Index: format/app_mouse.format =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/format/app_mouse.format (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/format/app_mouse.format (working copy) @@ -307,7 +307,7 @@ 1 mem_mouse_connected_state 1 mem_select_device_button_statue_bt_discovery - +2 mem_mouse_temp_data ) ( Index: output/bt_program23.list =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.list (revision 4976) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.list (working copy) @@ -128,31546 +128,31591 @@ 0x70 000219 arg 12 ,loopcnt 0x71 000220 call clear_mem 0x72 000221 call p_mouse_le_txbuff_load -0x73 000222 call init_memp -0x74 000223 call rfcomm_init -0x75 000224 call init_lmp -0x76 000225 ncall lpm_disable_exen_output ,wake -0x77 000226 call ui_init + 1 -0x78 000227 branch soft_reset + 11 -: 000229 p_soft_reset_2: -0x79 000230 call app_lpm_init ,wake -0x7a 000231 call publickey_init -0x7b 000232 call lpm_recover_clk ,wake -: 000233 p_sp_cal_loop: -0x7c 000234 call sp_calc_sequence -0x7d 000235 fetch 1 ,mem_ssp_enable -0x7e 000236 branch main_loop ,blank -0x7f 000237 fetch 1 ,mem_sp_local_key_invalid -0x80 000238 branch p_sp_cal_loop ,blank -0x81 000239 branch main_loop -: 000241 p_init_param: -0x82 000242 setarg param_le_version -0x83 000243 store 3 ,mem_lmp_version -0x84 000244 setarg param_le_subversion -0x85 000245 store 2 ,mem_lmp_version + 3 -0x86 000246 branch init_param + 12 -: 000248 p_lpm_check_wake_lock: -0x87 000249 rtnmark1 mark_24g -0x88 000250 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x89 000251 beq 0 ,disable_blank -0x8a 000252 fetch 1 ,mem_mouse_le_conn_param_reject -0x8b 000253 beq le_lpm_disable ,disable_blank -0x8c 000254 fetch 2 ,mem_sdp_remote_cid -0x8d 000255 nbranch disable_blank ,blank -0x8e 000256 fetch 1 ,mem_mouse_wheel_trigger -0x8f 000257 nbranch disable_blank ,blank -0x90 000258 branch enable_blank -: 000261 p_g24_dispatch: -0x91 000262 rtnmark0 mark_24g -0x92 000263 fetch 1 ,mem_24g_conn_sm -0x93 000264 bbit1 state_24g_pair ,p_g24_pair_dispatch -0x94 000265 bbit1 state_24g_reconn ,p_g24_reconn_dispatch -0x95 000266 fetch 1 ,mem_24g_transmit_by_interrupt -0x96 000267 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt -: 000268 p_g24_transmit_process: -0x97 000269 call p_g24_txdata_prep -0x98 000270 nbranch p_g24_nodata_transmit ,user -0x99 000271 call p_g24_rf_sta_check -: 000272 p_g24_transmit_start: -0x9a 000273 call p_g24_transmit_packet -0x9b 000274 fetch 1 ,mem_24g_pairing_sm -0x9c 000275 rtnne state_24g_pairing_success -0x9d 000276 call power_ctrl_start -0x9e 000278 fetch 1 ,mem_mouse_multi_led_state -0x9f 000279 beq on ,p_g24_transmit_by_interrupt_enable -: 000280 p_g24_short_sleep: -0xa0 000281 call p_g24_lpm_wait -0xa1 000282 nrtn user -0xa2 000283 call p_clear_wake -0xa3 000284 setarg 58000 -: 000285 p_g24_enter_sleep: -0xa4 000286 branch g24_lpm_long_sleep2 -: 000288 p_g24_pair_dispatch: -0xa5 000289 jam zcode_c0 ,mem_zcode_temp_param0 -0xa6 000290 branch p_zcode_entrance -: 000292 p_g24_reconn_dispatch: -0xa7 000293 jam zcode_70 ,mem_zcode_temp_param0 -0xa8 000294 branch p_zcode_entrance -: 000305 p_g24_transmit_by_interrupt: -0xa9 000306 call p_g24_timer_check -0xaa 000307 nrtn user -0xab 000308 call p_g24_interval_calibrate -0xac 000309 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count -0xad 000310 increase 1 ,pdata -0xae 000311 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0xaf 000312 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init -0xb0 000313 isub temp ,null -0xb1 000314 call p_g24_transmit_by_interrupt_exit ,zero -0xb2 000315 branch p_g24_transmit_process -: 000316 p_g24_transmit_by_interrupt_exit: -0xb3 000317 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -0xb4 000318 setarg 0 -0xb5 000319 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0xb6 000320 setarg 25 -0xb7 000321 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init -: 000322 p_g24_interval_min: -0xb8 000323 jam 0 ,mem_24g_pac_index -0xb9 000324 fetch 1 ,mem_24g_interval_min -: 000325 p_g24_current_interval_store: -0xba 000326 store 1 ,mem_24g_interval -0xbb 000327 rtn -: 000328 p_g24_interval_max: -0xbc 000329 fetch 1 ,mem_24g_interval_max -0xbd 000330 branch p_g24_current_interval_store -: 000331 p_g24_interval_calibrate: -0xbe 000332 fetch 1 ,mem_24g_pac_index -0xbf 000333 increase 1 ,pdata -0xc0 000334 store 1 ,mem_24g_pac_index -0xc1 000335 beq 4 ,p_g24_interval_max -0xc2 000336 beq 5 ,p_g24_interval_min -0xc3 000337 rtn -: 000339 p_g24_nodata_transmit: -0xc4 000340 fetch 1 ,mem_24g_abort_pac -0xc5 000341 call p_g24_send_abort_packet ,blank -: 000342 p_g24_long_sleep: -0xc6 000343 call p_g24_lpm_wait -0xc7 000344 nrtn user -0xc8 000345 fetch 3 ,mem_24g_enter_hibernate -0xc9 000346 branch g24_lpm_long_sleep2 -: 000348 p_g24_send_abort_packet: -0xca 000349 jam 1 ,mem_24g_abort_pac -0xcb 000350 jam 0 ,mem_24g_rf_hop_ch -0xcc 000351 call p_g24_transmit_rf_ctrl_clear -0xcd 000352 store 1 ,mem_24g_txbuf -0xce 000353 setarg 0 -0xcf 000354 store 7 ,mem_24g_txbuf + 1 -0xd0 000355 fetch 4 ,mem_24g_device_addr -0xd1 000356 store 4 ,mem_24g_txbuf + 8 -0xd2 000357 jam 12 ,mem_24g_datalen -0xd3 000358 fetch 1 ,mem_24g_data_type -0xd4 000359 set1 bit_abort ,pdata -0xd5 000360 store 1 ,mem_24g_data_type -0xd6 000361 call p_g24_txdata_enable_tx -0xd7 000362 branch p_g24_transmit_start -: 000364 p_g24_transmit_rf_sta_init: -0xd8 000365 jam 1 ,mem_24g_rf_last_sta -0xd9 000366 jam 0 ,mem_24g_sync_cnt -: 000367 p_g24_transmit_rf_ctrl_clear: -0xda 000368 fetch 1 ,mem_24g_data_type -0xdb 000369 and_into bits_data ,pdata -0xdc 000370 store 1 ,mem_24g_data_type -0xdd 000371 rtn -: 000373 p_g24_hop_ch_enable: -0xde 000374 fetch 1 ,mem_24g_data_type -0xdf 000375 set1 bit_hop ,pdata -0xe0 000376 store 1 ,mem_24g_data_type -0xe1 000378 store 1 ,mem_24g_txpayload -0xe2 000379 rtn -: 000381 p_g24_hop_enable_packet: -0xe3 000382 fetch 1 ,mem_24g_data_type -0xe4 000383 rtnbit0 bit_hop -: 000384 p_g24_hop_ch_disable: -0xe5 000385 fetch 1 ,mem_24g_data_type -0xe6 000386 set0 bit_hop ,pdata -0xe7 000387 store 1 ,mem_24g_data_type -0xe8 000388 store 1 ,mem_24g_txpayload -0xe9 000389 call power_ctrl_pac_succ_decrs -0xea 000390 branch p_g24_ch -: 000392 p_g24_rf_hop_attemp_again: -0xeb 000393 fetch 1 ,mem_24g_rf_hop_ch -0xec 000394 bne 1 ,p_g24_transmit_rf_ctrl_clear -: 000395 p_g24_rf_hop_fastly: -0xed 000396 fetch 1 ,mem_24g_hop_fastly_cnt -0xee 000397 increase 1 ,pdata -0xef 000398 store 1 ,mem_24g_hop_fastly_cnt -0xf0 000399 beq 4 ,p_g24_rf_hop_fastly_exit -0xf1 000400 call p_g24_ch -0xf2 000401 jam 2 ,mem_24g_max_retry -: 000402 p_g24_transmit_packet: -0xf3 000403 jam 0 ,mem_24g_retry -: 000404 p_g24_transmit_loop: -0xf4 000405 arg param_rx_setup ,timeup -0xf5 000406 until clkn_rt ,meet -0xf6 000407 call p_g24_transmit_receive_ack -0xf7 000410 nbranch p_g24_retransmit ,sync -0xf8 000411 nbranch p_g24_retransmit ,user3 -0xf9 000412 call p_g24_txbuf_clear -0xfa 000413 call p_g24_ackpayload_parse -0xfb 000414 call power_ctrl_pac_succ_incrs -: 000415 p_g24_transmit_next_packet: -0xfc 000416 jam 0 ,mem_retry_count -0xfd 000417 fetch 1 ,mem_24g_pid -0xfe 000418 increase 1 ,pdata -0xff 000419 store 1 ,mem_24g_pid -0x100 000420 call p_g24_hop_enable_packet -0x101 000421 fetch 1 ,mem_24g_pairing_sm -0x102 000422 bne state_24g_pairing_success ,p_g24_paring_mode_start -0x103 000423 call p_g24_transmit_succ_rf_config -: 000424 p_g24_transmit_abandon: -0x104 000425 setarg 0 -0x105 000426 store 4 ,mem_24g_ensure -0x106 000427 store 1 ,mem_24g_hop_pac_retry -0x107 000428 rtn -: 000430 p_g24_rf_hop_fastly_exit: -0x108 000431 call power_ctrl_pac_succ_decrs -0x109 000432 jam 0 ,mem_24g_hop_fastly_cnt -0x10a 000433 branch p_g24_transmit_rf_ctrl_clear -: 000435 p_g24_transmit_hop_pac_succ_wo_hop: -0x10b 000436 jam 2 ,mem_24g_sync_cnt -: 000437 p_g24_transmit_hop_pac_succ: -0x10c 000438 jam 1 ,mem_24g_rf_last_sta -0x10d 000439 jam 0 ,mem_24g_rf_hop_ch -0x10e 000440 branch p_g24_transmit_rf_ctrl_clear -: 000442 p_g24_transmit_succ_rf_config: -0x10f 000443 fetch 1 ,mem_24g_rf_work_stage -0x110 000444 beq 3 ,p_g24_transmit_hop_pac_succ -0x111 000445 fetch 1 ,mem_24g_data_type -0x112 000446 isolate0 bit_hop ,pdata -0x113 000447 branch p_g24_transmit_rf_sta_init ,true -0x114 000448 fetch 1 ,mem_24g_rf_work_stage -0x115 000449 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop -0x116 000450 beq 2 ,p_g24_transmit_hop_pac_succ -0x117 000451 rtn -: 000453 p_g24_rf_sta_check: -0x118 000454 fetch 1 ,mem_24g_pairing_sm -0x119 000455 rtnne state_24g_pairing_success -0x11a 000456 call p_g24_rf_laststa_synccnt_check -0x11b 000457 ncall p_g24_rf_sync_cnt_check ,user2 -0x11c 000458 rtn -: 000460 p_g24_rf_laststa_synccnt_check: -0x11d 000461 disable user2 -0x11e 000462 fetch 1 ,mem_24g_rf_last_sta -0x11f 000463 rtnne 1 -0x120 000464 fetch 1 ,mem_24g_sync_cnt -0x121 000465 rtnne 0 -0x122 000466 jam 1 ,mem_24g_rf_work_stage -0x123 000467 jam 4 ,mem_24g_max_retry -0x124 000468 branch enable_user2 -: 000470 p_g24_rf_sync_cnt_check: -0x125 000471 fetch 1 ,mem_24g_sync_cnt -0x126 000472 branch p_g24_rf_hop_attemp ,blank -0x127 000473 increase -1 ,pdata -0x128 000474 store 1 ,mem_24g_sync_cnt -0x129 000475 jam 2 ,mem_24g_rf_work_stage -0x12a 000476 jam 4 ,mem_24g_max_retry -: 000477 p_g24_ch: -0x12b 000478 fetcht 1 ,mem_24g_current_ch_number -0x12c 000479 fetch 1 ,mem_24g_addr -0x12d 000480 and_into 0x03 ,pdata -0x12e 000481 mul32 pdata ,4 ,rega -0x12f 000482 setarg mem_24g_ch_map1 -0x130 000483 iadd rega ,pdata -0x131 000484 iadd temp ,contr -0x132 000485 ifetch 1 ,contr -0x133 000486 store 1 ,mem_24g_ch -0x134 000487 increase 1 ,temp -0x135 000488 and_into 3 ,temp -0x136 000489 storet 1 ,mem_24g_current_ch_number -0x137 000490 rtn -: 000492 p_g24_rf_hop_attemp: -0x138 000493 jam 3 ,mem_24g_rf_work_stage -0x139 000494 fetch 1 ,mem_24g_rf_hop_ch -0x13a 000495 nbranch p_g24_rf_hop_attemp_again ,blank -0x13b 000496 jam 2 ,mem_24g_max_retry -0x13c 000497 branch p_g24_ch -: 000499 p_g24_txdata_prep: -0x13d 000500 fetch 1 ,mem_24g_pairing_sm -0x13e 000501 bne state_24g_pairing_success ,p_g24_pairing_sm -: 000502 p_g24_txdata_prep_packeage_data: -0x13f 000503 call p_g24_package_data -: 000504 p_g24_txdata_enable_tx: -0x140 000505 call p_g24_transmit_prep -0x141 000506 jam ensure_on_24g ,mem_24g_ensure -0x142 000507 rtn -: 000509 p_g24_package_data: -0x143 000510 fetch 2 ,mem_cb_24g_data -0x144 000511 call callback_func -0x145 000512 branch p_g24_accumulate_mouse_data ,user -0x146 000513 fetch 7 ,mem_24g_txbuf + 1 -0x147 000514 rtn blank -0x148 000515 branch enable_user -: 000516 p_g24_accumulate_mouse_data: -0x149 000518 jam 0 ,mem_24g_abort_pac -0x14a 000519 add rega ,1 ,pdata -0x14b 000520 store 1 ,mem_24g_datalen -0x14c 000521 call p_g24_transmit_rf_ctrl_clear -0x14d 000522 store 1 ,mem_24g_txbuf -0x14e 000523 ifetcht 1 ,contw -0x14f 000524 ifetch 1 ,regb -0x150 000525 ior temp ,pdata -0x151 000526 istore 1 ,contw -0x152 000527 increase 1 ,regb -0x153 000528 ifetch 4 ,regb -0x154 000529 istore 4 ,contw -0x155 000530 increase 4 ,regb -0x156 000531 arg mem_24g_txbuf + 6 ,contw -0x157 000532 arg 2 ,loopcnt -: 000533 p_g24_accumulation_loop: -0x158 000534 ifetch 1 ,regb -0x159 000535 ifetcht 1 ,contw -0x15a 000536 iadd temp ,pdata -0x15b 000537 istore 1 ,contw -0x15c 000538 increase 1 ,regb -0x15d 000539 loop p_g24_accumulation_loop -0x15e 000540 rtn -: 000542 p_g24_txbuf_clear: -0x15f 000543 arg 4 ,loopcnt -0x160 000544 arg mem_24g_txbuf ,contw -0x161 000545 branch memset0 -: 000547 p_g24_transmit_receive_ack: -0x162 000548 disable user3 -0x163 000549 call p_g24_transmit -0x164 000554 force 0 ,radio_ctrl -0x165 000555 fetch 4 ,mem_24g_addr -0x166 000556 iforce access -0x167 000557 fetcht 1 ,mem_last_freq -0x168 000558 call set_freq_rx -0x169 000559 call rf_rx_enable -0x16a 000560 call p_g24_receive_rxon -0x16b 000561 call p_g24_end_of_packet ,user3 -0x16c 000562 rtn -: 000567 p_g24_retransmit: -0x16d 000568 fetch 1 ,mem_24g_abort_pac -0x16e 000569 nrtn blank -0x16f 000570 fetch 2 ,mem_24g_txfail_cnt -0x170 000571 increase 1 ,pdata -0x171 000572 store 2 ,mem_24g_txfail_cnt -0x172 000573 fetch 1 ,mem_24g_txfail_cnt + 1 -0x173 000574 bbit1 4 ,g24_stop_24g_mode -0x174 000575 fetch 1 ,mem_24g_pairing_sm -0x175 000576 bne state_24g_pairing_success ,p_g24_tx_paring_retry -0x176 000577 call p_g24_tx_hop_ch_process -0x177 000578 branch p_g24_transmit_loop -: 000580 p_g24_tx_paring_retry: -0x178 000581 fetch 1 ,mem_24g_txfail_cnt -0x179 000582 rtnne 0xff -: 000583 p_g24_tx_attempt_fail: -0x17a 000584 setarg 0 -0x17b 000585 store 2 ,mem_24g_txfail_cnt -0x17c 000586 branch g24_stop_24g_mode -: 000588 p_g24_tx_fast_hop: -0x17d 000589 call power_ctrl_txpower_incrs -0x17e 000590 call power_ctrl_pac_succ_decrs -0x17f 000591 branch p_g24_ch -: 000593 p_g24_tx_hop_ch_process: -0x180 000594 fetch 1 ,mem_24g_retry -0x181 000595 sub pdata ,11 ,null -0x182 000596 nbranch p_g24_tx_fast_hop ,positive -0x183 000597 increase 1 ,pdata -0x184 000598 store 1 ,mem_24g_retry -0x185 000599 beq 2 ,p_g24_hop_ch_enable -0x186 000600 beq 6 ,p_g24_hop_ch_disable -0x187 000601 beq 8 ,p_g24_hop_ch_enable -0x188 000602 beq 12 ,p_g24_hop_ch_disable -0x189 000603 rtn -: 000605 p_g24_ackpayload_parse: -0x18a 000606 call p_g24_read_len_pid_crc -0x18b 000607 fetch 1 ,mem_24g_rxdata_length -0x18c 000608 rtn blank -0x18d 000609 iforce loopcnt -0x18e 000610 arg mem_24g_rxbuf + 2 ,contr -0x18f 000611 arg mem_24g_rxpayload ,contw -0x190 000612 branch memcpy -: 000614 p_g24_pair_init: -0x191 000615 jam tx_power_pair ,mem_tx_power -0x192 000616 jam 0 ,mem_24g_pid -0x193 000617 jam g24_pair_ch ,mem_24g_ch -0x194 000618 fetch 4 ,mem_24g_paring_addr -: 000619 p_g24_update_addr_and_synccrc8: -0x195 000620 store 4 ,mem_24g_addr -: 000622 p_g24_syncword_crc8: -0x196 000623 arg 0 ,rega -0x197 000624 arg 4 ,loopcnt -0x198 000625 arg mem_24g_addr ,contr -: 000626 p_g24_syncword_crc8_loop: -0x199 000627 ifetch 1 ,contr -0x19a 000628 iadd rega ,rega -0x19b 000629 loop p_g24_syncword_crc8_loop -0x19c 000630 copy rega ,pdata -0x19d 000631 store 2 ,mem_24g_syncword -0x19e 000632 fetch 1 ,mem_24g_syncword -0x19f 000633 fetcht 1 ,mem_24g_syncword + 1 -0x1a0 000634 iadd temp ,pdata -0x1a1 000635 store 1 ,mem_24g_syncword_crc8 -0x1a2 000636 rtn -: 000638 p_g24_start_pairing_sm1: -0x1a3 000640 call p_g24_pair_init -: 000641 p_g24_set_pairing_sm_1: -0x1a4 000642 jam state_24g_pairing_1 ,mem_24g_pairing_sm -0x1a5 000643 rtn -: 000645 p_g24_pairing_sm: -0x1a6 000646 jam zcode_90 ,mem_zcode_temp_param0 -0x1a7 000647 branch p_zcode_entrance -: 000649 p_g24_paring_mode_start: -0x1a8 000650 call power_ctrl_pac_succ_cnt_init -: 000651 p_g24_paring_mode: -0x1a9 000652 jam zcode_91 ,mem_zcode_temp_param0 -0x1aa 000653 branch p_zcode_entrance -: 000656 p_g24_check_51cmd_stop_24g: -0x1ab 000657 set0 mark_24g ,mark -0x1ac 000658 jam state_24g_stop ,mem_24g_conn_sm -0x1ad 000659 call le_disable -: 000660 p_mouse_disable_g24_pairing_flag: -0x1ae 000661 arg mosue_24g_pairing_flag ,queue -0x1af 000662 branch mouse_disable_function_flag -: 000664 p_g24_put_data_in_buff: -0x1b0 000665 storet 1 ,mem_24g_datalen -0x1b1 000666 copy temp ,loopcnt -0x1b2 000667 arg mem_24g_txbuf ,contw -0x1b3 000668 copy rega ,contr -0x1b4 000669 branch memcpy -: 000671 p_g24_read_len_pid_crc: -0x1b5 000673 fetch 1 ,mem_24g_rxbuf + 1 -0x1b6 000674 rshift3 pdata ,pdata -0x1b7 000675 store 1 ,mem_24g_rxdata_length -0x1b8 000677 increase 1 ,pdata -0x1b9 000678 arg mem_24g_rxbuf + 1 ,contr -0x1ba 000679 iadd contr ,contr -0x1bb 000680 ifetch 3 ,contr -0x1bc 000681 store 3 ,mem_24g_sta_crc -0x1bd 000683 fetch 1 ,mem_24g_rxbuf + 1 -0x1be 000684 rshift pdata ,pdata -0x1bf 000685 and pdata ,0x03 ,pdata -0x1c0 000686 store 1 ,mem_24g_sta_pid -0x1c1 000687 rtn -: 000689 p_g24_transmit_prep: -0x1c2 000692 fetch 1 ,mem_24g_datalen -0x1c3 000693 increase 2 ,pdata -0x1c4 000694 store 1 ,mem_24g_txlen -0x1c5 000696 fetch 1 ,mem_24g_data_type -0x1c6 000697 store 1 ,mem_24g_txpayload -0x1c7 000699 fetch 1 ,mem_24g_datalen -0x1c8 000700 lshift3 pdata ,pdata -0x1c9 000701 fetcht 1 ,mem_24g_pid -0x1ca 000702 and temp ,0x03 ,temp -0x1cb 000703 lshift temp ,temp -0x1cc 000704 ior temp ,pdata -0x1cd 000705 fetcht 1 ,mem_24g_no_ack -0x1ce 000706 iadd temp ,pdata -0x1cf 000707 istore 1 ,contw -0x1d0 000709 fetch 1 ,mem_24g_datalen -0x1d1 000710 iforce loopcnt -0x1d2 000711 arg mem_24g_txbuf ,contr -0x1d3 000712 branch memcpy -: 000731 p_g24_prep: -0x1d4 000732 disable enable_crc -0x1d5 000733 disable enable_white -0x1d6 000734 setarg 0x555555 -0x1d7 000735 iforce crc24_init -0x1d8 000736 fetch 1 ,mem_24g_ch -0x1d9 000737 branch le_prep2 -: 000739 p_g24_receive_rxon: -0x1da 000742 call p_g24_prep -0x1db 000743 disable user3 -0x1dc 000744 enable decode_fec0 -0x1dd 000745 enable is_rx -0x1de 000746 disable is_tx -0x1df 000747 enable swfine -0x1e0 000748 fetch 2 ,mem_24g_rx_window -0x1e1 000749 iforce stop_watch -0x1e2 000750 correlate null ,timeout -0x1e3 000751 nbranch p_g24_sync_timeout ,sync -0x1e4 000754 disable decode_fec0 -0x1e5 000755 enable decode_fec1 -0x1e6 000756 enable enable_white -0x1e7 000757 enable enable_crc -0x1e8 000758 call p_g24_receive_byte -0x1e9 000759 store 1 ,mem_24g_get_syncword_crc8 -0x1ea 000760 fetcht 1 ,mem_24g_syncword_crc8 -0x1eb 000761 isub temp ,null -0x1ec 000762 nbranch p_g24_end_of_packet ,zero -0x1ed 000763 call p_g24_receive_byte -0x1ee 000764 store 1 ,mem_24g_rxbuf -0x1ef 000768 fetch 1 ,mem_24g_rxbuf -0x1f0 000769 fetcht 1 ,mem_24g_data_type -0x1f1 000770 icompare bits_data ,temp -0x1f2 000771 nbranch p_g24_end_of_packet ,true -: 000772 p_g24_receive_skip: -0x1f3 000773 call p_g24_receive_byte -0x1f4 000774 istore 1 ,contw -0x1f5 000775 rshift3 pdata ,pdata -0x1f6 000776 and pdata ,0x1f ,loopcnt -0x1f7 000777 branch p_g24rx_nopayload ,zero -: 000778 p_g24rx_loop: -0x1f8 000779 call p_g24_receive_byte -0x1f9 000780 istore 1 ,contw -0x1fa 000781 loop p_g24rx_loop -: 000782 p_g24rx_nopayload: -0x1fb 000784 copy contw ,rega -0x1fc 000785 call p_g24_receive_byte -0x1fd 000786 store 1 ,mem_rssi_hex_received -0x1fe 000787 copy rega ,contw -0x1ff 000788 parse demod ,bucket ,24 -0x200 000789 enable swfine -0x201 000790 arg param_sifs ,stop_watch -0x202 000791 rshift32 pdata ,pdata -0x203 000792 rshift16 pdata ,pdata -0x204 000793 istore 3 ,contw -0x205 000794 disable decode_fec1 -0x206 000795 branch p_g24_end_of_packet ,crc_failed -0x207 000798 enable user3 -0x208 000799 fetch 1 ,mem_last_freq -0x209 000800 add pdata ,0 ,rega -0x20a 000801 call rf_write_freq -0x20b 000802 disable decode_fec0 -0x20c 000803 call set_sync_on -0x20d 000804 fetch 1 ,mem_rssi_hex_received -: 000805 p_rssi_signal: -0x20e 000806 copy pdata ,rega -0x20f 000807 fetcht 1 ,mem_rssi_signal_index -0x210 000808 setarg mem_rssi_signal_buf -0x211 000809 iadd temp ,contw -0x212 000810 copy rega ,pdata -0x213 000811 istore 1 ,contw -0x214 000812 increase 1 ,temp -0x215 000813 and_into rssi_buf_len_signal ,temp -0x216 000814 storet 1 ,mem_rssi_signal_index -0x217 000815 rtn -: 000817 p_g24_receive_byte: -0x218 000818 parse demod ,bucket ,8 -0x219 000819 rshift3 pwindow ,pdata -0x21a 000820 rtn -: 000822 p_g24_sync_timeout: -: 000827 p_g24_end_of_packet: -0x21b 000828 disable encode_fec1 -0x21c 000829 disable decode_fec1 -0x21d 000830 branch end_of_packet -: 000836 p_g24_transmit: -0x21e 000837 call le_enable -0x21f 000838 fetch 4 ,mem_24g_addr -0x220 000839 iforce access -0x221 000840 call p_g24_prep -0x222 000841 call set_sync_on -0x223 000842 fetcht 1 ,mem_24g_ch -0x224 000843 call set_freq_tx -0x225 000844 set1 txgfsk ,radio_ctrl -0x226 000845 enable encode_fec0 -0x227 000846 enable is_tx -0x228 000847 disable is_rx -0x229 000850 rshift16 access ,pdata -0x22a 000851 rshift8 pdata ,pdata -0x22b 000852 rshift4 pdata ,pdata -0x22c 000853 inject mod ,40 -0x22d 000854 disable encode_fec0 -0x22e 000855 enable encode_fec1 -0x22f 000856 enable enable_white -0x230 000857 enable enable_crc -0x231 000858 fetch 1 ,mem_24g_syncword_crc8 -0x232 000859 inject mod ,8 -0x233 000860 fetch 1 ,mem_24g_txlen -0x234 000861 iforce loopcnt -0x235 000862 arg mem_24g_txpayload ,contr -: 000863 p_g24tr_loop: -0x236 000864 ifetch 1 ,contr -0x237 000865 inject mod ,8 -0x238 000866 loop p_g24tr_loop -0x239 000869 enable enable_parity -0x23a 000870 inject mod ,24 -0x23b 000871 disable enable_parity -0x23c 000872 until null ,tx_clear -0x23d 000873 nop 100 -0x23e 000874 disable encode_fec0 -0x23f 000875 disable encode_fec1 -0x240 000876 rtn -: 000878 p_g24_timer_check: -0x241 000879 call disable_user -0x242 000880 fetcht 4 ,mem_24g_tx_btclk -0x243 000881 copy clkn_bt ,pdata -0x244 000882 isub temp ,null -0x245 000883 ncall g24_timer_timeout ,positive -0x246 000884 copy pdata ,regb -0x247 000885 fetch 4 ,mem_24g_tx_btclk -0x248 000886 fetcht 1 ,mem_24g_interval -0x249 000887 iadd temp ,temp -0x24a 000888 copy regb ,pdata -0x24b 000889 isub temp ,null -0x24c 000890 nrtn positive -0x24d 000891 set0 28 ,pdata -0x24e 000892 store 4 ,mem_24g_tx_btclk -0x24f 000893 branch enable_user -: 000895 p_rssi_average: -0x250 000896 arg 0 ,temp -0x251 000897 arg rssi_buf_len_signal + 1 ,loopcnt -0x252 000898 copy rega ,contr -: 000899 p_rssi_average_loop: -0x253 000900 ifetch 1 ,contr -0x254 000901 iadd temp ,temp -0x255 000902 loop p_rssi_average_loop -0x256 000903 rshift3 temp ,pdata -0x257 000904 copy pdata ,temp -0x258 000905 rtnmark0 mark_24g -0x259 000907 div pdata ,10 -0x25a 000908 call wait_div_end -0x25b 000909 quotient pdata -0x25c 000910 lshift4 pdata ,pdata -0x25d 000911 branch clk2bt_next -: 000913 p_mouse_before_lpm: -0x25e 000914 rtnmark1 mark_24g -0x25f 000915 call p_mouse_le_txbuff_save -0x260 000916 call p_mouse_setgpio_lpm -0x261 000917 fetch 1 ,mem_context -0x262 000918 bbit0 state_inconn ,p_clear_wake -0x263 000919 fetch 1 ,mem_lpm_current_mult -0x264 000920 nrtn blank -: 000921 p_clear_wake: -0x265 000922 setarg 0 -0x266 000923 store 8 ,mem_gpio_wakeup_low -0x267 000924 rtn -: 000926 p_g24_lpm_wait: -0x268 000927 enable user -0x269 000928 call lpo_calibration -0x26a 000929 fetch 3 ,mem_clks_per_lpo -0x26b 000930 branch disable_user ,blank -0x26c 000931 fetch 1 ,mem_lpm_mode -0x26d 000932 branch disable_user ,blank -0x26e 000933 fetch 1 ,mem_24g_transmit_by_interrupt -0x26f 000934 beq g24_tx_timer_int_enable ,disable_user -: 000935 p_mouse_setgpio_lpm: -0x270 000936 call p_mouse_set_sdio_high -0x271 000937 call p_clear_wake -: 000938 p_mouse_setgpio_hibernate: -0x272 000939 call mouse_lpm_before_common -0x273 000940 fetcht 1 ,mem_flash_ncs_gpio -0x274 000941 call gpio_out_inactive -0x275 000942 hfetch 4 ,core_gpio_oe0 -0x276 000943 hfetcht 4 ,core_gpio_pu0 -0x277 000944 ior temp ,temp -0x278 000945 invert temp ,temp -0x279 000946 hstoret 4 ,core_gpio_pd0 -0x27a 000947 hfetch 1 ,core_gpio_pd1 -0x27b 000948 set0 2 ,pdata -0x27c 000949 hstore 1 ,core_gpio_pd1 -0x27d 000950 hfetch 1 ,core_gpio_pd2 -0x27e 000951 set0 6 ,pdata -0x27f 000952 hstore 1 ,core_gpio_pd2 -0x280 000953 fetcht 1 ,mem_sensor_data_gpio -0x281 000954 set0 gpio_active_bit ,temp -0x282 000955 arg core_gpio_pu0 ,contw -0x283 000956 call gpio_set_bit -0x284 000957 hfetch 1 ,core_gpio_pd3 -0x285 000958 set0 0 ,pdata -0x286 000959 hstore 1 ,core_gpio_pd3 -0x287 000960 hfetch 1 ,core_gpio_pu2 -0x288 000961 or pdata ,0xc0 ,pdata -0x289 000962 hstore 1 ,core_gpio_pu2 +0x73 000222 hfetch 1 ,core_gpio_pu3 +0x74 000223 and_into 0x3f ,pdata +0x75 000224 hstore 1 ,core_gpio_pu3 +0x76 000225 hfetch 1 ,core_gpio_sel1 +0x77 000226 set0 4 ,pdata +0x78 000227 hstore 1 ,core_gpio_sel1 +0x79 000228 call init_memp +0x7a 000229 call rfcomm_init +0x7b 000230 call init_lmp +0x7c 000231 ncall lpm_disable_exen_output ,wake +0x7d 000232 call ui_init + 1 +0x7e 000233 branch soft_reset + 11 +: 000235 p_soft_reset_2: +0x7f 000236 call app_lpm_init ,wake +0x80 000237 call publickey_init +0x81 000238 call lpm_recover_clk ,wake +: 000239 p_sp_cal_loop: +0x82 000240 call sp_calc_sequence +0x83 000241 fetch 1 ,mem_ssp_enable +0x84 000242 branch main_loop ,blank +0x85 000243 fetch 1 ,mem_sp_local_key_invalid +0x86 000244 branch p_sp_cal_loop ,blank +0x87 000245 branch main_loop +: 000247 p_init_param: +0x88 000248 setarg param_le_version +0x89 000249 store 3 ,mem_lmp_version +0x8a 000250 setarg param_le_subversion +0x8b 000251 store 2 ,mem_lmp_version + 3 +0x8c 000252 branch init_param + 12 +: 000254 p_lpm_check_wake_lock: +0x8d 000255 rtnmark1 mark_24g +0x8e 000256 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x8f 000257 beq 0 ,disable_blank +0x90 000258 fetch 1 ,mem_mouse_le_conn_param_reject +0x91 000259 beq le_lpm_disable ,disable_blank +0x92 000260 fetch 2 ,mem_sdp_remote_cid +0x93 000261 nbranch disable_blank ,blank +0x94 000262 fetch 1 ,mem_mouse_wheel_trigger +0x95 000263 nbranch disable_blank ,blank +0x96 000264 branch enable_blank +: 000267 p_g24_dispatch: +0x97 000268 rtnmark0 mark_24g +0x98 000269 fetch 1 ,mem_24g_conn_sm +0x99 000270 bbit1 state_24g_pair ,p_g24_pair_dispatch +0x9a 000271 bbit1 state_24g_reconn ,p_g24_reconn_dispatch +0x9b 000272 fetch 1 ,mem_24g_transmit_by_interrupt +0x9c 000273 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +: 000274 p_g24_transmit_process: +0x9d 000275 call p_g24_txdata_prep +0x9e 000276 nbranch p_g24_nodata_transmit ,user +0x9f 000277 call p_g24_rf_sta_check +: 000278 p_g24_transmit_start: +0xa0 000279 call p_g24_transmit_packet +0xa1 000280 fetch 1 ,mem_24g_pairing_sm +0xa2 000281 rtnne state_24g_pairing_success +0xa3 000282 call power_ctrl_start +0xa4 000284 fetch 1 ,mem_mouse_multi_led_state +0xa5 000285 beq on ,p_g24_transmit_by_interrupt_enable +: 000286 p_g24_short_sleep: +0xa6 000287 call p_g24_lpm_wait +0xa7 000288 nrtn user +0xa8 000289 call p_clear_wake +0xa9 000290 setarg 58000 +: 000291 p_g24_enter_sleep: +0xaa 000292 branch g24_lpm_long_sleep2 +: 000294 p_g24_pair_dispatch: +0xab 000295 jam zcode_c0 ,mem_zcode_temp_param0 +0xac 000296 branch p_zcode_entrance +: 000298 p_g24_reconn_dispatch: +0xad 000299 jam zcode_70 ,mem_zcode_temp_param0 +0xae 000300 branch p_zcode_entrance +: 000311 p_g24_transmit_by_interrupt: +0xaf 000312 call p_g24_timer_check +0xb0 000313 nrtn user +0xb1 000314 call p_g24_interval_calibrate +0xb2 000315 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +0xb3 000316 increase 1 ,pdata +0xb4 000317 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0xb5 000318 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init +0xb6 000319 isub temp ,null +0xb7 000320 call p_g24_transmit_by_interrupt_exit ,zero +0xb8 000321 branch p_g24_transmit_process +: 000322 p_g24_transmit_by_interrupt_exit: +0xb9 000323 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +0xba 000324 setarg 0 +0xbb 000325 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0xbc 000326 setarg 25 +0xbd 000327 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +: 000328 p_g24_interval_min: +0xbe 000329 jam 0 ,mem_24g_pac_index +0xbf 000330 fetch 1 ,mem_24g_interval_min +: 000331 p_g24_current_interval_store: +0xc0 000332 store 1 ,mem_24g_interval +0xc1 000333 rtn +: 000334 p_g24_interval_max: +0xc2 000335 fetch 1 ,mem_24g_interval_max +0xc3 000336 branch p_g24_current_interval_store +: 000337 p_g24_interval_calibrate: +0xc4 000338 fetch 1 ,mem_24g_pac_index +0xc5 000339 increase 1 ,pdata +0xc6 000340 store 1 ,mem_24g_pac_index +0xc7 000341 beq 4 ,p_g24_interval_max +0xc8 000342 beq 5 ,p_g24_interval_min +0xc9 000343 rtn +: 000345 p_g24_nodata_transmit: +0xca 000346 fetch 1 ,mem_24g_abort_pac +0xcb 000347 call p_g24_send_abort_packet ,blank +: 000348 p_g24_long_sleep: +0xcc 000349 call p_g24_lpm_wait +0xcd 000350 nrtn user +0xce 000351 fetch 3 ,mem_24g_enter_hibernate +0xcf 000352 branch g24_lpm_long_sleep2 +: 000354 p_g24_send_abort_packet: +0xd0 000355 jam 1 ,mem_24g_abort_pac +0xd1 000356 jam 0 ,mem_24g_rf_hop_ch +0xd2 000357 call p_g24_transmit_rf_ctrl_clear +0xd3 000358 store 1 ,mem_24g_txbuf +0xd4 000359 setarg 0 +0xd5 000360 store 7 ,mem_24g_txbuf + 1 +0xd6 000361 fetch 4 ,mem_24g_device_addr +0xd7 000362 store 4 ,mem_24g_txbuf + 8 +0xd8 000363 jam 12 ,mem_24g_datalen +0xd9 000364 fetch 1 ,mem_24g_data_type +0xda 000365 set1 bit_abort ,pdata +0xdb 000366 store 1 ,mem_24g_data_type +0xdc 000367 call p_g24_txdata_enable_tx +0xdd 000368 branch p_g24_transmit_start +: 000370 p_g24_transmit_rf_sta_init: +0xde 000371 jam 1 ,mem_24g_rf_last_sta +0xdf 000372 jam 0 ,mem_24g_sync_cnt +: 000373 p_g24_transmit_rf_ctrl_clear: +0xe0 000374 fetch 1 ,mem_24g_data_type +0xe1 000375 and_into bits_data ,pdata +0xe2 000376 store 1 ,mem_24g_data_type +0xe3 000377 rtn +: 000379 p_g24_hop_ch_enable: +0xe4 000380 fetch 1 ,mem_24g_data_type +0xe5 000381 set1 bit_hop ,pdata +0xe6 000382 store 1 ,mem_24g_data_type +0xe7 000384 store 1 ,mem_24g_txpayload +0xe8 000385 rtn +: 000387 p_g24_hop_enable_packet: +0xe9 000388 fetch 1 ,mem_24g_data_type +0xea 000389 rtnbit0 bit_hop +: 000390 p_g24_hop_ch_disable: +0xeb 000391 fetch 1 ,mem_24g_data_type +0xec 000392 set0 bit_hop ,pdata +0xed 000393 store 1 ,mem_24g_data_type +0xee 000394 store 1 ,mem_24g_txpayload +0xef 000395 call power_ctrl_pac_succ_decrs +0xf0 000396 branch p_g24_ch +: 000398 p_g24_rf_hop_attemp_again: +0xf1 000399 fetch 1 ,mem_24g_rf_hop_ch +0xf2 000400 bne 1 ,p_g24_transmit_rf_ctrl_clear +: 000401 p_g24_rf_hop_fastly: +0xf3 000402 fetch 1 ,mem_24g_hop_fastly_cnt +0xf4 000403 increase 1 ,pdata +0xf5 000404 store 1 ,mem_24g_hop_fastly_cnt +0xf6 000405 beq 4 ,p_g24_rf_hop_fastly_exit +0xf7 000406 call p_g24_ch +0xf8 000407 jam 2 ,mem_24g_max_retry +: 000408 p_g24_transmit_packet: +0xf9 000409 jam 0 ,mem_24g_retry +: 000410 p_g24_transmit_loop: +0xfa 000411 arg param_rx_setup ,timeup +0xfb 000412 until clkn_rt ,meet +0xfc 000413 call p_g24_transmit_receive_ack +0xfd 000416 nbranch p_g24_retransmit ,sync +0xfe 000417 nbranch p_g24_retransmit ,user3 +0xff 000418 call p_g24_txbuf_clear +0x100 000419 call p_g24_ackpayload_parse +0x101 000420 call power_ctrl_pac_succ_incrs +: 000421 p_g24_transmit_next_packet: +0x102 000422 jam 0 ,mem_retry_count +0x103 000423 fetch 1 ,mem_24g_pid +0x104 000424 increase 1 ,pdata +0x105 000425 store 1 ,mem_24g_pid +0x106 000426 call p_g24_hop_enable_packet +0x107 000427 fetch 1 ,mem_24g_pairing_sm +0x108 000428 bne state_24g_pairing_success ,p_g24_paring_mode_start +0x109 000429 call p_g24_transmit_succ_rf_config +: 000430 p_g24_transmit_abandon: +0x10a 000431 setarg 0 +0x10b 000432 store 4 ,mem_24g_ensure +0x10c 000433 store 1 ,mem_24g_hop_pac_retry +0x10d 000434 rtn +: 000436 p_g24_rf_hop_fastly_exit: +0x10e 000437 call power_ctrl_pac_succ_decrs +0x10f 000438 jam 0 ,mem_24g_hop_fastly_cnt +0x110 000439 branch p_g24_transmit_rf_ctrl_clear +: 000441 p_g24_transmit_hop_pac_succ_wo_hop: +0x111 000442 jam 2 ,mem_24g_sync_cnt +: 000443 p_g24_transmit_hop_pac_succ: +0x112 000444 jam 1 ,mem_24g_rf_last_sta +0x113 000445 jam 0 ,mem_24g_rf_hop_ch +0x114 000446 branch p_g24_transmit_rf_ctrl_clear +: 000448 p_g24_transmit_succ_rf_config: +0x115 000449 fetch 1 ,mem_24g_rf_work_stage +0x116 000450 beq 3 ,p_g24_transmit_hop_pac_succ +0x117 000451 fetch 1 ,mem_24g_data_type +0x118 000452 isolate0 bit_hop ,pdata +0x119 000453 branch p_g24_transmit_rf_sta_init ,true +0x11a 000454 fetch 1 ,mem_24g_rf_work_stage +0x11b 000455 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +0x11c 000456 beq 2 ,p_g24_transmit_hop_pac_succ +0x11d 000457 rtn +: 000459 p_g24_rf_sta_check: +0x11e 000460 fetch 1 ,mem_24g_pairing_sm +0x11f 000461 rtnne state_24g_pairing_success +0x120 000462 call p_g24_rf_laststa_synccnt_check +0x121 000463 ncall p_g24_rf_sync_cnt_check ,user2 +0x122 000464 rtn +: 000466 p_g24_rf_laststa_synccnt_check: +0x123 000467 disable user2 +0x124 000468 fetch 1 ,mem_24g_rf_last_sta +0x125 000469 rtnne 1 +0x126 000470 fetch 1 ,mem_24g_sync_cnt +0x127 000471 rtnne 0 +0x128 000472 jam 1 ,mem_24g_rf_work_stage +0x129 000473 jam 4 ,mem_24g_max_retry +0x12a 000474 branch enable_user2 +: 000476 p_g24_rf_sync_cnt_check: +0x12b 000477 fetch 1 ,mem_24g_sync_cnt +0x12c 000478 branch p_g24_rf_hop_attemp ,blank +0x12d 000479 increase -1 ,pdata +0x12e 000480 store 1 ,mem_24g_sync_cnt +0x12f 000481 jam 2 ,mem_24g_rf_work_stage +0x130 000482 jam 4 ,mem_24g_max_retry +: 000483 p_g24_ch: +0x131 000484 fetcht 1 ,mem_24g_current_ch_number +0x132 000485 fetch 1 ,mem_24g_addr +0x133 000486 and_into 0x03 ,pdata +0x134 000487 mul32 pdata ,4 ,rega +0x135 000488 setarg mem_24g_ch_map1 +0x136 000489 iadd rega ,pdata +0x137 000490 iadd temp ,contr +0x138 000491 ifetch 1 ,contr +0x139 000492 store 1 ,mem_24g_ch +0x13a 000493 increase 1 ,temp +0x13b 000494 and_into 3 ,temp +0x13c 000495 storet 1 ,mem_24g_current_ch_number +0x13d 000496 rtn +: 000498 p_g24_rf_hop_attemp: +0x13e 000499 jam 3 ,mem_24g_rf_work_stage +0x13f 000500 fetch 1 ,mem_24g_rf_hop_ch +0x140 000501 nbranch p_g24_rf_hop_attemp_again ,blank +0x141 000502 jam 2 ,mem_24g_max_retry +0x142 000503 branch p_g24_ch +: 000505 p_g24_txdata_prep: +0x143 000506 fetch 1 ,mem_24g_pairing_sm +0x144 000507 bne state_24g_pairing_success ,p_g24_pairing_sm +: 000508 p_g24_txdata_prep_packeage_data: +0x145 000509 call p_g24_package_data +: 000510 p_g24_txdata_enable_tx: +0x146 000511 call p_g24_transmit_prep +0x147 000512 jam ensure_on_24g ,mem_24g_ensure +0x148 000513 rtn +: 000515 p_g24_package_data: +0x149 000516 fetch 2 ,mem_cb_24g_data +0x14a 000517 call callback_func +0x14b 000518 branch p_g24_accumulate_mouse_data ,user +0x14c 000519 fetch 7 ,mem_24g_txbuf + 1 +0x14d 000520 rtn blank +0x14e 000521 branch enable_user +: 000522 p_g24_accumulate_mouse_data: +0x14f 000524 jam 0 ,mem_24g_abort_pac +0x150 000525 add rega ,1 ,pdata +0x151 000526 store 1 ,mem_24g_datalen +0x152 000527 call p_g24_transmit_rf_ctrl_clear +0x153 000528 store 1 ,mem_24g_txbuf +0x154 000529 ifetcht 1 ,contw +0x155 000530 ifetch 1 ,regb +0x156 000531 ior temp ,pdata +0x157 000532 istore 1 ,contw +0x158 000533 increase 1 ,regb +0x159 000534 ifetch 4 ,regb +0x15a 000535 istore 4 ,contw +0x15b 000536 increase 4 ,regb +0x15c 000537 arg mem_24g_txbuf + 6 ,contw +0x15d 000538 arg 2 ,loopcnt +: 000539 p_g24_accumulation_loop: +0x15e 000540 ifetch 1 ,regb +0x15f 000541 ifetcht 1 ,contw +0x160 000542 iadd temp ,pdata +0x161 000543 istore 1 ,contw +0x162 000544 increase 1 ,regb +0x163 000545 loop p_g24_accumulation_loop +0x164 000546 rtn +: 000548 p_g24_txbuf_clear: +0x165 000549 arg 4 ,loopcnt +0x166 000550 arg mem_24g_txbuf ,contw +0x167 000551 branch memset0 +: 000553 p_g24_transmit_receive_ack: +0x168 000554 disable user3 +0x169 000555 call p_g24_transmit +0x16a 000560 force 0 ,radio_ctrl +0x16b 000561 fetch 4 ,mem_24g_addr +0x16c 000562 iforce access +0x16d 000563 fetcht 1 ,mem_last_freq +0x16e 000564 call set_freq_rx +0x16f 000565 call rf_rx_enable +0x170 000566 call p_g24_receive_rxon +0x171 000567 call p_g24_end_of_packet ,user3 +0x172 000568 rtn +: 000573 p_g24_retransmit: +0x173 000574 fetch 1 ,mem_24g_abort_pac +0x174 000575 nrtn blank +0x175 000576 fetch 2 ,mem_24g_txfail_cnt +0x176 000577 increase 1 ,pdata +0x177 000578 store 2 ,mem_24g_txfail_cnt +0x178 000579 fetch 1 ,mem_24g_txfail_cnt + 1 +0x179 000580 bbit1 4 ,g24_stop_24g_mode +0x17a 000581 fetch 1 ,mem_24g_pairing_sm +0x17b 000582 bne state_24g_pairing_success ,p_g24_tx_paring_retry +0x17c 000583 call p_g24_tx_hop_ch_process +0x17d 000584 branch p_g24_transmit_loop +: 000586 p_g24_tx_paring_retry: +0x17e 000587 fetch 1 ,mem_24g_txfail_cnt +0x17f 000588 rtnne 0xff +: 000589 p_g24_tx_attempt_fail: +0x180 000590 setarg 0 +0x181 000591 store 2 ,mem_24g_txfail_cnt +0x182 000592 branch g24_stop_24g_mode +: 000594 p_g24_tx_fast_hop: +0x183 000595 call power_ctrl_txpower_incrs +0x184 000596 call power_ctrl_pac_succ_decrs +0x185 000597 branch p_g24_ch +: 000599 p_g24_tx_hop_ch_process: +0x186 000600 fetch 1 ,mem_24g_retry +0x187 000601 sub pdata ,11 ,null +0x188 000602 nbranch p_g24_tx_fast_hop ,positive +0x189 000603 increase 1 ,pdata +0x18a 000604 store 1 ,mem_24g_retry +0x18b 000605 beq 2 ,p_g24_hop_ch_enable +0x18c 000606 beq 6 ,p_g24_hop_ch_disable +0x18d 000607 beq 8 ,p_g24_hop_ch_enable +0x18e 000608 beq 12 ,p_g24_hop_ch_disable +0x18f 000609 rtn +: 000611 p_g24_ackpayload_parse: +0x190 000612 call p_g24_read_len_pid_crc +0x191 000613 fetch 1 ,mem_24g_rxdata_length +0x192 000614 rtn blank +0x193 000615 iforce loopcnt +0x194 000616 arg mem_24g_rxbuf + 2 ,contr +0x195 000617 arg mem_24g_rxpayload ,contw +0x196 000618 branch memcpy +: 000620 p_g24_pair_init: +0x197 000621 jam tx_power_pair ,mem_tx_power +0x198 000622 jam 0 ,mem_24g_pid +0x199 000623 jam g24_pair_ch ,mem_24g_ch +0x19a 000624 fetch 4 ,mem_24g_paring_addr +: 000625 p_g24_update_addr_and_synccrc8: +0x19b 000626 store 4 ,mem_24g_addr +: 000628 p_g24_syncword_crc8: +0x19c 000629 arg 0 ,rega +0x19d 000630 arg 4 ,loopcnt +0x19e 000631 arg mem_24g_addr ,contr +: 000632 p_g24_syncword_crc8_loop: +0x19f 000633 ifetch 1 ,contr +0x1a0 000634 iadd rega ,rega +0x1a1 000635 loop p_g24_syncword_crc8_loop +0x1a2 000636 copy rega ,pdata +0x1a3 000637 store 2 ,mem_24g_syncword +0x1a4 000638 fetch 1 ,mem_24g_syncword +0x1a5 000639 fetcht 1 ,mem_24g_syncword + 1 +0x1a6 000640 iadd temp ,pdata +0x1a7 000641 store 1 ,mem_24g_syncword_crc8 +0x1a8 000642 rtn +: 000644 p_g24_start_pairing_sm1: +0x1a9 000646 call p_g24_pair_init +: 000647 p_g24_set_pairing_sm_1: +0x1aa 000648 jam state_24g_pairing_1 ,mem_24g_pairing_sm +0x1ab 000649 rtn +: 000651 p_g24_pairing_sm: +0x1ac 000652 jam zcode_90 ,mem_zcode_temp_param0 +0x1ad 000653 branch p_zcode_entrance +: 000655 p_g24_paring_mode_start: +0x1ae 000656 call power_ctrl_pac_succ_cnt_init +: 000657 p_g24_paring_mode: +0x1af 000658 jam zcode_91 ,mem_zcode_temp_param0 +0x1b0 000659 branch p_zcode_entrance +: 000662 p_g24_check_51cmd_stop_24g: +0x1b1 000663 set0 mark_24g ,mark +0x1b2 000664 jam state_24g_stop ,mem_24g_conn_sm +0x1b3 000665 call le_disable +: 000666 p_mouse_disable_g24_pairing_flag: +0x1b4 000667 arg mosue_24g_pairing_flag ,queue +0x1b5 000668 branch mouse_disable_function_flag +: 000670 p_g24_put_data_in_buff: +0x1b6 000671 storet 1 ,mem_24g_datalen +0x1b7 000672 copy temp ,loopcnt +0x1b8 000673 arg mem_24g_txbuf ,contw +0x1b9 000674 copy rega ,contr +0x1ba 000675 branch memcpy +: 000677 p_g24_read_len_pid_crc: +0x1bb 000679 fetch 1 ,mem_24g_rxbuf + 1 +0x1bc 000680 rshift3 pdata ,pdata +0x1bd 000681 store 1 ,mem_24g_rxdata_length +0x1be 000683 increase 1 ,pdata +0x1bf 000684 arg mem_24g_rxbuf + 1 ,contr +0x1c0 000685 iadd contr ,contr +0x1c1 000686 ifetch 3 ,contr +0x1c2 000687 store 3 ,mem_24g_sta_crc +0x1c3 000689 fetch 1 ,mem_24g_rxbuf + 1 +0x1c4 000690 rshift pdata ,pdata +0x1c5 000691 and pdata ,0x03 ,pdata +0x1c6 000692 store 1 ,mem_24g_sta_pid +0x1c7 000693 rtn +: 000695 p_g24_transmit_prep: +0x1c8 000698 fetch 1 ,mem_24g_datalen +0x1c9 000699 increase 2 ,pdata +0x1ca 000700 store 1 ,mem_24g_txlen +0x1cb 000702 fetch 1 ,mem_24g_data_type +0x1cc 000703 store 1 ,mem_24g_txpayload +0x1cd 000705 fetch 1 ,mem_24g_datalen +0x1ce 000706 lshift3 pdata ,pdata +0x1cf 000707 fetcht 1 ,mem_24g_pid +0x1d0 000708 and temp ,0x03 ,temp +0x1d1 000709 lshift temp ,temp +0x1d2 000710 ior temp ,pdata +0x1d3 000711 fetcht 1 ,mem_24g_no_ack +0x1d4 000712 iadd temp ,pdata +0x1d5 000713 istore 1 ,contw +0x1d6 000715 fetch 1 ,mem_24g_datalen +0x1d7 000716 iforce loopcnt +0x1d8 000717 arg mem_24g_txbuf ,contr +0x1d9 000718 branch memcpy +: 000737 p_g24_prep: +0x1da 000738 disable enable_crc +0x1db 000739 disable enable_white +0x1dc 000740 setarg 0x555555 +0x1dd 000741 iforce crc24_init +0x1de 000742 fetch 1 ,mem_24g_ch +0x1df 000743 branch le_prep2 +: 000745 p_g24_receive_rxon: +0x1e0 000748 call p_g24_prep +0x1e1 000749 disable user3 +0x1e2 000750 enable decode_fec0 +0x1e3 000751 enable is_rx +0x1e4 000752 disable is_tx +0x1e5 000753 enable swfine +0x1e6 000754 fetch 2 ,mem_24g_rx_window +0x1e7 000755 iforce stop_watch +0x1e8 000756 correlate null ,timeout +0x1e9 000757 nbranch p_g24_sync_timeout ,sync +0x1ea 000760 disable decode_fec0 +0x1eb 000761 enable decode_fec1 +0x1ec 000762 enable enable_white +0x1ed 000763 enable enable_crc +0x1ee 000764 call p_g24_receive_byte +0x1ef 000765 store 1 ,mem_24g_get_syncword_crc8 +0x1f0 000766 fetcht 1 ,mem_24g_syncword_crc8 +0x1f1 000767 isub temp ,null +0x1f2 000768 nbranch p_g24_end_of_packet ,zero +0x1f3 000769 call p_g24_receive_byte +0x1f4 000770 store 1 ,mem_24g_rxbuf +0x1f5 000774 fetch 1 ,mem_24g_rxbuf +0x1f6 000775 fetcht 1 ,mem_24g_data_type +0x1f7 000776 icompare bits_data ,temp +0x1f8 000777 nbranch p_g24_end_of_packet ,true +: 000778 p_g24_receive_skip: +0x1f9 000779 call p_g24_receive_byte +0x1fa 000780 istore 1 ,contw +0x1fb 000781 rshift3 pdata ,pdata +0x1fc 000782 and pdata ,0x1f ,loopcnt +0x1fd 000783 branch p_g24rx_nopayload ,zero +: 000784 p_g24rx_loop: +0x1fe 000785 call p_g24_receive_byte +0x1ff 000786 istore 1 ,contw +0x200 000787 loop p_g24rx_loop +: 000788 p_g24rx_nopayload: +0x201 000790 copy contw ,rega +0x202 000791 call p_g24_receive_byte +0x203 000792 store 1 ,mem_rssi_hex_received +0x204 000793 copy rega ,contw +0x205 000794 parse demod ,bucket ,24 +0x206 000795 enable swfine +0x207 000796 arg param_sifs ,stop_watch +0x208 000797 rshift32 pdata ,pdata +0x209 000798 rshift16 pdata ,pdata +0x20a 000799 istore 3 ,contw +0x20b 000800 disable decode_fec1 +0x20c 000801 branch p_g24_end_of_packet ,crc_failed +0x20d 000804 enable user3 +0x20e 000805 fetch 1 ,mem_last_freq +0x20f 000806 add pdata ,0 ,rega +0x210 000807 call rf_write_freq +0x211 000808 disable decode_fec0 +0x212 000809 call set_sync_on +0x213 000810 fetch 1 ,mem_rssi_hex_received +: 000811 p_rssi_signal: +0x214 000812 copy pdata ,rega +0x215 000813 fetcht 1 ,mem_rssi_signal_index +0x216 000814 setarg mem_rssi_signal_buf +0x217 000815 iadd temp ,contw +0x218 000816 copy rega ,pdata +0x219 000817 istore 1 ,contw +0x21a 000818 increase 1 ,temp +0x21b 000819 and_into rssi_buf_len_signal ,temp +0x21c 000820 storet 1 ,mem_rssi_signal_index +0x21d 000821 rtn +: 000823 p_g24_receive_byte: +0x21e 000824 parse demod ,bucket ,8 +0x21f 000825 rshift3 pwindow ,pdata +0x220 000826 rtn +: 000828 p_g24_sync_timeout: +: 000833 p_g24_end_of_packet: +0x221 000834 disable encode_fec1 +0x222 000835 disable decode_fec1 +0x223 000836 branch end_of_packet +: 000842 p_g24_transmit: +0x224 000843 call le_enable +0x225 000844 fetch 4 ,mem_24g_addr +0x226 000845 iforce access +0x227 000846 call p_g24_prep +0x228 000847 call set_sync_on +0x229 000848 fetcht 1 ,mem_24g_ch +0x22a 000849 call set_freq_tx +0x22b 000850 set1 txgfsk ,radio_ctrl +0x22c 000851 enable encode_fec0 +0x22d 000852 enable is_tx +0x22e 000853 disable is_rx +0x22f 000856 rshift16 access ,pdata +0x230 000857 rshift8 pdata ,pdata +0x231 000858 rshift4 pdata ,pdata +0x232 000859 inject mod ,40 +0x233 000860 disable encode_fec0 +0x234 000861 enable encode_fec1 +0x235 000862 enable enable_white +0x236 000863 enable enable_crc +0x237 000864 fetch 1 ,mem_24g_syncword_crc8 +0x238 000865 inject mod ,8 +0x239 000866 fetch 1 ,mem_24g_txlen +0x23a 000867 iforce loopcnt +0x23b 000868 arg mem_24g_txpayload ,contr +: 000869 p_g24tr_loop: +0x23c 000870 ifetch 1 ,contr +0x23d 000871 inject mod ,8 +0x23e 000872 loop p_g24tr_loop +0x23f 000875 enable enable_parity +0x240 000876 inject mod ,24 +0x241 000877 disable enable_parity +0x242 000878 until null ,tx_clear +0x243 000879 nop 100 +0x244 000880 disable encode_fec0 +0x245 000881 disable encode_fec1 +0x246 000882 rtn +: 000884 p_g24_timer_check: +0x247 000885 call disable_user +0x248 000886 fetcht 4 ,mem_24g_tx_btclk +0x249 000887 copy clkn_bt ,pdata +0x24a 000888 isub temp ,null +0x24b 000889 ncall g24_timer_timeout ,positive +0x24c 000890 copy pdata ,regb +0x24d 000891 fetch 4 ,mem_24g_tx_btclk +0x24e 000892 fetcht 1 ,mem_24g_interval +0x24f 000893 iadd temp ,temp +0x250 000894 copy regb ,pdata +0x251 000895 isub temp ,null +0x252 000896 nrtn positive +0x253 000897 set0 28 ,pdata +0x254 000898 store 4 ,mem_24g_tx_btclk +0x255 000899 branch enable_user +: 000901 p_rssi_average: +0x256 000902 arg 0 ,temp +0x257 000903 arg rssi_buf_len_signal + 1 ,loopcnt +0x258 000904 copy rega ,contr +: 000905 p_rssi_average_loop: +0x259 000906 ifetch 1 ,contr +0x25a 000907 iadd temp ,temp +0x25b 000908 loop p_rssi_average_loop +0x25c 000909 rshift3 temp ,pdata +0x25d 000910 copy pdata ,temp +0x25e 000911 rtnmark0 mark_24g +0x25f 000913 div pdata ,10 +0x260 000914 call wait_div_end +0x261 000915 quotient pdata +0x262 000916 lshift4 pdata ,pdata +0x263 000917 branch clk2bt_next +: 000919 p_mouse_before_lpm: +0x264 000920 rtnmark1 mark_24g +0x265 000921 call p_mouse_le_txbuff_save +0x266 000922 call p_mouse_setgpio_lpm +0x267 000923 fetch 1 ,mem_context +0x268 000924 bbit0 state_inconn ,p_clear_wake +0x269 000925 fetch 