 604889d0 storet 1 ,mem_module_uart_len +3824 18408403 add temp ,3 ,temp +3825 6ff10112 fetch 2 ,core_uart_rxitems +3826 98460400 isub temp ,temp +3827 24610000 nrtn positive +3828 7009d101 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3829 2040383b call module_hci_cmd_control +382a 6fe089d1 fetch 1 ,mem_module_temp_nl_discard_packet +382b c1000000 rtneq hci_not_discard_packet +382c 20203836 branch module_hci_dicard_packet + +module_hci_in_excp: +382d 20407d12 call delay_10ms +382e 20403b28 call module_hci_event_invalid_packet +382f 20203830 branch module_hci_release_except + +module_hci_release_except: +3830 44df4017 bpatch patch17_6 ,mem_patch17 +3831 20405ef7 call uarta_prepare_rx +3832 6ff10112 fetch 2 ,core_uart_rxitems +3833 207a0000 rtn blank +3834 98608600 iadd contru ,contru +3835 2020383a branch module_hci_dicard_bytes + +module_hci_dicard_packet: +3836 20405ef7 call uarta_prepare_rx +3837 18608602 increase 2 ,contu +3838 efe08003 ifetch 1 ,contu +3839 98608600 iadd contu ,contu + +module_hci_dicard_bytes: +383a 20205f03 branch uarta_rxdone + +module_hci_cmd_control: +383b 44dfc017 bpatch patch17_7 ,mem_patch17 +383c 6fe089cf fetch 1 ,mem_module_uart_opcode +383d c000386d beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +383e c000b872 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +383f c0013877 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +3840 c001b88c beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +3841 c0023896 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +3842 c002b89a beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +3843 c004b8bc beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +3844 c005b910 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +3845 c0063911 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +3846 c006b935 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +3847 c0073938 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +3848 c007b940 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +3849 c0083948 beq hci_cmd_version_req ,module_hci_cmd_version_request +384a c008b94c beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +384b c0093950 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +384c c00ab954 beq hci_cmd_set_cod ,module_hci_cmd_set_cod +384d c0133959 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +384e c014395e beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +384f c014b96e beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +3850 c0153977 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +3851 c015b9aa beq hci_cmd_power_req ,module_hci_cmd_power_request +3852 c01639b0 beq hci_cmd_power_set ,module_hci_cmd_power_set +3853 c01839b7 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +3854 c018b9c1 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +3855 c01939d2 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +3856 c019b9dd beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +3857 c01a3a0a beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +3858 c01aba0d beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +3859 c01b3a16 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +385a c01bba1f beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +385b c01c3a22 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +385c c0203a2a beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +385d c0213a34 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +385e c0243a39 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +385f c024ba44 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +3860 c028ba4a beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +3861 c030ba4e beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +3862 c03b3a5d beq hci_cmd_delete_customize_service ,module_hci_cmd_delete_customize_service +3863 c03bba63 beq hci_cmd_add_service_uuid ,module_hci_cmd_add_service_uuid +3864 c03c3a68 beq hci_cmd_add_characteristic_uuid ,module_hci_cmd_add_characteristic_uuid +3865 c03d3a9e beq hci_cmd_passkey_entry_input ,module_hci_cmd_le_passkey_entry_input +3866 c0483aac beq hci_cmd_ble_set_phy ,module_hci_cmd_ble_set_phy +3867 c048bab1 beq hci_cmd_ble_read_current_phy ,module_hci_cmd_ble_read_current_phy +3868 c0493ab5 beq hci_cmd_ble_set_dle ,module_hci_cmd_ble_set_dle +3869 c049baba beq hci_cmd_read_chip_data ,module_hci_cmd_read_chip_data +386a c04a3abe beq hci_cmd_write_chip_data ,module_hci_cmd_write_chip_data +386b c07fbac4 beq hci_cmd_close_lpm ,module_hci_cmd_close_lpm +386c 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_set_bt_addr: +386d 6fe089d0 fetch 1 ,mem_module_uart_len +386e c0833ac6 bne 6 ,module_hci_event_receive_invalid_cmd +386f efe30003 ifetch 6 ,contru +3870 67e340a8 store 6 ,mem_lap +3871 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_addr: +3872 6fe089d0 fetch 1 ,mem_module_uart_len +3873 c0833ac6 bne 6 ,module_hci_event_receive_invalid_cmd +3874 efe30003 ifetch 6 ,contru +3875 67e3437a store 6 ,mem_le_lap +3876 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_visibility: +3877 6fe089d0 fetch 1 ,mem_module_uart_len +3878 c080bac6 bne 1 ,module_hci_event_receive_invalid_cmd +3879 e8408003 ifetcht 1 ,contru +387a 6048c7b3 storet 1 ,mem_module_bluetooth_stauts_by_command +387b 20403ac9 call module_hci_event_receive_valid_cmd +387c 6fe1478c fetch 2 ,mem_ui_state_map +387d c3848000 rtnbit1 ui_state_ble_connected +387e c3800000 rtnbit1 ui_state_bt_connected + +module_start_adv_discovery_by_command: +387f 6fe0c7ab fetch 1 ,mem_module_state +3880 2feffe00 isolate1 moudle_state_bt_bit ,pdata +3881 2420b885 nbranch moudle_start_adv_by_command ,true +3882 6848c7b3 fetcht 1 ,mem_module_bluetooth_stauts_by_command +3883 18417e03 and temp ,0x03 ,pdata +3884 67e0c09b store 1 ,mem_scan_mode + +moudle_start_adv_by_command: +3885 6fe0c7ab fetch 1 ,mem_module_state +3886 2feffe01 isolate1 moudle_state_ble_bit ,pdata +3887 24608000 nrtn true +3888 6848c7b3 fetcht 1 ,mem_module_bluetooth_stauts_by_command +3889 284ffe02 isolate1 2 ,temp +388a 2020b207 branch app_ble_start_adv ,true +388b 20203205 branch app_ble_stop_adv + +module_hci_cmd_set_bt_name: +388c 6fe089d0 fetch 1 ,mem_module_uart_len +388d 1fe67c43 sub pdata ,67 ,null +388e 24213ac6 nbranch module_hci_event_receive_invalid_cmd ,positive +388f 67e0c5fc store 1 ,mem_local_name_length +3890 df200008 arg 8 ,loopcnt +3891 20407d17 call memset0 +3892 6f2089d0 fetchr loopcnt ,1 ,mem_module_uart_len +3893 d8a045fd arg mem_local_name ,contw +3894 20405f39 call uart_copy_rx_bytes_fast +3895 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_name: +3896 dfe0001f arg 31 ,pdata +3897 d8a042f7 arg mem_le_name_len ,contw +3898 20403a10 call module_hci_cmd_receive_store_mem +3899 20201aa9 branch le_modified_name + +module_hci_cmd_receive_spp_data: +389a 6fe0c78c fetch 1 ,mem_ui_state_map +389b c3023ac6 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +389c 204031d7 call app_check_sniff +389d 2020b8aa branch module_hci_cmd_spp_exit_sniff ,true +389e 7009d100 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +389f 204037a8 call module_spp_clear_last_transmite_clock +38a0 6fe0c653 fetch 1 ,mem_remote_credits +38a1 207a0000 rtn blank +38a2 6fe1465e fetch 2 ,mem_nl_rx_len_all +38a3 243a38a8 nbranch module_hci_cmd_pass_init_ng_rx_len_all ,blank +38a4 6fe089d0 fetch 1 ,mem_module_uart_len +38a5 67e1465e store 2 ,mem_nl_rx_len_all +38a6 67e1465c store 2 ,mem_nl_rx_data_src +38a7 6061465c storer contru ,2 ,mem_nl_rx_data_src + +module_hci_cmd_pass_init_ng_rx_len_all: +38a8 204038ac call module_hci_cmd_get_current_packet_len_and_remain_len +38a9 20206504 branch spp_tx_rfcomm_packet + +module_hci_cmd_spp_exit_sniff: +38aa 7009d100 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +38ab 20203b95 branch module_exit_sniff + +module_hci_cmd_get_current_packet_len_and_remain_len: +38ac 204038b2 call module_hci_cmd_get_current_patcket_len +38ad 6fe1465e fetch 2 ,mem_nl_rx_len_all +38ae 684947a9 fetcht 2 ,mem_current_packet_length +38af 98467e00 isub temp ,pdata +38b0 67e1465e store 2 ,mem_nl_rx_len_all +38b1 20600000 rtn + +module_hci_cmd_get_current_patcket_len: +38b2 6fe1465e fetch 2 ,mem_nl_rx_len_all +38b3 68494657 fetcht 2 ,mem_rfcomm_max_frame_size +38b4 20407e4a call not_greater_than +38b5 68494649 fetcht 2 ,mem_pn_max_frame_size +38b6 20407e4a call not_greater_than +38b7 67e147a9 store 2 ,mem_current_packet_length +38b8 20600000 rtn + +module_hci_command_tx_spp_tx_complete: +38b9 7009d101 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +38ba 7009cf05 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +38bb 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_receive_le_data: +38bc 6fe1478c fetch 2 ,mem_ui_state_map +38bd c304bac6 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +38be 2040390d call module_check_ble_encrypt_state +38bf 20343ac6 branch module_hci_event_receive_invalid_cmd ,user +38c0 7009d100 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +38c1 6fe147c3 fetch 2 ,mem_module_flag +38c2 c28438e1 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +38c3 6fe0c7c5 fetch 1 ,mem_module_hci_notify_len +38c4 247a0000 nrtn blank +38c5 7009d101 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +38c6 efe10003 ifetch 2 ,contru +38c7 67e147c6 store 2 ,mem_module_hci_notify_handle +38c8 606147c8 storer contru ,2 ,mem_module_hci_nofiy_addr +38c9 6fe089d0 fetch 1 ,mem_module_uart_len +38ca 1fe0fffe pincrease -2 +38cb 24213ac6 nbranch module_hci_event_receive_invalid_cmd ,positive +38cc 2022bac6 branch module_hci_event_receive_invalid_cmd ,zero +38cd 67e0c7c5 store 1 ,mem_module_hci_notify_len +38ce 684947c6 fetcht 2 ,mem_module_hci_notify_handle +38cf 184085ff increase -1 ,temp +38d0 20401a65 call le_att_get_handle_ptr2 +38d1 203a38e4 branch module_hci_cmd_transmit_handle_error ,blank +38d2 e8420006 ifetcht 4 ,contr +38d3 59280302 setarg 0x01280302 +38d4 98467c00 isub temp ,null +38d5 2422b8e4 nbranch module_hci_cmd_transmit_handle_error ,zero +38d6 efe08006 ifetch 1 ,contr +38d7 67e0c7ca store 1 ,mem_module_hci_notify_type +38d8 1fe17e30 and_into 0x30 ,pdata +38d9 203a38e4 branch module_hci_cmd_transmit_handle_error ,blank +38da 7009d100 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +38db 20401b1a call le_set_config_more_data +38dc 204038e8 call module_hci_cmd_transmit_le_notify +38dd 204038e8 call module_hci_cmd_transmit_le_notify +38de 204038e8 call module_hci_cmd_transmit_le_notify +38df 6fe147c3 fetch 2 ,mem_module_flag +38e0 c4040000 rtnbit0 module_flag_ble_data_finish + +module_hci_cmd_receive_le_data_finish: +38e1 7009d101 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +38e2 20403bb7 call module_clear_le_tx_data_flag +38e3 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_transmit_handle_error: +38e4 7047c500 jam 0 ,mem_module_hci_notify_len +38e5 7009d101 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +38e6 20403bb7 call module_clear_le_tx_data_flag +38e7 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_transmit_le_notify: +38e8 6fe0c7c5 fetch 1 ,mem_module_hci_notify_len +38e9 207a0000 rtn blank +38ea 20401b77 call le_fifo_check_nearly_full +38eb 247a0000 nrtn blank +38ec 20403908 call module_get_le_remote_mtu +38ed 44e04018 bpatch patch18_0 ,mem_patch18 +38ee 6fe0c435 fetch 1 ,mem_le_l2cap_att_states +38ef c3800000 rtnbit1 ble_l2cap_recv_confirmation_packet +38f0 1840fffd add temp ,-3 ,pdata +38f1 d84000fb arg 251 ,temp +38f2 20407e4a call not_greater_than +38f3 6848c7c5 fetcht 1 ,mem_module_hci_notify_len +38f4 20407e4a call not_greater_than +38f5 1fe22200 copy pdata ,rega +38f6 18427e00 copy temp ,pdata +38f7 9a267e00 isub rega ,pdata +38f8 67e0c7c5 store 1 ,mem_module_hci_notify_len +38f9 20403903 call module_hci_cmd_transmit_le_notify_malloc_l2cap +38fa 6fe147c8 fetch 2 ,mem_module_hci_nofiy_addr +38fb 1fe20600 copy pdata ,contru +38fc 1a227200 copy rega ,loopcnt +38fd 20405f39 call uart_copy_rx_bytes_fast +38fe 18627e00 copy contru ,pdata +38ff 67e147c8 store 2 ,mem_module_hci_nofiy_addr +3900 6fe0c7c5 fetch 1 ,mem_module_hci_notify_len +3901 247a0000 nrtn blank +3902 20203bb5 branch module_set_le_tx_data_flag + +module_hci_cmd_transmit_le_notify_malloc_l2cap: +3903 684947c6 fetcht 2 ,mem_module_hci_notify_handle +3904 6fe0c7ca fetch 1 ,mem_module_hci_notify_type +3905 c2829ebc bbit1 bit_characteristic_indicate ,le_att_malloc_tx_indication +3906 c2821eb3 bbit1 bit_characteristic_notify ,le_att_malloc_tx_notify +3907 20600000 rtn + +module_get_le_remote_mtu: +3908 d8400017 arg 0x17 ,temp +3909 6fe147c3 fetch 2 ,mem_module_flag +390a c3808000 rtnbit1 module_flag_ble_send_mtu23 +390b 68494382 fetcht 2 ,mem_le_remote_mtu +390c 20600000 rtn + +module_check_ble_encrypt_state: +390d 6fe147c3 fetch 2 ,mem_module_flag +390e c2811e8d bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +390f 20207e56 branch disable_user + +module_hci_cmd_inquire_status: +3910 20203afb branch module_hci_event_status_res + +module_hci_cmd_set_pairing_mode: +3911 efe08003 ifetch 1 ,contru +3912 c040b91e beq br_pairing_mode_secure_connect_justwork ,module_hci_pairing_just_work_sc +3913 c0413920 beq br_pairing_mode_secure_connect_passkey ,module_hci_pairing_passkey_sc +3914 c041b922 beq br_pairing_mode_secure_connect_numeric ,module_hci_pairing_numeric_comparison_sc +3915 1fe22200 copy pdata ,rega +3916 20406ebb call sp_br_secure_connection_disable +3917 20407544 call sc_reset +3918 1a227e00 copy rega ,pdata +3919 c0003924 beq br_pairing_mode_pincode ,module_hci_pairing_pincode_mode +391a c000b927 beq br_pairing_mode_justwork ,module_hci_pairing_just_work_mode +391b c0013931 beq br_pairing_mode_passkey ,module_hci_pairing_passkey +391c c001b933 beq br_pairing_mode_numeric ,module_hci_pairing_numeric_comparison +391d 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_hci_pairing_just_work_sc: +391e 20406eb7 call sp_br_secure_connection_enable +391f 20203927 branch module_hci_pairing_just_work_mode + +module_hci_pairing_passkey_sc: +3920 20406eb7 call sp_br_secure_connection_enable +3921 20203931 branch module_hci_pairing_passkey + +module_hci_pairing_numeric_comparison_sc: +3922 20406eb7 call sp_br_secure_connection_enable +3923 20203933 branch module_hci_pairing_numeric_comparison + +module_hci_pairing_pincode_mode: +3924 20406ec2 call sp_reset +3925 70476400 jam 0 ,mem_ssp_enable +3926 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_pairing_just_work_mode: +3927 58000003 setarg io_capability_no_input_no_output + +module_hci_sspairing_mode: +3928 67e0c76c store 1 ,mem_ssp_mode_flag +3929 67e0c765 store 1 ,mem_lmp_io_cap_payload_iocap +392a 58000000 setarg oob_data_present_not_present +392b 67e0c766 store 1 ,mem_lmp_io_cap_payload_oob_auth_data +392c 58000004 setarg auth_req_mitm_protection_not_required_general_bonding +392d 67e0c767 store 1 ,mem_lmp_io_cap_payload_auth_req +392e 204057ae call ssp_enable +392f 70476401 jam 1 ,mem_ssp_enable +3930 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_pairing_passkey: +3931 58000002 setarg io_capability_keyboard_only +3932 20203928 branch module_hci_sspairing_mode + +module_hci_pairing_numeric_comparison: +3933 58000001 setarg io_capability_display_yesno +3934 20203928 branch module_hci_sspairing_mode + +module_hci_cmd_set_pincode: +3935 dfe00010 arg 16 ,pdata +3936 d8a04793 arg mem_pin_length ,contw +3937 20203a10 branch module_hci_cmd_receive_store_mem + +module_hci_cmd_set_uart_control_mode: +3938 efe08003 ifetch 1 ,contru +3939 6848c7c3 fetcht 1 ,mem_module_flag +393a 7d3a0400 nsetflag blank ,module_flag_uart_flow_control ,temp +393b 6048c7c3 storet 1 ,mem_module_flag +393c 68588060 fetcht 1 ,core_uart_ctrl +393d 7d3a0404 nsetflag blank ,bit_uart_control_flow_control ,temp +393e 60588060 storet 1 ,core_uart_ctrl +393f 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_uart_baud: +3940 6f2089d0 fetchr loopcnt ,1 ,mem_module_uart_len +3941 20407db8 call string2dec_from_uart +3942 20405ecc call uart_calc_baud_rate_config +3943 67e147bc store uart_baud_len ,mem_module_uarta_baud_rate +3944 20403ac9 call module_hci_event_receive_valid_cmd +3945 20407e07 call wait_uarttx +3946 6fe147bc fetch uart_baud_len ,mem_module_uarta_baud_rate +3947 20205ec4 branch uarta_init_baud_rate + +module_hci_cmd_version_request: +3948 da200002 arg 2 ,rega +3949 da4047a4 arg mem_soft_version_num ,regb +394a d8400000 arg 0 ,temp +394b 20203ad4 branch module_hci_event_set_cmd + +module_hci_cmd_bt_disconnect: +394c 6fe1478c fetch 2 ,mem_ui_state_map +394d c3003ac6 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd + +module_hci_cmd_bt_disconnect_doing: +394e 20403ac9 call module_hci_event_receive_valid_cmd +394f 202031f6 branch app_bt_disconnect + +module_hci_cmd_ble_disconnect: +3950 6fe1478c fetch 2 ,mem_ui_state_map +3951 c304bac6 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd + +module_hci_cmd_ble_disconnect_doing: +3952 20403ac9 call module_hci_event_receive_valid_cmd +3953 2020320f branch app_ble_disconnect + +module_hci_cmd_set_cod: +3954 6fe089d0 fetch 1 ,mem_module_uart_len +3955 c081bac6 bne 3 ,module_hci_event_receive_invalid_cmd +3956 efe18003 ifetch 3 ,contru +3957 67e1c0b2 store 3 ,mem_class +3958 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_nvram: +3959 6f2089d0 fetchr loopcnt ,1 ,mem_module_uart_len +395a 6fe14487 fetch 2 ,mem_nv_data_ptr +395b 1fe20a00 icopy contw +395c 20405f39 call uart_copy_rx_bytes_fast +395d 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_confirm_gkey: +395e 6fe1478c fetch 2 ,mem_ui_state_map +395f c284ba39 bbit1 ui_state_ble_connected ,module_hci_cmd_le_confirm_gkey +3960 c3003ac6 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +3961 efe08003 ifetch 1 ,contru +3962 6848c76b fetcht 1 ,mem_flag_mode_ssp_pin +3963 793a0400 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +3964 79200407 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +3965 6048c76b storet 1 ,mem_flag_mode_ssp_pin +3966 20403ac9 call module_hci_event_receive_valid_cmd +3967 6fe0c76b fetch 1 ,mem_flag_mode_ssp_pin +3968 c283396a bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +3969 20600000 rtn + +module_hci_cmd_spp_number_comparison_result_is1: +396a c2805686 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +396b 70476b00 jam 0 ,mem_flag_mode_ssp_pin +396c 70095b21 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +396d 2020787a branch ui_ipc_send_cmd + +module_hci_cmd_set_credit_given: +396e 6fe0c78c fetch 1 ,mem_ui_state_map +396f c4020000 rtnbit0 ui_state_bt_spp_conn +3970 6fe0c656 fetch 1 ,mem_rfcomm_credit_flag +3971 c1000000 rtneq credit_disable +3972 efe08003 ifetch 1 ,contru +3973 6848c654 fetcht 1 ,mem_credit_given +3974 98408400 iadd temp ,temp +3975 6048c654 storet 1 ,mem_credit_given +3976 20600000 rtn + +module_hci_cmd_auto_adv: +3977 df200040 arg 0x40 ,loopcnt +3978 d8a043e7 arg mem_le_adv_data_len ,contw +3979 20407d26 call clear_mem +397a 58000000 setarg 0 +397b 67e08974 store 1 ,mem_regb +397c 1a220600 copy rega ,contru + +module_hci_cmd_auto_adv_loop: +397d 18627e00 copy contru ,pdata +397e 67e10978 store 2 ,mem_regc +397f 204039a5 call module_hci_cmd_auto_adv_adv_analys +3980 6fe08974 fetch 1 ,mem_regb +3981 68488964 fetcht 1 ,mem_temp +3982 18408401 increase 1 ,temp +3983 9840fe00 iadd temp ,pdata +3984 67e08974 store 1 ,mem_regb +3985 1fe67c1f sub pdata ,31 ,null +3986 24213991 nbranch module_hci_cmd_auto_adv_store_scan ,positive + +module_hci_cmd_auto_adv_store_adv: +3987 6848c3e7 fetcht 1 ,mem_le_adv_data_len +3988 580043e8 setarg mem_le_adv_data +3989 9840fe00 iadd temp ,pdata +398a 67e1097d store 2 ,mem_contw +398b 68488964 fetcht 1 ,mem_temp +398c 18408401 increase 1 ,temp +398d 6fe0c3e7 fetch 1 ,mem_le_adv_data_len +398e 9840fe00 iadd temp ,pdata +398f 67e0c3e7 store 1 ,mem_le_adv_data_len +3990 2020399a branch module_hci_cmd_auto_adv_store_common + +module_hci_cmd_auto_adv_store_scan: +3991 6848c407 fetcht 1 ,mem_le_scan_data_len +3992 58004408 setarg mem_le_scan_data +3993 9840fe00 iadd temp ,pdata +3994 67e1097d store 2 ,mem_contw +3995 68488964 fetcht 1 ,mem_temp +3996 18408401 increase 1 ,temp +3997 6fe0c407 fetch 1 ,mem_le_scan_data_len +3998 9840fe00 iadd temp ,pdata +3999 67e0c407 store 1 ,mem_le_scan_data_len + +module_hci_cmd_auto_adv_store_common: +399a 6fe1097d fetch 2 ,mem_contw +399b 1fe20a00 copy pdata ,contw +399c 6fe10978 fetch 2 ,mem_regc +399d 1fe20600 copy pdata ,contru +399e 18427200 copy temp ,loopcnt +399f 20405f39 call uart_copy_rx_bytes_fast +39a0 6fe089d0 fetch 1 ,mem_module_uart_len +39a1 68488974 fetcht 1 ,mem_regb +39a2 98467c00 isub temp ,null +39a3 2422b97d nbranch module_hci_cmd_auto_adv_loop ,zero +39a4 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_auto_adv_adv_analys: +39a5 efe08003 ifetch 1 ,contru +39a6 67e08964 store 1 ,mem_temp +39a7 efe08003 ifetch 1 ,contru +39a8 67e08970 store 1 ,mem_rega +39a9 20600000 rtn + +module_hci_cmd_power_request: +39aa d8400000 arg 0 ,temp +39ab da200002 arg 2 ,rega +39ac 6fe147c0 fetch 2 ,mem_module_vdd_quotient +39ad 67e1098e store 2 ,mem_event_cmd_response_content +39ae da40098e arg mem_event_cmd_response_content ,regb +39af 20203ad4 branch module_hci_event_set_cmd + +module_hci_cmd_power_set: +39b0 6fe089d0 fetch 1 ,mem_module_uart_len +39b1 c080bac6 bne 1 ,module_hci_event_receive_invalid_cmd +39b2 efe08003 ifetch 1 ,contru +39b3 67e0c7be store 1 ,mem_module_read_vdd_flag +39b4 58000000 setarg 0x00 +39b5 67e147c0 store 2 ,mem_module_vdd_quotient +39b6 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_passkey_entry: +39b7 6fe089d0 fetch 1 ,mem_module_uart_len +39b8 c0823ac6 bne 4 ,module_hci_event_receive_invalid_cmd +39b9 6fe1478c fetch 2 ,mem_ui_state_map +39ba c284ba9e bbit1 ui_state_ble_connected ,module_hci_cmd_le_passkey_entry_input +39bb efe20003 ifetch 4 ,contru +39bc 67e24794 store 4 ,mem_pin +39bd 70479304 jam 4 ,mem_pin_length +39be 70476d00 jam 0 ,mem_authentication_passkey_times +39bf 20403ac9 call module_hci_event_receive_valid_cmd +39c0 20205606 branch authentication_passkey + +module_hci_cmd_set_gpio: +39c1 6fe089d0 fetch 1 ,mem_module_uart_len +39c2 c081bac6 bne 3 ,module_hci_event_receive_invalid_cmd +39c3 efe08003 ifetch 1 ,contru +39c4 c00039c7 beq hci_cmd_config_gpio_input ,module_set_gpio_input +39c5 c000b9cd beq hci_cmd_config_gpio_output ,module_set_gpio_output +39c6 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_set_gpio_input: +39c7 20403ac9 call module_hci_event_receive_valid_cmd +39c8 e8408003 ifetcht 1 ,contru +39c9 efe08003 ifetch 1 ,contru +39ca c001607f beq gpio_input_high_impedance ,gpio_set_high_impedance +39cb 7d3a0407 nsetflag blank ,7 ,temp +39cc 20206050 branch gpio_config_input + +module_set_gpio_output: +39cd 20403ac9 call module_hci_event_receive_valid_cmd +39ce e8408003 ifetcht 1 ,contru +39cf efe08003 ifetch 1 ,contru +39d0 203a6069 branch gpio_out_active ,blank +39d1 20206065 branch gpio_out_inactive + +module_hci_cmd_read_gpio: +39d2 6fe089d0 fetch 1 ,mem_module_uart_len +39d3 c080bac6 bne 1 ,module_hci_event_receive_invalid_cmd +39d4 e8408003 ifetcht 1 ,contru +39d5 20406059 call gpio_get_bit +39d6 58000000 setarg 0x0 +39d7 7d20fe00 nsetflag true ,0 ,pdata +39d8 da200001 arg 1 ,rega +39d9 67e1098e store 2 ,mem_event_cmd_response_content +39da da40098e arg mem_event_cmd_response_content ,regb +39db d8400000 arg 0 ,temp +39dc 20203ad4 branch module_hci_event_set_cmd + +module_hci_cmd_le_set_pairing_mode: +39dd efe08003 ifetch 1 ,contru +39de 1fe20400 copy pdata ,temp +39df c040b9ec beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +39e0 c04139f0 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +39e1 c041b9f5 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +39e2 c04239f9 beq le_pairing_mode_secure_connect_passkey_res_input ,module_le_set_pairing_mode_secure_passkey_res_input +39e3 67e0c39d store 1 ,mem_le_pairing_mode +39e4 20407544 call sc_reset +39e5 20401f88 call le_secure_connection_disable +39e6 6fe0c39d fetch 1 ,mem_le_pairing_mode +39e7 c00039fd beq le_pairing_mode_none ,module_le_set_no_pairing +39e8 c000ba00 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +39e9 c0013a02 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +39ea c0023a04 beq le_pairing_mode_lagacy_passkey_res_input ,module_le_set_pairing_mode_lagacy_passkey_res_input +39eb 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_le_set_pairing_mode_secure_justwork: +39ec 6048c39d storet 1 ,mem_le_pairing_mode +39ed 20401f84 call le_secure_connection_enable +39ee 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +39ef 202039fe branch module_le_set_noinputnooutput + +module_le_set_pairing_mode_secure_numeric: +39f0 6048c39d storet 1 ,mem_le_pairing_mode +39f1 20401f84 call le_secure_connection_enable +39f2 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +39f3 70435101 jam flag_iocap_displayyesno ,mem_le_pres_iocap +39f4 20203ac9 branch module_hci_event_receive_valid_cmd + +module_le_set_pairing_mode_secure_passkey: +39f5 6048c39d storet 1 ,mem_le_pairing_mode +39f6 20401f84 call le_secure_connection_enable +39f7 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +39f8 20203a08 branch module_le_set_displayonly + +module_le_set_pairing_mode_secure_passkey_res_input: +39f9 6048c39d storet 1 ,mem_le_pairing_mode +39fa 20401f84 call le_secure_connection_enable +39fb 7043530d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +39fc 20203a06 branch module_le_set_keboadonly + +module_le_set_no_pairing: +39fd 70435300 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth + +module_le_set_noinputnooutput: +39fe 70435103 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +39ff 20203ac9 branch module_hci_event_receive_valid_cmd + +module_le_set_pairing_mode_lagacy_just_work: +3a00 70435301 jam flag_le_bonding_no_mitm ,mem_le_pres_auth +3a01 202039fe branch module_le_set_noinputnooutput + +module_le_set_pairing_mode_lagacy_passkey: +3a02 70435305 jam flag_le_bonding_mitm ,mem_le_pres_auth +3a03 20203a08 branch module_le_set_displayonly + +module_le_set_pairing_mode_lagacy_passkey_res_input: +3a04 70435305 jam flag_le_bonding_mitm ,mem_le_pres_auth +3a05 20203a06 branch module_le_set_keboadonly + +module_le_set_keboadonly: +3a06 70435102 jam flag_iocap_keyboardonly ,mem_le_pres_iocap +3a07 20203ac9 branch module_hci_event_receive_valid_cmd + +module_le_set_displayonly: +3a08 70435100 jam flag_iocap_displayonly ,mem_le_pres_iocap +3a09 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_adv_data: +3a0a dfe0001f arg 31 ,pdata +3a0b d8a043e7 arg mem_le_adv_data_len ,contw +3a0c 20203a10 branch module_hci_cmd_receive_store_mem + +module_hci_cmd_le_set_scan_data: +3a0d dfe0001f arg 31 ,pdata +3a0e d8a04407 arg mem_le_scan_data_len ,contw +3a0f 20203a10 branch module_hci_cmd_receive_store_mem + +module_hci_cmd_receive_store_mem: +3a10 6f2089d0 fetchr loopcnt ,1 ,mem_module_uart_len +3a11 9f267c00 isub loopcnt ,null +3a12 24213ac6 nbranch module_hci_event_receive_invalid_cmd ,positive +3a13 e7208005 istorer loopcnt ,1 ,contw +3a14 20405f39 call uart_copy_rx_bytes_fast +3a15 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_send_conn_update_req: +3a16 6fe1478c fetch 2 ,mem_ui_state_map +3a17 c304bac6 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +3a18 6fe089d0 fetch 1 ,mem_module_uart_len +3a19 c0843ac6 bne 0x08 ,module_hci_event_receive_invalid_cmd +3a1a efe40003 ifetch 8 ,contru +3a1b 67e44372 store 8 ,mem_le_interval_min +3a1c 70095b12 jam bt_cmd_le_update_conn ,mem_fifo_temp +3a1d 2040787a call ui_ipc_send_cmd +3a1e 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_adv_parameter: +3a1f efe10003 ifetch 2 ,contru +3a20 67e14428 store 2 ,mem_le_adv_interval +3a21 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_start_pairing: +3a22 6fe0c39d fetch 1 ,mem_le_pairing_mode +3a23 203a3ac6 branch module_hci_event_receive_invalid_cmd ,blank +3a24 6fe0c39b fetch 1 ,mem_le_pairing_state +3a25 c0803ac6 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +3a26 6fe0c39c fetch 1 ,mem_le_enc_state +3a27 c0803ac6 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +3a28 20407927 call check_51cmd_le_smp_sec_req +3a29 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_wake_gpio: +3a2a 6fe089d0 fetch 1 ,mem_module_uart_len +3a2b c082bac6 bne 5 ,module_hci_event_receive_invalid_cmd +3a2c efe08003 ifetch 1 ,contru +3a2d 67e0c7ac store 1 ,mem_module_mcu_wake_pin +3a2e efe20003 ifetch 4 ,contru +3a2f 67e247ad store 4 ,mem_module_mcu_wake_delay_us +3a30 6848c7ac fetcht 1 ,mem_module_mcu_wake_pin +3a31 20406069 call gpio_config_output +3a32 20403b82 call module_set_mcu_wake_pin_low +3a33 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_tx_power: +3a34 6fe089d0 fetch 1 ,mem_module_uart_len +3a35 c080bac6 bne 0x01 ,module_hci_event_receive_invalid_cmd +3a36 efe08003 ifetch 1 ,contru +3a37 67e0c1e8 store 1 ,mem_tx_power +3a38 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey: +3a39 efe08003 ifetch 1 ,contru +3a3a c000ba42 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +3a3b 6fe0c399 fetch 1 ,mem_le_secure_connect_state +3a3c c001ba40 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +3a3d c0033a40 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +3a3e c003ba40 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +3a3f 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_le_confirm_gkey_ok: +3a40 70439a01 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +3a41 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey_fail: +3a42 20401fee call le_send_pairing_confirm_value_failed +3a43 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_reject_justwork_flag: +3a44 6fe089d0 fetch 1 ,mem_module_uart_len +3a45 c080bac6 bne 0x01 ,module_hci_event_receive_invalid_cmd +3a46 20403ac9 call module_hci_event_receive_valid_cmd +3a47 efe08003 ifetch 1 ,contru +3a48 203a57e2 branch classic_bt_clr_reject_justwork_flag ,blank +3a49 202057e0 branch classic_bt_set_reject_justwork_flag + +module_hci_cmd_reset_chip: +3a4a 20403ac9 call module_hci_event_receive_valid_cmd +3a4b 20407e07 call wait_uarttx +3a4c 70801001 jam 0x01 ,core_reset +3a4d 2020137c branch loop + +module_hci_cmd_le_set_fixed_passkey: +3a4e 6fe089d0 fetch 1 ,mem_module_uart_len +3a4f c0003ac6 beq 0 ,module_hci_event_receive_invalid_cmd +3a50 efe08003 ifetch 1 ,contru +3a51 203a3a5b branch module_hci_cmd_le_set_random_passkey ,blank +3a52 6fe089d0 fetch 1 ,mem_module_uart_len +3a53 c082bac6 bne 5 ,module_hci_event_receive_invalid_cmd +3a54 efe20003 ifetch 4 ,contru +3a55 d84f4240 arg 1000000 ,temp +3a56 98467c00 isub temp ,null +3a57 20213ac6 branch module_hci_event_receive_invalid_cmd ,positive +3a58 67e2439e store 4 ,mem_le_tk +3a59 20401b12 call le_set_config_fixed_tk +3a5a 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_random_passkey: +3a5b 20401b14 call le_clr_config_fixed_tk +3a5c 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_delete_customize_service: +3a5d e8410003 ifetcht 2 ,contru +3a5e 20401a65 call le_att_get_handle_ptr2 +3a5f 18c08bfe add contr ,-2 ,contw +3a60 58000000 setarg 0x0000 +3a61 e7e10005 istore 2 ,contw +3a62 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_add_service_uuid: +3a63 20403a6c call module_hci_cmd_add_service_uuid_set_uuid +3a64 20403a9a call uart_copy_rx_bytes_len_data +3a65 58000000 setarg 0x0000 +3a66 e7e10005 istore 2 ,contw +3a67 20203b5c branch module_hci_event_uuid_handle + +module_hci_cmd_add_characteristic_uuid: +3a68 efe08003 ifetch 1 ,contru +3a69 20403a70 call module_hci_cmd_add_characteristic_uuid_set_handle +3a6a 20403a77 call module_hci_cmd_add_characteristic_uuid_set_uuid +3a6b 20203b5c branch module_hci_event_uuid_handle + +module_hci_cmd_add_service_uuid_set_uuid: +3a6c 20403a97 call le_att_creat_new_handle +3a6d 58280002 setarg 0x280002 +3a6e e7e18005 istore 3 ,contw +3a6f 20600000 rtn + +module_hci_cmd_add_characteristic_uuid_set_handle: +3a70 67e0895c store 1 ,mem_pdatatemp +3a71 20403a97 call le_att_creat_new_handle +3a72 59280302 setarg 0x01280302 +3a73 e7e20005 istore 4 ,contw +3a74 6fe0895c fetch 1 ,mem_pdatatemp +3a75 e7e18005 istore 3 ,contw +3a76 20600000 rtn + +module_hci_cmd_add_characteristic_uuid_set_uuid: +3a77 20401a84 call le_att_get_last_handle +3a78 efe08003 ifetch 1 ,contru +3a79 1fe1721f and pdata ,0x1f ,loopcnt +3a7a 1fe22200 copy pdata ,rega +3a7b 2a2ffe07 isolate1 bit_of_write_authenticated ,rega +3a7c 7920840f setflag true ,bit_of_att_handle_write_authenticated ,temp +3a7d 2a2ffe06 isolate1 bit_of_read_authenticated ,rega +3a7e 7920840e setflag true ,bit_of_att_handle_read_authenticated ,temp +3a7f e0410005 istoret 2 ,contw +3a80 1f227e00 copy loopcnt ,pdata +3a81 e7e08005 istore 1 ,contw +3a82 20405f4d call uart_copy_rx_bytes +3a83 20403a9a call uart_copy_rx_bytes_len_data +3a84 58000000 setarg 0 +3a85 e7e10005 istore 2 ,contw +3a86 184104ff and temp ,0xff ,temp +3a87 184085ff increase -1 ,temp +3a88 20401a65 call le_att_get_handle_ptr2 +3a89 18c08c04 add contr ,4 ,contr +3a8a efe08006 ifetch 1 ,contr +3a8b c2823a8f bbit1 bit_characteristic_notify ,module_hci_cmd_add_characteristic_uuid_set_ccc_uuid +3a8c c282ba8f bbit1 bit_characteristic_indicate ,module_hci_cmd_add_characteristic_uuid_set_ccc_uuid +3a8d 18408401 increase 1 ,temp +3a8e 20600000 rtn + +module_hci_cmd_add_characteristic_uuid_set_ccc_uuid: +3a8f 20401a84 call le_att_get_last_handle +3a90 2a2ffe05 isolate1 bit_of_notify_authenticated ,rega +3a91 7920840f setflag true ,bit_of_att_handle_write_authenticated ,temp +3a92 e0410005 istoret 2 ,contw +3a93 5a290202 setarg 0x02290202 +3a94 e7e40005 istore 8 ,contw +3a95 184085ff increase -1 ,temp +3a96 20600000 rtn + +le_att_creat_new_handle: +3a97 20401a84 call le_att_get_last_handle +3a98 e0410005 istoret 2 ,contw +3a99 20600000 rtn + +uart_copy_rx_bytes_len_data: +3a9a efe08003 ifetch 1 ,contru +3a9b 1fe27200 copy pdata ,loopcnt +3a9c e7e08005 istore 1 ,contw +3a9d 20205f4d branch uart_copy_rx_bytes + +module_hci_cmd_le_passkey_entry_input: +3a9e 6fe0c39b fetch 1 ,mem_le_pairing_state +3a9f c082bac6 bne flag_le_pairing_receive_pairing_confirm ,module_hci_event_receive_invalid_cmd +3aa0 6fe0c39d fetch 1 ,mem_le_pairing_mode +3aa1 c0023aaa beq le_pairing_mode_lagacy_passkey_res_input ,module_hci_cmd_passkey_entry_res_input +3aa2 c0423aa4 beq le_pairing_mode_secure_connect_passkey_res_input ,module_hci_cmd_passkey_entry_sc_res_input +3aa3 20203ac6 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_passkey_entry_sc_res_input: +3aa4 70439802 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +3aa5 70439908 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +3aa6 20203aa7 branch module_hci_cmd_receive_ble_passkey + +module_hci_cmd_receive_ble_passkey: +3aa7 efe20003 ifetch 4 ,contru +3aa8 67e2439e store 4 ,mem_le_tk +3aa9 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_passkey_entry_res_input: +3aaa 20403aa7 call module_hci_cmd_receive_ble_passkey +3aab 20201fd7 branch le_send_smp_pairing_confirm + +module_hci_cmd_ble_set_phy: +3aac 6fe089d0 fetch 1 ,mem_module_uart_len +3aad c0813ac6 bne 2 ,module_hci_event_receive_invalid_cmd +3aae e8410003 ifetcht 2 ,contru +3aaf 20401b7c call le_set_phys +3ab0 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_ble_read_current_phy: +3ab1 d8400000 arg 0 ,temp +3ab2 da200002 arg 2 ,rega +3ab3 da404075 arg mem_context + coffset_le_rx_phy ,regb +3ab4 20203ad4 branch module_hci_event_set_cmd + +module_hci_cmd_ble_set_dle: +3ab5 6fe089d0 fetch 1 ,mem_module_uart_len +3ab6 c0843ac6 bne 8 ,module_hci_event_receive_invalid_cmd +3ab7 efe40003 ifetch 8 ,contru +3ab8 20401b7a call le_set_dle +3ab9 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_read_chip_data: +3aba ea208003 ifetchr rega ,1 ,contru +3abb ea410003 ifetchr regb ,2 ,contru +3abc d8400000 arg 0 ,temp +3abd 20203ad4 branch module_hci_event_set_cmd + +module_hci_cmd_write_chip_data: +3abe 6f2089d0 fetchr loopcnt ,1 ,mem_module_uart_len +3abf 1f20f3fe increase -2 ,loopcnt +3ac0 efe10003 ifetch 2 ,contru +3ac1 1fe20a00 copy pdata ,contw +3ac2 20405f39 call uart_copy_rx_bytes_fast +3ac3 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_cmd_close_lpm: +3ac4 70409900 jam 0 ,mem_lpm_mode +3ac5 20203ac9 branch module_hci_event_receive_valid_cmd + +module_hci_event_receive_invalid_cmd: +3ac6 d8400001 arg 1 ,temp +3ac7 da200000 arg 0 ,rega +3ac8 20203ad4 branch module_hci_event_set_cmd + +module_hci_event_receive_valid_cmd: +3ac9 d8400000 arg 0 ,temp +3aca da200000 arg 0 ,rega +3acb 20203ad4 branch module_hci_event_set_cmd + +module_hci_event_spp_connect: +3acc 7009cf00 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +3acd 20203af8 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_connect: +3ace 7009cf02 jam hci_event_le_conn_rep ,mem_module_uart_opcode +3acf 20203af8 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_spp_disconnect: +3ad0 7009cf03 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +3ad1 20203af8 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_disconnect: +3ad2 7009cf05 jam hci_event_le_dis_rep ,mem_module_uart_opcode +3ad3 20203af8 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_set_cmd: +3ad4 6fe089cf fetch 1 ,mem_module_uart_opcode +3ad5 1fe22600 copy pdata ,regc +3ad6 7009cf06 jam hci_event_cmd_res ,mem_module_uart_opcode +3ad7 58000002 setarg 2 +3ad8 9a20fe00 iadd rega ,pdata +3ad9 20403b6b call module_hci_prepare_tx +3ada 1a627e00 copy regc ,pdata +3adb e7e08003 istore 1 ,contwu +3adc e0408003 istoret 1 ,contwu +3add 1a227200 copy rega ,loopcnt +3ade 1a420c00 copy regb ,contr +3adf 20405f33 call uart_copy_tx_bytes +3ae0 20203b75 branch module_hci_transmit_tx + +module_hci_event_receive_spp_data: +3ae1 204037a8 call module_spp_clear_last_transmite_clock +3ae2 7009cf07 jam hci_event_spp_data_rep ,mem_module_uart_opcode +3ae3 6fe083d2 fetch 1 ,mem_current_length +3ae4 207a0000 rtn blank +3ae5 20403b6b call module_hci_prepare_tx +3ae6 6fe083d2 fetch 1 ,mem_current_length +3ae7 1fe27200 copy pdata ,loopcnt +3ae8 6fe103d4 fetch 2 ,mem_rfcomm_uih_payload_ptr +3ae9 1fe20c00 copy pdata ,contr +3aea 20405f1f call uart_copy_tx_bytes_fast +3aeb 20203b75 branch module_hci_transmit_tx + +module_hci_event_receive_le_data: +3aec 7009cf08 jam hci_event_le_data_rep ,mem_module_uart_opcode +3aed 1f20fe02 add loopcnt ,2 ,pdata +3aee 20403b6b call module_hci_prepare_tx +3aef 6fe109fa fetch 2 ,mem_module_le_rx_data_handle +3af0 e7e10003 istore 2 ,contwu +3af1 6fe109f8 fetch 2 ,mem_module_le_rx_data_address +3af2 1fe20c00 icopy contr +3af3 20405f1f call uart_copy_tx_bytes_fast +3af4 18c27e00 copy contr ,pdata +3af5 67e109f8 store 2 ,mem_module_le_rx_data_address +3af6 20203b75 branch module_hci_transmit_tx + +module_hci_event_enter_standby_mode: +3af7 7009cf09 jam hci_event_standby_rep ,mem_module_uart_opcode + +module_hci_event_enter_standby_mode_len0: +3af8 58000000 setarg 0 +3af9 20403b6b call module_hci_prepare_tx +3afa 20203b75 branch module_hci_transmit_tx + +module_hci_event_status_res: +3afb 7009cf0a jam hci_event_status_res ,mem_module_uart_opcode +3afc 58000001 setarg 1 +3afd 20403b6b call module_hci_prepare_tx +3afe 20403b0c call module_hci_read_bt_status +3aff 6fe1478c fetch 2 ,mem_ui_state_map +3b00 d8e00002 arg ui_state_bt_hid_conn ,queue +3b01 afefffff qisolate1 pdata +3b02 79208403 setflag true ,3 ,temp +3b03 d8e00009 arg ui_state_ble_connected ,queue +3b04 afefffff qisolate1 pdata +3b05 79208405 setflag true ,5 ,temp +3b06 6fe0c78c fetch 1 ,mem_ui_state_map +3b07 d8e00004 arg ui_state_bt_spp_conn ,queue +3b08 afefffff qisolate1 pdata +3b09 79208404 setflag true ,4 ,temp +3b0a e0408003 istoret 1 ,contwu +3b0b 20203b75 branch module_hci_transmit_tx + +module_hci_read_bt_status: +3b0c d8400000 arg 0 ,temp +3b0d 6fe0c09b fetch 1 ,mem_scan_mode +3b0e d8e00000 arg inq_scan_mode ,queue +3b0f afefffff qisolate1 pdata +3b10 79208400 setflag true ,0 ,temp +3b11 d8e00001 arg page_scan_mode ,queue +3b12 afefffff qisolate1 pdata +3b13 79208401 setflag true ,1 ,temp +3b14 6fe0c427 fetch 1 ,mem_le_adv_enable +3b15 d8e00000 arg 0 ,queue +3b16 afefffff qisolate1 pdata +3b17 79208402 setflag true ,2 ,temp +3b18 20600000 rtn + +module_hci_event_store_device: +3b19 7009cf0d jam hci_event_nvram_rep ,mem_module_uart_opcode +3b1a 6fe0c489 fetch 1 ,mem_nv_data_number +3b1b 1feffe22 mul32 pdata ,34 ,pdata +3b1c 1fe27200 icopy loopcnt +3b1d 20403b6b call module_hci_prepare_tx +3b1e 6fe14487 fetch 2 ,mem_nv_data_ptr +3b1f 1fe20c00 icopy contr +3b20 20405f1f call uart_copy_tx_bytes_fast +3b21 20203b75 branch module_hci_transmit_tx + +module_hci_event_gkey_generate: +3b22 7009cf0e jam hci_event_gkey ,mem_module_uart_opcode +3b23 58000004 setarg 4 +3b24 20403b6b call module_hci_prepare_tx +3b25 6fe2087c fetch 4 ,mem_gkey +3b26 e7e20003 istore 4 ,contwu +3b27 20203b75 branch module_hci_transmit_tx + +module_hci_event_invalid_packet: +3b28 7009cf0f jam hci_event_invalid_packet ,mem_module_uart_opcode +3b29 6ff10112 fetch 2 ,core_uart_rxitems +3b2a d8400040 arg 0x40 ,temp +3b2b 20407e4a call not_greater_than +3b2c 1fe22200 copy pdata ,rega +3b2d 1fe27200 copy pdata ,loopcnt +3b2e 20405ef7 call uarta_prepare_rx +3b2f d8a0098e arg mem_module_rx_error_data_buffer ,contw +3b30 20405f39 call uart_copy_rx_bytes_fast +3b31 1a227e00 copy rega ,pdata +3b32 1a227200 copy rega ,loopcnt +3b33 20403b6b call module_hci_prepare_tx +3b34 d8c0098e arg mem_module_rx_error_data_buffer ,contr +3b35 20405f1f call uart_copy_tx_bytes_fast +3b36 20203b75 branch module_hci_transmit_tx + +module_hci_event_passkey_entry_mode: +3b37 7009cf10 jam hci_event_get_passkey ,mem_module_uart_opcode +3b38 20203af8 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_tk: +3b39 7009cf11 jam hci_event_le_tk ,mem_module_uart_opcode +3b3a 58000004 setarg 4 +3b3b 20403b6b call module_hci_prepare_tx +3b3c 6fe2439e fetch 4 ,mem_le_tk +3b3d e7e20003 istore 4 ,contwu +3b3e 20203b75 branch module_hci_transmit_tx + +module_hci_event_le_pairing_fail: +3b3f da200180 arg flag_ble_pairing_fail ,rega +3b40 20203b46 branch module_hci_event_pairing_completed + +module_hci_event_le_pairing_success: +3b41 da200080 arg flag_ble_pairing_success ,rega +3b42 20203b46 branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_fail: +3b43 da200101 arg flag_bt_pairing_fail ,rega +3b44 20203b46 branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_success: +3b45 da200001 arg flag_bt_pairing_success ,rega + +module_hci_event_pairing_completed: +3b46 70476b00 jam 0 ,mem_flag_mode_ssp_pin +3b47 7009cf14 jam hci_event_le_pairing_state ,mem_module_uart_opcode +3b48 58000002 setarg 2 +3b49 20403b6b call module_hci_prepare_tx +3b4a 1a227e00 copy rega ,pdata +3b4b e7e10003 istore 2 ,contwu +3b4c 20203b75 branch module_hci_transmit_tx + +module_hci_event_pause_enc: +3b4d da600000 arg flag_event_pause_enc ,regc +3b4e 20203b50 branch module_hci_event_enc + +module_hci_event_start_enc: +3b4f da600001 arg flag_event_start_enc ,regc + +module_hci_event_enc: +3b50 7009cf15 jam hci_event_le_encryption_state ,mem_module_uart_opcode +3b51 58000001 setarg 1 +3b52 20403b6b call module_hci_prepare_tx +3b53 1a627e00 copy regc ,pdata +3b54 e7e08003 istore 1 ,contwu +3b55 20203b75 branch module_hci_transmit_tx + +module_hci_event_le_gkey: +3b56 7009cf1d jam hci_event_le_gkey ,mem_module_uart_opcode +3b57 58000004 setarg 4 +3b58 20403b6b call module_hci_prepare_tx +3b59 6fe2087c fetch 4 ,mem_gkey +3b5a e7e20003 istore 4 ,contwu +3b5b 20203b75 branch module_hci_transmit_tx + +module_hci_event_uuid_handle: +3b5c 60490964 storet 2 ,mem_temp +3b5d 7009cf29 jam hci_event_uuid_handle ,mem_module_uart_opcode +3b5e 58000002 setarg 2 +3b5f 20403b6b call module_hci_prepare_tx +3b60 68490964 fetcht 2 ,mem_temp +3b61 e0410003 istoret 2 ,contwu +3b62 20203b75 branch module_hci_transmit_tx + +module_hci_event_le_input_passkey: +3b63 7009cf2b jam hci_event_le_input_gkey ,mem_module_uart_opcode +3b64 20203af8 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_update_phy: +3b65 7009cf40 jam hci_ble_update_phy_event ,mem_module_uart_opcode +3b66 58000002 setarg 2 +3b67 20403b6b call module_hci_prepare_tx +3b68 6fe14075 fetch 2 ,mem_context + coffset_le_rx_phy +3b69 e7e10003 istore 2 ,contwu +3b6a 20203b75 branch module_hci_transmit_tx + +module_hci_prepare_tx: +3b6b 7009ce02 jam 0x02 ,mem_module_uart_cmd +3b6c 67e089d0 store 1 ,mem_module_uart_len +3b6d 604c0964 storet 8 ,mem_temp +3b6e 44e0c018 bpatch patch18_1 ,mem_patch18 +3b6f 20403b77 call module_set_mcu_wake_pin_high_delay +3b70 684c0964 fetcht 8 ,mem_temp +3b71 20405f0f call uarta_prepare_tx_register_push +3b72 6fe189ce fetch 3 ,mem_module_uart_cmd +3b73 e7e18003 istore 3 ,contwu +3b74 20600000 rtn + +module_hci_transmit_tx: +3b75 44e14018 bpatch patch18_2 ,mem_patch18 +3b76 20205f13 branch uarta_send_register_pop + +module_set_mcu_wake_pin_high_delay: +3b77 20403b80 call module_check_mcu_wake_pin_high +3b78 20608000 rtn true + +module_set_mcu_wake_pin_h_delay: +3b79 20403b7e call module_set_mcu_wake_pin_high +3b7a 6fe247ad fetch 4 ,mem_module_mcu_wake_delay_us +3b7b 1feb7e00 rshift2 pdata ,pdata +3b7c 207a0000 rtn blank +3b7d 20207d0e branch delay + +module_set_mcu_wake_pin_high: +3b7e 6848c7ac fetcht 1 ,mem_module_mcu_wake_pin +3b7f 20206069 branch gpio_out_active + +module_check_mcu_wake_pin_high: +3b80 6848c7ac fetcht 1 ,mem_module_mcu_wake_pin +3b81 20206074 branch gpio_check_active + +module_set_mcu_wake_pin_low: +3b82 6848c7ac fetcht 1 ,mem_module_mcu_wake_pin +3b83 20206065 branch gpio_out_inactive + +module_le_receive_data: +3b84 622109f8 storer rega ,2 ,mem_module_le_rx_data_address +3b85 624109f6 storer regb ,2 ,mem_module_le_rx_data_len +3b86 6fe14437 fetch 2 ,mem_le_att_handle +3b87 67e109fa store 2 ,mem_module_le_rx_data_handle +3b88 2040390d call module_check_ble_encrypt_state +3b89 20740000 rtn user + +module_le_receive_data_ok: +3b8a 684909f6 fetcht 2 ,mem_module_le_rx_data_len +3b8b 6fe0c7c2 fetch 1 ,mem_module_ble_data_uart_max_length +3b8c 20407e4a call not_greater_than +3b8d 1fe27200 copy pdata ,loopcnt +3b8e 18427e00 copy temp ,pdata +3b8f 9f267e00 isub loopcnt ,pdata +3b90 67e109f6 store 2 ,mem_module_le_rx_data_len +3b91 20403aec call module_hci_event_receive_le_data +3b92 6fe109f6 fetch 2 ,mem_module_le_rx_data_len +3b93 207a0000 rtn blank +3b94 20203b8a branch module_le_receive_data_ok + +module_exit_sniff: +3b95 6fe147c3 fetch 2 ,mem_module_flag +3b96 c3848000 rtnbit1 moudle_task_unsniff +3b97 20403bb1 call module_set_unsniff_task_flag +3b98 20203219 branch app_bt_sniff_exit + +module_set_lpm_mult_2: +3b99 70417702 jam 2 ,mem_lpm_mult +3b9a 20600000 rtn + +module_bb_event_timer: + +module_read_vdd_timer: +3b9b 6fe0c7be fetch 1 ,mem_module_read_vdd_flag +3b9c 207a0000 rtn blank +3b9d 6fe0c7bf fetch 1 ,mem_module_read_vdd_count +3b9e 207a0000 rtn blank +3b9f 1fe0ffff increase -1 ,pdata +3ba0 67e0c7bf store 1 ,mem_module_read_vdd_count +3ba1 247a0000 nrtn blank +3ba2 7047bf32 jam flag_module_read_vdd_count ,mem_module_read_vdd_count +3ba3 20406125 call vdd_calculate_by_mode +3ba4 1fe6fc64 div pdata ,0x64 +3ba5 20407dec call get_div_result +3ba6 18070400 remainder temp +3ba7 67e0c7c0 store 1 ,mem_module_vdd_quotient +3ba8 6048c7c1 storet 1 ,mem_module_vdd_remainder +3ba9 20600000 rtn + +module_control_air_flow: +3baa 20407e21 call check_uart_tx_buff +3bab 202131e6 branch app_l2cap_flow_control_enable ,positive +3bac 202031e8 branch app_l2cap_flow_control_disable + +module_set_sniff_task_flag: +3bad d8e0000a arg moudle_task_sniff ,queue +3bae 20203bbd branch module_set_state + +module_clear_sniff_task_flag: +3baf d8e0000a arg moudle_task_sniff ,queue +3bb0 20203bb9 branch module_clr_state + +module_set_unsniff_task_flag: +3bb1 d8e00009 arg moudle_task_unsniff ,queue +3bb2 20203bbd branch module_set_state + +module_clear_unsniff_task_flag: +3bb3 d8e00009 arg moudle_task_unsniff ,queue +3bb4 20203bb9 branch module_clr_state + +module_set_le_tx_data_flag: +3bb5 d8e00008 arg module_flag_ble_data_finish ,queue +3bb6 20203bbd branch module_set_state + +module_clear_le_tx_data_flag: +3bb7 d8e00008 arg module_flag_ble_data_finish ,queue +3bb8 20203bb9 branch module_clr_state + +module_clr_state: +3bb9 6fe147c3 fetch 2 ,mem_module_flag +3bba f93ffe00 qset0 pdata +3bbb 67e147c3 store 2 ,mem_module_flag +3bbc 20600000 rtn + +module_set_state: +3bbd 6fe147c3 fetch 2 ,mem_module_flag +3bbe f9207e00 qset1 pdata +3bbf 67e147c3 store 2 ,mem_module_flag +3bc0 20600000 rtn + +mouse_init: +3bc1 20403bf0 call mouse_setting_config +3bc2 204041a7 call mouse_init_sunt +3bc3 2040408e call mouse_dpi_config +3bc4 20758000 rtn wake +3bc5 20403d8a call mouse_usb_check_enable +3bc6 20404728 call mouse_drawing_optima_init +3bc7 20403bcf call mouse_cb_fuction +3bc8 2040423c call mouse_sensor_powerdown +3bc9 6fe0c92a fetch 1 ,mem_usb_addr +3bca c3838000 rtnbit1 7 + +mouse_init_wireless: +3bcb 6fe1478c fetch 2 ,mem_ui_state_map +3bcc c2864553 bbit1 ui_state_btn_down ,mouse_start_discovery +3bcd 204046a0 call mouse_check_select_device_by_switch +3bce 20203d52 branch mouse_start_work + +mouse_cb_fuction: +3bcf 58004866 setarg mouse_24g_package_data +3bd0 67e1489b store 2 ,mem_cb_24g_transmit_data +3bd1 5800488f setarg mouse_24g_search_dongle +3bd2 67e1489d store 2 ,mem_cb_24g_search_receiver +3bd3 58003e40 setarg mouse_lpm_before_common +3bd4 67e1489f store 2 ,mem_cb_24g_lpm_before +3bd5 5800439f setarg mouse_le +3bd6 67e14461 store 2 ,mem_cb_le_process +3bd7 58004457 setarg mouse_bt +3bd8 67e14463 store 2 ,mem_cb_bt_process +3bd9 58003e3b setarg mouse_process_lpm_before +3bda 67e1445f store 2 ,mem_cb_before_lpm +3bdb 58004334 setarg mouse_priority_bb_event +3bdc 67e14467 store 2 ,mem_cb_bb_event_process +3bdd 5800464b setarg mouse_idle +3bde 67e14465 store 2 ,mem_cb_idle_process +3bdf 58003e25 setarg mouse_before_hibernate +3be0 67e1445d store 2 ,mem_cb_before_hibernate +3be1 58004388 setarg mouse_le_bb_event_connect_complete +3be2 67e1446b store 2 ,mem_cb_att_write +3be3 580044b5 setarg mouse_bb_event_timer +3be4 67e1446f store 2 ,mem_cb_event_timer +3be5 58003f69 setarg mouse_spi_write_flash_cb +3be6 67e14473 store 2 ,mem_cb_spi_flash_write_complate +3be7 58003e13 setarg mouse_lpm_check_wake_lock +3be8 67e1445b store 2 ,mem_cb_check_wakelock +3be9 580049a8 setarg mouse_le_transmit +3bea 67e1446d store 2 ,mem_cb_ble_transmit +3beb 580049aa setarg mouse_bt_slave_match +3bec 67e14477 store 2 ,mem_cb_bt_slave_match +3bed 580049bd setarg mouse_set_lpm_mult +3bee 67e14471 store 2 ,mem_cb_bt_set_mult +3bef 20600000 rtn + +mouse_setting_config: +3bf0 20758000 rtn wake +3bf1 20402607 call g24_transmit_init +3bf2 204022ff call g24_chmap_param_init +3bf3 20403f1e call mouse_gpio_init +3bf4 20403d13 call mouse_param_init + +mouse_setting_config_next: +3bf5 20401b16 call le_set_config_fixed_ltk +3bf6 20401b3f call le_set_justwork +3bf7 20401b32 call le_set_fixed_ltk +3bf8 20401b1e call le_set_config_read_authentication +3bf9 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3bfa c289c635 bbit1 mouse_enable_eeprom ,mouse_load_eeprom_info_check +3bfb c28945f6 bbit1 mouse_enable_flash ,mouse_load_flash_info_check +3bfc 20600000 rtn + +mouse_xtal_init: +3bfd 7040c508 jam 0x08 ,mem_fcomp_div +3bfe 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3bff c3860000 rtnbit1 mouse_enable_16m +3c00 7040c518 jam 0x18 ,mem_fcomp_div +3c01 20600000 rtn + +mouse_default_init: +3c02 700b58ff jam 0xff ,mem_usb_offline_check_gpio +3c03 704790ff jam 0xff ,mem_ui_button_gpio +3c04 70478f1e jam 0x1e ,mem_ui_button_timeout +3c05 5800492d setarg mem_mouse_led_type +3c06 67e1448d store 2 ,mem_ui_led_struct_ptr +3c07 70448c01 jam 1 ,mem_ui_led_struct_num +3c08 58004ab5 setarg mem_mouse_rssi_signal_buf +3c09 67e14899 store 2 ,mem_rssi_signal_buf_ptr +3c0a 70483601 jam 1 ,mem_24g_data_type +3c0b 6fe148fe fetch 2 ,mem_mouse_discovery_timeout +3c0c 67e14791 store 2 ,mem_discovery_timeout +3c0d 6fe14900 fetch 2 ,mem_mouse_24g_pair_timeout_init +3c0e 67e14881 store 2 ,mem_24g_pair_timeout_init +3c0f 6fe0c903 fetch 1 ,mem_mouse_24g_reconn_timeout_init +3c10 67e14885 store 2 ,mem_24g_reconn_timeout_init +3c11 6fe2c905 fetch 5 ,mem_rssi_dis_min_24g_init +3c12 67e2c8cb store 5 ,mem_rssi_dis_min_24g +3c13 6fe0c904 fetch 1 ,mem_mouse_24g_pair_tx_power +3c14 67e0c87c store 1 ,mem_24g_pair_tx_power +3c15 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3c16 247a0000 nrtn blank +3c17 58020800 setarg 0x020800 +3c18 67e1cbab store 3 ,mem_mouse_flag +3c19 58800700 setarg 0x800700 +3c1a e7e18005 istore 3 ,contw +3c1b 58000300 setarg 0x0300 +3c1c e7e10005 istore 2 ,contw +3c1d 70409901 jam 1 ,mem_lpm_mode +3c1e 6fe0c90a fetch 1 ,mem_mouse_enable_flag +3c1f 2feffe00 isolate1 mouse_adc_enable ,pdata +3c20 2040c6e6 call mouse_adc_read_enable ,true +3c21 6fe0c90a fetch 1 ,mem_mouse_enable_flag +3c22 2feffe02 isolate1 mouse_24g_250hz_enable ,pdata +3c23 2040c6e8 call mouse_24g_set_250hz ,true +3c24 6fe0c90a fetch 1 ,mem_mouse_enable_flag +3c25 2feffe01 isolate1 mouse_search_dongle_enable ,pdata +3c26 2040c6ea call mouse_24g_search_dongle_enable ,true +3c27 6fe0c90a fetch 1 ,mem_mouse_enable_flag +3c28 2feffe03 isolate1 mouse_clk_16m_enable ,pdata +3c29 2040c6ec call mouse_16m_enable ,true +3c2a 6fe0c90a fetch 1 ,mem_mouse_enable_flag +3c2b 2feffe04 isolate1 mouse_dpi_4_level_enable ,pdata +3c2c 2040c6ee call mouse_dpi_4level_enable ,true +3c2d 6fe0c90a fetch 1 ,mem_mouse_enable_flag +3c2e 2feffe05 isolate1 mouse_keyboard_enable ,pdata +3c2f 2040c6f8 call mouse_customer_key_enable ,true +3c30 6fe0c866 fetch 1 ,mem_24g_ch_map_update +3c31 245a230e ncall g24_chamap_param_update ,blank +3c32 20403bfd call mouse_xtal_init +3c33 6fe0c90b fetch 1 ,mem_mouse_global_setup +3c34 1fe10407 and pdata ,0x07 ,temp +3c35 6048c4a1 storet 1 ,mem_adc_channel +3c36 1fe97e00 rshift3 pdata ,pdata +3c37 1fe10401 and pdata ,0x01 ,temp +3c38 6048c866 storet 1 ,mem_24g_ch_map_update +3c39 1fe37e00 rshift pdata ,pdata +3c3a 1fe10403 and pdata ,0x03 ,temp +3c3b 6048c8fd storet 1 ,mem_adc_config_flag_init +3c3c 1feb7e00 rshift2 pdata ,pdata +3c3d 1fe17e03 and pdata ,0x03 ,pdata +3c3e 204047d4 call mouse_24g_long_sleep_set +3c3f 6fe0c90c fetch 1 ,mem_mouse_global_setup1 +3c40 1fe10403 and pdata ,0x03 ,temp +3c41 6048c924 storet 1 ,mem_sensor_angle_default +3c42 1feb7e00 rshift2 pdata ,pdata +3c43 1fe10403 and pdata ,0x03 ,temp +3c44 6048c925 storet 1 ,mem_sensor_angle_switch +3c45 1feb7e00 rshift2 pdata ,pdata +3c46 1fe17e03 and pdata ,0x03 ,pdata +3c47 67e0c926 store 1 ,mem_config_sensor_dpi +3c48 67e0c992 store 1 ,mem_mouse_dpi +3c49 1feb7e00 rshift2 pdata ,pdata +3c4a 1fe17e03 and pdata ,0x03 ,pdata +3c4b 67e0cbb4 store 1 ,mem_device_number +3c4c 580b0c0a setarg 0x0b0c0a +3c4d 67e1c918 store 3 ,mem_lbutton_gpio +3c4e 58ffffff setarg 0xffffff +3c4f e7e18005 istore 3 ,contw +3c50 580607ff setarg 0x0607ff +3c51 e7e18005 istore 3 ,contw +3c52 58ffffff setarg 0xffffff +3c53 e7e18005 istore 3 ,contw + +mouse_default_init_next: +3c54 7048f70a jam 0x0a ,mem_adc_read_time_init +3c55 58000064 setarg 0x0064 +3c56 67e14bc8 store 2 ,mem_adc_low_volatage_led_blink_timer +3c57 20403e7b call mouse_adc_vol_init +3c58 58001770 setarg 0x1770 +3c59 67e14bbe store 2 ,mem_mouse_no_data_timeout +3c5a 704bc014 jam 0x14 ,mem_mouse_device_poweron_timer_count_init +3c5b 58000190 setarg 0x0190 +3c5c 67e14bc6 store 2 ,mem_mouse_low_v_led_blink_time +3c5d 67e14bc2 store 2 ,mem_mouse_dpi_led_blink_time +3c5e 580003e8 setarg 0x03e8 +3c5f 67e14bc4 store 2 ,mem_mouse_disconvey_led_blink_time +3c60 70487d07 jam 0x07 ,mem_rssi_buff_index +3c61 7048ca7d jam 125 ,mem_power_ctrl_pac_succ_cnt_init +3c62 7041e800 jam tx_power_0db ,mem_tx_power +3c63 70488c01 jam 0x01 ,mem_24g_fast_conn_enable +3c64 58000f0f setarg 0x0f0f +3c65 67e1488d store 2 ,mem_24g_fast_conn_addr +3c66 67e1488f store 2 ,mem_24g_fast_conn_addr + 2 +3c67 6fe140a8 fetch 2 ,mem_lap +3c68 67e140ac store 2 ,mem_lap + 4 +3c69 d8a0437a arg mem_le_lap ,contw +3c6a d8c040a8 arg mem_lap ,contr +3c6b df200006 arg 0x06 ,loopcnt +3c6c 20407e68 call reverse_byte +3c6d 704b8a20 jam 0x20 ,mem_lpm_mult_init +3c6e 70493934 jam 0x34 ,mem_device1_type +3c6f 6fe3437a fetch 6 ,mem_le_lap +3c70 67e34950 store 6 ,mem_device1_locall_addr +3c71 704bb302 jam 0x02 ,mem_mouse_bluetooth_type +3c72 7043e71f jam 0x1f ,mem_le_adv_data_len +3c73 58050102 setarg 0x050102 +3c74 67e1c3e8 store 3 ,mem_le_adv_data +3c75 58120303 setarg 0x120303 +3c76 e7e18005 istore 3 ,contw +3c77 58190318 setarg 0x190318 +3c78 e7e18005 istore 3 ,contw +3c79 580003c2 setarg 0x03c2 +3c7a e7e10005 istore 2 ,contw +3c7b 5806ff06 setarg 0x06ff06 +3c7c 67e1cad2 store 3 ,mem_le_adv_swift_pair +3c7d 58000300 setarg 0x000300 +3c7e e7e18005 istore 3 ,contw +3c7f 58090c80 setarg 0x090c80 +3c80 e7e18005 istore 3 ,contw +3c81 58355442 setarg 0x355442 +3c82 e7e18005 istore 3 ,contw +3c83 5820322e setarg 0x20322e +3c84 e7e18005 istore 3 ,contw +3c85 58756f4d setarg 0x756f4d +3c86 e7e18005 istore 3 ,contw +3c87 58006573 setarg 0x6573 +3c88 e7e10005 istore 2 ,contw +3c89 7044071f jam 0x1f ,mem_le_scan_data_len +3c8a d8c04ad9 arg mem_le_adv_swift_pair + 7 ,contr +3c8b d8a04408 arg mem_le_scan_data ,contw +3c8c df20000d arg 13 ,loopcnt +3c8d 20407d5f call memcpy +3c8e 6fe0c408 fetch 1 ,mem_le_scan_data +3c8f 1fe0ffff increase -1 ,pdata +3c90 67e0c2f7 store 1 ,mem_le_name_len +3c91 d8c0440a arg mem_le_scan_data + 2 ,contr +3c92 d8a042f8 arg mem_le_name_len + 1 ,contw +3c93 df20000b arg 11 ,loopcnt +3c94 20407d5f call memcpy +3c95 58070007 setarg 0x070007 +3c96 67e1c372 store 3 ,mem_le_interval_min +3c97 58002000 setarg 0x002000 +3c98 e7e18005 istore 3 ,contw +3c99 5800012c setarg 0x012c +3c9a e7e10005 istore 2 ,contw +3c9b 58181203 setarg 0x181203 +3c9c 67e1cacc store 3 ,mem_le_adv_ind +3c9d 580000ff setarg 0x0000ff +3c9e 67e1cacf store 3 ,mem_le_adv_direct_ind +3c9f 380000fb setsect 0 ,0xfb +3ca0 3806c212 setsect 1 ,0x2c212 +3ca1 3808800f setsect 2 ,0x800f +3ca2 380c0021 setsect 3 ,0x21 +3ca3 67e4444c store 8 ,mem_local_rx_max_octets +3ca4 70443207 jam 0x07 ,mem_le_adv_channel_map +3ca5 58000015 setarg 0x0015 +3ca6 67e14ae7 store 2 ,mem_le_keyboard_handle +3ca7 58000019 setarg 0x0019 +3ca8 67e14357 store 2 ,mem_le_notify_handle +3ca9 5800001d setarg 0x001d +3caa 67e14ae9 store 2 ,mem_le_multimedia_handle +3cab 58000021 setarg 0x0021 +3cac 67e14aeb store 2 ,mem_le_systemctrl_handle +3cad 58000030 setarg 0x0030 +3cae 67e14aed store 2 ,mem_le_battery_level_handle +3caf 58000022 setarg 0x0022 +3cb0 67e143d1 store 2 ,mem_le_pairing_handle +3cb1 704af096 jam 0x96 ,mem_le_battery_level_updata_timer_init +3cb2 70493800 jam mode_24g_device ,mem_device_flag +3cb3 20402322 call g24_enable_1m +3cb4 20402325 call g24_pair_param_init +3cb5 58604800 setarg 0x604800 +3cb6 67e1c85c store 3 ,mem_24g_enter_hibernate +3cb7 5800012c setarg 0x012c +3cb8 67e148c2 store 2 ,mem_24g_long_sleep_param_update_timer_init +3cb9 58000050 setarg 0x0050 +3cba 67e148c0 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +3cbb 58000005 setarg 0x05 +3cbc 67e14bba store 2 ,mem_mouse_24g_power_on_fast_conn_timer +3cbd 58000708 setarg 0x0708 +3cbe 67e14bbc store 2 ,mem_mouse_24g_search_dongle_time_init +3cbf 58010403 setarg 0x010403 +3cc0 67e1c9d0 store 3 ,mem_mouse_dpi_seting +3cc1 582a2002 setarg 0x2a2002 +3cc2 e7e18005 istore 3 ,contw +3cc3 5822153f setarg 0x22153f +3cc4 e7e18005 istore 3 ,contw +3cc5 58114433 setarg 0x114433 +3cc6 e7e18005 istore 3 ,contw +3cc7 58265a09 setarg 0x265a09 +3cc8 67e1c9df store 3 ,mem_sensor_3212_init +3cc9 58041934 setarg 0x041934 +3cca e7e18005 istore 3 ,contw +3ccb 58000009 setarg 0x0009 +3ccc e7e10005 istore 2 ,contw +3ccd 5800ffff setarg 0xffff +3cce e7e10005 istore 2 ,contw +3ccf 580d5a09 setarg 0x0d5a09 +3cd0 67e1c9f3 store 3 ,mem_sensor_3205_init +3cd1 58ed1d10 setarg 0xed1d10 +3cd2 e7e18005 istore 3 ,contw +3cd3 5800807d setarg 0x807d +3cd4 e7e10005 istore 2 ,contw +3cd5 5800ffff setarg 0xffff +3cd6 e7e10005 istore 2 ,contw +3cd7 58ff5a09 setarg 0xff5a09 +3cd8 67e1ca39 store 3 ,mem_sensor_8650_init +3cd9 5840ab27 setarg 0x40ab27 +3cda e7e18005 istore 3 ,contw +3cdb 58a0d1be setarg 0xa0d1be +3cdc e7e18005 istore 3 ,contw +3cdd 5812a141 setarg 0x12a141 +3cde e7e18005 istore 3 ,contw +3cdf 58a784a5 setarg 0xa784a5 +3ce0 e7e18005 istore 3 ,contw +3ce1 58d0b5ff setarg 0xd0b5ff +3ce2 e7e18005 istore 3 ,contw +3ce3 58ff00b6 setarg 0xff00b6 +3ce4 e7e18005 istore 3 ,contw +3ce5 58000900 setarg 0x000900 +3ce6 e7e18005 istore 3 ,contw +3ce7 5800ffff setarg 0xffff +3ce8 e7e10005 istore 2 ,contw +3ce9 580d5a09 setarg 0x0d5a09 +3cea 67e1ca53 store 3 ,mem_sensor_ka8ul_init +3ceb 58c50e10 setarg 0xc50e10 +3cec e7e18005 istore 3 ,contw +3ced 58109a5b setarg 0x109a5b +3cee e7e18005 istore 3 ,contw +3cef 58421138 setarg 0x421138 +3cf0 e7e18005 istore 3 ,contw +3cf1 58412828 setarg 0x412828 +3cf2 e7e18005 istore 3 ,contw +3cf3 58394923 setarg 0x394923 +3cf4 e7e18005 istore 3 ,contw +3cf5 584bb04a setarg 0x4bb04a +3cf6 e7e18005 istore 3 ,contw +3cf7 58904ca0 setarg 0x904ca0 +3cf8 e7e18005 istore 3 ,contw +3cf9 5809704d setarg 0x09704d +3cfa e7e18005 istore 3 ,contw +3cfb 58ffff00 setarg 0xffff00 +3cfc e7e18005 istore 3 ,contw +3cfd 5846a509 setarg 0x46a509 +3cfe 67e1ca81 store 3 ,mem_sensor_ka8g2_init +3cff 58101934 setarg 0x101934 +3d00 e7e18005 istore 3 ,contw +3d01 58690760 setarg 0x690760 +3d02 e7e18005 istore 3 ,contw +3d03 58207d04 setarg 0x207d04 +3d04 e7e18005 istore 3 ,contw +3d05 5809007e setarg 0x09007e +3d06 e7e18005 istore 3 ,contw +3d07 58220d00 setarg 0x220d00 +3d08 e7e18005 istore 3 ,contw +3d09 58ff220e setarg 0xff220e +3d0a e7e18005 istore 3 ,contw +3d0b 704a96ff jam 0xff ,mem_sensor_ka8g2_init + 21 +3d0c 580b5a09 setarg 0x0b5a09 +3d0d 67e1caa3 store 3 ,mem_sensor_poweron_init +3d0e 580009f3 setarg 0x0009f3 +3d0f e7e18005 istore 3 ,contw +3d10 5800ffff setarg 0xffff +3d11 e7e10005 istore 2 ,contw +3d12 20203100 branch app_sys_param_init + +mouse_param_init: +3d13 58009468 setarg mouse_bt_sdp_addr +3d14 67e14660 store 2 ,mem_ui_uuid_table +3d15 58009732 setarg mouse_ble_att_list_addr +3d16 67e14396 store 2 ,mem_ui_le_uuid_table +3d17 58002580 setarg 0x2580 +3d18 67e1c0b2 store 3 ,mem_class +3d19 70417803 jam 3 ,mem_lpm_mult_timeout +3d1a 70415b08 jam 8 ,mem_lpm_overhead +3d1b 704b9e00 jam dpi_button_state_up ,mem_select_device_button_statue +3d1c 704b9e00 jam pb_button_state_up ,mem_select_device_button_statue +3d1d 704b9f00 jam commbination_key_state_up ,mem_commbination_key_statue +3d1e 58000200 setarg 0x0200 +3d1f 67e14159 store 2 ,mem_lpm_interval +3d20 70438017 jam 0x17 ,mem_le_local_mtu +3d21 70438217 jam 0x17 ,mem_le_remote_mtu +3d22 58000a77 setarg 0x0a77 +3d23 67e14484 store 2 ,mem_spi_init_clk +3d24 38000306 setsect 0 ,0x306 +3d25 38044440 setsect 1 ,0x4440 +3d26 38090000 setsect 2 ,0x10000 +3d27 380c4408 setsect 3 ,0x4408 +3d28 67e4c662 store 9 ,mem_all_uuid_16bits +3d29 38001224 setsect 0 ,0x1224 +3d2a 38044000 setsect 1 ,0x4000 +3d2b 38080000 setsect 2 ,0x0 +3d2c e7e28005 istore 5 ,contw +3d2d 3803ffff setsect 0 ,0x3ffff +3d2e 3806fe23 setsect 1 ,0x2fe23 +3d2f 380999d9 setsect 2 ,0x199d9 +3d30 380c020d setsect 3 ,0x20d +3d31 67e440a0 store 8 ,mem_features +3d32 58004af5 setarg mem_le_tx_buffer0_omemalloc +3d33 67e143de store 2 ,mem_ble_l2cap_tx_buff0_ptr +3d34 58000010 setarg mouse_ble_l2cap_txbuff_size +3d35 67e143e0 store 2 ,mem_ble_l2cap_tx_buff_size_ptr +3d36 2040490e call mouse_device_led_all_off +3d37 204048c6 call mouse_device_poweron_timer_init +3d38 20403e8e call mouse_adc_gpio_mux_init +3d39 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d3a c30dbd3f bbit0 mouse_enable_bt_125hz ,mouse_param_init_intervl_end +3d3b 7044550c jam classic_interval_7_5ms ,mem_sniff_param_interval +3d3c 58000006 setarg le_interval_7_5ms +3d3d 67e14372 store 2 ,mem_le_interval_min +3d3e 67e14374 store 2 ,mem_le_interval_min + 2 + +mouse_param_init_intervl_end: +3d3f 20402613 call g24_interval_param_8ms +3d40 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d41 c30c3d43 bbit0 mouse_enable_24g_250hz ,mouse_24g_short_sleep_set_end +3d42 2040260b call g24_interval_param_4ms + +mouse_24g_short_sleep_set_end: +3d43 6fe0c938 fetch 1 ,mem_device_flag +3d44 67e0cab4 store 1 ,mem_device_flag_temp +3d45 6fe1c37d fetch 3 ,mem_le_lap + 3 +3d46 67e1cac9 store 3 ,mem_mouse_le_lap_temp +3d47 6fe0c8fd fetch 1 ,mem_adc_config_flag_init +3d48 1fe17efe and pdata ,0xfe ,pdata +3d49 67e0c8fd store 1 ,mem_adc_config_flag_init +3d4a 67e0c4a0 store 1 ,mem_adc_config_flag +3d4b 58000000 setarg 0 +3d4c 67e3c8d0 store 7 ,mem_mouse_key +3d4d 6fe0c78f fetch 1 ,mem_ui_button_timeout +3d4e 67e0cb9b store 1 ,mem_bt_discovery_count +3d4f 67e0cb9c store 1 ,mem_select_device_count +3d50 20401aa9 call le_modified_name +3d51 202042a0 branch mouse_sensor_set_angle + +mouse_start_work: +3d52 44e1c018 bpatch patch18_3 ,mem_patch18 +3d53 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d54 c297c80a bbit1 mouse_enable_24g_first_auto_pairing ,mouse_24g_first_start_auto_pair_mode +3d55 6fe0c938 fetch 1 ,mem_device_flag +3d56 c00047f6 beq mode_24g_device ,mouse_24g_start_mode +3d57 20403d65 call mouse_wakeup_from_power_check +3d58 243442eb nbranch mouse_buletooth_fast_conn_init ,user + +mouse_start_reconnect_device: +3d59 44e24018 bpatch patch18_4 ,mem_patch18 +3d5a da204939 arg mem_device1_type ,rega +3d5b 6fe0c938 fetch 1 ,mem_device_flag +3d5c 1fe0ffff increase -1 ,pdata +3d5d 1feffe1d mul32 pdata ,29 ,pdata +3d5e 9a20a200 iadd rega ,rega +3d5f efe08011 ifetch 1 ,rega +3d60 67e0c482 store 1 ,mem_xrecord_mode + +mouse_start_reconnect: +3d61 6fe0c482 fetch 1 ,mem_xrecord_mode +3d62 c019bd6f beq rec_3_mode ,mouse3_0_check_reconn_target +3d63 c01a3d7b beq rec_4_mode ,mouse4_0_check_reconn_target +3d64 20204553 branch mouse_start_discovery + +mouse_wakeup_from_power_check: +3d65 44e2c018 bpatch patch18_5 ,mem_patch18 +3d66 78547c00 disable user +3d67 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d68 c305bd6c bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_from_power +3d69 6fe08989 fetch 1 ,mem_wakup_from_power_flag +3d6a c3013d6c bbit0 bit_power_on ,mouse_wakeup_from_power +3d6b 78347c00 enable user + +mouse_wakeup_from_power: +3d6c 6fe0cab1 fetch 1 ,mem_reconn_times_init +3d6d 67e0cab0 store 1 ,mem_reconn_times +3d6e 20600000 rtn + +mouse3_0_check_reconn_target: +3d6f 68494bb8 fetcht 2 ,mem_mouse_fast_page_to +3d70 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +3d71 c07fbd73 beq 0xff ,mouse3_0_check_reconn_target_next +3d72 68494bb5 fetcht 2 ,mem_mouse_page_to + +mouse3_0_check_reconn_target_next: +3d73 604940c1 storet 2 ,mem_page_to +3d74 6fe341dd fetch 6 ,mem_hci_plap +3d75 203a31f8 branch app_bt_start_discovery_short ,blank +3d76 70447d17 jam 0x17 ,mem_app_connection_options +3d77 6fe0c764 fetch 1 ,mem_ssp_enable +3d78 243a31ee nbranch app_bt_start_reconnect ,blank +3d79 70447d04 jam 0x04 ,mem_app_connection_options +3d7a 202031ee branch app_bt_start_reconnect + +mouse4_0_check_reconn_target: +3d7b 704ac701 jam 1 ,mem_mouse_le_reconnect_flag +3d7c 6848cbb7 fetcht 1 ,mem_mouse_fast_direct_timeout +3d7d 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +3d7e c07fbd80 beq 0xff ,mouse4_0_check_reconn_target_next +3d7f 6848c902 fetcht 1 ,mem_mouse_direct_timeout + +mouse4_0_check_reconn_target_next: +3d80 6048cb77 storet 1 ,mem_mouse_direct_timer +3d81 20403225 call app_lpm_mult_disable +3d82 6fe1cacf fetch 3 ,mem_le_adv_direct_ind +3d83 67e1c3ec store 3 ,mem_le_adv_data + 4 +3d84 204043e8 call mouse_le_check_adv_flag +3d85 58000004 setarg adv_flag_bredr_not_supported +3d86 e7e08006 istore 1 ,contr +3d87 d8c04408 arg mem_le_scan_data ,contr +3d88 204043ef call mouse_le_adv_data_update +3d89 202078ee branch check_51cmd_adv + +mouse_usb_check_enable: +3d8a 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d8b c4068000 rtnbit0 mouse_enable_usb +3d8c 58003d90 setarg mouse_usb_config_param +3d8d 67e10b45 store 2 ,mem_cb_usb_config +3d8e 70492ba5 jam mouse_usb_interface_remove ,mem_mouse_usb_vdd_status +3d8f 20203dc1 branch mouse_usb_interface_check + +mouse_usb_config_param: +3d90 20403d93 call mouse_usb_config_kb_check +3d91 20403d98 call mouse_usb_config_param_init +3d92 20203da8 branch mouse_usb_config_param_setup + +mouse_usb_config_kb_check: +3d93 70492c00 jam dongle_kb_bind_eeprom_offect ,mem_mouse_usb_keyboard_flag +3d94 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d95 c40a8000 rtnbit0 mouse_enable_keyboard +3d96 70492c5b jam dongle_kb_bind_success ,mem_mouse_usb_keyboard_flag +3d97 20600000 rtn + +mouse_usb_config_param_init: +3d98 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3d99 c28ebd9f bbit1 mouse_enable_usb_250 ,mouse_usb_report_rate_set_250hz +3d9a c28f3da2 bbit1 mouse_enable_usb_500 ,mouse_usb_report_rate_set_500hz +3d9b c28fbda5 bbit1 mouse_enable_usb_1000 ,mouse_usb_report_rate_set_1000hz +3d9c 70492919 jam 0x19 ,mem_wire_usb_interval +3d9d 700b4708 jam 0x08 ,mem_usb_tx_interval +3d9e 20600000 rtn + +mouse_usb_report_rate_set_250hz: +3d9f 7049290c jam 0x0c ,mem_wire_usb_interval +3da0 700b4704 jam 0x04 ,mem_usb_tx_interval +3da1 20600000 rtn + +mouse_usb_report_rate_set_500hz: +3da2 70492906 jam 0x06 ,mem_wire_usb_interval +3da3 700b4702 jam 0x02 ,mem_usb_tx_interval +3da4 20600000 rtn + +mouse_usb_report_rate_set_1000hz: +3da5 70492903 jam 0x03 ,mem_wire_usb_interval +3da6 700b4701 jam 0x01 ,mem_usb_tx_interval +3da7 20600000 rtn + +mouse_usb_config_param_setup: +3da8 204079f0 call usb_tx_interval_config +3da9 20403dab call mouse_usb_vid_pid_config +3daa 20203db0 branch mouse_usb_hid_icon_config + +mouse_usb_vid_pid_config: +3dab 6fe08b48 fetch 1 ,mem_usb_vid_pid +3dac 207a0000 rtn blank +3dad 6fe0c92c fetch 1 ,mem_mouse_usb_keyboard_flag +3dae c02db66c beq dongle_kb_bind_success ,dongle_usb_vid_pid_for_suit +3daf 20203669 branch dongle_usb_vid_pid_for_mouse_only_auto_pair + +mouse_usb_hid_icon_config: +3db0 6fe0c92c fetch 1 ,mem_mouse_usb_keyboard_flag +3db1 2020366f branch dongle_usb_hid_icon_config + 1 + +mouse_usb_check: +3db2 6ff08c02 fetch 1 ,core_usb_addr +3db3 c303bdb6 bbit0 7 ,mouse_usb_no_exsit +3db4 c283bdb9 bbit1 7 ,mouse_usb_exsit +3db5 20600000 rtn + +mouse_usb_no_exsit: +3db6 6fe0c92a fetch 1 ,mem_usb_addr +3db7 c4038000 rtnbit0 7 +3db8 20205d8c branch soft_reset_chip + +mouse_usb_exsit: +3db9 6fe0c92a fetch 1 ,mem_usb_addr +3dba c3838000 rtnbit1 7 +3dbb 204047f2 call mouse_24g_stop +3dbc 20204316 branch mouse_stop_bluetooth_mode + +mouse_usb_isr: +3dbd 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3dbe c4068000 rtnbit0 mouse_enable_usb +3dbf 20407991 call usb_isr +3dc0 20203dc1 branch mouse_usb_interface_check + +mouse_usb_interface_check: +3dc1 44e34018 bpatch patch18_6 ,mem_patch18 +3dc2 68488b58 fetcht 1 ,mem_usb_offline_check_gpio +3dc3 20406059 call gpio_get_bit +3dc4 2020bdc6 branch mouse_usb_gpio_low ,true +3dc5 20203dcd branch mouse_usb_gpio_high + +mouse_usb_gpio_low: +3dc6 6fe0c92b fetch 1 ,mem_mouse_usb_vdd_status +3dc7 c1528000 rtneq mouse_usb_interface_remove +3dc8 70492ba5 jam mouse_usb_interface_remove ,mem_mouse_usb_vdd_status +3dc9 700bfa00 jam 0 ,mem_usb_device_enumeration_endflag +3dca 7009f600 jam 0 ,mem_usb_status +3dcb 700bec00 jam 0 ,mem_usb_state +3dcc 20203bcb branch mouse_init_wireless + +mouse_usb_gpio_high: +3dcd 6fe0c92b fetch 1 ,mem_mouse_usb_vdd_status +3dce c12d0000 rtneq mouse_usb_interface_insert +3dcf 70492b5a jam mouse_usb_interface_insert ,mem_mouse_usb_vdd_status +3dd0 204047f2 call mouse_24g_stop +3dd1 20404316 call mouse_stop_bluetooth_mode +3dd2 2040490e call mouse_device_led_all_off +3dd3 2020799d branch usb_init + +mouse_usb_mode: +3dd4 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3dd5 c4068000 rtnbit0 mouse_enable_usb +3dd6 20403db2 call mouse_usb_check +3dd7 6ff08c02 fetch 1 ,core_usb_addr +3dd8 67e0c92a store 1 ,mem_usb_addr +3dd9 c4038000 rtnbit0 7 +3dda 20403e0b call mouse_clkn_check +3ddb 6fe24abd fetch 4 ,mem_btclk_sensor +3ddc 6848c929 fetcht 1 ,mem_wire_usb_interval +3ddd 98408400 iadd temp ,temp +3dde 1c427e00 copy clkn_bt ,pdata +3ddf 98467c00 isub temp ,null +3de0 24610000 nrtn positive +3de1 67e24abd store 4 ,mem_btclk_sensor +3de2 20403f70 call mouse_motion +3de3 24740000 nrtn user + +mouse_push_data_to_usb: +3de4 6ff08c02 fetch 1 ,core_usb_addr +3de5 c4038000 rtnbit0 7 +3de6 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3de7 c30abdea bbit0 mouse_enable_keyboard ,mouse_push_mouse_data_to_usb +3de8 6fe0cb8b fetch 1 ,mem_customer_key +3de9 c000bdf0 beq 1 ,mouse_push_keyboard_data_to_usb + +mouse_push_mouse_data_to_usb: +3dea 20403694 call dongle_usb_tx_ms_data +3deb 58000001 setarg ms_report_id +3dec 67e08bff store 1 ,mem_usb_mouse_data +3ded 6fe3c8d0 fetch 7 ,mem_mouse_key +3dee e7e38005 istore 7 ,contw +3def 20600000 rtn + +mouse_push_keyboard_data_to_usb: +3df0 6fe0cb8c fetch 1 ,mem_customer_data_trigger +3df1 203a3dfb branch mouse_push_release_keyboard_data_to_usb ,blank +3df2 6fe44bcd fetch 8 ,mem_customer_key_press + 1 + +mouse_push_keyboard_package_data_to_usb: +3df3 67e4095c store 8 ,mem_pdatatemp +3df4 6fe0cbcc fetch 1 ,mem_customer_key_press +3df5 c001bdfd beq kb_multikey_report_id ,mouse_push_multimedia_key_data_to_usb +3df6 c0013e04 beq kb_system_conctrl_report_id ,mouse_push_systemctrl_key_data_to_usb +3df7 204036a2 call dongle_usb_tx_kb_data +3df8 6fe4095c fetch 8 ,mem_pdatatemp +3df9 67e40c0f store 8 ,mem_usb_kb_data +3dfa 20600000 rtn + +mouse_push_release_keyboard_data_to_usb: +3dfb 6fe44bd6 fetch 8 ,mem_customer_key_release + 1 +3dfc 20203df3 branch mouse_push_keyboard_package_data_to_usb + +mouse_push_multimedia_key_data_to_usb: +3dfd 20403695 call dongle_usb_tx_enable_ep2 +3dfe 700bf821 jam usb_ep2_multikey ,mem_usb_ep2_data +3dff 58000003 setarg kb_multikey_report_id +3e00 67e08c1f store 1 ,mem_usb_kb_multikey +3e01 6fe1095c fetch 2 ,mem_pdatatemp +3e02 e7e10005 istore 2 ,contw +3e03 20600000 rtn + +mouse_push_systemctrl_key_data_to_usb: +3e04 20403695 call dongle_usb_tx_enable_ep2 +3e05 700bf822 jam usb_ep2_systemkey ,mem_usb_ep2_data +3e06 58000002 setarg kb_system_conctrl_report_id +3e07 67e08c2f store 1 ,mem_usb_kb_system +3e08 6fe0895c fetch 1 ,mem_pdatatemp +3e09 e7e08005 istore 1 ,contw +3e0a 20600000 rtn + +mouse_clkn_check: +3e0b 684a4abd fetcht 4 ,mem_btclk_sensor +3e0c 1c427e00 copy clkn_bt ,pdata +3e0d 98467c00 isub temp ,null +3e0e 24413e10 ncall mouse_clkn_timeout ,positive +3e0f 20600000 rtn + +mouse_clkn_timeout: +3e10 58000000 setarg 0 +3e11 67e24abd store 4 ,mem_btclk_sensor +3e12 20600000 rtn + +mouse_lpm_check_wake_lock: +3e13 c51331dd bmark1 mark_24g ,app_get_lpm_wake_lock +3e14 6fe0caac fetch 1 ,mem_mouse_clear_sensor_data_flag +3e15 203a31dd branch app_get_lpm_wake_lock ,blank +3e16 6fe0caf4 fetch 1 ,mem_mouse_le_conn_param_reject +3e17 c000b1dd beq le_lpm_disable ,app_get_lpm_wake_lock +3e18 6fe144d8 fetch 2 ,mem_sdp_remote_cid +3e19 243a31dd nbranch app_get_lpm_wake_lock ,blank +3e1a 6fe0c8e1 fetch 1 ,mem_mouse_wheel_trigger +3e1b 243a31dd nbranch app_get_lpm_wake_lock ,blank +3e1c 202031df branch app_put_lpm_wake_lock + +mouse_delay_enter_hibernata: +3e1d 6fe0c902 fetch 1 ,mem_mouse_direct_timeout +3e1e 67e0cac4 store 1 ,mem_mouse_bluetooth_reconnect_timeout +3e1f 20600000 rtn + +mouse_app_enter_hibernate: +3e20 44e3c018 bpatch patch18_7 ,mem_patch18 +3e21 20404232 call mouse_sensor_reset +3e22 2040423c call mouse_sensor_powerdown +3e23 20403e33 call mouse_setgpio_hibernate +3e24 20203217 branch app_enter_hibernate + +mouse_before_hibernate: +3e25 44e44019 bpatch patch19_0 ,mem_patch19 +3e26 78347c00 enable user +3e27 6ff20138 fetch 4 ,0x8138 +3e28 79347e1a setflag user ,26 ,pdata +3e29 67f2004c store 4 ,core_lpm_reg +3e2a 2040159a call lpm_write_ctrl +3e2b 20406df7 call disable_authrom +3e2c 2040490e call mouse_device_led_all_off +3e2d 20404015 call mouse_before_hibernate_wheel_gpio_set +3e2e 20403e33 call mouse_setgpio_hibernate +3e2f 2040462d call mouse_flash_power_down +3e30 2040609d call gpio_set_before_lpm_common +3e31 6848c911 fetcht 1 ,mem_sensor_motion_gpio +3e32 20206042 branch gpio_clr_wake + +mouse_setgpio_hibernate: +3e33 44e4c019 bpatch patch19_1 ,mem_patch19 +3e34 204042e9 call mouse_set_sdio_high +3e35 20407fdc call clear_wake +3e36 20403e40 call mouse_lpm_before_common +3e37 20406082 call gpio_pd_idle +3e38 d8400013 arg 19 ,temp +3e39 20403f56 call mouse_gpio_config_input_pu +3e3a 20203f58 branch mouse_gpio_set_high_impedance + +mouse_process_lpm_before: +3e3b c6130000 rtnmark1 mark_24g +3e3c 20403e40 call mouse_lpm_before_common +3e3d 6fe0809e fetch 1 ,mem_lpm_current_mult +3e3e 247a0000 nrtn blank +3e3f 20206042 branch gpio_clr_wake + +mouse_lpm_before_common: +3e40 44e54019 bpatch patch19_2 ,mem_patch19 +3e41 20403f88 call mouse_wheel_check +3e42 6848c91f fetcht 1 ,mem_mouse_sensor_sclk_gpio +3e43 20406069 call gpio_config_output + +mouse_lpm_before_common_next: +3e44 20405b04 call twspi_disable +3e45 6848c918 fetcht 1 ,mem_lbutton_gpio +3e46 20406036 call gpio_set_wake +3e47 6848c919 fetcht 1 ,mem_rbutton_gpio +3e48 20406036 call gpio_set_wake +3e49 6848c91a fetcht 1 ,mem_mbutton_gpio +3e4a 20406036 call gpio_set_wake +3e4b 6848c90d fetcht 1 ,mem_bk_button_gpio +3e4c 20406036 call gpio_set_wake +3e4d 6848c90e fetcht 1 ,mem_fw_button_gpio +3e4e 20406036 call gpio_set_wake +3e4f 6848c90f fetcht 1 ,mem_dpi_button_gpio +3e50 20406036 call gpio_set_wake +3e51 6848c91b fetcht 1 ,mem_config_select_device_button_gpio +3e52 20406036 call gpio_set_wake +3e53 6848c912 fetcht 1 ,mem_customer_key_gpio +3e54 20406036 call gpio_set_wake +3e55 6848c913 fetcht 1 ,mem_whee_a_data_gpio +3e56 20406032 call gpio_set_wake_by_current_state +3e57 6848c914 fetcht 1 ,mem_whee_b_data_gpio +3e58 20406032 call gpio_set_wake_by_current_state +3e59 6848c91c fetcht 1 ,mem_whee_ta_data_gpio +3e5a 20406032 call gpio_set_wake_by_current_state +3e5b 6848c91d fetcht 1 ,mem_whee_tb_data_gpio +3e5c 20406032 call gpio_set_wake_by_current_state +3e5d 6848c911 fetcht 1 ,mem_sensor_motion_gpio +3e5e 20206036 branch gpio_set_wake + +mouse_set_mult: +3e5f 6fe1478c fetch 2 ,mem_ui_state_map +3e60 c284be64 bbit1 ui_state_ble_connected ,mouse_set_ble_mult +3e61 6fe1478c fetch 2 ,mem_ui_state_map +3e62 c2803e67 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +3e63 20600000 rtn + +mouse_set_ble_mult: +3e64 1a227e00 copy rega ,pdata +3e65 243a1b26 nbranch le_set_config_short_mult ,blank +3e66 20201b28 branch le_clr_config_short_mult + +mouse_set_bt_mult: +3e67 1a227e00 copy rega ,pdata +3e68 243a1540 nbranch classic_bt_set_mult_short_flag ,blank +3e69 20201542 branch classic_bt_clr_mult_short_flag + +mouse_adc_gpio_set: +3e6a 6fe0c4a0 fetch 1 ,mem_adc_config_flag +3e6b c1810000 rtnne adc_config_gpio + +mouse_adc_gpio_check_output: +3e6c 44e5c019 bpatch patch19_3 ,mem_patch19 +3e6d 6848c4a1 fetcht 1 ,mem_adc_channel +3e6e 18467c03 sub temp ,3 ,null +3e6f 20213e78 branch mouse_adc_gpio_4_7_set ,positive +3e70 18408405 increase 5 ,temp +3e71 6048c8fc storet 1 ,mem_adc_channel_gpio + +mouse_adc_gpio_set_next: +3e72 18422200 copy temp ,rega +3e73 20406098 call gpio_get_config +3e74 c01fc954 beq gpcfg_output_high ,mouse_set_24g_led_statue +3e75 20404952 call mouse_clear_24g_led_statue +3e76 1a220400 copy rega ,temp +3e77 2020607f branch gpio_set_high_impedance + +mouse_adc_gpio_4_7_set: +3e78 18408404 increase 4 ,temp +3e79 6048c8fc storet 1 ,mem_adc_channel_gpio +3e7a 20203e72 branch mouse_adc_gpio_set_next + +mouse_adc_vol_init: +3e7b 6fe0c8fd fetch 1 ,mem_adc_config_flag_init +3e7c c0013e84 beq adc_config_gpio ,mouse_adc_gpio_vol_init +3e7d c0003e89 beq adc_config_vinlpm ,mouse_adc_gpio_vinlpm_init +3e7e 7048fd00 jam adc_config_vinlpm ,mem_adc_config_flag_init +3e7f 582c0172 setarg 0x2c0172 +3e80 67e1c8e3 store 3 ,mem_mouse_vdd_full_vol +3e81 58014001 setarg 0x014001 +3e82 e7e18005 istore 3 ,contw +3e83 20600000 rtn + +mouse_adc_gpio_vol_init: +3e84 585d0099 setarg 0x5d0099 +3e85 67e1c8e3 store 3 ,mem_mouse_vdd_full_vol +3e86 58007100 setarg 0x007100 +3e87 e7e18005 istore 3 ,contw +3e88 20600000 rtn + +mouse_adc_gpio_vinlpm_init: +3e89 58c8012c setarg 0xc8012c +3e8a 67e1c8e3 store 3 ,mem_mouse_vdd_full_vol +3e8b 5800dc00 setarg 0x00dc00 +3e8c e7e18005 istore 3 ,contw +3e8d 20600000 rtn + +mouse_adc_gpio_mux_init: +3e8e 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3e8f c40a0000 rtnbit0 mouse_enable_adc +3e90 7048f501 jam mouse_adc_check_multiple ,mem_adc_mux_status +3e91 c3970000 rtnbit1 mouse_enable_dpi_key_connect_adc +3e92 c3958000 rtnbit1 mouse_enable_select_device_by_switch_adc +3e93 7048f500 jam mouse_adc_check_battery_only ,mem_adc_mux_status +3e94 20600000 rtn + +mouse_adc_read_interval: +3e95 6fe0c8f6 fetch 1 ,mem_adc_read_timer +3e96 1fe0fe01 increase 1 ,pdata +3e97 67e0c8f6 store 1 ,mem_adc_read_timer +3e98 6848c8f7 fetcht 1 ,mem_adc_read_time_init +3e99 98467c00 isub temp ,null +3e9a 20600000 rtn + +mouse_adc_read: +3e9b 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3e9c c40a0000 rtnbit0 mouse_enable_adc +3e9d 20403e6a call mouse_adc_gpio_set +3e9e 6fe0c8f5 fetch 1 ,mem_adc_mux_status +3e9f 203a3eb2 branch mouse_adc_read_battery ,blank +3ea0 6fe0c4a0 fetch 1 ,mem_adc_config_flag +3ea1 c0013ea7 beq adc_config_gpio ,mouse_adc_read_gpio_mux_start +3ea2 7048f503 jam mouse_adc_check_vinlpm_multiple ,mem_adc_mux_status +3ea3 20403e95 call mouse_adc_read_interval +3ea4 20213ea9 branch mouse_adc_read_gpio ,positive +3ea5 20403eae call mouse_adc_read_vinlpm +3ea6 20203eb8 branch mouse_adc_read_start + +mouse_adc_read_gpio_mux_start: +3ea7 7048f502 jam mouse_adc_check_gpio_multiple ,mem_adc_mux_status +3ea8 20203eb8 branch mouse_adc_read_start + +mouse_adc_read_gpio: +3ea9 20403e6c call mouse_adc_gpio_check_output +3eaa 7044a002 jam adc_config_gpio ,mem_adc_config_flag +3eab 6fe0cbaa fetch 1 ,mem_24g_device_led_status +3eac 245a3eae ncall mouse_adc_read_vinlpm ,blank +3ead 20203eb8 branch mouse_adc_read_start + +mouse_adc_read_vinlpm: +3eae 7048f600 jam 0 ,mem_adc_read_timer +3eaf 6fe0c8fd fetch 1 ,mem_adc_config_flag_init +3eb0 67e0c4a0 store 1 ,mem_adc_config_flag +3eb1 20600000 rtn + +mouse_adc_read_battery: +3eb2 6fe0c4a0 fetch 1 ,mem_adc_config_flag +3eb3 c0813eb6 bne adc_config_gpio ,mouse_adc_read_battery_start +3eb4 6fe0cbaa fetch 1 ,mem_24g_device_led_status +3eb5 247a0000 nrtn blank + +mouse_adc_read_battery_start: +3eb6 20403e95 call mouse_adc_read_interval +3eb7 24610000 nrtn positive + +mouse_adc_read_start: +3eb8 44e64019 bpatch patch19_4 ,mem_patch19 +3eb9 6fe0cbaa fetch 1 ,mem_24g_device_led_status +3eba 247a0000 nrtn blank +3ebb 7048f600 jam 0 ,mem_adc_read_timer +3ebc 20406125 call vdd_calculate_by_mode +3ebd 67e148e9 store 2 ,mem_mouse_vdd_now_vol +3ebe 6fe0c4a0 fetch 1 ,mem_adc_config_flag +3ebf c0813ec6 bne adc_config_gpio ,mouse_adc_data_process +3ec0 684948e9 fetcht 2 ,mem_mouse_vdd_now_vol +3ec1 184ffe08 mul32 temp ,8 ,pdata +3ec2 1fe6fc0a div pdata ,10 +3ec3 20407dec call get_div_result +3ec4 9840fe00 iadd temp ,pdata +3ec5 67e148e9 store 2 ,mem_mouse_vdd_now_vol + +mouse_adc_data_process: +3ec6 da2048e3 arg mem_mouse_vdd_calculate_set ,rega +3ec7 20403ed8 call mouse_adc_bat_percent_lowpower_out +3ec8 6fe0c4a4 fetch 1 ,mem_adc_power_flag +3ec9 c2813f1a bbit1 2 ,mouse_adc_button_press +3eca c280bf1c bbit1 1 ,mouse_power_down +3ecb c3003ed0 bbit0 0 ,mouse_adc_no_low_voltage +3ecc 7048fa01 jam 1 ,mem_mouse_adc_last_low_voltage_flag +3ecd 20203ece branch mouse_adc_low_voltage + +mouse_adc_low_voltage: +3ece d8e00004 arg mouse_low_voltage_flag ,queue +3ecf 202046f0 branch mouse_enable_function_flag + +mouse_adc_no_low_voltage: +3ed0 d8e00004 arg mouse_low_voltage_flag ,queue +3ed1 204046f4 call mouse_disable_function_flag +3ed2 7048f80c jam 12 ,mem_adc_low_volatage_led_timer_count +3ed3 6fe0c8fa fetch 1 ,mem_mouse_adc_last_low_voltage_flag +3ed4 207a0000 rtn blank +3ed5 7048fa00 jam 0 ,mem_mouse_adc_last_low_voltage_flag +3ed6 6848c921 fetcht 1 ,mem_config_low_voltage_alarm_gpio +3ed7 2020492b branch mouse_led_off + +mouse_adc_bat_percent_lowpower_out: +3ed8 44e6c019 bpatch patch19_5 ,mem_patch19 +3ed9 efe40011 ifetch 8 ,rega +3eda 67e4095c store 8 ,mem_pdatatemp +3edb 6fe0c8f5 fetch 1 ,mem_adc_mux_status +3edc c0003ef0 beq mouse_adc_check_battery_only ,mouse_adc_bat_percent_lowpower_out_battery +3edd c0013edf beq mouse_adc_check_gpio_multiple ,mouse_adc_bat_percent_lowpower_out_gpio_multiple +3ede c001bf0f beq mouse_adc_check_vinlpm_multiple ,mouse_adc_bat_percent_lowpower_out_vinlpm_multiple + +mouse_adc_bat_percent_lowpower_out_gpio_multiple: +3edf 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3ee0 c3173ee5 bbit0 mouse_enable_dpi_key_connect_adc ,mouse_adc_bat_percent_lowpower_out_gpio_switch +3ee1 6fe10962 fetch 2 ,mem_pdatatemp + 6 +3ee2 684948eb fetcht 2 ,mem_mouse_vdd_button_press_vol +3ee3 98467c00 isub temp ,null +3ee4 24213f12 nbranch mouse_adc_set_button_press_flag ,positive + +mouse_adc_bat_percent_lowpower_out_gpio_switch: +3ee5 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +3ee6 c315bef0 bbit0 mouse_enable_select_device_by_switch_adc ,mouse_adc_bat_percent_lowpower_out_battery +3ee7 7048fb00 jam 0 ,mem_mouse_adc_button_press_flag +3ee8 6fe10962 fetch 2 ,mem_pdatatemp + 6 +3ee9 684948ed fetcht 2 ,mem_mouse_vdd_switch_gnd_24g_vol +3eea 98467c00 isub temp ,null +3eeb 24213eee nbranch mouse_select_24gdevice ,positive +3eec 204046a9 call mouse_select_btdevice +3eed 20203ef0 branch mouse_adc_bat_percent_lowpower_out_battery + +mouse_select_24gdevice: +3eee 204046ad call mouse_check_select_24gdevice +3eef 20203ef0 branch mouse_adc_bat_percent_lowpower_out_battery + +mouse_adc_bat_percent_lowpower_out_battery: +3ef0 20403f16 call mouse_adc_clear_button_press_flag +3ef1 2040616e call adc_clear_no_power_flag +3ef2 20406166 call adc_clear_low_power_flag +3ef3 6fe10962 fetch 2 ,mem_pdatatemp + 6 +3ef4 6849095e fetcht 2 ,mem_pdatatemp + 2 +3ef5 98467c00 isub temp ,null +3ef6 2441616a ncall adc_set_no_power_flag ,positive +3ef7 68490960 fetcht 2 ,mem_pdatatemp + 4 +3ef8 98467c00 isub temp ,null +3ef9 24416162 ncall adc_set_low_power_flag ,positive + +mouse_adc_bat_level_set: +3efa 6fe10962 fetch 2 ,mem_pdatatemp + 6 +3efb 6849095c fetcht 2 ,mem_pdatatemp +3efc 98467c00 isub temp ,null +3efd 20213f0b branch mouse_adc_bat_level_100_percent ,positive +3efe 6849095e fetcht 2 ,mem_pdatatemp + 2 +3eff 98467e00 isub temp ,pdata +3f00 24213f0d nbranch mouse_adc_bat_level_0_percent ,positive +3f01 203a3f0d branch mouse_adc_bat_level_0_percent ,blank +3f02 1fefa264 mul32 pdata ,100 ,rega +3f03 6fe1095c fetch 2 ,mem_pdatatemp +3f04 6849095e fetcht 2 ,mem_pdatatemp + 2 +3f05 98460400 isub temp ,temp +3f06 1a227e00 copy rega ,pdata +3f07 9846fc00 idiv temp +3f08 20407dec call get_div_result +3f09 67e0caef store 1 ,mem_le_battery_level_percentage +3f0a 20600000 rtn + +mouse_adc_bat_level_100_percent: +3f0b 704aef64 jam 100 ,mem_le_battery_level_percentage +3f0c 20600000 rtn + +mouse_adc_bat_level_0_percent: +3f0d 704aef00 jam 0 ,mem_le_battery_level_percentage +3f0e 20600000 rtn + +mouse_adc_bat_percent_lowpower_out_vinlpm_multiple: +3f0f 6fe0c4a0 fetch 1 ,mem_adc_config_flag +3f10 c0013edf beq adc_config_gpio ,mouse_adc_bat_percent_lowpower_out_gpio_multiple +3f11 20203ef0 branch mouse_adc_bat_percent_lowpower_out_battery + +mouse_adc_set_button_press_flag: +3f12 6848c4a4 fetcht 1 ,mem_adc_power_flag +3f13 79200402 set1 2 ,temp +3f14 6048c4a4 storet 1 ,mem_adc_power_flag +3f15 20600000 rtn + +mouse_adc_clear_button_press_flag: +3f16 6848c4a4 fetcht 1 ,mem_adc_power_flag +3f17 793f8402 set0 2 ,temp +3f18 6048c4a4 storet 1 ,mem_adc_power_flag +3f19 20600000 rtn + +mouse_adc_button_press: +3f1a 7048fb01 jam 1 ,mem_mouse_adc_button_press_flag +3f1b 20600000 rtn + +mouse_power_down: +3f1c 2040490e call mouse_device_led_all_off +3f1d 20203e20 branch mouse_app_enter_hibernate + +mouse_gpio_init: +3f1e 6848c4c1 fetcht 1 ,mem_eeprom_wp_gpio +3f1f 20406069 call gpio_config_output +3f20 204079b4 call usb_offline_check_init +3f21 6848c918 fetcht 1 ,mem_lbutton_gpio +3f22 20403f56 call mouse_gpio_config_input_pu +3f23 6848c919 fetcht 1 ,mem_rbutton_gpio +3f24 20403f56 call mouse_gpio_config_input_pu +3f25 6848c91a fetcht 1 ,mem_mbutton_gpio +3f26 20403f56 call mouse_gpio_config_input_pu +3f27 6848c90d fetcht 1 ,mem_bk_button_gpio +3f28 20403f56 call mouse_gpio_config_input_pu +3f29 6848c90e fetcht 1 ,mem_fw_button_gpio +3f2a 20403f56 call mouse_gpio_config_input_pu +3f2b 6848c90f fetcht 1 ,mem_dpi_button_gpio +3f2c 20403f56 call mouse_gpio_config_input_pu +3f2d 6848c910 fetcht 1 ,mem_matrix_public_gpio +3f2e 20403f56 call mouse_gpio_config_input_pu +3f2f 6848c91b fetcht 1 ,mem_config_select_device_button_gpio +3f30 20403f56 call mouse_gpio_config_input_pu +3f31 6848c912 fetcht 1 ,mem_customer_key_gpio +3f32 20403f56 call mouse_gpio_config_input_pu +3f33 6848c913 fetcht 1 ,mem_whee_a_data_gpio +3f34 20403f56 call mouse_gpio_config_input_pu +3f35 6848c914 fetcht 1 ,mem_whee_b_data_gpio +3f36 20403f56 call mouse_gpio_config_input_pu +3f37 6848c91c fetcht 1 ,mem_whee_ta_data_gpio +3f38 20403f56 call mouse_gpio_config_input_pu +3f39 6848c91d fetcht 1 ,mem_whee_tb_data_gpio +3f3a 20403f56 call mouse_gpio_config_input_pu +3f3b 6848c911 fetcht 1 ,mem_sensor_motion_gpio +3f3c 20403f56 call mouse_gpio_config_input_pu +3f3d 6848c91e fetcht 1 ,mem_device_switch_gpio +3f3e 20403f56 call mouse_gpio_config_input_pu +3f3f 6848caab fetcht 1 ,mem_sensor_reset_gpio +3f40 20406069 call gpio_config_output +3f41 6848c921 fetcht 1 ,mem_config_low_voltage_alarm_gpio +3f42 20406069 call gpio_config_output +3f43 6848c915 fetcht 1 ,mem_config_device_24g_led_gpio +3f44 20406069 call gpio_config_output +3f45 6848c916 fetcht 1 ,mem_config_device_bt1_led_gpio +3f46 20406069 call gpio_config_output +3f47 6848c922 fetcht 1 ,mem_config_device_bt2_led_gpio +3f48 20406069 call gpio_config_output +3f49 6848c923 fetcht 1 ,mem_dpi_led_gpio +3f4a 20406069 call gpio_config_output +3f4b 6848c917 fetcht 1 ,mem_select_sensor_angle_gpio +3f4c 20203f56 branch mouse_gpio_config_input_pu + +mouse_gpio_set_pupd_by_input: +3f4d 18467cff sub temp ,ui_button_gpio_disable ,null +3f4e 20628000 rtn zero +3f4f 18410e7f and temp ,0x7f ,queue +3f50 6ff2011c fetch 4 ,core_gpio_in +3f51 afefffff qisolate1 pdata +3f52 2020bf56 branch mouse_gpio_config_input_pu ,true +3f53 20203f54 branch mouse_gpio_config_input_pd + +mouse_gpio_config_input_pd: +3f54 79200407 set1 gpio_active_bit ,temp +3f55 20206050 branch gpio_config_input + +mouse_gpio_config_input_pu: +3f56 793f8407 set0 gpio_active_bit ,temp +3f57 20206050 branch gpio_config_input + +mouse_gpio_set_high_impedance: +3f58 6fe1cbde fetch 3 ,mem_mouse_set_high_impedance_bit_set +3f59 67e1895c store 3 ,mem_pdatatemp +3f5a df200014 arg 20 ,loopcnt +3f5b d8400000 arg 0 ,temp + +mouse_gpio_set_high_impedance_bit_loop: +3f5c 6fe1895c fetch 3 ,mem_pdatatemp +3f5d 2feffe00 isolate1 0 ,pdata +3f5e 2040e07f call gpio_set_high_impedance ,true +3f5f 6fe1895c fetch 3 ,mem_pdatatemp +3f60 1fe3fe00 lshift pdata ,pdata +3f61 67e1895c store 3 ,mem_pdatatemp +3f62 18408401 increase 1 ,temp +3f63 c2003f5c loop mouse_gpio_set_high_impedance_bit_loop +3f64 20600000 rtn + +mouse_sensor_spi_init: +3f65 20403f6a call mouse_spid_init_pin +3f66 70448473 jam 0x73 ,mem_spi_init_clk +3f67 20403f69 call mouse_spi_init +3f68 20205b08 branch twspi_enable + +mouse_spi_write_flash_cb: + +mouse_spi_init: +3f69 20205cb5 branch spid_init + +mouse_spid_init_pin: +3f6a 6fe0c91f fetch 1 ,mem_mouse_sensor_sclk_gpio +3f6b d8400021 arg gpcfg_spid_sck ,temp +3f6c 20406093 call gpio_config_function_int +3f6d 6fe0c920 fetch 1 ,mem_mouse_sensor_sdio_gpio +3f6e d8400023 arg gpcfg_spid_sdio ,temp +3f6f 20206093 branch gpio_config_function_int + +mouse_motion: +3f70 44e74019 bpatch patch19_6 ,mem_patch19 +3f71 78547c00 disable user +3f72 58000000 setarg 0 +3f73 67e348d1 store 6 ,mem_mouse_x +3f74 20404240 call mouse_check_sensor_data +3f75 20403f7e call mouse_zwheel +3f76 20403f83 call mouse_t_zwheel +3f77 204040dc call mouse_key +3f78 6fe0c8d0 fetch 1 ,mem_mouse_key +3f79 1fe17e1f and_into 0x1f ,pdata +3f7a 67e0c8d0 store 1 ,mem_mouse_key +3f7b 24344728 nbranch mouse_drawing_optima_init ,user +3f7c 2040471a call mouse_drawing_optima +3f7d 20204544 branch mouse_no_data_timer_init + +mouse_zwheel: +3f7e 6fe0c8e0 fetch 1 ,mem_mouse_z_data +3f7f 207a0000 rtn blank +3f80 67e0c8d5 store 1 ,mem_mouse_z +3f81 7048e000 jam 0 ,mem_mouse_z_data +3f82 20207e54 branch enable_user + +mouse_t_zwheel: +3f83 6fe0c8dc fetch 1 ,mem_mouse_tz_data +3f84 207a0000 rtn blank +3f85 67e0c8d6 store 1 ,mem_mouse_tz +3f86 7048dc00 jam 0 ,mem_mouse_tz_data +3f87 20207e54 branch enable_user + +mouse_wheel_check: +3f88 20403f95 call mouse_t_wheel_scan +3f89 20403fd1 call mouse_wheel_scan +3f8a 6fe0c8da fetch 1 ,mem_wheel_tb_new_pinlevel +3f8b 6848c8d9 fetcht 1 ,mem_wheel_tb_old_pinlevel +3f8c 67e0c8d9 store 1 ,mem_wheel_tb_old_pinlevel +3f8d 98467c00 isub temp ,null +3f8e 2422b1e1 nbranch app_lpm_wake_auto_lock ,zero +3f8f 6fe0c8de fetch 1 ,mem_mwheel_b_new_pinlevel +3f90 6848c8dd fetcht 1 ,mem_mwheel_b_old_pinlevel +3f91 67e0c8dd store 1 ,mem_mwheel_b_old_pinlevel +3f92 98467c00 isub temp ,null +3f93 2422b1e1 nbranch app_lpm_wake_auto_lock ,zero +3f94 20600000 rtn + +mouse_t_wheel_scan: +3f95 6fe0c91c fetch 1 ,mem_whee_ta_data_gpio +3f96 c17f8000 rtneq gpio_disable +3f97 da200000 arg 0 ,rega +3f98 6848c91c fetcht 1 ,mem_whee_ta_data_gpio +3f99 20406059 call gpio_get_bit +3f9a 7920a200 setflag true ,0 ,rega +3f9b 6848c91d fetcht 1 ,mem_whee_tb_data_gpio +3f9c 20406059 call gpio_get_bit +3f9d 7920a201 setflag true ,1 ,rega +3f9e 1a227e00 copy rega ,pdata +3f9f 67e0c8da store 1 ,mem_wheel_tb_new_pinlevel +3fa0 c000bfa5 beq 0x01 ,mouse_t_wheel_scan_judge1 +3fa1 c0013fa9 beq 0x02 ,mouse_t_wheel_scan_judge2 +3fa2 6fe0c8db fetch 1 ,mem_wheel_tog +3fa3 c283bfb5 bbit1 7 ,mouse_t_wheel_scan_judge3 +3fa4 20600000 rtn + +mouse_t_wheel_scan_judge1: +3fa5 6fe0c8d9 fetch 1 ,mem_wheel_tb_old_pinlevel +3fa6 c0003fad beq 0 ,mouse_t_wheel_scan_judge11 +3fa7 c001bfaf beq 3 ,mouse_t_wheel_scan_judge12 +3fa8 20600000 rtn + +mouse_t_wheel_scan_judge2: +3fa9 6fe0c8d9 fetch 1 ,mem_wheel_tb_old_pinlevel +3faa c0003fb1 beq 0 ,mouse_t_wheel_scan_judge21 +3fab c001bfb3 beq 3 ,mouse_t_wheel_scan_judge22 +3fac 20600000 rtn + +mouse_t_wheel_scan_judge11: +3fad 7048db82 jam 0x82 ,mem_wheel_tog +3fae 20600000 rtn + +mouse_t_wheel_scan_judge12: +3faf 7048db81 jam 0x81 ,mem_wheel_tog +3fb0 20600000 rtn + +mouse_t_wheel_scan_judge21: +3fb1 7048db80 jam 0x80 ,mem_wheel_tog +3fb2 20600000 rtn + +mouse_t_wheel_scan_judge22: +3fb3 7048db83 jam 0x83 ,mem_wheel_tog +3fb4 20600000 rtn + +mouse_t_wheel_scan_judge3: +3fb5 6fe0c8db fetch 1 ,mem_wheel_tog +3fb6 793ffe07 set0 7 ,pdata +3fb7 67e0c8db store 1 ,mem_wheel_tog +3fb8 c0003fbd beq 0 ,mouse_t_wheel_scan_judge30 +3fb9 c000bfc0 beq 1 ,mouse_t_wheel_scan_judge31 +3fba c0013fc3 beq 2 ,mouse_t_wheel_scan_judge32 +3fbb c001bfc6 beq 3 ,mouse_t_wheel_scan_judge33 +3fbc 20600000 rtn + +mouse_t_wheel_scan_judge30: +3fbd 6fe0c8da fetch 1 ,mem_wheel_tb_new_pinlevel +3fbe c001bfc9 beq 3 ,mouse_wheel_t_forward +3fbf 20600000 rtn + +mouse_t_wheel_scan_judge31: +3fc0 6fe0c8da fetch 1 ,mem_wheel_tb_new_pinlevel +3fc1 c0003fc9 beq 0 ,mouse_wheel_t_forward +3fc2 20600000 rtn + +mouse_t_wheel_scan_judge32: +3fc3 6fe0c8da fetch 1 ,mem_wheel_tb_new_pinlevel +3fc4 c001bfcd beq 3 ,mouse_wheel_t_back +3fc5 20600000 rtn + +mouse_t_wheel_scan_judge33: +3fc6 6fe0c8da fetch 1 ,mem_wheel_tb_new_pinlevel +3fc7 c0003fcd beq 0 ,mouse_wheel_t_back +3fc8 20600000 rtn + +mouse_wheel_t_forward: +3fc9 6fe0c8dc fetch 1 ,mem_mouse_tz_data +3fca 1fe0fe01 increase 1 ,pdata +3fcb 67e0c8dc store 1 ,mem_mouse_tz_data +3fcc 20600000 rtn + +mouse_wheel_t_back: +3fcd 6fe0c8dc fetch 1 ,mem_mouse_tz_data +3fce 1fe0ffff increase -1 ,pdata +3fcf 67e0c8dc store 1 ,mem_mouse_tz_data +3fd0 20600000 rtn + +mouse_wheel_scan: +3fd1 6fe0c913 fetch 1 ,mem_whee_a_data_gpio +3fd2 c17f8000 rtneq gpio_disable +3fd3 da200000 arg 0 ,rega +3fd4 6848c913 fetcht 1 ,mem_whee_a_data_gpio +3fd5 20406059 call gpio_get_bit +3fd6 7920a200 setflag true ,0 ,rega +3fd7 6848c914 fetcht 1 ,mem_whee_b_data_gpio +3fd8 20406059 call gpio_get_bit +3fd9 7920a201 setflag true ,1 ,rega +3fda 1a227e00 copy rega ,pdata +3fdb 67e0c8de store 1 ,mem_mwheel_b_new_pinlevel +3fdc c000bfe1 beq 0x01 ,mouse_wheel_scan_judge1 +3fdd c0013fe5 beq 0x02 ,mouse_wheel_scan_judge2 +3fde 6fe0c8df fetch 1 ,mem_mwheel_tog +3fdf c283bff1 bbit1 7 ,mouse_wheel_scan_judge3 +3fe0 20600000 rtn + +mouse_wheel_scan_judge1: +3fe1 6fe0c8dd fetch 1 ,mem_mwheel_b_old_pinlevel +3fe2 c0003fe9 beq 0 ,mouse_wheel_scan_judge11 +3fe3 c001bfeb beq 3 ,mouse_wheel_scan_judge12 +3fe4 20600000 rtn + +mouse_wheel_scan_judge2: +3fe5 6fe0c8dd fetch 1 ,mem_mwheel_b_old_pinlevel +3fe6 c0003fed beq 0 ,mouse_wheel_scan_judge21 +3fe7 c001bfef beq 3 ,mouse_wheel_scan_judge22 +3fe8 20600000 rtn + +mouse_wheel_scan_judge11: +3fe9 7048df82 jam 0x82 ,mem_mwheel_tog +3fea 20600000 rtn + +mouse_wheel_scan_judge12: +3feb 7048df81 jam 0x81 ,mem_mwheel_tog +3fec 20600000 rtn + +mouse_wheel_scan_judge21: +3fed 7048df80 jam 0x80 ,mem_mwheel_tog +3fee 20600000 rtn + +mouse_wheel_scan_judge22: +3fef 7048df83 jam 0x83 ,mem_mwheel_tog +3ff0 20600000 rtn + +mouse_wheel_scan_judge3: +3ff1 6fe0c8df fetch 1 ,mem_mwheel_tog +3ff2 793ffe07 set0 7 ,pdata +3ff3 67e0c8df store 1 ,mem_mwheel_tog +3ff4 c0003ff9 beq 0 ,mouse_wheel_scan_judge30 +3ff5 c000bffc beq 1 ,mouse_wheel_scan_judge31 +3ff6 c0013fff beq 2 ,mouse_wheel_scan_judge32 +3ff7 c001c002 beq 3 ,mouse_wheel_scan_judge33 +3ff8 20600000 rtn + +mouse_wheel_scan_judge30: +3ff9 6fe0c8de fetch 1 ,mem_mwheel_b_new_pinlevel +3ffa c001c005 beq 3 ,mouse_wheel_forward +3ffb 20600000 rtn + +mouse_wheel_scan_judge31: +3ffc 6fe0c8de fetch 1 ,mem_mwheel_b_new_pinlevel +3ffd c0004005 beq 0 ,mouse_wheel_forward +3ffe 20600000 rtn + +mouse_wheel_scan_judge32: +3fff 6fe0c8de fetch 1 ,mem_mwheel_b_new_pinlevel +4000 c001c009 beq 3 ,mouse_wheel_back +4001 20600000 rtn + +mouse_wheel_scan_judge33: +4002 6fe0c8de fetch 1 ,mem_mwheel_b_new_pinlevel +4003 c0004009 beq 0 ,mouse_wheel_back +4004 20600000 rtn + +mouse_wheel_forward: +4005 6fe0c8e0 fetch 1 ,mem_mouse_z_data +4006 1fe0fe01 increase 1 ,pdata +4007 67e0c8e0 store 1 ,mem_mouse_z_data +4008 20600000 rtn + +mouse_wheel_back: +4009 6fe0c8e0 fetch 1 ,mem_mouse_z_data +400a 1fe0ffff increase -1 ,pdata +400b 67e0c8e0 store 1 ,mem_mouse_z_data +400c 20600000 rtn + +mouse_wheel_gpio_set_wake: +400d 6848c913 fetcht 1 ,mem_whee_a_data_gpio +400e 20406032 call gpio_set_wake_by_current_state +400f 6848c914 fetcht 1 ,mem_whee_b_data_gpio +4010 20406032 call gpio_set_wake_by_current_state +4011 6848c91c fetcht 1 ,mem_whee_ta_data_gpio +4012 20406032 call gpio_set_wake_by_current_state +4013 6848c91d fetcht 1 ,mem_whee_tb_data_gpio +4014 20206032 branch gpio_set_wake_by_current_state + +mouse_before_hibernate_wheel_gpio_set: +4015 6848c913 fetcht 1 ,mem_whee_a_data_gpio +4016 20403f4d call mouse_gpio_set_pupd_by_input +4017 6848c914 fetcht 1 ,mem_whee_b_data_gpio +4018 20403f4d call mouse_gpio_set_pupd_by_input +4019 6848c91c fetcht 1 ,mem_whee_ta_data_gpio +401a 20403f4d call mouse_gpio_set_pupd_by_input +401b 6848c91d fetcht 1 ,mem_whee_tb_data_gpio +401c 20203f4d branch mouse_gpio_set_pupd_by_input + +mouse_wheel_trigger: +401d 6fe148d5 fetch 2 ,mem_mouse_z +401e 207a0000 rtn blank +401f 7048e101 jam 1 ,mem_mouse_wheel_trigger +4020 7048e20a jam 10 ,mem_mouse_wheel_trigger_timer +4021 20600000 rtn + +mouse_wheel_trigger_timer: +4022 da6048e2 arg mem_mouse_wheel_trigger_timer ,regc +4023 da404025 arg mouse_wheel_trigger_disable ,regb +4024 2020318a branch timer_single_step + +mouse_wheel_trigger_disable: +4025 7048e100 jam 0 ,mem_mouse_wheel_trigger +4026 20600000 rtn + +mouse_dpi_check: +4027 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4028 c2974036 bbit1 mouse_enable_dpi_key_connect_adc ,mouse_dpi_check_connect_adc +4029 6fe0c90f fetch 1 ,mem_dpi_button_gpio +402a c17f8000 rtneq gpio_disable +402b da200000 arg 0 ,rega +402c 704b9605 jam mouse_dpi_key ,mem_mouse_key_temp +402d 6848c90f fetcht 1 ,mem_dpi_button_gpio +402e 20404039 call mouse_dpi_key_check + +mouse_dpi_check_next: +402f 67e0cb93 store 1 ,mem_mouse_dpikey_press_status +4030 6fe0c910 fetch 1 ,mem_matrix_public_gpio +4031 c07fc042 beq gpio_disable ,mouse_3io6key_dpi_check_end +4032 20404168 call mouse_matrix_public_gpio_reset + +mouse_dpi_check_exit: +4033 1a227e00 copy rega ,pdata +4034 c282c052 bbit1 mouse_dpi_key ,mouse_dpi_down +4035 20204059 branch mouse_dpi_up + +mouse_dpi_check_connect_adc: +4036 6fe0c8fb fetch 1 ,mem_mouse_adc_button_press_flag +4037 203a4059 branch mouse_dpi_up ,blank +4038 20204052 branch mouse_dpi_down + +mouse_dpi_key_check: +4039 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +403a c2964048 bbit1 mouse_enable_dpi_key_connect_gnd ,mouse_dpi_key_connect_gnd +403b 6fe0cb93 fetch 1 ,mem_mouse_dpikey_press_status +403c 1fe22600 copy pdata ,regc +403d 6fe0c910 fetch 1 ,mem_matrix_public_gpio +403e c07fc195 beq gpio_disable ,mouse_3io6key_check + +mouse_dpi_key_check_next: +403f 6fe0cb9a fetch 1 ,mem_mouse_ghost_flag +4040 243a4045 nbranch mouse_dpi_check_end ,blank +4041 2020404a branch mouse_dpi_key_connect_matrix + +mouse_3io6key_dpi_check_end: +4042 6848c90f fetcht 1 ,mem_dpi_button_gpio +4043 20403f56 call mouse_gpio_config_input_pu +4044 20204033 branch mouse_dpi_check_exit + +mouse_dpi_check_end: +4045 7049dd00 jam dpi_button_state_up ,mem_mouse_dpi_button_state +4046 704b9300 jam 0 ,mem_mouse_dpikey_press_status +4047 20600000 rtn + +mouse_dpi_key_connect_gnd: +4048 6fe0cb93 fetch 1 ,mem_mouse_dpikey_press_status +4049 20204187 branch mouse_check_key_connect_gnd + +mouse_dpi_key_connect_matrix: +404a 20406059 call gpio_get_bit +404b 6848c910 fetcht 1 ,mem_matrix_public_gpio +404c 2020c048 branch mouse_dpi_key_connect_gnd ,true +404d 6848c910 fetcht 1 ,mem_matrix_public_gpio +404e 20406069 call gpio_out_active +404f 6848c90f fetcht 1 ,mem_dpi_button_gpio +4050 6fe0cb93 fetch 1 ,mem_mouse_dpikey_press_status +4051 20204187 branch mouse_check_key_connect_gnd + +mouse_dpi_down: +4052 6fe0c9dd fetch 1 ,mem_mouse_dpi_button_state +4053 c1008000 rtneq dpi_button_state_down +4054 7049dd01 jam dpi_button_state_down ,mem_mouse_dpi_button_state +4055 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4056 c3940000 rtnbit1 mouse_enable_select_device_by_dpi_button +4057 c39b0000 rtnbit1 mouse_enable_dpi_key_long_press_disconvery +4058 20204069 branch mouse_dpi_process + +mouse_dpi_up: +4059 6fe0c9dd fetch 1 ,mem_mouse_dpi_button_state +405a c1000000 rtneq dpi_button_state_up +405b 7049dd00 jam dpi_button_state_up ,mem_mouse_dpi_button_state +405c 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +405d c2944060 bbit1 mouse_enable_select_device_by_dpi_button ,mouse_dpi_up_next +405e c29b4060 bbit1 mouse_enable_dpi_key_long_press_disconvery ,mouse_dpi_up_next +405f 20600000 rtn + +mouse_dpi_up_next: +4060 6fe0c9de fetch 1 ,mem_mouse_dpi_long_press_flag +4061 243a4064 nbranch mouse_dpi_up_after_long_press ,blank +4062 6fe0cb9c fetch 1 ,mem_select_device_count +4063 245a4069 ncall mouse_dpi_process ,blank + +mouse_dpi_up_after_long_press: +4064 7049de00 jam 0 ,mem_mouse_dpi_long_press_flag +4065 6fe0c78f fetch 1 ,mem_ui_button_timeout +4066 67e0cb9c store 1 ,mem_select_device_count +4067 67e0cb9b store 1 ,mem_bt_discovery_count +4068 20600000 rtn + +mouse_dpi_process: +4069 44e7c019 bpatch patch19_7 ,mem_patch19 +406a 20404072 call mouse_dpi_ghost_check +406b 20740000 rtn user +406c 6fe0c992 fetch 1 ,mem_mouse_dpi +406d 1fe0fe01 increase 1 ,pdata +406e 1fe17e03 and pdata ,0x03 ,pdata +406f 67e0c992 store 1 ,mem_mouse_dpi +4070 20404095 call mouse_seting_dpi +4071 202045ee branch mouse_store_device_info_delay + +mouse_dpi_ghost_check: +4072 78547c00 disable user +4073 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4074 c3960000 rtnbit1 mouse_enable_dpi_key_connect_gnd +4075 c3970000 rtnbit1 mouse_enable_dpi_key_connect_adc +4076 6fe0cb8e fetch 1 ,mem_mouse_lkey_press_status +4077 207a0000 rtn blank +4078 6fe0cb8f fetch 1 ,mem_mouse_rkey_press_status +4079 207a0000 rtn blank +407a 78347c00 enable user +407b 20600000 rtn + +mouse_dpi_key_check_long_press: +407c 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +407d c2944080 bbit1 mouse_enable_select_device_by_dpi_button ,mouse_select_device_by_dpi_button +407e c29b4087 bbit1 mouse_enable_dpi_key_long_press_disconvery ,mouse_discovery_by_dpi_button +407f 20600000 rtn + +mouse_select_device_by_dpi_button: +4080 6fe0c9dd fetch 1 ,mem_mouse_dpi_button_state +4081 c1808000 rtnne dpi_button_state_down +4082 da604b9c arg mem_select_device_count ,regc +4083 da404085 arg mouse_ready_reconnection_by_dpi_button ,regb +4084 2020318a branch timer_single_step + +mouse_ready_reconnection_by_dpi_button: +4085 7049de01 jam 1 ,mem_mouse_dpi_long_press_flag +4086 202046b5 branch mouse_ready_reconnection_by_button + +mouse_discovery_by_dpi_button: +4087 6fe0c9dd fetch 1 ,mem_mouse_dpi_button_state +4088 c1808000 rtnne dpi_button_state_down +4089 da604b9b arg mem_bt_discovery_count ,regc +408a da40408c arg mouse_long_dpi_button_bt_discovery ,regb +408b 2020318a branch timer_single_step + +mouse_long_dpi_button_bt_discovery: +408c 7049de01 jam 1 ,mem_mouse_dpi_long_press_flag +408d 202044d4 branch mouse_long_button_bt_discovery + +mouse_dpi_config: +408e 20204098 branch mouse_seting_sensor_type + +mouse_setting_dpi_4_level: +408f 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4090 c38e0000 rtnbit1 mouse_enable_dpi_level_4 +4091 6fe0c992 fetch 1 ,mem_mouse_dpi +4092 c1818000 rtnne mouse_dpi_level4 +4093 70499200 jam mouse_dpi_level1 ,mem_mouse_dpi +4094 20600000 rtn + +mouse_seting_dpi: +4095 44e8401a bpatch patch1a_0 ,mem_patch1a +4096 2040408f call mouse_setting_dpi_4_level +4097 204048e1 call mouse_dpi_led_blink_delay + +mouse_seting_sensor_type: +4098 6fe0c927 fetch 1 ,mem_config_sensor_type +4099 c001c0bb beq p3212 ,mouse_seting_3212_dpi +409a c005c0cf beq ka8g2 ,mouse_seting_ka8g2_dpi +409b 6fe0c992 fetch 1 ,mem_mouse_dpi +409c c00040a2 beq mouse_dpi_level1 ,mouse_set_cpi0 +409d c000c0a0 beq mouse_dpi_level2 ,mouse_set_cpi1 +409e c00140a4 beq mouse_dpi_level3 ,mouse_set_cpi2 +409f c001c0a6 beq mouse_dpi_level4 ,mouse_set_cpi3 + +mouse_set_cpi1: +40a0 6848c9d1 fetcht 1 ,mem_320x_dpi_1 +40a1 202040a8 branch mouse_dpi_store + +mouse_set_cpi0: +40a2 6848c9d0 fetcht 1 ,mem_320x_dpi_0 +40a3 202040a8 branch mouse_dpi_store + +mouse_set_cpi2: +40a4 6848c9d2 fetcht 1 ,mem_320x_dpi_2 +40a5 202040a8 branch mouse_dpi_store + +mouse_set_cpi3: +40a6 6848c9d3 fetcht 1 ,mem_320x_dpi_3 +40a7 202040a8 branch mouse_dpi_store + +mouse_dpi_store: +40a8 6fe0c927 fetch 1 ,mem_config_sensor_type +40a9 c00240b7 beq p3065_xy ,mouse_3065xy_set_dpi +40aa c002c0b7 beq mx8650 ,mouse_3065xy_set_dpi +40ab c00440b9 beq ka8 ,mouse_ka8_set_dpi +40ac c003c0b9 beq p6520 ,mouse_ka8_set_dpi +40ad c00340b7 beq p8009 ,mouse_3065xy_set_dpi + +mouse_dpi_write: +40ae 6048c9dc storet 1 ,mem_mouse_cpi_count +40af 58000006 setarg mouse_dpi_address +40b0 20405b0d call twspi_read +40b1 1fe104f8 and pdata ,0xf8 ,temp +40b2 6fe0c9dc fetch 1 ,mem_mouse_cpi_count +40b3 9840fe00 iadd temp ,pdata +40b4 1fed7e00 lshift8 pdata ,pdata +40b5 1fe0fe06 add pdata ,mouse_dpi_address ,pdata +40b6 20205b0c branch twspi_write + +mouse_3065xy_set_dpi: +40b7 184085ff increase -1 ,temp +40b8 202040ae branch mouse_dpi_write + +mouse_ka8_set_dpi: +40b9 18408402 increase 2 ,temp +40ba 202040ae branch mouse_dpi_write + +mouse_seting_3212_dpi: +40bb 6fe0c992 fetch 1 ,mem_mouse_dpi +40bc c00040c2 beq mouse_dpi_level1 ,mouse_set_p3212_cpi0 +40bd c000c0c0 beq mouse_dpi_level2 ,mouse_set_p3212_cpi1 +40be c00140c4 beq mouse_dpi_level3 ,mouse_set_p3212_cpi2 +40bf c001c0c6 beq mouse_dpi_level4 ,mouse_set_p3212_cpi3 + +mouse_set_p3212_cpi1: +40c0 6fe0c9d5 fetch 1 ,mem_3212_dpi_1 +40c1 202040c7 branch mouse_p3212_dpi + +mouse_set_p3212_cpi0: +40c2 6fe0c9d4 fetch 1 ,mem_3212_dpi_0 +40c3 202040c7 branch mouse_p3212_dpi + +mouse_set_p3212_cpi2: +40c4 6fe0c9d6 fetch 1 ,mem_3212_dpi_2 +40c5 202040c7 branch mouse_p3212_dpi + +mouse_set_p3212_cpi3: +40c6 6fe0c9d7 fetch 1 ,mem_3212_dpi_3 + +mouse_p3212_dpi: +40c7 67e0c9dc store 1 ,mem_mouse_cpi_count +40c8 1fed7e00 lshift8 pdata ,pdata +40c9 1fe22200 copy pdata ,rega +40ca 1fe0fe0d add pdata ,mouse_p3212_dpi_xaddress ,pdata +40cb 20405b0c call twspi_write +40cc 1a227e00 copy rega ,pdata +40cd 1fe0fe0e add pdata ,mouse_p3212_dpi_yaddress ,pdata +40ce 20205b0c branch twspi_write + +mouse_seting_ka8g2_dpi: +40cf 6fe0c992 fetch 1 ,mem_mouse_dpi +40d0 c00040d6 beq mouse_dpi_level1 ,mouse_set_pka8g2_cpi0 +40d1 c000c0d4 beq mouse_dpi_level2 ,mouse_set_pka8g2_cpi1 +40d2 c00140d8 beq mouse_dpi_level3 ,mouse_set_pka8g2_cpi2 +40d3 c001c0da beq mouse_dpi_level4 ,mouse_set_pka8g2_cpi3 + +mouse_set_pka8g2_cpi1: +40d4 6fe0c9d9 fetch 1 ,mem_ka8g2_dpi_1 +40d5 202040c7 branch mouse_p3212_dpi + +mouse_set_pka8g2_cpi0: +40d6 6fe0c9d8 fetch 1 ,mem_ka8g2_dpi_0 +40d7 202040c7 branch mouse_p3212_dpi + +mouse_set_pka8g2_cpi2: +40d8 6fe0c9da fetch 1 ,mem_ka8g2_dpi_2 +40d9 202040c7 branch mouse_p3212_dpi + +mouse_set_pka8g2_cpi3: +40da 6fe0c9db fetch 1 ,mem_ka8g2_dpi_3 +40db 202040c7 branch mouse_p3212_dpi + +mouse_key: +40dc 20404115 call mouse_check_key_gpio +40dd 204040ed call mouse_ghost_key_check +40de 20403e5f call mouse_set_mult +40df 204040e8 call mouse_24g_key +40e0 1a227e00 copy rega ,pdata +40e1 6848c8d8 fetcht 1 ,mem_mouse_key_last +40e2 67e0c8d8 store 1 ,mem_mouse_key_last +40e3 67e0c8d0 store 1 ,mem_mouse_key +40e4 9842fe00 ixor temp ,pdata +40e5 1fe67c00 sub pdata ,0 ,null +40e6 20628000 rtn zero +40e7 20207e54 branch enable_user + +mouse_24g_key: +40e8 c6930000 rtnmark0 mark_24g +40e9 1a227e00 copy rega ,pdata +40ea 207a0000 rtn blank +40eb 67e0c8d0 store 1 ,mem_mouse_key +40ec 20207e54 branch enable_user + +mouse_ghost_key_check: +40ed 704b9800 jam 0 ,mem_mouse_matrix_key_cow_count +40ee 704b9900 jam 0 ,mem_mouse_matrix_key_row_count +40ef 704b9a00 jam 0 ,mem_mouse_ghost_flag +40f0 1fe20400 copy pdata ,temp +40f1 204040fd call mouse_ghost_key_check_l_bk +40f2 20404100 call mouse_ghost_key_check_m_fw +40f3 20404103 call mouse_ghost_key_check_bk_fw +40f4 20404106 call mouse_ghost_key_check_lmr +40f5 6fe0cb99 fetch 1 ,mem_mouse_matrix_key_row_count +40f6 207a0000 rtn blank +40f7 6fe0cb98 fetch 1 ,mem_mouse_matrix_key_cow_count +40f8 207a0000 rtn blank +40f9 704b9a01 jam 1 ,mem_mouse_ghost_flag +40fa 6fe0c8d8 fetch 1 ,mem_mouse_key_last +40fb 1fe22200 copy pdata ,rega +40fc 20600000 rtn + +mouse_ghost_key_check_l_bk: +40fd 18417e09 and temp ,mouse_l_bk_button ,pdata +40fe c004c10e beq mouse_l_bk_button ,mouse_matrix_cow_more_than_one_key +40ff 20600000 rtn + +mouse_ghost_key_check_m_fw: +4100 18417e14 and temp ,mouse_m_fw_button ,pdata +4101 c00a410e beq mouse_m_fw_button ,mouse_matrix_cow_more_than_one_key +4102 20600000 rtn + +mouse_ghost_key_check_bk_fw: +4103 18417e18 and temp ,mouse_bk_fw_button ,pdata +4104 c00c410c beq mouse_bk_fw_button ,mouse_matrix_row_more_than_one_key +4105 20600000 rtn + +mouse_ghost_key_check_lmr: +4106 18417e07 and temp ,mouse_lmr_button ,pdata +4107 c001c10c beq mouse_lr_button ,mouse_matrix_row_more_than_one_key +4108 c002c10c beq mouse_lm_button ,mouse_matrix_row_more_than_one_key +4109 c003410c beq mouse_rm_button ,mouse_matrix_row_more_than_one_key +410a c003c10c beq mouse_lmr_button ,mouse_matrix_row_more_than_one_key +410b 20600000 rtn + +mouse_matrix_row_more_than_one_key: +410c 704b9901 jam 1 ,mem_mouse_matrix_key_row_count +410d 20600000 rtn + +mouse_matrix_cow_more_than_one_key: +410e 704b9801 jam 1 ,mem_mouse_matrix_key_cow_count +410f 20600000 rtn + +mouse_key_check_once: +4110 20404121 call mouse_check_key_gpio_once +4111 20404115 call mouse_check_key_gpio +4112 58000000 setarg 0x00 +4113 67e1cb8e store 3 ,mem_mouse_lkey_press_status +4114 20600000 rtn + +mouse_check_key_gpio: +4115 44e8c01a bpatch patch1a_1 ,mem_patch1a +4116 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +4117 245a4121 ncall mouse_check_key_gpio_once ,blank +4118 da200000 arg 0 ,rega +4119 20404124 call mouse_check_lkey_gpio +411a 2040412a call mouse_check_rkey_gpio +411b 20404130 call mouse_check_mkey_gpio +411c 20404136 call mouse_check_bkkey_gpio +411d 2040414f call mouse_check_fwkey_gpio + +mouse_check_key_gpio_next: +411e 2040416a call mouse_check_customerkey_gpio +411f 1a227e00 copy rega ,pdata +4120 20600000 rtn + +mouse_check_key_gpio_once: +4121 58030303 setarg 0x030303 +4122 67e1cb8e store 3 ,mem_mouse_lkey_press_status +4123 20600000 rtn + +mouse_check_lkey_gpio: +4124 704b9600 jam mouse_l_key ,mem_mouse_key_temp +4125 6848c918 fetcht 1 ,mem_lbutton_gpio +4126 6fe0cb8e fetch 1 ,mem_mouse_lkey_press_status +4127 20404187 call mouse_check_key_connect_gnd +4128 67e0cb8e store 1 ,mem_mouse_lkey_press_status +4129 20600000 rtn + +mouse_check_rkey_gpio: +412a 704b9601 jam mouse_r_key ,mem_mouse_key_temp +412b 6848c919 fetcht 1 ,mem_rbutton_gpio +412c 6fe0cb8f fetch 1 ,mem_mouse_rkey_press_status +412d 20404187 call mouse_check_key_connect_gnd +412e 67e0cb8f store 1 ,mem_mouse_rkey_press_status +412f 20600000 rtn + +mouse_check_mkey_gpio: +4130 704b9602 jam mouse_m_key ,mem_mouse_key_temp +4131 6848c91a fetcht 1 ,mem_mbutton_gpio +4132 6fe0cb90 fetch 1 ,mem_mouse_mkey_press_status +4133 20404187 call mouse_check_key_connect_gnd +4134 67e0cb90 store 1 ,mem_mouse_mkey_press_status +4135 20600000 rtn + +mouse_check_bkkey_gpio: +4136 6fe0c90d fetch 1 ,mem_bk_button_gpio +4137 c17f8000 rtneq gpio_disable +4138 704b9603 jam mouse_bk_key ,mem_mouse_key_temp +4139 6fe0cb91 fetch 1 ,mem_mouse_bkkey_press_status +413a 1fe22600 copy pdata ,regc +413b 6848c90d fetcht 1 ,mem_bk_button_gpio +413c 6fe0c910 fetch 1 ,mem_matrix_public_gpio +413d c07fc14b beq gpio_disable ,mouse_3io6key_bk_check + +mouse_check_bkkey_gpio_next: +413e 20406059 call gpio_get_bit +413f 2020c147 branch mouse_check_bk_button_connect_gnd ,true +4140 6848c910 fetcht 1 ,mem_matrix_public_gpio +4141 20406069 call gpio_out_active +4142 6848c90d fetcht 1 ,mem_bk_button_gpio +4143 6fe0cb91 fetch 1 ,mem_mouse_bkkey_press_status +4144 20404187 call mouse_check_key_connect_gnd + +mouse_check_bkkey_gpio_end: +4145 67e0cb91 store 1 ,mem_mouse_bkkey_press_status +4146 20204168 branch mouse_matrix_public_gpio_reset + +mouse_check_bk_button_connect_gnd: +4147 6848c910 fetcht 1 ,mem_matrix_public_gpio +4148 6fe0cb91 fetch 1 ,mem_mouse_bkkey_press_status +4149 20404187 call mouse_check_key_connect_gnd +414a 20204145 branch mouse_check_bkkey_gpio_end + +mouse_3io6key_bk_check: +414b 20404195 call mouse_3io6key_check +414c 67e0cb91 store 1 ,mem_mouse_bkkey_press_status +414d 6848c90d fetcht 1 ,mem_bk_button_gpio +414e 20203f56 branch mouse_gpio_config_input_pu + +mouse_check_fwkey_gpio: +414f 6fe0c90e fetch 1 ,mem_fw_button_gpio +4150 c17f8000 rtneq gpio_disable +4151 704b9604 jam mouse_fw_key ,mem_mouse_key_temp +4152 6fe0cb92 fetch 1 ,mem_mouse_fwkey_press_status +4153 1fe22600 copy pdata ,regc +4154 6848c90e fetcht 1 ,mem_fw_button_gpio +4155 6fe0c910 fetch 1 ,mem_matrix_public_gpio +4156 c07fc164 beq gpio_disable ,mouse_3io6key_fw_check + +mouse_check_fwkey_gpio_next: +4157 20406059 call gpio_get_bit +4158 2020c160 branch mouse_check_fw_button_connect_gnd ,true +4159 6848c910 fetcht 1 ,mem_matrix_public_gpio +415a 20406069 call gpio_out_active +415b 6848c90e fetcht 1 ,mem_fw_button_gpio +415c 6fe0cb92 fetch 1 ,mem_mouse_fwkey_press_status +415d 20404187 call mouse_check_key_connect_gnd + +mouse_check_fwkey_gpio_end: +415e 67e0cb92 store 1 ,mem_mouse_fwkey_press_status +415f 20204168 branch mouse_matrix_public_gpio_reset + +mouse_check_fw_button_connect_gnd: +4160 6848c910 fetcht 1 ,mem_matrix_public_gpio +4161 6fe0cb92 fetch 1 ,mem_mouse_fwkey_press_status +4162 20404187 call mouse_check_key_connect_gnd +4163 2020415e branch mouse_check_fwkey_gpio_end + +mouse_3io6key_fw_check: +4164 20404195 call mouse_3io6key_check +4165 67e0cb92 store 1 ,mem_mouse_fwkey_press_status +4166 6848c90e fetcht 1 ,mem_fw_button_gpio +4167 20203f56 branch mouse_gpio_config_input_pu + +mouse_matrix_public_gpio_reset: +4168 6848c910 fetcht 1 ,mem_matrix_public_gpio +4169 20203f56 branch mouse_gpio_config_input_pu + +mouse_check_customerkey_gpio: +416a 704b8b00 jam 0 ,mem_customer_key +416b 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +416c c40a8000 rtnbit0 mouse_enable_keyboard +416d 6fe0c912 fetch 1 ,mem_customer_key_gpio +416e c17f8000 rtneq gpio_disable +416f 704b9607 jam mouse_customer_key ,mem_mouse_key_temp +4170 6848c912 fetcht 1 ,mem_customer_key_gpio +4171 6fe0cb95 fetch 1 ,mem_mouse_customerkey_press_status +4172 20404187 call mouse_check_key_connect_gnd +4173 67e0cb95 store 1 ,mem_mouse_customerkey_press_status +4174 1a227e00 copy rega ,pdata +4175 c283c17a bbit1 mouse_customer_key ,mouse_customerkey_press +4176 2040417d call mouse_customerkey_release + +mouse_check_customerkey_gpio_exit: +4177 6fe0cb8c fetch 1 ,mem_customer_data_trigger +4178 67e0cb8d store 1 ,mem_customer_data_trigger_last +4179 20600000 rtn + +mouse_customerkey_press: +417a 704b8c01 jam 1 ,mem_customer_data_trigger +417b 20404180 call mouse_customer_key_need_send +417c 20204177 branch mouse_check_customerkey_gpio_exit + +mouse_customerkey_release: +417d 704b8c00 jam 0 ,mem_customer_data_trigger +417e 6fe0cb8d fetch 1 ,mem_customer_data_trigger_last +417f 207a0000 rtn blank + +mouse_customer_key_need_send: +4180 704b8b01 jam 1 ,mem_customer_key +4181 20600000 rtn + +mouse_check_matrix_button_connect_gnd: +4182 20406059 call gpio_get_bit +4183 6848cb96 fetcht 1 ,mem_mouse_key_temp +4184 18420e00 copy temp ,queue +4185 2020c193 branch mouse_key_press ,true +4186 20204191 branch mouse_key_release + +mouse_check_key_connect_gnd: +4187 1fe3fe00 lshift pdata ,pdata +4188 1fe22400 copy pdata ,regb +4189 20406059 call gpio_get_bit +418a 7920a400 setflag true ,0 ,regb +418b 1a417e07 and regb ,0x07 ,pdata +418c 6848cb96 fetcht 1 ,mem_mouse_key_temp +418d 18420e00 copy temp ,queue +418e c003c193 beq 0x07 ,mouse_key_press +418f c0004191 beq 0x00 ,mouse_key_release +4190 20600000 rtn + +mouse_key_release: +4191 f93fa200 qset0 rega +4192 20600000 rtn + +mouse_key_press: +4193 f9202200 qset1 rega +4194 20600000 rtn + +mouse_3io6key_check: +4195 44e9401a bpatch patch1a_2 ,mem_patch1a +4196 1a627e00 copy regc ,pdata +4197 67e0cb97 store 1 ,mem_mouse_key_status +4198 1fe3fe00 lshift pdata ,pdata +4199 1fe22400 copy pdata ,regb +419a 18422600 copy temp ,regc +419b 20403f54 call mouse_gpio_config_input_pd +419c 1a620400 copy regc ,temp +419d 20406059 call gpio_get_bit +419e 7d20a400 nsetflag true ,0 ,regb +419f 204041a1 call mouse_check_press +41a0 2020418b branch mouse_check_key_connect_gnd + 4 + +mouse_check_press: +41a1 6848cb97 fetcht 1 ,mem_mouse_key_status +41a2 18410401 and_into 0x01 ,temp +41a3 1a417e01 and regb ,0x01 ,pdata +41a4 98467c00 isub temp ,null +41a5 2422c32f nbranch mouse_current_mult_update ,zero +41a6 20600000 rtn + +mouse_init_sunt: +41a7 44e9c01a bpatch patch1a_3 ,mem_patch1a +41a8 20403f65 call mouse_sensor_spi_init +41a9 20758000 rtn wake + +mouse_init_sensor_wakeup: +41aa 20404236 call mouse_sensor_poweron + +mouse_init_sensor: +41ab 204041b5 call mouse_read_sensor_id +41ac c01841bc beq p32xx_id1 ,mouse_init_p32xx_id2_judge +41ad c018c217 beq p3065_id1 ,mouse_init_p3065 +41ae c02c4220 beq pka8g2_id1 ,mouse_ka8g2_id2_judge +41af 204041b2 call mouse_twspi_reset +41b0 20001af4 nop 6900 +41b1 202041ab branch mouse_init_sensor + +mouse_twspi_reset: +41b2 6fe0c91f fetch 1 ,mem_mouse_sensor_sclk_gpio +41b3 20405af7 call twspi_reset +41b4 20203f6a branch mouse_spid_init_pin + +mouse_read_sensor_id: +41b5 58000001 setarg pan_reg_pid_h +41b6 20405b0d call twspi_read +41b7 67e0c9c2 store 1 ,mem_sensor_id2 +41b8 58000000 setarg pan_reg_pid_l +41b9 20405b0d call twspi_read +41ba 67e0c9c1 store 1 ,mem_sensor_id1 +41bb 20600000 rtn + +mouse_init_p32xx_id2_judge: +41bc 6fe0c9c2 fetch 1 ,mem_sensor_id2 +41bd c02d41c5 beq p_mx8650 ,mouse_mx8650_init_param +41be c06c41cb beq p8009_id2 ,mouse_8009_init_param +41bf c068c1da beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +41c0 c06941e3 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +41c1 c00141ea beq p3212_id2 ,mouse_3212_init_param +41c2 c02a41ed beq pka8_id2 ,mouse_ka8_init_param_check +41c3 c0284214 beq p6520a_id2 ,mouse_p6520_init_param +41c4 202041ab branch mouse_init_sensor + +mouse_mx8650_init_param: +41c5 70492705 jam mx8650 ,mem_config_sensor_type +41c6 20404232 call mouse_sensor_reset +41c7 20407d12 call delay_10ms +41c8 da604a39 arg mem_sensor_8650_init ,regc +41c9 2040422b call mouse_sensor_wr_seq +41ca 2020408e branch mouse_dpi_config + +mouse_8009_init_param: +41cb 58000016 setarg 0x16 +41cc 20405b0d call twspi_read +41cd 1fe67cbd sub pdata ,0xbd ,null +41ce 2422c1a7 nbranch mouse_init_sunt ,zero +41cf 58000019 setarg 0x19 +41d0 20405b0d call twspi_read +41d1 1fe67c55 sub pdata ,0x55 ,null +41d2 2422c1a7 nbranch mouse_init_sunt ,zero +41d3 5800001b setarg 0x1b +41d4 20405b0d call twspi_read +41d5 1fe67c1d sub pdata ,0x1d ,null +41d6 2422c1a7 nbranch mouse_init_sunt ,zero +41d7 70492706 jam p8009 ,mem_config_sensor_type +41d8 da604a71 arg mem_sensor_8009_init ,regc +41d9 2020422b branch mouse_sensor_wr_seq + +mouse_3205_3t_init_param: +41da 70492700 jam p3205 ,mem_config_sensor_type +41db da6049f3 arg mem_sensor_3205_init ,regc +41dc 2040422b call mouse_sensor_wr_seq +41dd da6049fd arg mem_sensor_32xx_init ,regc +41de 2040422b call mouse_sensor_wr_seq +41df 58000943 setarg 0x0943 +41e0 20405b0c call twspi_write +41e1 da604a17 arg mem_sensor_32xx_init_1 ,regc +41e2 2020422b branch mouse_sensor_wr_seq + +mouse_3204_3l_init_param: +41e3 70492702 jam p3204 ,mem_config_sensor_type +41e4 da6049e9 arg mem_sensor_3204_init ,regc +41e5 2040422b call mouse_sensor_wr_seq +41e6 da6049fd arg mem_sensor_32xx_init ,regc +41e7 2040422b call mouse_sensor_wr_seq +41e8 da604a17 arg mem_sensor_32xx_init_1 ,regc +41e9 2020422b branch mouse_sensor_wr_seq + +mouse_3212_init_param: +41ea 70492703 jam p3212 ,mem_config_sensor_type +41eb da6049df arg mem_sensor_3212_init ,regc +41ec 2020422b branch mouse_sensor_wr_seq + +mouse_ka8_init_param_check: +41ed 20404229 call mouse_sensor_disable_wp +41ee 58009a5b setarg 0x9a5b +41ef 20405b0c call twspi_write +41f0 5800000d setarg 0x0d +41f1 20405b0d call twspi_read +41f2 1fe67c12 sub pdata ,0x12 ,null +41f3 2022c201 branch mouse_ka8ul_init_param ,zero +41f4 1fe67c0a sub pdata ,0x0a ,null +41f5 2422c204 nbranch mouse_ka8hd_sensor_judge ,zero +41f6 5800000e setarg 0x0e +41f7 20405b0d call twspi_read +41f8 1fe67ce5 sub pdata ,0xe5 ,null +41f9 2422c1ab nbranch mouse_init_sensor ,zero +41fa 58000010 setarg 0x10 +41fb 20405b0d call twspi_read +41fc 1fe67ca5 sub pdata ,0xa5 ,null +41fd 2022c201 branch mouse_ka8ul_init_param ,zero +41fe 20404211 call mouse_enable_ka8_sensor_wp + +mouse_ka8_init_param: +41ff 70492708 jam ka8 ,mem_config_sensor_type +4200 20600000 rtn + +mouse_ka8ul_init_param: +4201 70492709 jam ka8_ul ,mem_config_sensor_type +4202 da604a53 arg mem_sensor_ka8ul_init ,regc +4203 2020422b branch mouse_sensor_wr_seq + +mouse_ka8hd_sensor_judge: +4204 1fe67c10 sub pdata ,0x10 ,null +4205 2422c1ab nbranch mouse_init_sensor ,zero +4206 5800000e setarg 0x0e +4207 20405b0d call twspi_read +4208 1fe67cc5 sub pdata ,0xc5 ,null +4209 2422c1ab nbranch mouse_init_sensor ,zero +420a 58000010 setarg 0x10 +420b 20405b0d call twspi_read +420c 1fe67c38 sub pdata ,0x38 ,null +420d 2422c1ab nbranch mouse_init_sensor ,zero + +mouse_ka8hd_init_param: +420e 20404211 call mouse_enable_ka8_sensor_wp +420f 7049270a jam ka8_hd ,mem_config_sensor_type +4210 20600000 rtn + +mouse_enable_ka8_sensor_wp: +4211 5800005b setarg 0x005b +4212 20405b0c call twspi_write +4213 20204227 branch mouse_sensor_enable_wp + +mouse_p6520_init_param: +4214 70492707 jam p6520 ,mem_config_sensor_type +4215 da604a97 arg mem_sensor_p6520_init ,regc +4216 2020422b branch mouse_sensor_wr_seq + +mouse_init_p3065: +4217 20404236 call mouse_sensor_poweron +4218 6fe0c9c2 fetch 1 ,mem_sensor_id2 +4219 c038421e beq p3065_xy_id2 ,mouse_p3065xy_init_param +421a c000421c beq p3065_id2 ,mouse_p3065_init_param +421b 202041ab branch mouse_init_sensor + +mouse_p3065_init_param: +421c 70492701 jam p3065 ,mem_config_sensor_type +421d 20600000 rtn + +mouse_p3065xy_init_param: +421e 70492704 jam p3065_xy ,mem_config_sensor_type +421f 20600000 rtn + +mouse_ka8g2_id2_judge: +4220 20404236 call mouse_sensor_poweron +4221 6fe0c9c2 fetch 1 ,mem_sensor_id2 +4222 c02cc224 beq pka8g2_id2 ,mouse_ka8g2_init_param +4223 202041bc branch mouse_init_p32xx_id2_judge + +mouse_ka8g2_init_param: +4224 7049270b jam ka8g2 ,mem_config_sensor_type +4225 da604a81 arg mem_sensor_ka8g2_init ,regc +4226 2020422b branch mouse_sensor_wr_seq + +mouse_sensor_enable_wp: +4227 58000009 setarg 0x0009 +4228 20205b0c branch twspi_write + +mouse_sensor_disable_wp: +4229 58005a09 setarg 0x5a09 +422a 20205b0c branch twspi_write + +mouse_sensor_wr_seq: +422b efe10013 ifetch 2 ,regc +422c d840ffff arg 0xffff ,temp +422d 98467c00 isub temp ,null +422e 20628000 rtn zero +422f 20405b0c call twspi_write +4230 1a60a602 increase 2 ,regc +4231 2020422b branch mouse_sensor_wr_seq + +mouse_sensor_reset: +4232 58008006 setarg 0x8006 +4233 20405b0c call twspi_write +4234 20002ee0 nop 12000 +4235 20600000 rtn + +mouse_sensor_poweron: +4236 44ea401a bpatch patch1a_4 ,mem_patch1a +4237 20403f65 call mouse_sensor_spi_init +4238 20404232 call mouse_sensor_reset +4239 da604aa3 arg mem_sensor_poweron_init ,regc +423a 2040422b call mouse_sensor_wr_seq +423b 2020408e branch mouse_dpi_config + +mouse_sensor_powerdown: +423c 204041a7 call mouse_init_sunt +423d 20403f65 call mouse_sensor_spi_init +423e 58000806 setarg 0x0806 +423f 20205b0c branch twspi_write + +mouse_check_sensor_data: +4240 6fe0c4ac fetch 1 ,mem_spi_write_flash_sm +4241 c1800000 rtnne flash_sm_no_buys +4242 6fe0c927 fetch 1 ,mem_config_sensor_type +4243 c000424c beq p3205 ,mouse_p32xx_sensor_motion +4244 c000c24c beq p3065 ,mouse_p32xx_sensor_motion +4245 c004424c beq ka8 ,mouse_p32xx_sensor_motion +4246 c001424c beq p3204 ,mouse_p32xx_sensor_motion +4247 c001c270 beq p3212 ,mouse_p3212_sensor_motion +4248 c002424c beq p3065_xy ,mouse_p32xx_sensor_motion +4249 c0034295 beq p8009 ,mouse_p8009_sensor_motion +424a c005c28e beq ka8g2 ,mouse_pka8g2_sensor_motion +424b 2020424c branch mouse_p32xx_sensor_motion + +mouse_p32xx_sensor_motion: +424c 204042c4 call mouse_clear_sensor_data +424d 78547c00 disable user +424e 6fe0c911 fetch 1 ,mem_sensor_motion_gpio +424f c07fc253 beq gpio_disable ,mouse_p32xx_sensor_motion_2 +4250 6848c911 fetcht 1 ,mem_sensor_motion_gpio +4251 20406059 call gpio_get_bit +4252 24608000 nrtn true + +mouse_p32xx_sensor_motion_2: +4253 58000000 setarg pan_reg_pid_l +4254 20405b0d call twspi_read +4255 c0984266 bne p32xx_id1 ,mouse_p3065_judge + +mouse_p32xx_sensor_motion_1: +4256 58000002 setarg pan_reg_motion_staus +4257 20405b0d call twspi_read +4258 c4038000 rtnbit0 7 +4259 204042db call mouse_read_sensor_common +425a 6fe0c8d1 fetch 1 ,mem_mouse_x +425b 204042d3 call mouse_data_extsign +425c 67e148d1 store 2 ,mem_mouse_x +425d 6fe0c8d3 fetch 1 ,mem_mouse_y +425e 204042d3 call mouse_data_extsign +425f 67e148d3 store 2 ,mem_mouse_y +4260 6fe0c928 fetch 1 ,mem_config_sensor_angle +4261 c0004268 beq mouse_6clk_angle ,mouse_motion32xx_6clk_direction_selection +4262 c000c26a beq mouse_9clk_angle ,mouse_motion32xx_9clk_direction_selection +4263 c001426c beq mouse_12clk_angle ,mouse_motion32xx_12clk_direction_selection +4264 c001c26e beq mouse_3clk_angle ,mouse_motion32xx_3clk_direction_selection +4265 20600000 rtn + +mouse_p3065_judge: +4266 c018c256 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +4267 202041b2 branch mouse_twspi_reset + +mouse_motion32xx_6clk_direction_selection: +4268 204042ad call mouse_motion_6clk_direction_dispose +4269 202042e2 branch mouse_sensor_sdio_low + +mouse_motion32xx_9clk_direction_selection: +426a 204042b5 call mouse_motion_9clk_direction_dispose +426b 202042e2 branch mouse_sensor_sdio_low + +mouse_motion32xx_12clk_direction_selection: +426c 204042b1 call mouse_motion_12clk_direction_dispose +426d 202042e2 branch mouse_sensor_sdio_low + +mouse_motion32xx_3clk_direction_selection: +426e 204042bd call mouse_motion_3clk_direction_dispose +426f 202042e2 branch mouse_sensor_sdio_low + +mouse_p3212_sensor_motion: +4270 204042c4 call mouse_clear_sensor_data +4271 6fe0c911 fetch 1 ,mem_sensor_motion_gpio +4272 c07fc276 beq gpio_disable ,mouse_p3212_sensor_motion_1 +4273 6848c911 fetcht 1 ,mem_sensor_motion_gpio +4274 20406059 call gpio_get_bit +4275 24608000 nrtn true + +mouse_p3212_sensor_motion_1: +4276 58000000 setarg pan_reg_pid_l +4277 20405b0d call twspi_read +4278 c09841b2 bne p32xx_id1 ,mouse_twspi_reset + +mouse_p3212_sensor_motion_2: +4279 58000002 setarg pan_reg_motion_staus +427a 20405b0d call twspi_read +427b c4038000 rtnbit0 7 +427c 204042db call mouse_read_sensor_common +427d 2040428c call mouse_read_3212sensor_xy_high +427e 67e0c8d7 store 1 ,mem_mouse_xy_h +427f 1ff1fe00 rshift4 pdata ,pdata +4280 204042d7 call mouse_data_extsign_bit3 +4281 67e0c8d2 store 1 ,mem_mouse_x + 1 +4282 6fe0c8d7 fetch 1 ,mem_mouse_xy_h +4283 1fe17e0f and pdata ,0x0f ,pdata +4284 204042d7 call mouse_data_extsign_bit3 +4285 67e0c8d4 store 1 ,mem_mouse_y + 1 +4286 6fe0c928 fetch 1 ,mem_config_sensor_angle +4287 c00042ad beq mouse_6clk_angle ,mouse_motion_6clk_direction_dispose +4288 c000c2b5 beq mouse_9clk_angle ,mouse_motion_9clk_direction_dispose +4289 c00142b1 beq mouse_12clk_angle ,mouse_motion_12clk_direction_dispose +428a c001c2bd beq mouse_3clk_angle ,mouse_motion_3clk_direction_dispose +428b 20600000 rtn + +mouse_read_3212sensor_xy_high: +428c 58000012 setarg 0x12 +428d 20205b0d branch twspi_read + +mouse_pka8g2_sensor_motion: +428e 204042c4 call mouse_clear_sensor_data +428f 6fe0c911 fetch 1 ,mem_sensor_motion_gpio +4290 c07fc294 beq gpio_disable ,mouse_pka8g2_sensor_motion_1 +4291 6848c911 fetcht 1 ,mem_sensor_motion_gpio +4292 20406059 call gpio_get_bit +4293 24608000 nrtn true + +mouse_pka8g2_sensor_motion_1: +4294 20204279 branch mouse_p3212_sensor_motion_2 + +mouse_p8009_sensor_motion: +4295 204042c4 call mouse_clear_sensor_data +4296 78547c00 disable user +4297 58000002 setarg pan_reg_motion_staus +4298 20405b0d call twspi_read +4299 c4038000 rtnbit0 7 +429a 58000008 setarg pan_reg_opration_state +429b 20405b0d call twspi_read +429c 203a4259 branch mouse_p32xx_sensor_motion_1 + 3 ,blank +429d 58000000 setarg 0 +429e 67e348d1 store 6 ,mem_mouse_x +429f 20600000 rtn + +mouse_sensor_set_angle: +42a0 6fe0c924 fetch 1 ,mem_sensor_angle_default +42a1 67e0c928 store 1 ,mem_config_sensor_angle +42a2 6fe0c917 fetch 1 ,mem_select_sensor_angle_gpio +42a3 c17f8000 rtneq gpio_disable +42a4 6848c917 fetcht 1 ,mem_select_sensor_angle_gpio +42a5 20403f56 call mouse_gpio_config_input_pu +42a6 6848c917 fetcht 1 ,mem_select_sensor_angle_gpio +42a7 20406059 call gpio_get_bit +42a8 2040c2aa call mouse_sensor_switch_angle ,true +42a9 20203f54 branch mouse_gpio_config_input_pd + +mouse_sensor_switch_angle: +42aa 6fe0c925 fetch 1 ,mem_sensor_angle_switch +42ab 67e0c928 store 1 ,mem_config_sensor_angle +42ac 20600000 rtn + +mouse_motion_6clk_direction_dispose: +42ad 6fe148d1 fetch 2 ,mem_mouse_x +42ae 1fe67e00 sub pdata ,0 ,pdata +42af 67e148d1 store 2 ,mem_mouse_x +42b0 20207e54 branch enable_user + +mouse_motion_12clk_direction_dispose: +42b1 6fe148d3 fetch 2 ,mem_mouse_y +42b2 1fe67e00 sub pdata ,0 ,pdata +42b3 67e148d3 store 2 ,mem_mouse_y +42b4 20207e54 branch enable_user + +mouse_motion_9clk_direction_dispose: +42b5 6fe148d3 fetch 2 ,mem_mouse_y +42b6 1fe67e00 sub pdata ,0 ,pdata +42b7 67e148d3 store 2 ,mem_mouse_y +42b8 6fe148d1 fetch 2 ,mem_mouse_x +42b9 1fe67e00 sub pdata ,0 ,pdata +42ba 67e148d1 store 2 ,mem_mouse_x +42bb 204042bf call mouse_sensor_data_swap_places +42bc 20207e54 branch enable_user + +mouse_motion_3clk_direction_dispose: +42bd 204042bf call mouse_sensor_data_swap_places +42be 20207e54 branch enable_user + +mouse_sensor_data_swap_places: +42bf 6fe148d3 fetch 2 ,mem_mouse_y +42c0 684948d1 fetcht 2 ,mem_mouse_x +42c1 67e148d1 store 2 ,mem_mouse_x +42c2 604948d3 storet 2 ,mem_mouse_y +42c3 20600000 rtn + +mouse_clear_sensor_data: +42c4 6fe0c9c8 fetch 1 ,mem_mouse_move_flag +42c5 205a42db call mouse_read_sensor_common ,blank +42c6 7049c801 jam 1 ,mem_mouse_move_flag +42c7 20600000 rtn + +mouse_clear_sensor_data_by_reset: +42c8 704aac01 jam 1 ,mem_mouse_clear_sensor_data_flag +42c9 20401b1a call le_set_config_more_data + +mouse_init_sensor_reset: +42ca 202041a7 branch mouse_init_sunt + +mouse_data_xy_release: +42cb 6fe0c911 fetch 1 ,mem_sensor_motion_gpio +42cc c1ff8000 rtnne gpio_disable +42cd 6fe0caae fetch 1 ,mem_mouse_long_mult_flag +42ce c1808000 rtnne 1 +42cf 58000000 setarg 0 +42d0 67e0caae store 1 ,mem_mouse_long_mult_flag +42d1 67e248d1 store 4 ,mem_mouse_x +42d2 202042ca branch mouse_init_sensor_reset + +mouse_data_extsign: +42d3 c4038000 rtnbit0 7 +42d4 d840ff00 arg 0xff00 ,temp +42d5 9841fe00 ior temp ,pdata +42d6 20600000 rtn + +mouse_data_extsign_bit3: +42d7 c4018000 rtnbit0 3 +42d8 d84000f0 arg 0xf0 ,temp +42d9 9841fe00 ior temp ,pdata +42da 20600000 rtn + +mouse_read_sensor_common: +42db dfe00003 arg pan_reg_delta_x ,pdata +42dc 20405b0d call twspi_read +42dd 67e148d1 store 2 ,mem_mouse_x +42de dfe00004 arg pan_reg_delta_y ,pdata +42df 20405b0d call twspi_read +42e0 67e148d3 store 2 ,mem_mouse_y +42e1 20600000 rtn + +mouse_sensor_sdio_low: +42e2 6848c920 fetcht 1 ,mem_mouse_sensor_sdio_gpio +42e3 20406059 call gpio_get_bit +42e4 20608000 rtn true +42e5 5800000a setarg 0x0a +42e6 20405b0d call twspi_read +42e7 200003e8 nop 1000 +42e8 202042e2 branch mouse_sensor_sdio_low + +mouse_set_sdio_high: +42e9 58008100 setarg 0x8100 +42ea 20205b0c branch twspi_write + +mouse_buletooth_fast_conn_init: +42eb 704ac1ff jam 0xff ,mem_mouse_bluetooth_fast_conn_flag +42ec 6fe0cbb3 fetch 1 ,mem_mouse_bluetooth_type +42ed c280c2ef bbit1 mode_4_mouse ,mouse_ble_fast_conn_init +42ee c28042f4 bbit1 mode_3_mouse ,mouse_bt_fast_conn_init + +mouse_ble_fast_conn_init: +42ef 70448234 jam 0x34 ,mem_xrecord_mode +42f0 580f0f0f setarg 0x0f0f0f +42f1 67e1c37a store 3 ,mem_le_lap +42f2 67e1c37d store 3 ,mem_le_lap + 3 +42f3 20203d61 branch mouse_start_reconnect + +mouse_bt_fast_conn_init: +42f4 70448233 jam 0x33 ,mem_xrecord_mode +42f5 d8c04974 arg mem_mouse_compare_addr_ff ,contr +42f6 204045c8 call mouse_load_bt_device +42f7 20203d61 branch mouse_start_reconnect + +mouse_buletooth_fast_conn_end: +42f8 44eac01a bpatch patch1a_5 ,mem_patch1a +42f9 204045bd call mouse_select_reconn_device +42fa 20404314 call mouse_bluetooth_fast_conn_disable +42fb 6fe0c938 fetch 1 ,mem_device_flag +42fc c000c2ff beq mode_bt_device1 ,mouse_device1_check_auto_discover +42fd c0014301 beq mode_bt_device2 ,mouse_device2_check_auto_discover +42fe 20600000 rtn + +mouse_device1_check_auto_discover: +42ff 6fe3493a fetch 6 ,mem_device1_addr +4300 20204302 branch mouse_device_check_auto_discover + +mouse_device2_check_auto_discover: +4301 6fe34957 fetch 6 ,mem_device2_addr + +mouse_device_check_auto_discover: +4302 684b4974 fetcht 6 ,mem_mouse_compare_addr_ff +4303 98467c00 isub temp ,null +4304 2022c553 branch mouse_start_discovery ,zero +4305 20203d59 branch mouse_start_reconnect_device + +mouse_bt_fast_conn_send_device_name: +4306 20404314 call mouse_bluetooth_fast_conn_disable +4307 6fe0c5fc fetch 1 ,mem_local_name_length +4308 1fe0fe03 increase 3 ,pdata +4309 1fe22200 copy pdata ,rega +430a 20404dc0 call hid_malloc_tx_buff +430b 6fe144de fetch 2 ,mem_hid_int_remote_cid +430c e7e10005 istore 2 ,contw +430d 580004a1 setarg 0x04a1 +430e e7e10005 istore 2 ,contw +430f 6fe0c5fc fetch 1 ,mem_local_name_length +4310 1fe0fe01 increase 1 ,pdata +4311 1fe27200 copy pdata ,loopcnt +4312 d8c045fc arg mem_local_name_length ,contr +4313 20207d5f branch memcpy + +mouse_bluetooth_fast_conn_disable: +4314 704ac15a jam 0x5a ,mem_mouse_bluetooth_fast_conn_flag +4315 20600000 rtn + +mouse_stop_bluetooth_mode: +4316 6fe1478c fetch 2 ,mem_ui_state_map +4317 c283c322 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +4318 c284b20f bbit1 ui_state_ble_connected ,app_ble_disconnect +4319 c28031f6 bbit1 ui_state_bt_connected ,app_bt_disconnect +431a 20204576 branch mouse_stop_discovery + +mouse_disconnect: +431b 58000000 setarg 0 +431c 67e14ab2 store 2 ,mem_mouse_no_data_timer +431d 6fe1478c fetch 2 ,mem_ui_state_map +431e c284b20f bbit1 ui_state_ble_connected ,app_ble_disconnect +431f 6fe1478c fetch 2 ,mem_ui_state_map +4320 c28031f6 bbit1 ui_state_bt_connected ,app_bt_disconnect +4321 20600000 rtn + +mouse_cancel_reconnect: +4322 204046de call mouse_bt_cannel_reconn_enable +4323 20207931 branch check_51cmd_bb_reconn_cancel + +mouse_check_125hz: +4324 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4325 c40d8000 rtnbit0 mouse_enable_bt_125hz + +mouse_bluetooth_125hz: +4326 2434432c nbranch mouse_bluetooth_125hz_clear ,user +4327 6fe0caad fetch 1 ,mem_bluetooth_125hz_cnt +4328 1fe0fe01 increase 1 ,pdata +4329 1fe17e0f and_into 0x0f ,pdata +432a 67e0caad store 1 ,mem_bluetooth_125hz_cnt +432b 247a0000 nrtn blank + +mouse_bluetooth_125hz_clear: +432c 704aad00 jam 0 ,mem_bluetooth_125hz_cnt +432d 78547c00 disable user +432e 20600000 rtn + +mouse_current_mult_update: +432f 6fe0c911 fetch 1 ,mem_sensor_motion_gpio +4330 c1ff8000 rtnne gpio_disable +4331 70417700 jam 0 ,mem_lpm_mult +4332 704aaf1e jam 30 ,mem_mouse_current_mult_timer +4333 20600000 rtn + +mouse_priority_bb_event: +4334 44eb401a bpatch patch1a_6 ,mem_patch1a +4335 1a627e00 copy regc ,pdata +4336 c00a4350 beq bt_evt_le_connected ,mouse_le_bb_event_connected +4337 c000c3fa beq bt_evt_bb_connected ,mouse_bb_event_connected +4338 c00ac35f beq bt_evt_le_disconnected ,mouse_le_bb_disconnected +4339 c00143fe beq bt_evt_bb_disconnected ,mouse_bb_disconnected +433a c002c421 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +433b c008454e beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +433c c0094424 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +433d c0033244 beq bt_evt_hid_connected ,app_hid_connected +433e c0024432 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +433f c009c432 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +4340 c00cb1ec beq bt_evt_switch_not_accept ,app_bt_role_switch +4341 c015c43d beq bt_evt_switch_success_master ,mouse_enter_sniff_check +4342 c010c443 beq bt_evt_sniff_not_accept ,mouse_sniff_not_accept +4343 c005444a beq bt_evt_pincode_req ,mouse_bb_event_pincode +4344 c01731da beq bt_evt_remote_unsniff ,app_start_auto_sniff +4345 c018c36a beq bt_evt_le_pairing_success ,mouse_le_pairing_success +4346 c014c36c beq bt_evt_le_enc_info ,mouse_le_enc_info +4347 c019436e beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +4348 c01f4379 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +4349 c020437a beq bt_evt_le_parse_conn_papa_update_rsp ,mouse_le_conn_param_update_rsp_recieved +434a c013c44c beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +434b c01cc857 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +434c c01d4833 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +434d c01e484e beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +434e c0224390 beq bt_evt_le_parse_conn_param_accepted ,mouse_le_parse_conn_param_accepted +434f 20600000 rtn + +mouse_le_bb_event_connected: +4350 704aae00 jam 0 ,mem_mouse_long_mult_flag +4351 204042ca call mouse_init_sensor_reset +4352 704ac601 jam 1 ,mem_mouse_le_bb_connected_flag +4353 20404822 call mouse_24g_first_store_reconn_info +4354 6fe0cac7 fetch 1 ,mem_mouse_le_reconnect_flag +4355 243a4357 nbranch mouse_le_bb_event_connected_next ,blank +4356 704ac814 jam 0x14 ,mem_mouse_send_secutiry_request_timer + +mouse_le_bb_event_connected_next: +4357 6fe14480 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +4358 793ffe00 set0 app_disc_by_button ,pdata +4359 67e14480 store app_disc_rsn_size ,mem_app_disconn_reason_flag +435a 704b7700 jam 0 ,mem_mouse_direct_timer +435b 6fe14af0 fetch 2 ,mem_le_battery_level_updata_timer_init +435c 67e14af2 store 2 ,mem_le_battery_level_updata_timer +435d 20404544 call mouse_no_data_timer_init +435e 20204576 branch mouse_stop_discovery + +mouse_le_bb_disconnected: +435f 704ac600 jam 0 ,mem_mouse_le_bb_connected_flag +4360 58000006 setarg le_interval_7_5ms +4361 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4362 c28dc364 bbit1 mouse_enable_bt_125hz ,mouse_le_bb_disconnected_next +4363 58000007 setarg le_interval_8_75ms + +mouse_le_bb_disconnected_next: +4364 67e14372 store 2 ,mem_le_interval_min +4365 67e14374 store 2 ,mem_le_interval_min + 2 +4366 704af400 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +4367 704aac00 jam 0 ,mem_mouse_clear_sensor_data_flag +4368 20401b1c call le_clr_config_more_data +4369 202043fe branch mouse_bb_disconnected + +mouse_le_pairing_success: +436a d8e00002 arg ll_pairing_success_flag ,queue +436b 20204375 branch mouse_le_enable_connect_flag + +mouse_le_enc_info: + +mouse_updata_le_param: +436c 70095b12 jam bt_cmd_le_update_conn ,mem_fifo_temp +436d 2020787a branch ui_ipc_send_cmd + +mouse_le_ll_start_encryt: +436e 6fe0cac7 fetch 1 ,mem_mouse_le_reconnect_flag +436f c000c371 beq 1 ,mouse_le_ll_reconn_start_encryt +4370 20204373 branch mouse_le_ll_enable_start_enc_flag + +mouse_le_ll_reconn_start_encryt: +4371 2040436c call mouse_updata_le_param +4372 704b7614 jam 20 ,mem_le_start_encrypt_timer + +mouse_le_ll_enable_start_enc_flag: +4373 d8e00001 arg ll_start_enc_flag ,queue +4374 20204375 branch mouse_le_enable_connect_flag + +mouse_le_enable_connect_flag: +4375 6fe0cb75 fetch 1 ,mem_le_connect_status_flag +4376 f9207e00 qset1 pdata +4377 67e0cb75 store 1 ,mem_le_connect_status_flag +4378 20600000 rtn + +mouse_le_pairing_complete: +4379 2020321d branch app_ble_store_reconn_info + +mouse_le_conn_param_update_rsp_recieved: +437a 6fe143db fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +437b c1000000 rtneq ble_signaling_connect_parameter_update_accepted +437c 6fe08289 fetch 1 ,mem_le_tsniff +437d 1feb7e00 rshift2 pdata ,pdata +437e 1fe67c0c sub pdata ,le_interval_15ms ,null +437f 20610000 rtn positive +4380 58000009 setarg le_interval_11_25ms +4381 67e14372 store 2 ,mem_le_interval_min +4382 67e14374 store 2 ,mem_le_interval_min + 2 +4383 2040436c call mouse_updata_le_param + +mouse_le_conn_param_lpm_disable: +4384 704af401 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +4385 20600000 rtn + +mouse_le_conn_param_lpm_enable: +4386 704af400 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +4387 20600000 rtn + +mouse_le_bb_event_connect_complete: +4388 6fe0cac7 fetch 1 ,mem_mouse_le_reconnect_flag +4389 247a0000 nrtn blank +438a 6fe0c437 fetch 1 ,mem_le_att_handle +438b 1fe67e22 sub pdata ,34 ,pdata +438c 24628000 nrtn zero +438d 704b7600 jam 0 ,mem_le_start_encrypt_timer + +mouse_le_write_enable: +438e d8e00000 arg write_req_enable_flag ,queue +438f 20204375 branch mouse_le_enable_connect_flag + +mouse_le_parse_conn_param_accepted: +4390 6fe082c1 fetch 1 ,mem_le_new_conninterval +4391 1fe67c0c sub pdata ,le_interval_15ms ,null +4392 24214384 nbranch mouse_le_conn_param_lpm_disable ,positive +4393 6fe082c3 fetch 1 ,mem_le_new_connslavelatency +4394 6848cb8a fetcht 1 ,mem_lpm_mult_init +4395 98467c00 isub temp ,null +4396 2021439a branch mouse_le_lpm_mult_reinit ,positive +4397 6fe082c3 fetch 1 ,mem_le_new_connslavelatency +4398 67e0c177 store 1 ,mem_lpm_mult +4399 20204386 branch mouse_le_conn_param_lpm_enable + +mouse_le_lpm_mult_reinit: +439a 6fe0cb8a fetch 1 ,mem_lpm_mult_init +439b 67e0c177 store 1 ,mem_lpm_mult +439c 20204386 branch mouse_le_conn_param_lpm_enable + +mouse_le_clean_connect_flag: +439d 704b7500 jam 0 ,mem_le_connect_status_flag +439e 20600000 rtn + +mouse_le: +439f 44ebc01a bpatch patch1a_7 ,mem_patch1a +43a0 20401b77 call le_fifo_check_nearly_full +43a1 247a0000 nrtn blank +43a2 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +43a3 c07fc3a7 beq 0xff ,mouse_le_next +43a4 6fe0cb75 fetch 1 ,mem_le_connect_status_flag +43a5 1fe17e03 and pdata ,0x03 ,pdata +43a6 c1818000 rtnne 0x03 + +mouse_le_next: +43a7 6fe0caac fetch 1 ,mem_mouse_clear_sensor_data_flag +43a8 205a42c8 call mouse_clear_sensor_data_by_reset ,blank +43a9 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +43aa c280c3d1 bbit1 mouse_24g_pairing_flag ,mouse_le_send_empty_packet +43ab c28043d1 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +43ac c282c3d1 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +43ad c28343d1 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_le_send_empty_packet +43ae 20403f70 call mouse_motion +43af 20404324 call mouse_check_125hz +43b0 24740000 nrtn user +43b1 2040432f call mouse_current_mult_update +43b2 204042cb call mouse_data_xy_release +43b3 2040401d call mouse_wheel_trigger +43b4 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +43b5 c30ac3b8 bbit0 mouse_enable_keyboard ,mouse_le_send_mouse_data +43b6 6fe0cb8b fetch 1 ,mem_customer_key +43b7 c000c3b9 beq 1 ,mouse_le_send_keyboard_package_data + +mouse_le_send_mouse_data: +43b8 202043d3 branch mouse_fill_mouse_data_le + +mouse_le_send_keyboard_package_data: +43b9 6fe0cb8c fetch 1 ,mem_customer_data_trigger +43ba 203a43c3 branch mouse_le_release_keyboard_data ,blank +43bb 6fe44bcd fetch 8 ,mem_customer_key_press + 1 + +mouse_fill_keyboard_package_data_le: +43bc 67e4095c store 8 ,mem_pdatatemp +43bd 6fe0cbcc fetch 1 ,mem_customer_key_press +43be c001c3c5 beq kb_multikey_report_id ,mouse_fill_multimedia_key_data_le +43bf c00143c8 beq kb_system_conctrl_report_id ,mouse_fill_systemctrl_key_data_le +43c0 704ae608 jam 8 ,mem_le_data_len +43c1 68494ae7 fetcht 2 ,mem_le_keyboard_handle +43c2 202043d8 branch mouse_fill_data_le + +mouse_le_release_keyboard_data: +43c3 6fe44bd6 fetch 8 ,mem_customer_key_release + 1 +43c4 202043bc branch mouse_fill_keyboard_package_data_le + +mouse_fill_multimedia_key_data_le: +43c5 704ae603 jam 3 ,mem_le_data_len +43c6 68494ae9 fetcht 2 ,mem_le_multimedia_handle +43c7 202043d8 branch mouse_fill_data_le + +mouse_fill_systemctrl_key_data_le: +43c8 704ae602 jam 2 ,mem_le_data_len +43c9 68494aeb fetcht 2 ,mem_le_systemctrl_handle +43ca 202043d8 branch mouse_fill_data_le + +mouse_fill_battery_level_le: +43cb da200001 arg 1 ,rega +43cc 68494aed fetcht 2 ,mem_le_battery_level_handle +43cd 20401eb3 call le_att_malloc_tx_notify +43ce 6fe0caef fetch 1 ,mem_le_battery_level_percentage +43cf e7e08005 istore 1 ,contw +43d0 20600000 rtn + +mouse_le_send_empty_packet: +43d1 58000000 setarg 0 +43d2 67e3c8d0 store 7 ,mem_mouse_key + +mouse_fill_mouse_data_le: +43d3 704ae607 jam 7 ,mem_le_data_len +43d4 6fe3c8d0 fetch 7 ,mem_mouse_key +43d5 67e3895c store 7 ,mem_pdatatemp +43d6 68494357 fetcht 2 ,mem_le_notify_handle +43d7 202043d8 branch mouse_fill_data_le + +mouse_fill_data_le: +43d8 6fe0cae6 fetch 1 ,mem_le_data_len +43d9 1fe22200 copy pdata ,rega +43da 20401eb3 call le_att_malloc_tx_notify +43db 6848cae6 fetcht 1 ,mem_le_data_len +43dc 18427200 copy temp ,loopcnt +43dd d8c0095c arg mem_pdatatemp ,contr +43de 20207d5f branch memcpy + +mouse_check_51cmd_adv: +43df 704ac700 jam 0 ,mem_mouse_le_reconnect_flag +43e0 6fe1cacc fetch 3 ,mem_le_adv_ind +43e1 67e1c3ec store 3 ,mem_le_adv_data + 4 +43e2 204043e8 call mouse_le_check_adv_flag +43e3 58000005 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable +43e4 e7e08006 istore 1 ,contr +43e5 d8c04ad2 arg mem_le_adv_swift_pair ,contr +43e6 204043ef call mouse_le_adv_data_update +43e7 202078ee branch check_51cmd_adv + +mouse_le_check_adv_flag: +43e8 da2043e8 arg mem_le_adv_data ,rega + +mouse_le_check_adv_flag_loop: +43e9 efe08011 ifetch 1 ,rega +43ea 207a0000 rtn blank +43eb 98c0a200 iadd contr ,rega +43ec efe08006 ifetch 1 ,contr +43ed c1008000 rtneq 0x01 +43ee 202043e9 branch mouse_le_check_adv_flag_loop + +mouse_le_adv_data_update: +43ef d8a043f3 arg mem_le_adv_data + 11 ,contw +43f0 df200013 arg 19 ,loopcnt +43f1 20407d5f call memcpy +43f2 20201abe branch le_modified_name_adv + +mouse_bt_sniff_param_interval_setup: +43f3 5800000c setarg classic_interval_7_5ms +43f4 67e14455 store 2 ,mem_sniff_param_interval +43f5 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +43f6 c38d8000 rtnbit1 mouse_enable_bt_125hz +43f7 5800000e setarg classic_interval_8_75ms +43f8 67e14455 store 2 ,mem_sniff_param_interval +43f9 20600000 rtn + +mouse_bb_event_connected: +43fa 704aae00 jam 0 ,mem_mouse_long_mult_flag +43fb 204042ca call mouse_init_sensor_reset +43fc 20404822 call mouse_24g_first_store_reconn_info +43fd 20204576 branch mouse_stop_discovery + +mouse_bb_disconnected: +43fe 704b7f00 jam 0 ,mem_mouse_enter_sniff_count +43ff 704b8800 jam 0 ,mem_mouse_bt_send_first_package_flag +4400 204043f3 call mouse_bt_sniff_param_interval_setup +4401 20404409 call mouse_bb_discon_clear_stack +4402 6fe1447e fetch app_disc_rsn_size ,mem_app_disconn_reason +4403 c283c410 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +4404 c28031c6 bbit1 app_disc_by_button ,app_disconn_reason_clear +4405 c280c414 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +4406 c2814417 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +4407 c281c417 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +4408 20204553 branch mouse_start_discovery + +mouse_bb_discon_clear_stack: +4409 58000000 setarg 0 +440a 67e448d9 store 8 ,mem_wheel_tb_old_pinlevel +440b e7e20005 istore 4 ,contw +440c 7049c800 jam 0 ,mem_mouse_move_flag +440d 70445400 jam app_handshake_null ,mem_app_handshake_flag +440e 70432600 jam 0 ,mem_ltk_exists +440f 20600000 rtn + +mouse4_0_event_bb_disconn: +4410 2040439d call mouse_le_clean_connect_flag +4411 6fe1447e fetch app_disc_rsn_size ,mem_app_disconn_reason +4412 c28031c6 bbit1 app_disc_by_button ,app_disconn_reason_clear +4413 20203e20 branch mouse_app_enter_hibernate + +mouse_event_light_state_pairing: +4414 c282c417 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +4415 c281c417 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +4416 20204553 branch mouse_start_discovery + +mouse_event_light_state_hibernate: +4417 6fe1478c fetch 2 ,mem_ui_state_map +4418 c2864553 bbit1 ui_state_btn_down ,mouse_start_discovery +4419 204031c6 call app_disconn_reason_clear +441a 20404110 call mouse_key_check_once +441b 204044dc call mouse_commbination_key_process +441c 6fe0cb9f fetch 1 ,mem_commbination_key_statue +441d c000be1d beq commbination_key_state_down ,mouse_delay_enter_hibernata +441e 6fe0cac4 fetch 1 ,mem_mouse_bluetooth_reconnect_timeout +441f 247a0000 nrtn blank +4420 20203e20 branch mouse_app_enter_hibernate + +mouse_bt_event_setup_complete: +4421 20600000 rtn + +mouse_bt_send_first_package_timer_init: +4422 704b8704 jam 4 ,mem_mouse_bt_send_first_package_timer +4423 20600000 rtn + +mouse_bt_hid_handshake: +4424 70445401 jam app_handshake_done ,mem_app_handshake_flag +4425 20403223 call app_lpm_mult_enable +4426 2040321f call app_bt_store_reconn_info +4427 58000000 setarg 0 +4428 67e14788 store 2 ,mem_discovery_timeout_timer_count +4429 67e0c78a store 1 ,mem_hid_handshake_timer_count +442a 20404422 call mouse_bt_send_first_package_timer_init +442b 2020321b branch app_bt_enter_sniff + +mouse_bt_hid_handshake_boot_check: +442c 704b8000 jam 0 ,mem_mouse_bt_boot_mode +442d 6fe0c5f5 fetch 1 ,mem_l2cap_rcv_hidtype +442e 2feffe00 isolate1 0 ,pdata +442f 20608000 rtn true +4430 704b8001 jam 1 ,mem_mouse_bt_boot_mode +4431 20600000 rtn + +mouse_bb_event_reconn_timeout: + +mouse_bb_event_reconn_failed: +4432 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +4433 c07fc2f8 beq 0xff ,mouse_buletooth_fast_conn_end +4434 6fe1478c fetch 2 ,mem_ui_state_map +4435 c3860000 rtnbit1 ui_state_btn_down +4436 c3830000 rtnbit1 ui_state_bt_discovery +4437 c3858000 rtnbit1 ui_state_ble_adv +4438 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4439 c3828000 rtnbit1 mouse_bt_discovery_button_down_flag +443a c299c553 bbit1 mouse_enable_bt_reconnect_timeout_enter_discovery ,mouse_start_discovery +443b c297c81f bbit1 mouse_enable_24g_first_auto_pairing ,mouse_24g_first_bb_event_reconn_timeout +443c 20203e20 branch mouse_app_enter_hibernate + +mouse_enter_sniff_check: +443d 6fe0cb7f fetch 1 ,mem_mouse_enter_sniff_count +443e c1810000 rtnne 2 +443f 704b7f00 jam 0 ,mem_mouse_enter_sniff_count +4440 204043f3 call mouse_bt_sniff_param_interval_setup +4441 20404422 call mouse_bt_send_first_package_timer_init +4442 2020321b branch app_bt_enter_sniff + +mouse_sniff_not_accept: +4443 6fe0cb7f fetch 1 ,mem_mouse_enter_sniff_count +4444 c1010000 rtneq 2 +4445 1fe0fe01 increase 1 ,pdata +4446 67e0cb7f store 1 ,mem_mouse_enter_sniff_count +4447 70445512 jam 0x12 ,mem_sniff_param_interval +4448 20404422 call mouse_bt_send_first_package_timer_init +4449 2020321b branch app_bt_enter_sniff + +mouse_bb_event_pincode: +444a 20405af1 call pincode_reinit +444b 202031ea branch app_bt_set_pincode + +mouse_irtual_cable_unplug: +444c 58000001 setarg 0x01 +444d 67e30041 store 6 ,mem_plap +444e 7000e833 jam rec_3_mode ,mem_record_bt_mode +444f 2020458d branch mouse_unplug_clean_bdaddr + +mouse_irtual_cable_unplug1: +4450 5fffffff setarg -1 +4451 67e30041 store 6 ,mem_plap +4452 7000e833 jam rec_3_mode ,mem_record_bt_mode +4453 704ac1ff jam 0xff ,mem_mouse_bluetooth_fast_conn_flag +4454 204045a2 call mouse_before_store_reconn_info +4455 704939ff jam 0xff ,mem_device1_type +4456 202045ee branch mouse_store_device_info_delay + +mouse_bt: +4457 44ec401b bpatch patch1b_0 ,mem_patch1b +4458 20770000 rtn attempt +4459 6fe0c454 fetch 1 ,mem_app_handshake_flag +445a 207a0000 rtn blank +445b 204052f4 call l2cap_malloc_is_fifo_nearly_full +445c 247a0000 nrtn blank +445d 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +445e c07fc306 beq 0xff ,mouse_bt_fast_conn_send_device_name +445f 6fe0caac fetch 1 ,mem_mouse_clear_sensor_data_flag +4460 205a42c8 call mouse_clear_sensor_data_by_reset ,blank +4461 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4462 c280c48e bbit1 mouse_24g_pairing_flag ,mouse_send_empty_data +4463 c280448e bbit1 mouse_select_device_flag ,mouse_send_empty_data +4464 c282c48e bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +4465 c283448e bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +4466 20403f70 call mouse_motion +4467 20404324 call mouse_check_125hz +4468 24740000 nrtn user +4469 2040432f call mouse_current_mult_update +446a 204042cb call mouse_data_xy_release +446b 2040401d call mouse_wheel_trigger +446c 6fe0cb80 fetch 1 ,mem_mouse_bt_boot_mode +446d c000c47d beq 1 ,mouse_send_data_boot_mode +446e 6fe0cb88 fetch 1 ,mem_mouse_bt_send_first_package_flag +446f 207a0000 rtn blank +4470 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4471 c30ac474 bbit0 mouse_enable_keyboard ,mouse_send_data +4472 6fe0cb8b fetch 1 ,mem_customer_key +4473 c000c491 beq 1 ,mouse_bt_send_keyboard_packet + +mouse_send_data: +4474 da200009 arg 9 ,rega +4475 20404dc0 call hid_malloc_tx_buff +4476 6fe144de fetch 2 ,mem_hid_int_remote_cid +4477 e7e10005 istore 2 ,contw +4478 580002a1 setarg 0x02a1 +4479 e7e10005 istore 2 ,contw +447a 6fe3c8d0 fetch 7 ,mem_mouse_key +447b e7e38005 istore 7 ,contw +447c 20600000 rtn + +mouse_send_data_boot_mode: +447d 6fe0c8d0 fetch 1 ,mem_mouse_key +447e 67e0cb81 store 1 ,mem_mouse_bt_boot_data +447f 6fe0c8d1 fetch 1 ,mem_mouse_x +4480 e7e08005 istore 1 ,contw +4481 6fe0c8d3 fetch 1 ,mem_mouse_y +4482 e7e08005 istore 1 ,contw +4483 6fe148d5 fetch 2 ,mem_mouse_z +4484 e7e10005 istore 2 ,contw +4485 da200007 arg 7 ,rega +4486 20404dc0 call hid_malloc_tx_buff +4487 6fe144de fetch 2 ,mem_hid_int_remote_cid +4488 e7e10005 istore 2 ,contw +4489 580002a1 setarg 0x02a1 +448a e7e10005 istore 2 ,contw +448b 6fe2cb81 fetch 5 ,mem_mouse_bt_boot_data +448c e7e28005 istore 5 ,contw +448d 20600000 rtn + +mouse_send_empty_data: +448e 58000000 setarg 0 +448f 67e3c8d0 store 7 ,mem_mouse_key +4490 20204474 branch mouse_send_data + +mouse_bt_send_keyboard_packet: +4491 6fe0cb8c fetch 1 ,mem_customer_data_trigger +4492 203a44b3 branch mouse_bt_release_keyboard_data ,blank +4493 6fe44bcd fetch 8 ,mem_customer_key_press + 1 + +mouse_bt_send_keyboard_data: +4494 67e4095c store 8 ,mem_pdatatemp +4495 6fe0cbcc fetch 1 ,mem_customer_key_press +4496 c001c4a1 beq kb_multikey_report_id ,mouse_bt_send_multimedia_key_data +4497 c00144aa beq kb_system_conctrl_report_id ,mouse_bt_send_systemctrl_key_data +4498 da20000a arg 10 ,rega +4499 20404dc0 call hid_malloc_tx_buff +449a 6fe144de fetch 2 ,mem_hid_int_remote_cid +449b e7e10005 istore 2 ,contw +449c 580001a1 setarg 0x01a1 +449d e7e10005 istore 2 ,contw +449e 6fe4095c fetch 8 ,mem_pdatatemp +449f e7e40005 istore 8 ,contw +44a0 20600000 rtn + +mouse_bt_send_multimedia_key_data: +44a1 da200004 arg 4 ,rega +44a2 20404dc0 call hid_malloc_tx_buff +44a3 6fe144de fetch 2 ,mem_hid_int_remote_cid +44a4 e7e10005 istore 2 ,contw +44a5 580003a1 setarg 0x03a1 +44a6 e7e10005 istore 2 ,contw +44a7 6fe1095c fetch 2 ,mem_pdatatemp +44a8 e7e10005 istore 2 ,contw +44a9 20600000 rtn + +mouse_bt_send_systemctrl_key_data: +44aa da200003 arg 3 ,rega +44ab 20404dc0 call hid_malloc_tx_buff +44ac 6fe144de fetch 2 ,mem_hid_int_remote_cid +44ad e7e10005 istore 2 ,contw +44ae 580004a1 setarg 0x04a1 +44af e7e10005 istore 2 ,contw +44b0 6fe0895c fetch 1 ,mem_pdatatemp +44b1 e7e08005 istore 1 ,contw +44b2 20600000 rtn + +mouse_bt_release_keyboard_data: +44b3 6fe44bd6 fetch 8 ,mem_customer_key_release + 1 +44b4 20204494 branch mouse_bt_send_keyboard_data + +mouse_bb_event_timer: +44b5 44ecc01b bpatch patch1b_1 ,mem_patch1b +44b6 20403e9b call mouse_adc_read +44b7 20404956 call mouse_low_voltage_led_timer +44b8 2040232b call g24_pair_timeout_timer +44b9 20402556 call g24_reconn_timeout_timer +44ba 204047cd call mouse_24g_long_sleep_param_update_timer +44bb 204048be call mouse_device_poweron_timer +44bc 204048ef call mouse_dpi_led_blink_delay_timer +44bd 2040407c call mouse_dpi_key_check_long_press +44be 204044cc call mouse_bt_discovery_check +44bf 204044dc call mouse_commbination_key_process +44c0 204044ff call mouse_check_discovery_timeout_timer +44c1 20404504 call mouse_check_direct_timeout_timer +44c2 20404512 call mouse_le_enable_att_list_timer +44c3 2040451f call mouse_le_battery_updata_timer +44c4 20404515 call mouse_le_send_smp_security_request_timer +44c5 2040452a call mouse_check_hid_handshake_timer +44c6 2040452d call mouse_bt_check_sniff_req_timeout_timer +44c7 20404532 call mouse_check_reconnect_delay_long_sleep +44c8 20404535 call mouse_current_mult_update_timer +44c9 20404022 call mouse_wheel_trigger_timer +44ca 20404547 call mouse_store_information_delay_timer +44cb 2020453c branch mouse_check_no_data_timeout_timer + +mouse_bt_discovery_check: +44cc 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +44cd c29bc4cf bbit1 mouse_enable_pb_button_long_press_disconvery ,mouse_bt_discovery_by_pb_button +44ce 20600000 rtn + +mouse_bt_discovery_by_pb_button: +44cf 6fe0cb9e fetch 1 ,mem_select_device_button_statue +44d0 c1808000 rtnne pb_button_state_down +44d1 da604b9b arg mem_bt_discovery_count ,regc +44d2 da4044d4 arg mouse_long_button_bt_discovery ,regb +44d3 2020318a branch timer_single_step + +mouse_long_button_bt_discovery: +44d4 6fe0c938 fetch 1 ,mem_device_flag +44d5 c1000000 rtneq mode_24g_device +44d6 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +44d7 c3830000 rtnbit1 mouse_bt_discovery_button_long_down_flag +44d8 d8e00006 arg mouse_bt_discovery_button_long_down_flag ,queue +44d9 204046f0 call mouse_enable_function_flag +44da 20403173 call app_evt_button_long_pressed +44db 2020454e branch mouse_bb_event_discovery_btn + +mouse_commbination_key_process: +44dc 6fe0c938 fetch 1 ,mem_device_flag +44dd c00044e2 beq mode_24g_device ,mouse_24g_commbination_key_process +44de 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +44df c41a8000 rtnbit0 mouse_enable_commbination_key_by_bt_discovery +44e0 6848cbca fetcht 1 ,mem_mouse_commbination_key_bt +44e1 202044e5 branch mouse_commbination_key_start + +mouse_24g_commbination_key_process: +44e2 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +44e3 c4190000 rtnbit0 mouse_enable_commbination_key_by_24g_pairing +44e4 6848cbcb fetcht 1 ,mem_mouse_commbination_key_24g + +mouse_commbination_key_start: +44e5 6048cb9d storet 1 ,mem_mouse_commbination_key +44e6 20404115 call mouse_check_key_gpio +44e7 1fe17e07 and pdata ,0x07 ,pdata +44e8 6848cb9d fetcht 1 ,mem_mouse_commbination_key +44e9 98467c00 isub temp ,null +44ea 2022c4f1 branch mouse_commbination_key_down ,zero + +mouse_commbination_key_up: +44eb 6fe0c78f fetch 1 ,mem_ui_button_timeout +44ec 67e0cba0 store 1 ,mem_combination_ui_button_count +44ed 6fe0cb9f fetch 1 ,mem_commbination_key_statue +44ee c1000000 rtneq commbination_key_state_up +44ef 704b9f00 jam commbination_key_state_up ,mem_commbination_key_statue +44f0 20600000 rtn + +mouse_commbination_key_down: +44f1 204044f6 call mouse_combination_ui_timer +44f2 6fe0cb9f fetch 1 ,mem_commbination_key_statue +44f3 c1008000 rtneq commbination_key_state_down +44f4 704b9f01 jam commbination_key_state_down ,mem_commbination_key_statue +44f5 20207931 branch check_51cmd_bb_reconn_cancel + +mouse_combination_ui_timer: +44f6 da404827 arg mouse_24g_start_pair_mode ,regb +44f7 da604ba0 arg mem_combination_ui_button_count ,regc +44f8 6fe0c938 fetch 1 ,mem_device_flag +44f9 c000318a beq mode_24g_device ,timer_single_step +44fa da4044d4 arg mouse_long_button_bt_discovery ,regb +44fb 2040318a call timer_single_step +44fc 6fe0cba0 fetch 1 ,mem_combination_ui_button_count +44fd c000c6e2 beq 1 ,mouse_bt_discovery_button_down_enable +44fe 20600000 rtn + +mouse_check_discovery_timeout_timer: +44ff da604ac2 arg mem_mouse_discovery_timer ,regc +4500 da404502 arg mouse_check_discovery_timeout ,regb +4501 20203191 branch timer_single_step_2b + +mouse_check_discovery_timeout: +4502 20404576 call mouse_stop_discovery +4503 20203e20 branch mouse_app_enter_hibernate + +mouse_check_direct_timeout_timer: +4504 da604b77 arg mem_mouse_direct_timer ,regc +4505 da40450a arg mouse_check_direct_timeout ,regb +4506 20403191 call timer_single_step_2b +4507 6fe0cb77 fetch 1 ,mem_mouse_direct_timer +4508 c000b203 beq 1 ,app_ble_stop_direct_adv +4509 20600000 rtn + +mouse_check_direct_timeout: +450a 6fe0cac1 fetch 1 ,mem_mouse_bluetooth_fast_conn_flag +450b c07fc2f8 beq 0xff ,mouse_buletooth_fast_conn_end +450c 6fe0cab0 fetch 1 ,mem_reconn_times +450d 243a470e nbranch mouse_polling_device ,blank +450e 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +450f c299c553 bbit1 mouse_enable_bt_reconnect_timeout_enter_discovery ,mouse_start_discovery +4510 c297c81f bbit1 mouse_enable_24g_first_auto_pairing ,mouse_24g_first_bb_event_reconn_timeout +4511 20203e20 branch mouse_app_enter_hibernate + +mouse_le_enable_att_list_timer: +4512 da604b76 arg mem_le_start_encrypt_timer ,regc +4513 da40438e arg mouse_le_write_enable ,regb +4514 2020318a branch timer_single_step + +mouse_le_send_smp_security_request_timer: +4515 6fe0cac6 fetch 1 ,mem_mouse_le_bb_connected_flag +4516 207a0000 rtn blank +4517 da604ac8 arg mem_mouse_send_secutiry_request_timer ,regc +4518 da40451a arg mouse_le_pairing_sm_start_check ,regb +4519 2020318a branch timer_single_step + +mouse_le_pairing_sm_start_check: +451a 6fe0cac7 fetch 1 ,mem_mouse_le_reconnect_flag +451b 247a0000 nrtn blank +451c 6fe0c39b fetch 1 ,mem_le_pairing_state +451d c1800000 rtnne flag_le_pairing_null +451e 20202090 branch le_pairing_sm_start + +mouse_le_battery_updata_timer: +451f da604af2 arg mem_le_battery_level_updata_timer ,regc +4520 da404522 arg mouse_le_battery_level_updata ,regb +4521 2020318a branch timer_single_step + +mouse_le_battery_level_updata: +4522 6fe14af0 fetch 2 ,mem_le_battery_level_updata_timer_init +4523 67e14af2 store 2 ,mem_le_battery_level_updata_timer +4524 202043cb branch mouse_fill_battery_level_le + +mouse_le_enable_att_list: +4525 6fe0cb75 fetch 1 ,mem_le_connect_status_flag +4526 c3810000 rtnbit1 ll_pairing_success_flag +4527 2040436c call mouse_updata_le_param +4528 d8e00000 arg write_req_enable_flag ,queue +4529 20204375 branch mouse_le_enable_connect_flag + +mouse_check_hid_handshake_timer: +452a da60478a arg mem_hid_handshake_timer_count ,regc +452b da404424 arg mouse_bt_hid_handshake ,regb +452c 2020318a branch timer_single_step + +mouse_bt_check_sniff_req_timeout_timer: +452d da604b87 arg mem_mouse_bt_send_first_package_timer ,regc +452e da404530 arg mouse_bt_send_first_package ,regb +452f 2020318a branch timer_single_step + +mouse_bt_send_first_package: +4530 704b8801 jam 1 ,mem_mouse_bt_send_first_package_flag +4531 20600000 rtn + +mouse_check_reconnect_delay_long_sleep: +4532 da604ac4 arg mem_mouse_bluetooth_reconnect_timeout ,regc +4533 da403e20 arg mouse_app_enter_hibernate ,regb +4534 2020318a branch timer_single_step + +mouse_current_mult_update_timer: +4535 da604aaf arg mem_mouse_current_mult_timer ,regc +4536 da404538 arg mouse_current_mult_reinit ,regb +4537 2020318a branch timer_single_step + +mouse_current_mult_reinit: +4538 6fe0cb8a fetch 1 ,mem_lpm_mult_init +4539 67e0c177 store 1 ,mem_lpm_mult +453a 704aae01 jam 1 ,mem_mouse_long_mult_flag +453b 20600000 rtn + +mouse_check_no_data_timeout_timer: +453c 6fe0c92a fetch 1 ,mem_usb_addr +453d c3838000 rtnbit1 7 +453e da604ab2 arg mem_mouse_no_data_timer ,regc +453f da404541 arg mouse_check_no_data_timeout ,regb +4540 20203191 branch timer_single_step_2b + +mouse_check_no_data_timeout: +4541 6fe0c938 fetch 1 ,mem_device_flag +4542 c00047e1 beq mode_24g_device ,mouse_24g_hibernate_set +4543 2020431b branch mouse_disconnect + +mouse_no_data_timer_init: +4544 6fe14bbe fetch 2 ,mem_mouse_no_data_timeout +4545 67e14ab2 store 2 ,mem_mouse_no_data_timer +4546 20600000 rtn + +mouse_store_information_delay_timer: +4547 da6049bf arg mem_store_information_delay_timer ,regc +4548 da40454a arg mouse_store_device_info_check ,regb +4549 2020318a branch timer_single_step + +mouse_store_device_info_check: +454a 204045f1 call mouse_store_device_info +454b 6fe0cac5 fetch 1 ,mem_mouse_need_soft_reset +454c 243a46c0 nbranch mouse_soft_reset ,blank +454d 20600000 rtn + +mouse_bb_event_discovery_btn: +454e 280ffe26 isolate1 mark_24g ,mark +454f 2040c7f2 call mouse_24g_stop ,true +4550 2040431b call mouse_disconnect +4551 2040439d call mouse_le_clean_connect_flag +4552 20204553 branch mouse_start_discovery + +mouse_start_discovery: +4553 44ed401b bpatch patch1b_2 ,mem_patch1b +4554 20404314 call mouse_bluetooth_fast_conn_disable +4555 6fe1478c fetch 2 ,mem_ui_state_map +4556 c285c55f bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +4557 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4558 c304455f bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +4559 68494997 fetcht 2 ,mem_random_addr_increase_count +455a 18408401 increase 1 ,temp +455b 60494997 storet 2 ,mem_random_addr_increase_count +455c 6049437b storet 2 ,mem_le_lap + 1 +455d 180a7e00 random pdata +455e 67e0c37a store 1 ,mem_le_lap + +mouse_start_discovery_norandom: +455f 6fe1cac9 fetch 3 ,mem_mouse_le_lap_temp +4560 67e1c37d store 3 ,mem_le_lap + 3 +4561 20403225 call app_lpm_mult_disable +4562 6fe14791 fetch 2 ,mem_discovery_timeout +4563 67e14ac2 store 2 ,mem_mouse_discovery_timer +4564 7000bd06 jam 6 ,mem_connection_options +4565 58000000 setarg 0 +4566 67e14ab2 store 2 ,mem_mouse_no_data_timer +4567 67e0cb77 store 1 ,mem_mouse_direct_timer +4568 67e0cac4 store 1 ,mem_mouse_bluetooth_reconnect_timeout +4569 67e0cba7 store 1 ,mem_mouse_device_poweron_timer_count +456a 67e0caac store 1 ,mem_mouse_clear_sensor_data_flag +456b d8e00002 arg mouse_store_eeprom_flag ,queue +456c 204046f0 call mouse_enable_function_flag +456d 204046e4 call mouse_bt_discovery_button_down_disable +456e 6fe0cbb3 fetch 1 ,mem_mouse_bluetooth_type +456f 2feffe01 isolate1 mode_4_mouse ,pdata +4570 2040c3df call mouse_check_51cmd_adv ,true +4571 6fe0cbb3 fetch 1 ,mem_mouse_bluetooth_type +4572 2feffe00 isolate1 mode_3_mouse ,pdata +4573 2040f8c4 call check_51cmd_start_discovery ,true +4574 2040498e call mouse_low_voltage_led_blink_disable +4575 202048cc branch mouse_discover_setting_led_gpio + +mouse_stop_discovery: +4576 44edc01b bpatch patch1b_3 ,mem_patch1b +4577 d8e00006 arg mouse_bt_discovery_button_long_down_flag ,queue +4578 204046f4 call mouse_disable_function_flag +4579 704ac400 jam 0 ,mem_mouse_bluetooth_reconnect_timeout +457a 6fe0cbb3 fetch 1 ,mem_mouse_bluetooth_type +457b 2feffe01 isolate1 mode_4_mouse ,pdata +457c 2040c581 call mouse_stop_le_adv ,true +457d 6fe0cbb3 fetch 1 ,mem_mouse_bluetooth_type +457e 2feffe00 isolate1 mode_3_mouse ,pdata +457f 2040c583 call mouse_stop_bt3_discovery ,true +4580 20204912 branch mouse_device_led_off + +mouse_stop_le_adv: +4581 704b7700 jam 0 ,mem_mouse_direct_timer +4582 202078f4 branch check_51cmd_stop_adv + +mouse_stop_bt3_discovery: +4583 58000000 setarg 0 +4584 67e14ac2 store 2 ,mem_mouse_discovery_timer +4585 202078c9 branch check_51cmd_stop_discovery + +mouse_store_remote_bdaddr: +4586 44ee401b bpatch patch1b_4 ,mem_patch1b +4587 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4588 c4010000 rtnbit0 mouse_store_eeprom_flag +4589 204048c6 call mouse_device_poweron_timer_init +458a d8e00002 arg mouse_store_eeprom_flag ,queue +458b 204046f4 call mouse_disable_function_flag +458c 2040458f call mouse_check_device_addr + +mouse_unplug_clean_bdaddr: +458d 204045a2 call mouse_before_store_reconn_info +458e 202045ee branch mouse_store_device_info_delay + +mouse_check_device_addr: +458f 6fe080e8 fetch 1 ,mem_record_bt_mode +4590 c01a4593 beq rec_4_mode ,mouse_check_le_device_addr +4591 c019c596 beq rec_3_mode ,mouse_check_bt_device_addr +4592 20600000 rtn + +mouse_check_le_device_addr: +4593 67e0cb78 store 1 ,mem_device_addr_temp +4594 6fe30297 fetch 6 ,mem_le_plap +4595 20204598 branch mouse_check_bt_device_addr_common + +mouse_check_bt_device_addr: +4596 67e0cb78 store 1 ,mem_device_addr_temp +4597 6fe30041 fetch 6 ,mem_plap + +mouse_check_bt_device_addr_common: +4598 67e34b79 store 6 ,mem_device_addr_temp + 1 +4599 6fe3cb78 fetch 7 ,mem_device_addr_temp +459a d8c04939 arg mem_device1_type ,contr +459b df200003 arg 3 ,loopcnt + +mouse_check_device_addr_end: +459c e8438006 ifetcht 7 ,contr +459d 98467c00 isub temp ,null +459e 2022c5b7 branch mouse_clean_addr ,zero +459f 18c08c16 increase 22 ,contr +45a0 c200459c loop mouse_check_device_addr_end +45a1 20600000 rtn + +mouse_before_store_reconn_info: +45a2 da204939 arg mem_device1_type ,rega +45a3 6fe0c938 fetch 1 ,mem_device_flag +45a4 1fe0ffff increase -1 ,pdata +45a5 1feffe1d mul32 pdata ,29 ,pdata +45a6 9a20a200 iadd rega ,rega +45a7 6fe080e8 fetch 1 ,mem_record_bt_mode +45a8 e7e08011 istore 1 ,rega +45a9 c01a45ac beq rec_4_mode ,mouse_store_le_device +45aa c019c5b3 beq rec_3_mode ,mouse_store_bt_device +45ab 20600000 rtn + +mouse_store_le_device: +45ac 6fe30297 fetch 6 ,mem_le_plap +45ad e7e30005 istore 6 ,contw +45ae d8c04316 arg mem_le_ltk ,contr +45af 20407d0c call memcpy16 +45b0 6fe3437a fetch 6 ,mem_le_lap +45b1 e7e30005 istore 6 ,contw +45b2 20600000 rtn + +mouse_store_bt_device: +45b3 6fe30041 fetch 6 ,mem_plap +45b4 e7e30005 istore 6 ,contw +45b5 d8c041cb arg mem_link_key ,contr +45b6 20207d0c branch memcpy16 + +mouse_clean_addr: +45b7 18c08dfa increase -6 ,contr +45b8 18c20a00 copy contr ,contw +45b9 684b4b79 fetcht 6 ,mem_device_addr_temp + 1 +45ba 18408403 increase 3 ,temp +45bb e0430005 istoret 6 ,contw +45bc 20600000 rtn + +mouse_select_reconn_device: +45bd da204939 arg mem_device1_type ,rega +45be 6fe0c938 fetch 1 ,mem_device_flag +45bf c1000000 rtneq mode_24g_device +45c0 1fe0ffff increase -1 ,pdata +45c1 1feffe1d mul32 pdata ,29 ,pdata +45c2 9a20a200 iadd rega ,rega +45c3 efe08011 ifetch 1 ,rega +45c4 67e0c482 store 1 ,mem_xrecord_mode +45c5 c019c5c8 beq rec_3_mode ,mouse_load_bt_device +45c6 c01a45cd beq rec_4_mode ,mouse_load_le_device +45c7 20600000 rtn + +mouse_load_bt_device: +45c8 efe30006 ifetch 6 ,contr + +mouse_load_bt_device_end: +45c9 67e341dd store 6 ,mem_hci_plap +45ca d8a041cb arg mem_link_key ,contw +45cb 20407d0c call memcpy16 +45cc 2020602c branch check_link_key_load + +mouse_load_le_device: +45cd efe30006 ifetch 6 ,contr + +mouse_load_le_device_end: +45ce 67e341dd store 6 ,mem_hci_plap +45cf d8a04316 arg mem_le_ltk ,contw +45d0 20407d0c call memcpy16 +45d1 efe30006 ifetch 6 ,contr +45d2 67e3437a store 6 ,mem_le_lap +45d3 20600000 rtn + +mouse_app_initflag_check: +45d4 6fe14990 fetch 2 ,mem_store_flag +45d5 d840aa55 arg eeprom_init_flag ,temp +45d6 98467c00 isub temp ,null +45d7 2022c5e2 branch mouse_load_device_info ,zero +45d8 60494990 storet 2 ,mem_store_flag +45d9 204045e7 call mouse_ble_init_address +45da 6fe0cab4 fetch 1 ,mem_device_flag_temp +45db 67e0c938 store 1 ,mem_device_flag +45dc 6fe0c926 fetch 1 ,mem_config_sensor_dpi +45dd 67e0c992 store 1 ,mem_mouse_dpi +45de 6fe2488d fetch 4 ,mem_24g_fast_conn_addr +45df 67e24891 store 4 ,mem_24g_receiver_addr +45e0 67e2483c store 4 ,mem_24g_addr +45e1 20600000 rtn + +mouse_load_device_info: +45e2 204045bd call mouse_select_reconn_device +45e3 6fe24993 fetch 4 ,mem_mouse_24g_addr +45e4 67e24891 store 4 ,mem_24g_receiver_addr +45e5 67e2483c store 4 ,mem_24g_addr +45e6 20600000 rtn + +mouse_ble_init_address: +45e7 6fe3437a fetch 6 ,mem_le_lap +45e8 67e34950 store 6 ,mem_device1_locall_addr +45e9 1fe0ff00 add pdata ,0x0100 ,pdata +45ea 67e3496d store 6 ,mem_device2_locall_addr +45eb 1fe0ff00 add pdata ,0x0100 ,pdata +45ec 67e3498a store 6 ,mem_device3_locall_addr +45ed 20600000 rtn + +mouse_store_device_info_delay: +45ee 6fe0c9c0 fetch 1 ,mem_store_information_delay_timer_init +45ef 67e0c9bf store 1 ,mem_store_information_delay_timer +45f0 20600000 rtn + +mouse_store_device_info: +45f1 44eec01b bpatch patch1b_5 ,mem_patch1b +45f2 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +45f3 c289c63f bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +45f4 c2894603 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +45f5 20600000 rtn + +mouse_load_flash_info_check: +45f6 20405d10 call spid_init_flash +45f7 2040460a call mouse_spid_flash_release_form_powerdown +45f8 204045fd call mouse_information_flash_parameters +45f9 20405d33 call spid_read_flash +45fa 20404611 call mouse_spid_flash_powerdown +45fb 204045d4 call mouse_app_initflag_check +45fc 20203f65 branch mouse_sensor_spi_init + +mouse_information_flash_parameters: +45fd 580049b8 setarg mem_mouse_information_end +45fe d8404938 arg mem_mouse_information_start ,temp +45ff 98460400 isub temp ,temp +4600 6fe1c9b8 fetch 3 ,mem_flash_base +4601 da204938 arg mem_mouse_information_start ,rega +4602 20600000 rtn + +mouse_store_flash_device_info: +4603 20405d10 call spid_init_flash +4604 2040460a call mouse_spid_flash_release_form_powerdown +4605 2040461f call mouse_flash_erase_sector +4606 204045fd call mouse_information_flash_parameters +4607 20404622 call mouse_spid_write_flash +4608 20404611 call mouse_spid_flash_powerdown +4609 20203f65 branch mouse_sensor_spi_init + +mouse_spid_flash_release_form_powerdown: +460a 700964ab jam flash_command_release_from_powerdown ,mem_temp + +mouse_spid_write_flash_cmd: +460b 204061d7 call delay_nop100 +460c 20405d15 call spid_unlock_flash +460d da2049bb arg mem_write_flash_head_temp ,rega +460e 68488964 fetcht 1 ,mem_temp +460f 20404613 call mouse_spid_write_flash_cmd_common +4610 202061d7 branch delay_nop100 + +mouse_spid_flash_powerdown: +4611 700964b9 jam flash_command_powerdown ,mem_temp +4612 2020460b branch mouse_spid_write_flash_cmd + +mouse_spid_write_flash_cmd_common: +4613 e0408011 istoret 1 ,rega +4614 1ff10400 rshift16 pdata ,temp +4615 e0408005 istoret 1 ,contw +4616 1fec8400 rshift8 pdata ,temp +4617 e0408005 istoret 1 ,contw +4618 e7e08005 istore 1 ,contw +4619 1a227e00 deposit rega +461a 67f1008a store 2 ,core_spid_txaddr +461b 58000000 setarg 0 +461c 67f1008e store 2 ,core_spid_rxlen +461d 70800602 jam spid_start ,core_misc_ctrl +461e 20205ccf branch wait_spid_done + +mouse_flash_erase_sector: +461f 6fe1c9b8 fetch 3 ,mem_flash_base +4620 67e1c4a5 store 3 ,mem_spi_write_addr +4621 20205ceb branch spid_flash_erase_sector + 2 + +mouse_spid_write_flash: +4622 1fe22600 copy pdata ,regc +4623 1a227e00 copy rega ,pdata +4624 1fe0fffc increase -4 ,pdata +4625 1fe22400 copy pdata ,regb +4626 efe20012 ifetch 4 ,regb +4627 67e249bb store 4 ,mem_write_flash_head_temp +4628 1a627e00 copy regc ,pdata +4629 20405d22 call spid_write_flash +462a 6fe249bb fetch 4 ,mem_write_flash_head_temp +462b e7e20012 istore 4 ,regb +462c 20600000 rtn + +mouse_flash_power_down: +462d 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +462e c4090000 rtnbit0 mouse_enable_flash +462f 20404611 call mouse_spid_flash_powerdown +4630 20405b08 call twspi_enable +4631 6848c4b5 fetcht 1 ,mem_spi_cs_gpio +4632 20406065 call gpio_out_inactive +4633 6848c4ba fetcht 1 ,mem_spi_hold_gpio +4634 20203f54 branch mouse_gpio_config_input_pd + +mouse_load_eeprom_info_check: +4635 20405da5 call iicd_read_init_pin +4636 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4637 2feffe09 isolate1 mouse_enable_2k_eeprom ,pdata +4638 2440ddbf ncall clear_eeprom_size_2k ,true +4639 2040463b call mouse_eeprom_load_recon_info +463a 202045d4 branch mouse_app_initflag_check + +mouse_eeprom_load_recon_info: +463b d8400080 arg 128 ,temp +463c da204938 arg mem_device_flag ,rega +463d da400000 arg mouse_info_eeprom_offect ,regb +463e 20205ddc branch iicd_read_eep_data + +mouse_store_eeprom_device_info: +463f d8400080 arg 128 ,temp +4640 da204938 arg mem_device_flag ,rega +4641 da400000 arg mouse_info_eeprom_offect ,regb +4642 20205dce branch iicd_write_protect_eep_data + +mouse_store_eerpom_dpi: +4643 d8400001 arg 1 ,temp +4644 da204992 arg mem_mouse_dpi ,rega +4645 da40005a arg mouse_dpi_eeprom_offect ,regb +4646 20205dce branch iicd_write_protect_eep_data + +mouse_load_eeprom_dpi: +4647 d8400001 arg 1 ,temp +4648 da204992 arg mem_mouse_dpi ,rega +4649 da40005a arg mouse_dpi_eeprom_offect ,regb +464a 20205ddc branch iicd_read_eep_data + +mouse_idle: +464b 44ef401b bpatch patch1b_6 ,mem_patch1b +464c 20404990 call mouse_low_voltage_led_no_enter_lpm +464d 20407936 call ui_check_paring_button +464e 20404027 call mouse_dpi_check +464f 20404655 call mouse_select_device_check +4650 204046a0 call mouse_check_select_device_by_switch +4651 204046d6 call mouse_bt_button_check +4652 20403dbd call mouse_usb_isr +4653 20403f88 call mouse_wheel_check +4654 20203dd4 branch mouse_usb_mode + +mouse_select_device_check: +4655 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4656 c294c65a bbit1 mouse_enable_select_device_by_pb_button ,mouse_select_device_by_pb_button +4657 c29bc65a bbit1 mouse_enable_pb_button_long_press_disconvery ,mouse_select_device_by_pb_button +4658 20600000 rtn + +mouse_select_device_by_pb_button_check_once: +4659 704b9403 jam 0x03 ,mem_mouse_pbkey_press_status + +mouse_select_device_by_pb_button: +465a 6fe0c91b fetch 1 ,mem_config_select_device_button_gpio +465b c17f8000 rtneq gpio_disable +465c da200000 arg 0 ,rega +465d 704b9606 jam mouse_pb_key ,mem_mouse_key_temp +465e 6848c91b fetcht 1 ,mem_config_select_device_button_gpio +465f 2040466a call mouse_pb_button_check +4660 67e0cb94 store 1 ,mem_mouse_pbkey_press_status +4661 6fe0c910 fetch 1 ,mem_matrix_public_gpio +4662 c07fc667 beq gpio_disable ,mouse_3io6key_pb_button_check_end +4663 20404168 call mouse_matrix_public_gpio_reset + +mouse_select_device_by_pb_button_exit: +4664 1a227e00 copy rega ,pdata +4665 c283468b bbit1 mouse_pb_key ,mouse_select_device_button_down +4666 20204680 branch mouse_select_device_button_up + +mouse_3io6key_pb_button_check_end: +4667 6848c91b fetcht 1 ,mem_config_select_device_button_gpio +4668 20403f56 call mouse_gpio_config_input_pu +4669 20204664 branch mouse_select_device_by_pb_button_exit + +mouse_pb_button_check: +466a 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +466b c296c676 bbit1 mouse_enable_pb_button_connect_gnd ,mouse_pb_button_connect_gnd +466c 6fe0cb94 fetch 1 ,mem_mouse_pbkey_press_status +466d 1fe22600 copy pdata ,regc +466e 6fe0c910 fetch 1 ,mem_matrix_public_gpio +466f c07fc195 beq gpio_disable ,mouse_3io6key_check +4670 6fe0cb9a fetch 1 ,mem_mouse_ghost_flag +4671 243a4673 nbranch mouse_select_device_by_pb_button_end ,blank +4672 20204678 branch mouse_pb_button_connect_matrix + +mouse_select_device_by_pb_button_end: +4673 704b9e00 jam pb_button_state_up ,mem_select_device_button_statue +4674 704b9400 jam 0 ,mem_mouse_pbkey_press_status +4675 20600000 rtn + +mouse_pb_button_connect_gnd: +4676 6fe0cb94 fetch 1 ,mem_mouse_pbkey_press_status +4677 20204187 branch mouse_check_key_connect_gnd + +mouse_pb_button_connect_matrix: +4678 20406059 call gpio_get_bit +4679 6848c910 fetcht 1 ,mem_matrix_public_gpio +467a 2020c676 branch mouse_pb_button_connect_gnd ,true +467b 6848c910 fetcht 1 ,mem_matrix_public_gpio +467c 20406069 call gpio_out_active +467d 6848c91b fetcht 1 ,mem_config_select_device_button_gpio +467e 6fe0cb94 fetch 1 ,mem_mouse_pbkey_press_status +467f 20204187 branch mouse_check_key_connect_gnd + +mouse_select_device_button_up: +4680 6fe0cb9e fetch 1 ,mem_select_device_button_statue +4681 c1000000 rtneq pb_button_state_up +4682 704b9e00 jam pb_button_state_up ,mem_select_device_button_statue +4683 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4684 c39a0000 rtnbit1 mouse_enable_pb_button_short_press_enter_discovery +4685 6fe0cb9b fetch 1 ,mem_bt_discovery_count +4686 1fe67c14 sub pdata ,20 ,null +4687 244146b5 ncall mouse_ready_reconnection_by_button ,positive +4688 6fe0c78f fetch 1 ,mem_ui_button_timeout +4689 67e0cb9b store 1 ,mem_bt_discovery_count +468a 20600000 rtn + +mouse_select_device_button_down: +468b 20404697 call mouse_select_device_ghost_check +468c 20740000 rtn user +468d 6fe0cb9e fetch 1 ,mem_select_device_button_statue +468e c1008000 rtneq pb_button_state_down +468f 704b9e01 jam pb_button_state_down ,mem_select_device_button_statue +4690 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4691 c29a44d4 bbit1 mouse_enable_pb_button_short_press_enter_discovery ,mouse_long_button_bt_discovery +4692 6fe0cb77 fetch 1 ,mem_mouse_direct_timer +4693 207a0000 rtn blank +4694 6fe0c902 fetch 1 ,mem_mouse_direct_timeout +4695 67e0cb77 store 1 ,mem_mouse_direct_timer +4696 20600000 rtn + +mouse_select_device_ghost_check: +4697 78547c00 disable user +4698 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4699 c3968000 rtnbit1 mouse_enable_pb_button_connect_gnd +469a 6fe0cb8e fetch 1 ,mem_mouse_lkey_press_status +469b 207a0000 rtn blank +469c 6fe0cb8f fetch 1 ,mem_mouse_rkey_press_status +469d 207a0000 rtn blank +469e 78347c00 enable user +469f 20600000 rtn + +mouse_check_select_device_by_switch: +46a0 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +46a1 c29546a4 bbit1 mouse_enable_select_device_by_switch_gpio ,mouse_check_select_device_by_switch_gpio +46a2 c295be9b bbit1 mouse_enable_select_device_by_switch_adc ,mouse_adc_read +46a3 20600000 rtn + +mouse_check_select_device_by_switch_gpio: +46a4 6848c91e fetcht 1 ,mem_device_switch_gpio +46a5 20403f56 call mouse_gpio_config_input_pu +46a6 6848c91e fetcht 1 ,mem_device_switch_gpio +46a7 20406059 call gpio_get_bit +46a8 2020c6ad branch mouse_check_select_24gdevice ,true + +mouse_select_btdevice: +46a9 6fe0c938 fetch 1 ,mem_device_flag +46aa c1008000 rtneq mode_bt_device1 +46ab 70493801 jam mode_bt_device1 ,mem_device_flag +46ac 20204316 branch mouse_stop_bluetooth_mode + +mouse_check_select_24gdevice: +46ad 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +46ae c315c6b1 bbit0 mouse_enable_select_device_by_switch_adc ,mouse_check_select_24g_device +46af 6fe348ef fetch 6 ,mem_mouse_vdd_switch_gnd_full_vol +46b0 67e348e3 store 6 ,mem_mouse_vdd_calculate_set + +mouse_check_select_24g_device: +46b1 6fe0c938 fetch 1 ,mem_device_flag +46b2 c1000000 rtneq mode_24g_device +46b3 70493800 jam mode_24g_device ,mem_device_flag +46b4 202047f2 branch mouse_24g_stop + +mouse_ready_reconnection_by_button: +46b5 44efc01b bpatch patch1b_7 ,mem_patch1b +46b6 6fe0cbb4 fetch 1 ,mem_device_number +46b7 c1008000 rtneq 1 +46b8 204046c2 call mouse_select_device_number +46b9 6048c938 storet 1 ,mem_device_flag + +mouse_store_device_number_before_reset: +46ba 7041ca00 jam 0 ,mem_link_key_exists +46bb 204046da call mouse_select_device_enable +46bc 20404316 call mouse_stop_bluetooth_mode +46bd 204046dc call mouse_select_device_disable +46be 704ac501 jam 1 ,mem_mouse_need_soft_reset +46bf 202045ee branch mouse_store_device_info_delay + +mouse_soft_reset: +46c0 204046da call mouse_select_device_enable +46c1 20205d8c branch soft_reset_chip + +mouse_select_device_number: +46c2 6848c938 fetcht 1 ,mem_device_flag +46c3 18408401 increase 1 ,temp +46c4 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +46c5 c288c6c9 bbit1 mouse_enable_24g ,mouse_select_device_number_24g +46c6 18467c02 sub temp ,2 ,null +46c7 244146d0 ncall mouse_select_device_count_clean_bt ,positive +46c8 20600000 rtn + +mouse_select_device_number_24g: +46c9 6fe0cbb4 fetch 1 ,mem_device_number +46ca 1fe0ffff increase -1 ,pdata +46cb 98467c00 isub temp ,null +46cc 244146ce ncall mouse_select_device_count_clean_24g ,positive +46cd 20600000 rtn + +mouse_select_device_count_clean_24g: +46ce d8400000 arg 0 ,temp +46cf 20600000 rtn + +mouse_select_device_count_clean_bt: +46d0 d8400001 arg 1 ,temp +46d1 20600000 rtn + +mouse_store_device_number2eeprom: +46d2 d8400001 arg 1 ,temp +46d3 da204938 arg mem_device_flag ,rega +46d4 da400000 arg 0 ,regb +46d5 20205dce branch iicd_write_protect_eep_data + +mouse_bt_button_check: +46d6 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +46d7 c41a0000 rtnbit0 mouse_enable_pb_button_short_press_enter_discovery +46d8 2040465a call mouse_select_device_by_pb_button +46d9 20600000 rtn + +mouse_select_device_enable: +46da d8e00000 arg mouse_select_device_flag ,queue +46db 202046f0 branch mouse_enable_function_flag + +mouse_select_device_disable: +46dc d8e00000 arg mouse_select_device_flag ,queue +46dd 202046f4 branch mouse_disable_function_flag + +mouse_bt_cannel_reconn_enable: +46de d8e00003 arg mouse_bt_cannel_reconn_flag ,queue +46df 202046f0 branch mouse_enable_function_flag + +mouse_bt_cannel_reconn_disable: +46e0 d8e00003 arg mouse_bt_cannel_reconn_flag ,queue +46e1 202046f4 branch mouse_disable_function_flag + +mouse_bt_discovery_button_down_enable: +46e2 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue +46e3 202046f0 branch mouse_enable_function_flag + +mouse_bt_discovery_button_down_disable: +46e4 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue +46e5 202046f4 branch mouse_disable_function_flag + +mouse_adc_read_enable: +46e6 d8e00014 arg mouse_enable_adc ,queue +46e7 202046f0 branch mouse_enable_function_flag + +mouse_24g_set_250hz: +46e8 d8e00018 arg mouse_enable_24g_250hz ,queue +46e9 202046f0 branch mouse_enable_function_flag + +mouse_24g_search_dongle_enable: +46ea d8e00016 arg mouse_enable_24g_search_dongle ,queue +46eb 202046f0 branch mouse_enable_function_flag + +mouse_16m_enable: +46ec d8e0000c arg mouse_enable_16m ,queue +46ed 202046f0 branch mouse_enable_function_flag + +mouse_dpi_4level_enable: +46ee d8e0001c arg mouse_enable_dpi_level_4 ,queue +46ef 202046f0 branch mouse_enable_function_flag + +mouse_enable_function_flag: +46f0 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +46f1 f9207e00 qset1 pdata +46f2 67e44bab store mouse_flag_len ,mem_mouse_flag +46f3 20600000 rtn + +mouse_disable_function_flag: +46f4 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +46f5 f93ffe00 qset0 pdata +46f6 67e44bab store mouse_flag_len ,mem_mouse_flag +46f7 20600000 rtn + +mouse_customer_key_enable: +46f8 d8e00015 arg mouse_enable_keyboard ,queue +46f9 204046f0 call mouse_enable_function_flag +46fa 58000000 setarg 0 +46fb 67e44bcc store 8 ,mem_customer_key_press +46fc 67e44bd5 store 8 ,mem_customer_key_release +46fd 6fe0c90a fetch 1 ,mem_mouse_enable_flag +46fe 1fe17ec0 and pdata ,0xc0 ,pdata +46ff c0204705 beq 0x40 ,mouse_customer_key_ctrl_alt_a +4700 c0404707 beq 0x80 ,mouse_customer_ac_home +4701 c060470c beq 0xc0 ,mouse_customer_key_play +4702 58070008 setarg 0x070008 + +mouse_customer_standrad_key_set: +4703 67e44bcd store 8 ,mem_customer_key_press + 1 +4704 20600000 rtn + +mouse_customer_key_ctrl_alt_a: +4705 58040005 setarg 0x040005 +4706 20204703 branch mouse_customer_standrad_key_set + +mouse_customer_ac_home: +4707 58022303 setarg 0x022303 + +mouse_customer_media_key_set: +4708 67e44bcc store 8 ,mem_customer_key_press +4709 58000003 setarg 0x03 +470a 67e44bd5 store 8 ,mem_customer_key_release +470b 20600000 rtn + +mouse_customer_key_play: +470c 5800cd03 setarg 0x00cd03 +470d 20204708 branch mouse_customer_media_key_set + +mouse_polling_device: +470e 44f0401c bpatch patch1c_0 ,mem_patch1c +470f 6fe0cab0 fetch 1 ,mem_reconn_times +4710 1fe0ffff increase -1 ,pdata +4711 67e0cab0 store 1 ,mem_reconn_times +4712 6848c938 fetcht 1 ,mem_device_flag +4713 18467c01 sub temp ,1 ,null +4714 2442c6c2 ncall mouse_select_device_number ,zero +4715 6048c938 storet 1 ,mem_device_flag +4716 7041ca00 jam 0 ,mem_link_key_exists +4717 204046d2 call mouse_store_device_number2eeprom +4718 204045a2 call mouse_before_store_reconn_info +4719 20203d59 branch mouse_start_reconnect_device + +mouse_drawing_optima: +471a 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +471b c41c0000 rtnbit0 mouse_enable_smoother +471c 6fe248d1 fetch 4 ,mem_mouse_x +471d 207a0000 rtn blank +471e 204047bd call mouse_data_abs_check +471f 58000003 setarg 0x03 +4720 204047b3 call mouse_pdata_greater_than_check +4721 205a47af call mouse_disable_asm ,blank +4722 245a47b1 ncall mouse_enable_asm ,blank +4723 58000002 setarg 0x02 +4724 204047b8 call mouse_data_less_than_check +4725 205a47af call mouse_disable_asm ,blank +4726 6fe0c9c9 fetch 1 ,mem_mouse_asm_flag +4727 c000c72d beq 1 ,mouse_drawing_optima_modify + +mouse_drawing_optima_init: +4728 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4729 c41c0000 rtnbit0 mouse_enable_smoother +472a df200005 arg 5 ,loopcnt +472b d8a049c9 arg mem_mouse_asm_flag ,contw +472c 20207d26 branch clear_mem + +mouse_drawing_optima_modify: +472d 20404741 call mouse_drawing_optima_xy_offset_modify +472e 6fe149ca fetch 2 ,mem_mouse_x_pre +472f 67e109f8 store 2 ,mem_data_pre +4730 6fe148d1 fetch 2 ,mem_mouse_x +4731 67e109fa store 2 ,mem_data_current +4732 20404779 call mouse_drawing_optima_data_x +4733 6fe109f8 fetch 2 ,mem_data_pre +4734 67e149ca store 2 ,mem_mouse_x_pre +4735 6fe109fa fetch 2 ,mem_data_current +4736 67e148d1 store 2 ,mem_mouse_x +4737 6fe149cc fetch 2 ,mem_mouse_y_pre +4738 67e109f8 store 2 ,mem_data_pre +4739 6fe148d3 fetch 2 ,mem_mouse_y +473a 67e109fa store 2 ,mem_data_current +473b 20404781 call mouse_drawing_optima_data_y +473c 6fe109f8 fetch 2 ,mem_data_pre +473d 67e149cc store 2 ,mem_mouse_y_pre +473e 6fe109fa fetch 2 ,mem_data_current +473f 67e148d3 store 2 ,mem_mouse_y +4740 20600000 rtn + +mouse_drawing_optima_xy_offset_modify: +4741 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4742 c41c8000 rtnbit0 mouse_enable_xy_offset +4743 6fe149ca fetch 2 ,mem_mouse_x_pre +4744 67e109ff store 2 ,mem_data_value +4745 20404754 call mouse_pre_xy_data_judge +4746 67e149ca store 2 ,mem_mouse_x_pre +4747 6fe148d1 fetch 2 ,mem_mouse_x +4748 67e109ff store 2 ,mem_data_value +4749 20404762 call mouse_current_xy_data_judge +474a 67e148d1 store 2 ,mem_mouse_x +474b 6fe149cc fetch 2 ,mem_mouse_y_pre +474c 67e109ff store 2 ,mem_data_value +474d 20404754 call mouse_pre_xy_data_judge +474e 67e149cc store 2 ,mem_mouse_y_pre +474f 6fe148d3 fetch 2 ,mem_mouse_y +4750 67e109ff store 2 ,mem_data_value +4751 20404762 call mouse_current_xy_data_judge +4752 67e148d3 store 2 ,mem_mouse_y +4753 20600000 rtn + +mouse_pre_xy_data_judge: +4754 6fe08a00 fetch 1 ,mem_data_value + 1 +4755 203a4757 branch mouse_pre_xy_pdata_offset ,blank +4756 2020475c branch mouse_pre_xy_ndata_offset + +mouse_pre_xy_pdata_offset: +4757 6fe089ff fetch 1 ,mem_data_value +4758 2040476f call mouse_pre_xy_get_0_4_times +4759 67e089ff store 1 ,mem_data_value + +mouse_xy_data_offset_new: +475a 6fe109ff fetch 2 ,mem_data_value +475b 20600000 rtn + +mouse_pre_xy_ndata_offset: +475c 6fe089ff fetch 1 ,mem_data_value +475d 204047ab call mouse_pdata_invert +475e 2040476f call mouse_pre_xy_get_0_4_times +475f 205a7e5e call disable_blank ,blank +4760 204047a7 call mouse_pdata_get_new_value +4761 2020475a branch mouse_xy_data_offset_new + +mouse_current_xy_data_judge: +4762 6fe08a00 fetch 1 ,mem_data_value + 1 +4763 203a4765 branch mouse_current_xy_pdata_offset ,blank +4764 20204769 branch mouse_current_xy_ndata_offset + +mouse_current_xy_pdata_offset: +4765 6fe089ff fetch 1 ,mem_data_value +4766 20404774 call mouse_current_xy_get_0_6_times +4767 67e089ff store 1 ,mem_data_value +4768 2020475a branch mouse_xy_data_offset_new + +mouse_current_xy_ndata_offset: +4769 6fe089ff fetch 1 ,mem_data_value +476a 204047ab call mouse_pdata_invert +476b 20404774 call mouse_current_xy_get_0_6_times +476c 205a7e5e call disable_blank ,blank +476d 204047a7 call mouse_pdata_get_new_value +476e 2020475a branch mouse_xy_data_offset_new + +mouse_pre_xy_get_0_4_times: +476f 1feffe04 mul32 pdata ,4 ,pdata +4770 1fe6fc05 div pdata ,5 +4771 20407def call wait_div_end +4772 1807fe00 quotient pdata +4773 20600000 rtn + +mouse_current_xy_get_0_6_times: +4774 1feffe0c mul32 pdata ,12 ,pdata +4775 1fe6fc0a div pdata ,10 +4776 20407def call wait_div_end +4777 1807fe00 quotient pdata +4778 20600000 rtn + +mouse_drawing_optima_data_x: +4779 6fe109f8 fetch 2 ,mem_data_pre +477a 684909fa fetcht 2 ,mem_data_current +477b 9840fe00 iadd temp ,pdata +477c 6848c9ce fetcht 1 ,mem_mouse_data_xtemp +477d 9840fe00 iadd temp ,pdata +477e 1fe10401 and pdata ,0x01 ,temp +477f 6048c9ce storet 1 ,mem_mouse_data_xtemp +4780 20204789 branch mouse_drawing_optima_data + +mouse_drawing_optima_data_y: +4781 6fe109f8 fetch 2 ,mem_data_pre +4782 684909fa fetcht 2 ,mem_data_current +4783 9840fe00 iadd temp ,pdata +4784 6848c9cf fetcht 1 ,mem_mouse_data_ytemp +4785 9840fe00 iadd temp ,pdata +4786 1fe10401 and pdata ,0x01 ,temp +4787 6048c9cf storet 1 ,mem_mouse_data_ytemp +4788 20204789 branch mouse_drawing_optima_data + +mouse_drawing_optima_data: +4789 67e189fc store 3 ,mem_data_sum +478a 2feffe10 isolate1 16 ,pdata +478b 2020c793 branch mouse_data_sum_overflow ,true +478c 6fe089fd fetch 1 ,mem_data_sum + 1 +478d c07fc79a beq 0xff ,mouse_data_sum_n +478e 6fe089fc fetch 1 ,mem_data_sum + +mouse_data_store_pre: +478f 1fe37e00 rshift pdata ,pdata +4790 67e109f8 store 2 ,mem_data_pre +4791 67e109fa store 2 ,mem_data_current +4792 20600000 rtn + +mouse_data_sum_overflow: +4793 6fe089fd fetch 1 ,mem_data_sum + 1 +4794 c0004797 beq 0 ,mouse_data_sum_overflow_p +4795 6fe189fc fetch 3 ,mem_data_sum +4796 2020478f branch mouse_data_store_pre + +mouse_data_sum_overflow_p: +4797 7009fe00 jam 0 ,mem_data_sum + 2 +4798 6fe089fc fetch 1 ,mem_data_sum +4799 2020478f branch mouse_data_store_pre + +mouse_data_sum_n: +479a 6fe089fc fetch 1 ,mem_data_sum +479b 204047a5 call mouse_pdata_get_half +479c 67e089f8 store 1 ,mem_data_pre +479d 67e089fa store 1 ,mem_data_current +479e 203a47a3 branch mouse_data_zero ,blank +479f 580000ff setarg 0xff + +mouse_data_set_direction: +47a0 67e089f9 store 1 ,mem_data_pre + 1 +47a1 67e089fb store 1 ,mem_data_current + 1 +47a2 20600000 rtn + +mouse_data_zero: +47a3 58000000 setarg 0 +47a4 202047a0 branch mouse_data_set_direction + +mouse_pdata_get_half: +47a5 204047ab call mouse_pdata_invert +47a6 1fe37e00 rshift pdata ,pdata + +mouse_pdata_get_new_value: +47a7 204047ac call mouse_rega_in_out +47a8 1fe67e00 sub pdata ,0 ,pdata +47a9 67e089ff store 1 ,mem_data_value +47aa 20600000 rtn + +mouse_pdata_invert: +47ab 1fe67e00 sub pdata ,0 ,pdata + +mouse_rega_in_out: +47ac 67e08970 store 1 ,mem_rega +47ad 6fe08970 fetch 1 ,mem_rega +47ae 20600000 rtn + +mouse_disable_asm: +47af 7049c900 jam 0 ,mem_mouse_asm_flag +47b0 20600000 rtn + +mouse_enable_asm: +47b1 7049c901 jam 1 ,mem_mouse_asm_flag +47b2 20600000 rtn + +mouse_pdata_greater_than_check: +47b3 9a267c00 isub rega ,null +47b4 24217e5e nbranch disable_blank ,positive +47b5 9a467c00 isub regb ,null +47b6 24217e5e nbranch disable_blank ,positive +47b7 20207e60 branch enable_blank + +mouse_data_less_than_check: +47b8 9a267c00 isub rega ,null +47b9 24610000 nrtn positive +47ba 9a467c00 isub regb ,null +47bb 24610000 nrtn positive +47bc 20207e60 branch enable_blank + +mouse_data_abs_check: +47bd 6fe148d1 fetch 2 ,mem_mouse_x +47be 204047c4 call mouse_data_abs +47bf 1fe22200 copy pdata ,rega +47c0 6fe148d3 fetch 2 ,mem_mouse_y +47c1 204047c4 call mouse_data_abs +47c2 1fe22400 copy pdata ,regb +47c3 20600000 rtn + +mouse_data_abs: +47c4 67e109fa store 2 ,mem_data_current +47c5 6fe089fb fetch 1 ,mem_data_current + 1 +47c6 c07fc7ca beq 0xff ,mouse_data_reversal +47c7 6fe089fa fetch 1 ,mem_data_current + +mouse_data_abs_store: +47c8 1fe17eff and_into 0xff ,pdata +47c9 20600000 rtn + +mouse_data_reversal: +47ca 6fe109fa fetch 2 ,mem_data_current +47cb 1fe67e00 sub pdata ,0 ,pdata +47cc 202047c8 branch mouse_data_abs_store + +mouse_24g_long_sleep_param_update_timer: +47cd da6048c4 arg mem_24g_long_sleep_param_update_timer ,regc +47ce da4047d0 arg mouse_24g_long_sleep_normal_param ,regb +47cf 2020318a branch timer_single_step + +mouse_24g_long_sleep_normal_param: +47d0 6fe248b8 fetch 4 ,mem_24g_long_sleep_set1 +47d1 67e2485c store 4 ,mem_24g_enter_hibernate +47d2 704aae01 jam 1 ,mem_mouse_long_mult_flag +47d3 20600000 rtn + +mouse_24g_long_sleep_set: +47d4 c00047db beq 0x00 ,mouse_24g_long_sleep_set_30ms +47d5 c000c7dd beq 0x01 ,mouse_24g_long_sleep_set_50ms +47d6 c00147d8 beq 0x02 ,mouse_24g_long_sleep_set_80ms +47d7 c001c7df beq 0x03 ,mouse_24g_long_sleep_set_100ms + +mouse_24g_long_sleep_set_80ms: +47d8 580ea600 setarg 0x0ea600 + +mouse_24g_long_sleep_set_end: +47d9 67e248b8 store 4 ,mem_24g_long_sleep_set1 +47da 20600000 rtn + +mouse_24g_long_sleep_set_30ms: +47db 5805e740 setarg 0x05e740 +47dc 202047d9 branch mouse_24g_long_sleep_set_end + +mouse_24g_long_sleep_set_50ms: +47dd 580927c0 setarg 0x0927c0 +47de 202047d9 branch mouse_24g_long_sleep_set_end + +mouse_24g_long_sleep_set_100ms: +47df 58124f80 setarg 0x124f80 +47e0 202047d9 branch mouse_24g_long_sleep_set_end + +mouse_24g_hibernate_set: +47e1 7048a500 jam 0 ,mem_24g_attempt_fail_flag +47e2 20402652 call g24_transmit_next_packet +47e3 5fffffff setarg -1 +47e4 67e2485c store 4 ,mem_24g_enter_hibernate +47e5 58000000 setarg 0 +47e6 67e3c8d0 store 7 ,mem_mouse_key +47e7 704be101 jam 1 ,mem_sensor_shutdown_flag +47e8 2040423c call mouse_sensor_powerdown +47e9 20403e33 call mouse_setgpio_hibernate +47ea 202026b5 branch g24_long_sleep + +mouse_wakeup_24g: +47eb 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +47ec 245a41aa ncall mouse_init_sensor_wakeup ,blank +47ed 704be100 jam 0 ,mem_sensor_shutdown_flag +47ee 20202651 branch g24_transmit_no_ack + +mouse_24g_transmit_start: +47ef 6fe0cbe1 fetch 1 ,mem_sensor_shutdown_flag +47f0 243a262c nbranch g24_short_sleep ,blank +47f1 20202628 branch g24_transmit_start_next + +mouse_24g_stop: +47f2 793f8026 set0 mark_24g ,mark +47f3 7048a100 jam state_24g_stop ,mem_24g_conn_sm +47f4 d8e00001 arg mouse_24g_pairing_flag ,queue +47f5 202046f4 branch mouse_disable_function_flag + +mouse_24g_start_mode: +47f6 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +47f7 c308c803 bbit0 mouse_enable_24g ,mouse_24g_mode_setup_error +47f8 20403d65 call mouse_wakeup_from_power_check +47f9 20344806 branch mouse_24g_reconn_dongle_start ,user +47fa 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +47fb c298480c bbit1 mouse_enable_auto_24g_paring ,mouse_24g_reconn_general_dongle +47fc c318c80c bbit0 mouse_enable_24g_power_on_pairing ,mouse_24g_reconn_general_dongle +47fd 20404110 call mouse_key_check_once +47fe 1fe17e07 and pdata ,0x07 ,pdata +47ff 6848cbcb fetcht 1 ,mem_mouse_commbination_key_24g +4800 98467c00 isub temp ,null +4801 2022c827 branch mouse_24g_start_pair_mode ,zero +4802 2020480c branch mouse_24g_reconn_general_dongle + +mouse_24g_mode_setup_error: +4803 6fe0cab0 fetch 1 ,mem_reconn_times +4804 243a470e nbranch mouse_polling_device ,blank +4805 20600000 rtn + +mouse_24g_reconn_dongle_start: +4806 6fe14885 fetch 2 ,mem_24g_reconn_timeout_init +4807 67e14887 store 2 ,mem_24g_reconn_timeout +4808 70488b03 jam receiver_and_3_0_addr ,mem_24g_reconn_type +4809 20202559 branch g24_reconn_start + +mouse_24g_first_start_auto_pair_mode: +480a 20403d65 call mouse_wakeup_from_power_check +480b 20344816 branch mouse_24g_first_start_reconn ,user + +mouse_24g_reconn_general_dongle: +480c 70493800 jam mode_24g_device ,mem_device_flag +480d 6fe14bba fetch 2 ,mem_mouse_24g_power_on_fast_conn_timer +480e 67e14887 store 2 ,mem_24g_reconn_timeout +480f 70488b02 jam fast_conn_and_3_0_addr ,mem_24g_reconn_type +4810 20202559 branch g24_reconn_start + +mouse_24g_start_auto_pair: +4811 204048cc call mouse_discover_setting_led_gpio +4812 6fe14881 fetch 2 ,mem_24g_pair_timeout_init +4813 67e14887 store 2 ,mem_24g_reconn_timeout +4814 70488b04 jam pair_and_3_0_addr ,mem_24g_reconn_type +4815 20202559 branch g24_reconn_start + +mouse_24g_first_start_reconn: +4816 6fe0c938 fetch 1 ,mem_device_flag +4817 c0004806 beq mode_24g_device ,mouse_24g_reconn_dongle_start +4818 20404314 call mouse_bluetooth_fast_conn_disable +4819 2020481a branch mouse_24g_first_bluetooth_reconnect + +mouse_24g_first_bluetooth_reconnect: +481a 204047f2 call mouse_24g_stop +481b 2040490e call mouse_device_led_all_off +481c 70493801 jam mode_bt_device1 ,mem_device_flag +481d 204045bd call mouse_select_reconn_device +481e 20203d59 branch mouse_start_reconnect_device + +mouse_24g_first_bb_event_reconn_timeout: +481f 20403d65 call mouse_wakeup_from_power_check +4820 20343e20 branch mouse_app_enter_hibernate ,user +4821 20204553 branch mouse_start_discovery + +mouse_24g_first_store_reconn_info: +4822 20403d65 call mouse_wakeup_from_power_check +4823 20740000 rtn user +4824 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4825 c297c5ee bbit1 mouse_enable_24g_first_auto_pairing ,mouse_store_device_info_delay +4826 20600000 rtn + +mouse_24g_start_pair_mode: +4827 d8e00001 arg mouse_24g_pairing_flag ,queue +4828 204046f0 call mouse_enable_function_flag +4829 58000000 setarg 0 +482a 67e14887 store 2 ,mem_24g_reconn_timeout +482b 20404576 call mouse_stop_discovery +482c 2040498e call mouse_low_voltage_led_blink_disable +482d 204048cc call mouse_discover_setting_led_gpio +482e 70483601 jam type_ms ,mem_24g_data_type +482f 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4830 c30aa32e bbit0 mouse_enable_keyboard ,g24_pair_start +4831 70483602 jam type_kb ,mem_24g_data_type +4832 2020232e branch g24_pair_start + +mouse_24g_attempt_fail: +4833 6fe0c8a5 fetch 1 ,mem_24g_attempt_fail_flag +4834 243a47e1 nbranch mouse_24g_hibernate_set ,blank +4835 6fe0c88b fetch 1 ,mem_24g_reconn_type +4836 c0014840 beq fast_conn_and_3_0_addr ,mouse_24g_fast_conn_attempt_fail +4837 c0024844 beq pair_and_3_0_addr ,mouse_24g_auto_pair_attempt_fail +4838 c001c849 beq receiver_and_3_0_addr ,mouse_reconn_dongle_attempt_fail + +mouse_24g_attempt_fail_enter_hibernate: +4839 20404912 call mouse_device_led_off +483a 204047f2 call mouse_24g_stop +483b 6fe0cab0 fetch 1 ,mem_reconn_times +483c 243a470e nbranch mouse_polling_device ,blank +483d 6fe0c938 fetch 1 ,mem_device_flag +483e c0003e20 beq mode_24g_device ,mouse_app_enter_hibernate +483f 20600000 rtn + +mouse_24g_fast_conn_attempt_fail: +4840 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4841 c297c811 bbit1 mouse_enable_24g_first_auto_pairing ,mouse_24g_start_auto_pair +4842 c2984811 bbit1 mouse_enable_auto_24g_paring ,mouse_24g_start_auto_pair +4843 20204806 branch mouse_24g_reconn_dongle_start + +mouse_24g_auto_pair_attempt_fail: +4844 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4845 c317c839 bbit0 mouse_enable_24g_first_auto_pairing ,mouse_24g_attempt_fail_enter_hibernate +4846 6fe0cbb4 fetch 1 ,mem_device_number +4847 c000c839 beq 1 ,mouse_24g_attempt_fail_enter_hibernate +4848 2020481a branch mouse_24g_first_bluetooth_reconnect + +mouse_reconn_dongle_attempt_fail: +4849 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +484a c317c839 bbit0 mouse_enable_24g_first_auto_pairing ,mouse_24g_attempt_fail_enter_hibernate +484b c289c839 bbit1 mouse_enable_eeprom ,mouse_24g_attempt_fail_enter_hibernate +484c c2894839 bbit1 mouse_enable_flash ,mouse_24g_attempt_fail_enter_hibernate +484d 20204812 branch mouse_24g_start_auto_pair + 1 + +mouse_24g_attempt_success: +484e 204042ca call mouse_init_sensor_reset +484f 704aae00 jam 0 ,mem_mouse_long_mult_flag +4850 7048a100 jam 0 ,mem_24g_conn_sm +4851 70488b00 jam 0 ,mem_24g_reconn_type +4852 6fe24891 fetch 4 ,mem_24g_receiver_addr +4853 6fe2488d fetch 4 ,mem_24g_fast_conn_addr +4854 98467c00 isub temp ,null +4855 20628000 rtn zero +4856 20204822 branch mouse_24g_first_store_reconn_info + +mouse_24g_pairing_complete: +4857 d8e00001 arg mouse_24g_pairing_flag ,queue +4858 204046f4 call mouse_disable_function_flag +4859 204048c6 call mouse_device_poweron_timer_init +485a 58000000 setarg 0 +485b 67e14883 store 2 ,mem_24g_pair_timeout +485c 67e14887 store 2 ,mem_24g_reconn_timeout +485d 67e0c8a1 store 1 ,mem_24g_conn_sm +485e 67e0c9c8 store 1 ,mem_mouse_move_flag +485f 67e0c88b store 1 ,mem_24g_reconn_type +4860 204042ca call mouse_init_sensor_reset +4861 204042db call mouse_read_sensor_common +4862 6fe2483c fetch 4 ,mem_24g_addr +4863 67e24891 store 4 ,mem_24g_receiver_addr +4864 67e24993 store 4 ,mem_mouse_24g_addr +4865 202045ee branch mouse_store_device_info_delay + +mouse_24g_package_data: +4866 c6930000 rtnmark0 mark_24g +4867 20403f70 call mouse_motion +4868 24740000 nrtn user +4869 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +486a c30ac86d bbit0 mouse_enable_keyboard ,mouse_24g_mouse_package_data +486b 6fe0cb8b fetch 1 ,mem_customer_key +486c 243a4884 nbranch mouse_24g_keyboard_package_data ,blank + +mouse_24g_mouse_package_data: +486d 204042cb call mouse_data_xy_release +486e 6fe0c836 fetch 1 ,mem_24g_data_type +486f c280c87c bbit1 1 ,mouse_24g_mouse_package_data_now +4870 6848c7c7 fetcht 1 ,mem_24g_txbuf + 1 +4871 6fe0c8d0 fetch 1 ,mem_mouse_key +4872 9841fe00 ior temp ,pdata +4873 67e0c8d0 store 1 ,mem_mouse_key +4874 6848c7cc fetcht 1 ,mem_24g_txbuf + 6 +4875 6fe0c8d5 fetch 1 ,mem_mouse_z +4876 9840fe00 iadd temp ,pdata +4877 67e0c8d5 store 1 ,mem_mouse_z +4878 6848c7cd fetcht 1 ,mem_24g_txbuf + 7 +4879 6fe0c8d6 fetch 1 ,mem_mouse_tz +487a 9840fe00 iadd temp ,pdata +487b 67e0c8d6 store 1 ,mem_mouse_tz + +mouse_24g_mouse_package_data_now: +487c 70483601 jam type_ms ,mem_24g_data_type +487d da200007 arg 7 ,rega +487e da4048d0 arg mem_mouse_key ,regb +487f 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4880 c28c26e1 bbit1 mouse_enable_24g_250hz ,g24_transmit_by_interrupt_enable +4881 6fe148d5 fetch 2 ,mem_mouse_z +4882 207a0000 rtn blank +4883 202026e1 branch g24_transmit_by_interrupt_enable + +mouse_24g_keyboard_package_data: +4884 70483602 jam type_kb ,mem_24g_data_type +4885 da200009 arg 9 ,rega +4886 6fe0cb8c fetch 1 ,mem_customer_data_trigger +4887 243a488a nbranch mouse_customer_key_press ,blank +4888 da404bd5 arg mem_customer_key_release ,regb +4889 20600000 rtn + +mouse_customer_key_press: +488a da404bcc arg mem_customer_key_press ,regb +488b 20600000 rtn + +mouse_24g_search_dongle_init: +488c 58000000 setarg 0 +488d 67e1cba4 store 3 ,mem_mouse_search_dongle_action +488e 20600000 rtn + +mouse_24g_search_dongle: +488f 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4890 c40b0000 rtnbit0 mouse_enable_24g_search_dongle +4891 6fe0caae fetch 1 ,mem_mouse_long_mult_flag +4892 207a0000 rtn blank +4893 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +4894 207a0000 rtn blank +4895 6fe0cba1 fetch 1 ,mem_mouse_search_dongle_interval +4896 1fe0fe01 increase 1 ,pdata +4897 1fe17e03 and_into 3 ,pdata +4898 67e0cba1 store 1 ,mem_mouse_search_dongle_interval +4899 247a0000 nrtn blank +489a 704ba200 jam 0 ,mem_mouse_search_dongle_ch + +mouse_24g_search_dongle_loop: +489b 6fe0cba2 fetch 1 ,mem_mouse_search_dongle_ch +489c 1fe0fe01 increase 1 ,pdata +489d 67e0cba2 store 1 ,mem_mouse_search_dongle_ch +489e 1fe67c08 sub pdata ,g24_ch_number ,null +489f 242148a5 nbranch mouse_24g_search_dongle_loop_end ,positive +48a0 2040259a call g24_reconn_data_prep +48a1 2040265b call g24_transmit_receive_ack +48a2 242c48ab nbranch mouse_24g_search_dongle_loop_retry ,sync +48a3 2437c8ab nbranch mouse_24g_search_dongle_loop_retry ,user3 +48a4 204048b5 call mouse_24g_search_dongle_success + +mouse_24g_search_dongle_loop_end: +48a5 20402597 call g24_txbuf_clear +48a6 6fe0cba3 fetch 1 ,mem_mouse_search_dongle_count +48a7 1fe0fe01 increase 1 ,pdata +48a8 67e0cba3 store 1 ,mem_mouse_search_dongle_count +48a9 c00848ad beq g24_ch_poll_count ,mouse_24g_search_dongle_check +48aa 20600000 rtn + +mouse_24g_search_dongle_loop_retry: +48ab 204022cb call g24_ch +48ac 2020489b branch mouse_24g_search_dongle_loop + +mouse_24g_search_dongle_check: +48ad 704ba300 jam 0 ,mem_mouse_search_dongle_count +48ae 6fe0cba4 fetch 1 ,mem_mouse_search_dongle_action +48af c3800000 rtnbit1 g24_disconn_state +48b0 79207e00 set1 g24_disconn_state ,pdata +48b1 67e0cba4 store 1 ,mem_mouse_search_dongle_action +48b2 6fe14bbc fetch 2 ,mem_mouse_24g_search_dongle_time_init +48b3 67e14ab2 store 2 ,mem_mouse_no_data_timer +48b4 2020423c branch mouse_sensor_powerdown + +mouse_24g_search_dongle_success: +48b5 6fe0c8a7 fetch 1 ,mem_24g_abort_pac +48b6 203a488c branch mouse_24g_search_dongle_init ,blank +48b7 704ba300 jam 0 ,mem_mouse_search_dongle_count +48b8 6fe0cba4 fetch 1 ,mem_mouse_search_dongle_action +48b9 c4000000 rtnbit0 g24_disconn_state +48ba 793ffe00 set0 g24_disconn_state ,pdata +48bb 67e0cba4 store 1 ,mem_mouse_search_dongle_action +48bc 20404544 call mouse_no_data_timer_init +48bd 202041aa branch mouse_init_sensor_wakeup + +mouse_device_poweron_timer: +48be 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +48bf c4100000 rtnbit0 mouse_enable_power_on_led +48c0 6fe0cba7 fetch 1 ,mem_mouse_device_poweron_timer_count +48c1 207a0000 rtn blank +48c2 1fe0ffff increase -1 ,pdata +48c3 67e0cba7 store 1 ,mem_mouse_device_poweron_timer_count +48c4 203a4912 branch mouse_device_led_off ,blank +48c5 20204920 branch mouse_device_led_on + +mouse_device_poweron_timer_init: +48c6 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +48c7 c4100000 rtnbit0 mouse_enable_power_on_led +48c8 2040498e call mouse_low_voltage_led_blink_disable +48c9 6fe0cbc0 fetch 1 ,mem_mouse_device_poweron_timer_count_init +48ca 67e0cba7 store 1 ,mem_mouse_device_poweron_timer_count +48cb 20600000 rtn + +mouse_discover_setting_led_gpio: +48cc 704ba700 jam 0 ,mem_mouse_device_poweron_timer_count +48cd 6fe14bc4 fetch 2 ,mem_mouse_disconvey_led_blink_time +48ce 67e14930 store 2 ,mem_mouse_on_time +48cf 67e14932 store 2 ,mem_mouse_off_time + +mouse_setting_led_gpio_comman: +48d0 6fe0c938 fetch 1 ,mem_device_flag +48d1 c00048d5 beq mode_24g_device ,mouse_device_led_24g +48d2 c000c8d7 beq mode_bt_device1 ,mouse_device_led_bt1 +48d3 c00148d9 beq mode_bt_device2 ,mouse_device_led_bt2 +48d4 20600000 rtn + +mouse_device_led_24g: +48d5 6fe0c915 fetch 1 ,mem_config_device_24g_led_gpio +48d6 202048da branch mouse_led_blink + +mouse_device_led_bt1: +48d7 6fe0c916 fetch 1 ,mem_config_device_bt1_led_gpio +48d8 202048da branch mouse_led_blink + +mouse_device_led_bt2: +48d9 6fe0c922 fetch 1 ,mem_config_device_bt2_led_gpio + +mouse_led_blink: +48da 67e08964 store 1 ,mem_temp +48db 20404912 call mouse_device_led_off +48dc 6fe08964 fetch 1 ,mem_temp +48dd 67e0c92f store 1 ,mem_mouse_struct_led_gpio +48de da200000 arg 0 ,rega +48df 70492d01 jam ui_led_state_blink_start ,mem_mouse_led_type +48e0 20207806 branch ui_led_blink_start_global + +mouse_dpi_led_blink_delay: +48e1 6fe0c923 fetch 1 ,mem_dpi_led_gpio +48e2 c17f8000 rtneq gpio_disable +48e3 6fe14ac2 fetch 2 ,mem_mouse_discovery_timer +48e4 247a0000 nrtn blank +48e5 6fe14883 fetch 2 ,mem_24g_pair_timeout +48e6 247a0000 nrtn blank +48e7 6fe14887 fetch 2 ,mem_24g_reconn_timeout +48e8 247a0000 nrtn blank +48e9 6fe0cba7 fetch 1 ,mem_mouse_device_poweron_timer_count +48ea 247a0000 nrtn blank +48eb 6fe0cbc1 fetch 1 ,mem_mouse_dpi_led_delay_count_init +48ec 203a48f2 branch mouse_dpi_led_blink_init ,blank +48ed 67e0cba8 store 1 ,mem_mouse_dpi_led_delay_count +48ee 20600000 rtn + +mouse_dpi_led_blink_delay_timer: +48ef da604ba8 arg mem_mouse_dpi_led_delay_count ,regc +48f0 da4048f2 arg mouse_dpi_led_blink_init ,regb +48f1 2020318a branch timer_single_step + +mouse_dpi_led_blink_init: +48f2 6fe0c923 fetch 1 ,mem_dpi_led_gpio +48f3 67e0c92f store 1 ,mem_mouse_struct_led_gpio +48f4 6fe14bc2 fetch 2 ,mem_mouse_dpi_led_blink_time +48f5 67e14930 store 2 ,mem_mouse_on_time +48f6 67e14932 store 2 ,mem_mouse_off_time +48f7 da200000 arg 0 ,rega +48f8 6848c992 fetcht 1 ,mem_mouse_dpi +48f9 18408401 increase 1 ,temp +48fa 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +48fb c30e48ff bbit0 mouse_enable_dpi_level_4 ,mouse_dpi_led_blink_init_end +48fc 18408401 increase 1 ,temp +48fd 18467c04 sub temp ,4 ,null +48fe 24414902 ncall mouse_dpi_led_blink_count_clean ,positive + +mouse_dpi_led_blink_init_end: +48ff 6048c92e storet 1 ,mem_mouse_blink_count +4900 70492d01 jam ui_led_state_blink_start ,mem_mouse_led_type +4901 20600000 rtn + +mouse_dpi_led_blink_count_clean: +4902 d8400001 arg 1 ,temp +4903 20600000 rtn + +mouse_check_dpi_blink: +4904 78547c00 disable user +4905 6fe0c923 fetch 1 ,mem_dpi_led_gpio +4906 6848c92f fetcht 1 ,mem_mouse_struct_led_gpio +4907 98467c00 isub temp ,null +4908 24628000 nrtn zero +4909 6fe0c92e fetch 1 ,mem_mouse_blink_count +490a 207a0000 rtn blank +490b 7048f900 jam 0 ,mem_adc_low_volatage_led_blink_enable +490c 78347c00 enable user +490d 20600000 rtn + +mouse_device_led_all_off: +490e 2040491e call mouse_dpi_led_off +490f 20404917 call mouse_device_24g_led_off +4910 2040491a call mouse_device_bt1_led_off +4911 2020491c branch mouse_device_bt2_led_off + +mouse_device_led_off: +4912 6fe0c938 fetch 1 ,mem_device_flag +4913 c0004917 beq mode_24g_device ,mouse_device_24g_led_off +4914 c000c91a beq mode_bt_device1 ,mouse_device_bt1_led_off +4915 c001491c beq mode_bt_device2 ,mouse_device_bt2_led_off +4916 20600000 rtn + +mouse_device_24g_led_off: +4917 704baa00 jam 0 ,mem_24g_device_led_status +4918 6848c915 fetcht 1 ,mem_config_device_24g_led_gpio +4919 2020492b branch mouse_led_off + +mouse_device_bt1_led_off: +491a 6848c916 fetcht 1 ,mem_config_device_bt1_led_gpio +491b 2020492b branch mouse_led_off + +mouse_device_bt2_led_off: +491c 6848c922 fetcht 1 ,mem_config_device_bt2_led_gpio +491d 2020492b branch mouse_led_off + +mouse_dpi_led_off: +491e 6848c923 fetcht 1 ,mem_dpi_led_gpio +491f 2020492b branch mouse_led_off + +mouse_device_led_on: +4920 6fe0c938 fetch 1 ,mem_device_flag +4921 c0004925 beq mode_24g_device ,mouse_device_24g_led_on +4922 c000c927 beq mode_bt_device1 ,mouse_device_bt1_led_on +4923 c0014929 beq mode_bt_device2 ,mouse_device_bt2_led_on +4924 20600000 rtn + +mouse_device_24g_led_on: +4925 6848c915 fetcht 1 ,mem_config_device_24g_led_gpio +4926 2020492f branch mouse_led_on + +mouse_device_bt1_led_on: +4927 6848c916 fetcht 1 ,mem_config_device_bt1_led_gpio +4928 2020492f branch mouse_led_on + +mouse_device_bt2_led_on: +4929 6848c922 fetcht 1 ,mem_config_device_bt2_led_gpio +492a 2020492f branch mouse_led_on + +mouse_led_off: +492b 44f0c01c bpatch patch1c_1 ,mem_patch1c +492c 6048c92f storet 1 ,mem_mouse_struct_led_gpio +492d da200000 arg 0 ,rega +492e 20207801 branch ui_led_off_global + +mouse_led_on: +492f 44f1401c bpatch patch1c_2 ,mem_patch1c +4930 6048c92f storet 1 ,mem_mouse_struct_led_gpio +4931 da200000 arg 0 ,rega +4932 202077fc branch ui_led_on_global + +mouse_ui_led_off_static: +4933 6fe0c915 fetch 1 ,mem_config_device_24g_led_gpio +4934 98467c00 isub temp ,null +4935 2042c952 call mouse_clear_24g_led_statue ,zero +4936 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4937 c3126065 bbit0 mouse_enable_4_led ,gpio_out_inactive +4938 20404943 call mouse_check_bt2_led_off +4939 20404947 call mouse_check_dpi_led_off +493a 2040494b call mouse_check_low_v_led_off +493b 6fe0cba9 fetch 1 ,mem_mouse_led_off_4_led +493c 203a6065 branch gpio_out_inactive ,blank +493d 704ba900 jam 0 ,mem_mouse_led_off_4_led +493e 2020607f branch gpio_set_high_impedance + +mouse_ui_led_on_static: +493f 6fe0c915 fetch 1 ,mem_config_device_24g_led_gpio +4940 98467c00 isub temp ,null +4941 2042c954 call mouse_set_24g_led_statue ,zero +4942 20206069 branch gpio_out_active + +mouse_check_bt2_led_off: +4943 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4944 c4130000 rtnbit0 mouse_enable_bt2_for_4_led +4945 6fe0c922 fetch 1 ,mem_config_device_bt2_led_gpio +4946 2020494e branch mouse_check_1gpio_2led_off + +mouse_check_dpi_led_off: +4947 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4948 c4128000 rtnbit0 mouse_enable_dpi_for_4_led +4949 6fe0c923 fetch 1 ,mem_dpi_led_gpio +494a 2020494e branch mouse_check_1gpio_2led_off + +mouse_check_low_v_led_off: +494b 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +494c c4138000 rtnbit0 mouse_enable_low_v_for_4_led +494d 6fe0c921 fetch 1 ,mem_config_low_voltage_alarm_gpio + +mouse_check_1gpio_2led_off: +494e 98467c00 isub temp ,null +494f 24628000 nrtn zero +4950 704ba901 jam 1 ,mem_mouse_led_off_4_led +4951 20600000 rtn + +mouse_clear_24g_led_statue: +4952 704baa00 jam 0 ,mem_24g_device_led_status +4953 20600000 rtn + +mouse_set_24g_led_statue: +4954 704baa01 jam 1 ,mem_24g_device_led_status +4955 20600000 rtn + +mouse_low_voltage_led_timer: +4956 6fe14ac2 fetch 2 ,mem_mouse_discovery_timer +4957 247a0000 nrtn blank +4958 6fe14883 fetch 2 ,mem_24g_pair_timeout +4959 247a0000 nrtn blank +495a 6fe14887 fetch 2 ,mem_24g_reconn_timeout +495b 247a0000 nrtn blank +495c 6fe0cba7 fetch 1 ,mem_mouse_device_poweron_timer_count +495d 247a0000 nrtn blank +495e 20404904 call mouse_check_dpi_blink +495f 20740000 rtn user +4960 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4961 c4108000 rtnbit0 mouse_enable_low_voltage_led +4962 c4020000 rtnbit0 mouse_low_voltage_flag +4963 c291c97c bbit1 mouse_enable_low_voltage_led_blink_n_second ,mouse_low_voltage_led_blink_new_data +4964 6fe0c8f8 fetch 1 ,mem_adc_low_volatage_led_timer_count +4965 1fe0fe01 increase 1 ,pdata +4966 67e0c8f8 store 1 ,mem_adc_low_volatage_led_timer_count +4967 1fe67c14 sub pdata ,20 ,null +4968 2441496e ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +4969 c0014970 beq 2 ,mouse_low_voltage_led_on +496a c0024976 beq 4 ,mouse_low_voltage_led_off +496b c0034970 beq 6 ,mouse_low_voltage_led_on +496c c0044976 beq 8 ,mouse_low_voltage_led_off +496d 20600000 rtn + +mouse_adc_low_volatage_led_timer_count_clean: +496e 7048f801 jam 1 ,mem_adc_low_volatage_led_timer_count +496f 20204976 branch mouse_low_voltage_led_off + +mouse_low_voltage_led_on: +4970 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4971 c2914920 bbit1 mouse_enable_low_voltage_use_mode_led ,mouse_device_led_on +4972 6fe0c921 fetch 1 ,mem_config_low_voltage_alarm_gpio +4973 c17f8000 rtneq gpio_disable +4974 6848c921 fetcht 1 ,mem_config_low_voltage_alarm_gpio +4975 2020492f branch mouse_led_on + +mouse_low_voltage_led_off: +4976 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4977 c2914912 bbit1 mouse_enable_low_voltage_use_mode_led ,mouse_device_led_off +4978 6fe0c921 fetch 1 ,mem_config_low_voltage_alarm_gpio +4979 c17f8000 rtneq gpio_disable +497a 6848c921 fetcht 1 ,mem_config_low_voltage_alarm_gpio +497b 2020492b branch mouse_led_off + +mouse_low_voltage_led_blink_new_data: +497c 6fe14bbe fetch 2 ,mem_mouse_no_data_timeout +497d 68494ab2 fetcht 2 ,mem_mouse_no_data_timer +497e 98460400 isub temp ,temp +497f 6fe14bc8 fetch 2 ,mem_adc_low_volatage_led_blink_timer +4980 98467c00 isub temp ,null +4981 2421498e nbranch mouse_low_voltage_led_blink_disable ,positive +4982 6fe0c8f9 fetch 1 ,mem_adc_low_volatage_led_blink_enable +4983 247a0000 nrtn blank +4984 7048f901 jam 1 ,mem_adc_low_volatage_led_blink_enable +4985 20204986 branch mouse_low_voltage_led_blink_init + +mouse_low_voltage_led_blink_init: +4986 6fe14bc6 fetch 2 ,mem_mouse_low_v_led_blink_time +4987 67e14930 store 2 ,mem_mouse_on_time +4988 67e14932 store 2 ,mem_mouse_off_time +4989 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +498a c29148d0 bbit1 mouse_enable_low_voltage_use_mode_led ,mouse_setting_led_gpio_comman +498b 6fe0c921 fetch 1 ,mem_config_low_voltage_alarm_gpio +498c c17f8000 rtneq gpio_disable +498d 202048da branch mouse_led_blink + +mouse_low_voltage_led_blink_disable: +498e 7048f900 jam 0 ,mem_adc_low_volatage_led_blink_enable +498f 20204976 branch mouse_low_voltage_led_off + +mouse_low_voltage_led_no_enter_lpm: +4990 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +4991 c4108000 rtnbit0 mouse_enable_low_voltage_led +4992 c4020000 rtnbit0 mouse_low_voltage_flag +4993 c291c9a2 bbit1 mouse_enable_low_voltage_led_blink_n_second ,mouse_low_voltage_led_no_enter_lpm_blink +4994 6fe0c8f8 fetch 1 ,mem_adc_low_volatage_led_timer_count +4995 1fe67c0a sub pdata ,10 ,null +4996 2021499e branch mouse_lpm_mode_clear ,positive + +mouse_low_voltage_led_no_enter_lpm_next: +4997 6fe0c938 fetch 1 ,mem_device_flag +4998 c000499b beq mode_24g_device ,g24_transmit_by_interrupt_exit_check +4999 70409901 jam 1 ,mem_lpm_mode +499a 20600000 rtn + +g24_transmit_by_interrupt_exit_check: +499b 6fe44bab fetch mouse_flag_len ,mem_mouse_flag +499c c38c0000 rtnbit1 mouse_enable_24g_250hz +499d 202026d0 branch g24_transmit_by_interrupt_exit + +mouse_lpm_mode_clear: +499e 6fe0c938 fetch 1 ,mem_device_flag +499f c00026e1 beq mode_24g_device ,g24_transmit_by_interrupt_enable +49a0 70409900 jam 0 ,mem_lpm_mode +49a1 20600000 rtn + +mouse_low_voltage_led_no_enter_lpm_blink: +49a2 6fe0c8f9 fetch 1 ,mem_adc_low_volatage_led_blink_enable +49a3 243a499e nbranch mouse_lpm_mode_clear ,blank +49a4 20204997 branch mouse_low_voltage_led_no_enter_lpm_next + +mouse_store_signal_rssi: +49a5 20401291 call rssi_hex2dec +49a6 6fe08018 fetch 1 ,mem_rssi +49a7 202025e2 branch rssi_signal + +mouse_le_transmit: +49a8 204049a5 call mouse_store_signal_rssi +49a9 202026ee branch power_ctrl_start + +mouse_bt_slave_match: +49aa 204049a5 call mouse_store_signal_rssi +49ab 6fe08031 fetch 1 ,mem_state +49ac 2feffe00 isolate1 state_inconn ,pdata +49ad 24608000 nrtn true +49ae 6fe08048 fetch 1 ,mem_arq +49af 2feffe03 isolate1 wack ,pdata +49b0 2040a724 call power_ctrl_pac_succ_decrs ,true +49b1 2440a720 ncall power_ctrl_pac_succ_incrs ,true +49b2 202026ee branch power_ctrl_start + +mouse_le_set_lpm_mult: +49b3 6fe0cb75 fetch 1 ,mem_le_connect_status_flag +49b4 2fe00603 compare 3 ,pdata ,3 +49b5 2420fe5e nbranch disable_blank ,true +49b6 20403223 call app_lpm_mult_enable +49b7 20207e60 branch enable_blank + +mouse_bt_set_lpm_mult: +49b8 204052f7 call l2cap_malloc_is_fifo_empty +49b9 247a0000 nrtn blank +49ba 70008901 jam 1 ,mem_current_sniff_attempt +49bb 70008a00 jam 0 ,mem_current_sniff_timeout +49bc 20207e60 branch enable_blank + +mouse_set_lpm_mult: +49bd 6fe1478c fetch 2 ,mem_ui_state_map +49be c284c9b3 bbit1 ui_state_ble_connected ,mouse_le_set_lpm_mult +49bf 202049b8 branch mouse_bt_set_lpm_mult + +remote_car_init: +49c0 20758000 rtn wake +49c1 20406172 call keyscan_key_init +49c2 58004a74 setarg remote_car_g24_package_data +49c3 67e1489b store 2 ,mem_cb_24g_transmit_data +49c4 58004a03 setarg remote_car_process_lpm_before +49c5 67e1489f store 2 ,mem_cb_24g_lpm_before +49c6 580049fe setarg remote_car_le_before_hibernate +49c7 67e1445d store 2 ,mem_cb_before_hibernate +49c8 58004a3e setarg remote_car_scale_process_idle +49c9 67e14465 store 2 ,mem_cb_idle_process +49ca 58004a40 setarg remote_car_scale_process_bb_event +49cb 67e14467 store 2 ,mem_cb_bb_event_process +49cc 58004a59 setarg remote_car_event_timer +49cd 67e1446f store 2 ,mem_cb_event_timer +49ce 580049f3 setarg remote_car_power_off_signal +49cf 67e14991 store 2 ,mem_remote_car_power_off_cb +49d0 580049e3 setarg remote_car_soft_switch_power_on_signal +49d1 67e14995 store 2 ,mem_remote_car_power_standby_cb +49d2 44f1c01c bpatch patch1c_3 ,mem_patch1c +49d3 20405dbc call set_eeprom_size_2k +49d4 204049fa call remote_car_init_environment +49d5 2040793a call queue_init +49d6 6fe0c961 fetch 1 ,mem_remote_car_config_soft_switch_enable +49d7 67e0c8d0 store 1 ,mem_remote_car_hard_soft_switch +49d8 c00049e2 beq hard_switch ,remote_car_hard_switch_power_on_signal +49d9 6fe0c962 fetch 1 ,mem_remote_car_config_soft_switch_gpio +49da 67e0c790 store 1 ,mem_ui_button_gpio + +remote_car_soft_switch_power_on_init: +49db 204049f3 call remote_car_ui_led_init +49dc 204077bb call ui_button_init +49dd 204077c5 call ui_button_polling +49de 70498d01 jam power_starting ,mem_remote_car_power_state +49df 6fe1478c fetch 2 ,mem_ui_state_map +49e0 c3860000 rtnbit1 ui_state_btn_down +49e1 20203217 branch app_enter_hibernate + +remote_car_hard_switch_power_on_signal: +49e2 70498d02 jam power_standby ,mem_remote_car_power_state + +remote_car_soft_switch_power_on_signal: +49e3 204049f3 call remote_car_ui_led_init +49e4 da200000 arg 0 ,rega +49e5 20407806 call ui_led_blink_start_global +49e6 204049ef call remote_car_set_24g_addr_eeprom +49e7 20405ddc call iicd_read_eep_data +49e8 204026e5 call g24_factory_check +49e9 2034232e branch g24_pair_start ,user +49ea 6fe2483c fetch 4 ,mem_24g_addr +49eb 67e24891 store 4 ,mem_24g_receiver_addr +49ec 6fe14885 fetch 2 ,mem_24g_reconn_timeout_init +49ed 67e14887 store 2 ,mem_24g_reconn_timeout +49ee 20202559 branch g24_reconn_start + +remote_car_set_24g_addr_eeprom: +49ef d8400004 arg 4 ,temp +49f0 da20483c arg mem_24g_addr ,rega +49f1 da400000 arg remote_info_eeprom_offect ,regb +49f2 20600000 rtn + +remote_car_power_off_signal: + +remote_car_ui_led_init: +49f3 44f2401c bpatch patch1c_4 ,mem_patch1c +49f4 6fe0c95f fetch 1 ,mem_remote_car_config_connect_led_gpio +49f5 c0ffc9f8 bne invalid_pin_num ,remote_car_pairing_led_gpio_set + +remote_car_ui_led_init_1: +49f6 6848c93c fetcht 1 ,mem_remote_car_led_map +49f7 20206069 branch gpio_config_output + +remote_car_pairing_led_gpio_set: +49f8 67e0c93c store 1 ,mem_remote_car_led_map +49f9 202049f6 branch remote_car_ui_led_init_1 + +remote_car_init_environment: +49fa 20402607 call g24_transmit_init + +remote_no_data_timer_init: +49fb 6fe14989 fetch 2 ,mem_remote_car_no_data_timeout +49fc 67e1498b store 2 ,mem_remote_car_no_data_timer +49fd 20600000 rtn + +remote_car_le_before_hibernate: +49fe 20404a03 call remote_car_process_lpm_before + +remote_gpio_set_before_hibernate: +49ff 6fe0c932 fetch 1 ,mem_remote_style_struct_led_gpio +4a00 79207e07 set1 7 ,pdata +4a01 d840003f arg gpcfg_output_high ,temp +4a02 20206092 branch gpio_config_function + +remote_car_process_lpm_before: +4a03 2040609f call gpio_set_before_lpm +4a04 20206197 branch keyscan_process_lpm_before + +remote_car_key_scan_process: +4a05 204061a3 call keyscan_key_process +4a06 20404a16 call get_remote_key_state +4a07 20404a09 call remote_conn_led_state +4a08 20204a24 branch send_data + +remote_conn_led_state: +4a09 6fe0c998 fetch 1 ,mem_remote_car_24g_status +4a0a c1808000 rtnne work_paired +4a0b 6fe2499c fetch 4 ,mem_remote_car_motor1_key0_press_state +4a0c 203a4a10 branch remote_car_stop_state ,blank +4a0d 7049a200 jam 0 ,mem_remote_car_no_data_check +4a0e 78347c00 enable user +4a0f 2020790b branch check_51cmd_led_on + +remote_car_stop_state: +4a10 6fe0c9a2 fetch 1 ,mem_remote_car_no_data_check +4a11 c17f8000 rtneq 0xff +4a12 1fe0fe01 pincrease 1 +4a13 67e0c9a2 store 1 ,mem_remote_car_no_data_check +4a14 78547c00 disable user +4a15 20207909 branch check_51cmd_led_off + +get_remote_key_state: +4a16 684944c8 fetcht 2 ,mem_key_value_retention +4a17 18417e01 and temp ,0x01 ,pdata +4a18 18430400 rshift temp ,temp +4a19 67e0c99c store 1 ,mem_remote_car_motor1_key0_press_state +4a1a 18417e01 and temp ,0x01 ,pdata +4a1b 18430400 rshift temp ,temp +4a1c 67e0c99d store 1 ,mem_remote_car_motor1_key1_press_state +4a1d 18417e01 and temp ,0x01 ,pdata +4a1e 18430400 rshift temp ,temp +4a1f 67e0c99e store 1 ,mem_remote_car_motor2_key2_press_state +4a20 18417e01 and temp ,0x01 ,pdata +4a21 18430400 rshift temp ,temp +4a22 67e0c99f store 1 ,mem_remote_car_motor2_key3_press_state +4a23 20600000 rtn + +send_data: +4a24 44f2c01c bpatch patch1c_5 ,mem_patch1c +4a25 20404a34 call remote_car_fb_check +4a26 20404a39 call remote_car_lr_check +4a27 20404a2a call remote_car_no_data_timeout_check +4a28 24740000 nrtn user +4a29 20204a70 branch remote_car_send_key + +remote_car_no_data_timeout_check: +4a2a 6fe0c998 fetch 1 ,mem_remote_car_24g_status +4a2b c1808000 rtnne work_paired +4a2c 6fe0c9a2 fetch 1 ,mem_remote_car_no_data_check +4a2d 207a0000 rtn blank +4a2e 1fe67c01 sub pdata ,1 ,null +4a2f 24610000 nrtn positive +4a30 6fe14885 fetch 2 ,mem_24g_reconn_timeout_init +4a31 67e14887 store 2 ,mem_24g_reconn_timeout +4a32 78347c00 enable user +4a33 20600000 rtn + +remote_car_fb_check: +4a34 6fe0c99c fetch 1 ,mem_remote_car_motor1_key0_press_state +4a35 243a4a64 nbranch remote_car_send_motor1_key0_press ,blank +4a36 6fe0c99d fetch 1 ,mem_remote_car_motor1_key1_press_state +4a37 243a4a66 nbranch remote_car_send_motor1_key1_press ,blank +4a38 20204a6c branch remote_car_send_motor1_key0_rel + +remote_car_lr_check: +4a39 6fe0c99e fetch 1 ,mem_remote_car_motor2_key2_press_state +4a3a 243a4a68 nbranch remote_car_send_motor2_key2_press ,blank +4a3b 6fe0c99f fetch 1 ,mem_remote_car_motor2_key3_press_state +4a3c 243a4a6a nbranch remote_car_send_motor2_key3_press ,blank +4a3d 20204a6e branch remote_car_send_motor2_key2_rel + +remote_car_scale_process_idle: +4a3e 20404a4e call remote_car_24g_status_process +4a3f 20204a05 branch remote_car_key_scan_process + +remote_car_scale_process_bb_event: +4a40 1a627e00 copy regc ,pdata +4a41 c016b23f beq bt_evt_button_up ,app_event_button_up +4a42 c0083227 beq bt_evt_button_long_pressed ,app_button_long_pressed +4a43 c01cca48 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +4a44 c01e4a4a beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +4a45 c01d4a47 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +4a46 20600000 rtn + +remote_car_24g_attempt_fail: +4a47 20202597 branch g24_txbuf_clear + +remote_car_24g_pairing_complete: +4a48 204049ef call remote_car_set_24g_addr_eeprom +4a49 20405dce call iicd_write_protect_eep_data + +remote_car_24g_attempt_success: +4a4a 7048a100 jam 0 ,mem_24g_conn_sm +4a4b 70499901 jam work_paired ,mem_remote_car_24g_auto_work_step +4a4c 70499a01 jam work_paired ,mem_remote_car_24g_pair_success_flag +4a4d 20600000 rtn + +remote_car_24g_status_process: +4a4e 6fe0c999 fetch 1 ,mem_remote_car_24g_auto_work_step +4a4f c1000000 rtneq power_on +4a50 6fe0c998 fetch 1 ,mem_remote_car_24g_status +4a51 c1008000 rtneq work_paired +4a52 70499801 jam work_paired ,mem_remote_car_24g_status + +remote_car_scale_process_paired: +4a53 da200000 arg 0 ,rega +4a54 20207801 branch ui_led_off_global + +remote_car_scale_process_shutdown: +4a55 da200000 arg 0 ,rega +4a56 20407801 call ui_led_off_global +4a57 204049f3 call remote_car_ui_led_init +4a58 20203217 branch app_enter_hibernate + +remote_car_event_timer: +4a59 20403198 call app_power_timer +4a5a 2040232b call g24_pair_timeout_timer +4a5b 20402556 call g24_reconn_timeout_timer +4a5c 20204a5d branch remote_car_no_data_timer + +remote_car_no_data_timer: +4a5d 6fe0c963 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +4a5e 207a0000 rtn blank +4a5f 6fe0c4c8 fetch 1 ,mem_key_value_retention +4a60 243a49fb nbranch remote_no_data_timer_init ,blank +4a61 da60498b arg mem_remote_car_no_data_timer ,regc +4a62 da404a55 arg remote_car_scale_process_shutdown ,regb +4a63 20203191 branch timer_single_step_2b + +remote_car_send_motor1_key0_press: +4a64 70496a01 jam motor_positive ,mem_remote_car_24g_motor1_payload +4a65 20600000 rtn + +remote_car_send_motor1_key1_press: +4a66 70496a02 jam motor_negative ,mem_remote_car_24g_motor1_payload +4a67 20600000 rtn + +remote_car_send_motor2_key2_press: +4a68 70496c01 jam motor_positive ,mem_remote_car_24g_motor2_payload +4a69 20600000 rtn + +remote_car_send_motor2_key3_press: +4a6a 70496c02 jam motor_negative ,mem_remote_car_24g_motor2_payload +4a6b 20600000 rtn + +remote_car_send_motor1_key0_rel: + +remote_car_send_motor1_key1_rel: +4a6c 70496a00 jam motor_stop ,mem_remote_car_24g_motor1_payload +4a6d 20600000 rtn + +remote_car_send_motor2_key2_rel: + +remote_car_send_motor2_key3_rel: +4a6e 70496c00 jam motor_stop ,mem_remote_car_24g_motor2_payload +4a6f 20600000 rtn + +remote_car_send_key: +4a70 da204964 arg mem_remote_car_24g_motor_packet ,rega +4a71 2020793f branch queue_push + +remote_car_send_attack: +4a72 da204971 arg mem_remote_car_24g_fire_packet ,rega +4a73 2020793f branch queue_push + +remote_car_g24_package_data: +4a74 6fe0c99a fetch 1 ,mem_remote_car_24g_pair_success_flag +4a75 c000ca7e beq work_paired ,remote_car_g24_send_empty +4a76 da20497a arg mem_remote_car_24g_tx_temp ,rega +4a77 20407956 call queue_pop +4a78 24344a83 nbranch remote_car_moto_data ,user + +remote_car_g24_package_data_continue: +4a79 d8c0497a arg mem_remote_car_24g_tx_temp ,contr +4a7a efe08006 ifetch 1 ,contr +4a7b 1fe22200 copy pdata ,rega +4a7c da40497b arg mem_remote_car_24g_tx_temp + 1 ,regb +4a7d 20600000 rtn + +remote_car_g24_send_empty: +4a7e 70499a00 jam 0 ,mem_remote_car_24g_pair_success_flag +4a7f 78347c00 enable user +4a80 da200001 arg 1 ,rega +4a81 da40499b arg mem_remote_car_empty_packet ,regb +4a82 20600000 rtn + +remote_car_moto_data: +4a83 6fe0c97d fetch 1 ,mem_remote_car_24g_tx_temp + 3 +4a84 c0024a87 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +4a85 c002ca87 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +4a86 20600000 rtn + +remote_car_moto_data_next: +4a87 6fe0c980 fetch 1 ,mem_remote_car_24g_tx_temp + 6 +4a88 243a4a8e nbranch remote_car_moto_data_enable_user ,blank +4a89 6fe0c982 fetch 1 ,mem_remote_car_24g_tx_temp + 8 +4a8a 243a4a8e nbranch remote_car_moto_data_enable_user ,blank +4a8b 6fe0c984 fetch 1 ,mem_remote_car_24g_tx_temp + 10 +4a8c 243a4a8e nbranch remote_car_moto_data_enable_user ,blank +4a8d 20600000 rtn + +remote_car_moto_data_enable_user: +4a8e 78347c00 enable user +4a8f 20204a79 branch remote_car_g24_package_data_continue + +remote_car_default_init: +4a90 70478f14 jam 0x14 ,mem_ui_button_timeout +4a91 70478301 jam 0x01 ,mem_ui_button_last_state +4a92 5800060f setarg 0x060f +4a93 67e148d1 store 2 ,mem_remote_car_queue_each_size +4a94 580048d1 setarg mem_remote_car_queue_each_size +4a95 67e1448a store 2 ,mem_queue_ptr +4a96 70409901 jam 0x01 ,mem_lpm_mode +4a97 70415b06 jam 0x06 ,mem_lpm_overhead +4a98 70417802 jam 0x02 ,mem_lpm_mult_timeout +4a99 7048d000 jam 0x00 ,mem_remote_car_hard_soft_switch +4a9a 58004930 setarg mem_remote_style_led_type +4a9b 67e1448d store 2 ,mem_ui_led_struct_ptr +4a9c 70448c01 jam 0x01 ,mem_ui_led_struct_num +4a9d 704931ff jam 0xff ,mem_remote_style_blink_count +4a9e 58000296 setarg 0x0296 +4a9f 67e14933 store 2 ,mem_remote_style_on_time +4aa0 5800073a setarg 0x073a +4aa1 67e14935 store 2 ,mem_remote_style_off_time +4aa2 5800498d setarg mem_remote_car_soft_power +4aa3 67e144ca store 2 ,mem_power_param_ptr +4aa4 58000c0c setarg 0x0c0c +4aa5 67e1498f store 2 ,mem_remote_car_power_off_timeout +4aa6 58004944 setarg mem_remote_car_keyscan +4aa7 67e144c6 store 2 ,mem_keyscan_ptr +4aa8 70496100 jam 0x00 ,mem_remote_car_config_soft_switch_enable +4aa9 70495fff jam 0xff ,mem_remote_car_config_connect_led_gpio +4aaa 704962ff jam 0xff ,mem_remote_car_config_soft_switch_gpio +4aab 70495d00 jam 0x00 ,mem_remote_car_config_key_map +4aac 70495e00 jam 0x00 ,mem_remote_car_config_layout +4aad 70496000 jam 0x00 ,mem_remote_car_config_check_way +4aae 70496301 jam 0x01 ,mem_remote_car_config_timeout_shutdown_enable +4aaf 58004e55 setarg 0x4e55 +4ab0 67e14950 store 2 ,mem_current_vdd_value_default_mid_x +4ab1 67e14952 store 2 ,mem_current_vdd_value_default_mid_y +4ab2 58000007 setarg 0x0007 +4ab3 67e14956 store 2 ,mem_current_vdd_default_range +4ab4 7044a002 jam 0x02 ,mem_adc_config_flag +4ab5 38035a0c setsect 0 ,0x35a0c +4ab6 3804011a setsect 1 ,0x11a +4ab7 38080060 setsect 2 ,0x60 +4ab8 380c0028 setsect 3 ,0x28 +4ab9 67e4c964 store 9 ,mem_remote_car_24g_motor_packet +4aba 3802000a setsect 0 ,0x2000a +4abb 38040002 setsect 1 ,0x02 +4abc e7e20005 istore 4 ,contw +4abd 38035a08 setsect 0 ,0x35a08 +4abe 3804019a setsect 1 ,0x19a +4abf 38080000 setsect 2 ,0x00 +4ac0 380c0000 setsect 3 ,0x00 +4ac1 67e4c971 store 9 ,mem_remote_car_24g_fire_packet +4ac2 58000064 setarg 0x0064 +4ac3 67e14989 store 2 ,mem_remote_car_no_data_timeout +4ac4 7041e800 jam tx_power_0db ,mem_tx_power +4ac5 70483601 jam 0x01 ,mem_24g_data_type +4ac6 7048a806 jam 0x06 ,mem_24g_max_retry +4ac7 70485b01 jam 0x01 ,mem_24g_pair_switch +4ac8 70488c00 jam 0x00 ,mem_24g_fast_conn_enable +4ac9 2040231a call g24_rx_window_init +4aca 20402613 call g24_interval_param_8ms +4acb 204022ff call g24_chmap_param_init +4acc 20402325 call g24_pair_param_init +4acd 58000708 setarg 0x0708 +4ace 67e14881 store 2 ,mem_24g_pair_timeout_init +4acf 58000050 setarg 0x0050 +4ad0 67e14885 store 2 ,mem_24g_reconn_timeout_init +4ad1 580a7700 setarg 0x0a7700 +4ad2 67e1c8b0 store 3 ,mem_24g_long_sleep_set +4ad3 58604800 setarg 0x604800 +4ad4 67e1c85c store 3 ,mem_24g_enter_hibernate +4ad5 20203100 branch app_sys_param_init + +shutter_init: +4ad6 20758000 rtn wake +4ad7 20406df3 call enable_authrom +4ad8 58004b5b setarg shutter_le_before_hibernate +4ad9 67e1445d store 2 ,mem_cb_before_hibernate +4ada 58004b59 setarg shutter_process_lpm_before +4adb 67e1445f store 2 ,mem_cb_before_lpm +4adc 58003217 setarg app_enter_hibernate +4add 67e14469 store 2 ,mem_cb_discovry_timeout +4ade 58004b57 setarg shutter_process_idle +4adf 67e14465 store 2 ,mem_cb_idle_process +4ae0 58004b06 setarg shutter_process_bb_event +4ae1 67e14467 store 2 ,mem_cb_bb_event_process +4ae2 58004b00 setarg shutter_le_scale_lpm_lock +4ae3 67e1445b store 2 ,mem_cb_check_wakelock +4ae4 58004bc8 setarg ble_shutter_receive_data +4ae5 67e1446b store 2 ,mem_cb_att_write +4ae6 58004b3d setarg shutter_le_bb_event_timer +4ae7 67e1446f store 2 ,mem_cb_event_timer +4ae8 58004ba3 setarg shutter_key_change +4ae9 67e147e8 store 2 ,mem_cb_shutter_keycan +4aea 58004bdf setarg shutter_soft_swtich_power_on +4aeb 67e147e3 store 2 ,mem_shutter_soft_switch_poweron_callback_function +4aec 58004be0 setarg shutter_soft_swtich_power_off +4aed 67e147e5 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +4aee 20404afb call shutter_set_ble_version +4aef 20401aa9 call le_modified_name +4af0 20404bcb call shutter_init_param +4af1 20406172 call keyscan_key_init +4af2 2040793a call queue_init +4af3 204077f0 call ui_led_init_global +4af4 44f3401c bpatch patch1c_6 ,mem_patch1c +4af5 20404bd8 call shutter_load_buffer_config_form_datarom +4af6 6fe0c7de fetch 1 ,mem_shutter_hard_soft_switch_case +4af7 c0004afd beq hard_switch ,shutter_hart_swtich_power_on +4af8 6fe0c7df fetch 1 ,mem_shutter_soft_switch_button_gpio +4af9 67e0c790 store 1 ,mem_ui_button_gpio +4afa 20204be7 branch ui_soft_swtich_init + +shutter_set_ble_version: +4afb 7045f707 jam 7 ,mem_lmp_version +4afc 20600000 rtn + +shutter_hart_swtich_power_on: +4afd 704790ff jam ui_button_gpio_disable ,mem_ui_button_gpio +4afe 7047e001 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +4aff 20204b76 branch shutter_start_reconnect + +shutter_le_scale_lpm_lock: +4b00 6fe0c7e0 fetch 1 ,mem_shutter_soft_switch_power_state +4b01 c00131dd beq ss_state_power_off ,app_get_lpm_wake_lock +4b02 20405301 call l2cap_malloc_get_full_map +4b03 6fe0c4e6 fetch 1 ,mem_used_map +4b04 243a31dd nbranch app_get_lpm_wake_lock ,blank +4b05 202031df branch app_put_lpm_wake_lock + +shutter_process_bb_event: +4b06 1a627e00 copy regc ,pdata +4b07 c00a4b0f beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +4b08 c00acb13 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +4b09 c01fcb16 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +4b0a c0204b1c beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +4b0b c0084b22 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +4b0c c0164b23 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +4b0d c016cb2e beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +4b0e 20600000 rtn + +ble_shutter_process_baseband_connect: +4b0f 20404b5d call shutter_stop_bluetooth_discovery +4b10 58000000 setarg 0 +4b11 67e147b8 store 2 ,mem_ble_shutter_reconn_timer +4b12 20203215 branch app_led_off + +ble_shutter_process_baseband_disconnect: +4b13 2040793a call queue_init +4b14 7047b100 jam 0 ,mem_ble_shutter_enable_notify +4b15 20204b76 branch shutter_start_reconnect + +ble_shutter_process_reconnect_complete: +4b16 2040793a call queue_init +4b17 7047b101 jam 1 ,mem_ble_shutter_enable_notify +4b18 6fe447c2 fetch 8 ,mem_ble_shutter_interval_min +4b19 67e44372 store 8 ,mem_le_interval_min +4b1a 20403223 call app_lpm_mult_enable +4b1b 20201f57 branch le_l2cap_tx_update_req + +ble_shutter_process_parse_connect_parameter_update_response: +4b1c 6fe143db fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +4b1d c1000000 rtneq ble_signaling_connect_parameter_update_accepted +4b1e 6fe447ca fetch 8 ,mem_ble_shutter_interval_min_new +4b1f 207a0000 rtn blank +4b20 67e44372 store 8 ,mem_le_interval_min +4b21 20201f57 branch le_l2cap_tx_update_req + +shutter_process_soft_swtich_button_long_press: +4b22 20204bf8 branch ui_soft_switch_botton_long_press + +shutter_process_soft_swtich_button_down: +4b23 6fe0c7de fetch 1 ,mem_shutter_hard_soft_switch_case +4b24 c1000000 rtneq hard_switch +4b25 6fe0c7e0 fetch 1 ,mem_shutter_soft_switch_power_state +4b26 c1808000 rtnne ss_state_power_on +4b27 20404b29 call shutter_store_currenct_led_state +4b28 20203213 branch app_led_on + +shutter_store_currenct_led_state: +4b29 7049e001 jam 1 ,mem_shutter_soft_swtich_botton_down +4b2a df20000b arg 11 ,loopcnt +4b2b d8a049e1 arg mem_shutter_soft_swtich_led_struct_temp ,contw +4b2c d8c049ca arg mem_shutter_led_struct_app_led ,contr +4b2d 20207d5f branch memcpy + +shutter_process_soft_swtich_button_up: +4b2e 6fe0c7de fetch 1 ,mem_shutter_hard_soft_switch_case +4b2f c1000000 rtneq hard_switch +4b30 6fe0c7e0 fetch 1 ,mem_shutter_soft_switch_power_state +4b31 c000cb33 beq ss_state_power_on ,shutter_load_currenct_led_state +4b32 20204bf4 branch ui_soft_switch_botton_up + +shutter_load_currenct_led_state: +4b33 6fe0c9e0 fetch 1 ,mem_shutter_soft_swtich_botton_down +4b34 c1808000 rtnne 1 +4b35 7049e000 jam 0 ,mem_shutter_soft_swtich_botton_down +4b36 6fe1478c fetch 2 ,mem_ui_state_map +4b37 c2803215 bbit1 ui_state_bt_connected ,app_led_off +4b38 c284b215 bbit1 ui_state_ble_connected ,app_led_off +4b39 df20000b arg 11 ,loopcnt +4b3a d8c049e1 arg mem_shutter_soft_swtich_led_struct_temp ,contr +4b3b d8a049ca arg mem_shutter_led_struct_app_led ,contw +4b3c 20207d5f branch memcpy + +shutter_le_bb_event_timer: +4b3d 20404b40 call shutter_check_sleep_timer +4b3e 20404b47 call shutter_check_power_off_timer +4b3f 20204b52 branch ble_shutter_reconn_timer + +shutter_check_sleep_timer: +4b40 da6047dc arg mem_shutter_sleep_timer ,regc +4b41 da404b43 arg shutter_sleep_timeout ,regb +4b42 20203191 branch timer_single_step_2b + +shutter_sleep_timeout: +4b43 7047e002 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +4b44 20403215 call app_led_off +4b45 20404b87 call shutter_disconnect_current_connection +4b46 20204be4 branch shutter_wait_power_off + +shutter_check_power_off_timer: +4b47 da6049ed arg mem_shutter_power_off_timer ,regc +4b48 da404b4a arg shutter_check_power_off_timeout ,regb +4b49 2020318a branch timer_single_step + +shutter_check_power_off_timeout: +4b4a 6fe1478c fetch 2 ,mem_ui_state_map +4b4b c284cbe4 bbit1 ui_state_ble_connected ,shutter_wait_power_off +4b4c c2804be4 bbit1 ui_state_bt_connected ,shutter_wait_power_off +4b4d 6fe0c9ca fetch 1 ,mem_shutter_led_struct_app_led_type +4b4e c000cbe4 beq ui_led_state_blink_start ,shutter_wait_power_off +4b4f c0024be4 beq ui_led_state_blink_lighting ,shutter_wait_power_off +4b50 c002cbe4 beq ui_led_state_blink_darking ,shutter_wait_power_off +4b51 20203217 branch app_enter_hibernate + +ble_shutter_reconn_timer: +4b52 6fe0c7e0 fetch 1 ,mem_shutter_soft_switch_power_state +4b53 c1808000 rtnne ss_state_power_on +4b54 da6047b8 arg mem_ble_shutter_reconn_timer ,regc +4b55 da404b64 arg shutter_start_bluetooth_discovery ,regb +4b56 20203191 branch timer_single_step_2b + +shutter_process_idle: +4b57 20404bb4 call shutter_send_data_to_master +4b58 202061a3 branch keyscan_key_process + +shutter_process_lpm_before: +4b59 2040609f call gpio_set_before_lpm +4b5a 20206197 branch keyscan_process_lpm_before + +shutter_le_before_hibernate: +4b5b 2040609f call gpio_set_before_lpm +4b5c 20206df7 branch disable_authrom + +shutter_stop_bluetooth_discovery: +4b5d 6fe0c7a4 fetch 1 ,mem_shutter_bluetooth_type +4b5e c2804b60 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +4b5f 20600000 rtn + +ble_shutter_stop_bluetooth_discovery: +4b60 6fe147d8 fetch 2 ,mem_ble_shutter_connect_timeout +4b61 67e147da store 2 ,mem_shutter_sleep_timeout +4b62 67e147dc store 2 ,mem_shutter_sleep_timer +4b63 20203205 branch app_ble_stop_adv + +shutter_start_bluetooth_discovery: +4b64 6fe0c7e0 fetch 1 ,mem_shutter_soft_switch_power_state +4b65 c1808000 rtnne ss_state_power_on +4b66 6fe0c7a4 fetch 1 ,mem_shutter_bluetooth_type +4b67 c2804b69 bbit1 ble_shutter ,ble_shutter_start_discovery +4b68 20600000 rtn + +ble_shutter_start_discovery: +4b69 6fe1478c fetch 2 ,mem_ui_state_map +4b6a c3848000 rtnbit1 ui_state_ble_connected +4b6b 6fe147d6 fetch 2 ,mem_ble_shutter_discovery_timeout +4b6c 67e147da store 2 ,mem_shutter_sleep_timeout +4b6d 67e147dc store 2 ,mem_shutter_sleep_timer +4b6e 6fe147b4 fetch 2 ,mem_ble_shutter_discovery_adv_interval +4b6f 20404c09 call shutter_ble_adv_interval_set +4b70 20403211 call app_led_start_blink +4b71 6fe247be fetch 4 ,mem_ble_shutter_discovery_blink_on_time +4b72 67e249cd store 4 ,mem_shutter_led_struct_app_led_on_time +4b73 6fe1478c fetch 2 ,mem_ui_state_map +4b74 c3858000 rtnbit1 ui_state_ble_adv +4b75 20203207 branch app_ble_start_adv + +shutter_start_reconnect: +4b76 6fe0c7e0 fetch 1 ,mem_shutter_soft_switch_power_state +4b77 c1808000 rtnne ss_state_power_on +4b78 6fe0c7a4 fetch 1 ,mem_shutter_bluetooth_type +4b79 c2804b7b bbit1 ble_shutter ,ble_shutter_start_reconnect +4b7a 20600000 rtn + +ble_shutter_start_reconnect: +4b7b 6fe147b8 fetch 2 ,mem_ble_shutter_reconn_timer +4b7c 684947b6 fetcht 2 ,mem_ble_shutter_reconn_timeout +4b7d 604947b8 storet 2 ,mem_ble_shutter_reconn_timer +4b7e 247a0000 nrtn blank +4b7f 6fe147b2 fetch 2 ,mem_ble_shutter_reconn_adv_interval +4b80 20404c09 call shutter_ble_adv_interval_set +4b81 20403211 call app_led_start_blink +4b82 6fe247ba fetch 4 ,mem_ble_shutter_reconn_blink_on_time +4b83 67e249cd store 4 ,mem_shutter_led_struct_app_led_on_time +4b84 6fe1478c fetch 2 ,mem_ui_state_map +4b85 c3858000 rtnbit1 ui_state_ble_adv +4b86 20203207 branch app_ble_start_adv + +shutter_disconnect_current_connection: +4b87 6fe1478c fetch 2 ,mem_ui_state_map +4b88 c284b20f bbit1 ui_state_ble_connected ,app_ble_disconnect +4b89 20204b5d branch shutter_stop_bluetooth_discovery + +shutter_check_data_enable: +4b8a 20407e56 call disable_user +4b8b 6fe1478c fetch 2 ,mem_ui_state_map +4b8c c284cb8e bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +4b8d 20600000 rtn + +shutter_check_ble_data_enable: +4b8e 6fe0c7b1 fetch 1 ,mem_ble_shutter_enable_notify +4b8f 207a0000 rtn blank +4b90 20207e54 branch enable_user + +shutter_check_bluetooth_conn: +4b91 20407e56 call disable_user +4b92 6fe1478c fetch 2 ,mem_ui_state_map +4b93 c3800000 rtnbit1 ui_state_bt_connected +4b94 c3848000 rtnbit1 ui_state_ble_connected +4b95 20207e54 branch enable_user + +shutter_change_bluetooth_status_bt_disconn: +4b96 6fe0c7a4 fetch 1 ,mem_shutter_bluetooth_type +4b97 c2804b99 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +4b98 20600000 rtn + +ble_shutter_change_bluetooth_status_bt_disconn: +4b99 20204b76 branch shutter_start_reconnect + +shutter_check_send_data: +4b9a 78567c00 disable user2 +4b9b 6fe147da fetch 2 ,mem_shutter_sleep_timeout +4b9c 67e147dc store 2 ,mem_shutter_sleep_timer +4b9d 20404b91 call shutter_check_bluetooth_conn +4b9e 20344b96 branch shutter_change_bluetooth_status_bt_disconn ,user +4b9f 20404b8a call shutter_check_data_enable +4ba0 24740000 nrtn user +4ba1 78367c00 enable user2 +4ba2 20600000 rtn + +shutter_key_change: +4ba3 20404b9a call shutter_check_send_data +4ba4 24760000 nrtn user2 +4ba5 1a227e00 deposit rega +4ba6 203a4baa branch shutter_key_release ,blank + +shutter_key_press: +4ba7 20403213 call app_led_on +4ba8 da6047f2 arg mem_key0_press ,regc +4ba9 20204bac branch push_queue_press_or_release + +shutter_key_release: +4baa 20403215 call app_led_off +4bab da60481a arg mem_key0_release ,regc + +push_queue_press_or_release: +4bac dfe00005 arg max_queue_num ,pdata +4bad 98effe00 imul32 queue ,pdata +4bae 9a60a600 iadd regc ,regc + +push_buffer_in_queue: +4baf efe08013 ifetch 1 ,regc +4bb0 207a0000 rtn blank +4bb1 20404bc0 call queue_push_one_byte +4bb2 1a60a601 increase 1 ,regc +4bb3 20204baf branch push_buffer_in_queue + +shutter_send_data_to_master: +4bb4 6fe1478c fetch 2 ,mem_ui_state_map +4bb5 c284cbb7 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +4bb6 20600000 rtn + +pop_queue_to_ble_data: +4bb7 20401b77 call le_fifo_check_nearly_full +4bb8 247a0000 nrtn blank +4bb9 20404bc3 call queue_pop_one_byte +4bba 24740000 nrtn user +4bbb 1fe0ffff pincrease -1 +4bbc 1feffe05 mul32 pdata ,shutter_ble_data_buffer ,pdata +4bbd d8404842 arg mem_ble_data_buffer1 ,temp +4bbe 98408c00 iadd temp ,contr +4bbf 20204c0d branch le_send_notify_from_list + +queue_push_one_byte: +4bc0 67e0895c store 1 ,mem_pdatatemp +4bc1 da20095c arg mem_pdatatemp ,rega +4bc2 2020793f branch queue_push + +queue_pop_one_byte: +4bc3 da20095c arg mem_pdatatemp ,rega +4bc4 20407956 call queue_pop +4bc5 24740000 nrtn user +4bc6 6fe0895c fetch 1 ,mem_pdatatemp +4bc7 20600000 rtn + +ble_shutter_receive_data: +4bc8 6fe14437 fetch 2 ,mem_le_att_handle +4bc9 c00c4b16 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +4bca 20600000 rtn + +shutter_init_param: +4bcb 58000002 setarg 0x02 +4bcc 67e0c9ec store 1 ,mem_shutter_power_off_timeout +4bcd 58200008 setarg 0x00200008 +4bce 67e247c2 store 4 ,mem_ble_shutter_interval_min +4bcf 592c0005 setarg 0x012c0005 +4bd0 e7e20005 istore 4 ,contw +4bd1 70438017 jam 0x17 ,mem_le_local_mtu +4bd2 5800001b setarg 0x1b +4bd3 67e143d1 store 2 ,mem_le_pairing_handle +4bd4 20401b16 call le_set_config_fixed_ltk +4bd5 20401b32 call le_set_fixed_ltk +4bd6 20401b3f call le_set_justwork +4bd7 20201b1e branch le_set_config_read_authentication + +shutter_load_buffer_config_form_datarom: +4bd8 df200028 arg ble_key_value_list_size ,loopcnt +4bd9 d8a04842 arg mem_ble_data_buffer1 ,contw +4bda d8c09e57 arg ble_shutter_key_value_list ,contr +4bdb 20207d52 branch memcpy_fast + +shutter_load_ble_gatt_form_datarom: +4bdc df20017e arg ble_gatt_list_size ,loopcnt +4bdd d8c09af2 arg ble_shutter_gatt_list ,contr +4bde 20207d52 branch memcpy_fast + +shutter_soft_swtich_power_on: +4bdf 20204b76 branch shutter_start_reconnect + +shutter_soft_swtich_power_off: +4be0 da200000 arg 0 ,rega +4be1 da6049d5 arg mem_shutter_power_off_led_style ,regc +4be2 2040780c call ui_led_set_style_global +4be3 20404b87 call shutter_disconnect_current_connection + +shutter_wait_power_off: +4be4 6fe0c9ec fetch 1 ,mem_shutter_power_off_timeout +4be5 67e0c9ed store 1 ,mem_shutter_power_off_timer +4be6 20600000 rtn + +ui_soft_swtich_init: +4be7 58000000 setarg ss_state_power_up +4be8 20404bef call ui_soft_swtich_init_power_on_time +4be9 70478301 jam ui_button_state_up ,mem_ui_button_last_state +4bea 204077bb call ui_button_init +4beb 204077c5 call ui_button_polling +4bec 6fe1478c fetch 2 ,mem_ui_state_map +4bed c3860000 rtnbit1 ui_state_btn_down +4bee 20203217 branch app_enter_hibernate + +ui_soft_swtich_init_power_on_time: +4bef 684944ca fetcht 2 ,mem_power_param_ptr +4bf0 e7e08002 istore 1 ,temp +4bf1 efe08005 ifetch 1 ,contw +4bf2 67e0c78f store 1 ,mem_ui_button_timeout +4bf3 20600000 rtn + +ui_soft_switch_botton_up: +4bf4 6fe144ca fetch 2 ,mem_power_param_ptr +4bf5 efe0803f ifetch 1 ,pdata +4bf6 c1800000 rtnne ss_state_power_up +4bf7 20203217 branch app_enter_hibernate + +ui_soft_switch_botton_long_press: +4bf8 684944ca fetcht 2 ,mem_power_param_ptr +4bf9 efe08002 ifetch 1 ,temp +4bfa c000cc03 beq ss_state_power_on ,ui_soft_switch_power_off + +ui_soft_switch_power_on: +4bfb 58000001 setarg ss_state_power_on +4bfc 684944ca fetcht 2 ,mem_power_param_ptr +4bfd e7e08002 istore 1 ,temp +4bfe 18408c02 add temp ,ss_power_off_time ,contr +4bff efe08006 ifetch 1 ,contr +4c00 e7e0800f istore 1 ,mem_ui_button_timeout +4c01 efe10006 ifetch 2 ,contr +4c02 20207e05 branch callback_func + +ui_soft_switch_power_off: +4c03 58000002 setarg ss_state_power_off +4c04 20404bef call ui_soft_swtich_init_power_on_time +4c05 18408c05 add temp ,ss_power_off_cb ,contr +4c06 efe10006 ifetch 2 ,contr +4c07 203a3217 branch app_enter_hibernate ,blank +4c08 20207e05 branch callback_func + +shutter_ble_adv_interval_set: +4c09 67e14159 store 2 ,mem_lpm_interval +4c0a 1fe0fffc increase -4 ,pdata +4c0b 67e14428 store 2 ,mem_le_adv_interval +4c0c 20600000 rtn + +le_send_notify_from_list: +4c0d efe08006 ifetch 1 ,contr +4c0e 1fe22200 copy pdata ,rega +4c0f e8410006 ifetcht 2 ,contr +4c10 20407ceb call store_contr +4c11 20401eb3 call le_att_malloc_tx_notify +4c12 1a227200 copy rega ,loopcnt +4c13 20407ce5 call get_contr +4c14 20207d5f branch memcpy + +shutter_default_init: +4c15 6fe149ee fetch 2 ,mem_shutter_key_conf0_temp +4c16 67e147ea store 2 ,mem_shutter_key_conf0 +4c17 6fe0c9f0 fetch 1 ,mem_shutter_led_struct_app_led_gpio_temp +4c18 67e0c9cc store 1 ,mem_shutter_led_struct_app_led_gpio +4c19 67e0c9d7 store 1 ,mem_shutter_power_off_led_style_gpio +4c1a 6fe0c9f1 fetch 1 ,mem_shutter_hard_soft_switch_case_temp +4c1b 67e0c7de store 1 ,mem_shutter_hard_soft_switch_case +4c1c 6fe0c9f2 fetch 1 ,mem_shutter_soft_switch_button_gpio_temp +4c1d 67e0c7df store 1 ,mem_shutter_soft_switch_button_gpio +4c1e 7047a401 jam 0x01 ,mem_shutter_bluetooth_type +4c1f 58000030 setarg 0x0030 +4c20 67e147af store 2 ,mem_classic_shutter_random_mac_offset_addr +4c21 58000000 setarg 0x0000 +4c22 67e147a5 store 2 ,mem_shutter_config_eeprom_offset_addr +4c23 58000001 setarg 0x0001 +4c24 67e147f2 store 2 ,mem_key0_press +4c25 67e147f7 store 2 ,mem_key1_press +4c26 58000006 setarg 0x0006 +4c27 67e1481a store 2 ,mem_key0_release +4c28 67e1481f store 2 ,mem_key1_release +4c29 58000007 setarg 0x0007 +4c2a 67e147fc store 2 ,mem_key2_press +4c2b 58000008 setarg 0x0008 +4c2c 67e14824 store 2 ,mem_key2_release +4c2d 580047e0 setarg mem_shutter_soft_switch_power_state +4c2e 67e144ca store 2 ,mem_power_param_ptr +4c2f 58201400 setarg 0x201400 +4c30 67e1c7e0 store 3 ,mem_shutter_soft_switch_power_state +4c31 70409901 jam 0x01 ,mem_lpm_mode +4c32 58000100 setarg 0x0100 +4c33 67e14159 store 2 ,mem_lpm_interval +4c34 70415b08 jam 0x08 ,mem_lpm_overhead +4c35 70417705 jam 0x05 ,mem_lpm_mult +4c36 70417802 jam 0x02 ,mem_lpm_mult_timeout +4c37 58000030 setarg 0x0030 +4c38 67e14455 store 2 ,mem_sniff_param_interval +4c39 58000001 setarg 0x0001 +4c3a e7e10005 istore 2 ,contw +4c3b 7046410a jam 0x0a ,mem_unsniff2sniff_timer +4c3c 58000096 setarg 0x0096 +4c3d 67e147ba store 2 ,mem_ble_shutter_reconn_blink_on_time +4c3e e7e10005 istore 2 ,contw +4c3f 58000296 setarg 0x0296 +4c40 67e147be store 2 ,mem_ble_shutter_discovery_blink_on_time +4c41 e7e10005 istore 2 ,contw +4c42 38000010 setsect 0 ,0x10 +4c43 38048008 setsect 1 ,0x8008 +4c44 380ac000 setsect 2 ,0x2c000 +4c45 380c0004 setsect 3 ,0x04 +4c46 67e447ca store 8 ,mem_ble_shutter_interval_min_new +4c47 70448c01 jam 0x01 ,mem_ui_led_struct_num +4c48 580049ca setarg mem_shutter_led_struct_app_led +4c49 67e1448d store 2 ,mem_ui_led_struct_ptr +4c4a 58000000 setarg 0x0000 +4c4b 67e149ca store 2 ,mem_shutter_led_struct_app_led +4c4c 380001a0 setsect 0 ,0x1a0 +4c4d 38040068 setsect 1 ,0x68 +4c4e 38080000 setsect 2 ,0x00 +4c4f 380c0000 setsect 3 ,0x00 +4c50 67e449cd store 8 ,mem_shutter_led_struct_app_led_on_time +4c51 58000301 setarg 0x0301 +4c52 67e149d5 store 2 ,mem_shutter_power_off_led_style +4c53 380001a0 setsect 0 ,0x1a0 +4c54 380400e8 setsect 1 ,0xe8 +4c55 38080000 setsect 2 ,0x00 +4c56 380c0000 setsect 3 ,0x00 +4c57 67e449d8 store 8 ,mem_shutter_power_off_led_style_on_time +4c58 5800000e setarg 0x000e +4c59 67e147b2 store 2 ,mem_ble_shutter_reconn_adv_interval +4c5a 58000140 setarg 0x0140 +4c5b 67e147b4 store 2 ,mem_ble_shutter_discovery_adv_interval +4c5c 67e14428 store 2 ,mem_le_adv_interval +4c5d 58000050 setarg 0x0050 +4c5e 67e147b6 store 2 ,mem_ble_shutter_reconn_timeout +4c5f 70443207 jam 0x07 ,mem_le_adv_channel_map +4c60 70442700 jam 0x00 ,mem_le_adv_enable +4c61 380000fb setsect 0 ,0xfb +4c62 3806c212 setsect 1 ,0x2c212 +4c63 3808800f setsect 2 ,0x800f +4c64 380c0021 setsect 3 ,0x21 +4c65 67e4444c store 8 ,mem_local_rx_max_octets +4c66 3800ff00 setsect 0 ,0xff00 +4c67 38043fc0 setsect 1 ,0x3fc0 +4c68 38080ff0 setsect 2 ,0xff0 +4c69 380c03fc setsect 3 ,0x3fc +4c6a 67e447d2 store 8 ,mem_classic_shutter_discovery_timeout +4c6b 580048fb setarg mem_queue_each_size +4c6c 67e1448a store 2 ,mem_queue_ptr +4c6d 58002001 setarg 0x2001 +4c6e 67e148fb store 2 ,mem_queue_each_size +4c6f 7043e71f jam 0x1f ,mem_le_adv_data_len +4c70 38010102 setsect 0 ,0x10102 +4c71 380480c1 setsect 1 ,0x80c1 +4c72 38098120 setsect 2 ,0x18120 +4c73 380c640c setsect 3 ,0x640c +4c74 67e4c3e8 store 9 ,mem_le_adv_data +4c75 380003c1 setsect 0 ,0x3c1 +4c76 e7e10005 istore 2 ,contw +4c77 7044071f jam 0x1f ,mem_le_scan_data_len +4c78 3802090d setsect 0 ,0x2090d +4c79 38074c15 setsect 1 ,0x34c15 +4c7a 380a8532 setsect 2 ,0x28532 +4c7b 380dd1d5 setsect 3 ,0x1d1d5 +4c7c 67e4c408 store 9 ,mem_le_scan_data +4c7d 38026574 setsect 0 ,0x26574 +4c7e 3804001c setsect 1 ,0x1c +4c7f e7e18005 istore 3 ,contw +4c80 580047e7 setarg mem_shutter_keyscan +4c81 67e144c6 store 2 ,mem_keyscan_ptr +4c82 7047e702 jam 0x02 ,mem_shutter_key_num +4c83 70447d17 jam 0x17 ,mem_app_connection_options +4c84 58004920 setarg mem_shutter_nv_data +4c85 67e14487 store 2 ,mem_nv_data_ptr +4c86 70448905 jam 0x05 ,mem_nv_data_number +4c87 58002540 setarg 0x2540 +4c88 67e140b2 store 2 ,mem_class +4c89 58040003 setarg 0x040003 +4c8a 67e1c765 store 3 ,mem_lmp_io_cap_payload_iocap +4c8b 70476c03 jam 0x03 ,mem_ssp_mode_flag +4c8c 70476401 jam 0x01 ,mem_ssp_enable +4c8d 70478e01 jam 0x01 ,mem_ui_profile_supported +4c8e 70415f00 jam 0x00 ,mem_ptt +4c8f 3803ffff setsect 0 ,0x3ffff +4c90 3806fe23 setsect 1 ,0x2fe23 +4c91 380999d9 setsect 2 ,0x199d9 +4c92 380c020d setsect 3 ,0x20d +4c93 67e440a0 store 8 ,mem_features +4c94 58009af2 setarg 0x9af2 +4c95 67e14396 store 2 ,mem_ui_le_uuid_table +4c96 7040d801 jam 0x01 ,mem_eir_enable +4c97 38010306 setsect 0 ,0x10306 +4c98 38040004 setsect 1 ,0x4 +4c99 38082010 setsect 2 ,0x2010 +4c9a 380c9040 setsect 3 ,0x9040 +4c9b 67e4c662 store 9 ,mem_all_uuid_16bits +4c9c 38020011 setsect 0 ,0x20011 +4c9d 38040044 setsect 1 ,0x44 +4c9e e7e28005 istore 5 ,contw +4c9f 70467800 jam 0x00 ,mem_all_uuid_128bits +4ca0 58009c70 setarg 0x9c70 +4ca1 67e14660 store 2 ,mem_ui_uuid_table +4ca2 7040c518 jam 0x18 ,mem_fcomp_div +4ca3 20203100 branch app_sys_param_init + +rf_debug_rx_gpio_low: +4ca4 6fe0c4d4 fetch 1 ,mem_rf_debug_rx_gpio + +rf_debug_gpio_low: +4ca5 d840003e arg gpcfg_output_low ,temp +4ca6 20206092 branch gpio_config_function + +rf_debug_rx_on_line: + +rf_debug_rx_gpio_high: +4ca7 6fe0c4d4 fetch 1 ,mem_rf_debug_rx_gpio + +rf_debug_gpio_high: +4ca8 d840003f arg gpcfg_output_high ,temp +4ca9 20206092 branch gpio_config_function + +rf_debug_rx_gpio_h_l_h: +4caa 20404ca7 call rf_debug_rx_gpio_high + +rf_debug_rx_gpio_l_h: +4cab 20404ca4 call rf_debug_rx_gpio_low +4cac 20204ca7 branch rf_debug_rx_gpio_high + +rf_debug_rx_gpio_l_h_l: + +rf_debug_shutdown_radio_line: +4cad 20404cab call rf_debug_rx_gpio_l_h + +rf_debug_rx_crc_line: +4cae 20204ca4 branch rf_debug_rx_gpio_low + +rf_debug_rx_sync_line: +4caf 20204cab branch rf_debug_rx_gpio_l_h + +rf_debug_rx_crc_fail_line: +4cb0 20404cab call rf_debug_rx_gpio_l_h +4cb1 20204cad branch rf_debug_rx_gpio_l_h_l + +rf_debug_rx_match_line: + +rf_debug_rx_crc_error_line: + +rf_debug_rx_sync_timeout_line: +4cb2 20204ca4 branch rf_debug_rx_gpio_low + +rf_debug_tx_off_line: + +rf_debug_tx_gpio_low: +4cb3 6fe0c4d5 fetch 1 ,mem_rf_debug_tx_gpio +4cb4 20204ca5 branch rf_debug_gpio_low + +rf_debug_tx_on_line: + +rf_debug_tx_gpio_high: +4cb5 6fe0c4d5 fetch 1 ,mem_rf_debug_tx_gpio +4cb6 20204ca8 branch rf_debug_gpio_high + +rf_debug_tx_gpio_l_h_l: +4cb7 20404cb3 call rf_debug_tx_gpio_low +4cb8 20404cb5 call rf_debug_tx_gpio_high +4cb9 20204cb3 branch rf_debug_tx_gpio_low + +hci_init: +4cba 20800000 clear_stack +4cbb 20404cc4 call hci_init_clksel +4cbc 20404cce call hci_init_uart_default_config +4cbd 20404ce2 call hci_init_uart_config +4cbe 20404d01 call hci_init_pwm_default_config +4cbf 20404d05 call hci_init_pwm +4cc0 7009fc01 jam 1 ,mem_hci_command_complete_num_hci_command_packet +4cc1 7009f904 jam hci_h4_type_event ,mem_hci_event_head_type + +hci_process_loop: +4cc2 20404d10 call hci_process_check_uart_rx +4cc3 20204cc2 branch hci_process_loop + +hci_init_clksel: +4cc4 6fe08a2c fetch 1 ,mem_tmp_buffer + efuse_offset_hci_boot_clksel +4cc5 c283cccc bbit1 7 ,hci_init_clksel_xtal + +hci_init_clksel_dpll: +4cc6 708a01ff jam 0xff ,core_clkpll_ctrl1 +4cc7 20000064 nop 100 +4cc8 708a020e jam 0x0e ,core_clkpll_ctrl2 +4cc9 708a0003 jam 0x03 ,core_clkpll_ctrl0 +4cca 70804205 jam clksel_dpll ,core_clksel +4ccb 20600000 rtn + +hci_init_clksel_xtal: +4ccc 70804204 jam clksel_xtal ,core_clksel +4ccd 20600000 rtn + +hci_init_uart_default_config: +4cce 20404cd2 call hci_init_uart_default_config_tx +4ccf 20404cd6 call hci_init_uart_default_config_rx +4cd0 20404cda call hci_init_uart_default_config_rts +4cd1 20204cde branch hci_init_uart_default_config_cts + +hci_init_uart_default_config_tx: +4cd2 6fe0c7a4 fetch 1 ,mem_hci_uart_tx_gpio +4cd3 247a0000 nrtn blank +4cd4 7047a40d jam hci_uart_tx_gpio_num ,mem_hci_uart_tx_gpio +4cd5 20600000 rtn + +hci_init_uart_default_config_rx: +4cd6 6fe0c7a5 fetch 1 ,mem_hci_uart_rx_gpio +4cd7 247a0000 nrtn blank +4cd8 7047a50e jam hci_uart_rx_gpio_num ,mem_hci_uart_rx_gpio +4cd9 20600000 rtn + +hci_init_uart_default_config_rts: +4cda 6fe0c7a6 fetch 1 ,mem_hci_uart_rts_gpio +4cdb 247a0000 nrtn blank +4cdc 7047a609 jam hci_uart_rts_gpio_num ,mem_hci_uart_rts_gpio +4cdd 20600000 rtn + +hci_init_uart_default_config_cts: +4cde 6fe0c7a7 fetch 1 ,mem_hci_uart_cts_gpio +4cdf 247a0000 nrtn blank +4ce0 7047a70a jam hci_uart_cts_gpio_num ,mem_hci_uart_cts_gpio +4ce1 20600000 rtn + +hci_init_uart_config: +4ce2 58001800 setarg mem_h5rx_buf +4ce3 67e1095c store 2 ,mem_pdatatemp +4ce4 58001bff setarg mem_h5rx_buf_end +4ce5 e7e10005 istore 2 ,contw +4ce6 58001c00 setarg mem_h5tx_buf +4ce7 e7e10005 istore 2 ,contw +4ce8 58001fff setarg mem_h5tx_buf_end +4ce9 e7e10005 istore 2 ,contw +4cea 6fe4095c fetch 8 ,mem_pdatatemp +4ceb 20405eb0 call uarta_init_dma_mem +4cec 6fe08a2c fetch 1 ,mem_tmp_buffer + efuse_offset_hci_boot_clksel +4ced 2feffe07 isolate1 7 ,pdata +4cee 2040ded7 call uart_clock_select_main_freq_crystal ,true +4cef 2440dedb ncall uart_clock_select_main_freq_dpll ,true +4cf0 d841c200 arg 115200 ,temp +4cf1 20405ec8 call uarta_calc_baud_rate_config +4cf2 6fe0c7a4 fetch 1 ,mem_hci_uart_tx_gpio +4cf3 d8400008 arg gpcfg_uart_txd ,temp +4cf4 20406093 call gpio_config_function_int +4cf5 6fe0c7a5 fetch 1 ,mem_hci_uart_rx_gpio +4cf6 d8400049 arg gpcfg_uart_rxd | gpcfg_pullup ,temp +4cf7 20406093 call gpio_config_function_int +4cf8 6fe0c7a6 fetch 1 ,mem_hci_uart_rts_gpio +4cf9 d840000a arg gpcfg_uart_rts ,temp +4cfa 20406093 call gpio_config_function_int +4cfb 6fe0c7a7 fetch 1 ,mem_hci_uart_cts_gpio +4cfc d840000b arg gpcfg_uart_cts ,temp +4cfd 20406093 call gpio_config_function_int +4cfe d8400081 arg fun_uart_control_enable | fun_uart_control_setting_rate_baud ,temp +4cff 60588060 storet 1 ,core_uart_ctrl +4d00 20207e02 branch clean_mem + +hci_init_pwm_default_config: +4d01 6fe0c7a8 fetch 1 ,mem_hci_pwm_12mhz_gpio +4d02 247a0000 nrtn blank +4d03 7047a80c jam hci_pmw_12mhz_gpio_num ,mem_hci_pwm_12mhz_gpio +4d04 20600000 rtn + +hci_init_pwm: +4d05 6fe0c7a8 fetch 1 ,mem_hci_pwm_12mhz_gpio +4d06 d8400010 arg gpcfg_pwm_out0 ,temp +4d07 20406093 call gpio_config_function_int +4d08 da200040 arg 0x40 ,rega +4d09 204061d1 call pwm_init +4d0a da200000 arg 0 ,rega +4d0b da400000 arg 0 ,regb +4d0c 58000000 setarg 0 +4d0d 2040620a call pwm_duty_cycle_set +4d0e d8e00000 arg 0 ,queue +4d0f 2020621d branch pwm_set_select + +hci_process_check_uart_rx: +4d10 6ff10112 fetch 2 ,core_uart_rxitems +4d11 1fe0a3fc add pdata ,-4 ,rega +4d12 24610000 nrtn positive +4d13 20405ef7 call uarta_prepare_rx +4d14 efe08003 ifetch 1 ,contru +4d15 c000cd18 beq hci_h4_type_cmd ,hci_parse_packet_cmd +4d16 20407d12 call delay_10ms +4d17 20205f07 branch uarta_clear_current_rx + +hci_parse_packet_cmd: +4d18 efe10003 ifetch 2 ,contru +4d19 67e109fd store 2 ,mem_hci_opcode +4d1a d84003ff arg 0x3ff ,temp +4d1b 98410400 iand temp ,temp +4d1c 604909f6 storet 2 ,mem_hci_opcode_ocf +4d1d 1feb7e00 rshift2 pdata ,pdata +4d1e 1fecfe00 rshift8 pdata ,pdata +4d1f 67e089f8 store 1 ,mem_hci_opcode_ogf +4d20 efe08003 ifetch 1 ,contru +4d21 1fe0ffff pincrease -1 +4d22 9a267c00 isub rega ,null +4d23 20610000 rtn positive +4d24 20404d26 call hci_parse_complete_packet +4d25 20204d81 branch hci_drop_current_packet + +hci_parse_complete_packet: +4d26 6fe089f8 fetch 1 ,mem_hci_opcode_ogf +4d27 c01fcd29 beq hci_ogf_vendor_specific_debug ,hci_parse_packet_cmd_ogf_vendorspecific_debug +4d28 20204d6d branch hci_send_event_command_complete_error_command_nuknown + +hci_parse_packet_cmd_ogf_vendorspecific_debug: +4d29 44f3c01c bpatch patch1c_7 ,mem_patch1c +4d2a 6fe089f6 fetch 1 ,mem_hci_opcode_ocf +4d2b c0004d6c beq hci_vendor_cmd_reset ,hci_normal_reply +4d2c c000cd34 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +4d2d c0014d39 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +4d2e c001cd47 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +4d2f c0024d51 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +4d30 c002cd6c beq hci_vendor_cmd_echo ,hci_normal_reply +4d31 c0084d62 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +4d32 c00a4d68 beq hci_vendor_cmd_set_flow_control ,phci_grp_vendor_flow_control +4d33 20204d6c branch hci_normal_reply + +phci_grp_vendor_chipid: +4d34 7009ff00 jam command_succeeded ,mem_hci_command_complete_return_parameter +4d35 6ff10000 fetch 2 ,core_chipid +4d36 67e10a00 store 2 ,mem_hci_command_complete_return_parameter_chip_id +4d37 df200003 arg 3 ,loopcnt +4d38 20204d74 branch hci_send_event_command_complete + +phci_grp_vendor_baud: +4d39 efe10003 ifetch 2 ,contu +4d3a 67f10052 store 2 ,core_uart_baud +4d3b 20600000 rtn + +phci_grp_vendor_patch_common: +4d3c efe08003 ifetch 1 ,contu +4d3d 1fe20400 copy pdata ,temp +4d3e 67f08024 store 1 ,core_ucode_low +4d3f efe08003 ifetch 1 ,contu +4d40 98408400 iadd temp ,temp +4d41 79207e07 set1 7 ,pdata +4d42 67f08023 store 1 ,core_ucode_ctrl +4d43 efe08003 ifetch 1 ,contu +4d44 98408400 iadd temp ,temp +4d45 1fe27200 copy pdata ,loopcnt +4d46 20600000 rtn + +phci_grp_vendor_patch: +4d47 20404d3c call phci_grp_vendor_patch_common + +phci_grp_vendor_patch_loop: +4d48 efe08003 ifetch 1 ,contu +4d49 67f08025 store 1 ,core_ucode_data +4d4a 98408400 iadd temp ,temp +4d4b c2004d48 loop phci_grp_vendor_patch_loop + +phci_grp_vendor_patch_check_sum: +4d4c 184104ff and temp ,0xff ,temp +4d4d efe08003 ifetch 1 ,contu +4d4e 98467c00 isub temp ,null +4d4f 2422cd60 nbranch phci_grp_vendor_patch_bad ,zero +4d50 20204d6c branch hci_normal_reply + +phci_grp_vendor_done: +4d51 df200020 arg 0x20 ,loopcnt +4d52 d8a04000 arg mem_patch00 ,contw +4d53 d8400000 arg 0 ,temp + +phci_grp_vendor_done_loop: +4d54 efe08003 ifetch 1 ,contu +4d55 e7e08005 istore 1 ,contw +4d56 98408400 iadd temp ,temp +4d57 c2004d54 loop phci_grp_vendor_done_loop +4d58 184104ff and temp ,0xff ,temp +4d59 efe08003 ifetch 1 ,contu +4d5a 98467c00 isub temp ,null +4d5b 2422cd60 nbranch phci_grp_vendor_patch_bad ,zero +4d5c 70802300 jam 0 ,core_ucode_ctrl +4d5d 20404d6c call hci_normal_reply +4d5e 20407e07 call wait_uarttx +4d5f 20200801 branch soft_reset + +phci_grp_vendor_patch_bad: +4d60 70802300 jam 0 ,core_ucode_ctrl +4d61 20204d6d branch hci_send_event_command_complete_error_command_nuknown + +phci_grp_vendor_mem: +4d62 efe08003 ifetch 1 ,contu +4d63 1fe27200 copy pdata ,loopcnt +4d64 efe10003 ifetch 2 ,contu +4d65 1fe20a00 copy pdata ,contw +4d66 20405f4d call uart_copy_rx_bytes +4d67 20204d6c branch hci_normal_reply + +phci_grp_vendor_flow_control: +4d68 6ff08060 fetch 1 ,core_uart_ctrl +4d69 79207e04 set1 bit_uart_control_flow_control ,pdata +4d6a 67f08060 store 1 ,core_uart_ctrl +4d6b 20204d6c branch hci_normal_reply + +hci_normal_reply: +4d6c 20204d71 branch hci_send_event_command_complete_without_payload + +hci_send_event_command_complete_error_command_nuknown: +4d6d 7009ff01 jam command_unknown ,mem_hci_command_complete_return_parameter +4d6e 20204d72 branch hci_send_event_command_complete_without_payload + 1 + +hci_send_event_command_complete_error_command_disallowed: +4d6f 7009ff0c jam command_disallowed ,mem_hci_command_complete_return_parameter +4d70 20204d72 branch hci_send_event_command_complete_without_payload + 1 + +hci_send_event_command_complete_without_payload: +4d71 7009ff00 jam command_succeeded ,mem_hci_command_complete_return_parameter +4d72 df200001 arg 1 ,loopcnt +4d73 20204d74 branch hci_send_event_command_complete + +hci_send_event_command_complete: +4d74 7009fa0e jam hci_event_command_complete ,mem_hci_event_head_event_code +4d75 1f20fe03 add loopcnt ,3 ,pdata +4d76 67e089fb store 1 ,mem_hci_event_para_total_length +4d77 20404d7d call hci_prepare_send_event +4d78 6fe189fc fetch 3 ,mem_hci_command_complete_num_hci_command_packet +4d79 e7e18003 istore 3 ,contwu +4d7a d8c009ff arg mem_hci_command_complete_return_parameter ,contr +4d7b 20405f33 call uart_copy_tx_bytes +4d7c 20205f13 branch uarta_send_register_pop + +hci_prepare_send_event: +4d7d 20405f0f call uarta_prepare_tx_register_push +4d7e 6fe189f9 fetch 3 ,mem_hci_event_head_type +4d7f e7e18003 istore 3 ,contwu +4d80 20600000 rtn + +hci_drop_current_packet: +4d81 20405ef7 call uarta_prepare_rx +4d82 18608603 increase 3 ,contru +4d83 efe08003 ifetch 1 ,contru +4d84 98608600 iadd contru ,contru +4d85 20205f03 branch uarta_rxdone + +cmd_exit: +4d86 7041db00 jam 0 ,mem_hci_cmd +4d87 20600000 rtn + +cmd_check_plap: +4d88 6fe341dd fetch 6 ,mem_hci_plap +4d89 684b0041 fetcht 6 ,mem_plap +4d8a 98467c00 isub temp ,null +4d8b 20600000 rtn + +hid_rx_process: +4d8c 44f4401d bpatch patch1d_0 ,mem_patch1d +4d8d 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +4d8e 1fe20c00 copy pdata ,contr +4d8f efe08006 ifetch 1 ,contr +4d90 67e0c5f5 store 1 ,mem_l2cap_rcv_hidtype +4d91 1fe1040f and pdata ,0x0f ,temp +4d92 1ff1fe00 rshift4 pdata ,pdata +4d93 c004cdad beq hid_type_set_idle ,hid_rx_process_handshake +4d94 c003cdad beq hid_type_set_protocol ,hid_rx_process_handshake +4d95 c0054dbc beq hid_type_data ,hid_rx_process_data +4d96 c002cda5 beq hid_type_set_report ,hid_rx_process_set_report +4d97 c000cd99 beq hid_type_control ,hid_rx_process_hid_control +4d98 20600000 rtn + +hid_rx_process_hid_control: +4d99 18427e00 copy temp ,pdata +4d9a c002cd9d beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +4d9b c001cda4 beq hid_control_p_suspend ,hid_rx_process_suspend +4d9c 20600000 rtn + +hid_rx_process_virtual_cable_unplug: +4d9d 70095b27 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +4d9e 20407871 call ui_ipc_send_event +4d9f 6fe0c09a fetch 1 ,mem_device_option +4da0 c1840000 rtnne dvc_op_mouse +4da1 18427e00 copy temp ,pdata +4da2 c002c44c beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +4da3 20600000 rtn + +hid_rx_process_suspend: +4da4 20600000 rtn + +hid_rx_process_set_report: +4da5 20404dbc call hid_rx_process_data +4da6 da200001 arg 0x01 ,rega +4da7 20404dc0 call hid_malloc_tx_buff +4da8 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +4da9 e7e10005 istore 2 ,contw +4daa 58000000 setarg 0x00 +4dab e7e08005 istore 1 ,contw +4dac 20600000 rtn + +hid_rx_process_handshake: +4dad da200001 arg 1 ,rega +4dae 20404dc0 call hid_malloc_tx_buff +4daf 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +4db0 e7e10005 istore 2 ,contw +4db1 58000000 setarg 0 +4db2 e7e08005 istore 1 ,contw +4db3 70095001 jam 1 ,mem_ui_data_txbuff_length +4db4 6fe0c4e2 fetch 1 ,mem_hid_control_state +4db5 79207e06 set1 l2cap_channel_hid_handshake_done ,pdata +4db6 67e0c4e2 store 1 ,mem_hid_control_state +4db7 70095b12 jam bt_evt_hid_handshake ,mem_fifo_temp +4db8 20407871 call ui_ipc_send_event +4db9 6fe0c09a fetch 1 ,mem_device_option +4dba c1840000 rtnne dvc_op_mouse +4dbb 2020442c branch mouse_bt_hid_handshake_boot_check + +hid_rx_process_data: +4dbc efe08006 ifetch 1 ,contr +4dbd c000cdbf beq hid_report_id_kb ,hid_rx_process_data_hid_kb +4dbe 20600000 rtn + +hid_rx_process_data_hid_kb: +4dbf 20600000 rtn + +hid_malloc_tx_buff: +4dc0 2040529d call l2cap_malloc +4dc1 1a220400 copy rega ,temp +4dc2 60488950 storet 1 ,mem_ui_data_txbuff_length +4dc3 1fe20a00 copy pdata ,contw +4dc4 1a227e00 copy rega ,pdata +4dc5 e7e10005 istore 2 ,contw +4dc6 20600000 rtn + +l2cap_init: +4dc7 2035cdcc branch l2cap_init_wake ,wake + +l2cap_init_work: +4dc8 580045f6 setarg mem_l2cap_xmem_end +4dc9 d8a044d6 arg mem_l2cap_xmem_start ,contw +4dca 98a67200 isub contw ,loopcnt +4dcb 20407d26 call clear_mem + +l2cap_init_wake: +4dcc 44f4c01d bpatch patch1d_1 ,mem_patch1d +4dcd 58000424 setarg mem_sdp_mem_end +4dce d8a003e4 arg mem_sdp_mem_start ,contw +4dcf 98a67200 isub contw ,loopcnt +4dd0 20407d26 call clear_mem +4dd1 5800037a setarg mem_l2cap_mem_end +4dd2 d8a0030e arg mem_l2cap_mem_start ,contw +4dd3 98a67200 isub contw ,loopcnt +4dd4 20407d26 call clear_mem +4dd5 2020536b branch l2cap_lpm_load_txbuf + +process_rx_l2cap_pkt: +4dd6 44f5401d bpatch patch1d_2 ,mem_patch1d +4dd7 18c20400 copy contr ,temp +4dd8 18420c00 copy temp ,contr +4dd9 efe10006 ifetch 2 ,contr +4dda 67e10317 store 2 ,mem_l2cap_rx_pkt_length +4ddb efe10006 ifetch 2 ,contr +4ddc 67e10319 store 2 ,mem_l2cap_rx_cid +4ddd 18c27e00 deposit contr +4dde 67e10315 store 2 ,mem_l2cap_payload_ptr +4ddf 6fe0c78b fetch 1 ,memui_reconnect_mode +4de0 c0004de2 beq no_reconnection ,l2cap_rx_multiplexing +4de1 2020514d branch ml2cap_rx_multiplexing + +l2cap_rx_multiplexing: +4de2 6fe10317 fetch 2 ,mem_l2cap_rx_pkt_length +4de3 203a4e5a branch l2cap_rx_reset_state ,blank +4de4 44f5c01d bpatch patch1d_3 ,mem_patch1d +4de5 6fe08319 fetch 1 ,mem_l2cap_rx_cid +4de6 c000cdf8 beq l2cap_signal_channel ,l2cap_call_proc_signal + +l2cap_rx_multiplexing0: +4de7 c0284e3a beq l2cap_sdp_channel ,l2cap_call_proc_sdp +4de8 c028ce53 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +4de9 c0294e51 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +4dea c029ce51 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +4deb 20204e5a branch l2cap_rx_reset_state + +l2cap_check_map: +4dec 44f6401d bpatch patch1d_4 ,mem_patch1d +4ded 20405301 call l2cap_malloc_get_full_map +4dee 6fe0c4e6 fetch 1 ,mem_used_map +4def c0007e60 beq 0 ,set_pdata_0 +4df0 c000fe60 beq 1 ,set_pdata_0 +4df1 c0017e60 beq 2 ,set_pdata_0 +4df2 c001fe60 beq 3 ,set_pdata_0 +4df3 c040fe60 beq 0x81 ,set_pdata_0 +4df4 c0607e60 beq 0xc0 ,set_pdata_0 +4df5 c0407e60 beq 0x80 ,set_pdata_0 +4df6 c0207e60 beq 0x40 ,set_pdata_0 +4df7 20600000 rtn + +l2cap_call_proc_signal: +4df8 20404dec call l2cap_check_map +4df9 247a0000 nrtn blank + +l2cap_call_proc_signal0: +4dfa 2040530b call l2cap_malloc_signal_channel +4dfb 20404e5f call l2cap_process_signal_pkt +4dfc 68490320 fetcht 2 ,mem_l2cap_signal_tx_length +4dfd 203a4e59 branch l2cap_call_proc_no_reply ,blank +4dfe 20405314 call l2cap_get_signal_tx_buff +4dff 6fe10320 fetch 2 ,mem_l2cap_signal_tx_length +4e00 e7e10005 istore 2 ,contw +4e01 18007e01 force l2cap_signal_channel ,pdata +4e02 e7e10005 istore 2 ,contw +4e03 20204e5a branch l2cap_rx_reset_state + +l2cap_call_proc_sigal_pending: +4e04 6fe0c5f4 fetch 1 ,mem_l2cap_pending_item +4e05 207a0000 rtn blank +4e06 1fe22200 copy pdata ,rega +4e07 44f6c01d bpatch patch1d_5 ,mem_patch1d +4e08 6fe20386 fetch 4 ,mem_l2cap_sdpres_delay_time +4e09 d8400100 arg 0x100 ,temp +4e0a 98408400 iadd temp ,temp +4e0b 1c427e00 copy clkn_bt ,pdata +4e0c 98467c00 isub temp ,null +4e0d 24610000 nrtn positive +4e0e 7045f400 jam 0 ,mem_l2cap_pending_item +4e0f 1a227e00 copy rega ,pdata +4e10 c0284e12 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +4e11 2020137a branch assert + +l2cap_sdp_conn_succ: +4e12 d9000000 arg 0 ,debug +4e13 2040530b call l2cap_malloc_signal_channel +4e14 20404ed8 call restore_l2cap_req_param +4e15 20405316 call l2cap_get_signal_tx_payload +4e16 20407cee call save_cont_pointers +4e17 20404f0b call send_connection_sdp_res +4e18 20405314 call l2cap_get_signal_tx_buff +4e19 5800000c setarg 0x000c +4e1a e7e10005 istore 2 ,contw +4e1b 18007e01 force l2cap_signal_channel ,pdata +4e1c e7e10005 istore 2 ,contw +4e1d 20204e5a branch l2cap_rx_reset_state + +l2cap_reset_sdp_map: +4e1e 44f7401d bpatch patch1d_6 ,mem_patch1d +4e1f 6fe10326 fetch 2 ,mem_sdp_tx_pkt_length +4e20 1fe0fe04 increase 4 ,pdata +4e21 20407eb6 call rshift7 +4e22 1fe08401 add pdata ,1 ,temp +4e23 d8c044f0 arg mem_tx_fifo3 ,contr +4e24 efe18006 ifetch 3 ,contr +4e25 207a0000 rtn blank +4e26 67e1898e store 3 ,mem_tx_fifo_map_temp +4e27 6fe0898e fetch 1 ,mem_tx_fifo_map_temp +4e28 1fe22200 copy pdata ,rega +4e29 20404e2d call check_l2cap_map +4e2a 1a427e00 copy regb ,pdata +4e2b 67e0c4f0 store 1 ,mem_tx_fifo3 +4e2c 20600000 rtn + +check_l2cap_map: +4e2d d8e00000 arg 0 ,queue +4e2e da400000 arg 0 ,regb + +check_l2cap_map_loop: +4e2f 18e67c07 sub queue ,7 ,null +4e30 24610000 nrtn positive +4e31 aa2fffff qisolate1 rega +4e32 2020ce34 branch check_l2cap_map_used ,true +4e33 20204e38 branch check_l2cap_map_used2 + +check_l2cap_map_used: +4e34 18427e00 copy temp ,pdata +4e35 203a4e38 branch check_l2cap_map_used2 ,blank +4e36 f9202400 qset1 regb +4e37 184085ff increase -1 ,temp + +check_l2cap_map_used2: +4e38 18e08e01 increase 1 ,queue +4e39 20204e2f branch check_l2cap_map_loop + +l2cap_call_proc_sdp: +4e3a 204052f7 call l2cap_malloc_is_fifo_empty +4e3b 247a0000 nrtn blank +4e3c 20404dec call l2cap_check_map +4e3d 247a0000 nrtn blank +4e3e 20405318 call l2cap_malloc_sdp_channel +4e3f 20406df3 call enable_authrom +4e40 204066c7 call sdp_process +4e41 20406df7 call disable_authrom +4e42 20404e1e call l2cap_reset_sdp_map +4e43 20204e4a branch l2cap_call_proc_sdp_common + +ml2cap_call_proc_sdp: +4e44 204052f7 call l2cap_malloc_is_fifo_empty +4e45 247a0000 nrtn blank +4e46 20405318 call l2cap_malloc_sdp_channel +4e47 20406df3 call enable_authrom +4e48 204066c7 call sdp_process +4e49 20406df7 call disable_authrom + +l2cap_call_proc_sdp_common: +4e4a 20405321 call l2cap_get_sdp_tx_buff +4e4b 6fe10326 fetch 2 ,mem_sdp_tx_pkt_length +4e4c 203a4e59 branch l2cap_call_proc_no_reply ,blank +4e4d e7e10005 istore 2 ,contw +4e4e 6fe144d8 fetch 2 ,mem_sdp_remote_cid +4e4f e7e10005 istore 2 ,contw +4e50 20204e5a branch l2cap_rx_reset_state + +l2cap_call_proc_hid: +4e51 20404d8c call hid_rx_process +4e52 20204e5a branch l2cap_rx_reset_state + +l2cap_call_proc_rfcomm: +4e53 44f7c01d bpatch patch1d_7 ,mem_patch1d +4e54 70033500 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +4e55 20406341 call rfcomm_rx_process +4e56 6fe08335 fetch 1 ,mem_rfcomm_malloc_fail_flag +4e57 c1008000 rtneq rfcomm_malloc_fail +4e58 20204e5a branch l2cap_rx_reset_state + +l2cap_call_proc_no_reply: +4e59 204052e7 call l2cap_malloc_discard + +l2cap_rx_reset_state: +4e5a 58000000 setarg 0 +4e5b 67e10317 store 2 ,mem_l2cap_rx_pkt_length +4e5c 67e10319 store 2 ,mem_l2cap_rx_cid +4e5d 70031b01 jam l2cap_rx_done ,mem_l2cap_rx_done +4e5e 20600000 rtn + +l2cap_process_signal_pkt: +4e5f 44f8401e bpatch patch1e_0 ,mem_patch1e +4e60 20405316 call l2cap_get_signal_tx_payload +4e61 18002400 force 0 ,regb +4e62 6fe10317 fetch 2 ,mem_l2cap_rx_pkt_length +4e63 1fe22600 copy pdata ,regc +4e64 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +4e65 98000c00 iforce contr + +l2cap_process_signal_pkt_loop: +4e66 20404e6e call l2cap_process_one_signal +4e67 1a627e00 deposit regc +4e68 1a60a7fc increase -4 ,regc +4e69 1fe0fffc increase -4 ,pdata +4e6a 243a4e66 nbranch l2cap_process_signal_pkt_loop ,blank +4e6b 1a427e00 copy regb ,pdata +4e6c 67e10320 store 2 ,mem_l2cap_signal_tx_length +4e6d 20600000 rtn + +l2cap_process_one_signal: +4e6e 44f8c01e bpatch patch1e_1 ,mem_patch1e +4e6f efe08006 ifetch 1 ,contr +4e70 c000cea7 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +4e71 c0014eaf beq signal_connect_req ,l2cap_proc_signal_connect_req +4e72 c001cf33 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +4e73 c0024f63 beq signal_config_req ,l2cap_proc_signal_config_req +4e74 c002d000 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +4e75 c0035029 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +4e76 c003d079 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +4e77 c00450ae beq signal_echo_req ,l2cap_proc_signal_echo_req +4e78 c004d0be beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +4e79 c0054e7d beq signal_info_req ,l2cap_proc_signal_info_req +4e7a c005d0bf beq signal_info_rsp ,l2cap_proc_signal_info_rsp +4e7b 204050c0 call l2cap_reject_command + +l2cap_process_one_signal_rtn: +4e7c 20600000 rtn + +l2cap_proc_signal_info_req: +4e7d efe08006 ifetch 1 ,contr +4e7e 1fe20e00 copy pdata ,queue +4e7f efe10006 ifetch 2 ,contr +4e80 1fe22200 copy pdata ,rega +4e81 1a627e00 copy regc ,pdata +4e82 9a262600 isub rega ,regc +4e83 5800000b setarg signal_info_rsp +4e84 e7e08005 istore 1 ,contw +4e85 18e27e00 copy queue ,pdata +4e86 e7e08005 istore 1 ,contw +4e87 efe10006 ifetch 2 ,contr + +l2cap_proc_signal_info_req_reply: +4e88 c0014e8b beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +4e89 c001ce91 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +4e8a 20600000 rtn + +l2cap_proc_signal_info_req_ext: +4e8b 58020008 setarg 0x020008 +4e8c e7e30005 istore 6 ,contw +4e8d 58000280 setarg 0x0280 +4e8e e7e20005 istore 4 ,contw +4e8f 18007e0c force 12 ,pdata +4e90 20204e96 branch l2cap_proc_signal_info_req_common + +l2cap_proc_signal_info_req_fix: +4e91 5803000c setarg 0x3000c +4e92 e7e30005 istore 6 ,contw +4e93 58000006 setarg 0x0006 +4e94 e7e40005 istore 8 ,contw +4e95 18007e10 force 16 ,pdata + +l2cap_proc_signal_info_req_common: +4e96 9a40a400 iadd regb ,regb +4e97 20204e7c branch l2cap_process_one_signal_rtn + +ml2cap_proc_signal_info_req: +4e98 efe08006 ifetch 1 ,contr +4e99 1fe20e00 copy pdata ,queue +4e9a efe10006 ifetch 2 ,contr +4e9b 1fe22200 copy pdata ,rega +4e9c efe10006 ifetch 2 ,contr +4e9d 67e10964 store 2 ,mem_temp +4e9e 1a627e00 copy regc ,pdata +4e9f 9a262600 isub rega ,regc +4ea0 20405316 call l2cap_get_signal_tx_payload +4ea1 5800000b setarg signal_info_rsp +4ea2 e7e08005 istore 1 ,contw +4ea3 18e27e00 copy queue ,pdata +4ea4 e7e08005 istore 1 ,contw +4ea5 6fe10964 fetch 2 ,mem_temp +4ea6 20204e88 branch l2cap_proc_signal_info_req_reply + +l2cap_proc_signal_cmd_reject: +4ea7 efe08006 ifetch 1 ,contr +4ea8 1fe20e00 copy pdata ,queue +4ea9 efe10006 ifetch 2 ,contr +4eaa 1fe22200 copy pdata ,rega +4eab 98c08c00 iadd contr ,contr +4eac 1a627e00 copy regc ,pdata +4ead 9a262600 isub rega ,regc + +l2cap_proc_signal_cmd_reject_rtn: +4eae 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_req: +4eaf 20407cee call save_cont_pointers +4eb0 20407cf3 call load_cont_pointers +4eb1 d9000000 arg 0 ,debug +4eb2 efe08006 ifetch 1 ,contr +4eb3 1fe20e00 copy pdata ,queue +4eb4 efe10006 ifetch 2 ,contr +4eb5 1fe22200 copy pdata ,rega +4eb6 efe10006 ifetch 2 ,contr +4eb7 1fe20400 copy pdata ,temp +4eb8 efe10006 ifetch 2 ,contr +4eb9 1fe21600 copy pdata ,timeup +4eba 44f9401e bpatch patch1e_2 ,mem_patch1e +4ebb 18427e00 copy temp ,pdata +4ebc c000cec2 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +4ebd c001cee4 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +4ebe c008cef0 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +4ebf c009cefb beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +4ec0 204050c0 call l2cap_reject_command +4ec1 20204f32 branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_sdp: +4ec2 20407cee call save_cont_pointers +4ec3 d8400050 arg l2cap_sdp_channel ,temp +4ec4 6fe144d8 fetch 2 ,mem_sdp_remote_cid +4ec5 243a4f2c nbranch already_connected ,blank +4ec6 19627e00 copy timeup ,pdata +4ec7 67e144d8 store 2 ,mem_sdp_remote_cid +4ec8 1c427e00 copy clkn_bt ,pdata +4ec9 67e20386 store 4 ,mem_l2cap_sdpres_delay_time +4eca 20404ecc call store_l2cap_req_param +4ecb 20204f07 branch send_connection_pending + +store_l2cap_req_param: +4ecc 60490384 storet 2 ,mem_psm +4ecd 19627e00 deposit timeup +4ece 67e1037a store 2 ,mem_scid +4ecf 1a227e00 deposit rega +4ed0 67e1037c store 2 ,mem_cmd_length +4ed1 1a427e00 deposit regb +4ed2 67e1037e store 2 ,mem_tt2 +4ed3 1a627e00 deposit regc +4ed4 67e10380 store 2 ,mem_tt3 +4ed5 18e27e00 deposit queue +4ed6 67e10382 store 2 ,mem_id +4ed7 20600000 rtn + +restore_l2cap_req_param: +4ed8 68490384 fetcht 2 ,mem_psm +4ed9 6fe1037a fetch 2 ,mem_scid +4eda 1fe21600 copy pdata ,timeup +4edb 6fe1037c fetch 2 ,mem_cmd_length +4edc 1fe22200 copy pdata ,rega +4edd 6fe1037e fetch 2 ,mem_tt2 +4ede 1fe22400 copy pdata ,regb +4edf 6fe10380 fetch 2 ,mem_tt3 +4ee0 1fe22600 copy pdata ,regc +4ee1 6fe10382 fetch 2 ,mem_id +4ee2 1fe20e00 copy pdata ,queue +4ee3 20600000 rtn + +l2cap_proc_signal_connect_req_rfcomm: +4ee4 20407cee call save_cont_pointers +4ee5 58000051 setarg l2cap_rfcomm_channel +4ee6 d8400051 arg l2cap_rfcomm_channel ,temp +4ee7 6fe144da fetch 2 ,mem_rfcomm_remote_cid +4ee8 243a4f2c nbranch already_connected ,blank +4ee9 19627e00 copy timeup ,pdata +4eea 67e144da store 2 ,mem_rfcomm_remote_cid +4eeb 6fe0c4e1 fetch 1 ,mem_rfcomm_state +4eec 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4eed 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4eee 67e0c4e1 store 1 ,mem_rfcomm_state +4eef 20204f0f branch send_connection_res + +l2cap_proc_signal_connect_req_hid_ctrl: +4ef0 20407cee call save_cont_pointers +4ef1 d8400052 arg l2cap_hid_control_channel ,temp +4ef2 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +4ef3 243a4f2c nbranch already_connected ,blank +4ef4 19627e00 copy timeup ,pdata +4ef5 67e144dc store 2 ,mem_hid_ctrl_remote_cid +4ef6 6fe0c4e2 fetch 1 ,mem_hid_control_state +4ef7 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4ef8 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ef9 67e0c4e2 store 1 ,mem_hid_control_state +4efa 20204f0f branch send_connection_res + +l2cap_proc_signal_connect_req_hid_int: +4efb 20407cee call save_cont_pointers +4efc 1b427e00 deposit clke +4efd d8400053 arg l2cap_hid_interrupt_channel ,temp +4efe 6fe144de fetch 2 ,mem_hid_int_remote_cid +4eff 243a4f2c nbranch already_connected ,blank +4f00 19627e00 copy timeup ,pdata +4f01 67e144de store 2 ,mem_hid_int_remote_cid +4f02 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +4f03 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4f04 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f05 67e0c4e3 store 1 ,mem_hid_interrupt_state +4f06 20204f0f branch send_connection_res + +send_connection_pending: +4f07 58000001 setarg l2cap_connect_pending +4f08 67e1032e store 2 ,meml2cap_t1 +4f09 7045f450 jam l2cap_sdp_channel ,mem_l2cap_pending_item +4f0a 20204f11 branch send_connection_res0 + +send_connection_sdp_res: +4f0b 6fe0c4e0 fetch 1 ,mem_sdp_state +4f0c 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4f0d 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f0e 67e0c4e0 store 1 ,mem_sdp_state + +send_connection_res: +4f0f 58000000 setarg l2cap_connect_successful +4f10 67e1032e store 2 ,meml2cap_t1 + +send_connection_res0: +4f11 44f9c01e bpatch patch1e_3 ,mem_patch1e +4f12 20407cf3 call load_cont_pointers +4f13 58000003 setarg signal_connect_rsp +4f14 e7e08005 istore 1 ,contw +4f15 18e27e00 copy queue ,pdata +4f16 e7e08005 istore 1 ,contw +4f17 58000008 setarg 0x0008 +4f18 e7e10005 istore 2 ,contw +4f19 18427e00 copy temp ,pdata +4f1a e7e10005 istore 2 ,contw +4f1b 19627e00 copy timeup ,pdata +4f1c e7e10005 istore 2 ,contw +4f1d 6fe1032e fetch 2 ,meml2cap_t1 +4f1e c000cf27 beq l2cap_connect_pending ,connect_pending +4f1f 290c0000 isolate0 0 ,debug +4f20 2020cf22 branch connect_suc ,true +4f21 58000004 setarg l2cap_connect_refused_no_resources + +connect_suc: +4f22 e7e10005 istore 2 ,contw +4f23 18007e00 force 0x0000 ,pdata +4f24 e7e10005 istore 2 ,contw +4f25 5800000c setarg 12 +4f26 20204f2e branch connect_req_update_byte_counts + +connect_pending: +4f27 e7e10005 istore 2 ,contw +4f28 18007e02 force 0x0002 ,pdata +4f29 e7e10005 istore 2 ,contw +4f2a 5800000c setarg 12 +4f2b 20204f2e branch connect_req_update_byte_counts + +already_connected: +4f2c 79201000 set1 0 ,debug +4f2d 20204f0f branch send_connection_res + +connect_req_update_byte_counts: +4f2e 9a40a400 iadd regb ,regb +4f2f 1a627e00 copy regc ,pdata +4f30 9a262600 isub rega ,regc +4f31 20204f32 branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_rtn: +4f32 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp: +4f33 efe08006 ifetch 1 ,contr +4f34 1fe20e00 copy pdata ,queue +4f35 efe10006 ifetch 2 ,contr +4f36 1fe22200 copy pdata ,rega +4f37 1a627e00 copy regc ,pdata +4f38 9a262600 isub rega ,regc +4f39 efe10006 ifetch 2 ,contr +4f3a 1fe21600 copy pdata ,timeup +4f3b efe10006 ifetch 2 ,contr +4f3c 1fe20400 copy pdata ,temp +4f3d 44fa401e bpatch patch1e_4 ,mem_patch1e +4f3e 58000050 setarg l2cap_sdp_channel +4f3f 98467c00 isub temp ,null +4f40 2022cf4b branch l2cap_proc_signal_connect_rsp_sdp ,zero +4f41 58000051 setarg l2cap_rfcomm_channel +4f42 98467c00 isub temp ,null +4f43 2022cf51 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +4f44 58000052 setarg l2cap_hid_control_channel +4f45 98467c00 isub temp ,null +4f46 2022cf5d branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +4f47 58000053 setarg l2cap_hid_interrupt_channel +4f48 98467c00 isub temp ,null +4f49 2022cf57 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +4f4a 20600000 rtn + +l2cap_proc_signal_connect_rsp_sdp: +4f4b 19627e00 copy timeup ,pdata +4f4c 67e144d8 store 2 ,mem_sdp_remote_cid +4f4d 6fe0c4e0 fetch 1 ,mem_sdp_state +4f4e 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f4f 67e0c4e0 store 1 ,mem_sdp_state +4f50 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp_rfcomm: +4f51 19627e00 copy timeup ,pdata +4f52 67e144da store 2 ,mem_rfcomm_remote_cid +4f53 6fe0c4e1 fetch 1 ,mem_rfcomm_state +4f54 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f55 67e0c4e1 store 1 ,mem_rfcomm_state +4f56 20600000 rtn + +l2cap_proc_signal_connect_rsp_hid_int: +4f57 19627e00 copy timeup ,pdata +4f58 67e144dc store 2 ,mem_hid_ctrl_remote_cid +4f59 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +4f5a 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f5b 67e0c4e3 store 1 ,mem_hid_interrupt_state +4f5c 20600000 rtn + +l2cap_proc_signal_connect_rsp_hid_ctrl: +4f5d 19627e00 copy timeup ,pdata +4f5e 67e144de store 2 ,mem_hid_int_remote_cid +4f5f 6fe0c4e2 fetch 1 ,mem_hid_control_state +4f60 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f61 67e0c4e2 store 1 ,mem_hid_control_state +4f62 20600000 rtn + +l2cap_proc_signal_config_req: +4f63 efe08006 ifetch 1 ,contr +4f64 1fe20e00 copy pdata ,queue +4f65 efe10006 ifetch 2 ,contr +4f66 1fe22200 copy pdata ,rega +4f67 1a627e00 copy regc ,pdata +4f68 9a262600 isub rega ,regc +4f69 efe10006 ifetch 2 ,contr +4f6a 1fe20400 copy pdata ,temp +4f6b 18422200 copy temp ,rega +4f6c 44fac01e bpatch patch1e_5 ,mem_patch1e +4f6d 58000050 setarg l2cap_sdp_channel +4f6e 98467c00 isub temp ,null +4f6f 2022cf7a branch l2cap_proc_signal_config_req_sdp ,zero +4f70 58000051 setarg l2cap_rfcomm_channel +4f71 98467c00 isub temp ,null +4f72 2022cf98 branch l2cap_proc_signal_config_req_rfcomm ,zero +4f73 58000052 setarg l2cap_hid_control_channel +4f74 98467c00 isub temp ,null +4f75 2022cf84 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +4f76 58000053 setarg l2cap_hid_interrupt_channel +4f77 98467c00 isub temp ,null +4f78 2022cf8e branch l2cap_proc_signal_config_req_hid_int ,zero +4f79 202050c0 branch l2cap_reject_command + +l2cap_proc_signal_config_req_sdp: +4f7a 18a21600 copy contw ,timeup +4f7b 6fe0c4e0 fetch 1 ,mem_sdp_state +4f7c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f7d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f7e 67e0c4e0 store 1 ,mem_sdp_state +4f7f 19620a00 copy timeup ,contw +4f80 d9600050 arg l2cap_sdp_channel ,timeup +4f81 6fe144d8 fetch 2 ,mem_sdp_remote_cid +4f82 1fe20400 copy pdata ,temp +4f83 20204fa1 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_hid_ctrl: +4f84 18a21600 copy contw ,timeup +4f85 6fe0c4e2 fetch 1 ,mem_hid_control_state +4f86 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f87 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f88 67e0c4e2 store 1 ,mem_hid_control_state +4f89 19620a00 copy timeup ,contw +4f8a d9600052 arg l2cap_hid_control_channel ,timeup +4f8b 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +4f8c 1fe20400 copy pdata ,temp +4f8d 20204fa1 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_hid_int: +4f8e 18a21600 copy contw ,timeup +4f8f 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +4f90 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f91 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f92 67e0c4e3 store 1 ,mem_hid_interrupt_state +4f93 19620a00 copy timeup ,contw +4f94 d9600053 arg l2cap_hid_interrupt_channel ,timeup +4f95 6fe144de fetch 2 ,mem_hid_int_remote_cid +4f96 1fe20400 copy pdata ,temp +4f97 20204fa1 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_rfcomm: +4f98 18a21600 copy contw ,timeup +4f99 6fe0c4e1 fetch 1 ,mem_rfcomm_state +4f9a 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f9b 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f9c 67e0c4e1 store 1 ,mem_rfcomm_state +4f9d 19620a00 copy timeup ,contw +4f9e d9600051 arg l2cap_rfcomm_channel ,timeup +4f9f 6fe144da fetch 2 ,mem_rfcomm_remote_cid +4fa0 1fe20400 copy pdata ,temp + +l2cap_send_config_rsp: +4fa1 44fb401e bpatch patch1e_6 ,mem_patch1e +4fa2 58000005 setarg signal_config_rsp +4fa3 e7e08005 istore 1 ,contw +4fa4 18e27e00 copy queue ,pdata +4fa5 e7e08005 istore 1 ,contw +4fa6 58000006 setarg 0x0006 +4fa7 e7e10005 istore 2 ,contw +4fa8 18427e00 copy temp ,pdata +4fa9 e7e10005 istore 2 ,contw +4faa 18007e00 force 0x00 ,pdata +4fab e7e10005 istore 2 ,contw +4fac 18007e00 force l2cap_config_success ,pdata +4fad e7e10005 istore 2 ,contw +4fae 18007e0a force 10 ,pdata +4faf 9a40a400 iadd regb ,regb +4fb0 60490333 storet 2 ,mem_config_req_dest_cid +4fb1 18e27e00 copy queue ,pdata +4fb2 67e08332 store 1 ,mem_config_identifier +4fb3 18007e50 force l2cap_sdp_channel ,pdata +4fb4 a961fe00 icompare 0xff ,timeup +4fb5 2020cfb7 branch l2cap_send_config_rsp_is_sdp ,true +4fb6 1fe0fe01 increase 1 ,pdata + +l2cap_send_config_rsp_is_sdp: +4fb7 20600000 rtn + +l2cap_check_channel_state: +4fb8 78547c00 disable user +4fb9 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +4fba c4000000 rtnbit0 l2cap_channel_state_conn_req ,pdata +4fbb c4008000 rtnbit0 l2cap_channel_state_conn_res ,pdata +4fbc 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +4fbd 18c20a00 copy contr ,contw +4fbe 18a08bff increase -1 ,contw +4fbf e7e08005 istore 1 ,contw +4fc0 78347c00 enable user +4fc1 20600000 rtn + +l2cap_send_config_req: + +l2cap_send_config_req_sdp: +4fc2 6fe0c4e0 fetch 1 ,mem_sdp_state +4fc3 20404fb8 call l2cap_check_channel_state +4fc4 24344fc9 nbranch l2cap_send_config_req_rfcomm ,user +4fc5 70033150 jam l2cap_sdp_channel ,mem_send_config_req +4fc6 6fe144d8 fetch 2 ,mem_sdp_remote_cid +4fc7 67e10333 store 2 ,mem_config_req_dest_cid +4fc8 20204fdd branch l2cap_generate_config_req + +l2cap_send_config_req_rfcomm: +4fc9 6fe0c4e1 fetch 1 ,mem_rfcomm_state +4fca 20404fb8 call l2cap_check_channel_state +4fcb 24344fd0 nbranch l2cap_send_config_req_hid_ctrl ,user +4fcc 70033151 jam l2cap_rfcomm_channel ,mem_send_config_req +4fcd 6fe144da fetch 2 ,mem_rfcomm_remote_cid +4fce 67e10333 store 2 ,mem_config_req_dest_cid +4fcf 20204fdd branch l2cap_generate_config_req + +l2cap_send_config_req_hid_ctrl: +4fd0 6fe0c4e2 fetch 1 ,mem_hid_control_state +4fd1 20404fb8 call l2cap_check_channel_state +4fd2 24344fd7 nbranch l2cap_send_config_req_hid_int ,user +4fd3 70033152 jam l2cap_hid_control_channel ,mem_send_config_req +4fd4 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +4fd5 67e10333 store 2 ,mem_config_req_dest_cid +4fd6 20204fdd branch l2cap_generate_config_req + +l2cap_send_config_req_hid_int: +4fd7 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +4fd8 20404fb8 call l2cap_check_channel_state +4fd9 24740000 nrtn user +4fda 70033153 jam l2cap_hid_interrupt_channel ,mem_send_config_req +4fdb 6fe144de fetch 2 ,mem_hid_int_remote_cid +4fdc 67e10333 store 2 ,mem_config_req_dest_cid + +l2cap_generate_config_req: +4fdd 44fbc01e bpatch patch1e_7 ,mem_patch1e +4fde 20405297 call l2cap_get_req_id +4fdf 2040530b call l2cap_malloc_signal_channel +4fe0 18002400 force 0 ,regb +4fe1 20405316 call l2cap_get_signal_tx_payload +4fe2 18007e04 force signal_config_req ,pdata +4fe3 e7e08005 istore 1 ,contw +4fe4 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +4fe5 e7e08005 istore 1 ,contw +4fe6 58000008 setarg 0x0008 +4fe7 e7e10005 istore 2 ,contw +4fe8 6fe10333 fetch 2 ,mem_config_req_dest_cid +4fe9 e7e10005 istore 2 ,contw +4fea 58000000 setarg 0x0000 +4feb e7e10005 istore 2 ,contw +4fec 18007e01 force 1 ,pdata +4fed e7e08005 istore 1 ,contw +4fee 18007e02 force 2 ,pdata +4fef e7e08005 istore 1 ,contw +4ff0 6fe08331 fetch 1 ,mem_send_config_req +4ff1 c028cff5 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +4ff2 58000030 setarg l2cap_config_mtu_sdp +4ff3 e7e10005 istore 2 ,contw +4ff4 20204ff7 branch l2cap_generate_config_req_done + +l2cap_generate_config_req_rfcomm: +4ff5 580003e3 setarg l2cap_config_mtu_rfcomm +4ff6 e7e10005 istore 2 ,contw + +l2cap_generate_config_req_done: +4ff7 d840000c arg 0x0c ,temp +4ff8 60490320 storet 2 ,mem_l2cap_signal_tx_length +4ff9 20405314 call l2cap_get_signal_tx_buff +4ffa 6fe10320 fetch 2 ,mem_l2cap_signal_tx_length +4ffb e7e10005 istore 2 ,contw +4ffc 18007e01 force l2cap_signal_channel ,pdata +4ffd e7e10005 istore 2 ,contw +4ffe 70033100 jam 0 ,mem_send_config_req + +l2cap_proc_signal_config_req_rtn: +4fff 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp: +5000 18c08c01 increase 1 ,contr +5001 efe10006 ifetch 2 ,contr +5002 1fe22200 copy pdata ,rega +5003 1a627e00 copy regc ,pdata +5004 9a262600 isub rega ,regc +5005 efe10006 ifetch 2 ,contr +5006 1fe22200 copy pdata ,rega +5007 44fc401f bpatch patch1f_0 ,mem_patch1f +5008 58000050 setarg l2cap_sdp_channel +5009 9a267c00 isub rega ,null +500a 2022d018 branch l2cap_proc_signal_config_rsp_sdp ,zero +500b 58000051 setarg l2cap_rfcomm_channel +500c 9a267c00 isub rega ,null +500d 2022d01c branch l2cap_proc_signal_config_rsp_rfcomm ,zero +500e 58000052 setarg l2cap_hid_control_channel +500f 9a267c00 isub rega ,null +5010 2022d020 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +5011 58000053 setarg l2cap_hid_interrupt_channel +5012 9a267c00 isub rega ,null +5013 2022d024 branch l2cap_proc_signal_config_rsp_hid_int ,zero +5014 18c08c02 increase 2 ,contr +5015 efe10006 ifetch 2 ,contr +5016 98007c00 iforce null +5017 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_sdp: +5018 6fe0c4e0 fetch 1 ,mem_sdp_state +5019 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +501a 67e0c4e0 store 1 ,mem_sdp_state +501b 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_rfcomm: +501c 6fe0c4e1 fetch 1 ,mem_rfcomm_state +501d 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +501e 67e0c4e1 store 1 ,mem_rfcomm_state +501f 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_hid_ctrl: +5020 6fe0c4e2 fetch 1 ,mem_hid_control_state +5021 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +5022 67e0c4e2 store 1 ,mem_hid_control_state +5023 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_hid_int: +5024 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +5025 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +5026 67e0c4e3 store 1 ,mem_hid_interrupt_state +5027 70095b06 jam bt_evt_hid_connected ,mem_fifo_temp +5028 20207871 branch ui_ipc_send_event + +l2cap_proc_signal_disconnect_req: +5029 efe08006 ifetch 1 ,contr +502a 1fe20e00 copy pdata ,queue +502b efe10006 ifetch 2 ,contr +502c 1fe22200 copy pdata ,rega +502d 1a627e00 copy regc ,pdata +502e 9a262600 isub rega ,regc +502f efe10006 ifetch 2 ,contr +5030 1fe22200 copy pdata ,rega +5031 efe10006 ifetch 2 ,contr +5032 1fe21600 copy pdata ,timeup +5033 1a220400 copy rega ,temp +5034 20407cee call save_cont_pointers +5035 44fcc01f bpatch patch1f_1 ,mem_patch1f +5036 58000050 setarg l2cap_sdp_channel +5037 98467c00 isub temp ,null +5038 2022d050 branch l2cap_proc_signal_disconnect_req_sdp ,zero +5039 58000051 setarg l2cap_rfcomm_channel +503a 98467c00 isub temp ,null +503b 2022d060 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +503c 58000052 setarg l2cap_hid_control_channel +503d 98467c00 isub temp ,null +503e 2022d044 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +503f 58000053 setarg l2cap_hid_interrupt_channel +5040 98467c00 isub temp ,null +5041 2022d04a branch l2cap_proc_signal_disconnect_req_hid_int ,zero +5042 204050c0 call l2cap_reject_command +5043 20205075 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_hid_ctrl: +5044 19620400 copy timeup ,temp +5045 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +5046 98467c00 isub temp ,null +5047 2022d056 branch l2cap_disconnect_hid_control_now ,zero +5048 204050c0 call l2cap_reject_command +5049 20205075 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_hid_int: +504a 19620400 copy timeup ,temp +504b 6fe144de fetch 2 ,mem_hid_int_remote_cid +504c 98467c00 isub temp ,null +504d 2022d058 branch l2cap_disconnect_hid_interrupt_now ,zero +504e 204050c0 call l2cap_reject_command +504f 20205075 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_sdp: +5050 19620400 copy timeup ,temp +5051 6fe144d8 fetch 2 ,mem_sdp_remote_cid +5052 98467c00 isub temp ,null +5053 2022d05c branch l2cap_disconnect_sdp_now ,zero +5054 204050c0 call l2cap_reject_command +5055 20205075 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_disconnect_hid_control_now: +5056 204050d7 call l2cap_reset_hid_ctrl_state +5057 20205068 branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_hid_interrupt_now: +5058 204050dd call l2cap_reset_hid_int_state +5059 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +505a 203a5068 branch l2cap_send_disconnect_rsp_pkt ,blank +505b 20205068 branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_sdp_now: +505c 204050d2 call l2cap_reset_sdp_channel_state +505d 6fe08339 fetch 1 ,mem_upper_sm_ss +505e 243a5068 nbranch l2cap_send_disconnect_rsp_pkt ,blank +505f 20205068 branch l2cap_send_disconnect_rsp_pkt + +l2cap_proc_signal_disconnect_req_rfcomm: +5060 19620400 copy timeup ,temp +5061 6fe144da fetch 2 ,mem_rfcomm_remote_cid +5062 98467c00 isub temp ,null +5063 2022d066 branch l2cap_disconnect_rfcomm_now ,zero +5064 204050c0 call l2cap_reject_command +5065 20205075 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_disconnect_rfcomm_now: +5066 204050cd call l2cap_reset_rfcomm_channel_state +5067 20205068 branch l2cap_send_disconnect_rsp_pkt + +l2cap_send_disconnect_rsp_pkt: +5068 20407cf3 call load_cont_pointers +5069 58000007 setarg signal_disconnect_rsp +506a e7e08005 istore 1 ,contw +506b 18e27e00 copy queue ,pdata +506c e7e08005 istore 1 ,contw +506d 58000004 setarg 0x0004 +506e e7e10005 istore 2 ,contw +506f 1a227e00 copy rega ,pdata +5070 e7e10005 istore 2 ,contw +5071 19627e00 copy timeup ,pdata +5072 e7e10005 istore 2 ,contw +5073 18007e08 force 8 ,pdata +5074 20205077 branch l2cap_proc_signal_disconnect_req_rtn + +l2cap_proc_signal_disconnect_req_err_rtn: +5075 20407cf3 call load_cont_pointers +5076 20205077 branch l2cap_proc_signal_disconnect_req_rtn + +l2cap_proc_signal_disconnect_req_rtn: +5077 9a40a400 iadd regb ,regb +5078 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_disconnect_rsp: +5079 efe08006 ifetch 1 ,contr +507a 1fe20e00 copy pdata ,queue +507b efe10006 ifetch 2 ,contr +507c 1fe22200 copy pdata ,rega +507d 1a627e00 copy regc ,pdata +507e 9a262600 isub rega ,regc +507f efe10006 ifetch 2 ,contr +5080 1fe21600 copy pdata ,timeup +5081 efe10006 ifetch 2 ,contr +5082 1fe20400 copy pdata ,temp +5083 20407cee call save_cont_pointers +5084 44fd401f bpatch patch1f_2 ,mem_patch1f +5085 58000050 setarg l2cap_sdp_channel +5086 98467c00 isub temp ,null +5087 2022d093 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +5088 58000051 setarg l2cap_rfcomm_channel +5089 98467c00 isub temp ,null +508a 2022d099 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +508b 58000052 setarg l2cap_hid_control_channel +508c 98467c00 isub temp ,null +508d 2022d09f branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +508e 58000053 setarg l2cap_hid_interrupt_channel +508f 98467c00 isub temp ,null +5090 2022d0a5 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +5091 204050c0 call l2cap_reject_command +5092 202050ad branch l2cap_proc_signal_disconnect_rsp_err_rtn + +l2cap_proc_signal_disconnect_rsp_sdp: +5093 18422200 copy temp ,rega +5094 19620400 copy timeup ,temp +5095 6fe144d8 fetch 2 ,mem_sdp_remote_cid +5096 98467c00 isub temp ,null +5097 2042d0d2 call l2cap_reset_sdp_channel_state ,zero +5098 202050ab branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_rfcomm: +5099 18422200 copy temp ,rega +509a 19620400 copy timeup ,temp +509b 6fe144da fetch 2 ,mem_rfcomm_remote_cid +509c 98467c00 isub temp ,null +509d 2042d0cd call l2cap_reset_rfcomm_channel_state ,zero +509e 202050ab branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_hid_ctrl: +509f 18422200 copy temp ,rega +50a0 19620400 copy timeup ,temp +50a1 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +50a2 98467c00 isub temp ,null +50a3 2042d0d7 call l2cap_reset_hid_ctrl_state ,zero +50a4 202050ab branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_hid_int: +50a5 18422200 copy temp ,rega +50a6 19620400 copy timeup ,temp +50a7 6fe144de fetch 2 ,mem_hid_int_remote_cid +50a8 98467c00 isub temp ,null +50a9 2042d0dd call l2cap_reset_hid_int_state ,zero +50aa 202050ab branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_rtn: +50ab 20407cf3 call load_cont_pointers +50ac 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_disconnect_rsp_err_rtn: +50ad 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_echo_req: +50ae efe08006 ifetch 1 ,contr +50af 1fe20e00 copy pdata ,queue +50b0 efe10006 ifetch 2 ,contr +50b1 1fe22200 copy pdata ,rega +50b2 98c08c00 iadd contr ,contr +50b3 58000009 setarg 9 +50b4 e7e08005 istore 1 ,contw +50b5 18e27e00 copy queue ,pdata +50b6 e7e08005 istore 1 ,contw +50b7 18007e00 force 0x0000 ,pdata +50b8 e7e10005 istore 2 ,contw +50b9 18007e04 force 4 ,pdata +50ba 9a40a400 iadd regb ,regb +50bb 1a627e00 copy regc ,pdata +50bc 9a262600 isub rega ,regc +50bd 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_echo_rsp: +50be 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_info_rsp: +50bf 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_reject_command: +50c0 18002400 force 0 ,regb +50c1 20405316 call l2cap_get_signal_tx_payload +50c2 58000001 setarg signal_cmd_reject +50c3 e7e08005 istore 1 ,contw +50c4 18e27e00 copy queue ,pdata +50c5 e7e08005 istore 1 ,contw +50c6 58000002 setarg 2 +50c7 e7e10005 istore 2 ,contw +50c8 58000000 setarg cmd_not_understood +50c9 e7e10005 istore 2 ,contw +50ca 1a40a406 increase 6 ,regb +50cb da600004 arg 4 ,regc +50cc 20204e7c branch l2cap_process_one_signal_rtn + +l2cap_reset_rfcomm_channel_state: +50cd 58000000 setarg 0 +50ce 67e1032c store 2 ,mem_rfcomm_tx_pkt_length +50cf 67e144da store 2 ,mem_rfcomm_remote_cid +50d0 7044e100 jam 0 ,mem_rfcomm_state +50d1 20600000 rtn + +l2cap_reset_sdp_channel_state: +50d2 58000000 setarg 0 +50d3 67e10326 store 2 ,mem_sdp_tx_pkt_length +50d4 67e144d8 store 2 ,mem_sdp_remote_cid +50d5 7044e000 jam 0 ,mem_sdp_state +50d6 20600000 rtn + +l2cap_reset_hid_ctrl_state: +50d7 58000000 setarg 0 +50d8 67e144dc store 2 ,mem_hid_ctrl_remote_cid +50d9 7044e200 jam 0 ,mem_hid_control_state +50da 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +50db c00050e3 beq 0 ,l2cap_reset_hid_disconnected +50dc 20600000 rtn + +l2cap_reset_hid_int_state: +50dd 58000000 setarg 0 +50de 67e144de store 2 ,mem_hid_int_remote_cid +50df 7044e300 jam 0 ,mem_hid_interrupt_state +50e0 6fe0c4e2 fetch 1 ,mem_hid_control_state +50e1 c00050e3 beq 0 ,l2cap_reset_hid_disconnected +50e2 20600000 rtn + +l2cap_reset_hid_disconnected: +50e3 70095b07 jam bt_evt_hid_disconnected ,mem_fifo_temp +50e4 20207871 branch ui_ipc_send_event + +l2cap_disconnect_interrupt_req: +50e5 6fe08330 fetch 1 ,mem_control_tasks +50e6 793ffe00 set0 l2cap_disconnect_interrupt ,pdata +50e7 67e08330 store 1 ,mem_control_tasks +50e8 6fe144de fetch 2 ,mem_hid_int_remote_cid +50e9 207a0000 rtn blank +50ea 2040530b call l2cap_malloc_signal_channel +50eb 6fe144de fetch 2 ,mem_hid_int_remote_cid +50ec 1fe22200 copy pdata ,rega +50ed 18002453 force l2cap_hid_interrupt_channel ,regb +50ee 202050f8 branch l2cap_generate_disconnect_req + +l2cap_disconnect_control_req: +50ef 6fe08330 fetch 1 ,mem_control_tasks +50f0 793ffe07 set0 l2cap_disconnect_control ,pdata +50f1 67e08330 store 1 ,mem_control_tasks +50f2 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +50f3 207a0000 rtn blank +50f4 2040530b call l2cap_malloc_signal_channel +50f5 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +50f6 1fe22200 copy pdata ,rega +50f7 18002452 force l2cap_hid_control_channel ,regb + +l2cap_generate_disconnect_req: +50f8 20405297 call l2cap_get_req_id +50f9 20405316 call l2cap_get_signal_tx_payload +50fa 18007e06 force signal_disconnect_req ,pdata +50fb e7e08005 istore 1 ,contw +50fc 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +50fd e7e08005 istore 1 ,contw +50fe 58000004 setarg 0x0004 +50ff e7e10005 istore 2 ,contw +5100 1a227e00 copy rega ,pdata +5101 e7e10005 istore 2 ,contw +5102 1a427e00 copy regb ,pdata +5103 e7e10005 istore 2 ,contw +5104 18000408 force 0x08 ,temp +5105 2020513c branch ml2cap_send_signal + +ml2cap_send_signal_connect_req: +5106 44fdc01f bpatch patch1f_3 ,mem_patch1f +5107 20405297 call l2cap_get_req_id +5108 20405316 call l2cap_get_signal_tx_payload +5109 58000002 setarg signal_connect_req +510a e7e08005 istore 1 ,contw +510b 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +510c e7e08005 istore 1 ,contw +510d 58000004 setarg 0x0004 +510e e7e10005 istore 2 ,contw +510f 18427e00 copy temp ,pdata +5110 e7e10005 istore 2 ,contw +5111 19627e00 copy timeup ,pdata +5112 e7e10005 istore 2 ,contw +5113 d8400008 arg 8 ,temp +5114 2020513c branch ml2cap_send_signal + +ml2cap_send_signal_config_req: +5115 44fe401f bpatch patch1f_4 ,mem_patch1f +5116 20405297 call l2cap_get_req_id +5117 20405316 call l2cap_get_signal_tx_payload +5118 58000004 setarg signal_config_req +5119 e7e08005 istore 1 ,contw +511a 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +511b e7e08005 istore 1 ,contw +511c 58000008 setarg 0x0008 +511d e7e10005 istore 2 ,contw +511e 18427e00 copy temp ,pdata +511f e7e10005 istore 2 ,contw +5120 58000000 setarg 0x0000 +5121 e7e10005 istore 2 ,contw +5122 58000001 setarg 0x01 +5123 e7e08005 istore 1 ,contw +5124 58000002 setarg 0x02 +5125 e7e08005 istore 1 ,contw +5126 580003e3 setarg l2cap_config_mtu_rfcomm +5127 e7e10005 istore 2 ,contw +5128 d840000c arg 0xc ,temp +5129 2020513c branch ml2cap_send_signal + +ml2cap_send_signal_disconn_req: +512a 44fec01f bpatch patch1f_5 ,mem_patch1f +512b 20405297 call l2cap_get_req_id +512c 20405316 call l2cap_get_signal_tx_payload +512d 58000006 setarg signal_disconnect_req +512e e7e08005 istore 1 ,contw +512f 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +5130 1fe0fe01 increase 1 ,pdata +5131 18a22200 copy contw ,rega +5132 67e0c4e5 store 1 ,mem_ml2cap_comm_id +5133 1a220a00 copy rega ,contw +5134 e7e08005 istore 1 ,contw +5135 58000004 setarg 0x0004 +5136 e7e10005 istore 2 ,contw +5137 18427e00 copy temp ,pdata +5138 e7e10005 istore 2 ,contw +5139 19627e00 copy timeup ,pdata +513a e7e10005 istore 2 ,contw +513b d8400008 arg 0x8 ,temp + +ml2cap_send_signal: +513c 60490320 storet 2 ,mem_l2cap_signal_tx_length +513d 18427e00 copy temp ,pdata +513e 203a52e7 branch l2cap_malloc_discard ,blank +513f 20405314 call l2cap_get_signal_tx_buff +5140 6fe10320 fetch 2 ,mem_l2cap_signal_tx_length +5141 e7e10005 istore 2 ,contw +5142 18007e01 force l2cap_signal_channel ,pdata +5143 e7e10005 istore 2 ,contw +5144 20600000 rtn + +msdp_send_req_done: +5145 6fe10326 fetch 2 ,mem_sdp_tx_pkt_length +5146 203a137a branch assert ,blank +5147 20405321 call l2cap_get_sdp_tx_buff +5148 6fe10326 fetch 2 ,mem_sdp_tx_pkt_length +5149 e7e10005 istore 2 ,contw +514a 6fe144d8 fetch 2 ,mem_sdp_remote_cid +514b e7e10005 istore 2 ,contw +514c 20600000 rtn + +ml2cap_rx_multiplexing: +514d 6fe10317 fetch 2 ,mem_l2cap_rx_pkt_length +514e 203a4e5a branch l2cap_rx_reset_state ,blank +514f 44ff401f bpatch patch1f_6 ,mem_patch1f +5150 6fe08319 fetch 1 ,mem_l2cap_rx_cid +5151 c000d157 beq l2cap_signal_channel ,ml2cap_call_proc_signal +5152 c0284e44 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +5153 c028ce53 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +5154 c0294e51 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +5155 c029ce51 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +5156 20204e5a branch l2cap_rx_reset_state + +ml2cap_call_proc_signal: +5157 2040530b call l2cap_malloc_signal_channel +5158 18002400 force 0 ,regb +5159 20405316 call l2cap_get_signal_tx_payload +515a 1fe20a00 copy pdata ,contw +515b 6fe10317 fetch 2 ,mem_l2cap_rx_pkt_length +515c 1fe22600 copy pdata ,regc +515d 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +515e 98000c00 iforce contr + +ml2cap_proc_one_comm_loop: +515f 20405165 call ml2cap_proc_one_comm +5160 1a60a7fc increase -4 ,regc +5161 2422d15f nbranch ml2cap_proc_one_comm_loop ,zero +5162 1a420400 copy regb ,temp +5163 2040513c call ml2cap_send_signal +5164 20204e5a branch l2cap_rx_reset_state + +ml2cap_proc_one_comm: +5165 efe08006 ifetch 1 ,contr +5166 c0015170 beq signal_connect_req ,ml2cap_proc_signal_connect_req +5167 c000d173 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +5168 c001d17d beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +5169 c002d1b9 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +516a c00251eb beq signal_config_req ,ml2cap_proc_signal_config_req +516b c003d270 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +516c c003523e beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +516d c00450ae beq signal_echo_req ,l2cap_proc_signal_echo_req +516e c0054e98 beq signal_info_req ,ml2cap_proc_signal_info_req +516f 2020528b branch ml2cap_proc_send_reject + +ml2cap_proc_signal_connect_req: +5170 20407cee call save_cont_pointers +5171 20407cf3 call load_cont_pointers +5172 20204eaf branch l2cap_proc_signal_connect_req + +ml2cap_proc_signal_cmd_reject: +5173 efe08006 ifetch 1 ,contr +5174 1fe20e00 copy pdata ,queue +5175 efe10006 ifetch 2 ,contr +5176 1fe22200 copy pdata ,rega +5177 1a627e00 copy regc ,pdata +5178 9a262600 isub rega ,regc + +mvptr: +5179 efe08006 ifetch 1 ,contr +517a 1a20a3ff increase -1 ,rega +517b 2422d179 nbranch mvptr ,zero +517c 20600000 rtn + +ml2cap_proc_signal_connect_rsp: +517d efe08006 ifetch 1 ,contr +517e 1fe20e00 copy pdata ,queue +517f efe10006 ifetch 2 ,contr +5180 1fe22200 copy pdata ,rega +5181 efe10006 ifetch 2 ,contr +5182 1fe21600 copy pdata ,timeup +5183 efe10006 ifetch 2 ,contr +5184 1fe20400 copy pdata ,temp +5185 efe10006 ifetch 2 ,contr +5186 1fe67c00 sub pdata ,0 ,null +5187 2022d18f branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +5188 c001518b beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +5189 c002518b beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +518a 2020518d branch ml2cap_proc_signal_connect_rsp_mnosucc + +ml2cap_proc_signal_connect_refused_result: +518b 70095b16 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +518c 20407871 call ui_ipc_send_event + +ml2cap_proc_signal_connect_rsp_mnosucc: +518d efe10006 ifetch 2 ,contr +518e 202051b6 branch mnosucc + +ml2cap_proc_signal_connect_rsp_sucessful: +518f 20407cee call save_cont_pointers +5190 44ffc01f bpatch patch1f_7 ,mem_patch1f +5191 58000050 setarg l2cap_sdp_channel +5192 98467c00 isub temp ,null +5193 2022d19e branch ml2cap_proc_signal_connect_rsp_sdp ,zero +5194 58000051 setarg l2cap_rfcomm_channel +5195 98467c00 isub temp ,null +5196 2022d1a4 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +5197 58000053 setarg l2cap_hid_interrupt_channel +5198 98467c00 isub temp ,null +5199 2022d1b0 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +519a 58000052 setarg l2cap_hid_control_channel +519b 98467c00 isub temp ,null +519c 2022d1aa branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +519d 202051b6 branch mnosucc + +ml2cap_proc_signal_connect_rsp_sdp: +519e 19627e00 copy timeup ,pdata +519f 67e144d8 store 2 ,mem_sdp_remote_cid +51a0 6fe0c4e0 fetch 1 ,mem_sdp_state +51a1 79207e01 set1 l2cap_channel_state_conn_res ,pdata +51a2 67e0c4e0 store 1 ,mem_sdp_state +51a3 202051b5 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_rfcomm: +51a4 19627e00 copy timeup ,pdata +51a5 67e144da store 2 ,mem_rfcomm_remote_cid +51a6 6fe0c4e1 fetch 1 ,mem_rfcomm_state +51a7 79207e01 set1 l2cap_channel_state_conn_res ,pdata +51a8 67e0c4e1 store 1 ,mem_rfcomm_state +51a9 202051b5 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_hid_ctrl: +51aa 19627e00 copy timeup ,pdata +51ab 67e144dc store 2 ,mem_hid_ctrl_remote_cid +51ac 6fe0c4e2 fetch 1 ,mem_hid_control_state +51ad 79207e01 set1 l2cap_channel_state_conn_res ,pdata +51ae 67e0c4e2 store 1 ,mem_hid_control_state +51af 202051b5 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_hid_int: +51b0 19627e00 copy timeup ,pdata +51b1 67e144de store 2 ,mem_hid_int_remote_cid +51b2 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +51b3 79207e01 set1 l2cap_channel_state_conn_res ,pdata +51b4 67e0c4e3 store 1 ,mem_hid_interrupt_state + +mnosucc1: +51b5 20407cf3 call load_cont_pointers + +mnosucc: +51b6 1a627e00 copy regc ,pdata +51b7 9a262600 isub rega ,regc +51b8 20600000 rtn + +ml2cap_proc_signal_config_rsp: +51b9 efe08006 ifetch 1 ,contr +51ba 1fe20e00 copy pdata ,queue +51bb efe10006 ifetch 2 ,contr +51bc 1fe22200 copy pdata ,rega +51bd 1a627e00 copy regc ,pdata +51be 9a262600 isub rega ,regc +51bf efe10006 ifetch 2 ,contr +51c0 1fe21600 copy pdata ,timeup +51c1 efe10006 ifetch 2 ,contr +51c2 efe10006 ifetch 2 ,contr +51c3 243a51e5 nbranch mcrsdone1 ,blank +51c4 20407cee call save_cont_pointers +51c5 19620400 copy timeup ,temp +51c6 47004020 bpatchx patch20_0 ,mem_patch20 +51c7 58000050 setarg l2cap_sdp_channel +51c8 98467c00 isub temp ,null +51c9 2022d1d3 branch ml2cap_proc_signal_config_rsp_sdp ,zero +51ca 58000051 setarg l2cap_rfcomm_channel +51cb 98467c00 isub temp ,null +51cc 2022d1d7 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +51cd 58000052 setarg l2cap_hid_control_channel +51ce 98467c00 isub temp ,null +51cf 2022d1db branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +51d0 58000053 setarg l2cap_hid_interrupt_channel +51d1 98467c00 isub temp ,null +51d2 2022d1df branch ml2cap_proc_signal_config_rsp_hid_int ,zero + +ml2cap_proc_signal_config_rsp_sdp: +51d3 6fe0c4e0 fetch 1 ,mem_sdp_state +51d4 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +51d5 67e0c4e0 store 1 ,mem_sdp_state +51d6 20600000 rtn + +ml2cap_proc_signal_config_rsp_rfcomm: +51d7 6fe0c4e1 fetch 1 ,mem_rfcomm_state +51d8 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +51d9 67e0c4e1 store 1 ,mem_rfcomm_state +51da 20600000 rtn + +ml2cap_proc_signal_config_rsp_hid_ctrl: +51db 6fe0c4e2 fetch 1 ,mem_hid_control_state +51dc 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +51dd 67e0c4e2 store 1 ,mem_hid_control_state +51de 20600000 rtn + +ml2cap_proc_signal_config_rsp_hid_int: +51df 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +51e0 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +51e1 67e0c4e3 store 1 ,mem_hid_interrupt_state +51e2 70095b06 jam bt_evt_hid_connected ,mem_fifo_temp +51e3 20207871 branch ui_ipc_send_event + +mcfrsdone: +51e4 20407cf3 call load_cont_pointers + +mcrsdone1: +51e5 1a20a3fa increase -6 ,rega + +mloop2: +51e6 2022d1ea branch mcrsdone ,zero +51e7 18c08c01 increase 1 ,contr +51e8 1a20a3ff increase -1 ,rega +51e9 202051e6 branch mloop2 + +mcrsdone: +51ea 20600000 rtn + +ml2cap_proc_signal_config_req: +51eb efe08006 ifetch 1 ,contr +51ec 1fe20e00 copy pdata ,queue +51ed efe10006 ifetch 2 ,contr +51ee 1fe22200 copy pdata ,rega +51ef 1a627e00 copy regc ,pdata +51f0 9a262600 isub rega ,regc +51f1 efe10006 ifetch 2 ,contr +51f2 18c08c02 increase 2 ,contr +51f3 1fe20400 copy pdata ,temp +51f4 58000005 setarg signal_config_rsp +51f5 e7e08005 istore 1 ,contw +51f6 18e27e00 copy queue ,pdata +51f7 e7e08005 istore 1 ,contw +51f8 1a20a202 increase 2 ,rega +51f9 1a227e00 copy rega ,pdata +51fa e7e10005 istore 2 ,contw +51fb 20407cee call save_cont_pointers +51fc 4700c020 bpatchx patch20_1 ,mem_patch20 +51fd 58000050 setarg l2cap_sdp_channel +51fe 98467c00 isub temp ,null +51ff 2022d20a branch ml2cap_proc_signal_config_req_sdp ,zero +5200 58000051 setarg l2cap_rfcomm_channel +5201 98467c00 isub temp ,null +5202 2022d21b branch ml2cap_proc_signal_config_req_rfcomm ,zero +5203 58000052 setarg l2cap_hid_control_channel +5204 98467c00 isub temp ,null +5205 2022d221 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +5206 58000053 setarg l2cap_hid_interrupt_channel +5207 98467c00 isub temp ,null +5208 2022d227 branch ml2cap_proc_signal_config_req_hid_int ,zero +5209 2020522c branch mcfgrq_done + +ml2cap_proc_signal_config_req_sdp: +520a 6fe0c4e0 fetch 1 ,mem_sdp_state +520b 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +520c 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +520d 67e0c4e0 store 1 ,mem_sdp_state +520e c2815218 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +520f 68488330 fetcht 1 ,mem_control_tasks +5210 79200406 set1 l2cap_init_config_req ,temp +5211 60488330 storet 1 ,mem_control_tasks +5212 18e27e00 copy queue ,pdata +5213 1fe0fe01 increase 1 ,pdata +5214 67e08332 store 1 ,mem_config_identifier +5215 6fe0c4e0 fetch 1 ,mem_sdp_state +5216 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +5217 67e0c4e0 store 1 ,mem_sdp_state + +ml2cap_proc_signal_config_req_sdp_nsndreq: +5218 6fe144d8 fetch 2 ,mem_sdp_remote_cid +5219 67e10333 store 2 ,mem_config_req_dest_cid +521a 2020522c branch mcfgrq_done + +ml2cap_proc_signal_config_req_rfcomm: +521b 6fe0c4e1 fetch 1 ,mem_rfcomm_state +521c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +521d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +521e 67e0c4e1 store 1 ,mem_rfcomm_state +521f 6fe144da fetch 2 ,mem_rfcomm_remote_cid +5220 2020522c branch mcfgrq_done + +ml2cap_proc_signal_config_req_hid_ctrl: +5221 6fe0c4e2 fetch 1 ,mem_hid_control_state +5222 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +5223 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +5224 67e0c4e2 store 1 ,mem_hid_control_state +5225 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +5226 2020522c branch mcfgrq_done + +ml2cap_proc_signal_config_req_hid_int: +5227 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +5228 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +5229 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +522a 67e0c4e3 store 1 ,mem_hid_interrupt_state +522b 6fe144de fetch 2 ,mem_hid_int_remote_cid + +mcfgrq_done: +522c 1fe21600 copy pdata ,timeup +522d 20407cf3 call load_cont_pointers +522e 19627e00 copy timeup ,pdata +522f e7e10005 istore 2 ,contw +5230 18007e00 force 0x0000 ,pdata +5231 e7e10005 istore 2 ,contw +5232 18007e00 force 0x0000 ,pdata +5233 e7e10005 istore 2 ,contw +5234 18007e0a force 10 ,pdata +5235 9a40a400 iadd regb ,regb +5236 1a20a3fa increase -6 ,rega + +mloop1: +5237 2022d23d branch mcrqdone ,zero +5238 efe08006 ifetch 1 ,contr +5239 e7e08005 istore 1 ,contw +523a 1a40a401 increase 1 ,regb +523b 1a20a3ff increase -1 ,rega +523c 20205237 branch mloop1 + +mcrqdone: +523d 20600000 rtn + +ml2cap_proc_signal_disconn_req: +523e efe08006 ifetch 1 ,contr +523f 1fe20e00 copy pdata ,queue +5240 efe10006 ifetch 2 ,contr +5241 1fe22200 copy pdata ,rega +5242 1a627e00 copy regc ,pdata +5243 9a262600 isub rega ,regc +5244 efe10006 ifetch 2 ,contr +5245 1fe22200 copy pdata ,rega +5246 efe10006 ifetch 2 ,contr +5247 1fe21600 copy pdata ,timeup +5248 20407cee call save_cont_pointers +5249 47014020 bpatchx patch20_2 ,mem_patch20 +524a 58000050 setarg l2cap_sdp_channel +524b 1a220400 copy rega ,temp +524c 98467c00 isub temp ,null +524d 2022d257 branch ml2cap_proc_signal_disconn_sdp ,zero +524e 58000052 setarg l2cap_hid_control_channel +524f 1a220400 copy rega ,temp +5250 98467c00 isub temp ,null +5251 2022d25c branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +5252 58000053 setarg l2cap_hid_interrupt_channel +5253 1a220400 copy rega ,temp +5254 98467c00 isub temp ,null +5255 2022d25e branch ml2cap_proc_signal_disconn_hid_int ,zero +5256 20205260 branch mclsrfc + +ml2cap_proc_signal_disconn_sdp: +5257 58000000 setarg 0x0000 +5258 67e10326 store 2 ,mem_sdp_tx_pkt_length +5259 67e144d8 store 2 ,mem_sdp_remote_cid +525a 67e0c4e0 store 1 ,mem_sdp_state +525b 20205262 branch mclssdp + +ml2cap_proc_signal_disconn_hid_ctrl: +525c 204050d7 call l2cap_reset_hid_ctrl_state +525d 20205262 branch mclssdp + +ml2cap_proc_signal_disconn_hid_int: +525e 204050dd call l2cap_reset_hid_int_state +525f 20205262 branch mclssdp + +mclsrfc: +5260 58000000 setarg 0x0000 +5261 67e1032c store 2 ,mem_rfcomm_tx_pkt_length + +mclssdp: +5262 20407cf3 call load_cont_pointers +5263 58000007 setarg signal_disconnect_rsp +5264 e7e08005 istore 1 ,contw +5265 18e27e00 copy queue ,pdata +5266 e7e08005 istore 1 ,contw +5267 58000004 setarg 0x0004 +5268 e7e10005 istore 2 ,contw +5269 1a227e00 copy rega ,pdata +526a e7e10005 istore 2 ,contw +526b 19627e00 copy timeup ,pdata +526c e7e10005 istore 2 ,contw +526d 18007e08 force 8 ,pdata +526e 9a40a400 iadd regb ,regb +526f 20600000 rtn + +ml2cap_proc_signal_disconn_rsp: +5270 efe08006 ifetch 1 ,contr +5271 1fe20e00 copy pdata ,queue +5272 efe10006 ifetch 2 ,contr +5273 1fe22200 copy pdata ,rega +5274 efe10006 ifetch 2 ,contr +5275 1fe21600 copy pdata ,timeup +5276 efe10006 ifetch 2 ,contr +5277 1fe20400 copy pdata ,temp +5278 20407cee call save_cont_pointers +5279 4701c020 bpatchx patch20_3 ,mem_patch20 +527a 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +527b a8e1fe00 icompare 0xff ,queue +527c 2420d287 nbranch mdisdone ,true +527d 58000050 setarg l2cap_sdp_channel +527e 98467c00 isub temp ,null +527f 2022d284 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +5280 58000051 setarg l2cap_rfcomm_channel +5281 98467c00 isub temp ,null +5282 2022d287 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +5283 20205287 branch mdisdone + +ml2cap_proc_signal_disconn_rsp_sdp: +5284 7044d800 jam 0 ,mem_sdp_remote_cid +5285 7044e000 jam 0 ,mem_sdp_state +5286 20205287 branch mdisdone + +ml2cap_proc_signal_disconn_rsp_rfcomm: + +mdisdone: +5287 20407cf3 call load_cont_pointers +5288 1a627e00 copy regc ,pdata +5289 9a262600 isub rega ,regc +528a 20600000 rtn + +ml2cap_proc_send_reject: +528b 58000001 setarg signal_cmd_reject +528c e7e08005 istore 1 ,contw +528d efe08006 ifetch 1 ,contr +528e e7e08005 istore 1 ,contw +528f 58000002 setarg 0x0002 +5290 e7e10005 istore 2 ,contw +5291 58000000 setarg 0x0000 +5292 e7e10005 istore 2 ,contw +5293 58000006 setarg 0x0006 +5294 9a40a400 iadd regb ,regb +5295 18002604 force 4 ,regc +5296 20600000 rtn + +l2cap_get_req_id: +5297 6fe0c4e5 fetch 1 ,mem_ml2cap_comm_id +5298 1fe0fe01 increase 1 ,pdata +5299 c080529b bne 0 ,l2cap_get_req_id_ok +529a 1fe0fe01 increase 1 ,pdata + +l2cap_get_req_id_ok: +529b 67e0c4e5 store 1 ,mem_ml2cap_comm_id +529c 20600000 rtn + +l2cap_malloc: + +bt_l2cap_malloc: +529d db001800 arg mem_tx_buff0 ,regd +529e dd600080 arg mem_bt_l2cap_tx_buff_size ,rege +529f 20407e54 call enable_user +52a0 202052a5 branch host_l2cap_malloc + +ble_l2cap_malloc: +52a1 6b0143de fetchr regd ,2 ,mem_ble_l2cap_tx_buff0_ptr +52a2 6d6143e0 fetchr rege ,2 ,mem_ble_l2cap_tx_buff_size_ptr +52a3 20407e56 call disable_user +52a4 202052a5 branch host_l2cap_malloc + +host_l2cap_malloc: +52a5 47024020 bpatchx patch20_4 ,mem_patch20 +52a6 204052f1 call l2cap_malloc_is_fifo_full +52a7 243a137a nbranch assert ,blank +52a8 20405301 call l2cap_malloc_get_full_map +52a9 df200008 arg 8 ,loopcnt + +host_l2cap_malloc_loop: +52aa 6848c4e6 fetcht 1 ,mem_used_map +52ab 1f260e08 sub loopcnt ,8 ,queue +52ac a84fffff qisolate1 temp +52ad 2020d2b2 branch host_l2cap_malloc_next_buffer ,true +52ae 204052b9 call host_l2cap_malloc_check_buffer_enough +52af 242152b2 nbranch host_l2cap_malloc_next_buffer ,positive +52b0 204052cf call host_l2cap_malloc_into_fifo +52b1 202052b6 branch host_l2cap_malloc_succ + +host_l2cap_malloc_next_buffer: +52b2 1d627e00 copy rege ,pdata +52b3 9b00b000 iadd regd ,regd +52b4 c20052aa loop host_l2cap_malloc_loop +52b5 2020137a branch assert + +host_l2cap_malloc_succ: +52b6 1b027e00 copy regd ,pdata +52b7 1b020a00 copy regd ,contw +52b8 20600000 rtn + +host_l2cap_malloc_check_buffer_enough: +52b9 4702c020 bpatchx patch20_5 ,mem_patch20 +52ba 1f260e08 sub loopcnt ,8 ,queue +52bb d8400000 arg 0 ,temp +52bc d9600000 arg 0 ,timeup + +host_l2cap_malloc_check_buffer_enough_loop: +52bd 18e27e00 copy queue ,pdata +52be c00452ca beq 8 ,host_l2cap_malloc_check_buffer_enough_end +52bf 6fe0c4e6 fetch 1 ,mem_used_map +52c0 afefffff qisolate1 pdata +52c1 2020d2ca branch host_l2cap_malloc_check_buffer_enough_end ,true +52c2 f9201600 qset1 timeup +52c3 1d627e00 copy rege ,pdata +52c4 98408400 iadd temp ,temp +52c5 18e08e01 increase 1 ,queue +52c6 1a227e00 copy rega ,pdata +52c7 98467c00 isub temp ,null +52c8 2022d2ca branch host_l2cap_malloc_check_buffer_enough_end ,zero +52c9 202152bd branch host_l2cap_malloc_check_buffer_enough_loop ,positive + +host_l2cap_malloc_check_buffer_enough_end: +52ca 18427e00 copy temp ,pdata +52cb 9a267c00 isub rega ,null +52cc 24628000 nrtn zero +52cd f9201600 qset1 timeup +52ce 20600000 rtn + +host_l2cap_malloc_into_fifo: +52cf 47034020 bpatchx patch20_6 ,mem_patch20 +52d0 204052f1 call l2cap_malloc_is_fifo_full +52d1 243a137a nbranch assert ,blank +52d2 204052f7 call l2cap_malloc_is_fifo_empty +52d3 203a52d8 branch host_l2cap_malloc_into_fifo_no_push ,blank +52d4 6fe4c4ea fetch 9 ,mem_tx_fifo1 +52d5 67e4c4e7 store 9 ,mem_tx_fifo0 +52d6 58000000 setarg 0 +52d7 e7e18005 istore 3 ,contw + +host_l2cap_malloc_into_fifo_no_push: +52d8 6160c4f0 storer timeup ,1 ,mem_tx_fifo3_map +52d9 630144f1 storer regd ,2 ,mem_tx_fifo3_ptr +52da 20600000 rtn + +l2cap_malloc_fifo_out: +52db 4703c020 bpatchx patch20_7 ,mem_patch20 +52dc 204052fa call l2cap_malloc_fifo_get_first_ptr +52dd 18c08c01 increase 1 ,contr +52de efe10006 ifetch 2 ,contr +52df 20600000 rtn + +l2cap_malloc_free: +52e0 47044021 bpatchx patch21_0 ,mem_patch21 +52e1 204052fa call l2cap_malloc_fifo_get_first_ptr +52e2 18c20a00 copy contr ,contw +52e3 18c20400 copy contr ,temp +52e4 58000000 setarg 0 +52e5 e7e18005 istore 3 ,contw +52e6 20600000 rtn + +l2cap_malloc_discard: +52e7 4704c021 bpatchx patch21_1 ,mem_patch21 +52e8 204052f7 call l2cap_malloc_is_fifo_empty +52e9 203a137a branch assert ,blank +52ea 6fe1c4ed fetch 3 ,mem_tx_fifo2 +52eb 67e1c4f0 store 3 ,mem_tx_fifo3 +52ec 6fe1c4ea fetch 3 ,mem_tx_fifo1 +52ed 67e1c4ed store 3 ,mem_tx_fifo2 +52ee 6fe1c4e7 fetch 3 ,mem_tx_fifo0 +52ef 67e1c4ea store 3 ,mem_tx_fifo1 +52f0 20600000 rtn + +l2cap_malloc_is_fifo_full: +52f1 47054021 bpatchx patch21_2 ,mem_patch21 +52f2 6fe1c4e7 fetch 3 ,mem_tx_fifo0 +52f3 20600000 rtn + +l2cap_malloc_is_fifo_nearly_full: +52f4 4705c021 bpatchx patch21_3 ,mem_patch21 +52f5 6fe1c4ea fetch 3 ,mem_tx_fifo1 +52f6 20600000 rtn + +l2cap_malloc_is_fifo_empty: +52f7 47064021 bpatchx patch21_4 ,mem_patch21 +52f8 6fe1c4f0 fetch 3 ,mem_tx_fifo3 +52f9 20600000 rtn + +l2cap_malloc_fifo_get_first_ptr: +52fa 204052f7 call l2cap_malloc_is_fifo_empty +52fb 203a52ff branch l2cap_malloc_fifo_get_first_ptr_empty ,blank +52fc d8c044e7 arg mem_tx_fifo0 ,contr + +l2cap_malloc_free_loop: +52fd efe18006 ifetch 3 ,contr +52fe 203a52fd branch l2cap_malloc_free_loop ,blank + +l2cap_malloc_fifo_get_first_ptr_empty: +52ff 18c08dfd increase -3 ,contr +5300 20600000 rtn + +l2cap_malloc_get_full_map: +5301 4706c021 bpatchx patch21_5 ,mem_patch21 +5302 df200004 arg 4 ,loopcnt +5303 d8c044e7 arg mem_tx_fifo0_map ,contr +5304 d8400000 arg 0 ,temp + +l2cap_malloc_get_full_map_loop: +5305 efe18006 ifetch 3 ,contr +5306 1fe17eff and pdata ,0xff ,pdata +5307 98418400 ior temp ,temp +5308 c2005305 loop l2cap_malloc_get_full_map_loop +5309 6048c4e6 storet 1 ,mem_used_map +530a 20600000 rtn + +l2cap_malloc_signal_channel: +530b 47074021 bpatchx patch21_6 ,mem_patch21 +530c da20007f arg l2cap_signal_malloc_size ,rega +530d 2040529d call l2cap_malloc +530e 67e1031c store 2 ,mem_l2cap_signal_tx_buff_ptr +530f 1fe0fe04 increase 4 ,pdata +5310 67e1031e store 2 ,mem_l2cap_signal_tx_payload_ptr +5311 58000000 setarg 0 +5312 67e10320 store 2 ,mem_l2cap_signal_tx_length +5313 20600000 rtn + +l2cap_get_signal_tx_buff: +5314 6fe1031c fetch 2 ,mem_l2cap_signal_tx_buff_ptr +5315 20205335 branch l2cap_util_pdata_to_contw + +l2cap_get_signal_tx_payload: +5316 6fe1031e fetch 2 ,mem_l2cap_signal_tx_payload_ptr +5317 20205335 branch l2cap_util_pdata_to_contw + +l2cap_malloc_sdp_channel: +5318 4707c021 bpatchx patch21_7 ,mem_patch21 +5319 da2000fa arg sdp_malloc_size ,rega +531a 2040529d call l2cap_malloc +531b 67e10322 store 2 ,mem_sdp_tx_buff_ptr +531c 1fe0fe04 increase 4 ,pdata +531d 67e10324 store 2 ,mem_sdp_tx_payload_ptr +531e 58000000 setarg 0 +531f 67e10326 store 2 ,mem_sdp_tx_pkt_length +5320 20600000 rtn + +l2cap_get_sdp_tx_buff: +5321 6fe10322 fetch 2 ,mem_sdp_tx_buff_ptr +5322 20205335 branch l2cap_util_pdata_to_contw + +l2cap_get_sdp_tx_payload: +5323 6fe10324 fetch 2 ,mem_sdp_tx_payload_ptr +5324 20205335 branch l2cap_util_pdata_to_contw + +l2cap_malloc_rfcomm_channel: +5325 47084022 bpatchx patch22_0 ,mem_patch22 +5326 20407cc8 call push_stack +5327 70033501 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +5328 204052f1 call l2cap_malloc_is_fifo_full +5329 247a0000 nrtn blank +532a da20007f arg rfcomm_malloc_size ,rega +532b 2040529d call l2cap_malloc +532c 67e10328 store 2 ,mem_rfcomm_tx_buff_ptr +532d 1fe0fe04 increase 4 ,pdata +532e 67e1032a store 2 ,mem_rfcomm_tx_payload_ptr +532f 58000000 setarg 0 +5330 67e1032c store 2 ,mem_rfcomm_tx_pkt_length +5331 70033500 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +5332 20207cd4 branch pop_stack + +l2cap_get_rfcomm_tx_buff: +5333 6fe10328 fetch 2 ,mem_rfcomm_tx_buff_ptr +5334 20205335 branch l2cap_util_pdata_to_contw + +l2cap_util_pdata_to_contw: +5335 203a137a branch assert ,blank +5336 1fe20a00 copy pdata ,contw +5337 20600000 rtn + +l2cap_lpm_save_calc_len: +5338 4708c022 bpatchx patch22_1 ,mem_patch22 +5339 da400000 arg 0 ,regb +533a da2044e7 arg mem_tx_fifo0_map ,rega +533b 1a20a3fe increase -2 ,rega + +l2cap_lpm_save_calc_len_loop: +533c 1a20a202 increase 2 ,rega +533d 580044f3 setarg mem_tx_fifo_end +533e 9a267c00 isub rega ,null +533f 2022d348 branch l2cap_lpm_save_calc_len_end ,zero +5340 efe08011 ifetch 1 ,rega +5341 1a20a201 increase 1 ,rega +5342 203a533c branch l2cap_lpm_save_calc_len_loop ,blank +5343 e8410011 ifetcht 2 ,rega +5344 efe10002 ifetch 2 ,temp +5345 9a40a400 iadd regb ,regb +5346 1a40a404 increase 4 ,regb +5347 2020533c branch l2cap_lpm_save_calc_len_loop + +l2cap_lpm_save_calc_len_end: +5348 1a427e00 copy regb ,pdata +5349 20600000 rtn + +l2cap_lpm_get_wake_lock: +534a d8e0000c arg wake_lock_l2cap_tx ,queue +534b 202015ba branch lpm_get_wake_lock + +l2cap_lpm_put_wake_lock: +534c d8e0000c arg wake_lock_l2cap_tx ,queue +534d 202015be branch lpm_put_wake_lock + +l2cap_lpm_save_txbuf: +534e 47094022 bpatchx patch22_2 ,mem_patch22 +534f 20405301 call l2cap_malloc_get_full_map +5350 6fe0c4e6 fetch 1 ,mem_used_map +5351 207a0000 rtn blank +5352 20405338 call l2cap_lpm_save_calc_len +5353 d8400100 arg l2cap_lpm_txbuf_len ,temp +5354 98467c00 isub temp ,null +5355 2021534a branch l2cap_lpm_get_wake_lock ,positive +5356 2040534c call l2cap_lpm_put_wake_lock +5357 d8a044f3 arg mem_l2cap_lpm_txbuf ,contw +5358 da2044e7 arg mem_tx_fifo0 ,rega + +l2cap_lpm_save_txbuf_loop: +5359 580044f3 setarg mem_tx_fifo_end +535a 9a267c00 isub rega ,null +535b 20628000 rtn zero +535c efe08011 ifetch 1 ,rega +535d 1a20a201 increase 1 ,rega +535e 243a5362 nbranch l2cap_lpm_save_txbuf_nempty ,blank +535f e7e10005 istore 2 ,contw +5360 1a20a202 increase 2 ,rega +5361 20205359 branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_save_txbuf_nempty: +5362 efe10011 ifetch 2 ,rega +5363 1a20a202 increase 2 ,rega +5364 1fe20c00 copy pdata ,contr +5365 efe10006 ifetch 2 ,contr +5366 e7e10005 istore 2 ,contw +5367 1fe27200 copy pdata ,loopcnt +5368 1f20f202 increase 2 ,loopcnt +5369 20407d5f call memcpy +536a 20205359 branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_load_txbuf: +536b 4709c022 bpatchx patch22_3 ,mem_patch22 +536c 20405301 call l2cap_malloc_get_full_map +536d 6fe0c4e6 fetch 1 ,mem_used_map +536e 207a0000 rtn blank +536f da2044e8 arg mem_tx_fifo0_ptr ,rega +5370 1a20a3fd increase -3 ,rega +5371 d8c044f3 arg mem_l2cap_lpm_txbuf ,contr + +l2cap_lpm_load_txbuf_loop: +5372 1a20a203 increase 3 ,rega +5373 580044f4 setarg mem_tx_fifo_end + 1 +5374 9a267c00 isub rega ,null +5375 20628000 rtn zero +5376 efe10006 ifetch 2 ,contr +5377 203a5372 branch l2cap_lpm_load_txbuf_loop ,blank +5378 1fe0fe04 increase 4 ,pdata +5379 1fe27200 copy pdata ,loopcnt +537a 18c22400 copy contr ,regb +537b efe10011 ifetch 2 ,rega +537c 1fe20a00 copy pdata ,contw +537d 1a420c00 copy regb ,contr +537e 18c08dfe increase -2 ,contr +537f 20407d5f call memcpy +5380 20205372 branch l2cap_lpm_load_txbuf_loop + +init_lmp: +5381 20758000 rtn wake + +init_lmp_work: +5382 470a4022 bpatchx patch22_4 ,mem_patch22 +5383 58000000 setarg 0 +5384 67e08049 store 1 ,mem_lmp_to_send +5385 67e08056 store 1 ,mem_conn_sm +5386 67e08079 store 1 ,mem_lmo_opcode1 +5387 67e0807d store 1 ,mem_lmo_opcode2 +5388 67e0c15d store 1 ,mem_esco_addr +5389 67e080bd store 1 ,mem_connection_options +538a 67e08877 store 1 ,mem_pairing_auth +538b 67e1c644 store 3 ,mem_encapsulated_major_type +538c 67e0c647 store 1 ,mem_remote_br_sc_support +538d 70464200 jam switch_flag_init ,mem_switch_flag +538e 70030c00 jam 0 ,mem_switch_fail_master_count +538f 7003ab00 jam null_encryp ,mem_wait_encryption + +init_lmp_reinit: +5390 70087700 jam 0 ,mem_pairing_auth +5391 70087600 jam 0 ,mem_sp_localsm +5392 7003a500 jam 0 ,mem_lmp_conn_state + +parse_rx_done: +5393 20600000 rtn + +parse_lmp: +5394 470ac022 bpatchx patch22_5 ,mem_patch22 +5395 2054da24 call setlocalsm_master ,master +5396 2454da28 ncall setlocalsm_slave ,master +5397 204059e1 call lmo_fifo_check +5398 247a0000 nrtn blank +5399 6fe0804d fetch 1 ,mem_state_map +539a c4030000 rtnbit0 smap_rxlmp +539b 793ffe06 set0 smap_rxlmp ,pdata +539c 793f8001 set0 mark_rxbuf_inuse ,mark +539d 67e0804d store 1 ,mem_state_map +539e 6fe080cf fetch 1 ,mem_rxbuf +539f 6848804d fetcht 1 ,mem_state_map +53a0 2feffe00 isolate1 smap_lmptidinit ,pdata +53a1 79208401 setflag true ,smap_lmptid ,temp +53a2 6048804d storet 1 ,mem_state_map +53a3 18410402 and_into 0x2 ,temp +53a4 60488080 storet 1 ,mem_lmo_tid2 +53a5 6848804d fetcht 1 ,mem_state_map +53a6 1fe37e00 rshift pdata ,pdata +53a7 67e0807e store 1 ,mem_lmi_opcode2 +53a8 470b4022 bpatchx patch22_6 ,mem_patch22 +53a9 6fe0807e fetch 1 ,mem_lmi_opcode2 +53aa c03fd3f6 beq lmp_escape ,parse_lmp_escape +53ab c001d462 beq lmp_accepted ,parse_lmp_accepted +53ac c0025473 beq lmp_not_accepted ,parse_lmp_not_accepted +53ad c01e53e9 beq lmp_set_afh ,parse_lmp_set_afh +53ae c002d3e5 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +53af c007d699 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +53b0 c00854d8 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +53b1 c011d4f7 beq lmp_auto_rate ,parse_lmp_auto_rate +53b2 c01cd6b2 beq lmp_test_control ,parse_lmp_test_control +53b3 c01c56ad beq lmp_test_activate ,parse_lmp_test_activate +53b4 c018d4dd beq lmp_setup_complete ,parse_lmp_setup_complete +53b5 c01bd579 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +53b6 c013d575 beq lmp_features_req ,parse_lmp_features_req +53b7 c019d572 beq lmp_host_connection_req ,parse_lmp_conn_req +53b8 c012d577 beq lmp_version_req ,parse_lmp_version_req +53b9 c01354f3 beq lmp_version_res ,parse_lmp_version_res +53ba c003d4ec beq lmp_detach ,parse_lmp_detach +53bb c016d4e3 beq lmp_max_slot ,parse_lmp_max_slot +53bc c01754e4 beq lmp_max_slot_req ,parse_lmp_max_slot_req +53bd c000d56e beq lmp_name_req ,parse_lmp_name_req +53be c0015559 beq lmp_name_res ,parse_lmp_name_res +53bf c01456a4 beq lmp_features_res ,parse_lmp_features_res +53c0 c004d54f beq lmp_comb_key ,parse_lmp_comb_key +53c1 c005d516 beq lmp_au_rand ,parse_lmp_au_rand +53c2 c00454f8 beq lmp_in_rand ,parse_lmp_in_rand +53c3 c0065528 beq lmp_sres ,parse_lmp_sres +53c4 c00fd4ef beq lmp_incr_power_req ,parse_lmp_incr_power +53c5 c01054f1 beq lmp_decr_power_req ,parse_lmp_decr_power +53c6 c010d593 beq lmp_max_power ,parse_lmp_max_power +53c7 c0115593 beq lmp_min_power ,parse_lmp_min_power +53c8 c01ad594 beq lmp_page_mode_req ,parse_lmp_page_mode_req +53c9 c01b5595 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +53ca c0125593 beq lmp_preferred_rate ,parse_lmp_preferred_rate +53cb c01a5596 beq lmp_slot_offset ,parse_lmp_slot_offset +53cc c00bd59f beq lmp_sniff_req ,parse_lmp_sniff_req +53cd c008d5b9 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +53ce c00955c6 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +53cf c009d5c8 beq lmp_switch_req ,parse_lmp_switch_req +53d0 c006d5d8 beq lmp_temp_rand ,parse_lmp_temp_rand +53d1 c00755d8 beq lmp_temp_key ,parse_lmp_temp_key +53d2 c017d573 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +53d3 c01855d8 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +53d4 c00555d8 beq lmp_unit_key ,parse_lmp_unit_key +53d5 c00c55d9 beq lmp_unsniff_req ,parse_lmp_unsniff_req +53d6 c01955d8 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +53d7 c01ed5de beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +53d8 c01f5627 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +53d9 c01fd620 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +53da c020566a beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +53db c020d67b beq lmp_dhkey_check ,parse_dhkey_check +53dc c0035698 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +53dd c01d53e7 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req +53de c01553e3 beq lmp_quality_of_service_req ,parse_quality_of_server_req +53df c014d3e4 beq lmp_quality_of_service ,parse_quality_of_server + +reject_unknown_packet: +53e0 70007f19 jam unknown_lmp_pdu ,mem_lmo_reason2 + +reject_lmp_packet: +53e1 70007d04 jam lmp_not_accepted ,mem_lmo_opcode2 +53e2 20600000 rtn + +parse_quality_of_server_req: +53e3 202054ed branch accept_lmp_msg + +parse_quality_of_server: +53e4 20600000 rtn + +parse_lmp_clkoffset_req: +53e5 70007d06 jam lmp_clkoffset_res ,mem_lmo_opcode2 +53e6 20600000 rtn + +parse_enc_key_size_mask_req: +53e7 70007d3b jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +53e8 20600000 rtn + +parse_lmp_set_afh: +53e9 6fe200d0 fetch 4 ,mem_rxbuf + 1 +53ea 1fe3fe00 lshift pdata ,pdata +53eb 67e240d9 store 4 ,mem_afh_instant +53ec 6fe080d4 fetch 1 ,mem_rxbuf + 5 +53ed 67e0c0e0 store 1 ,mem_afh_new_mod +53ee 6fe280d5 fetch 5 ,mem_rxbuf + 6 +53ef 67e2c0ee store 5 ,mem_afh_map_new +53f0 6fe280da fetch 5 ,mem_rxbuf + 11 +53f1 e7e28005 istore 5 ,contw +53f2 6fe08032 fetch 1 ,mem_mode +53f3 79207e03 set1 afh_change ,pdata +53f4 67e08032 store 1 ,mem_mode +53f5 20600000 rtn + +parse_lmp_escape: +53f6 470bc022 bpatchx patch22_7 ,mem_patch22 +53f7 6fe080d0 fetch 1 ,mem_rxbuf + 1 +53f8 79207e07 set1 7 ,pdata +53f9 67e0807e store 1 ,mem_lmi_opcode2 +53fa c040d41b beq lmp_ext_accepted ,parse_lmpext_accepted +53fb c0415420 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +53fc c04ad57a beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +53fd c04b5593 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +53fe c045d588 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +53ff c041d436 beq lmp_ext_features_req ,parse_lmpext_features_req +5400 c0425458 beq lmp_ext_features_res ,parse_lmpext_features_res +5401 c048540d beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +5402 c04bd42f beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +5403 c04c5434 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +5404 c04cd410 beq lmp_io_cap_req ,parse_lmpext_iocap_req +5405 c04d5413 beq lmp_io_cap_res ,parse_lmpext_iocap_res +5406 c050d40b beq lmp_ping_req ,parse_lmpext_ping_req +5407 c1420000 rtneq lmp_ext_features_res + +reject_unknown_ext_packet: +5408 70007d82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +5409 70007f19 jam unknown_lmp_pdu ,mem_lmo_reason2 +540a 20600000 rtn + +parse_lmpext_ping_req: +540b 70007da2 jam lmp_ping_res ,mem_lmo_opcode2 +540c 20600000 rtn + +parse_lmpext_chn_classification_req: +540d 70007d82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +540e 70007f2e jam not_support_chn_classification ,mem_lmo_reason2 +540f 20600000 rtn + +parse_lmpext_iocap_req: +5410 20405415 call iocap_lmpext_load +5411 70007d9a jam lmp_io_cap_res ,mem_lmo_opcode2 +5412 20600000 rtn + +parse_lmpext_iocap_res: +5413 20405415 call iocap_lmpext_load +5414 20205419 branch iocap_lmpext_common + +iocap_lmpext_load: +5415 d8a04768 arg mem_sp_iocap_remote ,contw +5416 6fe180d1 fetch 3 ,mem_rxbuf + 2 +5417 e7e18005 istore 3 ,contw +5418 20600000 rtn + +iocap_lmpext_common: +5419 2020f068 branch master_set_mem_master_sp_flag ,true +541a 20600000 rtn + +parse_lmpext_accepted: +541b 6fe080d2 fetch 1 ,mem_rxbuf + 3 +541c 79207e07 set1 7 ,pdata +541d 67e0839d store 1 ,mem_lmi_accepted_opcode +541e c045d425 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +541f 20600000 rtn + +parse_lmpext_not_accepted: +5420 6fe080d2 fetch 1 ,mem_rxbuf + 3 +5421 79207e07 set1 7 ,pdata +5422 67e0839d store 1 ,mem_lmi_accepted_opcode +5423 c045d429 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +5424 20600000 rtn + +parse_lmpext_accepted_ptt: +5425 6fe0c15f fetch 1 ,mem_ptt +5426 6848804d fetcht 1 ,mem_state_map +5427 7d3a0405 nsetflag blank ,smap_edr ,temp +5428 6048804d storet 1 ,mem_state_map + +parse_lmpext_not_accepted_ptt: +5429 6fe08031 fetch 1 ,mem_state +542a c4028000 rtnbit0 state_init_seq +542b 793ffe05 set0 state_init_seq ,pdata +542c 67e08031 store 1 ,mem_state +542d 70007d31 jam lmp_setup_complete ,mem_lmo_opcode2 +542e 20600000 rtn + +parse_lmpext_pause_encrypt: +542f 2434d432 nbranch parse_lmpext_pause_encrypt_slave ,master +5430 70007d12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +5431 20205a10 branch tid_reply + +parse_lmpext_pause_encrypt_slave: +5432 70007d97 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +5433 20600000 rtn + +parse_lmpext_resume_encrypt: +5434 20405a10 call tid_reply +5435 202056ef branch lmp_start_encryption + +parse_lmpext_features_req: +5436 efe08006 ifetch 1 ,contr +5437 67e083a1 store 1 ,mem_ext_features_page +5438 c000d43b beq 1 ,parse_lmpext_features_req_page1 +5439 c0015440 beq 2 ,parse_lmpext_features_req_page2 +543a 20600000 rtn + +parse_lmpext_features_req_page1: +543b 70007d84 jam lmp_ext_features_res ,mem_lmo_opcode2 +543c 18c08c01 increase 1 ,contr +543d efe08006 ifetch 1 ,contr +543e c281d452 bbit1 lmp_features_ext_page1_sc_host_bit ,remote_support_br_sc_host +543f 20205455 branch remote_not_support_br_sc_host + +parse_lmpext_features_req_page2: +5440 70007d84 jam lmp_ext_features_res ,mem_lmo_opcode2 +5441 18c08c01 increase 1 ,contr +5442 efe10006 ifetch 2 ,contr +5443 c2845445 bbit1 lmp_features_ext_page2_sc_controller_bit ,remote_support_br_sc_controller +5444 2020544e branch remote_not_support_br_sc_controller + +remote_support_br_sc_controller: +5445 6fe0c647 fetch 1 ,mem_remote_br_sc_support +5446 79207e01 set1 remote_br_sc_controller_bit ,pdata +5447 20405450 call set_remote_br_sc_support +5448 6fe0c647 fetch 1 ,mem_remote_br_sc_support +5449 c1818000 rtnne 3 +544a 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +544b c4008000 rtnbit0 secure_connections_br_bit +544c 70464502 jam encapsulated_minor_type_p256 ,mem_encapsulated_minor_type +544d 20600000 rtn + +remote_not_support_br_sc_controller: +544e 6fe0c647 fetch 1 ,mem_remote_br_sc_support +544f 793ffe01 set0 remote_br_sc_controller_bit ,pdata + +set_remote_br_sc_support: +5450 67e0c647 store 1 ,mem_remote_br_sc_support +5451 20600000 rtn + +remote_support_br_sc_host: +5452 6fe0c647 fetch 1 ,mem_remote_br_sc_support +5453 79207e00 set1 remote_br_sc_host_bit ,pdata +5454 20205450 branch set_remote_br_sc_support + +remote_not_support_br_sc_host: +5455 6fe0c647 fetch 1 ,mem_remote_br_sc_support +5456 793ffe00 set0 remote_br_sc_host_bit ,pdata +5457 20205450 branch set_remote_br_sc_support + +parse_lmpext_features_res: +5458 684880d3 fetcht 1 ,mem_rxbuf + 4 +5459 18410401 and temp ,0x1 ,temp +545a 604883a4 storet 1 ,mem_remote_sppcap +545b 6fe0c1db fetch 1 ,mem_hci_cmd +545c c0a8d45e bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +545d 7041db00 jam 0 ,mem_hci_cmd + +parse_lmpext_features_res_not_hci: +545e 6fe08056 fetch 1 ,mem_conn_sm +545f c18a8000 rtnne conn_sm_wait_features_ext +5460 70005604 jam conn_sm_send_conn_req ,mem_conn_sm +5461 20205a40 branch process_conn_sm + +parse_lmp_accepted: +5462 470c4023 bpatchx patch23_0 ,mem_patch23 +5463 6fe080d0 fetch 1 ,mem_rxbuf + 1 +5464 67e0839d store 1 ,mem_lmi_accepted_opcode +5465 c019d489 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +5466 c0045498 beq lmp_in_rand ,parse_lmp_accepted_inrand +5467 c007d49f beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +5468 c00854a5 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +5469 c008d4a6 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +546a c00954ae beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +546b c00c54c7 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +546c c00bd4ca beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +546d c009d480 beq lmp_switch_req ,parse_lmp_accepted_switch +546e c01ed5f3 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +546f c01f5654 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +5470 c02055f5 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +5471 c020d612 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +5472 20600000 rtn + +parse_lmp_not_accepted: +5473 470cc023 bpatchx patch23_1 ,mem_patch23 +5474 6fe080d0 fetch 1 ,mem_rxbuf + 1 +5475 67e0839d store 1 ,mem_lmi_accepted_opcode +5476 c000d4be beq lmp_name_req ,parse_lmp_not_accepted_name_req +5477 c019d493 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +5478 c005d4af beq lmp_au_rand ,parse_lmp_not_accepted_aurand +5479 c00454b5 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +547a c009d483 beq lmp_switch_req ,parse_lmp_not_accepted_switch +547b c02054bf beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +547c c020d4c2 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +547d c00c54c5 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +547e c00bd4d6 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +547f 20600000 rtn + +parse_lmp_accepted_switch: +5480 70095b20 jam bt_evt_switch_accept ,mem_fifo_temp +5481 20407871 call ui_ipc_send_event +5482 202009df branch role_switch_prepare0 + +parse_lmp_not_accepted_switch: +5483 70095b19 jam bt_evt_switch_not_accept ,mem_fifo_temp +5484 20407871 call ui_ipc_send_event +5485 70464202 jam switch_flag_not_accept ,mem_switch_flag +5486 58000050 setarg timer_switch_waite +5487 d8e00006 arg switch_wait_timer ,queue +5488 20207d66 branch timer_init + +parse_lmp_accepted_hostconn: +5489 6fe083a5 fetch 1 ,mem_lmp_conn_state +548a 79207e00 set1 received_conn_req ,pdata +548b 67e083a5 store 1 ,mem_lmp_conn_state +548c 70095b01 jam bt_evt_bb_connected ,mem_fifo_temp +548d 20407871 call ui_ipc_send_event +548e 70007d8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 + +parse_lmp_accepted_hostconn_ctn: +548f 6fe08056 fetch 1 ,mem_conn_sm +5490 c082d393 bne conn_sm_wait_conn_accept ,parse_rx_done +5491 70005606 jam conn_sm_auth_pair ,mem_conn_sm +5492 20600000 rtn + +parse_lmp_not_accepted_hostconn: +5493 70039e0b jam acl_connection_already_exists ,mem_disconn_reason_send +5494 70007d07 jam lmp_detach ,mem_lmo_opcode2 +5495 70005600 jam conn_sm_standby ,mem_conn_sm +5496 2020d393 branch parse_rx_done ,true +5497 20600000 rtn + +parse_lmp_accepted_inrand: +5498 6fe0c1ca fetch 1 ,mem_link_key_exists +5499 247a0000 nrtn blank +549a 20400c60 call clear_linkkey +549b 204056ed call lmp_generate_key +549c 20748000 rtn master +549d 79200021 set1 mark_slave_in_rand_accepted ,mark +549e 20600000 rtn + +parse_lmp_accepted_enc_mode: +549f 24748000 nrtn master +54a0 70007d10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +54a1 6fe0804d fetch 1 ,mem_state_map +54a2 c4010000 rtnbit0 smap_encryption +54a3 70007d12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +54a4 20600000 rtn + +parse_lmp_accepted_enc_keysize: +54a5 202056ef branch lmp_start_encryption + +parse_lmp_accepted_start_enc: +54a6 2040574b call send_create_conn_start_l2cap_timer_sm +54a7 6fe08031 fetch 1 ,mem_state +54a8 c3820000 rtnbit1 state_conn_comp +54a9 70007d31 jam lmp_setup_complete ,mem_lmo_opcode2 +54aa 6fe08056 fetch 1 ,mem_conn_sm +54ab c1850000 rtnne conn_sm_encrypt_wait +54ac 7000560b jam conn_sm_encrypt_wait_clear ,mem_conn_sm +54ad 20600000 rtn + +parse_lmp_accepted_stop_enc: +54ae 20600000 rtn + +parse_lmp_not_accepted_aurand: + +parse_lmp_not_accepted_aurand_send_detach: +54af 6fe0c09a fetch 1 ,mem_device_option +54b0 1fe67c08 sub pdata ,dvc_op_mouse ,null +54b1 2042be1d call mouse_delay_enter_hibernata ,zero +54b2 70007d07 jam lmp_detach ,mem_lmo_opcode2 +54b3 70039e13 jam other_end_terminated ,mem_disconn_reason_send +54b4 20600000 rtn + +parse_lmp_not_accepted_inrand: +54b5 6fe080d1 fetch 1 ,mem_rxbuf + 2 +54b6 c00354bb beq key_missing ,parse_lmp_inrand_key_missing +54b7 c18c0000 rtnne pairing_not_allowed +54b8 70039e18 jam pairing_not_allowed ,mem_disconn_reason_send +54b9 70007d07 jam lmp_detach ,mem_lmo_opcode2 +54ba 20600000 rtn + +parse_lmp_inrand_key_missing: +54bb 70039e06 jam key_missing ,mem_disconn_reason_send +54bc 70007d07 jam lmp_detach ,mem_lmo_opcode2 +54bd 20600000 rtn + +parse_lmp_not_accepted_name_req: +54be 20600000 rtn + +parse_lmp_not_accepted_simple_pairing_number: +54bf 70087000 jam sp_stat_null ,mem_sp_state +54c0 70007d07 jam lmp_detach ,mem_lmo_opcode2 +54c1 20205393 branch parse_rx_done + +parse_lmp_not_accepted_dhkey_check: +54c2 70087000 jam sp_stat_null ,mem_sp_state +54c3 70007d07 jam lmp_detach ,mem_lmo_opcode2 +54c4 20205393 branch parse_rx_done + +parse_lmp_not_accepted_unsniff_req: +54c5 70095b24 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +54c6 20207871 branch ui_ipc_send_event + +parse_lmp_accepted_unsniff_req: +54c7 70095b23 jam bt_evt_unsniff_accept ,mem_fifo_temp +54c8 20407871 call ui_ipc_send_event +54c9 20200f16 branch sniff_exit + +parse_lmp_accepted_sniff_req: +54ca 70095b22 jam bt_evt_sniff_accept ,mem_fifo_temp +54cb 20407871 call ui_ipc_send_event +54cc 58000000 setarg 0 +54cd 67e10076 store 2 ,mem_dsniff +54ce 6fe14455 fetch 2 ,mem_sniff_param_interval +54cf 1fe3fe00 lshift pdata ,pdata +54d0 67e10033 store 2 ,mem_tsniff +54d1 6fe0c457 fetch 1 ,mem_sniff_param_attempt +54d2 67e08074 store 1 ,mem_sniff_attempt +54d3 6fe0c459 fetch 1 ,mem_sniff_param_timeout +54d4 67e08075 store 1 ,mem_sniff_timeout +54d5 20200ef5 branch sniff_init + +parse_lmp_not_acdcept_sniff_req: +54d6 70095b21 jam bt_evt_sniff_not_accept ,mem_fifo_temp +54d7 20207871 branch ui_ipc_send_event + +parse_lmp_crypt_key: +54d8 684880d0 fetcht 1 ,mem_rxbuf + 1 +54d9 18467c06 sub temp ,6 ,null +54da 2021568e branch lmp_reject_pdu_not_allowed ,positive +54db 60488055 storet 1 ,mem_key_size +54dc 202054ed branch accept_lmp_msg + +parse_lmp_setup_complete: +54dd 6fe083a5 fetch 1 ,mem_lmp_conn_state +54de 79207e02 set1 received_setup_complete ,pdata +54df 67e083a5 store 1 ,mem_lmp_conn_state +54e0 c3818000 rtnbit1 sent_setup_complete +54e1 70007d31 jam lmp_setup_complete ,mem_lmo_opcode2 +54e2 20205393 branch parse_rx_done + +parse_lmp_max_slot: +54e3 20600000 rtn + +parse_lmp_max_slot_req: +54e4 6fe0c0d7 fetch 1 ,mem_max_slot +54e5 684880d0 fetcht 1 ,mem_rxbuf + 1 +54e6 98467c00 isub temp ,null +54e7 202154ed branch accept_lmp_msg ,positive +54e8 70007d04 jam lmp_not_accepted ,mem_lmo_opcode2 +54e9 70007f1f jam unspecified_error ,mem_lmo_reason2 +54ea 70007e2e jam lmp_max_slot_req ,mem_lmi_opcode2 +54eb 20600000 rtn + +parse_lmp_detach: +54ec 20205862 branch prepare_disconnect + +accept_lmp_msg: +54ed 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +54ee 20600000 rtn + +parse_lmp_incr_power: +54ef 70007d21 jam lmp_max_power ,mem_lmo_opcode2 +54f0 20600000 rtn + +parse_lmp_decr_power: +54f1 70007d22 jam lmp_min_power ,mem_lmo_opcode2 +54f2 20600000 rtn + +parse_lmp_version_res: +54f3 6fe08056 fetch 1 ,mem_conn_sm +54f4 c1098000 rtneq conn_sm_wait_version +54f5 70005602 jam conn_sm_send_features ,mem_conn_sm +54f6 20600000 rtn + +parse_lmp_auto_rate: +54f7 20600000 rtn + +parse_lmp_in_rand: +54f8 6fe0c6b6 fetch 1 ,mem_sc_only_mode +54f9 243a5501 nbranch parse_lmp_in_rand_not_accept ,blank +54fa 204056ea call lmp_copy_rand +54fb 7003a801 jam pincode_state_wait_pincode ,mem_pincode_state +54fc 70095b0a jam bt_evt_pincode_req ,mem_fifo_temp +54fd 20407871 call ui_ipc_send_event +54fe 20405a18 call tid_check +54ff 2420d6f2 nbranch lmp_accept_inrand ,true +5500 2434d505 nbranch parse_lmp_inrand_res ,master + +parse_lmp_in_rand_not_accept: +5501 70007d04 jam lmp_not_accepted ,mem_lmo_opcode2 +5502 70007e08 jam lmp_in_rand ,mem_lmi_opcode2 +5503 70007f23 jam transaction_collision ,mem_lmo_reason2 +5504 20600000 rtn + +parse_lmp_inrand_res: +5505 6fe0804c fetch 1 ,mem_op +5506 79207e02 set1 op_inrand_req ,pdata +5507 67e0804c store 1 ,mem_op +5508 20600000 rtn + +pop_tid_follow: +5509 6848804d fetcht 1 ,mem_state_map +550a 7d3a0401 nsetflag blank ,smap_lmptid ,temp +550b 6048804d storet 1 ,mem_state_map +550c 20600000 rtn + +push_tid_follow: +550d 6fe08080 fetch 1 ,mem_lmo_tid2 +550e 1fe37e00 rshift pdata ,pdata +550f 1fe17e01 and_into 1 ,pdata +5510 20600000 rtn + +parse_lmp_au_rand_moudle: +5511 6fe0c489 fetch 1 ,mem_nv_data_number +5512 207a0000 rtn blank +5513 6fe08877 fetch 1 ,mem_pairing_auth +5514 205a6009 call load_device_list ,blank +5515 20600000 rtn + +parse_lmp_au_rand: +5516 20405511 call parse_lmp_au_rand_moudle +5517 2040550d call push_tid_follow +5518 67e083a9 store 1 ,mem_sres_tid +5519 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +551a c0015523 beq encapsulated_minor_type_p256 ,parse_lmp_au_rand_256 +551b 204056ea call lmp_copy_rand +551c 70007d0c jam lmp_sres ,mem_lmo_opcode2 + +parse_lmp_au_rand_common: +551d 6fe0c1ca fetch 1 ,mem_link_key_exists +551e 247a0000 nrtn blank +551f 6fe08031 fetch 1 ,mem_state +5520 c3830000 rtnbit1 state_combkey +5521 70007f06 jam key_missing ,mem_lmo_reason2 +5522 202053e1 branch reject_lmp_packet + +parse_lmp_au_rand_256: +5523 70007d0b jam lmp_au_rand ,mem_lmo_opcode2 +5524 d8a008f0 arg mem_sp_random_remote ,contw +5525 d8c000d0 arg mem_rxbuf + 1 ,contr +5526 20407d0c call memcpy16 +5527 2020551d branch parse_lmp_au_rand_common + +parse_lmp_sres: +5528 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +5529 c0015538 beq encapsulated_minor_type_p256 ,parse_lmp_sres_256 +552a da200041 arg mem_plap ,rega +552b 20406b3e call function_e1 +552c 684a0454 fetcht 4 ,mem_input_store +552d 6fe200d0 fetch 4 ,mem_rxbuf + 1 +552e 98467c00 isub temp ,null +552f 2022d533 branch authentication_ok ,zero + +authentication_fail: +5530 70007d07 jam lmp_detach ,mem_lmo_opcode2 +5531 70039e05 jam authentication_failure_error ,mem_disconn_reason_send +5532 20600000 rtn + +authentication_ok: +5533 20406c3c call copy_aco +5534 20405541 call authentication_ok_common +5535 6fe0c764 fetch 1 ,mem_ssp_enable +5536 203a5613 branch pairing_success ,blank +5537 20600000 rtn + +parse_lmp_sres_256: +5538 6fe200d0 fetch 4 ,mem_rxbuf + 1 +5539 684a091c fetcht 4 ,mema +553a 98467c00 isub temp ,null +553b 2022d53d branch authentication_ok_256 ,zero +553c 20205530 branch authentication_fail + +authentication_ok_256: +553d 20405541 call authentication_ok_common +553e 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +553f c280d613 bbit1 secure_connections_br_bit ,pairing_success +5540 20600000 rtn + +authentication_ok_common: +5541 204009b6 call linkkey_ready +5542 6fe0804c fetch 1 ,mem_op +5543 2feffe01 isolate1 op_auth_req ,pdata +5544 793ffe01 set0 op_auth_req ,pdata +5545 67e0804c store 1 ,mem_op +5546 6fe08056 fetch 1 ,mem_conn_sm +5547 c00cd54a beq conn_sm_auth_wait ,authentication_ok_conn_sm +5548 c00c554a beq conn_sm_pairing_wait ,authentication_ok_conn_sm +5549 20600000 rtn + +authentication_ok_conn_sm: +554a 6fe08877 fetch 1 ,mem_pairing_auth +554b c1800000 rtnne defalt_pairing_auth +554c 6fe0804d fetch 1 ,mem_state_map +554d c3810000 rtnbit1 smap_encryption +554e 20205ad7 branch host_create_conn_encrypt + +parse_lmp_comb_key: +554f da2000d0 arg mem_rxbuf + 1 ,rega +5550 da400444 arg mem_kinit ,regb +5551 d8a00424 arg mem_random_number ,contw +5552 20406c08 call xor16 +5553 da200041 arg mem_plap ,rega +5554 20405a36 call generate_linkkey +5555 70007d0b jam lmp_au_rand ,mem_lmo_opcode2 +5556 6fe08031 fetch 1 ,mem_state +5557 c30356ed bbit0 state_combkey ,lmp_generate_key +5558 20600000 rtn + +parse_lmp_name_res: +5559 6fe100af fetch 2 ,mem_len +555a 1fe0f3fd add pdata ,-3 ,loopcnt +555b 684880d0 fetcht 1 ,mem_rxbuf + 1 +555c 58000a01 setarg mem_tmp_buffer +555d 98408a00 iadd temp ,contw +555e d8c000d2 arg mem_rxbuf + 3 ,contr +555f 20407d5f call memcpy +5560 68488054 fetcht 1 ,mem_name_offset +5561 6fe080d1 fetch 1 ,mem_rxbuf + 2 +5562 98467e00 isub temp ,pdata +5563 1fe67c0e sub pdata ,14 ,null +5564 20215569 branch parse_lmp_name_res_end ,positive +5565 1840fe0e add temp ,14 ,pdata +5566 67e08054 store 1 ,mem_name_offset +5567 70007d01 jam lmp_name_req ,mem_lmo_opcode2 +5568 20600000 rtn + +parse_lmp_name_res_end: +5569 6fe0804d fetch 1 ,mem_state_map +556a 79207e03 set1 smap_name_res ,pdata +556b 67e0804d store 1 ,mem_state_map +556c c28256f7 bbit1 smap_name_req ,lmp_disconnect +556d 20600000 rtn + +parse_lmp_name_req: +556e 6fe080d0 fetch 1 ,mem_rxbuf + 1 +556f 67e0807e store 1 ,mem_lmi_opcode2 +5570 70007d02 jam lmp_name_res ,mem_lmo_opcode2 +5571 20600000 rtn + +parse_lmp_conn_req: +5572 202054ed branch accept_lmp_msg + +parse_lmp_timing_accuracy_req: +5573 70007d30 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +5574 20600000 rtn + +parse_lmp_features_req: +5575 70007d28 jam lmp_features_res ,mem_lmo_opcode2 +5576 20600000 rtn + +parse_lmp_version_req: +5577 70007d26 jam lmp_version_res ,mem_lmo_opcode2 +5578 20600000 rtn + +parse_lmp_supervision_timeout: +5579 20600000 rtn + +parse_lmp_sniff_subrating_req: +557a 6fe10033 fetch 2 ,mem_tsniff +557b 98000400 iforce temp +557c 6fe080d1 fetch 1 ,mem_rxbuf + 2 +557d 67e08093 store 1 ,mem_subsniff_rate +557e 984f8400 imul32 temp ,temp +557f 6fe100d2 fetch 2 ,mem_rxbuf + 3 +5580 1fe3fe00 lshift pdata ,pdata +5581 67e10094 store 2 ,mem_subsniff_tcmax +5582 6fe200d4 fetch 4 ,mem_rxbuf + 5 +5583 1fe3fe00 lshift pdata ,pdata +5584 67e2008f store 4 ,mem_subsniff_instant +5585 18427e00 deposit temp +5586 67e10096 store 2 ,mem_subsniff_tsniff +5587 20600000 rtn + +parse_lmpext_packet_type_table_req: +5588 6848c15f fetcht 1 ,mem_ptt +5589 6fe080d1 fetch 1 ,mem_rxbuf + 2 +558a 9842fc00 ixor temp ,null +558b 2422d408 nbranch reject_unknown_ext_packet ,zero +558c 2feffe00 isolate1 0 ,pdata +558d 6fe0804d fetch 1 ,mem_state_map +558e 7920fe05 setflag true ,smap_edr ,pdata +558f 67e0804d store 1 ,mem_state_map +5590 70007d81 jam lmp_ext_accepted ,mem_lmo_opcode2 +5591 70007e8b jam lmp_packet_type_table_req ,mem_lmi_opcode2 +5592 20600000 rtn + +parse_lmp_sniff_subrating_res: + +parse_lmp_preferred_rate: + +parse_lmp_max_power: + +parse_lmp_min_power: +5593 20600000 rtn + +parse_lmp_page_mode_req: +5594 202054ed branch accept_lmp_msg + +parse_lmp_page_scan_mode_req: +5595 202054ed branch accept_lmp_msg + +parse_lmp_slot_offset: +5596 6fe100d0 fetch 2 ,mem_rxbuf + 1 +5597 67e100c1 store 2 ,mem_slot_offset +5598 20600000 rtn + +parse_lmp_sniff_req_check_sniff_para: +5599 6fe100d3 fetch 2 ,mem_rxbuf + 4 +559a 6848c177 fetcht 1 ,mem_lpm_mult +559b 984ffe00 imul32 temp ,pdata +559c d8400640 arg 0x640 ,temp +559d 98467c00 isub temp ,null +559e 20600000 rtn + +parse_lmp_sniff_req: +559f 6fe100d5 fetch 2 ,mem_rxbuf + 6 +55a0 203a568e branch lmp_reject_pdu_not_allowed ,blank +55a1 20405599 call parse_lmp_sniff_req_check_sniff_para +55a2 2021568e branch lmp_reject_pdu_not_allowed ,positive +55a3 6fe0c09a fetch 1 ,mem_device_option +55a4 1fe67c0a sub pdata ,dvc_op_module ,null +55a5 2042bb99 call module_set_lpm_mult_2 ,zero +55a6 6fe08031 fetch 1 ,mem_state +55a7 c280d68e bbit1 state_insniff ,lmp_reject_pdu_not_allowed +55a8 6fe100d1 fetch 2 ,mem_rxbuf + 2 +55a9 1fe3fe00 lshift pdata ,pdata +55aa 67e10076 store 2 ,mem_dsniff +55ab 6fe100d3 fetch 2 ,mem_rxbuf + 4 +55ac 1fe3fe00 lshift pdata ,pdata +55ad 67e10033 store 2 ,mem_tsniff +55ae 6fe100d5 fetch 2 ,mem_rxbuf + 6 +55af 67e08074 store 1 ,mem_sniff_attempt +55b0 98000400 iforce temp +55b1 6fe100d7 fetch 2 ,mem_rxbuf + 8 +55b2 67e08075 store 1 ,mem_sniff_timeout +55b3 98467c00 isub temp ,null +55b4 242155b6 nbranch set_big_value_to_attempt ,positive +55b5 67e08074 store 1 ,mem_sniff_attempt + +set_big_value_to_attempt: +55b6 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +55b7 70007e17 jam lmp_sniff_req ,mem_lmi_opcode2 +55b8 20600000 rtn + +parse_lmp_start_encryption_req: +55b9 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +55ba c00155bf beq encapsulated_minor_type_p256 ,parse_lmp_start_encryption_req_256 +55bb 204054ed call accept_lmp_msg +55bc 204056ea call lmp_copy_rand +55bd 20406b41 call function_e3 +55be 20200ee5 branch start_encryption + +parse_lmp_start_encryption_req_256: +55bf 204054ed call accept_lmp_msg +55c0 20400ee5 call start_encryption + +calc_kc: +55c1 204074cc call function_h3 +55c2 d8a00063 arg mem_kc ,contw +55c3 d8c00910 arg mem_sp_calc_result_high ,contr +55c4 df200010 arg 0x10 ,loopcnt +55c5 20207e68 branch reverse_byte + +parse_lmp_stop_encryption_req: +55c6 204054ed call accept_lmp_msg +55c7 20200eef branch stop_encryption + +parse_lmp_switch_req: +55c8 6fe200d0 fetch 4 ,mem_rxbuf + 1 +55c9 1fe3fe00 lshift pdata ,pdata +55ca 2034d5d2 branch parse_lmp_switch_accept ,master +55cb 6848c1ca fetcht 1 ,mem_link_key_exists +55cc 243a55cf nbranch parse_lmp_switch_req_clear_mark ,blank + +parse_lmp_switch_req_not_accept: +55cd 70007e13 jam lmp_switch_req ,mem_lmi_opcode2 +55ce 2020568e branch lmp_reject_pdu_not_allowed + +parse_lmp_switch_req_clear_mark: +55cf 70007d34 jam lmp_slot_offset ,mem_lmo_opcode2 +55d0 70005600 jam 0 ,mem_conn_sm +55d1 202009dd branch role_switch_prepare + +parse_lmp_switch_accept: +55d2 204009dd call role_switch_prepare +55d3 79200022 set1 mark_reconn_recieve_switch ,mark +55d4 6fe080bd fetch 1 ,mem_connection_options +55d5 793ffe02 set0 connection_switch ,pdata +55d6 67e080bd store 1 ,mem_connection_options +55d7 202054ed branch accept_lmp_msg + +parse_lmp_temp_rand: + +parse_lmp_temp_key: + +parse_lmp_timing_accuracy_res: + +parse_lmp_unit_key: + +parse_lmp_use_semi_permanend_key: +55d8 20600000 rtn + +parse_lmp_unsniff_req: +55d9 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +55da 70007e18 jam lmp_unsniff_req ,mem_lmi_opcode2 +55db 70095b2e jam bt_evt_remote_unsniff ,mem_fifo_temp +55dc 20407871 call ui_ipc_send_event +55dd 20200f16 branch sniff_exit + +parse_lmp_encapsulated_header: +55de 70087900 jam 0 ,mem_sp_remote_key_recv_count +55df 6fe080d0 fetch 1 ,mem_rxbuf + 1 +55e0 67e0c644 store 1 ,mem_encapsulated_major_type +55e1 c080d68e bne encapsulated_major_type ,lmp_reject_pdu_not_allowed +55e2 684880d1 fetcht 1 ,mem_rxbuf + 2 +55e3 6048c645 storet 1 ,mem_encapsulated_minor_type +55e4 6fe0c6b6 fetch 1 ,mem_sc_only_mode +55e5 203a55e8 branch parse_lmp_encapsulated_header2 ,blank +55e6 18467c02 sub temp ,encapsulated_minor_type_p256 ,null +55e7 2422d530 nbranch authentication_fail ,zero + +parse_lmp_encapsulated_header2: +55e8 6fe080d2 fetch 1 ,mem_rxbuf + 3 +55e9 c02055ec beq encapsulated_len_p256 ,parse_lmp_encapsulated_header3 +55ea c01855ec beq encapsulated_len_p192 ,parse_lmp_encapsulated_header3 +55eb 2020568e branch lmp_reject_pdu_not_allowed + +parse_lmp_encapsulated_header3: +55ec 67e0c646 store 1 ,mem_encapsulated_len +55ed 20405a21 call check_localsm +55ee 2020d5f0 branch parse_lmp_encapsulated_header_master ,true +55ef 70087001 jam sp_stat_key_recv ,mem_sp_state + +parse_lmp_encapsulated_header_master: +55f0 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +55f1 70007e3d jam lmp_encapsulated_header ,mem_lmi_opcode2 +55f2 20205393 branch parse_rx_done + +parse_lmp_accepted_encapsulated_header: +55f3 70007d3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +55f4 20600000 rtn + +parse_lmp_accepted_simple_pairing_number: +55f5 6fe0c76c fetch 1 ,mem_ssp_mode_flag +55f6 c000d5fc beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +55f7 c0015600 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey + +parse_lmp_accepted_simple_pairing_number_common: +55f8 20405a21 call check_localsm +55f9 20608000 rtn true +55fa 70087008 jam sp_stat_confirm_recv ,mem_sp_state +55fb 20600000 rtn + +parse_lmp_accepted_simple_pairing_number_ssp_pin: +55fc 204072f2 call g_noninit_number_confirm +55fd 70095b35 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +55fe 20407871 call ui_ipc_send_event +55ff 202055f8 branch parse_lmp_accepted_simple_pairing_number_common + +parse_lmp_accepted_simple_pairing_number_passkey: +5600 20405a21 call check_localsm +5601 20608000 rtn true +5602 6fe0c76d fetch 1 ,mem_authentication_passkey_times +5603 c009d610 beq 19 ,authentication_passkey_end +5604 1fe0fe01 increase 1 ,pdata +5605 67e0c76d store 1 ,mem_authentication_passkey_times + +authentication_passkey: +5606 70087201 jam sp_flag_commit ,mem_sp_flag +5607 70087004 jam sp_stat_commit_calc ,mem_sp_state +5608 6fe0c76d fetch 1 ,mem_authentication_passkey_times +5609 1fe20e00 copy pdata ,queue +560a 6fe34794 fetch 6 ,mem_pin +560b afefffff qisolate1 pdata +560c 58000080 setarg 0x80 +560d 7920fe00 setflag true ,0 ,pdata +560e 67e0c76e store 1 ,mem_passkey_1bit +560f 20600000 rtn + +authentication_passkey_end: +5610 70087008 jam sp_stat_confirm_recv ,mem_sp_state +5611 20600000 rtn + +parse_lmp_accepted_dhkey_check: +5612 20405618 call parse_lmp_accepted_dhkey_check_common + +pairing_success: +5613 6fe0c76f fetch 1 ,mem_flag_pairing_state +5614 207a0000 rtn blank +5615 70476f00 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +5616 70095b38 jam bt_evt_bt_pairing_success ,mem_fifo_temp +5617 20207871 branch ui_ipc_send_event + +parse_lmp_accepted_dhkey_check_common: +5618 20405a21 call check_localsm +5619 2440f2fc ncall g_noninit_192 ,true +561a 2040f30c call g_init_192 ,true +561b 20405a21 call check_localsm +561c 20608000 rtn true +561d 7008700c jam sp_stat_link_key_calc ,mem_sp_state +561e 70087201 jam sp_flag_commit ,mem_sp_flag +561f 20600000 rtn + +parse_simple_pairing_confirm: +5620 d8a00930 arg mem_sp_confirm_remote ,contw +5621 d8c000d0 arg mem_rxbuf + 1 ,contr +5622 20407d0c call memcpy16 +5623 6fe0c76c fetch 1 ,mem_ssp_mode_flag +5624 c1010000 rtneq ssp_mode_passkey_entry_flag +5625 20207068 branch master_set_mem_master_sp_flag +5626 20600000 rtn + +parse_lmp_encapsulated_payload: +5627 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +5628 c000d63d beq encapsulated_minor_type_p192 ,parse_lmp_encapsulated_payload_192 +5629 c001562b beq encapsulated_minor_type_p256 ,parse_lmp_encapsulated_payload_256 +562a 2020568e branch lmp_reject_pdu_not_allowed + +parse_lmp_encapsulated_payload_256: +562b 6fe08871 fetch 1 ,mem_master_sp_state +562c c003d62f beq sp_stat_random_send ,parse_encapsulated_payload_256_master +562d 6fe08870 fetch 1 ,mem_sp_state +562e c080d68e bne sp_stat_key_recv ,lmp_reject_pdu_not_allowed + +parse_encapsulated_payload_256_master: +562f 6fe08879 fetch 1 ,mem_sp_remote_key_recv_count +5630 1fe60a30 sub pdata ,0x30 ,contw +5631 2421568e nbranch lmp_reject_pdu_not_allowed ,positive +5632 d8a00880 arg mem_le_pubkey_remote_x_256 ,contw +5633 98a08a00 iadd contw ,contw +5634 6fe400d0 fetch 8 ,mem_rxbuf + 1 +5635 e7e40005 istore 8 ,contw +5636 6fe400d8 fetch 8 ,mem_rxbuf + 9 +5637 e7e40005 istore 8 ,contw +5638 6fe08879 fetch 1 ,mem_sp_remote_key_recv_count +5639 1fe0fe10 increase 16 ,pdata +563a 67e08879 store 1 ,mem_sp_remote_key_recv_count +563b c0a054ed bne encapsulated_len_p256 ,accept_lmp_msg +563c 2020564e branch parse_lmp_encapsulated_payload_completed + +parse_lmp_encapsulated_payload_192: +563d 6fe08871 fetch 1 ,mem_master_sp_state +563e c003d641 beq sp_stat_random_send ,parse_encapsulated_payload_192_master +563f 6fe08870 fetch 1 ,mem_sp_state +5640 c080d68e bne sp_stat_key_recv ,lmp_reject_pdu_not_allowed + +parse_encapsulated_payload_192_master: +5641 6fe08879 fetch 1 ,mem_sp_remote_key_recv_count +5642 1fe60a20 sub pdata ,0x20 ,contw +5643 2421568e nbranch lmp_reject_pdu_not_allowed ,positive +5644 d8a00888 arg mem_sp_pubkey_remote ,contw +5645 98a08a00 iadd contw ,contw +5646 6fe400d0 fetch 8 ,mem_rxbuf + 1 +5647 e7e40005 istore 8 ,contw +5648 6fe400d8 fetch 8 ,mem_rxbuf + 9 +5649 e7e40005 istore 8 ,contw +564a 6fe08879 fetch 1 ,mem_sp_remote_key_recv_count +564b 1fe0fe10 increase 16 ,pdata +564c 67e08879 store 1 ,mem_sp_remote_key_recv_count +564d c09854ed bne encapsulated_len_p192 ,accept_lmp_msg + +parse_lmp_encapsulated_payload_completed: +564e 20405a21 call check_localsm +564f 2020d4ed branch accept_lmp_msg ,true +5650 70087a01 jam sp_key_valid ,mem_sp_remote_key_invalid +5651 70087002 jam sp_stat_key_generate ,mem_sp_state +5652 70087201 jam sp_flag_commit ,mem_sp_flag +5653 202054ed branch accept_lmp_msg + +parse_lmp_accepted_encapsulated_payload: +5654 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +5655 c000d658 beq encapsulated_minor_type_p192 ,parse_lmp_accepted_encapsulated_payload_192 +5656 c001565c beq encapsulated_minor_type_p256 ,parse_lmp_accepted_encapsulated_payload_256 +5657 20600000 rtn + +parse_lmp_accepted_encapsulated_payload_192: +5658 6fe08878 fetch 1 ,mem_sp_local_key_send_count +5659 c0185660 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +565a 70007d3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +565b 20600000 rtn + +parse_lmp_accepted_encapsulated_payload_256: +565c 6fe08878 fetch 1 ,mem_sp_local_key_send_count +565d c0205660 beq encapsulated_len_p256 ,parse_lmp_encapsulated_payload_all_accepted +565e 70007d3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +565f 20600000 rtn + +parse_lmp_encapsulated_payload_all_accepted: +5660 20405a21 call check_localsm +5661 2020d669 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +5662 6fe0c76c fetch 1 ,mem_ssp_mode_flag +5663 c0015667 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +5664 70087201 jam sp_flag_commit ,mem_sp_flag +5665 70087004 jam sp_stat_commit_calc ,mem_sp_state +5666 20205393 branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted_get_passkey: +5667 70095b36 jam bt_evt_bt_get_passkey ,mem_fifo_temp +5668 20207871 branch ui_ipc_send_event + +parse_lmp_encapsulated_payload_all_accepted_master: +5669 20205393 branch parse_rx_done + +parse_lmp_simple_pairing_number: +566a 6fe08871 fetch 1 ,mem_master_sp_state +566b c003d66e beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +566c 6fe08870 fetch 1 ,mem_sp_state +566d c083568e bne sp_stat_random_recv ,lmp_reject_pdu_not_allowed + +parse_lmp_simple_pairing_number_master: +566e d8a008f0 arg mem_sp_random_remote ,contw +566f 6fe400d0 fetch 8 ,mem_rxbuf + 1 +5670 e7e40005 istore 8 ,contw +5671 6fe400d8 fetch 8 ,mem_rxbuf + 9 +5672 e7e40005 istore 8 ,contw +5673 20405a21 call check_localsm +5674 2020d678 branch parse_lmp_simple_pairing_number_master0 ,true +5675 70087007 jam sp_stat_random_send ,mem_sp_state +5676 70087201 jam sp_flag_commit ,mem_sp_flag +5677 202054ed branch accept_lmp_msg + +parse_lmp_simple_pairing_number_master0: +5678 70087104 jam sp_stat_commit_calc ,mem_master_sp_state +5679 20207068 branch master_set_mem_master_sp_flag +567a 2020568e branch lmp_reject_pdu_not_allowed + +parse_dhkey_check: +567b 6fe08871 fetch 1 ,mem_master_sp_state +567c c005d67f beq sp_stat_confirm_send ,parse_dhkey_check_master +567d 6fe08870 fetch 1 ,mem_sp_state +567e c084568e bne sp_stat_confirm_recv ,lmp_reject_pdu_not_allowed + +parse_dhkey_check_master: +567f d8a00920 arg mem_sp_check_result ,contw +5680 d8c000d0 arg mem_rxbuf + 1 ,contr +5681 20407d0c call memcpy16 +5682 20405a21 call check_localsm +5683 2020d68b branch parse_dhkey_check_master0 ,true +5684 6fe0c76c fetch 1 ,mem_ssp_mode_flag +5685 c000d690 beq ssp_mode_ssp_pin_flag ,number_comparison_mode + +number_comparison_successed: +5686 70476b00 jam 0 ,mem_flag_mode_ssp_pin +5687 70087009 jam sp_stat_confirm_check ,mem_sp_state +5688 70087201 jam sp_flag_commit ,mem_sp_flag +5689 70007e41 jam lmp_dhkey_check ,mem_lmi_opcode2 +568a 20205393 branch parse_rx_done + +parse_dhkey_check_master0: +568b 70087109 jam sp_stat_confirm_check ,mem_master_sp_state +568c 70087301 jam sp_flag_commit ,mem_master_sp_flag +568d 20205393 branch parse_rx_done + +lmp_reject_pdu_not_allowed: +568e 70007f24 jam pdu_not_allowed ,mem_lmo_reason2 +568f 202053e1 branch reject_lmp_packet + +number_comparison_mode: +5690 6fe0c76b fetch 1 ,mem_flag_mode_ssp_pin +5691 c283d695 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +5692 79207e06 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +5693 67e0c76b store 1 ,mem_flag_mode_ssp_pin +5694 20600000 rtn + +comparison_result: +5695 c2805686 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +5696 70476b00 jam 0 ,mem_flag_mode_ssp_pin +5697 2020568e branch lmp_reject_pdu_not_allowed + +parse_lmp_clkoffset_res: +5698 20205393 branch parse_rx_done + +parse_lmp_encryption_mode_req: +5699 6fe080bd fetch 1 ,mem_connection_options +569a 793ffe01 set0 connection_encrypt ,pdata +569b 67e080bd store 1 ,mem_connection_options +569c 204054ed call accept_lmp_msg +569d 24748000 nrtn master +569e 6fe080d0 fetch 1 ,mem_rxbuf + 1 +569f 6848804c fetcht 1 ,mem_op +56a0 793a0404 setflag blank ,op_stop_enc ,temp +56a1 7d3a0405 nsetflag blank ,op_start_enc ,temp +56a2 6048804c storet 1 ,mem_op +56a3 20600000 rtn + +parse_lmp_features_res: +56a4 684c00d0 fetcht 8 ,mem_rxbuf + 1 + +parse_lmp_features_res_not_hci: +56a5 6fe08056 fetch 1 ,mem_conn_sm +56a6 c1818000 rtnne conn_sm_wait_features_res +56a7 6fe080bd fetch 1 ,mem_connection_options +56a8 c30256ab bbit0 connection_feature_ext ,parse_lmp_send_conn +56a9 70005614 jam conn_sm_send_features_ext ,mem_conn_sm +56aa 20600000 rtn + +parse_lmp_send_conn: +56ab 70005604 jam conn_sm_send_conn_req ,mem_conn_sm +56ac 20600000 rtn + +parse_lmp_test_activate: +56ad 6fe080e4 fetch 1 ,mem_debug_config +56ae 67e08a5b store 1 ,mem_test_mode_old_debug_config +56af 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +56b0 70007e38 jam lmp_test_activate ,mem_lmi_opcode2 +56b1 20600000 rtn + +parse_lmp_test_control: +56b2 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +56b3 70007e39 jam lmp_test_control ,mem_lmi_opcode2 +56b4 18007209 force 9 ,loopcnt +56b5 d8c000d0 arg mem_rxbuf + 1 ,contr +56b6 d8a00a52 arg mem_temp_payload ,contw + +parse_lmp_test_xor: +56b7 efe08006 ifetch 1 ,contr +56b8 1fe2fe55 xor_into 0x55 ,pdata +56b9 e7e08005 istore 1 ,contw +56ba c20056b7 loop parse_lmp_test_xor +56bb 6fe08a52 fetch 1 ,test_mode_scenario +56bc 68488a51 fetcht 1 ,mem_tester_emulate +56bd 793f8407 set0 tester_no_whitening ,temp +56be 793f8404 set0 tester_pattern_test ,temp +56bf c07fd6cb beq exit_test_mode ,parse_lmp_test_control_exit +56c0 c00056e4 beq pause_test_mode ,parse_lmp_test_control_pause +56c1 c002d6d8 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +56c2 c003d6d7 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +56c3 c00356d8 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +56c4 c00456d7 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +56c5 c000d6d0 beq zero_pattern ,parse_lmp_test_control_pattern +56c6 c00156d0 beq one_pattern ,parse_lmp_test_control_pattern +56c7 c001d6d0 beq alt_pattern ,parse_lmp_test_control_pattern +56c8 c004d6d0 beq alt2_pattern ,parse_lmp_test_control_pattern +56c9 c00256d0 beq pseudorandom ,parse_lmp_test_control_pattern +56ca 20600000 rtn + +parse_lmp_test_control_exit: +56cb 6fe08a51 fetch 1 ,mem_tester_emulate +56cc 79207e03 set1 tester_exit ,pdata +56cd 79207e02 set1 tester_change ,pdata +56ce 67e08a51 store 1 ,mem_tester_emulate +56cf 20600000 rtn + +parse_lmp_test_control_pattern: +56d0 79200404 set1 tester_pattern_test ,temp +56d1 7000e505 jam 5 ,mem_lch_code +56d2 6fe10a59 fetch 2 ,test_mode_data_length +56d3 98007200 iforce loopcnt +56d4 67e100af store 2 ,mem_len +56d5 d8a000cf arg mem_rxbuf ,contw +56d6 20407dd3 call pn9 + +parse_lmp_test_control_loopback_nowhite: +56d7 79200407 set1 tester_no_whitening ,temp + +parse_lmp_test_control_loopback: +56d8 79200402 set1 tester_change ,temp +56d9 18007e00 force 0 ,pdata +56da 67e0800b store 1 ,mem_slave_rcvcnt +56db 67e109fa store 2 ,mem_tst_pktcnt_crc +56dc 67e109fc store 2 ,mem_tst_pktcnt_dmh +56dd 67e109f8 store 2 ,mem_tst_pktcnt_hec +56de 67e109f6 store 2 ,mem_tst_pktcnt_sync +56df 6fe08a53 fetch 1 ,test_mode_hopping_mode +56e0 2fe1fe00 compare fixed_freq ,pdata ,0xff +56e1 79208406 setflag true ,tester_fixed_freq ,temp +56e2 60488a51 storet 1 ,mem_tester_emulate +56e3 20600000 rtn + +parse_lmp_test_control_pause: +56e4 793f8011 set0 mark_testmode ,mark +56e5 700a5100 jam 0 ,mem_tester_emulate +56e6 6fe080e4 fetch 1 ,mem_debug_config +56e7 793ffe06 set0 debug_tx_pattern ,pdata +56e8 67e080e4 store 1 ,mem_debug_config +56e9 20600000 rtn + +lmp_copy_rand: +56ea d8c000d0 arg mem_rxbuf + 1 ,contr +56eb d8a00424 arg mem_random_number ,contw +56ec 20207d0c branch memcpy16 + +lmp_generate_key: +56ed 70007d09 jam lmp_comb_key ,mem_lmo_opcode2 +56ee 20600000 rtn + +lmp_start_encryption: +56ef 24748000 nrtn master +56f0 70007d11 jam lmp_start_encryption_req ,mem_lmo_opcode2 +56f1 20600000 rtn + +lmp_accept_inrand: +56f2 da2040a8 arg mem_lap ,rega +56f3 20406b0b call generate_kinit +56f4 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +56f5 70007e08 jam lmp_in_rand ,mem_lmi_opcode2 +56f6 20600000 rtn + +lmp_disconnect: +56f7 7000730a jam 10 ,mem_conn_timer +56f8 70007d07 jam lmp_detach ,mem_lmo_opcode2 +56f9 70039e16 jam local_host ,mem_disconn_reason_send +56fa 20600000 rtn + +send_lmp: +56fb 470d4023 bpatchx patch23_2 ,mem_patch23 +56fc 78547c00 disable user +56fd 204059e6 call lmo_fifo_process +56fe 6fe08049 fetch 1 ,mem_lmp_to_send +56ff 207a0000 rtn blank +5700 c283d730 bbit1 7 ,send_lmp_escape + +send_lmp0: +5701 c000d87a beq lmp_name_req ,send_lmp_name_req +5702 c00157fb beq lmp_name_res ,send_lmp_name_res +5703 c001d73c beq lmp_accepted ,send_lmp_accepted +5704 c0025752 beq lmp_not_accepted ,send_lmp_not_accepted +5705 c013d8e6 beq lmp_features_req ,send_lmp_features_req +5706 c014581f beq lmp_features_res ,send_lmp_features_res +5707 c018580b beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +5708 c012d8e1 beq lmp_version_req ,send_lmp_version_req +5709 c013581a beq lmp_version_res ,send_lmp_version_res +570a c018d8ce beq lmp_setup_complete ,send_lmp_setup_complete +570b c01bd875 beq lmp_supervision_timeout ,send_lmp_superto +570c c019d867 beq lmp_host_connection_req ,send_lmp_no_payload +570d c0045968 beq lmp_in_rand ,send_lmp_inrand +570e c004d95e beq lmp_comb_key ,send_lmp_comb_key +570f c005d973 beq lmp_au_rand ,send_lmp_aurand +5710 c0065980 beq lmp_sres ,send_lmp_sres +5711 c007d86d beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +5712 c00859b6 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +5713 c008d9ac beq lmp_start_encryption_req ,send_lmp_start_encryption +5714 c003d85d beq lmp_detach ,send_lmp_detach +5715 c0155889 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +5716 c005588a beq lmp_unit_key ,send_lmp_unit_key +5717 c00fd8c7 beq lmp_incr_power_req ,send_lmp_inc_power +5718 c0035810 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +5719 c010d86a beq lmp_max_power ,send_lmp_nopayload_reply +571a c016d8bd beq lmp_max_slot ,send_lmp_max_slot +571b c01758c2 beq lmp_max_slot_req ,send_lmp_max_slot_req +571c c011586a beq lmp_min_power ,send_lmp_nopayload_reply +571d c01a588b beq lmp_slot_offset ,send_lmp_slot_offset +571e c009d8a0 beq lmp_switch_req ,send_lmp_switch_req +571f c00bd8af beq lmp_sniff_req ,send_lmp_sniff_req +5720 c00959b3 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +5721 c017d8b5 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +5722 c00c58ba beq lmp_unsniff_req ,send_lmp_unsniff_req +5723 c01ed909 beq lmp_encapsulated_header ,send_lmp_encapsulated_header +5724 c01f5911 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +5725 c01fd92c beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +5726 c0205936 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +5727 c020d94b beq lmp_dhkey_check ,send_lmp_dhkey_check +5728 c011d95a beq lmp_auto_rate ,send_lmp_auto_rate +5729 c01dd955 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +572a c002d95b beq lmp_clkoffset_req ,send_lmp_clkoffset_req +572b c014d95c beq lmp_quality_of_service ,send_lmp_quality_of_service +572c c01c595d beq lmp_test_activate ,send_lmp_test_activate +572d c01cd880 beq lmp_test_control ,send_lmp_test_control + +send_lmp_error: +572e 2020137a branch assert +572f 20600000 rtn + +send_lmp_escape: +5730 c040d75f beq lmp_ext_accepted ,send_lmpext_accepted +5731 c041d824 beq lmp_ext_features_req ,send_lmpext_features_req +5732 c042578e beq lmp_ext_features_res ,send_lmpext_features_res +5733 c0415768 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +5734 c045d831 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +5735 c04bd859 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +5736 c04cd7ec beq lmp_io_cap_req ,send_lmp_io_cap_req +5737 c04d57bb beq lmp_io_cap_res ,send_lmpext_io_cap_res +5738 c04ad7f1 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +5739 c04b57f2 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +573a c051578b beq lmp_ping_res ,send_lmpext_ping_res +573b 2020137a branch assert + +send_lmp_accepted: +573c 18007e02 force 2 ,pdata +573d 204059bc call msg_send_lmp +573e 6fe0804a fetch 1 ,mem_lmi_opcode +573f e7e08005 istore 1 ,contw +5740 204059cb call send_lmp_follow +5741 470dc023 bpatchx patch23_3 ,mem_patch23 +5742 6fe0804a fetch 1 ,mem_lmi_opcode +5743 c0045772 beq lmp_in_rand ,send_lmp_accepted_inrand +5744 c007d776 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +5745 c0085781 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +5746 c00bd751 beq lmp_sniff_req ,send_lmp_accept_sniff_req +5747 c019d784 beq lmp_host_connection_req ,send_lmp_accepted_connection +5748 c020d78a beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +5749 c008d74b beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +574a 20600000 rtn + +send_create_conn_start_l2cap_timer_sm: +574b 6fe08056 fetch 1 ,mem_conn_sm +574c 207a0000 rtn blank +574d 7000561b jam conn_sm_wait_done ,mem_conn_sm +574e 5800000c setarg timer_enpt_waite +574f d8e00007 arg enpt_delay_timer ,queue +5750 20207d66 branch timer_init + +send_lmp_accept_sniff_req: +5751 20200ef5 branch sniff_init + +send_lmp_not_accepted: +5752 18007e03 force 3 ,pdata +5753 204059bc call msg_send_lmp +5754 6fe0804a fetch 1 ,mem_lmi_opcode +5755 c005d75a beq lmp_au_rand ,send_not_accept_aurand +5756 e7e08005 istore 1 ,contw +5757 6fe0804b fetch 1 ,mem_lmo_reason +5758 e7e08005 istore 1 ,contw +5759 202059cb branch send_lmp_follow + +send_not_accept_aurand: +575a e7e08005 istore 1 ,contw +575b 6fe0804b fetch 1 ,mem_lmo_reason +575c e7e08005 istore 1 ,contw +575d d84003a9 arg mem_sres_tid ,temp +575e 20205a07 branch special_tid_store + +send_lmpext_accepted: +575f 18000e04 force 4 ,queue +5760 204059c4 call send_lmpext +5761 5800007f setarg lmp_escape +5762 e7e08005 istore 1 ,contw +5763 6fe0804a fetch 1 ,mem_lmi_opcode +5764 793ffe07 set0 7 ,pdata +5765 e7e08005 istore 1 ,contw +5766 6fe0804a fetch 1 ,mem_lmi_opcode +5767 202059cb branch send_lmp_follow + +send_lmpext_not_accepted: +5768 18000e05 force 5 ,queue +5769 204059c4 call send_lmpext +576a 5800007f setarg lmp_escape +576b e7e08005 istore 1 ,contw +576c 6fe0804a fetch 1 ,mem_lmi_opcode +576d 793ffe07 set0 7 ,pdata +576e e7e08005 istore 1 ,contw +576f 6fe0804b fetch 1 ,mem_lmo_reason +5770 e7e08005 istore 1 ,contw +5771 202059cb branch send_lmp_follow + +send_lmp_accepted_inrand: +5772 20400c60 call clear_linkkey +5773 20405a18 call tid_check +5774 20608000 rtn true +5775 202056ed branch lmp_generate_key + +send_lmp_accepted_enc_mode: +5776 6fe0804c fetch 1 ,mem_op +5777 c282d77d bbit1 op_start_enc ,send_lmp_accepted_enc_start +5778 c4020000 rtnbit0 op_stop_enc +5779 70007d12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +577a 793ffe04 set0 op_stop_enc ,pdata +577b 20405a10 call tid_reply +577c 2020577f branch send_lmp_accepted_enc_exit + +send_lmp_accepted_enc_start: +577d 70007d10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +577e 793ffe05 set0 op_start_enc ,pdata + +send_lmp_accepted_enc_exit: +577f 67e0804c store 1 ,mem_op +5780 20600000 rtn + +send_lmp_accepted_enc_key: +5781 20405a21 call check_localsm +5782 2020d6ef branch lmp_start_encryption ,true +5783 20600000 rtn + +send_lmp_accepted_connection: +5784 70007d8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 +5785 6fe083a5 fetch 1 ,mem_lmp_conn_state +5786 79207e00 set1 received_conn_req ,pdata +5787 67e083a5 store 1 ,mem_lmp_conn_state +5788 70095b01 jam bt_evt_bb_connected ,mem_fifo_temp +5789 20207871 branch ui_ipc_send_event + +send_lmp_accept_dhkey_check: +578a 20600000 rtn + +send_lmpext_ping_res: +578b 18000e02 force 2 ,queue +578c 204059c4 call send_lmpext +578d 202059d4 branch send_lmp_reply + +send_lmpext_features_res: +578e 1fe22200 copy pdata ,rega +578f 204057a4 call check_ssp_enable +5790 6fe083a1 fetch 1 ,mem_ext_features_page +5791 c000d794 beq 1 ,send_lmpext_features_res1 +5792 c001579c beq 2 ,send_lmpext_features_res2 +5793 20600000 rtn + +send_lmpext_features_res1: +5794 1a227e00 copy rega ,pdata +5795 18000e0c force 12 ,queue +5796 204059c4 call send_lmpext +5797 58000001 setarg 0x01 +5798 e7e08005 istore 1 ,contw +5799 6fe103a2 fetch 2 ,mem_lmpext_ssp_enable +579a e7e48005 istore 9 ,contw +579b 202059d4 branch send_lmp_reply + +send_lmpext_features_res2: +579c 1a227e00 copy rega ,pdata +579d 18000e0c force 12 ,queue +579e 204059c4 call send_lmpext +579f 58000002 setarg 0x02 +57a0 e7e08005 istore 1 ,contw +57a1 58010002 setarg 0x010002 +57a2 e7e48005 istore 9 ,contw +57a3 202059d4 branch send_lmp_reply + +check_ssp_enable: +57a4 6fe0c764 fetch 1 ,mem_ssp_enable +57a5 203a57a8 branch ssp_disable ,blank +57a6 204057ae call ssp_enable +57a7 202057b5 branch check_br_sc_enable + +ssp_disable: +57a8 6fe0c0a6 fetch 1 ,mem_features + 6 +57a9 793ffe03 set0 param_featrue_ssp ,pdata +57aa 67e0c0a6 store 1 ,mem_features + 6 +57ab 58000001 setarg 0x1 +57ac 67e103a2 store 2 ,mem_lmpext_ssp_enable +57ad 20206ecc branch sp_clear_flags + +ssp_enable: +57ae 470e4023 bpatchx patch23_4 ,mem_patch23 +57af 6fe0c0a6 fetch 1 ,mem_features + 6 +57b0 79207e03 set1 param_featrue_ssp ,pdata +57b1 67e0c0a6 store 1 ,mem_features + 6 +57b2 58000101 setarg param_lmpext_ssp_enable +57b3 67e103a2 store 2 ,mem_lmpext_ssp_enable +57b4 20600000 rtn + +check_br_sc_enable: +57b5 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +57b6 c280d7b8 bbit1 secure_connections_br_bit ,br_sc_enable +57b7 20600000 rtn + +br_sc_enable: +57b8 58000902 setarg 0x0902 +57b9 67e103a2 store 2 ,mem_lmpext_ssp_enable +57ba 20600000 rtn + +send_lmpext_io_cap_res: +57bb 18000e05 force 5 ,queue +57bc 204059c4 call send_lmpext +57bd 6fe1c765 fetch 3 ,mem_lmp_io_cap_payload_iocap +57be e7e18005 istore 3 ,contw +57bf 204059d4 call send_lmp_reply +57c0 70476f01 jam flag_pairing_state_pairing ,mem_flag_pairing_state +57c1 6fe0c765 fetch 1 ,mem_lmp_io_cap_payload_iocap +57c2 c000d7cc beq io_capability_display_yesno ,responder_iocap_display_yesno +57c3 c00157c6 beq io_capability_keyboard_only ,responder_iocap_keyboard_only +57c4 c001d7d2 beq io_capability_no_input_no_output ,responder_iocap_no_input_no_output +57c5 20600000 rtn + +responder_iocap_keyboard_only: +57c6 6fe0c768 fetch 1 ,mem_sp_iocap_remote +57c7 c00057de beq io_capability_display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +57c8 c000d7de beq io_capability_display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +57c9 c00157de beq io_capability_keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +57ca c001d7d8 beq io_capability_no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +57cb 20600000 rtn + +responder_iocap_display_yesno: +57cc 6fe0c768 fetch 1 ,mem_sp_iocap_remote +57cd c00057d8 beq io_capability_display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +57ce c000d7dc beq io_capability_display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +57cf c00157de beq io_capability_keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +57d0 c001d7d8 beq io_capability_no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +57d1 20600000 rtn + +responder_iocap_no_input_no_output: +57d2 6fe0c768 fetch 1 ,mem_sp_iocap_remote +57d3 c00057d8 beq io_capability_display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +57d4 c000d7d8 beq io_capability_display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +57d5 c00157d8 beq io_capability_keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +57d6 c001d7d8 beq io_capability_no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +57d7 20600000 rtn + +responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: + +responder_iocap_display_yesno_initiator_iocap_no_input_no_output: + +responder_iocap_display_yesno_initiator_iocap_display_only: + +responder_iocap_no_input_no_output_initiator_iocap_display_only: + +responder_iocap_no_input_no_output_initiator_iocap_display_yesno: + +responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: + +responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: + +set_ssp_mode_justwork: +57d8 70476c03 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +57d9 6fe0c643 fetch 1 ,mem_classic_bt_flag +57da c28031f6 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +57db 20600000 rtn + +responder_iocap_display_yesno_initiator_iocap_display_yesno: + +set_ssp_mode_numeric_comparison: +57dc 70476c01 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +57dd 20600000 rtn + +responder_iocap_keyboard_only_initiator_iocap_display_yesno: + +responder_iocap_keyboard_only_initiator_iocap_keyboard_only: + +responder_iocap_keyboard_only_initiator_iocap_display_only: + +responder_iocap_display_yesno_initiator_iocap_keyboard_only: + +set_ssp_mode_passkey: +57de 70476c02 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +57df 20600000 rtn + +classic_bt_set_reject_justwork_flag: +57e0 d8e00000 arg flag_ssp_reject_justwork ,queue +57e1 202057e4 branch classic_bluetooth_set_flag + +classic_bt_clr_reject_justwork_flag: +57e2 d8e00000 arg flag_ssp_reject_justwork ,queue +57e3 202057e8 branch classic_bluetooth_clr_flag + +classic_bluetooth_set_flag: +57e4 6fe0c643 fetch 1 ,mem_classic_bt_flag +57e5 f9207e00 qset1 pdata +57e6 67e0c643 store 1 ,mem_classic_bt_flag +57e7 20600000 rtn + +classic_bluetooth_clr_flag: +57e8 6fe0c643 fetch 1 ,mem_classic_bt_flag +57e9 f93ffe00 qset0 pdata +57ea 67e0c643 store 1 ,mem_classic_bt_flag +57eb 20600000 rtn + +send_lmp_io_cap_req: +57ec 18000e05 force 5 ,queue +57ed 204059c4 call send_lmpext +57ee 6fe1c765 fetch 3 ,mem_lmp_io_cap_payload_iocap +57ef e7e18005 istore 3 ,contw +57f0 202059d6 branch send_lmp_request + +send_lmpext_sniff_subrating_req: +57f1 20600000 rtn + +send_lmpext_sniff_subrating_res: +57f2 18000e09 force 9 ,queue +57f3 204059c4 call send_lmpext +57f4 6fe08093 fetch 1 ,mem_subsniff_rate +57f5 e7e08005 istore 1 ,contw +57f6 6fe10094 fetch 2 ,mem_subsniff_tcmax +57f7 e7e10005 istore 2 ,contw +57f8 6fe2008f fetch 4 ,mem_subsniff_instant +57f9 e7e20005 istore 4 ,contw +57fa 202059d4 branch send_lmp_reply + +send_lmp_name_res: +57fb 18007e11 force 17 ,pdata +57fc 204059bc call msg_send_lmp +57fd 6fe0804a fetch 1 ,mem_lmi_opcode +57fe 1fe20400 copy pdata ,temp +57ff c0005803 beq 0x00 ,send_lmp_name_res_offset_ok +5800 c0075803 beq 0x0e ,send_lmp_name_res_offset_ok +5801 c00e5803 beq 0x1c ,send_lmp_name_res_offset_ok +5802 20600000 rtn + +send_lmp_name_res_offset_ok: +5803 e7e08005 istore 1 ,contw +5804 6fe0c5fc fetch 1 ,mem_local_name_length +5805 e7e08005 istore 1 ,contw +5806 df20000e arg 14 ,loopcnt +5807 580045fd setarg mem_local_name +5808 98408c00 iadd temp ,contr +5809 20407d5f call memcpy +580a 202059d4 branch send_lmp_reply + +send_lmp_timing_accuracy_res: +580b 18007e03 force 3 ,pdata +580c 204059bc call msg_send_lmp +580d 58000114 setarg 0x0114 +580e e7e10005 istore 2 ,contw +580f 202059d4 branch send_lmp_reply + +send_lmp_clkoffset_res: +5810 18007e03 force 3 ,pdata +5811 204059bc call msg_send_lmp +5812 6fe200b5 fetch 4 ,mem_clke_bt +5813 9c467e00 isub clkn_bt ,pdata +5814 2034d816 branch send_lmp_clkoffset_res_master ,master +5815 1fe67e00 sub pdata ,0 ,pdata + +send_lmp_clkoffset_res_master: +5816 1feb7e00 rshift2 pdata ,pdata +5817 793ffe0f set0 15 ,pdata +5818 e7e10005 istore 2 ,contw +5819 202059d4 branch send_lmp_reply + +send_lmp_version_res: +581a 18007e06 force 6 ,pdata +581b 204059bc call msg_send_lmp +581c 6fe2c5f7 fetch 5 ,mem_lmp_version +581d e7e28005 istore 5 ,contw +581e 202059d4 branch send_lmp_reply + +send_lmp_features_res: +581f 18007e09 force 9 ,pdata +5820 204059bc call msg_send_lmp +5821 6fe440a0 fetch 8 ,mem_features +5822 e7e40005 istore 8 ,contw +5823 202059d4 branch send_lmp_reply + +send_lmpext_features_req: +5824 204057a4 call check_ssp_enable +5825 6fe08049 fetch 1 ,mem_lmp_to_send +5826 18000e0c force 12 ,queue +5827 204059c4 call send_lmpext +5828 58000001 setarg 0x01 +5829 e7e08005 istore 1 ,contw +582a 6fe103a2 fetch 2 ,mem_lmpext_ssp_enable +582b e7e10005 istore 2 ,contw +582c 58000000 setarg 0 +582d e7e18005 istore 3 ,contw +582e 58000000 setarg 0x00 +582f e7e20005 istore 4 ,contw +5830 202059d6 branch send_lmp_request + +send_lmpext_packet_type_table_req: +5831 18000e03 force 3 ,queue +5832 204059c4 call send_lmpext +5833 6fe0c15f fetch 1 ,mem_ptt +5834 e7e08005 istore 1 ,contw +5835 78547c00 disable user +5836 204059d6 call send_lmp_request +5837 24740000 nrtn user +5838 24748000 nrtn master +5839 6fe0c0df fetch 1 ,mem_afh_cfg +583a c4000000 rtnbit0 afh_cfg_on +583b 2040583d call afh_init +583c 20205847 branch afh_open_all_channels + +afh_init: +583d 7040df03 jam 0x3 ,mem_afh_cfg +583e 58000000 setarg 0 +583f 67e24149 store 4 ,mem_afh_timer +5840 d8a040e1 arg mem_afh_map_lo ,contw +5841 2040584b call afh_reset_map +5842 d8a040ee arg mem_afh_map_new ,contw +5843 2040584b call afh_reset_map +5844 d8a0414d arg mem_afh_classify_channel_map ,contw +5845 2040584b call afh_reset_map +5846 20205852 branch afh_clear_error_counter + +afh_open_all_channels: +5847 d8a040ee arg mem_afh_map_new ,contw +5848 2040584b call afh_reset_map +5849 20405852 call afh_clear_error_counter +584a 20205855 branch afh_set_send_flag + +afh_reset_map: +584b 58ffffff setarg 0xffffff +584c e7e18005 istore 3 ,contw +584d e7e18005 istore 3 ,contw +584e e7e18005 istore 3 ,contw +584f 5800007f setarg 0x7f +5850 e7e08005 istore 1 ,contw +5851 20600000 rtn + +afh_clear_error_counter: +5852 58000000 setarg 0 +5853 67e140dd store 2 ,mem_afh_error_total +5854 20600000 rtn + +afh_set_send_flag: +5855 6fe0c0df fetch 1 ,mem_afh_cfg +5856 79207e02 set1 send_lmp_set_afh ,pdata +5857 67e0c0df store 1 ,mem_afh_cfg +5858 20600000 rtn + +send_lmpext_pause_encryption_req: +5859 18000e02 force 2 ,queue +585a 204059c4 call send_lmpext +585b 2434d9d4 nbranch send_lmp_reply ,master +585c 202059d6 branch send_lmp_request + +send_lmp_detach: +585d 18007e02 force 2 ,pdata +585e 204059bc call msg_send_lmp +585f 6fe0839e fetch 1 ,mem_disconn_reason_send +5860 e7e08005 istore 1 ,contw +5861 204059d6 call send_lmp_request + +prepare_disconnect: +5862 6fe0804c fetch 1 ,mem_op +5863 79207e03 set1 op_disconn ,pdata +5864 67e0804c store 1 ,mem_op +5865 70007332 jam 50 ,mem_conn_timer +5866 20600000 rtn + +send_lmp_no_payload: +5867 18007e01 force 1 ,pdata +5868 204059bc call msg_send_lmp +5869 202059d6 branch send_lmp_request + +send_lmp_nopayload_reply: +586a 18007e01 force 1 ,pdata +586b 204059bc call msg_send_lmp +586c 202059d4 branch send_lmp_reply + +send_lmp_encryption_mode_req: +586d 18007e02 force 2 ,pdata +586e 204059bc call msg_send_lmp +586f 6fe0804d fetch 1 ,mem_state_map +5870 2fec0002 isolate0 smap_encryption ,pdata +5871 7920fe00 setflag true ,0 ,pdata +5872 1fe17e01 and_into 1 ,pdata +5873 e7e08005 istore 1 ,contw +5874 202059d6 branch send_lmp_request + +send_lmp_superto: +5875 18007e03 force 3 ,pdata +5876 204059bc call msg_send_lmp +5877 6fe10052 fetch 2 ,mem_supervision_to +5878 e7e10005 istore 2 ,contw +5879 202059d6 branch send_lmp_request + +send_lmp_name_req: +587a 700073fa jam 250 ,mem_conn_timer +587b 18007e02 force 2 ,pdata +587c 204059bc call msg_send_lmp +587d 6fe08054 fetch 1 ,mem_name_offset +587e e7e08005 istore 1 ,contw +587f 202059d6 branch send_lmp_request + +send_lmp_test_control: +5880 18007e0a force 10 ,pdata +5881 204059bc call msg_send_lmp +5882 d8c00a52 arg mem_temp_payload ,contr +5883 18007209 force 9 ,loopcnt + +send_lmp_test_control_loop: +5884 efe08006 ifetch 1 ,contr +5885 1fe2fe55 xor_into 0x55 ,pdata +5886 e7e08005 istore 1 ,contw +5887 c2005884 loop send_lmp_test_control_loop +5888 202059d6 branch send_lmp_request + +send_lmp_quality_of_service_req: +5889 202059d6 branch send_lmp_request + +send_lmp_unit_key: +588a 202059d6 branch send_lmp_request + +send_lmp_slot_offset: +588b 20748000 rtn master +588c 2040104e call calc_slot_offset +588d 18007e09 force 9 ,pdata +588e 204059bc call msg_send_lmp +588f 6fe100c1 fetch 2 ,mem_slot_offset +5890 e7e10005 istore 2 ,contw +5891 6fe1c0a8 fetch 3 ,mem_lap +5892 e7e18005 istore 3 ,contw +5893 6fe0c0ab fetch 1 ,mem_uap +5894 e7e08005 istore 1 ,contw +5895 6fe140ac fetch 2 ,mem_nap +5896 e7e10005 istore 2 ,contw +5897 c581d89c bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +5898 793f8003 set0 mark_switch_initiated ,mark +5899 204059d6 call send_lmp_request +589a 70007d13 jam lmp_switch_req ,mem_lmo_opcode2 +589b 20600000 rtn + +send_lmp_slot_offset_reply: +589c 204059d4 call send_lmp_reply +589d 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +589e 70007e13 jam lmp_switch_req ,mem_lmi_opcode2 +589f 20600000 rtn + +send_lmp_switch_req: +58a0 d8400200 arg 0x200 ,temp +58a1 2034d8a4 branch switch_on_native ,master +58a2 1d027e00 deposit clke_bt +58a3 202058a5 branch switch_slack + +switch_on_native: +58a4 1c427e00 deposit clkn_bt + +switch_slack: +58a5 1c227e00 deposit bt_clk +58a6 9840fe00 iadd temp ,pdata +58a7 1fe17ffc and_into 0x1fc ,pdata +58a8 67e20035 store 4 ,mem_sniff_anchor +58a9 18007e05 force 5 ,pdata +58aa 204059bc call msg_send_lmp +58ab 6fe20035 fetch 4 ,mem_sniff_anchor +58ac 1fe37e00 rshift pdata ,pdata +58ad e7e20005 istore 4 ,contw +58ae 202059d6 branch send_lmp_request + +send_lmp_sniff_req: +58af 18007e0a force 10 ,pdata +58b0 204059bc call msg_send_lmp +58b1 d8c003ac arg mem_sniff_payload ,contr +58b2 efe48006 ifetch 9 ,contr +58b3 e7e48005 istore 9 ,contw +58b4 202059d6 branch send_lmp_request + +send_lmp_timing_accuracy_req: +58b5 18007e03 force 3 ,pdata +58b6 204059bc call msg_send_lmp +58b7 58000114 setarg 0x0114 +58b8 e7e10005 istore 2 ,contw +58b9 202059d6 branch send_lmp_request + +send_lmp_unsniff_req: +58ba 18007e01 force 1 ,pdata +58bb 204059bc call msg_send_lmp +58bc 202059d6 branch send_lmp_request + +send_lmp_max_slot: +58bd 18007e02 force 2 ,pdata +58be 204059bc call msg_send_lmp +58bf 6fe0c0d7 fetch 1 ,mem_max_slot +58c0 e7e08005 istore 1 ,contw +58c1 202059d6 branch send_lmp_request + +send_lmp_max_slot_req: +58c2 18007e02 force 2 ,pdata +58c3 204059bc call msg_send_lmp +58c4 58000005 setarg 0x05 +58c5 e7e08005 istore 1 ,contw +58c6 202059d6 branch send_lmp_request + +send_lmp_inc_power: +58c7 18007e02 force 2 ,pdata +58c8 204059bc call msg_send_lmp +58c9 58000000 setarg 0x00 +58ca e7e08005 istore 1 ,contw +58cb 202059d6 branch send_lmp_request + +send_lmp_setup_complete_by_module: +58cc 70007d2e jam lmp_max_slot_req ,mem_lmo_opcode2 +58cd 20600000 rtn + +send_lmp_setup_complete: +58ce 6fe0c09a fetch 1 ,mem_device_option +58cf 1fe67c0a sub pdata ,dvc_op_module ,null +58d0 2042d8cc call send_lmp_setup_complete_by_module ,zero +58d1 6fe08031 fetch 1 ,mem_state +58d2 79207e04 set1 state_conn_comp ,pdata +58d3 67e08031 store 1 ,mem_state +58d4 1c427e00 copy clkn_bt ,pdata +58d5 67e203bc store 4 ,mem_aurand_send_delay_time +58d6 6fe083a5 fetch 1 ,mem_lmp_conn_state +58d7 c281d8df bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +58d8 79207e03 set1 sent_setup_complete ,pdata +58d9 67e083a5 store 1 ,mem_lmp_conn_state +58da 70095b05 jam bt_evt_setup_complete ,mem_fifo_temp +58db 20407871 call ui_ipc_send_event +58dc 18007e01 force 1 ,pdata +58dd 204059bc call msg_send_lmp +58de 202059d6 branch send_lmp_request + +send_lmp_setup_complete_has_sent: +58df 70004900 jam 0 ,mem_lmp_to_send +58e0 20600000 rtn + +send_lmp_version_req: +58e1 18007e06 force 6 ,pdata +58e2 204059bc call msg_send_lmp +58e3 6fe2c5f7 fetch 5 ,mem_lmp_version +58e4 e7e28005 istore 5 ,contw +58e5 202059d6 branch send_lmp_request + +send_lmp_features_req: +58e6 18007e09 force 9 ,pdata +58e7 204059bc call msg_send_lmp +58e8 6fe440a0 fetch 8 ,mem_features +58e9 e7e40005 istore 8 ,contw +58ea 202059d6 branch send_lmp_request + +sp_master_send_io_cap_get: +58eb 70087301 jam sp_flag_commit ,mem_master_sp_flag +58ec 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +58ed c1808000 rtnne sp_key_valid +58ee 70087113 jam sp_master_stat_start_done ,mem_master_sp_state +58ef 20600000 rtn + +sp_master_send_io_cap_send: +58f0 20405a14 call tid_initiate +58f1 70007d99 jam lmp_io_cap_req ,mem_lmo_opcode2 +58f2 70087103 jam sp_stat_key_send ,mem_master_sp_state +58f3 20600000 rtn + +sp_master_send_lmp_encapsulated_header: +58f4 20405a14 call tid_initiate +58f5 70007d3d jam lmp_encapsulated_header ,mem_lmo_opcode2 +58f6 70087107 jam sp_stat_random_send ,mem_master_sp_state +58f7 20600000 rtn + +sp_master_commitment_compare: +58f8 da200910 arg mem_sp_calc_result_high ,rega +58f9 da400930 arg mem_sp_confirm_remote ,regb +58fa df200010 arg 16 ,loopcnt +58fb 20407df1 call string_compare +58fc 2022d901 branch sp_master_commitment_compare_success ,zero +58fd 70087100 jam sp_stat_null ,mem_master_sp_state +58fe 2040706a call master_clear_mem_master_sp_flag +58ff 70007e40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +5900 2020568e branch lmp_reject_pdu_not_allowed + +sp_master_commitment_compare_success: +5901 7008710a jam sp_stat_confirm_calc ,mem_master_sp_state +5902 20407068 call master_set_mem_master_sp_flag +5903 70007e40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +5904 202054ed branch accept_lmp_msg + +sp_master_send_lmp_simple_pairing_number: +5905 70007d40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +5906 20600000 rtn + +sp_send_lmp_encapsulated_header: +5907 70007d3d jam lmp_encapsulated_header ,mem_lmo_opcode2 +5908 20600000 rtn + +send_lmp_encapsulated_header: +5909 70087800 jam 0 ,mem_sp_local_key_send_count +590a 18007e04 force 4 ,pdata +590b 204059bc call msg_send_lmp +590c 6fe1c644 fetch 3 ,mem_encapsulated_major_type +590d e7e18005 istore 3 ,contw +590e 20405a21 call check_localsm +590f 2020d9d6 branch send_lmp_request ,true +5910 202059d4 branch send_lmp_reply + +send_lmp_encapsulated_payload: +5911 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +5912 c0015915 beq encapsulated_minor_type_p256 ,send_lmp_encapsulated_payload_256 +5913 c000d91a beq encapsulated_minor_type_p192 ,send_lmp_encapsulated_payload_192 +5914 20600000 rtn + +send_lmp_encapsulated_payload_256: +5915 18007e11 force 17 ,pdata +5916 204059bc call msg_send_lmp +5917 6fe08878 fetch 1 ,mem_sp_local_key_send_count +5918 d8c046dc arg mem_sc_pubkey_local_x_256 ,contr +5919 2020591e branch send_lmp_encapsulated_payload_common + +send_lmp_encapsulated_payload_192: +591a 18007e11 force 17 ,pdata +591b 204059bc call msg_send_lmp +591c 6fe08878 fetch 1 ,mem_sp_local_key_send_count +591d d8c04734 arg mem_sp_pubkey_local ,contr + +send_lmp_encapsulated_payload_common: +591e 98c08c00 iadd contr ,contr +591f efe40006 ifetch 8 ,contr +5920 e7e40005 istore 8 ,contw +5921 efe40006 ifetch 8 ,contr +5922 e7e40005 istore 8 ,contw +5923 6fe08878 fetch 1 ,mem_sp_local_key_send_count +5924 1fe0fe10 increase 16 ,pdata +5925 67e08878 store 1 ,mem_sp_local_key_send_count +5926 20405a21 call check_localsm +5927 2020d9d6 branch send_lmp_request ,true +5928 202059d4 branch send_lmp_reply + +sp_send_lmp_simple_pairing_comfirm: +5929 70087006 jam sp_stat_random_recv ,mem_sp_state +592a 70007d3f jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +592b 20600000 rtn + +send_lmp_simple_pairing_comfirm: +592c 18007e11 force 17 ,pdata +592d 204059bc call msg_send_lmp +592e d8c00910 arg mem_sp_calc_result_high ,contr +592f efe40006 ifetch 8 ,contr +5930 e7e40005 istore 8 ,contw +5931 efe40006 ifetch 8 ,contr +5932 e7e40005 istore 8 ,contw +5933 202059d4 branch send_lmp_reply + +sp_send_lmp_simple_pairing_number: +5934 70007d40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +5935 20600000 rtn + +send_lmp_simple_pairing_number: +5936 20405a21 call check_localsm +5937 2040ef7e call sp_local_random_key_generator ,true +5938 18007e11 force 17 ,pdata +5939 204059bc call msg_send_lmp +593a d8c008e0 arg mem_sp_random_local ,contr +593b efe40006 ifetch 8 ,contr +593c e7e40005 istore 8 ,contw +593d efe40006 ifetch 8 ,contr +593e e7e40005 istore 8 ,contw +593f 20405a21 call check_localsm +5940 2420d9d4 nbranch send_lmp_reply ,true +5941 2020d9d6 branch send_lmp_request ,true + +master_sp_sm_end: +5942 7008710f jam sp_stat_done ,mem_master_sp_state + +sp_aurand_send: +5943 20405a14 call tid_initiate +5944 70007d0b jam lmp_au_rand ,mem_lmo_opcode2 +5945 20405a2c call check_localsm_master +5946 2020efcc branch sp_master_key_prarm_push ,true +5947 20206fd6 branch sp_link_key_prarm_push + +master_sp_send_lmp_dhkey_check: +5948 20405a10 call tid_reply + +sp_send_lmp_dhkey_check: +5949 70007d41 jam lmp_dhkey_check ,mem_lmo_opcode2 +594a 20600000 rtn + +send_lmp_dhkey_check: +594b 18007e11 force 17 ,pdata +594c 204059bc call msg_send_lmp +594d d8c00910 arg mem_sp_calc_result_high ,contr +594e efe40006 ifetch 8 ,contr +594f e7e40005 istore 8 ,contw +5950 efe40006 ifetch 8 ,contr +5951 e7e40005 istore 8 ,contw +5952 20405a21 call check_localsm +5953 2420d9d4 nbranch send_lmp_reply ,true +5954 2020d9d6 branch send_lmp_request ,true + +send_lmp_enc_key_size_mask_res: +5955 18007e03 force 3 ,pdata +5956 204059bc call msg_send_lmp +5957 5800fffe setarg 0xfffe +5958 e7e10005 istore 2 ,contw +5959 202059d4 branch send_lmp_reply + +send_lmp_auto_rate: +595a 202059d6 branch send_lmp_request + +send_lmp_clkoffset_req: +595b 202059d6 branch send_lmp_request + +send_lmp_quality_of_service: +595c 202059d6 branch send_lmp_request + +send_lmp_test_activate: +595d 202059d6 branch send_lmp_request + +send_lmp_comb_key: +595e 20405a30 call generate_random_number +595f da2040a8 arg mem_lap ,rega +5960 20405a36 call generate_linkkey +5961 18007e11 force 17 ,pdata +5962 204059bc call msg_send_lmp +5963 da200444 arg mem_kinit ,rega +5964 da400424 arg mem_random_number ,regb +5965 20406c08 call xor16 +5966 2434d9cb nbranch send_lmp_follow ,master +5967 202059d1 branch send_lmp_tid + +send_lmp_inrand: +5968 20405a30 call generate_random_number +5969 da200041 arg mem_plap ,rega +596a 20406b0b call generate_kinit + +send_lmp_rand: +596b 18007e11 force 17 ,pdata +596c 204059bc call msg_send_lmp +596d d8c00424 arg mem_random_number ,contr +596e 20407d0c call memcpy16 +596f 6fe08056 fetch 1 ,mem_conn_sm +5970 c00cd9d6 beq conn_sm_auth_wait ,send_lmp_request +5971 c00c59d6 beq conn_sm_pairing_wait ,send_lmp_request +5972 202059d1 branch send_lmp_tid + +send_lmp_aurand: +5973 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +5974 c001597e beq encapsulated_minor_type_p256 ,send_lmp_aurand_256 +5975 6fe08877 fetch 1 ,mem_pairing_auth +5976 203a597b branch send_lmp_aurand_notpairing ,blank + +send_lmp_aurand2: +5977 20405a21 call check_localsm +5978 2040da14 call tid_initiate ,true +5979 2440da10 ncall tid_reply ,true +597a 2020597c branch send_lmp_aurand_common + +send_lmp_aurand_notpairing: +597b 20405a14 call tid_initiate + +send_lmp_aurand_common: +597c 20405a30 call generate_random_number +597d 2020596b branch send_lmp_rand + +send_lmp_aurand_256: +597e 70007d0c jam lmp_sres ,mem_lmo_opcode2 +597f 20205977 branch send_lmp_aurand2 + +send_lmp_sres: +5980 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +5981 c001599a beq encapsulated_minor_type_p256 ,send_lmp_sres_256 +5982 da2040a8 arg mem_lap ,rega +5983 20406b3e call function_e1 +5984 18007e05 force 5 ,pdata +5985 204059bc call msg_send_lmp +5986 6fe20454 fetch 4 ,mem_input_store +5987 e7e20005 istore 4 ,contw +5988 d84003a9 arg mem_sres_tid ,temp +5989 20405a07 call special_tid_store +598a 20406c3c call copy_aco +598b 20405a21 call check_localsm +598c 2020d991 branch send_lmp_sres_master ,true +598d 7003ab01 jam done_encryp ,mem_wait_encryption +598e 6fe08877 fetch 1 ,mem_pairing_auth +598f 207a0000 rtn blank +5990 70007d0b jam lmp_au_rand ,mem_lmo_opcode2 + +send_lmp_sres_master: +5991 6fe0c1ca fetch 1 ,mem_link_key_exists +5992 207a0000 rtn blank + +send_lmp_sres_startenc: +5993 20405a21 call check_localsm +5994 2420d996 nbranch send_lmp_sres_startenc_slave ,true +5995 20600000 rtn + +send_lmp_sres_startenc_slave: +5996 c6908000 rtnmark0 mark_slave_in_rand_accepted +5997 793f8021 set0 mark_slave_in_rand_accepted ,mark +5998 70007d0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +5999 20600000 rtn + +send_lmp_sres_256: +599a 204074f4 call function_h4 +599b 20407519 call function_h5 +599c 18007e05 force 5 ,pdata +599d 204059bc call msg_send_lmp +599e 6fe20918 fetch 4 ,memb +599f e7e20005 istore 4 ,contw +59a0 d84003a9 arg mem_sres_tid ,temp +59a1 20405a07 call special_tid_store +59a2 204059a9 call copy_aco_256 +59a3 20405a21 call check_localsm +59a4 2020d991 branch send_lmp_sres_master ,true +59a5 7003ab01 jam done_encryp ,mem_wait_encryption +59a6 6fe08877 fetch 1 ,mem_pairing_auth +59a7 207a0000 rtn blank +59a8 20205991 branch send_lmp_sres_master + +copy_aco_256: +59a9 6fe40910 fetch 8 ,mem_sp_calc_result_high +59aa 67e446aa store 8 ,mem_ccm_iv +59ab 20600000 rtn + +send_lmp_start_encryption: +59ac 20405a30 call generate_random_number +59ad 20406b41 call function_e3 +59ae 18007e11 force 17 ,pdata +59af 204059bc call msg_send_lmp +59b0 d8c00424 arg mem_random_number ,contr +59b1 20407d0c call memcpy16 +59b2 202059d1 branch send_lmp_tid + +send_lmp_stop_encryption_req: +59b3 18007e01 force 1 ,pdata +59b4 204059bc call msg_send_lmp +59b5 202059d1 branch send_lmp_tid + +send_lmp_encryption_key_size_req: +59b6 18007e02 force 2 ,pdata +59b7 204059bc call msg_send_lmp +59b8 18007e10 force 16 ,pdata +59b9 e7e08005 istore 1 ,contw +59ba 67e08055 store 1 ,mem_key_size +59bb 202059d1 branch send_lmp_tid + +msg_send_lmp: +59bc 1fe9fe00 lshift3 pdata ,pdata +59bd 1fe1fe07 or_into 0x07 ,pdata +59be 67e0838a store 1 ,mem_lmo_header_length +59bf df200011 arg 17 ,loopcnt +59c0 d8a0038c arg mem_lmo_payload ,contw +59c1 20407d26 call clear_mem +59c2 d8a0038c arg mem_lmo_payload ,contw +59c3 20600000 rtn + +send_lmpext: +59c4 1fe1227f and pdata ,0x7f ,rega +59c5 7000497f jam lmp_escape ,mem_lmp_to_send +59c6 18e27e00 deposit queue +59c7 204059bc call msg_send_lmp +59c8 1a227e00 deposit rega +59c9 e7e08005 istore 1 ,contw +59ca 20600000 rtn + +send_lmp_follow: +59cb 6fe08049 fetch 1 ,mem_lmp_to_send +59cc 1fe3fe00 lshift pdata ,pdata +59cd 6848804d fetcht 1 ,mem_state_map +59ce 284ffe01 isolate1 smap_lmptid ,temp +59cf 7920fe00 setflag true ,0 ,pdata +59d0 202059db branch send_lmp_exit + +send_lmp_tid: +59d1 6848804d fetcht 1 ,mem_state_map +59d2 18410401 and_into 1 ,temp +59d3 202059d7 branch send_lmp_end + +send_lmp_reply: +59d4 18000400 force 0 ,temp +59d5 202059d7 branch send_lmp_end + +send_lmp_request: +59d6 18000401 force 1 ,temp + +send_lmp_end: +59d7 6fe08049 fetch 1 ,mem_lmp_to_send +59d8 1fe3fe00 lshift pdata ,pdata +59d9 7934fe00 setflag master ,0 ,pdata +59da 9842fe00 ixor temp ,pdata + +send_lmp_exit: +59db 67e0838b store 1 ,mem_lmo_header_opcode +59dc 67e0c5f6 store 1 ,mem_lmo_header_opcode_x +59dd 70004900 jam 0 ,mem_lmp_to_send +59de 204059ec call lmo_fifo_process_lmo0empty +59df 78347c00 enable user +59e0 20600000 rtn + +lmo_fifo_check: +59e1 6fe0807d fetch 1 ,mem_lmo_opcode2 +59e2 207a0000 rtn blank +59e3 204059e6 call lmo_fifo_process +59e4 6fe0807d fetch 1 ,mem_lmo_opcode2 +59e5 20600000 rtn + +lmo_fifo_process: +59e6 470ec023 bpatchx patch23_5 ,mem_patch23 +59e7 6fe08049 fetch 1 ,mem_lmp_to_send +59e8 203a59ec branch lmo_fifo_process_lmo0empty ,blank +59e9 6fe08079 fetch 1 ,mem_lmo_opcode1 +59ea 247a0000 nrtn blank +59eb 202059f6 branch lmo_fifo_process_lmo2to1 + +lmo_fifo_process_lmo0empty: +59ec 6fe08079 fetch 1 ,mem_lmo_opcode1 +59ed 203a59fc branch lmo_fifo_process_lmo1_empty ,blank +59ee 6fe18079 fetch 3 ,mem_lmo_opcode1 +59ef 67e18049 store 3 ,mem_lmp_to_send +59f0 6848807c fetcht 1 ,mem_lmo_tid1 +59f1 6fe0804d fetch 1 ,mem_state_map +59f2 793ffe01 set0 smap_lmptid ,pdata +59f3 9841fe00 ior temp ,pdata +59f4 67e0804d store 1 ,mem_state_map +59f5 70007900 jam 0 ,mem_lmo_opcode1 + +lmo_fifo_process_lmo2to1: +59f6 6fe0807d fetch 1 ,mem_lmo_opcode2 +59f7 207a0000 rtn blank +59f8 6fe2007d fetch 4 ,mem_lmo_opcode2 +59f9 67e20079 store 4 ,mem_lmo_opcode1 +59fa 70007d00 jam 0 ,mem_lmo_opcode2 +59fb 20600000 rtn + +lmo_fifo_process_lmo1_empty: +59fc 6fe0807d fetch 1 ,mem_lmo_opcode2 +59fd 207a0000 rtn blank +59fe 6fe1807d fetch 3 ,mem_lmo_opcode2 +59ff 67e18049 store 3 ,mem_lmp_to_send +5a00 68488080 fetcht 1 ,mem_lmo_tid2 +5a01 6fe0804d fetch 1 ,mem_state_map +5a02 793ffe01 set0 smap_lmptid ,pdata +5a03 9841fe00 ior temp ,pdata +5a04 67e0804d store 1 ,mem_state_map +5a05 70007d00 jam 0 ,mem_lmo_opcode2 +5a06 20600000 rtn + +special_tid_store: +5a07 470f4023 bpatchx patch23_6 ,mem_patch23 +5a08 6fe0804d fetch 1 ,mem_state_map +5a09 1fe22600 copy pdata ,regc +5a0a efe08002 ifetch 1 ,temp +5a0b 20405509 call pop_tid_follow +5a0c 204059cb call send_lmp_follow +5a0d 1a627e00 copy regc ,pdata +5a0e 67e0804d store 1 ,mem_state_map +5a0f 20600000 rtn + +tid_reply: +5a10 6848804d fetcht 1 ,mem_state_map +5a11 793f8400 set0 smap_lmptidinit ,temp +5a12 6048804d storet 1 ,mem_state_map +5a13 20600000 rtn + +tid_initiate: +5a14 6848804d fetcht 1 ,mem_state_map +5a15 79200400 set1 smap_lmptidinit ,temp +5a16 6048804d storet 1 ,mem_state_map +5a17 20600000 rtn + +tid_check: +5a18 7d34fe01 nsetflag master ,smap_lmptid ,pdata +5a19 6848804d fetcht 1 ,mem_state_map +5a1a 9842fe00 ixor temp ,pdata +5a1b 2feffe01 isolate1 smap_lmptid ,pdata +5a1c 20600000 rtn + +tid_set_reply: +5a1d 6fe0804d fetch 1 ,mem_state_map +5a1e 7934fe01 setflag master ,smap_lmptid ,pdata +5a1f 67e0804d store 1 ,mem_state_map +5a20 20600000 rtn + +check_localsm: +5a21 6fe08876 fetch 1 ,mem_sp_localsm +5a22 2fe0fe01 compare local_statemachine ,pdata ,0x7f +5a23 20600000 rtn + +setlocalsm_master: +5a24 6fe08876 fetch 1 ,mem_sp_localsm +5a25 79207e07 set1 7 ,pdata +5a26 67e08876 store 1 ,mem_sp_localsm +5a27 20600000 rtn + +setlocalsm_slave: +5a28 6fe08876 fetch 1 ,mem_sp_localsm +5a29 793ffe07 set0 7 ,pdata +5a2a 67e08876 store 1 ,mem_sp_localsm +5a2b 20600000 rtn + +check_localsm_master: +5a2c 6fe08876 fetch 1 ,mem_sp_localsm +5a2d 2feffe07 isolate1 7 ,pdata +5a2e 67e08876 store 1 ,mem_sp_localsm +5a2f 20600000 rtn + +generate_random_number: +5a30 d8a00424 arg mem_random_number ,contw + +generate_random: +5a31 18007210 force 16 ,loopcnt + +generate_random_another: + +generate_random_loop: +5a32 180a7e00 random pdata +5a33 e7e08005 istore 1 ,contw +5a34 c2005a32 loop generate_random_another +5a35 20600000 rtn + +generate_linkkey: +5a36 20406b0f call function_e21 +5a37 da2041cb arg mem_link_key ,rega +5a38 da400454 arg mem_input_store ,regb +5a39 efe40011 ifetch 8 ,rega +5a3a 68488031 fetcht 1 ,mem_state +5a3b 7d3a0406 nsetflag blank ,state_combkey ,temp +5a3c 60488031 storet 1 ,mem_state +5a3d 1a220a00 copy rega ,contw +5a3e 20406c08 call xor16 +5a3f 202009c8 branch generate_linkkey_continue + +process_conn_sm: +5a40 470fc023 bpatchx patch23_7 ,mem_patch23 +5a41 204059e1 call lmo_fifo_check +5a42 247a0000 nrtn blank + +process_conn_sm_continue: +5a43 6fe08056 fetch 1 ,mem_conn_sm +5a44 207a0000 rtn blank +5a45 c0025a94 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +5a46 c002da9a beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +5a47 c0015a8b beq conn_sm_send_features ,host_create_conn_send_features +5a48 c001daa2 beq conn_sm_wait_features_res ,host_create_conn_waiting +5a49 c0075a8e beq conn_sm_send_switch ,host_create_conn_send_switch +5a4a c0035abe beq conn_sm_auth_pair ,host_create_conn_auth_pair +5a4b c003dad6 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +5a4c c004dad7 beq conn_sm_encrypt ,host_create_conn_encrypt +5a4d c0055ae0 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +5a4e c005dae4 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +5a4f c0065aac beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +5a50 c006daaf beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +5a51 c007dab5 beq conn_sm_detach_delay ,host_create_conn_master_detach +5a52 c0095a7e beq conn_sm_send_version ,host_create_conn_send_version +5a53 c009daa2 beq conn_sm_wait_version ,host_create_conn_waiting +5a54 c0085a81 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +5a55 c00a5a7b beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +5a56 c00adaa2 beq conn_sm_wait_features_ext ,host_create_conn_waiting +5a57 c00b5a75 beq conn_sm_pairing ,host_create_conn_pairing +5a58 c00c5a7a beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +5a59 c00bda6e beq conn_sm_auth ,host_create_conn_auth +5a5a c00cda74 beq conn_sm_auth_wait ,host_create_conn_auth_wait +5a5b c00d5a5f beq conn_sm_done ,host_create_conn_done +5a5c c00dda69 beq conn_sm_wait_done ,host_create_conn_done_wait +5a5d 70005600 jam conn_sm_standby ,mem_conn_sm +5a5e 20600000 rtn + +host_create_conn_done: +5a5f 6fe083a5 fetch 1 ,mem_lmp_conn_state +5a60 c4010000 rtnbit0 received_setup_complete +5a61 c4018000 rtnbit0 sent_setup_complete +5a62 70005600 jam conn_sm_standby ,mem_conn_sm +5a63 20405a65 call host_conn_judge_encrypt +5a64 202065a5 branch scheduler_start_upper_sm + +host_conn_judge_encrypt: +5a65 6fe080bd fetch 1 ,mem_connection_options +5a66 c4008000 rtnbit0 connection_encrypt +5a67 7000560a jam conn_sm_encrypt_wait ,mem_conn_sm +5a68 20600000 rtn + +host_create_conn_done_wait: +5a69 d8e00007 arg enpt_delay_timer ,queue +5a6a 20407d74 call timer_check +5a6b 247a0000 nrtn blank +5a6c 7000561a jam conn_sm_done ,mem_conn_sm +5a6d 20600000 rtn + +host_create_conn_auth: +5a6e 6fe080bd fetch 1 ,mem_connection_options +5a6f 793ffe00 set0 connection_auth ,pdata +5a70 67e080bd store 1 ,mem_connection_options +5a71 70005619 jam conn_sm_auth_wait ,mem_conn_sm +5a72 70007d0b jam lmp_au_rand ,mem_lmo_opcode2 +5a73 20600000 rtn + +host_create_conn_auth_wait: +5a74 20600000 rtn + +host_create_conn_pairing: +5a75 6fe083a8 fetch 1 ,mem_pincode_state +5a76 c1810000 rtnne pincode_state_pincode_ready +5a77 20405ae6 call host_auth +5a78 70005618 jam conn_sm_pairing_wait ,mem_conn_sm +5a79 20600000 rtn + +host_create_conn_pairing_wait: +5a7a 20600000 rtn + +host_creat_conn_send_feat_ext: +5a7b 70005615 jam conn_sm_wait_features_ext ,mem_conn_sm +5a7c 70007d83 jam lmp_ext_features_req ,mem_lmo_opcode2 +5a7d 20600000 rtn + +host_create_conn_send_version: +5a7e 70005613 jam conn_sm_wait_version ,mem_conn_sm +5a7f 70007d25 jam lmp_version_req ,mem_lmo_opcode2 +5a80 20600000 rtn + +host_creat_conn_wait_switch: +5a81 6fe0c642 fetch 1 ,mem_switch_flag +5a82 c1000000 rtneq switch_flag_init +5a83 c000da89 beq switch_flag_accept ,host_create_conn_switch_accept +5a84 d8e00006 arg switch_wait_timer ,queue +5a85 20407d74 call timer_check +5a86 247a0000 nrtn blank +5a87 70464200 jam switch_flag_init ,mem_switch_flag +5a88 20205aa3 branch host_create_conn_switch + +host_create_conn_switch_accept: +5a89 20748000 rtn master +5a8a 20205abe branch host_create_conn_auth_pair + +host_create_conn_send_features: +5a8b 70005603 jam conn_sm_wait_features_res ,mem_conn_sm +5a8c 70007d27 jam lmp_features_req ,mem_lmo_opcode2 +5a8d 20600000 rtn + +host_create_conn_send_switch: +5a8e 70007d13 jam lmp_switch_req ,mem_lmo_opcode2 +5a8f 79200003 set1 mark_switch_initiated ,mark +5a90 70005605 jam conn_sm_wait_conn_accept ,mem_conn_sm +5a91 580001ff setarg 0x1ff +5a92 67e103a6 store 2 ,mem_soft_timer +5a93 20600000 rtn + +host_create_conn_send_conn_req: +5a94 70005605 jam conn_sm_wait_conn_accept ,mem_conn_sm +5a95 580000ff setarg 0xff +5a96 67e103a6 store 2 ,mem_soft_timer +5a97 793f8022 set0 mark_reconn_recieve_switch ,mark +5a98 70007d33 jam lmp_host_connection_req ,mem_lmo_opcode2 +5a99 20205390 branch init_lmp_reinit + +host_create_conn_wait_accept: +5a9a c6110000 rtnmark1 mark_reconn_recieve_switch +5a9b 6fe103a6 fetch 2 ,mem_soft_timer +5a9c 1fe0ffff increase -1 ,pdata +5a9d 2022daa0 branch host_create_conn_resend ,zero +5a9e 67e103a6 store 2 ,mem_soft_timer +5a9f 20600000 rtn + +host_create_conn_resend: +5aa0 7000560e jam conn_sm_send_switch ,mem_conn_sm +5aa1 20600000 rtn + +host_create_conn_waiting: +5aa2 20600000 rtn + +host_create_conn_switch: +5aa3 6fe083a5 fetch 1 ,mem_lmp_conn_state +5aa4 c4018000 rtnbit0 sent_setup_complete +5aa5 c4010000 rtnbit0 received_setup_complete +5aa6 6fe080bd fetch 1 ,mem_connection_options +5aa7 793ffe02 set0 connection_switch ,pdata +5aa8 67e080bd store 1 ,mem_connection_options +5aa9 70007d13 jam lmp_switch_req ,mem_lmo_opcode2 +5aaa 70005610 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +5aab 20600000 rtn + +host_create_conn_send_setup_complete: +5aac 7000560d jam conn_sm_wait_setup_complete ,mem_conn_sm +5aad 70007d31 jam lmp_setup_complete ,mem_lmo_opcode2 +5aae 20600000 rtn + +host_create_conn_wait_setup_complete: +5aaf 6fe083a5 fetch 1 ,mem_lmp_conn_state +5ab0 c4010000 rtnbit0 received_setup_complete +5ab1 70005600 jam conn_sm_standby ,mem_conn_sm +5ab2 20600000 rtn + +host_create_conn_wait_setup_complete_rtn: +5ab3 70005606 jam conn_sm_auth_pair ,mem_conn_sm +5ab4 20600000 rtn + +host_create_conn_master_detach: +5ab5 6fe103a6 fetch 2 ,mem_soft_timer +5ab6 1fe0ffff increase -1 ,pdata +5ab7 203a5aba branch host_create_conn_send_detach ,blank +5ab8 67e103a6 store 2 ,mem_soft_timer +5ab9 20600000 rtn + +host_create_conn_send_detach: +5aba 70007d07 jam lmp_detach ,mem_lmo_opcode2 +5abb 70039e16 jam local_host ,mem_disconn_reason_send +5abc 70005600 jam 0 ,mem_conn_sm +5abd 20600000 rtn + +host_create_conn_auth_pair: +5abe 6fe080bd fetch 1 ,mem_connection_options +5abf c2815aa3 bbit1 connection_switch ,host_create_conn_switch +5ac0 c2805ac3 bbit1 connection_auth ,host_create_conn_auth_pair_true + +host_create_conn_sm_done: +5ac1 7000561a jam conn_sm_done ,mem_conn_sm +5ac2 20600000 rtn + +host_create_conn_auth_pair_true: +5ac3 6fe0c1ca fetch 1 ,mem_link_key_exists +5ac4 203a5acf branch host_create_conn_auth_pair_nokey ,blank +5ac5 6fe083a5 fetch 1 ,mem_lmp_conn_state +5ac6 c4018000 rtnbit0 sent_setup_complete +5ac7 c4010000 rtnbit0 received_setup_complete +5ac8 6fe203bc fetch 4 ,mem_aurand_send_delay_time +5ac9 d8400064 arg 100 ,temp +5aca 98408400 iadd temp ,temp +5acb 1c427e00 copy clkn_bt ,pdata +5acc 98467c00 isub temp ,null +5acd 24610000 nrtn positive +5ace 20205a6e branch host_create_conn_auth + +host_create_conn_auth_pair_nokey: +5acf 70005616 jam conn_sm_pairing ,mem_conn_sm +5ad0 70479304 jam 4 ,mem_pin_length +5ad1 58003030 setarg 0x3030 +5ad2 67e14794 store 2 ,mem_pin +5ad3 e7e10005 istore 2 ,contw +5ad4 7003a802 jam pincode_state_pincode_ready ,mem_pincode_state +5ad5 20205a75 branch host_create_conn_pairing + +host_create_conn_auth_pair_wait: +5ad6 20600000 rtn + +host_create_conn_encrypt: +5ad7 6fe080bd fetch 1 ,mem_connection_options +5ad8 c280dadb bbit1 connection_encrypt ,host_create_conn_encrypt_start +5ad9 7000561a jam conn_sm_done ,mem_conn_sm +5ada 20600000 rtn + +host_create_conn_encrypt_start: +5adb 6fe080bd fetch 1 ,mem_connection_options +5adc 793ffe01 set0 connection_encrypt ,pdata +5add 67e080bd store 1 ,mem_connection_options +5ade 70007d0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +5adf 20600000 rtn + +host_create_conn_encrypt_wait: +5ae0 6fe083ab fetch 1 ,mem_wait_encryption +5ae1 207a0000 rtn blank +5ae2 70005600 jam conn_sm_standby ,mem_conn_sm +5ae3 20205adb branch host_create_conn_encrypt_start + +host_create_conn_encrypt_wait_clear: +5ae4 7000560c jam conn_sm_send_setup_complete ,mem_conn_sm +5ae5 20600000 rtn + +host_auth: +5ae6 6fe0804c fetch 1 ,mem_op +5ae7 c2815aeb bbit1 op_inrand_req ,remote_auth +5ae8 20405a14 call tid_initiate +5ae9 70007d08 jam lmp_in_rand ,mem_lmo_opcode2 +5aea 20204d86 branch cmd_exit + +remote_auth: +5aeb 6fe0804c fetch 1 ,mem_op +5aec 793ffe02 set0 op_inrand_req ,pdata +5aed 67e0804c store 1 ,mem_op +5aee 204056f2 call lmp_accept_inrand +5aef 20405a1d call tid_set_reply +5af0 20204d86 branch cmd_exit + +pincode_reinit: +5af1 58000004 setarg 4 +5af2 67e0c793 store 1 ,mem_pin_length +5af3 58003030 setarg 0x3030 +5af4 e7e10005 istore 2 ,contw +5af5 e7e10005 istore 2 ,contw +5af6 20600000 rtn + +twspi_reset: +5af7 47104024 bpatchx patch24_0 ,mem_patch24 +5af8 1fe17eff and_into 0xff ,pdata +5af9 d8a08070 arg core_gpio_conf ,contw +5afa 98a08a00 iadd contw ,contw +5afb 18a22200 copy contw ,rega +5afc d840003e arg gpcfg_output_low ,temp +5afd e0408005 istoret 1 ,contw +5afe 20405b04 call twspi_disable +5aff 2000001e nop 30 +5b00 1a220a00 copy rega ,contw +5b01 d840003f arg gpcfg_output_high ,temp +5b02 e0408005 istoret 1 ,contw +5b03 20205b08 branch twspi_enable + +twspi_disable: +5b04 6ff08085 fetch 1 ,core_aes_en +5b05 1fe17efb and_into 0xfb ,pdata +5b06 67f08085 store 1 ,core_aes_en +5b07 20600000 rtn + +twspi_enable: +5b08 6ff08085 fetch 1 ,core_aes_en +5b09 1fe1fe04 or_into 0x04 ,pdata +5b0a 67f08085 store 1 ,core_aes_en +5b0b 20600000 rtn + +twspi_write: +5b0c 20205cbf branch spid_write_reg + +twspi_read: +5b0d 20205cc6 branch spid_read_reg + +aes_disable: +5b0e 6ff08085 fetch 1 ,core_aes_en +5b0f 1fe17efd and_into 0xfd ,pdata +5b10 67f08085 store 1 ,core_aes_en +5b11 20600000 rtn + +read_function_aes: +5b12 24345b16 nbranch read_function ,user +5b13 6ff08085 fetch 1 ,core_aes_en +5b14 1fe1fe02 or_into 0x2 ,pdata +5b15 67f08085 store 1 ,core_aes_en + +read_function: +5b16 18427c00 copy temp ,null +5b17 2022db19 branch read_fuction_zero ,zero +5b18 1a627a00 copy regc ,pc + +read_fuction_zero: +5b19 2fcc0000 isolate0 0 ,null +5b1a 20205be7 branch set_ucode_status + +get_block_header: +5b1b 18000404 force 4 ,temp + +get_block_header0: +5b1c da2002eb arg mem_ucode_buf ,rega +5b1d 20405b0e call aes_disable +5b1e 20405b16 call read_function +5b1f da2055aa arg 0x55aa ,rega +5b20 6fe102eb fetch 2 ,mem_ucode_buf +5b21 e8410006 ifetcht 2 ,contr +5b22 9a267c00 isub rega ,null +5b23 20600000 rtn + +read_first_block: +5b24 d8400002 arg 2 ,temp +5b25 da2002f1 arg mem_ucode_ptr ,rega +5b26 20405b16 call read_function +5b27 6fe102f1 fetch 2 ,mem_ucode_ptr +5b28 67e102e4 store 2 ,mem_addr_mi +5b29 20545b2b call get_iv ,user +5b2a 20600000 rtn + +get_iv: +5b2b d8400010 arg 16 ,temp +5b2c da2002f3 arg mem_ucode_keybuf ,rega +5b2d 20405b0e call aes_disable +5b2e 20405b16 call read_function +5b2f d8c002f3 arg mem_ucode_keybuf ,contr +5b30 df200010 arg 16 ,loopcnt +5b31 20406db2 call aes_load_data +5b32 20406d62 call aes_init +5b33 20406dcb call aes_clear_data +5b34 20206d5c branch do_aes_cbc + +load_storage: +5b35 7856fc00 disable match +5b36 20405b1b call get_block_header +5b37 24628000 nrtn zero +5b38 7836fc00 enable match +5b39 70802380 jam 0x80 ,core_ucode_ctrl +5b3a 70802200 jam 0 ,core_ucode_hi +5b3b 70802400 jam 0 ,core_ucode_low +5b3c da208025 arg core_ucode_data ,rega +5b3d 20405b12 call read_function_aes +5b3e 70802300 jam 0x0 ,core_ucode_ctrl + +load_storage_loop: +5b3f d8400006 arg 6 ,temp +5b40 20405b1c call get_block_header0 +5b41 24628000 nrtn zero +5b42 efe10006 ifetch 2 ,contr +5b43 98002200 iforce rega +5b44 20405b16 call read_function +5b45 20205b3f branch load_storage_loop + +load_storage_efuse: +5b46 6fe08a04 fetch 1 ,mem_tmp_buffer + efuse_offset_offset +5b47 d8c00a01 arg mem_tmp_buffer ,contr +5b48 98c08c00 iadd contr ,contr +5b49 70802380 jam 0x80 ,core_ucode_ctrl +5b4a 70802200 jam 0 ,core_ucode_hi +5b4b 70802400 jam 0 ,core_ucode_low +5b4c da208025 arg core_ucode_data ,rega +5b4d ef208006 ifetchr loopcnt ,1 ,contr +5b4e 1f267c00 sub loopcnt ,0 ,null +5b4f 2442db58 ncall load_efuse_read_code_loop ,zero +5b50 70802300 jam 0x0 ,core_ucode_ctrl + +load_storage_efuse_loop: +5b51 efe08006 ifetch 1 ,contr +5b52 207a0000 rtn blank +5b53 1fe27200 copy pdata ,loopcnt +5b54 ea410006 ifetchr regb ,2 ,contr +5b55 1a420a00 copy regb ,contw +5b56 20407d61 call memcpy_loop +5b57 20205b51 branch load_storage_efuse_loop + +load_efuse_read_code_loop: +5b58 efe08006 ifetch 1 ,contr +5b59 e7e08011 istore 1 ,rega +5b5a c2005b58 loop load_efuse_read_code_loop +5b5b 20600000 rtn + +reload_eeprom: +5b5c 20407e02 call clean_mem +5b5d 58001000 setarg 0x1000 +5b5e 67e102e4 store 2 ,mem_addr_mi +5b5f da605de2 arg iicd_read_eep ,regc +5b60 df200002 arg 2 ,loopcnt + +reload_eeprom_loop: +5b61 20405b1b call get_block_header +5b62 24628000 nrtn zero +5b63 6fe102e4 fetch 2 ,mem_addr_mi +5b64 1ff0fe00 byteswap pdata ,pdata +5b65 9840fe00 iadd temp ,pdata +5b66 1ff0fe00 byteswap pdata ,pdata +5b67 67e102e4 store 2 ,mem_addr_mi +5b68 c2005b61 loop reload_eeprom_loop +5b69 20205b3f branch load_storage_loop + +loadcode: +5b6a 20407e02 call clean_mem +5b6b 70805025 jam 0x25 ,core_clkoff +5b6c 58000000 setarg 0 +5b6d da200a01 arg mem_tmp_buffer ,rega +5b6e d8400040 arg 64 ,temp +5b6f 20405e63 call efuse_read_data +5b70 20405bb8 call loadcode_efuse_check +5b71 20405c12 call app_read_efuse_app_vsel +5b72 78547c00 disable user +5b73 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5b74 c301db7c bbit0 ucode_flag_enc ,loadcode_efuse +5b75 70800608 jam lock_otp ,core_misc_ctrl +5b76 7920002b set1 mark_otp_encrypt ,mark +5b77 18007004 force regidx_key ,regext_index +5b78 20406dcc call aes_clear +5b79 18007004 force regidx_key ,regext_index +5b7a 6de20a3d fetchr regext ,4 ,mem_tmp_buffer + efuse_offset_key_addr +5b7b 78347c00 enable user + +loadcode_efuse: +5b7c 6fe20a01 fetch 4 ,mem_tmp_buffer +5b7d 203a5b81 branch loadcode_iic ,blank +5b7e 67e1c4cc store 3 ,mem_efuse_header +5b7f 20405c49 call app_lpm_peripheral_lock_check +5b80 20405b46 call load_storage_efuse + +loadcode_iic: +5b81 7041e300 jam 0 ,mem_loadcode_times + +loadcode_iic_2: +5b82 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5b83 c2815b9c bbit1 ucode_flag_skip_eep ,loadcode_spi +5b84 20405be0 call loadcode_check_times +5b85 20405b94 call iicd_load_gpio_init +5b86 20405dbf call clear_eeprom_size_2k +5b87 20405bda call loadcode_iic_by_eeprom +5b88 2436db8c nbranch loadcode_iic_eeprom_2k ,match +5b89 6fe082e1 fetch 1 ,mem_ucode_status +5b8a c3005b82 bbit0 0 ,loadcode_iic_2 +5b8b 20205baa branch loadcode_hci + +loadcode_iic_eeprom_2k: +5b8c 20405dbc call set_eeprom_size_2k +5b8d 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5b8e c2815b9c bbit1 ucode_flag_skip_eep ,loadcode_spi +5b8f 20405bda call loadcode_iic_by_eeprom +5b90 2436db9c nbranch loadcode_spi ,match +5b91 6fe082e1 fetch 1 ,mem_ucode_status +5b92 c3005b82 bbit0 0 ,loadcode_iic_2 +5b93 20205baa branch loadcode_hci + +iicd_load_gpio_init: +5b94 6fe0c4c3 fetch 1 ,mem_eeprom_sda_gpio +5b95 6848c4c2 fetcht 1 ,mem_eeprom_scl_gpio +5b96 98467c00 isub temp ,null +5b97 2422dda5 nbranch iicd_read_init_pin ,zero + +iicd_load_default_gpio: +5b98 7044c102 jam 2 ,mem_eeprom_wp_gpio +5b99 7044c201 jam 1 ,mem_eeprom_scl_gpio +5b9a 7044c300 jam 0 ,mem_eeprom_sda_gpio +5b9b 20205da5 branch iicd_read_init_pin + +loadcode_spi: +5b9c 7041e300 jam 0 ,mem_loadcode_times + +loadcode_spi_loop: +5b9d 20405be0 call loadcode_check_times +5b9e 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5b9f c280dbaa bbit1 ucode_flag_skip_flash ,loadcode_hci +5ba0 20405d10 call spid_init_flash +5ba1 200000c8 nop 200 +5ba2 20405d1e call spid_flash_release_form_powerdown +5ba3 20000064 nop 100 +5ba4 da605d52 arg spid_load_flash ,regc +5ba5 20405b24 call read_first_block +5ba6 20405b35 call load_storage +5ba7 2436dbaa nbranch loadcode_hci ,match +5ba8 6fe082e1 fetch 1 ,mem_ucode_status +5ba9 c3005b9d bbit0 0 ,loadcode_spi_loop + +loadcode_hci: +5baa 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5bab c3005bae bbit0 ucode_flag_hci ,clear_key_buf +5bac 20405bae call clear_key_buf +5bad 20204cba branch hci_init + +clear_key_buf: +5bae 58000000 setarg 0 +5baf 67e20a3d store 4 ,mem_tmp_buffer + efuse_offset_key_addr +5bb0 18007004 force regidx_key ,regext_index +5bb1 20406dcc call aes_clear +5bb2 70805021 jam 0x21 ,core_clkoff +5bb3 20600000 rtn + +loadcode_efuse_check_xor: +5bb4 1ff18400 rshift4 pdata ,temp +5bb5 1fe17e0f and pdata ,0x0f ,pdata +5bb6 9842fe00 ixor temp ,pdata +5bb7 20600000 rtn + +loadcode_efuse_check: +5bb8 6fe20a01 fetch 4 ,mem_tmp_buffer +5bb9 207a0000 rtn blank +5bba 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5bbb 20405bb4 call loadcode_efuse_check_xor +5bbc c087dbe6 bne 0x0f ,loadcode_error +5bbd 6fe08a02 fetch 1 ,mem_tmp_buffer + efuse_offset_device_lock +5bbe 20405bb4 call loadcode_efuse_check_xor +5bbf c087dbe6 bne 0x0f ,loadcode_error + +loadcode_efuse_check_sum: +5bc0 6fe08a01 fetch 1 ,mem_tmp_buffer +5bc1 e8408006 ifetcht 1 ,contr +5bc2 9840fe00 iadd temp ,pdata +5bc3 e8408006 ifetcht 1 ,contr +5bc4 9840fe00 iadd temp ,pdata +5bc5 e8408006 ifetcht 1 ,contr +5bc6 9840a200 iadd temp ,rega +5bc7 dfe00a01 arg mem_tmp_buffer ,pdata +5bc8 98408c00 iadd temp ,contr +5bc9 1a227e00 copy rega ,pdata +5bca ef208006 ifetchr loopcnt ,1 ,contr +5bcb 9f20fe00 iadd loopcnt ,pdata +5bcc 20407e62 call cal_sum +5bcd 20405bd3 call loadcode_efuse_check_sum_loop +5bce e8408006 ifetcht 1 ,contr +5bcf 1fe17eff and pdata ,0xff ,pdata +5bd0 98467c00 isub temp ,null +5bd1 2422dbe6 nbranch loadcode_error ,zero +5bd2 20600000 rtn + +loadcode_efuse_check_sum_loop: +5bd3 ef208006 ifetchr loopcnt ,1 ,contr +5bd4 1f267c00 sub loopcnt ,0 ,null +5bd5 20628000 rtn zero +5bd6 9f20fe00 iadd loopcnt ,pdata +5bd7 1f20f202 increase 2 ,loopcnt +5bd8 20407e62 call cal_sum +5bd9 20205bd3 branch loadcode_efuse_check_sum_loop + +loadcode_iic_by_eeprom: +5bda 58000000 setarg 0x0 +5bdb 67e102e4 store 2 ,mem_addr_mi +5bdc da605de2 arg iicd_read_eep ,regc +5bdd 20405d8e call iic_init_600khz +5bde 20405b24 call read_first_block +5bdf 20205b35 branch load_storage + +loadcode_check_times: +5be0 6fe0c1e3 fetch 1 ,mem_loadcode_times +5be1 1fe0fe01 increase 1 ,pdata +5be2 1fe67c03 sub pdata ,3 ,null +5be3 24215be6 nbranch loadcode_error ,positive +5be4 67e0c1e3 store 1 ,mem_loadcode_times +5be5 20600000 rtn + +loadcode_error: +5be6 20205c94 branch app_lpm_mpu_lock_br_ble + +set_ucode_status: +5be7 6fe082e1 fetch 1 ,mem_ucode_status +5be8 1fe3fe00 lshift pdata ,pdata +5be9 7920fe00 setflag true ,0 ,pdata +5bea 2a2c000f isolate0 15 ,rega +5beb 20608000 rtn true +5bec 67e082e1 store 1 ,mem_ucode_status +5bed 20600000 rtn + +decrypt_code: +5bee 6ff08085 fetch 1 ,core_aes_en +5bef c4008000 rtnbit0 1 +5bf0 20205bf4 branch decrypt_code_skip + +decrypt_code_loop: +5bf1 6ff0812c fetch 1 ,core_dma_status +5bf2 afefffff qisolate1 pdata +5bf3 20608000 rtn true + +decrypt_code_skip: +5bf4 6ff08108 fetch 1 ,core_misc_status +5bf5 c300dbf1 bbit0 1 ,decrypt_code_loop +5bf6 20406d5c call do_aes_cbc +5bf7 20205bf1 branch decrypt_code_loop + +save_ucode: +5bf8 1f220400 copy loopcnt ,temp +5bf9 604941a8 storet 2 ,mem_patch_len +5bfa 70802380 jam 0x80 ,core_ucode_ctrl +5bfb 70802200 jam 0 ,core_ucode_hi +5bfc 70802400 jam 0 ,core_ucode_low +5bfd 67e141a6 store 2 ,mem_patch_ptr +5bfe 98000a00 iforce contw +5bff 1f2bf200 lshift2 loopcnt ,loopcnt + +save_ucode_loop: +5c00 6ff08025 fetch 1 ,core_ucode_data +5c01 e7e08005 istore 1 ,contw +5c02 c2005c00 loop save_ucode_loop +5c03 70802300 jam 0x0 ,core_ucode_ctrl +5c04 20600000 rtn + +load_ucode: +5c05 6fe141a6 fetch 2 ,mem_patch_ptr +5c06 207a0000 rtn blank +5c07 70802380 jam 0x80 ,core_ucode_ctrl +5c08 70802200 jam 0 ,core_ucode_hi +5c09 70802400 jam 0 ,core_ucode_low +5c0a 684941a8 fetcht 2 ,mem_patch_len +5c0b 184bf200 lshift2 temp ,loopcnt +5c0c 98000c00 iforce contr + +load_ucode_loop: +5c0d efe08006 ifetch 1 ,contr +5c0e 67f08025 store 1 ,core_ucode_data +5c0f c2005c0d loop load_ucode_loop +5c10 70802300 jam 0x0 ,core_ucode_ctrl +5c11 20600000 rtn + +app_read_efuse_app_vsel: +5c12 6fe08a2c fetch 1 ,mem_tmp_buffer + efuse_offset_app_vsel +5c13 c28315a9 bbit1 6 ,lpm_write_sel_vdd5v +5c14 202015a2 branch lpm_write_sel_vdd3v3 + +app_read_efuse_sys_config: +5c15 6fe08a2c fetch 1 ,mem_tmp_buffer + efuse_offset_device_option +5c16 1fe17e0f and_into 0x0f ,pdata +5c17 207a0000 rtn blank +5c18 67e0c09a store 1 ,mem_device_option +5c19 6fe08a2d fetch 1 ,mem_tmp_buffer + efuse_offset_xtal_offset +5c1a 67e0c17b store 1 ,mem_lpm_ctrim +5c1b 6fe08a2e fetch 1 ,mem_tmp_buffer + efuse_offset_xtal_cnt +5c1c 67e0c17d store 1 ,mem_lpm_xtalcnt +5c1d 20600000 rtn + +app_read_efuse_dig_aon_vsel: +5c1e 6fe08a2c fetch 1 ,mem_tmp_buffer + efuse_offset_dig_aon_vsel +5c1f 1fe17e30 and_into 0x30 ,pdata +5c20 1ff1fe00 rshift4 pdata ,pdata +5c21 207a0000 rtn blank +5c22 67e0c4d0 store 1 ,mem_dig_aon_vsel +5c23 20600000 rtn + +app_read_efuse_syn_afc_cfg1: +5c24 6fe08a32 fetch 1 ,mem_tmp_buffer + efuse_offset_tx_vco_current +5c25 1fe17e0f and_into 0x0f ,pdata +5c26 207a0000 rtn blank +5c27 67e0c4d1 store 1 ,mem_syn_afc_cfg1 +5c28 20600000 rtn + +app_read_efuse_rf_ldo_cfg1: +5c29 6fe08a32 fetch 1 ,mem_tmp_buffer + efuse_offset_ldo_cfg1 +5c2a 1fe17e30 and_into 0x30 ,pdata +5c2b 1ff1fe00 rshift4 pdata ,pdata +5c2c 207a0000 rtn blank +5c2d 67e0c4d2 store 1 ,mem_rf_ldo_cfg1 +5c2e 20600000 rtn + +app_read_efuse_rc_cal: +5c2f 6fe08a33 fetch 1 ,mem_tmp_buffer + efuse_offset_rc_cal +5c30 207a0000 rtn blank +5c31 67e0c4d3 store 1 ,mem_rc_cal +5c32 20600000 rtn + +app_read_efuse_agc: +5c33 6fe08a32 fetch 1 ,mem_tmp_buffer + efuse_offset_agc_sel +5c34 c283dc3c bbit1 7 ,app_disable_soft_agc +5c35 7041eb88 jam 0x88 ,mem_gain_table +5c36 7041ec66 jam 0x66 ,mem_gain_table + 1 +5c37 7041ed44 jam 0x44 ,mem_gain_table + 2 +5c38 6fe10a2f fetch 2 ,mem_tmp_buffer + efuse_offset_agc_table +5c39 207a0000 rtn blank +5c3a 67e141ec store 2 ,mem_gain_table + 1 +5c3b 20600000 rtn + +app_disable_soft_agc: +5c3c 7041eaff jam 0xff ,mem_gain_fix +5c3d 6fe08a32 fetch 1 ,mem_tmp_buffer + efuse_offset_agc_sec_en +5c3e 1fe17e40 and_into 0x40 ,pdata +5c3f 1fe97e00 rshift3 pdata ,pdata +5c40 67e0c1ee store 1 ,mem_gain_second_agc_en +5c41 20600000 rtn + +app_lpm_efuse_lock_prep: +5c42 70800273 jam 0x73 ,0x8002 +5c43 37d98200 until null ,lpo_edge +5c44 37d98200 until null ,lpo_edge +5c45 6ff10120 fetch 2 ,core_ucode_flag +5c46 793ffe0d set0 13 ,pdata +5c47 67f1004c store 2 ,core_lpm_reg +5c48 20205caf branch lpm_write2_ctrl_option + +app_lpm_peripheral_lock_check: +5c49 6fe08a02 fetch 1 ,mem_tmp_buffer + efuse_offset_device_lock +5c4a 1fe17e0f and pdata ,0x0f ,pdata +5c4b c0055c57 beq dvc_op_module ,app_lpm_peripheral_lock_module +5c4c c000dc57 beq dvc_op_hci ,app_lpm_peripheral_lock_hci +5c4d c0025c5a beq dvc_op_dongle ,app_lpm_peripheral_lock_dongle +5c4e c002dc5f beq dvc_op_test ,app_lpm_peripheral_lock_test +5c4f c0045c61 beq dvc_op_mouse ,app_lpm_peripheral_lock_mouse +5c50 c004dc66 beq dvc_op_shutter ,app_lpm_peripheral_lock_shutter +5c51 c005dc6b beq dvc_op_ali_mesh ,app_lpm_peripheral_lock_mesh +5c52 c0065c57 beq dvc_op_hci_boot ,app_lpm_peripheral_lock_hciboot +5c53 c006dc6e beq dvc_op_remote_car ,app_lpm_peripheral_lock_remote_car +5c54 c0075c73 beq dvc_op_car ,app_lpm_peripheral_lock_car +5c55 c007dc78 beq dvc_op_antilost ,app_lpm_peripheral_lock_antilost +5c56 20600000 rtn + +app_lpm_peripheral_lock_module: + +app_lpm_peripheral_lock_hci: + +app_lpm_peripheral_lock_hciboot: +5c57 20405c42 call app_lpm_efuse_lock_prep +5c58 20405c7d call app_lpm_mpu_lock_mesh +5c59 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_dongle: +5c5a 20405c42 call app_lpm_efuse_lock_prep +5c5b dfe03764 arg module_init ,pdata +5c5c d8404c03 arg ui_soft_switch_power_off ,temp +5c5d 20405c83 call app_mpu_s0_lock +5c5e 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_test: +5c5f 20405c42 call app_lpm_efuse_lock_prep +5c60 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_mouse: +5c61 20405c42 call app_lpm_efuse_lock_prep +5c62 dfe03247 arg antilost_init ,pdata +5c63 d8403bbd arg module_set_state ,temp +5c64 20405c83 call app_mpu_s0_lock +5c65 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_shutter: +5c66 20405c42 call app_lpm_efuse_lock_prep +5c67 dfe03247 arg antilost_init ,pdata +5c68 d8404a8e arg remote_car_moto_data_enable_user ,temp +5c69 20405c83 call app_mpu_s0_lock +5c6a 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_mesh: +5c6b 20405c42 call app_lpm_efuse_lock_prep +5c6c 20405c86 call app_lpm_mpu_lock_app +5c6d 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_remote_car: +5c6e 20405c42 call app_lpm_efuse_lock_prep +5c6f dfe03247 arg antilost_init ,pdata +5c70 d84049a2 arg mouse_low_voltage_led_no_enter_lpm_blink ,temp +5c71 20405c83 call app_mpu_s0_lock +5c72 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_car: +5c73 20405c42 call app_lpm_efuse_lock_prep +5c74 dfe03620 arg dongle_init ,pdata +5c75 d8404c03 arg ui_soft_switch_power_off ,temp +5c76 20405c83 call app_mpu_s0_lock +5c77 20205c9e branch lpm_write_lock + +app_lpm_peripheral_lock_antilost: +5c78 20405c42 call app_lpm_efuse_lock_prep +5c79 dfe033e2 arg car_init ,pdata +5c7a d8404c03 arg ui_soft_switch_power_off ,temp +5c7b 20405c83 call app_mpu_s0_lock +5c7c 20205c9e branch lpm_write_lock + +app_lpm_mpu_lock_mesh: +5c7d dfe0272e arg ali_mesh_access_layer_resolve_message ,pdata +5c7e d84030d7 arg ali_mesh_upper_transport_layer_clear_tx_buffer ,temp +5c7f 20205c83 branch app_mpu_s0_lock + +app_lpm_mpu_lock_module: +5c80 20405c42 call app_lpm_efuse_lock_prep +5c81 dfe03764 arg module_init ,pdata +5c82 d8403bbd arg module_set_state ,temp + +app_mpu_s0_lock: +5c83 67f10013 store 2 ,core_mpu_s0_saddr +5c84 60590015 storet 2 ,core_mpu_s0_eaddr +5c85 20600000 rtn + +app_lpm_mpu_lock_app: +5c86 dfe03247 arg antilost_init ,pdata +5c87 d8404c03 arg ui_soft_switch_power_off ,temp +5c88 20205c83 branch app_mpu_s0_lock + +app_lpm_mpu_lock_br: +5c89 dfe05394 arg parse_lmp ,pdata +5c8a d8405aeb arg remote_auth ,temp +5c8b 20205c8e branch app_mpu_s1_lock + +app_lpm_mpu_lock_ble: +5c8c dfe01cd1 arg le_parse_att ,pdata +5c8d d84021cf arg le_send_ll_one_lenth ,temp + +app_mpu_s1_lock: +5c8e 67f10017 store 2 ,core_mpu_s1_saddr +5c8f 60590019 storet 2 ,core_mpu_s1_eaddr +5c90 20600000 rtn + +app_lpm_mpu_lock_24g: +5c91 dfe021d5 arg g24_prep ,pdata +5c92 d840272c arg power_ctrl_pac_succ_cnt_reinit ,temp +5c93 20205c8e branch app_mpu_s1_lock + +app_lpm_mpu_lock_br_ble: +5c94 20405c89 call app_lpm_mpu_lock_br +5c95 dfe01cd1 arg le_parse_att ,pdata +5c96 d84021cf arg le_send_ll_one_lenth ,temp +5c97 20205c83 branch app_mpu_s0_lock + +app_lpm_mpu_mode_lock: +5c98 6fe08a03 fetch 1 ,mem_tmp_buffer + efuse_offset_peripherals_lock +5c99 1fe17ec0 and pdata ,0xc0 ,pdata +5c9a c0605c94 beq 0xc0 ,app_lpm_mpu_lock_br_ble +5c9b c2835c8c bbit1 efuse_le_lock_bit ,app_lpm_mpu_lock_ble +5c9c c283dc89 bbit1 efuse_br_lock_bit ,app_lpm_mpu_lock_br +5c9d 20600000 rtn + +lpm_write_lock: +5c9e 20405c98 call app_lpm_mpu_mode_lock +5c9f 6fe08a03 fetch 1 ,mem_tmp_buffer + efuse_offset_peripherals_lock +5ca0 1fe1221f and pdata ,0x1f ,rega +5ca1 6fe08a01 fetch 1 ,mem_tmp_buffer + efuse_offset_ucode +5ca2 1fe17e0f and pdata ,0x0f ,pdata +5ca3 68488a02 fetcht 1 ,mem_tmp_buffer + efuse_offset_device_lock +5ca4 1841040f and temp ,0x0f ,temp +5ca5 18520400 lshift4 temp ,temp +5ca6 9841fe00 ior temp ,pdata +5ca7 1a2d2200 lshift8 rega ,rega +5ca8 9a21fe00 ior rega ,pdata +5ca9 79207e0d set1 lpmreg_rom_lock_bit ,pdata +5caa 79207e0e set1 lpmreg_ice_mode_bit ,pdata +5cab 67f2004c store 4 ,core_lpm_reg +5cac 20405caf call lpm_write2_ctrl_option +5cad 70801108 jam 8 ,core_encrypt +5cae 20600000 rtn + +lpm_write2_ctrl_option: +5caf 58000002 setarg lpmreg_sel_option + +lpm_write2: +5cb0 37d98200 until null ,lpo_edge +5cb1 67f08012 store 1 ,core_lpm_wr2 +5cb2 37d98200 until null ,lpo_edge +5cb3 37d98200 until null ,lpo_edge +5cb4 20600000 rtn + +spid_init: +5cb5 4710c024 bpatchx patch24_1 ,mem_patch24 + +spid_init_common: +5cb6 6fe0c484 fetch 1 ,mem_spi_init_clk +5cb7 67f08086 store 1 ,core_spid_ctrl +5cb8 6fe0c485 fetch 1 ,mem_spi_init_delay_time +5cb9 67f08087 store 1 ,core_spid_delay +5cba 580002e2 setarg mem_spid_tbuf +5cbb 67f1008a store 2 ,core_spid_txaddr +5cbc 580002e7 setarg mem_spid_rbuf +5cbd 67f1008c store 2 ,core_spid_rxaddr +5cbe 20205b04 branch twspi_disable + +spid_write_reg: +5cbf 79207e07 set1 7 ,pdata +5cc0 67e102e2 store 2 ,mem_spid_tbuf +5cc1 47114024 bpatchx patch24_2 ,mem_patch24 +5cc2 70808802 jam 2 ,core_spid_txlen +5cc3 70808e00 jam 0 ,core_spid_rxlen +5cc4 70800602 jam spid_start ,core_misc_ctrl +5cc5 20205ccf branch wait_spid_done + +spid_read_reg: +5cc6 18000401 force 1 ,temp + +spid_read_regs: +5cc7 67e082e2 store 1 ,mem_spid_tbuf +5cc8 4711c024 bpatchx patch24_3 ,mem_patch24 +5cc9 70808801 jam 1 ,core_spid_txlen +5cca 6059008e storet 2 ,core_spid_rxlen +5ccb 70800602 jam spid_start ,core_misc_ctrl +5ccc 20405ccf call wait_spid_done +5ccd 6fe082e7 fetch 1 ,mem_spid_rbuf +5cce 20600000 rtn + +wait_spid_done: +5ccf 6fe140dd fetch 2 ,mem_afh_error_total +5cd0 1fe0fe01 increase 1 ,pdata +5cd1 67e140dd store 2 ,mem_afh_error_total +5cd2 6ff0812c fetch 1 ,core_dma_status +5cd3 c301dccf bbit0 spid_done ,wait_spid_done +5cd4 20600000 rtn + +flash_write: +5cd5 78547c00 disable user +5cd6 1fe22400 copy pdata ,regb +5cd7 6fe0c4ac fetch 1 ,mem_spi_write_flash_sm +5cd8 c1800000 rtnne flash_sm_no_buys +5cd9 78347c00 enable user +5cda 1a427e00 copy regb ,pdata +5cdb 20205ce3 branch spid_flash_write_start + +flash_write_spi_sm_timer: +5cdc 6fe0c4ac fetch 1 ,mem_spi_write_flash_sm +5cdd c000dce3 beq flash_sm_start ,spid_flash_write_start +5cde c0015ce9 beq flash_sm_erase_sector ,spid_flash_erase_sector +5cdf c001dcf1 beq flash_sm_wait_erase_sector ,spid_flash_wait_erase_sector +5ce0 c0025cf5 beq flash_sm_write_data ,spid_flash_write_data +5ce1 c002dcfb beq flash_sm_wait_write_data ,spid_flash_wait_write_data +5ce2 20600000 rtn + +spid_flash_write_start: +5ce3 67e1c4a5 store 3 ,mem_spi_write_addr +5ce4 1a227e00 copy rega ,pdata +5ce5 67e144a8 store 2 ,mem_spi_write_ptr +5ce6 604944aa storet 2 ,mem_spi_write_len +5ce7 7044ac02 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +5ce8 20205d10 branch spid_init_flash + +spid_flash_erase_sector: +5ce9 20405d10 call spid_init_flash +5cea 7044ac03 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +5ceb 20405d15 call spid_unlock_flash +5cec da2002e2 arg mem_spid_tbuf ,rega +5ced 70808804 jam 4 ,core_spid_txlen +5cee 6fe1c4a5 fetch 3 ,mem_spi_write_addr +5cef d8400020 arg flash_command_sector_erase ,temp +5cf0 20205d26 branch spid_write_flash_common + +spid_flash_wait_erase_sector: +5cf1 20405d10 call spid_init_flash +5cf2 20405d49 call wait_spid_flash_done +5cf3 7044ac04 jam flash_sm_write_data ,mem_spi_write_flash_sm +5cf4 20600000 rtn + +spid_flash_write_data: +5cf5 20405d10 call spid_init_flash +5cf6 7044ac05 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +5cf7 20405d15 call spid_unlock_flash +5cf8 20405d08 call spid_flash_data_preserve +5cf9 20405d22 call spid_write_flash +5cfa 20205d03 branch spid_flash_data_recover + +spid_flash_wait_write_data: +5cfb 20405d10 call spid_init_flash +5cfc 20405d15 call spid_unlock_flash +5cfd 58000005 setarg flash_read_satus +5cfe 20405cc6 call spid_read_reg +5cff c3800000 rtnbit1 flash_status_wip +5d00 7044ac00 jam flash_sm_no_buys ,mem_spi_write_flash_sm +5d01 6fe14473 fetch 2 ,mem_cb_spi_flash_write_complate +5d02 20207e05 branch callback_func + +spid_flash_data_recover: +5d03 6fe20964 fetch 4 ,mem_temp +5d04 684944a8 fetcht 2 ,mem_spi_write_ptr + +spid_flash_data_recover_comm: +5d05 184085fc increase -4 ,temp +5d06 e7e20002 istore 4 ,temp +5d07 20600000 rtn + +spid_flash_data_preserve: +5d08 684944a8 fetcht 2 ,mem_spi_write_ptr +5d09 18422200 copy temp ,rega +5d0a 184085fc increase -4 ,temp +5d0b efe20002 ifetch 4 ,temp +5d0c 67e20964 store 4 ,mem_temp +5d0d 684944aa fetcht 2 ,mem_spi_write_len +5d0e 6fe1c4a5 fetch 3 ,mem_spi_write_addr +5d0f 20600000 rtn + +spid_init_flash: +5d10 20405d74 call spi_gpio_init +5d11 20405b04 call twspi_disable +5d12 58000000 setarg 0 +5d13 67e202e2 store 4 ,mem_spid_tbuf +5d14 20600000 rtn + +spid_unlock_flash: +5d15 7002e206 jam flash_command_write_enable ,mem_spid_tbuf + +spid_sendcmd_common: +5d16 58000000 setarg 0 +5d17 67f1008e store 2 ,core_spid_rxlen +5d18 58000001 setarg 1 +5d19 67f10088 store 2 ,core_spid_txlen +5d1a 580002e2 setarg mem_spid_tbuf +5d1b 67f1008a store 2 ,core_spid_txaddr +5d1c 70800602 jam spid_start ,core_misc_ctrl +5d1d 20205ccf branch wait_spid_done + +spid_flash_release_form_powerdown: +5d1e 7002e2ab jam flash_command_release_from_powerdown ,mem_spid_tbuf +5d1f 20205d16 branch spid_sendcmd_common + +spid_flash_powerdown: +5d20 7002e2b9 jam flash_command_powerdown ,mem_spid_tbuf +5d21 20205d16 branch spid_sendcmd_common + +spid_write_flash: +5d22 18408404 increase 4 ,temp +5d23 60590088 storet 2 ,core_spid_txlen +5d24 d8400002 arg flash_command_write_data ,temp +5d25 1a20a3fc increase -4 ,rega + +spid_write_flash_common: +5d26 e0408011 istoret 1 ,rega +5d27 1ff10400 rshift16 pdata ,temp +5d28 e0408005 istoret 1 ,contw +5d29 1fec8400 rshift8 pdata ,temp +5d2a e0408005 istoret 1 ,contw +5d2b e7e08005 istore 1 ,contw +5d2c 1a227e00 deposit rega +5d2d 67f1008a store 2 ,core_spid_txaddr +5d2e 58000000 setarg 0 +5d2f 67f1008e store 2 ,core_spid_rxlen +5d30 70800602 jam spid_start ,core_misc_ctrl +5d31 20405ccf call wait_spid_done +5d32 20205d49 branch wait_spid_flash_done + +spid_read_flash: +5d33 6059008e storet 2 ,core_spid_rxlen +5d34 1ff10400 rshift16 pdata ,temp +5d35 604882e3 storet 1 ,mem_addr_hi +5d36 1fec8400 rshift8 pdata ,temp +5d37 604882e4 storet 1 ,mem_addr_mi +5d38 67e082e5 store 1 ,mem_addr_lo +5d39 58000004 setarg 4 +5d3a 67f10088 store 2 ,core_spid_txlen +5d3b 7002e203 jam flash_command_read_data ,mem_spid_tbuf +5d3c 580002e2 setarg mem_spid_tbuf +5d3d 67f1008a store 2 ,core_spid_txaddr +5d3e 1a227e00 deposit rega +5d3f 67f1008c store 2 ,core_spid_rxaddr +5d40 6ff08086 fetch 1 ,core_spid_ctrl +5d41 2a2c000f isolate0 15 ,rega +5d42 7920fe06 setflag true ,6 ,pdata +5d43 67f08086 store 1 ,core_spid_ctrl +5d44 70800602 jam spid_start ,core_misc_ctrl + +spid_read_flash_wait: +5d45 6ff0812c fetch 1 ,core_dma_status +5d46 c283dd45 bbit1 7 ,spid_read_flash_wait +5d47 d8e00003 arg spid_done ,queue +5d48 20205ccf branch wait_spid_done + +wait_spid_flash_done: +5d49 580007d0 setarg 2000 +5d4a 2040137d call sleep +5d4b 20405d15 call spid_unlock_flash +5d4c 580002e7 setarg mem_spid_rbuf +5d4d 67f1008c store 2 ,core_spid_rxaddr +5d4e 58000005 setarg flash_read_satus +5d4f 20405cc6 call spid_read_reg +5d50 c2805d49 bbit1 flash_status_wip ,wait_spid_flash_done +5d51 20600000 rtn + +spid_load_flash: +5d52 6059008e storet 2 ,core_spid_rxlen +5d53 58000004 setarg 4 +5d54 67f10088 store 2 ,core_spid_txlen +5d55 7002e203 jam 3 ,mem_spid_tbuf +5d56 580002e2 setarg mem_spid_tbuf +5d57 67f1008a store 2 ,core_spid_txaddr +5d58 1a227e00 deposit rega +5d59 67f1008c store 2 ,core_spid_rxaddr +5d5a 6ff08086 fetch 1 ,core_spid_ctrl +5d5b 2a2c000f isolate0 15 ,rega +5d5c 7920fe06 setflag true ,6 ,pdata +5d5d 67f08086 store 1 ,core_spid_ctrl +5d5e 70800602 jam spid_start ,core_misc_ctrl + +spi_load_flash_wait: +5d5f 6ff0812c fetch 1 ,core_dma_status +5d60 c283dd5f bbit1 7 ,spi_load_flash_wait +5d61 d8e00003 arg spid_done ,queue +5d62 20405bee call decrypt_code +5d63 20405ccf call wait_spid_done +5d64 2feffe02 isolate1 spid_crcok ,pdata +5d65 20405be7 call set_ucode_status +5d66 6fe082e3 fetch 1 ,mem_addr_hi +5d67 1ff02400 lshift16 pdata ,regb +5d68 6fe082e4 fetch 1 ,mem_addr_mi +5d69 1fed7e00 lshift8 pdata ,pdata +5d6a 9a41a400 ior regb ,regb +5d6b 6fe082e5 fetch 1 ,mem_addr_lo +5d6c 9a41fe00 ior regb ,pdata +5d6d 9840fe00 iadd temp ,pdata +5d6e 67e082e5 store 1 ,mem_addr_lo +5d6f 1fecfe00 rshift8 pdata ,pdata +5d70 67e082e4 store 1 ,mem_addr_mi +5d71 1fecfe00 rshift8 pdata ,pdata +5d72 67e082e3 store 1 ,mem_addr_hi +5d73 20600000 rtn + +spi_gpio_init: +5d74 6fe0c4b5 fetch 1 ,mem_spi_cs_gpio +5d75 6848c4b7 fetcht 1 ,mem_spi_so_gpio +5d76 98467c00 isub temp ,null +5d77 2422dd79 nbranch spi_pin_set ,zero +5d78 20405d85 call spi_gpio_default_init + +spi_pin_set: +5d79 6fe0c4b5 fetch 1 ,mem_spi_cs_gpio +5d7a d8400020 arg gpcfg_spid_ncs ,temp +5d7b 20406093 call gpio_config_function_int +5d7c 6fe0c4b8 fetch 1 ,mem_spi_sclk_gpio +5d7d d8400021 arg gpcfg_spid_sck ,temp +5d7e 20406093 call gpio_config_function_int +5d7f 6fe0c4b6 fetch 1 ,mem_spi_si_gpio +5d80 d8400022 arg gpcfg_spid_mosi ,temp +5d81 20406093 call gpio_config_function_int +5d82 6fe0c4b7 fetch 1 ,mem_spi_so_gpio +5d83 d840001f arg gpcfg_spid_miso ,temp +5d84 20206093 branch gpio_config_function_int + +spi_gpio_default_init: +5d85 7044b50e jam 14 ,mem_spi_cs_gpio +5d86 7044b60d jam 13 ,mem_spi_si_gpio +5d87 7044b710 jam 16 ,mem_spi_so_gpio +5d88 7044b80f jam 15 ,mem_spi_sclk_gpio +5d89 7044b911 jam 17 ,mem_spi_wp_gpio +5d8a 7044ba12 jam 18 ,mem_spi_hold_gpio +5d8b 20600000 rtn + +soft_reset_chip: +5d8c 70801001 jam 1 ,core_reset +5d8d 20600000 rtn + +iic_init_600khz: +5d8e 70809105 jam 5 ,core_iicd_scl_low +5d8f 70809207 jam 7 ,core_iicd_scl_high +5d90 70809307 jam 7 ,core_iicd_start_setup +5d91 70809407 jam 7 ,core_iicd_start_hold +5d92 70809507 jam 7 ,core_iicd_stop_setup +5d93 70809605 jam 5 ,core_iicd_data_setup +5d94 70809700 jam 0 ,core_iicd_data_hold +5d95 20600000 rtn + +iic_init_360khz: +5d96 7080910c jam 12 ,core_iicd_scl_low +5d97 7080920d jam 13 ,core_iicd_scl_high +5d98 7080930d jam 13 ,core_iicd_start_setup +5d99 7080940d jam 13 ,core_iicd_start_hold +5d9a 7080950d jam 13 ,core_iicd_stop_setup +5d9b 7080960c jam 12 ,core_iicd_data_setup +5d9c 70809700 jam 0 ,core_iicd_data_hold +5d9d 20600000 rtn + +iicd_init_pin: +5d9e 20405dd3 call iicd_eeprom_write_enable + +iicd_init_pin_scl_sda: +5d9f 6fe0c4c2 fetch 1 ,mem_eeprom_scl_gpio +5da0 d840006c arg gpcfg_iic_scl | gpcfg_pullup ,temp +5da1 20406093 call gpio_config_function_int +5da2 6fe0c4c3 fetch 1 ,mem_eeprom_sda_gpio +5da3 d840006d arg gpcfg_iic_sda | gpcfg_pullup ,temp +5da4 20206093 branch gpio_config_function_int + +iicd_read_init_pin: +5da5 20405dda call iicd_eeprom_write_disable +5da6 20205d9f branch iicd_init_pin_scl_sda + +wait_iicd_done: +5da7 6ff0812c fetch 1 ,core_dma_status +5da8 c302dda7 bbit0 iicd_done ,wait_iicd_done +5da9 20600000 rtn + +iicd_read_data: +5daa 67e082e6 store 1 ,mem_iicd_addr +5dab 580002e6 setarg mem_iicd_addr +5dac 67f1009a store 2 ,core_iicd_txaddr +5dad 58000001 setarg 1 +5dae 67f10098 store 2 ,core_iicd_txlen +5daf 6059009e storet 2 ,core_iicd_rxlen +5db0 6231009c storer rega ,2 ,core_iicd_rxaddr +5db1 70809001 jam 1 ,core_iicd_ctrl +5db2 70800604 jam iicd_start ,core_misc_ctrl +5db3 20205da7 branch wait_iicd_done + +iic_write_data: +5db4 58000000 setarg 0 +5db5 67f1009e store 2 ,core_iicd_rxlen +5db6 67f1009c store 2 ,core_iicd_rxaddr +5db7 60590098 storet 2 ,core_iicd_txlen +5db8 6231009a storer rega ,2 ,core_iicd_txaddr +5db9 70809001 jam 1 ,core_iicd_ctrl +5dba 70800604 jam iicd_start ,core_misc_ctrl +5dbb 20205da7 branch wait_iicd_done + +set_eeprom_size_2k: +5dbc 79200028 set1 mark_eeprom_size ,mark +5dbd 70448308 jam 0x08 ,mem_eeprom_block_size +5dbe 20600000 rtn + +clear_eeprom_size_2k: +5dbf 793f8028 set0 mark_eeprom_size ,mark +5dc0 70448320 jam 0x20 ,mem_eeprom_block_size +5dc1 20600000 rtn + +iicd_read_eep_data_size_2k: +5dc2 6fe0c479 fetch 1 ,mem_eeprom_base +5dc3 9a40fe00 iadd regb ,pdata +5dc4 67e082e4 store 1 ,mem_addr_mi +5dc5 20205dc9 branch iicd_read_eep_size_2k + +iicd_read_eep_size_2k_lcadcode: +5dc6 6fe102e4 fetch 2 ,mem_addr_mi +5dc7 1ff0fe00 byteswap pdata ,pdata +5dc8 67e082e4 store 1 ,mem_addr_mi + +iicd_read_eep_size_2k: +5dc9 58000003 setarg 3 +5dca 67f10098 store 2 ,core_iicd_txlen +5dcb 7002e3a0 jam 0xa0 ,mem_iicd_tbuf +5dcc 7002e5a1 jam 0xa1 ,mem_iicd_tbuf + 2 +5dcd 20205de8 branch iicd_read_eep_common + +iicd_write_protect_eep_data: +5dce 60490964 storet 2 ,mem_temp +5dcf 20405dd3 call iicd_eeprom_write_enable +5dd0 68490964 fetcht 2 ,mem_temp +5dd1 20405e02 call iicd_write_eep_data +5dd2 20205dda branch iicd_eeprom_write_disable + +iicd_eeprom_write_enable: +5dd3 6fe0c4c1 fetch 1 ,mem_eeprom_wp_gpio +5dd4 c17f8000 rtneq gpio_disable +5dd5 c3035dd8 bbit0 6 ,iicd_wp_gpio_output_low +5dd6 580249f0 setarg 150000 +5dd7 2040137d call sleep + +iicd_wp_gpio_output_low: +5dd8 6848c4c1 fetcht 1 ,mem_eeprom_wp_gpio +5dd9 20206069 branch gpio_out_active + +iicd_eeprom_write_disable: +5dda 6848c4c1 fetcht 1 ,mem_eeprom_wp_gpio +5ddb 20206065 branch gpio_out_inactive + +iicd_read_eep_data: +5ddc 47124024 bpatchx patch24_4 ,mem_patch24 +5ddd c5145dc2 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +5dde 6fe14479 fetch 2 ,mem_eeprom_base +5ddf 9a40fe00 iadd regb ,pdata +5de0 1ff0fe00 byteswap pdata ,pdata +5de1 67e102e4 store 2 ,mem_addr_mi + +iicd_read_eep: +5de2 4712c024 bpatchx patch24_5 ,mem_patch24 +5de3 c5145dc6 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +5de4 58000004 setarg 4 +5de5 67f10098 store 2 ,core_iicd_txlen +5de6 7002e3a0 jam 0xa0 ,mem_iicd_tbuf +5de7 7002e6a1 jam 0xa1 ,mem_iicd_tbuf + 3 + +iicd_read_eep_common: +5de8 580002e3 setarg mem_iicd_tbuf +5de9 67f1009a store 2 ,core_iicd_txaddr +5dea 6059009e storet 2 ,core_iicd_rxlen +5deb 6231009c storer rega ,2 ,core_iicd_rxaddr +5dec 58000002 setarg 2 +5ded 2a2c000f isolate0 15 ,rega +5dee 7920fe00 setflag true ,0 ,pdata +5def 67f08090 store 1 ,core_iicd_ctrl +5df0 70800604 jam iicd_start ,core_misc_ctrl +5df1 d8e00005 arg iicd_done ,queue +5df2 20405bee call decrypt_code +5df3 20405da7 call wait_iicd_done +5df4 2feffe04 isolate1 iicd_crcok ,pdata +5df5 20405be7 call set_ucode_status +5df6 c5145dfd bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +5df7 6fe102e4 fetch 2 ,mem_addr_mi +5df8 1ff0fe00 byteswap pdata ,pdata +5df9 9840fe00 iadd temp ,pdata +5dfa 1ff0fe00 byteswap pdata ,pdata +5dfb 67e102e4 store 2 ,mem_addr_mi +5dfc 20600000 rtn + +iicd_read_eep_load_code_size_2k: +5dfd 6fe082e4 fetch 1 ,mem_addr_mi +5dfe 9840fe00 iadd temp ,pdata +5dff 1ff0fe00 byteswap pdata ,pdata +5e00 67e102e4 store 2 ,mem_addr_mi +5e01 20600000 rtn + +iicd_write_eep_data: +5e02 6fe14479 fetch 2 ,mem_eeprom_base +5e03 9a40fe00 iadd regb ,pdata + +iicd_write_ota_data: +5e04 67e1095c store 2 ,mem_pdatatemp +5e05 47134024 bpatchx patch24_6 ,mem_patch24 +5e06 60490964 storet 2 ,mem_temp +5e07 6221097b storer rega ,2 ,mem_contr + +iicd_write_eep_loop: +5e08 20405e17 call iicd_eep_transparency +5e09 68490974 fetcht 2 ,mem_regb +5e0a 6a21097b fetchr rega ,2 ,mem_contr +5e0b 6fe1095c fetch 2 ,mem_pdatatemp +5e0c 20405e38 call iicd_write_eep +5e0d 6fe10974 fetch 2 ,mem_regb +5e0e 6849097b fetcht 2 ,mem_contr +5e0f 98408400 iadd temp ,temp +5e10 6049097b storet 2 ,mem_contr +5e11 6849095c fetcht 2 ,mem_pdatatemp +5e12 98408400 iadd temp ,temp +5e13 6049095c storet 2 ,mem_pdatatemp +5e14 6fe10964 fetch 2 ,mem_temp +5e15 243a5e08 nbranch iicd_write_eep_loop ,blank +5e16 20600000 rtn + +iicd_eep_transparency: +5e17 4713c024 bpatchx patch24_7 ,mem_patch24 +5e18 6fe0c483 fetch 1 ,mem_eeprom_block_size +5e19 1fe0ffff increase -1 ,pdata +5e1a 6849095c fetcht 2 ,mem_pdatatemp +5e1b 9841fe00 ior temp ,pdata +5e1c 1fe0fe01 increase 1 ,pdata +5e1d 67e18978 store 3 ,mem_regc +5e1e 6fe10964 fetch 2 ,mem_temp +5e1f 9840fe00 iadd temp ,pdata +5e20 68498978 fetcht 3 ,mem_regc +5e21 98467e00 isub temp ,pdata +5e22 24215e29 nbranch iicd_eep_deal_short_packet ,positive +5e23 67e10964 store 2 ,mem_temp +5e24 6fe18978 fetch 3 ,mem_regc +5e25 6849095c fetcht 2 ,mem_pdatatemp +5e26 98467e00 isub temp ,pdata +5e27 67e10974 store 2 ,mem_regb +5e28 20600000 rtn + +iicd_eep_deal_short_packet: +5e29 6fe10964 fetch 2 ,mem_temp +5e2a 67e10974 store 2 ,mem_regb +5e2b 58000000 setarg 0 +5e2c 67e10964 store 2 ,mem_temp +5e2d 20600000 rtn + +iicd_write_eep_size_2k: +5e2e 1a427e00 copy regb ,pdata +5e2f 18408402 increase 2 ,temp +5e30 60590098 storet 2 ,core_iicd_txlen +5e31 1a20a3fe increase -2 ,rega +5e32 e8418011 ifetcht 3 ,rega +5e33 18422400 copy temp ,regb +5e34 d84000a0 arg 0xa0 ,temp +5e35 e0408011 istoret 1 ,rega +5e36 e7e08005 istore 1 ,contw +5e37 20205e45 branch iicd_write_eep_common + +iicd_write_eep: +5e38 1fe22400 copy pdata ,regb +5e39 47144025 bpatchx patch25_0 ,mem_patch25 +5e3a c5145e2e bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +5e3b 1a427e00 copy regb ,pdata +5e3c 18408403 increase 3 ,temp +5e3d 60590098 storet 2 ,core_iicd_txlen +5e3e 1a20a3fd increase -3 ,rega +5e3f e8418011 ifetcht 3 ,rega +5e40 18422400 copy temp ,regb +5e41 d84000a0 arg 0xa0 ,temp +5e42 e0408011 istoret 1 ,rega +5e43 1ff0fe00 byteswap pdata ,pdata +5e44 e7e10005 istore 2 ,contw + +iicd_write_eep_common: +5e45 6231009a storer rega ,2 ,core_iicd_txaddr +5e46 58000000 setarg 0 +5e47 67f1009e store 2 ,core_iicd_rxlen +5e48 70809001 jam 1 ,core_iicd_ctrl +5e49 70800604 jam iicd_start ,core_misc_ctrl +5e4a 20405da7 call wait_iicd_done +5e4b e2418011 istorer regb ,3 ,rega + +iic_check_eeprom_standby: +5e4c 4714c025 bpatchx patch25_1 ,mem_patch25 +5e4d 7002e600 jam 0 ,mem_iicd_tbuf + 3 + +iic_check_eeprom_standby_wait: +5e4e 58000001 setarg 1 +5e4f 67f10098 store 2 ,core_iicd_txlen +5e50 7002e3a0 jam 0xa0 ,mem_iicd_tbuf +5e51 580002e3 setarg mem_iicd_tbuf +5e52 67f1009a store 2 ,core_iicd_txaddr +5e53 58000000 setarg 0 +5e54 67f1009e store 2 ,core_iicd_rxlen +5e55 67f1009c store 2 ,core_iicd_rxaddr +5e56 58000003 setarg 3 +5e57 67f08090 store 1 ,core_iicd_ctrl +5e58 70800604 jam iicd_start ,core_misc_ctrl +5e59 20405da7 call wait_iicd_done +5e5a 6ff0812c fetch 1 ,core_dma_status +5e5b c4030000 rtnbit0 iicd_ack +5e5c 200005dc nop 1500 +5e5d 6fe082e6 fetch 1 ,mem_iicd_tbuf + 3 +5e5e 1fe0fe01 increase 1 ,pdata +5e5f 67e082e6 store 1 ,mem_iicd_tbuf + 3 +5e60 1fe67c28 sub pdata ,40 ,null +5e61 24610000 nrtn positive +5e62 20205e4e branch iic_check_eeprom_standby_wait + +efuse_read_data: +5e63 18427200 copy temp ,loopcnt +5e64 1fe20400 copy pdata ,temp +5e65 47154025 bpatchx patch25_2 ,mem_patch25 +5e66 18498400 lshift3 temp ,temp +5e67 20405e96 call efuse_vdd_on +5e68 70804780 jam 0x80 ,core_efuse_ctrl + +efuse_read_loop: +5e69 70804786 jam 0x86 ,core_efuse_ctrl +5e6a 60590045 storet 2 ,core_efuse_addr +5e6b 18408408 increase 8 ,temp +5e6c 70804787 jam 0x87 ,core_efuse_ctrl +5e6d 6ff08007 fetch 1 ,core_efuse_rdata +5e6e e7e08011 istore 1 ,rega +5e6f 1a20a201 increase 1 ,rega +5e70 c2005e69 loop efuse_read_loop +5e71 70804786 jam 0x86 ,core_efuse_ctrl +5e72 70804780 jam 0x80 ,core_efuse_ctrl +5e73 70804700 jam 0x0 ,core_efuse_ctrl +5e74 20205e9e branch efuse_vdd_off + +efuse_program: +5e75 20405e8e call efuse_vdd_fsource_on +5e76 70804780 jam 0x80 ,core_efuse_ctrl +5e77 18498400 lshift3 temp ,temp +5e78 1a220c00 copy rega ,contr + +efuse_program_loop: +5e79 efe08006 ifetch 1 ,contr +5e7a da400008 arg 8 ,regb + +efuse_program_bit_loop: +5e7b 1fe17c01 and pdata ,1 ,null +5e7c 2442deaa ncall efuse_program_bit ,zero +5e7d 1fe37e00 rshift pdata ,pdata +5e7e 18408401 increase 1 ,temp +5e7f 1a40a5ff increase -1 ,regb +5e80 2422de7b nbranch efuse_program_bit_loop ,zero +5e81 c2005e79 loop efuse_program_loop +5e82 70804780 jam 0x80 ,core_efuse_ctrl +5e83 70804700 jam 0x0 ,core_efuse_ctrl +5e84 20205e9e branch efuse_vdd_off + +efuse_lna_pa_ldo_on: +5e85 6ff08a0a fetch 1 ,core_rf_ldo_en0 +5e86 79207e01 set1 1 ,pdata +5e87 67f08a0a store 1 ,core_rf_ldo_en0 +5e88 200000c8 nop 200 +5e89 6ff08a0b fetch 1 ,core_rf_ldo_en1 +5e8a 79207e00 set1 0 ,pdata +5e8b 67f08a0b store 1 ,core_rf_ldo_en1 +5e8c 200007d0 nop 2000 +5e8d 20600000 rtn + +efuse_vdd_fsource_on: +5e8e 20405e85 call efuse_lna_pa_ldo_on +5e8f 6ff08a0b fetch 1 ,core_rf_ldo_en1 +5e90 793ffe05 set0 5 ,pdata +5e91 79207e04 set1 4 ,pdata +5e92 79207e03 set1 3 ,pdata +5e93 67f08a0b store 1 ,core_rf_ldo_en1 +5e94 200001f4 nop 500 +5e95 20600000 rtn + +efuse_vdd_on: +5e96 20405e85 call efuse_lna_pa_ldo_on +5e97 6ff08a0b fetch 1 ,core_rf_ldo_en1 +5e98 79207e05 set1 5 ,pdata +5e99 79207e04 set1 4 ,pdata +5e9a 793ffe03 set0 3 ,pdata +5e9b 67f08a0b store 1 ,core_rf_ldo_en1 +5e9c 200001f4 nop 500 +5e9d 20600000 rtn + +efuse_vdd_off: +5e9e 4715c025 bpatchx patch25_3 ,mem_patch25 +5e9f 6ff08a0b fetch 1 ,core_rf_ldo_en1 +5ea0 793ffe05 set0 5 ,pdata +5ea1 793ffe04 set0 4 ,pdata +5ea2 793ffe03 set0 3 ,pdata +5ea3 793ffe00 set0 0 ,pdata +5ea4 67f08a0b store 1 ,core_rf_ldo_en1 +5ea5 200000c8 nop 200 +5ea6 6ff08a0a fetch 1 ,core_rf_ldo_en0 +5ea7 793ffe01 set0 1 ,pdata +5ea8 67f08a0a store 1 ,core_rf_ldo_en0 +5ea9 20600000 rtn + +efuse_program_bit: +5eaa 70804780 jam 0x80 ,core_efuse_ctrl +5eab 2000000a nop 10 +5eac 60590045 storet 2 ,core_efuse_addr +5ead 70804781 jam 0x81 ,core_efuse_ctrl +5eae 2000006e nop 110 +5eaf 20600000 rtn + +uarta_init_dma_mem: +5eb0 20407e54 call enable_user +5eb1 20205eb4 branch uart_init_dma_mem + +uartb_init_dma_mem: +5eb2 20407e56 call disable_user +5eb3 20205eb4 branch uart_init_dma_mem + +uart_init_dma_mem: +5eb4 1ff10400 rshift16 pdata ,temp +5eb5 20545ee7 call uarta_init_rx ,user +5eb6 24545eeb ncall uartb_init_rx ,user +5eb7 1fef7e00 rshift32 pdata ,pdata +5eb8 1ff10400 rshift16 pdata ,temp +5eb9 20545edf call uarta_init_tx ,user +5eba 24545ee3 ncall uartb_init_tx ,user +5ebb 24345ec0 nbranch uartb_init_dma_turn_on_clk ,user +5ebc 6ff10050 fetch 2 ,core_clkoff +5ebd 793ffe0f set0 clock_off_uart ,pdata +5ebe 67f10050 store 2 ,core_clkoff +5ebf 20600000 rtn + +uartb_init_dma_turn_on_clk: +5ec0 6ff10050 fetch 2 ,core_clkoff +5ec1 793ffe0e set0 clock_off_uartb ,pdata +5ec2 67f10050 store 2 ,core_clkoff +5ec3 20600000 rtn + +uarta_init_baud_rate: +5ec4 67f10052 store uart_baud_len ,core_uart_baud +5ec5 20600000 rtn + +uartb_init_baud_rate: +5ec6 67f10062 store uart_baud_len ,core_uartb_baud +5ec7 20600000 rtn + +uarta_calc_baud_rate_config: +5ec8 20405ecc call uart_calc_baud_rate_config +5ec9 20205ec4 branch uarta_init_baud_rate + +uartb_calc_baud_rate_config: +5eca 20405ecc call uart_calc_baud_rate_config +5ecb 20205ec6 branch uartb_init_baud_rate + +uart_calc_baud_rate_config: +5ecc 20405ed1 call uart_calc_baud_rate_config_choice_uart_clock +5ecd 9846fc00 idiv temp +5ece 20407def call wait_div_end +5ecf 1807fe00 quotient pdata +5ed0 20600000 rtn + +uart_calc_baud_rate_config_choice_uart_clock: +5ed1 6ff08043 fetch 1 ,core_uart_clksel +5ed2 c3005ed5 bbit0 uart_clock_select_bit ,uart_calc_baud_rate_config_choice_uart_clock_crystal +5ed3 5adc6c00 setarg uart_clock_freq_48m +5ed4 20600000 rtn + +uart_calc_baud_rate_config_choice_uart_clock_crystal: +5ed5 596e3600 setarg uart_clock_freq_24m +5ed6 20600000 rtn + +uart_clock_select_main_freq_crystal: +5ed7 6ff08043 fetch 1 ,core_uart_clksel +5ed8 1fe17efe and pdata ,uart_clock_select_crystal ,pdata +5ed9 67f08043 store 1 ,core_uart_clksel +5eda 20600000 rtn + +uart_clock_select_main_freq_dpll: +5edb 6ff08043 fetch 1 ,core_uart_clksel +5edc 1fe1fe01 or pdata ,uart_clock_select_dpll ,pdata +5edd 67f08043 store 1 ,core_uart_clksel +5ede 20600000 rtn + +uarta_init_tx: +5edf 67f1005a store 2 ,core_uart_tsaddr +5ee0 67f1005e store 2 ,core_uart_twptr +5ee1 6059005c storet 2 ,core_uart_teaddr +5ee2 20600000 rtn + +uartb_init_tx: +5ee3 67f1006a store 2 ,core_uartb_tsaddr +5ee4 67f1006e store 2 ,core_uartb_twptr +5ee5 6059006c storet 2 ,core_uartb_teaddr +5ee6 20600000 rtn + +uarta_init_rx: +5ee7 67f10054 store 2 ,core_uart_rsaddr +5ee8 67f10058 store 2 ,core_uart_rrptr +5ee9 60590056 storet 2 ,core_uart_readdr +5eea 20600000 rtn + +uartb_init_rx: +5eeb 67f10064 store 2 ,core_uartb_rsaddr +5eec 67f10068 store 2 ,core_uartb_rrptr +5eed 60590066 storet 2 ,core_uartb_readdr +5eee 20600000 rtn + +uarta_prepare_tx: +5eef 6951005a fetchr contus ,2 ,core_uart_tsaddr +5ef0 6a11005c fetchr contue ,2 ,core_uart_teaddr +5ef1 6871005e fetchr contu ,2 ,core_uart_twptr +5ef2 20600000 rtn + +uartb_prepare_tx: +5ef3 6951006a fetchr contus ,2 ,core_uartb_tsaddr +5ef4 6a11006c fetchr contue ,2 ,core_uartb_teaddr +5ef5 6871006e fetchr contu ,2 ,core_uartb_twptr +5ef6 20600000 rtn + +uarta_prepare_rx: +5ef7 69510054 fetchr contus ,2 ,core_uart_rsaddr +5ef8 6a110056 fetchr contue ,2 ,core_uart_readdr +5ef9 68710058 fetchr contu ,2 ,core_uart_rrptr +5efa 20600000 rtn + +uartb_prepare_rx: +5efb 69510064 fetchr contus ,2 ,core_uartb_rsaddr +5efc 6a110066 fetchr contue ,2 ,core_uartb_readdr +5efd 68710068 fetchr contu ,2 ,core_uartb_rrptr +5efe 20600000 rtn + +uarta_send: +5eff 6071005e storer contu ,2 ,core_uart_twptr +5f00 20600000 rtn + +uartb_send: +5f01 6071006e storer contu ,2 ,core_uartb_twptr +5f02 20600000 rtn + +uarta_rxdone: +5f03 60710058 storer contu ,2 ,core_uart_rrptr +5f04 20600000 rtn + +uartb_rxdone: +5f05 60710068 storer contu ,2 ,core_uartb_rrptr +5f06 20600000 rtn + +uarta_clear_current_rx: +5f07 20405ef7 call uarta_prepare_rx +5f08 6ff10112 fetch 2 ,core_uart_rxitems +5f09 98608600 iadd contu ,contu +5f0a 20205f03 branch uarta_rxdone + +uartb_clear_current_rx: +5f0b 20405efb call uartb_prepare_rx +5f0c 6ff10158 fetch 2 ,core_uartb_rxitems +5f0d 98608600 iadd contu ,contu +5f0e 20205f05 branch uartb_rxdone + +uarta_prepare_tx_register_push: +5f0f 20405f17 call uart_register_push +5f10 20205eef branch uarta_prepare_tx + +uartb_prepare_tx_register_push: +5f11 20405f17 call uart_register_push +5f12 20205ef3 branch uartb_prepare_tx + +uarta_send_register_pop: +5f13 20405eff call uarta_send +5f14 20205f1b branch uart_register_pop + +uartb_send_register_pop: +5f15 20405f01 call uartb_send +5f16 20205f1b branch uart_register_pop + +uart_register_push: +5f17 60610983 storer contu ,2 ,mem_contu +5f18 61410981 storer contus ,2 ,mem_contue +5f19 6201097f storer contue ,2 ,mem_contus +5f1a 20600000 rtn + +uart_register_pop: +5f1b 68610983 fetchr contu ,2 ,mem_contu +5f1c 69410981 fetchr contus ,2 ,mem_contue +5f1d 6a01097f fetchr contue ,2 ,mem_contus +5f1e 20600000 rtn + +uart_copy_tx_bytes_fast: +5f1f 1f227e00 deposit loopcnt +5f20 207a0000 rtn blank + +uart_copy_tx_bytes_fast_loop: +5f21 1f20f3f8 increase -8 ,loopcnt +5f22 20415f2d call uart_tx_8_bytes ,positive +5f23 20628000 rtn zero +5f24 20215f21 branch uart_copy_tx_bytes_fast_loop ,positive +5f25 1f20f208 increase 8 ,loopcnt + +uart_copy_tx_bytes_fast_loop_four: +5f26 1f20f3fc increase -4 ,loopcnt +5f27 20415f30 call uart_tx_4_bytes ,positive +5f28 20628000 rtn zero +5f29 20215f26 branch uart_copy_tx_bytes_fast_loop_four ,positive +5f2a 1f20f204 increase 4 ,loopcnt +5f2b 20205f33 branch uart_copy_tx_bytes + +uart_tx_16_bytes: +5f2c 20405f2d call uart_tx_8_bytes + +uart_tx_8_bytes: +5f2d efe40006 ifetch 8 ,contr +5f2e e7e40003 istore 8 ,contu +5f2f 20600000 rtn + +uart_tx_4_bytes: +5f30 efe20006 ifetch 4 ,contr +5f31 e7e20003 istore 4 ,contu +5f32 20600000 rtn + +uart_copy_tx_bytes: +5f33 1f227e00 deposit loopcnt +5f34 207a0000 rtn blank + +uart_copy_tx_bytes_loop: +5f35 efe08006 ifetch 1 ,contr +5f36 e7e08003 istore 1 ,contu +5f37 c2005f35 loop uart_copy_tx_bytes_loop +5f38 20600000 rtn + +uart_copy_rx_bytes_fast: +5f39 1f227e00 deposit loopcnt +5f3a 207a0000 rtn blank + +uart_copy_rx_bytes_fast_loop: +5f3b 1f20f3f8 increase -8 ,loopcnt +5f3c 20415f47 call uart_rx_8_bytes ,positive +5f3d 20628000 rtn zero +5f3e 20215f3b branch uart_copy_rx_bytes_fast_loop ,positive +5f3f 1f20f208 increase 8 ,loopcnt + +uart_copy_rx_bytes_fast_loop_four: +5f40 1f20f3fc increase -4 ,loopcnt +5f41 20415f4a call uart_rx_4_bytes ,positive +5f42 20628000 rtn zero +5f43 20215f40 branch uart_copy_rx_bytes_fast_loop_four ,positive +5f44 1f20f204 increase 4 ,loopcnt +5f45 20205f4d branch uart_copy_rx_bytes + +uart_rx_16_bytes: +5f46 20405f47 call uart_rx_8_bytes + +uart_rx_8_bytes: +5f47 efe40003 ifetch 8 ,contu +5f48 e7e40005 istore 8 ,contw +5f49 20600000 rtn + +uart_rx_4_bytes: +5f4a efe20003 ifetch 4 ,contu +5f4b e7e20005 istore 4 ,contw +5f4c 20600000 rtn + +uart_copy_rx_bytes: +5f4d 1f227e00 deposit loopcnt +5f4e 207a0000 rtn blank + +uart_copy_rx_bytes_loop: +5f4f efe08003 ifetch 1 ,contu +5f50 e7e08005 istore 1 ,contw +5f51 c2005f4f loop uart_copy_rx_bytes_loop +5f52 20600000 rtn + +app_store_nvram_event: +5f53 70095b3d jam bt_evt_store_nvram ,mem_fifo_temp +5f54 20207871 branch ui_ipc_send_event + +check_51cmd_store_reconn_info: + +check_51cmd_update_device_record: +5f55 47164025 bpatchx patch25_4 ,mem_patch25 +5f56 6fe0c489 fetch 1 ,mem_nv_data_number +5f57 207a0000 rtn blank +5f58 20405ffa call check_nvram +5f59 2042e000 call init_device_list ,zero +5f5a 20407e5a call disable_user2 +5f5b 20405f89 call nvram_find_addr_from_bd_list + +write_device_record: +5f5c 6fe0c489 fetch 1 ,mem_nv_data_number +5f5d 1fe22600 icopy regc +5f5e 68494487 fetcht 2 ,mem_nv_data_ptr +5f5f 604900ef storet 2 ,mem_list_item_ptr + +write_device_loop_find: +5f60 1a627e00 copy regc ,pdata +5f61 203a5f53 branch app_store_nvram_event ,blank +5f62 1a60a7ff increase -1 ,regc +5f63 18422200 copy temp ,rega +5f64 efe08011 ifetch 1 ,rega +5f65 684880e7 fetcht 1 ,mem_select_list_item +5f66 98467c00 isub temp ,null +5f67 2042df70 call set_index_finded_device ,zero +5f68 20215f6c branch write_device_loop_find0 ,positive +5f69 efe08011 ifetch 1 ,rega +5f6a 1fe0fe01 increase 1 ,pdata +5f6b e7e08011 istore 1 ,rega + +write_device_loop_find0: +5f6c 684900ef fetcht 2 ,mem_list_item_ptr +5f6d 18408422 increase nv_data_len ,temp +5f6e 604900ef storet 2 ,mem_list_item_ptr +5f6f 20205f60 branch write_device_loop_find + +set_index_finded_device: +5f70 58000000 setarg 0 +5f71 e7e08011 istore 1 ,rega +5f72 6fe080e8 fetch 1 ,mem_temp_reconn_record +5f73 e7e08005 istore 1 ,contw +5f74 c099df7e bne rec_3_mode ,set_index_finded_device_ble_mode +5f75 da4041cb arg mem_link_key ,regb + +set_index_find_device_master_addr: +5f76 efe30006 ifetch 6 ,contr +5f77 e7e40005 istore 8 ,contw +5f78 58000000 setarg 0 +5f79 e7e40005 istore 8 ,contw +5f7a 1a420c00 copy regb ,contr + +store_rec_data_common: +5f7b 20407d0c call memcpy16 +5f7c 18007c01 force 1 ,null +5f7d 20600000 rtn + +set_index_finded_device_ble_mode: +5f7e c01b5f82 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +5f7f c01bdf86 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +5f80 da404316 arg mem_le_ltk ,regb +5f81 20205f76 branch set_index_find_device_master_addr + +set_index_finded_device_irk: +5f82 d8c043ac arg mem_le_irk ,contr +5f83 20407d0c call memcpy16 + +store_ble_rec_data_common: +5f84 d8c04316 arg mem_le_ltk ,contr +5f85 20205f7b branch store_rec_data_common + +set_index_finded_device_ediv: +5f86 d8c043a4 arg mem_le_rand ,contr +5f87 20407d0c call memcpy16 +5f88 20205f84 branch store_ble_rec_data_common + +nvram_find_addr_from_bd_list: +5f89 20407e56 call disable_user +5f8a 6fe0c489 fetch 1 ,mem_nv_data_number +5f8b 207a0000 rtn blank +5f8c 4716c025 bpatchx patch25_5 ,mem_patch25 +5f8d 6fe1478c fetch 2 ,mem_ui_state_map +5f8e c2805fac bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode +5f8f c4048000 rtnbit0 ui_state_ble_connected + +find_addr_from_bd_list_ble_mode: +5f90 6fe0c36a fetch 1 ,mem_le_conn_peer_addr_type +5f91 c0005fa5 beq master_public_addr ,find_addr_from_bd_list_public_device_addr +5f92 6fe0829c fetch 1 ,mem_le_plap + 5 +5f93 2fe180c0 compare 0xc0 ,pdata ,0xc0 +5f94 2020df98 branch find_addr_from_bd_list_static_addr ,true +5f95 2fe18040 compare 0x40 ,pdata ,0xc0 +5f96 2020dfaa branch find_addr_from_bd_list_random_addr ,true +5f97 20205f9f branch find_addr_from_bd_list_random_non_resolvable_private_address_sc_or_legacy + +find_addr_from_bd_list_static_addr: +5f98 20365f9c branch find_addr_from_bd_list_static_addr_reconnect ,user2 +5f99 6fe0c34e fetch 1 ,mem_le_preq_init_key_distribution +5f9a c300dfa5 bbit0 le_initator_irk_bit ,find_addr_from_bd_list_public_device_addr +5f9b 20205f9f branch find_addr_from_bd_list_static_addr_sc_or_legacy + +find_addr_from_bd_list_static_addr_reconnect: +5f9c 20405fa5 call find_addr_from_bd_list_public_device_addr +5f9d 20740000 rtn user +5f9e 20205f9f branch find_addr_from_bd_list_static_addr_sc_or_legacy + +find_addr_from_bd_list_static_addr_sc_or_legacy: + +find_addr_from_bd_list_random_non_resolvable_private_address_sc_or_legacy: +5f9f 6fe0c39d fetch 1 ,mem_le_pairing_mode +5fa0 c283dfa2 bbit1 le_pairing_mode_secure_connect_bit ,find_addr_from_bd_list_random_non_resolvable_private_address_sc +5fa1 20205fa8 branch find_addr_from_bd_list_random_non_resolvable_private_address + +find_addr_from_bd_list_static_addr_sc: + +find_addr_from_bd_list_random_non_resolvable_private_address_sc: +5fa2 6fe30297 fetch 6 ,mem_le_plap +5fa3 67e443a4 store 8 ,mem_le_rand +5fa4 20205fa8 branch find_addr_from_bd_list_random_non_resolvable_private_address + +find_addr_from_bd_list_public_device_addr: +5fa5 7000e835 jam rec_4_mode_static_address ,mem_temp_reconn_record +5fa6 6fe30297 fetch 6 ,mem_le_plap +5fa7 20205fae branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_non_resolvable_private_address: +5fa8 7000e837 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +5fa9 20205fae branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_addr: +5faa 7000e836 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +5fab 20205fae branch find_addr_from_bd_list_common + +find_addr_from_bd_list_spp_mode: +5fac 7000e833 jam rec_3_mode ,mem_temp_reconn_record +5fad 6fe30041 fetch 6 ,mem_plap + +find_addr_from_bd_list_common: +5fae 67e300e9 store 6 ,mem_temp_lap +5faf 6fe14487 fetch 2 ,mem_nv_data_ptr +5fb0 e840803f ifetcht 1 ,pdata +5fb1 1fe0fe01 pincrease 1 +5fb2 67e100ef store 2 ,mem_list_item_ptr +5fb3 604880e7 storet 1 ,mem_select_list_item +5fb4 6fe0c489 fetch 1 ,mem_nv_data_number +5fb5 1fe22600 icopy regc + +nvram_find_addr_from_list: +5fb6 6fe100ef fetch 2 ,mem_list_item_ptr +5fb7 1fe22200 copy pdata ,rega +5fb8 20405fc6 call nvram_find_addr_from_list_compare +5fb9 20740000 rtn user +5fba 684900ef fetcht 2 ,mem_list_item_ptr +5fbb 18408422 increase nv_data_len ,temp +5fbc 604900ef storet 2 ,mem_list_item_ptr +5fbd 184085ff increase -1 ,temp +5fbe efe08002 ifetch 1 ,temp +5fbf 67e080e7 store 1 ,mem_select_list_item +5fc0 1a60a7ff increase -1 ,regc +5fc1 2422dfb6 nbranch nvram_find_addr_from_list ,zero +5fc2 6fe0c489 fetch 1 ,mem_nv_data_number +5fc3 1fe0ffff pincrease decreased_one +5fc4 67e080e7 store 1 ,mem_select_list_item +5fc5 20600000 rtn + +nvram_find_addr_from_list_compare: +5fc6 6fe080e8 fetch 1 ,mem_temp_reconn_record +5fc7 c099dfcd bne rec_3_mode ,find_addr_from_list_compare_ble_mode + +find_master_addr_from_list_compare: +5fc8 da4000e8 arg mem_temp_reconn_record ,regb +5fc9 df200007 arg 7 ,loopcnt +5fca 20407df1 call string_compare +5fcb 2022fe54 branch enable_user ,zero +5fcc 20600000 rtn + +find_addr_from_list_compare_ble_mode: +5fcd c01b5fd0 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +5fce c01bdfeb beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +5fcf 20205fc8 branch find_master_addr_from_list_compare + +find_irk_form_list_compare: +5fd0 e8408011 ifetcht 1 ,rega +5fd1 98467c00 isub temp ,null +5fd2 24628000 nrtn zero +5fd3 d8a0098e arg mem_le_prand ,contw +5fd4 df200010 arg 16 ,loopcnt +5fd5 20407d26 call clear_mem +5fd6 6fe1829a fetch 3 ,mem_le_plap + 3 +5fd7 67e1898e store 3 ,mem_le_prand +5fd8 20405fe2 call genernate_master_macaddress +5fd9 6fe109ab fetch 2 ,mem_le_aes_128 + 13 +5fda 1ff0fe00 byteswap pdata ,pdata +5fdb 1fed0400 lshift8 pdata ,temp +5fdc efe08006 ifetch 1 ,contr +5fdd 9840fe00 iadd temp ,pdata +5fde 68498297 fetcht 3 ,mem_le_plap +5fdf 98467c00 isub temp ,null +5fe0 2022fe54 branch enable_user ,zero +5fe1 20600000 rtn + +genernate_master_macaddress: +5fe2 d8c0098e arg mem_le_prand ,contr +5fe3 20406dc0 call load_data128 +5fe4 efe08011 ifetch 1 ,rega +5fe5 20406dc1 call load_regext +5fe6 18006c38 force 0x38 ,aes_ctrl +5fe7 18006c00 force 0x0 ,aes_ctrl +5fe8 20406d57 call wait_aes +5fe9 d8a0099e arg mem_le_aes_128 ,contw +5fea 20206dd1 branch store_aes_result + +find_ediv_form_list_compare: +5feb e8408011 ifetcht 1 ,rega +5fec 98467c00 isub temp ,null +5fed 24628000 nrtn zero +5fee 18c22200 copy contr ,rega +5fef 18c0a608 add contr ,8 ,regc +5ff0 da4043a4 arg mem_le_rand ,regb +5ff1 df200008 arg 8 ,loopcnt +5ff2 20407df1 call string_compare +5ff3 2022fe54 branch enable_user ,zero +5ff4 1a622200 copy regc ,rega +5ff5 da4043ac arg mem_le_irk ,regb +5ff6 df200008 arg 8 ,loopcnt +5ff7 20407df1 call string_compare +5ff8 2022fe54 branch enable_user ,zero +5ff9 20600000 rtn + +check_nvram: +5ffa 6fe14487 fetch 2 ,mem_nv_data_ptr +5ffb e840803f ifetcht 1 ,pdata +5ffc 1fe0fe22 pincrease nv_data_len +5ffd efe0803f ifetch 1 ,pdata +5ffe 98467c00 isub temp ,null +5fff 20600000 rtn + +init_device_list: +6000 6fe0c489 fetch 1 ,mem_nv_data_number +6001 1fe27200 icopy loopcnt +6002 68494487 fetcht 2 ,mem_nv_data_ptr +6003 58000000 setarg 0 + +init_device_list_loop: +6004 e7e08002 istore 1 ,temp +6005 18408422 increase nv_data_len ,temp +6006 1fe0fe01 pincrease 1 +6007 c2006004 loop init_device_list_loop +6008 20600000 rtn + +load_device_list: +6009 47174025 bpatchx patch25_6 ,mem_patch25 +600a 20407e58 call enable_user2 +600b 20405f89 call nvram_find_addr_from_bd_list +600c 6fe08031 fetch 1 ,mem_state +600d 79347e06 setflag user ,state_combkey ,pdata +600e 67e08031 store 1 ,mem_state +600f 24346014 nbranch clear_key_exists ,user +6010 1a208c0a add rega ,10 ,contr +6011 d8a041cb arg mem_link_key ,contw +6012 20407d0c call memcpy16 +6013 2020602c branch check_link_key_load + +clear_key_exists: +6014 7041ca00 jam 0 ,mem_link_key_exists +6015 20600000 rtn + +load_device_list_mode_4: +6016 6fe4c3a2 fetch 9 ,mem_le_ediv +6017 203a6023 branch clear_ltk_exists ,blank +6018 20407e58 call enable_user2 +6019 20405f89 call nvram_find_addr_from_bd_list +601a 24346023 nbranch clear_ltk_exists ,user +601b 6fe100ef fetch 2 ,mem_list_item_ptr +601c 1fe08c01 add pdata ,1 ,contr +601d d8a043ac arg mem_le_irk ,contw +601e 20407d0c call memcpy16 +601f d8a04316 arg mem_le_ltk ,contw +6020 20407d0c call memcpy16 +6021 70432601 jam 1 ,mem_ltk_exists +6022 20600000 rtn + +clear_ltk_exists: +6023 70432600 jam 0 ,mem_ltk_exists +6024 20600000 rtn + +eeprom_store_le_reconn_info: +6025 7000e834 jam rec_4_mode ,mem_record_bt_mode +6026 20206028 branch eeprom_store_reconn_info + +eeprom_store_bd_reconn_info: +6027 7000e833 jam rec_3_mode ,mem_record_bt_mode + +eeprom_store_reconn_info: +6028 6fe0c09a fetch 1 ,mem_device_option +6029 c0055f55 beq dvc_op_module ,check_51cmd_update_device_record +602a c0044586 beq dvc_op_mouse ,mouse_store_remote_bdaddr +602b 20600000 rtn + +check_link_key_load: +602c 6fe441cb fetch 8 ,mem_link_key +602d 684c41d3 fetcht 8 ,mem_link_key + 8 +602e 9841fe00 ior temp ,pdata +602f 207a0000 rtn blank +6030 7041ca01 jam 1 ,mem_link_key_exists +6031 20600000 rtn + +gpio_set_wake_by_current_state: +6032 4717c025 bpatchx patch25_7 ,mem_patch25 +6033 79200407 set1 gpio_active_bit ,temp +6034 20406059 call gpio_get_bit +6035 7d208407 nsetflag true ,gpio_active_bit ,temp + +gpio_set_wake: +6036 47184026 bpatchx patch26_0 ,mem_patch26 +6037 18467cff sub temp ,ui_button_gpio_disable ,null +6038 20628000 rtn zero +6039 284c0007 isolate0 gpio_active_bit ,temp +603a 18410e1f and temp ,0x1f ,queue +603b 6fe2009f fetch 4 ,mem_gpio_wakeup_low +603c f920fe00 qsetflag true ,pdata +603d 67e2009f store 4 ,mem_gpio_wakeup_low +603e 6fe200a3 fetch 4 ,mem_gpio_wakeup_high +603f fd20fe00 nqsetflag true ,pdata +6040 67e200a3 store 4 ,mem_gpio_wakeup_high +6041 20600000 rtn + +gpio_clr_wake: +6042 4718c026 bpatchx patch26_1 ,mem_patch26 +6043 18467cff sub temp ,ui_button_gpio_disable ,null +6044 20628000 rtn zero +6045 284c0007 isolate0 gpio_active_bit ,temp +6046 18410e1f and temp ,0x1f ,queue +6047 6fe2009f fetch 4 ,mem_gpio_wakeup_low +6048 f93ffe00 qset0 pdata +6049 67e2009f store 4 ,mem_gpio_wakeup_low +604a 6fe200a3 fetch 4 ,mem_gpio_wakeup_high +604b f93ffe00 qset0 pdata +604c 67e200a3 store 4 ,mem_gpio_wakeup_high +604d 20600000 rtn + +gpio_config_input_nowake: +604e 20406042 call gpio_clr_wake +604f 20206053 branch gpio_config_input_without_wake + +gpio_config_input: +6050 18467cff sub temp ,ui_button_gpio_disable ,null +6051 20628000 rtn zero +6052 2455e036 ncall gpio_set_wake ,wake + +gpio_config_input_without_wake: +6053 2040608b call gpio_addr +6054 58000000 setarg 0 +6055 284ffe07 isolate1 gpio_active_bit ,temp +6056 7d20fe06 nsetflag true ,6 ,pdata +6057 7920fe07 setflag true ,7 ,pdata +6058 2020607d branch gpio_write + +gpio_get_bit: +6059 d8a0811c arg core_gpio_in ,contw +605a 18410e07 and temp ,0x07 ,queue +605b 18497e00 rshift3 temp ,pdata +605c 1fe17e03 and_into 3 ,pdata +605d 98a08a00 iadd contw ,contw +605e efe08005 ifetch 1 ,contw +605f 284ffe07 isolate1 gpio_active_bit ,temp +6060 2020e063 branch gpio_get_bit_reverse ,true +6061 afec0000 qisolate0 pdata +6062 20600000 rtn + +gpio_get_bit_reverse: +6063 afefffff qisolate1 pdata +6064 20600000 rtn + +gpio_out_inactive: +6065 18467cff sub temp ,ui_button_gpio_disable ,null +6066 20628000 rtn zero +6067 2fcffe07 isolate1 gpio_active_bit ,null +6068 2020606c branch gpio_out_flag + +gpio_config_output: + +gpio_out_active: +6069 18467cff sub temp ,ui_button_gpio_disable ,null +606a 20628000 rtn zero +606b 2fcc0007 isolate0 gpio_active_bit ,null + +gpio_out_flag: +606c 58000000 setarg 0 +606d 7d20fe07 nsetflag true ,gpio_active_bit ,pdata +606e 98428400 ixor temp ,temp + +gpio_out: +606f 2040608b call gpio_addr +6070 5800003f setarg gpcfg_output_high +6071 284ffe07 isolate1 gpio_active_bit ,temp +6072 7920fe00 setflag true ,0 ,pdata +6073 2020607d branch gpio_write + +gpio_check_active: +6074 2040608b call gpio_addr +6075 efe08005 ifetch 1 ,contw +6076 c2806079 bbit1 0 ,gpio_check_active_high +6077 284c0007 isolate0 gpio_active_bit ,temp +6078 20600000 rtn + +gpio_check_active_high: +6079 284c0007 isolate0 gpio_active_bit ,temp +607a 20600000 rtn + +gpio_set_analog: +607b 2040608b call gpio_addr +607c 580000c0 setarg gpcfg_no_ie + +gpio_write: +607d e7e08005 istore 1 ,contw +607e 20600000 rtn + +gpio_set_high_impedance: +607f 2040608b call gpio_addr +6080 58000000 setarg gpcfg_high_impedance +6081 2020607d branch gpio_write + +gpio_pd_idle: +6082 d8c08070 arg core_gpio_conf ,contr +6083 df200013 arg 19 ,loopcnt + +gpio_pd_idle_loop: +6084 efe08006 ifetch 1 ,contr +6085 243a6089 nbranch gpio_pd_idle_configured ,blank +6086 58000080 setarg 0x80 +6087 18c08bff add contr ,-1 ,contw +6088 e7e08005 istore 1 ,contw + +gpio_pd_idle_configured: +6089 c2006084 loop gpio_pd_idle_loop +608a 20600000 rtn + +gpio_addr: +608b 18417e3f and temp ,0x3f ,pdata +608c d8a08070 arg core_gpio_conf ,contw +608d 98a08a00 iadd contw ,contw +608e 20600000 rtn + +gpio_config_param: +608f 1fe104ff and pdata ,0xff ,temp +6090 1fecfe00 rshift8 pdata ,pdata +6091 20206093 branch gpio_config_function_int + +gpio_config_function: +6092 c4038000 rtnbit0 gpio_active_bit + +gpio_config_function_int: +6093 1fe17e3f and_into 0x3f ,pdata +6094 d8a08070 arg core_gpio_conf ,contw +6095 98a08a00 iadd contw ,contw +6096 e0408005 istoret 1 ,contw +6097 20600000 rtn + +gpio_get_config: +6098 1841043f and_into 0x3f ,temp +6099 58008070 setarg core_gpio_conf +609a 98408c00 iadd temp ,contr +609b efe08006 ifetch 1 ,contr +609c 20600000 rtn + +gpio_set_before_lpm_common: +609d 47194026 bpatchx patch26_2 ,mem_patch26 +609e 20600000 rtn + +gpio_set_before_lpm: +609f df200014 arg 20 ,loopcnt +60a0 d8c08070 arg core_gpio_conf ,contr + +setgpio_loop: +60a1 18c20a00 copy contr ,contw +60a2 efe08006 ifetch 1 ,contr +60a3 c00160b3 beq gpcfg_qspi_ncs ,setgpio_pullup +60a4 c001e0b3 beq gpcfg_qspi_sck ,setgpio_pullup +60a5 c00260b3 beq gpcfg_qspi_io0 ,setgpio_pullup +60a6 c002e0b3 beq gpcfg_qspi_io1 ,setgpio_pullup +60a7 c00360b3 beq gpcfg_qspi_io2 ,setgpio_pullup +60a8 c003e0b3 beq gpcfg_qspi_io3 ,setgpio_pullup +60a9 c00fe0b3 beq gpcfg_spid_miso ,setgpio_pullup +60aa c01060b3 beq gpcfg_spid_ncs ,setgpio_pullup +60ab c010e0b3 beq gpcfg_spid_sck ,setgpio_pullup +60ac c01160b3 beq gpcfg_spid_mosi ,setgpio_pullup +60ad c011e0b3 beq gpcfg_spid_sdio ,setgpio_pullup +60ae c01660b3 beq gpcfg_iic_scl ,setgpio_pullup +60af c016e0b3 beq gpcfg_iic_sda ,setgpio_pullup +60b0 c00060b3 beq gpcfg_input ,setgpio_pullup + +setgpio_loop_end: +60b1 c20060a1 loop setgpio_loop +60b2 20600000 rtn + +setgpio_pullup: +60b3 58000040 setarg gpcfg_pullup +60b4 e7e08005 istore 1 ,contw +60b5 202060b1 branch setgpio_loop_end + +setgpio_pulldown: +60b6 58000080 setarg gpcfg_pulldown +60b7 e7e08005 istore 1 ,contw +60b8 202060b1 branch setgpio_loop_end + +adc_init_data: +60b9 4719c026 bpatchx patch26_3 ,mem_patch26 +60ba da20099e arg mem_temp_block2 ,rega +60bb d840000c arg 12 ,temp +60bc 58000030 setarg efuse_offset_adc_param +60bd 20405e63 call efuse_read_data +60be 20406102 call enable_adc +60bf 204060d5 call adc_init_wait_count + +adc_init_cal_data: +60c0 6fe409a1 fetch 8 ,mem_temp_block2 + 3 +60c1 203a60cc branch adc_init_cal_data_default ,blank +60c2 d8c009a1 arg mem_temp_block2 + 3 ,contr +60c3 d8a04490 arg mem_3v_adc_io_data ,contw +60c4 df200003 arg 3 ,loopcnt + +adc_init_cal_data_loop: +60c5 efe18006 ifetch 3 ,contr +60c6 1ff20400 lshift4 pdata ,temp +60c7 e0410005 istoret 2 ,contw +60c8 1fec8400 rshift8 pdata ,temp +60c9 e0410005 istoret 2 ,contw +60ca c20060c5 loop adc_init_cal_data_loop +60cb 20600000 rtn + +adc_init_cal_data_default: +60cc 5800469a setarg 0x469a +60cd 67e14490 store 2 ,mem_3v_adc_io_data +60ce 5800ab77 setarg 0xab77 +60cf 67e14496 store 2 ,mem_1v_adc_io_data +60d0 580073d0 setarg 0x73d0 +60d1 67e1449a store 2 ,mem_3v_adc_vinlpm_data +60d2 58009658 setarg 0x9658 +60d3 67e14494 store 2 ,mem_2v_adc_vinlpm_data +60d4 20600000 rtn + +adc_init_wait_count: +60d5 6fe0899e fetch 1 ,mem_temp_block2 +60d6 247a0000 nrtn blank +60d7 70448f0c jam 12 ,mem_adc_wait_count +60d8 20600000 rtn + +adc_wait_timer: +60d9 da60449c arg mem_app_adc_read_count ,regc +60da da406102 arg enable_adc ,regb +60db 2020318a branch timer_single_step + +idle_read_adc_wait: +60dc c69a0000 rtnmark0 mark_adc_enable +60dd 1c417eff and clkn_bt ,0xff ,pdata +60de 6848c49d fetcht 1 ,mem_start_adc_clkn +60df 20407cf8 call get_diff +60e0 6fe0c48f fetch 1 ,mem_adc_wait_count +60e1 9a267c00 isub rega ,null +60e2 20610000 rtn positive +60e3 6ff10150 fetch 2 ,core_adc_sum +60e4 67e144a2 store 2 ,mem_adc_current_value +60e5 793f8034 set0 mark_adc_enable ,mark +60e6 70449c32 jam 50 ,mem_app_adc_read_count +60e7 6ff08053 fetch 1 ,core_sum_en +60e8 793ffe07 set0 7 ,pdata +60e9 67f08053 store 1 ,core_sum_en +60ea 708a9700 jam 0 ,core_gpadc_ctrl +60eb 20600000 rtn + +enable_adc_check: +60ec c3008a75 bbit0 state_insniff ,context_search_next +60ed 1a208c01 add rega ,coffset_mode ,contr +60ee efe08006 ifetch 1 ,contr +60ef c28060f6 bbit1 mode_le ,enable_adc_check_le +60f0 1a208c02 add rega ,coffset_tsniff ,contr +60f1 efe10006 ifetch 2 ,contr +60f2 d840ffff arg 0xffff ,temp +60f3 98467c00 isub temp ,null +60f4 2022fe52 branch enable_zero ,zero +60f5 20200a75 branch context_search_next + +enable_adc_check_le: +60f6 efe08011 ifetch 1 ,rega +60f7 c301fe52 bbit0 lestate_got_first_packet ,enable_zero +60f8 c282fe52 bbit1 lestate_update_param ,enable_zero +60f9 c2837e52 bbit1 lestate_update_map ,enable_zero +60fa c283fe52 bbit1 lestate_update_phy ,enable_zero +60fb 1a208c1a add rega ,coffset_le_event_cnt ,contr +60fc efe10006 ifetch 2 ,contr +60fd 1fe67c07 sub pdata ,7 ,null +60fe 20217e52 branch enable_zero ,positive +60ff 20200a75 branch context_search_next + +enable_adc_wait: +6100 70449c01 jam 1 ,mem_app_adc_read_count +6101 20600000 rtn + +enable_adc: +6102 471a4026 bpatchx patch26_4 ,mem_patch26 +6103 da6060ec arg enable_adc_check ,regc +6104 20400a70 call context_search +6105 2022e100 branch enable_adc_wait ,zero +6106 708a11aa jam 0xaa ,core_rf_ldo_cfg5 +6107 708a0a0c jam 0x0c ,core_rf_ldo_en0 +6108 6ff08a09 fetch 1 ,core_clkpll_cfg6 +6109 79207e07 set1 7 ,pdata +610a 67f08a09 store 1 ,core_clkpll_cfg6 +610b 708a0b04 jam 0x04 ,core_rf_ldo_en1 +610c 2000003c nop 60 +610d 708a1600 jam 0 ,core_syn_en +610e 708a1706 jam 6 ,core_rx_en0 +610f 2040611a call read_adc_mode +6110 67f08a97 store 1 ,core_gpadc_ctrl +6111 7080dc03 jam 0x03 ,core_sum_ctrl +6112 2000003c nop 60 +6113 6ff08053 fetch 1 ,core_sum_en +6114 79207e07 set1 7 ,pdata +6115 67f08053 store 1 ,core_sum_en +6116 79200034 set1 mark_adc_enable ,mark +6117 1c427e00 copy clkn_bt ,pdata +6118 67e0c49d store 1 ,mem_start_adc_clkn +6119 20600000 rtn + +read_adc_mode: +611a 6fe0c4a0 fetch 1 ,mem_adc_config_flag +611b c0006121 beq adc_config_vinlpm ,adc_mode_vdcdc +611c c000e123 beq adc_config_hvin ,adc_adc_mode_vbat + +adc_check_gpio: +611d 6fe0c4a1 fetch 1 ,mem_adc_channel +611e 1fe9fe00 lshift3 pdata ,pdata +611f 1fe1fe07 or pdata ,7 ,pdata +6120 20600000 rtn + +adc_mode_vdcdc: +6121 58000057 setarg 0x57 +6122 20600000 rtn + +adc_adc_mode_vbat: +6123 5800004f setarg 0x4f +6124 20600000 rtn + +vdd_calculate_by_mode: +6125 471ac026 bpatchx patch26_5 ,mem_patch26 +6126 6fe0c4a0 fetch 1 ,mem_adc_config_flag +6127 c000612b beq adc_config_vinlpm ,vdd_calculate_vinlpm +6128 c000e131 beq adc_config_hvin ,vdd_calculate_hvin +6129 c0016137 beq adc_config_gpio ,vdd_calculate_io +612a 20600000 rtn + +vdd_calculate_vinlpm: +612b 58000064 setarg 100 +612c 67e1449e store 2 ,mem_reference_voltage +612d 6849449a fetcht 2 ,mem_3v_adc_vinlpm_data +612e 6fe14494 fetch 2 ,mem_2v_adc_vinlpm_data +612f da60012c arg 300 ,regc +6130 2020613c branch vdd_calculate + +vdd_calculate_hvin: +6131 580000c8 setarg 200 +6132 67e1449e store 2 ,mem_reference_voltage +6133 68494498 fetcht 2 ,mem_5v_adc_hvin_data +6134 6fe14492 fetch 2 ,mem_3v_adc_hvin_data +6135 da6001f4 arg 500 ,regc +6136 2020613c branch vdd_calculate + +vdd_calculate_io: +6137 580000c8 setarg 200 +6138 67e1449e store 2 ,mem_reference_voltage +6139 68494490 fetcht 2 ,mem_3v_adc_io_data +613a 6fe14496 fetch 2 ,mem_1v_adc_io_data +613b da60012c arg 300 ,regc + +vdd_calculate: +613c 98462200 isub temp ,rega +613d 6fe144a2 fetch 2 ,mem_adc_current_value +613e 98467e00 isub temp ,pdata +613f 24216149 nbranch vdd_calculate1 ,positive +6140 6849449e fetcht 2 ,mem_reference_voltage +6141 984fa400 imul32 temp ,regb +6142 1a627e00 copy regc ,pdata +6143 9a2ffe00 imul32 rega ,pdata +6144 9a467e00 isub regb ,pdata + +vdd_calculate2: +6145 9a26fc00 idiv rega +6146 20407def call wait_div_end +6147 1807fe00 quotient pdata +6148 20600000 rtn + +vdd_calculate1: +6149 18427e00 copy temp ,pdata +614a 684944a2 fetcht 2 ,mem_adc_current_value +614b 98467e00 isub temp ,pdata +614c 6849449e fetcht 2 ,mem_reference_voltage +614d 984fa400 imul32 temp ,regb +614e 1a627e00 copy regc ,pdata +614f 9a2ffe00 imul32 rega ,pdata +6150 9a40fe00 iadd regb ,pdata +6151 20206145 branch vdd_calculate2 + +adc_bat_percent_lowpower_out: +6152 efe40011 ifetch 8 ,rega +6153 67e4095c store 8 ,mem_pdatatemp +6154 6fe1095c fetch 2 ,mem_pdatatemp +6155 6849095e fetcht 2 ,mem_pdatatemp + 2 +6156 98462200 isub temp ,rega +6157 6fe10962 fetch 2 ,mem_pdatatemp + 6 +6158 98462400 isub temp ,regb +6159 68490960 fetcht 2 ,mem_pdatatemp + 4 +615a 98467c00 isub temp ,null +615b 24416162 ncall adc_set_low_power_flag ,positive +615c 1a4ffe64 mul32 regb ,100 ,pdata +615d 9a26fc00 idiv rega +615e 20407def call wait_div_end +615f 1807fe00 quotient pdata +6160 205a616a call adc_set_no_power_flag ,blank +6161 20600000 rtn + +adc_set_low_power_flag: +6162 6fe0c4a4 fetch 1 ,mem_adc_power_flag +6163 79207e00 set1 0 ,pdata +6164 67e0c4a4 store 1 ,mem_adc_power_flag +6165 20600000 rtn + +adc_clear_low_power_flag: +6166 6fe0c4a4 fetch 1 ,mem_adc_power_flag +6167 793ffe00 set0 0 ,pdata +6168 67e0c4a4 store 1 ,mem_adc_power_flag +6169 20600000 rtn + +adc_set_no_power_flag: +616a 6848c4a4 fetcht 1 ,mem_adc_power_flag +616b 79200401 set1 1 ,temp +616c 6048c4a4 storet 1 ,mem_adc_power_flag +616d 20600000 rtn + +adc_clear_no_power_flag: +616e 6848c4a4 fetcht 1 ,mem_adc_power_flag +616f 793f8401 set0 1 ,temp +6170 6048c4a4 storet 1 ,mem_adc_power_flag +6171 20600000 rtn + +keyscan_key_init: +6172 6fe144c6 fetch 2 ,mem_key_num_ptr +6173 efe0803f ifetch 1 ,pdata + +keyscan_key_init_next: +6174 207a0000 rtn blank +6175 1fe27200 copy pdata ,loopcnt +6176 6fe144c6 fetch 2 ,mem_keyscan_ptr +6177 1fe0fe03 increase 3 ,pdata +6178 1fe22200 copy pdata ,rega + +keyscan_key_init_lp1: +6179 e8408011 ifetcht 1 ,rega +617a 20406050 call gpio_config_input +617b 1a20a201 increase key_conf_struct_len ,rega +617c c2006179 loop keyscan_key_init_lp1 + +keyscan_key_init_end: +617d 20600000 rtn + +keyscan_scan_key: +617e 6fe144c6 fetch 2 ,mem_keyscan_ptr +617f 1fe0fe03 increase 3 ,pdata +6180 1fe22200 copy pdata ,rega +6181 18002400 force 0 ,regb +6182 58000000 setarg 0 +6183 67e109de store 2 ,mem_key_value_temp + +keyscan_scan_key_lp1: +6184 e8408011 ifetcht 1 ,rega +6185 20406059 call gpio_get_bit +6186 471b4026 bpatchx patch26_6 ,mem_patch26 +6187 6fe109de fetch 2 ,mem_key_value_temp +6188 1a420e00 copy regb ,queue +6189 f920fe00 qsetflag true ,pdata +618a 67e109de store 2 ,mem_key_value_temp +618b 1a20a201 increase key_conf_struct_len ,rega +618c 1a40a401 increase 1 ,regb +618d 6fe144c6 fetch 2 ,mem_key_num_ptr +618e efe0803f ifetch 1 ,pdata + +keyscan_scan_key_lp1_next: +618f 9a42fc00 ixor regb ,null +6190 2422e184 nbranch keyscan_scan_key_lp1 ,zero +6191 6fe109de fetch 2 ,mem_key_value_temp +6192 684944c8 fetcht 2 ,mem_key_value_retention +6193 9842fc00 ixor temp ,null +6194 20628000 rtn zero +6195 78347c00 enable user +6196 20600000 rtn + +keyscan_process_lpm_before: +6197 6fe144c6 fetch 2 ,mem_key_num_ptr +6198 efe0803f ifetch 1 ,pdata + +keyscan_process_lpm_before_next: +6199 207a0000 rtn blank +619a 1fe27200 copy pdata ,loopcnt +619b 6fe144c6 fetch 2 ,mem_keyscan_ptr +619c 1fe0fe03 increase 3 ,pdata +619d 1fe22200 copy pdata ,rega + +keyscan_process_lpm_before_lp1: +619e e8408011 ifetcht 1 ,rega +619f 20406032 call gpio_set_wake_by_current_state +61a0 1a20a201 increase key_conf_struct_len ,rega +61a1 c200619e loop keyscan_process_lpm_before_lp1 + +keyscan_process_lpm_before_end: +61a2 20600000 rtn + +keyscan_key_process: +61a3 d8e00009 arg key_scan_timer ,queue +61a4 20407d74 call timer_check +61a5 247a0000 nrtn blank +61a6 58000020 setarg 0x20 +61a7 d8e00009 arg key_scan_timer ,queue +61a8 20407d66 call timer_init +61a9 78547c00 disable user +61aa 20406197 call keyscan_process_lpm_before +61ab 471bc026 bpatchx patch26_7 ,mem_patch26 +61ac 6fe144c6 fetch 2 ,mem_key_num_ptr +61ad efe0803f ifetch 1 ,pdata + +keyscan_key_process_next: +61ae 207a0000 rtn blank +61af 2040617e call keyscan_scan_key +61b0 243477ea nbranch lpm_button_clean_wake_lock ,user +61b1 204077e8 call lpm_button_get_wake_lock +61b2 78547c00 disable user +61b3 6fe109de fetch 2 ,mem_key_value_temp +61b4 67e109e5 store 2 ,mem_key_value_temp4 +61b5 7009e700 jam 0 ,mem_key_value_temp6 +61b6 18000e00 force 0 ,queue + +keyscan_key_lp1: +61b7 6fe144c8 fetch 2 ,mem_key_value_retention +61b8 1fe30400 rshift pdata ,temp +61b9 604944c8 storet 2 ,mem_key_value_retention +61ba 1fe17e01 and pdata ,0x01 ,pdata +61bb 684909e5 fetcht 2 ,mem_key_value_temp4 +61bc 18412201 and temp ,0x01 ,rega +61bd 18430400 rshift temp ,temp +61be 604909e5 storet 2 ,mem_key_value_temp4 +61bf 9a22fc00 ixor rega ,null +61c0 2442e1cc ncall keyscan_send_key_data ,zero +61c1 6fe144c6 fetch 2 ,mem_key_num_ptr +61c2 efe0803f ifetch 1 ,pdata + +keyscan_key_lp1_next: +61c3 684889e7 fetcht 1 ,mem_key_value_temp6 +61c4 18408401 increase 1 ,temp +61c5 604889e7 storet 1 ,mem_key_value_temp6 +61c6 18420e00 copy temp ,queue +61c7 98e2fc00 ixor queue ,null +61c8 2422e1b7 nbranch keyscan_key_lp1 ,zero +61c9 6fe109de fetch 2 ,mem_key_value_temp +61ca 67e144c8 store 2 ,mem_key_value_retention +61cb 20600000 rtn + +keyscan_send_key_data: +61cc 471c4027 bpatchx patch27_0 ,mem_patch27 +61cd 6fe144c6 fetch 2 ,mem_keyscan_ptr +61ce 1fe0fe01 increase 1 ,pdata +61cf efe1003f ifetch 2 ,pdata +61d0 20207e05 branch callback_func + +pwm_init: +61d1 6ff08042 fetch 1 ,core_clksel +61d2 9a21fe00 ior rega ,pdata +61d3 67f08042 store 1 ,core_clksel +61d4 6ff10050 fetch 2 ,core_clkoff +61d5 793ffe0d set0 clock_off_pwm ,pdata +61d6 67f10050 store 2 ,core_clkoff + +delay_nop100: +61d7 20000064 nop 100 +61d8 20600000 rtn + +pwm_clk_set: +61d9 6ff08042 fetch 1 ,core_clksel +61da c28361de bbit1 6 ,pwm_24m_clk_set +61db c283e1e0 bbit1 7 ,pwm_33k_clk_set + +pwm_12m_clk_set: +61dc 58b71b00 setarg pwm_12mhz +61dd 20600000 rtn + +pwm_24m_clk_set: +61de 596e3600 setarg pwm_24mhz +61df 20600000 rtn + +pwm_33k_clk_set: +61e0 580080e8 setarg pwm_33khz +61e1 20600000 rtn + +pwm_cont_set: +61e2 6fe0895d fetch 1 ,mem_pdatatemp + 1 +61e3 c28261e6 bbit1 4 ,pwm_cont_set1 +61e4 c30261ed bbit0 4 ,pwm_cont_set0 +61e5 20600000 rtn + +pwm_cont_set1: +61e6 78347c00 enable user +61e7 1fe10e0f and pdata ,0x0f ,queue +61e8 204061f4 call pwm_set_value +61e9 1807a400 quotient regb +61ea 18427e00 copy temp ,pdata +61eb 9a462200 isub regb ,rega +61ec 20600000 rtn + +pwm_cont_set0: +61ed 78547c00 disable user +61ee 1fe10e0f and pdata ,0x0f ,queue +61ef 204061f4 call pwm_set_value +61f0 1807a200 quotient rega +61f1 18427e00 copy temp ,pdata +61f2 9a262400 isub rega ,regb +61f3 20600000 rtn + +pwm_set_value: +61f4 6ff080d8 fetch 1 ,core_pwm_init +61f5 f9347e00 qsetflag user ,pdata +61f6 67f080d8 store 1 ,core_pwm_init +61f7 20600000 rtn + +pwm_out_set: +61f8 6849895e fetcht 3 ,mem_pdatatemp + 2 +61f9 204061d9 call pwm_clk_set +61fa 9846fc00 idiv temp +61fb 20407def call wait_div_end +61fc 18078400 quotient temp +61fd 6fe08961 fetch 1 ,mem_pdatatemp + 5 +61fe 984ffe00 imul32 temp ,pdata +61ff 1fe6fc64 div pdata ,100 +6200 20407def call wait_div_end +6201 204061e2 call pwm_cont_set +6202 6fe0895d fetch 1 ,mem_pdatatemp + 1 +6203 2040620a call pwm_duty_cycle_set +6204 6fe0895c fetch 1 ,mem_pdatatemp +6205 6848895d fetcht 1 ,mem_pdatatemp + 1 +6206 1841040f and_into 0x0f ,temp +6207 184d0400 lshift8 temp ,temp +6208 9841fe00 ior temp ,pdata +6209 20206213 branch pwm_enable + +pwm_duty_cycle_set: +620a 1fe17e0f and_into 0x0f ,pdata +620b d8a080a0 arg core_pwm_pcnt0 ,contw +620c 1feffe04 mul32 pdata ,4 ,pdata +620d 98a08a00 iadd contw ,contw +620e 1a227e00 copy rega ,pdata +620f e7e10005 istore 2 ,contw +6210 1a427e00 copy regb ,pdata +6211 e7e10005 istore 2 ,contw +6212 20600000 rtn + +pwm_enable: +6213 78347c00 enable user +6214 20406228 call pwm_srst_set +6215 20206218 branch pwm_gpio_set + +pwm_disable: +6216 78547c00 disable user +6217 20406223 call pwm_select_channel + +pwm_gpio_set: +6218 18427e00 copy temp ,pdata +6219 1fed7e00 lshift8 pdata ,pdata +621a 18e08410 add queue ,gpcfg_pwm_out0 ,temp +621b 9841fe00 ior temp ,pdata +621c 2040608f call gpio_config_param + +pwm_set_select: +621d 6ff08084 fetch 1 ,core_pwm_en +621e 70808400 jam 0x00 ,core_pwm_en +621f 200004b0 nop 1200 +6220 f9347e00 qsetflag user ,pdata +6221 67f08084 store 1 ,core_pwm_en +6222 20600000 rtn + +pwm_select_channel: +6223 1fe20400 copy pdata ,temp +6224 1fecfe00 rshift8 pdata ,pdata +6225 1fe20e00 copy pdata ,queue +6226 20600000 rtn + +pwm_srst_powerdown: +6227 78547c00 disable user + +pwm_srst_set: +6228 20406223 call pwm_select_channel +6229 6ff080dd fetch 1 ,core_pwm_srst +622a fd347e00 nqsetflag user ,pdata +622b 67f080dd store 1 ,core_pwm_srst +622c 20206218 branch pwm_gpio_set + +wdt_init_config: +622d d8402710 arg 0x2710 ,temp +622e 984ffe00 imul32 temp ,pdata +622f d841312d arg 0x1312d ,temp +6230 9846fc00 idiv temp +6231 20407def call wait_div_end +6232 18078400 quotient temp +6233 58000800 setarg 2048 +6234 98467e00 isub temp ,pdata +6235 1fe20400 copy pdata ,temp +6236 1841040f and_into 0x0f ,temp +6237 6058800b storet 1 ,core_write_wdt2 +6238 1fe20400 copy pdata ,temp +6239 18518400 rshift4 temp ,temp +623a 60588004 storet 1 ,core_write_wdt +623b 20600000 rtn + +wdt_set_enable: +623c 78347c00 enable user +623d 2020623f branch wdt_init_set + +wdt_set_disable: +623e 78547c00 disable user + +wdt_init_set: +623f 6ff08043 fetch 1 ,core_config +6240 79347e03 setflag user ,3 ,pdata +6241 67f08043 store 1 ,core_config +6242 20600000 rtn + +nec61212_init: +6243 