1 ,mem_lpm_current_mult +0x26a 000926 nrtn blank +: 000927 p_clear_wake: +0x26b 000928 setarg 0 +0x26c 000929 store 8 ,mem_gpio_wakeup_low +0x26d 000930 rtn +: 000932 p_g24_lpm_wait: +0x26e 000933 enable user +0x26f 000934 call lpo_calibration +0x270 000935 fetch 3 ,mem_clks_per_lpo +0x271 000936 branch disable_user ,blank +0x272 000937 fetch 1 ,mem_lpm_mode +0x273 000938 branch disable_user ,blank +0x274 000939 fetch 1 ,mem_24g_transmit_by_interrupt +0x275 000940 beq g24_tx_timer_int_enable ,disable_user +: 000941 p_mouse_setgpio_lpm: +0x276 000942 call p_mouse_set_sdio_high +0x277 000943 call p_clear_wake +: 000944 p_mouse_setgpio_hibernate: +0x278 000945 call mouse_lpm_before_common +0x279 000946 fetcht 1 ,mem_flash_ncs_gpio +0x27a 000947 call gpio_out_inactive +0x27b 000948 hfetch 4 ,core_gpio_oe0 +0x27c 000949 hfetcht 4 ,core_gpio_pu0 +0x27d 000950 ior temp ,temp +0x27e 000951 invert temp ,temp +0x27f 000952 hstoret 4 ,core_gpio_pd0 +0x280 000953 hfetch 1 ,core_gpio_pd1 +0x281 000954 set0 2 ,pdata +0x282 000955 hstore 1 ,core_gpio_pd1 +0x283 000956 hfetch 1 ,core_gpio_pd2 +0x284 000957 set0 6 ,pdata +0x285 000958 hstore 1 ,core_gpio_pd2 +0x286 000959 fetcht 1 ,mem_sensor_data_gpio +0x287 000960 set0 gpio_active_bit ,temp +0x288 000961 arg core_gpio_pu0 ,contw +0x289 000962 call gpio_set_bit 0x28a 000963 hfetch 1 ,core_gpio_pd3 -0x28b 000964 and pdata ,0x7f ,pdata +0x28b 000964 set0 0 ,pdata 0x28c 000965 hstore 1 ,core_gpio_pd3 -0x28d 000966 fetcht 1 ,mem_config_select_device_button_gpio -0x28e 000967 branch gpio_clr_wake -: 000969 p_mouse_t_wheel_clear_wake: -0x28f 000970 fetcht 1 ,mem_whee_a_data_gpio -0x290 000971 call p_gpio_set_input_pd -0x291 000972 fetcht 1 ,mem_whee_b_data_gpio -0x292 000973 call p_gpio_set_input_pd -0x293 000974 fetcht 1 ,mem_whee_ta_data_gpio -0x294 000975 call p_gpio_set_input_pd -0x295 000976 fetcht 1 ,mem_whee_tb_data_gpio -0x296 000977 call p_gpio_set_input_pd -0x297 000979 fetch 1 ,mem_gpio_wakeup_low + 2 -0x298 000980 and pdata ,0xfd ,pdata -0x299 000981 store 1 ,mem_gpio_wakeup_low + 2 -0x29a 000982 fetch 1 ,mem_gpio_wakeup_low + 3 -0x29b 000983 and pdata ,0x67 ,pdata -0x29c 000984 store 1 ,mem_gpio_wakeup_low + 3 -0x29d 000985 rtn -: 000993 p_mouse_set_sdio_high: -0x29e 000994 fetch 1 ,mem_mouse_init_sensor_reset_flag -0x29f 000995 rtn blank -0x2a0 000996 branch p_mouse_seting_sensor_type -: 000998 p_device_init: -0x2a1 000999 jam 0x86 ,0x895b -0x2a2 001000 jam 0xa0 ,0x895c -0x2a3 001001 call initialize_radio -0x2a4 001002 call app_lpm_mult_enable -0x2a5 001003 call enable_authrom -0x2a6 001004 branch p_mouse_spi_init ,wake -: 001005 p_device_wake_from_power: -0x2a7 001006 fetch 3 ,mem_le_lap + 3 -0x2a8 001007 store 3 ,mem_le_lap_high_3b -0x2a9 001008 call p_wake_from_power -0x2aa 001010 call p_mouse_switch_hwakeup_bypb -0x2ab 001011 fetcht 1 ,mem_device_flag -0x2ac 001012 fetch 1 ,mem_24g_device_number -0x2ad 001013 isub temp ,null -0x2ae 001014 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero -0x2af 001017 fetch 1 ,mem_device_flag -0x2b0 001018 beq 0xff ,p_mouse_24g_pair_check -0x2b1 001019 sub pdata ,1 ,null -0x2b2 001020 nbranch p_mouse_check_reconn_target ,zero -: 001021 p_mouse_24g_pair_check: -0x2b3 001022 call p_mouse_check_key_gpio -0x2b4 001023 beq mouse_lm_button ,p_mouse_24g_pairing_button -: 001024 p_mouse_check_reconn_target: -0x2b5 001025 call p_mouse_tx_power_init -0x2b6 001026 call p_mouse_select_device_by_button -0x2b7 001027 arg mem_device1_type ,rega -0x2b8 001028 fetch 1 ,mem_device_flag -0x2b9 001029 fetcht 1 ,mem_24g_device_number -0x2ba 001030 isub temp ,null -0x2bb 001031 branch p_mouse_start_24g_mode ,zero -0x2bc 001032 increase -1 ,pdata -0x2bd 001033 mul32 pdata ,29 ,pdata -0x2be 001034 iadd rega ,rega -0x2bf 001035 ifetch 1 ,rega -0x2c0 001036 store 1 ,mem_xrecord_mode -0x2c1 001040 beq rec_4_mode ,p_mouse4_0_check_reconn_target -0x2c2 001042 rtn -: 001044 p_mouse_tx_power_init: -0x2c3 001045 fetch 1 ,mem_tx_power_temp -0x2c4 001046 store 1 ,mem_tx_power -0x2c5 001047 rtn -: 001048 p_mouse_bt_deepsleep_timerout_adjust: -0x2c6 001049 setarg 0x4650 -0x2c7 001050 store 2 ,mem_mouse_no_data_timeout -0x2c8 001051 rtn -: 001061 p_mouse4_0_check_reconn_target: -0x2c9 001062 jam zcode_23 ,mem_zcode_temp_param0 -0x2ca 001063 branch p_zcode_entrance -: 001065 p_le_check_adv_flag: -0x2cb 001066 arg mem_le_adv_data ,rega -: 001067 p_le_check_adv_flag_loop: -0x2cc 001068 ifetch 1 ,rega -0x2cd 001069 rtn blank -0x2ce 001070 iadd contr ,rega -0x2cf 001071 ifetch 1 ,contr -0x2d0 001072 rtneq 0x01 -0x2d1 001073 branch p_le_check_adv_flag_loop -: 001075 p_mouse_le_fast_conn_disable: -0x2d2 001076 jam 0x5a ,mem_mouse_fast_conn_flag -0x2d3 001077 rtn -: 001079 p_mouse_fast_conn_init: -0x2d4 001080 jam 0xff ,mem_mouse_fast_conn_flag -0x2d5 001081 jam 0x34 ,mem_xrecord_mode -0x2d6 001082 fetch 6 ,mem_24g_allpowerful_addr -0x2d7 001083 store 6 ,mem_le_lap -0x2d8 001084 rtn -: 001087 p_mouse_24g_pairing_button: -0x2d9 001088 jam zcode_62 ,mem_zcode_temp_param0 -0x2da 001089 branch p_zcode_entrance -: 001091 p_mouse_init_sunt: -0x2db 001092 call p_mouse_spi_init -0x2dc 001093 call mouse_spi_sdio_gpio_pollup -: 001094 p_mouse_init_sensor: -0x2dd 001095 call mouse_read_sensor_id -0x2de 001096 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge -0x2df 001097 beq p3065_id1 ,p_mouse_p3065_init_param -0x2e0 001098 call mouse_twspi_reset -0x2e1 001099 nop 1000 -0x2e2 001100 branch p_mouse_init_sensor -: 001102 p_mouse_init_sensor_reset: -0x2e3 001103 jam 1 ,mem_mouse_init_sensor_reset_flag -0x2e4 001104 call spi_ncs_enable -0x2e5 001105 call p_mouse_init_sunt -0x2e6 001106 branch spi_ncs_disable -: 001108 p_mouse_init_p32xx_id2_judge: -0x2e7 001109 call p_mouse_sensor_poweron -0x2e8 001110 fetch 1 ,mem_sensor_id2 -0x2e9 001111 beq p_mx8650 ,p_mouse_mx8650_init_param -0x2ea 001113 branch mouse_init_p32xx_id2_judge + 1 -: 001115 p_mouse_mx8650_init_param: -0x2eb 001116 jam mx8650 ,mem_config_sensor_type -0x2ec 001117 arg mem_sensor_8650_init ,regc -0x2ed 001118 call p_sensor_wr_seq -0x2ee 001119 branch p_mouse_dpi_config -: 001121 p_sensor_wr_seq: -0x2ef 001122 ifetch 2 ,regc -0x2f0 001123 arg 0xffff ,temp -0x2f1 001124 isub temp ,null -0x2f2 001125 rtn zero -0x2f3 001126 call twspi_write -0x2f4 001127 increase 2 ,regc -0x2f5 001128 branch p_sensor_wr_seq -: 001135 p_mouse_p3065_init_param: -0x2f6 001136 call p_mouse_sensor_poweron -0x2f7 001137 branch mouse_p3065_init_param -: 001144 p_spid_init_flash: -0x2f8 001145 jam 0x40 ,core_spid_ctrl -0x2f9 001146 jam 0x0 ,core_spid_delay -0x2fa 001147 hfetch 1 ,core_gpio_sel1 -0x2fb 001148 set0 0 ,pdata -0x2fc 001149 set0 1 ,pdata -0x2fd 001150 set1 3 ,pdata -0x2fe 001151 set0 4 ,pdata -0x2ff 001152 hstore 1 ,core_gpio_sel1 -0x300 001153 setarg 0 -0x301 001154 store 4 ,mem_spid_tbuf -0x302 001155 hfetch 1 ,core_gpio_pd3 -0x303 001156 set0 0 ,pdata -0x304 001157 hstore 1 ,core_gpio_pd3 -0x305 001158 rtn -: 001160 p_mouse_load_flash_info_check: -0x306 001161 call p_flash_release_deep_power_down -0x307 001162 call mouse_load_flash_flag -0x308 001163 fetch 2 ,mem_store_flag -0x309 001164 arg eeprom_init_flag ,temp -0x30a 001165 isub temp ,null -0x30b 001166 branch p_mouse_load_flash_device_info ,zero -0x30c 001167 storet 2 ,mem_store_flag -0x30d 001168 call mouse_ble_init_address -0x30e 001171 fetch 4 ,mem_mouse_24g_addr_init -0x30f 001172 store 4 ,mem_mouse_24g_addr -0x310 001173 store 4 ,mem_24g_addr -: 001174 p_mouse_store_flash_device_info: -0x311 001175 call p_mouse_adc_read_timeout -0x312 001176 fetch 2 ,mem_mouse_vdd_now_vol -0x313 001177 branch p_mouse_store_flash_device_info ,blank -0x314 001178 fetch 1 ,mem_adc_power_flag -0x315 001179 bbit1 1 ,app_enter_hibernate -0x316 001180 call p_flash_release_deep_power_down -0x317 001181 call p_flash_erase_sector -0x318 001182 call p_flash_write_enable -0x319 001183 call p_mouse_information_flash_parameters -0x31a 001184 call p_spid_write_flash -0x31b 001185 call p_wait_flash_done -0x31c 001186 call p_mouse_store_flash_dpi -: 001187 p_mouse_store_random_addr_increase_count: -0x31d 001188 call p_spid_init_flash -0x31e 001189 call p_flash_write_enable -0x31f 001190 arg 2 ,temp -0x320 001191 arg mem_random_addr_increase_count ,rega -0x321 001192 arg mouse_random_addr_count_eeprom_offset ,regb -0x322 001193 call p_mouse_store_flash_comm -0x323 001194 call p_flash_deep_power_down -: 001195 p_mouse_spi_init: -0x324 001196 jam 0x76 ,mem_spi_init_clk -0x325 001197 branch mouse_spi_init -: 001199 p_mouse_store_flash_dpi: -0x326 001200 call p_spid_init_flash -0x327 001201 call p_flash_write_enable -0x328 001202 arg 1 ,temp -0x329 001203 arg mem_mouse_dpi ,rega -0x32a 001204 arg mouse_dpi_eeprom_offect ,regb -: 001205 p_mouse_store_flash_comm: -0x32b 001206 fetch 3 ,mem_flash_base -0x32c 001207 iadd regb ,pdata -0x32d 001208 call p_spid_write_flash -0x32e 001209 branch p_wait_flash_done -: 001211 p_flash_erase_sector: -0x32f 001212 fetch 3 ,mem_flash_base -0x330 001213 store 3 ,mem_spi_write_addr -0x331 001214 call p_flash_write_enable -0x332 001215 call flash_erase_sector + 3 -: 001216 p_wait_flash_done: -0x333 001217 call p_flash_read_status -0x334 001218 bbit1 flash_status_wip ,p_wait_flash_done -0x335 001219 rtn -: 001221 p_flash_read_status: -0x336 001222 setarg mem_spid_rbuf -0x337 001223 hstore 2 ,core_spid_rxaddr -0x338 001224 setarg flash_read_satus -0x339 001225 force 1 ,temp -0x33a 001226 store 1 ,mem_spid_tbuf -0x33b 001227 setarg mem_spid_tbuf -0x33c 001228 hstore 2 ,core_spid_txaddr -0x33d 001229 branch spid_read_regs + 2 -: 001231 p_flash_write_enable: -0x33e 001232 call spid_unlock_flash -0x33f 001233 call p_flash_read_status -0x340 001234 bbit0 flash_status_wel ,p_flash_write_enable + 1 -0x341 001235 rtn -: 001238 p_spid_write_flash: -0x342 001239 copy pdata ,regc -0x343 001240 copy rega ,pdata -0x344 001241 increase -4 ,pdata -0x345 001242 copy pdata ,regb -0x346 001243 ifetch 4 ,regb -0x347 001244 store 4 ,mem_write_flash_head_temp -0x348 001245 copy regc ,pdata -0x349 001246 call spid_write_flash -0x34a 001247 fetch 4 ,mem_write_flash_head_temp -0x34b 001248 istore 4 ,regb -0x34c 001249 rtn -: 001251 p_mouse_information_flash_parameters: -0x34d 001252 setarg mem_mouse_information_end -0x34e 001253 arg mem_mouse_information_start ,temp -0x34f 001254 isub temp ,temp -0x350 001255 fetch 3 ,mem_flash_base -0x351 001256 arg mem_mouse_information_start ,rega -0x352 001257 rtn -: 001264 p_mouse_load_flash_device_info: -0x353 001266 call p_flash_release_deep_power_down -0x354 001267 call p_mouse_information_flash_parameters -0x355 001268 call spid_read_flash -0x356 001269 call p_mouse_load_random_addr_increase_count -0x357 001270 call p_mouse_load_dpi_from_flash -0x358 001271 call mouse_select_reconn_device -0x359 001272 fetch 4 ,mem_mouse_24g_addr -0x35a 001273 store 4 ,mem_24g_addr -0x35b 001274 rtn -: 001276 p_flash_deep_power_down: -0x35c 001277 jam flash_command_deep_power_down ,mem_temp -: 001278 p_spid_write_flash_cmd: -0x35d 001279 call p_spid_init_flash -0x35e 001280 call delay_nop100 -0x35f 001281 arg mem_write_flash_head_temp ,rega -0x360 001282 fetcht 1 ,mem_temp -0x361 001283 call spid_write_flash_common -0x362 001284 branch delay_nop100 -: 001286 p_flash_release_deep_power_down: -0x363 001287 jam flash_command_release_deep_power_down ,mem_temp -0x364 001288 branch p_spid_write_flash_cmd -: 001291 p_mouse_load_random_addr_increase_count: -0x365 001292 call p_flash_release_deep_power_down -0x366 001293 arg 2 ,temp -0x367 001294 arg mem_random_addr_increase_count ,rega -0x368 001295 arg mouse_random_addr_count_eeprom_offset ,regb -: 001296 p_mouse_load_flash_comm: -0x369 001297 fetch 3 ,mem_flash_base -0x36a 001298 iadd regb ,pdata -0x36b 001299 branch spid_read_flash -: 001301 p_mouse_load_dpi_from_flash: -0x36c 001302 call p_flash_release_deep_power_down -0x36d 001303 arg 1 ,temp -0x36e 001304 arg mem_mouse_dpi ,rega -0x36f 001305 arg mouse_dpi_eeprom_offect ,regb -0x370 001306 branch p_mouse_load_flash_comm -: 001310 p_mouse_start_24g_mode: -0x371 001313 jam 1 ,mem_device_flag -0x372 001314 call p_mouse_mode_24g_device_multi_led_on -: 001315 p_g24_start_24g_mode: -0x373 001316 jam zcode_60 ,mem_zcode_temp_param0 -0x374 001317 branch p_zcode_entrance -: 001319 p_g24_auto_pair_start: -0x375 001320 call p_mouse_discovery_multi_led_blink -0x376 001321 jam zcode_61 ,mem_zcode_temp_param0 -0x377 001322 branch p_zcode_entrance -: 001327 p_pdata_0xff_check: -0x378 001328 call enable_user -0x379 001329 setarg 0xffff -: 001330 p_pdata_0xff_check_loop: -0x37a 001331 ifetcht 2 ,contr -0x37b 001332 isub temp ,null -0x37c 001333 ncall disable_user ,zero -0x37d 001334 loop p_pdata_0xff_check_loop -0x37e 001335 rtn -: 001337 p_mouse_g24_package_data: -0x37f 001338 call mouse_g24_package_data -0x380 001339 fetch 2 ,mem_mouse_z -0x381 001340 rtn blank -: 001341 p_g24_transmit_by_interrupt_enable: -0x382 001342 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt -0x383 001343 setarg 0 -0x384 001344 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0x385 001345 rtn -: 001347 p_mouse_le_txbuff_save: -0x386 001348 arg mem_le_tx_buffer0 ,contr -0x387 001349 arg mem_le_tx_buffer0_omemalloc ,contw -0x388 001350 call p_mouse_le_txbuff_copy -0x389 001351 arg mem_le_tx_buffer1 ,contr -0x38a 001352 call p_mouse_le_txbuff_copy -0x38b 001353 arg mem_le_tx_buffer2 ,contr -0x38c 001354 call p_mouse_le_txbuff_copy -0x38d 001355 arg mem_le_tx_buffer3 ,contr -: 001356 p_mouse_le_txbuff_copy: -0x38e 001357 arg 27 ,loopcnt -0x38f 001358 branch memcpy -: 001360 p_mouse_le_txbuff_load: -0x390 001361 arg mem_le_tx_buffer0_omemalloc ,contr -0x391 001362 arg mem_le_tx_buffer0 ,contw -0x392 001363 call p_mouse_le_txbuff_copy -0x393 001364 arg mem_le_tx_buffer1 ,contw -0x394 001365 call p_mouse_le_txbuff_copy -0x395 001366 arg mem_le_tx_buffer2 ,contw -0x396 001367 call p_mouse_le_txbuff_copy -0x397 001368 arg mem_le_tx_buffer3 ,contw -0x398 001369 branch p_mouse_le_txbuff_copy -: 001371 p_mouse_le: -0x399 001372 call le_fifo_check_nearly_full -0x39a 001373 nrtn blank -0x39b 001374 fetch 1 ,mem_mouse_fast_conn_flag -0x39c 001375 beq 0xff ,p_mouse_le_next -0x39d 001376 fetch 1 ,mem_le_connect_status_flag -0x39e 001377 and pdata ,0x03 ,pdata -0x39f 001378 rtnne 0x03 -: 001379 p_mouse_le_next: -0x3a0 001380 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x3a1 001381 call p_mouse_clear_sensor_data ,blank -0x3a2 001382 fetch mouse_flag_len ,mem_mouse_flag -0x3a3 001383 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0x3a4 001384 call mouse_motion -0x3a5 001385 nrtn user -0x3a6 001386 call p_mouse_le_current_mult_update -0x3a7 001388 call p_mouse_wheel_trigger -: 001389 p_mouse_data_push: -0x3a8 001390 arg mem_mouse_key ,rega -0x3a9 001391 call queue_push -0x3aa 001392 call p_mouse_queue_increase ,user -0x3ab 001393 rtn -: 001395 p_mouse_le_current_mult_update: -0x3ac 001398 jam 8 ,mem_lpm_mult -0x3ad 001399 jam 30 ,mem_mouse_le_current_mult_timer -0x3ae 001400 rtn -: 001412 p_mouse_data_init: -0x3af 001413 jam 7 ,mem_mouse_data_queue -0x3b0 001414 jam 4 ,mem_mouse_data_queue + 1 -0x3b1 001415 setarg mem_mouse_data_queue -0x3b2 001416 store 2 ,mem_queue_ptr -0x3b3 001417 branch queue_init -: 001419 p_mouse_queue_increase: -0x3b4 001420 fetch 1 ,mem_mouse_data_queue_num -0x3b5 001421 increase 1 ,pdata -0x3b6 001422 store 1 ,mem_mouse_data_queue_num -0x3b7 001423 rtn -: 001425 p_mouse_data_pull: -0x3b8 001426 arg mem_mouse_key ,rega -0x3b9 001427 call queue_pop -0x3ba 001428 branch p_mouse_fill_data_le ,user -0x3bb 001429 rtn -: 001431 p_mouse_fill_data_le: -0x3bc 001432 call le_clear_md -0x3bd 001433 fetch 1 ,mem_mouse_data_queue_num -0x3be 001434 sub pdata ,1 ,null -0x3bf 001435 ncall le_set_md ,positive -0x3c0 001436 fetch 1 ,mem_mouse_data_queue_num -0x3c1 001437 rtn blank -0x3c2 001438 increase -1 ,pdata -0x3c3 001439 store 1 ,mem_mouse_data_queue_num -0x3c4 001440 branch mouse_fill_data_le -: 001446 p_mouse_wheel_trigger: -0x3c5 001447 fetch 2 ,mem_mouse_z -0x3c6 001448 rtn blank -0x3c7 001449 jam 1 ,mem_mouse_wheel_trigger -0x3c8 001450 jam 10 ,mem_mouse_wheel_trigger_timer -0x3c9 001451 rtn -: 001453 p_mouse_bt: -0x3ca 001454 rtn attempt -0x3cb 001455 fetch 1 ,mem_app_handshake_flag -0x3cc 001456 rtn blank -0x3cd 001457 call l2cap_malloc_is_fifo_nearly_full -0x3ce 001458 nrtn blank -0x3cf 001459 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x3d0 001460 call p_mouse_clear_sensor_data ,blank -0x3d1 001461 fetch mouse_flag_len ,mem_mouse_flag -0x3d2 001462 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -0x3d3 001463 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data -0x3d4 001464 call mouse_motion -0x3d5 001465 nrtn user -0x3d6 001466 call p_mouse_le_current_mult_update -0x3d7 001468 call p_mouse_wheel_trigger -0x3d8 001469 fetch 1 ,mem_mouse_bt_boot_mode -0x3d9 001470 beq 1 ,p_mouse_send_data_boot_mode -0x3da 001471 fetch 1 ,mem_mouse_bt_send_first_package_flag -0x3db 001472 rtn blank -0x3dc 001473 branch mouse_send_data -: 001475 p_mouse_send_data_boot_mode: -0x3dd 001476 fetch 1 ,mem_mouse_key -0x3de 001477 store 1 ,mem_mouse_bt_boot_data -0x3df 001478 fetch 1 ,mem_mouse_x -0x3e0 001479 istore 1 ,contw -0x3e1 001480 fetch 1 ,mem_mouse_y -0x3e2 001481 istore 1 ,contw -0x3e3 001482 fetch 2 ,mem_mouse_z -0x3e4 001483 istore 2 ,contw -0x3e5 001485 arg 7 ,rega -0x3e6 001486 call hid_malloc_tx_buff -0x3e7 001487 fetch 2 ,mem_hid_int_remote_cid -0x3e8 001488 istore 2 ,contw -0x3e9 001489 setarg 0x02a1 -0x3ea 001490 istore 2 ,contw -0x3eb 001491 fetch 5 ,mem_mouse_bt_boot_data -0x3ec 001492 istore 5 ,contw -0x3ed 001493 rtn -: 001495 p_mouse_clear_sensor_data: -0x3ee 001496 jam 1 ,mem_mouse_clear_sensor_data_flag -0x3ef 001497 call le_set_config_more_data -0x3f0 001498 branch p_mouse_init_sensor_reset -: 001500 p_mouse_idle: -0x3f1 001501 call ui_check_paring_button -0x3f2 001502 call p_mouse_dpi_check -0x3f3 001503 branch p_mouse_wheel_check -: 001505 p_mouse_wheel_check: -0x3f4 001506 call p_mouse_t_wheel_scan -0x3f5 001507 call mouse_wheel_scan -0x3f6 001508 branch mouse_wheel_check + 3 -: 001510 p_mouse_t_wheel_scan: -0x3f7 001511 hfetch 1 ,core_gpio_pu0 -0x3f8 001512 set1 5 ,pdata -0x3f9 001513 hstore 1 ,core_gpio_pu0 -0x3fa 001514 hfetch 1 ,core_gpio_pu3 -0x3fb 001515 set1 6 ,pdata -0x3fc 001516 hstore 1 ,core_gpio_pu3 -0x3fd 001517 arg 0 ,rega -0x3fe 001518 fetcht 1 ,mem_whee_ta_data_gpio -0x3ff 001519 call gpio_get_bit -0x400 001520 setflag true ,0 ,rega -0x401 001521 fetcht 1 ,mem_whee_tb_data_gpio -0x402 001522 call gpio_get_bit -0x403 001523 setflag true ,1 ,rega -0x404 001524 copy rega ,pdata -0x405 001525 store 1 ,mem_wheel_tb_new_pinlevel -0x406 001526 beq 0x01 ,p_mouse_t_wheel_scan_judge1 -0x407 001527 beq 0x02 ,p_mouse_t_wheel_scan_judge2 -0x408 001528 fetch 1 ,mem_wheel_tog -0x409 001529 bbit1 7 ,p_mouse_t_wheel_scan_judge3 -0x40a 001530 rtn -: 001532 p_mouse_t_wheel_scan_judge1: -0x40b 001533 fetch 1 ,mem_wheel_tb_old_pinlevel -0x40c 001534 beq 0 ,p_mouse_t_wheel_scan_judge11 -0x40d 001535 beq 3 ,p_mouse_t_wheel_scan_judge12 -0x40e 001536 rtn -: 001537 p_mouse_t_wheel_scan_judge2: -0x40f 001538 fetch 1 ,mem_wheel_tb_old_pinlevel -0x410 001539 beq 0 ,p_mouse_t_wheel_scan_judge21 -0x411 001540 beq 3 ,p_mouse_t_wheel_scan_judge22 -0x412 001541 rtn -: 001543 p_mouse_t_wheel_scan_judge11: -0x413 001544 jam 0x82 ,mem_wheel_tog -0x414 001545 rtn -: 001546 p_mouse_t_wheel_scan_judge12: -0x415 001547 jam 0x81 ,mem_wheel_tog -0x416 001548 rtn -: 001549 p_mouse_t_wheel_scan_judge21: -0x417 001550 jam 0x80 ,mem_wheel_tog -0x418 001551 rtn -: 001552 p_mouse_t_wheel_scan_judge22: -0x419 001553 jam 0x83 ,mem_wheel_tog -0x41a 001554 rtn -: 001555 p_mouse_t_wheel_scan_judge3: -0x41b 001556 fetch 1 ,mem_wheel_tog -0x41c 001557 set0 7 ,pdata -0x41d 001558 store 1 ,mem_wheel_tog -0x41e 001559 beq 0 ,p_mouse_t_wheel_scan_judge30 -0x41f 001560 beq 1 ,p_mouse_t_wheel_scan_judge31 -0x420 001561 beq 2 ,p_mouse_t_wheel_scan_judge32 -0x421 001562 beq 3 ,p_mouse_t_wheel_scan_judge33 -0x422 001563 rtn -: 001565 p_mouse_t_wheel_scan_judge30: -0x423 001566 fetch 1 ,mem_wheel_tb_new_pinlevel -0x424 001567 beq 3 ,p_mouse_wheel_t_forward -0x425 001568 rtn -: 001569 p_mouse_t_wheel_scan_judge31: -0x426 001570 fetch 1 ,mem_wheel_tb_new_pinlevel -0x427 001571 beq 0 ,p_mouse_wheel_t_forward -0x428 001572 rtn -: 001573 p_mouse_t_wheel_scan_judge32: -0x429 001574 fetch 1 ,mem_wheel_tb_new_pinlevel -0x42a 001575 beq 3 ,p_mouse_wheel_t_back -0x42b 001576 rtn -: 001577 p_mouse_t_wheel_scan_judge33: -0x42c 001578 fetch 1 ,mem_wheel_tb_new_pinlevel -0x42d 001579 beq 0 ,p_mouse_wheel_t_back -0x42e 001580 rtn -: 001582 p_mouse_wheel_t_forward: -0x42f 001583 jam 0 ,mem_mouse_tz_data_count1 -0x430 001584 fetch 1 ,mem_mouse_tz_data -0x431 001585 increase 1 ,pdata -0x432 001586 store 1 ,mem_mouse_tz_data -0x433 001587 rtn -: 001589 p_mouse_wheel_t_back: -0x434 001590 jam 0 ,mem_mouse_tz_data_count -0x435 001591 fetch 1 ,mem_mouse_tz_data -0x436 001592 increase -1 ,pdata -0x437 001593 store 1 ,mem_mouse_tz_data -0x438 001594 rtn -: 001596 p_mouse_comm_gpio_config: -0x439 001597 fetcht 1 ,mem_mouse_comm_gpio -0x43a 001598 rtneq 0xff -0x43b 001599 branch p_gpio_set_input_pu -: 001600 p_mouse_dpi_check: -0x43c 001601 call p_mouse_comm_gpio_config -0x43d 001602 fetcht 1 ,mem_dpi_button_gpio -0x43e 001603 call p_gpio_set_input_pd -0x43f 001604 fetcht 1 ,mem_dpi_button_gpio -0x440 001605 call gpio_get_bit -0x441 001606 branch p_mouse_dpi_up ,true -0x442 001607 call p_gpio_set_input_pu -: 001608 p_mouse_dpi_down: -0x443 001609 fetch 1 ,mem_mouse_dpi_button_state -0x444 001610 rtneq dpi_button_state_down -0x445 001611 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0x446 001612 fetch 1 ,mem_mouse_dpi -0x447 001613 increase 1 ,pdata -0x448 001614 and pdata ,0x03 ,pdata -0x449 001615 store 1 ,mem_mouse_dpi -0x44a 001616 increase 2 ,pdata -0x44b 001617 store 1 ,mem_mouse_multi_led_blink_count -0x44c 001618 call p_mouse_dpi_multi_led_blink -0x44d 001619 branch mouse_seting_dpi -: 001620 p_mouse_dpi_up: -0x44e 001621 call p_gpio_set_input_pu -0x44f 001622 branch mouse_dpi_up -: 001624 p_mouse_priority_bb_event: -0x450 001625 copy regc ,pdata -0x451 001626 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected -0x452 001627 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected -0x453 001628 beq bt_evt_le_enc_info ,p_mouse_le_enc_info -0x454 001629 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt -0x455 001630 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved -0x456 001631 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed -0x457 001632 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout -0x458 001633 beq bt_evt_switch_not_accept ,app_bt_role_switch -0x459 001634 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept -0x45a 001635 beq bt_evt_bb_connected ,p_mouse_bb_event_connected -0x45b 001636 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected -0x45c 001637 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check -0x45d 001638 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete -0x45e 001639 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail -0x45f 001640 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success -0x460 001641 branch mouse_priority_bb_event + 1 -: 001643 p_mouse_le_bb_event_connected: -0x461 001644 jam zcode_d0 ,mem_zcode_temp_param0 -0x462 001645 branch p_zcode_entrance -: 001647 p_mouse_le_bb_disconnected: -0x463 001648 call p_mouse_sensor_powerdown_check -0x464 001649 jam zcode_a2 ,mem_zcode_temp_param0 -0x465 001650 branch p_zcode_entrance -: 001652 p_mouse_le_enc_info: -: 001653 p_app_updata_le_param: -0x466 001654 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x467 001655 branch ui_ipc_send_cmd -: 001657 p_mouse_le_ll_start_encryt: -0x468 001658 jam zcode_b3 ,mem_zcode_temp_param0 -0x469 001659 branch p_zcode_entrance -: 001661 p_mouse_le_conn_param_update_rsp_recieved: -0x46a 001662 jam zcode_a1 ,mem_zcode_temp_param0 -0x46b 001663 branch p_zcode_entrance -: 001666 p_mouse_bb_event_reconn_timeout: -: 001667 p_mouse_bb_event_reconn_failed: -0x46c 001668 jam zcode_a3 ,mem_zcode_temp_param0 -0x46d 001669 branch p_zcode_entrance -: 001671 p_mouse_irtual_cable_unplug: -0x46e 001672 jam zcode_71 ,mem_zcode_temp_param0 -0x46f 001673 branch p_zcode_entrance -: 001675 p_mouse_sniff_not_accept: -0x470 001676 jam zcode_b1 ,mem_zcode_temp_param0 -0x471 001677 branch p_zcode_entrance -: 001679 p_mouse_bb_event_connected: -0x472 001680 jam 0 ,mem_mouse_connected_state -0x473 001681 jam 0 ,mem_mouse_send_switch_req_timer -0x474 001682 call p_mouse_init_sensor_reset -0x475 001683 branch mouse_stop_discovery -: 001685 p_mouse_bb_event_disconnected: -0x476 001686 call p_mouse_sensor_powerdown_check -0x477 001687 jam zcode_b4 ,mem_zcode_temp_param0 -0x478 001688 branch p_zcode_entrance -: 001690 p_mouse_enter_sniff_check: -0x479 001691 jam zcode_b2 ,mem_zcode_temp_param0 -0x47a 001692 branch p_zcode_entrance -: 001694 p_mouse_24g_pairing_complete: -0x47b 001695 call p_mouse_discovey_led_blink_off -0x47c 001696 jam 0 ,mem_mouse_connected_state -0x47d 001697 call p_mouse_init_sensor_reset -0x47e 001698 jam zcode_92 ,mem_zcode_temp_param0 -0x47f 001699 branch p_zcode_entrance -: 001701 p_mouse_24g_attempt_fail: -0x480 001702 jam 1 ,mem_mouse_connected_state -0x481 001703 jam 10 ,mem_mouse_multi_led_blink_count -0x482 001704 call p_mouse_dpi_multi_led_blink -0x483 001706 call p_mouse_sensor_powerdown_check -0x484 001708 jam zcode_a0 ,mem_zcode_temp_param0 -0x485 001709 branch p_zcode_entrance -: 001711 p_mouse_24g_attempt_success: -0x486 001712 jam 0 ,mem_mouse_connected_state -0x487 001714 call p_mouse_init_sensor_reset -: 001715 p_mouse_24g_no_data_timer_init: -0x488 001716 branch mouse_no_data_timer_init -: 001718 p_mouse_before_hibernate: -0x489 001719 call p_mouse_sensor_powerdown_check -0x48a 001720 jam zcode_a4 ,mem_zcode_temp_param0 -0x48b 001721 branch p_zcode_entrance -: 001723 p_mouse_sensor_powerdown_check: -0x48c 001724 fetch 1 ,mem_mouse_init_sensor_reset_flag -0x48d 001725 rtn blank -0x48e 001726 jam 0 ,mem_mouse_init_sensor_reset_flag -: 001727 p_mouse_sensor_powerdown: -0x48f 001728 call p_mouse_init_sunt -0x490 001729 setarg 0x0806 -0x491 001734 branch twspi_write -: 001736 p_mouse_bb_event_timer: -0x492 001737 call p_mouse_adc_read -0x493 001738 call p_mouse_low_voltage_led_timer -0x494 001739 call p_mouse_wheel_trigger_timer -0x495 001740 call p_mouse_select_device_by_button -0x496 001741 call mouse_check_discovery_timeout_timer -0x497 001742 call mouse_check_no_data_timeout_timer -0x498 001744 call p_mouse_g24_stop_mode_timeout_timer -0x499 001745 call p_mouse_check_direct_timeout_timer -0x49a 001746 call p_mouse_le_enable_att_list_timer -0x49b 001747 call p_mouse_le_current_mult_update_timer -0x49c 001748 call p_le_send_smp_security_request_timer -0x49d 001749 call p_mouse_send_switch_req_timer -0x49e 001750 call mouse_check_hid_handshake_timer -0x49f 001751 call p_mouse_bt_check_sniff_req_timeout_timer -0x4a0 001752 branch p_mouse_multi_led_blink_timer -: 001755 p_mouse_send_switch_req_timer: -0x4a1 001756 arg mem_mouse_send_switch_req_timer ,regc -0x4a2 001757 arg host_create_conn_resend ,regb -0x4a3 001758 branch timer_single_step -: 001760 p_mouse_bt_check_sniff_req_timeout_timer: -0x4a4 001761 arg mem_mouse_bt_send_first_package_timer ,regc -0x4a5 001762 arg p_mouse_bt_send_first_package ,regb -0x4a6 001763 branch timer_single_step -: 001764 p_mouse_bt_send_first_package: -0x4a7 001765 jam 1 ,mem_mouse_bt_send_first_package_flag -0x4a8 001766 rtn -: 001769 p_mouse_le_enable_att_list_timer: -0x4a9 001770 arg mem_le_start_encrypt_timer ,regc -0x4aa 001771 arg mouse_le_write_enable ,regb -0x4ab 001772 branch timer_single_step -: 001774 p_mouse_check_direct_timeout_timer: -0x4ac 001775 arg mem_mouse_direct_timer ,regc -0x4ad 001776 arg p_mouse_check_direct_timeout ,regb -0x4ae 001777 branch timer_single_step_2b -: 001778 p_mouse_check_direct_timeout: -0x4af 001779 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x4b0 001780 nrtn blank -0x4b1 001781 branch mouse_check_direct_timeout -: 001783 p_mouse_le_current_mult_update_timer: -0x4b2 001784 arg mem_mouse_le_current_mult_timer ,regc -0x4b3 001785 arg p_mouse_le_current_mult_reinit ,regb -0x4b4 001786 branch timer_single_step -: 001787 p_mouse_le_current_mult_reinit: -0x4b5 001788 fetch 1 ,mem_lpm_mult_init -0x4b6 001789 store 1 ,mem_lpm_mult -0x4b7 001790 rtn -: 001792 p_le_send_smp_security_request_timer: -0x4b8 001793 fetch 1 ,mem_mouse_le_bb_connected_flag -0x4b9 001794 rtn blank -0x4ba 001795 arg mem_mouse_send_secutiry_request_timer ,regc -0x4bb 001796 arg p_le_pairing_sm_start_check ,regb -0x4bc 001797 branch timer_single_step -: 001798 p_le_pairing_sm_start_check: -0x4bd 001799 fetch 1 ,mem_le_send_security_request_flag -0x4be 001800 nrtn blank -0x4bf 001801 branch le_pairing_sm_start -: 001803 p_mouse_wheel_trigger_timer: -0x4c0 001804 arg mem_mouse_wheel_trigger_timer ,regc -0x4c1 001805 arg p_mouse_wheel_trigger_disable ,regb -0x4c2 001806 branch timer_single_step -: 001807 p_mouse_wheel_trigger_disable: -0x4c3 001808 jam 0 ,mem_mouse_wheel_trigger -0x4c4 001809 rtn -: 001822 p_mouse_g24_stop_mode_timeout_timer: -0x4c5 001823 arg mem_24g_stop_g24_mode_timeout ,regc -0x4c6 001824 arg p_mouse_g24_stop_mode_timeout ,regb -0x4c7 001825 branch timer_single_step_2b -: 001826 p_mouse_g24_stop_mode_timeout: -0x4c8 001827 jam 1 ,mem_24g_stop_g24_mode -0x4c9 001828 rtn -: 001859 p_mouse_bt_discovery_timer: -0x4ca 001860 arg mem_select_ui_button_count ,regc -0x4cb 001861 arg p_mouse_long_button_bt_discovery ,regb -0x4cc 001862 branch timer_single_step -: 001863 p_mouse_long_button_bt_discovery: -0x4cd 001864 jam on ,mem_select_device_button_statue_bt_discovery -0x4ce 001865 fetcht 1 ,mem_device_flag -0x4cf 001866 fetch 1 ,mem_24g_device_number -0x4d0 001867 isub temp ,null -0x4d1 001868 rtn zero -0x4d2 001869 fetch 2 ,mem_ui_state_map -0x4d3 001870 isolate1 ui_state_ble_adv ,pdata -0x4d4 001871 call mouse_stop_le_adv ,true -0x4d5 001872 fetch 2 ,mem_ui_state_map -0x4d6 001873 isolate1 ui_state_bt_reconnect ,pdata -0x4d7 001874 call mouse_cancel_reconnect ,true -0x4d8 001875 branch mouse_long_button_bt_discovry -: 001878 p_mouse_get_select_state: -0x4d9 001879 fetcht 1 ,mem_config_select_device_button_gpio -0x4da 001880 call p_gpio_set_input_pu -0x4db 001881 fetcht 1 ,mem_config_select_device_button_gpio -0x4dc 001882 branch gpio_get_bit -: 001884 p_mouse_select_device_by_button: -0x4dd 001885 call p_mouse_get_select_state -0x4de 001886 nbranch p_mouse_select_device_button_up ,true -: 001887 p_mouse_select_device_button_down: -0x4df 001888 call p_mouse_bt_discovery_timer -0x4e0 001889 fetch 1 ,mem_select_device_button_statue -0x4e1 001890 rtneq pb_button_state_down -0x4e2 001891 jam pb_button_state_down ,mem_select_device_button_statue -0x4e3 001892 fetch 2 ,mem_mouse_direct_timeout -0x4e4 001893 store 2 ,mem_mouse_direct_timer -0x4e5 001894 force page_length_timer ,queue -0x4e6 001895 fetch 2 ,mem_page_to -0x4e7 001896 branch timer_init -: 001898 p_mouse_select_device_button_up: -0x4e8 001899 fetch 1 ,mem_mouse_select_device_button_wakeup_flag -0x4e9 001900 nbranch p_mouse_select_button_wakeup_firstup ,blank +0x28d 000966 hfetch 1 ,core_gpio_pu2 +0x28e 000967 or pdata ,0xc0 ,pdata +0x28f 000968 hstore 1 ,core_gpio_pu2 +0x290 000969 hfetch 1 ,core_gpio_pd3 +0x291 000970 and pdata ,0x7f ,pdata +0x292 000971 hstore 1 ,core_gpio_pd3 +0x293 000974 rtn +: 000976 p_mouse_t_wheel_clear_wake: +0x294 000977 fetcht 1 ,mem_whee_a_data_gpio +0x295 000978 call p_gpio_set_input_pd +0x296 000979 fetcht 1 ,mem_whee_b_data_gpio +0x297 000980 call p_gpio_set_input_pd +0x298 000981 fetcht 1 ,mem_whee_ta_data_gpio +0x299 000982 call p_gpio_set_input_pd +0x29a 000983 fetcht 1 ,mem_whee_tb_data_gpio +0x29b 000984 call p_gpio_set_input_pd +0x29c 000986 fetch 1 ,mem_gpio_wakeup_low +0x29d 000987 and pdata ,0xbf ,pdata +0x29e 000988 store 1 ,mem_gpio_wakeup_low +0x29f 000989 fetch 1 ,mem_gpio_wakeup_low + 2 +0x2a0 000990 and pdata ,0x7f ,pdata +0x2a1 000991 store 1 ,mem_gpio_wakeup_low + 2 +0x2a2 000992 fetch 1 ,mem_gpio_wakeup_low + 3 +0x2a3 000993 and pdata ,0xe7 ,pdata +0x2a4 000994 store 1 ,mem_gpio_wakeup_low + 3 +0x2a5 000995 rtn +: 001003 p_mouse_set_sdio_high: +0x2a6 001004 fetch 1 ,mem_mouse_init_sensor_reset_flag +0x2a7 001005 rtn blank +0x2a8 001006 branch p_mouse_seting_sensor_type +: 001008 p_device_init: +0x2a9 001009 jam 0x86 ,0x895b +0x2aa 001010 jam 0xa0 ,0x895c +0x2ab 001011 call initialize_radio +0x2ac 001012 call app_lpm_mult_enable +0x2ad 001013 call enable_authrom +0x2ae 001014 branch p_mouse_spi_init ,wake +: 001015 p_device_wake_from_power: +0x2af 001016 fetch 3 ,mem_le_lap + 3 +0x2b0 001017 store 3 ,mem_le_lap_high_3b +0x2b1 001018 call p_wake_from_power +0x2b2 001020 call p_mouse_switch_hwakeup_bypb +0x2b3 001021 fetcht 1 ,mem_device_flag +0x2b4 001022 fetch 1 ,mem_24g_device_number +0x2b5 001023 isub temp ,null +0x2b6 001024 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero +0x2b7 001027 fetch 1 ,mem_device_flag +0x2b8 001028 beq 0xff ,p_mouse_24g_pair_check +0x2b9 001029 sub pdata ,1 ,null +0x2ba 001030 nbranch p_mouse_check_reconn_target ,zero +: 001031 p_mouse_24g_pair_check: +0x2bb 001032 call p_mouse_check_key_gpio +0x2bc 001033 beq mouse_lm_button ,p_mouse_24g_pairing_button +: 001034 p_mouse_check_reconn_target: +0x2bd 001035 call p_mouse_tx_power_init +0x2be 001036 call p_mouse_select_device_by_button +0x2bf 001037 arg mem_device1_type ,rega +0x2c0 001038 fetch 1 ,mem_device_flag +0x2c1 001039 fetcht 1 ,mem_24g_device_number +0x2c2 001040 isub temp ,null +0x2c3 001041 branch p_mouse_start_24g_mode ,zero +0x2c4 001042 increase -1 ,pdata +0x2c5 001043 mul32 pdata ,29 ,pdata +0x2c6 001044 iadd rega ,rega +0x2c7 001045 ifetch 1 ,rega +0x2c8 001046 store 1 ,mem_xrecord_mode +0x2c9 001050 beq rec_4_mode ,p_mouse4_0_check_reconn_target +0x2ca 001052 rtn +: 001054 p_mouse_tx_power_init: +0x2cb 001055 fetch 1 ,mem_tx_power_temp +0x2cc 001056 store 1 ,mem_tx_power +0x2cd 001057 rtn +: 001058 p_mouse_bt_deepsleep_timerout_adjust: +0x2ce 001059 setarg 0x4650 +0x2cf 001060 store 2 ,mem_mouse_no_data_timeout +0x2d0 001061 rtn +: 001071 p_mouse4_0_check_reconn_target: +0x2d1 001072 jam zcode_23 ,mem_zcode_temp_param0 +0x2d2 001073 branch p_zcode_entrance +: 001075 p_le_check_adv_flag: +0x2d3 001076 arg mem_le_adv_data ,rega +: 001077 p_le_check_adv_flag_loop: +0x2d4 001078 ifetch 1 ,rega +0x2d5 001079 rtn blank +0x2d6 001080 iadd contr ,rega +0x2d7 001081 ifetch 1 ,contr +0x2d8 001082 rtneq 0x01 +0x2d9 001083 branch p_le_check_adv_flag_loop +: 001085 p_mouse_le_fast_conn_disable: +0x2da 001086 jam 0x5a ,mem_mouse_fast_conn_flag +0x2db 001087 rtn +: 001089 p_mouse_fast_conn_init: +0x2dc 001090 jam 0xff ,mem_mouse_fast_conn_flag +0x2dd 001091 jam 0x34 ,mem_xrecord_mode +0x2de 001092 fetch 6 ,mem_24g_allpowerful_addr +0x2df 001093 store 6 ,mem_le_lap +0x2e0 001094 rtn +: 001097 p_mouse_24g_pairing_button: +0x2e1 001098 jam zcode_62 ,mem_zcode_temp_param0 +0x2e2 001099 branch p_zcode_entrance +: 001101 p_mouse_init_sunt: +0x2e3 001102 call p_mouse_spi_init +0x2e4 001103 call mouse_spi_sdio_gpio_pollup +: 001104 p_mouse_init_sensor: +0x2e5 001105 call mouse_read_sensor_id +0x2e6 001106 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +0x2e7 001107 beq p3065_id1 ,p_mouse_p3065_init_param +0x2e8 001108 call mouse_twspi_reset +0x2e9 001109 nop 1000 +0x2ea 001110 branch p_mouse_init_sensor +: 001112 p_mouse_init_sensor_reset: +0x2eb 001113 jam 1 ,mem_mouse_init_sensor_reset_flag +0x2ec 001114 call spi_ncs_enable +0x2ed 001115 call p_mouse_init_sunt +0x2ee 001116 branch spi_ncs_disable +: 001118 p_mouse_init_p32xx_id2_judge: +0x2ef 001119 call p_mouse_sensor_poweron +0x2f0 001120 fetch 1 ,mem_sensor_id2 +0x2f1 001121 beq p_mx8650 ,p_mouse_mx8650_init_param +0x2f2 001123 branch mouse_init_p32xx_id2_judge + 1 +: 001125 p_mouse_mx8650_init_param: +0x2f3 001126 jam mx8650 ,mem_config_sensor_type +0x2f4 001127 arg mem_sensor_8650_init ,regc +0x2f5 001128 call p_sensor_wr_seq +0x2f6 001129 branch p_mouse_dpi_config +: 001131 p_sensor_wr_seq: +0x2f7 001132 ifetch 2 ,regc +0x2f8 001133 arg 0xffff ,temp +0x2f9 001134 isub temp ,null +0x2fa 001135 rtn zero +0x2fb 001136 call twspi_write +0x2fc 001137 increase 2 ,regc +0x2fd 001138 branch p_sensor_wr_seq +: 001145 p_mouse_p3065_init_param: +0x2fe 001146 call p_mouse_sensor_poweron +0x2ff 001147 branch mouse_p3065_init_param +: 001154 p_spid_init_flash: +0x300 001155 jam 0x40 ,core_spid_ctrl +0x301 001156 jam 0x0 ,core_spid_delay +0x302 001157 hfetch 1 ,core_gpio_sel1 +0x303 001158 set0 0 ,pdata +0x304 001159 set0 1 ,pdata +0x305 001160 set1 3 ,pdata +0x306 001161 set0 4 ,pdata +0x307 001162 hstore 1 ,core_gpio_sel1 +0x308 001163 setarg 0 +0x309 001164 store 4 ,mem_spid_tbuf +0x30a 001165 hfetch 1 ,core_gpio_pd3 +0x30b 001166 set0 0 ,pdata +0x30c 001167 hstore 1 ,core_gpio_pd3 +0x30d 001168 rtn +: 001170 p_mouse_load_flash_info_check: +0x30e 001171 call p_flash_release_deep_power_down +0x30f 001172 call mouse_load_flash_flag +0x310 001173 fetch 2 ,mem_store_flag +0x311 001174 arg eeprom_init_flag ,temp +0x312 001175 isub temp ,null +0x313 001176 branch p_mouse_load_flash_device_info ,zero +0x314 001177 storet 2 ,mem_store_flag +0x315 001178 call mouse_ble_init_address +0x316 001181 fetch 4 ,mem_mouse_24g_addr_init +0x317 001182 store 4 ,mem_mouse_24g_addr +0x318 001183 store 4 ,mem_24g_addr +: 001184 p_mouse_store_flash_device_info: +0x319 001185 call p_mouse_adc_read_timeout +0x31a 001186 fetch 2 ,mem_mouse_vdd_now_vol +0x31b 001187 branch p_mouse_store_flash_device_info ,blank +0x31c 001188 fetch 1 ,mem_adc_power_flag +0x31d 001189 bbit1 1 ,app_enter_hibernate +0x31e 001190 call p_flash_release_deep_power_down +0x31f 001191 call p_flash_erase_sector +0x320 001192 call p_flash_write_enable +0x321 001193 call p_mouse_information_flash_parameters +0x322 001194 call p_spid_write_flash +0x323 001195 call p_wait_flash_done +0x324 001196 call p_mouse_store_flash_dpi +: 001197 p_mouse_store_random_addr_increase_count: +0x325 001198 call p_spid_init_flash +0x326 001199 call p_flash_write_enable +0x327 001200 arg 2 ,temp +0x328 001201 arg mem_random_addr_increase_count ,rega +0x329 001202 arg mouse_random_addr_count_eeprom_offset ,regb +0x32a 001203 call p_mouse_store_flash_comm +0x32b 001204 call p_flash_deep_power_down +: 001205 p_mouse_spi_init: +0x32c 001206 jam 0x76 ,mem_spi_init_clk +0x32d 001207 branch mouse_spi_init +: 001209 p_mouse_store_flash_dpi: +0x32e 001210 call p_spid_init_flash +0x32f 001211 call p_flash_write_enable +0x330 001212 arg 1 ,temp +0x331 001213 arg mem_mouse_dpi ,rega +0x332 001214 arg mouse_dpi_eeprom_offect ,regb +: 001215 p_mouse_store_flash_comm: +0x333 001216 fetch 3 ,mem_flash_base +0x334 001217 iadd regb ,pdata +0x335 001218 call p_spid_write_flash +0x336 001219 branch p_wait_flash_done +: 001221 p_flash_erase_sector: +0x337 001222 fetch 3 ,mem_flash_base +0x338 001223 store 3 ,mem_spi_write_addr +0x339 001224 call p_flash_write_enable +0x33a 001225 call flash_erase_sector + 3 +: 001226 p_wait_flash_done: +0x33b 001227 call p_flash_read_status +0x33c 001228 bbit1 flash_status_wip ,p_wait_flash_done +0x33d 001229 rtn +: 001231 p_flash_read_status: +0x33e 001232 setarg mem_spid_rbuf +0x33f 001233 hstore 2 ,core_spid_rxaddr +0x340 001234 setarg flash_read_satus +0x341 001235 force 1 ,temp +0x342 001236 store 1 ,mem_spid_tbuf +0x343 001237 setarg mem_spid_tbuf +0x344 001238 hstore 2 ,core_spid_txaddr +0x345 001239 branch spid_read_regs + 2 +: 001241 p_flash_write_enable: +0x346 001242 call spid_unlock_flash +0x347 001243 call p_flash_read_status +0x348 001244 bbit0 flash_status_wel ,p_flash_write_enable + 1 +0x349 001245 rtn +: 001248 p_spid_write_flash: +0x34a 001249 copy pdata ,regc +0x34b 001250 copy rega ,pdata +0x34c 001251 increase -4 ,pdata +0x34d 001252 copy pdata ,regb +0x34e 001253 ifetch 4 ,regb +0x34f 001254 store 4 ,mem_write_flash_head_temp +0x350 001255 copy regc ,pdata +0x351 001256 call spid_write_flash +0x352 001257 fetch 4 ,mem_write_flash_head_temp +0x353 001258 istore 4 ,regb +0x354 001259 rtn +: 001261 p_mouse_information_flash_parameters: +0x355 001262 setarg mem_mouse_information_end +0x356 001263 arg mem_mouse_information_start ,temp +0x357 001264 isub temp ,temp +0x358 001265 fetch 3 ,mem_flash_base +0x359 001266 arg mem_mouse_information_start ,rega +0x35a 001267 rtn +: 001274 p_mouse_load_flash_device_info: +0x35b 001276 call p_flash_release_deep_power_down +0x35c 001277 call p_mouse_information_flash_parameters +0x35d 001278 call spid_read_flash +0x35e 001279 call p_mouse_load_random_addr_increase_count +0x35f 001280 call p_mouse_load_dpi_from_flash +0x360 001281 call mouse_select_reconn_device +0x361 001282 fetch 4 ,mem_mouse_24g_addr +0x362 001283 store 4 ,mem_24g_addr +0x363 001284 rtn +: 001286 p_flash_deep_power_down: +0x364 001287 jam flash_command_deep_power_down ,mem_temp +: 001288 p_spid_write_flash_cmd: +0x365 001289 call p_spid_init_flash +0x366 001290 call delay_nop100 +0x367 001291 arg mem_write_flash_head_temp ,rega +0x368 001292 fetcht 1 ,mem_temp +0x369 001293 call spid_write_flash_common +0x36a 001294 branch delay_nop100 +: 001296 p_flash_release_deep_power_down: +0x36b 001297 jam flash_command_release_deep_power_down ,mem_temp +0x36c 001298 branch p_spid_write_flash_cmd +: 001301 p_mouse_load_random_addr_increase_count: +0x36d 001302 call p_flash_release_deep_power_down +0x36e 001303 arg 2 ,temp +0x36f 001304 arg mem_random_addr_increase_count ,rega +0x370 001305 arg mouse_random_addr_count_eeprom_offset ,regb +: 001306 p_mouse_load_flash_comm: +0x371 001307 fetch 3 ,mem_flash_base +0x372 001308 iadd regb ,pdata +0x373 001309 branch spid_read_flash +: 001311 p_mouse_load_dpi_from_flash: +0x374 001312 call p_flash_release_deep_power_down +0x375 001313 arg 1 ,temp +0x376 001314 arg mem_mouse_dpi ,rega +0x377 001315 arg mouse_dpi_eeprom_offect ,regb +0x378 001316 branch p_mouse_load_flash_comm +: 001320 p_mouse_start_24g_mode: +0x379 001323 jam 1 ,mem_device_flag +0x37a 001324 call p_mouse_mode_24g_device_multi_led_on +: 001325 p_g24_start_24g_mode: +0x37b 001326 jam zcode_60 ,mem_zcode_temp_param0 +0x37c 001327 branch p_zcode_entrance +: 001329 p_g24_auto_pair_start: +0x37d 001330 call p_mouse_discovery_multi_led_blink +0x37e 001331 jam zcode_61 ,mem_zcode_temp_param0 +0x37f 001332 branch p_zcode_entrance +: 001337 p_pdata_0xff_check: +0x380 001338 call enable_user +0x381 001339 setarg 0xffff +: 001340 p_pdata_0xff_check_loop: +0x382 001341 ifetcht 2 ,contr +0x383 001342 isub temp ,null +0x384 001343 ncall disable_user ,zero +0x385 001344 loop p_pdata_0xff_check_loop +0x386 001345 rtn +: 001347 p_mouse_g24_package_data: +0x387 001348 call mouse_g24_package_data +0x388 001349 fetch 2 ,mem_mouse_z +0x389 001350 rtn blank +: 001351 p_g24_transmit_by_interrupt_enable: +0x38a 001352 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +0x38b 001353 setarg 0 +0x38c 001354 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0x38d 001355 rtn +: 001357 p_mouse_le_txbuff_save: +0x38e 001358 arg mem_le_tx_buffer0 ,contr +0x38f 001359 arg mem_le_tx_buffer0_omemalloc ,contw +0x390 001360 call p_mouse_le_txbuff_copy +0x391 001361 arg mem_le_tx_buffer1 ,contr +0x392 001362 call p_mouse_le_txbuff_copy +0x393 001363 arg mem_le_tx_buffer2 ,contr +0x394 001364 call p_mouse_le_txbuff_copy +0x395 001365 arg mem_le_tx_buffer3 ,contr +: 001366 p_mouse_le_txbuff_copy: +0x396 001367 arg 27 ,loopcnt +0x397 001368 branch memcpy +: 001370 p_mouse_le_txbuff_load: +0x398 001371 arg mem_le_tx_buffer0_omemalloc ,contr +0x399 001372 arg mem_le_tx_buffer0 ,contw +0x39a 001373 call p_mouse_le_txbuff_copy +0x39b 001374 arg mem_le_tx_buffer1 ,contw +0x39c 001375 call p_mouse_le_txbuff_copy +0x39d 001376 arg mem_le_tx_buffer2 ,contw +0x39e 001377 call p_mouse_le_txbuff_copy +0x39f 001378 arg mem_le_tx_buffer3 ,contw +0x3a0 001379 branch p_mouse_le_txbuff_copy +: 001381 p_mouse_le: +0x3a1 001382 call le_fifo_check_nearly_full +0x3a2 001383 nrtn blank +0x3a3 001384 fetch 1 ,mem_mouse_fast_conn_flag +0x3a4 001385 beq 0xff ,p_mouse_le_next +0x3a5 001386 fetch 1 ,mem_le_connect_status_flag +0x3a6 001387 and pdata ,0x03 ,pdata +0x3a7 001388 rtnne 0x03 +: 001389 p_mouse_le_next: +0x3a8 001390 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x3a9 001391 call p_mouse_clear_sensor_data ,blank +0x3aa 001392 fetch mouse_flag_len ,mem_mouse_flag +0x3ab 001393 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x3ac 001394 call mouse_motion +0x3ad 001395 nrtn user +0x3ae 001396 call p_mouse_le_current_mult_update +0x3af 001398 call p_mouse_wheel_trigger +: 001399 p_mouse_data_push: +0x3b0 001400 arg mem_mouse_key ,rega +0x3b1 001401 call queue_push +0x3b2 001402 call p_mouse_queue_increase ,user +0x3b3 001403 rtn +: 001405 p_mouse_le_current_mult_update: +0x3b4 001408 jam 8 ,mem_lpm_mult +0x3b5 001409 jam 30 ,mem_mouse_le_current_mult_timer +0x3b6 001410 rtn +: 001422 p_mouse_data_init: +0x3b7 001423 jam 7 ,mem_mouse_data_queue +0x3b8 001424 jam 4 ,mem_mouse_data_queue + 1 +0x3b9 001425 setarg mem_mouse_data_queue +0x3ba 001426 store 2 ,mem_queue_ptr +0x3bb 001427 branch queue_init +: 001429 p_mouse_queue_increase: +0x3bc 001430 fetch 1 ,mem_mouse_data_queue_num +0x3bd 001431 increase 1 ,pdata +0x3be 001432 store 1 ,mem_mouse_data_queue_num +0x3bf 001433 rtn +: 001435 p_mouse_data_pull: +0x3c0 001436 arg mem_mouse_key ,rega +0x3c1 001437 call queue_pop +0x3c2 001438 branch p_mouse_fill_data_le ,user +0x3c3 001439 rtn +: 001441 p_mouse_fill_data_le: +0x3c4 001442 call le_clear_md +0x3c5 001443 fetch 1 ,mem_mouse_data_queue_num +0x3c6 001444 sub pdata ,1 ,null +0x3c7 001445 ncall le_set_md ,positive +0x3c8 001446 fetch 1 ,mem_mouse_data_queue_num +0x3c9 001447 rtn blank +0x3ca 001448 increase -1 ,pdata +0x3cb 001449 store 1 ,mem_mouse_data_queue_num +0x3cc 001450 branch mouse_fill_data_le +: 001456 p_mouse_wheel_trigger: +0x3cd 001457 fetch 2 ,mem_mouse_z +0x3ce 001458 rtn blank +0x3cf 001459 jam 1 ,mem_mouse_wheel_trigger +0x3d0 001460 jam 10 ,mem_mouse_wheel_trigger_timer +0x3d1 001461 rtn +: 001463 p_mouse_bt: +0x3d2 001464 rtn attempt +0x3d3 001465 fetch 1 ,mem_app_handshake_flag +0x3d4 001466 rtn blank +0x3d5 001467 call l2cap_malloc_is_fifo_nearly_full +0x3d6 001468 nrtn blank +0x3d7 001469 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x3d8 001470 call p_mouse_clear_sensor_data ,blank +0x3d9 001471 fetch mouse_flag_len ,mem_mouse_flag +0x3da 001472 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3db 001473 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +0x3dc 001474 call mouse_motion +0x3dd 001475 nrtn user +0x3de 001476 call p_mouse_le_current_mult_update +0x3df 001478 call p_mouse_wheel_trigger +0x3e0 001479 fetch 1 ,mem_mouse_bt_boot_mode +0x3e1 001480 beq 1 ,p_mouse_send_data_boot_mode +0x3e2 001481 fetch 1 ,mem_mouse_bt_send_first_package_flag +0x3e3 001482 rtn blank +0x3e4 001483 branch mouse_send_data +: 001485 p_mouse_send_data_boot_mode: +0x3e5 001486 fetch 1 ,mem_mouse_key +0x3e6 001487 store 1 ,mem_mouse_bt_boot_data +0x3e7 001488 fetch 1 ,mem_mouse_x +0x3e8 001489 istore 1 ,contw +0x3e9 001490 fetch 1 ,mem_mouse_y +0x3ea 001491 istore 1 ,contw +0x3eb 001492 fetch 2 ,mem_mouse_z +0x3ec 001493 istore 2 ,contw +0x3ed 001495 arg 7 ,rega +0x3ee 001496 call hid_malloc_tx_buff +0x3ef 001497 fetch 2 ,mem_hid_int_remote_cid +0x3f0 001498 istore 2 ,contw +0x3f1 001499 setarg 0x02a1 +0x3f2 001500 istore 2 ,contw +0x3f3 001501 fetch 5 ,mem_mouse_bt_boot_data +0x3f4 001502 istore 5 ,contw +0x3f5 001503 rtn +: 001505 p_mouse_clear_sensor_data: +0x3f6 001506 jam 1 ,mem_mouse_clear_sensor_data_flag +0x3f7 001507 call le_set_config_more_data +0x3f8 001508 branch p_mouse_init_sensor_reset +: 001510 p_mouse_idle: +0x3f9 001511 call ui_check_paring_button +0x3fa 001512 call p_mouse_dpi_check +0x3fb 001513 branch p_mouse_wheel_check +: 001515 p_mouse_wheel_check: +0x3fc 001516 call p_mouse_t_wheel_scan +0x3fd 001517 call mouse_wheel_scan +0x3fe 001518 branch mouse_wheel_check + 3 +: 001520 p_mouse_t_wheel_scan: +0x3ff 001521 hfetch 1 ,core_gpio_pu2 +0x400 001522 set1 7 ,pdata +0x401 001523 hstore 1 ,core_gpio_pu2 +0x402 001524 hfetch 1 ,core_gpio_pu0 +0x403 001525 set1 6 ,pdata +0x404 001526 hstore 1 ,core_gpio_pu0 +0x405 001527 arg 0 ,rega +0x406 001528 fetcht 1 ,mem_whee_ta_data_gpio +0x407 001529 call gpio_get_bit +0x408 001530 setflag true ,0 ,rega +0x409 001531 fetcht 1 ,mem_whee_tb_data_gpio +0x40a 001532 call gpio_get_bit +0x40b 001533 setflag true ,1 ,rega +0x40c 001534 copy rega ,pdata +0x40d 001535 store 1 ,mem_wheel_tb_new_pinlevel +0x40e 001536 beq 0x01 ,p_mouse_t_wheel_scan_judge1 +0x40f 001537 beq 0x02 ,p_mouse_t_wheel_scan_judge2 +0x410 001538 fetch 1 ,mem_wheel_tog +0x411 001539 bbit1 7 ,p_mouse_t_wheel_scan_judge3 +0x412 001540 rtn +: 001542 p_mouse_t_wheel_scan_judge1: +0x413 001543 fetch 1 ,mem_wheel_tb_old_pinlevel +0x414 001544 beq 0 ,p_mouse_t_wheel_scan_judge11 +0x415 001545 beq 3 ,p_mouse_t_wheel_scan_judge12 +0x416 001546 rtn +: 001547 p_mouse_t_wheel_scan_judge2: +0x417 001548 fetch 1 ,mem_wheel_tb_old_pinlevel +0x418 001549 beq 0 ,p_mouse_t_wheel_scan_judge21 +0x419 001550 beq 3 ,p_mouse_t_wheel_scan_judge22 +0x41a 001551 rtn +: 001553 p_mouse_t_wheel_scan_judge11: +0x41b 001554 jam 0x82 ,mem_wheel_tog +0x41c 001555 rtn +: 001556 p_mouse_t_wheel_scan_judge12: +0x41d 001557 jam 0x81 ,mem_wheel_tog +0x41e 001558 rtn +: 001559 p_mouse_t_wheel_scan_judge21: +0x41f 001560 jam 0x80 ,mem_wheel_tog +0x420 001561 rtn +: 001562 p_mouse_t_wheel_scan_judge22: +0x421 001563 jam 0x83 ,mem_wheel_tog +0x422 001564 rtn +: 001565 p_mouse_t_wheel_scan_judge3: +0x423 001566 fetch 1 ,mem_wheel_tog +0x424 001567 set0 7 ,pdata +0x425 001568 store 1 ,mem_wheel_tog +0x426 001569 beq 0 ,p_mouse_t_wheel_scan_judge30 +0x427 001570 beq 1 ,p_mouse_t_wheel_scan_judge31 +0x428 001571 beq 2 ,p_mouse_t_wheel_scan_judge32 +0x429 001572 beq 3 ,p_mouse_t_wheel_scan_judge33 +0x42a 001573 rtn +: 001575 p_mouse_t_wheel_scan_judge30: +0x42b 001576 fetch 1 ,mem_wheel_tb_new_pinlevel +0x42c 001577 beq 3 ,p_mouse_wheel_t_forward +0x42d 001578 rtn +: 001579 p_mouse_t_wheel_scan_judge31: +0x42e 001580 fetch 1 ,mem_wheel_tb_new_pinlevel +0x42f 001581 beq 0 ,p_mouse_wheel_t_forward +0x430 001582 rtn +: 001583 p_mouse_t_wheel_scan_judge32: +0x431 001584 fetch 1 ,mem_wheel_tb_new_pinlevel +0x432 001585 beq 3 ,p_mouse_wheel_t_back +0x433 001586 rtn +: 001587 p_mouse_t_wheel_scan_judge33: +0x434 001588 fetch 1 ,mem_wheel_tb_new_pinlevel +0x435 001589 beq 0 ,p_mouse_wheel_t_back +0x436 001590 rtn +: 001592 p_mouse_wheel_t_forward: +0x437 001593 jam 0 ,mem_mouse_tz_data_count1 +0x438 001594 fetch 1 ,mem_mouse_tz_data +0x439 001595 increase 1 ,pdata +0x43a 001596 store 1 ,mem_mouse_tz_data +0x43b 001597 rtn +: 001599 p_mouse_wheel_t_back: +0x43c 001600 jam 0 ,mem_mouse_tz_data_count +0x43d 001601 fetch 1 ,mem_mouse_tz_data +0x43e 001602 increase -1 ,pdata +0x43f 001603 store 1 ,mem_mouse_tz_data +0x440 001604 rtn +: 001606 p_mouse_comm_gpio_config: +0x441 001607 fetcht 1 ,mem_mouse_comm_gpio +0x442 001608 rtneq 0xff +0x443 001609 branch p_gpio_set_input_pu +: 001610 p_mouse_dpi_check: +0x444 001611 call p_mouse_comm_gpio_config +0x445 001612 fetcht 1 ,mem_dpi_button_gpio +0x446 001613 call p_gpio_set_input_pd +0x447 001614 fetcht 1 ,mem_dpi_button_gpio +0x448 001615 call gpio_get_bit +0x449 001616 branch p_mouse_dpi_up ,true +0x44a 001617 call p_gpio_set_input_pu +: 001618 p_mouse_dpi_down: +0x44b 001619 fetch 1 ,mem_mouse_dpi_button_state +0x44c 001620 rtneq dpi_button_state_down +0x44d 001621 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x44e 001622 fetch 1 ,mem_mouse_dpi +0x44f 001623 increase 1 ,pdata +0x450 001624 and pdata ,0x03 ,pdata +0x451 001625 store 1 ,mem_mouse_dpi +0x452 001626 increase 2 ,pdata +0x453 001627 store 1 ,mem_mouse_multi_led_blink_count +0x454 001628 call p_mouse_dpi_multi_led_blink +0x455 001629 branch mouse_seting_dpi +: 001630 p_mouse_dpi_up: +0x456 001631 call p_gpio_set_input_pu +0x457 001632 branch mouse_dpi_up +: 001634 p_mouse_priority_bb_event: +0x458 001635 copy regc ,pdata +0x459 001636 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +0x45a 001637 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +0x45b 001638 beq bt_evt_le_enc_info ,p_mouse_le_enc_info +0x45c 001639 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +0x45d 001640 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +0x45e 001641 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +0x45f 001642 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +0x460 001643 beq bt_evt_switch_not_accept ,app_bt_role_switch +0x461 001644 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +0x462 001645 beq bt_evt_bb_connected ,p_mouse_bb_event_connected +0x463 001646 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +0x464 001647 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +0x465 001648 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +0x466 001649 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +0x467 001650 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +0x468 001651 branch mouse_priority_bb_event + 1 +: 001653 p_mouse_le_bb_event_connected: +0x469 001654 jam zcode_d0 ,mem_zcode_temp_param0 +0x46a 001655 branch p_zcode_entrance +: 001657 p_mouse_le_bb_disconnected: +0x46b 001658 call p_mouse_sensor_powerdown_check +0x46c 001659 jam zcode_a2 ,mem_zcode_temp_param0 +0x46d 001660 branch p_zcode_entrance +: 001662 p_mouse_le_enc_info: +: 001663 p_app_updata_le_param: +0x46e 001664 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x46f 001665 branch ui_ipc_send_cmd +: 001667 p_mouse_le_ll_start_encryt: +0x470 001668 jam zcode_b3 ,mem_zcode_temp_param0 +0x471 001669 branch p_zcode_entrance +: 001671 p_mouse_le_conn_param_update_rsp_recieved: +0x472 001672 jam zcode_a1 ,mem_zcode_temp_param0 +0x473 001673 branch p_zcode_entrance +: 001676 p_mouse_bb_event_reconn_timeout: +: 001677 p_mouse_bb_event_reconn_failed: +0x474 001678 jam zcode_a3 ,mem_zcode_temp_param0 +0x475 001679 branch p_zcode_entrance +: 001681 p_mouse_irtual_cable_unplug: +0x476 001682 jam zcode_71 ,mem_zcode_temp_param0 +0x477 001683 branch p_zcode_entrance +: 001685 p_mouse_sniff_not_accept: +0x478 001686 jam zcode_b1 ,mem_zcode_temp_param0 +0x479 001687 branch p_zcode_entrance +: 001689 p_mouse_bb_event_connected: +0x47a 001690 jam 0 ,mem_mouse_connected_state +0x47b 001691 jam 0 ,mem_mouse_send_switch_req_timer +0x47c 001692 call p_mouse_init_sensor_reset +0x47d 001693 branch mouse_stop_discovery +: 001695 p_mouse_bb_event_disconnected: +0x47e 001696 call p_mouse_sensor_powerdown_check +0x47f 001697 jam zcode_b4 ,mem_zcode_temp_param0 +0x480 001698 branch p_zcode_entrance +: 001700 p_mouse_enter_sniff_check: +0x481 001701 jam zcode_b2 ,mem_zcode_temp_param0 +0x482 001702 branch p_zcode_entrance +: 001704 p_mouse_24g_pairing_complete: +0x483 001705 call p_mouse_discovey_led_blink_off +0x484 001706 jam 0 ,mem_mouse_connected_state +0x485 001707 call p_mouse_init_sensor_reset +0x486 001708 jam zcode_92 ,mem_zcode_temp_param0 +0x487 001709 branch p_zcode_entrance +: 001711 p_mouse_24g_attempt_fail: +0x488 001712 jam 1 ,mem_mouse_connected_state +0x489 001713 jam 10 ,mem_mouse_multi_led_blink_count +0x48a 001714 call p_mouse_dpi_multi_led_blink +0x48b 001716 call p_mouse_sensor_powerdown_check +0x48c 001718 jam zcode_a0 ,mem_zcode_temp_param0 +0x48d 001719 branch p_zcode_entrance +: 001721 p_mouse_24g_attempt_success: +0x48e 001722 call p_mouse_multi_led_blink_off +0x48f 001723 call p_mouse_mode_24g_device_multi_led_on +0x490 001724 jam 0 ,mem_mouse_connected_state +0x491 001726 call p_mouse_init_sensor_reset +: 001727 p_mouse_24g_no_data_timer_init: +0x492 001728 branch mouse_no_data_timer_init +: 001730 p_mouse_before_hibernate: +0x493 001731 call p_mouse_sensor_powerdown_check +0x494 001732 jam zcode_a4 ,mem_zcode_temp_param0 +0x495 001733 branch p_zcode_entrance +: 001735 p_mouse_sensor_powerdown_check: +0x496 001736 fetch 1 ,mem_mouse_init_sensor_reset_flag +0x497 001737 rtn blank +0x498 001738 jam 0 ,mem_mouse_init_sensor_reset_flag +: 001739 p_mouse_sensor_powerdown: +0x499 001740 call p_mouse_init_sunt +0x49a 001741 setarg 0x0806 +0x49b 001746 branch twspi_write +: 001748 p_mouse_bb_event_timer: +0x49c 001749 call p_mouse_adc_read +0x49d 001750 call p_mouse_low_voltage_led_timer +0x49e 001751 call p_mouse_wheel_trigger_timer +0x49f 001752 call p_mouse_select_device_by_button +0x4a0 001753 call mouse_check_discovery_timeout_timer +0x4a1 001754 call mouse_check_no_data_timeout_timer +0x4a2 001756 call p_mouse_g24_stop_mode_timeout_timer +0x4a3 001757 call p_mouse_check_direct_timeout_timer +0x4a4 001758 call p_mouse_le_enable_att_list_timer +0x4a5 001759 call p_mouse_le_current_mult_update_timer +0x4a6 001760 call p_le_send_smp_security_request_timer +0x4a7 001761 call p_mouse_send_switch_req_timer +0x4a8 001762 call mouse_check_hid_handshake_timer +0x4a9 001763 call p_mouse_bt_check_sniff_req_timeout_timer +0x4aa 001764 branch p_mouse_multi_led_blink_timer +: 001767 p_mouse_send_switch_req_timer: +0x4ab 001768 arg mem_mouse_send_switch_req_timer ,regc +0x4ac 001769 arg host_create_conn_resend ,regb +0x4ad 001770 branch timer_single_step +: 001772 p_mouse_bt_check_sniff_req_timeout_timer: +0x4ae 001773 arg mem_mouse_bt_send_first_package_timer ,regc +0x4af 001774 arg p_mouse_bt_send_first_package ,regb +0x4b0 001775 branch timer_single_step +: 001776 p_mouse_bt_send_first_package: +0x4b1 001777 jam 1 ,mem_mouse_bt_send_first_package_flag +0x4b2 001778 rtn +: 001781 p_mouse_le_enable_att_list_timer: +0x4b3 001782 arg mem_le_start_encrypt_timer ,regc +0x4b4 001783 arg mouse_le_write_enable ,regb +0x4b5 001784 branch timer_single_step +: 001786 p_mouse_check_direct_timeout_timer: +0x4b6 001787 arg mem_mouse_direct_timer ,regc +0x4b7 001788 arg p_mouse_check_direct_timeout ,regb +0x4b8 001789 branch timer_single_step_2b +: 001790 p_mouse_check_direct_timeout: +0x4b9 001791 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x4ba 001792 nrtn blank +0x4bb 001793 branch mouse_check_direct_timeout +: 001795 p_mouse_le_current_mult_update_timer: +0x4bc 001796 arg mem_mouse_le_current_mult_timer ,regc +0x4bd 001797 arg p_mouse_le_current_mult_reinit ,regb +0x4be 001798 branch timer_single_step +: 001799 p_mouse_le_current_mult_reinit: +0x4bf 001800 fetch 1 ,mem_lpm_mult_init +0x4c0 001801 store 1 ,mem_lpm_mult +0x4c1 001802 rtn +: 001804 p_le_send_smp_security_request_timer: +0x4c2 001805 fetch 1 ,mem_mouse_le_bb_connected_flag +0x4c3 001806 rtn blank +0x4c4 001807 arg mem_mouse_send_secutiry_request_timer ,regc +0x4c5 001808 arg p_le_pairing_sm_start_check ,regb +0x4c6 001809 branch timer_single_step +: 001810 p_le_pairing_sm_start_check: +0x4c7 001811 fetch 1 ,mem_le_send_security_request_flag +0x4c8 001812 nrtn blank +0x4c9 001813 branch le_pairing_sm_start +: 001815 p_mouse_wheel_trigger_timer: +0x4ca 001816 arg mem_mouse_wheel_trigger_timer ,regc +0x4cb 001817 arg p_mouse_wheel_trigger_disable ,regb +0x4cc 001818 branch timer_single_step +: 001819 p_mouse_wheel_trigger_disable: +0x4cd 001820 jam 0 ,mem_mouse_wheel_trigger +0x4ce 001821 rtn +: 001834 p_mouse_g24_stop_mode_timeout_timer: +0x4cf 001835 arg mem_24g_stop_g24_mode_timeout ,regc +0x4d0 001836 arg p_mouse_g24_stop_mode_timeout ,regb +0x4d1 001837 branch timer_single_step_2b +: 001838 p_mouse_g24_stop_mode_timeout: +0x4d2 001839 jam 1 ,mem_24g_stop_g24_mode +0x4d3 001840 rtn +: 001871 p_mouse_bt_discovery_timer: +0x4d4 001872 arg mem_select_ui_button_count ,regc +0x4d5 001873 arg p_mouse_long_button_bt_discovery ,regb +0x4d6 001874 branch timer_single_step +: 001875 p_mouse_long_button_bt_discovery: +0x4d7 001876 jam on ,mem_select_device_button_statue_bt_discovery +0x4d8 001877 fetcht 1 ,mem_device_flag +0x4d9 001878 fetch 1 ,mem_24g_device_number +0x4da 001879 isub temp ,null +0x4db 001880 rtn zero +0x4dc 001881 fetch 2 ,mem_ui_state_map +0x4dd 001882 isolate1 ui_state_ble_adv ,pdata +0x4de 001883 call mouse_stop_le_adv ,true +0x4df 001884 fetch 2 ,mem_ui_state_map +0x4e0 001885 isolate1 ui_state_bt_reconnect ,pdata +0x4e1 001886 call mouse_cancel_reconnect ,true +0x4e2 001887 branch mouse_long_button_bt_discovry +: 001890 p_mouse_get_select_state: +0x4e3 001891 fetcht 1 ,mem_config_select_device_button_gpio +0x4e4 001892 call p_gpio_set_input_pu +0x4e5 001893 fetcht 1 ,mem_config_select_device_button_gpio +0x4e6 001894 branch gpio_get_bit +: 001896 p_mouse_select_device_by_button: +0x4e7 001897 call p_mouse_get_select_state +0x4e8 001898 nbranch p_mouse_select_device_button_up ,true +: 001899 p_mouse_select_device_button_down: +0x4e9 001900 call p_mouse_bt_discovery_timer 0x4ea 001901 fetch 1 ,mem_select_device_button_statue -0x4eb 001902 rtneq pb_button_state_up -0x4ec 001903 fetch 1 ,mem_select_ui_button_count -0x4ed 001904 sub pdata ,20 ,null -0x4ee 001905 ncall p_mouse_ready_reconnection_by_button ,positive -0x4ef 001907 fetch 1 ,mem_ui_button_timeout -0x4f0 001908 store 1 ,mem_select_ui_button_count -0x4f1 001909 jam pb_button_state_up ,mem_select_device_button_statue -0x4f2 001910 rtn -: 001912 p_mouse_ready_reconnection_by_button: -0x4f3 001913 call p_mouse_switch_device_flag -0x4f4 001914 jam 0 ,mem_link_key_exists -0x4f5 001915 call p_mouse_store_flash_device_info -0x4f6 001918 fetch mouse_flag_len ,mem_mouse_flag -0x4f7 001919 rtneq mouse_bt_discovery_button_long_down_flag -0x4f8 001920 branch mouse_set_reconnection -: 001922 p_mouse_switch_device_flag: -0x4f9 001923 fetcht 1 ,mem_device_flag -0x4fa 001924 increase 1 ,temp -0x4fb 001925 fetch 1 ,mem_device_number -0x4fc 001926 isub temp ,null -0x4fd 001927 ncall mouse_select_device_count_clean ,positive -0x4fe 001928 storet 1 ,mem_device_flag -0x4ff 001929 rtn -: 001931 p_mouse_select_button_wakeup_firstup: -0x500 001932 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0x501 001933 jam pb_button_state_up ,mem_select_device_button_statue -0x502 001934 jam on ,mem_mouse_multi_led_blink_enable -0x503 001935 rtn -: 001937 p_mouse_le_bb_disconnected_led_blink_set: -0x504 001938 jam 1 ,mem_mouse_connected_state -0x505 001939 jam 10 ,mem_mouse_multi_led_blink_count -0x506 001940 branch p_mouse_dpi_multi_led_blink -: 001973 p_mouse_adc_read: -0x507 001976 fetch 2 ,mem_mouse_multi_led_blink_count -0x508 001977 nrtn blank -0x509 001978 fetch 1 ,mem_mouse_wheel_trigger -0x50a 001979 nrtn blank -0x50b 001980 fetch 1 ,mem_adc_read_timer -0x50c 001981 increase 1 ,pdata -0x50d 001982 store 1 ,mem_adc_read_timer -0x50e 001983 sub pdata ,10 ,null -0x50f 001984 rtn positive -: 001985 p_mouse_adc_read_timeout: -0x510 001986 call adc_init_data -0x511 001987 jam 0 ,mem_adc_read_timer -0x512 001988 call p_adc_set_mode -0x513 001989 call vdd_calculate_by_mode -0x514 001990 mul32 pdata ,3 ,pdata -0x515 001991 arg 0x0f ,temp -0x516 001992 isub temp ,pdata -0x517 001993 sub pdata ,0x64 ,null -0x518 001994 call p_mouse_vdd_decrease ,positive -0x519 001995 store 2 ,mem_mouse_vdd_now_vol -0x51a 001996 arg mem_mouse_vdd_calculate_set ,rega -0x51b 001997 fetcht 1 ,mem_whee_ta_data_gpio -0x51c 001998 call gpio_get_bit -0x51d 001999 nbranch p_mouse_adc_read_next ,true -0x51e 002000 rtn -: 002002 p_mouse_adc_read_next: -0x51f 002003 call p_adc_bat_percent_lowpower_out -0x520 002004 fetch 1 ,mem_adc_power_flag -0x521 002005 bbit1 1 ,app_enter_hibernate -0x522 002006 bbit0 0 ,p_mouse_adc_no_low_voltage -0x523 002007 jam 1 ,mem_mouse_adc_last_low_voltage_flag -0x524 002008 branch mouse_adc_low_voltage -: 002010 p_mouse_adc_no_low_voltage: -0x525 002011 call mouse_adc_no_low_voltage -0x526 002012 fetch 1 ,mem_mouse_adc_last_low_voltage_flag -0x527 002013 rtn blank -0x528 002014 jam 0 ,mem_mouse_adc_last_low_voltage_flag -0x529 002015 branch p_mouse_multi_led_off -: 002017 p_mouse_vdd_decrease: -0x52a 002018 arg 0x05 ,temp -0x52b 002019 isub temp ,pdata -0x52c 002020 rtn -: 002022 p_adc_set_mode: -: 002026 p_adc_check_gpio: -0x52d 002027 hfetch 1 ,core_gpio_pu0 -0x52e 002028 set0 5 ,pdata -0x52f 002029 hstore 1 ,core_gpio_pu0 -0x530 002030 call adc_check_gpio -0x531 002031 hfetch 1 ,core_gpio_pu0 -0x532 002032 set1 5 ,pdata -0x533 002033 hstore 1 ,core_gpio_pu0 -0x534 002034 rtn -: 002036 p_adc_bat_percent_lowpower_out: -0x535 002037 ifetch 8 ,rega -0x536 002038 store 8 ,mem_pdatatemp -0x537 002039 fetcht 2 ,mem_pdatatemp + 2 -0x538 002040 fetch 2 ,mem_pdatatemp + 6 -0x539 002041 isub temp ,null -0x53a 002042 nbranch adc_set_no_power_flag ,positive -0x53b 002043 fetcht 2 ,mem_pdatatemp + 4 -0x53c 002044 isub temp ,null -0x53d 002045 nbranch adc_set_low_power_flag ,positive -: 002046 p_adc_clear_low_power_flag: -0x53e 002047 fetch 1 ,mem_adc_power_flag -0x53f 002048 set0 0 ,pdata -0x540 002049 store 1 ,mem_adc_power_flag -0x541 002050 rtn -: 002052 p_mouse_low_voltage_led_timer: -0x542 002053 fetch mouse_flag_len ,mem_mouse_flag -0x543 002054 rtnbit0 mouse_low_voltage_flag -0x544 002055 fetch 2 ,mem_ui_state_map -0x545 002056 rtnbit1 ui_state_ble_adv -0x546 002057 rtnbit1 ui_state_bt_discovery -0x547 002058 fetch 2 ,mem_mouse_multi_led_blink_count -0x548 002059 nrtn blank -0x549 002060 fetch 1 ,mem_adc_low_volatage_led_timer_count -0x54a 002061 pincrease 1 -0x54b 002062 store 1 ,mem_adc_low_volatage_led_timer_count -0x54c 002063 sub pdata ,30 ,null -0x54d 002064 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive -0x54e 002065 sub pdata ,10 ,null -0x54f 002066 branch p_mouse_multi_led_on ,positive -0x550 002067 branch p_mouse_multi_led_off -: 002068 p_mouse_adc_low_volatage_led_timer_count_clean: -0x551 002069 jam 1 ,mem_adc_low_volatage_led_timer_count -0x552 002070 rtn -: 002073 p_mouse_sensor_poweron: -0x553 002074 call p_mouse_spi_init -0x554 002075 setarg 0x8006 -0x555 002076 call twspi_write -0x556 002077 nop 12000 -0x557 002078 arg mem_sensor_poweron_init ,regc -0x558 002079 call p_sensor_wr_seq -: 002080 p_mouse_dpi_config: -0x559 002081 fetch 1 ,mem_mouse_dpi -0x55a 002082 bne 0xff ,p_mouse_seting_dpi -: 002083 p_mouse_dpi_config_default: -0x55b 002084 fetch 1 ,mem_config_sensor_motion -0x55c 002085 store 1 ,mem_mouse_dpi -: 002086 p_mouse_seting_dpi: -: 002087 p_mouse_seting_sensor_type: -0x55d 002088 fetch 1 ,mem_config_sensor_type -0x55e 002089 beq p3212 ,p_mouse_seting_3212_dpi -0x55f 002090 beq p3065_xy ,p_mouse_seting_3065xy_dpi -0x560 002091 beq mx8650 ,p_mouse_seting_3065xy_dpi -: 002093 p_mouse_seting_3205_dpi: -0x561 002094 fetch 1 ,mem_mouse_dpi -0x562 002095 sub pdata ,mouse_dpi_level2 ,null -0x563 002096 call p_mouse_3205_dpi_recount ,zero -0x564 002097 fetch 1 ,mem_mouse_dpi -0x565 002098 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 -0x566 002099 beq mouse_dpi_level4 ,mouse_set_cpi3 -0x567 002100 branch mouse_set_cpi2 -: 002101 p_mouse_3205_dpi_recount: -0x568 002102 jam mouse_dpi_level3 ,mem_mouse_dpi -0x569 002103 rtn -: 002104 p_mouse_3205_set_cpi1: -0x56a 002105 fetch 1 ,mem_320x_dpi_1 -0x56b 002106 increase -1 ,pdata -0x56c 002107 branch mouse_p3205_dpi -: 002109 p_mouse_seting_3065xy_dpi: -0x56d 002110 fetch 1 ,mem_mouse_dpi -0x56e 002111 sub pdata ,mouse_dpi_level2 ,null -0x56f 002112 call p_mouse_3205_dpi_recount ,zero -0x570 002113 fetch 1 ,mem_mouse_dpi -0x571 002114 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 -0x572 002115 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 -: 002116 p_mouse_3065xy_set_cpi3: -0x573 002117 fetch 1 ,mem_3065xy_dpi_3 -: 002118 p_mouse_dpi_store: -0x574 002119 store 1 ,mem_mouse_cpi_count -0x575 002120 branch mouse_p3205_dpi + 3 -: 002121 p_mouse_3065xy_set_cpi1: -0x576 002122 fetch 1 ,mem_3065xy_dpi_1 -0x577 002123 branch p_mouse_dpi_store -: 002124 p_mouse_3065xy_set_cpi4: -0x578 002125 fetch 1 ,mem_3065xy_dpi_4 -0x579 002126 branch p_mouse_dpi_store -: 002139 p_mouse_seting_3212_dpi: -0x57a 002140 fetch 1 ,mem_mouse_dpi -0x57b 002141 sub pdata ,mouse_dpi_level2 ,null -0x57c 002142 call p_mouse_3205_dpi_recount ,zero -0x57d 002143 fetch 1 ,mem_mouse_dpi -0x57e 002144 beq mouse_dpi_level1 ,mouse_set_p3212_cpi2 -0x57f 002145 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -0x580 002146 branch mouse_set_p3212_cpi3 -: 002148 p_mouse_motion: -0x581 002149 disable user -0x582 002150 setarg 0 -0x583 002151 store 6 ,mem_mouse_x -0x584 002152 call mouse_cheak_sensor_data -0x585 002153 call p_mouse_set_sdio_high -0x586 002154 call mouse_zwheel -0x587 002155 call mouse_t_zwheel -0x588 002156 call p_mouse_key -0x589 002157 nrtn user -0x58a 002158 branch mouse_motion + 9 -: 002161 p_mouse_key: -0x58b 002162 call p_mouse_check_key_gpio -0x58c 002163 branch mouse_key + 1 -: 002165 p_mouse_check_key_gpio: -0x58d 002166 arg 0 ,rega -0x58e 002167 call p_mouse_check_lkey_gpio -0x58f 002172 branch mouse_check_key_gpio_output -: 002174 p_mouse_check_lkey_gpio: -0x590 002175 fetcht 1 ,mem_lbutton_gpio -0x591 002176 call p_gpio_set_input_pu -0x592 002177 fetcht 1 ,mem_lbutton_gpio -0x593 002178 call gpio_get_bit -0x594 002179 setflag true ,0 ,rega -: 002181 p_mouse_check_rkey_gpio: -0x595 002182 fetcht 1 ,mem_rbutton_gpio -0x596 002183 call p_gpio_set_input_pu -0x597 002184 fetcht 1 ,mem_rbutton_gpio -0x598 002185 call gpio_get_bit -0x599 002186 setflag true ,1 ,rega -: 002188 p_mouse_check_mkey_gpio: -0x59a 002189 fetcht 1 ,mem_mbutton_gpio -0x59b 002190 call p_gpio_set_input_pu -0x59c 002191 fetcht 1 ,mem_mbutton_gpio -0x59d 002192 call gpio_get_bit -0x59e 002193 setflag true ,2 ,rega -: 002195 p_mouse_check_bk_key_gpio: -0x59f 002196 call p_mouse_comm_gpio_config -0x5a0 002197 fetcht 1 ,mem_bk_button_gpio -0x5a1 002198 call p_gpio_set_input_pd -0x5a2 002199 fetcht 1 ,mem_bk_button_gpio -0x5a3 002200 call gpio_get_bit -0x5a4 002201 nsetflag true ,3 ,rega -0x5a5 002202 call p_gpio_set_input_pu -: 002203 p_mouse_check_fw_key_gpio: -0x5a6 002204 call p_mouse_comm_gpio_config -0x5a7 002205 fetcht 1 ,mem_fw_button_gpio -0x5a8 002206 call p_gpio_set_input_pd -0x5a9 002207 fetcht 1 ,mem_fw_button_gpio -0x5aa 002208 call gpio_get_bit -0x5ab 002209 nsetflag true ,4 ,rega -: 002210 p_gpio_set_input_pu: -0x5ac 002211 set1 gpio_active_bit ,temp -: 002212 p_gpio_set_input_pu1: -0x5ad 002213 arg core_gpio_pu0 ,contw -0x5ae 002214 call gpio_set_bit -0x5af 002215 set0 gpio_active_bit ,temp -0x5b0 002216 branch p_gpio_set_input_pd4 -: 002218 p_gpio_set_input_pd: -0x5b1 002219 set0 gpio_active_bit ,temp -0x5b2 002220 arg core_gpio_pu0 ,contw -0x5b3 002221 call gpio_set_bit -0x5b4 002222 set1 gpio_active_bit ,temp -: 002223 p_gpio_set_input_pd4: -0x5b5 002224 arg core_gpio_pd0 ,contw -0x5b6 002225 branch gpio_set_high_impedance + 4 -: 002247 p_mouse_bb_event_discovery_btn: -0x5b7 002249 isolate1 mark_24g ,mark -0x5b8 002250 call p_g24_check_51cmd_stop_24g ,true -0x5b9 002251 branch mouse_bb_event_discovery_btn + 1 -: 002253 p_le_addr_random_config: -0x5ba 002254 jam zcode_81 ,mem_zcode_temp_param0 -0x5bb 002255 branch p_zcode_entrance -: 002257 p_mouse_start_discovery: -0x5bc 002258 jam zcode_50 ,mem_zcode_temp_param0 -0x5bd 002259 branch p_zcode_entrance -: 002261 p_le_adv_data_update: -0x5be 002262 arg mem_le_adv_data + 11 ,contw -0x5bf 002263 arg 19 ,loopcnt -0x5c0 002264 call memcpy -0x5c1 002265 branch le_modified_name_adv -: 002267 p_mouse_stop_discovery: -0x5c2 002268 call p_mouse_discovey_led_blink_off -0x5c3 002269 setarg 0 -0x5c4 002270 store 2 ,mem_mouse_discovery_timer -0x5c5 002271 store 1 ,mem_mouse_blink_count -0x5c6 002272 call p_mouse_init_sensor_reset -0x5c7 002273 branch mouse_stop_discovery + 1 -: 002275 p_le_slave_match: -0x5c8 002276 fetch 1 ,mem_le_md_count -0x5c9 002277 pincrease 1 -0x5ca 002278 store 1 ,mem_le_md_count -0x5cb 002279 beq le_md_max_count ,le_slave_cont -0x5cc 002280 call le_acknowledge -0x5cd 002281 call le_prepare_tx -0x5ce 002282 call power_ctrl_start -0x5cf 002283 branch le_slave_match + 7 -: 002285 p_le_next_adv_channel: -0x5d0 002286 fetch 1 ,mem_le_ch_mapped -0x5d1 002287 increase 1 ,pdata -0x5d2 002288 store 1 ,mem_le_ch_mapped -0x5d3 002289 rtnne 40 -0x5d4 002290 jam 37 ,mem_le_ch_mapped -0x5d5 002291 rtn -: 002293 p_le_receive_skip: -0x5d6 002294 call save_rssi -0x5d7 002295 call p_rssi_signal -0x5d8 002296 branch le_receive_skip + 2 -: 002298 p_le_update_param: -0x5d9 002299 jam zcode_40 ,mem_zcode_temp_param0 -0x5da 002300 branch p_zcode_entrance -: 002302 p_le_update_channel_map: -0x5db 002303 jam zcode_41 ,mem_zcode_temp_param0 -0x5dc 002304 branch p_zcode_entrance -: 002306 p_le_prepare_tx: -0x5dd 002307 fetch 1 ,mem_le_arq -0x5de 002308 bbit1 wak ,p_le_prepare_tx_wak -0x5df 002309 call power_ctrl_pac_succ_incrs -0x5e0 002310 fetch 1 ,mem_empty_count -0x5e1 002311 nbranch p_le_send_empyt ,blank -0x5e2 002312 fetch 1 ,mem_le_state -0x5e3 002313 bbit0 lestate_encryption ,p_le_tx_4 -0x5e4 002314 fetch 1 ,mem_le_rxbuf + 1 -0x5e5 002315 branch p_le_tx_4 ,blank -0x5e6 002316 branch le_send_empty -: 002317 p_le_send_empyt: -0x5e7 002318 fetch 1 ,mem_empty_count -0x5e8 002319 increase -1 ,pdata -0x5e9 002320 store 1 ,mem_empty_count -0x5ea 002321 branch le_send_empty -: 002322 p_le_tx_4: -0x5eb 002323 fetch 1 ,mem_le_pairing_state -0x5ec 002324 bne flag_le_pairing_after_auth ,p_in_le_tx_4 -0x5ed 002325 jam 3 ,mem_empty_count -: 002326 p_in_le_tx_4: -0x5ee 002327 call le_fifo_check_nearly_full -0x5ef 002328 call p_mouse_data_pull ,blank -0x5f0 002329 branch le_prepare_tx + 4 -: 002331 p_le_check_tx_retransmit_setmd: -0x5f1 002332 fetch 1 ,mem_le_connect_status_flag -0x5f2 002333 and pdata ,0x03 ,pdata -0x5f3 002334 rtnne 0x03 -0x5f4 002335 fetch 1 ,mem_mouse_data_queue_num -0x5f5 002336 rtn blank -0x5f6 002337 fetch 1 ,mem_le_txlen -0x5f7 002338 rtn blank -0x5f8 002339 fetch 1 ,mem_le_txheader -0x5f9 002340 set1 md ,pdata -0x5fa 002341 store 1 ,mem_le_txheader -0x5fb 002342 branch le_set_md -: 002355 p_le_prepare_tx_wak: -0x5fc 002356 call p_le_check_tx_retransmit_setmd -: 002357 p_le_power_ctrl_pac_succ_decrs: -: 002358 power_ctrl_pac_succ_decrs: -0x5fd 002359 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x5fe 002360 sub pdata ,2 ,null -0x5ff 002361 ncall power_ctrl_pac_succ_cnt_reinit ,positive -0x600 002362 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x601 002363 rtneq 0 -0x602 002364 increase -1 ,pdata -0x603 002365 store 1 ,mem_power_ctrl_pac_succ_cnt -0x604 002366 rtn -: 002368 p_mouse_le_reconn_write_enable_timer_reinit: -0x605 002369 fetch 1 ,mem_mouse_le_reconnect_flag -0x606 002370 rtn blank -0x607 002371 fetch 1 ,mem_le_connect_status_flag -0x608 002372 and pdata ,0x03 ,pdata -0x609 002373 rtneq 0x03 -0x60a 002374 jam 10 ,mem_le_start_encrypt_timer -0x60b 002375 rtn -: 002377 p_le_parse: -0x60c 002378 rtnmark1 mark_old_packet -0x60d 002379 call le_fifo_check_full -0x60e 002380 nrtn blank -0x60f 002381 fetch 1 ,mem_le_rxbuf -0x610 002382 and pdata ,0x3 ,pdata -0x611 002383 store 1 ,mem_le_packet_llid -0x612 002384 ifetch 1 ,contr -0x613 002385 and pdata ,0x1f ,pdata -0x614 002386 store 1 ,mem_le_packet_size -0x615 002387 rtn blank -0x616 002388 copy contr ,pdata -0x617 002389 store 2 ,mem_le_payload_ptr -0x618 002390 fetch 1 ,mem_le_packet_llid -0x619 002391 beq llid_le_ll ,p_le_parse_ll -0x61a 002392 branch le_parse_l2cap -: 002393 p_le_parse_ll: -0x61b 002394 fetch 1 ,mem_le_rxbuf + 2 -0x61c 002395 beq ll_channel_map_req ,p_le_parse_channel_map_req -0x61d 002396 branch le_parse_ll + 1 -: 002397 p_le_parse_channel_map_req: -0x61e 002398 ifetch 5 ,contr -0x61f 002399 store 5 ,mem_le_new_map -0x620 002400 ifetch 2 ,contr -0x621 002401 store 2 ,mem_le_instant -0x622 002402 branch le_parse_channel_map_req + 7 -: 002404 p_le_parse_l2cap: -0x623 002405 ifetch 2 ,contr -0x624 002406 beq le_l2cap_cid_att ,p_le_parse_att -0x625 002407 beq le_l2cap_cid_smp ,p_le_parse_smp -0x626 002408 branch le_parse_l2cap + 11 -: 002409 p_le_parse_att: -0x627 002410 call store_contr -0x628 002411 call p_mouse_le_reconn_write_enable_timer_reinit -0x629 002412 call get_contr -0x62a 002413 ifetch 3 ,contr -0x62b 002414 store 3 ,mem_le_att_opcode -0x62c 002415 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request -0x62d 002416 rshift8 pdata ,temp -0x62e 002417 sub temp ,0x24 ,null -0x62f 002418 branch p_le_parse_att1 ,positive -0x630 002419 arg mem_mouse_le_uuid_sup ,temp -0x631 002420 storet 2 ,mem_ui_le_uuid_table -0x632 002421 call le_parse_att + 2 -0x633 002422 setarg 0x8e7a -0x634 002423 store 2 ,mem_ui_le_uuid_table -0x635 002424 rtn -: 002426 p_le_parse_att_read_by_group_type_request: -0x636 002427 call le_parse_att_read_by_group_type_request -0x637 002428 call le_fifo_get_last_tx_ptr -0x638 002429 increase 7 ,contr -0x639 002430 ifetch 1 ,contr -0x63a 002431 rtnne attop_read_by_group_type_response -0x63b 002432 increase 5 ,contr -0x63c 002433 ifetch 2 ,contr -0x63d 002434 arg uuid_service_hids ,temp -0x63e 002435 isub temp ,null -0x63f 002436 nrtn zero -0x640 002437 increase -4 ,contr -0x641 002438 setarg 0x2b -0x642 002439 istore 2 ,contr -0x643 002440 rtn -: 002442 p_le_parse_att1: -0x644 002443 beq attop_read_request ,p_le_parse_att_read_request -0x645 002444 beq attop_write_request ,p_le_parse_att_write_request -0x646 002445 branch le_parse_att + 2 -: 002446 p_le_parse_att_read_request: -0x647 002447 fetcht 2 ,mem_le_att_handle -0x648 002448 fetch 1 ,mem_le_configuration -0x649 002449 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth -: 002450 p_le_send_att_read_response: -0x64a 002451 fetch 2 ,mem_le_att_handle -0x64b 002452 beq 0x13 ,le_send_att_error_response_notfound -0x64c 002453 fetcht 2 ,mem_le_att_handle -0x64d 002454 branch le_send_att_read_response -: 002455 p_le_send_att_read_response_check_auth: -0x64e 002456 fetch 2 ,mem_le_pairing_handle -0x64f 002457 isub temp ,null -0x650 002458 nbranch p_le_send_att_read_response ,zero -0x651 002459 call le_check_encrypt_state -0x652 002460 nbranch p_le_send_att_read_response ,user -0x653 002461 jam att_err_insufficient_authentication ,mem_le_err_code -0x654 002462 branch le_send_att_error_response -: 002464 p_le_parse_att_write_request: -0x655 002465 copy contr ,rega -0x656 002466 fetch 2 ,mem_le_l2cap_size -0x657 002467 add pdata ,-3 ,regb -0x658 002468 call le_writeatt_cb -0x659 002469 fetch 1 ,mem_mouse_fast_conn_flag -0x65a 002470 beq 0xff ,le_send_att_write_response_check_auth -0x65b 002471 fetch 1 ,mem_mouse_le_reconnect_flag -0x65c 002472 branch le_send_att_write_response_check_auth ,blank -0x65d 002473 fetch 1 ,mem_le_connect_status_flag -0x65e 002474 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth -0x65f 002475 setarg 0x001a -0x660 002476 fetcht 2 ,mem_le_att_handle -0x661 002477 isub temp ,null -0x662 002478 nbranch le_send_att_write_response_check_auth ,zero -0x663 002479 jam att_err_insufficient_authentication ,mem_le_err_code -0x664 002480 branch le_send_att_error_response -: 002482 p_le_parse_smp: -0x665 002483 ifetch 1 ,contr -0x666 002484 beq smp_pairing_request ,p_le_parse_smp_pairing_request -0x667 002485 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed -0x668 002486 branch le_parse_smp + 2 -: 002488 p_le_parse_smp_pairing_request: -0x669 002489 jam 1 ,mem_le_send_security_request_flag -0x66a 002490 branch le_parse_smp_pairing_request -: 002492 p_le_parse_smp_pairing_failed: -0x66b 002493 jam zcode_82 ,mem_zcode_temp_param0 -0x66c 002494 branch p_zcode_entrance -: 002496 p_le_adv_not_match: -0x66d 002497 fetch 1 ,mem_le_ch_mapped -0x66e 002498 bne 39 ,le_adv_loop -0x66f 002500 random pdata -0x670 002501 arg 0x1ff ,temp -0x671 002502 iand temp ,pdata -0x672 002503 add pdata ,250 ,pdata -0x673 002504 call delay -0x674 002505 arg le_adv_interval_timer ,queue -0x675 002506 fetch 2 ,mem_le_adv_interval -0x676 002507 branch timer_init -: 002515 p_le_lpm_setmult: -0x677 002516 disable wake -0x678 002517 branch p_le_lpm_set_mult_attempt ,attempt -0x679 002518 nbranch le_lpm_lost ,match -: 002519 p_le_lpm_set_mult_attempt: -0x67a 002520 call lpm_match -0x67b 002521 fetch 2 ,mem_rx_window_sniff -0x67c 002522 store 2 ,mem_le_receive_window -0x67d 002523 fetch 1 ,mem_le_connect_status_flag -0x67e 002524 compare 3 ,pdata ,3 -0x67f 002525 nbranch lpm_mult_short ,true -0x680 002526 branch le_lpm_set_mult_attempt + 3 -: 002528 p_le_mouse_bb_event_connect_complete: -0x681 002529 jam zcode_42 ,mem_zcode_temp_param0 -0x682 002530 branch p_zcode_entrance -: 002532 p_twspi_reset: -0x683 002533 hfetch 1 ,core_gpio_out3 -0x684 002534 and_into 0xfd ,pdata -0x685 002535 hstore 1 ,core_gpio_out3 -0x686 002536 hfetcht 1 ,core_gpio_oe3 -0x687 002537 or_into 0x2 ,temp -0x688 002538 hstoret 1 ,core_gpio_oe3 -0x689 002539 call twspi_disable -0x68a 002540 and_into 0xfd ,temp -0x68b 002541 nop 13 -0x68c 002542 call p_twspi_enable -0x68d 002543 hstoret 1 ,core_gpio_oe3 -0x68e 002544 rtn -: 002546 p_spid_init: -0x68f 002547 call spid_init_common -: 002548 p_twspi_enable: -0x690 002549 hfetch 1 ,core_gpio_sel1 -0x691 002550 set1 0 ,pdata -0x692 002551 set0 1 ,pdata -0x693 002552 set0 3 ,pdata -0x694 002553 hstore 1 ,core_gpio_sel1 -0x695 002554 rtn -: 002599 p_quit_connection_cont: -0x696 002603 call app_disconn_reason_collect_bt -0x697 002604 call sniff_exit -0x698 002605 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x699 002606 call ui_ipc_send_event -0x69a 002607 call init_lmp_work -0x69b 002608 call l2cap_init_work -0x69c 002609 branch quit_connection_cont + 8 -: 002611 p_prepare_tx: -0x69d 002612 fetch 1 ,mem_state -0x69e 002613 isolate1 state_inconn ,pdata -0x69f 002614 call p_bt_power_ctrl ,true -0x6a0 002615 branch prepare_tx + 1 -: 002616 p_bt_power_ctrl: -0x6a1 002617 fetch 1 ,mem_arq -0x6a2 002618 isolate1 wack ,pdata -0x6a3 002619 call power_ctrl_pac_succ_decrs ,true -0x6a4 002620 ncall power_ctrl_pac_succ_incrs ,true -: 002621 power_ctrl_start: -0x6a5 002622 fetch 2 ,mem_ui_state_map -0x6a6 002623 rtnbit1 ui_state_ble_adv -0x6a7 002624 rtnbit1 ui_state_bt_reconnect -0x6a8 002625 rtnbit1 ui_state_bt_discovery -0x6a9 002627 arg mem_rssi_signal_buf ,rega -0x6aa 002628 call p_rssi_average -0x6ab 002629 storet 1 ,mem_rssi_avg_received -0x6ac 002631 setarg rssi_dis_max_24g -0x6ad 002632 bmark1 mark_24g ,power_ctrl_start_next -0x6ae 002633 setarg rssi_dis_max_ble -: 002634 power_ctrl_start_next: -0x6af 002635 isub temp ,null -0x6b0 002636 nbranch power_ctrl_txpower_incrs_force ,positive -0x6b1 002638 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x6b2 002639 sub pdata ,2 ,null -0x6b3 002640 nbranch power_ctrl_txpower_decrs_check ,positive -0x6b4 002641 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x6b5 002642 beq 0 ,power_ctrl_txpower_incrs -0x6b6 002643 rtn -: 002645 p_slave_conn_recv_packet: -0x6b7 002646 call slave_receive_master_slot -0x6b8 002647 nbranch shutdown_radio ,sync -0x6b9 002648 call save_rssi -0x6ba 002649 call p_rssi_signal -0x6bb 002650 branch slave_conn_recv_packet + 4 -: 002652 p_lpm_dispatch: -0x6bc 002653 rtnmark1 mark_24g -0x6bd 002654 call lpo_calibration -0x6be 002655 fetch 3 ,mem_clks_per_lpo -0x6bf 002656 rtn blank -0x6c0 002657 fetch 1 ,mem_lpm_mode -0x6c1 002658 rtn blank -0x6c2 002659 fetch 1 ,mem_mouse_multi_led_on_timer -0x6c3 002660 nrtn blank -0x6c4 002662 fetch 1 ,mem_ssp_enable -0x6c5 002663 branch p_lpm_dispatch_next ,blank -0x6c6 002664 fetch 1 ,mem_sp_local_key_invalid -0x6c7 002665 rtn blank -: 002666 p_lpm_dispatch_next: -0x6c8 002667 fetch 1 ,mem_le_sc_calc -0x6c9 002668 nrtn blank -0x6ca 002669 call lpm_check_wake_lock -0x6cb 002670 nrtn blank -0x6cc 002671 fetch 1 ,mem_context -0x6cd 002672 compare 3 ,pdata ,0x7 -0x6ce 002673 nbranch lpm_dispatch_unconn ,true -0x6cf 002674 fetch 2 ,mem_context + coffset_tsniff -0x6d0 002675 arg 0xffff ,temp -0x6d1 002676 isub temp ,null -0x6d2 002677 rtn zero -0x6d3 002678 branch lpm_dispatch_next + 9 -: 002680 p_lpm_set_mult: -0x6d4 002681 disable wake -0x6d5 002682 fetch 1 ,mem_state -0x6d6 002683 rtnbit0 state_insniff -0x6d7 002684 nbranch lpm_not_match ,match -0x6d8 002685 call lpm_match -0x6d9 002686 fetch 2 ,mem_rx_window_sniff -0x6da 002687 store 2 ,mem_rx_window -0x6db 002688 fetch 1 ,mem_arq -0x6dc 002689 bbit1 wack ,lpm_mult_short -0x6dd 002690 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x6de 002691 call l2cap_malloc_is_fifo_empty -0x6df 002692 nbranch lpm_mult_short ,blank -0x6e0 002693 call p_lpm_set_attemp_timeout ,blank -0x6e1 002694 branch lpm_set_mult + 13 -: 002695 p_lpm_set_attemp_timeout: -0x6e2 002696 jam 1 ,mem_current_sniff_attempt -0x6e3 002697 jam 0 ,mem_current_sniff_timeout -0x6e4 002698 rtn -: 002700 p_mouse_bb_disconnected: -0x6e5 002701 fetch 1 ,mem_mouse_multi_led_blink_count -0x6e6 002702 nrtn blank -0x6e7 002704 jam zcode_10 ,mem_zcode_temp_param0 -0x6e8 002705 branch p_zcode_entrance -: 002836 p_check_51cmd_once_continue: -0x6e9 002837 call lmo_fifo_check -0x6ea 002838 nbranch check_51cmd_restore ,blank -0x6eb 002839 fetch 1 ,mem_fifo_temp -0x6ec 002840 bmark0 mark_context ,check_51cmd_check_idle -0x6ed 002841 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info -0x6ee 002842 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info -0x6ef 002843 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param -0x6f0 002844 branch check_51cmd_once_continue + 2 -: 002846 p_check_51cmd_ble_update_connect_param: -0x6f1 002847 call le_fifo_check_full -0x6f2 002848 nrtn blank -0x6f3 002849 branch le_l2cap_tx_update_req -: 002851 p_flash_store_le_reconn_info: -0x6f4 002852 jam rec_4_mode ,mem_record_bt_mode -0x6f5 002853 fetch 6 ,mem_le_plap -0x6f6 002854 branch p_flash_store_reconn_info -: 002855 p_flash_store_bd_reconn_info: -0x6f7 002856 jam rec_3_mode ,mem_record_bt_mode -0x6f8 002857 fetch 6 ,mem_plap -: 002858 p_flash_store_reconn_info: -0x6f9 002859 store 6 ,mem_temp_lap -: 002860 p_mouse_store_remote_bdaddr: -0x6fa 002861 fetch mouse_flag_len ,mem_mouse_flag -0x6fb 002862 rtnbit0 mouse_store_eeprom_flag -0x6fc 002863 arg mouse_store_eeprom_flag ,queue -0x6fd 002864 call mouse_disable_function_flag -0x6fe 002865 call mouse_check_device_addr -: 002866 p_mouse_unplug_clean_bdaddr: -0x6ff 002867 call mouse_before_store_reconn_info -0x700 002868 branch p_mouse_store_flash_device_info -: 002870 p_mouse_multi_led_blink_timer: -0x701 002871 fetch 1 ,mem_mouse_multi_led_blink_enable -0x702 002872 rtn blank -0x703 002873 fetch 1 ,mem_mouse_multi_led_type -0x704 002874 beq multi_led_on ,p_mouse_multi_led_type_on -0x705 002875 beq multi_led_blink ,p_mouse_multi_led_type_blink -0x706 002876 rtn -: 002878 p_mouse_multi_led_type_on: -0x707 002879 call p_mouse_multi_led_on -0x708 002880 fetch 1 ,mem_mouse_multi_led_on_timer -0x709 002881 increase 1 ,pdata -0x70a 002882 store 1 ,mem_mouse_multi_led_on_timer -0x70b 002883 fetcht 1 ,mem_mouse_multi_led_on_timer_init -0x70c 002884 isub temp ,null -0x70d 002885 call p_mouse_multi_led_off_poweron2s ,zero -0x70e 002886 rtn -: 002887 p_mouse_multi_led_off_poweron2s: -0x70f 002888 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0x710 002889 branch p_mouse_multi_led_off -: 002891 p_mouse_multi_led_type_blink: -0x711 002892 fetch 1 ,mem_mouse_multi_led_blink_timer -0x712 002893 increase -1 ,pdata -0x713 002894 store 1 ,mem_mouse_multi_led_blink_timer -0x714 002895 nrtn blank -0x715 002896 fetch 1 ,mem_mouse_multi_led_blink_timer_init -0x716 002897 store 1 ,mem_mouse_multi_led_blink_timer -0x717 002898 fetch 1 ,mem_mouse_multi_led_blink_count_limited -0x718 002899 branch p_mouse_multi_led_blink_count_no_limited ,blank -0x719 002900 fetch 1 ,mem_mouse_multi_led_blink_count -0x71a 002901 branch p_mouse_multi_led_blink_off ,blank -0x71b 002902 increase -1 ,pdata -0x71c 002903 store 1 ,mem_mouse_multi_led_blink_count -: 002904 p_mouse_multi_led_blink_count_no_limited: -0x71d 002905 fetch 1 ,mem_mouse_multi_led_state -0x71e 002906 beq on ,p_mouse_multi_led_off -0x71f 002907 beq off ,p_mouse_multi_led_on -0x720 002908 rtn -: 002910 p_mouse_multi_led_on: -0x721 002911 jam on ,mem_mouse_multi_led_state -0x722 002912 fetch 1 ,mem_device_flag -0x723 002913 beq 1 ,p_mouse_multi_24g_led_on -0x724 002914 beq 2 ,p_mouse_multi_bt_led_on -0x725 002915 branch p_mouse_multi_ble_led_on -: 002916 p_mouse_multi_bt_led_on: -0x726 002917 branch mouse_device2_led_on -: 002919 p_mouse_multi_24g_led_on: -0x727 002920 branch mouse_device1_led_on -: 002922 p_mouse_multi_ble_led_on: -0x728 002923 branch mouse_device3_led_on -: 002925 p_mouse_discovey_led_blink_off: -0x729 002926 fetch 1 ,mem_mouse_multi_led_on_timer -0x72a 002927 nrtn blank -0x72b 002928 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x72c 002929 nrtn blank -: 002930 p_mouse_multi_led_blink_off: -0x72d 002931 setarg 0 -0x72e 002932 store 3 ,mem_mouse_multi_led_blink_timer -: 002933 p_mouse_multi_led_off: -0x72f 002934 fetch 1 ,mem_mouse_multi_led_blink_count -0x730 002935 nbranch p_mouse_multi_led_off_wait_blink_over ,blank -0x731 002936 jam 0 ,mem_mouse_multi_led_blink_enable -0x732 002937 jam 0 ,mem_mouse_multi_led_type -: 002938 p_mouse_multi_led_off_wait_blink_over: -0x733 002939 jam 0 ,mem_mouse_multi_led_on_timer -0x734 002940 jam off ,mem_mouse_multi_led_state -0x735 002944 call mouse_devce_led_off + 1 -0x736 002946 fetch 1 ,mem_mouse_multi_led_blink_count -0x737 002947 nrtn blank -0x738 002949 fetch 1 ,mem_mouse_connected_state -0x739 002950 nbranch app_enter_hibernate ,blank -0x73a 002951 rtn -: 002953 p_mouse_dpi_multi_led_blink: -0x73b 002954 jam 3 ,mem_mouse_multi_led_blink_timer_init -0x73c 002955 jam 1 ,mem_mouse_multi_led_blink_count_limited -0x73d 002956 branch p_mouse_multi_led_blink_enable -: 002958 p_mouse_mode_bt_device_multi_led_on: -: 002959 p_mouse_mode_24g_device_multi_led_on: -0x73e 002960 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x73f 002961 jam on ,mem_mouse_multi_led_blink_enable -0x740 002962 jam multi_led_on ,mem_mouse_multi_led_type -0x741 002963 jam 0 ,mem_mouse_multi_led_on_timer -0x742 002964 rtn -: 002966 p_mouse_discovery_multi_led_blink: -0x743 002967 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0x744 002968 jam 3 ,mem_mouse_multi_led_blink_timer_init -0x745 002969 jam 0 ,mem_mouse_multi_led_blink_count_limited -0x746 002970 jam 1 ,mem_mouse_multi_led_blink_count -: 002971 p_mouse_multi_led_blink_enable: -0x747 002972 jam 5 ,mem_mouse_multi_led_blink_timer -0x748 002973 jam on ,mem_mouse_multi_led_blink_enable -0x749 002974 jam multi_led_blink ,mem_mouse_multi_led_type -0x74a 002975 rtn -: 002977 power_ctrl_pac_succ_cnt_init: -0x74b 002978 jam 1 ,mem_power_ctrl_level -0x74c 002979 jam 0 ,mem_power_ctrl_pac_succ_cnt -0x74d 002980 rtn -: 002981 power_ctrl_pac_succ_incrs: -0x74e 002982 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x74f 002983 increase 1 ,pdata -0x750 002984 store 1 ,mem_power_ctrl_pac_succ_cnt -0x751 002985 rtn -: 002987 power_ctrl_pac_succ_cnt_reinit: -0x752 002988 jam 3 ,mem_power_ctrl_pac_succ_cnt -0x753 002989 rtn -: 002991 power_ctrl_txpower_decrs_check: -0x754 002992 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x755 002993 rtnne 32 -0x756 002994 jam 0 ,mem_power_ctrl_pac_succ_cnt -: 002995 power_ctrl_txpower_decrs: -0x757 002996 fetcht 1 ,mem_rssi_avg_received -0x758 002997 setarg rssi_dis_min_24g -0x759 002998 bmark1 mark_24g ,power_ctrl_txpower_decrs_next -0x75a 002999 setarg rssi_dis_min_ble -: 003000 power_ctrl_txpower_decrs_next: -0x75b 003001 isub temp ,null -0x75c 003002 nrtn positive -0x75d 003003 fetch 1 ,mem_power_ctrl_level -0x75e 003004 beq 0 ,power_ctrl_decrs_level0 -0x75f 003005 increase -1 ,pdata -0x760 003006 store 1 ,mem_power_ctrl_level -0x761 003007 beq 0 ,power_ctrl_decrs_level0 -: 003008 power_ctrl_decrs_level1: -: 003009 power_ctrl_incrs_level1: -0x762 003010 jam tx_power_0db ,mem_tx_power -0x763 003011 rtn -: 003013 power_ctrl_txpower_incrs_force: -0x764 003014 jam 0 ,mem_power_ctrl_pac_succ_cnt -: 003015 power_ctrl_txpower_incrs: -0x765 003016 fetch 1 ,mem_power_ctrl_level -0x766 003017 beq 2 ,power_ctrl_incrs_level2 -0x767 003018 increase 1 ,pdata -0x768 003019 store 1 ,mem_power_ctrl_level -0x769 003020 beq 1 ,power_ctrl_incrs_level1 -: 003021 power_ctrl_incrs_level2: -0x76a 003022 jam tx_power_5db ,mem_tx_power -0x76b 003023 rtn -: 003025 power_ctrl_decrs_level0: -0x76c 003026 jam tx_power_f5db ,mem_tx_power -0x76d 003027 rtn -: 003030 p_set_freq_tx: -0x76e 003031 storet 1 ,mem_last_freq -0x76f 003032 add temp ,0 ,rega -0x770 003033 call rf_write_freq -0x771 003034 setarg param_pll_setup -0x772 003035 call sleep -: 003036 p_rf_tx_enable: -0x773 003037 jam 0x1 ,rfen_adc -0x774 003038 jam 0x3c ,rfen_rx -0x775 003039 jam 0xe0 ,rfen_tx -0x776 003040 nop 10 -0x777 003041 jam 0x01 ,rfen_mdm -0x778 003042 jam 0x3d ,rfen_mdm -0x779 003043 nop 10 -0x77a 003044 jam 0xb7 ,rfen_sn -0x77b 003045 nop 10 -0x77c 003046 jam 0x7d ,rfen_mdm -0x77d 003047 fetch 1 ,mem_tx_power -0x77e 003050 beq tx_power_5db ,p_set_tx_power_5db -0x77f 003052 beq tx_power_f5db ,p_set_tx_power_f5db -0x780 003053 beq tx_power_pair ,p_set_tx_power_pair -: 003055 p_set_tx_power_0db: -0x781 003056 call p_rx_low_sens -0x782 003058 jam 0xd0 ,0x8955 -0x783 003059 jam 0xe0 ,0x8956 -0x784 003061 jam 0x6c ,0x8958 -0x785 003063 branch set_tx_power_0db -: 003075 p_set_tx_power_5db: -0x786 003077 jam 0xfb ,0x894c -0x787 003078 jam 0xef ,0x894d -0x788 003079 jam 0xec ,0x894e -0x789 003080 jam 0x5e ,0x894f -0x78a 003083 jam 0xd0 ,0x8955 -0x78b 003084 jam 0xe0 ,0x8956 -0x78c 003086 jam 0x3c ,0x8958 -0x78d 003088 branch set_tx_power_5db -: 003100 p_set_tx_power_f5db: -0x78e 003101 call p_rx_low_sens -0x78f 003103 jam 0xd0 ,0x8955 -0x790 003104 jam 0xc0 ,0x8956 -0x791 003106 jam 0x6c ,0x8958 -0x792 003108 branch set_tx_power_f5db -: 003110 p_rx_low_sens: -0x793 003111 jam 0x5b ,0x894c -0x794 003112 jam 0x96 ,0x894d -0x795 003113 jam 0x2c ,0x894e -0x796 003114 jam 0x46 ,0x894f -0x797 003115 rtn -: 003124 p_set_tx_power_pair: -0x798 003126 jam 0xc0 ,0x8956 -0x799 003127 jam 0xd0 ,0x8955 -0x79a 003128 rtn -: 003130 p_shutdown_radio: -0x79b 003131 force 8 ,radio_ctrl -0x79c 003132 branch shutdown_radio + 1 -: 003141 p_zcode_entrance: -0x79d 003142 fetcht 1 ,mem_zcode_temp_param0 -0x79e 003143 rshift4 temp ,temp -0x79f 003144 fetch 1 ,mem_zcode_current_number -0x7a0 003145 isub temp ,null -0x7a1 003146 branch p_zcode_run ,zero -0x7a2 003147 storet 1 ,mem_zcode_current_number -0x7a3 003148 increase 1 ,temp -0x7a4 003149 setarg zcode_buff_size -0x7a5 003150 imul32 temp ,temp -0x7a6 003151 fetch 3 ,mem_xip_flash_offset -0x7a7 003152 isub temp ,pdata -0x7a8 003154 fetcht 3 ,mem_flash_start_addr -0x7a9 003155 iadd temp ,pdata -0x7aa 003156 increase -5 ,pdata -0x7ab 003157 store 3 ,mem_flash_address -0x7ac 003159 call p_flash_release_deep_power_down -: 003160 p_zcode_read_loop: -0x7ad 003161 fetch 3 ,mem_flash_address -0x7ae 003162 arg zcode_buff_size ,temp -0x7af 003163 arg mem_zcode_buff ,rega -0x7b0 003164 call spid_read_flash -0x7b1 003166 fetch 4 ,mem_zcode_buff -0x7b2 003167 fetcht 4 ,mem_zcode_head -0x7b3 003168 isub temp ,null -0x7b4 003169 nbranch p_zcode_read_loop ,zero -0x7b5 003171 call p_mouse_spi_init -0x7b6 003173 setarg mem_zcode_buff -0x7b7 003174 store 2 ,mem_patch_ptr -0x7b8 003175 jam zcode_code_size ,mem_patch_len -0x7b9 003176 call load_ucode -0x7ba 003177 setarg 0 -0x7bb 003178 store 4 ,mem_patch_ptr -: 003179 p_zcode_run: -0x7bc 003180 fetch 1 ,mem_zcode_temp_param0 -0x7bd 003181 branch p_zcode +0x4eb 001902 rtneq pb_button_state_down +0x4ec 001903 jam pb_button_state_down ,mem_select_device_button_statue +0x4ed 001904 fetch 2 ,mem_mouse_direct_timeout +0x4ee 001905 store 2 ,mem_mouse_direct_timer +0x4ef 001906 force page_length_timer ,queue +0x4f0 001907 fetch 2 ,mem_page_to +0x4f1 001908 branch timer_init +: 001910 p_mouse_select_device_button_up: +0x4f2 001911 fetch 1 ,mem_mouse_select_device_button_wakeup_flag +0x4f3 001912 nbranch p_mouse_select_button_wakeup_firstup ,blank +0x4f4 001913 fetch 1 ,mem_select_device_button_statue +0x4f5 001914 rtneq pb_button_state_up +0x4f6 001915 fetch 1 ,mem_select_ui_button_count +0x4f7 001916 sub pdata ,20 ,null +0x4f8 001917 ncall p_mouse_ready_reconnection_by_button ,positive +0x4f9 001919 fetch 1 ,mem_ui_button_timeout +0x4fa 001920 store 1 ,mem_select_ui_button_count +0x4fb 001921 jam pb_button_state_up ,mem_select_device_button_statue +0x4fc 001922 rtn +: 001924 p_mouse_ready_reconnection_by_button: +0x4fd 001925 call p_mouse_switch_device_flag +0x4fe 001926 jam 0 ,mem_link_key_exists +0x4ff 001927 call p_mouse_store_flash_device_info +0x500 001930 fetch mouse_flag_len ,mem_mouse_flag +0x501 001931 rtneq mouse_bt_discovery_button_long_down_flag +0x502 001932 branch mouse_set_reconnection +: 001934 p_mouse_switch_device_flag: +0x503 001935 fetcht 1 ,mem_device_flag +0x504 001936 increase 1 ,temp +0x505 001937 fetch 1 ,mem_device_number +0x506 001938 isub temp ,null +0x507 001939 ncall mouse_select_device_count_clean ,positive +0x508 001940 storet 1 ,mem_device_flag +0x509 001941 rtn +: 001943 p_mouse_select_button_wakeup_firstup: +0x50a 001944 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0x50b 001945 jam pb_button_state_up ,mem_select_device_button_statue +0x50c 001946 jam on ,mem_mouse_multi_led_blink_enable +0x50d 001947 rtn +: 001949 p_mouse_le_bb_disconnected_led_blink_set: +0x50e 001950 jam 1 ,mem_mouse_connected_state +0x50f 001951 jam 10 ,mem_mouse_multi_led_blink_count +0x510 001952 branch p_mouse_dpi_multi_led_blink +: 001985 p_mouse_adc_read: +0x511 001988 fetch 2 ,mem_mouse_multi_led_blink_count +0x512 001989 nrtn blank +0x513 001990 fetch 1 ,mem_mouse_wheel_trigger +0x514 001991 nrtn blank +0x515 001992 fetch 1 ,mem_adc_read_timer +0x516 001993 increase 1 ,pdata +0x517 001994 store 1 ,mem_adc_read_timer +0x518 001995 sub pdata ,10 ,null +0x519 001996 rtn positive +: 001997 p_mouse_adc_read_timeout: +0x51a 001998 call adc_init_data +0x51b 001999 jam 0 ,mem_adc_read_timer +0x51c 002000 call p_adc_set_mode +0x51d 002001 call vdd_calculate_by_mode +0x51e 002002 mul32 pdata ,3 ,pdata +0x51f 002003 arg 0x0f ,temp +0x520 002004 isub temp ,pdata +0x521 002005 sub pdata ,0x64 ,null +0x522 002006 call p_mouse_vdd_decrease ,positive +0x523 002007 store 2 ,mem_mouse_vdd_now_vol +0x524 002008 arg mem_mouse_vdd_calculate_set ,rega +0x525 002011 branch p_mouse_adc_read_next +: 002014 p_mouse_adc_read_next: +0x526 002015 call p_adc_bat_percent_lowpower_out +0x527 002016 fetch 1 ,mem_adc_power_flag +0x528 002017 bbit1 1 ,app_enter_hibernate +0x529 002018 bbit0 0 ,p_mouse_adc_no_low_voltage +0x52a 002019 jam 1 ,mem_mouse_adc_last_low_voltage_flag +0x52b 002020 branch mouse_adc_low_voltage +: 002022 p_mouse_adc_no_low_voltage: +0x52c 002023 call mouse_adc_no_low_voltage +0x52d 002024 fetch 1 ,mem_mouse_adc_last_low_voltage_flag +0x52e 002025 rtn blank +0x52f 002026 jam 0 ,mem_mouse_adc_last_low_voltage_flag +0x530 002027 branch p_mouse_multi_led_off +: 002029 p_mouse_vdd_decrease: +0x531 002030 arg 0x05 ,temp +0x532 002031 isub temp ,pdata +0x533 002032 rtn +: 002034 p_adc_set_mode: +: 002038 p_adc_check_gpio: +0x534 002039 hfetch 1 ,core_gpio_pu0 +0x535 002040 set0 5 ,pdata +0x536 002041 hstore 1 ,core_gpio_pu0 +0x537 002042 call adc_check_gpio +0x538 002043 hfetch 1 ,core_gpio_pu0 +0x539 002044 set1 5 ,pdata +0x53a 002045 hstore 1 ,core_gpio_pu0 +0x53b 002046 rtn +: 002048 p_adc_bat_percent_lowpower_out: +0x53c 002049 ifetch 8 ,rega +0x53d 002050 store 8 ,mem_pdatatemp +0x53e 002051 fetcht 2 ,mem_pdatatemp + 2 +0x53f 002052 fetch 2 ,mem_pdatatemp + 6 +0x540 002053 isub temp ,null +0x541 002054 nbranch adc_set_no_power_flag ,positive +0x542 002055 fetcht 2 ,mem_pdatatemp + 4 +0x543 002056 isub temp ,null +0x544 002057 nbranch adc_set_low_power_flag ,positive +: 002058 p_adc_clear_low_power_flag: +0x545 002059 fetch 1 ,mem_adc_power_flag +0x546 002060 set0 0 ,pdata +0x547 002061 store 1 ,mem_adc_power_flag +0x548 002062 rtn +: 002064 p_mouse_low_voltage_led_timer: +0x549 002065 fetch mouse_flag_len ,mem_mouse_flag +0x54a 002066 rtnbit0 mouse_low_voltage_flag +0x54b 002067 fetch 2 ,mem_ui_state_map +0x54c 002068 rtnbit1 ui_state_ble_adv +0x54d 002069 rtnbit1 ui_state_bt_discovery +0x54e 002070 fetch 2 ,mem_mouse_multi_led_blink_count +0x54f 002071 nrtn blank +0x550 002072 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x551 002073 pincrease 1 +0x552 002074 store 1 ,mem_adc_low_volatage_led_timer_count +0x553 002075 sub pdata ,30 ,null +0x554 002076 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive +0x555 002077 sub pdata ,10 ,null +0x556 002078 branch p_mouse_multi_led_on ,positive +0x557 002079 branch p_mouse_multi_led_off +: 002080 p_mouse_adc_low_volatage_led_timer_count_clean: +0x558 002081 jam 1 ,mem_adc_low_volatage_led_timer_count +0x559 002082 rtn +: 002085 p_mouse_sensor_poweron: +0x55a 002086 call p_mouse_spi_init +0x55b 002087 setarg 0x8006 +0x55c 002088 call twspi_write +0x55d 002089 nop 12000 +0x55e 002090 arg mem_sensor_poweron_init ,regc +0x55f 002091 call p_sensor_wr_seq +: 002092 p_mouse_dpi_config: +0x560 002093 fetch 1 ,mem_mouse_dpi +0x561 002094 bne 0xff ,p_mouse_seting_dpi +: 002095 p_mouse_dpi_config_default: +0x562 002096 fetch 1 ,mem_config_sensor_motion +0x563 002097 store 1 ,mem_mouse_dpi +: 002098 p_mouse_seting_dpi: +: 002099 p_mouse_seting_sensor_type: +0x564 002100 fetch 1 ,mem_config_sensor_type +0x565 002101 beq p3212 ,p_mouse_seting_3212_dpi +0x566 002102 beq p3065_xy ,p_mouse_seting_3065xy_dpi +0x567 002103 beq mx8650 ,p_mouse_seting_3065xy_dpi +: 002105 p_mouse_seting_3205_dpi: +0x568 002106 fetch 1 ,mem_mouse_dpi +0x569 002107 sub pdata ,mouse_dpi_level2 ,null +0x56a 002108 call p_mouse_3205_dpi_recount ,zero +0x56b 002109 fetch 1 ,mem_mouse_dpi +0x56c 002110 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 +0x56d 002111 beq mouse_dpi_level4 ,mouse_set_cpi3 +0x56e 002112 branch mouse_set_cpi2 +: 002113 p_mouse_3205_dpi_recount: +0x56f 002114 jam mouse_dpi_level3 ,mem_mouse_dpi +0x570 002115 rtn +: 002116 p_mouse_3205_set_cpi1: +0x571 002117 fetch 1 ,mem_320x_dpi_1 +0x572 002118 increase -1 ,pdata +0x573 002119 branch mouse_p3205_dpi +: 002121 p_mouse_seting_3065xy_dpi: +0x574 002122 fetch 1 ,mem_mouse_dpi +0x575 002123 sub pdata ,mouse_dpi_level2 ,null +0x576 002124 call p_mouse_3205_dpi_recount ,zero +0x577 002125 fetch 1 ,mem_mouse_dpi +0x578 002126 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 +0x579 002127 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 +: 002128 p_mouse_3065xy_set_cpi3: +0x57a 002129 fetch 1 ,mem_3065xy_dpi_3 +: 002130 p_mouse_dpi_store: +0x57b 002131 store 1 ,mem_mouse_cpi_count +0x57c 002132 branch mouse_p3205_dpi + 3 +: 002133 p_mouse_3065xy_set_cpi1: +0x57d 002134 fetch 1 ,mem_3065xy_dpi_1 +0x57e 002135 branch p_mouse_dpi_store +: 002136 p_mouse_3065xy_set_cpi4: +0x57f 002137 fetch 1 ,mem_3065xy_dpi_4 +0x580 002138 branch p_mouse_dpi_store +: 002151 p_mouse_seting_3212_dpi: +0x581 002152 fetch 1 ,mem_mouse_dpi +0x582 002153 sub pdata ,mouse_dpi_level2 ,null +0x583 002154 call p_mouse_3205_dpi_recount ,zero +0x584 002155 fetch 1 ,mem_mouse_dpi +0x585 002156 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0x586 002157 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0x587 002158 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0x588 002159 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +0x589 002160 branch mouse_set_p3212_cpi2 +: 002162 p_mouse_motion: +0x58a 002163 disable user +0x58b 002164 setarg 0 +0x58c 002165 store 6 ,mem_mouse_x +0x58d 002166 call mouse_cheak_sensor_data +0x58e 002167 call p_mouse_set_sdio_high +0x58f 002168 call mouse_zwheel +0x590 002169 call mouse_t_zwheel +0x591 002170 call p_mouse_key +0x592 002171 call p_mouse_data_zoom +0x593 002172 nrtn user +0x594 002173 branch mouse_motion + 9 +: 002176 p_mouse_data_zoom: +0x595 002177 fetch 1 ,mem_config_sensor_type +0x596 002178 rtnne p3212 +0x597 002179 fetch 1 ,mem_mouse_dpi +0x598 002180 rtnne mouse_dpi_level4 +0x599 002181 fetch 2 ,mem_mouse_x +0x59a 002182 call p_mouse_1600_zoom +0x59b 002183 store 2 ,mem_mouse_x +0x59c 002184 fetch 2 ,mem_mouse_y +0x59d 002185 call p_mouse_1600_zoom +0x59e 002186 store 2 ,mem_mouse_y +0x59f 002187 rtn +: 002189 p_mouse_1600_zoom: +0x5a0 002190 bbit1 11 ,p_mouse_xy_inverse +0x5a1 002191 bbit0 11 ,p_mouse_xy_zoom_3200 +0x5a2 002192 rtn +: 002194 p_mouse_xy_inverse: +0x5a3 002195 sub pdata ,0 ,pdata +0x5a4 002196 call p_mouse_xy_zoom_3200 +0x5a5 002197 sub pdata ,0 ,pdata +0x5a6 002198 rtn +: 002200 p_mouse_xy_zoom_3200: +0x5a7 002201 iadd pdata ,pdata +0x5a8 002202 branch p_mouse_xy_zoom_store +: 002204 p_mouse_xy_zoom_store: +0x5a9 002205 store 2 ,mem_mouse_temp_data +0x5aa 002206 fetch 1 ,mem_mouse_temp_data + 1 +0x5ab 002207 sub pdata ,0x7 ,null +0x5ac 002208 ncall p_mouse_xy_forward_overflow ,positive +0x5ad 002209 fetch 2 ,mem_mouse_temp_data +0x5ae 002210 rtn +: 002212 p_mouse_xy_forward_overflow: +0x5af 002213 setarg 0x7ff +0x5b0 002214 store 2 ,mem_mouse_temp_data +0x5b1 002215 rtn +: 002217 p_mouse_key: +0x5b2 002218 call p_mouse_check_key_gpio +0x5b3 002219 branch mouse_key + 1 +: 002221 p_mouse_check_key_gpio: +0x5b4 002222 arg 0 ,rega +0x5b5 002223 call p_mouse_check_lkey_gpio +0x5b6 002228 branch mouse_check_key_gpio_output +: 002230 p_mouse_check_lkey_gpio: +0x5b7 002231 fetcht 1 ,mem_lbutton_gpio +0x5b8 002232 call p_gpio_set_input_pu +0x5b9 002233 fetcht 1 ,mem_lbutton_gpio +0x5ba 002234 call gpio_get_bit +0x5bb 002235 setflag true ,0 ,rega +: 002237 p_mouse_check_rkey_gpio: +0x5bc 002238 fetcht 1 ,mem_rbutton_gpio +0x5bd 002239 call p_gpio_set_input_pu +0x5be 002240 fetcht 1 ,mem_rbutton_gpio +0x5bf 002241 call gpio_get_bit +0x5c0 002242 setflag true ,1 ,rega +: 002244 p_mouse_check_mkey_gpio: +0x5c1 002245 fetcht 1 ,mem_mbutton_gpio +0x5c2 002246 call p_gpio_set_input_pu +0x5c3 002247 fetcht 1 ,mem_mbutton_gpio +0x5c4 002248 call gpio_get_bit +0x5c5 002249 setflag true ,2 ,rega +: 002251 p_mouse_check_bk_key_gpio: +0x5c6 002252 call p_mouse_comm_gpio_config +0x5c7 002253 fetcht 1 ,mem_bk_button_gpio +0x5c8 002254 call p_gpio_set_input_pd +0x5c9 002255 fetcht 1 ,mem_bk_button_gpio +0x5ca 002256 call gpio_get_bit +0x5cb 002257 nsetflag true ,3 ,rega +0x5cc 002258 call p_gpio_set_input_pu +: 002259 p_mouse_check_fw_key_gpio: +0x5cd 002260 call p_mouse_comm_gpio_config +0x5ce 002261 fetcht 1 ,mem_fw_button_gpio +0x5cf 002262 call p_gpio_set_input_pd +0x5d0 002263 fetcht 1 ,mem_fw_button_gpio +0x5d1 002264 call gpio_get_bit +0x5d2 002265 nsetflag true ,4 ,rega +: 002266 p_gpio_set_input_pu: +0x5d3 002267 set1 gpio_active_bit ,temp +: 002268 p_gpio_set_input_pu1: +0x5d4 002269 arg core_gpio_pu0 ,contw +0x5d5 002270 call gpio_set_bit +0x5d6 002271 set0 gpio_active_bit ,temp +0x5d7 002272 branch p_gpio_set_input_pd4 +: 002274 p_gpio_set_input_pd: +0x5d8 002275 set0 gpio_active_bit ,temp +0x5d9 002276 arg core_gpio_pu0 ,contw +0x5da 002277 call gpio_set_bit +0x5db 002278 set1 gpio_active_bit ,temp +: 002279 p_gpio_set_input_pd4: +0x5dc 002280 arg core_gpio_pd0 ,contw +0x5dd 002281 branch gpio_set_high_impedance + 4 +: 002303 p_mouse_bb_event_discovery_btn: +0x5de 002305 isolate1 mark_24g ,mark +0x5df 002306 call p_g24_check_51cmd_stop_24g ,true +0x5e0 002307 branch mouse_bb_event_discovery_btn + 1 +: 002309 p_le_addr_random_config: +0x5e1 002310 jam zcode_81 ,mem_zcode_temp_param0 +0x5e2 002311 branch p_zcode_entrance +: 002313 p_mouse_start_discovery: +0x5e3 002314 jam zcode_50 ,mem_zcode_temp_param0 +0x5e4 002315 branch p_zcode_entrance +: 002317 p_le_adv_data_update: +0x5e5 002318 arg mem_le_adv_data + 11 ,contw +0x5e6 002319 arg 19 ,loopcnt +0x5e7 002320 call memcpy +0x5e8 002321 branch le_modified_name_adv +: 002323 p_mouse_stop_discovery: +0x5e9 002324 call p_mouse_discovey_led_blink_off +0x5ea 002325 setarg 0 +0x5eb 002326 store 2 ,mem_mouse_discovery_timer +0x5ec 002327 store 1 ,mem_mouse_blink_count +0x5ed 002328 call p_mouse_init_sensor_reset +0x5ee 002329 branch mouse_stop_discovery + 1 +: 002331 p_le_slave_match: +0x5ef 002332 fetch 1 ,mem_le_md_count +0x5f0 002333 pincrease 1 +0x5f1 002334 store 1 ,mem_le_md_count +0x5f2 002335 beq le_md_max_count ,le_slave_cont +0x5f3 002336 call le_acknowledge +0x5f4 002337 call le_prepare_tx +0x5f5 002338 call power_ctrl_start +0x5f6 002339 branch le_slave_match + 7 +: 002341 p_le_next_adv_channel: +0x5f7 002342 fetch 1 ,mem_le_ch_mapped +0x5f8 002343 increase 1 ,pdata +0x5f9 002344 store 1 ,mem_le_ch_mapped +0x5fa 002345 rtnne 40 +0x5fb 002346 jam 37 ,mem_le_ch_mapped +0x5fc 002347 rtn +: 002349 p_le_receive_skip: +0x5fd 002350 call save_rssi +0x5fe 002351 call p_rssi_signal +0x5ff 002352 branch le_receive_skip + 2 +: 002354 p_le_update_param: +0x600 002355 jam zcode_40 ,mem_zcode_temp_param0 +0x601 002356 branch p_zcode_entrance +: 002358 p_le_update_channel_map: +0x602 002359 jam zcode_41 ,mem_zcode_temp_param0 +0x603 002360 branch p_zcode_entrance +: 002362 p_le_prepare_tx: +0x604 002363 fetch 1 ,mem_le_arq +0x605 002364 bbit1 wak ,p_le_prepare_tx_wak +0x606 002365 call power_ctrl_pac_succ_incrs +0x607 002366 fetch 1 ,mem_empty_count +0x608 002367 nbranch p_le_send_empyt ,blank +0x609 002368 fetch 1 ,mem_le_state +0x60a 002369 bbit0 lestate_encryption ,p_le_tx_4 +0x60b 002370 fetch 1 ,mem_le_rxbuf + 1 +0x60c 002371 branch p_le_tx_4 ,blank +0x60d 002372 branch le_send_empty +: 002373 p_le_send_empyt: +0x60e 002374 fetch 1 ,mem_empty_count +0x60f 002375 increase -1 ,pdata +0x610 002376 store 1 ,mem_empty_count +0x611 002377 branch le_send_empty +: 002378 p_le_tx_4: +0x612 002379 fetch 1 ,mem_le_pairing_state +0x613 002380 bne flag_le_pairing_after_auth ,p_in_le_tx_4 +0x614 002381 jam 3 ,mem_empty_count +: 002382 p_in_le_tx_4: +0x615 002383 call le_fifo_check_nearly_full +0x616 002384 call p_mouse_data_pull ,blank +0x617 002385 branch le_prepare_tx + 4 +: 002387 p_le_check_tx_retransmit_setmd: +0x618 002388 fetch 1 ,mem_le_connect_status_flag +0x619 002389 and pdata ,0x03 ,pdata +0x61a 002390 rtnne 0x03 +0x61b 002391 fetch 1 ,mem_mouse_data_queue_num +0x61c 002392 rtn blank +0x61d 002393 fetch 1 ,mem_le_txlen +0x61e 002394 rtn blank +0x61f 002395 fetch 1 ,mem_le_txheader +0x620 002396 set1 md ,pdata +0x621 002397 store 1 ,mem_le_txheader +0x622 002398 branch le_set_md +: 002411 p_le_prepare_tx_wak: +0x623 002412 call p_le_check_tx_retransmit_setmd +: 002413 p_le_power_ctrl_pac_succ_decrs: +: 002414 power_ctrl_pac_succ_decrs: +0x624 002415 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x625 002416 sub pdata ,2 ,null +0x626 002417 ncall power_ctrl_pac_succ_cnt_reinit ,positive +0x627 002418 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x628 002419 rtneq 0 +0x629 002420 increase -1 ,pdata +0x62a 002421 store 1 ,mem_power_ctrl_pac_succ_cnt +0x62b 002422 rtn +: 002424 p_mouse_le_reconn_write_enable_timer_reinit: +0x62c 002425 fetch 1 ,mem_mouse_le_reconnect_flag +0x62d 002426 rtn blank +0x62e 002427 fetch 1 ,mem_le_connect_status_flag +0x62f 002428 and pdata ,0x03 ,pdata +0x630 002429 rtneq 0x03 +0x631 002430 jam 10 ,mem_le_start_encrypt_timer +0x632 002431 rtn +: 002433 p_le_parse: +0x633 002434 rtnmark1 mark_old_packet +0x634 002435 call le_fifo_check_full +0x635 002436 nrtn blank +0x636 002437 fetch 1 ,mem_le_rxbuf +0x637 002438 and pdata ,0x3 ,pdata +0x638 002439 store 1 ,mem_le_packet_llid +0x639 002440 ifetch 1 ,contr +0x63a 002441 and pdata ,0x1f ,pdata +0x63b 002442 store 1 ,mem_le_packet_size +0x63c 002443 rtn blank +0x63d 002444 copy contr ,pdata +0x63e 002445 store 2 ,mem_le_payload_ptr +0x63f 002446 fetch 1 ,mem_le_packet_llid +0x640 002447 beq llid_le_ll ,p_le_parse_ll +0x641 002448 branch le_parse_l2cap +: 002449 p_le_parse_ll: +0x642 002450 fetch 1 ,mem_le_rxbuf + 2 +0x643 002451 beq ll_channel_map_req ,p_le_parse_channel_map_req +0x644 002452 branch le_parse_ll + 1 +: 002453 p_le_parse_channel_map_req: +0x645 002454 ifetch 5 ,contr +0x646 002455 store 5 ,mem_le_new_map +0x647 002456 ifetch 2 ,contr +0x648 002457 store 2 ,mem_le_instant +0x649 002458 branch le_parse_channel_map_req + 7 +: 002460 p_le_parse_l2cap: +0x64a 002461 ifetch 2 ,contr +0x64b 002462 beq le_l2cap_cid_att ,p_le_parse_att +0x64c 002463 beq le_l2cap_cid_smp ,p_le_parse_smp +0x64d 002464 branch le_parse_l2cap + 11 +: 002465 p_le_parse_att: +0x64e 002466 call store_contr +0x64f 002467 call p_mouse_le_reconn_write_enable_timer_reinit +0x650 002468 call get_contr +0x651 002469 ifetch 3 ,contr +0x652 002470 store 3 ,mem_le_att_opcode +0x653 002471 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +0x654 002472 rshift8 pdata ,temp +0x655 002473 sub temp ,0x24 ,null +0x656 002474 branch p_le_parse_att1 ,positive +0x657 002475 arg mem_mouse_le_uuid_sup ,temp +0x658 002476 storet 2 ,mem_ui_le_uuid_table +0x659 002477 call le_parse_att + 2 +0x65a 002478 setarg 0x8e7a +0x65b 002479 store 2 ,mem_ui_le_uuid_table +0x65c 002480 rtn +: 002482 p_le_parse_att_read_by_group_type_request: +0x65d 002483 call le_parse_att_read_by_group_type_request +0x65e 002484 call le_fifo_get_last_tx_ptr +0x65f 002485 increase 7 ,contr +0x660 002486 ifetch 1 ,contr +0x661 002487 rtnne attop_read_by_group_type_response +0x662 002488 increase 5 ,contr +0x663 002489 ifetch 2 ,contr +0x664 002490 arg uuid_service_hids ,temp +0x665 002491 isub temp ,null +0x666 002492 nrtn zero +0x667 002493 increase -4 ,contr +0x668 002494 setarg 0x2b +0x669 002495 istore 2 ,contr +0x66a 002496 rtn +: 002498 p_le_parse_att1: +0x66b 002499 beq attop_read_request ,p_le_parse_att_read_request +0x66c 002500 beq attop_write_request ,p_le_parse_att_write_request +0x66d 002501 branch le_parse_att + 2 +: 002502 p_le_parse_att_read_request: +0x66e 002503 fetcht 2 ,mem_le_att_handle +0x66f 002504 fetch 1 ,mem_le_configuration +0x670 002505 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth +: 002506 p_le_send_att_read_response: +0x671 002507 fetch 2 ,mem_le_att_handle +0x672 002508 beq 0x13 ,le_send_att_error_response_notfound +0x673 002509 fetcht 2 ,mem_le_att_handle +0x674 002510 branch le_send_att_read_response +: 002511 p_le_send_att_read_response_check_auth: +0x675 002512 fetch 2 ,mem_le_pairing_handle +0x676 002513 isub temp ,null +0x677 002514 nbranch p_le_send_att_read_response ,zero +0x678 002515 call le_check_encrypt_state +0x679 002516 nbranch p_le_send_att_read_response ,user +0x67a 002517 jam att_err_insufficient_authentication ,mem_le_err_code +0x67b 002518 branch le_send_att_error_response +: 002520 p_le_parse_att_write_request: +0x67c 002521 copy contr ,rega +0x67d 002522 fetch 2 ,mem_le_l2cap_size +0x67e 002523 add pdata ,-3 ,regb +0x67f 002524 call le_writeatt_cb +0x680 002525 fetch 1 ,mem_mouse_fast_conn_flag +0x681 002526 beq 0xff ,le_send_att_write_response_check_auth +0x682 002527 fetch 1 ,mem_mouse_le_reconnect_flag +0x683 002528 branch le_send_att_write_response_check_auth ,blank +0x684 002529 fetch 1 ,mem_le_connect_status_flag +0x685 002530 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +0x686 002531 setarg 0x001a +0x687 002532 fetcht 2 ,mem_le_att_handle +0x688 002533 isub temp ,null +0x689 002534 nbranch le_send_att_write_response_check_auth ,zero +0x68a 002535 jam att_err_insufficient_authentication ,mem_le_err_code +0x68b 002536 branch le_send_att_error_response +: 002538 p_le_parse_smp: +0x68c 002539 ifetch 1 ,contr +0x68d 002540 beq smp_pairing_request ,p_le_parse_smp_pairing_request +0x68e 002541 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed +0x68f 002542 branch le_parse_smp + 2 +: 002544 p_le_parse_smp_pairing_request: +0x690 002545 jam 1 ,mem_le_send_security_request_flag +0x691 002546 branch le_parse_smp_pairing_request +: 002548 p_le_parse_smp_pairing_failed: +0x692 002549 jam zcode_82 ,mem_zcode_temp_param0 +0x693 002550 branch p_zcode_entrance +: 002552 p_le_adv_not_match: +0x694 002553 fetch 1 ,mem_le_ch_mapped +0x695 002554 bne 39 ,le_adv_loop +0x696 002556 random pdata +0x697 002557 arg 0x1ff ,temp +0x698 002558 iand temp ,pdata +0x699 002559 add pdata ,250 ,pdata +0x69a 002560 call delay +0x69b 002561 arg le_adv_interval_timer ,queue +0x69c 002562 fetch 2 ,mem_le_adv_interval +0x69d 002563 branch timer_init +: 002571 p_le_lpm_setmult: +0x69e 002572 disable wake +0x69f 002573 branch p_le_lpm_set_mult_attempt ,attempt +0x6a0 002574 nbranch le_lpm_lost ,match +: 002575 p_le_lpm_set_mult_attempt: +0x6a1 002576 call lpm_match +0x6a2 002577 fetch 2 ,mem_rx_window_sniff +0x6a3 002578 store 2 ,mem_le_receive_window +0x6a4 002579 fetch 1 ,mem_le_connect_status_flag +0x6a5 002580 compare 3 ,pdata ,3 +0x6a6 002581 nbranch lpm_mult_short ,true +0x6a7 002582 branch le_lpm_set_mult_attempt + 3 +: 002584 p_le_mouse_bb_event_connect_complete: +0x6a8 002585 jam zcode_42 ,mem_zcode_temp_param0 +0x6a9 002586 branch p_zcode_entrance +: 002588 p_twspi_reset: +0x6aa 002589 hfetch 1 ,core_gpio_out3 +0x6ab 002590 and_into 0xfd ,pdata +0x6ac 002591 hstore 1 ,core_gpio_out3 +0x6ad 002592 hfetcht 1 ,core_gpio_oe3 +0x6ae 002593 or_into 0x2 ,temp +0x6af 002594 hstoret 1 ,core_gpio_oe3 +0x6b0 002595 call twspi_disable +0x6b1 002596 and_into 0xfd ,temp +0x6b2 002597 nop 13 +0x6b3 002598 call p_twspi_enable +0x6b4 002599 hstoret 1 ,core_gpio_oe3 +0x6b5 002600 rtn +: 002602 p_spid_init: +0x6b6 002603 call spid_init_common +: 002604 p_twspi_enable: +0x6b7 002605 hfetch 1 ,core_gpio_sel1 +0x6b8 002606 set1 0 ,pdata +0x6b9 002607 set0 1 ,pdata +0x6ba 002608 set0 3 ,pdata +0x6bb 002609 hstore 1 ,core_gpio_sel1 +0x6bc 002610 rtn +: 002655 p_quit_connection_cont: +0x6bd 002659 call app_disconn_reason_collect_bt +0x6be 002660 call sniff_exit +0x6bf 002661 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x6c0 002662 call ui_ipc_send_event +0x6c1 002663 call init_lmp_work +0x6c2 002664 call l2cap_init_work +0x6c3 002665 branch quit_connection_cont + 8 +: 002667 p_prepare_tx: +0x6c4 002668 fetch 1 ,mem_state +0x6c5 002669 isolate1 state_inconn ,pdata +0x6c6 002670 call p_bt_power_ctrl ,true +0x6c7 002671 branch prepare_tx + 1 +: 002672 p_bt_power_ctrl: +0x6c8 002673 fetch 1 ,mem_arq +0x6c9 002674 isolate1 wack ,pdata +0x6ca 002675 call power_ctrl_pac_succ_decrs ,true +0x6cb 002676 ncall power_ctrl_pac_succ_incrs ,true +: 002677 power_ctrl_start: +0x6cc 002678 fetch 2 ,mem_ui_state_map +0x6cd 002679 rtnbit1 ui_state_ble_adv +0x6ce 002680 rtnbit1 ui_state_bt_reconnect +0x6cf 002681 rtnbit1 ui_state_bt_discovery +0x6d0 002683 arg mem_rssi_signal_buf ,rega +0x6d1 002684 call p_rssi_average +0x6d2 002685 storet 1 ,mem_rssi_avg_received +0x6d3 002687 setarg rssi_dis_max_24g +0x6d4 002688 bmark1 mark_24g ,power_ctrl_start_next +0x6d5 002689 setarg rssi_dis_max_ble +: 002690 power_ctrl_start_next: +0x6d6 002691 isub temp ,null +0x6d7 002692 nbranch power_ctrl_txpower_incrs_force ,positive +0x6d8 002694 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x6d9 002695 sub pdata ,2 ,null +0x6da 002696 nbranch power_ctrl_txpower_decrs_check ,positive +0x6db 002697 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x6dc 002698 beq 0 ,power_ctrl_txpower_incrs +0x6dd 002699 rtn +: 002701 p_slave_conn_recv_packet: +0x6de 002702 call slave_receive_master_slot +0x6df 002703 nbranch shutdown_radio ,sync +0x6e0 002704 call save_rssi +0x6e1 002705 call p_rssi_signal +0x6e2 002706 branch slave_conn_recv_packet + 4 +: 002708 p_lpm_dispatch: +0x6e3 002709 rtnmark1 mark_24g +0x6e4 002710 call lpo_calibration +0x6e5 002711 fetch 3 ,mem_clks_per_lpo +0x6e6 002712 rtn blank +0x6e7 002713 fetch 1 ,mem_lpm_mode +0x6e8 002714 rtn blank +0x6e9 002715 fetch 1 ,mem_mouse_multi_led_on_timer +0x6ea 002716 nrtn blank +0x6eb 002718 fetch 1 ,mem_ssp_enable +0x6ec 002719 branch p_lpm_dispatch_next ,blank +0x6ed 002720 fetch 1 ,mem_sp_local_key_invalid +0x6ee 002721 rtn blank +: 002722 p_lpm_dispatch_next: +0x6ef 002723 fetch 1 ,mem_le_sc_calc +0x6f0 002724 nrtn blank +0x6f1 002725 call lpm_check_wake_lock +0x6f2 002726 nrtn blank +0x6f3 002727 fetch 1 ,mem_context +0x6f4 002728 compare 3 ,pdata ,0x7 +0x6f5 002729 nbranch lpm_dispatch_unconn ,true +0x6f6 002730 fetch 2 ,mem_context + coffset_tsniff +0x6f7 002731 arg 0xffff ,temp +0x6f8 002732 isub temp ,null +0x6f9 002733 rtn zero +0x6fa 002734 branch lpm_dispatch_next + 9 +: 002736 p_lpm_set_mult: +0x6fb 002737 disable wake +0x6fc 002738 fetch 1 ,mem_state +0x6fd 002739 rtnbit0 state_insniff +0x6fe 002740 nbranch lpm_not_match ,match +0x6ff 002741 call lpm_match +0x700 002742 fetch 2 ,mem_rx_window_sniff +0x701 002743 store 2 ,mem_rx_window +0x702 002744 fetch 1 ,mem_arq +0x703 002745 bbit1 wack ,lpm_mult_short +0x704 002746 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x705 002747 call l2cap_malloc_is_fifo_empty +0x706 002748 nbranch lpm_mult_short ,blank +0x707 002749 call p_lpm_set_attemp_timeout ,blank +0x708 002750 branch lpm_set_mult + 13 +: 002751 p_lpm_set_attemp_timeout: +0x709 002752 jam 1 ,mem_current_sniff_attempt +0x70a 002753 jam 0 ,mem_current_sniff_timeout +0x70b 002754 rtn +: 002756 p_mouse_bb_disconnected: +0x70c 002757 fetch 1 ,mem_mouse_multi_led_blink_count +0x70d 002758 nrtn blank +0x70e 002760 jam zcode_10 ,mem_zcode_temp_param0 +0x70f 002761 branch p_zcode_entrance +: 002892 p_check_51cmd_once_continue: +0x710 002893 call lmo_fifo_check +0x711 002894 nbranch check_51cmd_restore ,blank +0x712 002895 fetch 1 ,mem_fifo_temp +0x713 002896 bmark0 mark_context ,check_51cmd_check_idle +0x714 002897 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +0x715 002898 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +0x716 002899 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +0x717 002900 branch check_51cmd_once_continue + 2 +: 002902 p_check_51cmd_ble_update_connect_param: +0x718 002903 call le_fifo_check_full +0x719 002904 nrtn blank +0x71a 002905 branch le_l2cap_tx_update_req +: 002907 p_flash_store_le_reconn_info: +0x71b 002908 jam rec_4_mode ,mem_record_bt_mode +0x71c 002909 fetch 6 ,mem_le_plap +0x71d 002910 branch p_flash_store_reconn_info +: 002911 p_flash_store_bd_reconn_info: +0x71e 002912 jam rec_3_mode ,mem_record_bt_mode +0x71f 002913 fetch 6 ,mem_plap +: 002914 p_flash_store_reconn_info: +0x720 002915 store 6 ,mem_temp_lap +: 002916 p_mouse_store_remote_bdaddr: +0x721 002917 fetch mouse_flag_len ,mem_mouse_flag +0x722 002918 rtnbit0 mouse_store_eeprom_flag +0x723 002919 arg mouse_store_eeprom_flag ,queue +0x724 002920 call mouse_disable_function_flag +0x725 002921 call mouse_check_device_addr +: 002922 p_mouse_unplug_clean_bdaddr: +0x726 002923 call mouse_before_store_reconn_info +0x727 002924 branch p_mouse_store_flash_device_info +: 002926 p_mouse_multi_led_blink_timer: +0x728 002927 fetch 1 ,mem_mouse_multi_led_blink_enable +0x729 002928 rtn blank +0x72a 002929 fetch 1 ,mem_mouse_multi_led_type +0x72b 002930 beq multi_led_on ,p_mouse_multi_led_type_on +0x72c 002931 beq multi_led_blink ,p_mouse_multi_led_type_blink +0x72d 002932 rtn +: 002934 p_mouse_multi_led_type_on: +0x72e 002935 call p_mouse_multi_led_on +0x72f 002936 fetch 1 ,mem_mouse_multi_led_on_timer +0x730 002937 increase 1 ,pdata +0x731 002938 store 1 ,mem_mouse_multi_led_on_timer +0x732 002939 fetcht 1 ,mem_mouse_multi_led_on_timer_init +0x733 002940 isub temp ,null +0x734 002941 call p_mouse_multi_led_off_poweron2s ,zero +0x735 002942 rtn +: 002943 p_mouse_multi_led_off_poweron2s: +0x736 002944 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0x737 002945 branch p_mouse_multi_led_off +: 002947 p_mouse_multi_led_type_blink: +0x738 002948 fetch 1 ,mem_mouse_multi_led_blink_timer +0x739 002949 increase -1 ,pdata +0x73a 002950 store 1 ,mem_mouse_multi_led_blink_timer +0x73b 002951 nrtn blank +0x73c 002952 fetch 1 ,mem_mouse_multi_led_blink_timer_init +0x73d 002953 store 1 ,mem_mouse_multi_led_blink_timer +0x73e 002954 fetch 1 ,mem_mouse_multi_led_blink_count_limited +0x73f 002955 branch p_mouse_multi_led_blink_count_no_limited ,blank +0x740 002956 fetch 1 ,mem_mouse_multi_led_blink_count +0x741 002957 branch p_mouse_multi_led_blink_off ,blank +0x742 002958 increase -1 ,pdata +0x743 002959 store 1 ,mem_mouse_multi_led_blink_count +: 002960 p_mouse_multi_led_blink_count_no_limited: +0x744 002961 fetch 1 ,mem_mouse_multi_led_state +0x745 002962 beq on ,p_mouse_multi_led_off +0x746 002963 beq off ,p_mouse_multi_led_on +0x747 002964 rtn +: 002966 p_mouse_multi_led_on: +0x748 002967 jam on ,mem_mouse_multi_led_state +0x749 002968 fetch 1 ,mem_device_flag +0x74a 002969 beq 1 ,p_mouse_multi_24g_led_on +0x74b 002970 beq 2 ,p_mouse_multi_bt_led_on +0x74c 002971 branch p_mouse_multi_ble_led_on +: 002972 p_mouse_multi_bt_led_on: +0x74d 002973 branch mouse_device2_led_on +: 002975 p_mouse_multi_24g_led_on: +0x74e 002976 branch mouse_device1_led_on +: 002978 p_mouse_multi_ble_led_on: +0x74f 002979 branch mouse_device3_led_on +: 002981 p_mouse_discovey_led_blink_off: +0x750 002982 fetch 1 ,mem_mouse_multi_led_on_timer +0x751 002983 nrtn blank +0x752 002984 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x753 002985 nrtn blank +: 002986 p_mouse_multi_led_blink_off: +0x754 002987 setarg 0 +0x755 002988 store 3 ,mem_mouse_multi_led_blink_timer +: 002989 p_mouse_multi_led_off: +0x756 002990 fetch 1 ,mem_mouse_multi_led_blink_count +0x757 002991 nbranch p_mouse_multi_led_off_wait_blink_over ,blank +0x758 002992 jam 0 ,mem_mouse_multi_led_blink_enable +0x759 002993 jam 0 ,mem_mouse_multi_led_type +: 002994 p_mouse_multi_led_off_wait_blink_over: +0x75a 002995 jam 0 ,mem_mouse_multi_led_on_timer +0x75b 002996 jam off ,mem_mouse_multi_led_state +0x75c 003000 call mouse_devce_led_off + 1 +0x75d 003002 fetch 1 ,mem_mouse_multi_led_blink_count +0x75e 003003 nrtn blank +0x75f 003005 fetch 1 ,mem_mouse_connected_state +0x760 003006 nbranch app_enter_hibernate ,blank +0x761 003007 rtn +: 003009 p_mouse_dpi_multi_led_blink: +0x762 003010 jam 3 ,mem_mouse_multi_led_blink_timer_init +0x763 003011 jam 1 ,mem_mouse_multi_led_blink_count_limited +0x764 003012 branch p_mouse_multi_led_blink_enable +: 003014 p_mouse_mode_bt_device_multi_led_on: +: 003015 p_mouse_mode_24g_device_multi_led_on: +0x765 003016 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x766 003017 jam on ,mem_mouse_multi_led_blink_enable +0x767 003018 jam multi_led_on ,mem_mouse_multi_led_type +0x768 003019 jam 0 ,mem_mouse_multi_led_on_timer +0x769 003020 rtn +: 003022 p_mouse_discovery_multi_led_blink: +0x76a 003023 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0x76b 003024 jam 3 ,mem_mouse_multi_led_blink_timer_init +0x76c 003025 jam 0 ,mem_mouse_multi_led_blink_count_limited +0x76d 003026 jam 1 ,mem_mouse_multi_led_blink_count +: 003027 p_mouse_multi_led_blink_enable: +0x76e 003028 jam 5 ,mem_mouse_multi_led_blink_timer +0x76f 003029 jam on ,mem_mouse_multi_led_blink_enable +0x770 003030 jam multi_led_blink ,mem_mouse_multi_led_type +0x771 003031 rtn +: 003033 power_ctrl_pac_succ_cnt_init: +0x772 003034 jam 1 ,mem_power_ctrl_level +0x773 003035 jam 0 ,mem_power_ctrl_pac_succ_cnt +0x774 003036 rtn +: 003037 power_ctrl_pac_succ_incrs: +0x775 003038 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x776 003039 increase 1 ,pdata +0x777 003040 store 1 ,mem_power_ctrl_pac_succ_cnt +0x778 003041 rtn +: 003043 power_ctrl_pac_succ_cnt_reinit: +0x779 003044 jam 3 ,mem_power_ctrl_pac_succ_cnt +0x77a 003045 rtn +: 003047 power_ctrl_txpower_decrs_check: +0x77b 003048 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x77c 003049 rtnne 32 +0x77d 003050 jam 0 ,mem_power_ctrl_pac_succ_cnt +: 003051 power_ctrl_txpower_decrs: +0x77e 003052 fetcht 1 ,mem_rssi_avg_received +0x77f 003053 setarg rssi_dis_min_24g +0x780 003054 bmark1 mark_24g ,power_ctrl_txpower_decrs_next +0x781 003055 setarg rssi_dis_min_ble +: 003056 power_ctrl_txpower_decrs_next: +0x782 003057 isub temp ,null +0x783 003058 nrtn positive +0x784 003059 fetch 1 ,mem_power_ctrl_level +0x785 003060 beq 0 ,power_ctrl_decrs_level0 +0x786 003061 increase -1 ,pdata +0x787 003062 store 1 ,mem_power_ctrl_level +0x788 003063 beq 0 ,power_ctrl_decrs_level0 +: 003064 power_ctrl_decrs_level1: +: 003065 power_ctrl_incrs_level1: +0x789 003066 jam tx_power_0db ,mem_tx_power +0x78a 003067 rtn +: 003069 power_ctrl_txpower_incrs_force: +0x78b 003070 jam 0 ,mem_power_ctrl_pac_succ_cnt +: 003071 power_ctrl_txpower_incrs: +0x78c 003072 fetch 1 ,mem_power_ctrl_level +0x78d 003073 beq 2 ,power_ctrl_incrs_level2 +0x78e 003074 increase 1 ,pdata +0x78f 003075 store 1 ,mem_power_ctrl_level +0x790 003076 beq 1 ,power_ctrl_incrs_level1 +: 003077 power_ctrl_incrs_level2: +0x791 003078 jam tx_power_5db ,mem_tx_power +0x792 003079 rtn +: 003081 power_ctrl_decrs_level0: +0x793 003082 jam tx_power_f5db ,mem_tx_power +0x794 003083 rtn +: 003086 p_set_freq_tx: +0x795 003087 storet 1 ,mem_last_freq +0x796 003088 add temp ,0 ,rega +0x797 003089 call rf_write_freq +0x798 003090 setarg param_pll_setup +0x799 003091 call sleep +: 003092 p_rf_tx_enable: +0x79a 003093 jam 0x1 ,rfen_adc +0x79b 003094 jam 0x3c ,rfen_rx +0x79c 003095 jam 0xe0 ,rfen_tx +0x79d 003096 nop 10 +0x79e 003097 jam 0x01 ,rfen_mdm +0x79f 003098 jam 0x3d ,rfen_mdm +0x7a0 003099 nop 10 +0x7a1 003100 jam 0xb7 ,rfen_sn +0x7a2 003101 nop 10 +0x7a3 003102 jam 0x7d ,rfen_mdm +0x7a4 003103 fetch 1 ,mem_tx_power +0x7a5 003106 beq tx_power_5db ,p_set_tx_power_5db +0x7a6 003108 beq tx_power_f5db ,p_set_tx_power_f5db +0x7a7 003109 beq tx_power_pair ,p_set_tx_power_pair +: 003111 p_set_tx_power_0db: +0x7a8 003112 call p_rx_low_sens +0x7a9 003114 jam 0xd0 ,0x8955 +0x7aa 003115 jam 0xe0 ,0x8956 +0x7ab 003117 jam 0x6c ,0x8958 +0x7ac 003119 branch set_tx_power_0db +: 003131 p_set_tx_power_5db: +0x7ad 003133 jam 0xfb ,0x894c +0x7ae 003134 jam 0xef ,0x894d +0x7af 003135 jam 0xec ,0x894e +0x7b0 003136 jam 0x5e ,0x894f +0x7b1 003139 jam 0xd0 ,0x8955 +0x7b2 003140 jam 0xe0 ,0x8956 +0x7b3 003142 jam 0x3c ,0x8958 +0x7b4 003144 branch set_tx_power_5db +: 003156 p_set_tx_power_f5db: +0x7b5 003157 call p_rx_low_sens +0x7b6 003159 jam 0xd0 ,0x8955 +0x7b7 003160 jam 0xc0 ,0x8956 +0x7b8 003162 jam 0x6c ,0x8958 +0x7b9 003164 branch set_tx_power_f5db +: 003166 p_rx_low_sens: +0x7ba 003167 jam 0x5b ,0x894c +0x7bb 003168 jam 0x96 ,0x894d +0x7bc 003169 jam 0x2c ,0x894e +0x7bd 003170 jam 0x46 ,0x894f +0x7be 003171 rtn +: 003180 p_set_tx_power_pair: +0x7bf 003182 jam 0xc0 ,0x8956 +0x7c0 003183 jam 0xd0 ,0x8955 +0x7c1 003184 rtn +: 003186 p_shutdown_radio: +0x7c2 003187 force 8 ,radio_ctrl +0x7c3 003188 branch shutdown_radio + 1 +: 003197 p_zcode_entrance: +0x7c4 003198 fetcht 1 ,mem_zcode_temp_param0 +0x7c5 003199 rshift4 temp ,temp +0x7c6 003200 fetch 1 ,mem_zcode_current_number +0x7c7 003201 isub temp ,null +0x7c8 003202 branch p_zcode_run ,zero +0x7c9 003203 storet 1 ,mem_zcode_current_number +0x7ca 003204 increase 1 ,temp +0x7cb 003205 setarg zcode_buff_size +0x7cc 003206 imul32 temp ,temp +0x7cd 003207 fetch 3 ,mem_xip_flash_offset +0x7ce 003208 isub temp ,pdata +0x7cf 003210 fetcht 3 ,mem_flash_start_addr +0x7d0 003211 iadd temp ,pdata +0x7d1 003212 increase -5 ,pdata +0x7d2 003213 store 3 ,mem_flash_address +0x7d3 003215 call p_flash_release_deep_power_down +: 003216 p_zcode_read_loop: +0x7d4 003217 fetch 3 ,mem_flash_address +0x7d5 003218 arg zcode_buff_size ,temp +0x7d6 003219 arg mem_zcode_buff ,rega +0x7d7 003220 call spid_read_flash +0x7d8 003222 fetch 4 ,mem_zcode_buff +0x7d9 003223 fetcht 4 ,mem_zcode_head +0x7da 003224 isub temp ,null +0x7db 003225 nbranch p_zcode_read_loop ,zero +0x7dc 003227 call p_mouse_spi_init +0x7dd 003229 setarg mem_zcode_buff +0x7de 003230 store 2 ,mem_patch_ptr +0x7df 003231 jam zcode_code_size ,mem_patch_len +0x7e0 003232 call load_ucode +0x7e1 003233 setarg 0 +0x7e2 003234 store 4 ,mem_patch_ptr +: 003235 p_zcode_run: +0x7e3 003236 fetch 1 ,mem_zcode_temp_param0 +0x7e4 003237 branch p_zcode org 0x2000 -: 003198 start: -0x2000 003199 call lpmstate -: 003201 soft_reset: -0x2001 003202 bpatch patch00_0 ,mem_patch00 -0x2002 003203 clear_stack -0x2003 003204 call spi_ncs_gpio_init -0x2004 003205 call initialize_radio -0x2005 003206 call iicd_init_12m -0x2006 003207 call init_param -0x2007 003208 call l2cap_init -0x2008 003209 bpatch patch00_1 ,mem_patch00 -0x2009 003210 call rfcomm_init -0x200a 003211 call init_lmp -0x200b 003212 call ui_init -0x200c 003213 call app_init -0x200d 003214 ncall load_chip_option ,wake -0x200e 003215 bpatch patch00_2 ,mem_patch00 -0x200f 003216 call app_lpm_init ,wake -0x2010 003217 call publickey_init -0x2011 003218 call lpm_recover_clk ,wake -: 003219 main_loop: -0x2012 003220 bpatch patch00_3 ,mem_patch00 -0x2013 003221 call sp_calc_sequence -0x2014 003222 call sp_calc_sequence_256 -0x2015 003223 call sp_calc_sequence_256_check -0x2016 003224 call le_dispatch -0x2017 003225 bpatch patch00_4 ,mem_patch00 -0x2018 003226 call idle_dispatch -0x2019 003227 call app_process_idle -0x201a 003228 call inquiry_dispatch -0x201b 003229 call inquiry_scan_dispatch -0x201c 003230 call page_scan_dispatch -0x201d 003231 call connection_dispatch -0x201e 003232 call lpm_dispatch -0x201f 003233 call g24_dispatch -0x2020 003234 branch main_loop -: 003236 connection_dispatch: -0x2021 003237 call connection_incontext -0x2022 003238 rtnmark0 mark_context -0x2023 003239 set0 mark_context ,mark -0x2024 003240 call context_save -0x2025 003241 branch le_disable -: 003243 connection_incontext: -0x2026 003244 bpatch patch00_5 ,mem_patch00 -0x2027 003245 call context_search_insniff -0x2028 003246 nbranch connection_nosniff ,zero -0x2029 003247 call context_load -0x202a 003248 add rega ,coffset_mode ,contr -0x202b 003249 ifetch 1 ,contr -0x202c 003250 bbit1 mode_le ,le_conn_dispatch -0x202d 003251 bbit1 mode_master ,master_dispatch -0x202e 003252 branch slave_dispatch -: 003253 connection_nosniff: -0x202f 003254 call context_get_next -0x2030 003255 copy loopcnt ,null -0x2031 003256 rtn zero -0x2032 003257 call context_load -0x2033 003258 fetch 1 ,mem_state -0x2034 003259 bbit1 state_inpage ,master_page -0x2035 003260 fetch 1 ,mem_mode -0x2036 003261 bbit1 mode_master ,master_dispatch -0x2037 003262 branch slave_dispatch -: 003270 idle_dispatch: -0x2038 003271 fetch 1 ,mem_hci_cmd -0x2039 003272 rtn blank -0x203a 003273 beq hci_cmd_inquiry ,idle_inquiry -0x203b 003274 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel -0x203c 003275 beq hci_cmd_remote_name_req ,idle_remote_name_req -0x203d 003276 beq hci_cmd_create_conn ,idle_create_conn -0x203e 003277 beq hci_cmd_le_create_conn ,idle_le_create_conn -0x203f 003278 call context_search_conn_handle -0x2040 003279 rtn zero -0x2041 003280 call context_search_plap -0x2042 003281 