d8400031 arg fun_nec_enable | fun_nec_clk_divide_24 ,temp + +nec_init_config: +6244 67f200ca store 4 ,core_nec_start_addr +6245 67f100ce store 2 ,core_nec_rptr +6246 605880d0 storet 1 ,core_nec_control +6247 20600000 rtn + +nec_check_rxbuff_size: +6248 6ff10130 fetch 2 ,core_nec_rxitem +6249 20600000 rtn + +nec_prepare_read: +624a 687100ce fetchr contu ,2 ,core_nec_rptr +624b 695100ca fetchr contus ,2 ,core_nec_start_addr +624c 6a1100cc fetchr contue ,2 ,core_nec_end_addr +624d 20600000 rtn + +nec_read_done: +624e 607100ce storer contu ,2 ,core_nec_rptr +624f 20600000 rtn + +nec_parse_nec61212: +6250 20407e54 call enable_user +6251 dd600000 arg 0 ,rege +6252 20406248 call nec_check_rxbuff_size +6253 c0016292 beq 2 ,nec_parse_nec61212_check_timeout +6254 1fe67c04 sub pdata ,4 ,null +6255 20610000 rtn positive +6256 2040624a call nec_prepare_read +6257 e8410003 ifetcht 2 ,contu +6258 5800a654 setarg nec61212_data2repeat_time +6259 2040629b call nec_check_pulse_range_legal_default_deviation +625a 24216280 nbranch nec_parse_nec61212_check_repeat_data ,positive +625b 1b020400 copy regd ,temp +625c 58017f8e setarg nec61212_repeat2repeat_time +625d 2040629b call nec_check_pulse_range_legal_default_deviation +625e 24216280 nbranch nec_parse_nec61212_check_repeat_data ,positive +625f 1b020400 copy regd ,temp +6260 58002328 setarg nec61212_boot_code_start_time +6261 2040629b call nec_check_pulse_range_legal_default_deviation +6262 20216277 branch nec_parse_nec61212_error_data ,positive +6263 e8410003 ifetcht 2 ,contu +6264 58001194 setarg nec61212_boot_code_end_time +6265 2040629b call nec_check_pulse_range_legal_default_deviation +6266 20216277 branch nec_parse_nec61212_error_data ,positive +6267 20406248 call nec_check_rxbuff_size +6268 1fe67c85 sub pdata ,133 ,null +6269 20610000 rtn positive +626a df200020 arg 32 ,loopcnt + +nec_parse_nec61212_data: +626b e8410003 ifetcht 2 ,contu +626c 58000230 setarg nec61212_data_bit_1_start_time +626d 2040629b call nec_check_pulse_range_legal_default_deviation +626e 20216277 branch nec_parse_nec61212_error_data ,positive +626f e8410003 ifetcht 2 ,contu +6270 5800069a setarg nec61212_data_bit_1_end_time +6271 2040629b call nec_check_pulse_range_legal_default_deviation +6272 2421627c nbranch nec_parse_nec61212_add_bit1 ,positive +6273 1b020400 copy regd ,temp +6274 58000230 setarg nec61212_data_bit_0_end_time +6275 2040629b call nec_check_pulse_range_legal_default_deviation +6276 2421627d nbranch nec_parse_nec61212_add_bit0 ,positive + +nec_parse_nec61212_error_data: +6277 1b020400 copy regd ,temp +6278 5800ffff setarg nec61212_timeout_time +6279 98467c00 isub temp ,null +627a 2022e297 branch nec_parse_nec61212_check_timeout_cb ,zero +627b 2020624e branch nec_read_done + +nec_parse_nec61212_add_bit1: +627c 79205620 set1 32 ,rege + +nec_parse_nec61212_add_bit0: +627d 1d635600 rshift rege ,rege +627e c200626b loop nec_parse_nec61212_data +627f 2020628b branch nec_parse_nec61212_check_stop_bit + +nec_parse_nec61212_check_repeat_data: +6280 20406248 call nec_check_rxbuff_size +6281 1fe67c07 sub pdata ,7 ,null +6282 20610000 rtn positive +6283 e8410003 ifetcht 2 ,contu +6284 58002328 setarg nec61212_repeat_start_time +6285 2040629b call nec_check_pulse_range_legal_default_deviation +6286 20216277 branch nec_parse_nec61212_error_data ,positive +6287 e8410003 ifetcht 2 ,contu +6288 580008ca setarg nec61212_repeat_end_time +6289 2040629b call nec_check_pulse_range_legal_default_deviation +628a 20216277 branch nec_parse_nec61212_error_data ,positive + +nec_parse_nec61212_check_stop_bit: +628b e8410003 ifetcht 2 ,contu +628c 58000230 setarg nec61212_stop_time +628d 2040629b call nec_check_pulse_range_legal_default_deviation +628e 20216277 branch nec_parse_nec61212_error_data ,positive +628f 2040624e call nec_read_done +6290 1a627e00 copy regc ,pdata +6291 20207e05 branch callback_func + +nec_parse_nec61212_check_timeout: +6292 2040624a call nec_prepare_read +6293 e8410003 ifetcht 2 ,contu +6294 5800ffff setarg nec61212_timeout_time +6295 98467c00 isub temp ,null +6296 24628000 nrtn zero + +nec_parse_nec61212_check_timeout_cb: +6297 2040624e call nec_read_done +6298 20407e56 call disable_user +6299 1a627e00 copy regc ,pdata +629a 20207e05 branch callback_func + +nec_check_pulse_range_legal_default_deviation: +629b da40000a arg 10 ,regb + +nec_check_pulse_range_legal: +629c 18423000 copy temp ,regd +629d 9a4fa400 imul32 regb ,regb +629e 18438400 lshift temp ,temp +629f 98462200 isub temp ,rega +62a0 244162a4 ncall nec_check_pulse_range_legal_data_negative ,positive +62a1 1a2ffe64 mul32 rega ,100 ,pdata +62a2 9a467c00 isub regb ,null +62a3 20600000 rtn + +nec_check_pulse_range_legal_data_negative: +62a4 1a262200 sub rega ,0 ,rega +62a5 20600000 rtn + +select_system_clk_24m: +62a6 7041f018 jam system_clk_24m ,mem_system_clk +62a7 70804201 jam clksel_dpll_24m ,core_clksel +62a8 58001d4b setarg 7499 +62a9 67f10040 store 2 ,core_halfslot + +calc_new_param: +62aa df20000b arg 11 ,loopcnt +62ab da200155 arg mem_param_tx_setup ,rega + +calc_new_param_loop: +62ac efe10011 ifetch 2 ,rega +62ad 1fe3fe00 lshift pdata ,pdata +62ae e7e10011 istore 2 ,rega +62af 1a20a202 increase 2 ,rega +62b0 c20062ac loop calc_new_param_loop +62b1 20600000 rtn + +calc_new_le_time: +62b2 1b63b600 lshift stop_watch ,stop_watch +62b3 20600000 rtn + +select_system_clk_12m_xtal: +62b4 70804204 jam clksel_xtal ,core_clksel + +select_system_clk_12m_common: +62b5 7041f00c jam system_clk_12m ,mem_system_clk +62b6 58000ea5 setarg 3749 +62b7 67f10040 store 2 ,core_halfslot +62b8 20600000 rtn + +select_system_clk_12m_dpll: +62b9 70804205 jam clksel_dpll ,core_clksel +62ba 202062b5 branch select_system_clk_12m_common + +rfcomm_init: +62bb 20758000 rtn wake +62bc 70465200 jam 0 ,mem_rfcomm_send_more_pkt +62bd 7003c003 jam bits9600 ,memremoterpnbitrate +62be 7003c103 jam databits8 ,memremoteprndatabits +62bf 7003c511 jam 0x11 ,memremoteprnxon +62c0 7003c613 jam 0x13 ,memremoteprnxoff +62c1 58000000 setarg 0 +62c2 67e183c2 store 3 ,memremoteprnstopbit +62c3 67e0c4e4 store 1 ,mem_spp_state +62c4 70478b00 jam 0 ,memui_reconnect_mode + +rfcomm_init_spp: +62c5 58000000 setarg 0 +62c6 67e0c4e4 store 1 ,mem_spp_state +62c7 67e0c64f store 1 ,mem_remote_spp_channel +62c8 67e0c648 store 1 ,mem_pn_dlci +62c9 6fe0c656 fetch 1 ,mem_rfcomm_credit_flag +62ca c000e2cd beq credit_enable ,rfcomm_init_spp_with_credit +62cb 70465450 jam 0x50 ,mem_credit_given +62cc 20600000 rtn + +rfcomm_init_spp_with_credit: +62cd 70465400 jam 0x00 ,mem_credit_given +62ce 20600000 rtn + +set_cr_bit: +62cf 18418402 or_into 0x02 ,temp +62d0 20600000 rtn + +rfcomm_calculate_fcs_sabm: +62d1 18427e00 copy temp ,pdata +62d2 1fedfe00 reverse pdata ,pdata +62d3 67e0c64d store 1 ,memfcstemp3 +62d4 18007e3f force ini_tx_sabm ,pdata +62d5 1fedfe00 reverse pdata ,pdata +62d6 67e0c64c store 1 ,memfcstemp2 +62d7 18007e01 force 0x01 ,pdata +62d8 1fedfe00 reverse pdata ,pdata +62d9 67e0c64b store 1 ,memfcstemp1 +62da 20406307 call caculate_fcs +62db 18427e00 copy temp ,pdata +62dc 20600000 rtn + +rfcomm_calculate_fcs_ua: +62dd 1fedfe00 reverse pdata ,pdata +62de 67e0c64d store 1 ,memfcstemp3 +62df 18007e73 force rsp_tx_ua ,pdata +62e0 1fedfe00 reverse pdata ,pdata +62e1 67e0c64c store 1 ,memfcstemp2 +62e2 18007e01 force 0x01 ,pdata +62e3 1fedfe00 reverse pdata ,pdata +62e4 67e0c64b store 1 ,memfcstemp1 +62e5 20206307 branch caculate_fcs + +rfcomm_calculate_fcs_dlci0: +62e6 6fe0c64e fetch 1 ,mem_rfcomm_initiator +62e7 203a62ea branch rfcomm_calculate_fcs_dlci0_res ,blank +62e8 58000070 setarg 0x70 +62e9 20600000 rtn + +rfcomm_calculate_fcs_dlci0_res: +62ea 580000aa setarg 0xaa +62eb 20600000 rtn + +rfcomm_save_fcs_uih: +62ec 1fedfe00 reverse pdata ,pdata +62ed 67e0c64d store 1 ,memfcstemp3 +62ee 18007eef force rsp_rx_uih ,pdata +62ef 204062fb call caculate_uihdata_fcs +62f0 684903ca fetcht 2 ,mem_contw_temp +62f1 18420a00 copy temp ,contw +62f2 e7e08005 istore 1 ,contw +62f3 18a20400 copy contw ,temp +62f4 604903ca storet 2 ,mem_contw_temp +62f5 18007eff force rsp_rx_uih_wdata ,pdata +62f6 204062fb call caculate_uihdata_fcs +62f7 684903ca fetcht 2 ,mem_contw_temp +62f8 18420a00 copy temp ,contw +62f9 e7e08005 istore 1 ,contw +62fa 20600000 rtn + +caculate_uihdata_fcs: +62fb 1fedfe00 reverse pdata ,pdata +62fc 67e0c64c store 1 ,memfcstemp2 +62fd 6fe1464c fetch 2 ,memfcstemp2 +62fe 1fed7e00 lshift8 pdata ,pdata +62ff 67e183c7 store 3 ,mem_mod2div_temp +6300 da200107 arg 0x107 ,rega +6301 da40000f arg 0xf ,regb +6302 20406314 call mod2div +6303 1fe2fed7 xor_into 0xd7 ,pdata +6304 1fe47e00 invert pdata ,pdata +6305 1fedfe00 reverse pdata ,pdata +6306 20600000 rtn + +caculate_fcs: +6307 6fe1c64b fetch 3 ,memfcstemp1 +6308 67e183c7 store 3 ,mem_mod2div_temp +6309 da200107 arg 0x107 ,rega +630a da40000f arg 0xf ,regb +630b 20406314 call mod2div +630c 1fed7e00 lshift8 pdata ,pdata +630d da400007 arg 0x7 ,regb +630e 20406314 call mod2div +630f 1fe2fe2b xor_into 0x2b ,pdata +6310 1fe47e00 invert pdata ,pdata +6311 1fedfe00 reverse pdata ,pdata +6312 1fe20400 copy pdata ,temp +6313 20600000 rtn + +mod2div: +6314 da600000 arg 0 ,regc +6315 1a427200 copy regb ,loopcnt +6316 20407cbd call right_shift_n +6317 1fe20400 icopy temp + +mod2div_loop: +6318 18427e00 copy temp ,pdata +6319 1a63a600 lshift regc ,regc +631a c304631d bbit0 8 ,mod2div_not_enough_reduction +631b 9a228400 ixor rega ,temp +631c 1a60a601 increase 1 ,regc + +mod2div_not_enough_reduction: +631d 18438400 lshift temp ,temp +631e 6fe183c7 fetch 3 ,mem_mod2div_temp +631f 1a40a5ff increase -1 ,regb +6320 2a41feff compare 0xff ,regb ,0xff +6321 2020e327 branch mod2div_end ,true +6322 1a427200 copy regb ,loopcnt +6323 20407cbd call right_shift_n +6324 2feffe00 isolate1 0 ,pdata +6325 79208400 setflag true ,0 ,temp +6326 20206318 branch mod2div_loop + +mod2div_end: +6327 18437e00 rshift temp ,pdata +6328 20600000 rtn + +get_rfcomm_snd_adss: +6329 6848c648 fetcht 1 ,mem_pn_dlci + +dlci_to_address_cmd: +632a 184b8400 lshift2 temp ,temp +632b 79200400 set1 rfcomm_address_ext_len ,temp +632c 6fe0c64e fetch 1 ,mem_rfcomm_initiator +632d 245a62cf ncall set_cr_bit ,blank +632e 604883e0 storet 1 ,mem_rfcomm_send_adss +632f 20600000 rtn + +channel_to_dlci: +6330 18438400 lshift temp ,temp +6331 6fe0c64e fetch 1 ,mem_rfcomm_initiator +6332 793a0400 setflag blank ,0 ,temp +6333 20600000 rtn + +rfcomm_rx_process_dlci0_sabm: +6334 684883cf fetcht 1 ,mem_current_channel +6335 7003d1d7 jam 0xd7 ,mem_current_fcs +6336 2040646d call rfcomm_send_ua +6337 6fe0c4e1 fetch 1 ,mem_rfcomm_state +6338 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata +6339 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata +633a 67e0c4e1 store 1 ,mem_rfcomm_state +633b 70464e00 jam 0 ,mem_rfcomm_initiator +633c 2020644e branch rfcomm_rx_process_end + +rfcomm_rx_process_dlci0_ua: +633d 6fe0c4e1 fetch 1 ,mem_rfcomm_state +633e 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata +633f 67e0c4e1 store 1 ,mem_rfcomm_state +6340 2020644e branch rfcomm_rx_process_end + +rfcomm_rx_process: +6341 471cc027 bpatchx patch27_1 ,mem_patch27 +6342 6fe0c78b fetch 1 ,memui_reconnect_mode +6343 c0006345 beq no_reconnection ,rfcomm_rx_process_remote_page +6344 20206403 branch rfcomm_rx_process_reconn + +rfcomm_rx_process_remote_page: +6345 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +6346 1fe20c00 copy pdata ,contr +6347 2040636f call get_rfcomm_head_struct +6348 6fe083cf fetch 1 ,mem_current_channel +6349 c000634b beq 0 ,parse_dlci0_rp +634a 202063cf branch parse_uih_rp + +parse_dlci0_rp: +634b 471d4027 bpatchx patch27_2 ,mem_patch27 +634c 6fe083d0 fetch 1 ,mem_current_frame_type +634d c01fe334 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +634e c039e33d beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +634f c077e352 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +6350 c029e3fb beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +6351 20600000 rtn + +parse_dlci0_rp_uih: +6352 6fe103d4 fetch 2 ,mem_rfcomm_uih_payload_ptr +6353 1fe20c00 copy pdata ,contr +6354 2040637a call get_rfcomm_uih_head_struct +6355 6fe083d6 fetch 1 ,mem_uih_cmd_type +6356 c020e35c beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +6357 c0206364 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +6358 c038e39d beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +6359 c03863a9 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +635a c024e3b4 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +635b 2020644e branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_cmd: +635c 20406366 call parse_dlci0_rp_uih_pn_res_common +635d 2020635e branch parse_dlci0_rp_uih_pn_cmd_spp + +parse_dlci0_rp_uih_pn_cmd_spp: +635e 6fe0c4e4 fetch 1 ,mem_spp_state +635f 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata +6360 79207e01 set1 rfcomm_channel_state_pn_res ,pdata +6361 67e0c4e4 store 1 ,mem_spp_state +6362 20406497 call rfcomm_send_param_neg_res +6363 2020644e branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_res: +6364 20406366 call parse_dlci0_rp_uih_pn_res_common +6365 2020644e branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_res_common: +6366 20406382 call get_param_payload_ptr +6367 2020638e branch get_rfcomm_prarmer_negotiation + +get_rfcomm_param_modem_status: +6368 20406382 call get_param_payload_ptr +6369 efe08006 ifetch 1 ,contr +636a 1fe97e00 rshift3 pdata ,pdata +636b 67e0c655 store 1 ,mem_ms_channel +636c efe08006 ifetch 1 ,contr +636d 67e083db store 1 ,mem_ms_param +636e 20600000 rtn + +get_rfcomm_head_struct: +636f efe08006 ifetch 1 ,contr +6370 67e083ce store 1 ,mem_current_adss +6371 1fe97e00 rshift3 pdata ,pdata +6372 67e083cf store 1 ,mem_current_channel +6373 efe08006 ifetch 1 ,contr +6374 67e083d0 store 1 ,mem_current_frame_type + +get_rfcomm_current_length: +6375 20406385 call get_rfcomm_length_common +6376 604903d2 storet 2 ,mem_current_length +6377 18c27e00 copy contr ,pdata +6378 67e103d4 store 2 ,mem_rfcomm_uih_payload_ptr +6379 20600000 rtn + +get_rfcomm_uih_head_struct: +637a efe08006 ifetch 1 ,contr +637b 1fe37e00 rshift pdata ,pdata +637c 67e083d6 store 1 ,mem_uih_cmd_type +637d 20406385 call get_rfcomm_length_common +637e 604903d7 storet 2 ,mem_uih_length +637f 18c27e00 copy contr ,pdata +6380 67e103d9 store 2 ,mem_param_payload_ptr +6381 20600000 rtn + +get_param_payload_ptr: +6382 6fe103d9 fetch 2 ,mem_param_payload_ptr +6383 1fe20c00 copy pdata ,contr +6384 20600000 rtn + +get_rfcomm_length_common: +6385 efe08006 ifetch 1 ,contr +6386 1fe20400 copy pdata ,temp +6387 18430400 rshift temp ,temp +6388 c3800000 rtnbit1 0 +6389 efe08006 ifetch 1 ,contr +638a 1fe9fe00 lshift3 pdata ,pdata +638b 1ff27e00 lshift4 pdata ,pdata +638c 98408400 iadd temp ,temp +638d 20600000 rtn + +get_rfcomm_prarmer_negotiation: +638e efe08006 ifetch 1 ,contr +638f 67e0c648 store 1 ,mem_pn_dlci +6390 efe08006 ifetch 1 ,contr +6391 67e083dc store 1 ,mem_pn_credit_flow_type_info +6392 efe08006 ifetch 1 ,contr +6393 67e083dd store 1 ,mem_pn_priority +6394 efe08006 ifetch 1 ,contr +6395 67e083de store 1 ,mem_pn_acknowledg_timer +6396 efe10006 ifetch 2 ,contr +6397 67e14649 store 2 ,mem_pn_max_frame_size +6398 efe08006 ifetch 1 ,contr +6399 67e083df store 1 ,mem_pn_max_retrans +639a efe08006 ifetch 1 ,contr +639b 67e0c653 store 1 ,mem_remote_credits +639c 20600000 rtn + +parse_dlci0_rp_uih_ms_cmd: +639d 20406368 call get_rfcomm_param_modem_status +639e 2020639f branch parse_dlci0_rp_uih_ms_cmd_spp + +parse_dlci0_rp_uih_ms_cmd_spp: +639f 6fe0c4e4 fetch 1 ,mem_spp_state +63a0 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +63a1 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata +63a2 67e0c4e4 store 1 ,mem_spp_state +63a3 6848c648 fetcht 1 ,mem_pn_dlci +63a4 184b8400 lshift2 temp ,temp +63a5 18418403 or_into 3 ,temp +63a6 204064c8 call rfcomm_send_modem_status_res +63a7 70465203 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +63a8 2020644e branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_ms_res: +63a9 70095b08 jam bt_evt_spp_connected ,mem_fifo_temp +63aa 20407871 call ui_ipc_send_event +63ab 20406368 call get_rfcomm_param_modem_status +63ac 6fe0c655 fetch 1 ,mem_ms_channel +63ad 1fe67c01 sub pdata ,1 ,null +63ae 2022e3b0 branch parse_dlci0_rp_uih_ms_res_spp ,zero +63af 2020137a branch assert + +parse_dlci0_rp_uih_ms_res_spp: +63b0 6fe0c4e4 fetch 1 ,mem_spp_state +63b1 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata +63b2 67e0c4e4 store 1 ,mem_spp_state +63b3 2020644e branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_cmd_port: +63b4 20406382 call get_param_payload_ptr +63b5 efe08006 ifetch 1 ,contr +63b6 67e0898e store 1 ,mem_rpn_dlci +63b7 20405325 call l2cap_malloc_rfcomm_channel +63b8 20405333 call l2cap_get_rfcomm_tx_buff +63b9 5800000e setarg 0x000e +63ba e7e10005 istore 2 ,contw +63bb 6fe144da fetch 2 ,mem_rfcomm_remote_cid +63bc e7e10005 istore 2 ,contw +63bd 6fe0c64e fetch 1 ,mem_rfcomm_initiator +63be 1fe3fe00 lshift pdata ,pdata +63bf 79207e00 set1 0 ,pdata +63c0 e7e08005 istore 1 ,contw +63c1 471dc027 bpatchx patch27_3 ,mem_patch27 +63c2 580015ef setarg 0x15ef +63c3 e7e10005 istore 2 ,contw +63c4 58001191 setarg 0x1191 +63c5 e7e10005 istore 2 ,contw +63c6 6fe0898e fetch 1 ,mem_rpn_dlci +63c7 e7e08005 istore 1 ,contw +63c8 58000007 setarg 0x000007 +63c9 e7e28005 istore 5 ,contw +63ca 58000001 setarg 0x01 +63cb e7e10005 istore 2 ,contw +63cc 204062e6 call rfcomm_calculate_fcs_dlci0 +63cd e7e08005 istore 1 ,contw +63ce 20600000 rtn + +parse_uih_rp: +63cf 202063d0 branch parse_uih_rp_spp + +parse_uih_rp_spp: +63d0 471e4027 bpatchx patch27_4 ,mem_patch27 +63d1 6fe083d0 fetch 1 ,mem_current_frame_type +63d2 c039e3d8 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +63d3 c01fe3dc beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +63d4 c077e3f6 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +63d5 c07fe3ee beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +63d6 c029e3fd beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +63d7 20600000 rtn + +parse_uih_rp_spp_ua: +63d8 6fe0c4e4 fetch 1 ,mem_spp_state +63d9 79207e03 set1 rfcomm_channel_state_ua ,pdata +63da 67e0c4e4 store 1 ,mem_spp_state +63db 2020644e branch rfcomm_rx_process_end + +parse_uih_rp_spp_sabm: +63dc 6fe0c4e4 fetch 1 ,mem_spp_state +63dd 79207e03 set1 rfcomm_channel_state_ua ,pdata +63de 79207e02 set1 rfcomm_channel_state_sabm ,pdata +63df 67e0c4e4 store 1 ,mem_spp_state +63e0 6fe083ce fetch 1 ,mem_current_adss +63e1 204062dd call rfcomm_calculate_fcs_ua +63e2 67e083d1 store 1 ,mem_current_fcs +63e3 2040646d call rfcomm_send_ua +63e4 6fe083ce fetch 1 ,mem_current_adss +63e5 1feb7e00 rshift2 pdata ,pdata +63e6 67e0c648 store 1 ,mem_pn_dlci +63e7 1febfe00 lshift2 pdata ,pdata +63e8 793ffe01 set0 rfcomm_address_cr ,pdata +63e9 79207e00 set1 rfcomm_address_ext_len ,pdata +63ea d8404650 arg mem_hiufcs_spp ,temp +63eb 604903ca storet 2 ,mem_contw_temp +63ec 204062ec call rfcomm_save_fcs_uih +63ed 2020644e branch rfcomm_rx_process_end + +parse_uih_spp_uih_credits: +63ee 6fe103d4 fetch 2 ,mem_rfcomm_uih_payload_ptr +63ef 1fe20c00 copy pdata ,contr +63f0 1fe0fe01 increase 1 ,pdata +63f1 67e103d4 store 2 ,mem_rfcomm_uih_payload_ptr +63f2 efe08006 ifetch 1 ,contr +63f3 6848c653 fetcht 1 ,mem_remote_credits +63f4 9840fe00 iadd temp ,pdata +63f5 67e0c653 store 1 ,mem_remote_credits + +parse_uih_spp_uih: +63f6 204064f9 call rfcomm_increase_credit_given + +parse_uih_spp_uih_cont: +63f7 20406329 call get_rfcomm_snd_adss +63f8 204064df call rfcomm_send_uih_without_payload +63f9 20406502 call spp_process_rx_data +63fa 2020644e branch rfcomm_rx_process_end + +parse_uih_rp_spp_disconn_send_event: +63fb 70095b09 jam bt_evt_spp_disconnected ,mem_fifo_temp +63fc 20407871 call ui_ipc_send_event + +parse_uih_rp_spp_disconn: +63fd 204062c5 call rfcomm_init_spp +63fe 6fe083ce fetch 1 ,mem_current_adss +63ff 204062dd call rfcomm_calculate_fcs_ua +6400 67e083d1 store 1 ,mem_current_fcs +6401 2040646d call rfcomm_send_ua +6402 2020644e branch rfcomm_rx_process_end + +rfcomm_rx_process_reconn: +6403 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +6404 1fe20c00 copy pdata ,contr +6405 2040636f call get_rfcomm_head_struct +6406 6fe083cf fetch 1 ,mem_current_channel +6407 c0006409 beq 0 ,parse_dlci0_reconn +6408 2020643d branch parse_uih_reconn + +parse_dlci0_reconn: +6409 471ec027 bpatchx patch27_5 ,mem_patch27 +640a 6fe083d0 fetch 1 ,mem_current_frame_type +640b c01fe334 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +640c c039e33d beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +640d c077e40f beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +640e 2020644e branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih: +640f 6fe103d4 fetch 2 ,mem_rfcomm_uih_payload_ptr +6410 1fe20c00 copy pdata ,contr +6411 2040637a call get_rfcomm_uih_head_struct +6412 6fe083d6 fetch 1 ,mem_uih_cmd_type +6413 c020e418 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +6414 c0206418 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +6415 c038e423 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +6416 c0386433 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +6417 2020644e branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_pn_cmd: +6418 20406366 call parse_dlci0_rp_uih_pn_res_common +6419 6fe0c648 fetch 1 ,mem_pn_dlci +641a 1fe37e00 rshift pdata ,pdata +641b 6848c64f fetcht 1 ,mem_remote_spp_channel +641c 98467c00 isub temp ,null +641d 2022e41f branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +641e 2020137a branch assert + +parse_dlci0_reconn_uih_pn_cmd_spp: +641f 6fe0c4e4 fetch 1 ,mem_spp_state +6420 79207e01 set1 rfcomm_channel_state_pn_res ,pdata +6421 67e0c4e4 store 1 ,mem_spp_state +6422 2020644e branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_cmd: +6423 20406368 call get_rfcomm_param_modem_status +6424 6fe0c655 fetch 1 ,mem_ms_channel +6425 6848c64f fetcht 1 ,mem_remote_spp_channel +6426 98467c00 isub temp ,null +6427 2022e42a branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +6428 2020137a branch assert +6429 2020644e branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_cmd_spp: +642a 6fe0c4e4 fetch 1 ,mem_spp_state +642b 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +642c 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata +642d 67e0c4e4 store 1 ,mem_spp_state +642e 6848c648 fetcht 1 ,mem_pn_dlci +642f 184b8400 lshift2 temp ,temp +6430 18418403 or_into 3 ,temp +6431 204064c8 call rfcomm_send_modem_status_res +6432 2020644e branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_res: +6433 20406368 call get_rfcomm_param_modem_status +6434 6fe0c655 fetch 1 ,mem_ms_channel +6435 6848c64f fetcht 1 ,mem_remote_spp_channel +6436 98467c00 isub temp ,null +6437 2022e439 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +6438 2020137a branch assert + +parse_dlci0_reconn_uih_ms_res_spp: +6439 6fe0c4e4 fetch 1 ,mem_spp_state +643a 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata +643b 67e0c4e4 store 1 ,mem_spp_state +643c 2020644e branch rfcomm_rx_process_end + +parse_uih_reconn: +643d 6fe083cf fetch 1 ,mem_current_channel +643e 6848c64f fetcht 1 ,mem_remote_spp_channel +643f 98467c00 isub temp ,null +6440 2022e443 branch parse_uih_reconn_spp ,zero +6441 2020137a branch assert +6442 2020644e branch rfcomm_rx_process_end + +parse_uih_reconn_spp: +6443 6fe083d0 fetch 1 ,mem_current_frame_type +6444 c039e448 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +6445 c077e3f6 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +6446 c07fe3ee beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +6447 c029e44d beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn + +parse_uih_reconn_spp_ua: +6448 6fe0c4e4 fetch 1 ,mem_spp_state +6449 79207e03 set1 rfcomm_channel_state_ua ,pdata +644a 67e0c4e4 store 1 ,mem_spp_state +644b 2020644e branch rfcomm_rx_process_end + +parse_uih_reconn_spp_sabm: +644c 2020644c branch parse_uih_reconn_spp_sabm + +parse_uih_reconn_spp_disconn: +644d 202063fd branch parse_uih_rp_spp_disconn + +rfcomm_rx_process_end: +644e 20600000 rtn + +rfcomm_send_more_pkt: +644f 6fe0c652 fetch 1 ,mem_rfcomm_send_more_pkt +6450 207a0000 rtn blank +6451 c001e453 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +6452 2020137a branch assert + +rfcomm_send_more_pkt_msc_cmd_spp: +6453 70465200 jam 0 ,mem_rfcomm_send_more_pkt +6454 20405325 call l2cap_malloc_rfcomm_channel +6455 d8400001 arg spp_slave_channel ,temp +6456 6848c648 fetcht 1 ,mem_pn_dlci +6457 184b8400 lshift2 temp ,temp + +rfcomm_send_more_pkt_msc_cmd_spp0: +6458 18418403 or_into 0x03 ,temp +6459 da2000aa arg 0xaa ,rega +645a 204064b3 call rfcomm_send_modem_status_cmd +645b 20405333 call l2cap_get_rfcomm_tx_buff +645c 18a20c00 copy contw ,contr +645d efe10006 ifetch 2 ,contr +645e 203a137a branch assert ,blank +645f 20600000 rtn + +rfcomm_send_sabm: +6460 20405333 call l2cap_get_rfcomm_tx_buff +6461 58000004 setarg 0x0004 +6462 e7e10005 istore 2 ,contw +6463 6fe144da fetch 2 ,mem_rfcomm_remote_cid +6464 e7e10005 istore 2 ,contw +6465 6fe083ce fetch 1 ,mem_current_adss +6466 e7e08005 istore 1 ,contw +6467 471f4027 bpatchx patch27_6 ,mem_patch27 +6468 5800013f setarg 0x013f +6469 e7e10005 istore 2 ,contw +646a 6fe083d1 fetch 1 ,mem_current_fcs +646b e7e08005 istore 1 ,contw +646c 20600000 rtn + +rfcomm_send_ua: +646d 20405325 call l2cap_malloc_rfcomm_channel +646e 20405333 call l2cap_get_rfcomm_tx_buff +646f 58000004 setarg 0x0004 +6470 e7e10005 istore 2 ,contw +6471 6fe144da fetch 2 ,mem_rfcomm_remote_cid +6472 e7e10005 istore 2 ,contw +6473 6fe083ce fetch 1 ,mem_current_adss +6474 e7e08005 istore 1 ,contw +6475 471fc027 bpatchx patch27_7 ,mem_patch27 +6476 58000173 setarg 0x0173 +6477 e7e10005 istore 2 ,contw +6478 6fe083d1 fetch 1 ,mem_current_fcs +6479 e7e08005 istore 1 ,contw +647a 20600000 rtn + +rfcomm_send_param_neg_cmd: +647b 20405333 call l2cap_get_rfcomm_tx_buff +647c 5800000e setarg 0x000e +647d e7e10005 istore 2 ,contw +647e 6fe144da fetch 2 ,mem_rfcomm_remote_cid +647f e7e10005 istore 2 ,contw +6480 6fe0c64e fetch 1 ,mem_rfcomm_initiator +6481 1fe3fe00 lshift pdata ,pdata +6482 79207e00 set1 0 ,pdata +6483 e7e08005 istore 1 ,contw +6484 47204028 bpatchx patch28_0 ,mem_patch28 +6485 580015ef setarg 0x15ef +6486 e7e10005 istore 2 ,contw +6487 58001183 setarg 0x1183 +6488 e7e10005 istore 2 ,contw +6489 18427e00 copy temp ,pdata +648a e7e08005 istore 1 ,contw +648b 580000f0 setarg 0x0000f0 +648c e7e18005 istore 3 ,contw +648d 5800007f setarg rfcomm_max_frame_size +648e e7e10005 istore 2 ,contw +648f 58000000 setarg 0 +6490 e7e08005 istore 1 ,contw +6491 58000001 setarg 0x01 +6492 e7e08005 istore 1 ,contw +6493 204062e6 call rfcomm_calculate_fcs_dlci0 +6494 e7e08005 istore 1 ,contw +6495 70465410 jam 0x10 ,mem_credit_given +6496 20600000 rtn + +rfcomm_send_param_neg_res: +6497 20405325 call l2cap_malloc_rfcomm_channel +6498 20405333 call l2cap_get_rfcomm_tx_buff +6499 5800000e setarg 0x000e +649a e7e10005 istore 2 ,contw +649b 6fe144da fetch 2 ,mem_rfcomm_remote_cid +649c e7e10005 istore 2 ,contw +649d 6fe0c64e fetch 1 ,mem_rfcomm_initiator +649e 1fe3fe00 lshift pdata ,pdata +649f 79207e00 set1 0 ,pdata +64a0 e7e08005 istore 1 ,contw +64a1 4720c028 bpatchx patch28_1 ,mem_patch28 +64a2 580015ef setarg 0x15ef +64a3 e7e10005 istore 2 ,contw +64a4 58001181 setarg 0x1181 +64a5 e7e10005 istore 2 ,contw +64a6 6fe0c648 fetch 1 ,mem_pn_dlci +64a7 e7e08005 istore 1 ,contw +64a8 580000e0 setarg 0x0000e0 +64a9 e7e18005 istore 3 ,contw +64aa 6fe14657 fetch 2 ,mem_rfcomm_max_frame_size +64ab e7e10005 istore 2 ,contw +64ac 58000000 setarg 0x00 +64ad e7e08005 istore 1 ,contw +64ae 6fe0c659 fetch 1 ,mem_rfcomm_credit_init_data +64af e7e08005 istore 1 ,contw +64b0 204062e6 call rfcomm_calculate_fcs_dlci0 +64b1 e7e08005 istore 1 ,contw +64b2 20600000 rtn + +rfcomm_send_modem_status_cmd: +64b3 20405333 call l2cap_get_rfcomm_tx_buff +64b4 58000008 setarg 0x0008 +64b5 e7e10005 istore 2 ,contw +64b6 6fe144da fetch 2 ,mem_rfcomm_remote_cid +64b7 e7e10005 istore 2 ,contw +64b8 6fe0c64e fetch 1 ,mem_rfcomm_initiator +64b9 1fe3fe00 lshift pdata ,pdata +64ba 79207e00 set1 0 ,pdata +64bb e7e08005 istore 1 ,contw +64bc 47214028 bpatchx patch28_2 ,mem_patch28 +64bd 580009ef setarg 0x09ef +64be e7e10005 istore 2 ,contw +64bf 580005e3 setarg 0x05e3 +64c0 e7e10005 istore 2 ,contw +64c1 18427e00 copy temp ,pdata +64c2 e7e08005 istore 1 ,contw +64c3 5800008d setarg 0x8d +64c4 e7e08005 istore 1 ,contw +64c5 204062e6 call rfcomm_calculate_fcs_dlci0 +64c6 e7e08005 istore 1 ,contw +64c7 20600000 rtn + +rfcomm_send_modem_status_res: +64c8 20405325 call l2cap_malloc_rfcomm_channel +64c9 20405333 call l2cap_get_rfcomm_tx_buff +64ca 58000008 setarg 0x0008 +64cb e7e10005 istore 2 ,contw +64cc 6fe144da fetch 2 ,mem_rfcomm_remote_cid +64cd e7e10005 istore 2 ,contw +64ce 18421600 copy temp ,timeup +64cf 6fe0c64e fetch 1 ,mem_rfcomm_initiator +64d0 1fe3fe00 lshift pdata ,pdata +64d1 79207e00 set1 0 ,pdata +64d2 e7e08005 istore 1 ,contw +64d3 4721c028 bpatchx patch28_3 ,mem_patch28 +64d4 580009ef setarg 0x09ef +64d5 e7e10005 istore 2 ,contw +64d6 580005e1 setarg 0x05e1 +64d7 e7e10005 istore 2 ,contw +64d8 19627e00 copy timeup ,pdata +64d9 e7e08005 istore 1 ,contw +64da 5800008d setarg 0x8d +64db e7e08005 istore 1 ,contw +64dc 204062e6 call rfcomm_calculate_fcs_dlci0 +64dd e7e08005 istore 1 ,contw +64de 20600000 rtn + +rfcomm_send_uih_without_payload: +64df 47224028 bpatchx patch28_4 ,mem_patch28 +64e0 6fe0c654 fetch 1 ,mem_credit_given +64e1 207a0000 rtn blank +64e2 6ff10112 fetch 2 ,core_uart_rxitems +64e3 247a0000 nrtn blank +64e4 1a227e00 copy rega ,pdata +64e5 67e0895d store 1 ,mem_pdatatemp + 1 +64e6 6048895c storet 1 ,mem_pdatatemp +64e7 204052f1 call l2cap_malloc_is_fifo_full +64e8 247a0000 nrtn blank +64e9 20405325 call l2cap_malloc_rfcomm_channel +64ea 20405333 call l2cap_get_rfcomm_tx_buff +64eb 58000005 setarg 0x05 +64ec e7e10005 istore 2 ,contw +64ed 6fe144da fetch 2 ,mem_rfcomm_remote_cid +64ee e7e10005 istore 2 ,contw +64ef 6fe083e0 fetch 1 ,mem_rfcomm_send_adss +64f0 e7e08005 istore 1 ,contw +64f1 580001ff setarg 0x01ff +64f2 e7e10005 istore 2 ,contw +64f3 6fe0c654 fetch 1 ,mem_credit_given +64f4 e7e08005 istore 1 ,contw +64f5 6fe0c651 fetch 1 ,mem_hiufcs_spp_wcredits +64f6 e7e08005 istore 1 ,contw +64f7 70465400 jam 0 ,mem_credit_given +64f8 20600000 rtn + +rfcomm_increase_credit_given: +64f9 4722c028 bpatchx patch28_5 ,mem_patch28 +64fa 6fe0c656 fetch 1 ,mem_rfcomm_credit_flag +64fb c1008000 rtneq credit_enable +64fc 6fe103d2 fetch 2 ,mem_current_length +64fd 207a0000 rtn blank +64fe 6fe0c654 fetch 1 ,mem_credit_given +64ff 1fe0fe01 increase 1 ,pdata +6500 67e0c654 store 1 ,mem_credit_given +6501 20600000 rtn + +spp_process_rx_data: +6502 6fe1465a fetch 2 ,mem_cb_receive_spp_data +6503 20207e05 branch callback_func + +spp_tx_rfcomm_packet: +6504 47234028 bpatchx patch28_6 ,mem_patch28 +6505 6fe0c653 fetch 1 ,mem_remote_credits +6506 207a0000 rtn blank +6507 1fe0ffff increase -1 ,pdata +6508 67e0c653 store 1 ,mem_remote_credits +6509 6fe14649 fetch 2 ,mem_pn_max_frame_size +650a 684947a9 fetcht 2 ,mem_current_packet_length +650b 98467c00 isub temp ,null +650c 2021650e branch ssp_tx_rfcomm_from_uart ,positive +650d 67e147a9 store 2 ,mem_current_packet_length + +ssp_tx_rfcomm_from_uart: +650e 6fe0c654 fetch 1 ,mem_credit_given +650f 203a6516 branch ssp_tx_rfcomm_from_uart_without_credit ,blank +6510 7003e301 jam 1 ,mem_rfcomm_send_offset +6511 6fe0c651 fetch 1 ,mem_hiufcs_spp_wcredits +6512 67e083e2 store 1 ,mem_rfcomm_send_fcs +6513 580000ff setarg rsp_rx_uih_wdata +6514 67e083e1 store 1 ,mem_rfcomm_send_frame_type +6515 2020651b branch ssp_tx_rfcomm_from_uart_common + +ssp_tx_rfcomm_from_uart_without_credit: +6516 7003e300 jam 0 ,mem_rfcomm_send_offset +6517 6fe0c650 fetch 1 ,mem_hiufcs_spp +6518 67e083e2 store 1 ,mem_rfcomm_send_fcs +6519 580000ef setarg rsp_tx_uih +651a 67e083e1 store 1 ,mem_rfcomm_send_frame_type + +ssp_tx_rfcomm_from_uart_common: +651b 4723c028 bpatchx patch28_7 ,mem_patch28 +651c 6fe147a9 fetch 2 ,mem_current_packet_length +651d 1fe67c7f sub pdata ,127 ,null +651e 20216522 branch ssp_tx_rfcomm_from_uart_common0 ,positive +651f 6fe083e3 fetch 1 ,mem_rfcomm_send_offset +6520 1fe0fe01 increase 1 ,pdata +6521 67e083e3 store 1 ,mem_rfcomm_send_offset + +ssp_tx_rfcomm_from_uart_common0: +6522 20406329 call get_rfcomm_snd_adss +6523 6fe147a9 fetch 2 ,mem_current_packet_length +6524 1fe0fe08 increase 8 ,pdata +6525 684883e3 fetcht 1 ,mem_rfcomm_send_offset +6526 9840a200 iadd temp ,rega +6527 2040529d call l2cap_malloc +6528 67e10328 store 2 ,mem_rfcomm_tx_buff_ptr +6529 1fe0fe04 increase 4 ,pdata +652a 67e1032a store 2 ,mem_rfcomm_tx_payload_ptr +652b 1fe20a00 copy pdata ,contw +652c 6fe083e0 fetch 1 ,mem_rfcomm_send_adss +652d e7e08005 istore 1 ,contw +652e 6fe083e1 fetch 1 ,mem_rfcomm_send_frame_type +652f e7e08005 istore 1 ,contw +6530 2040654c call ssp_tx_write_length +6531 2040655d call ssp_tx_write_given_credit +6532 47244029 bpatchx patch29_0 ,mem_patch29 +6533 6fe1465c fetch 2 ,mem_nl_rx_data_src +6534 1fe20600 copy pdata ,contu +6535 6fe147a9 fetch 2 ,mem_current_packet_length +6536 1fe27200 copy pdata ,loopcnt +6537 20405f39 call uart_copy_rx_bytes_fast +6538 18a20400 copy contw ,temp +6539 18627e00 copy contu ,pdata +653a 67e1465c store 2 ,mem_nl_rx_data_src +653b 18420a00 copy temp ,contw +653c 6fe083e2 fetch 1 ,mem_rfcomm_send_fcs +653d e7e08005 istore 1 ,contw +653e 6fe10328 fetch 2 ,mem_rfcomm_tx_buff_ptr +653f 1fe20a00 copy pdata ,contw +6540 6fe147a9 fetch 2 ,mem_current_packet_length +6541 684883e3 fetcht 1 ,mem_rfcomm_send_offset +6542 9840fe00 iadd temp ,pdata +6543 1fe0fe04 increase 4 ,pdata +6544 e7e10005 istore 2 ,contw +6545 6fe144da fetch 2 ,mem_rfcomm_remote_cid +6546 e7e10005 istore 2 ,contw +6547 70465400 jam 0 ,mem_credit_given +6548 6fe1465e fetch 2 ,mem_nl_rx_len_all +6549 c00038b9 beq 0 ,module_hci_command_tx_spp_tx_complete +654a 7009d100 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +654b 20600000 rtn + +ssp_tx_write_length: +654c 4724c029 bpatchx patch29_1 ,mem_patch29 +654d 6fe147a9 fetch 2 ,mem_current_packet_length +654e 1fe67c7f sub pdata ,0x7f ,null +654f 24216554 nbranch ssp_tx_write_long_packet ,positive +6550 1fe3fe00 lshift pdata ,pdata +6551 79207e00 set1 0 ,pdata +6552 e7e08005 istore 1 ,contw +6553 20600000 rtn + +ssp_tx_write_long_packet: +6554 6fe147a9 fetch 2 ,mem_current_packet_length +6555 1fe97e00 rshift3 pdata ,pdata +6556 1ff18400 rshift4 pdata ,temp +6557 1fe17e7f and_into 0x7f ,pdata +6558 1fe3fe00 lshift pdata ,pdata +6559 793ffe00 set0 0 ,pdata +655a e7e08005 istore 1 ,contw +655b e0408005 istoret 1 ,contw +655c 20600000 rtn + +ssp_tx_write_given_credit: +655d 6fe0c654 fetch 1 ,mem_credit_given +655e 207a0000 rtn blank +655f e7e08005 istore 1 ,contw +6560 20600000 rtn + +scheduler_process: +6561 47254029 bpatchx patch29_2 ,mem_patch29 +6562 20407887 call check_51cmd +6563 20403111 call app_process_bb_event +6564 20405a40 call process_conn_sm +6565 4725c029 bpatchx patch29_3 ,mem_patch29 +6566 2040706c call sp_calc_sequence +6567 20407045 call simple_pairing_sequence +6568 20407056 call master_simple_paring_sequence +6569 204052f1 call l2cap_malloc_is_fifo_full +656a 247a0000 nrtn blank +656b 20404e04 call l2cap_call_proc_sigal_pending +656c 204052f1 call l2cap_malloc_is_fifo_full +656d 247a0000 nrtn blank +656e 47264029 bpatchx patch29_4 ,mem_patch29 +656f 204065ab call process_upper_sm +6570 20404fc2 call l2cap_send_config_req +6571 2040644f call rfcomm_send_more_pkt + +scheduler_process0: +6572 20406575 call scheduler_tx_disconnect_hid +6573 4726c029 bpatchx patch29_5 ,mem_patch29 +6574 2020310d branch app_process_bt + +scheduler_tx_disconnect_hid: +6575 6fe08330 fetch 1 ,mem_control_tasks +6576 c28050e5 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +6577 c283d0ef bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +6578 20600000 rtn + +scheduler_tx_l2cap_pkt: +6579 47274029 bpatchx patch29_6 ,mem_patch29 +657a 204052f7 call l2cap_malloc_is_fifo_empty +657b 207a0000 rtn blank +657c 6fe0804c fetch 1 ,mem_op +657d c3830000 rtnbit1 op_txl2cap +657e 204052db call l2cap_malloc_fifo_out +657f 67e100bf store 2 ,mem_txptr +6580 1fe20c00 copy pdata ,contr +6581 efe10006 ifetch 2 ,contr +6582 1fe0fe04 increase 4 ,pdata +6583 67e141e6 store 2 ,mem_tx_len +6584 7041e506 jam 6 ,mem_tx_lch +6585 4727c029 bpatchx patch29_7 ,mem_patch29 +6586 6fe144d6 fetch 2 ,mem_l2cap_tx_multi_offset +6587 203a6594 branch scheduler_tx_l2cap_start_pkt ,blank +6588 6fe0804c fetch 1 ,mem_op +6589 c4038000 rtnbit0 op_pkt_comp +658a 793ffe07 set0 op_pkt_comp ,pdata +658b 67e0804c store 1 ,mem_op +658c 7041e505 jam 5 ,mem_tx_lch +658d 684944d6 fetcht 2 ,mem_l2cap_tx_multi_offset +658e 6fe100bf fetch 2 ,mem_txptr +658f 9840fe00 iadd temp ,pdata +6590 67e100bf store 2 ,mem_txptr +6591 6fe141e6 fetch 2 ,mem_tx_len +6592 98467e00 isub temp ,pdata +6593 67e141e6 store 2 ,mem_tx_len + +scheduler_tx_l2cap_start_pkt: +6594 6fe141e6 fetch 2 ,mem_tx_len +6595 203a137a branch assert ,blank +6596 d8400104 arg l2cap_max_pkt_len ,temp +6597 98467e00 isub temp ,pdata +6598 2022e59f branch scheduler_tx_l2cap_last_pkt ,zero +6599 2421659f nbranch scheduler_tx_l2cap_last_pkt ,positive +659a 604941e6 storet 2 ,mem_tx_len +659b 6fe144d6 fetch 2 ,mem_l2cap_tx_multi_offset +659c 9840fe00 iadd temp ,pdata +659d 67e144d6 store 2 ,mem_l2cap_tx_multi_offset +659e 202065a1 branch scheduler_tx_l2cap_pkt_end + +scheduler_tx_l2cap_last_pkt: +659f 58000000 setarg 0 +65a0 67e144d6 store 2 ,mem_l2cap_tx_multi_offset + +scheduler_tx_l2cap_pkt_end: +65a1 6fe0804c fetch 1 ,mem_op +65a2 79207e06 set1 op_txl2cap ,pdata +65a3 67e0804c store 1 ,mem_op +65a4 20600000 rtn + +scheduler_start_upper_sm: +65a5 6fe0c78e fetch 1 ,mem_ui_profile_supported +65a6 c28065a9 bbit1 support_hid ,scheduler_start_upper_sm_hid +65a7 70033801 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +65a8 20600000 rtn + +scheduler_start_upper_sm_hid: +65a9 7003380f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +65aa 20600000 rtn + +process_upper_sm: +65ab 6fe0c78b fetch 1 ,memui_reconnect_mode +65ac 243a65b1 nbranch process_upper_sm_reconn ,blank + +process_upper_sm_remote_page: +65ad 6fe08337 fetch 1 ,mem_upper_sm_remote_page +65ae 207a0000 rtn blank +65af 70033700 jam 0 ,mem_upper_sm_remote_page + +process_upper_sm_rp_wait: +65b0 20600000 rtn + +process_upper_sm_reconn: +65b1 4728402a bpatchx patch2a_0 ,mem_patch2a +65b2 6fe08338 fetch 1 ,mem_upper_sm_reconn +65b3 207a0000 rtn blank +65b4 c000e5d1 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +65b5 c001662a beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +65b6 c001e5d7 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +65b7 c002662e beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +65b8 c01de5e1 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +65b9 c01e6631 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +65ba c006e5e6 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +65bb c0076636 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +65bc c007e5e9 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +65bd c008663c beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +65be c008e5ef beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +65bf c0096640 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +65c0 c009e5f5 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +65c1 c00a6644 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +65c2 c00ae5fb beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +65c3 c00b6648 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +65c4 c00be601 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +65c5 c00c664d beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +65c6 c00ce607 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +65c7 c00d6651 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +65c8 c00de60d beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +65c9 c00e6655 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +65ca c00ee613 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +65cb c00f665a beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +65cc c00fe619 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +65cd c010665e beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +65ce c010e624 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +65cf c0116662 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait + +process_upper_sm_reconn_wait: +65d0 20600000 rtn + +process_upper_sm_reconn_sdp_conn: +65d1 2040666d call upper_sm_send_sdp_conn +65d2 70033802 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +65d3 6fe0c4e0 fetch 1 ,mem_sdp_state +65d4 79207e00 set1 l2cap_channel_state_conn_req ,pdata +65d5 67e0c4e0 store 1 ,mem_sdp_state +65d6 20600000 rtn + +process_upper_sm_reconn_sdp_cfg: +65d7 70033804 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +65d8 6fe0c4e0 fetch 1 ,mem_sdp_state +65d9 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req +65da 70033803 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +65db 20406674 call upper_sm_send_sdp_cfg +65dc 70033804 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +65dd 6fe0c4e0 fetch 1 ,mem_sdp_state +65de 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +65df 67e0c4e0 store 1 ,mem_sdp_state +65e0 20600000 rtn + +process_upper_sm_reconn_ss_spp: +65e1 204052f7 call l2cap_malloc_is_fifo_empty +65e2 247a0000 nrtn blank +65e3 20406683 call upper_sm_send_ss_spp +65e4 7003383c jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +65e5 20600000 rtn + +process_upper_sm_reconn_sdp_disconn: +65e6 20406679 call upper_sm_send_sdp_disconn +65e7 7003380e jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +65e8 20600000 rtn + +process_upper_sm_reconn_hid_ctrl_conn: +65e9 20406693 call upper_sm_send_hid_ctrl_conn +65ea 70033810 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +65eb 6fe0c4e2 fetch 1 ,mem_hid_control_state +65ec 79207e00 set1 l2cap_channel_state_conn_req ,pdata +65ed 67e0c4e2 store 1 ,mem_hid_control_state +65ee 20600000 rtn + +process_upper_sm_reconn_hid_ctrl_cfg: +65ef 2040669a call upper_sm_send_hid_ctrl_cfg +65f0 70033812 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +65f1 6fe0c4e2 fetch 1 ,mem_hid_control_state +65f2 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +65f3 67e0c4e2 store 1 ,mem_hid_control_state +65f4 20600000 rtn + +process_upper_sm_reconn_hid_int_conn: +65f5 2040669f call upper_sm_send_hid_int_conn +65f6 70033814 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +65f7 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +65f8 79207e00 set1 l2cap_channel_state_conn_req ,pdata +65f9 67e0c4e3 store 1 ,mem_hid_interrupt_state +65fa 20600000 rtn + +process_upper_sm_reconn_hid_int_cfg: +65fb 204066a6 call upper_sm_send_hid_int_cfg +65fc 70033816 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +65fd 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +65fe 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +65ff 67e0c4e3 store 1 ,mem_hid_interrupt_state +6600 20600000 rtn + +process_upper_sm_reconn_rfcomm_conn: +6601 20406687 call upper_sm_send_rfcomm_conn +6602 70033818 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +6603 6fe0c4e1 fetch 1 ,mem_rfcomm_state +6604 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6605 67e0c4e1 store 1 ,mem_rfcomm_state +6606 20600000 rtn + +process_upper_sm_reconn_rfcomm_cfg: +6607 2040668e call upper_sm_send_rfcomm_cfg +6608 7003381a jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +6609 6fe0c4e1 fetch 1 ,mem_rfcomm_state +660a 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +660b 67e0c4e1 store 1 ,mem_rfcomm_state +660c 20600000 rtn + +process_upper_sm_reconn_rfcomm_sabm: +660d 204066ab call upper_sm_send_rfcomm_sabm +660e 7003381c jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +660f 6fe0c4e1 fetch 1 ,mem_rfcomm_state +6610 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata +6611 67e0c4e1 store 1 ,mem_rfcomm_state +6612 20600000 rtn + +process_upper_sm_reconn_spp_cmd_pn: +6613 204066b2 call upper_sm_send_spp_cmd_pn +6614 6fe0c4e4 fetch 1 ,mem_spp_state +6615 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata +6616 67e0c4e4 store 1 ,mem_spp_state +6617 7003381e jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +6618 20600000 rtn + +process_upper_sm_reconn_spp_sabm: +6619 204066b8 call upper_sm_send_spp_sabm +661a 6fe0c4e4 fetch 1 ,mem_spp_state +661b 79207e02 set1 rfcomm_channel_state_sabm ,pdata +661c 67e0c4e4 store 1 ,mem_spp_state +661d 70033820 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +661e 6fe0c64f fetch 1 ,mem_remote_spp_channel +661f 1fe9fe00 lshift3 pdata ,pdata +6620 1fe1fe03 or_into 3 ,pdata +6621 d8404650 arg mem_hiufcs_spp ,temp +6622 604903ca storet 2 ,mem_contw_temp +6623 202062ec branch rfcomm_save_fcs_uih + +process_upper_sm_reconn_spp_cmd_ms: +6624 204066c2 call upper_sm_send_spp_cmd_ms +6625 6fe0c4e4 fetch 1 ,mem_spp_state +6626 79207e04 set1 rfcomm_channel_state_snd_ms_cmd ,pdata +6627 67e0c4e4 store 1 ,mem_spp_state +6628 70033822 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +6629 20600000 rtn + +process_upper_sm_reconn_sdp_conn_wait: +662a 6fe0c4e0 fetch 1 ,mem_sdp_state +662b c4008000 rtnbit0 l2cap_channel_state_conn_res +662c 70033803 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +662d 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_sdp_cfg_wait: +662e 6fe0c4e0 fetch 1 ,mem_sdp_state +662f c19f8000 rtnne l2cap_channel_setup_complete +6630 7003383b jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn + +process_upper_sm_reconn_ss_spp_wait: +6631 6fe08336 fetch 1 ,mem_message_to_uppersm +6632 c18b8000 rtnne recieve_ss_reasult_hf +6633 70033600 jam 0 ,mem_message_to_uppersm +6634 7003380d jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +6635 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_sdp_disconn_wait: +6636 6fe0c4e0 fetch 1 ,mem_sdp_state +6637 247a0000 nrtn blank +6638 6fe0c78e fetch 1 ,mem_ui_profile_supported +6639 c2806665 bbit1 support_hid ,process_upper_sm_reconn_setup_hid +663a c2836667 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +663b 2020666b branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_hid_ctrl_conn_wait: +663c 6fe0c4e2 fetch 1 ,mem_hid_control_state +663d c4008000 rtnbit0 l2cap_channel_state_conn_res +663e 70033811 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +663f 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_ctrl_cfg_wait: +6640 6fe0c4e2 fetch 1 ,mem_hid_control_state +6641 c19f8000 rtnne l2cap_channel_setup_complete +6642 70033813 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +6643 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_int_conn_wait: +6644 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +6645 c4008000 rtnbit0 l2cap_channel_state_conn_res +6646 70033815 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +6647 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_int_cfg_wait: +6648 6fe0c4e3 fetch 1 ,mem_hid_interrupt_state +6649 c19f8000 rtnne l2cap_channel_setup_complete +664a 6fe0c78e fetch 1 ,mem_ui_profile_supported +664b c2836667 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +664c 2020666b branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_rfcomm_conn_wait: +664d 6fe0c4e1 fetch 1 ,mem_rfcomm_state +664e c4008000 rtnbit0 l2cap_channel_state_conn_res +664f 70033819 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +6650 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_rfcomm_cfg_wait: +6651 6fe0c4e1 fetch 1 ,mem_rfcomm_state +6652 c19f8000 rtnne l2cap_channel_setup_complete +6653 7003381b jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +6654 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_rfcomm_sabm_wait: +6655 6fe0c4e1 fetch 1 ,mem_rfcomm_state +6656 c1ff8000 rtnne l2cap_channel_rfcomm_dlci0_opened +6657 6fe0c78e fetch 1 ,mem_ui_profile_supported +6658 c2836669 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +6659 2020666b branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_spp_cmd_pn_wait: +665a 6fe0c4e4 fetch 1 ,mem_spp_state +665b c4008000 rtnbit0 rfcomm_channel_state_pn_res +665c 7003381f jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +665d 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_spp_sabm_wait: +665e 6fe0c4e4 fetch 1 ,mem_spp_state +665f c4018000 rtnbit0 rfcomm_channel_state_ua +6660 70033821 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +6661 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_spp_cmd_ms_wait: +6662 6fe0c4e4 fetch 1 ,mem_spp_state +6663 c1ff8000 rtnne rfcomm_channel_setup_complete +6664 2020666b branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_setup_hid: +6665 7003380f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +6666 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_rfcomm: +6667 70033817 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +6668 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_spp: +6669 7003381d jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +666a 202065b1 branch process_upper_sm_reconn + +process_upper_sm_reconn_termination: +666b 70033800 jam 0 ,mem_upper_sm_reconn +666c 20600000 rtn + +upper_sm_send_sdp_conn: +666d 4728c02a bpatchx patch2a_1 ,mem_patch2a +666e 2040530b call l2cap_malloc_signal_channel +666f 58000001 setarg psm_sdp +6670 1fe20400 copy pdata ,temp +6671 58000050 setarg l2cap_sdp_channel +6672 1fe21600 copy pdata ,timeup +6673 20205106 branch ml2cap_send_signal_connect_req + +upper_sm_send_sdp_cfg: +6674 4729402a bpatchx patch2a_2 ,mem_patch2a +6675 2040530b call l2cap_malloc_signal_channel +6676 6fe144d8 fetch 2 ,mem_sdp_remote_cid +6677 1fe20400 copy pdata ,temp +6678 20205115 branch ml2cap_send_signal_config_req + +upper_sm_send_sdp_disconn: +6679 4729c02a bpatchx patch2a_3 ,mem_patch2a +667a 2040530b call l2cap_malloc_signal_channel +667b 6fe144d8 fetch 2 ,mem_sdp_remote_cid +667c 1fe20400 copy pdata ,temp +667d d9600050 arg l2cap_sdp_channel ,timeup +667e 2040512a call ml2cap_send_signal_disconn_req +667f 6fe0c4e0 fetch 1 ,mem_sdp_state +6680 793ffe05 set0 l2cap_channel_state_rcv_cfg_res ,pdata +6681 67e0c4e0 store 1 ,mem_sdp_state +6682 20600000 rtn + +upper_sm_send_ss_spp: +6683 472a402a bpatchx patch2a_4 ,mem_patch2a +6684 20405318 call l2cap_malloc_sdp_channel +6685 204069ee call sdp_send_spp_request +6686 20205145 branch msdp_send_req_done + +upper_sm_send_rfcomm_conn: +6687 472ac02a bpatchx patch2a_5 ,mem_patch2a +6688 2040530b call l2cap_malloc_signal_channel +6689 58000003 setarg psm_rfcomm +668a 1fe20400 copy pdata ,temp +668b 58000051 setarg l2cap_rfcomm_channel +668c 1fe21600 copy pdata ,timeup +668d 20205106 branch ml2cap_send_signal_connect_req + +upper_sm_send_rfcomm_cfg: +668e 472b402a bpatchx patch2a_6 ,mem_patch2a +668f 2040530b call l2cap_malloc_signal_channel +6690 6fe144da fetch 2 ,mem_rfcomm_remote_cid +6691 1fe20400 copy pdata ,temp +6692 20205115 branch ml2cap_send_signal_config_req + +upper_sm_send_hid_ctrl_conn: +6693 472bc02a bpatchx patch2a_7 ,mem_patch2a +6694 2040530b call l2cap_malloc_signal_channel +6695 58000011 setarg psm_hid_control +6696 1fe20400 copy pdata ,temp +6697 58000052 setarg l2cap_hid_control_channel +6698 1fe21600 copy pdata ,timeup +6699 20205106 branch ml2cap_send_signal_connect_req + +upper_sm_send_hid_ctrl_cfg: +669a 472c402b bpatchx patch2b_0 ,mem_patch2b +669b 2040530b call l2cap_malloc_signal_channel +669c 6fe144dc fetch 2 ,mem_hid_ctrl_remote_cid +669d 1fe20400 copy pdata ,temp +669e 20205115 branch ml2cap_send_signal_config_req + +upper_sm_send_hid_int_conn: +669f 472cc02b bpatchx patch2b_1 ,mem_patch2b +66a0 2040530b call l2cap_malloc_signal_channel +66a1 58000013 setarg psm_hid_interrupt +66a2 1fe20400 copy pdata ,temp +66a3 58000053 setarg l2cap_hid_interrupt_channel +66a4 1fe21600 copy pdata ,timeup +66a5 20205106 branch ml2cap_send_signal_connect_req + +upper_sm_send_hid_int_cfg: +66a6 472d402b bpatchx patch2b_2 ,mem_patch2b +66a7 2040530b call l2cap_malloc_signal_channel +66a8 6fe144de fetch 2 ,mem_hid_int_remote_cid +66a9 1fe20400 copy pdata ,temp +66aa 20205115 branch ml2cap_send_signal_config_req + +upper_sm_send_rfcomm_sabm: +66ab 472dc02b bpatchx patch2b_3 ,mem_patch2b +66ac 20405325 call l2cap_malloc_rfcomm_channel +66ad 7003ce03 jam 3 ,mem_current_adss +66ae 7003d11c jam 0x1c ,mem_current_fcs +66af 20406460 call rfcomm_send_sabm +66b0 70464e01 jam 1 ,mem_rfcomm_initiator +66b1 20600000 rtn + +upper_sm_send_spp_cmd_pn: +66b2 472e402b bpatchx patch2b_4 ,mem_patch2b +66b3 20405325 call l2cap_malloc_rfcomm_channel +66b4 6848c64f fetcht 1 ,mem_remote_spp_channel +66b5 20406330 call channel_to_dlci +66b6 6048c648 storet 1 ,mem_pn_dlci +66b7 2020647b branch rfcomm_send_param_neg_cmd + +upper_sm_send_spp_sabm: +66b8 472ec02b bpatchx patch2b_5 ,mem_patch2b +66b9 20405325 call l2cap_malloc_rfcomm_channel +66ba 6848c648 fetcht 1 ,mem_pn_dlci +66bb 2040632a call dlci_to_address_cmd +66bc 204062d1 call rfcomm_calculate_fcs_sabm +66bd 67e083d1 store 1 ,mem_current_fcs +66be 6848c648 fetcht 1 ,mem_pn_dlci +66bf 2040632a call dlci_to_address_cmd +66c0 604883ce storet 1 ,mem_current_adss +66c1 20206460 branch rfcomm_send_sabm + +upper_sm_send_spp_cmd_ms: +66c2 472f402b bpatchx patch2b_6 ,mem_patch2b +66c3 20405325 call l2cap_malloc_rfcomm_channel +66c4 6848c648 fetcht 1 ,mem_pn_dlci +66c5 2040632a call dlci_to_address_cmd +66c6 202064b3 branch rfcomm_send_modem_status_cmd + +sdp_process: +66c7 472fc02b bpatchx patch2b_7 ,mem_patch2b +66c8 6fe10315 fetch 2 ,mem_l2cap_payload_ptr +66c9 98000c00 iforce contr +66ca efe08006 ifetch 1 ,contr +66cb 1fe22400 copy pdata ,regb +66cc 67e083ee store 1 ,mem_sdp_pduid +66cd efe10006 ifetch 2 ,contr +66ce 67e103ef store 2 ,mem_sdp_transactionid +66cf efe08006 ifetch 1 ,contr +66d0 1fed1600 lshift8 pdata ,timeup +66d1 efe08006 ifetch 1 ,contr +66d2 99609600 iadd timeup ,timeup +66d3 4730402c bpatchx patch2c_0 ,mem_patch2c +66d4 18c20400 copy contr ,temp +66d5 df200004 arg 4 ,loopcnt +66d6 d8a003fd arg mem_sdp_handle_list ,contw +66d7 20407d17 call memset0 +66d8 18420c00 copy temp ,contr +66d9 1a427e00 deposit regb +66da c000e870 beq sdp_error_res ,sdp_process_error_res +66db c00166e2 beq sdp_search_req ,sdp_process_ss_req +66dc c001e870 beq sdp_search_res ,sdp_process_ss_res +66dd c002670a beq sdp_attribute_req ,sdp_process_sa_req +66de c002e870 beq sdp_attribute_res ,sdp_process_sa_res +66df c00367b8 beq sdp_searchattrib_req ,sdp_process_ssa_req +66e0 c003e870 beq sdp_searchattrib_res ,sdp_process_ssa_res +66e1 20206877 branch sdp_insufficient_resource + +sdp_process_ss_req: +66e2 4730c02c bpatchx patch2c_1 ,mem_patch2c +66e3 20406886 call ask_serviceclassid +66e4 2841fe01 compare 1 ,temp ,0xff +66e5 2020e8f6 branch ss_empty_rsp ,true +66e6 2841feff compare 0xff ,temp ,0xff +66e7 2020e87a branch sdp_invalid_request_syntax ,true +66e8 efe10006 ifetch 2 ,contr +66e9 67e103f5 store 2 ,mem_sdp_record_maxcnt +66ea 196097fe increase -2 ,timeup +66eb 196097ff increase -1 ,timeup +66ec 2422e874 nbranch sdp_invalid_pdu_size ,zero +66ed d96003e4 arg mem_sdp_uuid_search_ptr ,timeup +66ee efe1000b ifetch 2 ,timeup +66ef 207a0000 rtn blank +66f0 20406938 call search_all_uuid +66f1 20405323 call l2cap_get_sdp_tx_payload +66f2 18007e03 force 3 ,pdata +66f3 e7e08005 istore 1 ,contw +66f4 6fe103ef fetch 2 ,mem_sdp_transactionid +66f5 e7e10005 istore 2 ,contw +66f6 18ebfe00 lshift2 queue ,pdata +66f7 1fe0fe05 add pdata ,5 ,pdata +66f8 1fe0a605 add pdata ,5 ,regc +66f9 1ff0fe00 byteswap pdata ,pdata +66fa e7e10005 istore 2 ,contw +66fb 18e27e00 deposit queue +66fc 1ff0fe00 byteswap pdata ,pdata +66fd e7e10005 istore 2 ,contw +66fe e7e10005 istore 2 ,contw +66ff d8c003fd arg mem_sdp_handle_list ,contr +6700 18e27200 copy queue ,loopcnt +6701 2022e705 branch ss_req_blank ,zero + +ss_req_loop: +6702 efe20006 ifetch 4 ,contr +6703 e7e20005 istore 4 ,contw +6704 c2006702 loop ss_req_loop + +ss_req_blank: +6705 18007e00 force 0 ,pdata +6706 e7e08005 istore 1 ,contw +6707 1a627e00 deposit regc +6708 67e10326 store 2 ,mem_sdp_tx_pkt_length +6709 20600000 rtn + +sdp_process_sa_req: +670a 4731402c bpatchx patch2c_2 ,mem_patch2c +670b efe20006 ifetch 4 ,contr +670c 67e203f7 store 4 ,mem_sdp_record_handle +670d 196097fc increase -4 ,timeup +670e 204067e4 call sdp_store_maxbyte +670f 67e103f3 store 2 ,mem_sdp_attribute_maxbyte +6710 196097fe increase -2 ,timeup +6711 204068de call dataelementtype6 +6712 2022e87a branch sdp_invalid_request_syntax ,zero +6713 2a21fe05 compare 5 ,rega ,0xff +6714 2020e718 branch sa_judge_wholerange ,true + +sa_isnot_wholerange: +6715 d8a003fd arg mem_sdp_attrib_list ,contw +6716 18000e00 force 0 ,queue +6717 20206727 branch sa_req_loop + +sa_judge_wholerange: +6718 efe08006 ifetch 1 ,contr +6719 c085687a bne sdp_attribute_range ,sdp_invalid_request_syntax +671a efe10006 ifetch 2 ,contr +671b 243a6725 nbranch sa_judge_wholerange_false1 ,blank +671c efe08006 ifetch 1 ,contr +671d c0ffe723 bne 0xff ,sa_judge_wholerange_false2 +671e efe08006 ifetch 1 ,contr +671f c0ffe721 bne 0xff ,sa_judge_wholerange_false3 +6720 2020676e branch sa_req_all + +sa_judge_wholerange_false3: +6721 18c08dfb increase -5 ,contr +6722 20206715 branch sa_isnot_wholerange + +sa_judge_wholerange_false2: +6723 18c08dfc increase -4 ,contr +6724 20206715 branch sa_isnot_wholerange + +sa_judge_wholerange_false1: +6725 18c08dfd increase -3 ,contr +6726 20206715 branch sa_isnot_wholerange + +sa_req_loop: +6727 efe08006 ifetch 1 ,contr +6728 c004e73c beq sdp_attribute_id ,sa_req_one_id +6729 c005672a beq sdp_attribute_range ,sa_req_range + +sa_req_range: +672a efe10006 ifetch 2 ,contr +672b e7e10005 istore 2 ,contw +672c 18e08e01 increase 1 ,queue +672d 1ff0a400 byteswap pdata ,regb +672e efe10006 ifetch 2 ,contr +672f 1ff0fe00 byteswap pdata ,pdata + +sa_req_range_id_increase: +6730 1a40a401 increase 1 ,regb +6731 9a467c00 isub regb ,null +6732 24216739 nbranch sa_req_range_id_finish ,positive +6733 1fe22600 copy pdata ,regc +6734 1a50fe00 byteswap regb ,pdata +6735 e7e10005 istore 2 ,contw +6736 18e08e01 increase 1 ,queue +6737 1a627e00 copy regc ,pdata +6738 20206730 branch sa_req_range_id_increase + +sa_req_range_id_finish: +6739 196097fb increase -5 ,timeup +673a 1a20a3fb increase -5 ,rega +673b 20206741 branch sa_req_check_next_id + +sa_req_one_id: +673c efe10006 ifetch 2 ,contr +673d e7e10005 istore 2 ,contw +673e 18e08e01 increase 1 ,queue +673f 196097fd increase -3 ,timeup +6740 1a20a3fd increase -3 ,rega + +sa_req_check_next_id: +6741 2421687a nbranch sdp_invalid_request_syntax ,positive +6742 2422e727 nbranch sa_req_loop ,zero +6743 196097ff increase -1 ,timeup +6744 2422e87a nbranch sdp_invalid_request_syntax ,zero +6745 20405323 call l2cap_get_sdp_tx_payload +6746 18a08a0a increase 10 ,contw +6747 da2003fd arg mem_sdp_attrib_list ,rega + +sa_req_handle_attributelist_next: +6748 18e27e00 copy queue ,pdata +6749 203a675b branch sa_req_handle_attributelist_end ,blank +674a efe10011 ifetch 2 ,rega +674b 203a675b branch sa_req_handle_attributelist_end ,blank +674c 98002400 iforce regb +674d 6fe203f7 fetch 4 ,mem_sdp_record_handle +674e 98000400 iforce temp +674f 2040699d call search_handle_attrib +6750 18c27e00 copy contr ,pdata +6751 203a6758 branch sa_req_handle_attributelist_notfound ,blank +6752 18c08dfd increase -3 ,contr +6753 efe18006 ifetch 3 ,contr +6754 e7e18005 istore 3 ,contw +6755 20406911 call sdp_data_len +6756 98007200 iforce loopcnt +6757 20407d5f call memcpy + +sa_req_handle_attributelist_notfound: +6758 1a20a202 increase 2 ,rega +6759 18e08fff increase -1 ,queue +675a 20206748 branch sa_req_handle_attributelist_next + +sa_req_handle_attributelist_end: +675b da200005 arg sdp_attribute_res ,rega +675c 2040683a call ssa_req_range_lastfreg_common +675d 6fe10326 fetch 2 ,mem_sdp_tx_pkt_length +675e c005e8f9 beq 11 ,sa_empty_rsp +675f 20206850 branch ssa_req_range_attrbutes_length_no_continue + +sdp_store_continue_common: +6760 efe08006 ifetch 1 ,contr +6761 c0006764 beq 0 ,sdp_store_continue_0byte +6762 c000e766 beq 1 ,sdp_store_continue_1byte +6763 c0016769 beq 2 ,sdp_store_continue_2byte + +sdp_store_continue_0byte: +6764 196097ff increase -1 ,timeup +6765 2020676c branch sdp_store_continue_end + +sdp_store_continue_1byte: +6766 efe08006 ifetch 1 ,contr +6767 196097fe increase -2 ,timeup +6768 2020676c branch sdp_store_continue_end + +sdp_store_continue_2byte: +6769 efe10006 ifetch 2 ,contr +676a 1ff0fe00 byteswap pdata ,pdata +676b 196097fd increase -3 ,timeup + +sdp_store_continue_end: +676c 67e103ec store 2 ,mem_sdp_continue_byte +676d 20600000 rtn + +sa_req_all: +676e 196097fb increase -5 ,timeup +676f 20406760 call sdp_store_continue_common +6770 2422e874 nbranch sdp_invalid_pdu_size ,zero +6771 684a03f7 fetcht 4 ,mem_sdp_record_handle +6772 20406967 call search_handle +6773 2422e871 nbranch sdp_invalid_service_record_handle ,zero +6774 18c22200 copy contr ,rega +6775 20405323 call l2cap_get_sdp_tx_payload +6776 1a220c00 copy rega ,contr +6777 18a08a03 increase 3 ,contw +6778 18c21600 copy contr ,timeup +6779 20406918 call sdp_get_data +677a 1fe22200 copy pdata ,rega +677b 6fe103ec fetch 2 ,mem_sdp_continue_byte +677c 1fe22400 copy pdata ,regb +677d 1a227e00 copy rega ,pdata +677e 9a462400 isub regb ,regb +677f 6fe103f3 fetch 2 ,mem_sdp_attribute_maxbyte +6780 9a467c00 isub regb ,null +6781 2421679d nbranch sa_req_all_fragment_sdp ,positive +6782 78547c00 disable user +6783 6fe103ec fetch 2 ,mem_sdp_continue_byte +6784 203a6790 branch sa_req_all_fisrt_fragment ,blank +6785 99608c00 iadd timeup ,contr +6786 1a40a403 increase 3 ,regb +6787 1a427200 copy regb ,loopcnt +6788 1f227e00 copy loopcnt ,pdata +6789 1fe0fe03 increase 3 ,pdata +678a 1ff0fe00 byteswap pdata ,pdata +678b e7e10005 istore 2 ,contw +678c 1f227e00 copy loopcnt ,pdata +678d 1ff0fe00 byteswap pdata ,pdata +678e e7e10005 istore 2 ,contw +678f 202067ab branch sa_req_all_answer_attributelist_full_loop + +sa_req_all_fisrt_fragment: +6790 1a20f206 add rega ,6 ,loopcnt +6791 20346794 branch sa_req_all_parlength_continue_byte ,user +6792 1f30fe00 byteswap loopcnt ,pdata +6793 20206797 branch sa_req_all_parlength_continue_byte_end + +sa_req_all_parlength_continue_byte: +6794 1f227e00 copy loopcnt ,pdata +6795 1fe0fe02 increase 2 ,pdata +6796 1ff0fe00 byteswap pdata ,pdata + +sa_req_all_parlength_continue_byte_end: +6797 e7e10005 istore 2 ,contw +6798 1f20f3fd increase -3 ,loopcnt +6799 1f30fe00 byteswap loopcnt ,pdata +679a e7e10005 istore 2 ,contw +679b 19620c00 copy timeup ,contr +679c 202067ab branch sa_req_all_answer_attributelist_full_loop + +sa_req_all_fragment_sdp: +679d 78347c00 enable user +679e 6fe103f3 fetch 2 ,mem_sdp_attribute_maxbyte +679f 1fe22200 copy pdata ,rega +67a0 1a227200 copy rega ,loopcnt +67a1 6fe103ec fetch 2 ,mem_sdp_continue_byte +67a2 203a6790 branch sa_req_all_fisrt_fragment ,blank +67a3 99608c00 iadd timeup ,contr +67a4 1a227e00 copy rega ,pdata +67a5 1fe0fe05 increase 5 ,pdata +67a6 1ff0fe00 byteswap pdata ,pdata +67a7 e7e10005 istore 2 ,contw +67a8 1a227e00 copy rega ,pdata +67a9 1ff0fe00 byteswap pdata ,pdata +67aa e7e10005 istore 2 ,contw + +sa_req_all_answer_attributelist_full_loop: +67ab 20407d5f call memcpy +67ac 243467b4 nbranch sa_req_all_last_frag_continue ,user +67ad 18007e02 force 2 ,pdata +67ae e7e08005 istore 1 ,contw +67af 18c27e00 copy contr ,pdata +67b0 99667e00 isub timeup ,pdata +67b1 1ff0fe00 byteswap pdata ,pdata +67b2 e7e10005 istore 2 ,contw +67b3 202067b6 branch sa_req_all_frag_end + +sa_req_all_last_frag_continue: +67b4 18007e00 force 0 ,pdata +67b5 e7e08005 istore 1 ,contw + +sa_req_all_frag_end: +67b6 da200005 arg sdp_attribute_res ,rega +67b7 20206866 branch ssa_req_range_common + +sdp_process_ssa_req: +67b8 4731c02c bpatchx patch2c_3 ,mem_patch2c +67b9 20406886 call ask_serviceclassid +67ba 2841feff compare 0xff ,temp ,0xff +67bb 2020e87a branch sdp_invalid_request_syntax ,true +67bc 204067e4 call sdp_store_maxbyte +67bd 67e103f3 store 2 ,mem_sdp_attribute_maxbyte +67be 196097fe increase -2 ,timeup +67bf 204068de call dataelementtype6 +67c0 d8a003fd arg mem_sdp_attrib_list ,contw +67c1 18000e00 force 0 ,queue + +ssa_req_loop: +67c2 efe08006 ifetch 1 ,contr +67c3 c00567ec beq sdp_attribute_range ,ssa_req_range +67c4 efe10006 ifetch 2 ,contr +67c5 e7e10005 istore 2 ,contw +67c6 18e08e01 increase 1 ,queue +67c7 196097fd increase -3 ,timeup +67c8 1a20a3fd increase -3 ,rega +67c9 2421687a nbranch sdp_invalid_request_syntax ,positive +67ca 2422e7c2 nbranch ssa_req_loop ,zero +67cb 196097ff increase -1 ,timeup +67cc 2422e87a nbranch sdp_invalid_request_syntax ,zero +67cd 20405323 call l2cap_get_sdp_tx_payload +67ce 18a08a0d increase 13 ,contw +67cf 6fe103e4 fetch 2 ,mem_sdp_uuid_search_ptr +67d0 98002600 iforce regc +67d1 da2003fd arg mem_sdp_attrib_list ,rega + +ssa_req_attributelist_next: +67d2 efe10011 ifetch 2 ,rega +67d3 203a67df branch ssa_req_attributelist_end ,blank +67d4 98002400 iforce regb +67d5 2040697c call search_attrib +67d6 203a67dd branch ssa_req_attributelist_notfound ,blank +67d7 18c08dfd increase -3 ,contr +67d8 efe18006 ifetch 3 ,contr +67d9 e7e18005 istore 3 ,contw +67da 20406911 call sdp_data_len +67db 98007200 iforce loopcnt +67dc 20407d5f call memcpy + +ssa_req_attributelist_notfound: +67dd 1a20a202 increase 2 ,rega +67de 202067d2 branch ssa_req_attributelist_next + +ssa_req_attributelist_end: +67df 20406839 call ssa_req_range_lastfreg +67e0 6fe10326 fetch 2 ,mem_sdp_tx_pkt_length +67e1 c00768fc beq 14 ,ssa_empty_rsp +67e2 20406850 call ssa_req_range_attrbutes_length_no_continue +67e3 20206850 branch ssa_req_range_attrbutes_length_no_continue + +sdp_store_maxbyte: +67e4 efe10006 ifetch 2 ,contr +67e5 1ff0fe00 byteswap pdata ,pdata +67e6 1fe0fffd increase -3 ,pdata +67e7 d84000c8 arg 200 ,temp +67e8 98467c00 isub temp ,null +67e9 24610000 nrtn positive +67ea 580000c8 setarg 200 +67eb 20600000 rtn + +ssa_req_range: +67ec 18c08c04 increase 4 ,contr +67ed 196097fb increase -5 ,timeup +67ee 1a20a3fb increase -5 ,rega +67ef 2422e87a nbranch sdp_invalid_request_syntax ,zero +67f0 20406760 call sdp_store_continue_common +67f1 2422e874 nbranch sdp_invalid_pdu_size ,zero +67f2 d96003e4 arg mem_sdp_uuid_search_ptr ,timeup +67f3 20406938 call search_all_uuid +67f4 18e27e00 deposit queue +67f5 203a68fc branch ssa_empty_rsp ,blank +67f6 67e08421 store 1 ,mem_handle_humber +67f7 1a427e00 copy regb ,pdata +67f8 67e1041f store 2 ,mem_sdp_all_length +67f9 d8e00000 arg 0 ,queue +67fa da200000 arg 0 ,rega +67fb 20405323 call l2cap_get_sdp_tx_payload +67fc 18a08a0a increase 10 ,contw + +ssa_req_range_find_handle: +67fd 20406822 call ssa_req_range_get_length +67fe 2434137a nbranch assert ,user +67ff 18c21600 copy contr ,timeup +6800 1fe22600 copy pdata ,regc +6801 9a20a200 iadd rega ,rega +6802 6fe103ec fetch 2 ,mem_sdp_continue_byte +6803 1fe22400 copy pdata ,regb +6804 203a682b branch ssa_req_range_first_freg ,blank + +ssa_req_range_later_freg_with_continue: +6805 1a227e00 copy rega ,pdata +6806 9a462400 isub regb ,regb +6807 2022e81d branch ssa_req_range_next_handle ,zero +6808 2421681d nbranch ssa_req_range_next_handle ,positive +6809 6fe103f3 fetch 2 ,mem_sdp_attribute_maxbyte +680a 9a467c00 isub regb ,null +680b 2022e814 branch ssa_req_range_maxbyte_with_continue ,zero +680c 24216814 nbranch ssa_req_range_maxbyte_with_continue ,positive + +ssa_req_range_send_not_maxbyte: +680d 1a427200 copy regb ,loopcnt +680e 20406817 call ssa_req_range_maxbyte_with_continue_cpy +680f 6fe08421 fetch 1 ,mem_handle_humber +6810 18e08e01 increase 1 ,queue +6811 98e67c00 isub queue ,null +6812 2022e839 branch ssa_req_range_lastfreg ,zero +6813 20206856 branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue: +6814 1fe27200 copy pdata ,loopcnt +6815 20406817 call ssa_req_range_maxbyte_with_continue_cpy +6816 20206856 branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue_cpy: +6817 18a08bfd increase -3 ,contw +6818 1f220400 copy loopcnt ,temp +6819 1a627e00 copy regc ,pdata +681a 9a467e00 isub regb ,pdata +681b 99608c00 iadd timeup ,contr +681c 20207d5f branch memcpy + +ssa_req_range_next_handle: +681d 6fe08421 fetch 1 ,mem_handle_humber +681e 18e08e01 increase 1 ,queue +681f 98e67c00 isub queue ,null +6820 20628000 rtn zero +6821 202067fd branch ssa_req_range_find_handle + +ssa_req_range_get_length: +6822 20407e56 call disable_user +6823 d8c003fd arg mem_sdp_handle_list ,contr +6824 18ebfe00 lshift2 queue ,pdata +6825 98c08c00 iadd contr ,contr +6826 e8420006 ifetcht 4 ,contr +6827 20406967 call search_handle +6828 24628000 nrtn zero +6829 20406911 call sdp_data_len +682a 20207e54 branch enable_user + +ssa_req_range_first_freg: +682b 6fe103f3 fetch 2 ,mem_sdp_attribute_maxbyte +682c 9a267c00 isub rega ,null +682d 24216845 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +682e 1a227200 copy rega ,loopcnt +682f 1f220400 copy loopcnt ,temp +6830 19620c00 copy timeup ,contr +6831 20407d5f call memcpy +6832 6fe1041f fetch 2 ,mem_sdp_all_length +6833 9a267c00 isub rega ,null +6834 2022e837 branch ssa_req_range_freg_no_continue ,zero + +ssa_req_range_firstfreg_not_maxbyte_with_continue: +6835 20406856 call ssa_req_range_freg_with_continue +6836 2020684a branch ssa_req_range_attrbutes_length + +ssa_req_range_freg_no_continue: +6837 20406839 call ssa_req_range_lastfreg +6838 2020684a branch ssa_req_range_attrbutes_length + +ssa_req_range_lastfreg: +6839 da200007 arg sdp_searchattrib_res ,rega + +ssa_req_range_lastfreg_common: +683a 18007e00 force 0 ,pdata +683b e7e08005 istore 1 ,contw +683c 20406866 call ssa_req_range_common +683d 68490326 fetcht 2 ,mem_sdp_tx_pkt_length +683e 184085fb increase -5 ,temp +683f 1850fe00 byteswap temp ,pdata +6840 e7e10005 istore 2 ,contw +6841 184085fd increase -3 ,temp +6842 1850fe00 byteswap temp ,pdata +6843 e7e10005 istore 2 ,contw +6844 20600000 rtn + +ssa_req_range_firstfreg_maxbyte_with_continue: +6845 1fe27200 copy pdata ,loopcnt +6846 1f220400 copy loopcnt ,temp +6847 19620c00 copy timeup ,contr +6848 20407d5f call memcpy +6849 20406856 call ssa_req_range_freg_with_continue + +ssa_req_range_attrbutes_length: +684a 58000036 setarg 0x36 +684b e7e08005 istore 1 ,contw +684c 6fe1041f fetch 2 ,mem_sdp_all_length +684d 1ff0fe00 byteswap pdata ,pdata +684e e7e10005 istore 2 ,contw +684f 20600000 rtn + +ssa_req_range_attrbutes_length_no_continue: +6850 58000036 setarg 0x36 +6851 e7e08005 istore 1 ,contw +6852 184085fd increase -3 ,temp +6853 1850fe00 byteswap temp ,pdata +6854 e7e10005 istore 2 ,contw +6855 20600000 rtn + +ssa_req_range_freg_with_continue: +6856 da200007 arg sdp_searchattrib_res ,rega +6857 58000002 setarg 2 +6858 e7e08005 istore 1 ,contw +6859 6fe103ec fetch 2 ,mem_sdp_continue_byte +685a 98408400 iadd temp ,temp +685b 1850fe00 byteswap temp ,pdata +685c e7e10005 istore 2 ,contw +685d 20406866 call ssa_req_range_common +685e 68490326 fetcht 2 ,mem_sdp_tx_pkt_length +685f 184085fb increase -5 ,temp +6860 1850fe00 byteswap temp ,pdata +6861 e7e10005 istore 2 ,contw +6862 184085fb increase -5 ,temp +6863 1850fe00 byteswap temp ,pdata +6864 e7e10005 istore 2 ,contw +6865 20600000 rtn + +ssa_req_range_common: +6866 6fe10324 fetch 2 ,mem_sdp_tx_payload_ptr +6867 98a67e00 isub contw ,pdata +6868 1fe67e00 sub pdata ,0 ,pdata +6869 67e10326 store 2 ,mem_sdp_tx_pkt_length +686a 20405323 call l2cap_get_sdp_tx_payload +686b 1a227e00 copy rega ,pdata +686c e7e08005 istore 1 ,contw +686d 6fe103ef fetch 2 ,mem_sdp_transactionid +686e e7e10005 istore 2 ,contw +686f 20600000 rtn + +sdp_process_ssa_res: + +sdp_process_ss_res: + +sdp_process_sa_res: + +sdp_process_error_res: +6870 20600000 rtn + +sdp_invalid_service_record_handle: +6871 58000200 setarg 0x0200 +6872 67e1041d store 2 ,mem_sdp_error_code +6873 2020687c branch sdp_error_response + +sdp_invalid_pdu_size: +6874 58000400 setarg 0x0400 +6875 67e1041d store 2 ,mem_sdp_error_code +6876 2020687c branch sdp_error_response + +sdp_insufficient_resource: +6877 58000600 setarg 0x0600 +6878 67e1041d store 2 ,mem_sdp_error_code +6879 2020687c branch sdp_error_response + +sdp_invalid_request_syntax: +687a 58000300 setarg 0x0300 +687b 67e1041d store 2 ,mem_sdp_error_code + +sdp_error_response: +687c 20405323 call l2cap_get_sdp_tx_payload +687d e7e08005 istore 1 ,contw +687e 6fe103ef fetch 2 ,mem_sdp_transactionid +687f e7e10005 istore 2 ,contw +6880 58000200 setarg 0x0200 +6881 e7e10005 istore 2 ,contw +6882 6fe1041d fetch 2 ,mem_sdp_error_code +6883 e7e10005 istore 2 ,contw +6884 70032607 jam 7 ,mem_sdp_tx_pkt_length +6885 20600000 rtn + +ask_serviceclassid: +6886 da400000 arg 0 ,regb +6887 18000400 force 0 ,temp +6888 d8a003e4 arg mem_sdp_uuid_search_ptr ,contw +6889 204068de call dataelementtype6 +688a 2022e8dc branch asksrv_error ,zero + +classidloop: +688b 1a40a401 increase 1 ,regb +688c efe08006 ifetch 1 ,contr +688d 1a20a3ff increase -1 ,rega +688e 196097ff increase -1 ,timeup +688f 2fe1f018 compare 0x18 ,pdata ,0xf8 +6890 2420e8dc nbranch asksrv_error ,true +6891 2fe00e04 compare 0x04 ,pdata ,0x07 +6892 2420e8a9 nbranch cmp032 ,true +6893 18000401 force 1 ,temp + +skip2bytes: +6894 efe08006 ifetch 1 ,contr +6895 1a20a3ff increase -1 ,rega +6896 196097ff increase -1 ,timeup +6897 c080689d bne 0x00 ,frstbwrong +6898 efe08006 ifetch 1 ,contr +6899 1a20a3ff increase -1 ,rega +689a 196097ff increase -1 ,timeup +689b c00068ae beq 0x00 ,cmpuuid +689c 202068a0 branch scndbwrong + +frstbwrong: +689d 18c08c01 increase 1 ,contr +689e 1a20a3ff increase -1 ,rega +689f 196097ff increase -1 ,timeup + +scndbwrong: +68a0 18c08c02 increase 2 ,contr +68a1 1a20a3fe increase -2 ,rega +68a2 196097fe increase -2 ,timeup +68a3 2841fe00 compare 0x00 ,temp ,0xff +68a4 2020e8d6 branch loopornot ,true +68a5 18c08c0c increase 12 ,contr +68a6 1a20a3f4 increase -12 ,rega +68a7 196097f4 increase -12 ,timeup +68a8 202068d6 branch loopornot + +cmp032: +68a9 2fe00e02 compare 0x02 ,pdata ,0x07 +68aa 2420e8ac nbranch cmp016 ,true +68ab 20206894 branch skip2bytes + +cmp016: +68ac 2fe00e01 compare 0x01 ,pdata ,0x07 +68ad 2420e8dc nbranch asksrv_error ,true + +cmpuuid: +68ae 1a20a3fe increase -2 ,rega +68af 196097fe increase -2 ,timeup +68b0 efe10006 ifetch 2 ,contr +68b1 1a467c04 sub regb ,4 ,null +68b2 2022e8b4 branch uuidsize ,zero +68b3 e7e10005 istore 2 ,contw + +uuidsize: +68b4 2841fe00 compare 0x00 ,temp ,0xff +68b5 2020e8d6 branch loopornot ,true +68b6 18c20400 copy contr ,temp +68b7 efe08006 ifetch 1 ,contr +68b8 c08068cf bne 0x00 ,wrong12b +68b9 efe08006 ifetch 1 ,contr +68ba c08068cf bne 0x00 ,wrong12b +68bb efe08006 ifetch 1 ,contr +68bc c08868cf bne 0x10 ,wrong12b +68bd efe08006 ifetch 1 ,contr +68be c08068cf bne 0x00 ,wrong12b +68bf efe08006 ifetch 1 ,contr +68c0 c0c068cf bne 0x80 ,wrong12b +68c1 efe08006 ifetch 1 ,contr +68c2 c08068cf bne 0x00 ,wrong12b +68c3 efe08006 ifetch 1 ,contr +68c4 c08068cf bne 0x00 ,wrong12b +68c5 efe08006 ifetch 1 ,contr +68c6 c0c068cf bne 0x80 ,wrong12b +68c7 efe08006 ifetch 1 ,contr +68c8 c0afe8cf bne 0x5f ,wrong12b +68c9 efe08006 ifetch 1 ,contr +68ca c0cde8cf bne 0x9b ,wrong12b +68cb efe08006 ifetch 1 ,contr +68cc c09a68cf bne 0x34 ,wrong12b +68cd efe08006 ifetch 1 ,contr +68ce c07de8d4 beq 0xfb ,chck12dn + +wrong12b: +68cf 18420c00 copy temp ,contr + +wrong12b1: +68d0 18c08c0c increase 12 ,contr +68d1 18000e00 force 0x00 ,queue +68d2 18000400 force 0x00 ,temp +68d3 202068d4 branch chck12dn + +chck12dn: +68d4 196097f4 increase -12 ,timeup +68d5 1a20a3f4 increase -12 ,rega + +loopornot: +68d6 18000400 force 0x00 ,temp +68d7 2a21fe00 compare 0x00 ,rega ,0xff +68d8 2420e88b nbranch classidloop ,true +68d9 18007e00 force 0 ,pdata +68da e7e10005 istore 2 ,contw +68db 20600000 rtn + +asksrv_error: +68dc d84000ff arg 0xff ,temp +68dd 20600000 rtn + +dataelementtype6: +68de 4733402c bpatchx patch2c_6 ,mem_patch2c +68df efe08006 ifetch 1 ,contr +68e0 196097ff increase -1 ,timeup +68e1 2fe1f030 compare 0x30 ,pdata ,0xf8 +68e2 2420e8f4 nbranch dsize_error ,true +68e3 2fe00e07 compare 0x07 ,pdata ,0x07 +68e4 2020e8ed branch dsize32 ,true +68e5 2fe00e06 compare 0x06 ,pdata ,0x07 +68e6 2020e8ef branch dsize16 ,true +68e7 2fe00e05 compare 0x05 ,pdata ,0x07 +68e8 2420e8f4 nbranch dsize_error ,true +68e9 efe08006 ifetch 1 ,contr +68ea 1fe22200 copy pdata ,rega +68eb 196097ff increase -1 ,timeup +68ec 202068f2 branch dsize + +dsize32: +68ed 18c08c02 increase 2 ,contr +68ee 196097fe increase -2 ,timeup + +dsize16: +68ef efe10006 ifetch 2 ,contr +68f0 1ff0a200 byteswap pdata ,rega +68f1 196097fe increase -2 ,timeup + +dsize: +68f2 18007e01 force 0x01 ,pdata +68f3 20600000 rtn + +dsize_error: +68f4 18007e00 force 0x00 ,pdata +68f5 20600000 rtn + +ss_empty_rsp: +68f6 58000003 setarg sdp_search_res +68f7 67e083ee store 1 ,mem_sdp_pduid +68f8 202068fe branch empty_response + +sa_empty_rsp: +68f9 58000005 setarg sdp_attribute_res +68fa 67e083ee store 1 ,mem_sdp_pduid +68fb 202068fe branch empty_response + +ssa_empty_rsp: +68fc 58000007 setarg sdp_searchattrib_res +68fd 67e083ee store 1 ,mem_sdp_pduid + +empty_response: +68fe 20405323 call l2cap_get_sdp_tx_payload +68ff 6fe083ee fetch 1 ,mem_sdp_pduid +6900 1fe22400 copy pdata ,regb +6901 e7e08005 istore 1 ,contw +6902 6fe103ef fetch 2 ,mem_sdp_transactionid +6903 e7e10005 istore 2 ,contw +6904 58000500 setarg 0x0500 +6905 e7e10005 istore 2 ,contw +6906 2a41fe05 compare sdp_attribute_res ,regb ,0xff +6907 2020e90d branch fullsearch ,true +6908 2a41fe07 compare sdp_searchattrib_res ,regb ,0xff +6909 2020e90d branch fullsearch ,true +690a 58000000 setarg 0x000000 +690b e7e28005 istore 5 ,contw +690c 2020690f branch outempty + +fullsearch: +690d 58350200 setarg 0x350200 +690e e7e28005 istore 5 ,contw + +outempty: +690f 7003260a jam 10 ,mem_sdp_tx_pkt_length +6910 20600000 rtn + +sdp_data_len: +6911 20407ce8 call store_contw +6912 20407ceb call store_contr +6913 20406918 call sdp_get_data +6914 20407ce2 call get_contw +6915 20407ce5 call get_contr +6916 18427e00 copy temp ,pdata +6917 20600000 rtn + +sdp_get_data: +6918 efe08006 ifetch 1 ,contr +6919 1fe17207 and pdata ,0x7 ,loopcnt +691a 1fe97e00 rshift3 pdata ,pdata +691b c0806922 bne 0 ,sdp_get_data_type_not0 + +sdp_get_data_type0: +691c 18007e01 force 1 ,pdata +691d 18000401 force 1 ,temp +691e 20600000 rtn + +sdp_get_data_type_not0_sizeindex01234: +691f 20407cc2 call left_shift_n +6920 1fe08401 add pdata ,1 ,temp +6921 20600000 rtn + +sdp_get_data_type_not0: +6922 1f227e00 deposit loopcnt +6923 1fe67c04 sub pdata ,4 ,null +6924 2021691f branch sdp_get_data_type_not0_sizeindex01234 ,positive +6925 c002e929 beq 5 ,sdp_get_data_type_not0_sizeindex5 +6926 c003692c beq 6 ,sdp_get_data_type_not0_sizeindex6 +6927 c003e930 beq 7 ,sdp_get_data_type_not0_sizeindex7 +6928 20600000 rtn + +sdp_get_data_type_not0_sizeindex5: +6929 efe08006 ifetch 1 ,contr +692a 1fe08402 add pdata ,2 ,temp +692b 20600000 rtn + +sdp_get_data_type_not0_sizeindex6: +692c efe10006 ifetch 2 ,contr +692d 1ff0fe00 byteswap pdata ,pdata +692e 1fe08403 add pdata ,3 ,temp +692f 20600000 rtn + +sdp_get_data_type_not0_sizeindex7: +6930 efe10006 ifetch 2 ,contr +6931 1ff0fe00 byteswap pdata ,pdata +6932 e8410006 ifetcht 2 ,contr +6933 18508400 byteswap temp ,temp +6934 18500400 lshift16 temp ,temp +6935 9840fe00 iadd temp ,pdata +6936 1fe08405 add pdata ,5 ,temp +6937 20600000 rtn + +search_all_uuid: +6938 4733c02c bpatchx patch2c_7 ,mem_patch2c +6939 18000e00 force 0 ,queue +693a da400000 arg 0 ,regb +693b d8a003fd arg mem_sdp_handle_list ,contw + +search_all_uuid_llop: +693c efe1000b ifetch 2 ,timeup +693d 207a0000 rtn blank +693e 20406943 call search_uuid +693f 18e27e00 copy queue ,pdata +6940 c1038000 rtneq sdp_max_handle_number +6941 19609602 increase 2 ,timeup +6942 2020693c branch search_all_uuid_llop + +search_uuid: +6943 98002600 iforce regc +6944 6fe14660 fetch 2 ,mem_ui_uuid_table +6945 98000c00 iforce contr + +search_uuid_next: +6946 18e27e00 copy queue ,pdata +6947 c1038000 rtneq sdp_max_handle_number +6948 78547c00 disable user +6949 efe08006 ifetch 1 ,contr +694a 207a0000 rtn blank +694b 98007200 iforce loopcnt + +search_uuid_loop: +694c efe10006 ifetch 2 ,contr +694d 9a667c00 isub regc ,null +694e 2422e950 nbranch search_uuid_not_found ,zero +694f 78347c00 enable user + +search_uuid_not_found: +6950 c200694c loop search_uuid_loop +6951 e8420006 ifetcht 4 ,contr +6952 18c22200 copy contr ,rega +6953 24346963 nbranch search_uuid_nomatch ,user +6954 d8c003fd arg mem_sdp_handle_list ,contr +6955 df200007 arg sdp_max_handle_number ,loopcnt + +search_uuid_check_same_handle: +6956 efe20006 ifetch 4 ,contr +6957 203a695c branch search_uuid_store_handle ,blank +6958 98467c00 isub temp ,null +6959 2022e963 branch search_uuid_nomatch ,zero +695a c2006956 loop search_uuid_check_same_handle +695b 20600000 rtn + +search_uuid_store_handle: +695c e0420005 istoret 4 ,contw +695d 18e08e01 increase 1 ,queue +695e 1a220c00 copy rega ,contr +695f 20406911 call sdp_data_len +6960 9a40a400 iadd regb ,regb +6961 98c08c00 iadd contr ,contr +6962 20206946 branch search_uuid_next + +search_uuid_nomatch: +6963 1a220c00 copy rega ,contr +6964 20406918 call sdp_get_data +6965 98c08c00 iadd contr ,contr +6966 20206946 branch search_uuid_next + +search_handle: +6967 4734402d bpatchx patch2d_0 ,mem_patch2d +6968 6fe14660 fetch 2 ,mem_ui_uuid_table +6969 98000c00 iforce contr + +search_handle_loop: +696a efe08006 ifetch 1 ,contr +696b 203a7e50 branch disable_zero ,blank +696c 1fe3fe00 lshift pdata ,pdata +696d 98c08c00 iadd contr ,contr +696e efe20006 ifetch 4 ,contr +696f 98467c00 isub temp ,null +6970 20628000 rtn zero +6971 18a27e00 deposit contw +6972 67e1097d store 2 ,mem_contw +6973 604c0964 storet 8 ,mem_temp +6974 20406918 call sdp_get_data +6975 98c08c00 iadd contr ,contr +6976 18c27e00 copy contr ,pdata +6977 6849097d fetcht 2 ,mem_contw +6978 18420a00 copy temp ,contw +6979 684c0964 fetcht 8 ,mem_temp +697a 1fe20c00 copy pdata ,contr +697b 2020696a branch search_handle_loop + +search_attrib: +697c 4734c02d bpatchx patch2d_1 ,mem_patch2d +697d 6fe14660 fetch 2 ,mem_ui_uuid_table +697e 98000c00 iforce contr + +search_attrib_next: +697f efe08006 ifetch 1 ,contr +6980 203a699a branch search_attrib_end ,blank +6981 98007200 iforce loopcnt + +search_attrib_loop: +6982 efe10006 ifetch 2 ,contr +6983 9a667c00 isub regc ,null +6984 2022e98a branch search_attrib_found_uuid ,zero +6985 c2006982 loop search_attrib_loop +6986 18c08c04 increase 4 ,contr +6987 20406918 call sdp_get_data +6988 98c08c00 iadd contr ,contr +6989 2020697f branch search_attrib_next + +search_attrib_found_uuid: +698a 1f20f3ff increase -1 ,loopcnt +698b 1f23fe00 lshift loopcnt ,pdata +698c 98c08c00 iadd contr ,contr +698d 18c08c04 increase 4 ,contr +698e 20406918 call sdp_get_data +698f 98c09600 iadd contr ,timeup + +search_attrib_loop_attribs: +6990 18c08c01 increase 1 ,contr +6991 efe10006 ifetch 2 ,contr +6992 9a467c00 isub regb ,null +6993 2022fe5e branch disable_blank ,zero +6994 20406911 call sdp_data_len +6995 98c08c00 iadd contr ,contr +6996 19627e00 deposit timeup +6997 98c67c00 isub contr ,null +6998 2022e99a branch search_attrib_end ,zero +6999 20206990 branch search_attrib_loop_attribs + +search_attrib_end: +699a 18000c00 force 0 ,contr +699b 18007e00 force 0 ,pdata +699c 20600000 rtn + +search_handle_attrib: +699d 4735402d bpatchx patch2d_2 ,mem_patch2d +699e 6fe14660 fetch 2 ,mem_ui_uuid_table +699f 98000c00 iforce contr + +search_handle_attrib_next: +69a0 efe08006 ifetch 1 ,contr +69a1 203a69b6 branch search_handle_attrib_end ,blank +69a2 1fe3fe00 lshift pdata ,pdata +69a3 98c08c00 iadd contr ,contr +69a4 efe20006 ifetch 4 ,contr +69a5 98467c00 isub temp ,null +69a6 2022e9aa branch search_handl_attrib_found_handle ,zero +69a7 20406918 call sdp_get_data +69a8 98c08c00 iadd contr ,contr +69a9 202069a0 branch search_handle_attrib_next + +search_handl_attrib_found_handle: +69aa 20406918 call sdp_get_data +69ab 98c09600 iadd contr ,timeup + +search_handle_attrib_loop_attribs: +69ac 18c08c01 increase 1 ,contr +69ad efe10006 ifetch 2 ,contr +69ae 9a467c00 isub regb ,null +69af 20628000 rtn zero +69b0 20406911 call sdp_data_len +69b1 98c08c00 iadd contr ,contr +69b2 19627e00 deposit timeup +69b3 98c67c00 isub contr ,null +69b4 2022e9b6 branch search_handle_attrib_end ,zero +69b5 202069ac branch search_handle_attrib_loop_attribs + +search_handle_attrib_end: +69b6 18000c00 force 0 ,contr +69b7 20600000 rtn + +search_rfcomm_cn: +69b8 da400400 arg 0x0400 ,regb +69b9 204069aa call search_handl_attrib_found_handle +69ba da400300 arg 0x0300 ,regb +69bb 204069c3 call search_uuid_in_data +69bc 24740000 nrtn user +69bd 1a267c03 sub rega ,3 ,null +69be 20217e56 branch disable_user ,positive +69bf efe08006 ifetch 1 ,contr +69c0 c0847e56 bne 0x08 ,disable_user +69c1 efe08006 ifetch 1 ,contr +69c2 20600000 rtn + +search_uuid_in_data: +69c3 4735c02d bpatchx patch2d_3 ,mem_patch2d +69c4 20406918 call sdp_get_data +69c5 1fe22200 copy pdata ,rega + +search_uuid_in_data_loop: +69c6 efe08006 ifetch 1 ,contr +69c7 1fe17207 and pdata ,0x7 ,loopcnt +69c8 1fe97e00 rshift3 pdata ,pdata +69c9 1fe67c03 sub pdata ,3 ,null +69ca 2022e9df branch search_uuid_in_data_found_uuid ,zero +69cb 1f227e00 copy loopcnt ,pdata +69cc c002e9d6 beq 5 ,search_uuid_in_data_found_element_index5 +69cd c00369d9 beq 6 ,search_uuid_in_data_found_element_index6 +69ce c003e9dc beq 7 ,search_uuid_in_data_found_element_index7 +69cf 18c08dff increase -1 ,contr +69d0 20406918 call sdp_get_data +69d1 98c08c00 iadd contr ,contr +69d2 1a227e00 copy rega ,pdata +69d3 98462200 isub temp ,rega +69d4 2022fe56 branch disable_user ,zero +69d5 202069c6 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index5: +69d6 1a20a3fe increase -2 ,rega +69d7 18c08c01 increase 1 ,contr +69d8 202069c6 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index6: +69d9 1a20a3fd increase -3 ,rega +69da 18c08c02 increase 2 ,contr +69db 202069c6 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index7: +69dc 1a20a3fb increase -5 ,rega +69dd 18c08c04 increase 4 ,contr +69de 202069c6 branch search_uuid_in_data_loop + +search_uuid_in_data_found_uuid: +69df 1a20a3ff increase -1 ,rega +69e0 1f227e00 copy loopcnt ,pdata +69e1 c000e9e8 beq 1 ,search_uuid_in_data_type_uuid_16 +69e2 c00169e6 beq 2 ,search_uuid_in_data_type_uuid_32 +69e3 c00269e5 beq 4 ,search_uuid_in_data_type_uuid_128 +69e4 20207e56 branch disable_user + +search_uuid_in_data_type_uuid_128: +69e5 1a20a3f4 increase -12 ,rega + +search_uuid_in_data_type_uuid_32: +69e6 efe10006 ifetch 2 ,contr +69e7 1a20a3fe increase -2 ,rega + +search_uuid_in_data_type_uuid_16: +69e8 efe10006 ifetch 2 ,contr +69e9 9a467c00 isub regb ,null +69ea 2022fe54 branch enable_user ,zero +69eb 1a20a3fe increase -2 ,rega +69ec 2022fe56 branch disable_user ,zero +69ed 202069c6 branch search_uuid_in_data_loop + +sdp_send_spp_request: +69ee 20405323 call l2cap_get_sdp_tx_payload +69ef 1fe20a00 copy pdata ,contw +69f0 58000006 setarg 6 +69f1 e7e08005 istore 1 ,contw +69f2 5800006e setarg sdp_tid_spp +69f3 e7e10005 istore 2 ,contw +69f4 58000f00 setarg 0x0f00 +69f5 e7e10005 istore 2 ,contw +69f6 581a0535 setarg 0x1a0535 +69f7 e7e18005 istore 3 ,contw +69f8 58000111 setarg 0x0111 +69f9 1ff07e00 lshift16 pdata ,pdata +69fa e7e20005 istore 4 ,contw +69fb 58002600 setarg 0x2600 +69fc e7e10005 istore 2 ,contw +69fd 58000335 setarg 0x0335 +69fe e7e10005 istore 2 ,contw +69ff 58000009 setarg 0x0009 +6a00 e7e10005 istore 2 ,contw +6a01 58000004 setarg 0x0004 +6a02 e7e10005 istore 2 ,contw +6a03 70032614 jam 0x14 ,mem_sdp_tx_pkt_length +6a04 20600000 rtn + +function_g2: +6a05 4736402d bpatchx patch2d_4 ,mem_patch2d +6a06 7004a750 jam 80 ,mem_aes_cmac_data_length +6a07 d8a004a8 arg memdat ,contw +6a08 d8c04337 arg mem_le_srand ,contr +6a09 20407d0c call memcpy16 +6a0a d8c046dc arg mem_sc_pubkey_local_x_256 ,contr +6a0b 20407d0a call memcpy32 +6a0c d8c00880 arg mem_le_pubkey_remote_x_256 ,contr +6a0d 20407d0a call memcpy32 +6a0e 20406ac0 call inverse_memdat +6a0f d8c00277 arg mem_le_mrand ,contr +6a10 20406abb call store_inverse_k +6a11 20406a86 call function_aes_cmac +6a12 d8a009be arg mem_aes_cmac_temp ,contw +6a13 20406ab7 call load_inverse_result +6a14 580f4240 setarg 1000000 +6a15 1fe22200 copy pdata ,rega +6a16 6fe209be fetch 4 ,mem_aes_cmac_temp +6a17 9a26fc00 idiv rega +6a18 20407def call wait_div_end +6a19 18077e00 remainder pdata +6a1a 67e2087c store 4 ,mem_gkey +6a1b 20600000 rtn + +function_f6_eb: +6a1c 7004a741 jam 65 ,mem_aes_cmac_data_length +6a1d d8a004a8 arg memdat ,contw +6a1e 20406a6b call store_addr_common_a +6a1f 20406a66 call store_addr_common_b +6a20 6fe1c351 fetch 3 ,mem_le_pres + 1 +6a21 e7e18005 istore 3 ,contw +6a22 20406a2c call get_r +6a23 d8c00277 arg mem_le_mrand ,contr +6a24 20407d0c call memcpy16 +6a25 d8c04337 arg mem_le_srand ,contr +6a26 20407d0c call memcpy16 +6a27 20406ac0 call inverse_memdat +6a28 d8c009de arg mem_le_mackey ,contr +6a29 d8a0098e arg mem_aes_cmac_k ,contw +6a2a 20407d0c call memcpy16 +6a2b 20206a86 branch function_aes_cmac + +get_r: +6a2c 6fe2439e fetch 4 ,mem_le_tk +6a2d e7e20005 istore 4 ,contw +6a2e 20407d1f call memset0_4 +6a2f 20207d1c branch memset0_8 + +function_f6_ea: +6a30 4736c02d bpatchx patch2d_5 ,mem_patch2d +6a31 7004a741 jam 65 ,mem_aes_cmac_data_length +6a32 d8a004a8 arg memdat ,contw +6a33 20406a66 call store_addr_common_b +6a34 20406a6b call store_addr_common_a +6a35 6fe1c34a fetch 3 ,mem_le_preq + 1 +6a36 e7e18005 istore 3 ,contw +6a37 20406a2c call get_r +6a38 d8c04337 arg mem_le_srand ,contr +6a39 20407d0c call memcpy16 +6a3a d8c00277 arg mem_le_mrand ,contr +6a3b 20407d0c call memcpy16 +6a3c 20406ac0 call inverse_memdat +6a3d d8c009de arg mem_le_mackey ,contr +6a3e d8a0098e arg mem_aes_cmac_k ,contw +6a3f 20407d0c call memcpy16 +6a40 20406a86 call function_aes_cmac +6a41 d8a009be arg mem_aes_cmac_temp ,contw +6a42 20206ab7 branch load_inverse_result + +function_f5: +6a43 7004a720 jam 32 ,mem_aes_cmac_data_length +6a44 d8c008c0 arg mem_le_dhkey_256 ,contr +6a45 d8a004a8 arg memdat ,contw +6a46 20407d0a call memcpy32 +6a47 20406ac0 call inverse_memdat +6a48 d8c00860 arg mem_le_slat ,contr +6a49 20406abb call store_inverse_k +6a4a 20406a86 call function_aes_cmac +6a4b d8a0098e arg mem_aes_cmac_k ,contw +6a4c 20406dd1 call store_aes_result +6a4d d8400001 arg 1 ,temp +6a4e 20406a55 call function_f5_common +6a4f d8a04316 arg mem_le_ltk ,contw +6a50 20406ab7 call load_inverse_result +6a51 d8400000 arg 0 ,temp +6a52 20406a55 call function_f5_common +6a53 d8a009de arg mem_le_mackey ,contw +6a54 20206dd1 branch store_aes_result + +function_f5_common: +6a55 4737402d bpatchx patch2d_6 ,mem_patch2d +6a56 7004a735 jam 53 ,mem_aes_cmac_data_length +6a57 58000100 setarg 0x100 +6a58 67e104a8 store 2 ,memdat +6a59 20406a66 call store_addr_common_b +6a5a 20406a6b call store_addr_common_a +6a5b d8c04337 arg mem_le_srand ,contr +6a5c 20407d0c call memcpy16 +6a5d d8c00277 arg mem_le_mrand ,contr +6a5e 20407d0c call memcpy16 +6a5f 58006c65 setarg 0x6c65 +6a60 e7e10005 istore 2 ,contw +6a61 58006274 setarg 0x6274 +6a62 e7e10005 istore 2 ,contw +6a63 e0408005 istoret 1 ,contw +6a64 20406ac0 call inverse_memdat +6a65 20206a86 branch function_aes_cmac + +store_addr_common_b: +6a66 6fe3437a fetch 6 ,mem_le_lap +6a67 e7e30005 istore 6 ,contw +6a68 6fe0c371 fetch 1 ,mem_le_conn_own_addr_type +6a69 e7e08005 istore 1 ,contw +6a6a 20600000 rtn + +store_addr_common_a: +6a6b 6fe30297 fetch 6 ,mem_le_plap +6a6c e7e30005 istore 6 ,contw +6a6d 6fe0c36a fetch 1 ,mem_le_conn_peer_addr_type +6a6e e7e08005 istore 1 ,contw +6a6f 20600000 rtn + +function_f4_ca: +6a70 7004a741 jam 65 ,mem_aes_cmac_data_length +6a71 6fe0c76e fetch 1 ,mem_passkey_1bit +6a72 67e084a8 store 1 ,memdat +6a73 d8c046dc arg mem_sc_pubkey_local_x_256 ,contr +6a74 20407d0a call memcpy32 +6a75 d8c00880 arg mem_le_pubkey_remote_x_256 ,contr +6a76 20407d0a call memcpy32 +6a77 20406ac0 call inverse_memdat +6a78 d8c00277 arg mem_le_mrand ,contr +6a79 20406abb call store_inverse_k +6a7a 20206a86 branch function_aes_cmac + +function_f4_cb: +6a7b 7004a741 jam 65 ,mem_aes_cmac_data_length +6a7c 6fe0c76e fetch 1 ,mem_passkey_1bit +6a7d 67e084a8 store 1 ,memdat +6a7e d8c00880 arg mem_le_pubkey_remote_x_256 ,contr +6a7f 20407d0a call memcpy32 +6a80 d8c046dc arg mem_sc_pubkey_local_x_256 ,contr +6a81 20407d0a call memcpy32 +6a82 20406ac0 call inverse_memdat +6a83 d8c04337 arg mem_le_srand ,contr +6a84 20406abb call store_inverse_k +6a85 20206a86 branch function_aes_cmac + +function_aes_cmac: +6a86 4737c02d bpatchx patch2d_7 ,mem_patch2d +6a87 20406ad5 call function_aes_cmac_generate_subkey +6a88 6fe084a7 fetch 1 ,mem_aes_cmac_data_length +6a89 1fe20400 copy pdata ,temp + +function_ceil16: +6a8a 1fe0fe0f increase 15 ,pdata +6a8b 1ff1fe00 rshift4 pdata ,pdata +6a8c 1fe22400 copy pdata ,regb +6a8d 203a6a98 branch function_aes_cmac_set_flag_0_balnk ,blank +6a8e 18417e0f and temp ,0x0f ,pdata +6a8f 243a6a9b nbranch function_aes_cmac_set_flag_0 ,blank +6a90 da60099e arg mem_aes_cmac_k1 ,regc +6a91 dfe004a8 arg memdat ,pdata +6a92 1fe0fff0 increase -16 ,pdata +6a93 9840a200 iadd temp ,rega +6a94 d8a009ce arg mem_aes_cmac_m_last ,contw +6a95 df200004 arg 4 ,loopcnt +6a96 20407d2f call xor_loop +6a97 20206aa6 branch function_aes_cmac_aes + +function_aes_cmac_set_flag_0_balnk: +6a98 da400001 arg 1 ,regb +6a99 da200000 arg 0 ,rega +6a9a 20206a9c branch function_aes_cmac_set_flag_0_common + +function_aes_cmac_set_flag_0: +6a9b 1841220f and temp ,0x0f ,rega + +function_aes_cmac_set_flag_0_common: +6a9c dfe004a8 arg memdat ,pdata +6a9d 9840fe00 iadd temp ,pdata +6a9e 9a260c00 isub rega ,contr +6a9f d8a009be arg mem_aes_cmac_temp ,contw +6aa0 20406afb call function_aes_cmac_padding +6aa1 da6009ae arg mem_aes_cmac_k2 ,regc +6aa2 da2009be arg mem_aes_cmac_temp ,rega +6aa3 d8a009ce arg mem_aes_cmac_m_last ,contw +6aa4 df200004 arg 4 ,loopcnt +6aa5 20407d2f call xor_loop + +function_aes_cmac_aes: +6aa6 20406dcb call aes_clear_data +6aa7 20406d62 call aes_init +6aa8 d8c004a8 arg memdat ,contr + +function_aes_cmac_aes_loop: +6aa9 1a40a5ff increase -1 ,regb +6aaa 1a427e00 deposit regb +6aab 203a6aaf branch function_aes_cmac_aes_loop_end ,blank +6aac 20406dc0 call load_data128 +6aad 20406d5c call do_aes_cbc +6aae 20206aa9 branch function_aes_cmac_aes_loop + +function_aes_cmac_aes_loop_end: +6aaf d8a009be arg mem_aes_cmac_temp ,contw +6ab0 20406dd1 call store_aes_result +6ab1 d8c009ce arg mem_aes_cmac_m_last ,contr +6ab2 20406dc0 call load_data128 +6ab3 20406d62 call aes_init +6ab4 d8c009be arg mem_aes_cmac_temp ,contr +6ab5 20406dc0 call load_data128 +6ab6 20206d5c branch do_aes_cbc + +load_inverse_result: +6ab7 18a22200 copy contw ,rega +6ab8 20406dd1 call store_aes_result +6ab9 df200010 arg 16 ,loopcnt +6aba 20207d37 branch inverse_data + +store_inverse_k: +6abb d8a0098e arg mem_aes_cmac_k ,contw +6abc 20407d0c call memcpy16 + +inverse_k: +6abd df200010 arg 16 ,loopcnt +6abe da20098e arg mem_aes_cmac_k ,rega +6abf 20207d37 branch inverse_data + +inverse_memdat: +6ac0 6fe084a7 fetch 1 ,mem_aes_cmac_data_length +6ac1 1fe27200 copy pdata ,loopcnt +6ac2 da2004a8 arg memdat ,rega +6ac3 20207d37 branch inverse_data + +bn_lshift_0_inverse: +6ac4 efe08011 ifetch 1 ,rega +6ac5 1fe3fe00 lshift pdata ,pdata +6ac6 2a6ffe00 isolate1 0 ,regc +6ac7 7920fe00 setflag true ,0 ,pdata +6ac8 2feffe08 isolate1 8 ,pdata +6ac9 7920a600 setflag true ,0 ,regc +6aca e7e08011 istore 1 ,rega +6acb 1a20a3ff increase -1 ,rega +6acc c2006ac4 loop bn_lshift_0_inverse +6acd 20600000 rtn + +function_aes_cmac_k1_inverse: +6ace da20099e arg mem_aes_cmac_k1 ,rega + +function_aes_cmac_inverse_common: +6acf 1a20a20f increase 15 ,rega +6ad0 18007210 force 16 ,loopcnt +6ad1 18002600 force 0 ,regc +6ad2 20206ac4 branch bn_lshift_0_inverse + +function_aes_cmac_k2_inverse: +6ad3 da2009ae arg mem_aes_cmac_k2 ,rega +6ad4 20206acf branch function_aes_cmac_inverse_common + +function_aes_cmac_generate_subkey: +6ad5 d8c0098e arg mem_aes_cmac_k ,contr +6ad6 20406dbe call load_key +6ad7 18007008 force regidx_xor ,regext_index +6ad8 20406dcc call aes_clear +6ad9 20406dcb call aes_clear_data +6ada 20406d59 call do_aes_ocb +6adb d8a0099e arg mem_aes_cmac_k1 ,contw +6adc 20406dd1 call store_aes_result + +function_aes_cmac_k1: +6add 4738402e bpatchx patch2e_0 ,mem_patch2e +6ade 6fe0899e fetch 1 ,mem_aes_cmac_k1 +6adf 2feffe07 isolate1 7 ,pdata +6ae0 2420eae6 nbranch function_aes_cmac_k1_0 ,true +6ae1 20406ace call function_aes_cmac_k1_inverse +6ae2 da60099e arg mem_aes_cmac_k1 ,regc +6ae3 d8a0099e arg mem_aes_cmac_k1 ,contw +6ae4 20406af0 call function_aes_cmac_xor_rb +6ae5 20206ae7 branch function_aes_cmac_k2 + +function_aes_cmac_k1_0: +6ae6 20406ace call function_aes_cmac_k1_inverse + +function_aes_cmac_k2: +6ae7 d8c0099e arg mem_aes_cmac_k1 ,contr +6ae8 d8a009ae arg mem_aes_cmac_k2 ,contw +6ae9 20407d0c call memcpy16 +6aea 6fe089ae fetch 1 ,mem_aes_cmac_k2 +6aeb 2feffe07 isolate1 7 ,pdata +6aec 2420ead3 nbranch function_aes_cmac_k2_inverse ,true +6aed 20406ad3 call function_aes_cmac_k2_inverse +6aee da6009ae arg mem_aes_cmac_k2 ,regc +6aef d8a009ae arg mem_aes_cmac_k2 ,contw + +function_aes_cmac_xor_rb: +6af0 df200003 arg 3 ,loopcnt + +function_aes_cmac_xor_rb_loop: +6af1 d8400000 arg 0 ,temp +6af2 20406af7 call function_aes_cmac_xor_loop_common +6af3 1a60a604 increase 4 ,regc +6af4 c2006af1 loop function_aes_cmac_xor_rb_loop +6af5 d8408700 arg 0x8700 ,temp +6af6 18500400 lshift16 temp ,temp + +function_aes_cmac_xor_loop_common: +6af7 efe20013 ifetch 4 ,regc +6af8 9842fe00 ixor temp ,pdata +6af9 e7e20005 istore 4 ,contw +6afa 20600000 rtn + +function_aes_cmac_padding: +6afb 4738c02e bpatchx patch2e_1 ,mem_patch2e +6afc df200010 arg 16 ,loopcnt +6afd dfe00000 arg 0 ,pdata + +function_aes_cmac_padding_loop: +6afe 9a267c00 isub rega ,null +6aff 2022eb06 branch function_aes_cmac_padding_beq_length ,zero +6b00 20216b09 branch function_aes_cmac_padding_big_length ,positive +6b01 e8408006 ifetcht 1 ,contr +6b02 e0408005 istoret 1 ,contw + +function_aes_cmac_padding_loop2: +6b03 1fe0fe01 increase 1 ,pdata +6b04 c2006afe loop function_aes_cmac_padding_loop +6b05 20600000 rtn + +function_aes_cmac_padding_beq_length: +6b06 d8400080 arg 0x80 ,temp + +function_aes_cmac_padding_common: +6b07 e0408005 istoret 1 ,contw +6b08 20206b03 branch function_aes_cmac_padding_loop2 + +function_aes_cmac_padding_big_length: +6b09 d8400000 arg 0 ,temp +6b0a 20206b07 branch function_aes_cmac_padding_common + +generate_kinit: +6b0b 20406b1e call function_e22 +6b0c d8c00454 arg mem_input_store ,contr +6b0d d8a00444 arg mem_kinit ,contw +6b0e 20207d0c branch memcpy16 + +function_e21: +6b0f 78547c00 disable user +6b10 20406c15 call function_expand +6b11 d8c00424 arg mem_random_number ,contr +6b12 d8a00464 arg mem_x ,contw +6b13 1800720f force 15 ,loopcnt +6b14 20407d5f call memcpy +6b15 efe08006 ifetch 1 ,contr +6b16 1fe2fe06 xor_into 6 ,pdata +6b17 e7e08005 istore 1 ,contw +6b18 58000474 setarg mem_y +6b19 67e10498 store 2 ,memp_ar_input +6b1a 58000464 setarg mem_x +6b1b 67e10496 store 2 ,memp_ar_key +6b1c 79200012 set1 mark_ar2 ,mark +6b1d 20206b5e branch function_ar + +function_e22: +6b1e 6848c793 fetcht 1 ,mem_pin_length +6b1f 18002410 force 16 ,regb +6b20 1840a606 add temp ,6 ,regc +6b21 1a667c10 sub regc ,16 ,null +6b22 20216b24 branch function_e22_pin_init ,positive +6b23 18002610 force 16 ,regc + +function_e22_pin_init: +6b24 d8a00464 arg mem_x ,contw + +function_e22_genx_pin: +6b25 d8c04794 arg mem_pin ,contr +6b26 18427200 copy temp ,loopcnt +6b27 78547c00 disable user + +function_e22_genx_loop: +6b28 efe08006 ifetch 1 ,contr +6b29 e7e08005 istore 1 ,contw +6b2a 1a40a5ff increase -1 ,regb +6b2b 2022eb32 branch function_e22_genx_end ,zero +6b2c c2006b28 loop function_e22_genx_loop +6b2d 20346b25 branch function_e22_genx_pin ,user +6b2e 78347c00 enable user +6b2f 18007206 force 6 ,loopcnt +6b30 1a220c00 copy rega ,contr +6b31 20206b28 branch function_e22_genx_loop + +function_e22_genx_end: +6b32 d8c00424 arg mem_random_number ,contr +6b33 d8a00474 arg mem_y ,contw +6b34 20407d0c call memcpy16 +6b35 6fe08483 fetch 1 ,mem_y15 +6b36 9a62fe00 ixor regc ,pdata +6b37 67e08483 store 1 ,mem_y15 +6b38 58000474 setarg mem_y +6b39 67e10498 store 2 ,memp_ar_input +6b3a 58000464 setarg mem_x +6b3b 67e10496 store 2 ,memp_ar_key +6b3c 79200012 set1 mark_ar2 ,mark +6b3d 20206b5e branch function_ar + +function_e1: +6b3e 78547c00 disable user +6b3f 20406c15 call function_expand +6b40 20206b48 branch function_hash + +function_e3: +6b41 da200057 arg mem_aco ,rega +6b42 78347c00 enable user +6b43 20406c15 call function_expand +6b44 20406b48 call function_hash +6b45 d8c00454 arg mem_input_store ,contr +6b46 d8a00063 arg mem_kc ,contw +6b47 20207d0c branch memcpy16 + +function_hash: +6b48 58000424 setarg mem_random_number +6b49 67e10498 store 2 ,memp_ar_input +6b4a 580041cb setarg mem_link_key +6b4b 67e10496 store 2 ,memp_ar_key +6b4c 793f8012 set0 mark_ar2 ,mark +6b4d 20406b5e call function_ar +6b4e da200454 arg mem_input_store ,rega +6b4f da400424 arg mem_random_number ,regb +6b50 d8a00464 arg mem_x ,contw +6b51 20406c08 call xor16 +6b52 da200464 arg mem_x ,rega +6b53 da400474 arg mem_y ,regb +6b54 1a420a00 copy regb ,contw +6b55 78347c00 enable user +6b56 20406c06 call add16 +6b57 20406c20 call key_offset +6b58 58000474 setarg mem_y +6b59 67e10498 store 2 ,memp_ar_input +6b5a 58000464 setarg mem_x +6b5b 67e10496 store 2 ,memp_ar_key +6b5c 79200012 set1 mark_ar2 ,mark +6b5d 20206b5e branch function_ar + +function_ar: +6b5e 70049a00 jam 0 ,mem_ar_hround +6b5f 6fe10496 fetch 2 ,memp_ar_key +6b60 98000c00 iforce contr +6b61 d8a00484 arg mem_key_store ,contw +6b62 20407d0c call memcpy16 +6b63 6fe10498 fetch 2 ,memp_ar_input +6b64 98000c00 iforce contr +6b65 d8a00454 arg mem_input_store ,contw +6b66 20407d0c call memcpy16 + +function_ar_loop: +6b67 20406b85 call key_scheduling +6b68 78547c00 disable user +6b69 c5896b6f bmark0 mark_ar2 ,function_ar_original +6b6a 6fe0849a fetch 1 ,mem_ar_hround +6b6b c0826b6f bne 4 ,function_ar_original +6b6c 6fe10498 fetch 2 ,memp_ar_input +6b6d 98002400 iforce regb +6b6e 20406bb7 call xor_mod32_ar2 + +function_ar_original: +6b6f 20406bb6 call xor_mod32 +6b70 20406bc9 call