rtn zero -: 003282 idle_exit: -0x2043 003283 jam 0 ,mem_hci_cmd -0x2044 003284 rtn -: 003286 idle_le_create_conn: -0x2045 003287 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn -0x2046 003288 jam 0 ,mem_hci_cmd -0x2047 003289 rtn -: 003291 idle_inquiry: -0x2048 003292 set1 mark_inquiry_on ,mark -0x2049 003293 set0 mark_inquiry_trainb ,mark -0x204a 003294 jam param_ninquiry ,mem_ninqy_index -0x204b 003295 jam 31 ,mem_nfreq_index_inq -0x204c 003296 branch idle_exit -: 003298 idle_inquiry_cancel: -0x204d 003299 set0 mark_inquiry_on ,mark -0x204e 003300 force 0 ,stop_watch -0x204f 003301 branch idle_exit -: 003303 idle_remote_name_req: -0x2050 003304 call context_search_plap -0x2051 003305 rtn zero -0x2052 003306 force lmp_name_req ,temp -0x2053 003307 jam 5 ,mem_nameres_cnt -0x2054 003308 branch idle_start_page -: 003310 idle_create_conn: -0x2055 003311 bpatch patch00_6 ,mem_patch00 -: 003312 idle_create_conn_device: -0x2056 003313 fetch 6 ,mem_hci_plap -0x2057 003314 branch idle_exit ,blank -0x2058 003315 jam reconnect_hid ,memui_reconnect_mode -0x2059 003317 jam conn_sm_wait_features_res ,mem_conn_sm -0x205a 003318 branch idle_create_conn_cont -: 003320 idle_create_conn_cont: -0x205b 003321 force lmp_version_req ,temp -: 003322 idle_start_page: -0x205c 003323 bpatch patch00_7 ,mem_patch00 -0x205d 003324 fetch 1 ,mem_page_mode -0x205e 003325 branch idle_page_mode_r0 ,blank -0x205f 003326 lshift3 pdata ,pdata -0x2060 003327 lshift4 pdata ,pdata -0x2061 003328 increase -1 ,pdata -: 003329 idle_page_mode_r0: -0x2062 003330 store 1 ,mem_npage -0x2063 003331 store 1 ,mem_npage_index -0x2064 003332 jam 31 ,mem_nfreq_index_page -0x2065 003333 set0 mark_page_trainb ,mark -0x2066 003334 call context_new -0x2067 003335 nbranch idle_page_fail ,zero -0x2068 003336 call get_free_amaddr -0x2069 003337 store 1 ,mem_amaddr -0x206a 003338 storet 1 ,mem_lmo_opcode2 -0x206b 003339 fetch 6 ,mem_hci_plap -0x206c 003340 store 6 ,mem_plap -0x206d 003341 bpatch patch01_0 ,mem_patch01 -0x206e 003342 call timer_reinit -0x206f 003343 force 0 ,pdata -0x2070 003344 compare lmp_name_req ,temp ,0xff -0x2071 003345 nsetflag true ,state_init_seq ,pdata -0x2072 003346 set1 state_inpage ,pdata -0x2073 003347 store 1 ,mem_state -0x2074 003348 jam bt_evt_reconn_started ,mem_fifo_temp -0x2075 003349 call ui_ipc_send_event -0x2076 003350 force 0 ,pdata -0x2077 003351 setflag true ,smap_name_req ,pdata -0x2078 003352 store 1 ,mem_state_map -0x2079 003353 setarg 0 -0x207a 003354 set1 mode_master ,pdata -0x207b 003355 store 1 ,mem_mode -0x207c 003356 enable master -0x207d 003357 call context_save -0x207e 003358 disable master -0x207f 003359 force page_length_timer ,queue -0x2080 003360 fetch 2 ,mem_page_to -0x2081 003361 call timer_init -0x2082 003362 branch idle_exit -: 003363 idle_page_fail: -0x2083 003364 bpatch patch01_1 ,mem_patch01 -0x2084 003365 fetch 6 ,mem_hci_plap -0x2085 003366 store 6 ,mem_plap -0x2086 003367 compare lmp_name_req ,temp ,0xff -0x2087 003368 branch idle_name_fail ,true -0x2088 003369 branch idle_exit -: 003370 idle_name_fail: -0x2089 003371 arg mem_tmp_buffer ,contw -0x208a 003372 arg 8 ,loopcnt -0x208b 003373 call memset0 -0x208c 003374 jam bt_evt_reconn_failed ,mem_fifo_temp -0x208d 003375 call ui_ipc_send_event -0x208e 003376 branch idle_exit -: 003383 inquiry_dispatch: -0x208f 003384 rtnmark0 mark_inquiry_on -0x2090 003385 force inquiry_length_timer ,queue -0x2091 003386 call timer_check -0x2092 003387 nsetflag blank ,mark_inquiry_on ,mark -0x2093 003388 nbranch inquiry_start ,blank -0x2094 003389 rtn -: 003393 inquiry_start: -0x2095 003394 bpatch patch01_2 ,mem_patch01 -0x2096 003395 fetcht 2 ,mem_inq_window -0x2097 003396 force 4 ,queue -0x2098 003397 call sniff_check_window -0x2099 003398 rtn user -0x209a 003399 call afh_clear -0x209b 003400 force 0 ,freq_mode -: 003401 inquiry_restart: -0x209c 003402 rtn timeout -0x209d 003403 set0 mark_fhs_already_good ,mark -0x209e 003404 set0 mark_fhs_eir ,mark -: 003405 inquiry_rx_restart: -0x209f 003406 add clkn_bt ,1 ,bt_clk -0x20a0 003407 isolate1 mark_inquiry_trainb ,mark -0x20a1 003408 setflag true ,2 ,freq_mode -0x20a2 003409 compare 0x00 ,bt_clk ,0x02 -0x20a3 003410 nbranch inquiry_receive ,true -: 003412 inquiry_transmit: -0x20a4 003413 bpatch patch01_3 ,mem_patch01 -0x20a5 003414 fetch 1 ,mem_inquiry_transmit -0x20a6 003415 increase 1 ,pdata -0x20a7 003416 store 1 ,mem_inquiry_transmit -0x20a8 003417 call fetch_giac -0x20a9 003418 call tx_radio_freq -0x20aa 003419 call fetch_diac -0x20ab 003420 call start_transmitter -0x20ac 003421 call start_tx_native -0x20ad 003422 call send_access_word -0x20ae 003423 call end_of_packet -0x20af 003424 call inquiry_check_train -0x20b0 003425 branch inquiry_restart -: 003427 inquiry_check_train: -0x20b1 003428 bpatch patch01_4 ,mem_patch01 -0x20b2 003429 fetch 1 ,mem_nfreq_index_inq -0x20b3 003430 increase -1 ,pdata -0x20b4 003431 store 1 ,mem_nfreq_index_inq -0x20b5 003432 rtn positive -0x20b6 003433 jam 31 ,mem_nfreq_index_inq -0x20b7 003434 fetch 1 ,mem_ninqy_index -0x20b8 003435 increase -1 ,pdata -0x20b9 003436 store 1 ,mem_ninqy_index -0x20ba 003437 rtn positive -0x20bb 003438 setflip mark_inquiry_trainb ,mark -0x20bc 003439 jam param_ninquiry ,mem_ninqy_index -0x20bd 003440 rtn -: 003442 inquiry_receive: -0x20be 003443 bpatch patch01_5 ,mem_patch01 -0x20bf 003444 call fetch_giac -0x20c0 003445 call rx_radio_freq -0x20c1 003446 call fetch_diac -0x20c2 003447 call start_rx_native -0x20c3 003448 call start_receiver -0x20c4 003449 call wait_access_clkn_rt -0x20c5 003450 branch inquiry_sync ,sync -0x20c6 003451 call inquiry_check_train -0x20c7 003452 branch inquiry_rx_restart -: 003453 inquiry_sync: -0x20c8 003454 bpatch patch01_6 ,mem_patch01 -0x20c9 003455 call save_rssi -0x20ca 003456 call scan_mode_whiten -0x20cb 003457 call receive_packet_whitened -0x20cc 003458 set0 mark_rxbuf_inuse ,mark -0x20cd 003459 rtnmark0 mark_fhs_already_good -: 003460 inquiry_receive_rtn: -0x20ce 003461 bpatch patch01_7 ,mem_patch01 -: 003462 inquiry_receive_eir_rtn: -0x20cf 003463 fetch 1 ,mem_inquiry_rcv -0x20d0 003464 increase 1 ,pdata -0x20d1 003465 store 1 ,mem_inquiry_rcv -0x20d2 003466 rtn -: 003474 master_page: -0x20d3 003475 bpatch patch02_0 ,mem_patch02 -0x20d4 003476 enable master -0x20d5 003477 enable clknt -0x20d6 003478 fetch 2 ,mem_page_interval -0x20d7 003479 branch master_page_no_interval ,blank -0x20d8 003480 force page_interval_timer ,queue -0x20d9 003481 call timer_check -0x20da 003482 nrtn blank -: 003483 master_page_no_interval: -0x20db 003484 bpatch patch02_1 ,mem_patch02 -0x20dc 003485 fetcht 2 ,mem_page_window -0x20dd 003486 force 40 ,queue -0x20de 003487 call sniff_check_window -0x20df 003488 branch page_exit ,user -0x20e0 003489 force page_length_timer ,queue -0x20e1 003490 call timer_check -0x20e2 003491 nbranch page_start ,blank -0x20e3 003492 fetch 1 ,mem_state_map -0x20e4 003493 bbit1 smap_name_req ,master_npage_timeout -0x20e5 003494 branch master_page_timeout -: 003495 master_npage_timeout: -0x20e6 003496 arg mem_tmp_buffer ,contw -0x20e7 003497 arg 8 ,loopcnt -0x20e8 003498 call memset0 -: 003499 master_page_timeout: -0x20e9 003500 bpatch patch02_2 ,mem_patch02 -0x20ea 003501 jam 0 ,mem_state -0x20eb 003502 call init_lmp_work -0x20ec 003503 jam 0 ,memui_reconnect_mode -0x20ed 003504 jam bt_evt_reconn_page_timeout ,mem_fifo_temp -0x20ee 003505 call ui_ipc_send_event -0x20ef 003506 branch page_exit -: 003508 page_start: -0x20f0 003509 bpatch patch02_3 ,mem_patch02 -0x20f1 003510 force 0 ,timeup -0x20f2 003511 until clkn_rt ,meet -0x20f3 003512 fetch 1 ,mem_page_clk -0x20f4 003513 increase -1 ,pdata -0x20f5 003514 ixor clkn_bt ,pdata -0x20f6 003515 compare 0 ,pdata ,3 -0x20f7 003516 nbranch page_start ,true -0x20f8 003517 deposit am_addr -0x20f9 003518 store 1 ,mem_fhs_am_addr -0x20fa 003519 force 0 ,n_tx_slot -0x20fb 003520 force 0 ,freq_mode -: 003522 page_restart: -0x20fc 003523 bpatch patch02_4 ,mem_patch02 -0x20fd 003524 branch page_exit ,timeout -0x20fe 003525 call fetch_page_bt_adr -0x20ff 003526 arg param_rf_setup ,timeup -0x2100 003527 until clkn_rt ,meet -: 003528 page_rx_restart: -0x2101 003529 bpatch patch02_5 ,mem_patch02 -0x2102 003530 fetch 4 ,mem_page_clk -0x2103 003531 iforce bt_clk -0x2104 003532 increase 1 ,pdata -0x2105 003533 store 4 ,mem_page_clk -0x2106 003534 isolate1 mark_page_trainb ,mark -0x2107 003535 setflag true ,2 ,freq_mode -0x2108 003536 compare 0x00 ,bt_clk ,0x02 -0x2109 003537 nbranch page_receive ,true -0x210a 003538 fetch 1 ,mem_page_transmit -0x210b 003539 increase 1 ,pdata -0x210c 003540 store 1 ,mem_page_transmit -0x210d 003541 call tx_radio_freq -0x210e 003542 call start_transmitter -0x210f 003543 call start_tx_native -0x2110 003544 call send_access_word -0x2111 003545 call end_of_packet -0x2112 003546 call page_check_train -0x2113 003547 branch page_restart -: 003548 page_exit: -0x2114 003549 bpatch patch02_6 ,mem_patch02 -0x2115 003550 disable master -0x2116 003551 fetch 2 ,mem_page_interval -0x2117 003552 rtn blank -0x2118 003553 force page_interval_timer ,queue -0x2119 003554 branch timer_init -: 003556 page_check_train: -0x211a 003557 bpatch patch02_7 ,mem_patch02 -0x211b 003558 fetch 1 ,mem_nfreq_index_page -0x211c 003559 increase -1 ,pdata -0x211d 003560 store 1 ,mem_nfreq_index_page -0x211e 003561 rtn positive -0x211f 003562 jam 31 ,mem_nfreq_index_page -0x2120 003563 fetch 1 ,mem_npage_index -0x2121 003564 increase -1 ,pdata -0x2122 003565 store 1 ,mem_npage_index -0x2123 003566 rtn positive -0x2124 003567 setflip mark_page_trainb ,mark -0x2125 003568 fetch 1 ,mem_npage -0x2126 003569 store 1 ,mem_npage_index -0x2127 003570 rtn -: 003572 page_receive: -0x2128 003573 bpatch patch03_0 ,mem_patch03 -0x2129 003574 call rx_radio_freq -0x212a 003575 call start_rx_native -0x212b 003576 call start_receiver -0x212c 003577 call wait_access_clkn_rt -0x212d 003578 branch page_sync ,sync -0x212e 003579 call page_check_train -0x212f 003580 branch page_rx_restart -: 003581 page_sync: -0x2130 003582 call end_of_packet -0x2131 003583 fetch 1 ,mem_page_rcv -0x2132 003584 increase 1 ,pdata -0x2133 003585 store 1 ,mem_page_rcv -0x2134 003586 force 0 ,stop_watch -0x2135 003587 fetch 4 ,mem_page_clk -: 003588 page_send_fhs: -0x2136 003589 bpatch patch03_1 ,mem_patch03 -0x2137 003590 call rf_setup_time_master_slot -0x2138 003591 call fetch_page_bt_adr -0x2139 003592 increase 1 ,n_tx_slot -: 003593 page_send_fhs_continue: -0x213a 003594 and_into 0x1fd ,bt_clk -0x213b 003595 and_into 0x1fc ,freq_mode -0x213c 003596 call tx_radio_freq -0x213d 003597 call start_transmitter -0x213e 003598 call start_tx_native -0x213f 003599 call send_access_word -0x2140 003600 deposit clkn_bt -0x2141 003601 store 4 ,mem_clkn_bt -0x2142 003602 force 0 ,am_addr -0x2143 003603 force type_fhs ,type -0x2144 003604 call scan_mode_whiten -0x2145 003605 call transmit_packet_whitened -: 003606 page_wait_fhs_reply: -0x2146 003607 bpatch patch03_2 ,mem_patch03 -0x2147 003608 call rf_setup_time_slave_slot -0x2148 003609 or_into 0x02 ,bt_clk -0x2149 003610 and_into 0x1fc ,freq_mode -0x214a 003611 call rx_radio_freq -0x214b 003612 call start_rx_native -0x214c 003613 call start_receiver -0x214d 003614 call wait_access_clkn_rt -0x214e 003615 call end_of_packet ,sync -0x214f 003616 branch page_wait_fhs_reply_ok ,sync -0x2150 003617 fetch 1 ,mem_fhs_wait_counter -0x2151 003618 branch page_restart ,blank -0x2152 003619 increase -1 ,pdata -0x2153 003620 store 1 ,mem_fhs_wait_counter -0x2154 003621 branch page_send_fhs -: 003623 page_wait_fhs_reply_ok: -0x2155 003624 bpatch patch03_3 ,mem_patch03 -0x2156 003625 fetch 1 ,mem_page_rcv_fhs -0x2157 003626 increase 1 ,pdata -0x2158 003627 store 1 ,mem_page_rcv_fhs -0x2159 003628 call prepare_newconn -: 003629 master_newconn_loop: -0x215a 003630 call master_newconn_once -0x215b 003631 branch newconn_poll_responded ,sync -0x215c 003632 call new_conn_timeout -0x215d 003633 nbranch master_newconn_loop ,blank -0x215e 003634 branch page_restart -: 003636 newconn_poll_responded: -0x215f 003637 bpatch patch03_4 ,mem_patch03 -0x2160 003638 fetch 1 ,mem_state -0x2161 003639 set0 state_inpage ,pdata -0x2162 003640 store 1 ,mem_state -0x2163 003641 call newconn_init -0x2164 003642 disable master -0x2165 003643 rtn -: 003646 master_dispatch: -0x2166 003647 bpatch patch03_5 ,mem_patch03 -0x2167 003648 enable master -0x2168 003649 enable clknt -0x2169 003650 call role_switch_master -0x216a 003651 rtn user -0x216b 003652 call check_bt_disabled -0x216c 003653 call rf_setup_time_master_slot -0x216d 003654 add clkn_bt ,1 ,bt_clk -0x216e 003655 call fetch_self_bt_adr -0x216f 003656 force 0x03 ,freq_mode -0x2170 003657 call scheduler_tx_l2cap_pkt -0x2171 003658 call prepare_tx -0x2172 003659 call tx_radio_freq -0x2173 003660 call start_transmitter -0x2174 003661 call start_tx_native -0x2175 003662 call send_access_word -0x2176 003663 call transmit_packet -: 003664 master_loop: -0x2177 003665 bpatch patch03_6 ,mem_patch03 -0x2178 003666 call parse_lmp -0x2179 003667 call master_conn_recv_packet -0x217a 003668 nbranch master_notmatch ,match -0x217b 003669 call supervision_flush -0x217c 003670 call parse_l2cap -0x217d 003671 fetch 1 ,mem_master_rcvcnt -0x217e 003672 increase 1 ,pdata -0x217f 003673 store 1 ,mem_master_rcvcnt -: 003674 master_notmatch: -0x2180 003675 bpatch patch03_7 ,mem_patch03 -0x2181 003676 call scheduler_process -0x2182 003677 call check_master_disconnect -0x2183 003678 nrtn master -0x2184 003679 call check_attempt -0x2185 003680 nbranch master_attempt ,blank -: 003681 master_exit: -0x2186 003682 disable master -0x2187 003683 rtn -: 003685 master_attempt: -0x2188 003686 call prepare_tx -0x2189 003687 call master_conn_send_packet -0x218a 003688 branch master_loop -: 003691 check_master_disconnect: -0x218b 003692 branch check_master_match ,match -0x218c 003693 call supervision_update -0x218d 003694 branch master_disconnect ,positive -: 003695 check_master_match: -0x218e 003696 call check_disconnect_timeout -0x218f 003697 nbranch master_disconnect ,user -0x2190 003698 fetch 1 ,mem_state_map -0x2191 003699 rtnbit0 smap_name_req -0x2192 003700 rtnbit1 smap_name_res -0x2193 003701 fetch 1 ,mem_op -0x2194 003702 rtnbit1 op_disconn -0x2195 003703 call conn_timer_expired -0x2196 003704 nrtn blank -0x2197 003705 fetch 1 ,mem_nameres_cnt -0x2198 003706 increase -1 ,pdata -0x2199 003707 store 1 ,mem_nameres_cnt -0x219a 003708 nrtn blank -0x219b 003709 branch lmp_disconnect -: 003711 master_disconnect: -0x219c 003712 bpatch patch04_0 ,mem_patch04 -0x219d 003713 call quit_connection -0x219e 003714 disable master -0x219f 003715 fetch 1 ,mem_state_map -0x21a0 003716 bbit1 smap_name_req ,master_name_disconnect -0x21a1 003717 rtn -: 003719 master_name_disconnect: -0x21a2 003720 fetch 1 ,mem_state_map -0x21a3 003721 rtnbit1 smap_name_res -: 003722 master_name_error: -0x21a4 003723 arg mem_tmp_buffer ,contw -0x21a5 003724 arg 8 ,loopcnt -0x21a6 003725 branch memset0 -: 003727 check_disconnect_timeout: -0x21a7 003728 bpatch patch04_1 ,mem_patch04 -0x21a8 003729 enable user -0x21a9 003730 fetch 1 ,mem_op -0x21aa 003731 rtnbit0 op_disconn -0x21ab 003732 call conn_timer_expired -0x21ac 003733 nrtn blank -0x21ad 003734 branch disable_user -: 003736 conn_timer_expired: -0x21ae 003737 fetch 1 ,mem_conn_timer -0x21af 003738 increase -1 ,pdata -0x21b0 003739 store 1 ,mem_conn_timer -0x21b1 003740 rtn -: 003742 linkkey_ready: -0x21b2 003743 bpatch patch04_2 ,mem_patch04 -0x21b3 003744 fetch 1 ,mem_state -0x21b4 003745 bbit1 state_linkkey ,linkkey_set -0x21b5 003746 fetch 1 ,mem_pairing_auth -0x21b6 003747 branch linkkey_set ,blank -0x21b7 003748 jam defalt_pairing_auth ,mem_pairing_auth -0x21b8 003749 jam bt_evt_linkkey_generate ,mem_fifo_temp -0x21b9 003750 call ui_ipc_send_event -0x21ba 003751 branch linkkey_set -: 003752 linkkey_set: -0x21bb 003753 bpatch patch04_3 ,mem_patch04 -0x21bc 003754 call context_traverse_linkkey -0x21bd 003755 fetch 1 ,mem_state -0x21be 003756 set1 state_linkkey ,pdata -0x21bf 003757 store 1 ,mem_state -0x21c0 003758 jam 1 ,mem_link_key_exists -0x21c1 003759 fetch 1 ,mem_conn_sm -0x21c2 003760 bne conn_sm_pairing ,linkkey_set_continue -: 003761 linkkey_set_continue: -0x21c3 003762 rtn -: 003764 generate_linkkey_continue: -0x21c4 003765 jam pairing_auth ,mem_pairing_auth -: 003766 clear_linkstate: -0x21c5 003767 fetch 1 ,mem_state -0x21c6 003768 set0 state_linkkey ,pdata -0x21c7 003769 store 1 ,mem_state -0x21c8 003770 rtn -: 003774 role_switch_check: -0x21c9 003775 bpatch patch04_4 ,mem_patch04 -0x21ca 003776 disable user -0x21cb 003777 fetch 2 ,mem_tsniff -0x21cc 003778 arg 0xffff ,temp -0x21cd 003779 isub temp ,null -0x21ce 003780 nrtn zero -0x21cf 003781 fetch 4 ,mem_sniff_anchor -0x21d0 003782 branch role_switch_clkn ,clknt -0x21d1 003783 isub clke_bt ,pdata -0x21d2 003784 branch role_switch_clke -: 003785 role_switch_clkn: -0x21d3 003786 isub clkn_bt ,pdata -: 003787 role_switch_clke: -0x21d4 003788 sub pdata ,4 ,null -0x21d5 003789 nrtn positive -0x21d6 003790 force 0 ,pdata -0x21d7 003791 store 2 ,mem_tsniff -0x21d8 003792 branch enable_user -: 003796 role_switch_prepare: -0x21d9 003797 copy pdata ,temp -0x21da 003798 bpatch patch04_5 ,mem_patch04 -0x21db 003799 storet 4 ,mem_sniff_anchor -: 003800 role_switch_prepare0: -0x21dc 003801 jam switch_flag_accept ,mem_switch_flag -0x21dd 003802 setarg 0xffff -0x21de 003803 store 2 ,mem_tsniff -0x21df 003804 jam 1 ,mem_sniff_attempt -0x21e0 003805 rtn -: 003808 role_switch_master: -0x21e1 003809 bpatch patch04_6 ,mem_patch04 -0x21e2 003810 call role_switch_check -0x21e3 003811 nrtn user -0x21e4 003812 disable user -0x21e5 003813 jam param_newconnto ,mem_newconnto_counter -0x21e6 003814 set0 mark_fhs_already_good ,mark -: 003815 roles_waitfhs_loop: -0x21e7 003816 call rf_setup_time_master_slot -0x21e8 003817 call master_recv_packet -0x21e9 003818 bmark1 mark_fhs_already_good ,roles_replyto_fhs -0x21ea 003819 call new_conn_timeout -0x21eb 003820 nbranch roles_waitfhs_loop ,blank -: 003821 role_switch_fail_master: -0x21ec 003822 bpatch patch04_7 ,mem_patch04 -0x21ed 003823 disable user -0x21ee 003824 deposit clkn_bt -0x21ef 003825 store 4 ,mem_next_btclk -0x21f0 003826 enable clknt -0x21f1 003827 enable master -0x21f2 003828 jam bt_evt_switch_fail_master ,mem_fifo_temp -0x21f3 003829 branch ui_ipc_send_event -: 003831 roles_replyto_fhs: -0x21f4 003832 bpatch patch05_0 ,mem_patch05 -0x21f5 003833 call rf_setup_time_slave_slot -0x21f6 003834 arg type_id ,type -0x21f7 003835 call master_send_packet -0x21f8 003836 disable clknt -0x21f9 003837 disable master -0x21fa 003838 call apply_switch_clke -0x21fb 003839 call prepare_newconn -: 003840 roles_newconns_loop: -0x21fc 003841 bpatch patch05_1 ,mem_patch05 -0x21fd 003842 call slave_newconn_once -0x21fe 003843 branch roles_newconns_responded ,match -0x21ff 003844 call new_conn_timeout -0x2200 003845 nbranch roles_newconns_loop ,blank -0x2201 003846 branch role_switch_fail_master -: 003847 roles_newconns_responded: -0x2202 003848 fetch 1 ,mem_mode -0x2203 003849 set0 mode_master ,pdata -0x2204 003850 store 1 ,mem_mode -0x2205 003851 call supervision_flush -0x2206 003852 call calc_clke_offset -0x2207 003853 enable user -0x2208 003854 jam bt_evt_switch_success_master ,mem_fifo_temp -0x2209 003855 branch ui_ipc_send_event -: 003860 context_load: -0x220a 003861 bpatch patch05_2 ,mem_patch05 -0x220b 003862 set1 mark_context ,mark -0x220c 003863 deposit rega -0x220d 003864 store 2 ,mem_context_ptr -0x220e 003865 force context_size ,loopcnt -0x220f 003866 arg mem_le_state ,contw -0x2210 003867 add rega ,coffset_mode ,contr -0x2211 003868 ifetch 1 ,contr -0x2212 003869 copy rega ,contr -0x2213 003870 bbit1 mode_le ,memcpy -0x2214 003871 arg mem_state ,contw -0x2215 003872 call memcpy -0x2216 003873 disable attempt -0x2217 003874 fetch 1 ,mem_amaddr -0x2218 003875 iforce am_addr -0x2219 003876 jam 1 ,mem_current_sniff_attempt -0x221a 003877 branch context_load_master ,master -0x221b 003878 jam 1 ,mem_current_sniff_attempt -: 003879 context_load_master: -0x221c 003880 fetch 1 ,mem_state -0x221d 003881 rtnbit0 state_insniff -0x221e 003882 fetch 1 ,mem_sniff_attempt -0x221f 003883 store 1 ,mem_current_sniff_attempt -0x2220 003884 fetch 1 ,mem_sniff_timeout -0x2221 003885 store 1 ,mem_current_sniff_timeout -0x2222 003886 rtn -: 003888 context_save: -0x2223 003889 bpatch patch05_3 ,mem_patch05 -0x2224 003890 fetch 2 ,mem_context_ptr -0x2225 003891 iforce contw -0x2226 003892 force context_size ,loopcnt -0x2227 003893 arg mem_le_state ,contr -0x2228 003894 branch memcpy ,le -0x2229 003895 arg mem_state ,contr -0x222a 003896 branch memcpy -: 003900 context_get_next: -0x222b 003901 arg context_num ,loopcnt -0x222c 003902 fetcht 1 ,mem_current_context -: 003903 context_get_next_loop: -0x222d 003904 increase 1 ,temp -0x222e 003905 compare context_num ,temp ,0xff -0x222f 003906 nbranch context_get_next_cont ,true -0x2230 003907 arg 0 ,temp -: 003908 context_get_next_cont: -0x2231 003909 storet 1 ,mem_current_context -0x2232 003910 mul32 temp ,context_size ,pdata -0x2233 003911 arg mem_context ,rega -0x2234 003912 iadd rega ,rega -0x2235 003913 ifetch 1 ,rega -0x2236 003914 bbit1 state_insniff ,context_get_next_sniff -0x2237 003915 rtnbit1 state_inconn -0x2238 003916 rtnbit1 state_inpage -: 003917 context_get_next_sniff: -0x2239 003918 loop context_get_next_loop -0x223a 003919 rtn -: 003921 context_new: -0x223b 003922 bpatch patch05_4 ,mem_patch05 -0x223c 003923 arg context_search_empty ,regc -0x223d 003924 call context_search -0x223e 003925 nrtn zero -0x223f 003926 deposit rega -0x2240 003927 store 2 ,mem_context_ptr -0x2241 003928 force 0 ,null -0x2242 003929 rtn -: 003933 context_check_all_wack: -0x2243 003934 call check_esco_amaddr -0x2244 003935 branch context_check_esco_wack ,true -0x2245 003936 fetch 2 ,mem_context_ptr -0x2246 003937 add pdata ,coffset_arq ,contw -0x2247 003938 fetch 1 ,mem_arq -0x2248 003939 istore 1 ,contw -0x2249 003940 arg context_check_a_wack ,regc -0x224a 003941 branch context_search -: 003943 context_check_esco_wack: -0x224b 003944 fetch 1 ,mem_arq -0x224c 003945 isolate1 wack ,pdata -0x224d 003946 branch context_esco_wack ,true -0x224e 003947 force 1 ,null -0x224f 003948 rtn -: 003949 context_esco_wack: -0x2250 003950 force 0 ,null -0x2251 003951 rtn -: 003954 context_check_idle: -0x2252 003955 arg context_check_inconn ,regc -0x2253 003956 branch context_search -: 003958 context_traverse_linkkey: -0x2254 003959 fetcht 2 ,mem_context_ptr -0x2255 003960 arg context_traverse_clearkey ,regc -0x2256 003961 branch context_search -: 003965 context_search_conn_handle: -0x2257 003966 fetcht 1 ,mem_hci_conn_handle -: 003967 context_search_conn_handle2: -0x2258 003968 arg context_search_handle ,regc -0x2259 003969 branch context_search -: 003971 context_search_plap: -0x225a 003972 bpatch patch05_5 ,mem_patch05 -0x225b 003973 fetcht 6 ,mem_hci_plap -: 003974 context_search_plap2: -0x225c 003975 arg context_search_lap ,regc -0x225d 003976 branch context_search -: 003978 context_search_insniff: -0x225e 003979 arg context_search_sniff ,regc -0x225f 003980 branch context_search -: 003982 context_search_sniff_window: -0x2260 003983 arg context_search_window ,regc -: 003984 context_search: -0x2261 003985 bpatch patch05_6 ,mem_patch05 -0x2262 003986 arg mem_context ,rega -0x2263 003987 arg context_num ,loopcnt -: 003988 context_search_loop: -0x2264 003989 ifetch 1 ,rega -0x2265 003990 copy regc ,pc -: 003991 context_search_next: -0x2266 003992 increase context_size ,rega -0x2267 003993 loop context_search_loop -0x2268 003994 force 1 ,null -0x2269 003995 rtn -: 003997 context_search_empty: -0x226a 003998 bbit1 state_inconn ,context_search_next -0x226b 003999 bbit1 state_inpage ,context_search_next -0x226c 004000 force 0 ,null -0x226d 004001 rtn -: 004003 context_search_lap: -0x226e 004004 bbit1 state_inpage ,context_search_lap_cont -0x226f 004005 bbit0 state_inconn ,context_search_next -: 004006 context_search_lap_cont: -0x2270 004007 add rega ,coffset_plap ,contr -0x2271 004008 ifetch 6 ,contr -0x2272 004009 isub temp ,null -0x2273 004010 rtn zero -0x2274 004011 branch context_search_next -: 004013 context_search_handle: -0x2275 004014 bbit0 state_inconn ,context_search_next -0x2276 004015 add rega ,coffset_conn_handle ,contr -0x2277 004016 ifetch 1 ,contr -0x2278 004017 isub temp ,null -0x2279 004018 rtn zero -0x227a 004019 branch context_search_next -: 004021 context_search_sniff: -0x227b 004022 bbit0 state_insniff ,context_search_next -: 004023 context_search_sniff_loop: -0x227c 004024 call context_get_anchor -0x227d 004025 call sign_pdata_temp -0x227e 004026 isub temp ,pdata -0x227f 004027 increase 1 ,pdata -0x2280 004028 branch context_search_sniff_miss ,positive -0x2281 004029 copy contr ,regb -0x2282 004030 store 9 ,mem_temp -0x2283 004031 fetch 1 ,mem_le_sc_calc -0x2284 004032 nbranch context_search_sniff_sc ,blank -0x2285 004033 fetch 9 ,mem_temp -0x2286 004034 copy regb ,contr -0x2287 004035 increase 5 ,pdata -0x2288 004036 branch context_search_meet1 -: 004037 context_search_sniff_sc: -0x2289 004038 fetch 9 ,mem_temp -0x228a 004039 copy regb ,contr -0x228b 004040 increase 20 ,pdata -: 004041 context_search_meet1: -0x228c 004042 nbranch context_search_next ,positive -: 004043 context_search_meet: -0x228d 004044 copy temp ,bt_clk -0x228e 004045 call context_next_anchor -0x228f 004046 force 0 ,null -0x2290 004047 rtn -: 004050 context_search_sniff_miss: -0x2291 004051 iforce regb -0x2292 004052 add rega ,coffset_tsniff ,contr -0x2293 004053 ifetch 2 ,contr -0x2294 004054 branch context_search_meet ,blank -0x2295 004055 call context_next_anchor -0x2296 004056 branch context_search_sniff_loop -: 004058 sign_pdata_temp: -0x2297 004059 rshift16 pdata ,timeup -0x2298 004060 rshift8 timeup ,timeup -0x2299 004061 branch sign_pdata_temp_p0 ,zero -0x229a 004062 compare 0xf ,timeup ,0xf -0x229b 004063 nrtn true -0x229c 004064 rshift16 temp ,timeup -0x229d 004065 rshift8 timeup ,timeup -0x229e 004066 nrtn zero -0x229f 004067 set1 28 ,temp -0x22a0 004068 rtn -: 004069 sign_pdata_temp_p0: -0x22a1 004070 rshift16 temp ,timeup -0x22a2 004071 rshift8 timeup ,timeup -0x22a3 004072 compare 0xf ,timeup ,0xf -0x22a4 004073 nrtn true -0x22a5 004074 set1 28 ,pdata -0x22a6 004075 rtn -: 004077 context_check_inconn: -0x22a7 004078 bbit0 state_inconn ,context_search_next -0x22a8 004079 force 0 ,null -0x22a9 004080 rtn -: 004082 context_check_a_wack: -0x22aa 004083 bbit0 state_inconn ,context_search_next -0x22ab 004084 add rega ,coffset_mode ,contr -0x22ac 004085 ifetch 1 ,contr -0x22ad 004086 bbit1 mode_le ,context_search_next -0x22ae 004087 add rega ,coffset_arq ,contr -0x22af 004088 ifetch 1 ,contr -0x22b0 004089 bbit0 wack ,context_search_next -0x22b1 004090 force 0 ,null -0x22b2 004091 rtn -: 004093 context_get_anchor: -0x22b3 004094 add rega ,coffset_mode ,contr -0x22b4 004095 ifetcht 1 ,contr -0x22b5 004096 deposit clkn_bt -0x22b6 004097 isolate1 mode_master ,temp -0x22b7 004098 add rega ,coffset_sniff_anchor ,contr -0x22b8 004099 ifetcht 4 ,contr -0x22b9 004100 rtn true -0x22ba 004101 add rega ,coffset_clk_offset ,contr -0x22bb 004102 ifetch 6 ,contr -0x22bc 004103 call calc_clke2 -0x22bd 004104 deposit clke_bt -0x22be 004105 rtn -: 004107 context_next_anchor: -0x22bf 004108 add rega ,coffset_tsniff ,contr -0x22c0 004109 add rega ,coffset_sniff_anchor ,contw -0x22c1 004110 ifetch 2 ,contr -0x22c2 004111 iadd temp ,timeup -0x22c3 004112 deposit timeup -0x22c4 004113 istore 4 ,contw -0x22c5 004114 branch le_context_nexthop -: 004117 context_search_window: -0x22c6 004118 bbit0 state_insniff ,context_search_next -0x22c7 004119 call context_get_anchor -0x22c8 004120 iadd stop_watch ,pdata -0x22c9 004121 iadd stop_watch ,pdata -0x22ca 004122 iadd queue ,pdata -0x22cb 004123 isub temp ,null -0x22cc 004124 nbranch context_search_next ,positive -0x22cd 004125 force 0 ,null -0x22ce 004126 rtn -: 004128 context_traverse_clearkey: -0x22cf 004129 bbit0 state_inconn ,context_search_next -0x22d0 004130 deposit temp -0x22d1 004131 isub rega ,null -0x22d2 004132 branch context_search_next ,null -0x22d3 004133 add rega ,coffset_mode ,contr -0x22d4 004134 ifetch 1 ,contr -0x22d5 004135 bbit1 mode_le ,context_search_next -0x22d6 004136 ifetch 1 ,rega -0x22d7 004137 set0 state_linkkey ,pdata -0x22d8 004138 istore 1 ,rega -0x22d9 004139 branch context_search_next -: 004142 master_conn_send_packet: -0x22da 004143 bpatch patch05_7 ,mem_patch05 -0x22db 004144 call rf_setup_time_master_slot -: 004145 master_send_packet: -0x22dc 004146 add clkn_bt ,1 ,bt_clk -0x22dd 004147 call fetch_self_bt_adr -0x22de 004148 force 0x03 ,freq_mode -0x22df 004149 call tx_radio_freq -0x22e0 004150 call start_transmitter -0x22e1 004151 call start_tx_native -0x22e2 004152 call send_access_word -0x22e3 004153 branch transmit_packet -: 004155 master_conn_recv_packet: -0x22e4 004156 bpatch patch06_0 ,mem_patch06 -0x22e5 004157 call rf_setup_time_slave_slot -: 004158 master_recv_packet: -0x22e6 004159 add clkn_bt ,1 ,bt_clk -0x22e7 004160 call fetch_self_bt_adr -0x22e8 004161 force 0x03 ,freq_mode -0x22e9 004162 call rx_radio_freq -0x22ea 004163 call init_rx_packet_flags -0x22eb 004164 call prep_crypt -0x22ec 004165 call start_rx_native -0x22ed 004166 call start_receiver -: 004167 master_rx_conn_finish_packet: -0x22ee 004168 call wait_access_clkn_rt -0x22ef 004169 nrtn sync -0x22f0 004170 call save_rssi -0x22f1 004171 branch receive_packet -: 004175 master_newconn_once: -0x22f2 004176 bpatch patch06_1 ,mem_patch06 -0x22f3 004177 fetch 1 ,mem_fhs_am_addr -0x22f4 004178 iforce am_addr -0x22f5 004179 force type_poll ,type -0x22f6 004180 call master_conn_send_packet -0x22f7 004181 branch master_conn_recv_packet -: 004192 inquiry_scan_dispatch: -0x22f8 004193 fetch 1 ,mem_scan_mode -0x22f9 004194 rtnbit0 inq_scan_mode -0x22fa 004195 force iscan_interval_timer ,queue -0x22fb 004196 call timer_check -0x22fc 004197 nrtn blank -0x22fd 004198 fetcht 2 ,mem_iscan_window -0x22fe 004199 force 4 ,queue -0x22ff 004200 call sniff_check_window -0x2300 004201 rtn user -0x2301 004202 call inquiry_scan_start -0x2302 004203 force iscan_interval_timer ,queue -0x2303 004204 fetch 2 ,mem_iscan_interval -0x2304 004205 nbranch timer_init ,sync -0x2305 004206 random pdata -0x2306 004207 iand mask3ff ,pdata -0x2307 004208 branch timer_init -: 004211 inquiry_scan_start: -0x2308 004212 bpatch patch06_2 ,mem_patch06 -0x2309 004213 jam 0 ,mem_fhs_am_addr -0x230a 004214 disable clknt -0x230b 004215 disable attempt -0x230c 004216 call afh_clear -0x230d 004217 and clkn_bt ,0x1fc ,bt_clk -0x230e 004218 force 0x01 ,freq_mode -0x230f 004219 call fetch_giac -0x2310 004220 call rx_radio_freq -0x2311 004221 setflip mark_inquiry_state ,mark -0x2312 004222 fetch 1 ,mem_inquiryscan_waitcnt -0x2313 004223 increase 1 ,pdata -0x2314 004224 store 1 ,mem_inquiryscan_waitcnt -0x2315 004225 call fetch_diac -0x2316 004226 call start_receiver -0x2317 004227 call wait_access_forever -0x2318 004228 nrtn sync -0x2319 004229 bpatch patch06_3 ,mem_patch06 -0x231a 004230 force 0 ,stop_watch -0x231b 004231 call shutdown_radio -0x231c 004232 fetch 1 ,mem_inquiryscan_rcvcnt -0x231d 004233 increase 1 ,pdata -0x231e 004234 store 1 ,mem_inquiryscan_rcvcnt -0x231f 004235 call fetch_giac -0x2320 004236 call rf_setup_time_slave_slot -0x2321 004237 or_into 0x002 ,bt_clk -0x2322 004238 force 0x01 ,freq_mode -0x2323 004239 call tx_radio_freq -0x2324 004240 call fetch_diac -0x2325 004241 call start_transmitter -0x2326 004242 call start_tx_external -0x2327 004243 deposit clkn_bt -0x2328 004244 store 4 ,mem_clkn_bt -0x2329 004245 call send_access_word -0x232a 004246 force type_fhs ,type -0x232b 004247 force 0 ,am_addr -0x232c 004248 call scan_mode_whiten -0x232d 004249 call transmit_packet_whitened -0x232e 004250 call send_eir -0x232f 004251 and_into 0x1fd ,bt_clk -0x2330 004252 increase 1 ,n_tx_slot -0x2331 004253 rtn -: 004255 send_eir: -0x2332 004256 bpatch patch06_4 ,mem_patch06 -0x2333 004257 fetch 1 ,mem_eir_enable -0x2334 004258 rtn blank -0x2335 004259 arg mem_eir ,contw -0x2336 004260 fetch 1 ,mem_local_name_length -0x2337 004261 copy pdata ,loopcnt -0x2338 004262 increase 1 ,pdata -0x2339 004263 istore 1 ,contw -0x233a 004264 copy contw ,temp -0x233b 004265 increase 1 ,pdata -0x233c 004266 store 2 ,mem_tx_len -0x233d 004267 copy temp ,contw -0x233e 004268 setarg 0x09 -0x233f 004269 istore 1 ,contw -0x2340 004270 arg mem_local_name ,contr -0x2341 004271 call memcpy -0x2342 004273 arg mem_all_uuid_128bits ,regc -0x2343 004274 arg 4 ,loopcnt -0x2344 004275 call get_all_uuid -0x2345 004276 arg mem_all_uuid_16bits ,regc -0x2346 004277 arg 1 ,loopcnt -0x2347 004278 call get_all_uuid -0x2348 004280 force type_dm3 ,type -0x2349 004281 jam 2 ,mem_tx_lch -0x234a 004282 setarg mem_eir -0x234b 004283 store 2 ,mem_txptr -0x234c 004284 call rf_setup_time_slave_slot -0x234d 004285 call tx_radio_freq -0x234e 004286 call start_transmitter -0x234f 004287 call start_tx_external -0x2350 004288 call send_access_word -0x2351 004289 call scan_mode_whiten -0x2352 004290 call transmit_packet_whitened -0x2353 004291 rtn -: 004294 get_all_uuid: -0x2354 004295 copy contw ,temp -0x2355 004296 copy regc ,contr -0x2356 004297 ifetch 1 ,contr -0x2357 004298 rtn blank -: 004299 lshift_loop: -0x2358 004300 lshift pdata ,pdata -0x2359 004301 loop lshift_loop -0x235a 004302 copy pdata ,rega -0x235b 004303 increase 2 ,pdata -0x235c 004304 copy pdata ,queue -0x235d 004305 fetch 2 ,mem_tx_len -0x235e 004306 iadd queue ,pdata -0x235f 004307 store 2 ,mem_tx_len -0x2360 004308 copy temp ,contw -0x2361 004309 copy rega ,pdata -0x2362 004310 increase 1 ,pdata -0x2363 004311 istore 1 ,contw -0x2364 004312 copy regc ,contr -0x2365 004313 ifetch 1 ,contr -0x2366 004314 ifetch 1 ,contr -0x2367 004315 istore 1 ,contw -0x2368 004316 copy rega ,loopcnt -0x2369 004317 branch memcpy -: 004323 page_scan_dispatch: -0x236a 004324 fetch 1 ,mem_scan_mode -0x236b 004325 rtnbit0 page_scan_mode -0x236c 004326 force pscan_interval_timer ,queue -0x236d 004327 call timer_check -0x236e 004328 nrtn blank -0x236f 004329 fetcht 2 ,mem_pscan_window -0x2370 004330 force 40 ,queue -0x2371 004331 call sniff_check_window -0x2372 004332 rtn user -0x2373 004333 force 0 ,am_addr -0x2374 004334 jam param_pagerespto ,mem_fhs_wait_counter -0x2375 004335 set0 mark_fhs_already_good ,mark -0x2376 004336 call page_scan_start -0x2377 004337 force pscan_interval_timer ,queue -0x2378 004338 fetch 2 ,mem_pscan_interval -0x2379 004339 branch timer_init -: 004342 page_scan_start: -0x237a 004343 bpatch patch06_5 ,mem_patch06 -0x237b 004344 disable clknt -0x237c 004345 call afh_clear -0x237d 004346 fetch 1 ,mem_pagescan_waitcnt -0x237e 004347 increase 1 ,pdata -0x237f 004348 store 1 ,mem_pagescan_waitcnt -0x2380 004349 force 0 ,n_tx_slot -0x2381 004350 call fetch_self_bt_adr -0x2382 004351 add clkn_bt ,1 ,bt_clk -0x2383 004352 force 0x02 ,freq_mode -0x2384 004353 bpatch patch06_6 ,mem_patch06 -0x2385 004354 call rx_radio_freq -0x2386 004355 call start_receiver -0x2387 004356 call wait_access_forever -0x2388 004357 nrtn sync -0x2389 004358 call shutdown_radio -0x238a 004359 fetch 1 ,mem_pagescan_rcvcnt -0x238b 004360 increase 1 ,pdata -0x238c 004361 store 1 ,mem_pagescan_rcvcnt -0x238d 004362 force 0 ,stop_watch -0x238e 004363 call rf_setup_time_slave_slot -0x238f 004364 or_into 0x002 ,bt_clk -0x2390 004365 force 0x01 ,freq_mode -0x2391 004366 call tx_radio_freq -0x2392 004367 call start_transmitter -0x2393 004368 call start_tx_external -0x2394 004369 call send_access_word -0x2395 004370 call end_of_packet -0x2396 004371 force 0 ,am_addr -0x2397 004372 arg param_rf_setup ,timeup -0x2398 004373 until clke_rt ,meet -0x2399 004374 or_into 0x03 ,clke_bt -0x239a 004375 and_into 0x1fd ,bt_clk -: 004376 page_scan_wait_fhs_restart: -0x239b 004377 bpatch patch06_7 ,mem_patch06 -0x239c 004378 increase 1 ,n_tx_slot -0x239d 004379 call rx_radio_freq -0x239e 004380 call start_receiver -0x239f 004381 call wait_access_mhalfbnd -0x23a0 004382 nbranch page_scan_wait_fhs_again ,sync -0x23a1 004383 call scan_mode_whiten -0x23a2 004384 call receive_packet_whitened -0x23a3 004385 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs -: 004386 page_scan_wait_fhs_again: -0x23a4 004387 bpatch patch07_0 ,mem_patch07 -0x23a5 004388 fetch 1 ,mem_fhs_wait_counter -0x23a6 004389 rtn blank -0x23a7 004390 increase -1 ,pdata -0x23a8 004391 store 1 ,mem_fhs_wait_counter -0x23a9 004392 call rf_setup_time_master_slot -0x23aa 004393 branch page_scan_wait_fhs_restart -: 004396 page_scan_reply_to_fhs: -0x23ab 004397 bpatch patch07_1 ,mem_patch07 -0x23ac 004398 set0 1 ,clke_bt -0x23ad 004399 set1 0 ,clke_bt -0x23ae 004400 fetch 1 ,mem_pagescan_rcvfhscnt -0x23af 004401 increase 1 ,pdata -0x23b0 004402 store 1 ,mem_pagescan_rcvfhscnt -0x23b1 004403 call rf_setup_time_slave_slot -0x23b2 004404 or_into 0x02 ,bt_clk -0x23b3 004405 call tx_radio_freq -0x23b4 004406 call start_transmitter -0x23b5 004407 call start_tx_external -0x23b6 004408 call send_access_word -0x23b7 004409 call end_of_packet -: 004410 slave_apply_clke_bt: -0x23b8 004411 compare 0x03 ,clke_bt ,0x03 -0x23b9 004412 branch slave_apply_clke_bt_now ,true -0x23ba 004413 until null ,mhalfbnd -0x23bb 004414 branch slave_apply_clke_bt -: 004415 slave_apply_clke_bt_now: -0x23bc 004416 fetch 4 ,mem_clke_bt -0x23bd 004417 or_into 0x03 ,pdata -0x23be 004418 icopy clke_bt -: 004420 start_slave_connection: -0x23bf 004421 bpatch patch07_2 ,mem_patch07 -0x23c0 004422 fetch 6 ,extm_lap -0x23c1 004423 store 6 ,mem_plap -0x23c2 004424 call prepare_newconn -: 004425 slave_newconn_loop: -0x23c3 004426 call slave_newconn_once -0x23c4 004427 branch sconn_successful ,match -0x23c5 004428 call new_conn_timeout -0x23c6 004429 nbranch slave_newconn_loop ,blank -0x23c7 004430 rtn -: 004433 sconn_successful: -0x23c8 004434 bpatch patch07_3 ,mem_patch07 -0x23c9 004435 call newconn_init -0x23ca 004436 call context_new -0x23cb 004437 nrtn zero -0x23cc 004438 jam 0 ,mem_mode -0x23cd 004439 call calc_clke_offset -0x23ce 004440 branch context_save -: 004445 slave_dispatch: -0x23cf 004446 bpatch patch07_4 ,mem_patch07 -0x23d0 004447 call calc_clke -0x23d1 004448 call role_switch_slave -0x23d2 004449 rtn user -: 004450 slave_loop: -0x23d3 004451 bpatch patch07_5 ,mem_patch07 -0x23d4 004452 call check_bt_disabled -0x23d5 004453 call scheduler_process -0x23d6 004454 call slave_conn_recv_packet -0x23d7 004455 nbranch slave_notmatch ,match -0x23d8 004456 call supervision_flush -0x23d9 004457 call scheduler_tx_l2cap_pkt -0x23da 004458 call prepare_tx -0x23db 004459 call slave_conn_send_packet -0x23dc 004460 call parse_l2cap -0x23dd 004461 call parse_lmp -0x23de 004462 fetch 1 ,mem_slave_rcvcnt -0x23df 004463 increase 1 ,pdata -0x23e0 004464 store 1 ,mem_slave_rcvcnt -0x23e1 004465 call calc_clke_offset -: 004466 slave_notmatch: -0x23e2 004467 bpatch patch07_6 ,mem_patch07 -0x23e3 004468 call lpm_set_mult -0x23e4 004469 call supervision_update -0x23e5 004470 branch slave_disconnect ,positive -0x23e6 004471 call check_disconnect_timeout -0x23e7 004472 nbranch slave_disconnect ,user -0x23e8 004473 call check_attempt -0x23e9 004474 nbranch slave_loop ,blank -0x23ea 004475 rtn -: 004477 slave_disconnect: -0x23eb 004478 bpatch patch07_7 ,mem_patch07 -0x23ec 004479 jam 0 ,mem_tester_emulate -0x23ed 004480 jam 0 ,mem_debug_config -0x23ee 004481 call quit_connection -0x23ef 004482 set0 mark_testmode ,mark -0x23f0 004483 call test_enable_white -0x23f1 004484 fetch 1 ,mem_state -0x23f2 004485 rtn -: 004488 role_switch_slave: -0x23f3 004489 bpatch patch08_0 ,mem_patch08 -0x23f4 004490 call role_switch_check -0x23f5 004491 nrtn user -0x23f6 004492 copy am_addr ,temp -0x23f7 004493 call get_free_amaddr -0x23f8 004494 store 1 ,mem_fhs_am_addr -0x23f9 004495 copy temp ,am_addr -0x23fa 004496 jam param_newconnto ,mem_newconnto_counter -: 004497 roles_sendfhs_loop: -0x23fb 004498 bpatch patch08_1 ,mem_patch08 -0x23fc 004499 call rf_setup_time_master_slot -0x23fd 004500 force type_fhs ,type -0x23fe 004501 call slave_send_access -0x23ff 004502 deposit clkn_bt -0x2400 004503 store 4 ,mem_clkn_bt -0x2401 004504 call transmit_packet -0x2402 004505 call rf_setup_time_slave_slot -0x2403 004506 enable user3 -0x2404 004507 call slave_receive_access -0x2405 004508 branch roles_got_fhs_reply ,sync -0x2406 004509 call shutdown_radio -0x2407 004510 call new_conn_timeout -0x2408 004511 nbranch roles_sendfhs_loop ,blank -0x2409 004512 rtnmark0 mark_accept_switch -0x240a 004513 jam lmp_slot_offset ,mem_lmo_opcode2 -0x240b 004514 set1 mark_switch_initiated ,mark -0x240c 004515 rtn -: 004516 roles_got_fhs_reply: -0x240d 004517 enable clknt -0x240e 004518 call prepare_newconn -0x240f 004519 call afh_clear -: 004520 roles_newconn_loop: -0x2410 004521 bpatch patch08_2 ,mem_patch08 -0x2411 004522 call master_newconn_once -0x2412 004523 branch roles_newconn_responded ,sync -0x2413 004524 call new_conn_timeout -0x2414 004525 nbranch roles_newconn_loop ,blank -0x2415 004526 disable clknt -0x2416 004527 deposit clke_bt -0x2417 004528 store 4 ,mem_next_btclk -0x2418 004529 rtn -: 004530 roles_newconn_responded: -0x2419 004531 enable master -0x241a 004532 bmark0 mark_accept_switch ,roles_newconn_nolmp -0x241b 004533 set0 mark_accept_switch ,mark -0x241c 004534 jam lmp_accepted ,mem_lmo_opcode2 -0x241d 004535 jam lmp_host_connection_req ,mem_lmi_opcode2 -0x241e 004536 call tid_set_reply -: 004537 roles_newconn_nolmp: -0x241f 004538 deposit am_addr -0x2420 004539 store 1 ,mem_amaddr -0x2421 004540 force 0 ,pdata -0x2422 004541 store 6 ,mem_clk_offset -0x2423 004542 fetch 1 ,mem_mode -0x2424 004543 set1 mode_master ,pdata -0x2425 004544 store 1 ,mem_mode -0x2426 004545 call supervision_flush -0x2427 004546 disable master -0x2428 004547 enable user -0x2429 004548 rtn -: 004552 init_rx_packet_flags: -0x242a 004553 bpatch patch08_3 ,mem_patch08 -0x242b 004554 disable match -0x242c 004555 set0 mark_loopback ,mark -0x242d 004556 set0 mark_am_addr_broadcast ,mark -0x242e 004557 set0 mark_longpacket ,mark -0x242f 004558 set0 mark_old_packet ,mark -0x2430 004559 fetch 1 ,mem_arq -0x2431 004560 set0 arqnx ,pdata -0x2432 004561 set1 flowx ,pdata -0x2433 004562 store 1 ,mem_arq -0x2434 004563 rtn -: 004565 prepare_newconn: -0x2435 004566 bpatch patch08_4 ,mem_patch08 -0x2436 004567 jam param_newconnto ,mem_newconnto_counter -0x2437 004568 jam param_newconn_arq ,mem_arq -0x2438 004569 fetch 2 ,mem_rx_window_init -0x2439 004570 store 2 ,mem_rx_window -0x243a 004571 deposit clkn_bt -0x243b 004572 store 4 ,mem_next_btclk -0x243c 004573 rtn clknt -0x243d 004574 deposit clke_bt -0x243e 004575 store 4 ,mem_next_btclk -0x243f 004576 rtn -: 004578 newconn_init: -0x2440 004579 bpatch patch08_5 ,mem_patch08 -0x2441 004580 call init_lmp_reinit -0x2442 004581 call new_conn_handle -0x2443 004582 store 1 ,mem_conn_handle -0x2444 004583 setarg 0 -0x2445 004584 store 2 ,mem_l2cap_rxbuff1_len -0x2446 004585 setarg param_supervision_to -0x2447 004586 store 2 ,mem_supervision_to -0x2448 004587 fetch 1 ,mem_state -0x2449 004588 set1 state_inconn ,pdata -0x244a 004589 store 1 ,mem_state -0x244b 004590 jam 0 ,mem_op -0x244c 004591 jam 0 ,mem_state_map -0x244d 004592 jam 0 ,mem_lpm_current_mult -0x244e 004593 branch supervision_flush -: 004596 clear_linkkey: -0x244f 004597 bpatch patch08_6 ,mem_patch08 -0x2450 004598 force 0 ,pdata -0x2451 004599 store 8 ,mem_link_key -0x2452 004600 istore 8 ,contw -0x2453 004601 call clear_linkstate -0x2454 004602 branch context_traverse_linkkey -: 004604 new_conn_timeout: -0x2455 004605 fetch 1 ,mem_newconnto_counter -0x2456 004606 increase -1 ,pdata -0x2457 004607 store 1 ,mem_newconnto_counter -0x2458 004608 rtn -: 004610 new_conn_handle: -0x2459 004611 fetch 1 ,mem_handle_num -0x245a 004612 increase 1 ,pdata -0x245b 004613 store 1 ,mem_handle_num -0x245c 004614 rtn -: 004617 quit_connection: -0x245d 004618 bpatch patch08_7 ,mem_patch08 -0x245e 004619 fetch 1 ,mem_hci_cmd -0x245f 004620 beq hci_cmd_remote_name_req ,quit_connection_name -0x2460 004621 fetch 1 ,mem_lmp_to_send -0x2461 004622 bne lmp_name_req ,quit_connection_cont -: 004623 quit_connection_name: -0x2462 004624 call cmd_check_plap -0x2463 004625 nbranch quit_connection_cont ,zero -0x2464 004626 call master_name_error -0x2465 004627 jam 0 ,mem_hci_cmd -: 004628 quit_connection_cont: -0x2466 004629 bpatch patch09_0 ,mem_patch09 -0x2467 004630 call app_disconn_reason_collect_bt -0x2468 004631 call sniff_exit -0x2469 004632 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x246a 004633 call ui_ipc_send_event -0x246b 004634 call init_lmp_work -0x246c 004635 call l2cap_init_work -0x246d 004636 call sp_initialize -0x246e 004637 fetch 1 ,mem_state -0x246f 004638 set0 state_inconn -0x2470 004639 store 1 ,mem_state -0x2471 004640 jam 0 ,memui_reconnect_mode -0x2472 004642 fetch 1 ,mem_state_map -0x2473 004643 compare 0x0 ,pdata ,0xc0 -0x2474 004644 branch quit_connection_not_clear_mark ,true -0x2475 004645 set0 mark_rxbuf_inuse ,mark -: 004646 quit_connection_not_clear_mark: -0x2476 004647 fetch 1 ,mem_arq -0x2477 004648 bbit0 wack ,quit_connection_not_clear_tx -: 004649 quit_connection_not_clear_tx: -0x2478 004650 fetch 1 ,mem_op -0x2479 004651 rtnbit0 op_txl2cap -0x247a 004652 set0 mark_tx_l2cap ,mark -0x247b 004653 rtn -: 004655 slave_newconn_once: -0x247c 004656 bpatch patch09_1 ,mem_patch09 -0x247d 004657 fetch 1 ,extm_newconn_am_addr -0x247e 004658 rtn blank -0x247f 004659 icopy am_addr -0x2480 004660 call slave_conn_recv_packet -0x2481 004661 nrtn match -0x2482 004662 force type_null ,type -0x2483 004663 call slave_conn_send_packet -0x2484 004664 deposit am_addr -0x2485 004665 store 1 ,mem_amaddr -0x2486 004666 force 0 ,pdata -0x2487 004667 store 1 ,extm_newconn_am_addr -0x2488 004668 rtn -: 004674 prepare_tx: -0x2489 004675 bpatch patch09_2 ,mem_patch09 -0x248a 004676 fetch 1 ,mem_state -0x248b 004677 bbit0 state_insco ,prepare_tx_not_sco -0x248c 004678 force type_hv3 ,type -0x248d 004679 bmark0 mark_esco ,prepare_tx_not_esco -0x248e 004680 call check_esco_amaddr -0x248f 004681 nbranch prepare_tx_not_sco ,true -0x2490 004682 branch prepare_tx_not_sco ,attempt -0x2491 004683 call set_wait_ack -0x2492 004684 setarg 2 -0x2493 004685 store 2 ,mem_retransmission_cnt -0x2494 004686 rtn -: 004687 prepare_tx_not_esco: -0x2495 004688 nrtn attempt -: 004689 prepare_tx_not_sco: -0x2496 004690 bpatch patch09_3 ,mem_patch09 -0x2497 004691 call context_check_all_wack -0x2498 004692 nbranch prepare_tx_no_retransmit ,zero -0x2499 004693 fetch 1 ,mem_arq -0x249a 004694 bbit0 wack ,prepare_tx_pollnull -: 004695 prepare_tx_retransmit: -0x249b 004696 bmark1 mark_loopback ,prepare_tx_loopback -0x249c 004697 fetch 1 ,mem_debug_config -0x249d 004698 bbit1 debug_tx_pattern ,prepare_tx_txpat -0x249e 004699 fetch 2 ,mem_retransmission_cnt -0x249f 004700 increase -1 ,pdata -0x24a0 004701 store 2 ,mem_retransmission_cnt -0x24a1 004702 branch prepare_tx_nomore_retransmit ,blank -0x24a2 004703 fetch 1 ,mem_last_type -0x24a3 004704 iforce type -0x24a4 004705 rtn -: 004707 prepare_tx_nomore_retransmit: -0x24a5 004708 bpatch patch09_4 ,mem_patch09 -0x24a6 004709 call clear_got_tx -: 004710 prepare_tx_no_retransmit: -0x24a7 004711 call check_esco_amaddr -0x24a8 004712 branch prepare_tx_pollnull ,true -0x24a9 004713 call send_lmp -0x24aa 004714 branch prepare_tx_sendlmp ,user -0x24ab 004715 fetch 1 ,mem_op -0x24ac 004716 bbit1 op_txl2cap ,prepare_tx_sendl2cap -0x24ad 004717 bmark1 mark_loopback ,prepare_tx_loopback -0x24ae 004718 fetch 1 ,mem_debug_config -0x24af 004719 bbit1 debug_tx_pattern ,prepare_tx_txpat -: 004720 prepare_tx_pollnull: -0x24b0 004721 force type_poll ,type -0x24b1 004722 rtn master -0x24b2 004723 force type_null ,type -0x24b3 004724 rtn -: 004725 prepare_tx_loopback: -0x24b4 004726 bpatch patch09_5 ,mem_patch09 -0x24b5 004727 fetch 1 ,mem_rx_type -0x24b6 004728 iforce type -0x24b7 004729 rtnne 1 -0x24b8 004730 force type_null ,type -0x24b9 004731 rtn -: 004732 prepare_tx_txpat: -0x24ba 004733 fetch 1 ,test_mode_packet_type -0x24bb 004734 and pdata ,0xf ,type -0x24bc 004735 set1 mark_loopback ,mark -0x24bd 004736 rtn -: 004737 prepare_tx_sendlmp: -0x24be 004738 force type_lmp ,type -0x24bf 004739 branch set_wait_ack -: 004740 prepare_tx_sendl2cap: -0x24c0 004741 call tx_l2cap_type -: 004743 set_wait_ack: -0x24c1 004744 bpatch patch09_6 ,mem_patch09 -0x24c2 004745 fetcht 1 ,mem_arq -0x24c3 004746 set1 wack ,temp -0x24c4 004747 storet 1 ,mem_arq -0x24c5 004748 deposit type -0x24c6 004749 store 1 ,mem_last_type -0x24c7 004750 setarg 0xffff -0x24c8 004751 store 2 ,mem_retransmission_cnt -0x24c9 004752 rtn -: 004754 tx_l2cap_type: -0x24ca 004755 bpatch patch09_7 ,mem_patch09 -0x24cb 004756 fetch 1 ,mem_state_map -0x24cc 004757 isolate1 smap_edr ,pdata -0x24cd 004758 fetch 2 ,mem_tx_len -0x24ce 004759 branch tx_l2cap_type_edr ,true -0x24cf 004760 force type_dm1 ,type -0x24d0 004761 sub pdata ,17 ,null -0x24d1 004762 rtn positive -0x24d2 004763 force type_dh1 ,type -0x24d3 004764 sub pdata ,27 ,null -0x24d4 004765 rtn positive -0x24d5 004766 force type_dm3 ,type -0x24d6 004767 sub pdata ,121 ,null -0x24d7 004768 rtn positive -0x24d8 004769 force type_dh3 ,type -0x24d9 004770 sub pdata ,183 ,null -0x24da 004771 rtn positive -0x24db 004772 force type_dm5 ,type -0x24dc 004773 sub pdata ,224 ,null -0x24dd 004774 rtn positive -0x24de 004775 force type_dh5 ,type -0x24df 004776 rtn -: 004777 tx_l2cap_type_edr: -0x24e0 004778 force type_dm1 ,type -0x24e1 004779 sub pdata ,17 ,null -0x24e2 004780 rtn positive -0x24e3 004781 force type_dh1 ,type -0x24e4 004782 sub pdata ,54 ,null -0x24e5 004783 rtn positive -0x24e6 004784 force type_dm3 ,type -0x24e7 004785 arg 367 ,temp -0x24e8 004786 isub temp ,null -0x24e9 004787 nrtn positive -0x24ea 004788 force type_dm5 ,type -0x24eb 004789 arg 679 ,temp -0x24ec 004790 isub temp ,null -0x24ed 004791 nrtn positive -0x24ee 004792 force type_dh5 ,type -0x24ef 004793 rtn -: 004802 slave_receive_master_slot: -0x24f0 004803 fetch 1 ,mem_state -0x24f1 004804 bbit0 state_insniff ,slave_receive_notsniff -0x24f2 004805 fetch 2 ,mem_tsniff -0x24f3 004806 branch slave_receive_notsniff ,blank -0x24f4 004807 nbranch slave_receive_sniff ,attempt -: 004808 slave_receive_notsniff: -0x24f5 004809 call rf_setup_time_master_slot -: 004810 slave_receive_access: -0x24f6 004811 add clke_bt ,1 ,bt_clk -: 004812 slave_receive_sniff: -0x24f7 004813 enable swfine -0x24f8 004814 fetch 2 ,mem_rx_window -0x24f9 004815 rshift pdata ,pdata -0x24fa 004816 arg param_pll_setup ,temp -0x24fb 004817 iadd temp ,pdata -0x24fc 004818 call ahead_window -0x24fd 004819 call fetch_extm_bt_adr -0x24fe 004820 force 0x03 ,freq_mode -0x24ff 004821 call rx_radio_freq -0x2500 004822 call init_rx_packet_flags -0x2501 004823 call prep_crypt -0x2502 004824 bpatch patch0a_0 ,mem_patch0a -0x2503 004825 fetch 2 ,mem_rx_window -0x2504 004826 rshift pdata ,pdata -0x2505 004827 call ahead_window -0x2506 004828 call start_receiver -0x2507 004829 enable decode_fec0 -0x2508 004830 fetch 2 ,mem_rx_window -0x2509 004831 arg param_clke_cal ,temp -0x250a 004832 iadd temp ,stop_watch -0x250b 004833 correlate null ,timeout -0x250c 004834 copy clke ,temp -0x250d 004835 storet 6 ,mem_sync_clke -0x250e 004836 disable decode_fec0 -0x250f 004837 nrtn sync -0x2510 004838 arg param_clke_cal ,clke_rt -0x2511 004839 copy bt_clk ,clke_bt -0x2512 004840 branch lpm_adjust_clk ,wake -0x2513 004841 rtn -: 004844 slave_conn_recv_packet: -0x2514 004845 bpatch patch0a_1 ,mem_patch0a -0x2515 004846 call slave_receive_master_slot -0x2516 004847 nbranch shutdown_radio ,sync -0x2517 004848 call save_rssi -0x2518 004849 bmark0 mark_testmode ,receive_packet -0x2519 004850 fetch 2 ,mem_tst_pktcnt_sync -0x251a 004851 increase 1 ,pdata -0x251b 004852 store 2 ,mem_tst_pktcnt_sync -: 004853 receive_packet: -0x251c 004854 rshift bt_clk ,temp -0x251d 004855 or temp ,0x40 ,white_init -: 004856 receive_packet_whitened: -0x251e 004857 bpatch patch0a_2 ,mem_patch0a -0x251f 004858 enable enable_white -0x2520 004859 enable enable_hec -0x2521 004860 enable decode_fec1 -0x2522 004861 parse demod ,bucket ,3 -0x2523 004862 rshift8 pwindow ,pdata -0x2524 004863 store 1 ,mem_temp_am_addr -0x2525 004864 parse demod ,bucket ,4 -0x2526 004865 inject bucket ,7 -0x2527 004866 copy pwindow ,pdata -0x2528 004867 store 1 ,mem_rx_type -0x2529 004868 parse demod ,bucket ,3 -0x252a 004869 rshift8 pwindow ,pdata -0x252b 004870 store 1 ,mem_temp_arq -0x252c 004871 fetch 1 ,mem_rx_type -0x252d 004872 sub pdata ,3 ,null -0x252e 004873 branch receive_packet_noedr ,positive -0x252f 004874 beq 7 ,receive_packet_noedr -0x2530 004875 fetch 1 ,mem_state_map -0x2531 004876 isolate1 smap_edr ,pdata -0x2532 004877 setflag true ,psk ,radio_ctrl -: 004878 receive_packet_noedr: -0x2533 004879 bpatch patch0a_3 ,mem_patch0a -0x2534 004880 parse demod ,bucket ,8 -0x2535 004881 disable decode_fec1 -0x2536 004882 disable enable_hec -0x2537 004883 branch error_header ,crc_failed -0x2538 004884 bmark0 mark_testmode ,receive_packet_amchk -0x2539 004885 fetch 2 ,mem_tst_pktcnt_hec -0x253a 004886 increase 1 ,pdata -0x253b 004887 store 2 ,mem_tst_pktcnt_hec -: 004888 receive_packet_amchk: -0x253c 004889 bpatch patch0a_4 ,mem_patch0a -0x253d 004890 fetch 1 ,mem_temp_am_addr -0x253e 004891 compare 0 ,pdata ,0x07 -0x253f 004892 setflag true ,mark_am_addr_broadcast ,mark -0x2540 004893 branch am_addr_ok ,true -0x2541 004894 icompare 0x07 ,am_addr -0x2542 004895 branch am_addr_match ,true -0x2543 004896 bmark0 mark_esco ,end_of_packet -0x2544 004897 fetcht 1 ,mem_saved_amaddr -0x2545 004898 icompare 0x7 ,temp -0x2546 004899 nbranch end_of_packet ,true -0x2547 004900 fetch 1 ,mem_arq -0x2548 004901 set0 arqnx ,pdata -0x2549 004902 set1 flowx ,pdata -0x254a 004903 store 1 ,mem_arq -: 004904 am_addr_match: -0x254b 004905 enable match -: 004906 am_addr_ok: -0x254c 004907 bpatch patch0a_5 ,mem_patch0a -0x254d 004908 fetch 1 ,mem_rx_type -0x254e 004909 icopy type -0x254f 004910 bmark1 mark_am_addr_broadcast ,arqn_bypass -0x2550 004911 fetcht 1 ,mem_temp_arq -0x2551 004912 fetch 1 ,mem_arq -0x2552 004913 set0 flow ,pdata -0x2553 004914 isolate1 flow ,temp -0x2554 004915 setflag true ,flow ,pdata -0x2555 004916 isolate1 arqn ,temp -0x2556 004917 setflag true ,arqn ,pdata -0x2557 004918 store 1 ,mem_arq -0x2558 004919 isolate0 arqn ,temp -0x2559 004920 branch arqn_bypass ,true -0x255a 004921 call clear_got_tx -: 004922 arqn_bypass: -0x255b 004923 bpatch patch0a_6 ,mem_patch0a -0x255c 004924 arg 0 ,temp -0x255d 004925 call reserve_slot -0x255e 004926 and type ,0xf ,pdata -0x255f 004927 beq type_poll ,process_poll -0x2560 004928 beq type_null ,end_of_packet -0x2561 004929 beq type_fhs ,process_fhs -0x2562 004930 fetcht 1 ,mem_temp_arq -0x2563 004931 fetch 1 ,mem_arq -0x2564 004932 icompare 0x04 ,temp -0x2565 004933 nbranch rx_type_dispatch ,true -0x2566 004934 bmark0 mark_am_addr_broadcast ,failed_seqn -0x2567 004935 bbit0 bcast1 ,rx_type_dispatch -: 004936 failed_seqn: -0x2568 004937 set1 mark_old_packet ,mark -: 004938 rx_type_dispatch: -0x2569 004939 bpatch patch0a_7 ,mem_patch0a -0x256a 004940 deposit type -0x256b 004941 beq type_dm1 ,process_dm1 -0x256c 004942 beq type_dh1 ,process_dh1 -0x256d 004943 beq type_hv3 ,process_hev -0x256e 004944 beq type_3dh1 ,process_3dh1 -0x256f 004945 arg 4 ,temp -0x2570 004946 call reserve_slot -0x2571 004947 beq type_dm3 ,process_dm3 -0x2572 004948 beq type_dh3 ,process_dh3 -0x2573 004949 arg 8 ,temp -0x2574 004950 call reserve_slot -0x2575 004951 beq type_dm5 ,process_dm5 -0x2576 004952 beq type_dh5 ,process_dh5 -0x2577 004953 rtn -: 004956 process_hev: -0x2578 004957 bpatch patch0b_0 ,mem_patch0b -0x2579 004958 enable decode_fec0 -0x257a 004959 enable enable_crc -0x257b 004960 enable encrypt -0x257c 004961 arg mem_sco_ibuf ,contw -0x257d 004962 force 30 ,loopcnt -: 004963 process_hev_loop: -0x257e 004964 parse demod ,bucket ,8 -0x257f 004965 rshift3 pwindow ,pdata -0x2580 004966 istore 1 ,contw -0x2581 004967 loop process_hev_loop -0x2582 004968 bmark0 mark_esco ,end_of_packet -0x2583 004969 parse demod ,bucket ,16 -0x2584 004970 nsetflag crc_failed ,mark_esco_rxok ,mark -0x2585 004971 branch error_payload ,crc_failed -0x2586 004972 branch ack_payload -: 004975 process_poll: -0x2587 004976 branch end_of_packet -: 004978 process_dm3: -: 004979 process_dm5: -0x2588 004980 set1 mark_longpacket ,mark -: 004981 process_dm1: -0x2589 004982 enable decode_fec2 -0x258a 004983 branch process_dmh -: 004985 process_dh3: -: 004986 process_dh5: -0x258b 004987 set1 mark_longpacket ,mark -: 004988 process_3dh1: -0x258c 004989 set1 psk3m ,radio_ctrl -: 004990 process_dh1: -0x258d 004991 enable decode_fec0 -: 004992 process_dmh: -0x258e 004993 bpatch patch0b_1 ,mem_patch0b -0x258f 004994 bmark1 mark_rxbuf_inuse ,end_of_packet -0x2590 004995 isolate0 psk ,radio_ctrl -0x2591 004996 branch process_dmh_noedr ,true -0x2592 004997 disable enable_white -0x2593 004998 enable decode_fec0 -0x2594 004999 disable decode_fec2 -0x2595 005000 add clkn_bt ,2 ,timeup -0x2596 005001 correlate clkn_bt ,meet -0x2597 005002 nbranch error_payload ,sync -0x2598 005003 set1 mark_longpacket ,mark -0x2599 005004 enable enable_white -: 005005 process_dmh_noedr: -0x259a 005006 bpatch patch0b_2 ,mem_patch0b -0x259b 005007 enable encrypt -0x259c 005008 enable enable_crc -0x259d 005009 parse demod ,bucket ,3 -0x259e 005010 rshift8 pwindow ,pdata -0x259f 005011 store 1 ,mem_lch_code -0x25a0 005012 parse demod ,bucket ,5 -0x25a1 005013 bmark1 mark_longpacket ,process_dmh_long -0x25a2 005014 rshift3 pwindow ,loopcnt -0x25a3 005015 rshift3 loopcnt ,loopcnt -0x25a4 005016 branch process_dmh_common -: 005017 process_dmh_long: -0x25a5 005018 parse demod ,bucket ,5 -0x25a6 005019 rshift pwindow ,loopcnt -0x25a7 005020 parse demod ,bucket ,3 -: 005021 process_dmh_common: -0x25a8 005022 bpatch patch0b_3 ,mem_patch0b -0x25a9 005023 deposit loopcnt -0x25aa 005024 store 2 ,mem_len -0x25ab 005025 branch process_dmh_data_end ,blank -0x25ac 005026 isub mask3ff ,null -0x25ad 005027 branch error_payload ,positive -0x25ae 005028 bpatch patch0b_4 ,mem_patch0b -0x25af 005029 set0 mark_fhs_eir ,mark -0x25b0 005030 fetch 1 ,mem_lch_code -0x25b1 005031 and_into 0x03 ,pdata -0x25b2 005032 arg mem_rxbuf ,contw -0x25b3 005033 beq llid_lmp ,process_lmp -0x25b4 005034 bmark1 mark_testmode ,process_dmh_data -0x25b5 005036 fetch 1 ,mem_lch_code -0x25b6 005037 and_into 0x03 ,pdata -0x25b7 005038 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt -0x25b8 005039 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt -0x25b9 005040 branch error_payload -: 005042 process_lmp: -0x25ba 005043 fetch 2 ,mem_len -0x25bb 005044 sub pdata ,0x70 ,null -0x25bc 005045 nbranch error_payload ,positive -0x25bd 005046 bmark1 mark_old_packet ,ack_payload -0x25be 005047 branch process_dmh_data -: 005050 process_dmh_data_l2cap_start_pkt: -0x25bf 005051 bpatch patch0b_5 ,mem_patch0b -0x25c0 005052 bmark1 mark_old_packet ,ack_payload -0x25c1 005053 fetch 2 ,mem_len -0x25c2 005054 arg 0x2e0 ,temp -0x25c3 005055 isub temp ,null -0x25c4 005056 branch error_payload ,positive -0x25c5 005057 fetch 1 ,mem_l2cap_rxbuff_inuse -0x25c6 005058 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 -0x25c7 005059 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 -0x25c8 005060 branch end_of_packet -: 005061 process_dmh_data_into_buff1: -0x25c9 005062 jam 1 ,mem_l2cap_rxbuff_new -0x25ca 005063 fetch 2 ,mem_l2cap_rxbuff1_len -0x25cb 005064 bne 0 ,end_of_packet -0x25cc 005065 arg mem_l2cap_rxbuff1 ,contw -0x25cd 005066 branch process_dmh_data -: 005067 process_dmh_data_into_buff2: -0x25ce 005068 jam 2 ,mem_l2cap_rxbuff_new -0x25cf 005069 fetch 2 ,mem_l2cap_rxbuff2_len -0x25d0 005070 bne 0 ,end_of_packet -0x25d1 005071 arg mem_l2cap_rxbuff2 ,contw -0x25d2 005072 branch process_dmh_data -: 005074 process_dmh_data_l2cap_continue_pkt: -0x25d3 005075 bpatch patch0b_6 ,mem_patch0b -0x25d4 005076 bmark1 mark_old_packet ,ack_payload -0x25d5 005077 fetch 2 ,mem_len -0x25d6 005078 arg 0x2e0 ,temp -0x25d7 005079 isub temp ,null -0x25d8 005080 branch error_payload ,positive -0x25d9 005081 fetch 1 ,mem_l2cap_rxbuff_new -0x25da 005082 beq 1 ,process_dmh_data_l2cap_continue_pkt1 -0x25db 005083 beq 2 ,process_dmh_data_l2cap_continue_pkt2 -0x25dc 005084 branch end_of_packet -: 005085 process_dmh_data_l2cap_continue_pkt1: -0x25dd 005086 arg mem_l2cap_rxbuff1 ,contw -0x25de 005087 fetch 2 ,mem_l2cap_rxbuff1_len -0x25df 005088 iadd contw ,contw -0x25e0 005089 branch process_dmh_data -: 005090 process_dmh_data_l2cap_continue_pkt2: -0x25e1 005091 arg mem_l2cap_rxbuff2 ,contw -0x25e2 005092 fetch 2 ,mem_l2cap_rxbuff2_len -0x25e3 005093 iadd contw ,contw -: 005094 process_dmh_data: -0x25e4 005095 parse demod ,bucket ,8 -0x25e5 005096 rshift3 pwindow ,pdata -0x25e6 005097 istore 1 ,contw -0x25e7 005098 loop process_dmh_data -: 005099 process_dmh_data_end: -0x25e8 005100 bpatch patch0b_7 ,mem_patch0b -0x25e9 005101 parse demod ,bucket ,16 -0x25ea 005102 branch error_payload_crc ,crc_failed -0x25eb 005103 fetch 1 ,mem_l2cap_flow_ctrl_flag -0x25ec 005104 beq l2cap_flow_ctrl_enable ,end_of_packet -0x25ed 005105 bmark1 mark_testmode ,process_dmh_cont -0x25ee 005106 bmark1 mark_old_packet ,redundant_payload -0x25ef 005107 fetch 1 ,mem_lch_code -0x25f0 005108 compare 3 ,pdata ,3 -0x25f1 005109 branch process_dmh_cont ,true -0x25f2 005110 fetch 2 ,mem_len -0x25f3 005111 branch process_dmh_cont ,blank -0x25f4 005112 bpatch patch0c_0 ,mem_patch0c -0x25f5 005113 fetch 1 ,mem_l2cap_rxbuff_new -0x25f6 005114 beq 1 ,process_l2cap_pass_crc_buff1 -0x25f7 005115 beq 2 ,process_l2cap_pass_crc_buff2 -0x25f8 005116 branch assert -: 005117 process_l2cap_pass_crc_buff1: -0x25f9 005118 fetch 2 ,mem_l2cap_rxbuff1_len -0x25fa 005119 fetcht 2 ,mem_len -0x25fb 005120 iadd temp ,pdata -0x25fc 005121 store 2 ,mem_l2cap_rxbuff1_len -0x25fd 005122 beq 0 ,assert -0x25fe 005123 fetcht 2 ,mem_l2cap_rxbuff1 -0x25ff 005124 increase 4 ,temp -0x2600 005125 isub temp ,null -0x2601 005126 call l2cap_buff1_inuse ,zero -0x2602 005127 branch process_dmh_cont -: 005128 process_l2cap_pass_crc_buff2: -0x2603 005129 fetch 2 ,mem_l2cap_rxbuff2_len -0x2604 005130 fetcht 2 ,mem_len -0x2605 005131 iadd temp ,pdata -0x2606 005132 store 2 ,mem_l2cap_rxbuff2_len -0x2607 005133 beq 0 ,assert -0x2608 005134 fetcht 2 ,mem_l2cap_rxbuff2 -0x2609 005135 add temp ,4 ,temp -0x260a 005136 isub temp ,null -0x260b 005137 call l2cap_buff2_inuse ,zero -0x260c 005138 branch process_dmh_cont -: 005139 process_dmh_cont: -0x260d 005140 bpatch patch0c_1 ,mem_patch0c -0x260e 005141 fetcht 1 ,mem_state_map -0x260f 005142 fetch 1 ,mem_lch_code -0x2610 005143 compare 3 ,pdata ,0x03 -0x2611 005144 setflag true ,smap_rxlmp ,temp -0x2612 005145 nsetflag true ,smap_rxl2cap ,temp -0x2613 005146 storet 1 ,mem_state_map -0x2614 005147 nbranch process_dmh_cont_rxbuf_not_use ,true -0x2615 005148 set1 mark_rxbuf_inuse ,mark -: 005149 process_dmh_cont_rxbuf_not_use: -0x2616 005150 bmark0 mark_testmode ,ack_payload -0x2617 005151 isolate1 smap_rxlmp ,temp -0x2618 005152 branch ack_payload ,true -0x2619 005153 fetch 2 ,mem_tst_pktcnt_crc -0x261a 005154 increase 1 ,pdata -0x261b 005155 store 2 ,mem_tst_pktcnt_crc -0x261c 005156 set1 mark_loopback ,mark -0x261d 005157 set0 smap_rxl2cap ,temp -0x261e 005158 set0 mark_rxbuf_inuse ,mark -0x261f 005159 storet 1 ,mem_state_map -: 005160 ack_payload: -0x2620 005161 bpatch patch0c_2 ,mem_patch0c -0x2621 005162 fetcht 1 ,mem_temp_arq -0x2622 005163 fetch 1 ,mem_arq -0x2623 005164 set1 arqnx ,pdata -0x2624 005165 isolate1 seqn ,temp -0x2625 005166 setflag true ,seqn ,pdata -0x2626 005167 isolate1 mark_am_addr_broadcast ,mark -0x2627 005168 setflag true ,bcast1 ,pdata -0x2628 005169 store 1 ,mem_arq -0x2629 005170 fetch 2 ,mem_len -0x262a 005171 nbranch end_of_packet ,blank -0x262b 005172 fetch 1 ,mem_state_map -0x262c 005173 set0 smap_rxl2cap ,pdata -0x262d 005174 store 1 ,mem_state_map -0x262e 005175 fetch 1 ,mem_lch_code -0x262f 005176 compare 0x01 ,pdata ,0x07 -0x2630 005178 branch end_of_packet -: 005180 error_header: -0x2631 005181 bpatch patch0c_3 ,mem_patch0c -0x2632 005182 disable match -0x2633 005183 fetch 2 ,mem_rx_hec_err -0x2634 005184 increase 1 ,pdata -0x2635 005185 store 2 ,mem_rx_hec_err -0x2636 005186 branch end_of_packet -: 005187 error_payload_crc: -0x2637 005188 fetch 2 ,mem_rx_crc_err -0x2638 005189 increase 1 ,pdata -0x2639 005190 store 2 ,mem_rx_crc_err -0x263a 005191 call discard_pkt -0x263b 005192 bmark0 mark_testmode ,error_payload -0x263c 005193 set1 mark_loopback ,mark -: 005194 error_payload: -0x263d 005195 branch end_of_packet -: 005197 discard_pkt: -0x263e 005198 bpatch patch0c_4 ,mem_patch0c -0x263f 005199 fetch 1 ,mem_lch_code -0x2640 005200 compare 3 ,pdata ,0x03 -0x2641 005201 nbranch discard_pkt_l2cap ,true -: 005202 discard_pkt_lmp: -0x2642 005203 fetcht 1 ,mem_state_map -0x2643 005204 set0 smap_rxlmp ,temp -0x2644 005205 storet 1 ,mem_state_map -0x2645 005206 rtn -: 005207 discard_pkt_l2cap: -0x2646 005210 fetcht 1 ,mem_state_map -0x2647 005211 set0 smap_rxl2cap ,temp -0x2648 005212 storet 1 ,mem_state_map -0x2649 005213 branch h4_send_acl_trigger_clear -: 005215 redundant_payload: -0x264a 005216 fetch 1 ,mem_arq -0x264b 005217 set1 arqnx ,pdata -0x264c 005218 store 1 ,mem_arq -: 005219 end_of_packet: -0x264d 005220 bpatch patch0c_5 ,mem_patch0c -0x264e 005221 disable encode_fec0 -0x264f 005222 disable encode_fec2 -0x2650 005223 disable decode_fec0 -0x2651 005224 disable decode_fec2 -0x2652 005225 disable enable_crc -0x2653 005226 disable encrypt -0x2654 005227 disable enable_white -0x2655 005228 branch shutdown_radio ,is_rx -0x2656 005229 until null ,tx_clear -0x2657 005230 nop 100 -0x2658 005231 branch shutdown_radio -: 005233 process_fhs: -0x2659 005234 bpatch patch0c_6 ,mem_patch0c -0x265a 005235 enable enable_crc -0x265b 005236 enable decode_fec2 -0x265c 005237 parse demod ,bucket ,72 -0x265d 005238 isolate1 58 ,pdata -0x265e 005239 setflag true ,mark_fhs_eir ,mark -0x265f 005240 copy bt_adr ,temp -0x2660 005241 ialigned bt_adr -0x2661 005242 ialigned fhs0 -0x2662 005243 pulse recalc -0x2663 005244 setsect 2 ,0xfffff -0x2664 005245 setsect 3 ,0x0ffff -0x2665 005246 nop 32 -0x2666 005247 iverify fhs_parity -0x2667 005248 deposit lap -0x2668 005249 store 3 ,extm_lap -0x2669 005250 deposit uap -0x266a 005251 store 1 ,extm_uap -0x266b 005252 copy temp ,bt_adr -0x266c 005253 branch fhs_parity_ok ,true -0x266d 005254 branch error_payload -: 005255 fhs_parity_ok: -0x266e 005256 bpatch patch0c_7 ,mem_patch0c -0x266f 005257 parse demod ,bucket ,72 -0x2670 005258 ialigned fhs1 -0x2671 005259 ialigned am_addr -0x2672 005260 ialigned nap -0x2673 005261 ialigned regb -0x2674 005262 force 0 ,pdata -0x2675 005263 parse demod ,bucket ,16 -0x2676 005264 branch error_payload ,crc_failed -0x2677 005265 setarg 0x0ffffffc -0x2678 005266 iand regb ,pdata -0x2679 005267 store 4 ,mem_clke_bt -0x267a 005268 deposit fhs_class -0x267b 005269 store 3 ,extm_class -0x267c 005270 deposit fhs_misc -0x267d 005271 store 1 ,extm_fhs_misc -0x267e 005272 deposit am_addr -0x267f 005273 store 1 ,extm_newconn_am_addr -0x2680 005274 deposit nap -0x2681 005275 store 2 ,extm_nap -0x2682 005276 deposit bt_clk -0x2683 005277 inject rxf ,32 -0x2684 005278 compare type_fhs ,type ,0x0f -0x2685 005279 setflag true ,mark_fhs_already_good ,mark -0x2686 005280 branch end_of_packet -: 005282 clear_got_tx: -0x2687 005283 bpatch patch0d_0 ,mem_patch0d -0x2688 005284 fetch 1 ,mem_arq -0x2689 005285 rtnbit0 wack -0x268a 005286 set0 wack ,pdata -0x268b 005287 setflip seqnx ,pdata -0x268c 005288 store 1 ,mem_arq -0x268d 005289 fetch 1 ,mem_last_type -0x268e 005290 beq type_lmp ,clear_got_txlmp -0x268f 005291 rtneq type_hv3 -0x2690 005292 fetch 1 ,mem_op -0x2691 005293 rtnbit0 op_txl2cap ,pdata -0x2692 005294 set0 op_txl2cap ,pdata -0x2693 005295 set1 op_pkt_comp ,pdata -0x2694 005296 store 1 ,mem_op -0x2695 005297 set0 mark_tx_l2cap ,mark -0x2696 005298 fetch 2 ,mem_l2cap_tx_multi_offset -0x2697 005299 nrtn blank -0x2698 005300 fetch 1 ,mem_op -0x2699 005301 set0 op_pkt_comp ,pdata -0x269a 005302 store 1 ,mem_op -0x269b 005303 branch l2cap_malloc_free -: 005305 clear_got_txlmp: -0x269c 005306 bpatch patch0d_1 ,mem_patch0d -0x269d 005307 fetch 1 ,mem_lmo_header_opcode -0x269e 005308 rshift pdata ,pdata -0x269f 005309 beq lmp_start_encryption_req ,start_encryption -0x26a0 005310 beq lmp_stop_encryption_req ,stop_encryption -0x26a1 005311 beq lmp_unsniff_req ,sniff_exit -0x26a2 005312 beq lmp_escape ,clear_lmp_escape -0x26a3 005313 rtnne lmp_accepted -0x26a4 005314 fetch 1 ,mem_lmo_payload -0x26a5 005315 beq lmp_sco_link_req ,sco_link_req_by_slave -0x26a6 005316 beq lmp_start_encryption_req ,clear_send_setup_complete -0x26a7 005317 rtn -: 005319 clear_lmp_escape: -0x26a8 005320 fetch 1 ,mem_lmo_payload -0x26a9 005321 set1 7 ,pdata -0x26aa 005322 rtn -: 005323 clear_send_setup_complete: -0x26ab 005324 rtn master -0x26ac 005325 fetch 1 ,mem_state -0x26ad 005326 rtnbit1 state_conn_comp -0x26ae 005327 jam lmp_setup_complete ,mem_lmo_opcode2 -0x26af 005328 rtn -: 005331 sco_link_req_by_slave: -0x26b0 005332 rtn master -0x26b1 005333 fetch 1 ,mem_mode -0x26b2 005334 isolate1 send_sco_when_slave ,pdata -0x26b3 005335 branch clean_mem_mode ,true -0x26b4 005337 rtn -: 005338 clean_mem_mode: -0x26b5 005339 set0 send_sco_when_slave ,pdata -0x26b6 005340 store 1 ,mem_mode -0x26b7 005341 rtn -: 005343 start_encryption: -0x26b8 005344 bpatch patch0d_2 ,mem_patch0d -0x26b9 005345 fetch 1 ,mem_state_map -0x26ba 005346 set1 smap_encryption ,pdata -0x26bb 005347 store 1 ,mem_state_map -0x26bc 005348 jam 1 ,core_encrypt -0x26bd 005349 fetch 1 ,mem_state -0x26be 005350 isolate1 state_conn_comp ,pdata -0x26bf 005351 rtn -: 005353 stop_encryption: -0x26c0 005354 bpatch patch0d_3 ,mem_patch0d -0x26c1 005355 fetch 1 ,mem_state_map -0x26c2 005356 set0 smap_encryption ,pdata -0x26c3 005357 store 1 ,mem_state_map -0x26c4 005358 jam 0 ,core_encrypt -0x26c5 005359 rtn -: 005362 sniff_init: -0x26c6 005363 bpatch patch0d_4 ,mem_patch0d -0x26c7 005364 copy clkn_bt ,pdata -0x26c8 005365 store 4 ,mem_lpm_delay_after_sniff -0x26c9 005366 add clkn_bt ,3 ,rega -0x26ca 005367 branch sniff_init_master ,master -0x26cb 005368 add clke_bt ,3 ,rega -: 005369 sniff_init_master: -0x26cc 005370 fetcht 2 ,mem_tsniff -0x26cd 005371 deposit rega -0x26ce 005372 set0 27 ,pdata -0x26cf 005373 idiv temp -0x26d0 005374 fetch 2 ,mem_dsniff -0x26d1 005375 call wait_div_end -0x26d2 005376 remainder regc -0x26d3 005377 isub regc ,pdata -0x26d4 005378 branch sniff_init_nowrap ,positive -0x26d5 005379 iadd temp ,pdata -: 005380 sniff_init_nowrap: -0x26d6 005381 iadd rega ,pdata -0x26d7 005382 store 4 ,mem_sniff_anchor -0x26d8 005383 jam switch_flag_init ,mem_switch_flag -0x26d9 005384 fetch 1 ,mem_state -0x26da 005385 set1 state_insniff ,pdata -0x26db 005386 store 1 ,mem_state -0x26dc 005387 fetch 1 ,mem_sniff_attempt -0x26dd 005388 store 1 ,mem_current_sniff_attempt -0x26de 005389 setarg 0 -0x26df 005390 store 3 ,mem_sniff_rcv -0x26e0 005391 store 3 ,mem_sniff_lost -0x26e1 005392 store 1 ,mem_sniff_unint_lost -0x26e2 005393 jam bt_evt_enter_sniff ,mem_fifo_temp -0x26e3 005394 call ui_ipc_send_event -0x26e4 005395 fetch 2 ,mem_rx_window_sniff -0x26e5 005396 store 2 ,mem_rx_window -0x26e6 005397 nrtn master -0x26e7 005398 add am_addr ,-1 ,queue -0x26e8 005399 rtn -: 005401 sniff_exit: -0x26e9 005402 bpatch patch0d_5 ,mem_patch0d -0x26ea 005403 fetch 1 ,mem_state -0x26eb 005404 rtnbit0 state_insniff -0x26ec 005405 set0 state_insniff ,pdata -0x26ed 005406 store 1 ,mem_state -0x26ee 005407 fetch 2 ,mem_rx_window_init -0x26ef 005408 store 2 ,mem_rx_window -0x26f0 005409 disable wake -0x26f1 005410 jam bt_evt_exit_sniff ,mem_fifo_temp -0x26f2 005411 branch ui_ipc_send_event -: 005414 check_attempt: -0x26f3 005415 bpatch patch0d_6 ,mem_patch0d -0x26f4 005416 enable attempt -0x26f5 005417 fetch 1 ,mem_state -0x26f6 005418 bbit1 state_insniff ,check_attempt_sniff -0x26f7 005419 rtnmark1 mark_testmode -0x26f8 005420 fetch 1 ,mem_arq -0x26f9 005421 rtnbit1 wack -0x26fa 005422 fetch 1 ,mem_lmp_to_send -0x26fb 005423 nrtn blank -0x26fc 005424 fetch 1 ,mem_op -0x26fd 005425 rtnbit1 op_txl2cap -: 005426 check_attempt_nomore: -0x26fe 005427 force 0 ,pdata -0x26ff 005428 rtn -: 005430 check_attempt_sniff: -0x2700 005431 bbit0 state_insco ,check_attempt_not_sco -0x2701 005432 fetch 1 ,mem_current_sniff_attempt -0x2702 005433 beq 2 ,check_attempt_sniff_restore_sco -0x2703 005434 fetch 1 ,mem_arq -0x2704 005435 bbit1 wack ,check_attempt_notimeout -0x2705 005436 bmark0 mark_esco_rxok ,check_attempt_notimeout -: 005437 check_attempt_sniff_restore_sco: -0x2706 005438 nbranch check_attempt_notimeout ,master -0x2707 005439 fetch 1 ,mem_lmp_to_send -0x2708 005440 nbranch check_attempt_notimeout ,blank -: 005441 check_attempt_sco_master: -0x2709 005442 fetch 1 ,mem_sco_poll -0x270a 005443 increase -1 ,pdata -0x270b 005444 store 1 ,mem_sco_poll -0x270c 005445 nbranch check_attempt_nomore ,blank -0x270d 005446 jam param_sco_poll ,mem_sco_poll -0x270e 005447 branch check_attempt_notimeout -: 005454 check_attempt_not_sco: -0x270f 005455 fetch 1 ,mem_current_sniff_attempt -0x2710 005456 bne 1 ,check_attempt_notimeout -0x2711 005457 fetch 1 ,mem_current_sniff_timeout -0x2712 005458 branch check_attempt_notimeout ,blank -0x2713 005459 increase -1 ,pdata -0x2714 005460 store 1 ,mem_current_sniff_timeout -0x2715 005461 fetch 1 ,mem_arq -0x2716 005462 rtnbit1 wack -0x2717 005463 nrtn match -: 005464 check_attempt_notimeout: -0x2718 005465 fetch 1 ,mem_current_sniff_attempt -0x2719 005466 increase -1 ,pdata -0x271a 005467 store 1 ,mem_current_sniff_attempt -0x271b 005468 rtn -: 005479 sniff_check_window: -0x271c 005480 bpatch patch0d_7 ,mem_patch0d -0x271d 005481 disable swfine -0x271e 005482 copy temp ,stop_watch -0x271f 005483 call context_search_sniff_window -0x2720 005484 disable user -0x2721 005485 nrtn zero -0x2722 005486 force 0 ,stop_watch -0x2723 005487 enable user -0x2724 005488 rtn -: 005491 check_esco_amaddr: -0x2725 005492 fetch 1 ,mem_esco_addr -0x2726 005493 icompare 0xff ,am_addr -0x2727 005494 rtn -: 005497 parse_l2cap: -0x2728 005498 bpatch patch0e_0 ,mem_patch0e -0x2729 005499 set0 mark_rxbuf_inuse ,mark -: 005500 parse_l2cap_cont: -0x272a 005501 jam l2cap_rx_clear ,mem_l2cap_rx_done -0x272b 005502 fetch 1 ,mem_l2cap_rxbuff_inuse -0x272c 005503 rtn blank -0x272d 005504 isolate1 l2cap_inuse_buff1 ,pdata -0x272e 005505 arg mem_l2cap_rxbuff1 ,contr -0x272f 005506 call process_rx_l2cap_pkt ,true -0x2730 005507 bpatch patch0e_1 ,mem_patch0e -0x2731 005508 fetch 1 ,mem_l2cap_rx_done -0x2732 005509 beq l2cap_rx_done ,parse_l2cap_release_buff1 -0x2733 005511 jam l2cap_rx_clear ,mem_l2cap_rx_done -0x2734 005512 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2735 005513 rtnbit0 l2cap_inuse_buff2 -0x2736 005514 arg mem_l2cap_rxbuff2 ,contr -0x2737 005515 call process_rx_l2cap_pkt -0x2738 005516 fetch 1 ,mem_l2cap_rx_done -0x2739 005517 beq l2cap_rx_done ,parse_l2cap_release_buff2 -0x273a 005518 rtn -: 005520 parse_l2cap_release_buff1: -0x273b 005521 fetch 1 ,mem_l2cap_rxbuff_inuse -0x273c 005522 set0 l2cap_inuse_buff1 ,pdata -0x273d 005523 store 1 ,mem_l2cap_rxbuff_inuse -0x273e 005524 setarg 0 -0x273f 005525 store 2 ,mem_l2cap_rxbuff1_len -0x2740 005526 rtn -: 005527 parse_l2cap_release_buff2: -0x2741 005528 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2742 005529 set0 l2cap_inuse_buff2 ,pdata -0x2743 005530 store 1 ,mem_l2cap_rxbuff_inuse -0x2744 005531 setarg 0 -0x2745 005532 store 2 ,mem_l2cap_rxbuff2_len -0x2746 005533 rtn -: 005535 l2cap_buff1_inuse: -0x2747 005536 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2748 005537 set1 l2cap_inuse_buff1 ,pdata -0x2749 005538 store 1 ,mem_l2cap_rxbuff_inuse -0x274a 005539 rtn -: 005541 l2cap_buff2_inuse: -0x274b 005542 fetch 1 ,mem_l2cap_rxbuff_inuse -0x274c 005543 set1 l2cap_inuse_buff2 ,pdata -0x274d 005544 store 1 ,mem_l2cap_rxbuff_inuse -0x274e 005545 rtn -: 005551 slave_send_access: -0x274f 005552 bpatch patch0e_2 ,mem_patch0e -0x2750 005553 add clke_bt ,1 ,bt_clk -0x2751 005554 call fetch_extm_bt_adr -0x2752 005555 force 0x03 ,freq_mode -0x2753 005556 call tx_radio_freq -0x2754 005557 call start_transmitter -0x2755 005558 call start_tx_external -0x2756 005559 branch send_access_word -: 005562 slave_conn_send_packet: -0x2757 005563 bpatch patch0e_3 ,mem_patch0e -0x2758 005564 call rf_setup_time_slave_slot -0x2759 005565 deposit clke_bt -0x275a 005566 fetcht 4 ,mem_next_btclk -0x275b 005567 isub temp ,pdata -0x275c 005568 rtnne 1 -0x275d 005569 compare type_null ,type ,0x1f -0x275e 005570 nbranch slave_conn_send_access ,true -0x275f 005571 fetch 1 ,mem_rx_type -0x2760 005572 rtn blank -: 005573 slave_conn_send_access: -0x2761 005574 call slave_send_access -: 005575 transmit_packet: -0x2762 005576 compare type_id ,type ,0x1f -0x2763 005577 branch end_of_packet ,true -0x2764 005578 rshift bt_clk ,temp -0x2765 005579 or temp ,0x40 ,white_init -: 005580 transmit_packet_whitened: -0x2766 005581 bpatch patch0e_4 ,mem_patch0e -0x2767 005582 enable enable_white -0x2768 005583 enable enable_hec -0x2769 005584 enable encode_fec1 -0x276a 005585 set0 mark_longpacket ,mark -0x276b 005586 deposit am_addr -0x276c 005587 inject mod ,3 -0x276d 005588 deposit type -0x276e 005589 inject mod ,4 -0x276f 005590 fetch 1 ,mem_arq -0x2770 005591 inject bucket ,4 -0x2771 005592 inject mod ,3 -0x2772 005593 enable enable_parity -0x2773 005594 inject mod ,8 -0x2774 005595 disable encode_fec1 -0x2775 005596 disable enable_parity -0x2776 005597 disable enable_hec -0x2777 005598 set0 psk3m ,radio_ctrl -0x2778 005599 arg 0 ,temp -0x2779 005600 call reserve_slot -0x277a 005601 bpatch patch0e_5 ,mem_patch0e -0x277b 005602 and type ,0x1f ,pdata -0x277c 005603 beq type_lmp ,transmit_lmp -0x277d 005604 beq type_null ,end_of_packet -0x277e 005605 beq type_poll ,end_of_packet -0x277f 005606 beq type_fhs ,transmit_fhs -0x2780 005607 beq type_dm1 ,transmit_dm1 -0x2781 005608 beq type_dh1 ,transmit_dh1 -0x2782 005609 beq type_hv3 ,transmit_hev -0x2783 005610 beq type_3dh1 ,transmit_3dh1 -0x2784 005611 arg 4 ,temp -0x2785 005612 call reserve_slot -0x2786 005613 beq type_dm3 ,transmit_dm3 -0x2787 005614 beq type_dh3 ,transmit_dh3 -0x2788 005615 arg 8 ,temp -0x2789 005616 call reserve_slot -0x278a 005617 beq type_dh5 ,transmit_dh5 -0x278b 005618 branch transmit_dm5 -: 005621 transmit_hev: -0x278c 005622 bpatch patch0e_6 ,mem_patch0e -0x278d 005623 enable encode_fec0 -0x278e 005624 enable enable_crc -0x278f 005625 enable encrypt -0x2790 005626 force 30 ,loopcnt -0x2791 005627 arg mem_sco_obuf ,contr -: 005628 transmit_ev_loop: -0x2792 005629 ifetch 1 ,contr -0x2793 005630 inject mod ,8 -0x2794 005631 loop transmit_ev_loop -0x2795 005632 bmark1 mark_esco ,transmit_end -0x2796 005633 branch end_of_packet -: 005635 transmit_fhs: -0x2797 005636 bpatch patch0e_7 ,mem_patch0e -0x2798 005637 fetch 1 ,mem_fhs_am_addr -0x2799 005638 icopy am_addr -0x279a 005639 fetch 1 ,mem_fhs_misc -0x279b 005640 icopy fhs_misc -0x279c 005641 fetch 3 ,mem_class -0x279d 005642 icopy fhs_class -0x279e 005643 fetch 2 ,mem_nap -0x279f 005644 icopy nap -0x27a0 005645 enable enable_crc -0x27a1 005646 enable encode_fec2 -0x27a2 005647 copy bt_adr ,rega -0x27a3 005648 call fetch_self_bt_adr -0x27a4 005649 pulse recalc -0x27a5 005650 nop 32 -0x27a6 005651 copy bt_clk ,timeup -0x27a7 005652 fetch 4 ,mem_clkn_bt -0x27a8 005653 icopy bt_clk -0x27a9 005654 preload fhs0 -0x27aa 005655 set1 58 ,pdata -0x27ab 005656 inject mod ,72 -0x27ac 005657 preload fhs1 -0x27ad 005658 inject mod ,72 -0x27ae 005659 copy timeup ,bt_clk -0x27af 005660 copy rega ,bt_adr -0x27b0 005661 enable enable_parity -0x27b1 005662 inject mod ,16 -0x27b2 005663 disable enable_parity -0x27b3 005664 branch end_of_packet -: 005666 transmit_lmp: -0x27b4 005667 bpatch patch0f_0 ,mem_patch0f -0x27b5 005668 enable encrypt -0x27b6 005669 enable enable_crc -0x27b7 005670 enable encode_fec2 -0x27b8 005671 fetch 1 ,mem_lmo_header_length -0x27b9 005672 and pdata ,0x1f8 ,temp -0x27ba 005673 arg mem_lmo_header_length ,contr -0x27bb 005674 increase 8 ,temp -: 005675 transmit_lmp_loop: -0x27bc 005676 add temp ,-72 ,regc -0x27bd 005677 nbranch transmit_lmp_finish ,positive -0x27be 005678 ifetch 9 ,contr -0x27bf 005679 inject mod ,72 -0x27c0 005680 copy regc ,temp -0x27c1 005681 branch transmit_lmp_loop -: 005682 transmit_lmp_finish: -0x27c2 005683 ifetch 9 ,contr -0x27c3 005684 iinject mod ,temp -0x27c4 005685 branch transmit_end -: 005687 transmit_dm1: -0x27c5 005688 enable encode_fec2 -0x27c6 005689 branch transmit_dmh -: 005690 transmit_dm3: -: 005691 transmit_dm5: -0x27c7 005692 enable encode_fec2 -0x27c8 005693 set1 mark_longpacket ,mark -0x27c9 005694 branch transmit_dmh -: 005696 transmit_3dh1: -0x27ca 005697 set1 psk3m ,radio_ctrl -: 005698 transmit_dh1: -0x27cb 005699 enable encode_fec0 -0x27cc 005700 branch transmit_dmh -: 005702 transmit_dh3: -: 005703 transmit_dh5: -0x27cd 005704 set1 psk3m ,radio_ctrl -0x27ce 005705 enable encode_fec0 -0x27cf 005706 set1 mark_longpacket ,mark -: 005708 transmit_dmh: -0x27d0 005709 bpatch patch0f_1 ,mem_patch0f -0x27d1 005710 fetch 1 ,mem_state_map -0x27d2 005711 bbit0 smap_edr ,transmit_noedr -0x27d3 005712 sub type ,3 ,null -0x27d4 005713 branch transmit_noedr ,positive -0x27d5 005714 disable encrypt -0x27d6 005715 disable encode_fec2 -0x27d7 005716 enable encode_fec0 -0x27d8 005717 disable enable_white -0x27d9 005718 set1 psk ,radio_ctrl -0x27da 005719 isolate1 psk3m ,radio_ctrl -0x27db 005720 branch transmit_edr3m ,true -0x27dc 005721 setarg 0xabeee -0x27dd 005722 inject mod ,20 -0x27de 005723 branch transmit_edr_sync_end -: 005724 transmit_edr3m: -0x27df 005725 setarg 0x5faeba -0x27e0 005726 inject mod ,24 -0x27e1 005727 setarg 0x12 -0x27e2 005728 inject mod ,6 -: 005729 transmit_edr_sync_end: -0x27e3 005730 enable enable_white -0x27e4 005731 set1 mark_longpacket ,mark -: 005732 transmit_noedr: -0x27e5 005733 enable encrypt -0x27e6 005734 enable enable_crc -0x27e7 005735 bmark1 mark_loopback ,transmit_loopback -0x27e8 005736 fetch 1 ,mem_tx_lch -0x27e9 005737 inject mod ,3 -0x27ea 005738 fetch 2 ,mem_tx_len -0x27eb 005739 iforce loopcnt -0x27ec 005740 bmark1 mark_longpacket ,transmit_long -0x27ed 005741 inject mod ,5 -0x27ee 005742 branch transmit_stuff -: 005743 transmit_long: -0x27ef 005744 inject mod ,13 -: 005745 transmit_stuff: -0x27f0 005746 deposit loopcnt -0x27f1 005747 branch transmit_end ,blank -0x27f2 005748 fetch 2 ,mem_txptr -0x27f3 005749 iforce contr -: 005750 transmit_stuff_loop: -0x27f4 005751 ifetch 1 ,contr -0x27f5 005752 inject mod ,8 -0x27f6 005753 loop transmit_stuff_loop -: 005756 transmit_end: -0x27f7 005757 enable enable_parity -0x27f8 005758 inject mod ,16 -0x27f9 005759 disable enable_parity -0x27fa 005760 call set_wait_ack -0x27fb 005761 fetch 1 ,mem_state_map -0x27fc 005762 bbit0 smap_edr ,end_of_packet -0x27fd 005763 force 0 ,pdata -0x27fe 005764 inject mod ,6 -0x27ff 005765 branch end_of_packet -: 005768 transmit_loopback: -0x2800 005769 bpatch patch0f_2 ,mem_patch0f -0x2801 005770 bmark1 mark_longpacket ,transmit_loopback_long -: 005771 transmit_loopback_short: -0x2802 005772 fetch 1 ,mem_lch_code -0x2803 005773 inject mod ,3 -0x2804 005774 fetch 1 ,mem_len -0x2805 005775 iforce regc -0x2806 005776 inject mod ,5 -0x2807 005777 branch transmit_loopback_cont -: 005778 transmit_loopback_long: -0x2808 005779 fetch 1 ,mem_lch_code -0x2809 005780 inject mod ,3 -0x280a 005781 fetch 2 ,mem_len -0x280b 005782 iforce regc -0x280c 005783 inject mod ,13 -: 005784 transmit_loopback_cont: -0x280d 005785 arg mem_rxbuf ,contr -: 005786 transmit_loopback_loop: -0x280e 005787 copy regc ,null -0x280f 005788 branch transmit_loopback_end ,zero -0x2810 005789 ifetch 1 ,contr -0x2811 005790 inject mod ,8 -0x2812 005791 increase -1 ,regc -0x2813 005792 branch transmit_loopback_loop -: 005793 transmit_loopback_end: -0x2814 005794 fetch 2 ,mem_tst_pktcnt_dmh -0x2815 005795 increase 1 ,pdata -0x2816 005796 store 2 ,mem_tst_pktcnt_dmh -0x2817 005797 branch transmit_end -: 005800 apply_switch_clke: -0x2818 005801 fetch 4 ,mem_clke_bt -0x2819 005802 add pdata ,7 ,rega -0x281a 005803 fetch 2 ,mem_slot_offset -0x281b 005804 nbranch apply_switch_nozero ,blank -0x281c 005805 increase -3 ,rega -0x281d 005806 branch apply_switch_wait_loop -: 005807 apply_switch_nozero: -0x281e 005808 mul32 pdata ,12 ,pdata -0x281f 005809 hfetcht 2 ,core_halfslot -0x2820 005810 increase 1 ,temp -: 005811 apply_switch_loop: -0x2821 005812 isub temp ,pdata -0x2822 005813 nbranch apply_switch_bt ,positive -0x2823 005814 increase -1 ,rega -0x2824 005815 branch apply_switch_loop -: 005816 apply_switch_bt: -0x2825 005817 sub pdata ,0 ,pdata -: 005818 apply_switch_wait_loop: -0x2826 005819 until null ,oneslot -0x2827 005820 compare 0 ,clkn_bt ,3 -0x2828 005821 nbranch apply_switch_wait_loop ,true -0x2829 005822 iforce clke_rt -0x282a 005823 copy rega ,clke_bt -0x282b 005824 iforce clke_rt -0x282c 005825 rtn -: 005828 calc_slot_offset: -0x282d 005829 bpatch patch0f_3 ,mem_patch0f -0x282e 005830 until null ,halfslot -0x282f 005831 deposit clke -0x2830 005832 iforce contr -0x2831 005833 rshift16 ,pdata ,pdata -0x2832 005834 isub clkn_bt ,loopcnt -0x2833 005835 and_into 3 ,loopcnt -0x2834 005836 nbranch calc_bt_portion ,zero -0x2835 005837 force 0 ,pdata -0x2836 005838 branch calc_skip_bt -: 005839 calc_bt_portion: -0x2837 005840 arg 3750 ,temp -0x2838 005841 force 0 ,pdata -: 005842 calc_slot_offset_loop: -0x2839 005843 iadd temp ,pdata -0x283a 005844 loop calc_slot_offset_loop -: 005845 calc_skip_bt: -0x283b 005846 iadd contr ,pdata -0x283c 005847 div pdata ,12 -0x283d 005848 call wait_div_end -0x283e 005849 quotient pdata -0x283f 005850 store 2 ,mem_slot_offset -0x2840 005851 rtn -: 005853 calc_clke_offset: -0x2841 005854 bpatch patch0f_4 ,mem_patch0f -0x2842 005855 deposit clke -0x2843 005856 copy clkn ,temp -0x2844 005857 isub temp ,null -0x2845 005858 nsetflag positive ,44 ,pdata -0x2846 005859 isub temp ,temp -0x2847 005860 setarg 3750 -0x2848 005861 isolate0 15 ,temp -0x2849 005862 branch calc_clke_pos ,true -0x284a 005863 setarg -61786 -0x284b 005864 iadd temp ,temp -: 005865 calc_clke_pos: -0x284c 005866 storet 6 ,mem_le_clk_offset -0x284d 005867 rtn le -0x284e 005868 storet 6 ,mem_clk_offset -0x284f 005869 rtn -: 005871 calc_clke: -0x2850 005872 disable clknt -0x2851 005873 fetch 6 ,mem_le_clk_offset -0x2852 005874 branch calc_clke2 ,le -0x2853 005875 fetch 6 ,mem_clk_offset -: 005876 calc_clke2: -0x2854 005877 iadd clkn ,alarm -0x2855 005878 increase 10 ,alarm -0x2856 005879 setarg 3750 -0x2857 005880 isub alarm ,pdata -0x2858 005881 isolate0 15 ,pdata -0x2859 005882 branch calc_clke_pos_adj ,true -0x285a 005883 setarg 0xf15a -0x285b 005884 iadd alarm ,alarm -: 005885 calc_clke_pos2: -0x285c 005886 copy alarm ,clke -0x285d 005887 rtn -: 005888 calc_clke_pos_adj: -0x285e 005889 force 0 ,null -0x285f 005890 branch calc_clke_pos2 -: 005897 calc_radio_freq: -0x2860 005898 bpatch patch0f_5 ,mem_patch0f -0x2861 005899 call set_sync_on -0x2862 005900 copy bt_clk ,pdata -0x2863 005901 and_into 0x180 ,pdata -0x2864 005902 compare 3 ,freq_mode ,0x07 -0x2865 005903 nbranch freq_not_connection ,true -0x2866 005904 rshift3 pdata ,pdata -0x2867 005905 iadd freq_index ,pdata -0x2868 005906 branch do_hop_mod_now -: 005907 freq_not_connection: -0x2869 005908 copy freq_index ,pdata -: 005909 do_hop_mod_now: -0x286a 005910 div pdata ,79 -0x286b 005911 pulse recalc -0x286c 005912 call wait_div_end -0x286d 005913 remainder rega -0x286e 005914 add rega ,-40 ,temp -0x286f 005915 branch odd_half ,positive -0x2870 005916 lshift rega ,temp -0x2871 005917 branch freq_result -: 005918 odd_half: -0x2872 005919 lshift temp ,temp -0x2873 005920 increase 1 ,temp -: 005921 freq_result: -0x2874 005922 bpatch patch0f_6 ,mem_patch0f -0x2875 005923 fetch 1 ,mem_mode -0x2876 005924 bbit0 afh_change ,afh_process_con -: 005925 afh_process_0: -0x2877 005926 fetch 4 ,mem_afh_instant -0x2878 005927 isub bt_clk ,null -0x2879 005928 branch afh_process_con ,positive -0x287a 005929 call afh_clear -0x287b 005930 fetch 1 ,mem_afh_new_mod -0x287c 005931 rtn blank -0x287d 005932 fetch 1 ,mem_mode -0x287e 005933 set1 afh_enable ,pdata -0x287f 005934 store 1 ,mem_mode -0x2880 005935 fetch 5 ,mem_afh_map_new -0x2881 005936 store 5 ,mem_afh_map_lo -0x2882 005937 ifetch 5 ,contr -0x2883 005938 store 5 ,mem_afh_map_hi -0x2884 005939 call afh_process_freq_map -: 005940 afh_process_con: -0x2885 005941 fetch 1 ,mem_mode -0x2886 005942 rtnbit0 afh_enable -0x2887 005943 isolate1 1 ,bt_clk -0x2888 005944 branch afh_same_channel ,true -0x2889 005945 rshift3 temp ,rega -0x288a 005946 and temp ,7 ,queue -0x288b 005947 setarg mem_afh_map_lo -0x288c 005948 iadd rega ,rega -0x288d 005949 ifetch 1 ,rega -0x288e 005950 qisolate0 pdata -0x288f 005951 branch afh_process_1 ,true -0x2890 005952 deposit temp -0x2891 005953 branch afh_process_end -: 005954 afh_process_1: -0x2892 005955 fetch 1 ,mem_afh_used -0x2893 005956 iforce regb -0x2894 005957 deposit bt_clk -0x2895 005958 and_into 0x180 ,pdata -0x2896 005959 rshift3 pdata ,pdata -0x2897 005960 iadd freq_index ,pdata -0x2898 005961 idiv regb -0x2899 005962 setarg mem_afh_map -0x289a 005963 call wait_div_end -0x289b 005964 remainder rega -0x289c 005965 iadd rega ,contr -0x289d 005966 ifetch 1 ,contr -: 005967 