el_boxes +6b71 6fe0849a fetch 1 ,mem_ar_hround +6b72 1fe0fe01 increase 1 ,pdata +6b73 67e0849a store 1 ,mem_ar_hround +6b74 20406b85 call key_scheduling +6b75 78347c00 enable user +6b76 20406bb6 call xor_mod32 +6b77 20406bd8 call pht +6b78 20406be7 call permute +6b79 20406bd8 call pht +6b7a 20406be7 call permute +6b7b 20406bd8 call pht +6b7c 20406be7 call permute +6b7d 20406bd8 call pht +6b7e 6fe0849a fetch 1 ,mem_ar_hround +6b7f 1fe0fe01 increase 1 ,pdata +6b80 67e0849a store 1 ,mem_ar_hround +6b81 c0886b67 bne 16 ,function_ar_loop +6b82 20406b85 call key_scheduling +6b83 78547c00 disable user +6b84 20206bb6 branch xor_mod32 + +key_scheduling: +6b85 6fe0849a fetch 1 ,mem_ar_hround +6b86 d8c00484 arg mem_key_store ,contr +6b87 203a6bac branch key_sched_zero ,blank +6b88 98002400 iforce regb +6b89 18007211 force 17 ,loopcnt +6b8a 18c20a00 copy contr ,contw + +key_rotateloop: +6b8b efe08006 ifetch 1 ,contr +6b8c 1fe98400 lshift3 pdata ,temp +6b8d 1feb7e00 rshift2 pdata ,pdata +6b8e 1fe97e00 rshift3 pdata ,pdata +6b8f 9841fe00 ior temp ,pdata +6b90 e7e08005 istore 1 ,contw +6b91 c2006b8b loop key_rotateloop +6b92 58000484 setarg mem_key_store +6b93 9a408c00 iadd regb ,contr +6b94 18007210 force 16 ,loopcnt +6b95 d8a00434 arg mem_round_key ,contw + +key_select_octet_loop: +6b96 efe08006 ifetch 1 ,contr +6b97 e7e08005 istore 1 ,contw +6b98 28c1fe95 compare mem_key_store_end ,contr ,0xff +6b99 2420eb9b nbranch key_select_octet_nwrap ,true +6b9a 18c08def increase -17 ,contr + +key_select_octet_nwrap: +6b9b c2006b96 loop key_select_octet_loop +6b9c 18002200 force 0 ,rega +6b9d 1a40a7ff add regb ,-1 ,regc +6b9e 1a6ba600 lshift2 regc ,regc +6b9f 1a6ba600 lshift2 regc ,regc +6ba0 20406df3 call enable_authrom +6ba1 58009000 setarg mem_b_box +6ba2 9a60a600 iadd regc ,regc +6ba3 d8a00434 arg mem_round_key ,contw +6ba4 18007210 force 16 ,loopcnt + +bias_round_key_loop: +6ba5 e8408013 ifetcht 1 ,regc +6ba6 efe08005 ifetch 1 ,contw +6ba7 9840fe00 iadd temp ,pdata +6ba8 e7e08005 istore 1 ,contw +6ba9 1a60a601 increase 1 ,regc +6baa c2006ba5 loop bias_round_key_loop +6bab 20206df7 branch disable_authrom + +key_sched_zero: +6bac 18007210 force 16 ,loopcnt +6bad 18000400 force 0 ,temp + +create_byte_16_loop: +6bae efe08006 ifetch 1 ,contr +6baf 98428400 ixor temp ,temp +6bb0 c2006bae loop create_byte_16_loop +6bb1 18427e00 deposit temp +6bb2 e7e08006 istore 1 ,contr +6bb3 d8c00484 arg mem_key_store ,contr +6bb4 d8a00434 arg mem_round_key ,contw +6bb5 20207d0c branch memcpy16 + +xor_mod32: +6bb6 da400434 arg mem_round_key ,regb + +xor_mod32_ar2: +6bb7 18007210 force 16 ,loopcnt +6bb8 da200454 arg mem_input_store ,rega +6bb9 1a220a00 copy rega ,contw + +xor_mod32_loop: +6bba e8408011 ifetcht 1 ,rega +6bbb efe08012 ifetch 1 ,regb +6bbc 9842e000 ixor temp ,alarm +6bbd 1f212603 and loopcnt ,3 ,regc +6bbe 24346bc0 nbranch xor_mod32_invert ,user +6bbf 1a62a603 xor_into 3 ,regc + +xor_mod32_invert: +6bc0 1a662601 sub regc ,1 ,regc +6bc1 20216bc3 branch xor_even ,positive +6bc2 9840e000 iadd temp ,alarm + +xor_even: +6bc3 1e027e00 deposit alarm +6bc4 e7e08005 istore 1 ,contw +6bc5 1a20a201 increase 1 ,rega +6bc6 1a40a401 increase 1 ,regb +6bc7 c2006bba loop xor_mod32_loop +6bc8 20600000 rtn + +el_boxes: +6bc9 20406df3 call enable_authrom +6bca 18007210 force 16 ,loopcnt +6bcb da200454 arg mem_input_store ,rega + +el_box_loop: +6bcc efe08011 ifetch 1 ,rega +6bcd d8c09100 arg mem_e_box ,contr +6bce 1f212603 and loopcnt ,3 ,regc +6bcf 1a667c01 sub regc ,1 ,null +6bd0 20216bd2 branch e_boxes ,positive +6bd1 d8c09200 arg mem_l_box ,contr + +e_boxes: +6bd2 98c08c00 iadd contr ,contr +6bd3 efe08006 ifetch 1 ,contr +6bd4 e7e08011 istore 1 ,rega +6bd5 1a20a201 increase 1 ,rega +6bd6 c2006bcc loop el_box_loop +6bd7 20206df7 branch disable_authrom + +pht: +6bd8 18007208 force 8 ,loopcnt +6bd9 d8c00454 arg mem_input_store ,contr +6bda 18c20a00 copy contr ,contw + +pht_loop: +6bdb efe08006 ifetch 1 ,contr +6bdc 98002200 iforce rega +6bdd efe08006 ifetch 1 ,contr +6bde 98002400 iforce regb +6bdf 1a23fe00 lshift rega ,pdata +6be0 9a40fe00 iadd regb ,pdata +6be1 e7e08005 istore 1 ,contw +6be2 1a227e00 deposit rega +6be3 9a40fe00 iadd regb ,pdata +6be4 e7e08005 istore 1 ,contw +6be5 c2006bdb loop pht_loop +6be6 20600000 rtn + +permute: +6be7 588ae42c setarg 0x8ae42c +6be8 98000400 iforce temp +6be9 18007207 force 7 ,loopcnt +6bea 20406bf6 call permute_exchange +6beb 580d751b setarg 0xd751b +6bec 98000400 iforce temp +6bed 18007205 force 5 ,loopcnt +6bee 20406bf6 call permute_exchange +6bef 6fe08463 fetch 1 ,mem_input_store + 15 +6bf0 98002200 iforce rega +6bf1 6fe08457 fetch 1 ,mem_input_store + 3 +6bf2 67e08463 store 1 ,mem_input_store + 15 +6bf3 1a227e00 deposit rega +6bf4 67e08457 store 1 ,mem_input_store + 3 +6bf5 20600000 rtn + +permute_exchange: +6bf6 1841240f and temp ,0xf ,regb + +permute_loop: +6bf7 18417e0f and temp ,0xf ,pdata +6bf8 d8a00454 arg mem_input_store ,contw +6bf9 98a08a00 iadd contw ,contw +6bfa efe08005 ifetch 1 ,contw +6bfb 98002600 iforce regc +6bfc 1a227e00 deposit rega +6bfd e7e08005 istore 1 ,contw +6bfe 1a622200 copy regc ,rega +6bff 18518400 rshift4 temp ,temp +6c00 c2006bf7 loop permute_loop +6c01 58000454 setarg mem_input_store +6c02 9a408a00 iadd regb ,contw +6c03 1a227e00 deposit rega +6c04 e7e08005 istore 1 ,contw +6c05 20600000 rtn + +add16: +6c06 78347c00 enable user +6c07 20206c09 branch xor_add16 + +xor16: +6c08 78547c00 disable user + +xor_add16: +6c09 18007210 force 16 ,loopcnt + +xoradd_loop: +6c0a e8408011 ifetcht 1 ,rega +6c0b efe08012 ifetch 1 ,regb +6c0c 20346c0f branch xoradd_add ,user +6c0d 9842fe00 ixor temp ,pdata +6c0e 20206c10 branch xoradd_store + +xoradd_add: +6c0f 9840fe00 iadd temp ,pdata + +xoradd_store: +6c10 e7e08005 istore 1 ,contw +6c11 1a20a201 increase 1 ,rega +6c12 1a40a401 increase 1 ,regb +6c13 c2006c0a loop xoradd_loop +6c14 20600000 rtn + +function_expand: +6c15 d8a00474 arg mem_y ,contw +6c16 efe30011 ifetch 6 ,rega +6c17 e7e30005 istore 6 ,contw +6c18 20346c1b branch expand_12 ,user +6c19 efe30011 ifetch 6 ,rega +6c1a 20206c1c branch expand_cont + +expand_12: +6c1b efe30006 ifetch 6 ,contr + +expand_cont: +6c1c e7e30005 istore 6 ,contw +6c1d efe20011 ifetch 4 ,rega +6c1e e7e20005 istore 4 ,contw +6c1f 20600000 rtn + +key_offset: +6c20 d8c041cb arg mem_link_key ,contr +6c21 d8a00464 arg mem_x ,contw +6c22 d8400000 arg 0 ,temp +6c23 588395a7 setarg 0x8395a7 +6c24 20406c41 call concatenate_temp24 +6c25 58b3c1df setarg 0xb3c1df +6c26 20406c41 call concatenate_temp24 +6c27 5800e5e9 setarg 0xe5e9 +6c28 20406c42 call concatenate_temp16 +6c29 18422800 copy temp ,regab +6c2a 78547c00 disable user +6c2b 20406c2f call key_addxor +6c2c 1a820400 copy regab ,temp +6c2d 78347c00 enable user +6c2e 20206c2f branch key_addxor + +key_addxor: +6c2f 18007208 force 8 ,loopcnt + +key_addxor_loop: +6c30 efe08006 ifetch 1 ,contr +6c31 2f200201 compare 1 ,loopcnt ,1 +6c32 20346c36 branch key_high ,user +6c33 2020ec37 branch key_xor ,true + +key_add: +6c34 9840fe00 iadd temp ,pdata +6c35 20206c38 branch key_store + +key_high: +6c36 2020ec34 branch key_add ,true + +key_xor: +6c37 9842fe00 ixor temp ,pdata + +key_store: +6c38 e7e08005 istore 1 ,contw +6c39 184c8400 rshift8 temp ,temp +6c3a c2006c30 loop key_addxor_loop +6c3b 20600000 rtn + +copy_aco: +6c3c 6fe30458 fetch 6 ,mem_input_store + 4 +6c3d 67e30057 store 6 ,mem_aco +6c3e efe30006 ifetch 6 ,contr +6c3f e7e30005 istore 6 ,contw +6c40 20600000 rtn + +concatenate_temp24: +6c41 184d0400 lshift8 temp ,temp + +concatenate_temp16: +6c42 18500400 lshift16 temp ,temp +6c43 98418400 ior temp ,temp +6c44 20600000 rtn + +loop1: +6c45 20206c45 branch loop1 + +generate_stk: +6c46 4739402e bpatchx patch2e_2 ,mem_patch2e +6c47 20406d65 call function_s1 +6c48 d8a04316 arg mem_le_ltk ,contw +6c49 20206dd1 branch store_aes_result + +authenticate_rconfirm: +6c4a d8a04337 arg mem_le_srand ,contw +6c4b 2034ec4d branch authenticate_mconfirm ,master +6c4c d8a00277 arg mem_le_mrand ,contw + +authenticate_mconfirm: +6c4d 18c22200 copy contr ,rega +6c4e 20407d0c call memcpy16 +6c4f 20406d7a call function_c1 +6c50 d8c04327 arg mem_le_rconfirm ,contr +6c51 20206dea branch compare_res + +generate_confirm: +6c52 da200277 arg mem_le_mrand ,rega +6c53 2034ec55 branch generate_mrand ,master +6c54 da204337 arg mem_le_srand ,rega + +generate_mrand: +6c55 1a220a00 copy rega ,contw +6c56 20405a31 call generate_random +6c57 20206d7a branch function_c1 + +generate_sk: +6c58 d8c04384 arg mem_le_skdm ,contr +6c59 20406dc0 call load_data128 +6c5a d8c04316 arg mem_le_ltk ,contr +6c5b 20406dc1 call load_regext +6c5c 18006c38 force 0x38 ,aes_ctrl +6c5d 18006c00 force 0x0 ,aes_ctrl +6c5e 20406d57 call wait_aes +6c5f d8a002c7 arg mem_le_sk ,contw +6c60 20206dd1 branch store_aes_result + +ccm_b0: +6c61 18007008 force regidx_xor ,regext_index +6c62 18007e49 force 0x49 ,pdata +6c63 20206c68 branch iv_common + +first_block_counter: +6c64 18007e49 force 0x49 ,pdata +6c65 20206c67 branch first_block + +first_block_data: +6c66 18007e01 force 1 ,pdata + +first_block: +6c67 18007000 force regidx_data ,regext_index + +iv_common: +6c68 184d5e00 lshift8 temp ,regext +6c69 9de1de00 ior regext ,regext +6c6a 1f00f001 increase 1 ,regext_index +6c6b 184cde00 rshift8 temp ,regext +6c6c 1df15e00 rshift16 regext ,regext +6c6d 6fe146aa fetch 2 ,mem_ccm_iv +6c6e 1ff07e00 lshift16 pdata ,pdata +6c6f 9de1de00 ior regext ,regext +6c70 1f00f001 increase 1 ,regext_index +6c71 ede20006 ifetchr regext ,4 ,contr +6c72 1f00f001 increase 1 ,regext_index +6c73 efe10006 ifetch 2 ,contr +6c74 1a30de00 byteswap rega ,regext +6c75 1df05e00 lshift16 regext ,regext +6c76 9de1de00 ior regext ,regext +6c77 1f00f001 increase 1 ,regext_index +6c78 20600000 rtn + +generate_mic: +6c79 1a608c01 add regc ,1 ,contr +6c7a efe08006 ifetch 1 ,contr +6c7b 98002200 iforce rega +6c7c 20406c64 call first_block_counter +6c7d 20406d59 call do_aes_ocb +6c7e 18007000 force regidx_data ,regext_index +6c7f efe08013 ifetch 1 ,regc +6c80 1fe17e03 and_into 0x3 ,pdata +6c81 1ff05e00 lshift16 pdata ,regext +6c82 79205e08 set1 8 ,regext +6c83 20406dc9 call clear_hidata +6c84 20406d5c call do_aes_cbc +6c85 1a227200 copy rega ,loopcnt +6c86 1a608c02 add regc ,2 ,contr +6c87 20406da8 call padding_data + +generate_mic_loop: +6c88 20406db2 call aes_load_data +6c89 20406d5c call do_aes_cbc +6c8a 1f227e00 deposit loopcnt +6c8b 203a6c8d branch generate_mic_end ,blank +6c8c 20206c88 branch generate_mic_loop + +generate_mic_end: +6c8d 1800700c force regidx_result ,regext_index +6c8e 1de27e00 deposit regext +6c8f 67e2026f store 4 ,mem_le_mic +6c90 20600000 rtn + +aes_crypt_data: +6c91 1a20a201 increase 1 ,rega +6c92 20406c66 call first_block_data +6c93 1a620c00 copy regc ,contr +6c94 20406dbc call aes_load_xor +6c95 20406d5f call do_aes_ctr +6c96 20406dd8 call store_enc_data +6c97 1a60a610 increase 16 ,regc +6c98 1a40a5f0 increase -16 ,regb +6c99 20216c91 branch aes_crypt_data ,positive +6c9a 20600000 rtn + +ccm_br_enc_new: +6c9b 20406d4c call ccm_init_common +6c9c 4739c02e bpatchx patch2e_3 ,mem_patch2e +6c9d d8c00063 arg mem_kc ,contr +6c9e 20406dbe call load_key +6c9f 7080d500 jam 0 ,core_ccm_aad0 +6ca0 18217e0f and type ,0x0f ,pdata +6ca1 1fe9fe00 lshift3 pdata ,pdata +6ca2 9881fe00 ior am_addr ,pdata +6ca3 67f080d6 store 1 ,core_ccm_aad1 +6ca4 6fe0c1e4 fetch 1 ,mem_llid +6ca5 67f080d7 store 1 ,core_ccm_aad2 +6ca6 627100d1 storer regc ,2 ,core_ccm_input_playload_addr +6ca7 627100d3 storer regc ,2 ,core_ccm_output_playload_addr +6ca8 6a2146b2 fetchr rega ,2 ,mem_ccm_len +6ca9 684ac69c fetcht 5 ,mem_ccm_pcnt_tx +6caa 20406cbd call ccm_br_check_0_length_continuation +6cab 20406c61 call ccm_b0 +6cac 70800a02 jam 2 ,core_ccm_ctrl +6cad 70800a03 jam 3 ,core_ccm_ctrl +6cae 6fe146b2 fetch 2 ,mem_ccm_len +6caf 67f100da store 2 ,core_ccm_inptr +6cb0 1fe0fe04 increase 4 ,pdata +6cb1 67e146b2 store 2 ,mem_ccm_len +6cb2 1a627e00 copy regc ,pdata +6cb3 9a20a200 iadd rega ,rega +6cb4 20406d53 call wait_ccm_done +6cb5 df00000c arg regidx_result ,regext_index +6cb6 e5e20011 istorer regext ,4 ,rega +6cb7 65e2026f storer regext ,4 ,mem_le_mic +6cb8 20600000 rtn + +ccm_br_pcnt_tx_add: +6cb9 6fe2c69c fetch 5 ,mem_ccm_pcnt_tx +6cba 1fe0fe01 increase 1 ,pdata +6cbb 67e2c69c store 5 ,mem_ccm_pcnt_tx +6cbc 20206cc3 branch ccm_br_pcnt_tx_set + +ccm_br_check_0_length_continuation: +6cbd 6fe0c1e4 fetch 1 ,mem_llid +6cbe c1808000 rtnne llid_l2cap_cont +6cbf 6fe146b2 fetch 2 ,mem_ccm_len +6cc0 247a0000 nrtn blank +6cc1 79200424 set1 br_ccm_0_length_continuation ,temp +6cc2 20600000 rtn + +ccm_br_pcnt_tx_set: +6cc3 6fe0c6a0 fetch 1 ,mem_ccm_pcnt_tx + 4 +6cc4 1fe17e0f and pdata ,0x0f ,pdata +6cc5 1fe1fe20 or pdata ,0x20 ,pdata +6cc6 67e0c6a0 store 1 ,mem_ccm_pcnt_tx + 4 +6cc7 20600000 rtn + +ccm_br_pcnt_rx_set: +6cc8 6fe0c6a5 fetch 1 ,mem_ccm_pcnt_rx + 4 +6cc9 1fe17e0f and pdata ,0x0f ,pdata +6cca 67e0c6a5 store 1 ,mem_ccm_pcnt_rx + 4 +6ccb 20600000 rtn + +ccm_br_decrypt_new: +6ccc 18a27e00 copy contw ,pdata +6ccd 684900af fetcht 2 ,mem_len +6cce 18408404 increase 4 ,temp +6ccf 98467e00 isub temp ,pdata +6cd0 67e146b4 store 2 ,mem_ccm_rx_ptr +6cd1 67f100d1 store 2 ,core_ccm_input_playload_addr +6cd2 67f100d3 store 2 ,core_ccm_output_playload_addr +6cd3 20407e5a call disable_user2 +6cd4 20406d4c call ccm_init_common +6cd5 d8c00063 arg mem_kc ,contr +6cd6 20406dbe call load_key +6cd7 7080d500 jam 0 ,core_ccm_aad0 +6cd8 6fe0801a fetch 1 ,mem_rx_type +6cd9 1fe17e0f and pdata ,0x0f ,pdata +6cda 1fe9fe00 lshift3 pdata ,pdata +6cdb 9881fe00 ior am_addr ,pdata +6cdc 67f080d6 store 1 ,core_ccm_aad1 +6cdd 6fe080e5 fetch 1 ,mem_lch_code +6cde 1fe17e03 and pdata ,0x3 ,pdata +6cdf 67e0c1e4 store 1 ,mem_llid +6ce0 67f080d7 store 1 ,core_ccm_aad2 +6ce1 6a2100af fetchr rega ,2 ,mem_len +6ce2 622146b2 storer rega ,2 ,mem_ccm_len +6ce3 6fe146b4 fetch 2 ,mem_ccm_rx_ptr +6ce4 9a208c00 iadd rega ,contr +6ce5 18007000 force regidx_data ,regext_index +6ce6 ede20006 ifetchr regext ,4 ,contr +6ce7 65e20273 storer regext ,4 ,mem_le_peer_mic +6ce8 684ac6a1 fetcht 5 ,mem_ccm_pcnt_rx +6ce9 20406cbd call ccm_br_check_0_length_continuation +6cea 20406c61 call ccm_b0 +6ceb 70800a06 jam 6 ,core_ccm_ctrl +6cec 70800a07 jam 7 ,core_ccm_ctrl +6ced 6fe100af fetch 2 ,mem_len +6cee 67f100da store 2 ,core_ccm_inptr +6cef 20406d53 call wait_ccm_done +6cf0 6ff08108 fetch 1 ,core_misc_status +6cf1 c4038000 rtnbit0 7 +6cf2 20207e58 branch enable_user2 + +ccm_br_pcnt_rx_add: +6cf3 c6078000 rtnmark1 mark_old_packet +6cf4 684a0273 fetcht 4 ,mem_le_peer_mic +6cf5 604a46a6 storet 4 ,mem_ccm_last_mic +6cf6 6fe2c6a1 fetch 5 ,mem_ccm_pcnt_rx +6cf7 1fe0fe01 increase 1 ,pdata +6cf8 67e2c6a1 store 5 ,mem_ccm_pcnt_rx +6cf9 20206cc8 branch ccm_br_pcnt_rx_set + +le_decrypt_new: +6cfa 20406d4c call ccm_init_common +6cfb 7080d500 jam 0 ,core_ccm_aad0 +6cfc 7080d601 jam 1 ,core_ccm_aad1 +6cfd 6fe0816b fetch 1 ,mem_le_rxbuf_data_header +6cfe 1fe17e03 and_into 0x3 ,pdata +6cff 67f080d7 store 1 ,core_ccm_aad2 +6d00 5800016d setarg mem_le_rxbuf_data_payload +6d01 67f100d1 store 2 ,core_ccm_input_playload_addr +6d02 67f100d3 store 2 ,core_ccm_output_playload_addr +6d03 6a20816c fetchr rega ,1 ,mem_le_rxbuf_data_length +6d04 1a20a3fc increase -4 ,rega +6d05 24217e5e nbranch disable_blank ,positive +6d06 6220816c storer rega ,1 ,mem_le_rxbuf_data_length +6d07 5800016d setarg mem_le_rxbuf_data_payload +6d08 9a208c00 iadd rega ,contr +6d09 18007000 force regidx_data ,regext_index +6d0a ede20006 ifetchr regext ,4 ,contr +6d0b 65e20273 storer regext ,4 ,mem_le_peer_mic +6d0c 684ac6a1 fetcht 5 ,mem_ccm_pcnt_rx +6d0d 20406c61 call ccm_b0 +6d0e 70800a06 jam 6 ,core_ccm_ctrl +6d0f 70800a07 jam 7 ,core_ccm_ctrl +6d10 6fe0816c fetch 1 ,mem_le_rxbuf_data_length +6d11 67f100da store 2 ,core_ccm_inptr +6d12 20406d53 call wait_ccm_done +6d13 6ff08108 fetch 1 ,core_misc_status +6d14 c303fe5e bbit0 7 ,disable_blank +6d15 684a0273 fetcht 4 ,mem_le_peer_mic +6d16 6fe246a6 fetch 4 ,mem_ccm_last_mic +6d17 98467e00 isub temp ,pdata +6d18 207a0000 rtn blank +6d19 604a46a6 storet 4 ,mem_ccm_last_mic +6d1a 6fe2c6a1 fetch 5 ,mem_ccm_pcnt_rx +6d1b 1fe0fe01 increase 1 ,pdata +6d1c 79207e27 set1 le_ccm_directionbit ,pdata +6d1d 67e2c6a1 store 5 ,mem_ccm_pcnt_rx +6d1e 18007e00 force 0 ,pdata +6d1f 20600000 rtn + +le_encrypt_new: +6d20 20406d27 call le_encrypt_new_start +6d21 580041f7 setarg mem_le_txpayload +6d22 9a20a200 iadd rega ,rega +6d23 20406d53 call wait_ccm_done +6d24 df00000c arg regidx_result ,regext_index +6d25 e5e20011 istorer regext ,4 ,rega +6d26 20600000 rtn + +le_encrypt_new_start: +6d27 20406d4c call ccm_init_common +6d28 473a402e bpatchx patch2e_4 ,mem_patch2e +6d29 7080d500 jam 0 ,core_ccm_aad0 +6d2a 7080d601 jam 1 ,core_ccm_aad1 +6d2b 6fe0c1f5 fetch 1 ,mem_le_txheader +6d2c 1fe17e03 and_into 0x3 ,pdata +6d2d 67f080d7 store 1 ,core_ccm_aad2 +6d2e 6fe1097b fetch 2 ,mem_contr +6d2f 67f100d1 store 2 ,core_ccm_input_playload_addr +6d30 580041f7 setarg mem_le_txpayload +6d31 67f100d3 store 2 ,core_ccm_output_playload_addr +6d32 6a20c1f6 fetchr rega ,1 ,mem_le_txlen +6d33 684ac69c fetcht 5 ,mem_ccm_pcnt_tx +6d34 20406c61 call ccm_b0 +6d35 70800a02 jam 2 ,core_ccm_ctrl +6d36 70800a03 jam 3 ,core_ccm_ctrl +6d37 6fe0c1f6 fetch 1 ,mem_le_txlen +6d38 67f100da store 2 ,core_ccm_inptr +6d39 1fe0fe04 increase 4 ,pdata +6d3a 67e0c1f6 store 1 ,mem_le_txlen +6d3b 6fe2c69c fetch 5 ,mem_ccm_pcnt_tx +6d3c 1fe0fe01 increase 1 ,pdata +6d3d 793ffe27 set0 le_ccm_directionbit ,pdata +6d3e 67e2c69c store 5 ,mem_ccm_pcnt_tx +6d3f 20600000 rtn + +ccm_wait_enc: +6d40 6ff1011a fetch 2 ,core_ccm_outptr +6d41 98467c00 isub temp ,null +6d42 20628000 rtn zero +6d43 247a0000 nrtn blank +6d44 20206d40 branch ccm_wait_enc + +ccm_check_enc_done: +6d45 6ff08108 fetch 1 ,core_misc_status +6d46 c303137a bbit0 6 ,assert + +ccm_enc_done: +6d47 580041f7 setarg mem_le_txpayload +6d48 98408a00 iadd temp ,contw +6d49 df00000c arg regidx_result ,regext_index +6d4a e5e20005 istorer regext ,4 ,contw +6d4b 20206d55 branch ccm_ctrl_clr + +ccm_init_common: +6d4c 473ac02e bpatchx patch2e_5 ,mem_patch2e +6d4d 1800700c force regidx_result ,regext_index +6d4e 20406dcc call aes_clear +6d4f 20406dcb call aes_clear_data +6d50 58000000 setarg 0 +6d51 67f100da store 2 ,core_ccm_inptr +6d52 20600000 rtn + +wait_ccm_done: +6d53 6ff08108 fetch 1 ,core_misc_status +6d54 c3036d53 bbit0 6 ,wait_ccm_done + +ccm_ctrl_clr: +6d55 70800a00 jam 0 ,core_ccm_ctrl +6d56 20600000 rtn + +wait_aes: +6d57 243bed57 nbranch wait_aes ,aes_ready +6d58 20600000 rtn + +do_aes_ocb: +6d59 18006c30 force 0x30 ,aes_ctrl +6d5a 18006c00 force 0x0 ,aes_ctrl +6d5b 20206d57 branch wait_aes + +do_aes_cbc: +6d5c 18006c32 force 0x32 ,aes_ctrl +6d5d 18006c02 force 0x2 ,aes_ctrl +6d5e 20206d57 branch wait_aes + +do_aes_ctr: +6d5f 18006c34 force 0x34 ,aes_ctrl +6d60 18006c04 force 0x4 ,aes_ctrl +6d61 20206d57 branch wait_aes + +aes_init: +6d62 18006c01 force 1 ,aes_ctrl +6d63 18006c00 force 0 ,aes_ctrl +6d64 20600000 rtn + +function_s1: +6d65 18007000 force regidx_data ,regext_index +6d66 6fe20277 fetch 4 ,mem_le_mrand +6d67 98005e00 iforce regext +6d68 1f00f001 increase 1 ,regext_index +6d69 efe20006 ifetch 4 ,contr +6d6a 98005e00 iforce regext +6d6b 1f00f001 increase 1 ,regext_index +6d6c 6fe24337 fetch 4 ,mem_le_srand +6d6d 98005e00 iforce regext +6d6e 1f00f001 increase 1 ,regext_index +6d6f efe20006 ifetch 4 ,contr +6d70 98005e00 iforce regext +6d71 1f00f001 increase 1 ,regext_index +6d72 20406dcc call aes_clear +6d73 1f00f1fc increase -4 ,regext_index +6d74 6fe2439e fetch 4 ,mem_le_tk +6d75 1fe25e00 copy pdata ,regext +6d76 1f00f004 increase 4 ,regext_index +6d77 18006c38 force 0x38 ,aes_ctrl +6d78 18006c08 force 0x8 ,aes_ctrl +6d79 20206d57 branch wait_aes + +function_c1: +6d7a 473b402e bpatchx patch2e_6 ,mem_patch2e +6d7b 6fe3437a fetch 6 ,mem_le_lap +6d7c 684b0297 fetcht 6 ,mem_le_plap +6d7d 2034ed80 branch function_c1_master ,master +6d7e 6fe30297 fetch 6 ,mem_le_plap +6d7f 684b437a fetcht 6 ,mem_le_lap + +function_c1_master: +6d80 18007008 force regidx_xor ,regext_index +6d81 18425e00 copy temp ,regext +6d82 1f00f001 increase 1 ,regext_index +6d83 184f5e00 rshift32 temp ,regext +6d84 1ff07e00 lshift16 pdata ,pdata +6d85 9de1de00 ior regext ,regext +6d86 1f00f001 increase 1 ,regext_index +6d87 1fef5e00 rshift32 pdata ,regext +6d88 1f00f001 increase 1 ,regext_index +6d89 18005e00 force 0 ,regext +6d8a 18007e00 force 0 ,pdata +6d8b 6fe0c36a fetch 1 ,mem_le_conn_peer_addr_type +6d8c 6848c42b fetcht 1 ,mem_le_adv_own_addr_type +6d8d 2434ed90 nbranch function_c1_irat ,master +6d8e 6fe0c371 fetch 1 ,mem_le_conn_own_addr_type +6d8f 6848c36a fetcht 1 ,mem_le_conn_peer_addr_type + +function_c1_irat: +6d90 67e0c347 store 1 ,mem_le_iat +6d91 6048c348 storet 1 ,mem_le_rat +6d92 18007000 force regidx_data ,regext_index +6d93 da404347 arg mem_le_iat ,regb +6d94 18007204 force 4 ,loopcnt + +function_c1_loop1: +6d95 efe20011 ifetch 4 ,rega +6d96 e8420012 ifetcht 4 ,regb +6d97 9842de00 ixor temp ,regext +6d98 1f00f001 increase 1 ,regext_index +6d99 1a20a204 increase 4 ,rega +6d9a 1a40a404 increase 4 ,regb +6d9b c2006d95 loop function_c1_loop1 +6d9c 20406dcc call aes_clear +6d9d 1f00f1fc increase -4 ,regext_index +6d9e 6fe2439e fetch 4 ,mem_le_tk +6d9f 1fe25e00 copy pdata ,regext +6da0 1f00f004 increase 4 ,regext_index +6da1 18006c38 force 0x38 ,aes_ctrl +6da2 18006c0c force 0xc ,aes_ctrl +6da3 20406d57 call wait_aes +6da4 20406dcb call aes_clear_data +6da5 18006c3a force 0x3a ,aes_ctrl +6da6 18006c08 force 0x8 ,aes_ctrl +6da7 20206d57 branch wait_aes + +padding_data: +6da8 2f200600 compare 0 ,loopcnt ,3 +6da9 20608000 rtn true +6daa 18c27e00 deposit contr +6dab 9f208a00 iadd loopcnt ,contw +6dac 18007e00 force 0 ,pdata + +padding_loop: +6dad e7e08005 istore 1 ,contw +6dae 1f20f201 increase 1 ,loopcnt +6daf 2f200600 compare 0 ,loopcnt ,3 +6db0 20608000 rtn true +6db1 20206dad branch padding_loop + +aes_load_data: +6db2 18007000 force regidx_data ,regext_index + +load_data_loop: +6db3 1f227e00 deposit loopcnt +6db4 203a6db7 branch load_data_padding ,blank +6db5 efe20006 ifetch 4 ,contr +6db6 1f20f3fc increase -4 ,loopcnt + +load_data_padding: +6db7 98005e00 iforce regext +6db8 1f00f001 increase 1 ,regext_index +6db9 2f001e04 compare regidx_key ,regext_index ,0xf +6dba 20608000 rtn true +6dbb 20206db3 branch load_data_loop + +aes_load_xor: +6dbc 18007008 force regidx_xor ,regext_index +6dbd 20206dc1 branch load_regext + +load_key: +6dbe 18007004 force regidx_key ,regext_index +6dbf 20206dc1 branch load_regext + +load_data128: +6dc0 18007000 force regidx_data ,regext_index + +load_regext: +6dc1 18007204 force 4 ,loopcnt + +load_regext_loop: +6dc2 efe20006 ifetch 4 ,contr +6dc3 98005e00 iforce regext +6dc4 1f00f001 increase 1 ,regext_index +6dc5 c2006dc2 loop load_regext_loop +6dc6 20600000 rtn + +load_sk: +6dc7 d8c002c7 arg mem_le_sk ,contr +6dc8 20206dbe branch load_key + +clear_hidata: +6dc9 18007204 force 4 ,loopcnt +6dca 20206dce branch clear_data_rest + +aes_clear_data: +6dcb 18007000 force regidx_data ,regext_index + +aes_clear: +6dcc 18007204 force 4 ,loopcnt + +clear_loop: +6dcd 18005e00 force 0 ,regext + +clear_data_rest: +6dce 1f00f001 increase 1 ,regext_index +6dcf c2006dcd loop clear_loop +6dd0 20600000 rtn + +store_aes_result: +6dd1 1800700c force regidx_result ,regext_index +6dd2 18007204 force 4 ,loopcnt + +send_aes_result_loop: +6dd3 1de27e00 deposit regext +6dd4 e7e20005 istore 4 ,contw +6dd5 1f00f001 increase 1 ,regext_index +6dd6 c2006dd3 loop send_aes_result_loop +6dd7 20600000 rtn + +store_enc_data: +6dd8 1800700c force regidx_result ,regext_index +6dd9 1a620a00 copy regc ,contw +6dda 1a40f201 add regb ,1 ,loopcnt +6ddb 1f267c0f sub loopcnt ,15 ,null +6ddc 20216dde branch store_enc_loop ,positive +6ddd 18007210 force 16 ,loopcnt + +store_enc_loop: +6dde 1de27e00 deposit regext +6ddf 1f267c03 sub loopcnt ,3 ,null +6de0 20216de6 branch store_enc_byte ,positive +6de1 e7e20005 istore 4 ,contw +6de2 1f20f3fc increase -4 ,loopcnt +6de3 20628000 rtn zero +6de4 1f00f001 increase 1 ,regext_index +6de5 20206dde branch store_enc_loop + +store_enc_byte: +6de6 e7e08005 istore 1 ,contw +6de7 1fecfe00 rshift8 pdata ,pdata +6de8 c2006de6 loop store_enc_byte +6de9 20600000 rtn + +compare_res: +6dea 1800700c force regidx_result ,regext_index +6deb 18007204 force 4 ,loopcnt + +compare_res_loop: +6dec efe20006 ifetch 4 ,contr +6ded 9de67c00 isub regext ,null +6dee 24628000 nrtn zero +6def 1f00f001 increase 1 ,regext_index +6df0 c2006dec loop compare_res_loop +6df1 18007c00 force 0 ,null +6df2 20600000 rtn + +enable_authrom: +6df3 6ff08050 fetch 1 ,core_clkoff +6df4 793ffe00 set0 clock_off_auth_rom ,pdata +6df5 67f08050 store 1 ,core_clkoff +6df6 20600000 rtn + +disable_authrom: +6df7 6ff08050 fetch 1 ,core_clkoff +6df8 79207e00 set1 clock_off_auth_rom ,pdata +6df9 67f08050 store 1 ,core_clkoff +6dfa 20600000 rtn + +init_memp: +6dfb d8a00748 arg mem_p ,contw +6dfc 3803ffff setsect 0 ,0x3ffff +6dfd 3807ffff setsect 1 ,0x3ffff +6dfe 380bffff setsect 2 ,0x3ffff +6dff 380ffbff setsect 3 ,0x3fbff +6e00 e7e48005 istore 9 ,contw +6e01 3803ffff setsect 0 ,0x3ffff +6e02 3807ffff setsect 1 ,0x3ffff +6e03 380bffff setsect 2 ,0x3ffff +6e04 380fffff setsect 3 ,0x3ffff +6e05 e7e48005 istore 9 ,contw +6e06 3803ffff setsect 0 ,0x3ffff +6e07 3807ffff setsect 1 ,0x3ffff +6e08 380bcfff setsect 2 ,0x3cfff +6e09 380fffff setsect 3 ,0x3ffff +6e0a e7e48005 istore 9 ,contw +6e0b 3803ffff setsect 0 ,0x3ffff +6e0c 3807ffff setsect 1 ,0x3ffff +6e0d 380bffef setsect 2 ,0x3ffef +6e0e 380fffff setsect 3 ,0x3ffff +6e0f e7e48005 istore 9 ,contw +6e10 3803ffff setsect 0 ,0x3ffff +6e11 3807ffff setsect 1 ,0x3ffff +6e12 380bffff setsect 2 ,0x3ffff +6e13 380fffff setsect 3 ,0x3ffff +6e14 e7e48005 istore 9 ,contw +6e15 3803ffff setsect 0 ,0x3ffff +6e16 38066c7f setsect 1 ,0x26c7f +6e17 3808146b setsect 2 ,0x146b +6e18 380f7bb3 setsect 3 ,0x37bb3 +6e19 e7e48005 istore 9 ,contw +6e1a 3801feb8 setsect 0 ,0x1feb8 +6e1b 38050c12 setsect 1 ,0x10c12 +6e1c 380ab722 setsect 2 ,0x2b722 +6e1d 380e9fa6 setsect 3 ,0x29fa6 +6e1e e7e48005 istore 9 ,contw +6e1f 3800e70f setsect 0 ,0xe70f +6e20 38056720 setsect 1 ,0x16720 +6e21 3808519e setsect 2 ,0x519e +6e22 380d9084 setsect 3 ,0x19084 +6e23 e7e48005 istore 9 ,contw +6e24 38031012 setsect 0 ,0x31012 +6e25 380760bf setsect 1 ,0x360bf +6e26 380bf0af setsect 2 ,0x3f0af +6e27 380c03d3 setsect 3 ,0x3d3 +6e28 e7e48005 istore 9 ,contw +6e29 3803a188 setsect 0 ,0x3a188 +6e2a 38043ad0 setsect 1 ,0x3ad0 +6e2b 380bcbf2 setsect 2 ,0x3cbf2 +6e2c 380e43d9 setsect 3 ,0x243d9 +6e2d e7e48005 istore 9 ,contw +6e2e 3802b030 setsect 0 ,0x2b030 +6e2f 38076a03 setsect 1 ,0x36a03 +6e30 38091188 setsect 2 ,0x11188 +6e31 380de520 setsect 3 ,0x1e520 +6e32 e7e48005 istore 9 ,contw +6e33 3803a11e setsect 0 ,0x3a11e +6e34 3804fe5d setsect 1 ,0xfe5d +6e35 3808dd57 setsect 2 ,0xdd57 +6e36 380dac93 setsect 3 ,0x1ac93 +6e37 e7e48005 istore 9 ,contw +6e38 380011ed setsect 0 ,0x11ed +6e39 380618c4 setsect 1 ,0x218c4 +6e3a 38088da7 setsect 2 ,0x8da7 +6e3b 380e57ff setsect 3 ,0x257ff +6e3c e7e48005 istore 9 ,contw +6e3d 3803192b setsect 0 ,0x3192b +6e3e 38074641 setsect 1 ,0x34641 +6e3f 3809be0c setsect 2 ,0x1be0c +6e40 380f66ad setsect 3 ,0x366ad +6e41 e7e48005 istore 9 ,contw +6e42 38001f83 setsect 0 ,0x1f83 +6e43 38055a23 setsect 1 ,0x15a23 +6e44 380bf9b0 setsect 2 ,0x3f9b0 +6e45 380c3949 setsect 3 ,0x3949 +6e46 e7e48005 istore 9 ,contw +6e47 38013a51 setsect 0 ,0x13a51 +6e48 380553fd setsect 1 ,0x153fd +6e49 380b372a setsect 2 ,0x3372a +6e4a 380cf1bb setsect 3 ,0xf1bb +6e4b e7e48005 istore 9 ,contw +6e4c 3803ae85 setsect 0 ,0x3ae85 +6e4d 3805eed9 setsect 1 ,0x1eed9 +6e4e 38089e66 setsect 2 ,0x9e66 +6e4f 380c01a8 setsect 3 ,0x1a8 +6e50 e7e40005 istore 8 ,contw +6e51 20600000 rtn + +init_memp_256: +6e52 d8a007e0 arg mem_p_256 ,contw +6e53 3803ffff setsect 0 ,0x3ffff +6e54 3807ffff setsect 1 ,0x3ffff +6e55 380bffff setsect 2 ,0x3ffff +6e56 380fffff setsect 3 ,0x3ffff +6e57 e7e48005 istore 9 ,contw +6e58 3803ffff setsect 0 ,0x3ffff +6e59 3804003f setsect 1 ,0x3f +6e5a 38080000 setsect 2 ,0x0 +6e5b 380c0000 setsect 3 ,0x0 +6e5c e7e48005 istore 9 ,contw +6e5d 38000000 setsect 0 ,0x0 +6e5e 38040000 setsect 1 ,0x0 +6e5f 38081000 setsect 2 ,0x1000 +6e60 380c0000 setsect 3 ,0x0 +6e61 e7e48005 istore 9 ,contw +6e62 3803ff00 setsect 0 ,0x3ff00 +6e63 3807ffff setsect 1 ,0x3ffff +6e64 380bffcf setsect 2 ,0x3ffcf +6e65 380fffff setsect 3 ,0x3ffff +6e66 e7e48005 istore 9 ,contw +6e67 3803ffff setsect 0 ,0x3ffff +6e68 3807ffff setsect 1 ,0x3ffff +6e69 380bffff setsect 2 ,0x3ffff +6e6a 380c03ff setsect 3 ,0x3ff +6e6b e7e48005 istore 9 ,contw +6e6c 38000000 setsect 0 ,0x0 +6e6d 38040000 setsect 1 ,0x0 +6e6e 38080000 setsect 2 ,0x0 +6e6f 380c0000 setsect 3 ,0x0 +6e70 e7e48005 istore 9 ,contw +6e71 38010000 setsect 0 ,0x10000 +6e72 38040000 setsect 1 ,0x0 +6e73 380bf000 setsect 2 ,0x3f000 +6e74 380fffff setsect 3 ,0x3ffff +6e75 e7e48005 istore 9 ,contw +6e76 380296ff setsect 0 ,0x296ff +6e77 38062630 setsect 1 ,0x22630 +6e78 380b945d setsect 2 ,0x3945d +6e79 380fd284 setsect 3 ,0x3d284 +6e7a e7e48005 istore 9 ,contw +6e7b 380333a0 setsect 0 ,0x333a0 +6e7c 38044b7a setsect 1 ,0x4b7a +6e7d 380837d8 setsect 2 ,0x37d8 +6e7e 380fc9dc setsect 3 ,0x3c9dc +6e7f e7e48005 istore 9 ,contw +6e80 3803a440 setsect 0 ,0x3a440 +6e81 3805b958 setsect 1 ,0x1b958 +6e82 380b8bce setsect 2 ,0x38bce +6e83 380d091f setsect 3 ,0x1091f +6e84 e7e48005 istore 9 ,contw +6e85 3802e12c setsect 0 ,0x2e12c +6e86 3805f47c setsect 1 ,0x1f47c +6e87 380b56b1 setsect 2 ,0x356b1 +6e88 380efd47 setsect 3 ,0x2fd47 +6e89 e7e48005 istore 9 ,contw +6e8a 38006837 setsect 0 ,0x6837 +6e8b 3806ed90 setsect 1 ,0x2ed90 +6e8c 3809ecec setsect 2 ,0x1ecec +6e8d 380dacc5 setsect 3 ,0x1acc5 +6e8e e7e48005 istore 9 ,contw +6e8f 38023357 setsect 0 ,0x23357 +6e90 38058af3 setsect 1 ,0x18af3 +6e91 3808f9e1 setsect 2 ,0xf9e1 +6e92 380d29f0 setsect 3 ,0x129f0 +6e93 e7e48005 istore 9 ,contw +6e94 3802e7eb setsect 0 ,0x2e7eb +6e95 3807e6e3 setsect 1 ,0x3e6e3 +6e96 380be1a7 setsect 2 ,0x3e1a7 +6e97 380d0b8b setsect 3 ,0x10b8b +6e98 e7e48005 istore 9 ,contw +6e99 38024fe3 setsect 0 ,0x24fe3 +6e9a 380420ef setsect 1 ,0x20ef +6e9b 3809b5a6 setsect 2 ,0x1b5a6 +6e9c 380cdc2f setsect 3 ,0xdc2f +6e9d e7e48005 istore 9 ,contw +6e9e 38013860 setsect 0 ,0x13860 +6e9f 3806bd69 setsect 1 ,0x2bd69 +6ea0 3808391a setsect 2 ,0x391a +6ea1 380db222 setsect 3 ,0x1b222 +6ea2 e7e48005 istore 9 ,contw +6ea3 20600000 rtn + +publickey_init: +6ea4 6fe0c764 fetch 1 ,mem_ssp_enable +6ea5 243a6ebf nbranch sp_initialize ,blank +6ea6 20207541 branch sp_initialize_256 + +sp_calc_sequence_256_check: +6ea7 473bc02e bpatchx patch2e_7 ,mem_patch2e +6ea8 6fe0c764 fetch 1 ,mem_ssp_enable +6ea9 207a0000 rtn blank +6eaa 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +6eab c1808000 rtnne sp_key_valid +6eac 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +6ead 207a0000 rtn blank +6eae 6fe0c6bb fetch 1 ,mem_sc_local_key_invalid +6eaf c1018000 rtneq sp_key_valid_256 +6eb0 6fe1478c fetch 2 ,mem_ui_state_map +6eb1 c2806eb5 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +6eb2 6fe0c6ba fetch 1 ,mem_sc_calc +6eb3 c0007541 beq sp_calc_standby ,sp_initialize_256 +6eb4 20600000 rtn + +stop_publickey_calc_256: +6eb5 7046ba00 jam sp_calc_standby ,mem_sc_calc +6eb6 20600000 rtn + +sp_br_secure_connection_enable: +6eb7 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +6eb8 79207e01 set1 secure_connections_br_bit ,pdata +6eb9 67e0c6b8 store 1 ,mem_secure_connections_enable +6eba 20600000 rtn + +sp_br_secure_connection_disable: +6ebb 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +6ebc 793ffe01 set0 secure_connections_br_bit ,pdata +6ebd 67e0c6b8 store 1 ,mem_secure_connections_enable +6ebe 20600000 rtn + +sp_initialize: +6ebf 473c402f bpatchx patch2f_0 ,mem_patch2f +6ec0 6fe0c764 fetch 1 ,mem_ssp_enable +6ec1 243a6ffb nbranch sp_pubkey_calc ,blank + +sp_reset: +6ec2 20406ecc call sp_clear_flags +6ec3 7046b900 jam sp_key_invalid ,mem_sp_local_key_invalid +6ec4 70087400 jam sp_calc_standby ,mem_sp_calc +6ec5 20600000 rtn + +sp_wait_pubkey_calc_done: +6ec6 6fe0c764 fetch 1 ,mem_ssp_enable +6ec7 207a0000 rtn blank +6ec8 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +6ec9 c1008000 rtneq sp_key_valid +6eca 2040706c call sp_calc_sequence +6ecb 20206ec6 branch sp_wait_pubkey_calc_done + +sp_clear_flags: +6ecc 473cc02f bpatchx patch2f_1 ,mem_patch2f +6ecd 58000880 setarg mem_sp_state_end +6ece d8a00870 arg mem_sp_state_start ,contw +6ecf 98a67200 isub contw ,loopcnt +6ed0 20407d26 call clear_mem +6ed1 58004770 setarg mem_sp_state_xmem_end +6ed2 d8a04768 arg mem_sp_state_xmem ,contw +6ed3 98a67200 isub contw ,loopcnt +6ed4 20207d26 branch clear_mem + +sp_generate_local_key: +6ed5 70087201 jam sp_flag_commit ,mem_sp_flag +6ed6 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +6ed7 c0016eda beq encapsulated_minor_type_p256 ,sp_generate_local_key0_256 +6ed8 c000eee5 beq encapsulated_minor_type_p192 ,sp_generate_local_key0_192 +6ed9 20600000 rtn + +sp_generate_local_key0_256: +6eda 6fe0c6bb fetch 1 ,mem_sc_local_key_invalid +6edb c001eedd beq sp_key_valid_256 ,sp_start_send_pubkey_256 +6edc 20207562 branch sp_pubkey_calc_256 + +sp_start_send_pubkey_256: +6edd 20407581 call sp_dhkey_calc_256 +6ede 6fe08871 fetch 1 ,mem_master_sp_state +6edf 247a0000 nrtn blank +6ee0 70087003 jam sp_stat_key_send ,mem_sp_state +6ee1 20600000 rtn + +sp_master_generate_local_key: +6ee2 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +6ee3 c000f01a beq sp_key_valid ,sp_dhkey_calc +6ee4 2020137a branch assert + +sp_generate_local_key0_192: +6ee5 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +6ee6 c000eee8 beq sp_key_valid ,sp_start_send_pubkey +6ee7 20206ffb branch sp_pubkey_calc + +sp_start_send_pubkey: +6ee8 2040701a call sp_dhkey_calc +6ee9 6fe08871 fetch 1 ,mem_master_sp_state +6eea 247a0000 nrtn blank +6eeb 70087003 jam sp_stat_key_send ,mem_sp_state +6eec 20600000 rtn + +sp_calc_check_publickey_256: +6eed 20406f08 call sp_calc_b256 +6eee da2008a0 arg mem_le_pubkey_remote_y_256 ,rega +6eef d8a00728 arg mem_t7_256 ,contw +6ef0 20407761 call bn_sqrmod_256 +6ef1 da200880 arg mem_le_pubkey_remote_x_256 ,rega +6ef2 d8a006e8 arg mem_t2_256 ,contw +6ef3 20407761 call bn_sqrmod_256 +6ef4 da2006e8 arg mem_t2_256 ,rega +6ef5 da400880 arg mem_le_pubkey_remote_x_256 ,regb +6ef6 d8a006e8 arg mem_t2_256 ,contw +6ef7 204076c9 call bn_mulmod_256 +6ef8 da200800 arg mem_a_256 ,rega +6ef9 da400880 arg mem_le_pubkey_remote_x_256 ,regb +6efa d8a00708 arg mem_t3_256 ,contw +6efb 204076c9 call bn_mulmod_256 +6efc da200708 arg mem_t3_256 ,rega +6efd da4006e8 arg mem_t2_256 ,regb +6efe d8a006e8 arg mem_t2_256 ,contw +6eff 20407765 call bn_addmod_256 +6f00 da2006c8 arg mem_t0_256 ,rega +6f01 da4006e8 arg mem_t2_256 ,regb +6f02 d8a006c8 arg mem_t0_256 ,contw +6f03 20407765 call bn_addmod_256 +6f04 df200020 arg 32 ,loopcnt +6f05 da200728 arg mem_t7_256 ,rega +6f06 da4006c8 arg mem_t0_256 ,regb +6f07 20207df1 branch string_compare + +sp_calc_b256: +6f08 da200840 arg mem_gy_256 ,rega +6f09 d8a006c8 arg mem_t0_256 ,contw +6f0a 20407761 call bn_sqrmod_256 +6f0b da200820 arg mem_gx_256 ,rega +6f0c d8a006e8 arg mem_t2_256 ,contw +6f0d 20407761 call bn_sqrmod_256 +6f0e da2006e8 arg mem_t2_256 ,rega +6f0f da400820 arg mem_gx_256 ,regb +6f10 d8a006e8 arg mem_t2_256 ,contw +6f11 204076c9 call bn_mulmod_256 +6f12 da200800 arg mem_a_256 ,rega +6f13 da400820 arg mem_gx_256 ,regb +6f14 d8a00708 arg mem_t3_256 ,contw +6f15 204076c9 call bn_mulmod_256 +6f16 da200708 arg mem_t3_256 ,rega +6f17 da4006e8 arg mem_t2_256 ,regb +6f18 d8a006e8 arg mem_t2_256 ,contw +6f19 20407765 call bn_addmod_256 +6f1a da2006c8 arg mem_t0_256 ,rega +6f1b da4006e8 arg mem_t2_256 ,regb +6f1c d8a006c8 arg mem_t0_256 ,contw +6f1d 2020777e branch bn_submod_256 + +sp_calc_check_publickey: +6f1e 20406f39 call sp_calc_b +6f1f da2008a8 arg mem_sp_pubkey_remote_y ,rega +6f20 d8a00728 arg mem_t7_256 ,contw +6f21 20407138 call bn_sqrmod +6f22 da200888 arg mem_sp_pubkey_remote_x ,rega +6f23 d8a006e8 arg mem_t2_256 ,contw +6f24 20407138 call bn_sqrmod +6f25 da2006e8 arg mem_t2_256 ,rega +6f26 da400888 arg mem_sp_pubkey_remote_x ,regb +6f27 d8a006e8 arg mem_t2_256 ,contw +6f28 20407116 call bn_mulmod +6f29 da200760 arg mem_a ,rega +6f2a da400888 arg mem_sp_pubkey_remote_x ,regb +6f2b d8a00708 arg mem_t3_256 ,contw +6f2c 20407116 call bn_mulmod +6f2d da200708 arg mem_t3_256 ,rega +6f2e da4006e8 arg mem_t2_256 ,regb +6f2f d8a006e8 arg mem_t2_256 ,contw +6f30 204070e5 call bn_addmod +6f31 da2006c8 arg mem_t0_256 ,rega +6f32 da4006e8 arg mem_t2_256 ,regb +6f33 d8a006c8 arg mem_t0_256 ,contw +6f34 204070e5 call bn_addmod +6f35 df200018 arg 24 ,loopcnt +6f36 da200728 arg mem_t7_256 ,rega +6f37 da4006c8 arg mem_t0_256 ,regb +6f38 20207df1 branch string_compare + +sp_calc_b: +6f39 da2007a8 arg mem_gy ,rega +6f3a d8a006c8 arg mem_t0_256 ,contw +6f3b 20407138 call bn_sqrmod +6f3c da200790 arg mem_gx ,rega +6f3d d8a006e8 arg mem_t2_256 ,contw +6f3e 20407138 call bn_sqrmod +6f3f da2006e8 arg mem_t2_256 ,rega +6f40 da400790 arg mem_gx ,regb +6f41 d8a006e8 arg mem_t2_256 ,contw +6f42 20407116 call bn_mulmod +6f43 da200760 arg mem_a ,rega +6f44 da400790 arg mem_gx ,regb +6f45 d8a00708 arg mem_t3_256 ,contw +6f46 20407116 call bn_mulmod +6f47 da200708 arg mem_t3_256 ,rega +6f48 da4006e8 arg mem_t2_256 ,regb +6f49 d8a006e8 arg mem_t2_256 ,contw +6f4a 204070e5 call bn_addmod +6f4b da2006c8 arg mem_t0_256 ,rega +6f4c da4006e8 arg mem_t2_256 ,regb +6f4d d8a006c8 arg mem_t0_256 ,contw +6f4e 202070e8 branch bn_submod + +sp_calculate_commitment: +6f4f 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +6f50 c0016f53 beq encapsulated_minor_type_p256 ,sp_calculate_commitment_256 +6f51 c000ef63 beq encapsulated_minor_type_p192 ,sp_calculate_commitment_192 +6f52 20600000 rtn + +sp_calculate_commitment_256: +6f53 6fe0c6ba fetch 1 ,mem_sc_calc +6f54 c0806f81 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +6f55 20406f7e call sp_local_random_key_generator +6f56 d8a00940 arg mem_sp_prarm_stack ,contw +6f57 580008f0 setarg mem_sp_random_local_end +6f58 e7e10005 istore 2 ,contw +6f59 580046fc setarg mem_sc_pubkey_local_x_256 + 32 +6f5a e7e10005 istore 2 ,contw +6f5b 580008a0 setarg mem_le_pubkey_remote_x_256 + 32 +6f5c e7e10005 istore 2 ,contw + +sp_calculate_commitment0_256: +6f5d 2040742a call function_f1_256 +6f5e 6fe08871 fetch 1 ,mem_master_sp_state +6f5f c0026f7b beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +6f60 70087201 jam sp_flag_commit ,mem_sp_flag +6f61 70087005 jam sp_stat_commit_send ,mem_sp_state +6f62 20600000 rtn + +sp_calculate_commitment_192: +6f63 6fe08874 fetch 1 ,mem_sp_calc +6f64 c0806f81 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +6f65 20406f7e call sp_local_random_key_generator +6f66 d8a00940 arg mem_sp_prarm_stack ,contw +6f67 580008f0 setarg mem_sp_random_local_end +6f68 e7e10005 istore 2 ,contw +6f69 5800474c setarg mem_sp_pubkey_local_x_end +6f6a e7e10005 istore 2 ,contw +6f6b 580008a0 setarg mem_sp_pubkey_remote_x_end +6f6c e7e10005 istore 2 ,contw +6f6d 20206f75 branch sp_calculate_commitment0 + +master_sp_calculate_commitment: +6f6e d8a00940 arg mem_sp_prarm_stack ,contw +6f6f 58000900 setarg mem_sp_random_remote_end +6f70 e7e10005 istore 2 ,contw +6f71 580008a0 setarg mem_sp_pubkey_remote_x_end +6f72 e7e10005 istore 2 ,contw +6f73 5800474c setarg mem_sp_pubkey_local_x_end +6f74 e7e10005 istore 2 ,contw + +sp_calculate_commitment0: +6f75 20407351 call function_f1_192 +6f76 6fe08871 fetch 1 ,mem_master_sp_state +6f77 c0026f7b beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +6f78 70087201 jam sp_flag_commit ,mem_sp_flag +6f79 70087005 jam sp_stat_commit_send ,mem_sp_state +6f7a 20600000 rtn + +master_sp_calculate_commitment0: +6f7b 70087114 jam sp_stat_commitment_compare ,mem_master_sp_state +6f7c 20406ee2 call sp_master_generate_local_key +6f7d 20207068 branch master_set_mem_master_sp_flag + +sp_local_random_key_generator: +6f7e d8a008e0 arg mem_sp_random_local ,contw +6f7f 18000e08 force 8 ,queue +6f80 20207032 branch random_generator + +sp_calculate_commitment_wait_dhkey_calc: +6f81 70087201 jam sp_flag_commit ,mem_sp_flag +6f82 20600000 rtn + +sp_confirm_check: +6f83 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +6f84 c0016f89 beq encapsulated_minor_type_p256 ,sp_confirm_check_256 +6f85 c000ef8c beq encapsulated_minor_type_p192 ,sp_confirm_check_192 + +sp_confirm_check_wait: +6f86 70087009 jam sp_stat_confirm_check ,mem_sp_state +6f87 70087201 jam sp_flag_commit ,mem_sp_flag +6f88 20600000 rtn + +sp_confirm_check_256: +6f89 6fe0887b fetch 1 ,mem_sp_dhkey_invalid +6f8a c081ef86 bne sp_key_valid_256 ,sp_confirm_check_wait +6f8b 20206f8e branch sp_confirm_check_common + +sp_confirm_check_192: +6f8c 6fe0887b fetch 1 ,mem_sp_dhkey_invalid +6f8d c080ef86 bne sp_key_valid ,sp_confirm_check_wait + +sp_confirm_check_common: +6f8e d8a005e9 arg mem_addr_value ,contw +6f8f 6fe340a8 fetch 6 ,mem_lap +6f90 e7e30005 istore 6 ,contw +6f91 6fe30041 fetch 6 ,mem_plap +6f92 e7e30005 istore 6 ,contw +6f93 6fe1c768 fetch 3 ,mem_sp_iocap_remote +6f94 e7e18005 istore 3 ,contw +6f95 20407449 call function_f3a +6f96 da200910 arg mem_sp_calc_result_high ,rega +6f97 da400920 arg mem_sp_check_result ,regb +6f98 18000e04 force 4 ,queue +6f99 20407037 call compare4 +6f9a 2420efa7 nbranch sp_confirm_check_failed ,true +6f9b 20406f9e call sp_confirm_check_success +6f9c 70007e41 jam lmp_dhkey_check ,mem_lmi_opcode2 +6f9d 20205a1d branch tid_set_reply + +sp_confirm_check_success: +6f9e 6fe08871 fetch 1 ,mem_master_sp_state +6f9f c004efa4 beq sp_stat_confirm_check ,sp_confirm_check_success_master +6fa0 7008700a jam sp_stat_confirm_calc ,mem_sp_state +6fa1 70087201 jam sp_flag_commit ,mem_sp_flag +6fa2 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +6fa3 20600000 rtn + +sp_confirm_check_success_master: +6fa4 70007d03 jam lmp_accepted ,mem_lmo_opcode2 +6fa5 70087115 jam sp_state_end ,mem_master_sp_state +6fa6 20207068 branch master_set_mem_master_sp_flag + +sp_confirm_check_failed: +6fa7 6fe08871 fetch 1 ,mem_master_sp_state +6fa8 c004efad beq sp_stat_confirm_check ,sp_confirm_check_failed_master +6fa9 70087000 jam sp_stat_null ,mem_sp_state +6faa 70007d04 jam lmp_not_accepted ,mem_lmo_opcode2 +6fab 70007f05 jam authentication_failure_error ,mem_lmo_reason2 +6fac 20600000 rtn + +sp_confirm_check_failed_master: +6fad 70007d04 jam lmp_not_accepted ,mem_lmo_opcode2 +6fae 70087100 jam sp_stat_null ,mem_master_sp_state +6faf 20600000 rtn + +sp_confirm_calc: +6fb0 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +6fb1 c0016fb4 beq encapsulated_minor_type_p256 ,sp_confirm_calc_256 +6fb2 c000efb8 beq encapsulated_minor_type_p192 ,sp_confirm_calc_192 +6fb3 20600000 rtn + +sp_confirm_calc_256: +6fb4 6fe0887b fetch 1 ,mem_sp_dhkey_invalid +6fb5 c001efbc beq sp_key_valid_256 ,sp_confirm_calc_ready +6fb6 7008710a jam sp_stat_confirm_calc ,mem_master_sp_state +6fb7 20207068 branch master_set_mem_master_sp_flag + +sp_confirm_calc_192: +6fb8 6fe08875 fetch 1 ,mem_sp_dh_ready +6fb9 c000efbc beq sp_flag_commit ,sp_confirm_calc_ready +6fba 7008710a jam sp_stat_confirm_calc ,mem_master_sp_state +6fbb 20207068 branch master_set_mem_master_sp_flag + +sp_confirm_calc_ready: +6fbc d8a005e9 arg mem_addr_value ,contw +6fbd 6fe30041 fetch 6 ,mem_plap +6fbe e7e30005 istore 6 ,contw +6fbf 6fe340a8 fetch 6 ,mem_lap +6fc0 e7e30005 istore 6 ,contw +6fc1 6fe1c765 fetch 3 ,mem_lmp_io_cap_payload_iocap +6fc2 e7e18005 istore 3 ,contw +6fc3 2040748c call function_f3b +6fc4 6fe08871 fetch 1 ,mem_master_sp_state +6fc5 c0056fc9 beq sp_stat_confirm_calc ,sp_confirm_calc_master +6fc6 7008700b jam sp_stat_confirm_send ,mem_sp_state +6fc7 70087201 jam sp_flag_commit ,mem_sp_flag +6fc8 20600000 rtn + +sp_confirm_calc_master: +6fc9 7008710b jam sp_stat_confirm_send ,mem_master_sp_state +6fca 70087301 jam sp_flag_commit ,mem_master_sp_flag +6fcb 20600000 rtn + +sp_master_key_prarm_push: +6fcc d8a00940 arg mem_sp_prarm_stack ,contw +6fcd 6fe30041 fetch 6 ,mem_plap +6fce e7e30005 istore 6 ,contw +6fcf 6fe340a8 fetch 6 ,mem_lap +6fd0 e7e30005 istore 6 ,contw +6fd1 580008f0 setarg mem_sp_random_local_end +6fd2 e7e10005 istore 2 ,contw +6fd3 58000900 setarg mem_sp_random_remote_end +6fd4 e7e10005 istore 2 ,contw +6fd5 20206fe0 branch sp_link_key_calc + +sp_link_key_prarm_push: +6fd6 7008700f jam sp_stat_done ,mem_sp_state +6fd7 d8a00940 arg mem_sp_prarm_stack ,contw +6fd8 6fe340a8 fetch 6 ,mem_lap +6fd9 e7e30005 istore 6 ,contw +6fda 6fe30041 fetch 6 ,mem_plap +6fdb e7e30005 istore 6 ,contw +6fdc 58000900 setarg mem_sp_random_remote_end +6fdd e7e10005 istore 2 ,contw +6fde 580008f0 setarg mem_sp_random_local_end +6fdf e7e10005 istore 2 ,contw + +sp_link_key_calc: +6fe0 d8a005e9 arg mem_addr_value ,contw +6fe1 6fe30940 fetch 6 ,mem_sp_prarm_stack +6fe2 e7e30005 istore 6 ,contw +6fe3 6fe30946 fetch 6 ,mem_sp_prarm_stack + 6 +6fe4 e7e30005 istore 6 ,contw +6fe5 204074a0 call function_f2 +6fe6 7041ca01 jam 1 ,mem_link_key_exists +6fe7 d8a041cb arg mem_link_key ,contw +6fe8 d8c00910 arg mem_sp_calc_result_high ,contr +6fe9 20407d0c call memcpy16 +6fea 202009c8 branch generate_linkkey_continue + +sp_debug_private: +6feb d8a0471c arg mem_sp_private_key ,contw +6fec 380118ff setsect 0 ,0x118ff +6fed 3807fd29 setsect 1 ,0x3fd29 +6fee 3809ed2e setsect 2 ,0x1ed2e +6fef 380cad89 setsect 3 ,0xad89 +6ff0 e7e48005 istore 9 ,contw +6ff1 38030c14 setsect 0 ,0x30c14 +6ff2 380475b3 setsect 1 ,0x75b3 +6ff3 380805df setsect 2 ,0x5df +6ff4 380f709c setsect 3 ,0x3709c +6ff5 e7e48005 istore 9 ,contw +6ff6 3802918d setsect 0 ,0x2918d +6ff7 380457e1 setsect 1 ,0x57e1 +6ff8 38080079 setsect 2 ,0x79 +6ff9 e7e30005 istore 6 ,contw +6ffa 20600000 rtn + +sp_pubkey_calc: +6ffb 473d402f bpatchx patch2f_2 ,mem_patch2f +6ffc 6fe0c6b9 fetch 1 ,mem_sp_local_key_invalid +6ffd c1800000 rtnne sp_key_invalid +6ffe 6fe08874 fetch 1 ,mem_sp_calc +6fff c1800000 rtnne sp_calc_standby +7000 d8a0471c arg mem_sp_private_key ,contw +7001 18000e0b force 11 ,queue +7002 20407032 call random_generator +7003 180a7e00 random pdata +7004 1fe37e00 rshift pdata ,pdata +7005 e7e10005 istore 2 ,contw +7006 6fe0c6b7 fetch 1 ,mem_sp_debug_mode +7007 245a6feb ncall sp_debug_private ,blank +7008 d8a00580 arg mem_k ,contw +7009 d8c0471c arg mem_sp_private_key ,contr +700a 20407d0b call memcpy24 +700b d8a004a8 arg mem_ax ,contw +700c d8c00790 arg mem_gx ,contr +700d 20407d09 call memcpy48 +700e d8a004d8 arg mem_az ,contw +700f 20407d16 call bn_zero +7010 7004d801 jam 1 ,mem_az +7011 2040740e call eckp_calc_init +7012 70087401 jam sp_calc_pubkey ,mem_sp_calc +7013 20600000 rtn + +sp_pubkey_generated: +7014 d8a04734 arg mem_sp_pubkey_local ,contw +7015 d8c004f0 arg mem_bx ,contr +7016 20407d09 call memcpy48 +7017 7046b901 jam sp_key_valid ,mem_sp_local_key_invalid +7018 70087400 jam sp_calc_standby ,mem_sp_calc +7019 20600000 rtn + +sp_dhkey_calc: +701a 473dc02f bpatchx patch2f_3 ,mem_patch2f +701b 6fe0887b fetch 1 ,mem_sp_dhkey_invalid +701c c1800000 rtnne sp_key_invalid +701d 6fe08874 fetch 1 ,mem_sp_calc +701e c1800000 rtnne sp_calc_standby +701f d8a00580 arg mem_k ,contw +7020 d8c0471c arg mem_sp_private_key ,contr +7021 20407d0b call memcpy24 +7022 d8a004a8 arg mem_ax ,contw +7023 d8c00888 arg mem_sp_pubkey_remote ,contr +7024 20407d09 call memcpy48 +7025 d8a004d8 arg mem_az ,contw +7026 20407d16 call bn_zero +7027 7004d801 jam 1 ,mem_az +7028 2040740e call eckp_calc_init +7029 70087402 jam sp_calc_dhkey ,mem_sp_calc +702a 20600000 rtn + +sp_dhkey_generated: +702b 70087501 jam sp_flag_commit ,mem_sp_dh_ready +702c d8a008c8 arg mem_sp_dhkey ,contw +702d d8c004f0 arg mem_bx ,contr +702e 20407d0b call memcpy24 +702f 70087b01 jam sp_key_valid ,mem_sp_dhkey_invalid +7030 70087400 jam sp_calc_standby ,mem_sp_calc +7031 20600000 rtn + +random_generator: +7032 18e08fff increase -1 ,queue +7033 24610000 nrtn positive +7034 180a7e00 random pdata +7035 e7e10005 istore 2 ,contw +7036 20207032 branch random_generator + +compare4: +7037 18e08fff increase -1 ,queue +7038 24217043 nbranch compare4_success ,positive +7039 efe20011 ifetch 4 ,rega +703a 1fe20400 copy pdata ,temp +703b efe20012 ifetch 4 ,regb +703c 9842fe00 iflip temp ,pdata +703d 2422f041 nbranch compare4_failed ,zero +703e 1a20a204 increase 4 ,rega +703f 1a40a404 increase 4 ,regb +7040 20207037 branch compare4 + +compare4_failed: +7041 7840fc00 disable true +7042 20600000 rtn + +compare4_success: +7043 7820fc00 enable true +7044 20600000 rtn + +simple_pairing_sequence: +7045 473e402f bpatchx patch2f_4 ,mem_patch2f +7046 6fe08872 fetch 1 ,mem_sp_flag +7047 207a0000 rtn blank +7048 204059e1 call lmo_fifo_check +7049 247a0000 nrtn blank +704a 70087200 jam sp_flag_standby ,mem_sp_flag +704b 6fe08870 fetch 1 ,mem_sp_state +704c c001d907 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +704d c002d929 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +704e c003d934 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +704f c005d949 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +7050 c0016ed5 beq sp_stat_key_generate ,sp_generate_local_key +7051 c0026f4f beq sp_stat_commit_calc ,sp_calculate_commitment +7052 c004ef83 beq sp_stat_confirm_check ,sp_confirm_check +7053 c0056fb0 beq sp_stat_confirm_calc ,sp_confirm_calc +7054 c0066fd6 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +7055 20600000 rtn + +master_simple_paring_sequence: +7056 473ec02f bpatchx patch2f_5 ,mem_patch2f +7057 6fe08873 fetch 1 ,mem_master_sp_flag +7058 207a0000 rtn blank +7059 204059e1 call lmo_fifo_check +705a 247a0000 nrtn blank +705b 70087300 jam sp_flag_standby ,mem_master_sp_flag +705c 6fe08871 fetch 1 ,mem_master_sp_state +705d c00958eb beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +705e c009d8f0 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +705f c001d8f4 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +7060 c0026f6e beq sp_stat_commit_calc ,master_sp_calculate_commitment +7061 c00a58f8 beq sp_stat_commitment_compare ,sp_master_commitment_compare +7062 c003d905 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +7063 c0056fb0 beq sp_stat_confirm_calc ,sp_confirm_calc +7064 c005d948 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +7065 c004ef83 beq sp_stat_confirm_check ,sp_confirm_check +7066 c00ad942 beq sp_state_end ,master_sp_sm_end +7067 20600000 rtn + +master_set_mem_master_sp_flag: +7068 70087301 jam sp_flag_commit ,mem_master_sp_flag +7069 20600000 rtn + +master_clear_mem_master_sp_flag: +706a 70087300 jam sp_flag_standby ,mem_master_sp_flag +706b 20600000 rtn + +sp_calc_sequence: +706c 473f402f bpatchx patch2f_6 ,mem_patch2f +706d 6fe0c764 fetch 1 ,mem_ssp_enable +706e 207a0000 rtn blank +706f 6fe08874 fetch 1 ,mem_sp_calc +7070 207a0000 rtn blank +7071 1fe0fe80 increase 0x80 ,pdata +7072 67e08874 store 1 ,mem_sp_calc +7073 c3838000 rtnbit1 7 +7074 6fe084a5 fetch 1 ,mem_ec_loopc +7075 203a7077 branch sp_calc_sequence_done ,blank +7076 20207419 branch eckp_calc + +sp_calc_sequence_done: +7077 20407263 call ecunmapz +7078 6fe08874 fetch 1 ,mem_sp_calc +7079 c000f014 beq sp_calc_pubkey ,sp_pubkey_generated +707a c001702b beq sp_calc_dhkey ,sp_dhkey_generated +707b 20600000 rtn + +bn_testbit: +707c 1fe10e07 and pdata ,7 ,queue +707d 1fe97e00 rshift3 pdata ,pdata +707e 98c08c00 iadd contr ,contr +707f efe08006 ifetch 1 ,contr +7080 afec0000 qisolate0 pdata +7081 20600000 rtn + +ec_copy: +7082 20407d0b call memcpy24 +7083 20407d0b call memcpy24 +7084 20207d0b branch memcpy24 + +bn_eq_zero: +7085 efe40006 ifetch 8 ,contr +7086 247a0000 nrtn blank +7087 efe40006 ifetch 8 ,contr +7088 247a0000 nrtn blank +7089 efe40006 ifetch 8 ,contr +708a 20600000 rtn + +bn_eq_0: +708b efe20011 ifetch 4 ,rega +708c 98000400 iforce temp +708d efe20012 ifetch 4 ,regb +708e 98467c00 isub temp ,null +708f 24628000 nrtn zero +7090 1a20a204 increase 4 ,rega +7091 1a40a404 increase 4 ,regb +7092 c200708b loop bn_eq_0 +7093 20600000 rtn + +bn_bigeq: +7094 18007206 force 6 ,loopcnt +7095 1a20a214 increase 20 ,rega +7096 1a40a414 increase 20 ,regb + +bn_bigeq_0: +7097 efe20012 ifetch 4 ,regb +7098 98000400 iforce temp +7099 efe20011 ifetch 4 ,rega +709a 98467e00 isub temp ,pdata +709b 24610000 nrtn positive +709c 247a0000 nrtn blank +709d 1a20a3fc increase -4 ,rega +709e 1a40a5fc increase -4 ,regb +709f c2007097 loop bn_bigeq_0 +70a0 20600000 rtn + +bn_add: +70a1 18007206 force 6 ,loopcnt +70a2 18002600 force 0 ,regc + +bn_add_0: +70a3 efe20011 ifetch 4 ,rega +70a4 98000400 iforce temp +70a5 efe20012 ifetch 4 ,regb +70a6 9840fe00 iadd temp ,pdata +70a7 9a60fe00 iadd regc ,pdata +70a8 e7e20005 istore 4 ,contw +70a9 2feffe20 isolate1 32 ,pdata +70aa 7920a600 setflag true ,0 ,regc +70ab 1a20a204 increase 4 ,rega +70ac 1a40a404 increase 4 ,regb +70ad c20070a3 loop bn_add_0 +70ae 20600000 rtn + +bn_sub: +70af 18007206 force 6 ,loopcnt +70b0 18002600 force 0 ,regc + +bn_sub_0: +70b1 efe20012 ifetch 4 ,regb +70b2 98000400 iforce temp +70b3 efe20011 ifetch 4 ,rega +70b4 98467e00 isub temp ,pdata +70b5 9a667e00 isub regc ,pdata +70b6 e7e20005 istore 4 ,contw +70b7 2feffe20 isolate1 32 ,pdata +70b8 7920a600 setflag true ,0 ,regc +70b9 1a20a204 increase 4 ,rega +70ba 1a40a404 increase 4 ,regb +70bb c20070b1 loop bn_sub_0 +70bc 20600000 rtn + +bn_rshift6: +70bd 18007206 force 6 ,loopcnt +70be 1a20a214 increase 20 ,rega + +bn_rshift: +70bf 18002600 force 0 ,regc + +bn_rshift_0: +70c0 efe20011 ifetch 4 ,rega +70c1 2feffe00 isolate1 0 ,pdata +70c2 7920a601 setflag true ,1 ,regc +70c3 1fe37e00 rshift pdata ,pdata +70c4 2a6ffe00 isolate1 0 ,regc +70c5 7920fe1f setflag true ,31 ,pdata +70c6 e7e20011 istore 4 ,rega +70c7 1a20a3fc increase -4 ,rega +70c8 1a632600 rshift regc ,regc +70c9 c20070c0 loop bn_rshift_0 +70ca 20600000 rtn + +bn_lshift: +70cb 18007206 force 6 ,loopcnt +70cc 18002600 force 0 ,regc + +bn_lshift_0: +70cd efe20011 ifetch 4 ,rega +70ce 2feffe1f isolate1 31 ,pdata +70cf 7920a601 setflag true ,1 ,regc +70d0 1fe3fe00 lshift pdata ,pdata +70d1 2a6ffe00 isolate1 0 ,regc +70d2 7920fe00 setflag true ,0 ,pdata +70d3 e7e20011 istore 4 ,rega +70d4 1a20a204 increase 4 ,rega +70d5 1a632600 rshift regc ,regc +70d6 c20070cd loop bn_lshift_0 +70d7 20600000 rtn + +bn_lshiftmod: +70d8 204070cb call bn_lshift + +bn_lshiftmod_ismod: +70d9 2a6ffe00 isolate1 0 ,regc +70da 2020f0e1 branch bn_lshiftmod_0 ,true +70db da400748 arg mem_p ,regb +70dc 1a222600 copy rega ,regc +70dd 1a20a3e8 increase -24 ,rega +70de 20407094 call bn_bigeq +70df 24610000 nrtn positive +70e0 1a622200 copy regc ,rega + +bn_lshiftmod_0: +70e1 1a20a3e8 increase -24 ,rega +70e2 da400748 arg mem_p ,regb +70e3 1a220a00 copy rega ,contw +70e4 202070af branch bn_sub + +bn_addmod: +70e5 204070a1 call bn_add +70e6 18a22200 copy contw ,rega +70e7 202070d9 branch bn_lshiftmod_ismod + +bn_submod: +70e8 204070af call bn_sub +70e9 2a6c0000 isolate0 0 ,regc +70ea 20608000 rtn true +70eb da400748 arg mem_p ,regb +70ec 18a0a3e8 add contw ,-24 ,rega +70ed 1a220a00 copy rega ,contw +70ee 202070a1 branch bn_add + +bn_p192mod: +70ef 18a21600 copy contw ,timeup +70f0 1a226000 copy rega ,alarm +70f1 da4005d8 arg mem_tmp2 ,regb +70f2 1a420a00 copy regb ,contw +70f3 1a208c18 add rega ,24 ,contr +70f4 efe40006 ifetch 8 ,contr +70f5 e7e40005 istore 8 ,contw +70f6 e7e40005 istore 8 ,contw +70f7 18007e00 force 0 ,pdata +70f8 e7e40005 istore 8 ,contw +70f9 19620a00 copy timeup ,contw +70fa 204070e5 call bn_addmod +70fb da4005d8 arg mem_tmp2 ,regb +70fc 1a420a00 copy regb ,contw +70fd 18007e00 force 0 ,pdata +70fe e7e40005 istore 8 ,contw +70ff 1e008c20 add alarm ,32 ,contr +7100 efe40006 ifetch 8 ,contr +7101 e7e40005 istore 8 ,contw +7102 e7e40005 istore 8 ,contw +7103 19622200 copy timeup ,rega +7104 1a220a00 copy rega ,contw +7105 204070e5 call bn_addmod +7106 da4005d8 arg mem_tmp2 ,regb +7107 1a420a00 copy regb ,contw +7108 1e008c28 add alarm ,40 ,contr +7109 efe40006 ifetch 8 ,contr +710a e7e40005 istore 8 ,contw +710b e7e40005 istore 8 ,contw +710c e7e40005 istore 8 ,contw +710d 19622200 copy timeup ,rega +710e 1a220a00 copy rega ,contw +710f 202070e5 branch bn_addmod + +bn_load: +7110 18007206 force 6 ,loopcnt + +bn_load_0: +7111 efe20006 ifetch 4 ,contr +7112 98005e00 iforce regext +7113 1f00f001 increase 1 ,regext_index +7114 c2007111 loop bn_load_0 +7115 20600000 rtn + +bn_mulmod: +7116 18a21600 copy contw ,timeup +7117 d8a005a8 arg mem_tmp1 ,contw +7118 20407d16 call bn_zero +7119 d8a005a8 arg mem_tmp1 ,contw +711a 1a220c00 copy rega ,contr +711b 18007000 force 0 ,regext_index +711c 20407110 call bn_load +711d 1a420c00 copy regb ,contr +711e 20407110 call bn_load +711f 18002400 force 0 ,regb + +bn_mulmod_1: +7120 18000400 force 0 ,temp +7121 18002606 force 6 ,regc + +bn_mulmod_0: +7122 efe20005 ifetch 4 ,contw +7123 98002200 iforce rega +7124 1a427000 copy regb ,regext_index +7125 1de27e00 deposit regext +7126 1a627000 copy regc ,regext_index +7127 9deffe00 imul32 regext ,pdata +7128 9a20fe00 iadd rega ,pdata +7129 9840fe00 iadd temp ,pdata +712a e7e20005 istore 4 ,contw +712b 1fef0400 rshift32 pdata ,temp +712c 1a60a601 increase 1 ,regc +712d 2a61fe0c compare 12 ,regc ,0xff +712e 2420f122 nbranch bn_mulmod_0 ,true +712f 18427e00 deposit temp +7130 e7e20005 istore 4 ,contw +7131 18a08be8 increase -24 ,contw +7132 1a40a401 increase 1 ,regb +7133 2a41fe06 compare 6 ,regb ,0xff +7134 2420f120 nbranch bn_mulmod_1 ,true +7135 da2005a8 arg mem_tmp1 ,rega +7136 19620a00 copy timeup ,contw +7137 202070ef branch bn_p192mod + +bn_sqrmod: +7138 1a222400 copy rega ,regb +7139 20207116 branch bn_mulmod + +bn_rshifteven: +713a 1a226000 copy rega ,alarm + +bn_rshifteven_1: +713b 1e022200 copy alarm ,rega +713c efe08011 ifetch 1 ,rega +713d 2feffe00 isolate1 0 ,pdata +713e 20608000 rtn true +713f 204070bd call bn_rshift6 +7140 efe08012 ifetch 1 ,regb +7141 2fec0000 isolate0 0 ,pdata +7142 2020f14a branch bn_rshifteven_0 ,true +7143 da200748 arg mem_p ,rega +7144 1a420a00 copy regb ,contw +7145 204070a1 call bn_add +7146 efe08012 ifetch 1 ,regb +7147 9a60fe00 iadd regc ,pdata +7148 e7e08012 istore 1 ,regb +7149 1a40a5e8 increase -24 ,regb + +bn_rshifteven_0: +714a 1a40a218 add regb ,24 ,rega +714b 18007207 force 7 ,loopcnt +714c 204070bf call bn_rshift +714d 2020713b branch bn_rshifteven_1 + +bn_invmod: +714e 18a21600 copy contw ,timeup +714f d8a00608 arg mem_tmp0 ,contw +7150 20407d16 call bn_zero +7151 18007e00 force 0 ,pdata +7152 67e205c0 store 4 ,mem_tmp5 +7153 67e20620 store 4 ,mem_t2 +7154 70060801 jam 1 ,mem_tmp0 +7155 d8a005a8 arg mem_tmp1 ,contw +7156 20407d16 call bn_zero +7157 d8c00748 arg mem_p ,contr +7158 d8a005d8 arg mem_tmp2 ,contw +7159 20407d0b call memcpy24 +715a 1a220c00 copy rega ,contr +715b d8a005f0 arg mem_tmp3 ,contw +715c 20407d0b call memcpy24 + +bn_invmod_2: +715d d8c005f0 arg mem_tmp3 ,contr +715e 20407085 call bn_eq_zero +715f 203a7186 branch bn_invmod_0 ,blank +7160 da2005f0 arg mem_tmp3 ,rega +7161 da400608 arg mem_tmp0 ,regb +7162 2040713a call bn_rshifteven +7163 da2005d8 arg mem_tmp2 ,rega +7164 da4005a8 arg mem_tmp1 ,regb +7165 2040713a call bn_rshifteven +7166 da2005f0 arg mem_tmp3 ,rega +7167 da4005d8 arg mem_tmp2 ,regb +7168 20407094 call bn_bigeq +7169 20217178 branch bn_invmod_1 ,positive +716a da2005d8 arg mem_tmp2 ,rega +716b da4005f0 arg mem_tmp3 ,regb +716c 1a220a00 copy rega ,contw +716d 204070af call bn_sub +716e da200608 arg mem_tmp0 ,rega +716f da4005a8 arg mem_tmp1 ,regb +7170 1a420a00 copy regb ,contw +7171 204070a1 call bn_add +7172 efe08011 ifetch 1 ,rega +7173 9a60a600 iadd regc ,regc +7174 efe08012 ifetch 1 ,regb +7175 9a60fe00 iadd regc ,pdata +7176 e7e08012 istore 1 ,regb +7177 2020715d branch bn_invmod_2 + +bn_invmod_1: +7178 da2005f0 arg mem_tmp3 ,rega +7179 da4005d8 arg mem_tmp2 ,regb +717a 1a220a00 copy rega ,contw +717b 204070af call bn_sub +717c da2005a8 arg mem_tmp1 ,rega +717d da400608 arg mem_tmp0 ,regb +717e 1a420a00 copy regb ,contw +717f 204070a1 call bn_add +7180 efe08011 ifetch 1 ,rega +7181 9a60a600 iadd regc ,regc +7182 efe08012 ifetch 1 ,regb +7183 9a60fe00 iadd regc ,pdata +7184 e7e08012 istore 1 ,regb +7185 2020715d branch bn_invmod_2 + +bn_invmod_0: +7186 d8a00608 arg mem_tmp0 ,contw +7187 20407d16 call bn_zero +7188 6fe085c0 fetch 1 ,mem_tmp5 +7189 67e08608 store 1 ,mem_tmp0 +718a 67e08610 store 1 ,mem_tmp0a +718b da200608 arg mem_tmp0 ,rega +718c da4005a8 arg mem_tmp1 ,regb +718d 1a420a00 copy regb ,contw +718e 204070e5 call bn_addmod +718f da200748 arg mem_p ,rega +7190 da4005a8 arg mem_tmp1 ,regb +7191 19620a00 copy timeup ,contw +7192 202070e8 branch bn_submod + +ecdbl: +7193 da200568 arg mem_cz ,rega +7194 d8a00620 arg mem_t2 ,contw +7195 20407138 call bn_sqrmod +7196 da200620 arg mem_t2 ,rega +7197 d8a00638 arg mem_t3 ,contw +7198 20407138 call bn_sqrmod +7199 da200760 arg mem_a ,rega +719a da400638 arg mem_t3 ,regb +719b d8a00638 arg mem_t3 ,contw +719c 20407116 call bn_mulmod +719d da200538 arg mem_cx ,rega +719e d8a00620 arg mem_t2 ,contw +719f 20407138 call bn_sqrmod +71a0 d8c00620 arg mem_t2 ,contr +71a1 d8a005f0 arg mem_t1 ,contw +71a2 20407d0b call memcpy24 +71a3 da2005f0 arg mem_t1 ,rega +71a4 204070d8 call bn_lshiftmod +71a5 da200620 arg mem_t2 ,rega +71a6 da4005f0 arg mem_t1 ,regb +71a7 d8a00620 arg mem_t2 ,contw +71a8 204070e5 call bn_addmod +71a9 da200620 arg mem_t2 ,rega +71aa da400638 arg mem_t3 ,regb +71ab d8a00620 arg mem_t2 ,contw +71ac 204070e5 call bn_addmod +71ad d8c00538 arg mem_cx ,contr +71ae d8a005f0 arg mem_t1 ,contw +71af 20407d0b call memcpy24 +71b0 da200550 arg mem_cy ,rega +71b1 d8a00638 arg mem_t3 ,contw +71b2 20407138 call bn_sqrmod +71b3 da2005f0 arg mem_t1 ,rega +71b4 204070d8 call bn_lshiftmod +71b5 da2005f0 arg mem_t1 ,rega +71b6 204070d8 call bn_lshiftmod +71b7 da2005f0 arg mem_t1 ,rega +71b8 da400638 arg mem_t3 ,regb +71b9 d8a005f0 arg mem_t1 ,contw +71ba 20407116 call bn_mulmod +71bb da200638 arg mem_t3 ,rega +71bc d8a00608 arg mem_t0 ,contw +71bd 20407138 call bn_sqrmod +71be da200608 arg mem_t0 ,rega +71bf 204070d8 call bn_lshiftmod +71c0 da200608 arg mem_t0 ,rega +71c1 204070d8 call bn_lshiftmod +71c2 da200608 arg mem_t0 ,rega +71c3 204070d8 call bn_lshiftmod +71c4 d8c00550 arg mem_cy ,contr +71c5 d8a00638 arg mem_t3 ,contw +71c6 20407d0b call memcpy24 +71c7 da200638 arg mem_t3 ,rega +71c8 204070d8 call bn_lshiftmod +71c9 da200638 arg mem_t3 ,rega +71ca da400568 arg mem_cz ,regb +71cb d8a00568 arg mem_cz ,contw +71cc 20407116 call bn_mulmod +71cd da200620 arg mem_t2 ,rega +71ce d8a00638 arg mem_t3 ,contw +71cf 20407138 call bn_sqrmod +71d0 da200638 arg mem_t3 ,rega +71d1 da4005f0 arg mem_t1 ,regb +71d2 d8a00638 arg mem_t3 ,contw +71d3 204070e8 call bn_submod +71d4 da200638 arg mem_t3 ,rega +71d5 da4005f0 arg mem_t1 ,regb +71d6 d8a00538 arg mem_cx ,contw +71d7 204070e8 call bn_submod +71d8 da2005f0 arg mem_t1 ,rega +71d9 da400538 arg mem_cx ,regb +71da d8a00638 arg mem_t3 ,contw +71db 204070e8 call bn_submod +71dc da200638 arg mem_t3 ,rega +71dd da400620 arg mem_t2 ,regb +71de d8a00638 arg mem_t3 ,contw +71df 20407116 call bn_mulmod +71e0 da200638 arg mem_t3 ,rega +71e1 da400608 arg mem_t0 ,regb +71e2 d8a00550 arg mem_cy ,contw +71e3 202070e8 branch bn_submod + +ecadd: +71e4 da2004d8 arg mem_az ,rega +71e5 d8a00650 arg mem_t7 ,contw +71e6 20407138 call bn_sqrmod +71e7 da200538 arg mem_cx ,rega +71e8 da400650 arg mem_t7 ,regb +71e9 d8a00608 arg mem_t0 ,contw +71ea 20407116 call bn_mulmod +71eb da2004d8 arg mem_az ,rega +71ec da400650 arg mem_t7 ,regb +71ed d8a00650 arg mem_t7 ,contw +71ee 20407116 call bn_mulmod +71ef da200550 arg mem_cy ,rega +71f0 da400650 arg mem_t7 ,regb +71f1 d8a005f0 arg mem_t1 ,contw +71f2 20407116 call bn_mulmod +71f3 da200568 arg mem_cz ,rega +71f4 d8a00650 arg mem_t7 ,contw +71f5 20407138 call bn_sqrmod +71f6 da2004a8 arg mem_ax ,rega +71f7 da400650 arg mem_t7 ,regb +71f8 d8a00620 arg mem_t2 ,contw +71f9 20407116 call bn_mulmod +71fa da200568 arg mem_cz ,rega +71fb da400650 arg mem_t7 ,regb +71fc d8a00650 arg mem_t7 ,contw +71fd 20407116 call bn_mulmod +71fe da2004c0 arg mem_ay ,rega +71ff da400650 arg mem_t7 ,regb +7200 d8a00638 arg mem_t3 ,contw +7201 20407116 call bn_mulmod +7202 da200608 arg mem_t0 ,rega +7203 da400620 arg mem_t2 ,regb +7204 d8a00650 arg mem_t7 ,contw +7205 204070e8 call bn_submod +7206 da200608 arg mem_t0 ,rega +7207 da400620 arg mem_t2 ,regb +7208 d8a00608 arg mem_t0 ,contw +7209 204070e5 call bn_addmod +720a da2005f0 arg mem_t1 ,rega +720b da400638 arg mem_t3 ,regb +720c d8a00620 arg mem_t2 ,contw +720d 204070e8 call bn_submod +720e da2005f0 arg mem_t1 ,rega +720f da400638 arg mem_t3 ,regb +7210 d8a005f0 arg mem_t1 ,contw +7211 204070e5 call bn_addmod +7212 da2005f0 arg mem_t1 ,rega +7213 da400650 arg mem_t7 ,regb +7214 d8a005f0 arg mem_t1 ,contw +7215 20407116 call bn_mulmod +7216 da200568 arg mem_cz ,rega +7217 da4004d8 arg mem_az ,regb +7218 d8a00638 arg mem_t3 ,contw +7219 20407116 call bn_mulmod +721a da200638 arg mem_t3 ,rega +721b da400650 arg mem_t7 ,regb +721c d8a00568 arg mem_cz ,contw +721d 20407116 call bn_mulmod +721e da200650 arg mem_t7 ,rega +721f d8a00650 arg mem_t7 ,contw +7220 20407138 call bn_sqrmod +7221 da200650 arg mem_t7 ,rega +7222 da400608 arg mem_t0 ,regb +7223 d8a00638 arg mem_t3 ,contw +7224 20407116 call bn_mulmod +7225 da200650 arg mem_t7 ,rega +7226 da4005f0 arg mem_t1 ,regb +7227 d8a005f0 arg mem_t1 ,contw +7228 20407116 call bn_mulmod +7229 da200620 arg mem_t2 ,rega +722a d8a00538 arg mem_cx ,contw +722b 20407138 call bn_sqrmod +722c da200538 arg mem_cx ,rega +722d da400638 arg mem_t3 ,regb +722e d8a00538 arg mem_cx ,contw +722f 204070e8 call bn_submod +7230 d8c00538 arg mem_cx ,contr +7231 d8a00650 arg mem_t7 ,contw +7232 20407d0b call memcpy24 +7233 da200650 arg mem_t7 ,rega +7234 204070d8 call bn_lshiftmod +7235 da200638 arg mem_t3 ,rega +7236 da400650 arg mem_t7 ,regb +7237 d8a00638 arg mem_t3 ,contw +7238 204070e8 call bn_submod +7239 da200638 arg mem_t3 ,rega +723a da400620 arg mem_t2 ,regb +723b d8a00620 arg mem_t2 ,contw +723c 20407116 call bn_mulmod +723d da200620 arg mem_t2 ,rega +723e da4005f0 arg mem_t1 ,regb +723f d8a00550 arg mem_cy ,contw +7240 204070e8 call bn_submod +7241 da200550 arg mem_cy ,rega +7242 da400748 arg mem_p ,regb +7243 d8a00550 arg mem_cy ,contw +7244 18002600 force 0 ,regc +7245 6fe08550 fetch 1 ,mem_cy +7246 2feffe00 isolate1 0 ,pdata +7247 2040f0a1 call bn_add ,true +7248 1a626000 copy regc ,alarm +7249 da200550 arg mem_cy ,rega +724a 204070bd call bn_rshift6 +724b 6fe08567 fetch 1 ,mem_cy5 +724c 2e0ffe00 isolate1 0 ,alarm +724d 7920fe07 setflag true ,7 ,pdata +724e 67e08567 store 1 ,mem_cy5 +724f 20600000 rtn + +eckp_0: +7250 6fe084a5 fetch 1 ,mem_ec_loopc +7251 1fe0ffff increase -1 ,pdata +7252 24610000 nrtn positive +7253 67e084a5 store 1 ,mem_ec_loopc +7254 6fe084a4 fetch 1 ,mem_ec_infinite +7255 205a7193 call ecdbl ,blank +7256 6fe084a5 fetch 1 ,mem_ec_loopc +7257 d8c00580 arg mem_k ,contr +7258 2040707c call bn_testbit +7259 2020f250 branch eckp_0 ,true +725a 6fe084a4 fetch 1 ,mem_ec_infinite +725b 243a725e nbranch eckp_1 ,blank +725c 204071e4 call ecadd +725d 20207250 branch eckp_0 + +eckp_1: +725e 7004a400 jam 0 ,mem_ec_infinite +725f d8c004a8 arg mem_ax ,contr +7260 d8a00538 arg mem_cx ,contw +7261 20407082 call ec_copy +7262 20207250 branch eckp_0 + +ecunmapz: +7263 da200568 arg mem_cz ,rega +7264 d8a00638 arg mem_t3 ,contw +7265 2040714e call bn_invmod +7266 da200638 arg mem_t3 ,rega +7267 d8a005f0 arg mem_t1 ,contw +7268 20407138 call bn_sqrmod +7269 da200538 arg mem_cx ,rega +726a da4005f0 arg mem_t1 ,regb +726b d8a004f0 arg mem_bx ,contw +726c 20407116 call bn_mulmod +726d da200638 arg mem_t3 ,rega +726e da4005f0 arg mem_t1 ,regb +726f d8a00620 arg mem_t2 ,contw +7270 20407116 call bn_mulmod +7271 da200550 arg mem_cy ,rega +7272 da400620 arg mem_t2 ,regb +7273 d8a00508 arg mem_by ,contw +7274 20207116 branch bn_mulmod + +sha_endian_swap2: +7275 efe20006 ifetch 4 ,contr +7276 18002204 force 4 ,rega +7277 18a08a03 increase 3 ,contw + +sha_endian_loop: +7278 e7e08005 istore 1 ,contw +7279 1fecfe00 rshift8 pdata ,pdata +727a 18a08bfe increase -2 ,contw +727b 1a20a3ff increase -1 ,rega +727c 2422f278 nbranch sha_endian_loop ,zero +727d 18a08a05 increase 5 ,contw +727e c2007275 loop sha_endian_swap2 +727f 20600000 rtn + +sha_getw: +7280 18ebfe00 lshift2 queue ,pdata +7281 99608c00 iadd timeup ,contr +7282 efe20006 ifetch 4 ,contr +7283 20600000 rtn + +sha_r: +7284 18006010 force 16 ,alarm +7285 d96004a8 arg memdat ,timeup + +sha_r_loop: +7286 1e008ff9 add alarm ,-7 ,queue +7287 20407280 call sha_getw +7288 98000400 iforce temp +7289 1e008ff0 add alarm ,-16 ,queue +728a 20407280 call sha_getw +728b 98408400 iadd temp ,temp +728c 1e008ffe add alarm ,-2 ,queue +728d 20407280 call sha_getw +728e 1fee7e01 shasx pdata ,1 ,pdata +728f 98408400 iadd temp ,temp +7290 1e008ff1 add alarm ,-15 ,queue +7291 20407280 call sha_getw +7292 1fee7e00 shasx pdata ,0 ,pdata +7293 98408400 iadd temp ,temp +7294 1e0bfe00 lshift2 alarm ,pdata +7295 99608a00 iadd timeup ,contw +7296 e0420005 istoret 4 ,contw +7297 1e00e001 increase 1 ,alarm +7298 2e01fe40 compare 64 ,alarm ,0xff +7299 2420f286 nbranch sha_r_loop ,true +729a 20600000 rtn + +sha_init: +729b d8c007c0 arg memh0 ,contr +729c 18007007 force 7 ,regext_index + +sha_init_0: +729d efe20006 ifetch 4 ,contr +729e 98005e00 iforce regext +729f 1f00f1ff increase -1 ,regext_index +72a0 2021729d branch sha_init_0 ,positive +72a1 20600000 rtn + +sha: +72a2 473fc02f bpatchx patch2f_7 ,mem_patch2f +72a3 20407284 call sha_r +72a4 d8a005a8 arg memahbak ,contw +72a5 18007000 force 0 ,regext_index + +sha_0: +72a6 1de27e00 deposit regext +72a7 e7e20005 istore 4 ,contw +72a8 1f00f001 increase 1 ,regext_index +72a9 2f01fe08 compare 8 ,regext_index ,0xff +72aa 2420f2a6 nbranch sha_0 ,true +72ab 20406df3 call enable_authrom +72ac d9609300 arg memk ,timeup +72ad de0004a8 arg memdat ,alarm +72ae 18007240 force 64 ,loopcnt + +sha_loop: +72af e8420030 ifetcht 4 ,alarm +72b0 efe2000b ifetch 4 ,timeup +72b1 19609604 increase 4 ,timeup +72b2 1e00e004 increase 4 ,alarm +72b3 9840fe00 iadd temp ,pdata +72b4 18007007 force 7 ,regext_index +72b5 9de08400 iadd regext ,temp +72b6 18007004 force 4 ,regext_index +72b7 1dee7e03 shasx regext ,3 ,pdata +72b8 98408400 iadd temp ,temp +72b9 18007005 force 5 ,regext_index +72ba 1de27e00 deposit regext +72bb 18007006 force 6 ,regext_index +72bc 9de2fe00 ixor regext ,pdata +72bd 18007004 force 4 ,regext_index +72be 9de17e00 iand regext ,pdata +72bf 18007006 force 6 ,regext_index +72c0 9de2fe00 ixor regext ,pdata +72c1 98408400 iadd temp ,temp +72c2 18007007 force 7 ,regext_index +72c3 18425e00 copy temp ,regext +72c4 18007003 force 3 ,regext_index +72c5 1de27e00 deposit regext +72c6 9840de00 iadd temp ,regext +72c7 18007000 force 0 ,regext_index +72c8 1de27e00 deposit regext +72c9 18007001 force 1 ,regext_index +72ca 9de10400 iand regext ,temp +72cb 9de1fe00 ior regext ,pdata +72cc 18007002 force 2 ,regext_index +72cd 9de17e00 iand regext ,pdata +72ce 98418400 ior temp ,temp +72cf 18007000 force 0 ,regext_index +72d0 1dee7e02 shasx regext ,2 ,pdata +72d1 9840fe00 iadd temp ,pdata +72d2 18007007 force 7 ,regext_index +72d3 9de0de00 iadd regext ,regext +72d4 980efc00 regexrot +72d5 c20072af loop sha_loop +72d6 d8c005a8 arg memahbak ,contr +72d7 18007000 force 0 ,regext_index + +sha_1: +72d8 efe20006 ifetch 4 ,contr +72d9 9de0de00 iadd regext ,regext +72da 1f00f001 increase 1 ,regext_index +72db 2f01fe08 compare 8 ,regext_index ,0xff +72dc 2420f2d8 nbranch sha_1 ,true +72dd 20206df7 branch disable_authrom + +sha_result: +72de d8a00900 arg memresult ,contw +72df 18007007 force 7 ,regext_index + +sha_regext_save: +72e0 1de27e00 deposit regext +72e1 e7e20005 istore 4 ,contw +72e2 1f00f1ff increase -1 ,regext_index +72e3 202172e0 branch sha_regext_save ,positive +72e4 20600000 rtn + +pad_xor: +72e5 d8a004a8 arg memdat ,contw +72e6 18c08dfc increase -4 ,contr +72e7 1f262210 sub loopcnt ,16 ,rega + +pad_xor_0: +72e8 efe20006 ifetch 4 ,contr +72e9 9842fe00 ixor temp ,pdata +72ea e7e20005 istore 4 ,contw +72eb 18c08df8 increase -8 ,contr +72ec c20072e8 loop pad_xor_0 +72ed 1a227200 copy rega ,loopcnt +72ee 18427e00 deposit temp + +pad_xor_1: +72ef e7e20005 istore 4 ,contw +72f0 c20072ef loop pad_xor_1 +72f1 20600000 rtn + +g_noninit_number_confirm: +72f2 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +72f3 c00172f9 beq encapsulated_minor_type_p256 ,g_noninit_number_confirm_256 +72f4 c000f2f6 beq encapsulated_minor_type_p192 ,g_noninit_number_confirm_192 +72f5 20600000 rtn + +g_noninit_number_confirm_192: +72f6 204072fe call g_noninit0_192 +72f7 204072de call sha_result +72f8 20207324 branch g_common0 + +g_noninit_number_confirm_256: +72f9 20407338 call g_noninit0_256 +72fa 204072de call sha_result +72fb 20207324 branch g_common0 + +g_noninit_192: +72fc 204072fe call g_noninit0_192 +72fd 20207324 branch g_common0 + +g_noninit0_192: +72fe d8c008a0 arg mem_sp_pubkey_remote_x_end ,contr +72ff d8a004a8 arg memdat ,contw +7300 18007206 force 6 ,loopcnt +7301 20407422 call memcpy_dword_swap +7302 d8c0474c arg mem_sp_pubkey_local_x_end ,contr +7303 18007206 force 6 ,loopcnt +7304 20407422 call memcpy_dword_swap +7305 d8c00900 arg mem_sp_random_remote_end ,contr +7306 20407421 call memcpy_dword_swap4 +7307 2040729b call sha_init +7308 204072a2 call sha +7309 d8c008f0 arg mem_sp_random_local_end ,contr +730a d8a004a8 arg memdat ,contw +730b 2020731b branch g_common_192 + +g_init_192: +730c d8c0474c arg mem_sp_pubkey_local_x_end ,contr +730d d8a004a8 arg memdat ,contw +730e 18007206 force 6 ,loopcnt +730f 20407422 call memcpy_dword_swap +7310 d8c008a0 arg mem_sp_pubkey_remote_x_end ,contr +7311 18007206 force 6 ,loopcnt +7312 20407422 call memcpy_dword_swap +7313 d8c008f0 arg mem_sp_random_local_end ,contr +7314 20407421 call memcpy_dword_swap4 +7315 2040729b call sha_init +7316 204072a2 call sha +7317 d8c00900 arg mem_sp_random_remote_end ,contr +7318 d8a004a8 arg memdat ,contw +7319 2040731b call g_common_192 +731a 20207324 branch g_common0 + +g_common_192: +731b 20407421 call memcpy_dword_swap4 +731c 58800000 setarg 0x800000 +731d 1fed7e00 lshift8 pdata ,pdata +731e e7e20005 istore 4 ,contw +731f 18007205 force 5 ,loopcnt +7320 20407d17 call memset0 +7321 58000280 setarg 640 +7322 e7e20005 istore 4 ,contw +7323 202072a2 branch sha + +g_common0: +7324 6fe20900 fetch 4 ,memresult +7325 da2003e8 arg 1000 ,rega +7326 9a26fc00 idiv rega +7327 20407def call wait_div_end +7328 18077e00 remainder pdata +7329 67e2087c store 4 ,mem_gkey +732a 1807fe00 quotient pdata +732b da2003e8 arg 1000 ,rega +732c 9a26fc00 idiv rega +732d 20407def call wait_div_end +732e 18077e00 remainder pdata +732f da2003e8 arg 1000 ,rega +7330 9a2ffe00 imul32 rega ,pdata +7331 684a087c fetcht 4 ,mem_gkey +7332 9840fe00 iadd temp ,pdata +7333 67e2087c store 4 ,mem_gkey +7334 20600000 rtn + +noninit_number_confirm: +7335 20407338 call g_noninit0_256 +7336 204072de call sha_result +7337 20207324 branch g_common0 + +g_noninit0_256: +7338 d8c008a0 arg mem_le_pubkey_remote_x_256 + 32 ,contr +7339 d8a004a8 arg memdat ,contw +733a 18007208 force 8 ,loopcnt +733b 20407422 call memcpy_dword_swap +733c d8c046fc arg mem_sc_pubkey_local_x_256 + 32 ,contr +733d 18007208 force 8 ,loopcnt +733e 20407422 call memcpy_dword_swap +733f 2040729b call sha_init +7340 204072a2 call sha +7341 d8c00900 arg mem_sp_random_remote_end ,contr +7342 d8a004a8 arg memdat ,contw +7343 20407421 call memcpy_dword_swap4 +7344 d8c008f0 arg mem_sp_random_local_end ,contr +7345 20207346 branch g_common_256 + +g_common_256: +7346 20407421 call memcpy_dword_swap4 +7347 58800000 setarg 0x800000 +7348 1fed7e00 lshift8 pdata ,pdata +7349 e7e20005 istore 4 ,contw +734a 18007203 force 3 ,loopcnt +734b 20407d17 call memset0 +734c 58000300 setarg 768 +734d e7e20005 istore 4 ,contw +734e 202072a2 branch sha + +function_f1_192_no_key: +734f 70476e00 jam 0 ,mem_passkey_1bit +7350 20207353 branch function_f1_192_common + +function_f1_192: +7351 6fe0c76c fetch 1 ,mem_ssp_mode_flag +7352 c081734f bne ssp_mode_passkey_entry_flag ,function_f1_192_no_key + +function_f1_192_common: +7353 47404030 bpatchx patch30_0 ,mem_patch30 +7354 58363636 setarg 0x363636 +7355 1fed0400 lshift8 pdata ,temp +7356 18418436 or_into 0x36 ,temp +7357 6fe10940 fetch 2 ,mem_sp_prarm_stack +7358 1fe20c00 copy pdata ,contr +7359 18007204 force 4 ,loopcnt +735a 204072e5 call pad_xor +735b 2040729b call sha_init +735c 204072a2 call sha +735d 6fe10942 fetch 2 ,mem_sp_prarm_stack + 2 +735e 1fe20c00 copy pdata ,contr +735f d8a004a8 arg memdat ,contw +7360 18007206 force 6 ,loopcnt +7361 20407422 call memcpy_dword_swap +7362 6fe10944 fetch 2 ,mem_sp_prarm_stack + 4 +7363 1fe20c00 copy pdata ,contr +7364 18007206 force 6 ,loopcnt +7365 20407422 call memcpy_dword_swap +7366 58800000 setarg 0x800000 +7367 e7e18005 istore 3 ,contw +7368 6fe0c76e fetch 1 ,mem_passkey_1bit +7369 e7e08005 istore 1 ,contw +736a 18007e00 force 0 ,pdata +736b e7e40005 istore 8 ,contw +736c 58000388 setarg 0x0388 +736d e7e20005 istore 4 ,contw + +function_f1_common2: +736e 204072a2 call sha +736f 204072de call sha_result +7370 d8c00900 arg memresult ,contr +7371 d8a005c8 arg memahsave ,contw +7372 20407d0a call memcpy32 +7373 585c5c5c setarg 0x5c5c5c +7374 1fed0400 lshift8 pdata ,temp +7375 1841845c or_into 0x5c ,temp +7376 6fe10940 fetch 2 ,mem_sp_prarm_stack +7377 1fe20c00 copy pdata ,contr +7378 18007204 force 4 ,loopcnt +7379 204072e5 call pad_xor +737a 2040729b call sha_init +737b 204072a2 call sha +737c d8c005e8 arg memahsave_end ,contr +737d d8a004a8 arg memdat ,contw +737e 18007208 force 8 ,loopcnt +737f 20407422 call memcpy_dword_swap +7380 58800000 setarg 0x800000 +7381 1fed7e00 lshift8 pdata ,pdata +7382 e7e20005 istore 4 ,contw +7383 20407d16 call bn_zero +7384 58000300 setarg 0x0300 +7385 e7e20005 istore 4 ,contw +7386 204072a2 call sha +7387 202072de branch sha_result + +function_f2_192: +7388 58363636 setarg 0x363636 +7389 1fed0400 lshift8 pdata ,temp +738a 18418436 or_into 0x36 ,temp +738b d8c008e0 arg mem_sp_dhkey_end ,contr +738c 18007206 force 6 ,loopcnt +738d 204072e5 call pad_xor +738e 2040729b call sha_init +738f 204072a2 call sha +7390 6fe1094c fetch 2 ,mem_sp_prarm_stack + 12 +7391 1fe20c00 copy pdata ,contr +7392 d8a004a8 arg memdat ,contw +7393 20407421 call memcpy_dword_swap4 +7394 6fe1094e fetch 2 ,mem_sp_prarm_stack + 14 +7395 1fe20c00 copy pdata ,contr +7396 20407421 call memcpy_dword_swap4 +7397 5862746c setarg 0x62746c +7398 1fed7e00 lshift8 pdata ,pdata +7399 1fe1fe6b or_into 0x6b ,pdata +739a e7e20005 istore 4 ,contw +739b d8c005f5 arg mem_addr_value_end ,contr +739c 18007203 force 3 ,loopcnt +739d 20407422 call memcpy_dword_swap +739e 58800000 setarg 0x800000 +739f 1fed7e00 lshift8 pdata ,pdata +73a0 e7e20005 istore 4 ,contw +73a1 18007e00 force 0 ,pdata +73a2 e7e40005 istore 8 ,contw +73a3 58000380 setarg 0x0380 +73a4 e7e20005 istore 4 ,contw +73a5 204072a2 call sha +73a6 204072de call sha_result +73a7 d8c00900 arg memresult ,contr +73a8 d8a005c8 arg memahsave ,contw +73a9 20407d0a call memcpy32 +73aa 585c5c5c setarg 0x5c5c5c +73ab 1fed0400 lshift8 pdata ,temp +73ac 1841845c or_into 0x5c ,temp +73ad d8c008e0 arg mem_sp_dhkey_end ,contr +73ae 18007206 force 6 ,loopcnt +73af 204072e5 call pad_xor +73b0 2040729b call sha_init +73b1 204072a2 call sha +73b2 d8c005e8 arg memahsave_end ,contr +73b3 d8a004a8 arg memdat ,contw +73b4 18007208 force 8 ,loopcnt +73b5 20407422 call memcpy_dword_swap +73b6 58800000 setarg 0x800000 +73b7 1fed7e00 lshift8 pdata ,pdata +73b8 e7e20005 istore 4 ,contw +73b9 20407d16 call bn_zero +73ba 58000300 setarg 0x0300 +73bb e7e20005 istore 4 ,contw +73bc 204072a2 call sha +73bd 202072de branch sha_result + +function_f3a_192: +73be 6fe0c76c fetch 1 ,mem_ssp_mode_flag +73bf c08173cf bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin + +function_f3a_common: +73c0 4740c030 bpatchx patch30_1 ,mem_patch30 +73c1 58363636 setarg 0x363636 +73c2 1fed0400 lshift8 pdata ,temp +73c3 18418436 or_into 0x36 ,temp +73c4 d8c008e0 arg mem_sp_dhkey_end ,contr +73c5 18007206 force 6 ,loopcnt +73c6 204072e5 call pad_xor +73c7 2040729b call sha_init +73c8 204072a2 call sha +73c9 d8c00900 arg mem_sp_random_remote_end ,contr +73ca d8a004a8 arg memdat ,contw +73cb 20407421 call memcpy_dword_swap4 +73cc d8c008f0 arg mem_sp_random_local_end ,contr +73cd 20407421 call memcpy_dword_swap4 +73ce 202073e4 branch function_f3_common + +function_f3a_no_pin: +73cf 58000000 setarg 0 +73d0 67e24794 store 4 ,mem_pin +73d1 202073c0 branch function_f3a_common + +function_f3b_no_pin: +73d2 58000000 setarg 0 +73d3 67e24794 store 4 ,mem_pin +73d4 202073d7 branch function_f3b_common + +function_f3b_192: +73d5 6fe0c76c fetch 1 ,mem_ssp_mode_flag +73d6 c08173d2 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin + +function_f3b_common: +73d7 58363636 setarg 0x363636 +73d8 1fed0400 lshift8 pdata ,temp +73d9 18418436 or_into 0x36 ,temp +73da d8c008e0 arg mem_sp_dhkey_end ,contr +73db 18007206 force 6 ,loopcnt +73dc 204072e5 call pad_xor +73dd 2040729b call sha_init +73de 204072a2 call sha +73df d8c008f0 arg mem_sp_random_local_end ,contr +73e0 d8a004a8 arg memdat ,contw +73e1 20407421 call memcpy_dword_swap4 +73e2 d8c00900 arg mem_sp_random_remote_end ,contr +73e3 20407421 call memcpy_dword_swap4 + +function_f3_common: +73e4 58000000 setarg 0x0 +73e5 e7e40005 istore 8 ,contw +73e6 e7e20005 istore 4 ,contw +73e7 6fe24794 fetch 4 ,mem_pin +73e8 e7e20005 istore 4 ,contw +73e9 18a20400 copy contw ,temp +73ea 7005e880 jam 0x80 ,mem_addr_padding +73eb 18420a00 copy temp ,contw +73ec d8c005f8 arg mem_addr_iocap_end ,contr +73ed 20407421 call memcpy_dword_swap4 +73ee 204072a2 call sha +73ef d8a004a8 arg memdat ,contw +73f0 18007207 force 7 ,loopcnt +73f1 20407d17 call memset0 +73f2 e7e20005 istore 4 ,contw +73f3 580003f8 setarg 0x03F8 +73f4 e7e20005 istore 4 ,contw +73f5 204072a2 call sha +73f6 204072de call sha_result +73f7 d8c00900 arg memresult ,contr +73f8 d8a005c8 arg memahsave ,contw +73f9 20407d0a call memcpy32 +73fa 585c5c5c setarg 0x5c5c5c +73fb 1fed0400 lshift8 pdata ,temp +73fc 1841845c or_into 0x5c ,temp +73fd d8c008e0 arg mem_sp_dhkey_end ,contr +73fe 18007206 force 6 ,loopcnt +73ff 204072e5 call pad_xor +7400 2040729b call sha_init +7401 204072a2 call sha +7402 d8c005e8 arg memahsave_end ,contr +7403 d8a004a8 arg memdat ,contw +7404 18007208 force 8 ,loopcnt +7405 20407422 call memcpy_dword_swap +7406 58800000 setarg 0x800000 +7407 1fed7e00 lshift8 pdata ,pdata +7408 e7e20005 istore 4 ,contw +7409 20407d16 call bn_zero +740a 58000300 setarg 0x0300 +740b e7e20005 istore 4 ,contw +740c 204072a2 call sha +740d 202072de branch sha_result + +eckp_calc_init: +740e 7004a5c0 jam 192 ,mem_ec_loopc + +eckp_calc_init_1: +740f 6fe084a5 fetch 1 ,mem_ec_loopc +7410 207a0000 rtn blank +7411 1fe0ffff increase -1 ,pdata +7412 67e084a5 store 1 ,mem_ec_loopc +7413 d8c00580 arg mem_k ,contr +7414 2040707c call bn_testbit +7415 2020f40f branch eckp_calc_init_1 ,true +7416 d8c004a8 arg mem_ax ,contr +7417 d8a00538 arg mem_cx ,contw +7418 20207082 branch ec_copy + +eckp_calc: +7419 20407193 call ecdbl +741a 6fe084a5 fetch 1 ,mem_ec_loopc +741b 1fe0ffff increase -1 ,pdata +741c 67e084a5 store 1 ,mem_ec_loopc +741d d8c00580 arg mem_k ,contr +741e 2040707c call bn_testbit +741f 20608000 rtn true +7420 202071e4 branch ecadd + +memcpy_dword_swap4: +7421 18007204 force 4 ,loopcnt + +memcpy_dword_swap: +7422 18c08dfc increase -4 ,contr + +memcpy_dword_swap_loop: +7423 efe20006 ifetch 4 ,contr +7424 e7e20005 istore 4 ,contw +7425 18c08df8 increase -8 ,contr +7426 c2007423 loop memcpy_dword_swap_loop +7427 20600000 rtn + +function_f1_no_key_256: +7428 70476e00 jam 0 ,mem_passkey_1bit +7429 2020742c branch function_f1_common_256 + +function_f1_256: +742a 6fe0c76c fetch 1 ,mem_ssp_mode_flag +742b c0817428 bne ssp_mode_passkey_entry_flag ,function_f1_no_key_256 + +function_f1_common_256: +742c 58363636 setarg 0x363636 +742d 1fed0400 lshift8 pdata ,temp +742e 18418436 or_into 0x36 ,temp +742f 6fe10940 fetch 2 ,mem_sp_prarm_stack +7430 1fe20c00 copy pdata ,contr +7431 18007204 force 4 ,loopcnt +7432 204072e5 call pad_xor +7433 2040729b call sha_init +7434 204072a2 call sha +7435 6fe10942 fetch 2 ,mem_sp_prarm_stack + 2 +7436 1fe20c00 copy pdata ,contr +7437 d8a004a8 arg memdat ,contw +7438 18007208 force 8 ,loopcnt +7439 20407422 call memcpy_dword_swap +743a 6fe10944 fetch 2 ,mem_sp_prarm_stack + 4 +743b 1fe20c00 copy pdata ,contr +743c 18007208 force 8 ,loopcnt +743d 20407422 call memcpy_dword_swap +743e 204072a2 call sha +743f d8a004a8 arg memdat ,contw +7440 58800000 setarg 0x800000 +7441 e7e18005 istore 3 ,contw +7442 6fe0c76e fetch 1 ,mem_passkey_1bit +7443 e7e08005 istore 1 ,contw +7444 df200007 arg 7 ,loopcnt +7445 20407d17 call memset0 +7446 58000408 setarg 0x0408 +7447 e7e20005 istore 4 ,contw +7448 2020736e branch function_f1_common2 + +function_f3a: +7449 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +744a c001744d beq encapsulated_minor_type_p256 ,function_f3a_256 +744b c000f3be beq encapsulated_minor_type_p192 ,function_f3a_192 +744c 20600000 rtn + +function_f3a_256: +744d 6fe0c76c fetch 1 ,mem_ssp_mode_flag +744e c0817486 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin_256 + +function_f3a_common_256: +744f 58363636 setarg 0x363636 +7450 1fed0400 lshift8 pdata ,temp +7451 18418436 or_into 0x36 ,temp +7452 d8c008e0 arg mem_sp_dhkey_end ,contr +7453 18007208 force 8 ,loopcnt +7454 204072e5 call pad_xor +7455 2040729b call sha_init +7456 204072a2 call sha +7457 d8c00900 arg mem_sp_random_remote_end ,contr +7458 d8a004a8 arg memdat ,contw +7459 20407421 call memcpy_dword_swap4 +745a d8c008f0 arg mem_sp_random_local_end ,contr +745b 20407421 call memcpy_dword_swap4 + +function_f3_common_256: +745c 58000000 setarg 0x0 +745d e7e40005 istore 8 ,contw +745e e7e20005 istore 4 ,contw +745f 6fe24794 fetch 4 ,mem_pin +7460 e7e20005 istore 4 ,contw +7461 18a20400 copy contw ,temp +7462 7005e880 jam 0x80 ,mem_addr_padding +7463 18420a00 copy temp ,contw +7464 d8c005f8 arg mem_addr_iocap_end ,contr +7465 20407421 call memcpy_dword_swap4 +7466 204072a2 call sha +7467 d8a004a8 arg memdat ,contw +7468 18007207 force 7 ,loopcnt +7469 20407d17 call memset0 +746a e7e20005 istore 4 ,contw +746b 580003f8 setarg 0x03F8 +746c e7e20005 istore 4 ,contw +746d 204072a2 call sha +746e 204072de call sha_result +746f d8c00900 arg memresult ,contr +7470 d8a005c8 arg memahsave ,contw +7471 20407d0a call memcpy32 +7472 585c5c5c setarg 0x5c5c5c +7473 1fed0400 lshift8 pdata ,temp +7474 1841845c or_into 0x5c ,temp +7475 d8c008e0 arg mem_sp_dhkey_end ,contr +7476 18007208 force 8 ,loopcnt + +sha_end_common: +7477 204072e5 call pad_xor +7478 2040729b call sha_init +7479 204072a2 call sha +747a d8c005e8 arg memahsave_end ,contr +747b d8a004a8 arg memdat ,contw +747c 18007208 force 8 ,loopcnt +747d 20407422 call memcpy_dword_swap +747e 58800000 setarg 0x800000 +747f 1fed7e00 lshift8 pdata ,pdata +7480 e7e20005 istore 4 ,contw +7481 20407d16 call bn_zero +7482 58000300 setarg 0x0300 +7483 e7e20005 istore 4 ,contw +7484 204072a2 call sha +7485 202072de branch sha_result + +function_f3a_no_pin_256: +7486 58000000 setarg 0 +7487 67e24794 store 4 ,mem_pin +7488 2020744f branch function_f3a_common_256 + +function_f3b_no_pin_256: +7489 58000000 setarg 0 +748a 67e24794 store 4 ,mem_pin +748b 20207492 branch function_f3b_common_256 + +function_f3b: +748c 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +748d c0017490 beq encapsulated_minor_type_p256 ,function_f3b_256 +748e c000f3d5 beq encapsulated_minor_type_p192 ,function_f3b_192 +748f 20600000 rtn + +function_f3b_256: +7490 6fe0c76c fetch 1 ,mem_ssp_mode_flag +7491 c0817489 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin_256 + +function_f3b_common_256: +7492 58363636 setarg 0x363636 +7493 1fed0400 lshift8 pdata ,temp +7494 18418436 or_into 0x36 ,temp +7495 d8c008e0 arg mem_sp_dhkey_end ,contr +7496 18007208 force 8 ,loopcnt +7497 204072e5 call pad_xor +7498 2040729b call sha_init +7499 204072a2 call sha +749a d8c008f0 arg mem_sp_random_local_end ,contr +749b d8a004a8 arg memdat ,contw +749c 20407421 call memcpy_dword_swap4 +749d d8c00900 arg mem_sp_random_remote_end ,contr +749e 20407421 call memcpy_dword_swap4 +749f 2020745c branch function_f3_common_256 + +function_f2: +74a0 6fe0c645 fetch 1 ,mem_encapsulated_minor_type +74a1 c00174a4 beq encapsulated_minor_type_p256 ,function_f2_256 +74a2 c000f388 beq encapsulated_minor_type_p192 ,function_f2_192 +74a3 20600000 rtn + +function_f2_256: +74a4 58363636 setarg 0x363636 +74a5 1fed0400 lshift8 pdata ,temp +74a6 18418436 or_into 0x36 ,temp +74a7 d8c008e0 arg mem_sp_dhkey_end ,contr +74a8 18007208 force 8 ,loopcnt +74a9 204072e5 call pad_xor +74aa 2040729b call sha_init +74ab 204072a2 call sha +74ac 6fe1094c fetch 2 ,mem_sp_prarm_stack + 12 +74ad 1fe20c00 copy pdata ,contr +74ae d8a004a8 arg memdat ,contw +74af 20407421 call memcpy_dword_swap4 +74b0 6fe1094e fetch 2 ,mem_sp_prarm_stack + 14 +74b1 1fe20c00 copy pdata ,contr +74b2 20407421 call memcpy_dword_swap4 +74b3 5862746c setarg 0x62746c +74b4 1fed7e00 lshift8 pdata ,pdata +74b5 1fe1fe6b or_into 0x6b ,pdata +74b6 e7e20005 istore 4 ,contw +74b7 d8c005f5 arg mem_addr_value_end ,contr +74b8 18007203 force 3 ,loopcnt +74b9 20407422 call memcpy_dword_swap +74ba 58800000 setarg 0x800000 +74bb 1fed7e00 lshift8 pdata ,pdata +74bc e7e20005 istore 4 ,contw +74bd 18007e00 force 0 ,pdata +74be e7e40005 istore 8 ,contw +74bf 58000380 setarg 0x0380 +74c0 e7e20005 istore 4 ,contw +74c1 204072a2 call sha +74c2 204072de call sha_result +74c3 d8c00900 arg memresult ,contr +74c4 d8a005c8 arg memahsave ,contw +74c5 20407d0a call memcpy32 +74c6 585c5c5c setarg 0x5c5c5c +74c7 1fed0400 lshift8 pdata ,temp +74c8 1841845c or_into 0x5c ,temp +74c9 d8c008e0 arg mem_sp_dhkey_end ,contr +74ca 18007208 force 8 ,loopcnt +74cb 20207477 branch sha_end_common + +function_h3: +74cc 6fe340a8 fetch 6 ,mem_lap +74cd 67e305e9 store 6 ,mem_addr_value +74ce 6fe30041 fetch 6 ,mem_plap +74cf e7e30005 istore 6 ,contw +74d0 58363636 setarg 0x363636 +74d1 1fed0400 lshift8 pdata ,temp +74d2 18418436 or_into 0x36 ,temp +74d3 d8c041db arg mem_link_key + 16 ,contr +74d4 18007204 force 4 ,loopcnt +74d5 204072e5 call pad_xor +74d6 2040729b call sha_init +74d7 204072a2 call sha +74d8 58627461 setarg 0x627461 +74d9 1fed7e00 lshift8 pdata ,pdata +74da 1fe1fe6b or_into 0x6b ,pdata +74db 67e204a8 store 4 ,memdat +74dc d8c005f5 arg mem_addr_value + 12 ,contr +74dd 18007203 force 3 ,loopcnt +74de 20407422 call memcpy_dword_swap +74df d8c046b2 arg mem_ccm_iv + 8 ,contr +74e0 df200002 arg 2 ,loopcnt +74e1 20407422 call memcpy_dword_swap +74e2 58800000 setarg 0x800000 +74e3 1fed7e00 lshift8 pdata ,pdata +74e4 e7e20005 istore 4 ,contw +74e5 df200004 arg 4 ,loopcnt +74e6 20407d17 call memset0 +74e7 580002c0 setarg 704 +74e8 e7e20005 istore 4 ,contw +74e9 204072a2 call sha +74ea 204072de call sha_result +74eb d8c00900 arg memresult ,contr +74ec d8a005c8 arg memahsave ,contw +74ed 20407d0a call memcpy32 +74ee 585c5c5c setarg 0x5c5c5c +74ef 1fed0400 lshift8 pdata ,temp +74f0 1841845c or_into 0x5c ,temp +74f1 d8c041db arg mem_link_key + 16 ,contr +74f2 18007204 force 4 ,loopcnt +74f3 20207477 branch sha_end_common + +function_h4: +74f4 6fe340a8 fetch 6 ,mem_lap +74f5 67e305e9 store 6 ,mem_addr_value +74f6 6fe30041 fetch 6 ,mem_plap +74f7 e7e30005 istore 6 ,contw +74f8 58363636 setarg 0x363636 +74f9 1fed0400 lshift8 pdata ,temp +74fa 18418436 or_into 0x36 ,temp +74fb d8c041db arg mem_link_key + 16 ,contr +74fc 18007204 force 4 ,loopcnt +74fd 204072e5 call pad_xor +74fe 2040729b call sha_init +74ff 204072a2 call sha +7500 58627464 setarg 0x627464 +7501 1fed7e00 lshift8 pdata ,pdata +7502 1fe1fe6b or_into 0x6b ,pdata +7503 67e204a8 store 4 ,memdat +7504 d8c005f5 arg mem_addr_value + 12 ,contr +7505 18007203 force 3 ,loopcnt +7506 20407422 call memcpy_dword_swap +7507 58800000 setarg 0x800000 +7508 1fed7e00 lshift8 pdata ,pdata +7509 e7e20005 istore 4 ,contw +750a df200005 arg 5 ,loopcnt +750b 20407d17 call memset0 +750c 58000280 setarg 640 +750d e7e20005 istore 4 ,contw +750e 204072a2 call sha +750f 204072de call sha_result +7510 d8c00900 arg memresult ,contr +7511 d8a005c8 arg memahsave ,contw +7512 20407d0a call memcpy32 +7513 585c5c5c setarg 0x5c5c5c +7514 1fed0400 lshift8 pdata ,temp +7515 1841845c or_into 0x5c ,temp +7516 d8c041db arg mem_link_key + 16 ,contr +7517 18007204 force 4 ,loopcnt +7518 20207477 branch sha_end_common + +function_h5: +7519 d8c00910 arg mem_sp_calc_result_high ,contr +751a d8a00454 arg mem_input_store ,contw +751b 20407d0c call memcpy16 +751c 58000900 setarg mem_sp_random_remote + 16 +751d 67e10940 store 2 ,mem_sp_prarm_stack +751e 58000434 setarg mem_random_number + 16 +751f e7e10005 istore 2 ,contw +7520 58363636 setarg 0x363636 +7521 1fed0400 lshift8 pdata ,temp +7522 18418436 or_into 0x36 ,temp +7523 d8c00464 arg mem_input_store + 16 ,contr +7524 18007204 force 4 ,loopcnt +7525 204072e5 call pad_xor +7526 2040729b call sha_init +7527 204072a2 call sha +7528 d8a004a8 arg memdat ,contw +7529 6fe10940 fetch 2 ,mem_sp_prarm_stack +752a 1fe20c00 copy pdata ,contr +752b 20407421 call memcpy_dword_swap4 +752c 6fe10942 fetch 2 ,mem_sp_prarm_stack + 2 +752d 1fe20c00 copy pdata ,contr +752e 20407421 call memcpy_dword_swap4 +752f 58800000 setarg 0x800000 +7530 1fed7e00 lshift8 pdata ,pdata +7531 e7e20005 istore 4 ,contw +7532 df200003 arg 3 ,loopcnt +7533 20407d17 call memset0 +7534 58000300 setarg 768 +7535 e7e20005 istore 4 ,contw +7536 204072a2 call sha +7537 204072de call sha_result +7538 d8c00900 arg memresult ,contr +7539 d8a005c8 arg memahsave ,contw +753a 20407d0a call memcpy32 +753b 585c5c5c setarg 0x5c5c5c +753c 1fed0400 lshift8 pdata ,temp +753d 1841845c or_into 0x5c ,temp +753e d8c00464 arg mem_input_store + 16 ,contr +753f 18007204 force 4 ,loopcnt +7540 20207477 branch sha_end_common + +sp_initialize_256: +7541 47414030 bpatchx patch30_2 ,mem_patch30 +7542 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +7543 243a7562 nbranch sp_pubkey_calc_256 ,blank + +sc_reset: +7544 7046ba00 jam sp_calc_standby ,mem_sc_calc +7545 7046bb00 jam sp_key_invalid ,mem_sc_local_key_invalid +7546 20600000 rtn + +sp_wait_pubkey_calc_256_done: +7547 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +7548 207a0000 rtn blank +7549 6fe0c6bb fetch 1 ,mem_sc_local_key_invalid +754a c1018000 rtneq sp_key_valid_256 +754b 20407597 call sp_calc_sequence_256 +754c 20207547 branch sp_wait_pubkey_calc_256_done + +sp_debug_private_256: +754d d8a046bc arg mem_sc_private_key_256 ,contw +754e 38001abd setsect 0 ,0x1abd +754f 3805b34f setsect 1 ,0x1b34f +7550 38099b8a setsect 2 ,0x19b8a +7551 380e6562 setsect 3 ,0x26562 +7552 e7e48005 istore 9 ,contw +7553 380340b7 setsect 0 ,0x340b7 +7554 38041efa setsect 1 ,0x1efa +7555 3808aff6 setsect 2 ,0xaff6 +7556 380cfd41 setsect 3 ,0xfd41 +7557 e7e48005 istore 9 ,contw +7558 3803d210 setsect 0 ,0x3d210 +7559 38066cf8 setsect 1 ,0x26cf8 +755a 380b874c setsect 2 ,0x3874c +755b 380f157c setsect 3 ,0x3157c +755c e7e48005 istore 9 ,contw +755d 3802d4a3 setsect 0 ,0x2d4a3 +755e 3807d27d setsect 1 ,0x3d27d +755f 38080003 setsect 2 ,0x3 +7560 e7e28005 istore 5 ,contw +7561 20600000 rtn + +sp_pubkey_calc_256: +7562 6fe0c6bb fetch 1 ,mem_sc_local_key_invalid +7563 c1800000 rtnne sp_key_invalid +7564 6fe0c6ba fetch 1 ,mem_sc_calc +7565 c1800000 rtnne sp_calc_standby +7566 20406e52 call init_memp_256 +7567 d8a046bc arg mem_sc_private_key_256 ,contw +7568 18000e0f force 15 ,queue +7569 20407032 call random_generator +756a 180a7e00 random pdata +756b 1fe37e00 rshift pdata ,pdata +756c e7e10005 istore 2 ,contw +756d 6fe0c6b7 fetch 1 ,mem_sp_debug_mode +756e 245a754d ncall sp_debug_private_256 ,blank +756f d8a00628 arg mem_k_256 ,contw +7570 d8c046bc arg mem_sc_private_key_256 ,contr +7571 20407d0a call memcpy32 +7572 d8a00508 arg mem_ax_256 ,contw +7573 d8c00820 arg mem_gx_256 ,contr +7574 20407cff call memcpy64 +7575 d8a00548 arg mem_az_256 ,contw +7576 20407d22 call clear_mem_256 +7577 70054801 jam 1 ,mem_az_256 +7578 204075af call eckp_calc_init_256 +7579 7046ba03 jam sp_calc_pubkey_256 ,mem_sc_calc +757a 20600000 rtn + +sp_pubkey_generated_256: +757b d8a046dc arg mem_sc_pubkey_local_x_256 ,contw +757c d8c00568 arg mem_bx_256 ,contr +757d 20407cff call memcpy64 +757e 7046bb03 jam sp_key_valid_256 ,mem_sc_local_key_invalid +757f 7046ba00 jam sp_calc_standby ,mem_sc_calc +7580 20600000 rtn + +sp_dhkey_calc_256: +7581 6fe0887b fetch 1 ,mem_sp_dhkey_invalid +7582 c1800000 rtnne sp_key_invalid +7583 6fe0c6ba fetch 1 ,mem_sc_calc +7584 c1800000 rtnne sp_calc_standby +7585 d8a00628 arg mem_k_256 ,contw +7586 d8c046bc arg mem_sc_private_key_256 ,contr +7587 20407d0a call memcpy32 +7588 d8a00508 arg mem_ax_256 ,contw +7589 d8c00880 arg mem_le_pubkey_remote_x_256 ,contr +758a 20407cff call memcpy64 +758b d8a00548 arg mem_az_256 ,contw +758c 20407d22 call clear_mem_256 +758d 70054801 jam 1 ,mem_az_256 +758e 204075af call eckp_calc_init_256 +758f 7046ba04 jam sp_calc_dhkey_256 ,mem_sc_calc +7590 20600000 rtn + +sp_dhkey_generated_256: +7591 d8a008c0 arg mem_le_dhkey_256 ,contw +7592 d8c00568 arg mem_bx_256 ,contr +7593 20407d0a call memcpy32 +7594 70087b03 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +7595 7046ba00 jam sp_calc_standby ,mem_sc_calc +7596 20600000 rtn + +sp_calc_sequence_256: +7597 6fe0c6b8 fetch 1 ,mem_secure_connections_enable +7598 207a0000 rtn blank +7599 6fe0c6ba fetch 1 ,mem_sc_calc +759a 207a0000 rtn blank +759b 1fe0fe80 increase 0x80 ,pdata +759c 67e0c6ba store 1 ,mem_sc_calc +759d c3838000 rtnbit1 7 +759e 6fe104a5 fetch 2 ,mem_ec_loopc +759f 203a75a1 branch sp_calc_sequence_done_256 ,blank +75a0 202075a7 branch eckp_calc_256 + +sp_calc_sequence_done_256: +75a1 4741c030 bpatchx patch30_3 ,mem_patch30 +75a2 204075bc call ecunmapz_256 +75a3 6fe0c6ba fetch 1 ,mem_sc_calc +75a4 c001f57b beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +75a5 c0027591 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +75a6 20600000 rtn + +eckp_calc_256: +75a7 204075ce call ecdbl_256 +75a8 6fe104a5 fetch 2 ,mem_ec_loopc +75a9 1fe0ffff increase -1 ,pdata +75aa 67e104a5 store 2 ,mem_ec_loopc +75ab d8c00628 arg mem_k_256 ,contr +75ac 2040707c call bn_testbit +75ad 20608000 rtn true +75ae 2020761f branch ecadd_256 + +eckp_calc_init_256: +75af 47424030 bpatchx patch30_4 ,mem_patch30 +75b0 58000100 setarg 256 +75b1 67e104a5 store 2 ,mem_ec_loopc + +eckp_calc_init_256_1: +75b2 6fe104a5 fetch 2 ,mem_ec_loopc +75b3 207a0000 rtn blank +75b4 1fe0ffff increase -1 ,pdata +75b5 67e104a5 store 2 ,mem_ec_loopc +75b6 d8c00628 arg mem_k_256 ,contr +75b7 2040707c call bn_testbit +75b8 2020f5b2 branch eckp_calc_init_256_1 ,true +75b9 d8c00508 arg mem_ax_256 ,contr +75ba d8a005c8 arg mem_cx_256 ,contw +75bb 20207cfe branch memcpy96 + +ecunmapz_256: +75bc da200608 arg mem_cz_256 ,rega +75bd d8a00708 arg mem_t3_256 ,contw +75be 2040768b call bn_invmod_256 +75bf da200708 arg mem_t3_256 ,rega +75c0 d8a006a8 arg mem_t1_256 ,contw +75c1 20407761 call bn_sqrmod_256 +75c2 da2005c8 arg mem_cx_256 ,rega +75c3 da4006a8 arg mem_t1_256 ,regb +75c4 d8a00568 arg mem_bx_256 ,contw +75c5 204076c9 call bn_mulmod_256 +75c6 da200708 arg mem_t3_256 ,rega +75c7 da4006a8 arg mem_t1_256 ,regb +75c8 d8a006e8 arg mem_t2_256 ,contw +75c9 204076c9 call bn_mulmod_256 +75ca da2005e8 arg mem_cy_256 ,rega +75cb da4006e8 arg mem_t2_256 ,regb +75cc d8a00588 arg mem_by_256 ,contw +75cd 202076c9 branch bn_mulmod_256 + +ecdbl_256: +75ce da200608 arg mem_cz_256 ,rega +75cf d8a006e8 arg mem_t2_256 ,contw +75d0 20407761 call bn_sqrmod_256 +75d1 da2006e8 arg mem_t2_256 ,rega +75d2 d8a00708 arg mem_t3_256 ,contw +75d3 20407761 call bn_sqrmod_256 +75d4 da200800 arg mem_a_256 ,rega +75d5 da400708 arg mem_t3_256 ,regb +75d6 d8a00708 arg mem_t3_256 ,contw +75d7 204076c9 call bn_mulmod_256 +75d8 da2005c8 arg mem_cx_256 ,rega +75d9 d8a006e8 arg mem_t2_256 ,contw +75da 20407761 call bn_sqrmod_256 +75db d8c006e8 arg mem_t2_256 ,contr +75dc d8a006a8 arg mem_t1_256 ,contw +75dd 20407d0a call memcpy32 +75de da2006a8 arg mem_t1_256 ,rega +75df 20407768 call bn_lshiftmod_256 +75e0 da2006e8 arg mem_t2_256 ,rega +75e1 da4006a8 arg mem_t1_256 ,regb +75e2 d8a006e8 arg mem_t2_256 ,contw +75e3 20407765 call bn_addmod_256 +75e4 da2006e8 arg mem_t2_256 ,rega +75e5 da400708 arg mem_t3_256 ,regb +75e6 d8a006e8 arg mem_t2_256 ,contw +75e7 20407765 call bn_addmod_256 +75e8 d8c005c8 arg mem_cx_256 ,contr +75e9 d8a006a8 arg mem_t1_256 ,contw +75ea 20407d0a call memcpy32 +75eb da2005e8 arg mem_cy_256 ,rega +75ec d8a00708 arg mem_t3_256 ,contw +75ed 20407761 call bn_sqrmod_256 +75ee da2006a8 arg mem_t1_256 ,rega +75ef 20407768 call bn_lshiftmod_256 +75f0 da2006a8 arg mem_t1_256 ,rega +75f1 20407768 call bn_lshiftmod_256 +75f2 da2006a8 arg mem_t1_256 ,rega +75f3 da400708 arg mem_t3_256 ,regb +75f4 d8a006a8 arg mem_t1_256 ,contw +75f5 204076c9 call bn_mulmod_256 +75f6 da200708 arg mem_t3_256 ,rega +75f7 d8a006c8 arg mem_t0_256 ,contw +75f8 20407761 call bn_sqrmod_256 +75f9 da2006c8 arg mem_t0_256 ,rega +75fa 20407768 call bn_lshiftmod_256 +75fb da2006c8 arg mem_t0_256 ,rega +75fc 20407768 call bn_lshiftmod_256 +75fd da2006c8 arg mem_t0_256 ,rega +75fe 20407768 call bn_lshiftmod_256 +75ff d8c005e8 arg mem_cy_256 ,contr +7600 d8a00708 arg mem_t3_256 ,contw +7601 20407d0a call memcpy32 +7602 da200708 arg mem_t3_256 ,rega +7603 20407768 call bn_lshiftmod_256 +7604 da200708 arg mem_t3_256 ,rega +7605 da400608 arg mem_cz_256 ,regb +7606 d8a00608 arg mem_cz_256 ,contw +7607 204076c9 call bn_mulmod_256 +7608 da2006e8 arg mem_t2_256 ,rega +7609 d8a00708 arg mem_t3_256 ,contw +760a 20407761 call bn_sqrmod_256 +760b da200708 arg mem_t3_256 ,rega +760c da4006a8 arg mem_t1_256 ,regb +760d d8a00708 arg mem_t3_256 ,contw +760e 2040777e call bn_submod_256 +760f da200708 arg mem_t3_256 ,rega +7610 da4006a8 arg mem_t1_256 ,regb +7611 d8a005c8 arg mem_cx_256 ,contw +7612 2040777e call bn_submod_256 +7613 da2006a8 arg mem_t1_256 ,rega +7614 da4005c8 arg mem_cx_256 ,regb +7615 d8a00708 arg mem_t3_256 ,contw +7616 2040777e call bn_submod_256 +7617 da200708 arg