afh_process_end: -0x289e 005968 store 1 ,mem_afh_index -0x289f 005969 iforce temp -0x28a0 005970 rtn -: 005972 afh_same_channel: -0x28a1 005973 fetch 1 ,mem_afh_index -0x28a2 005974 iforce temp -0x28a3 005975 rtn -: 005977 afh_clear: -0x28a4 005978 fetch 1 ,mem_mode -0x28a5 005979 set0 afh_enable ,pdata -0x28a6 005980 set0 afh_change ,pdata -0x28a7 005981 store 1 ,mem_mode -0x28a8 005982 rtn -: 005988 afh_process_freq_map: -0x28a9 005989 bpatch patch0f_7 ,mem_patch0f -0x28aa 005990 arg mem_afh_map ,contw -0x28ab 005991 force 10 ,loopcnt -0x28ac 005992 call memset0 -0x28ad 005993 arg mem_afh_map ,contw -0x28ae 005994 force 0 ,regc -0x28af 005995 force 2 ,queue -: 005996 process_freq_3: -0x28b0 005997 fetch 5 ,mem_afh_map_lo -0x28b1 005998 iforce temp -0x28b2 005999 compare 2 ,queue ,0xff -0x28b3 006000 branch process_freq_1 ,true -0x28b4 006001 rshift temp ,temp -: 006002 process_freq_1: -0x28b5 006003 isolate0 0 ,temp -0x28b6 006004 branch process_freq_0 ,true -0x28b7 006005 deposit regc -0x28b8 006006 istore 1 ,contw -: 006007 process_freq_0: -0x28b9 006008 rshift2 temp ,temp -0x28ba 006009 increase 2 ,regc -0x28bb 006010 compare 40 ,regc ,0xfe -0x28bc 006011 nbranch process_freq_2 ,true -0x28bd 006012 fetch 5 ,mem_afh_map_hi -0x28be 006013 iforce temp -0x28bf 006014 compare 2 ,queue ,0xff -0x28c0 006015 branch process_freq_2 ,true -0x28c1 006016 rshift temp ,temp -: 006017 process_freq_2: -0x28c2 006018 sub regc ,78 ,null -0x28c3 006019 branch process_freq_1 ,positive -0x28c4 006020 force 1 ,regc -0x28c5 006021 increase -1 ,queue -0x28c6 006022 nbranch process_freq_3 ,zero -0x28c7 006023 arg mem_afh_map ,rega -0x28c8 006024 deposit contw -0x28c9 006025 isub rega ,pdata -0x28ca 006026 store 1 ,mem_afh_used -0x28cb 006027 rtn -: 006029 rx_radio_freq: -0x28cc 006030 bpatch patch10_0 ,mem_patch10 -0x28cd 006031 call calc_radio_freq -0x28ce 006032 fetch 1 ,mem_debug_config -0x28cf 006033 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now -0x28d0 006034 fetcht 1 ,mem_rx_fixed_freq -: 006035 rx_radio_freq_now: -0x28d1 006036 branch set_freq_rx -: 006039 tx_radio_freq: -0x28d2 006040 bpatch patch10_1 ,mem_patch10 -0x28d3 006041 call calc_radio_freq -0x28d4 006042 fetch 1 ,mem_debug_config -0x28d5 006043 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now -0x28d6 006044 fetcht 1 ,mem_tx_fixed_freq -: 006045 tx_radio_freq_now: -0x28d7 006046 branch set_freq_tx -: 006049 fetch_giac: -0x28d8 006050 force 0 ,uap -0x28d9 006051 fetch 3 ,mem_glap -0x28da 006052 iforce lap -0x28db 006053 rtn -: 006055 fetch_page_bt_adr: -0x28dc 006056 bpatch patch10_2 ,mem_patch10 -0x28dd 006057 fetch 1 ,mem_hci_puap -0x28de 006058 icopy uap -0x28df 006059 fetch 3 ,mem_hci_plap -0x28e0 006060 icopy lap -0x28e1 006061 rtn -: 006063 fetch_self_bt_adr: -0x28e2 006064 bpatch patch10_3 ,mem_patch10 -0x28e3 006065 fetch 2 ,mem_nap -0x28e4 006066 icopy nap -0x28e5 006067 fetch 1 ,mem_uap -0x28e6 006068 icopy uap -0x28e7 006069 fetch 3 ,mem_lap -0x28e8 006070 icopy lap -0x28e9 006071 rtn -: 006073 fetch_extm_bt_adr: -0x28ea 006074 bpatch patch10_4 ,mem_patch10 -0x28eb 006075 fetch 2 ,mem_pnap -0x28ec 006076 icopy nap -0x28ed 006077 fetch 1 ,mem_puap -0x28ee 006078 icopy uap -0x28ef 006079 fetch 3 ,mem_plap -0x28f0 006080 icopy lap -0x28f1 006081 rtn -: 006084 fetch_diac: -0x28f2 006085 bmark1 mark_all_diac ,fetch_diac_do -0x28f3 006086 rtnmark0 mark_inquiry_state -0x28f4 006087 rtnmark0 mark_periodical_diac -: 006088 fetch_diac_do: -0x28f5 006089 and_into -256 ,lap -0x28f6 006090 pulse recalc -0x28f7 006091 nop 32 -0x28f8 006092 rtn -: 006095 shutdown_radio: -0x28f9 006096 bpatch patch10_5 ,mem_patch10 -0x28fa 006097 branch shutdown_radio0 ,is_rx -0x28fb 006098 jam 0xd4 ,rf_tx_pa_ib -0x28fc 006099 nop 4 -0x28fd 006100 jam 0xd2 ,rf_tx_pa_ib -0x28fe 006101 nop 4 -0x28ff 006102 jam 0xd1 ,rf_tx_pa_ib -0x2900 006103 nop 4 -0x2901 006104 fetch 1 ,mem_tx_power -0x2902 006105 beq tx_power_0db ,shutdown_radio_0db -0x2903 006106 beq tx_power_3db ,shutdown_radio_3db -0x2904 006107 beq tx_power_5db ,shutdown_radio_5db -0x2905 006108 beq tx_power_f3db ,shutdown_radio_f3db -0x2906 006109 beq tx_power_f5db ,shutdown_radio_f5db -0x2907 006110 beq tx_power_pair ,shutdown_radio_pair -: 006111 shutdown_radio_5db: -: 006112 shutdown_radio_0db: -0x2908 006113 jam 0xd0 ,rf_tx_pa_ib -0x2909 006114 jam 0xe0 ,rf_tx_pa_gc -: 006115 shutdown_radio0: -0x290a 006116 force 0 ,radio_ctrl -0x290b 006117 disable is_rx -0x290c 006118 disable is_tx -0x290d 006119 pulse packet_end -0x290e 006120 jam 0x0 ,rfen_mdm -0x290f 006121 jam 0x0 ,rfen_tx -0x2910 006122 jam 0x0 ,rfen_rx -0x2911 006123 jam 0 ,rfen_sn -0x2912 006124 jam 0x70 ,rfen_msc -0x2913 006125 jam 0x0 ,rfen_adc -0x2914 006126 rtn -: 006128 shutdown_radio_pair: -: 006129 shutdown_radio_f5db: -: 006130 shutdown_radio_f3db: -: 006131 shutdown_radio_3db: -0x2915 006132 jam 0xd0 ,rf_tx_pa_ib -0x2916 006133 jam 0xc0 ,rf_tx_pa_gc -0x2917 006134 branch shutdown_radio0 -: 006136 set_sync_on: -0x2918 006137 bpatch patch10_6 ,mem_patch10 -0x2919 006138 jam 0x0 ,rfen_mdm -0x291a 006139 jam 0x0 ,rfen_tx -0x291b 006140 jam 0x18 ,rfen_rx -0x291c 006141 jam 0xa7 ,rfen_sn -0x291d 006142 jam 0x7f ,rfen_msc -0x291e 006143 rtn -: 006145 set_freq_rx: -0x291f 006146 bpatch patch10_7 ,mem_patch10 -0x2920 006148 storet 1 ,mem_last_freq -0x2921 006149 add temp ,rx_freq_offset ,rega -0x2922 006150 jam 0x07 ,rf_balun_ctrim -0x2923 006151 branch rf_write_freq -: 006152 rf_rx_enable: -0x2924 006153 bpatch patch11_0 ,mem_patch11 -0x2925 006154 jam 0xcf ,rfen_tx -0x2926 006155 nop 10 -0x2927 006156 jam 0xff ,rfen_rx -0x2928 006157 jam 0xaf ,rfen_sn -0x2929 006158 jam 0xff ,rfen_msc -0x292a 006159 nop 10 -0x292b 006160 jam 0xa0 ,rfen_mdm -0x292c 006161 rtn -: 006163 set_freq_tx_offset: -0x292d 006164 fetch 1 ,mem_250k_freq_enable -0x292e 006165 branch set_freq_tx_2m_offset ,blank -: 006166 set_freq_tx_0m_offset: -0x292f 006167 add temp ,2 ,rega -0x2930 006168 rtn -: 006169 set_freq_tx_2m_offset: -0x2931 006170 add temp ,0 ,rega -0x2932 006171 rtn -: 006173 set_freq_tx: -0x2933 006174 bpatch patch11_1 ,mem_patch11 -0x2934 006175 storet 1 ,mem_last_freq -0x2935 006176 call set_freq_tx_offset -0x2936 006177 call rf_write_freq -0x2937 006178 setarg param_pll_setup -0x2938 006179 call sleep -: 006180 txon: -0x2939 006181 jam 0x1 ,rfen_adc -0x293a 006182 jam 0x3c ,rfen_rx -0x293b 006183 jam 0xe0 ,rfen_tx -0x293c 006184 jam 0x12 ,rf_balun_ctrim -0x293d 006185 nop 10 -0x293e 006186 jam 0x01 ,rfen_mdm -0x293f 006187 jam 0x3d ,rfen_mdm -0x2940 006188 nop 10 -0x2941 006189 jam 0xb7 ,rfen_sn -0x2942 006190 nop 10 -0x2943 006191 jam 0x7f ,rfen_mdm -: 006192 txon_power_select: -0x2944 006193 fetch 1 ,mem_tx_power -0x2945 006194 beq tx_power_0db ,set_tx_power_0db -0x2946 006195 beq tx_power_3db ,set_tx_power_3db -0x2947 006196 beq tx_power_5db ,set_tx_power_5db -0x2948 006197 beq tx_power_f3db ,set_tx_power_f3db -0x2949 006198 beq tx_power_f5db ,set_tx_power_f5db -0x294a 006199 beq tx_power_pair ,set_tx_power_pair -: 006200 set_tx_power_0db: -0x294b 006201 jam 0xf0 ,rf_tx_pa_gc -0x294c 006202 call txon_common -0x294d 006203 jam 0xd8 ,rf_tx_pa_ib -0x294e 006204 rtn -: 006206 set_tx_power_3db: -0x294f 006207 jam 0xdf ,rf_tx_pa_gc -0x2950 006208 call txon_common -0x2951 006209 jam 0xdf ,rf_tx_pa_ib -0x2952 006210 rtn -: 006212 set_tx_power_5db: -0x2953 006213 jam 0xff ,rf_tx_pa_gc -0x2954 006214 call txon_common -0x2955 006215 jam 0xdf ,rf_tx_pa_ib -0x2956 006216 rtn -: 006217 set_tx_power_f3db: -0x2957 006218 jam 0xce ,rf_tx_pa_gc -0x2958 006219 call txon_common -0x2959 006220 jam 0xd8 ,rf_tx_pa_ib -0x295a 006221 rtn -: 006223 set_tx_power_f5db: -0x295b 006224 jam 0xcb ,rf_tx_pa_gc -0x295c 006225 call txon_common -0x295d 006226 jam 0xd8 ,rf_tx_pa_ib -0x295e 006227 rtn -: 006229 set_tx_power_pair: -0x295f 006230 jam 0xd0 ,rf_tx_pa_ib -0x2960 006231 jam 0xc0 ,rf_tx_pa_gc -0x2961 006232 jam 0x4c ,0x8957 -0x2962 006233 jam 0x6c ,0x8958 -0x2963 006234 jam 0x50 ,0x8959 -0x2964 006235 rtn -: 006237 txon_common: -0x2965 006238 nop 4 -0x2966 006239 jam 0xd1 ,rf_tx_pa_ib -0x2967 006240 nop 4 -0x2968 006241 jam 0xd2 ,rf_tx_pa_ib -0x2969 006242 nop 4 -0x296a 006243 jam 0xd4 ,rf_tx_pa_ib -0x296b 006244 rtn -: 006247 initialize_radio: -0x296c 006248 jam clksel_rc ,core_clksel -: 006249 initialize_radio_wait: -0x296d 006250 fetch 2 ,mem_rf_init_ptr -0x296e 006251 bbit0 14 ,initialize_radio_wait -0x296f 006252 iforce contr -0x2970 006253 arg 0x8900 ,temp -: 006254 initialize_radio_loop: -0x2971 006255 ifetch 1 ,contr -0x2972 006256 beq 0xff ,initialize_radio_cont -0x2973 006257 ior temp ,contw -0x2974 006258 ifetch 1 ,contr -0x2975 006259 istore 1 ,contw -0x2976 006260 branch initialize_radio_loop -: 006261 initialize_radio_cont: -0x2977 006262 bpatch patch11_2 ,mem_patch11 -0x2978 006263 call lpm_cal_xtal_startup -0x2979 006264 call switchto_dpllclk -0x297a 006266 setarg param_dpll_start_delay -0x297b 006267 iadd clkn_bt ,pdata -0x297c 006268 store 4 ,mem_dpll_clkn -0x297d 006269 set1 reset ,radio_ctrl -0x297e 006270 force 0 ,radio_ctrl -0x297f 006271 ncall do_rccal ,wake -0x2980 006272 branch set_rccal -: 006275 rf_write_freq: -0x2981 006276 bpatch patch11_3 ,mem_patch11 -0x2982 006277 setarg 2400 -0x2983 006278 iadd rega ,temp -0x2984 006279 fetch 1 ,mem_fcomp_mul -0x2985 006280 jam 0x04 ,rf_pll_rstn -0x2986 006281 imul32 temp ,pdata -0x2987 006282 fetcht 1 ,mem_fcomp_div -0x2988 006283 idiv temp -0x2989 006284 call wait_div_end -0x298a 006285 quotient rega -0x298b 006286 remainder pdata -0x298c 006287 lshift16 pdata ,pdata -0x298d 006288 lshift4 pdata ,pdata -0x298e 006289 idiv temp -0x298f 006290 call wait_div_end -0x2990 006291 quotient pdata -0x2991 006292 lshift8 pdata ,pdata -0x2992 006293 lshift pdata ,pdata -0x2993 006294 ior rega ,pdata -0x2994 006295 hstore 4 ,rf_pll_intg -0x2995 006296 jam 0x44 ,rf_pll_rstn -0x2996 006297 jam 0xc4 ,rf_pll_rstn -0x2997 006298 rtn -: 006301 do_rccal: -0x2998 006302 bpatch patch11_4 ,mem_patch11 -0x2999 006303 jam 0x02 ,rfen_adc -0x299a 006304 setarg 250000 -0x299b 006305 call sleep -0x299c 006306 jam 0x7f ,rfen_rx -0x299d 006307 nop 130 -0x299e 006308 jam 0x30 ,rf_rccal_ctrl -0x299f 006309 jam 0xd0 ,rfen_tx -0x29a0 006310 jam 0x70 ,rf_rccal_ctrl -0x29a1 006311 jam 0xf0 ,rf_rccal_ctrl -0x29a2 006312 force 50 ,loopcnt -: 006313 do_rccal_loop: -0x29a3 006314 hfetch 1 ,rf_rccal_result -0x29a4 006315 bbit1 5 ,do_rccal_end -0x29a5 006316 loop do_rccal_loop -: 006317 do_rccal_end: -0x29a6 006318 store 1 ,mem_rf_rccal -0x29a7 006319 jam 0 ,rfen_tx -0x29a8 006320 jam 0 ,rfen_rx -0x29a9 006321 jam 0x00 ,rfen_adc -0x29aa 006322 rtn -: 006324 set_rccal: -0x29ab 006325 bpatch patch11_5 ,mem_patch11 -0x29ac 006326 fetch 1 ,mem_rf_rccal -0x29ad 006327 set1 5 ,pdata -0x29ae 006328 hstore 1 ,rf_rccal_ctrl -0x29af 006329 hfetcht 1 ,rf_bpf_ctrim -0x29b0 006330 and_into 7 ,temp -0x29b1 006331 lshift3 pdata ,pdata -0x29b2 006332 ior temp ,pdata -0x29b3 006333 hstore 1 ,rf_bpf_ctrim -0x29b4 006334 hfetch 1 ,rf_bpf_ib -0x29b5 006335 set0 bpf_rccal ,pdata -0x29b6 006336 hstore 1 ,rf_bpf_ib -0x29b7 006337 hfetch 1 ,rf_adc_rccal -0x29b8 006338 set0 adc_rccal ,pdata -0x29b9 006339 hstore 1 ,rf_adc_rccal -0x29ba 006340 rtn -: 006342 save_rssi: -0x29bb 006343 bpatch patch11_6 ,mem_patch11 -0x29bc 006344 hfetch 2 ,rf_afc_d2a -0x29bd 006345 rshift4 pdata ,pdata -0x29be 006346 rshift3 pdata ,pdata -0x29bf 006347 sub pdata ,0 ,pdata -: 006348 bcd: -0x29c0 006349 and_into 0xff ,pdata -0x29c1 006350 div pdata ,10 -0x29c2 006351 call wait_div_end -0x29c3 006352 quotient pdata -0x29c4 006353 lshift4 pdata ,pdata -0x29c5 006354 remainder temp -0x29c6 006355 ior temp ,pdata -0x29c7 006356 store 1 ,mem_rssi -0x29c8 006357 rtn -: 006360 switchto_dpllclk: -0x29c9 006361 jam clksel_rc ,core_clksel -0x29ca 006362 hfetch 1 ,rf_clkpll_frac + 2 -0x29cb 006363 set0 4 ,pdata -0x29cc 006364 set0 5 ,pdata -0x29cd 006365 hstore 1 ,rf_clkpll_frac + 2 -0x29ce 006366 jam 0x00 ,rfen_ck -0x29cf 006367 jam 0x00 ,rfen_msc -0x29d0 006368 jam 0x70 ,rfen_msc -0x29d1 006369 jam 0xff ,rfen_ck -0x29d2 006370 hfetch 1 ,rf_clkpll_frac + 2 -0x29d3 006371 set1 4 ,pdata -0x29d4 006372 set1 5 ,pdata -0x29d5 006373 hstore 1 ,rf_clkpll_frac + 2 -0x29d6 006374 call init_lpm_ctrl -0x29d7 006375 hfetch 1 ,rf_clkpll_int -0x29d8 006376 set1 7 ,pdata -0x29d9 006377 hstore 1 ,rf_clkpll_int -0x29da 006378 set0 7 ,pdata -0x29db 006379 hstore 1 ,rf_clkpll_int -0x29dc 006380 set1 7 ,pdata -0x29dd 006381 hstore 1 ,rf_clkpll_int -0x29de 006382 jam clksel_dpll ,core_clksel -0x29df 006383 nop 1 -0x29e0 006384 jam clksel_xtal ,core_clksel -0x29e1 006385 hfetch 1 ,rf_clkpll_frac + 2 -0x29e2 006386 and_into 0xcf ,pdata -0x29e3 006387 hstore 1 ,rf_clkpll_frac + 2 -0x29e4 006388 or_into 0x30 ,pdata -0x29e5 006389 hstore 1 ,rf_clkpll_frac + 2 -0x29e6 006390 rtn -: 006393 xtal_fast_wake: -0x29e7 006394 setarg 0xf0f -0x29e8 006395 branch lpm_write_config -: 006397 init_lpm_ctrl: -0x29e9 006398 setarg 0x80f -0x29ea 006399 branch lpm_write_config -: 006403 start_receiver: -0x29eb 006404 bpatch patch11_7 ,mem_patch11 -0x29ec 006405 call rf_rx_enable -0x29ed 006406 disable is_tx -0x29ee 006407 enable is_rx -0x29ef 006408 pulse init_encrypt -0x29f0 006409 rtn -: 006411 prep_crypt: -0x29f1 006412 bpatch patch12_0 ,mem_patch12 -0x29f2 006413 fetch 1 ,mem_state_map -0x29f3 006414 isolate1 smap_encryption ,pdata -0x29f4 006415 setflag true ,0 ,pdata -0x29f5 006416 hstore 1 ,core_encrypt -0x29f6 006417 arg mem_kc ,contr -0x29f7 006418 ifetch 9 ,contr -0x29f8 006419 iforce kc_ls -0x29f9 006420 ifetch 7 ,contr -0x29fa 006421 iforce kc_ms -0x29fb 006422 fetch 1 ,mem_key_size -0x29fc 006423 add pdata ,-1 ,g1l -0x29fd 006424 pulse kc_p_activate -0x29fe 006425 rtn -: 006427 wait_access_end: -0x29ff 006428 deposit clke -0x2a00 006429 store 6 ,mem_sync_clke -0x2a01 006430 disable decode_fec0 -0x2a02 006431 nbranch shutdown_radio ,sync -0x2a03 006432 arg param_clke_cal ,clke_rt -0x2a04 006433 increase 1 ,clke_bt -0x2a05 006434 and_into 0x1fc ,clke_bt -0x2a06 006435 rtn -: 006439 wait_access_mhalfbnd: -0x2a07 006440 enable decode_fec0 -: 006441 wait_access_mhalfbnd_correlate: -0x2a08 006442 correlate null ,mhalfbnd -0x2a09 006443 branch wait_access_end ,sync -0x2a0a 006444 compare 0x02 ,clke_bt ,0x02 -0x2a0b 006445 nbranch wait_access_mhalfbnd_correlate ,true -0x2a0c 006446 branch wait_access_end -: 006448 wait_access_clkn_rt: -0x2a0d 006449 bpatch patch12_1 ,mem_patch12 -0x2a0e 006450 arg param_conn_access ,timeup -0x2a0f 006451 enable decode_fec0 -0x2a10 006452 correlate clkn_rt ,meet -0x2a11 006453 disable decode_fec0 -0x2a12 006454 nbranch shutdown_radio ,sync -0x2a13 006455 rtn -: 006457 wait_access_forever: -0x2a14 006458 bpatch patch12_2 ,mem_patch12 -0x2a15 006459 enable decode_fec0 -0x2a16 006460 correlate null ,timeout -0x2a17 006461 disable decode_fec0 -0x2a18 006462 nbranch shutdown_radio ,sync -0x2a19 006463 arg param_clke_cal ,clke_rt -0x2a1a 006464 and_into 0x1fc ,clke_bt -0x2a1b 006465 rtn -: 006468 reserve_slot: -0x2a1c 006469 bpatch patch12_3 ,mem_patch12 -0x2a1d 006470 iforce rega -0x2a1e 006471 deposit bt_clk -0x2a1f 006472 iadd temp ,timeup -0x2a20 006473 copy timeup ,pdata -0x2a21 006474 store 4 ,mem_next_btclk -0x2a22 006475 deposit rega -0x2a23 006476 rtn -: 006479 ahead_window: -0x2a24 006480 copy pdata ,temp -0x2a25 006481 bpatch patch12_4 ,mem_patch12 -0x2a26 006482 copy temp ,pdata -0x2a27 006483 call clk2bt -0x2a28 006484 lshift16 bt_clk ,pdata -0x2a29 006485 set1 44 ,pdata -0x2a2a 006486 call clk_diff -0x2a2b 006487 set0 44 ,pdata -0x2a2c 006488 call get_clk -0x2a2d 006489 call clk_diff -0x2a2e 006490 rtn user -0x2a2f 006491 call clk2rt -0x2a30 006492 iforce stop_watch -0x2a31 006493 until null ,timeout -0x2a32 006494 rtn -: 006497 setup_clk: -0x2a33 006498 bpatch patch12_5 ,mem_patch12 -0x2a34 006499 branch setup_clkn ,clknt -0x2a35 006500 until clke_rt ,meet -: 006501 skip_setup_clke: -0x2a36 006502 copy clke_bt ,temp -0x2a37 006503 branch setup_clknbt -: 006504 setup_clkn: -0x2a38 006505 branch skip_setup_clkn ,attempt -0x2a39 006506 until clkn_rt ,meet -: 006507 skip_setup_clkn: -0x2a3a 006508 copy clkn_bt ,temp -: 006509 setup_clknbt: -0x2a3b 006510 branch setup_clk11 ,user -0x2a3c 006511 compare 1 ,temp ,3 -0x2a3d 006512 nbranch setup_clk ,true -: 006513 setup_complete: -0x2a3e 006514 bpatch patch12_6 ,mem_patch12 -0x2a3f 006515 fetch 1 ,mem_state -0x2a40 006516 rtnbit0 state_inconn -0x2a41 006517 fetch 4 ,mem_next_btclk -0x2a42 006518 isub temp ,pdata -0x2a43 006519 nrtn positive -0x2a44 006520 sub pdata ,0xff ,null -0x2a45 006521 branch setup_clk ,positive -0x2a46 006522 rtn -: 006523 setup_clk11: -0x2a47 006524 compare 3 ,temp ,3 -0x2a48 006525 nbranch setup_clk ,true -0x2a49 006526 branch setup_complete -: 006528 rf_setup_time: -0x2a4a 006529 bpatch patch12_7 ,mem_patch12 -0x2a4b 006530 arg param_rf_setup ,timeup -0x2a4c 006531 branch setup_clk -: 006533 rf_setup_time_slave_slot: -0x2a4d 006534 disable user -0x2a4e 006535 branch rf_setup_time -: 006537 rf_setup_time_master_slot: -0x2a4f 006538 enable user -0x2a50 006539 branch rf_setup_time -: 006541 start_transmitter: -0x2a51 006542 bpatch patch13_0 ,mem_patch13 -0x2a52 006543 call prep_crypt -0x2a53 006544 disable is_rx -0x2a54 006545 enable is_tx -0x2a55 006546 rtn -: 006550 start_tx_native: -0x2a56 006551 bpatch patch13_1 ,mem_patch13 -0x2a57 006552 arg param_tx_setup ,timeup -0x2a58 006553 until clkn_rt ,meet -0x2a59 006554 pulse init_encrypt -0x2a5a 006555 rtn -: 006557 start_rx_native: -0x2a5b 006558 bpatch patch13_2 ,mem_patch13 -0x2a5c 006559 arg param_rx_setup ,timeup -0x2a5d 006560 until clkn_rt ,meet -0x2a5e 006561 rtn -: 006564 start_tx_external: -0x2a5f 006565 bpatch patch13_3 ,mem_patch13 -0x2a60 006566 arg param_tx_setup ,timeup -0x2a61 006567 until clke_rt ,meet -0x2a62 006568 pulse init_encrypt -0x2a63 006569 rtn -: 006571 send_access_word: -0x2a64 006572 bpatch patch13_4 ,mem_patch13 -0x2a65 006573 preload access -0x2a66 006574 enable encode_fec0 -0x2a67 006575 set1 txgfsk ,radio_ctrl -0x2a68 006576 inject mod ,72 -0x2a69 006577 disable encode_fec0 -0x2a6a 006578 rtn -: 006581 scan_mode_whiten: -0x2a6b 006582 copy xin ,temp -0x2a6c 006583 or_into 0x60 ,temp -0x2a6d 006584 copy temp ,white_init -0x2a6e 006585 rtn -: 006590 get_free_amaddr: -0x2a6f 006591 bpatch patch13_5 ,mem_patch13 -0x2a70 006592 fetch 1 ,mem_current_amaddr -0x2a71 006593 increase 1 ,pdata -0x2a72 006594 bne param_esco_addr ,get_free_amaddr_cont -0x2a73 006595 force 1 ,pdata -: 006596 get_free_amaddr_cont: -0x2a74 006597 store 1 ,mem_current_amaddr -0x2a75 006598 iforce am_addr -0x2a76 006599 rtn -: 006601 get_clk: -0x2a77 006602 copy clkn ,temp -0x2a78 006603 rtn master -0x2a79 006604 copy clke ,temp -0x2a7a 006605 rtn -: 006607 get_clkbt: -0x2a7b 006608 deposit clkn_bt -0x2a7c 006609 rtn master -0x2a7d 006610 deposit clke_bt -0x2a7e 006611 rtn -: 006614 supervision_update: -0x2a7f 006615 bpatch patch13_6 ,mem_patch13 -0x2a80 006616 fetcht 4 ,mem_supervision_timer -0x2a81 006617 call get_clkbt -0x2a82 006618 isub temp ,timeup -0x2a83 006619 deposit timeup -0x2a84 006620 fetcht 2 ,mem_supervision_to -0x2a85 006621 lshift temp ,temp -0x2a86 006622 isub temp ,pdata -0x2a87 006623 rtn -: 006625 supervision_flush: -0x2a88 006626 bpatch patch13_7 ,mem_patch13 -0x2a89 006627 call get_clkbt -0x2a8a 006628 store 4 ,mem_supervision_timer -0x2a8b 006629 rtn -: 006631 assert: -0x2a8c 006632 bpatch patch14_0 ,mem_patch14 -0x2a8d 006633 branch assert -: 006635 loop: -0x2a8e 006636 branch loop -: 006638 sleep: -0x2a8f 006639 rtn blank -0x2a90 006641 rshift pdata ,pdata -0x2a91 006642 increase -3 ,pdata -: 006643 sleep_loop: -0x2a92 006644 increase -1 ,pdata -0x2a93 006645 nbranch sleep_loop ,zero -0x2a94 006646 force 0 ,pdata -0x2a95 006647 rtn -: 006651 init_param: -0x2a96 006653 arg 0x10 ,loopcnt -0x2a97 006654 arg 0 ,contw -0x2a98 006655 call memset0 -0x2a99 006656 arg mem_le_state ,contw -0x2a9a 006657 arg 10 ,loopcnt -0x2a9b 006658 call memset0 -0x2a9c 006659 jam 0 ,mem_sp_calc -0x2a9d 006660 jam 0 ,mem_fifo_temp -0x2a9e 006661 jam 0 ,mem_le_testtype -0x2a9f 006662 jam 0 ,mem_debug_config -0x2aa0 006663 jam 0 ,mem_lmp_conn_state -0x2aa1 006664 bpatch patch14_1 ,mem_patch14 -0x2aa2 006665 jam 0 ,mem_connection_options -0x2aa3 006666 jam 0 ,mem_tester_emulate -0x2aa4 006667 jam 0 ,mem_tester_cnt -0x2aa5 006668 setarg param_glap -0x2aa6 006669 store 3 ,mem_glap -0x2aa7 006670 setarg param_acl_pktlen -0x2aa8 006671 store 2 ,mem_acl_pktlen -0x2aa9 006672 jam param_sco_pktlen ,mem_sco_pktlen -0x2aaa 006673 jam param_acl_pktcnt ,mem_acl_pktcnt -0x2aab 006674 jam param_sco_pktcnt ,mem_sco_pktcnt -0x2aac 006675 setarg param_hci_version -0x2aad 006676 store 3 ,mem_hci_version -0x2aae 006681 jam 0x60 ,mem_fhs_misc -0x2aaf 006682 jam param_max_slot ,mem_max_slot -0x2ab0 006683 jam 0x02 ,mem_fw_ver -0x2ab1 006684 fetch 1 ,mem_ssp_enable -0x2ab2 006685 ncall init_memp ,blank -0x2ab3 006686 fetch 1 ,mem_le_secure_connect_enable -0x2ab4 006687 ncall init_memp_256 ,blank -0x2ab5 006688 bpatch patch14_2 ,mem_patch14 -0x2ab6 006689 rtn wake -0x2ab7 006690 setarg 0 -0x2ab8 006691 store 2 ,mem_tx_len -0x2ab9 006692 rshift clkn_bt ,pdata -0x2aba 006693 store 4 ,mem_last_clkn -0x2abb 006694 rtn -: 006701 lpmstate: -0x2abc 006702 setarg 0xee21 -0x2abd 006703 hstore 2 ,core_clkoff -0x2abe 006704 hfetch 4 ,core_gpio_in -0x2abf 006705 store 4 ,mem_saved_gpio_in -0x2ac0 006706 hfetch 1 ,core_lpm_ldocnt -0x2ac1 006707 store 1 ,mem_wakup_from_power_flag -0x2ac2 006708 bbit0 gpio_latch ,loadcode -0x2ac3 006709 enable wake -0x2ac4 006710 bbit0 cold_wake ,lpmwake -0x2ac5 006711 disable wake -0x2ac6 006712 deposit auxcnt -0x2ac7 006713 nbranch lpmwake ,blank -0x2ac8 006714 hfetch 1 ,core_lpm_ctrl + 3 -0x2ac9 006715 bbit1 reload_code ,lpmwake -0x2aca 006716 arg param_hibernate_clks ,temp -0x2acb 006717 branch lpm_enter_sleep -: 006718 lpmwake: -0x2acc 006719 hfetch 3 ,core_lpm_xtalcnt -0x2acd 006720 hstore 3 ,core_lpm_reg -0x2ace 006721 ifetch 1 ,contr -0x2acf 006722 or_into isogate_mask ,pdata -0x2ad0 006723 istore 1 ,contw -0x2ad1 006724 call lpm_write_ctrl2 -0x2ad2 006725 hfetch 1 ,core_lpm_isogate -0x2ad3 006726 set1 enable_retmem ,pdata -0x2ad4 006727 hstore 1 ,core_lpm_isogate -0x2ad5 006728 call lpm_write_ctrl2 -0x2ad6 006729 call lpm_load_context ,wake -0x2ad7 006730 hfetch 1 ,core_lpm_reg + 2 -0x2ad8 006731 set0 gpio_latch ,pdata -0x2ad9 006732 hstore 1 ,core_lpm_reg + 2 -0x2ada 006733 call lpm_write_ctrl2 -0x2adb 006734 nbranch loadcode ,wake -0x2adc 006735 rtnmark0 mark_otp_encrypt -0x2add 006736 jam lock_otp ,core_misc_ctrl -0x2ade 006737 rtn -: 006739 lpm_load_context: -0x2adf 006740 fetch 1 ,mem_saved_spidctrl -0x2ae0 006741 hstore 1 ,core_spid_ctrl -0x2ae1 006742 fetch 3 ,mem_saved_gsel -0x2ae2 006743 hstore 3 ,core_gpio_sel -0x2ae3 006744 fetch 4 ,mem_saved_gpio + 4 -0x2ae4 006745 hstore 4 ,core_gpio_out0 -0x2ae5 006746 fetch 4 ,mem_saved_gpio -0x2ae6 006747 hstore 4 ,core_gpio_oe0 -0x2ae7 006748 fetch 8 ,mem_saved_gpio + 8 -0x2ae8 006749 hstore 8 ,core_gpio_pu0 -0x2ae9 006750 fetch 8 ,mem_saved_mark -0x2aea 006751 iforce mark -0x2aeb 006752 hfetch 8 ,core_gpio_wakeup_low -0x2aec 006753 store 8 ,mem_gpio_wakeup_low -0x2aed 006754 call load_ucode -0x2aee 006755 rtn -: 006757 lpm_save_context: -0x2aef 006758 deposit mark -0x2af0 006759 store 8 ,mem_saved_mark -0x2af1 006760 hfetch 8 ,core_gpio_oe0 -0x2af2 006761 store 8 ,mem_saved_gpio -0x2af3 006762 ifetch 8 ,contr -0x2af4 006763 istore 8 ,contw -0x2af5 006764 hfetch 3 ,core_gpio_sel -0x2af6 006765 store 3 ,mem_saved_gsel -0x2af7 006766 hfetch 1 ,core_spid_ctrl -0x2af8 006767 store 1 ,mem_saved_spidctrl -0x2af9 006768 branch lpm_write_gpio_wakeup -: 006770 lpo_calibration: -0x2afa 006771 hfetch 1 ,core_bist_ctrl -0x2afb 006772 nbranch lpo_cal_inited ,blank -0x2afc 006773 fetch 3 ,mem_clks_per_lpo -0x2afd 006774 nrtn blank -0x2afe 006775 jam 0xc0 ,core_bist_ctrl -0x2aff 006776 jam ccnt_start ,core_misc_ctrl -: 006777 lpo_cal_inited: -0x2b00 006778 hfetch 1 ,core_perf_status -0x2b01 006779 rtnbit0 1 -0x2b02 006780 hfetch 3 ,core_clk_counter -0x2b03 006781 store 3 ,mem_clks_per_lpo -0x2b04 006782 rtn -: 006786 lpm_adjust_clk: -0x2b05 006787 bpatch patch14_3 ,mem_patch14 -0x2b06 006788 deposit clke -0x2b07 006789 call clk_diff_rt -0x2b08 006790 fetcht 4 ,mem_sleep_counter_all -0x2b09 006791 sub temp ,0xff ,null -0x2b0a 006792 rtn positive -0x2b0b 006793 lshift8 pdata ,pdata -0x2b0c 006794 lshift4 pdata ,pdata -0x2b0d 006795 idiv temp -0x2b0e 006796 call wait_div_end -0x2b0f 006797 quotient pdata -0x2b10 006798 arg param_lpm_adjmax ,temp -0x2b11 006799 call ceiling -0x2b12 006800 store 1 ,mem_lpm_adjust -0x2b13 006801 nbranch lpm_adjust_positive ,user -0x2b14 006802 sub pdata ,0 ,pdata -: 006803 lpm_adjust_positive: -0x2b15 006804 fetcht 3 ,mem_clks_per_lpo -0x2b16 006805 iadd temp ,pdata -0x2b17 006806 store 3 ,mem_clks_per_lpo -: 006807 lpm_clear_counter: -0x2b18 006808 setarg 0 -0x2b19 006809 store 4 ,mem_sleep_counter_all -0x2b1a 006810 rtn -: 006814 lpm_doze: -0x2b1b 006815 fetch 1 ,mem_lpm_config + 2 -0x2b1c 006816 set1 reload_code ,pdata -0x2b1d 006817 store 1 ,mem_lpm_config + 2 -0x2b1e 006818 branch lpm_hibernate_normal -: 006822 lpm_hibernate: -0x2b1f 006823 arg param_hibernate_clks ,temp -0x2b20 006824 fetch 1 ,mem_lpm_config + 1 -0x2b21 006825 set0 7 ,pdata -0x2b22 006826 store 1 ,mem_lpm_config + 1 -: 006827 lpm_hibernate_normal: -0x2b23 006828 bpatch patch14_4 ,mem_patch14 -0x2b24 006829 call lpm_write_gpio_wakeup -0x2b25 006830 fetch 1 ,mem_lpm_hibernate_switch -0x2b26 006831 store 1 ,mem_lpm_xtalcnt + 4 -0x2b27 006832 fetch 1 ,mem_lpm_xtalcnt + 2 -0x2b28 006833 set1 cold_wake ,pdata -0x2b29 006834 store 1 ,mem_lpm_xtalcnt + 2 -: 006837 lpm_sleep: -0x2b2a 006838 bpatch patch14_5 ,mem_patch14 -0x2b2b 006839 call xtal_fast_wake -0x2b2c 006840 fetch 4 ,mem_sleep_counter_all -0x2b2d 006841 iadd temp ,pdata -0x2b2e 006842 store 4 ,mem_sleep_counter_all -0x2b2f 006843 call lpm_save_context -0x2b30 006844 fetch 5 ,mem_lpm_xtalcnt -0x2b31 006845 hstore 4 ,core_lpm_reg -0x2b32 006846 rshift32 pdata ,rega -0x2b33 006847 until null ,lpo_edge -0x2b34 006848 deposit clkn -0x2b35 006849 store 6 ,mem_sleep_clkn -0x2b36 006850 jam lpmreg_sel_ctrl2 ,core_lpm_wr -0x2b37 006851 until null ,lpo_edge -0x2b38 006852 until null ,lpo_edge -0x2b39 006853 deposit rega -0x2b3a 006854 hstore 1 ,core_lpm_isogate -0x2b3b 006855 jam lpmreg_sel_ctrl2 ,core_lpm_wr -: 006856 lpm_enter_sleep: -0x2b3c 006857 until null ,lpo_edge -0x2b3d 006858 until null ,lpo_edge -0x2b3e 006859 hstoret 4 ,core_lpm_reg -0x2b3f 006860 jam lpmreg_sel_counter ,core_lpm_wr -0x2b40 006861 until null ,never -: 006866 lpm_recover_clk: -0x2b41 006867 bpatch patch14_6 ,mem_patch14 -0x2b42 006868 setarg 0 -0x2b43 006869 copy auxcnt ,null -0x2b44 006870 branch lpm_recover_timeout ,zero -0x2b45 006871 hfetch 1 ,core_lpm_xtalcnt -0x2b46 006872 hfetcht 1 ,core_lpm_buckcnt -0x2b47 006873 isub temp ,null -0x2b48 006874 branch lpm_recover_xtal ,positive -0x2b49 006875 deposit temp -: 006876 lpm_recover_xtal: -0x2b4a 006877 isub auxcnt ,pdata -0x2b4b 006878 increase 1 ,pdata -: 006879 lpm_recover_timeout: -0x2b4c 006880 increase 8 ,pdata -0x2b4d 006881 until null ,lpo_edge -0x2b4e 006882 iadd lpo_time ,pdata -0x2b4f 006883 fetcht 4 ,mem_sleep_counter -0x2b50 006884 iadd temp ,pdata -0x2b51 006885 fetcht 3 ,mem_clks_per_lpo -0x2b52 006886 imul32 temp ,pdata -0x2b53 006887 rshift8 pdata ,pdata -0x2b54 006888 rshift4 pdata ,pdata -0x2b55 006889 increase param_lpm_fix ,pdata -0x2b56 006890 arg 3750 ,temp -0x2b57 006891 idiv temp -0x2b58 006892 call wait_div_end -0x2b59 006893 quotient pdata -0x2b5a 006894 lshift16 pdata ,pdata -0x2b5b 006895 remainder temp -0x2b5c 006896 ior temp ,pdata -0x2b5d 006897 fetcht 6 ,mem_sleep_clkn -0x2b5e 006898 call clk_add -0x2b5f 006899 copy temp ,clkn -0x2b60 006900 fetch 6 ,mem_context + coffset_clk_offset -0x2b61 006901 call calc_clke2 -0x2b62 006902 deposit clke -0x2b63 006903 store 6 ,mem_pdatatemp -0x2b64 006904 deposit auxcnt -0x2b65 006905 istore 1 ,contw -0x2b66 006906 hfetch 1 ,core_gpio_in1 -0x2b67 006907 or_into 0xf0 ,pdata -0x2b68 006908 istore 1 ,contw -0x2b69 006909 rtn -: 006911 lpm_dispatch: -0x2b6a 006912 bpatch patch14_7 ,mem_patch14 -0x2b6b 006913 call lpo_calibration -0x2b6c 006914 fetch 3 ,mem_clks_per_lpo -0x2b6d 006915 rtn blank -0x2b6e 006916 fetch 1 ,mem_lpm_mode -0x2b6f 006917 rtn blank -0x2b70 006918 fetch 1 ,mem_ssp_enable -0x2b71 006919 branch lpm_dispatch_next ,blank -0x2b72 006920 fetch 1 ,mem_sp_local_key_invalid -0x2b73 006921 rtn blank -: 006922 lpm_dispatch_next: -0x2b74 006923 fetch 1 ,mem_le_sc_calc -0x2b75 006924 nrtn blank -0x2b76 006925 call lpm_check_wake_lock -0x2b77 006926 nrtn blank -0x2b78 006927 fetch 1 ,mem_context -0x2b79 006928 compare 3 ,pdata ,0x7 -0x2b7a 006929 nbranch lpm_dispatch_unconn ,true -0x2b7b 006930 fetch 2 ,mem_context + coffset_tsniff -0x2b7c 006931 rtn blank -0x2b7d 006932 rtn wake -0x2b7e 006933 bpatch patch15_0 ,mem_patch15 -: 006934 lpm_dispatch_next2: -0x2b7f 006935 fetcht 1 ,mem_lpm_current_mult -0x2b80 006936 fetch 2 ,mem_context + coffset_tsniff -0x2b81 006937 imul32 temp ,pdata -0x2b82 006938 rshift4 temp ,temp -0x2b83 006939 rshift2 temp ,temp -0x2b84 006940 isub temp ,pdata -0x2b85 006941 fetcht 4 ,mem_context + coffset_sniff_anchor -0x2b86 006942 iadd temp ,pdata -0x2b87 006943 fetcht 1 ,mem_lpm_overhead -0x2b88 006944 isub temp ,pdata -0x2b89 006945 lshift16 pdata ,alarm -0x2b8a 006946 bpatch patch15_1 ,mem_patch15 -0x2b8b 006947 fetch 2 ,mem_context + coffset_rx_window -0x2b8c 006948 rshift pdata ,pdata -0x2b8d 006949 call clk2bt -0x2b8e 006950 deposit alarm -0x2b8f 006951 call clk_diff -0x2b90 006952 copy clke ,temp -0x2b91 006953 call clk_diff_rt -0x2b92 006954 rtn user -: 006955 lpm_dispatch_sleep: -0x2b93 006956 call clk2lpo -: 006957 lpm_dispatch_lpo: -0x2b94 006958 bpatch patch15_2 ,mem_patch15 -0x2b95 006959 fetch 1 ,mem_lpm_xtalcnt -0x2b96 006960 isub temp ,null -0x2b97 006961 branch lpm_clear_counter ,positive -0x2b98 006962 storet 4 ,mem_sleep_counter -0x2b99 006963 call app_will_enter_lpm -0x2b9a 006964 call l2cap_lpm_save_txbuf -0x2b9b 006965 fetcht 4 ,mem_sleep_counter -0x2b9c 006966 branch lpm_sleep -: 006968 lpm_dispatch_unconn: -0x2b9d 006969 bpatch patch15_3 ,mem_patch15 -0x2b9e 006970 fetch 1 ,mem_context -0x2b9f 006971 rtnbit1 state_inconn -0x2ba0 006972 rtnbit1 state_inpage -0x2ba1 006973 fetch 1 ,mem_ssp_enable -0x2ba2 006974 branch lpm_unconn_nossp ,blank -0x2ba3 006975 fetch 1 ,mem_sp_local_key_invalid -0x2ba4 006976 rtn blank -: 006977 lpm_unconn_nossp: -0x2ba5 006978 bpatch patch15_4 ,mem_patch15 -0x2ba6 006979 fetch 1 ,mem_le_adv_enable -0x2ba7 006980 nbranch lpm_unconn_cont ,blank -0x2ba8 006981 fetch 1 ,mem_scan_mode -0x2ba9 006982 rtn blank -: 006983 lpm_unconn_cont: -0x2baa 006984 fetch 2 ,mem_lpm_interval -0x2bab 006985 rtn blank -: 006986 lpm_sleep_btclk: -0x2bac 006987 fetcht 1 ,mem_lpm_overhead -0x2bad 006988 isub temp ,pdata -0x2bae 006989 arg 7500 ,temp -0x2baf 006990 imul32 temp ,pdata -0x2bb0 006991 branch lpm_dispatch_sleep -: 006993 lpm_set_mult: -0x2bb1 006994 bpatch patch15_5 ,mem_patch15 -0x2bb2 006995 disable wake -0x2bb3 006996 fetch 1 ,mem_state -0x2bb4 006997 rtnbit0 state_insniff -0x2bb5 006998 nbranch lpm_not_match ,match -0x2bb6 006999 call lpm_match -0x2bb7 007000 fetch 2 ,mem_rx_window_sniff -0x2bb8 007001 store 2 ,mem_rx_window -0x2bb9 007002 fetch 1 ,mem_arq -0x2bba 007003 bbit1 wack ,lpm_mult_short -0x2bbb 007004 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x2bbc 007005 call l2cap_malloc_is_fifo_empty -0x2bbd 007006 nbranch lpm_mult_short ,blank -0x2bbe 007007 fetch 1 ,mem_classic_bt_flag -0x2bbf 007008 bbit1 short_mult_flag ,lpm_mult_short -: 007009 lpm_mult_wait_timeout: -0x2bc0 007010 jam 0 ,mem_lpm_current_mult -0x2bc1 007011 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x2bc2 007012 fetch 1 ,mem_lpm_mult_cnt -0x2bc3 007013 branch lpm_mult_long ,blank -0x2bc4 007014 increase -1 ,pdata -0x2bc5 007015 store 1 ,mem_lpm_mult_cnt -0x2bc6 007016 rtn -: 007019 classic_bt_set_mult_short_flag: -0x2bc7 007020 arg short_mult_flag ,queue -0x2bc8 007021 branch classic_bluetooth_set_flag -: 007023 classic_bt_clr_mult_short_flag: -0x2bc9 007024 arg short_mult_flag ,queue -0x2bca 007025 branch classic_bluetooth_clr_flag -: 007029 lpm_match: -0x2bcb 007030 jam 0 ,mem_sniff_unint_lost -0x2bcc 007031 fetch 3 ,mem_sniff_rcv -0x2bcd 007032 increase 1 ,pdata -0x2bce 007033 store 3 ,mem_sniff_rcv -0x2bcf 007034 rtn -: 007036 lpm_not_match: -0x2bd0 007037 bpatch patch15_6 ,mem_patch15 -0x2bd1 007038 fetcht 2 ,mem_rx_window_sniff -0x2bd2 007039 rshift temp ,temp -0x2bd3 007040 fetch 2 ,mem_rx_window -0x2bd4 007041 iadd temp ,pdata -0x2bd5 007042 store 2 ,mem_rx_window -: 007043 lpm_lost: -0x2bd6 007044 jam 0 ,mem_lpm_current_mult -0x2bd7 007045 fetch 3 ,mem_sniff_lost -0x2bd8 007046 increase 1 ,pdata -0x2bd9 007047 store 3 ,mem_sniff_lost -0x2bda 007048 fetch 1 ,mem_sniff_unint_lost -0x2bdb 007049 increase 1 ,pdata -0x2bdc 007050 store 1 ,mem_sniff_unint_lost -0x2bdd 007051 rtn -: 007053 lpm_mult_short: -0x2bde 007054 jam 0 ,mem_lpm_current_mult -0x2bdf 007055 fetch 1 ,mem_lpm_mult_timeout -0x2be0 007056 store 1 ,mem_lpm_mult_cnt -0x2be1 007057 rtn -: 007059 lpm_mult_long: -0x2be2 007060 fetcht 1 ,mem_lpm_mult -0x2be3 007061 storet 1 ,mem_lpm_current_mult -0x2be4 007062 rtn -: 007064 lpm_cal_xtal_startup: -0x2be5 007065 bpatch patch15_7 ,mem_patch15 -0x2be6 007066 fetch 1 ,mem_lpm_xtalcnt -0x2be7 007067 nrtn blank -0x2be8 007068 jam clksel_rc ,core_clksel -0x2be9 007069 setarg 0xf0c -0x2bea 007070 call lpm_write_config -0x2beb 007071 setarg 200000 -0x2bec 007072 call sleep -0x2bed 007073 until null ,lpo_edge -0x2bee 007074 copy lpo_time ,alarm -0x2bef 007075 call xtal_fast_wake -0x2bf0 007076 jam clksel_xtal ,core_clksel -0x2bf1 007077 nop 10 -0x2bf2 007078 until null ,lpo_edge -0x2bf3 007079 deposit lpo_time -0x2bf4 007080 isub alarm ,pdata -0x2bf5 007081 increase 0x30 ,pdata -0x2bf6 007082 arg 0xff ,temp -0x2bf7 007083 call ceiling -0x2bf8 007084 store 1 ,mem_lpm_xtalcnt -0x2bf9 007085 nop 30000 -0x2bfa 007086 nop 30000 -0x2bfb 007087 nop 30000 -0x2bfc 007088 rtn -: 007090 lpm_cal_xtal_startup_by_snooze: -0x2bfd 007091 fetch 1 ,mem_lpm_xtalcnt -0x2bfe 007092 nrtn blank -0x2bff 007093 jam 0xff ,core_xtal_stable_time -0x2c00 007094 jam clksel_rc ,core_clksel -0x2c01 007095 call xtal_fast_wake -0x2c02 007096 setarg 1000 -0x2c03 007097 iadd lpo_time ,alarm -0x2c04 007098 snooze -0x2c05 007099 deposit lpo_time -0x2c06 007100 nop 12000 -0x2c07 007101 nop 12000 -0x2c08 007102 nop 12000 -0x2c09 007103 nop 12000 -0x2c0a 007104 nop 12000 -0x2c0b 007105 nop 12000 -0x2c0c 007106 nop 12000 -0x2c0d 007107 nop 12000 -0x2c0e 007108 nop 12000 -0x2c0f 007109 isub alarm ,pdata -0x2c10 007110 add pdata ,0x30 ,pdata -0x2c11 007111 arg 0xff ,temp -0x2c12 007112 call ceiling -0x2c13 007113 store 1 ,mem_lpm_xtalcnt -0x2c14 007114 nop 30000 -0x2c15 007115 nop 30000 -0x2c16 007116 nop 30000 -0x2c17 007117 rtn -: 007122 lpm_write_config: -0x2c18 007123 arg 0xfff ,contw -0x2c19 007124 iand contw ,contw -0x2c1a 007125 fetch 1 ,mem_lpm_config -0x2c1b 007126 and_into 0xf0 ,pdata -0x2c1c 007127 lshift8 pdata ,pdata -0x2c1d 007128 ior contw ,pdata -0x2c1e 007129 hstore 2 ,core_lpm_reg -0x2c1f 007130 ifetch 2 ,contr -0x2c20 007131 istore 2 ,contw -: 007133 lpm_write_ctrl: -0x2c21 007134 setarg lpmreg_sel_ctrl -0x2c22 007135 branch lpm_write -: 007137 lpm_write_ctrl2: -0x2c23 007138 setarg lpmreg_sel_ctrl2 -: 007139 lpm_write: -0x2c24 007140 until null ,lpo_edge -0x2c25 007141 hstore 1 ,core_lpm_wr -0x2c26 007142 until null ,lpo_edge -0x2c27 007143 until null ,lpo_edge -0x2c28 007144 rtn -: 007147 lpm_write_gpio_wakeup: -0x2c29 007148 bpatch patch16_0 ,mem_patch16 -0x2c2a 007149 fetch 4 ,mem_gpio_wakeup_low -0x2c2b 007150 hstore 4 ,core_lpm_reg -0x2c2c 007151 setarg lpmreg_sel_gpiolow -0x2c2d 007152 call lpm_write -0x2c2e 007153 fetch 4 ,mem_gpio_wakeup_high -0x2c2f 007154 hstore 4 ,core_lpm_reg -0x2c30 007155 setarg lpmreg_sel_gpiohigh -0x2c31 007156 branch lpm_write -: 007158 lpm_get_wake_lock: -0x2c32 007159 fetch 2 ,mem_lpm_wake_lock -0x2c33 007160 qset1 pdata -0x2c34 007161 store 2 ,mem_lpm_wake_lock -0x2c35 007162 rtn -: 007164 lpm_put_wake_lock: -0x2c36 007165 fetch 2 ,mem_lpm_wake_lock -0x2c37 007166 qset0 pdata -0x2c38 007167 store 2 ,mem_lpm_wake_lock -0x2c39 007168 rtn -: 007172 lpm_check_wake_lock: -0x2c3a 007173 bpatch patch16_1 ,mem_patch16 -0x2c3b 007174 call app_check_wake_lock -0x2c3c 007175 fetch 2 ,mem_lpm_wake_lock -0x2c3d 007176 copy pdata ,rega -0x2c3e 007177 fetch 1 ,mem_state_map -0x2c3f 007178 isolate1 smap_rxlmp ,pdata -0x2c40 007179 setflag true ,wake_lock_lmp_rx ,rega -0x2c41 007180 fetch 1 ,mem_lmo_opcode1 -0x2c42 007181 fetcht 1 ,mem_lmo_opcode2 -0x2c43 007182 iadd temp ,pdata -0x2c44 007183 fetcht 1 ,mem_lmp_to_send -0x2c45 007184 iadd temp ,pdata -0x2c46 007185 nsetflag blank ,wake_lock_lmp_tx ,rega -0x2c47 007186 fetch 1 ,mem_le_tx_buff_used -0x2c48 007187 nsetflag blank ,wake_lock_ble_tx ,rega -0x2c49 007188 fetch 2 ,mem_l2cap_rxbuff1_len -0x2c4a 007189 fetcht 2 ,mem_l2cap_rxbuff2_len -0x2c4b 007190 iadd temp ,pdata -0x2c4c 007191 nsetflag blank ,wake_lock_l2cap_rx ,rega -0x2c4d 007192 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 -0x2c4e 007193 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega -0x2c4f 007194 fetch util_fifo_len ,mem_ipc_fifo_c512bt -0x2c50 007195 nsetflag blank ,wake_lock_ipc_c512bt ,rega -0x2c51 007196 fetch 1 ,mem_hci_cmd -0x2c52 007197 nsetflag blank ,wake_lock_cmd ,rega -0x2c53 007198 fetch 1 ,mem_device_option -0x2c54 007199 compare dvc_op_module ,pdata ,0xff -0x2c55 007200 call lpm_uart_wake_lock ,true -0x2c56 007201 setarg -8 -0x2c57 007202 iand rega ,rega -0x2c58 007203 copy rega ,pdata -0x2c59 007204 store 2 ,mem_lpm_wake_lock -0x2c5a 007205 rtn -: 007207 lpm_uart_wake_lock: -0x2c5b 007208 hfetch 2 ,core_uart_rxitems -0x2c5c 007209 nsetflag blank ,wake_lock_uart_rx ,rega -0x2c5d 007210 hfetch 2 ,core_uart_txitems -0x2c5e 007211 nsetflag blank ,wake_lock_uart_tx ,rega -0x2c5f 007212 rtn -: 007214 lpm_shut_down: -0x2c60 007215 hfetch 4 ,core_lpm_ctrl -0x2c61 007216 set0 27 ,pdata -0x2c62 007217 hstore 4 ,core_lpm_reg -0x2c63 007218 call lpm_write_ctrl -0x2c64 007219 branch assert -: 007221 lpm_disable_exen_output: -0x2c65 007222 hfetch 4 ,core_lpm_xtalcnt -0x2c66 007223 set0 20 ,pdata -0x2c67 007224 hstore 4 ,core_lpm_reg -0x2c68 007225 branch lpm_write_ctrl2 -: 007227 check_bt_disabled: -0x2c69 007228 fetch 2 ,mem_chip_functions -0x2c6a 007229 bbit1 bt_disabled ,assert -0x2c6b 007230 rtn -: 007231 check_ble_disabled: -0x2c6c 007232 fetch 2 ,mem_chip_functions -0x2c6d 007233 bbit1 ble_disabled ,assert -0x2c6e 007234 rtn -: 007235 check_module_disabled: -0x2c6f 007236 fetch 2 ,mem_chip_functions -0x2c70 007237 bbit1 module_disable ,assert -0x2c71 007238 rtn -: 007299 g24_dispatch: -0x2c72 007300 bpatch patch16_2 ,mem_patch16 -0x2c73 007301 call g24_head_ptr2regc -0x2c74 007302 add regc ,offset_24g_mode ,regb -0x2c75 007303 ifetch 1 ,regb -0x2c76 007305 rtneq disable_24g -0x2c77 007306 beq tx_24g ,g24_transmit_process -0x2c78 007307 beq rx_24g ,g24_receive_process -0x2c79 007308 rtn -: 007310 g24_head_ptr2regc: -0x2c7a 007311 fetcht 2 ,mem_24g_head_ptr -0x2c7b 007312 copy temp ,regc -0x2c7c 007313 rtn -: 007315 g24_receive_process_init: -0x2c7d 007316 call g24_receive_init -0x2c7e 007317 branch g24_mode_switch_init -: 007319 g24_receive_process: -0x2c7f 007320 call g24_mode_switch -0x2c80 007321 call g24_dongle_work_mode_auto -0x2c81 007322 call g24_dongle_bind_mode_auto -0x2c82 007323 branch g24_dongle_search_mode_auto -: 007326 g24_pair_init: -0x2c83 007329 call g24_set0_mem_pid -0x2c84 007330 setarg g24_pair_ch -0x2c85 007331 call g24_store_mem_ch -0x2c86 007332 call g24_store_mem_pair_txpower -0x2c87 007335 add regc ,offset_24g_paring_addr ,rega -0x2c88 007336 ifetch 4 ,rega -0x2c89 007337 branch g24_store_mem_addr -: 007339 g24_ch: -0x2c8a 007340 call g24_head_ptr2regc -0x2c8b 007341 add regc ,offset_24g_current_ch_number ,regb -0x2c8c 007342 ifetcht 1 ,regb -0x2c8d 007344 call g24_ch_temp_incre_size4 -0x2c8e 007345 add regc ,offset_24g_current_ch_number ,contw -0x2c8f 007347 branch g24_contw_istoret_1byte -: 007349 g24_ch_temp_incre_size4: -0x2c90 007350 call g24_ch_calc -0x2c91 007351 increase 1 ,temp -0x2c92 007352 and_into 3 ,temp -0x2c93 007353 rtn -: 007355 g24_ch_calc: -0x2c94 007356 add regc ,offset_24g_addr ,regb -0x2c95 007357 ifetch 1 ,regb -0x2c96 007359 and_into 0x03 ,pdata -0x2c97 007360 mul32 pdata ,4 ,rega -0x2c98 007361 add regc ,offset_24g_ch_map1 ,pdata -0x2c99 007363 iadd rega ,pdata -0x2c9a 007364 iadd temp ,contr -0x2c9b 007365 ifetch 1 ,contr -0x2c9c 007367 branch g24_store_mem_ch -: 007369 g24_set_device_addr: -0x2c9d 007370 call g24_store_mem_tx_power_temp -0x2c9e 007371 call otp_enable_chgpump -0x2c9f 007372 setarg 0x7e2 -0x2ca0 007373 arg mem_temp ,rega -0x2ca1 007374 arg 4 ,temp -0x2ca2 007375 call otpd_read_data -0x2ca3 007376 call otp_disable_chgpump -0x2ca4 007377 fetch 4 ,mem_temp -0x2ca5 007378 call g24_store_mem_device_addr -0x2ca6 007380 nrtn blank -0x2ca7 007381 fetch 4 ,mem_lap -0x2ca8 007383 branch g24_store_mem_device_addr -: 007385 g24_transmit_rf_sta_init: -0x2ca9 007386 call g24_set1_mem_rf_last_sta -0x2caa 007388 setarg 0 -0x2cab 007389 call g24_store_mem_sync_cnt -: 007391 g24_transmit_rf_ctrl_clear: -0x2cac 007392 call g24_fetch_mem_data_type -0x2cad 007394 and_into bits_data ,pdata -0x2cae 007396 branch g24_store_mem_data_type -: 007398 g24_hop_ch_enable: -0x2caf 007399 call g24_fetch_mem_data_type -0x2cb0 007401 set1 bit_hop ,pdata -0x2cb1 007402 call g24_store_mem_data_type -0x2cb2 007405 branch g24_store_mem_txpayload -: 007407 g24_transmit_hop_pac_fail: -0x2cb3 007408 call g24_fetch_mem_rf_work_stage -0x2cb4 007410 beq 1 ,g24_transmit_hop_pac_fail_wo_hop -0x2cb5 007411 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 -0x2cb6 007412 rtn -: 007414 g24_transmit_hop_pac_fail_wo_hop: -0x2cb7 007415 call g24_set2_mem_sync_cnt -: 007417 g24_transmit_hop_pac_fail_stage1: -0x2cb8 007418 add regc ,offset_24g_hop_pac_retry ,contw -0x2cb9 007419 call g24_mem_set0 -0x2cba 007421 call g24_store_mem_rf_last_sta -0x2cbb 007423 branch g24_transmit_rf_ctrl_clear -: 007425 g24_transmit_hop_pac_fail_hop_stage2: -0x2cbc 007426 call g24_set0_mem_rf_hop_ch -0x2cbd 007428 branch g24_transmit_hop_pac_fail_stage1 -: 007430 g24_transmit_pac_fail_hop_stage3: -0x2cbe 007431 add regc ,offset_24g_txfail_cnt ,rega -0x2cbf 007432 ifetch 1 ,rega -0x2cc0 007434 increase 1 ,pdata -0x2cc1 007435 add regc ,offset_24g_txfail_cnt ,contw -0x2cc2 007436 istore 1 ,contw -0x2cc3 007438 beq 0x20 ,g24_tx_attempt_fail -0x2cc4 007439 call g24_fetch_mem_rf_hop_ch -0x2cc5 007441 beq 1 ,g24_rf_hop_fastly -0x2cc6 007442 setarg 1 -0x2cc7 007443 call g24_store_mem_rf_hop_ch -: 007445 g24_rf_hop_attemp_again: -0x2cc8 007446 call g24_fetch_mem_rf_hop_ch -0x2cc9 007448 bne 1 ,g24_transmit_rf_ctrl_clear -: 007449 g24_rf_hop_fastly: -0x2cca 007450 add regc ,offset_24g_hop_fastly_cnt ,rega -0x2ccb 007451 ifetch 1 ,rega -0x2ccc 007453 increase 1 ,pdata -0x2ccd 007454 call g24_store_mem_hop_fastly_cnt -0x2cce 007456 beq 4 ,g24_rf_hop_fastly_exit -0x2ccf 007457 call g24_ch -0x2cd0 007458 call g24_set2_mem_max_retry -0x2cd1 007460 branch g24_transmit_packet -: 007462 g24_rf_hop_fastly_exit: -0x2cd2 007463 call g24_set0_mem_hop_fastly_cnt -0x2cd3 007465 branch g24_transmit_rf_ctrl_clear -: 007467 g24_set0_mem_hop_fastly_cnt: -0x2cd4 007468 setarg 0 -: 007469 g24_store_mem_hop_fastly_cnt: -0x2cd5 007470 add regc ,offset_24g_hop_fastly_cnt ,contw -0x2cd6 007471 branch g24_contw_istore_1byte -: 007473 g24_transmit_hop_pac_succ_wo_hop: -0x2cd7 007474 call g24_set2_mem_sync_cnt -: 007476 g24_transmit_hop_pac_succ: -0x2cd8 007477 call g24_set0_mem_rf_hop_ch -0x2cd9 007479 call g24_set1_mem_rf_last_sta -0x2cda 007481 branch g24_transmit_rf_ctrl_clear -: 007483 g24_transmit_succ_rf_config: -0x2cdb 007484 call g24_fetch_mem_rf_work_stage -0x2cdc 007486 beq 3 ,g24_transmit_hop_pac_succ -0x2cdd 007487 call g24_fetch_mem_data_type -0x2cde 007489 isolate0 bit_hop ,pdata -0x2cdf 007490 branch g24_transmit_rf_sta_init ,true -0x2ce0 007491 call g24_fetch_mem_rf_work_stage -0x2ce1 007493 beq 1 ,g24_transmit_hop_pac_succ_wo_hop -0x2ce2 007494 beq 2 ,g24_transmit_hop_pac_succ -0x2ce3 007495 rtn -: 007497 g24_rf_sta_check: -0x2ce4 007498 call g24_fetch_mem_pairing_sm -0x2ce5 007500 rtnne state_24g_pairing_success -0x2ce6 007501 call g24_rf_laststa_synccnt_check -0x2ce7 007502 ncall g24_rf_sync_cnt_check ,user2 -0x2ce8 007503 rtn -: 007505 