mem_t3_256 ,rega +7618 da4006e8 arg mem_t2_256 ,regb +7619 d8a00708 arg mem_t3_256 ,contw +761a 204076c9 call bn_mulmod_256 +761b da200708 arg mem_t3_256 ,rega +761c da4006c8 arg mem_t0_256 ,regb +761d d8a005e8 arg mem_cy_256 ,contw +761e 2020777e branch bn_submod_256 + +ecadd_256: +761f da200548 arg mem_az_256 ,rega +7620 d8a00728 arg mem_t7_256 ,contw +7621 20407761 call bn_sqrmod_256 +7622 da2005c8 arg mem_cx_256 ,rega +7623 da400728 arg mem_t7_256 ,regb +7624 d8a006c8 arg mem_t0_256 ,contw +7625 204076c9 call bn_mulmod_256 +7626 da200548 arg mem_az_256 ,rega +7627 da400728 arg mem_t7_256 ,regb +7628 d8a00728 arg mem_t7_256 ,contw +7629 204076c9 call bn_mulmod_256 +762a da2005e8 arg mem_cy_256 ,rega +762b da400728 arg mem_t7_256 ,regb +762c d8a006a8 arg mem_t1_256 ,contw +762d 204076c9 call bn_mulmod_256 +762e da200608 arg mem_cz_256 ,rega +762f d8a00728 arg mem_t7_256 ,contw +7630 20407761 call bn_sqrmod_256 +7631 da200508 arg mem_ax_256 ,rega +7632 da400728 arg mem_t7_256 ,regb +7633 d8a006e8 arg mem_t2_256 ,contw +7634 204076c9 call bn_mulmod_256 +7635 da200608 arg mem_cz_256 ,rega +7636 da400728 arg mem_t7_256 ,regb +7637 d8a00728 arg mem_t7_256 ,contw +7638 204076c9 call bn_mulmod_256 +7639 da200528 arg mem_ay_256 ,rega +763a da400728 arg mem_t7_256 ,regb +763b d8a00708 arg mem_t3_256 ,contw +763c 204076c9 call bn_mulmod_256 +763d da4006c8 arg mem_t0_256 ,regb +763e da2006e8 arg mem_t2_256 ,rega +763f d8a00728 arg mem_t7_256 ,contw +7640 2040777e call bn_submod_256 +7641 da2006c8 arg mem_t0_256 ,rega +7642 da4006e8 arg mem_t2_256 ,regb +7643 d8a006c8 arg mem_t0_256 ,contw +7644 20407765 call bn_addmod_256 +7645 da4006a8 arg mem_t1_256 ,regb +7646 da200708 arg mem_t3_256 ,rega +7647 d8a006e8 arg mem_t2_256 ,contw +7648 2040777e call bn_submod_256 +7649 da2006a8 arg mem_t1_256 ,rega +764a da400708 arg mem_t3_256 ,regb +764b d8a006a8 arg mem_t1_256 ,contw +764c 20407765 call bn_addmod_256 +764d da2006a8 arg mem_t1_256 ,rega +764e da400728 arg mem_t7_256 ,regb +764f d8a006a8 arg mem_t1_256 ,contw +7650 204076c9 call bn_mulmod_256 +7651 da200608 arg mem_cz_256 ,rega +7652 da400548 arg mem_az_256 ,regb +7653 d8a00708 arg mem_t3_256 ,contw +7654 204076c9 call bn_mulmod_256 +7655 da200708 arg mem_t3_256 ,rega +7656 da400728 arg mem_t7_256 ,regb +7657 d8a00608 arg mem_cz_256 ,contw +7658 204076c9 call bn_mulmod_256 +7659 da200728 arg mem_t7_256 ,rega +765a d8a00728 arg mem_t7_256 ,contw +765b 20407761 call bn_sqrmod_256 +765c da200728 arg mem_t7_256 ,rega +765d da4006c8 arg mem_t0_256 ,regb +765e d8a00708 arg mem_t3_256 ,contw +765f 204076c9 call bn_mulmod_256 +7660 da200728 arg mem_t7_256 ,rega +7661 da4006a8 arg mem_t1_256 ,regb +7662 d8a006a8 arg mem_t1_256 ,contw +7663 204076c9 call bn_mulmod_256 +7664 da2006e8 arg mem_t2_256 ,rega +7665 d8a005c8 arg mem_cx_256 ,contw +7666 20407761 call bn_sqrmod_256 +7667 da2005c8 arg mem_cx_256 ,rega +7668 da400708 arg mem_t3_256 ,regb +7669 d8a005c8 arg mem_cx_256 ,contw +766a 2040777e call bn_submod_256 +766b d8c005c8 arg mem_cx_256 ,contr +766c d8a00728 arg mem_t7_256 ,contw +766d 20407d0a call memcpy32 +766e da200728 arg mem_t7_256 ,rega +766f 20407768 call bn_lshiftmod_256 +7670 da200708 arg mem_t3_256 ,rega +7671 da400728 arg mem_t7_256 ,regb +7672 d8a00708 arg mem_t3_256 ,contw +7673 2040777e call bn_submod_256 +7674 da200708 arg mem_t3_256 ,rega +7675 da4006e8 arg mem_t2_256 ,regb +7676 d8a006e8 arg mem_t2_256 ,contw +7677 204076c9 call bn_mulmod_256 +7678 da2006e8 arg mem_t2_256 ,rega +7679 da4006a8 arg mem_t1_256 ,regb +767a d8a005e8 arg mem_cy_256 ,contw +767b 2040777e call bn_submod_256 +767c da2005e8 arg mem_cy_256 ,rega +767d da4007e0 arg mem_p_256 ,regb +767e d8a005e8 arg mem_cy_256 ,contw +767f 18002600 force 0 ,regc +7680 6fe085e8 fetch 1 ,mem_cy_256 +7681 2feffe00 isolate1 0 ,pdata +7682 2040f763 call bn_add_256 ,true +7683 1a626000 copy regc ,alarm +7684 da2005e8 arg mem_cy_256 ,rega +7685 20407793 call bn_rshift_256 +7686 6fe08607 fetch 1 ,mem_cy5_256 +7687 2e0ffe00 isolate1 0 ,alarm +7688 7920fe07 setflag true ,7 ,pdata +7689 67e08607 store 1 ,mem_cy5_256 +768a 20600000 rtn + +bn_invmod_256: +768b 18a21600 copy contw ,timeup +768c d8a006c8 arg mem_tmp0_256 ,contw +768d 20407d22 call clear_mem_256 +768e 18007e00 force 0 ,pdata +768f 67e206e8 store 4 ,mem_t2_256 +7690 7006c801 jam 1 ,mem_tmp0_256 +7691 d8a00648 arg mem_tmp1_256 ,contw +7692 20407d24 call clear_mem_512 +7693 d8c007e0 arg mem_p_256 ,contr +7694 d8a00688 arg mem_tmp2_256 ,contw +7695 20407d0a call memcpy32 +7696 1a220c00 copy rega ,contr +7697 d8a006a8 arg mem_tmp3_256 ,contw +7698 20407d0a call memcpy32 + +bn_invmod_256_2: +7699 d8c006a8 arg mem_tmp3_256 ,contr +769a 2040779d call bn_eq_zero_256 +769b 203a76c2 branch bn_invmod_256_0 ,blank +769c da2006a8 arg mem_tmp3_256 ,rega +769d da4006c8 arg mem_tmp0_256 ,regb +769e 204077a0 call bn_rshifteven_256 +769f da200688 arg mem_tmp2_256 ,rega +76a0 da400648 arg mem_tmp1_256 ,regb +76a1 204077a0 call bn_rshifteven_256 +76a2 da2006a8 arg mem_tmp3_256 ,rega +76a3 da400688 arg mem_tmp2_256 ,regb +76a4 20407799 call bn_bigeq_256 +76a5 202176b4 branch bn_invmod_256_1 ,positive +76a6 da200688 arg mem_tmp2_256 ,rega +76a7 da4006a8 arg mem_tmp3_256 ,regb +76a8 1a220a00 copy rega ,contw +76a9 20407791 call bn_sub_256 +76aa da2006c8 arg mem_tmp0_256 ,rega +76ab da400648 arg mem_tmp1_256 ,regb +76ac 1a420a00 copy regb ,contw +76ad 20407763 call bn_add_256 +76ae efe08011 ifetch 1 ,rega +76af 9a60a600 iadd regc ,regc +76b0 efe08012 ifetch 1 ,regb +76b1 9a60fe00 iadd regc ,pdata +76b2 e7e08012 istore 1 ,regb +76b3 20207699 branch bn_invmod_256_2 + +bn_invmod_256_1: +76b4 da2006a8 arg mem_tmp3_256 ,rega +76b5 da400688 arg mem_tmp2_256 ,regb +76b6 1a220a00 copy rega ,contw +76b7 20407791 call bn_sub_256 +76b8 da200648 arg mem_tmp1_256 ,rega +76b9 da4006c8 arg mem_tmp0_256 ,regb +76ba 1a420a00 copy regb ,contw +76bb 20407763 call bn_add_256 +76bc efe08011 ifetch 1 ,rega +76bd 9a60a600 iadd regc ,regc +76be efe08012 ifetch 1 ,regb +76bf 9a60fe00 iadd regc ,pdata +76c0 e7e08012 istore 1 ,regb +76c1 20207699 branch bn_invmod_256_2 + +bn_invmod_256_0: +76c2 da200648 arg mem_tmp1_256 ,rega +76c3 19620a00 copy timeup ,contw +76c4 204076f2 call bn_p256mod +76c5 da2007e0 arg mem_p_256 ,rega +76c6 19622400 copy timeup ,regb +76c7 19620a00 copy timeup ,contw +76c8 2020777e branch bn_submod_256 + +bn_mulmod_256: +76c9 18a21600 copy contw ,timeup +76ca 18007000 force 0 ,regext_index +76cb d8a00648 arg mem_tmp1_256 ,contw +76cc 20407d24 call clear_mem_512 +76cd d8a0099e arg mem_regext ,contw +76ce 20407d24 call clear_mem_512 +76cf 1a220c00 copy rega ,contr +76d0 70099e00 jam 0 ,mem_regext +76d1 58000000 setarg 0 +76d2 2040775b call bn_load_mem +76d3 1a420c00 copy regb ,contr +76d4 2040775f call bn_load_256 +76d5 18000e00 force 0 ,queue +76d6 d8a00648 arg mem_tmp1_256 ,contw + +bn_mulmod_256_1: +76d7 d840099e arg mem_regext ,temp +76d8 18e22400 copy queue ,regb +76d9 1a4bfe00 lshift2 regb ,pdata +76da 9840a400 iadd temp ,regb +76db 18000400 force 0 ,temp +76dc 18002600 force 0 ,regc + +bn_mulmod_256_0: +76dd efe20005 ifetch 4 ,contw +76de 98002200 iforce rega +76df efe20012 ifetch 4 ,regb +76e0 1a627000 copy regc ,regext_index +76e1 9deffe00 imul32 regext ,pdata +76e2 9a20fe00 iadd rega ,pdata +76e3 9840fe00 iadd temp ,pdata +76e4 e7e20005 istore 4 ,contw +76e5 1fef0400 rshift32 pdata ,temp +76e6 1a60a601 increase 1 ,regc +76e7 2a61fe08 compare 8 ,regc ,0xff +76e8 2420f6dd nbranch bn_mulmod_256_0 ,true +76e9 18427e00 deposit temp +76ea e7e20005 istore 4 ,contw +76eb 18a08be0 increase -32 ,contw +76ec 18e08e01 increase 1 ,queue +76ed 28e1fe08 compare 8 ,queue ,0xff +76ee 2420f6d7 nbranch bn_mulmod_256_1 ,true +76ef da200648 arg mem_tmp1_256 ,rega +76f0 19620a00 copy timeup ,contw +76f1 202076f2 branch bn_p256mod + +bn_p256mod: +76f2 4742c030 bpatchx patch30_5 ,mem_patch30 +76f3 18a21600 copy contw ,timeup +76f4 1a226000 copy rega ,alarm +76f5 da400688 arg mem_tmp2_256 ,regb +76f6 1a420a00 copy regb ,contw +76f7 20407d1f call memset0_4 +76f8 e7e40005 istore 8 ,contw +76f9 1a208c2c add rega ,44 ,contr +76fa 20407d06 call memcpy8 +76fb 20407d02 call memcpy12 +76fc 1a422200 copy regb ,rega +76fd 20407768 call bn_lshiftmod_256 +76fe da400688 arg mem_tmp2_256 ,regb +76ff 1e022200 copy alarm ,rega +7700 19620a00 copy timeup ,contw +7701 20407765 call bn_addmod_256 +7702 da400688 arg mem_tmp2_256 ,regb +7703 1a420a00 copy regb ,contw +7704 20407d1f call memset0_4 +7705 e7e40005 istore 8 ,contw +7706 1e008c30 add alarm ,48 ,contr +7707 20407d0c call memcpy16 +7708 20407d1f call memset0_4 +7709 1a422200 copy regb ,rega +770a 20407768 call bn_lshiftmod_256 +770b da400688 arg mem_tmp2_256 ,regb +770c 19622200 copy timeup ,rega +770d 1a220a00 copy rega ,contw +770e 20407765 call bn_addmod_256 +770f da400688 arg mem_tmp2_256 ,regb +7710 1a420a00 copy regb ,contw +7711 1e008c20 add alarm ,32 ,contr +7712 20407d02 call memcpy12 +7713 20407d1f call memset0_4 +7714 e7e40005 istore 8 ,contw +7715 1e008c38 add alarm ,56 ,contr +7716 20407d06 call memcpy8 +7717 19622200 copy timeup ,rega +7718 1a220a00 copy rega ,contw +7719 20407765 call bn_addmod_256 +771a da400688 arg mem_tmp2_256 ,regb +771b 1a420a00 copy regb ,contw +771c 1e008c24 add alarm ,36 ,contr +771d 20407d02 call memcpy12 +771e 1e008c34 add alarm ,52 ,contr +771f 20407d02 call memcpy12 +7720 1e008c34 add alarm ,52 ,contr +7721 20407d03 call memcpy4 +7722 1e008c20 add alarm ,32 ,contr +7723 20407d03 call memcpy4 +7724 19622200 copy timeup ,rega +7725 1a220a00 copy rega ,contw +7726 20407765 call bn_addmod_256 +7727 da400688 arg mem_tmp2_256 ,regb +7728 1a420a00 copy regb ,contw +7729 1e008c2c add alarm ,44 ,contr +772a 20407d02 call memcpy12 +772b 20407d1f call memset0_4 +772c e7e40005 istore 8 ,contw +772d 1e008c20 add alarm ,32 ,contr +772e 20407d03 call memcpy4 +772f 1e008c28 add alarm ,40 ,contr +7730 20407d03 call memcpy4 +7731 19622200 copy timeup ,rega +7732 1a220a00 copy rega ,contw +7733 2040777e call bn_submod_256 +7734 da400688 arg mem_tmp2_256 ,regb +7735 1a420a00 copy regb ,contw +7736 1e008c30 add alarm ,48 ,contr +7737 20407d06 call memcpy8 +7738 20407d06 call memcpy8 +7739 18007e00 force 0 ,pdata +773a e7e40005 istore 8 ,contw +773b 1e008c24 add alarm ,36 ,contr +773c 20407d03 call memcpy4 +773d 1e008c2c add alarm ,44 ,contr +773e 20407d03 call memcpy4 +773f 19622200 copy timeup ,rega +7740 1a220a00 copy rega ,contw +7741 2040777e call bn_submod_256 +7742 da400688 arg mem_tmp2_256 ,regb +7743 1a420a00 copy regb ,contw +7744 1e008c34 add alarm ,52 ,contr +7745 20407d02 call memcpy12 +7746 1e008c20 add alarm ,32 ,contr +7747 20407d02 call memcpy12 +7748 20407d1f call memset0_4 +7749 1e008c30 add alarm ,48 ,contr +774a 20407d03 call memcpy4 +774b 19622200 copy timeup ,rega +774c 1a220a00 copy rega ,contw +774d 2040777e call bn_submod_256 +774e da400688 arg mem_tmp2_256 ,regb +774f 1a420a00 copy regb ,contw +7750 1e008c38 add alarm ,56 ,contr +7751 20407d06 call memcpy8 +7752 20407d1f call memset0_4 +7753 1e008c24 add alarm ,36 ,contr +7754 20407d02 call memcpy12 +7755 20407d1f call memset0_4 +7756 1e008c34 add alarm ,52 ,contr +7757 20407d03 call memcpy4 +7758 19622200 copy timeup ,rega +7759 1a220a00 copy rega ,contw +775a 2020777e branch bn_submod_256 + +bn_load_mem: +775b 18007220 force 32 ,loopcnt +775c d8a0099e arg mem_regext ,contw +775d 98a08a00 iadd contw ,contw +775e 20207d5f branch memcpy + +bn_load_256: +775f 18007208 force 8 ,loopcnt +7760 20207111 branch bn_load_0 + +bn_sqrmod_256: +7761 1a222400 copy rega ,regb +7762 202076c9 branch bn_mulmod_256 + +bn_add_256: +7763 18007208 force 8 ,loopcnt +7764 202070a2 branch bn_add + 1 + +bn_addmod_256: +7765 20407763 call bn_add_256 +7766 18a22200 copy contw ,rega +7767 20207769 branch bn_lshiftmod_ismod_256 + +bn_lshiftmod_256: +7768 20407796 call bn_lshift_256 + +bn_lshiftmod_ismod_256: +7769 2a6ffe00 isolate1 0 ,regc +776a 2020f772 branch bn_lshiftmod_p_256 ,true +776b da4007e0 arg mem_p_256 ,regb +776c 1a222600 copy rega ,regc +776d 1a20a3e0 increase -32 ,rega +776e 20407799 call bn_bigeq_256 +776f 24610000 nrtn positive +7770 1a622200 copy regc ,rega +7771 2020777a branch sub_p2_256 + +bn_lshiftmod_p_256: +7772 2040777a call sub_p2_256 +7773 1a222600 copy rega ,regc +7774 1a20a3e0 increase -32 ,rega +7775 da4007e0 arg mem_p_256 ,regb +7776 20407799 call bn_bigeq_256 +7777 24610000 nrtn positive +7778 1a622200 copy regc ,rega +7779 2020777a branch sub_p2_256 + +sub_p2_256: +777a 1a20a3e0 increase -32 ,rega +777b da4007e0 arg mem_p_256 ,regb +777c 1a220a00 copy rega ,contw +777d 20207791 branch bn_sub_256 + +bn_submod_256: +777e 20407791 call bn_sub_256 +777f 2020f788 branch bn_submod_256_np ,true +7780 18a0a3e0 add contw ,-32 ,rega +7781 da4007e0 arg mem_p_256 ,regb +7782 20407799 call bn_bigeq_256 +7783 24610000 nrtn positive +7784 da4007e0 arg mem_p_256 ,regb +7785 18a0a3e0 add contw ,-32 ,rega +7786 1a220a00 copy rega ,contw +7787 20207791 branch bn_sub_256 + +bn_submod_256_np: +7788 18a0a3e0 add contw ,-32 ,rega +7789 da4007e0 arg mem_p_256 ,regb +778a 1a220a00 copy rega ,contw +778b 20407763 call bn_add_256 +778c 20608000 rtn true +778d 18a0a3e0 add contw ,-32 ,rega +778e da4007e0 arg mem_p_256 ,regb +778f 1a220a00 copy rega ,contw +7790 20207763 branch bn_add_256 + +bn_sub_256: +7791 18007208 force 8 ,loopcnt +7792 202070b0 branch bn_sub + 1 + +bn_rshift_256: +7793 18007208 force 8 ,loopcnt +7794 1a20a21c increase 28 ,rega +7795 202070bf branch bn_rshift + +bn_lshift_256: +7796 18007208 force 8 ,loopcnt +7797 18002600 force 0 ,regc +7798 202070cd branch bn_lshift_0 + +bn_bigeq_256: +7799 18007208 force 8 ,loopcnt +779a 1a20a21c increase 28 ,rega +779b 1a40a41c increase 28 ,regb +779c 20207097 branch bn_bigeq_0 + +bn_eq_zero_256: +779d efe40006 ifetch 8 ,contr +779e 247a0000 nrtn blank +779f 20207085 branch bn_eq_zero + +bn_rshifteven_256: +77a0 1a226000 copy rega ,alarm + +bn_rshifteven_256_1: +77a1 1e022200 copy alarm ,rega +77a2 efe08011 ifetch 1 ,rega +77a3 2feffe00 isolate1 0 ,pdata +77a4 20608000 rtn true +77a5 20407793 call bn_rshift_256 +77a6 efe08012 ifetch 1 ,regb +77a7 2fec0000 isolate0 0 ,pdata +77a8 2020f7b0 branch bn_rshifteven_256_0 ,true +77a9 da2007e0 arg mem_p_256 ,rega +77aa 1a420a00 copy regb ,contw +77ab 20407763 call bn_add_256 +77ac efe08012 ifetch 1 ,regb +77ad 9a60fe00 iadd regc ,pdata +77ae e7e08012 istore 1 ,regb +77af 1a40a5e0 increase -32 ,regb + +bn_rshifteven_256_0: +77b0 1a40a220 add regb ,32 ,rega +77b1 18007209 force 9 ,loopcnt +77b2 204070bf call bn_rshift +77b3 202077a1 branch bn_rshifteven_256_1 + +ui_init: +77b4 204015eb call lpm_disable_exen_output +77b5 20758000 rtn wake +77b6 204077bb call ui_button_init +77b7 20407861 call ui_timer_init +77b8 202077f0 branch ui_led_init_global + +ui_dispatch: +77b9 20407811 call ui_led_dispatch +77ba 20207850 branch ui_timer_check + +ui_button_init: +77bb 6fe0c790 fetch 1 ,mem_ui_button_gpio +77bc c17f8000 rtneq ui_button_gpio_disable +77bd 98000400 iforce temp +77be 20406069 call gpio_config_output +77bf 6848c790 fetcht 1 ,mem_ui_button_gpio +77c0 20406065 call gpio_out_inactive +77c1 20000064 nop 100 +77c2 6848c790 fetcht 1 ,mem_ui_button_gpio +77c3 20406050 call gpio_config_input +77c4 202077c5 branch ui_button_polling + +ui_button_polling: +77c5 47434030 bpatchx patch30_6 ,mem_patch30 +77c6 6fe0c790 fetch 1 ,mem_ui_button_gpio +77c7 c17f8000 rtneq ui_button_gpio_disable +77c8 1fe20400 copy pdata ,temp +77c9 20406059 call gpio_get_bit +77ca 2420f7d7 nbranch ui_button_up ,true + +ui_button_down: +77cb 204077e1 call ui_button_check_long_press +77cc 6fe1478c fetch 2 ,mem_ui_state_map +77cd 79207e0c set1 ui_state_btn_down ,pdata +77ce 67e1478c store 2 ,mem_ui_state_map +77cf 6fe0c783 fetch 1 ,mem_ui_button_last_state +77d0 c1000000 rtneq ui_button_state_down +77d1 70478300 jam ui_button_state_down ,mem_ui_button_last_state +77d2 6fe0c78f fetch 1 ,mem_ui_button_timeout +77d3 67e0c782 store 1 ,mem_ui_button_timer +77d4 204077e8 call lpm_button_get_wake_lock +77d5 70095b2c jam bt_evt_button_down ,mem_fifo_temp +77d6 20207871 branch ui_ipc_send_event + +ui_button_up: +77d7 6fe1478c fetch 2 ,mem_ui_state_map +77d8 793ffe0c set0 ui_state_btn_down ,pdata +77d9 67e1478c store 2 ,mem_ui_state_map +77da 6fe0c783 fetch 1 ,mem_ui_button_last_state +77db c1008000 rtneq ui_button_state_up +77dc 70478301 jam ui_button_state_up ,mem_ui_button_last_state +77dd 70478200 jam 0 ,mem_ui_button_timer +77de 204077ea call lpm_button_clean_wake_lock +77df 70095b2d jam bt_evt_button_up ,mem_fifo_temp +77e0 20207871 branch ui_ipc_send_event + +ui_button_check_long_press: +77e1 6fe0c782 fetch 1 ,mem_ui_button_timer +77e2 207a0000 rtn blank +77e3 1fe0ffff increase -1 ,pdata +77e4 67e0c782 store 1 ,mem_ui_button_timer +77e5 247a0000 nrtn blank +77e6 70095b10 jam bt_evt_button_long_pressed ,mem_fifo_temp +77e7 20207871 branch ui_ipc_send_event + +lpm_button_get_wake_lock: +77e8 d8e00007 arg wake_lock_button ,queue +77e9 202015ba branch lpm_get_wake_lock + +lpm_button_clean_wake_lock: +77ea d8e00007 arg wake_lock_button ,queue +77eb 202015be branch lpm_put_wake_lock + +calc_curr_struct_prt: +77ec 6fe1448d fetch 2 ,mem_ui_led_struct_ptr +77ed 1a2fa40b mul32 rega ,led_offset_length ,regb +77ee 9a40a400 iadd regb ,regb +77ef 20600000 rtn + +ui_led_init_global: +77f0 6fe0c48c fetch 1 ,mem_ui_led_struct_num +77f1 207a0000 rtn blank +77f2 1fe27200 copy pdata ,loopcnt +77f3 6fe1448d fetch 2 ,mem_ui_led_struct_ptr +77f4 1fe22400 copy pdata ,regb + +ui_led_init_loop: +77f5 1a40a602 add regb ,led_offset_led_gpio ,regc +77f6 e8408013 ifetcht 1 ,regc +77f7 20406069 call gpio_config_output +77f8 2040781a call ui_led_off_static +77f9 1a40a40b increase led_offset_length ,regb +77fa c20077f5 loop ui_led_init_loop +77fb 20600000 rtn + +ui_led_on_global: +77fc 204077ec call calc_curr_struct_prt +77fd 58000002 setarg ui_led_state_lighting +77fe e7e08012 istore 1 ,regb +77ff 2040784a call ui_led_stop_timer +7800 2020781f branch ui_led_on_static + +ui_led_blink_stop_global: + +ui_led_off_global: +7801 204077ec call calc_curr_struct_prt +7802 58000003 setarg ui_led_state_darking +7803 e7e08012 istore 1 ,regb +7804 2040784a call ui_led_stop_timer +7805 2020781a branch ui_led_off_static + +ui_led_blink_start_global: +7806 204077ec call calc_curr_struct_prt +7807 58000001 setarg ui_led_state_blink_start +7808 e7e08012 istore 1 ,regb +7809 580000ff setarg led_infinite_flash_num +780a e7e08005 istore 1 ,contw +780b 2020781a branch ui_led_off_static + +ui_led_set_style_global: +780c 204077ec call calc_curr_struct_prt +780d df20000b arg led_offset_length ,loopcnt +780e 1a620c00 copy regc ,contr +780f 1a420a00 copy regb ,contw +7810 20207d52 branch memcpy_fast + +ui_led_dispatch: +7811 6fe0c48c fetch 1 ,mem_ui_led_struct_num +7812 207a0000 rtn blank +7813 da200000 arg 0 ,rega + +ui_led_blink_polling: +7814 20407824 call ui_led_change_style_by_type +7815 1a20a201 increase 1 ,rega +7816 6fe0c48c fetch 1 ,mem_ui_led_struct_num +7817 9a267c00 isub rega ,null +7818 20628000 rtn zero +7819 20207814 branch ui_led_blink_polling + +ui_led_off_static: +781a 1a40a602 add regb ,led_offset_led_gpio ,regc +781b e8408013 ifetcht 1 ,regc +781c 6fe0c09a fetch 1 ,mem_device_option +781d c0044933 beq dvc_op_mouse ,mouse_ui_led_off_static +781e 20206065 branch gpio_out_inactive + +ui_led_on_static: +781f 1a40a602 add regb ,led_offset_led_gpio ,regc +7820 e8408013 ifetcht 1 ,regc +7821 6fe0c09a fetch 1 ,mem_device_option +7822 c004493f beq dvc_op_mouse ,mouse_ui_led_on_static +7823 20206069 branch gpio_out_active + +ui_led_change_style_by_type: +7824 1a208e0b add rega ,ui_led_blink ,queue +7825 20407d74 call timer_check +7826 247a0000 nrtn blank +7827 204077ec call calc_curr_struct_prt +7828 efe08012 ifetch 1 ,regb +7829 c001781f beq ui_led_state_lighting ,ui_led_on_static +782a c001f81a beq ui_led_state_darking ,ui_led_off_static +782b c000781a beq ui_led_state_blink_stop ,ui_led_off_static +782c c002f838 beq ui_led_state_blink_darking ,ui_led_blink_state_darking + +ui_led_blink_state_lighting: +782d 2040781f call ui_led_on_static +782e 1a40a607 add regb ,led_offset_cb_ledon ,regc +782f 20407cc8 call push_stack +7830 efe10013 ifetch 2 ,regc +7831 20407e05 call callback_func +7832 20407cd4 call pop_stack +7833 58000005 setarg ui_led_state_blink_darking +7834 e7e08012 istore 1 ,regb +7835 1a40a603 add regb ,led_offset_on_time ,regc +7836 efe10013 ifetch 2 ,regc +7837 20207848 branch ui_led_blink_timer_start + +ui_led_blink_state_darking: +7838 2040781a call ui_led_off_static +7839 1a40a609 add regb ,led_offset_cb_ledoff ,regc +783a 20407cc8 call push_stack +783b efe10013 ifetch 2 ,regc +783c 20407e05 call callback_func +783d 20407cd4 call pop_stack +783e 1a40a601 add regb ,led_offset_blink_count ,regc +783f efe08013 ifetch 1 ,regc +7840 c07ff844 beq led_infinite_flash_num ,ui_led_blink_infinite +7841 1fe0ffff increase -1 ,pdata +7842 e7e08013 istore 1 ,regc +7843 203a7801 branch ui_led_blink_stop_global ,blank + +ui_led_blink_infinite: +7844 58000004 setarg ui_led_state_blink_lighting +7845 e7e08012 istore 1 ,regb +7846 1a40a605 add regb ,led_offset_off_time ,regc +7847 efe10013 ifetch 2 ,regc + +ui_led_blink_timer_start: +7848 1a208e0b add rega ,ui_led_blink ,queue +7849 20207d66 branch timer_init + +ui_led_stop_timer: +784a 58000000 setarg 0 +784b 20207848 branch ui_led_blink_timer_start + +ui_timer_timeout: +784c 58001000 setarg 0x1000 +784d 1ff07e00 lshift16 pdata ,pdata +784e 9a40a400 iadd regb ,regb +784f 20600000 rtn + +ui_timer_check: +7850 4743c030 bpatchx patch30_7 ,mem_patch30 +7851 da200000 arg 0 ,rega +7852 684a4784 fetcht 4 ,mem_ui_timer_last_btclk +7853 1c422400 copy clkn_bt ,regb +7854 1a427e00 copy regb ,pdata +7855 98467c00 isub temp ,null +7856 2441784c ncall ui_timer_timeout ,positive + +ui_timer_check_loop: +7857 1a427e00 copy regb ,pdata +7858 184084a0 increase 160 ,temp +7859 184084a0 increase 160 ,temp +785a 98467c00 isub temp ,null +785b 24217864 nbranch ui_timer_check_end ,positive +785c 1a20a201 increase 1 ,rega +785d 1a217e0f and rega ,0x0f ,pdata +785e 243a7857 nbranch ui_timer_check_loop ,blank +785f da200000 arg 0 ,rega +7860 2040786a call ui_timer_check_send_evt + +ui_timer_init: +7861 1c427e00 copy clkn_bt ,pdata +7862 67e24784 store 4 ,mem_ui_timer_last_btclk +7863 20600000 rtn + +ui_timer_check_end: +7864 1a227e00 copy rega ,pdata +7865 207a0000 rtn blank +7866 18408560 increase -160 ,temp +7867 18408560 increase -160 ,temp +7868 793f841c set0 28 ,temp +7869 604a4784 storet 4 ,mem_ui_timer_last_btclk + +ui_timer_check_send_evt: +786a 2020317b branch app_evt_timer + +ui_ipc_get_lock: +786b 70477001 jam 1 ,mem_ipc_lock_bt + +ui_ipc_get_lock_wait: +786c 6fe0c771 fetch 1 ,mem_ipc_lock_c51 +786d 243a786c nbranch ui_ipc_get_lock_wait ,blank +786e 20600000 rtn + +ui_ipc_put_lock: +786f 70477000 jam 0 ,mem_ipc_lock_bt +7870 20600000 rtn + +ui_ipc_send_event: +7871 47444031 bpatchx patch31_0 ,mem_patch31 +7872 2040786b call ui_ipc_get_lock +7873 1a227e00 copy rega ,pdata +7874 67e20953 store 4 ,mem_ipc_rega_temp +7875 da204772 arg mem_ipc_fifo_bt2c51 ,rega +7876 20407e25 call fifo_in +7877 6fe20953 fetch 4 ,mem_ipc_rega_temp +7878 1fe22200 copy pdata ,rega +7879 2020786f branch ui_ipc_put_lock + +ui_ipc_send_cmd: +787a 4744c031 bpatchx patch31_1 ,mem_patch31 +787b 2040786b call ui_ipc_get_lock +787c 1a227e00 copy rega ,pdata +787d 67e20953 store 4 ,mem_ipc_rega_temp +787e da20477a arg mem_ipc_fifo_c512bt ,rega +787f 20407e25 call fifo_in +7880 6fe20953 fetch 4 ,mem_ipc_rega_temp +7881 1fe22200 copy pdata ,rega +7882 2020786f branch ui_ipc_put_lock + +ui_ipc_clean_all_fifo: +7883 58000000 setarg 0 +7884 67e4477a store util_fifo_len ,mem_ipc_fifo_c512bt +7885 67e44772 store util_fifo_len ,mem_ipc_fifo_bt2c51 +7886 20600000 rtn + +check_51cmd: +7887 47454031 bpatchx patch31_2 ,mem_patch31 +7888 6fe0c1db fetch 1 ,mem_hci_cmd +7889 247a0000 nrtn blank +788a da20477a arg mem_ipc_fifo_c512bt ,rega +788b 20407e3d call fifo_is_empty +788c 207a0000 rtn blank +788d 70095200 jam ipc_continue_process ,mem_ipc_skip_continue_proc +788e 20407892 call check_51cmd_once +788f 6fe08952 fetch 1 ,mem_ipc_skip_continue_proc +7890 203a7887 branch check_51cmd ,blank +7891 20600000 rtn + +check_51cmd_once: +7892 2040786b call ui_ipc_get_lock +7893 da20477a arg mem_ipc_fifo_c512bt ,rega +7894 20407e31 call fifo_out +7895 1fe20400 copy pdata ,temp +7896 2040786f call ui_ipc_put_lock +7897 4745c031 bpatchx patch31_3 ,mem_patch31 +7898 18427e00 copy temp ,pdata +7899 207a0000 rtn blank +789a c000f8c4 beq bt_cmd_start_discovery ,check_51cmd_start_discovery +789b c00178c9 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +789c c001f8cf beq bt_cmd_reconnect ,check_51cmd_reconnect +789d c006f8ee beq bt_cmd_start_adv ,check_51cmd_adv +789e c00778f4 beq bt_cmd_stop_adv ,check_51cmd_stop_adv +789f c007f8f9 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +78a0 c00878ff beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +78a1 c009f909 beq bt_cmd_led_off ,check_51cmd_led_off +78a2 c00a790b beq bt_cmd_led_on ,check_51cmd_led_on +78a3 c00af90d beq bt_cmd_led_blink ,check_51cmd_led_start_blink +78a4 c00b7917 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +78a5 c00bf91a beq bt_cmd_le_start_scan ,check_51cmd_start_scan +78a6 c00c791c beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +78a7 c00cf91f beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +78a8 c00f7931 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +78a9 67e0895b store 1 ,mem_fifo_temp +78aa 204059e1 call lmo_fifo_check +78ab 243a78c2 nbranch check_51cmd_restore ,blank + +check_51cmd_once_continue: +78ac 6fe0895b fetch 1 ,mem_fifo_temp +78ad c584f8bd bmark0 mark_context ,check_51cmd_check_idle +78ae 47464031 bpatchx patch31_4 ,mem_patch31 +78af 6fe0895b fetch 1 ,mem_fifo_temp +78b0 c00278d1 beq bt_cmd_disconnect ,check_51cmd_disconnect +78b1 c002f8d4 beq bt_cmd_enter_sniff ,check_51cmd_enter_sniff +78b2 c00378df beq bt_cmd_exit_sniff ,check_51cmd_exit_sniff +78b3 c00578e1 beq bt_cmd_set_pin_code ,check_51cmd_pincode +78b4 c008f904 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +78b5 c00df927 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +78b6 c0097908 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +78b7 c00ef928 beq bt_cmd_role_switch ,check_51cmd_role_switch +78b8 c00fe025 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +78b9 c0106027 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +78ba c010f933 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +78bb c012df55 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +78bc 20600000 rtn + +check_51cmd_check_idle: +78bd 67e0895b store 1 ,mem_fifo_temp +78be 20400a61 call context_check_idle +78bf 2022f8c2 branch check_51cmd_restore ,zero +78c0 20400a69 call context_search_plap +78c1 24628000 nrtn zero + +check_51cmd_restore: +78c2 70095201 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +78c3 2020787a branch ui_ipc_send_cmd + +check_51cmd_start_discovery: +78c4 6fe1478c fetch 2 ,mem_ui_state_map +78c5 79207e06 set1 ui_state_bt_discovery ,pdata +78c6 67e1478c store 2 ,mem_ui_state_map +78c7 70409b03 jam 3 ,mem_scan_mode +78c8 20600000 rtn + +check_51cmd_stop_discovery: +78c9 70478a00 jam 0 ,mem_hid_handshake_timer_count +78ca 70409b00 jam 0 ,mem_scan_mode +78cb 6fe1478c fetch 2 ,mem_ui_state_map +78cc 793ffe06 set0 ui_state_bt_discovery ,pdata +78cd 67e1478c store 2 ,mem_ui_state_map +78ce 20600000 rtn + +check_51cmd_reconnect: +78cf 7041db05 jam hci_cmd_create_conn ,mem_hci_cmd +78d0 20600000 rtn + +check_51cmd_disconnect: +78d1 70007d07 jam lmp_detach ,mem_lmo_opcode2 +78d2 70039e13 jam other_end_terminated ,mem_disconn_reason_send +78d3 20600000 rtn + +check_51cmd_enter_sniff: +78d4 70007d17 jam lmp_sniff_req ,mem_lmo_opcode2 +78d5 d8a003ac arg mem_sniff_payload ,contw +78d6 58000000 setarg 0 +78d7 2d0ffe1b isolate1 27 ,clke_bt +78d8 7920fe01 setflag true ,1 ,pdata +78d9 e7e08005 istore 1 ,contw +78da 58000000 setarg 0 +78db e7e10005 istore 2 ,contw +78dc 6fe34455 fetch 6 ,mem_sniff_param_interval +78dd e7e30005 istore 6 ,contw +78de 20600000 rtn + +check_51cmd_exit_sniff: +78df 70007d18 jam lmp_unsniff_req ,mem_lmo_opcode2 +78e0 20600000 rtn + +check_51cmd_pincode: +78e1 7003a802 jam pincode_state_pincode_ready ,mem_pincode_state +78e2 6fe0804c fetch 1 ,mem_op +78e3 c28178e7 bbit1 op_inrand_req ,check_51cmd_pincode_pair_passive +78e4 20405a14 call tid_initiate +78e5 70007d08 jam lmp_in_rand ,mem_lmo_opcode2 +78e6 20600000 rtn + +check_51cmd_pincode_pair_passive: +78e7 793ffe02 set0 op_inrand_req ,pdata +78e8 67e0804c store 1 ,mem_op +78e9 204056f2 call lmp_accept_inrand +78ea 58000000 setarg 0 +78eb 7934fe01 setflag master ,smap_lmptid ,pdata +78ec 67e08080 store 1 ,mem_lmo_tid2 +78ed 20600000 rtn + +check_51cmd_adv: +78ee 70442701 jam on ,mem_le_adv_enable +78ef 70442a00 jam adv_ind ,mem_le_adv_type +78f0 6fe1478c fetch 2 ,mem_ui_state_map +78f1 79207e0b set1 ui_state_ble_adv ,pdata +78f2 67e1478c store 2 ,mem_ui_state_map +78f3 20600000 rtn + +check_51cmd_stop_adv: +78f4 6fe1478c fetch 2 ,mem_ui_state_map +78f5 793ffe0b set0 ui_state_ble_adv ,pdata +78f6 67e1478c store 2 ,mem_ui_state_map +78f7 70442700 jam off ,mem_le_adv_enable +78f8 20600000 rtn + +check_51cmd_direct_adv: +78f9 70442701 jam on ,mem_le_adv_enable +78fa 70442a01 jam adv_direct_ind ,mem_le_adv_type +78fb 6fe1478c fetch 2 ,mem_ui_state_map +78fc 79207e0b set1 ui_state_ble_adv ,pdata +78fd 67e1478c store 2 ,mem_ui_state_map +78fe 20600000 rtn + +check_51cmd_stop_direct_adv: +78ff 6fe1478c fetch 2 ,mem_ui_state_map +7900 793ffe0b set0 ui_state_ble_adv ,pdata +7901 67e1478c store 2 ,mem_ui_state_map +7902 70442700 jam off ,mem_le_adv_enable +7903 20600000 rtn + +check_51cmd_le_disconnect: +7904 58000014 setarg 20 +7905 67e102b5 store 2 ,mem_le_superto +7906 67e14394 store 2 ,mem_le_init_superto +7907 20202187 branch le_send_terminate_ind_user_terminated + +check_51cmd_ble_update_connect_param: +7908 20201f57 branch le_l2cap_tx_update_req + +check_51cmd_led_off: +7909 da200000 arg 0 ,rega +790a 20207801 branch ui_led_off_global + +check_51cmd_led_on: +790b da200000 arg 0 ,rega +790c 202077fc branch ui_led_on_global + +check_51cmd_led_start_blink: +790d da200000 arg 0 ,rega +790e 204077ec call calc_curr_struct_prt +790f efe08012 ifetch 1 ,regb +7910 c000f914 beq ui_led_state_blink_start ,check_51cmd_led_start_blink_in_blink +7911 c0027914 beq ui_led_state_blink_lighting ,check_51cmd_led_start_blink_in_blink +7912 c002f914 beq ui_led_state_blink_darking ,check_51cmd_led_start_blink_in_blink +7913 20207806 branch ui_led_blink_start_global + +check_51cmd_led_start_blink_in_blink: +7914 efe08006 ifetch 1 ,contr +7915 c17f8000 rtneq led_infinite_flash_num +7916 20207806 branch ui_led_blink_start_global + +check_51cmd_le_start_con: +7917 7043e201 jam on ,mem_le_scan_enable +7918 7041db1b jam hci_cmd_le_create_conn ,mem_hci_cmd +7919 20600000 rtn + +check_51cmd_start_scan: +791a 7043e201 jam on ,mem_le_scan_enable +791b 20600000 rtn + +check_51cmd_stop_scan: +791c 7043e200 jam off ,mem_le_scan_enable +791d 7041db00 jam 0 ,mem_hci_cmd +791e 20600000 rtn + +check_51cmd_hibernate: +791f 6fe1445d fetch 2 ,mem_cb_before_hibernate +7920 20407e05 call callback_func +7921 6fe0c790 fetch 1 ,mem_ui_button_gpio +7922 c07ff925 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +7923 1fe20400 copy pdata ,temp +7924 20406050 call gpio_config_input + +check_51cmd_hibernate_btn_disabled: +7925 20407883 call ui_ipc_clean_all_fifo +7926 2020148c branch lpm_hibernate + +check_51cmd_le_smp_sec_req: +7927 20201f99 branch le_send_smp_security_request + +check_51cmd_role_switch: +7928 70007d34 jam lmp_slot_offset ,mem_lmo_opcode2 +7929 79200003 set1 mark_switch_initiated ,mark +792a 24748000 nrtn master +792b 70464200 jam switch_flag_init ,mem_switch_flag +792c 70007d13 jam lmp_switch_req ,mem_lmo_opcode2 +792d 6fe080bd fetch 1 ,mem_connection_options +792e 793ffe02 set0 connection_switch ,pdata +792f 67e080bd store 1 ,mem_connection_options +7930 20600000 rtn + +check_51cmd_bb_reconn_cancel: +7931 18000e03 force page_length_timer ,queue +7932 20207d65 branch timer_stop + +check_51cmd_dhkey_not_accept: +7933 20405a1d call tid_set_reply +7934 70007e41 jam lmp_dhkey_check ,mem_lmi_opcode2 +7935 2020568e branch lmp_reject_pdu_not_allowed + +ui_check_paring_button: +7936 6fe0c78c fetch 1 ,mem_ui_state_map +7937 c4060000 rtnbit0 ui_state_btn_down +7938 c4038000 rtnbit0 ui_state_bt_reconnect +7939 20207931 branch check_51cmd_bb_reconn_cancel + +queue_init: +793a 6fe1448a fetch 2 ,mem_queue_ptr +793b 1fe08a02 add pdata ,queue_offset_curr_num ,contw +793c 58000000 setarg 0 +793d e7e18005 istore 3 ,contw +793e 20600000 rtn + +queue_push: +793f 20407e56 call disable_user +7940 20407989 call queue_full +7941 207a0000 rtn blank +7942 6fe1448a fetch 2 ,mem_queue_ptr +7943 1fe0a402 add pdata ,queue_offset_curr_num ,regb +7944 e8408012 ifetcht 1 ,regb +7945 18408401 increase 1 ,temp +7946 e0408012 istoret 1 ,regb +7947 e840803f ifetcht 1 ,pdata +7948 18427200 copy temp ,loopcnt +7949 1fe0a404 add pdata ,queue_offset_write_ptr ,regb +794a efe08012 ifetch 1 ,regb +794b 984ffe00 imul32 temp ,pdata +794c 98c08a00 iadd contr ,contw +794d 1a220c00 copy rega ,contr + +calc_queue_next_ptr: +794e 20407d5f call memcpy +794f 2040798d call queue_get_size +7950 1fe0ffff pincrease -1 +7951 e8408012 ifetcht 1 ,regb +7952 18408401 increase 1 ,temp +7953 98410400 iand temp ,temp +7954 e0408012 istoret 1 ,regb +7955 20207e54 branch enable_user + +queue_pop: +7956 20407e56 call disable_user +7957 20407985 call queue_empty +7958 207a0000 rtn blank +7959 6fe1448a fetch 2 ,mem_queue_ptr +795a 1fe0a402 add pdata ,queue_offset_curr_num ,regb +795b e8408012 ifetcht 1 ,regb +795c 184085ff increase -1 ,temp +795d e0408012 istoret 1 ,regb +795e e840803f ifetcht 1 ,pdata +795f 18427200 copy temp ,loopcnt +7960 1fe0a403 add pdata ,queue_offset_read_ptr ,regb +7961 efe08012 ifetch 1 ,regb +7962 984ffe00 imul32 temp ,pdata +7963 98c08c00 iadd contr ,contr +7964 18c08c01 increase 1 ,contr +7965 1a220a00 copy rega ,contw +7966 2020794e branch calc_queue_next_ptr + +queue_get_new_ele: +7967 20407e56 call disable_user +7968 20407985 call queue_empty +7969 207a0000 rtn blank +796a 6fe1448a fetch 2 ,mem_queue_ptr +796b e840803f ifetcht 1 ,pdata +796c 18427200 copy temp ,loopcnt +796d 1fe0a403 add pdata ,queue_offset_read_ptr ,regb +796e efe08012 ifetch 1 ,regb +796f 984ffe00 imul32 temp ,pdata +7970 98c08c00 iadd contr ,contr +7971 18c08c01 increase 1 ,contr +7972 18c22400 copy contr ,regb +7973 1a220a00 copy rega ,contw +7974 20407d5f call memcpy +7975 20207e54 branch enable_user + +queue_store_new_ele: +7976 20407e56 call disable_user +7977 20407985 call queue_empty +7978 207a0000 rtn blank +7979 6fe1448a fetch 2 ,mem_queue_ptr +797a e840803f ifetcht 1 ,pdata +797b 18427200 copy temp ,loopcnt +797c 1fe0a403 add pdata ,queue_offset_read_ptr ,regb +797d efe08012 ifetch 1 ,regb +797e 984ffe00 imul32 temp ,pdata +797f 98c08c00 iadd contr ,contr +7980 18c08a02 add contr ,2 ,contw +7981 1a220c00 copy rega ,contr +7982 1f20f3ff increase -1 ,loopcnt +7983 20407d5f call memcpy +7984 20207e54 branch enable_user + +queue_empty: +7985 6fe1448a fetch 2 ,mem_queue_ptr +7986 1fe08c02 add pdata ,queue_offset_curr_num ,contr +7987 efe08006 ifetch 1 ,contr +7988 20600000 rtn + +queue_full: +7989 2040798d call queue_get_size +798a e8408006 ifetcht 1 ,contr +798b 98467e00 isub temp ,pdata +798c 20600000 rtn + +queue_get_size: +798d 6fe1448a fetch 2 ,mem_queue_ptr +798e 1fe08c01 add pdata ,queue_offset_length ,contr +798f efe08006 ifetch 1 ,contr +7990 20600000 rtn + +usb_isr: +7991 4746c031 bpatchx patch31_5 ,mem_patch31 +7992 6ff08c23 fetch 1 ,core_usb_status +7993 2feffe03 isolate1 usb_status_reset ,pdata +7994 2040f99d call usb_init ,true +7995 6ff08c23 fetch 1 ,core_usb_status +7996 67f08c23 store 1 ,core_usb_status +7997 67e089f6 store 1 ,mem_usb_status +7998 204079fd call usb_nak_state_judge +7999 20407a25 call usb_rx +799a 20407c0e call usb0_tx +799b 20407c56 call usb_tx +799c 202079f5 branch usb_nak_state + +usb_init: +799d 47474031 bpatchx patch31_6 ,mem_patch31 +799e 20406df3 call enable_authrom +799f 204079bc call usb_init_param +79a0 708c0000 jam 0x00 ,core_usb_config +79a1 20002710 nop 10000 +79a2 708c18c0 jam 0xc0 ,core_usb_trig +79a3 6ff10050 fetch 2 ,core_clkoff +79a4 793ffe0a set0 clock_off_usb ,pdata +79a5 67f10050 store 2 ,core_clkoff +79a6 708c1100 jam 0x0 ,core_usb_hmode +79a7 708c003c jam 0x3c ,core_usb_config +79a8 58000a4f setarg mem_usb_rxbuf +79a9 67f10c03 store 2 ,core_usb_rx_saddr +79aa 67f10c07 store 2 ,core_usb_rxptr +79ab 58000a8f setarg mem_usb_rxbuf_end +79ac 67f10c05 store 2 ,core_usb_rx_eaddr +79ad 708c1104 jam 0x4 ,core_usb_hmode +79ae 708c0200 jam 0 ,core_usb_addr +79af 708c23ff jam 0xff ,core_usb_status +79b0 58000c4b setarg mem_usb_clear_mem_end +79b1 d8a00b59 arg mem_usb_clear_mem_start ,contw +79b2 98a67200 isub contw ,loopcnt +79b3 20207d26 branch clear_mem + +usb_offline_check_init: +79b4 68488b58 fetcht 1 ,mem_usb_offline_check_gpio +79b5 20206050 branch gpio_config_input + +usb_offline_state: +79b6 6fe08bfa fetch 1 ,mem_usb_device_enumeration_endflag +79b7 207a0000 rtn blank +79b8 68488b58 fetcht 1 ,mem_usb_offline_check_gpio +79b9 20406059 call gpio_get_bit +79ba 2020f99d branch usb_init ,true +79bb 20600000 rtn + +usb_init_param: +79bc 700b5702 jam dev_default ,mem_usb0_state +79bd 58000000 setarg 0x0 +79be 67e08a92 store 1 ,mem_remain +79bf 67e10b51 store 2 ,mem_usb_zero_packet +79c0 1fe0fe01 pincrease 1 +79c1 67e10b53 store 2 ,mem_usb_ones_packet +79c2 1fe0fe01 pincrease 1 +79c3 67e10b55 store 2 ,mem_usb_two_packet +79c4 d8a00ae6 arg mem_string0 ,contw +79c5 58030404 setarg 0x030404 +79c6 e7e18005 istore 3 ,contw +79c7 58000409 setarg 0x0409 +79c8 e7e10005 istore 2 ,contw +79c9 d8a00aeb arg mem_string1 ,contw +79ca 38015906 setsect 0 ,0x15906 +79cb 380610d2 setsect 1 ,0x210d2 +79cc 38090494 setsect 2 ,0x10494 +79cd 380c0001 setsect 3 ,0x1 +79ce e7e48005 istore 9 ,contw +79cf d8a00b09 arg mem_string2 ,contw +79d0 3801570f setsect 0 ,0x1570f +79d1 38055c9a setsect 1 ,0x15c9a +79d2 380a56c6 setsect 2 ,0x256c6 +79d3 380dcdcd setsect 3 ,0x1cdcd +79d4 e7e48005 istore 9 ,contw +79d5 38014420 setsect 0 ,0x14420 +79d6 38065d99 setsect 1 ,0x25d99 +79d7 380a5636 setsect 2 ,0x25636 +79d8 380c0001 setsect 3 ,0x1 +79d9 e7e38005 istore 7 ,contw +79da d8a00b27 arg mem_string3 ,contw +79db 3801620a setsect 0 ,0x1620a +79dc 38040c8c setsect 1 ,0xc8c +79dd 380b0333 setsect 2 ,0x30333 +79de 380cc0c0 setsect 3 ,0xc0c0 +79df e7e48005 istore 9 ,contw +79e0 38003130 setsect 0 ,0x3130 +79e1 e7e10005 istore 2 ,contw +79e2 580099a4 setarg usb_kbdata_vendor_define_addr +79e3 67e10a93 store 2 ,mem_hidreportdesc_kb +79e4 580099ff setarg usb_msdata_addr +79e5 67e10a95 store 2 ,mem_hidreportdesc_m +79e6 d8c09aa3 arg usb_devicedata_addr ,contr +79e7 d8a00a97 arg mem_devicedesc ,contw +79e8 df200013 arg 19 ,loopcnt +79e9 20407d5f call memcpy +79ea d8c09ab6 arg usb_confdata_addr ,contr +79eb d8a00aaa arg mem_confdesc ,contw +79ec df20003c arg 60 ,loopcnt +79ed 20407d5f call memcpy + +usb_config_cb: +79ee 6fe10b45 fetch 2 ,mem_cb_usb_config +79ef 20207e05 branch callback_func + +usb_tx_interval_config: +79f0 6fe08b47 fetch 1 ,mem_usb_tx_interval +79f1 207a0000 rtn blank +79f2 67e08acc store 1 ,mem_confdesc + 34 +79f3 67e08ae5 store 1 ,mem_confdesc + 59 +79f4 20600000 rtn + +usb_nak_state: +79f5 d8e00000 arg timer_nak ,queue +79f6 20407d74 call timer_check +79f7 247a0000 nrtn blank +79f8 6fe08bfb fetch 1 ,mem_usb_wakestate_onetime_flag +79f9 247a0000 nrtn blank +79fa 6fe08bfa fetch 1 ,mem_usb_device_enumeration_endflag +79fb 245a7cac ncall usb_mac_wakeup_judge ,blank +79fc 20600000 rtn + +usb_nak_state_judge: +79fd 6fe089f6 fetch 1 ,mem_usb_status +79fe c2817a00 bbit1 usb_status_nak ,usb_nak_state_timer_init +79ff 20600000 rtn + +usb_nak_state_timer_init: +7a00 20407a05 call usb0_attached_state_judge +7a01 20407d73 call timer_reinit +7a02 58000280 setarg timer_nak_delay +7a03 d8e00000 arg timer_nak ,queue +7a04 20207d66 branch timer_init + +usb0_attached_state_judge: +7a05 6fe08bec fetch 1 ,mem_usb_state +7a06 c0817a0a bne usb_connected ,usb_clear_halt_dispose +7a07 700bfb00 jam 0 ,mem_usb_wakestate_onetime_flag +7a08 700bfc00 jam 0 ,mem_usb_mac_wakeup_trig +7a09 20600000 rtn + +usb_clear_halt_dispose: +7a0a 6fe08bfe fetch 1 ,mem_usb_clear_halt +7a0b 207a0000 rtn blank +7a0c 700bfe00 jam 0 ,mem_usb_clear_halt +7a0d 700bec02 jam usb_connected ,mem_usb_state +7a0e 700bfa01 jam 1 ,mem_usb_device_enumeration_endflag +7a0f 20600000 rtn + +usb_rx_no_data: +7a10 6fe089f6 fetch 1 ,mem_usb_status +7a11 c2807a30 bbit1 usb_status_setup ,usb_class_type +7a12 20600000 rtn + +usb_rx_data: +7a13 6ff08c24 fetch 1 ,core_usb_txbusy +7a14 c3830000 rtnbit1 usb_status_rxempty +7a15 69510c03 fetchr contus ,2 ,core_usb_rx_saddr +7a16 6a110c05 fetchr contue ,2 ,core_usb_rx_eaddr +7a17 68710c07 fetchr contu ,2 ,core_usb_rxptr +7a18 efe10003 ifetch 2 ,contu +7a19 1fec8400 rshift8 pdata ,temp +7a1a 18518400 rshift4 temp ,temp +7a1b d8c00fff arg 0xfff ,contr +7a1c 98c17200 iand contr ,loopcnt +7a1d 1f222200 copy loopcnt ,rega + +usb_rx_read: +7a1e efe08003 ifetch 1 ,contu +7a1f e7e08005 istore 1 ,contw +7a20 c2007a1e loop usb_rx_read +7a21 60710c07 storer contu ,2 ,core_usb_rxptr +7a22 622109f8 storer rega ,2 ,mem_usb_read_len +7a23 20600000 rtn + +usb_data_rx: +7a24 20600000 rtn + +usb_rx: +7a25 4747c031 bpatchx patch31_7 ,mem_patch31 +7a26 6fe089f6 fetch 1 ,mem_usb_status +7a27 c4028000 rtnbit0 usb_status_rxready +7a28 d8a00b59 arg mem_usb_setup ,contw +7a29 20407a13 call usb_rx_data +7a2a 18427e00 copy temp ,pdata +7a2b c0007a2d beq 0 ,usb0_rx +7a2c 20207a24 branch usb_data_rx + +usb0_rx: +7a2d 6fe089f8 fetch 1 ,mem_usb_read_len +7a2e 1fe67c07 sub pdata ,7 ,null +7a2f 20610000 rtn positive + +usb_class_type: +7a30 47484032 bpatchx patch32_0 ,mem_patch32 +7a31 793f8023 set0 mark_isstr ,mark +7a32 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7a33 1fe17e80 and_into 0x80 ,pdata +7a34 c0407a37 beq in_device ,usb_in_device +7a35 c0007a3f beq out_device ,usb_out_device +7a36 2020137a branch assert + +usb_in_device: +7a37 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7a38 1ff1fe00 rshift4 pdata ,pdata +7a39 1fe37e00 rshift pdata ,pdata +7a3a 1fe17e03 and_into 0x03 ,pdata +7a3b c0007a47 beq standard_req ,usb_in_standard_req +7a3c c000fa4d beq class_req ,usb_in_class_req +7a3d c0017a52 beq manufacturer_req ,usb_in_manufacturer_req +7a3e 2020137a branch assert + +usb_out_device: +7a3f 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7a40 1ff1fe00 rshift4 pdata ,pdata +7a41 1fe37e00 rshift pdata ,pdata +7a42 1fe17e03 and_into 0x03 ,pdata +7a43 c0007a53 beq standard_req ,usb_out_standard_req +7a44 c000fa5b beq class_req ,usb_out_class_req +7a45 c0017a60 beq manufacturer_req ,usb_out_manufacturer_req +7a46 2020137a branch assert + +usb_in_standard_req: +7a47 6fe08b5a fetch 1 ,mem_usb_setup_brequest +7a48 c0047a67 beq get_configuration ,usb0_request_get_configuration +7a49 c0037a7d beq get_descriptor ,usb0_request_get_descriptor +7a4a c0057ac2 beq get_interface ,usb0_request_get_interface +7a4b c0007ad4 beq get_status ,usb0_request_get_status +7a4c 20207a61 branch usb0_force_stall + +usb_in_class_req: +7a4d 6fe08b5a fetch 1 ,mem_usb_setup_brequest +7a4e c0017b09 beq get_idle ,usb_get_idle +7a4f c000fb0d beq get_report ,usb_get_report +7a50 c001fb1e beq get_protocol ,usb_get_protocol_req +7a51 20207a61 branch usb0_force_stall + +usb_in_manufacturer_req: +7a52 20207a61 branch usb0_force_stall + +usb_out_standard_req: +7a53 6fe08b5a fetch 1 ,mem_usb_setup_brequest +7a54 c000fb28 beq clear_feature ,usb0_request_clear_feature +7a55 c001fb57 beq set_feature ,usb0_request_set_feature +7a56 c002fb81 beq set_address ,usb0_request_set_address +7a57 c004fb9a beq set_configuration ,usb0_request_set_configuration +7a58 c005fbb5 beq set_interface ,usb0_request_set_interface +7a59 c003fa61 beq set_descriptor ,usb0_force_stall +7a5a 20207a61 branch usb0_force_stall + +usb_out_class_req: +7a5b 6fe08b5a fetch 1 ,mem_usb_setup_brequest +7a5c c0057bc6 beq set_idle ,usb_set_idle +7a5d c004fbd8 beq set_report ,usb_set_report +7a5e c005fbf5 beq set_protocol ,usb_set_protocol_req +7a5f 20207a61 branch usb0_force_stall + +usb_out_manufacturer_req: +7a60 20207a61 branch usb0_force_stall + +usb0_force_stall: +7a61 6ff08c19 fetch 1 ,core_usb_stall +7a62 79207e00 set1 0 ,pdata +7a63 67f08c19 store 1 ,core_usb_stall +7a64 20207a65 branch usb0_reply_zerolen + +usb0_reply_zerolen: +7a65 708c1810 jam 0x10 ,core_usb_trig +7a66 20600000 rtn + +usb0_request_get_configuration: +7a67 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7a68 c0c07a61 bne in_device ,usb0_force_stall +7a69 6fe08b5d fetch 1 ,mem_usb_setup_windex +7a6a c0807a61 bne 0 ,usb0_force_stall +7a6b 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7a6c c0807a61 bne 0 ,usb0_force_stall +7a6d 6fe08b5f fetch 1 ,mem_usb_setup_blength +7a6e c080fa61 bne 1 ,usb0_force_stall +7a6f 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7a70 c0807a61 bne 0 ,usb0_force_stall +7a71 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7a72 c0807a61 bne 0 ,usb0_force_stall +7a73 6fe08b5c fetch 1 ,mem_usb_setup_bvalue + 1 +7a74 c0807a61 bne 0 ,usb0_force_stall +7a75 6fe08b57 fetch 1 ,mem_usb0_state +7a76 c0027a79 beq dev_configured ,usb0_request_get_cfg_dev_cfg +7a77 c001fa7b beq dev_address ,usb0_request_get_cfg_dev_addr +7a78 20207a61 branch usb0_force_stall + +usb0_request_get_cfg_dev_cfg: +7a79 da400001 arg 1 ,regb +7a7a 20207aee branch usb_send_ones_packet + +usb0_request_get_cfg_dev_addr: +7a7b da400001 arg 1 ,regb +7a7c 20207aec branch usb_send_zero_packet + +usb0_request_get_descriptor: +7a7d 4748c032 bpatchx patch32_1 ,mem_patch32 +7a7e 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7a7f c000fa90 beq dsc_device ,dsc_device_info +7a80 c0017aa9 beq dsc_config ,dsc_config_info +7a81 c001faac beq dsc_string ,dsc_string_info +7a82 c010fa85 beq dsc_hid ,dsc_hid_info +7a83 c0117aba beq dsc_hid_report ,dsc_hid_report_info +7a84 20207a61 branch usb0_force_stall + +dsc_hid_info: +7a85 700be900 jam 0 ,mem_usb_get_protocol_flag +7a86 6fe08b5d fetch 1 ,mem_usb_setup_windex +7a87 c0007a8a beq 0 ,dsc_hid_info_interface0 +7a88 c000fa8d beq 1 ,dsc_hid_info_interface1 +7a89 20207a61 branch usb0_force_stall + +dsc_hid_info_interface0: +7a8a 6a408abd fetchr regb ,1 ,mem_confdesc + 19 +7a8b da200abd arg mem_confdesc + 19 ,rega +7a8c 20207c04 branch usb0_respond + +dsc_hid_info_interface1: +7a8d 6a408ad6 fetchr regb ,1 ,mem_confdesc + 44 +7a8e da200ad6 arg mem_confdesc + 44 ,rega +7a8f 20207c04 branch usb0_respond + +dsc_device_info: +7a90 6fe08bfd fetch 1 ,mem_usb_set_high_addr_flag +7a91 245a7aa1 ncall usb_set_high_addr ,blank +7a92 58000a97 setarg mem_devicedesc +7a93 68488a97 fetcht 1 ,mem_devicedesc + +dsc_info_set_data_len: +7a94 67e10bf4 store 2 ,mem_dsc_info_data_pointer +7a95 60488bf6 storet 1 ,mem_dsc_info_len +7a96 6fe08b5f fetch 1 ,mem_usb_setup_blength +7a97 98467c00 isub temp ,null +7a98 24217a9f nbranch dsc_info_set_current_data_len ,positive + +dsc_info_set_initial_data_len: +7a99 6fe08bf6 fetch 1 ,mem_dsc_info_len + +dsc_info_set_data_size_completed: +7a9a 98002400 iforce regb +7a9b 6fe10bf4 fetch 2 ,mem_dsc_info_data_pointer +7a9c 1fe0fe01 add pdata ,1 ,pdata +7a9d 98002200 iforce rega +7a9e 20207c04 branch usb0_respond + +dsc_info_set_current_data_len: +7a9f 6fe08b5f fetch 1 ,mem_usb_setup_blength +7aa0 20207a9a branch dsc_info_set_data_size_completed + +usb_set_high_addr: +7aa1 6ff08c02 fetch 1 ,core_usb_addr +7aa2 245a7aa5 ncall usb0_set_addr ,blank +7aa3 700bfd00 jam 0 ,mem_usb_set_high_addr_flag +7aa4 20600000 rtn + +usb0_set_addr: +7aa5 6ff08c02 fetch 1 ,core_usb_addr +7aa6 79207e07 set1 7 ,pdata +7aa7 67f08c02 store 1 ,core_usb_addr +7aa8 20600000 rtn + +dsc_config_info: +7aa9 58000aaa setarg mem_confdesc +7aaa 68488aaa fetcht 1 ,mem_confdesc +7aab 20207a94 branch dsc_info_set_data_len + +dsc_string_info: +7aac 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7aad 1fe67c03 sub pdata ,3 ,null +7aae 24217a61 nbranch usb0_force_stall ,positive +7aaf 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7ab0 da200ae6 arg mem_string0 ,rega +7ab1 c0007c02 beq 0 ,usb0_respond_length +7ab2 79200023 set1 mark_isstr ,mark +7ab3 da200aeb arg mem_string1 ,rega +7ab4 c000fc02 beq 1 ,usb0_respond_length +7ab5 da200b09 arg mem_string2 ,rega +7ab6 c0017c02 beq 2 ,usb0_respond_length +7ab7 da200b27 arg mem_string3 ,rega +7ab8 c001fc02 beq 3 ,usb0_respond_length +7ab9 20600000 rtn + +dsc_hid_report_info: +7aba 6fe10b5d fetch 2 ,mem_usb_setup_windex +7abb c000fabe beq 1 ,dsc_hid_report_info0 +7abc 6a210a93 fetchr rega ,2 ,mem_hidreportdesc_kb +7abd 20207c02 branch usb0_respond_length + +dsc_hid_report_info0: +7abe 700bfa01 jam 1 ,mem_usb_device_enumeration_endflag +7abf 700bec01 jam usb_got_report_req ,mem_usb_state +7ac0 6a210a95 fetchr rega ,2 ,mem_hidreportdesc_m +7ac1 20207c02 branch usb0_respond_length + +usb0_request_get_interface: +7ac2 6fe08b57 fetch 1 ,mem_usb0_state +7ac3 c0827a61 bne dev_configured ,usb0_force_stall +7ac4 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7ac5 c0c0fa61 bne in_interface ,usb0_force_stall +7ac6 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7ac7 c0807a61 bne 0 ,usb0_force_stall +7ac8 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7ac9 c0807a61 bne 0 ,usb0_force_stall +7aca 6fe08b5f fetch 1 ,mem_usb_setup_blength +7acb c080fa61 bne 1 ,usb0_force_stall +7acc 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7acd c0807a61 bne 0 ,usb0_force_stall +7ace 6fe08b5d fetch 1 ,mem_usb_setup_windex +7acf c0807a61 bne 0 ,usb0_force_stall +7ad0 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7ad1 c0807a61 bne 0 ,usb0_force_stall +7ad2 da400001 arg 1 ,regb +7ad3 20207aec branch usb_send_zero_packet + +usb0_request_get_status: +7ad4 6fe08b57 fetch 1 ,mem_usb0_state +7ad5 c0017a61 beq dev_default ,usb0_force_stall +7ad6 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7ad7 c0807a61 bne 0 ,usb0_force_stall +7ad8 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7ad9 c0807a61 bne 0 ,usb0_force_stall +7ada 6fe08b5f fetch 1 ,mem_usb_setup_blength +7adb c0817a61 bne 2 ,usb0_force_stall +7adc 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7add c0807a61 bne 0 ,usb0_force_stall +7ade 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7adf c0807a61 bne 0 ,usb0_force_stall +7ae0 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7ae1 c0407ae7 beq in_device ,usb0_get_status_in_device +7ae2 c040faf2 beq in_interface ,usb0_get_status_in_interface +7ae3 c0417af6 beq in_endpoint ,usb0_get_status_in_endpoint +7ae4 20207a61 branch usb0_force_stall + +usb0_sdsystem_dispose: +7ae5 700bef01 jam 1 ,mem_sdsystem_wakeup_flag +7ae6 20207af0 branch usb_send_two_packet + +usb0_get_status_in_device: +7ae7 6fe08b5d fetch 1 ,mem_usb_setup_windex +7ae8 c0807a61 bne 0 ,usb0_force_stall +7ae9 da400002 arg 2 ,regb +7aea 6fe08bed fetch 1 ,mem_usb_remote_wakeup +7aeb c000fae5 beq 0x01 ,usb0_sdsystem_dispose + +usb_send_zero_packet: +7aec da200b51 arg mem_usb_zero_packet ,rega +7aed 20207c04 branch usb0_respond + +usb_send_ones_packet: +7aee da200b53 arg mem_usb_ones_packet ,rega +7aef 20207c04 branch usb0_respond + +usb_send_two_packet: +7af0 da200b55 arg mem_usb_two_packet ,rega +7af1 20207c04 branch usb0_respond + +usb0_get_status_in_interface: +7af2 6fe08b57 fetch 1 ,mem_usb0_state +7af3 c0827a61 bne dev_configured ,usb0_force_stall +7af4 da400002 arg 2 ,regb +7af5 20207aec branch usb_send_zero_packet + +usb0_get_status_in_endpoint: +7af6 6fe08b57 fetch 1 ,mem_usb0_state +7af7 c0827a61 bne dev_configured ,usb0_force_stall +7af8 6fe08b5d fetch 1 ,mem_usb_setup_windex +7af9 c040fb03 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +7afa c0417b05 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +7afb c041fb07 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +7afc 1fe17e7f and_into 0x7f ,pdata +7afd c0007aff beq 0x00 ,usb0_get_status_in_ep_in_ep0 +7afe 20207a61 branch usb0_force_stall + +usb0_get_status_in_ep_in_ep0: +7aff 6fe08bf0 fetch 1 ,mem_usb_ep0_stall_status + +usb0_get_status_in_ep_in_ack: +7b00 da400002 arg 2 ,regb +7b01 c000faee beq 1 ,usb_send_ones_packet +7b02 20207aec branch usb_send_zero_packet + +usb0_get_status_in_ep_in_ep1: +7b03 6fe08bf1 fetch 1 ,mem_usb_ep1_stall_status +7b04 20207b00 branch usb0_get_status_in_ep_in_ack + +usb0_get_status_in_ep_in_ep2: +7b05 6fe08bf2 fetch 1 ,mem_usb_ep2_stall_status +7b06 20207b00 branch usb0_get_status_in_ep_in_ack + +usb0_get_status_in_ep_in_ep3: +7b07 6fe08bf3 fetch 1 ,mem_usb_ep3_stall_status +7b08 20207b00 branch usb0_get_status_in_ep_in_ack + +usb_get_idle: +7b09 700be701 jam 1 ,mem_usb_idle_flag +7b0a da200be8 arg mem_usb_idle_rate ,rega +7b0b da400001 arg 1 ,regb +7b0c 20207c04 branch usb0_respond + +usb_get_report: +7b0d 6fe10b5b fetch 2 ,mem_usb_setup_bvalue +7b0e d84001ba arg pc_get_report ,temp +7b0f 98467c00 isub temp ,null +7b10 2422fa61 nbranch usb0_force_stall ,zero + +usb_get_report_dispose: +7b11 6fe08be4 fetch 1 ,mem_usb0_data_ready_report +7b12 243a7b1b nbranch usb_get_report_data_success ,blank +7b13 700ba100 jam pc_get_nondata ,mem_usb0_get_report_data + +usb_get_report_send_data: +7b14 6fe08b5f fetch 1 ,mem_usb_setup_blength +7b15 98002400 iforce regb +7b16 da200ba1 arg mem_usb0_get_report_data ,rega +7b17 20407c04 call usb0_respond + +usb_get_report_data_release: +7b18 d8a00ba1 arg mem_usb0_get_report_data ,contw +7b19 df200008 arg 8 ,loopcnt +7b1a 20207d17 branch memset0 + +usb_get_report_data_success: +7b1b 700be400 jam 0 ,mem_usb0_data_ready_report +7b1c 700ba101 jam pc_get_data ,mem_usb0_get_report_data +7b1d 20207b14 branch usb_get_report_send_data + +usb_get_protocol_req: +7b1e 6fe08b5f fetch 1 ,mem_usb_setup_blength +7b1f c080fa61 bne 1 ,usb0_force_stall +7b20 700be901 jam 1 ,mem_usb_get_protocol_flag +7b21 da400001 arg 1 ,regb +7b22 6fe08beb fetch 1 ,mem_usb_set_protocol_value +7b23 c0007b26 beq 0 ,usb_get_report_protocol +7b24 c000fb27 beq 1 ,usb_get_boot_protocol +7b25 20207aec branch usb_send_zero_packet + +usb_get_report_protocol: +7b26 20207aee branch usb_send_ones_packet + +usb_get_boot_protocol: +7b27 20207aec branch usb_send_zero_packet + +usb0_request_clear_feature: +7b28 6fe08b57 fetch 1 ,mem_usb0_state +7b29 c0827a61 bne dev_configured ,usb0_force_stall +7b2a 6fe08b5f fetch 1 ,mem_usb_setup_blength +7b2b c0807a61 bne 0 ,usb0_force_stall +7b2c 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7b2d c0807a61 bne 0 ,usb0_force_stall +7b2e 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7b2f c0807a61 bne 0 ,usb0_force_stall +7b30 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7b31 c0807a61 bne 0 ,usb0_force_stall +7b32 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7b33 c0007b37 beq out_device ,usb0_request_clear_feature_out_device +7b34 c000fb44 beq out_interface ,usb0_request_clear_feature_out_interface +7b35 c0017b45 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +7b36 20207a61 branch usb0_force_stall + +usb0_request_clear_feature_out_device: +7b37 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b38 c080fa61 bne device_remote_wakeup ,usb0_force_stall +7b39 6ff08c00 fetch 1 ,core_usb_config +7b3a 793ffe07 set0 7 ,pdata +7b3b 67f08c00 store 1 ,core_usb_config +7b3c 700bed00 jam 0 ,mem_usb_remote_wakeup +7b3d 700bee01 jam 1 ,mem_usb_clear_remote_wakeup +7b3e 6fe08bef fetch 1 ,mem_sdsystem_wakeup_flag +7b3f 203a7a65 branch usb0_reply_zerolen ,blank +7b40 700bef00 jam 0 ,mem_sdsystem_wakeup_flag +7b41 700bee00 jam 0 ,mem_usb_clear_remote_wakeup +7b42 700bec02 jam usb_connected ,mem_usb_state +7b43 20207a65 branch usb0_reply_zerolen + +usb0_request_clear_feature_out_interface: +7b44 20207a61 branch usb0_force_stall + +usb0_request_clear_feature_out_endpoint: +7b45 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b46 c0807a61 bne endpoint_halt ,usb0_force_stall +7b47 6fe08b5d fetch 1 ,mem_usb_setup_windex +7b48 c040fb50 beq in_ep1 ,usb0_force_stall_ep1_in_off +7b49 c0417b53 beq in_ep2 ,usb0_force_stall_ep2_in_off +7b4a c041fb55 beq in_ep3 ,usb0_force_stall_ep3_in_off +7b4b 1fe17e7f and_into 0x7f ,pdata +7b4c c0007b4e beq 0x00 ,usb0_force_stall_ep0_in_off +7b4d 20207a61 branch usb0_force_stall + +usb0_force_stall_ep0_in_off: +7b4e 700bf000 jam 0 ,mem_usb_ep0_stall_status +7b4f 20207a65 branch usb0_reply_zerolen + +usb0_force_stall_ep1_in_off: +7b50 700bf100 jam 0 ,mem_usb_ep1_stall_status + +usb0_force_stall_ep1_in_off_reply: +7b51 700bfe01 jam 1 ,mem_usb_clear_halt +7b52 20207a65 branch usb0_reply_zerolen + +usb0_force_stall_ep2_in_off: +7b53 700bf200 jam 0 ,mem_usb_ep2_stall_status +7b54 20207b51 branch usb0_force_stall_ep1_in_off_reply + +usb0_force_stall_ep3_in_off: +7b55 700bf300 jam 0 ,mem_usb_ep3_stall_status +7b56 20207b51 branch usb0_force_stall_ep1_in_off_reply + +usb0_request_set_feature: +7b57 6fe08b5f fetch 1 ,mem_usb_setup_blength +7b58 c0807a61 bne 0 ,usb0_force_stall +7b59 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7b5a c0807a61 bne 0 ,usb0_force_stall +7b5b 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7b5c c0007b60 beq out_device ,usb0_request_set_feature_out_device +7b5d c000fb6d beq out_interface ,usb0_request_set_feature_out_interface +7b5e c0017b6e beq out_endpoint ,usb0_request_set_feature_out_endpoint +7b5f 20207a61 branch usb0_force_stall + +usb0_request_set_feature_out_device: +7b60 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b61 c080fa61 bne device_remote_wakeup ,usb0_force_stall +7b62 6ff08c00 fetch 1 ,core_usb_config +7b63 79207e07 set1 7 ,pdata +7b64 67f08c00 store 1 ,core_usb_config +7b65 700bed01 jam 1 ,mem_usb_remote_wakeup +7b66 700bec03 jam usb_sleep ,mem_usb_state +7b67 700be500 jam 0 ,mem_usb_tx_win_enable +7b68 20407a65 call usb0_reply_zerolen + +usb_wakeup_timer_reinit: +7b69 20407d73 call timer_reinit +7b6a 58001388 setarg timer_wakeup_delay +7b6b d8e0000f arg timer_wakeup ,queue +7b6c 20207d66 branch timer_init + +usb0_request_set_feature_out_interface: +7b6d 20207a61 branch usb0_force_stall + +usb0_request_set_feature_out_endpoint: +7b6e 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b6f c0807a61 bne endpoint_halt ,usb0_force_stall +7b70 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7b71 c0807a61 bne 0 ,usb0_force_stall +7b72 6fe08b5d fetch 1 ,mem_usb_setup_windex +7b73 c040fb7b beq in_ep1 ,usb0_force_stall_ep1_in_on +7b74 c0417b7d beq in_ep2 ,usb0_force_stall_ep2_in_on +7b75 c041fb7f beq in_ep3 ,usb0_force_stall_ep3_in_on +7b76 1fe17e7f and_into 0x7f ,pdata +7b77 c0007b79 beq 0x00 ,usb0_force_stall_ep0_in_on +7b78 20207a61 branch usb0_force_stall + +usb0_force_stall_ep0_in_on: +7b79 700bf001 jam 1 ,mem_usb_ep0_stall_status +7b7a 20207a65 branch usb0_reply_zerolen + +usb0_force_stall_ep1_in_on: +7b7b 700bf101 jam 1 ,mem_usb_ep1_stall_status +7b7c 20207a65 branch usb0_reply_zerolen + +usb0_force_stall_ep2_in_on: +7b7d 700bf201 jam 1 ,mem_usb_ep2_stall_status +7b7e 20207a65 branch usb0_reply_zerolen + +usb0_force_stall_ep3_in_on: +7b7f 700bf301 jam 1 ,mem_usb_ep3_stall_status +7b80 20207a65 branch usb0_reply_zerolen + +usb0_request_set_address: +7b81 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7b82 c0807a61 bne out_device ,usb0_force_stall +7b83 6fe08b5d fetch 1 ,mem_usb_setup_windex +7b84 c0807a61 bne 0 ,usb0_force_stall +7b85 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7b86 c0807a61 bne 0 ,usb0_force_stall +7b87 6fe08b5f fetch 1 ,mem_usb_setup_blength +7b88 c0807a61 bne 0 ,usb0_force_stall +7b89 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7b8a c0807a61 bne 0 ,usb0_force_stall +7b8b 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7b8c c0807a61 bne 0 ,usb0_force_stall +7b8d 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b8e 1fe17e80 and_into 0x80 ,pdata +7b8f c0807a61 bne 0 ,usb0_force_stall +7b90 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b91 c0807b98 bne 0 ,usb_usb0_state_set_dev_addr + +usb_usb0_state_set_dev_default: +7b92 700b5702 jam dev_default ,mem_usb0_state + +usb0_request_set_wait_address: +7b93 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7b94 67f08c02 store 1 ,core_usb_addr +7b95 20407a65 call usb0_reply_zerolen +7b96 700bfd01 jam 1 ,mem_usb_set_high_addr_flag +7b97 20600000 rtn + +usb_usb0_state_set_dev_addr: +7b98 700b5703 jam dev_address ,mem_usb0_state +7b99 20207b93 branch usb0_request_set_wait_address + +usb0_request_set_configuration: +7b9a 6fe08b57 fetch 1 ,mem_usb0_state +7b9b c0017a61 beq dev_default ,usb0_force_stall +7b9c 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7b9d c0807a61 bne out_device ,usb0_force_stall +7b9e 6fe08b5d fetch 1 ,mem_usb_setup_windex +7b9f c0807a61 bne 0 ,usb0_force_stall +7ba0 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7ba1 c0807a61 bne 0 ,usb0_force_stall +7ba2 6fe08b5f fetch 1 ,mem_usb_setup_blength +7ba3 c0807a61 bne 0 ,usb0_force_stall +7ba4 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7ba5 c0807a61 bne 0 ,usb0_force_stall +7ba6 6fe08b5c fetch 1 ,mem_usb_setup_bvalue + 1 +7ba7 c0807a61 bne 0 ,usb0_force_stall +7ba8 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7ba9 1fe67c01 sub pdata ,usb_max_num_cfg ,null +7baa 24217a61 nbranch usb0_force_stall ,positive +7bab 6fe08b57 fetch 1 ,mem_usb0_state +7bac c001fbaf beq dev_address ,usb0_request_set_cfg_addr_state +7bad c0027baf beq dev_configured ,usb0_request_set_cfg_cfg_state +7bae 20207a61 branch usb0_force_stall + +usb0_request_set_cfg_addr_state: + +usb0_request_set_cfg_cfg_state: +7baf 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7bb0 c0007bb3 beq 0 ,usb0_request_set_cfg_stay_addr_state +7bb1 700b5704 jam dev_configured ,mem_usb0_state +7bb2 20207a65 branch usb0_reply_zerolen + +usb0_request_set_cfg_stay_addr_state: +7bb3 700b5703 jam dev_address ,mem_usb0_state +7bb4 20207a65 branch usb0_reply_zerolen + +usb0_request_set_interface: +7bb5 6fe08b57 fetch 1 ,mem_usb0_state +7bb6 c0827a61 bne dev_configured ,usb0_force_stall +7bb7 6fe08b59 fetch 1 ,mem_usb_setup_bmrequesttype +7bb8 c080fa61 bne out_interface ,usb0_force_stall +7bb9 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7bba c0807a61 bne 0 ,usb0_force_stall +7bbb 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7bbc c0807a61 bne 0 ,usb0_force_stall +7bbd 6fe08b5f fetch 1 ,mem_usb_setup_blength +7bbe c0807a61 bne 0 ,usb0_force_stall +7bbf 6fe08b60 fetch 1 ,mem_usb_setup_blengthh +7bc0 c0807a61 bne 0 ,usb0_force_stall +7bc1 6fe08b5d fetch 1 ,mem_usb_setup_windex +7bc2 c0807a61 bne 0 ,usb0_force_stall +7bc3 6fe08b5e fetch 1 ,mem_usb_setup_windex + 1 +7bc4 c0807a61 bne 0 ,usb0_force_stall +7bc5 20207a65 branch usb0_reply_zerolen + +usb_set_idle: +7bc6 47494032 bpatchx patch32_2 ,mem_patch32 +7bc7 700be701 jam 1 ,mem_usb_idle_flag +7bc8 6fe08b5c fetch 1 ,mem_usb_setup_bvalueh +7bc9 67e08be8 store 1 ,mem_usb_idle_rate +7bca 6fe08b5d fetch 1 ,mem_usb_setup_windex +7bcb 1fe67c01 sub pdata ,1 ,null +7bcc 2042fbd4 call usb_clear_remote_wakeup_set0 ,zero +7bcd 6fe08bec fetch 1 ,mem_usb_state +7bce c0827a65 bne usb_resume ,usb0_reply_zerolen +7bcf 700bec02 jam usb_connected ,mem_usb_state +7bd0 20407a65 call usb0_reply_zerolen +7bd1 20007530 nop 30000 +7bd2 20007530 nop 30000 +7bd3 20600000 rtn + +usb_clear_remote_wakeup_set0: +7bd4 700bfa01 jam 1 ,mem_usb_device_enumeration_endflag +7bd5 700bee00 jam 0 ,mem_usb_clear_remote_wakeup +7bd6 700bec04 jam usb_resume ,mem_usb_state +7bd7 20600000 rtn + +usb_set_report: +7bd8 d8a00b61 arg mem_usb0_set_report_data ,contw +7bd9 20407a13 call usb_rx_data +7bda 700be301 jam 1 ,mem_usb0_get_set_report +7bdb 20407be7 call usb_set_report_resume_judge +7bdc 6fe10b5b fetch 2 ,mem_usb_setup_bvalue +7bdd 67e10be1 store 2 ,mem_usb_setup_bvalue_temp +7bde 20407a65 call usb0_reply_zerolen +7bdf 6fe0c09a fetch 1 ,mem_device_option +7be0 c1820000 rtnne dvc_op_dongle +7be1 6fe08be5 fetch 1 ,mem_usb_tx_win_enable +7be2 207a0000 rtn blank +7be3 6fe08b61 fetch 1 ,mem_usb0_set_report_data +7be4 67e0c8ca store 1 ,mem_24g_led_status +7be5 7048ba03 jam kb_led_ackpayload ,mem_24g_ackpayload_enable +7be6 20600000 rtn + +usb_set_report_resume_judge: +7be7 6fe10b5b fetch 2 ,mem_usb_setup_bvalue +7be8 d8400200 arg pc_set_report_bvalue ,temp +7be9 98467c00 isub temp ,null +7bea 24628000 nrtn zero +7beb 6fe10b5d fetch 2 ,mem_usb_setup_windex +7bec d8400000 arg pc_set_report_windex ,temp +7bed 98467c00 isub temp ,null +7bee 24628000 nrtn zero +7bef 6fe10b5f fetch 2 ,mem_usb_setup_blength +7bf0 d8400001 arg pc_set_report_blength ,temp +7bf1 98467c00 isub temp ,null +7bf2 24628000 nrtn zero +7bf3 700be501 jam 1 ,mem_usb_tx_win_enable +7bf4 20600000 rtn + +usb_set_protocol_req: +7bf5 6fe08b5f fetch 1 ,mem_usb_setup_blength +7bf6 c0807a61 bne 0 ,usb0_force_stall +7bf7 6fe08b5b fetch 1 ,mem_usb_setup_bvalue +7bf8 c0007bfb beq boot_protocol ,usb_set_boot_protocol +7bf9 c000fbfe beq report_protocol ,usb_set_report_protocol +7bfa 20207a61 branch usb0_force_stall + +usb_set_boot_protocol: +7bfb 700bea00 jam 0 ,mem_usb_set_protocol_status +7bfc 700beb01 jam 1 ,mem_usb_set_protocol_value +7bfd 20207a65 branch usb0_reply_zerolen + +usb_set_report_protocol: +7bfe 700be601 jam 1 ,mem_usb_tx_mac_enable +7bff 700bea01 jam 1 ,mem_usb_set_protocol_status +7c00 700beb00 jam 0 ,mem_usb_set_protocol_value +7c01 20207a65 branch usb0_reply_zerolen + +usb0_respond_length: +7c02 ea408011 ifetchr regb ,1 ,rega +7c03 1a20a201 increase 1 ,rega + +usb0_respond: +7c04 4749c032 bpatchx patch32_3 ,mem_patch32 +7c05 7920000e set1 mark_usb_first_resp ,mark +7c06 c591fc09 bmark0 mark_isstr ,usb0_respond_nostr +7c07 1a40a401 increase 1 ,regb +7c08 1a43a400 lshift regb ,regb + +usb0_respond_nostr: +7c09 62210a90 storer rega ,2 ,mem_bufptr +7c0a 62408a92 storer regb ,1 ,mem_remain +7c0b 20207c0e branch usb0_tx + +usb_no_respond_data: +7c0c d8e00000 arg 0 ,queue +7c0d 20207c4e branch usb_trig + +usb0_tx: +7c0e 474a4032 bpatchx patch32_4 ,mem_patch32 +7c0f 6ff08c24 fetch 1 ,core_usb_txbusy +7c10 c3800000 rtnbit1 0 +7c11 6fe08a92 fetch 1 ,mem_remain +7c12 207a0000 rtn blank +7c13 1fe27200 copy pdata ,loopcnt +7c14 98000400 iforce temp +7c15 6fe10b5f fetch 2 ,mem_usb_setup_blength +7c16 1fe67c40 sub pdata ,ep0_packet_size ,null +7c17 20217c1c branch usb0_tx_short ,positive +7c18 1f267c40 sub loopcnt ,ep0_packet_size ,null +7c19 20217c20 branch usb0_tx_info ,positive +7c1a 18007240 force ep0_packet_size ,loopcnt +7c1b 20207c20 branch usb0_tx_info + +usb0_tx_short: +7c1c 9f267c00 isub loopcnt ,null +7c1d 20217c20 branch usb0_tx_info ,positive +7c1e 98007200 iforce loopcnt +7c1f 67e08a92 store 1 ,mem_remain + +usb0_tx_info: +7c20 6fe08a92 fetch 1 ,mem_remain +7c21 9f267e00 isub loopcnt ,pdata +7c22 67e08a92 store 1 ,mem_remain +7c23 1f20ffff add loopcnt ,-1 ,pdata +7c24 67e089fa store 1 ,mem_usb_txbuf +7c25 c591fc32 bmark0 mark_isstr ,usb0_tx_nostr +7c26 1fe37e00 rshift pdata ,pdata +7c27 1f20ffff add loopcnt ,-1 ,pdata +7c28 67e089fa store 1 ,mem_usb_txbuf +7c29 c5877c32 bmark0 mark_usb_first_resp ,usb0_tx_nostr +7c2a 793f800e set0 mark_usb_first_resp ,mark +7c2b e0408005 istoret 1 ,contw +7c2c 58000003 setarg 3 +7c2d e7e08005 istore 1 ,contw +7c2e 1f20f3ff increase -1 ,loopcnt +7c2f 1f227e00 copy loopcnt ,pdata +7c30 2422fc32 nbranch usb0_tx_nostr ,zero +7c31 1f20f201 increase 1 ,loopcnt + +usb0_tx_nostr: +7c32 6fe10a90 fetch 2 ,mem_bufptr +7c33 1fe20c00 copy pdata ,contr + +usb0_tx0: +7c34 efe08006 ifetch 1 ,contr +7c35 e7e08005 istore 1 ,contw +7c36 c591fc39 bmark0 mark_isstr ,usb0_tx1 +7c37 58000000 setarg 0 +7c38 e7e08005 istore 1 ,contw + +usb0_tx1: +7c39 c2007c34 loop usb0_tx0 +7c3a 18c27e00 copy contr ,pdata +7c3b 67e10a90 store 2 ,mem_bufptr +7c3c 580009fa setarg mem_usb_txbuf +7c3d 67f10c09 store 2 ,core_usb_tx_saddr0 +7c3e d8e00000 arg 0 ,queue +7c3f 20407c4e call usb_trig +7c40 6fe08a92 fetch 1 ,mem_remain +7c41 247a0000 nrtn blank +7c42 6fe08bec fetch 1 ,mem_usb_state +7c43 c1808000 rtnne usb_got_report_req +7c44 700bec02 jam usb_connected ,mem_usb_state +7c45 20600000 rtn + +usb_tx_ep1: +7c46 d8e00001 arg 1 ,queue +7c47 da200a3b arg mem_usb_txbuf1 ,rega +7c48 62310c0b storer rega ,2 ,core_usb_tx_saddr1 + +usb_tx_buf: +7c49 1f20ffff add loopcnt ,-1 ,pdata +7c4a e7e08011 istore 1 ,rega + +usb_tx_loop: +7c4b efe08006 ifetch 1 ,contr +7c4c e7e08005 istore 1 ,contw +7c4d c2007c4b loop usb_tx_loop + +usb_trig: +7c4e 58000000 setarg 0 +7c4f f9207e00 qset1 pdata +7c50 67f08c18 store 1 ,core_usb_trig +7c51 20600000 rtn + +usb_tx_ep2: +7c52 d8e00002 arg 2 ,queue +7c53 da200a45 arg mem_usb_txbuf2 ,rega +7c54 62310c0d storer rega ,2 ,core_usb_tx_saddr2 +7c55 20207c49 branch usb_tx_buf + +usb_tx: +7c56 474ac032 bpatchx patch32_5 ,mem_patch32 +7c57 6fe08bf9 fetch 1 ,mem_usb_tx_enable +7c58 207a0000 rtn blank +7c59 6fe08bfa fetch 1 ,mem_usb_device_enumeration_endflag +7c5a 203a7c7a branch usb_tx_fifo_release ,blank +7c5b 6fe08bec fetch 1 ,mem_usb_state +7c5c c001fcb4 beq usb_sleep ,usb_windows_wakeup +7c5d c0817c7a bne usb_connected ,usb_tx_fifo_release +7c5e 6fe08bee fetch 1 ,mem_usb_clear_remote_wakeup +7c5f 243a7c7a nbranch usb_tx_fifo_release ,blank +7c60 20407c62 call usb_tx_data_ep1 +7c61 20207c6d branch usb_tx_data_ep2 + +usb_tx_data_ep1: +7c62 6ff08c24 fetch 1 ,core_usb_txbusy +7c63 c3808000 rtnbit1 1 +7c64 6fe08bf9 fetch 1 ,mem_usb_tx_enable +7c65 c4008000 rtnbit0 1 +7c66 6fe08bf9 fetch 1 ,mem_usb_tx_enable +7c67 793ffe01 set0 1 ,pdata +7c68 67e08bf9 store 1 ,mem_usb_tx_enable +7c69 6fe08bf7 fetch 1 ,mem_usb_ep1_data +7c6a 207a0000 rtn blank +7c6b c0087c9c beq usb_ep1_kb ,usb_tx_kb_normal_data +7c6c 2020137a branch assert + +usb_tx_data_ep2: +7c6d 6ff08c24 fetch 1 ,core_usb_txbusy +7c6e c3810000 rtnbit1 2 +7c6f 6fe08bf9 fetch 1 ,mem_usb_tx_enable +7c70 c4010000 rtnbit0 2 +7c71 6fe08bf9 fetch 1 ,mem_usb_tx_enable +7c72 793ffe02 set0 2 ,pdata +7c73 67e08bf9 store 1 ,mem_usb_tx_enable +7c74 6fe08bf8 fetch 1 ,mem_usb_ep2_data +7c75 207a0000 rtn blank +7c76 c0107c7d beq usb_ep2_ms ,usb_tx_ms_data +7c77 c010fc98 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +7c78 c0117ca0 beq usb_ep2_systemkey ,usb_tx_kb_systemkey_data +7c79 2020137a branch assert + +usb_tx_fifo_release: +7c7a d8a00bff arg mem_usb_mouse_data ,contw +7c7b df200008 arg 8 ,loopcnt +7c7c 20207d17 branch memset0 + +usb_tx_ms_data: +7c7d 6fe08be7 fetch 1 ,mem_usb_idle_flag +7c7e 68488be9 fetcht 1 ,mem_usb_get_protocol_flag +7c7f 98417e00 iand temp ,pdata +7c80 203a7c94 branch usb_tx_ms_data_normal_mode ,blank +7c81 68488bea fetcht 1 ,mem_usb_set_protocol_status +7c82 9840fe00 iadd temp ,pdata +7c83 c000fc85 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +7c84 20207c94 branch usb_tx_ms_data_normal_mode + +usb_tx_ms_data_mac_boot_mode: +7c85 700bf800 jam 0 ,mem_usb_ep2_data + +usb_tx_ms_data_mac_boot_regroup: +7c86 6fe08c00 fetch 1 ,mem_usb_mouse_data + 1 +7c87 c0017c95 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +7c88 c001fc95 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +7c89 6fe08c00 fetch 1 ,mem_usb_mouse_data + 1 +7c8a 67e08bff store 1 ,mem_usb_mouse_data +7c8b 6fe08c01 fetch 1 ,mem_usb_mouse_data + 2 +7c8c e7e08005 istore 1 ,contw +7c8d 6fe08c03 fetch 1 ,mem_usb_mouse_data + 4 +7c8e e7e08005 istore 1 ,contw +7c8f 6fe08c05 fetch 1 ,mem_usb_mouse_data + 6 +7c90 e7e08005 istore 1 ,contw +7c91 df200004 arg 4 ,loopcnt +7c92 d8c00bff arg mem_usb_mouse_data ,contr +7c93 20207c52 branch usb_tx_ep2 + +usb_tx_ms_data_normal_mode: +7c94 700bf800 jam 0 ,mem_usb_ep2_data + +usb_tx_mac_boot_ms_regroup_r_or_lrkey: +7c95 df200008 arg 8 ,loopcnt +7c96 d8c00bff arg mem_usb_mouse_data ,contr +7c97 20207c52 branch usb_tx_ep2 + +usb_tx_kb_multikey_data: +7c98 700bf800 jam 0 ,mem_usb_ep2_data +7c99 df200003 arg 3 ,loopcnt +7c9a d8c00c1f arg mem_usb_kb_multikey ,contr +7c9b 20207c52 branch usb_tx_ep2 + +usb_tx_kb_normal_data: +7c9c 700bf700 jam 0 ,mem_usb_ep1_data +7c9d df200008 arg 8 ,loopcnt +7c9e d8c00c0f arg mem_usb_kb_data ,contr +7c9f 20207c46 branch usb_tx_ep1 + +usb_tx_kb_systemkey_data: +7ca0 700bf800 jam 0 ,mem_usb_ep2_data +7ca1 df200002 arg 2 ,loopcnt +7ca2 d8c00c2f arg mem_usb_kb_system ,contr +7ca3 20207c52 branch usb_tx_ep2 + +usb_inwake_state_tx_dispose: +7ca4 6fe08bec fetch 1 ,mem_usb_state +7ca5 c0017ca7 beq usb_connected ,usb_mac_wakeup_trig +7ca6 20600000 rtn + +usb_mac_wakeup_trig: +7ca7 6ff08c00 fetch 1 ,core_usb_config +7ca8 79207e07 set1 7 ,pdata +7ca9 67f08c00 store 1 ,core_usb_config +7caa 700bfc01 jam 1 ,mem_usb_mac_wakeup_trig +7cab 20600000 rtn + +usb_mac_wakeup_judge: +7cac 6fe08bec fetch 1 ,mem_usb_state +7cad c1018000 rtneq usb_sleep +7cae c0017cb0 beq usb_connected ,usb_mac_wakeup +7caf 20600000 rtn + +usb_mac_wakeup: +7cb0 6fe08bfc fetch 1 ,mem_usb_mac_wakeup_trig +7cb1 207a0000 rtn blank +7cb2 700bfb01 jam 1 ,mem_usb_wakestate_onetime_flag +7cb3 20207cb7 branch usb_wakeup + +usb_windows_wakeup: +7cb4 d8e0000f arg timer_wakeup ,queue +7cb5 20407d74 call timer_check +7cb6 247a0000 nrtn blank + +usb_wakeup: +7cb7 6ff08c00 fetch 1 ,core_usb_config +7cb8 c4038000 rtnbit0 7 +7cb9 708c00fc jam 0xfc ,core_usb_config +7cba 20007530 nop 30000 +7cbb 708c003c jam 0x3c ,core_usb_config +7cbc 20600000 rtn + +right_shift_n: +7cbd 1f267c00 sub loopcnt ,0 ,null +7cbe 20628000 rtn zero + +right_shift_n_loop: +7cbf 1fe37e00 rshift pdata ,pdata +7cc0 c2007cbf loop right_shift_n_loop +7cc1 20600000 rtn + +left_shift_n: +7cc2 18007e01 force 1 ,pdata +7cc3 1f267c00 sub loopcnt ,0 ,null +7cc4 20628000 rtn zero + +left_shift_n_loop: +7cc5 1fe3fe00 lshift pdata ,pdata +7cc6 c2007cc5 loop left_shift_n_loop +7cc7 20600000 rtn + +push_stack: +7cc8 60a1097d storer contw ,2 ,mem_contw +7cc9 604c0964 storet 8 ,mem_temp +7cca 6162096c storer timeup ,4 ,mem_timeup +7ccb 20407cd0 call push_stack_rega_b_c +7ccc 60c1097b storer contr ,2 ,mem_contr +7ccd 67210987 storer loopcnt ,2 ,mem_loopcnt +7cce 60e10985 storer queue ,2 ,mem_queue +7ccf 20600000 rtn + +push_stack_rega_b_c: +7cd0 62220970 storer rega ,4 ,mem_rega +7cd1 62420974 storer regb ,4 ,mem_regb +7cd2 62618978 storer regc ,3 ,mem_regc +7cd3 20600000 rtn + +pop_stack: +7cd4 6fe1097d fetch 2 ,mem_contw +7cd5 98000a00 iforce contw +7cd6 684c0964 fetcht 8 ,mem_temp +7cd7 6962096c fetchr timeup ,4 ,mem_timeup +7cd8 20407cde call pop_stack_rega_b_c +7cd9 6f210987 fetchr loopcnt ,2 ,mem_loopcnt +7cda 68e10985 fetchr queue ,2 ,mem_queue +7cdb 6fe1097b fetch 2 ,mem_contr +7cdc 98000c00 iforce contr +7cdd 20600000 rtn + +pop_stack_rega_b_c: +7cde 6a220970 fetchr rega ,4 ,mem_rega +7cdf 6a420974 fetchr regb ,4 ,mem_regb +7ce0 6a618978 fetchr regc ,3 ,mem_regc +7ce1 20600000 rtn + +get_contw: +7ce2 6fe1097d fetch 2 ,mem_contw +7ce3 1fe20a00 copy pdata ,contw +7ce4 20600000 rtn + +get_contr: +7ce5 6fe1097b fetch 2 ,mem_contr +7ce6 1fe20c00 copy pdata ,contr +7ce7 20600000 rtn + +store_contw: +7ce8 18a27e00 copy contw ,pdata +7ce9 67e1097d store 2 ,mem_contw +7cea 20600000 rtn + +store_contr: +7ceb 18c27e00 copy contr ,pdata +7cec 67e1097b store 2 ,mem_contr +7ced 20600000 rtn + +save_cont_pointers: +7cee 18a27e00 copy contw ,pdata +7cef 67e10959 store 2 ,mem_hold_contw +7cf0 18c27e00 copy contr ,pdata +7cf1 67e10957 store 2 ,mem_hold_contr +7cf2 20600000 rtn + +load_cont_pointers: +7cf3 6fe10959 fetch 2 ,mem_hold_contw +7cf4 1fe20a00 copy pdata ,contw +7cf5 6fe10957 fetch 2 ,mem_hold_contr +7cf6 1fe20c00 copy pdata ,contr +7cf7 20600000 rtn + +get_diff: +7cf8 98462200 isub temp ,rega +7cf9 20610000 rtn positive +7cfa da200100 arg 0x100 ,rega +7cfb 9a20fe00 iadd rega ,pdata +7cfc 98462200 isub temp ,rega +7cfd 20600000 rtn + +memcpy96: +7cfe 20407d0a call memcpy32 + +memcpy64: +7cff 20407d0a call memcpy32 +7d00 20207d0a branch memcpy32 + +memcpy20: +7d01 20407d06 call memcpy8 + +memcpy12: +7d02 20407d06 call memcpy8 + +memcpy4: +7d03 efe20006 ifetch 4 ,contr +7d04 e7e20005 istore 4 ,contw +7d05 20600000 rtn + +memcpy8: +7d06 efe40006 ifetch 8 ,contr +7d07 e7e40005 istore 8 ,contw +7d08 20600000 rtn + +memcpy48: +7d09 20407d0c call memcpy16 + +memcpy32: +7d0a 20407d06 call memcpy8 + +memcpy24: +7d0b 20407d06 call memcpy8 + +memcpy16: +7d0c 20407d06 call memcpy8 +7d0d 20207d06 branch memcpy8 + +delay: +7d0e 1fe0ffff increase -1 ,pdata +7d0f 20000026 nop 38 +7d10 243a7d0e nbranch delay ,blank +7d11 20600000 rtn + +delay_10ms: +7d12 df20000a arg 10 ,loopcnt + +delay_ms_wait: +7d13 20002ee0 nop 12000 +7d14 c2007d13 loop delay_ms_wait +7d15 20600000 rtn + +bn_zero: +7d16 18007203 force 3 ,loopcnt + +memset0: +7d17 18007e00 force 0 ,pdata + +memset8: +7d18 e7e40005 istore 8 ,contw +7d19 c2007d18 loop memset8 +7d1a 20600000 rtn + +memset0_16: +7d1b 20407d1c call memset0_8 + +memset0_8: +7d1c 18007e00 force 0 ,pdata +7d1d e7e40005 istore 8 ,contw +7d1e 20600000 rtn + +memset0_4: +7d1f 18007e00 force 0 ,pdata +7d20 e7e20005 istore 4 ,contw +7d21 20600000 rtn + +clear_mem_256: +7d22 18007204 force 4 ,loopcnt +7d23 20207d17 branch memset0 + +clear_mem_512: +7d24 18007208 force 8 ,loopcnt +7d25 20207d17 branch memset0 + +clear_mem: +7d26 1f227e00 deposit loopcnt +7d27 207a0000 rtn blank +7d28 58000000 setarg 0 + +clear_mem_loop: +7d29 e7e08005 istore 1 ,contw +7d2a c2007d29 loop clear_mem_loop +7d2b 20600000 rtn + +clear_temp_block: +7d2c df200020 arg 32 ,loopcnt +7d2d d8a0098e arg mem_temp_block0 ,contw +7d2e 20207d26 branch clear_mem + +xor_loop: +7d2f efe20013 ifetch 4 ,regc +7d30 e8420011 ifetcht 4 ,rega +7d31 9842fe00 ixor temp ,pdata +7d32 e7e20005 istore 4 ,contw +7d33 1a20a204 increase 4 ,rega +7d34 1a60a604 increase 4 ,regc +7d35 c2007d2f loop xor_loop +7d36 20600000 rtn + +inverse_data: +7d37 474b4032 bpatchx patch32_6 ,mem_patch32 +7d38 1f227e00 copy loopcnt ,pdata +7d39 1fe67c01 sub pdata ,1 ,null +7d3a 20610000 rtn positive +7d3b 9a20a400 iadd rega ,regb +7d3c 1a40a5ff increase -1 ,regb +7d3d 1f237200 rshift loopcnt ,loopcnt + +inverse_loop: +7d3e e8408011 ifetcht 1 ,rega +7d3f efe08012 ifetch 1 ,regb +7d40 e7e08011 istore 1 ,rega +7d41 e0408012 istoret 1 ,regb +7d42 1a40a5ff increase -1 ,regb +7d43 1a20a201 increase 1 ,rega +7d44 c2007d3e loop inverse_loop +7d45 20600000 rtn + +le2be_6byte: + +inverse_data_6byte: +7d46 1fef0400 rshift32 pdata ,temp +7d47 20407d4c call inverse_data_4byte +7d48 18508400 byteswap temp ,temp +7d49 1ff07e00 lshift16 pdata ,pdata +7d4a 9841fe00 ior temp ,pdata +7d4b 20600000 rtn + +le2be_4byte: + +inverse_data_4byte: +7d4c 1ff10c00 rshift16 pdata ,contr +7d4d 18d08c00 byteswap contr ,contr +7d4e 1ff0fe00 byteswap pdata ,pdata +7d4f 1ff07e00 lshift16 pdata ,pdata +7d50 98c1fe00 ior contr ,pdata +7d51 20600000 rtn + +memcpy_fast: +7d52 1f227e00 deposit loopcnt +7d53 207a0000 rtn blank + +memcpy_fast_loop: +7d54 1f20f3f8 increase -8 ,loopcnt +7d55 20417d06 call memcpy8 ,positive +7d56 20628000 rtn zero +7d57 20217d54 branch memcpy_fast_loop ,positive +7d58 1f20f208 increase 8 ,loopcnt + +memcpy_fast_loop_four: +7d59 1f20f3fc increase -4 ,loopcnt +7d5a 20417d03 call memcpy4 ,positive +7d5b 20628000 rtn zero +7d5c 20217d59 branch memcpy_fast_loop_four ,positive +7d5d 1f20f204 increase 4 ,loopcnt +7d5e 20207d5f branch memcpy + +memcpy: +7d5f 1f227e00 deposit loopcnt +7d60 207a0000 rtn blank + +memcpy_loop: +7d61 efe08006 ifetch 1 ,contr +7d62 e7e08005 istore 1 ,contw +7d63 c2007d61 loop memcpy_loop +7d64 20600000 rtn + +timer_stop: +7d65 58000000 setarg 0 + +timer_init: +7d66 1c430400 rshift clkn_bt ,temp +7d67 604a409c storet 4 ,mem_last_clkn +7d68 d8a041aa arg mem_timers ,contw +7d69 98000400 iforce temp +7d6a 18e3fe00 lshift queue ,pdata +7d6b 98a08a00 iadd contw ,contw +7d6c e0410005 istoret 2 ,contw +7d6d 474bc032 bpatchx patch32_7 ,mem_patch32 +7d6e 20600000 rtn + +timer_check_timeout: +7d6f d9600800 arg 0x800 ,timeup +7d70 19701600 lshift16 timeup ,timeup +7d71 9960fe00 iadd timeup ,pdata +7d72 20600000 rtn + +timer_reinit: +7d73 d8e00000 arg 0 ,queue + +timer_check: +7d74 474c4033 bpatchx patch33_0 ,mem_patch33 +7d75 684a409c fetcht 4 ,mem_last_clkn +7d76 1c437e00 rshift clkn_bt ,pdata +7d77 67e2409c store 4 ,mem_last_clkn +7d78 98467c00 isub temp ,null +7d79 24417d6f ncall timer_check_timeout ,positive +7d7a 98461600 isub temp ,timeup +7d7b 19620400 copy timeup ,temp +7d7c d8c041aa arg mem_timers ,contr +7d7d 18c20a00 copy contr ,contw +7d7e df200010 arg 16 ,loopcnt + +timer_loop: +7d7f efe10006 ifetch 2 ,contr +7d80 98467e00 isub temp ,pdata +7d81 20217d83 branch timer_counting ,positive +7d82 18007e00 force 0 ,pdata + +timer_counting: +7d83 e7e10005 istore 2 ,contw +7d84 c2007d7f loop timer_loop +7d85 d8c041aa arg mem_timers ,contr +7d86 18e3fe00 lshift queue ,pdata +7d87 98c08c00 iadd contr ,contr +7d88 efe10006 ifetch 2 ,contr +7d89 20600000 rtn + +clk_add: +7d8a 98408400 iadd temp ,temp +7d8b 18427200 copy temp ,loopcnt +7d8c 6fe10163 fetch 2 ,mem_param_rt_rthalfslot +7d8d 9f267e00 isub loopcnt ,pdata +7d8e 20610000 rtn positive +7d8f 1fe67e00 sub pdata ,0 ,pdata +7d90 18510400 rshift16 temp ,temp +7d91 18408401 increase 1 ,temp +7d92 18500400 lshift16 temp ,temp +7d93 98418400 ior temp ,temp +7d94 20600000 rtn + +clk_diff_rt: +7d95 20407d97 call clk_diff +7d96 20207da4 branch clk2rt + +clk_diff: +7d97 78547c00 disable user +7d98 98467e00 isub temp ,pdata +7d99 20217d9c branch clk_diff_pos ,positive +7d9a 78347c00 enable user +7d9b 1fe67e00 sub pdata ,0 ,pdata + +clk_diff_pos: +7d9c c4078000 rtnbit0 15 +7d9d 1fe22800 copy pdata ,regab +7d9e d8410000 arg 0x10000 ,temp +7d9f 6fe10163 fetch 2 ,mem_param_rt_rthalfslot +7da0 98467e00 isub temp ,pdata +7da1 9a80fe00 iadd regab ,pdata +7da2 793ffe40 set0 64 ,pdata +7da3 20600000 rtn + +clk2rt: +7da4 68490163 fetcht 2 ,mem_param_rt_rthalfslot +7da5 98000c00 iforce contr +7da6 1ff17e00 rshift16 pdata ,pdata +7da7 984ffe00 imul32 temp ,pdata +7da8 98c0fe00 iadd contr ,pdata +7da9 20600000 rtn + +clk2lpo: +7daa 1fed7e00 lshift8 pdata ,pdata +7dab 1ff27e00 lshift4 pdata ,pdata +7dac 6849c174 fetcht 3 ,mem_clks_per_lpo +7dad 9846fc00 idiv temp +7dae 20407def call wait_div_end +7daf 18078400 quotient temp +7db0 20600000 rtn + +clk2bt: +7db1 68490163 fetcht 2 ,mem_param_rt_rthalfslot +7db2 9846fc00 idiv temp +7db3 20407dec call get_div_result +7db4 1ff07e00 lshift16 pdata ,pdata +7db5 18070400 remainder temp +7db6 98418400 ior temp ,temp +7db7 20600000 rtn + +string2dec_from_uart: +7db8 d8400000 arg 0 ,temp + +string2dec_from_uart_done: +7db9 18422800 copy temp ,regab +7dba efe08003 ifetch 1 ,contu +7dbb 20407dc4 call uchar2dialog +7dbc 1a820400 copy regab ,temp +7dbd 20407dfe call swap +7dbe da40000a arg 10 ,regb +7dbf 9a4ffe00 imul32 regb ,pdata +7dc0 9840fe00 iadd temp ,pdata +7dc1 1fe20400 copy pdata ,temp +7dc2 c2007db9 loop string2dec_from_uart_done +7dc3 20600000 rtn + +uchar2dialog: +7dc4 d840003a arg 0x3a ,temp +7dc5 98467c00 isub temp ,null +7dc6 24217dcd nbranch uchar2dialog_number ,positive +7dc7 d8400061 arg 0x61 ,temp +7dc8 98467c00 isub temp ,null +7dc9 20217dd0 branch uchar2dialog_a2f ,positive +7dca d8400037 arg 0x37 ,temp +7dcb 98467e00 isub temp ,pdata +7dcc 20600000 rtn + +uchar2dialog_number: +7dcd d8400030 arg 0x30 ,temp +7dce 98467e00 isub temp ,pdata +7dcf 20600000 rtn + +uchar2dialog_a2f: +7dd0 d8400057 arg 0x57 ,temp +7dd1 98467e00 isub temp ,pdata +7dd2 20600000 rtn + +pn9: +7dd3 18426000 copy temp ,alarm +7dd4 580001ff setarg 0x1ff +7dd5 18002400 force 0 ,regb + +pn9_loop: +7dd6 1fe92200 rshift3 pdata ,rega +7dd7 1a232200 rshift rega ,rega +7dd8 9a22a200 ixor rega ,rega +7dd9 2a2ffe00 isolate1 0 ,rega +7dda 7920fe09 setflag true ,9 ,pdata +7ddb 18430400 rshift temp ,temp +7ddc 2feffe00 isolate1 0 ,pdata +7ddd 79208407 setflag true ,7 ,temp +7dde 1fe37e00 rshift pdata ,pdata +7ddf 1a40a401 increase 1 ,regb +7de0 2a400e00 compare 0 ,regb ,0x7 +7de1 2420fdd6 nbranch pn9_loop ,true +7de2 e0408005 istoret 1 ,contw +7de3 c2007dd6 loop pn9_loop +7de4 1e020400 copy alarm ,temp +7de5 20600000 rtn + +calc_average: +7de6 58000000 setarg 0 +7de7 1f222200 copy loopcnt ,rega + +calc_average_loop: +7de8 e8410006 ifetcht 2 ,contr +7de9 9840fe00 iadd temp ,pdata +7dea c2007de8 loop calc_average_loop +7deb 9a26fc00 idiv rega + +get_div_result: +7dec 20407def call wait_div_end +7ded 1807fe00 quotient pdata +7dee 20600000 rtn + +wait_div_end: +7def 207a8000 rtn modone +7df0 20207def branch wait_div_end + +compare_loop: + +string_compare: +7df1 efe08011 ifetch 1 ,rega +7df2 e8408012 ifetcht 1 ,regb +7df3 98467c00 isub temp ,null +7df4 24628000 nrtn zero +7df5 1a20a201 increase 1 ,rega +7df6 1a40a401 increase 1 ,regb +7df7 c2007df1 loop string_compare +7df8 18007c00 force 0 ,null +7df9 20600000 rtn + +ceiling: +7dfa 98467c00 isub temp ,null +7dfb 24610000 nrtn positive +7dfc 18427e00 deposit temp +7dfd 20600000 rtn + +swap: +7dfe 9840fe00 iadd temp ,pdata +7dff 98460400 isub temp ,temp +7e00 98467e00 isub temp ,pdata +7e01 20600000 rtn + +clean_mem: +7e02 df200200 arg 0x200 ,loopcnt +7e03 d8a04000 arg 0x4000 ,contw +7e04 20207d17 branch memset0 + +callback_func: +7e05 207a0000 rtn blank +7e06 1fe27a00 copy pdata ,pc + +wait_uarttx: +7e07 6ff1010e fetch 2 ,core_uart_txitems +7e08 243a7e07 nbranch wait_uarttx ,blank +7e09 20600000 rtn + +ice_break: +7e0a 70820301 jam 0x1 ,core_ice_ctrl +7e0b 20600000 rtn + +ice_setbp: +7e0c 67f10205 store 2 ,core_ice_break0 +7e0d 6ff08203 fetch 1 ,core_ice_ctrl +7e0e 79207e04 set1 4 ,pdata +7e0f 67f08203 store 1 ,core_ice_ctrl +7e10 20600000 rtn + +ice_setbp2: +7e11 67f10207 store 2 ,core_ice_break1 +7e12 6ff08203 fetch 1 ,core_ice_ctrl +7e13 79207e06 set1 6 ,pdata +7e14 67f08203 store 1 ,core_ice_ctrl +7e15 20600000 rtn + +ice_set_write_bp: +7e16 67f10205 store 2 ,core_ice_break0 +7e17 70820330 jam 0x30 ,core_ice_ctrl +7e18 20600000 rtn + +test_no_white: +7e19 6ff08043 fetch 1 ,core_config +7e1a 79207e04 set1 whiteoff_bit ,pdata +7e1b 67f08043 store 1 ,core_config +7e1c 20600000 rtn + +test_enable_white: +7e1d 6ff08043 fetch 1 ,core_config +7e1e 793ffe04 set0 whiteoff_bit ,pdata +7e1f 67f08043 store 1 ,core_config +7e20 20600000 rtn + +check_uart_tx_buff: +7e21 6ff1010e fetch 2 ,core_uart_txitems +7e22 d8400200 arg uart_air_control_threshold ,temp + +pdata_sub_temp: +7e23 98467c00 isub temp ,null +7e24 20600000 rtn + +fifo_in: +7e25 474cc033 bpatchx patch33_1 ,mem_patch33 +7e26 e8440011 ifetcht util_fifo_len ,rega +7e27 18417eff and temp ,0xff ,pdata +7e28 243a7e2b nbranch fifo_in_push ,blank +7e29 184cfe00 rshift8 temp ,pdata +7e2a e7e40011 istore util_fifo_len ,rega + +fifo_in_push: +7e2b 1a20a207 increase util_fifo_len + util_fifo_offset ,rega +7e2c efe08011 ifetch 1 ,rega +7e2d 243a137a nbranch assert ,blank +7e2e 6fe0895b fetch 1 ,mem_fifo_temp +7e2f e7e08011 istore 1 ,rega +7e30 20600000 rtn + +fifo_out: +7e31 474d4033 bpatchx patch33_2 ,mem_patch33 +7e32 df200008 arg util_fifo_len ,loopcnt +7e33 efe40011 ifetch util_fifo_len ,rega +7e34 207a0000 rtn blank + +fifo_out_loop: +7e35 efe08011 ifetch 1 ,rega +7e36 243a7e3a nbranch fifo_out_end ,blank +7e37 1a20a201 increase 1 ,rega +7e38 c2007e35 loop fifo_out_loop +7e39 2020137a branch assert + +fifo_out_end: +7e3a d8400000 arg 0 ,temp +7e3b e0408011 istoret 1 ,rega +7e3c 20600000 rtn + +fifo_is_empty: +7e3d efe40011 ifetch util_fifo_len ,rega +7e3e 20600000 rtn + +fifo_is_full: +7e3f efe08011 ifetch 1 ,rega +7e40 20600000 rtn + +fifo_is_near_full: +7e41 efe10011 ifetch 2 ,rega +7e42 20600000 rtn + +fifo_content_count: +7e43 d8400000 arg 0 ,temp + +fifo_content_count_loop: +7e44 6fe08006 fetch 1 ,contr +7e45 c2007e44 loop fifo_content_count_loop ,blank +7e46 18408401 increase 1 ,temp +7e47 c2007e44 loop fifo_content_count_loop +7e48 18427e00 copy temp ,pdata +7e49 20600000 rtn + +not_greater_than: +7e4a 98467c00 isub temp ,null +7e4b 24610000 nrtn positive + +copy_temp2pdata: +7e4c 18427e00 copy temp ,pdata +7e4d 20600000 rtn + +disable_positive: +7e4e 18007dff force -1 ,null +7e4f 20600000 rtn + +enable_positive: + +disable_zero: +7e50 18007c01 force 1 ,null +7e51 20600000 rtn + +enable_zero: +7e52 18007c00 force 0 ,null +7e53 20600000 rtn + +enable_user: +7e54 78347c00 enable user +7e55 20600000 rtn + +disable_user: +7e56 78547c00 disable user +7e57 20600000 rtn + +enable_user2: +7e58 78367c00 enable user2 +7e59 20600000 rtn + +disable_user2: +7e5a 78567c00 disable user2 +7e5b 20600000 rtn + +enable_user7: +7e5c 7838fc00 enable user7 +7e5d 20600000 rtn + +disable_blank: +7e5e 58000001 setarg 1 +7e5f 20600000 rtn + +enable_blank: + +set_pdata_0: +7e60 58000000 setarg 0 +7e61 20600000 rtn + +cal_sum: +7e62 1f267c00 sub loopcnt ,0 ,null +7e63 20628000 rtn zero + +cal_sum_loop: +7e64 e8408006 ifetcht 1 ,contr +7e65 9840fe00 iadd temp ,pdata +7e66 c2007e64 loop cal_sum_loop +7e67 20600000 rtn + +reverse_byte: +7e68 1f227e00 copy loopcnt ,pdata +7e69 207a0000 rtn blank +7e6a 18c27e00 copy contr ,pdata +7e6b 9f20fe00 iadd loopcnt ,pdata +7e6c 1fe0ffff increase -1 ,pdata +7e6d 1fe20c00 copy pdata ,contr + +reverse_loop: +7e6e efe08006 ifetch 1 ,contr +7e6f 18c08dfe increase -2 ,contr +7e70 e7e08005 istore 1 ,contw +7e71 c2007e6e loop reverse_loop +7e72 20600000 rtn + +calc_k12: +7e73 19622400 copy timeup ,regb + +calc_k: +7e74 da609420 arg mem_local_sig ,regc +7e75 18007224 force 36 ,loopcnt +7e76 18005600 force 0 ,rege +7e77 18006e00 force 0 ,regf + +rxcal_k1_loop: +7e78 20407e88 call complex_mult16to8 +7e79 52207e00 preload rega +7e7a 9d60d600 iadd rege ,rege +7e7b 50407e00 preload temp +7e7c 9ee0ee00 iadd regf ,regf +7e7d 1a40a404 increase 4 ,regb +7e7e 1a60a602 increase 2 ,regc +7e7f c2007e78 loop rxcal_k1_loop +7e80 55607e00 preload rege +7e81 d8400024 arg 36 ,temp +7e82 20407ed4 call signed_div +7e83 e7e20005 istore 4 ,contw +7e84 56e07e00 preload regf +7e85 20407ed4 call signed_div +7e86 e7e20005 istore 4 ,contw +7e87 20600000 rtn + +complex_mult16to8: +7e88 edc10012 ifetchr nap ,2 ,regb +7e89 eb808013 ifetchr fhs_misc ,1 ,regc +7e8a 20407eb9 call signed_ext16by8 +7e8b 98482200 imults temp ,rega +7e8c eb808006 ifetchr fhs_misc ,1 ,contr +7e8d 20347e8f branch complex_not_conj ,user +7e8e 1b863800 sub fhs_misc ,0 ,fhs_misc + +complex_not_conj: +7e8f 1a408c02 add regb ,2 ,contr +7e90 edc10006 ifetchr nap ,2 ,contr +7e91 20407eb9 call signed_ext16by8 +7e92 98483000 imults temp ,regd +7e93 52207e00 preload rega +7e94 9b062200 isub regd ,rega +7e95 edc10012 ifetchr nap ,2 ,regb +7e96 55c07e00 preload nap +7e97 98483000 imults temp ,regd +7e98 edc10006 ifetchr nap ,2 ,contr +7e99 eb808013 ifetchr fhs_misc ,1 ,regc +7e9a 20407eb9 call signed_ext16by8 +7e9b 98480400 imults temp ,temp +7e9c 53007e00 preload regd +7e9d 98408400 iadd temp ,temp +7e9e 20600000 rtn + +complex_mult32to32: +7e9f efe20012 ifetch 4 ,regb +7ea0 ea220013 ifetchr rega ,4 ,regc +7ea1 9a285600 imults rega ,rege +7ea2 ea220006 ifetchr rega ,4 ,contr +7ea3 52206e00 aligned rega ,regf +7ea4 1a408c04 add regb ,4 ,contr +7ea5 efe20006 ifetch 4 ,contr +7ea6 9a280400 imults rega ,temp +7ea7 55607e00 preload rege +7ea8 98465600 isub temp ,rege +7ea9 efe20012 ifetch 4 ,regb +7eaa 9ee86e00 imults regf ,regf +7eab efe20006 ifetch 4 ,contr +7eac ea220013 ifetchr rega ,4 ,regc +7ead 9a287e00 imults rega ,pdata +7eae 9ee0ee00 iadd regf ,regf +7eaf 20600000 rtn + +lshift14: +7eb0 1ff07e00 lshift16 pdata ,pdata + +rshift2: +7eb1 1feb7e00 rshift2 pdata ,pdata +7eb2 20600000 rtn + +lshift6: +7eb3 1fed7e00 lshift8 pdata ,pdata +7eb4 20207eb1 branch rshift2 + +calc_vok: +7eb5 9feffe00 imul32 pdata ,pdata + +rshift7: +7eb6 1ff1fe00 rshift4 pdata ,pdata +7eb7 1fe97e00 rshift3 pdata ,pdata +7eb8 20600000 rtn + +signed_ext16by8: +7eb9 55c07e00 preload nap +7eba 53800400 aligned fhs_misc ,temp +7ebb 20600000 rtn + +abs32: +7ebc c40f8000 rtnbit0 31 +7ebd 18000400 force 0 ,temp +7ebe 79200420 set1 32 ,temp +7ebf 184085ff increase -1 ,temp +7ec0 9842fe00 ixor temp ,pdata +7ec1 1fe0fe01 pincrease 1 +7ec2 20600000 rtn + +sqrt: +7ec3 98002200 iforce rega +7ec4 db000000 arg 0 ,regd +7ec5 7920301e set1 30 ,regd +7ec6 da400000 arg 0 ,regb +7ec7 df200010 arg 16 ,loopcnt + +sqrt_loop: +7ec8 1b027e00 deposit regd +7ec9 9a40fe00 iadd regb ,pdata +7eca 1a432400 rshift regb ,regb +7ecb 9a267e00 isub rega ,pdata +7ecc 2022fece branch sqrt_less ,zero +7ecd 20217ed1 branch sqrt_greater ,positive + +sqrt_less: +7ece 1fe62200 sub pdata ,0 ,rega +7ecf 1b027e00 deposit regd +7ed0 9a41a400 ior regb ,regb + +sqrt_greater: +7ed1 1b0b3000 rshift2 regd ,regd +7ed2 c2007ec8 loop sqrt_loop +7ed3 20600000 rtn + +signed_div: +7ed4 793f802c set0 mark_temp ,mark +7ed5 c31ffed8 bbit0 63 ,signed_div_unsigna +7ed6 7920002c set1 mark_temp ,mark +7ed7 1fe67e00 sub pdata ,0 ,pdata + +signed_div_unsigna: +7ed8 284c003f isolate0 63 ,temp +7ed9 2020fedc branch signed_div_unsignb ,true +7eda 7940002c setflip mark_temp ,mark +7edb 18460400 sub temp ,0 ,temp + +signed_div_unsignb: +7edc 9846fc00 idiv temp +7edd 20407dec call get_div_result +7ede c6960000 rtnmark0 mark_temp +7edf 1fe67e00 sub pdata ,0 ,pdata +7ee0 20600000 rtn + +rx_iq_comp: +7ee1 20407ee7 call calc_k1 +7ee2 20407eea call calc_k2 +7ee3 20407eec call calc_absk12_sqr +7ee4 20407efb call calc_g +7ee5 20407f0a call calc_a +7ee6 20207f17 branch calc_c22 + +calc_k1: +7ee7 78347c00 enable user +7ee8 d8a00a01 arg mem_tmp_buffer ,contw +7ee9 20207e73 branch calc_k12 + +calc_k2: +7eea 78547c00 disable user +7eeb 20207e73 branch calc_k12 + +calc_absk12_sqr: +7eec 6fe20a01 fetch 4 ,mem_tmp_buffer +7eed 684a0a09 fetcht 4 ,mem_tmp_buffer + 8 +7eee 9840fe00 iadd temp ,pdata +7eef 20407ebc call abs32 +7ef0 98000400 iforce temp +7ef1 984fd600 imul32 temp ,rege +7ef2 6fe20a05 fetch 4 ,mem_tmp_buffer + 4 +7ef3 684a0a0d fetcht 4 ,mem_tmp_buffer + 12 +7ef4 98467e00 isub temp ,pdata +7ef5 20407ebc call abs32 +7ef6 98000400 iforce temp +7ef7 984ffe00 imul32 temp ,pdata +7ef8 9d60fe00 iadd rege ,pdata +7ef9 67e40a11 store 8 ,mem_tmp_buffer + 16 +7efa 20600000 rtn + +calc_g: +7efb da400a01 arg mem_tmp_buffer ,regb +7efc da600a09 arg mem_tmp_buffer + 8 ,regc +7efd 20407e9f call complex_mult32to32 +7efe 55607e00 preload rege +7eff 1fe67e00 sub pdata ,0 ,pdata +7f00 1ff07e00 lshift16 pdata ,pdata +7f01 1febfe00 lshift2 pdata ,pdata +7f02 684c0a11 fetcht 8 ,mem_tmp_buffer + 16 +7f03 9848fc00 idiv48 temp +7f04 da210000 arg 0x10000 ,rega +7f05 20407dec call get_div_result +7f06 9a20fe00 iadd rega ,pdata +7f07 20407ec3 call sqrt +7f08 1a425600 copy regb ,rege +7f09 20600000 rtn + +calc_a: +7f0a 184f7e00 rshift32 temp ,pdata +7f0b 9a4fa200 imul32 regb ,rega +7f0c 1a427e00 deposit regb +7f0d 984f8400 imul32 temp ,temp +7f0e 1a307e00 lshift16 rega ,pdata +7f0f 1ff07e00 lshift16 pdata ,pdata +7f10 98408400 iadd temp ,temp +7f11 56e07e00 preload regf +7f12 1fe67e00 sub pdata ,0 ,pdata +7f13 1ff07e00 lshift16 pdata ,pdata +7f14 1fe3fe00 lshift pdata ,pdata +7f15 9848fc00 idiv48 temp +7f16 20207dec branch get_div_result + +calc_c22: +7f17 1fe32600 rshift pdata ,regc +7f18 9fef8400 imul32 pdata ,temp +7f19 58010000 setarg 0x10000 +7f1a 98467e00 isub temp ,pdata +7f1b 20407ec3 call sqrt +7f1c 1a427e00 deposit regb +7f1d 9d6f8400 imul32 rege ,temp +7f1e 58000000 setarg 0 +7f1f 79207e1c set1 28 ,pdata +7f20 9848fc00 idiv48 temp +7f21 20407def call wait_div_end +7f22 18078400 quotient temp +7f23 58001000 setarg 0x1000 +7f24 98466e00 isub temp ,regf +7f25 20600000 rtn + +tx_iq_precomp: +7f26 20407f2c call calc_vok1 +7f27 20407f30 call calc_sumvok +7f28 20407f37 call calc_ad_bc +7f29 20407f3e call calc_omega +7f2a 20407f4d call calc_b1 +7f2b 20207f58 branch calc_b2 + +calc_vok1: +7f2c 6fe089f6 fetch 1 ,mem_vdk +7f2d 20407eb5 call calc_vok +7f2e 67e089f8 store 1 ,mem_vok +7f2f 20600000 rtn + +calc_sumvok: +7f30 98002600 iforce regc +7f31 9fef8400 imul32 pdata ,temp +7f32 efe08006 ifetch 1 ,contr +7f33 20407eb5 call calc_vok +7f34 e7e08005 istore 1 ,contw +7f35 9a60a200 iadd regc ,rega +7f36 20600000 rtn + +calc_ad_bc: +7f37 9feffe00 imul32 pdata ,pdata +7f38 9840a400 iadd temp ,regb +7f39 1a227e00 deposit rega +7f3a 9a2f8400 imul32 rega ,temp +7f3b 1a43fe00 lshift regb ,pdata +7f3c 98460400 isub temp ,temp +7f3d 20600000 rtn + +calc_omega: +7f3e 58400000 setarg 0x400000 +7f3f 9846fc00 idiv temp +7f40 20407dec call get_div_result +7f41 67e109fc store 2 ,mem_omega +7f42 1a307e00 lshift16 rega ,pdata +7f43 1feb7e00 rshift2 pdata ,pdata +7f44 9846fc00 idiv temp +7f45 20407dec call get_div_result +7f46 e7e10005 istore 2 ,contw +7f47 1a4d7e00 lshift8 regb ,pdata +7f48 1fe37e00 rshift pdata ,pdata +7f49 9846fc00 idiv temp +7f4a 20407dec call get_div_result +7f4b e7e10005 istore 2 ,contw +7f4c 20600000 rtn + +calc_b1: +7f4d 1a707e00 lshift16 regc ,pdata +7f4e 1feb7e00 rshift2 pdata ,pdata +7f4f 9a46fc00 idiv regb +7f50 20407dec call get_div_result +7f51 67e10a02 store 2 ,mem_b1 +7f52 6fe089f6 fetch 1 ,mem_vdk +7f53 20407eb3 call lshift6 +7f54 9a26fc00 idiv rega +7f55 20407dec call get_div_result +7f56 e7e10005 istore 2 ,contw +7f57 20600000 rtn + +calc_b2: +7f58 6fe089f9 fetch 1 ,mem_vok + 1 +7f59 20407eb0 call lshift14 +7f5a 9a46fc00 idiv regb +7f5b 20407dec call get_div_result +7f5c 67e10a06 store 2 ,mem_b2 +7f5d 6fe089f7 fetch 1 ,mem_vdk + 1 +7f5e 20407eb3 call lshift6 +7f5f 9a26fc00 idiv rega +7f60 20407dec call get_div_result +7f61 e7e10005 istore 2 ,contw +7f62 20600000 rtn + +tx_iq_cal: +7f63 d8a00a2a arg mem_q ,contw +7f64 df200002 arg 2 ,loopcnt +7f65 20407d17 call memset0 +7f66 d8e00004 arg 4 ,queue + +tx_iq_cal_loop: +7f67 20407f83 call calc_mk1 +7f68 20407f86 call calc_d +7f69 20407f89 call calc_c +7f6a 20407f92 call calc_est1 +7f6b 20407f98 call calc_est2 +7f6c 20407f9e call calc_u1 +7f6d 20407fa4 call calc_u2 +7f6e 20407faa call calc_qest +7f6f 19609620 increase 32 ,timeup +7f70 18e08fff increase -1 ,queue +7f71 2422ff67 nbranch tx_iq_cal_loop ,zero + +calc_tx_c22: +7f72 6fe20a2a fetch 4 ,mem_q +7f73 d8c00100 arg 0x100 ,contr +7f74 98c0d600 iadd contr ,rege +7f75 6fe20a2e fetch 4 ,mem_q + 4 +7f76 9fe80400 imults pdata ,temp +7f77 58010000 setarg 0x10000 +7f78 98467e00 isub temp ,pdata +7f79 20407ec3 call sqrt +7f7a 1a427e00 deposit regb +7f7b 9d680400 imults rege ,temp +7f7c 58000000 setarg 0 +7f7d 79207e1c set1 28 ,pdata +7f7e 20407ed4 call signed_div +7f7f d8401000 arg 0x1000 ,temp +7f80 98467e00 isub temp ,pdata +7f81 1fe67e00 sub pdata ,0 ,pdata +7f82 20600000 rtn + +calc_mk1: +7f83 19620c00 copy timeup ,contr +7f84 df200008 arg 8 ,loopcnt +7f85 20207de6 branch calc_average + +calc_d: +7f86 98002400 iforce regb +7f87 df200008 arg 8 ,loopcnt +7f88 20207de6 branch calc_average + +calc_c: +7f89 9a40a600 iadd regb ,regc +7f8a 684889f9 fetcht 1 ,mem_vok + 1 +7f8b 984f8400 imul32 temp ,temp +7f8c 6fe089f8 fetch 1 ,mem_vok +7f8d 9a4ffe00 imul32 regb ,pdata +7f8e 9840fe00 iadd temp ,pdata +7f8f 1ff1fe00 rshift4 pdata ,pdata +7f90 1fe92200 rshift3 pdata ,rega +7f91 20600000 rtn + +calc_est1: +7f92 6fe109fe fetch 2 ,mem_omega + 2 +7f93 9a6f8400 imul32 regc ,temp +7f94 6fe109fc fetch 2 ,mem_omega +7f95 9a2ffe00 imul32 rega ,pdata +7f96 98462400 isub temp ,regb +7f97 20600000 rtn + +calc_est2: +7f98 6fe109fe fetch 2 ,mem_omega + 2 +7f99 9a2f8400 imul32 rega ,temp +7f9a efe10006 ifetch 2 ,contr +7f9b 9a6ffe00 imul32 regc ,pdata +7f9c 98462200 isub temp ,rega +7f9d 20600000 rtn + +calc_u1: +7f9e 6fe089f8 fetch 1 ,mem_vok +7f9f 20407fc5 call mults_rshift7 +7fa0 9a20ee00 iadd rega ,regf +7fa1 19622600 copy timeup ,regc +7fa2 d8a00a0a arg mem_u1 ,contw +7fa3 20207fc8 branch theta_mul + +calc_u2: +7fa4 6fe089f9 fetch 1 ,mem_vok + 1 +7fa5 20407fc5 call mults_rshift7 +7fa6 9a20ee00 iadd rega ,regf +7fa7 1960a610 add timeup ,16 ,regc +7fa8 d8a00a1a arg mem_u2 ,contw +7fa9 20207fc8 branch theta_mul + +calc_qest: +7faa 52406e00 aligned regb ,regf +7fab 6a410a02 fetchr regb ,2 ,mem_b1 +7fac 6a610a06 fetchr regc ,2 ,mem_b2 +7fad da200a0a arg mem_u1 ,rega +7fae ddc00a1a arg mem_u2 ,nap +7faf d8a00a2a arg mem_q ,contw +7fb0 20407fb6 call calc_q +7fb1 20407fb6 call calc_q +7fb2 6a410a04 fetchr regb ,2 ,mem_b1 + 2 +7fb3 6a610a08 fetchr regc ,2 ,mem_b2 + 2 +7fb4 20407fb6 call calc_q +7fb5 20207fb6 branch calc_q + +calc_q: +7fb6 efe20011 ifetch 4 ,rega +7fb7 18c22200 copy contr ,rega +7fb8 9a485600 imults regb ,rege +7fb9 efe2002e ifetch 4 ,nap +7fba 18c25c00 copy contr ,nap +7fbb 9a687e00 imults regc ,pdata +7fbc 9d60fe00 iadd rege ,pdata +7fbd 1fed7e00 lshift8 pdata ,pdata +7fbe 1ee20400 copy regf ,temp +7fbf 20407ed4 call signed_div +7fc0 ed620005 ifetchr rege ,4 ,contw +7fc1 9d667e00 isub rege ,pdata +7fc2 1fe63000 sub pdata ,0 ,regd +7fc3 e3020005 istorer regd ,4 ,contw +7fc4 20600000 rtn + +mults_rshift7: +7fc5 9a480400 imults regb ,temp +7fc6 50407e00 preload temp +7fc7 20207eb6 branch rshift7 + +theta_mul: +7fc8 d9000004 arg 4 ,debug +7fc9 ddc09400 arg mem_theta ,nap + +theta_mul_loop0: +7fca dd600000 arg 0 ,rege +7fcb df200008 arg 8 ,loopcnt + +theta_mul_loop1: +7fcc efe10013 ifetch 2 ,regc +7fcd 18c22600 copy contr ,regc +7fce 9ee67e00 isub regf ,pdata +7fcf eb80802e ifetchr fhs_misc ,1 ,nap +7fd0 18c25c00 copy contr ,nap +7fd1 53800400 aligned fhs_misc ,temp +7fd2 98487e00 imults temp ,pdata +7fd3 9d60d600 iadd rege ,rege +7fd4 c2007fcc loop theta_mul_loop1 +7fd5 1d6cfe00 rshift8 rege ,pdata +7fd6 1fe37e00 rshift pdata ,pdata +7fd7 e7e20005 istore 4 ,contw +7fd8 1a60a7f0 increase -16 ,regc +7fd9 190091ff increase -1 ,debug +7fda 2422ffca nbranch theta_mul_loop0 ,zero +7fdb 20600000 rtn + +clear_wake: +7fdc 58000000 setarg 0 +7fdd 79207e13 set1 19 ,pdata +7fde 67e4009f store 8 ,mem_gpio_wakeup_low +7fdf 20600000 rtn + Index: sched/mouse.dat =================================================================== --- /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/sched/mouse.dat (revision 1050) +++ /YC1308AC/branch/mouse_project/YJX_Project/1011-T_Project/Multimode/WK303_24G_First_PBKey_2ch/sched/mouse.dat (working copy) @@ -224,7 +224,7 @@ mem_app_connection_options:06 mem_lap:17 a0 c8 12 24 51 mem_local_name_length: -'BT3.0 Mouse +'TM001 BT3.0 mem_sniff_param_interval: 0e 00 01 00 ##mem_sniff_param_attempt:01 00 @@ -260,16 +260,16 @@ #microsoft swift pair 06 ff 06 00 03 00 80 #name -'\09BT5.2 Mouse +'\09TM001 BT5.2 mem_le_scan_data_len:1f mem_le_scan_data: #name -'\09BT5.2 Mouse +'\09TM001 BT5.2 mem_le_name_len: -'BT5.2 Mouse +'TM001 BT5.2 mem_le_name_patch_len: #max 18bytes 'BT5.2 Mouse