g24_rf_laststa_synccnt_check: -0x2ce9 007506 disable user2 -0x2cea 007507 add regc ,offset_24g_rf_last_sta ,rega -0x2ceb 007508 ifetch 1 ,rega -0x2cec 007510 rtnne 1 -0x2ced 007511 add regc ,offset_24g_sync_cnt ,rega -0x2cee 007512 ifetch 1 ,rega -0x2cef 007514 rtnne 0 -0x2cf0 007515 setarg 1 -0x2cf1 007516 call g24_store_mem_rf_work_stage -0x2cf2 007518 call g24_set4_mem_max_retry -0x2cf3 007520 branch enable_user2 -: 007522 g24_rf_sync_cnt_check: -0x2cf4 007523 add regc ,offset_24g_sync_cnt ,rega -0x2cf5 007524 ifetch 1 ,rega -0x2cf6 007526 branch g24_rf_hop_attemp ,blank -0x2cf7 007527 increase -1 ,pdata -0x2cf8 007528 call g24_store_mem_sync_cnt -0x2cf9 007530 setarg 2 -0x2cfa 007531 call g24_store_mem_rf_work_stage -0x2cfb 007533 call g24_ch -0x2cfc 007535 branch g24_set4_mem_max_retry -: 007537 g24_store_mem_rf_work_stage: -0x2cfd 007538 add regc ,offset_24g_rf_work_stage ,contw -0x2cfe 007539 branch g24_contw_istore_1byte -: 007542 g24_rf_hop_attemp: -0x2cff 007543 setarg 3 -0x2d00 007544 call g24_store_mem_rf_work_stage -0x2d01 007546 call g24_fetch_mem_rf_hop_ch -0x2d02 007548 nbranch g24_rf_hop_attemp_again ,blank -0x2d03 007549 call g24_ch -: 007551 g24_set2_mem_max_retry: -0x2d04 007552 setarg 2 -0x2d05 007553 branch g24_store_mem_max_retry -: 007555 g24_transmit_process: -0x2d06 007556 rtnmark0 mark_24g -0x2d07 007557 set1 mark_24g_conext ,mark -0x2d08 007558 bpatch patch16_3 ,mem_patch16 -0x2d09 007559 add regc ,offset_24g_tx_without_int ,rega -0x2d0a 007560 ifetch 1 ,rega -0x2d0b 007562 beq 1 ,g24_transmit_without_int -0x2d0c 007563 call g24_timer_check -0x2d0d 007564 nbranch g24_transmit_exit ,user -0x2d0e 007565 call g24_interval_calibrate -: 007566 g24_transmit_without_int: -0x2d0f 007567 add regc ,offset_24g_tx_without_int ,contw -0x2d10 007568 call g24_mem_set0 -0x2d11 007570 call g24_txdata_prep -0x2d12 007571 nbranch g24_enter_lpm ,user -0x2d13 007572 call g24_rf_sta_check -: 007573 g24_transmit_start: -0x2d14 007574 call g24_transmit_packet -0x2d15 007575 call g24_power_ctrl -: 007576 g24_transmit_exit: -0x2d16 007577 set0 mark_24g_conext ,mark -0x2d17 007578 rtn -: 007580 g24_timer_timeout: -0x2d18 007581 rtn zero -0x2d19 007582 set1 28 ,pdata -0x2d1a 007583 rtn -: 007585 g24_interval_calibrate: -0x2d1b 007586 add regc ,offset_24g_pac_index ,rega -0x2d1c 007587 ifetch 1 ,rega -0x2d1d 007589 increase 1 ,pdata -0x2d1e 007590 add regc ,offset_24g_pac_index ,contw -0x2d1f 007591 istore 1 ,contw -0x2d20 007593 beq 4 ,g24_interval_max -0x2d21 007594 beq 5 ,g24_interval_min -0x2d22 007595 rtn -: 007596 g24_interval_max: -0x2d23 007597 add regc ,offset_24g_interval_max ,rega -0x2d24 007598 ifetch 1 ,rega -: 007600 g24_interval_update: -0x2d25 007602 add regc ,offset_24g_interval ,contw -0x2d26 007603 branch g24_contw_istore_1byte -: 007605 g24_interval_min: -0x2d27 007606 add regc ,offset_24g_pac_index ,contw -0x2d28 007607 call g24_mem_set0 -0x2d29 007609 add regc ,offset_24g_interval_min ,rega -0x2d2a 007610 ifetch 1 ,rega -0x2d2b 007612 branch g24_interval_update -: 007614 g24_txdata_prep: -0x2d2c 007615 call g24_fetch_mem_pairing_sm -0x2d2d 007617 bne state_24g_pairing_success ,g24_pairing_sm -0x2d2e 007618 bpatch patch16_4 ,mem_patch16 -0x2d2f 007619 call g24_package_data -0x2d30 007620 nbranch g24_txdata_last_pac ,user -0x2d31 007621 call g24_transmit_prep -0x2d32 007622 call g24_power_ctrl_pac_incrs -: 007623 g24_txdata_enable_tx: -0x2d33 007625 setarg ensure_on_24g -: 007626 g24_store_mem_ensure: -0x2d34 007627 add regc ,offset_24g_ensure ,contw -0x2d35 007628 branch g24_contw_istore_1byte -: 007630 g24_txdata_last_pac: -0x2d36 007631 add regc ,offset_24g_ensure ,rega -0x2d37 007632 ifetch 1 ,rega -0x2d38 007634 beq ensure_on_24g ,enable_user -0x2d39 007635 rtn -: 007637 g24_package_data: -0x2d3a 007639 add regc ,offset_24g_cb_data ,temp -0x2d3b 007640 ifetch 2 ,temp -0x2d3c 007642 call callback_func -0x2d3d 007643 nrtn user -0x2d3e 007644 copy rega ,pdata -0x2d3f 007645 store 1 ,mem_rega -0x2d40 007646 add regc ,offset_24g_abort_pac ,contw -0x2d41 007647 call g24_mem_set0 -0x2d42 007649 call g24_transmit_rf_ctrl_clear -0x2d43 007650 store 1 ,mem_24g_common_temp -0x2d44 007651 fetch 1 ,mem_rega -0x2d45 007652 copy pdata ,rega -0x2d46 007653 add rega ,1 ,temp -0x2d47 007654 arg mem_24g_common_temp + 1 ,contw -0x2d48 007655 copy rega ,loopcnt -0x2d49 007656 copy regb ,contr -0x2d4a 007657 call memcpy -0x2d4b 007658 arg mem_24g_common_temp ,rega -: 007659 g24_put_data_in_buff: -0x2d4c 007660 rtnmark0 mark_24g_conext -0x2d4d 007661 add regc ,offset_24g_datalen ,contw -0x2d4e 007662 istoret 1 ,contw -0x2d4f 007664 copy temp ,loopcnt -0x2d50 007665 add regc ,offset_24g_txbuf ,contw -0x2d51 007667 copy rega ,contr -0x2d52 007668 branch memcpy -: 007670 g24_transmit_prep: -0x2d53 007672 add regc ,offset_24g_datalen ,rega -0x2d54 007673 ifetch 1 ,rega -0x2d55 007675 increase 2 ,pdata -0x2d56 007676 add regc ,offset_24g_txlen ,contw -0x2d57 007677 istore 1 ,contw -0x2d58 007680 call g24_fetch_mem_data_type -0x2d59 007682 call g24_store_mem_txpayload -0x2d5a 007685 add regc ,offset_24g_datalen ,rega -0x2d5b 007686 ifetch 1 ,rega -0x2d5c 007688 lshift3 pdata ,pdata -0x2d5d 007689 add regc ,offset_24g_pid ,rega -0x2d5e 007690 ifetcht 1 ,rega -0x2d5f 007692 and temp ,0x03 ,temp -0x2d60 007693 lshift temp ,temp -0x2d61 007694 ior temp ,pdata -0x2d62 007695 add regc ,offset_24g_no_ack ,rega -0x2d63 007696 ifetcht 1 ,rega -0x2d64 007698 iadd temp ,pdata -0x2d65 007699 istore 1 ,contw -0x2d66 007701 add regc ,offset_24g_datalen ,rega -0x2d67 007702 ifetch 1 ,rega -0x2d68 007704 iforce loopcnt -0x2d69 007705 add regc ,offset_24g_txbuf ,contr -0x2d6a 007707 branch memcpy -: 007709 g24_send_abort_packet: -0x2d6b 007710 call g24_set1_mem_abort_pac -0x2d6c 007712 call g24_set0_mem_rf_hop_ch -0x2d6d 007714 call g24_power_ctrl_reinit -0x2d6e 007715 call g24_transmit_rf_ctrl_clear -0x2d6f 007716 store 1 ,mem_24g_common_temp -0x2d70 007717 call g24_put_data_in_buff_pre -0x2d71 007718 call g24_fetch_mem_data_type -0x2d72 007720 set1 bit_abort ,pdata -0x2d73 007721 call g24_store_mem_data_type -0x2d74 007723 call g24_transmit_prep -0x2d75 007724 call g24_txdata_enable_tx -0x2d76 007725 branch g24_transmit_start -: 007727 g24_put_data_in_buff_pre: -0x2d77 007728 store 1 ,mem_24g_common_temp + 1 -0x2d78 007729 call g24_fetch_mem_device_addr -0x2d79 007731 store 4 ,mem_24g_common_temp + 2 -0x2d7a 007732 arg 6 ,temp -0x2d7b 007733 arg mem_24g_common_temp ,rega -0x2d7c 007734 branch g24_put_data_in_buff -: 007736 g24_enter_lpm: -0x2d7d 007737 add regc ,offset_24g_abort_pac ,rega -0x2d7e 007738 ifetch 1 ,rega -0x2d7f 007740 branch g24_send_abort_packet ,blank -: 007741 g24_enter_lpm_prepare: -0x2d80 007743 add regc ,offset_24g_cb_lpm_prepare ,rega -0x2d81 007744 ifetch 2 ,rega -0x2d82 007746 branch callback_func -: 007748 g24_lpm_long_sleep: -0x2d83 007749 call g24_head_ptr2regc -0x2d84 007751 call lpo_calibration -0x2d85 007752 fetch 3 ,mem_clks_per_lpo -0x2d86 007753 rtn blank -0x2d87 007754 add regc ,offset_24g_cb_lpm_before ,temp -0x2d88 007755 ifetch 2 ,temp -0x2d89 007757 call callback_func -0x2d8a 007758 add regc ,offset_24g_enter_hibernate ,temp -0x2d8b 007759 ifetch 8 ,temp -: 007760 g24_lpm_long_sleep2: -0x2d8c 007761 call clk2lpo -0x2d8d 007762 storet 4 ,mem_sleep_counter -0x2d8e 007763 branch lpm_sleep -: 007765 g24_transmit_packet: -0x2d8f 007766 call g24_head_ptr2regc -0x2d90 007767 add regc ,offset_24g_retry ,contw -0x2d91 007768 call g24_mem_set0 -: 007770 g24_transmit_loop: -0x2d92 007771 call g24_transmit_receive_ack -0x2d93 007772 nbranch g24_retransmit ,sync -0x2d94 007773 nbranch g24_retransmit ,user3 -0x2d95 007774 call g24_ackpayload_parse -0x2d96 007775 call g24_power_ctrl_ack_incrs -: 007776 g24_transmit_next_packet: -0x2d97 007777 call g24_head_ptr2regc -0x2d98 007778 add regc ,offset_24g_pid ,rega -0x2d99 007779 ifetch 1 ,rega -0x2d9a 007781 increase 1 ,pdata -0x2d9b 007782 call g24_store_mem_pid -0x2d9c 007784 call g24_fetch_mem_pairing_sm -0x2d9d 007786 bne state_24g_pairing_success ,g24_paring_mode -0x2d9e 007787 call g24_transmit_succ_rf_config -: 007788 g24_transmit_abandon: -0x2d9f 007789 setarg 0 -0x2da0 007790 add regc ,offset_24g_txfail_cnt ,contw -0x2da1 007791 istore 2 ,contw -0x2da2 007795 setarg ensure_off_24g -0x2da3 007796 branch g24_store_mem_ensure -: 007799 g24_transmit_receive_ack: -0x2da4 007800 disable user3 -0x2da5 007801 call g24_transmit -0x2da6 007802 call g24_head_ptr2regc -0x2da7 007803 add regc ,offset_24g_no_ack ,rega -0x2da8 007804 ifetch 1 ,rega -0x2da9 007806 beq no_ack_24g ,g24_transmit_no_ack -0x2daa 007807 call g24_receive_packet -0x2dab 007808 branch g24_end_of_packet -: 007809 g24_transmit_no_ack: -0x2dac 007810 call g24_end_of_packet -0x2dad 007811 branch g24_transmit_next_packet -: 007814 g24_retransmit: -0x2dae 007815 bpatch patch16_5 ,mem_patch16 -0x2daf 007816 add regc ,offset_24g_get_ack_fail ,rega -0x2db0 007817 ifetch 1 ,rega -0x2db1 007819 increase 1 ,pdata -0x2db2 007820 add regc ,offset_24g_get_ack_fail ,contw -0x2db3 007821 istore 1 ,contw -0x2db4 007823 call g24_fetch_mem_pairing_sm -0x2db5 007825 bne state_24g_pairing_success ,g24_tx_paring_retry -0x2db6 007826 add regc ,offset_24g_retry ,rega -0x2db7 007827 ifetcht 1 ,rega -0x2db8 007829 increase 1 ,temp -0x2db9 007830 add regc ,offset_24g_retry ,contw -0x2dba 007831 istoret 1 ,contw -0x2dbb 007833 add regc ,offset_24g_max_retry ,rega -0x2dbc 007834 ifetch 1 ,rega -0x2dbd 007836 isub temp ,pdata -0x2dbe 007837 nbranch g24_transmit_loop ,blank -0x2dbf 007838 bpatch patch16_6 ,mem_patch16 -0x2dc0 007839 call g24_fetch_mem_rf_work_stage -0x2dc1 007841 beq 3 ,g24_transmit_pac_fail_hop_stage3 -0x2dc2 007842 add regc ,offset_24g_hop_pac_retry ,rega -0x2dc3 007843 ifetch 1 ,rega -0x2dc4 007845 increase 1 ,pdata -0x2dc5 007846 add regc ,offset_24g_hop_pac_retry ,contw -0x2dc6 007847 istore 1 ,contw -0x2dc7 007849 beq 2 ,g24_transmit_hop_pac_fail -0x2dc8 007850 call g24_hop_ch_enable -0x2dc9 007851 setarg 1 -0x2dca 007852 call g24_store_mem_max_retry -0x2dcb 007854 branch g24_transmit_packet -: 007856 g24_tx_paring_retry: -0x2dcc 007857 add regc ,offset_24g_get_ack_fail ,rega -0x2dcd 007858 ifetch 1 ,rega -0x2dce 007860 rtnne 0xff -0x2dcf 007861 add regc ,offset_24g_get_ack_fail ,contw -0x2dd0 007862 call g24_mem_set0 -0x2dd1 007864 branch g24_stop_24g_mode -: 007866 g24_tx_attempt_fail: -0x2dd2 007867 add regc ,offset_24g_txfail_cnt ,contw -0x2dd3 007868 call g24_mem_set0 -: 007870 g24_stop_24g_mode: -0x2dd4 007871 jam bt_evt_24g_attempt_fail ,mem_fifo_temp -0x2dd5 007872 branch ui_ipc_send_event -: 007874 g24_ackpayload_parse: -0x2dd6 007875 call g24_read_len_pid_crc -0x2dd7 007876 add regc ,offset_24g_rxdata_length ,rega -0x2dd8 007877 ifetch 1 ,rega -0x2dd9 007879 rtn blank -0x2dda 007880 iforce loopcnt -0x2ddb 007881 add regc ,offset_24g_rxbuf_add2 ,contr -0x2ddc 007883 add regc ,offset_24g_rxpayload ,contw -0x2ddd 007885 branch memcpy -: 007888 g24_read_len_pid_crc: -0x2dde 007890 call g24_fetch_mem_rxbuf_add1 -0x2ddf 007892 rshift3 pdata ,pdata -0x2de0 007893 add regc ,offset_24g_rxdata_length ,contw -0x2de1 007894 istore 1 ,contw -0x2de2 007897 increase 1 ,pdata -0x2de3 007898 add regc ,offset_24g_rxbuf_add1 ,contr -0x2de4 007900 iadd contr ,contr -0x2de5 007901 ifetch 3 ,contr -0x2de6 007902 add regc ,offset_24g_sta_crc ,contw -0x2de7 007903 istore 3 ,contw -0x2de8 007906 call g24_fetch_mem_rxbuf_add1 -0x2de9 007908 rshift pdata ,pdata -0x2dea 007909 and pdata ,0x03 ,pdata -0x2deb 007910 add regc ,offset_24g_sta_pid ,contw -0x2dec 007911 istore 1 ,contw -0x2ded 007913 rtn -: 007915 g24_prep: -0x2dee 007916 disable enable_crc -0x2def 007917 disable enable_white -0x2df0 007918 setarg 0x555555 -0x2df1 007919 iforce crc24_init -0x2df2 007920 rtn -: 007922 g24_set_freq_tx: -0x2df3 007923 call set_sync_on -0x2df4 007924 add regc ,offset_24g_ch ,rega -0x2df5 007925 ifetcht 1 ,rega -0x2df6 007927 branch set_freq_tx -: 007929 g24_transmit: -0x2df7 007930 call g24_prep -0x2df8 007931 call g24_set_freq_tx -0x2df9 007932 set1 txgfsk ,radio_ctrl -0x2dfa 007933 enable encode_fec0 -0x2dfb 007934 enable is_tx -0x2dfc 007935 disable is_rx -0x2dfd 007936 call le_enable -0x2dfe 007937 call g24_fetch_mem_addr -0x2dff 007939 iforce access -0x2e00 007940 inject mod ,32 -0x2e01 007941 enable enable_crc -0x2e02 007942 add regc ,offset_24g_txlen ,rega -0x2e03 007943 ifetch 1 ,rega -0x2e04 007945 iforce loopcnt -0x2e05 007946 add regc ,offset_24g_txpayload ,contr -: 007948 g24tr_loop: -0x2e06 007949 ifetch 1 ,contr -0x2e07 007950 inject mod ,8 -0x2e08 007951 loop g24tr_loop -0x2e09 007952 enable enable_parity -0x2e0a 007953 inject mod ,24 -0x2e0b 007954 disable enable_parity -0x2e0c 007955 until null ,tx_clear -0x2e0d 007956 bpatch patch16_7 ,mem_patch16 -0x2e0e 007957 nop 100 -0x2e0f 007958 disable encode_fec0 -0x2e10 007959 rtn -: 007961 g24_receive_packet: -0x2e11 007962 disable user3 -0x2e12 007963 force 0 ,radio_ctrl -0x2e13 007964 add regc ,offset_24g_ch ,rega -0x2e14 007965 ifetcht 1 ,rega -0x2e15 007967 call set_freq_rx -0x2e16 007968 call rf_rx_enable -: 007969 g24_receive_rxon: -0x2e17 007970 call g24_prep -0x2e18 007971 enable decode_fec0 -0x2e19 007972 enable is_rx -0x2e1a 007973 disable is_tx -0x2e1b 007974 call le_enable -0x2e1c 007975 call g24_fetch_mem_addr -0x2e1d 007977 iforce access -0x2e1e 007978 enable swfine -0x2e1f 007979 add regc ,offset_24g_rx_window ,rega -0x2e20 007980 ifetch 2 ,rega -0x2e21 007982 iforce stop_watch -0x2e22 007983 correlate null ,timeout -0x2e23 007984 nbranch g24_sync_timeout ,sync -0x2e24 007985 enable enable_crc -0x2e25 007986 parse demod ,bucket ,8 -0x2e26 007987 rshift3 pwindow ,pdata -0x2e27 007988 add regc ,offset_24g_rxbuf ,contw -0x2e28 007989 istore 1 ,contw -0x2e29 007991 add regc ,offset_24g_mode ,rega -0x2e2a 007992 ifetch 1 ,rega -0x2e2b 007994 beq rx_24g ,g24_receive_skip -0x2e2c 007995 bpatch patch17_0 ,mem_patch17 -0x2e2d 007996 add regc ,offset_24g_rxbuf ,rega -0x2e2e 007997 ifetch 1 ,rega -0x2e2f 007999 add regc ,offset_24g_data_type ,rega -0x2e30 008000 ifetcht 1 ,rega -0x2e31 008002 icompare bits_data ,temp -0x2e32 008003 nbranch g24_end_of_packet ,true -: 008004 g24_receive_skip: -0x2e33 008005 parse demod ,bucket ,8 -0x2e34 008006 rshift3 pwindow ,pdata -0x2e35 008007 istore 1 ,contw -0x2e36 008008 rshift3 pdata ,pdata -0x2e37 008009 and pdata ,0x1f ,loopcnt -0x2e38 008010 branch g24rx_nopayload ,zero -: 008011 g24rx_loop: -0x2e39 008012 parse demod ,bucket ,8 -0x2e3a 008013 rshift3 pwindow ,pdata -0x2e3b 008014 istore 1 ,contw -0x2e3c 008015 loop g24rx_loop -: 008016 g24rx_nopayload: -0x2e3d 008017 parse demod ,bucket ,24 -0x2e3e 008018 rshift32 pdata ,pdata -0x2e3f 008019 rshift16 pdata ,pdata -0x2e40 008020 istore 3 ,contw -0x2e41 008021 branch g24_end_of_packet ,crc_failed -0x2e42 008022 enable user3 -0x2e43 008023 disable decode_fec0 -0x2e44 008024 rtn -: 008027 g24_end_of_packet: -0x2e45 008028 disable encode_fec0 -0x2e46 008029 disable decode_fec0 -0x2e47 008030 disable enable_crc -0x2e48 008031 disable enable_white -0x2e49 008032 branch shutdown_radio ,is_rx -0x2e4a 008033 until null ,tx_clear -0x2e4b 008034 nop 100 -0x2e4c 008035 branch shutdown_radio -: 008037 g24_sync_timeout: -0x2e4d 008038 call rssi_noise -0x2e4e 008039 branch g24_end_of_packet -: 008041 rssi_noise: -0x2e4f 008042 call save_rssi -0x2e50 008043 rtn blank -0x2e51 008044 add regc ,offset_rssi_noise_index ,rega -0x2e52 008045 ifetcht 1 ,rega -0x2e53 008047 arg mem_rssi_noise_buffer ,rega -0x2e54 008049 call rssi_noise_store -0x2e55 008050 add regc ,offset_rssi_noise_index ,contw -: 008052 g24_contw_istoret_1byte: -0x2e56 008053 istoret 1 ,contw -0x2e57 008054 rtn -: 008056 rssi_noise_store: -0x2e58 008057 arg rssi_buf_len_noise ,regb -0x2e59 008058 branch rssi_store -: 008076 rssi_store: -0x2e5a 008077 copy rega ,pdata -0x2e5b 008078 iadd temp ,contw -0x2e5c 008079 fetch 1 ,mem_rssi -0x2e5d 008080 istore 1 ,contw -0x2e5e 008081 increase 1 ,temp -0x2e5f 008082 copy regb ,pdata -0x2e60 008083 iand_into temp -0x2e61 008084 rtn -: 008086 rssi_average: -0x2e62 008087 arg 0 ,temp -0x2e63 008088 copy rega ,contr -: 008089 rssi_average_loop: -0x2e64 008090 ifetch 1 ,contr -0x2e65 008091 iadd temp ,temp -0x2e66 008092 loop rssi_average_loop -0x2e67 008093 rshift8 temp ,temp -0x2e68 008094 rtn -: 008096 g24_power_ctrl_init: -0x2e69 008097 call g24_head_ptr2regc -0x2e6a 008098 call g24_power_ctrl_incrs_level1 -0x2e6b 008099 setarg 1 -0x2e6c 008100 call g24_store_mem_power_ctrl_level -: 008102 g24_power_ctrl_reinit: -0x2e6d 008103 setarg 0 -0x2e6e 008104 call g24_store_mem_power_ctrl_pac -0x2e6f 008106 istore 1 ,contw -0x2e70 008108 rtn -: 008110 g24_power_ctrl_pac_incrs: -0x2e71 008111 call g24_fetch_mem_power_ctrl_pac -0x2e72 008113 increase 1 ,pdata -: 008114 g24_store_mem_power_ctrl_pac: -0x2e73 008116 add regc ,offset_power_ctrl_packet_cnt ,contw -0x2e74 008117 branch g24_contw_istore_1byte -: 008119 g24_power_ctrl_ack_incrs: -0x2e75 008122 add regc ,offset_power_ctrl_ack_cnt ,rega -0x2e76 008123 ifetch 1 ,rega -0x2e77 008124 increase 1 ,pdata -0x2e78 008125 add regc ,offset_power_ctrl_ack_cnt ,contw -0x2e79 008126 branch g24_contw_istore_1byte -: 008128 g24_power_ctrl: -0x2e7a 008129 bpatch patch17_1 ,mem_patch17 -0x2e7b 008130 call g24_fetch_mem_power_ctrl_pac -0x2e7c 008132 sub pdata ,power_ctrl_max_packet_cnt ,null -0x2e7d 008133 rtn positive -0x2e7e 008134 add regc ,offset_power_ctrl_ack_cnt ,rega -0x2e7f 008135 ifetcht 1 ,rega -0x2e80 008137 isub temp ,temp -0x2e81 008138 call g24_power_ctrl_reinit -0x2e82 008139 setarg offset_power_ctrl_threshold_up -0x2e83 008140 iadd regc ,rega -0x2e84 008141 ifetch 1 ,rega -0x2e85 008143 isub temp ,null -0x2e86 008144 nbranch g24_power_ctrl_incrs ,positive -0x2e87 008145 setarg offset_power_ctrl_threshold_down -0x2e88 008146 iadd regc ,rega -0x2e89 008147 ifetch 1 ,rega -0x2e8a 008149 isub temp ,null -0x2e8b 008150 branch g24_power_ctrl_decrs ,positive -0x2e8c 008151 rtn -: 008153 g24_power_ctrl_incrs: -0x2e8d 008154 add regc ,offset_power_ctrl_level ,rega -0x2e8e 008155 ifetch 1 ,rega -0x2e8f 008157 beq 2 ,g24_power_ctrl_incrs_level2 -0x2e90 008158 increase 1 ,pdata -0x2e91 008159 call g24_store_mem_power_ctrl_level -0x2e92 008161 beq 1 ,g24_power_ctrl_incrs_level1 -: 008162 g24_power_ctrl_incrs_level2: -0x2e93 008163 setarg power_ctrl_losspac_thresh_up2 -0x2e94 008164 call g24_store_mem_power_ctrl_threshold_up -0x2e95 008166 setarg power_ctrl_losspac_thresh_down2 -0x2e96 008167 call g24_store_mem_power_ctrl_threshold_down -0x2e97 008170 add regc ,offset_power_ctrl_txpwr_level2 ,rega -0x2e98 008172 branch g24_ifetch_rega_store_mem_txpower -: 008174 g24_power_ctrl_decrs: -0x2e99 008175 add regc ,offset_power_ctrl_level ,rega -0x2e9a 008176 ifetch 1 ,rega -0x2e9b 008178 beq 0 ,g24_power_ctrl_decrs_level0 -0x2e9c 008179 increase -1 ,pdata -0x2e9d 008180 call g24_store_mem_power_ctrl_level -0x2e9e 008182 beq 0 ,g24_power_ctrl_decrs_level0 -: 008183 g24_power_ctrl_decrs_level1: -: 008186 g24_power_ctrl_incrs_level1: -0x2e9f 008187 setarg power_ctrl_losspac_thresh_up1 -0x2ea0 008188 call g24_store_mem_power_ctrl_threshold_up -0x2ea1 008190 setarg power_ctrl_losspac_thresh_down1 -0x2ea2 008191 call g24_store_mem_power_ctrl_threshold_down -0x2ea3 008194 setarg offset_power_ctrl_txpwr_level1 -: 008195 g24_iadd_offset_mem_txpower: -0x2ea4 008196 iadd regc ,rega -: 008197 g24_ifetch_rega_store_mem_txpower: -0x2ea5 008198 ifetch 1 ,rega -0x2ea6 008200 branch g24_store_mem_txpower -: 008202 g24_power_ctrl_decrs_level0: -0x2ea7 008205 setarg power_ctrl_losspac_thresh_up0 -0x2ea8 008206 call g24_store_mem_power_ctrl_threshold_up -0x2ea9 008208 setarg power_ctrl_losspac_thresh_down0 -0x2eaa 008209 call g24_store_mem_power_ctrl_threshold_down -0x2eab 008212 setarg offset_power_ctrl_txpwr_level0 -0x2eac 008214 branch g24_iadd_offset_mem_txpower -: 008228 g24_start_pairing_sm1: -0x2ead 008229 set1 mark_24g ,mark -0x2eae 008230 call g24_pair_init -: 008231 g24_set_pairing_sm_1: -0x2eaf 008233 setarg state_24g_pairing_1 -0x2eb0 008234 branch g24_store_mem_pairing_sm -: 008236 g24_pairing_sm: -0x2eb1 008237 add regc ,offset_24g_ensure ,rega -0x2eb2 008238 ifetch 1 ,rega -0x2eb3 008240 beq ensure_on_24g ,enable_user -0x2eb4 008241 call g24_fetch_mem_pairing_sm -0x2eb5 008243 beq state_24g_pairing_1 ,g24_pairing_sm_1 -0x2eb6 008244 beq state_24g_pairing_2 ,g24_pairing_sm_2 -0x2eb7 008245 beq state_24g_pairing_3 ,g24_pairing_sm_3 -0x2eb8 008246 branch assert -: 008248 g24_pairing_sm_1: -0x2eb9 008249 setarg state_24g_pairing_1_waiting_ack -0x2eba 008250 call g24_store_mem_pairing_sm -0x2ebb 008252 jam 0xaa ,mem_24g_common_temp -0x2ebc 008253 branch g24_pairing_sm_common -: 008254 g24_pairing_sm_2: -0x2ebd 008255 setarg state_24g_pairing_2_waiting_ack -0x2ebe 008256 call g24_store_mem_pairing_sm -0x2ebf 008258 jam 0x55 ,mem_24g_common_temp -0x2ec0 008259 branch g24_pairing_sm_common -: 008260 g24_pairing_sm_3: -0x2ec1 008261 setarg state_24g_pairing_3_waiting_ack -0x2ec2 008262 call g24_store_mem_pairing_sm -0x2ec3 008264 jam 0x22 ,mem_24g_common_temp -: 008265 g24_pairing_sm_common: -0x2ec4 008266 call g24_fetch_mem_data_type -0x2ec5 008268 and_into bits_data ,pdata -0x2ec6 008269 store 1 ,mem_24g_common_temp + 1 -0x2ec7 008270 call g24_fetch_mem_device_addr -0x2ec8 008272 store 4 ,mem_24g_common_temp + 2 -: 008273 g24_put_pairing_data_in_buff: -0x2ec9 008274 jam 0 ,mem_24g_common_temp + 6 -0x2eca 008275 arg mem_24g_common_temp ,rega -0x2ecb 008276 arg 7 ,temp -0x2ecc 008277 call g24_put_data_in_buff -0x2ecd 008278 call g24_transmit_prep -0x2ece 008279 call g24_txdata_enable_tx -0x2ecf 008280 branch enable_user -: 008282 g24_paring_mode: -0x2ed0 008283 call g24_fetch_mem_pairing_sm -0x2ed1 008285 rtneq state_24g_pairing_success -0x2ed2 008286 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack -0x2ed3 008287 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack -0x2ed4 008288 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack -0x2ed5 008289 rtn -: 008291 g24_pairing_sm_1_waiting_ack: -0x2ed6 008292 setarg state_24g_pairing_2 -0x2ed7 008293 call g24_store_mem_pairing_sm -0x2ed8 008295 branch g24_transmit_abandon -: 008296 g24_pairing_sm_2_waiting_ack: -0x2ed9 008297 setarg state_24g_pairing_3 -0x2eda 008298 call g24_store_mem_pairing_sm -0x2edb 008300 branch g24_transmit_abandon -: 008301 g24_pairing_sm_3_waiting_ack: -0x2edc 008302 setarg state_24g_pairing_success -0x2edd 008303 call g24_store_mem_pairing_sm -0x2ede 008305 jam bt_evt_24g_pairing_complete ,mem_fifo_temp -0x2edf 008306 call ui_ipc_send_event -0x2ee0 008307 add regc ,offset_24g_rxpayload_add2 ,rega -0x2ee1 008308 ifetch 4 ,rega -0x2ee2 008310 call g24_store_mem_addr -0x2ee3 008312 branch g24_transmit_abandon -: 008314 g24_auto_pair_start: -0x2ee4 008315 set0 mark_24g ,mark -0x2ee5 008316 call g24_auto_pair_set_device_info -0x2ee6 008317 call g24_tx_attemp_data_prep -: 008318 g24_auto_pair_restart: -0x2ee7 008319 call g24_set0_mem_check_dongle_times -: 008320 g24_auto_pair_start_loop: -0x2ee8 008321 nop 2000 -0x2ee9 008322 call g24_fetch_mem_check_dongle_times -0x2eea 008323 beq 0xff ,g24_stop_24g_mode -0x2eeb 008324 call g24_transmit_receive_ack -0x2eec 008325 nbranch g24_auto_pair_retry ,sync -0x2eed 008326 nbranch g24_auto_pair_retry ,user3 -0x2eee 008327 call g24_ackpayload_parse -0x2eef 008328 call g24_head_ptr2regc -0x2ef0 008329 add regc ,offset_24g_paring_addr ,rega -0x2ef1 008330 ifetcht 4 ,rega -0x2ef2 008331 call g24_fetch_mem_addr_isub_temp -0x2ef3 008332 branch g24_start_pairing_sm1 ,zero -0x2ef4 008333 call g24_head_ptr2regc -0x2ef5 008334 add regc ,offset_24g_rxpayload_add2 ,rega -0x2ef6 008335 ifetch 4 ,rega -0x2ef7 008336 beq 0 ,g24_auto_pair_restart -0x2ef8 008337 call g24_store_mem_addr -0x2ef9 008338 branch g24_tx_attemp_dongle_succ -: 008340 g24_auto_pair_retry: -0x2efa 008341 call g24_fetch_mem_check_dongle_times -0x2efb 008342 increase 1 ,pdata -0x2efc 008343 call g24_store_mem_check_dongle_times -0x2efd 008345 call g24_fetch_mem_auto_paring_switch -0x2efe 008346 increase 1 ,pdata -0x2eff 008347 and_into 1 ,pdata -0x2f00 008348 call g24_store_mem_auto_paring_switch -0x2f01 008349 beq 0 ,g24_auto_pair_device_attemp -0x2f02 008350 beq 1 ,g24_auto_pair_pair_attemp -0x2f03 008351 rtn -: 008353 g24_fetch_mem_auto_paring_switch: -0x2f04 008354 setarg offset_24g_auto_pair_switch -0x2f05 008355 branch g24_set_rega_ifetch_1byte -: 008356 g24_store_mem_auto_paring_switch: -0x2f06 008357 arg offset_24g_auto_pair_switch ,rega -0x2f07 008358 branch g24_set_contw_with_regb_store_1byte -: 008360 g24_auto_pair_set_device_info: -0x2f08 008361 call g24_store_mem_tx_power -0x2f09 008362 call g24_fetch_mem_device_addr -0x2f0a 008363 call g24_store_mem_addr -0x2f0b 008364 branch g24_ch -: 008366 g24_auto_pair_device_attemp: -0x2f0c 008367 call g24_auto_pair_set_device_info -0x2f0d 008368 branch g24_auto_pair_start_loop -: 008370 g24_auto_pair_pair_attemp: -0x2f0e 008371 call g24_pair_init -0x2f0f 008372 branch g24_auto_pair_start_loop -: 008375 g24_start_24g_mode: -0x2f10 008376 set0 mark_24g ,mark -0x2f11 008377 call g24_ch -0x2f12 008378 call g24_fetch_mem_pairing_sm -0x2f13 008380 rtnne state_24g_pairing_success -0x2f14 008381 call g24_tx_attemp_data_prep -0x2f15 008382 call g24_set0_mem_check_dongle_times -: 008384 g24_tx_attemp_dongle_loop: -0x2f16 008385 nop 2000 -0x2f17 008386 call g24_fetch_mem_check_dongle_times -0x2f18 008388 beq 0xff ,g24_stop_24g_mode -0x2f19 008389 call g24_transmit_receive_ack -0x2f1a 008390 nbranch g24_attemp_txdata_retry ,sync -0x2f1b 008391 nbranch g24_attemp_txdata_retry ,user3 -: 008392 g24_tx_attemp_dongle_succ: -0x2f1c 008393 set1 mark_24g ,mark -0x2f1d 008394 call g24_set0_mem_check_dongle_times -0x2f1e 008395 setarg state_24g_pairing_success -0x2f1f 008396 call g24_store_mem_pairing_sm -: 008398 g24_app_tx_attempt_success: -0x2f20 008399 jam bt_evt_24g_attempt_success ,mem_fifo_temp -0x2f21 008400 branch ui_ipc_send_event -: 008402 g24_tx_attemp_data_prep: -0x2f22 008403 set1 mark_24g_conext ,mark -0x2f23 008404 jam 0xff ,mem_24g_common_temp -0x2f24 008405 call g24_fetch_mem_data_type -0x2f25 008407 call g24_put_data_in_buff_pre -0x2f26 008408 branch g24_transmit_prep -: 008410 g24_attemp_txdata_retry: -0x2f27 008411 call g24_fetch_mem_check_dongle_times -0x2f28 008413 increase 1 ,pdata -0x2f29 008414 call g24_store_mem_check_dongle_times -0x2f2a 008416 call g24_ch -0x2f2b 008417 branch g24_tx_attemp_dongle_loop -: 008419 g24_check_51cmd_start_24g: -0x2f2c 008420 call g24_store_mem_tx_power -0x2f2d 008423 setarg state_24g_pairing_success -0x2f2e 008424 call g24_store_mem_pairing_sm -0x2f2f 008426 branch g24_start_24g_mode -: 008435 dongle_init: -0x2f30 008436 bpatch patch17_2 ,mem_patch17 -0x2f31 008437 call g24_head_ptr2regc -0x2f32 008438 setarg dongle_rxdata_type1 -0x2f33 008439 add regc ,offset_24g_cb_rxdata_type1 ,contw -0x2f34 008440 istore 2 ,contw -0x2f35 008442 call g24_receive_init -0x2f36 008443 call usb_init -0x2f37 008444 call g24_fetch_mem_pair_mode -0x2f38 008446 bpatch patch17_3 ,mem_patch17 -0x2f39 008447 beq 0x00 ,dongle_auto_bind -0x2f3a 008448 beq 0x01 ,dongle_pc_bind -0x2f3b 008449 beq 0x0f ,dongle_all_powerful -0x2f3c 008450 branch assert -: 008452 g24_receive_init: -0x2f3d 008453 call g24_store_mem_tx_power_temp -0x2f3e 008454 arg 0x80 ,loopcnt -0x2f3f 008455 arg mem_rssi_noise_buffer ,contw -0x2f40 008456 branch memset0 -: 008458 dongle_all_powerful: -0x2f41 008459 call dongle_check_mode -: 008460 dongle_all_powerful_loop: -0x2f42 008461 call g24_dongle_work_mode -0x2f43 008462 call usb_isr -0x2f44 008463 branch dongle_all_powerful_loop -: 008465 dongle_pc_bind: -0x2f45 008466 bpatch patch17_4 ,mem_patch17 -0x2f46 008467 call dongle_check_mode -: 008468 dongle_pc_bind_loop: -0x2f47 008469 call g24_dongle_work_mode -0x2f48 008470 call g24_dongle_bind_mode -0x2f49 008471 call usb_isr -0x2f4a 008472 call dongle_usb_dispatch -0x2f4b 008473 branch dongle_pc_bind_loop -: 008475 dongle_check_mode: -0x2f4c 008479 call g24_set_work_mem_dongle_work_mode -0x2f4d 008480 call g24_set0_mem_dongle_mode_init -0x2f4e 008481 branch g24_set0_mem_ackpayload_enable -: 008483 g24_dongle_work_mode: -0x2f4f 008484 call g24_fetch_mem_dongle_work_mode -0x2f50 008486 rtnne dongle_work -: 008487 g24_dongle_work_mode_start: -0x2f51 008488 call g24_dongle_work_init -0x2f52 008489 call g24_ch_process -0x2f53 008490 call g24_receive_packet_start -0x2f54 008491 branch g24_blank_data_process -: 008493 g24_dongle_work_init: -0x2f55 008494 call g24_fetch_mem_dongle_mode_init -0x2f56 008496 rtnbit1 dongle_work -0x2f57 008497 set1 dongle_work ,pdata -0x2f58 008498 call g24_store_mem_dongle_mode_init -0x2f59 008500 call g24_store_mem_tx_power -0x2f5a 008503 call g24_set0_mem_ackpayload_enable -0x2f5b 008505 jam 0 ,mem_usb_tx_enable -0x2f5c 008506 call g24_set1_mem_abort_pac -0x2f5d 008508 call g24_dongle_init -: 008509 g24_rx_interrupt_clear: -0x2f5e 008510 add regc ,offset_24g_rxbuf ,contw -0x2f5f 008512 arg 66 ,loopcnt -0x2f60 008513 branch clear_mem -: 008515 g24_dongle_init: -0x2f61 008516 call g24_set0_mem_pid -0x2f62 008518 call g24_fetch_mem_rx_addr -0x2f63 008520 call g24_store_mem_addr -0x2f64 008522 branch g24_ch -: 008524 g24_ch_process: -0x2f65 008525 bpatch patch17_5 ,mem_patch17 -0x2f66 008526 call g24_fetch_mem_abort_pac -0x2f67 008528 beq 1 ,g24_noise_rssi -0x2f68 008529 call g24_fetch_mem_hop_pac -0x2f69 008531 beq 1 ,g24_ch -0x2f6a 008532 setarg offset_24g_hop_btclk -0x2f6b 008533 iadd regc ,rega -0x2f6c 008534 ifetcht 4 ,rega -0x2f6d 008536 copy clkn_bt ,pdata -0x2f6e 008537 isub temp ,null -0x2f6f 008538 ncall g24_timer_timeout ,positive -0x2f70 008539 copy pdata ,regb -0x2f71 008540 setarg offset_24g_hop_btclk -0x2f72 008541 iadd regc ,rega -0x2f73 008542 ifetch 4 ,rega -0x2f74 008543 copy pdata ,temp -0x2f75 008545 setarg offset_24g_hop_interval -0x2f76 008546 iadd regc ,rega -0x2f77 008547 copy temp ,pdata -0x2f78 008548 ifetcht 1 ,rega -0x2f79 008550 iadd temp ,temp -0x2f7a 008551 copy regb ,pdata -0x2f7b 008552 isub temp ,null -0x2f7c 008553 nrtn positive -0x2f7d 008554 set0 28 ,pdata -0x2f7e 008555 setarg offset_24g_hop_btclk -0x2f7f 008556 iadd regc ,contw -0x2f80 008557 istore 4 ,contw -: 008559 g24_ch_update: -0x2f81 008560 call g24_ch -0x2f82 008561 call g24_fetch_mem_rf_laststa -0x2f83 008563 increase 1 ,pdata -0x2f84 008564 call g24_store_mem_rf_laststa -0x2f85 008566 rtnne 2 -0x2f86 008567 call g24_set0_mem_rf_laststa -0x2f87 008571 branch g24_set1_mem_abort_pac -: 008573 g24_ch_timer_reinit: -0x2f88 008574 copy clkn_bt ,pdata -0x2f89 008575 arg offset_24g_hop_btclk ,rega -0x2f8a 008576 call g24_set_contw_with_temp -0x2f8b 008577 istore 4 ,contw -0x2f8c 008581 branch g24_set0_mem_rf_laststa -: 008583 g24_noise_rssi: -0x2f8d 008584 arg mem_rssi_noise_buffer ,rega -0x2f8e 008585 call g24_noise_rssi_average -0x2f8f 008586 add regc ,offset_rssi_noise_avg ,contw -0x2f90 008587 istoret 1 ,contw -0x2f91 008589 sub temp ,rssi_thresh_noise ,null -0x2f92 008590 nrtn positive -0x2f93 008591 branch g24_ch -: 008593 g24_noise_rssi_average: -0x2f94 008594 arg rssi_buf_len_noise + 1 ,loopcnt -0x2f95 008595 branch rssi_average -: 008597 g24_blank_data_process: -0x2f96 008598 call g24_ms_blank_data -0x2f97 008599 call g24_kb_blank_data -0x2f98 008600 branch g24_kb_mul_blank_data -: 008602 g24_ms_blank_data: -0x2f99 008603 setarg offset_24g_ms_blank_data_enable -0x2f9a 008604 call g24_set_rega_ifetch_1byte -0x2f9b 008606 rtn blank -0x2f9c 008607 arg timer_ms_blank ,queue -0x2f9d 008608 call timer_check -0x2f9e 008609 nrtn blank -0x2f9f 008610 call g24_set0_mem_ms_blank_data_enable -: 008612 g24_ms_blank_data_2usb: -0x2fa0 008613 setarg ms_report_id -0x2fa1 008614 store 1 ,mem_usb_mouse_data -0x2fa2 008615 setarg 0 -0x2fa3 008616 istore 7 ,contw -0x2fa4 008617 branch g24_data_type1_usbtx_enable -: 008619 g24_kb_blank_data: -0x2fa5 008620 setarg offset_24g_kb_blank_data_enable -0x2fa6 008621 call g24_set_rega_ifetch_1byte -0x2fa7 008623 rtn blank -0x2fa8 008624 arg timer_kb_blank ,queue -0x2fa9 008625 call timer_check -0x2faa 008626 nrtn blank -0x2fab 008627 call g24_set0_mem_kb_blank_data_enable -: 008629 g24_kb_blank_data_2usb: -0x2fac 008630 arg mem_usb_kb_data ,contw -0x2fad 008631 arg 2 ,loopcnt -0x2fae 008632 call memset0 -0x2faf 008633 jam kb_normal_report_id ,mem_usb_kb_data -0x2fb0 008634 branch g24_kb_data_into_ep1_fifo -: 008636 g24_kb_mul_blank_data: -0x2fb1 008637 setarg offset_24g_kb_mul_blank_data_enable -0x2fb2 008638 call g24_set_rega_ifetch_1byte -0x2fb3 008640 rtn blank -0x2fb4 008641 arg timer_kb_mul_blank ,queue -0x2fb5 008642 call timer_check -0x2fb6 008643 nrtn blank -0x2fb7 008644 call g24_set0_mem_kb_mul_blank_data_enable -: 008646 g24_kb_mul_blank_data_2usb: -0x2fb8 008647 arg mem_usb_kb_multikey ,contw -0x2fb9 008648 arg 2 ,loopcnt -0x2fba 008649 call memset0 -0x2fbb 008650 jam kb_multikey_report_id ,mem_usb_kb_multikey -0x2fbc 008651 branch g24_kb_mul_data_into_ep2_fifo -: 008653 g24_dongle_bind_mode: -0x2fbd 008654 call g24_fetch_mem_dongle_work_mode -0x2fbe 008656 rtnne dongle_bind -0x2fbf 008657 call g24_dongle_bind_init -0x2fc0 008658 branch g24_dongle_bind_data_process -: 008660 g24_dongle_bind_init: -0x2fc1 008661 call g24_fetch_mem_dongle_mode_init -0x2fc2 008663 rtnbit1 dongle_bind -0x2fc3 008664 set1 dongle_bind ,pdata -0x2fc4 008665 call g24_store_mem_dongle_mode_init -0x2fc5 008667 call g24_set1_mem_ackpayload_enable -0x2fc6 008669 call g24_pair_init -0x2fc7 008670 setarg 0 -0x2fc8 008671 arg offset_dongle_ms_bind_step ,rega -0x2fc9 008672 call g24_set_contw_with_temp -0x2fca 008674 branch g24_contw_istore_3byte -: 008676 g24_dongle_bind_data_process: -0x2fcb 008677 call g24_receive_transmit_ack -0x2fcc 008678 nbranch g24_rx_interrupt_clear ,user3 -0x2fcd 008679 add regc ,offset_24g_rxbuf ,contr -0x2fce 008680 setarg offset_24g_rxdata_temp -0x2fcf 008681 iadd regc ,contw -0x2fd0 008682 arg 8 ,loopcnt -0x2fd1 008683 call memcpy -0x2fd2 008684 setarg offset_24g_rxdata_temp_add2 -0x2fd3 008685 call g24_set_rega_ifetch_1byte -0x2fd4 008686 beq datatype_bind ,g24_dongle_bind_first_step -0x2fd5 008687 beq datatype_config ,g24_dongle_bind_second_step -0x2fd6 008688 beq datatype_ok ,g24_dongle_bind_third_step -0x2fd7 008689 beq 0xff ,g24_data_attemp -0x2fd8 008690 branch g24_rx_interrupt_clear -: 008692 g24_dongle_bind_first_step: -0x2fd9 008693 call g24_fetch_mem_rxdata_temp_add3_1byte -0x2fda 008694 beq bind_mouse ,g24_dongle_bind_first_step_mouse -0x2fdb 008695 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard -0x2fdc 008696 rtn -: 008697 g24_dongle_bind_first_step_mouse: -0x2fdd 008698 setarg 1 -0x2fde 008699 call g24_store_mem_ms_bind_step -: 008701 g24_dongle_bind_ms_payload_cfg: -0x2fdf 008702 setarg datatype_mouse -0x2fe0 008703 call g24_store_mem_bind_payload -: 008705 g24_dongle_bind_payload_cfg: -0x2fe1 008706 setarg 0x80 -0x2fe2 008707 arg offset_24g_bind_payload_add1 ,rega -0x2fe3 008708 call g24_set_contw_with_regb_store_1byte -0x2fe4 008710 call g24_fetch_mem_rx_addr -0x2fe5 008712 arg offset_24g_bind_payload_add2 ,rega -0x2fe6 008713 call g24_set_contw_with_temp -0x2fe7 008715 branch g24_contw_istore_4byte -: 008717 g24_dongle_bind_first_step_keyboard: -0x2fe8 008718 setarg 1 -0x2fe9 008719 call g24_store_mem_kb_bind_step -: 008721 g24_dongle_bind_kb_payload_cfg: -0x2fea 008722 setarg datatype_keyboard -0x2feb 008723 call g24_store_mem_bind_payload -0x2fec 008725 branch g24_dongle_bind_payload_cfg -: 008727 g24_dongle_bind_second_step: -0x2fed 008728 call g24_fetch_mem_rxdata_temp_add3_1byte -0x2fee 008729 beq bind_mouse ,g24_dongle_bind_second_step_mouse -0x2fef 008730 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard -0x2ff0 008731 rtn -: 008732 g24_dongle_bind_second_step_mouse: -0x2ff1 008733 call g24_dongle_bind_ms_payload_cfg -0x2ff2 008734 setarg offset_dongle_ms_bind_step -0x2ff3 008735 call g24_set_rega_ifetch_1byte -0x2ff4 008737 beq 1 ,g24_dongle_ms_bind_step_set2 -0x2ff5 008738 rtn -: 008739 g24_dongle_ms_bind_step_set2: -0x2ff6 008740 setarg 2 -: 008742 g24_store_mem_ms_bind_step: -0x2ff7 008743 arg offset_dongle_ms_bind_step ,rega -0x2ff8 008744 branch g24_set_contw_with_regb_store_1byte -: 008746 g24_dongle_bind_second_step_keyboard: -0x2ff9 008747 call g24_dongle_bind_kb_payload_cfg -0x2ffa 008748 setarg offset_dongle_kb_bind_step -0x2ffb 008749 call g24_set_rega_ifetch_1byte -0x2ffc 008751 beq 1 ,g24_dongle_kb_bind_step_set2 -0x2ffd 008752 rtn -: 008753 g24_dongle_kb_bind_step_set2: -0x2ffe 008754 setarg 2 -: 008756 g24_store_mem_kb_bind_step: -0x2fff 008757 arg offset_dongle_kb_bind_step ,rega -0x3000 008758 branch g24_set_contw_with_regb_store_1byte -: 008760 g24_dongle_bind_third_step: -0x3001 008761 call g24_fetch_mem_rxdata_temp_add3_1byte -0x3002 008762 beq bind_mouse ,g24_dongle_bind_third_step_mouse -0x3003 008763 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard -0x3004 008764 rtn -: 008765 g24_dongle_bind_third_step_mouse: -0x3005 008766 setarg offset_dongle_ms_bind_step -0x3006 008767 call g24_set_rega_ifetch_1byte -0x3007 008769 beq 2 ,g24_dongle_ms_bind_step_success -0x3008 008770 rtn -: 008771 g24_dongle_ms_bind_step_success: -0x3009 008772 call g24_fetch_mem_bind_device_status -0x300a 008774 or_into 0x01 ,pdata -0x300b 008775 call g24_store_mem_bind_device_status -: 008777 g24_dongle_bind_exit: -0x300c 008778 setarg 0 -0x300d 008779 setarg offset_dongle_ms_bind_step -0x300e 008780 iadd regc ,contw -0x300f 008781 istore 2 ,contw -0x3010 008782 branch g24_rx_interrupt_clear -: 008784 g24_dongle_bind_third_step_keyboard: -0x3011 008785 setarg offset_dongle_kb_bind_step -0x3012 008786 call g24_set_rega_ifetch_1byte -0x3013 008788 bne 0 ,g24_dongle_kb_bind_step_success -0x3014 008789 rtn -: 008790 g24_dongle_kb_bind_step_success: -0x3015 008791 call g24_fetch_mem_bind_device_status -0x3016 008793 or_into 0x02 ,pdata -0x3017 008794 call g24_store_mem_bind_device_status -0x3018 008796 branch g24_dongle_bind_exit -: 008799 dongle_usb_dispatch: -0x3019 008800 fetch 1 ,mem_usb0_get_set_report -0x301a 008801 rtn blank -0x301b 008802 jam 0 ,mem_usb0_get_set_report -0x301c 008803 fetch 2 ,mem_usb_setup_bvalue_temp -0x301d 008804 arg pc_set_report ,temp -0x301e 008805 isub temp ,null -0x301f 008806 nrtn zero -0x3020 008808 fetch 1 ,mem_usb0_set_report_data -0x3021 008809 rtnne pc_report_id -0x3022 008810 fetch 1 ,mem_usb0_set_report_data + 1 -0x3023 008811 bpatch patch17_6 ,mem_patch17 -0x3024 008812 beq command_mode ,dongle_dispose_cmd_mode -0x3025 008813 beq command_bind ,dongle_dispose_cmd_bind -0x3026 008814 beq command_current_project ,dongle_dispose_cmd_current_project -0x3027 008815 beq command_current_mode ,dongle_dispose_cmd_current_mode -0x3028 008816 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version -0x3029 008817 beq command_user_defined ,dongle_dispose_cmd_user_defined -: 008818 usb0_data_ready_report_set0: -0x302a 008819 jam 0 ,mem_usb0_data_ready_report -0x302b 008820 rtn -: 008821 dongle_dispose_cmd_bind: -0x302c 008822 fetch 1 ,mem_usb0_set_report_data + 2 -0x302d 008823 beq com_bind_get ,dongle_dispose_cmd_get_bind -0x302e 008824 beq com_bind_exit ,dongle_dispose_cmd_exit_bind -0x302f 008825 beq com_read_mode ,dongle_dispose_cmd_read_mode -0x3030 008826 branch usb0_data_ready_report_set0 -: 008827 dongle_dispose_cmd_get_bind: -0x3031 008828 call g24_fetch_mem_bind_device_status -0x3032 008830 store 1 ,mem_usb0_get_report_data + 1 -0x3033 008831 branch usb0_data_ready_report_set1 -: 008832 dongle_dispose_cmd_exit_bind: -0x3034 008833 call g24_set_work_mem_dongle_work_mode -0x3035 008835 call g24_set0_mem_dongle_mode_init -0x3036 008837 call g24_fetch_mem_bind_device_status -0x3037 008839 store 1 ,mem_usb0_get_report_data + 1 -0x3038 008840 branch usb0_data_ready_report_set1 -: 008842 dongle_dispose_cmd_read_mode: -: 008843 dongle_dispose_in_bind_mode: -0x3039 008844 jam command_bind ,mem_usb0_get_report_data + 1 -0x303a 008845 branch usb0_data_ready_report_set1 -: 008847 dongle_dispose_cmd_mode: -0x303b 008848 fetch 1 ,mem_usb0_set_report_data + 2 -0x303c 008849 beq com_mode_bind ,dongle_enter_bind_mode -0x303d 008851 branch usb0_data_ready_report_set0 -: 008852 dongle_enter_bind_mode: -0x303e 008855 call g24_bind_mode_enable -: 008856 usb0_data_ready_report_set1: -0x303f 008857 jam 1 ,mem_usb0_data_ready_report -0x3040 008858 rtn -: 008863 dongle_dispose_cmd_current_project: -0x3041 008864 jam product_id ,mem_usb0_get_report_data + 1 -0x3042 008865 branch usb0_data_ready_report_set1 -: 008867 dongle_dispose_cmd_current_mode: -0x3043 008868 call g24_fetch_mem_dongle_work_mode -0x3044 008870 beq dongle_work ,dongle_dispose_in_work_mode -0x3045 008871 beq dongle_bind ,dongle_dispose_in_bind_mode -0x3046 008873 rtn -: 008874 dongle_dispose_in_work_mode: -0x3047 008875 jam command_mode ,mem_usb0_get_report_data + 1 -0x3048 008876 branch usb0_data_ready_report_set1 -: 008881 dongle_dispose_cmd_current_fw_version: -0x3049 008882 jam fw_version0 ,mem_usb0_get_report_data + 1 -0x304a 008883 jam fw_version1 ,mem_usb0_get_report_data + 2 -0x304b 008884 jam fw_version2 ,mem_usb0_get_report_data + 3 -0x304c 008885 branch usb0_data_ready_report_set1 -: 008887 dongle_dispose_cmd_user_defined: -0x304d 008889 call g24_set1_mem_ackpayload_enable -0x304e 008890 fetch 1 ,mem_usb0_set_report_data + 2 -0x304f 008891 increase 2 ,pdata -0x3050 008892 copy pdata ,loopcnt -0x3051 008893 arg mem_usb0_set_report_data ,contr -0x3052 008894 setarg offset_24g_ackpayload -0x3053 008895 iadd regc ,contw -0x3054 008896 branch memcpy -: 008899 dongle_auto_bind: -0x3055 008900 bpatch patch17_7 ,mem_patch17 -0x3056 008901 call g24_mode_switch_init -: 008902 dongle_auto_bind_loop: -0x3057 008903 call g24_receive_process -0x3058 008904 call usb_isr -0x3059 008905 branch dongle_auto_bind_loop -: 008907 g24_dongle_work_mode_auto: -0x305a 008908 call g24_fetch_mem_dongle_work_mode -0x305b 008910 rtnne dongle_work -0x305c 008911 call g24_dongle_work_mode_start -0x305d 008912 branch g24_rx_nodata_process -: 008914 g24_dongle_bind_mode_auto: -0x305e 008915 call g24_fetch_mem_dongle_work_mode -0x305f 008917 rtnne dongle_bind -0x3060 008918 call g24_dongle_bind_init -0x3061 008919 call g24_dongle_bind_data_process -0x3062 008920 call g24_fetch_mem_bind_device_status -0x3063 008922 rtn blank -0x3064 008923 call g24_set0_mem_mode_switch -0x3065 008925 call dongle_check_mode -0x3066 008926 call g24_enable_nodata_timer -: 008927 g24_timer_init: -0x3067 008928 setarg 0 -0x3068 008929 add regc ,offset_24g_tx_btclk ,contw -0x3069 008931 branch g24_contw_istore_4byte -: 008933 g24_timer_check: -0x306a 008934 call disable_user -0x306b 008935 add regc ,offset_24g_tx_btclk ,rega -0x306c 008936 ifetcht 4 ,rega -0x306d 008938 copy clkn_bt ,pdata -0x306e 008939 isub temp ,null -0x306f 008940 ncall g24_timer_timeout ,positive -0x3070 008941 copy pdata ,regb -0x3071 008942 add regc ,offset_24g_tx_btclk ,rega -0x3072 008943 ifetch 4 ,rega -0x3073 008945 add regc ,offset_24g_interval ,rega -0x3074 008946 ifetcht 1 ,rega -0x3075 008948 iadd temp ,temp -0x3076 008949 copy regb ,pdata -0x3077 008950 isub temp ,null -0x3078 008951 nrtn positive -0x3079 008952 set0 28 ,pdata -0x307a 008953 add regc ,offset_24g_tx_btclk ,contw -0x307b 008954 istore 4 ,contw -0x307c 008956 branch enable_user -: 008958 g24_mode_switch_init: -0x307d 008959 setarg 1 -0x307e 008960 call g24_store_mem_mode_switch -0x307f 008962 call g24_set0_mem_time_slice -0x3080 008964 setarg 0xff -0x3081 008965 add regc ,offset_24g_interval ,contw -0x3082 008966 istore 1 ,contw -0x3083 008968 branch g24_timer_init -: 008970 g24_mode_switch: -0x3084 008971 setarg offset_24g_mode_switch -0x3085 008972 call g24_set_rega_ifetch_1byte -0x3086 008974 rtn blank -0x3087 008975 call g24_timer_check -0x3088 008976 nrtn user -0x3089 008977 call g24_fetch_mem_time_slice -0x308a 008979 increase 1 ,pdata -0x308b 008980 and_into 1 ,pdata -0x308c 008981 call g24_store_mem_time_slice -0x308d 008983 beq 0 ,dongle_check_mode -0x308e 008984 beq 1 ,g24_bind_mode_enable -0x308f 008985 rtn -: 008987 g24_bind_mode_enable: -0x3090 008991 setarg dongle_bind -0x3091 008992 call g24_store_mem_dongle_work_mode -0x3092 008993 branch g24_set0_mem_dongle_mode_init -: 008995 g24_enable_nodata_timer: -0x3093 008996 setarg 1 -0x3094 008997 call g24_store_mem_nodata_timer_enable -: 008999 g24_enable_nodata_timer_init: -0x3095 009000 setarg timer_nodata_delay -0x3096 009001 arg timer_nodata ,queue -0x3097 009002 branch timer_init -: 009004 g24_rx_nodata_process: -0x3098 009005 call g24_fetch_mem_nodata_timer_enable -0x3099 009007 rtn blank -0x309a 009008 arg timer_nodata ,queue -0x309b 009009 call timer_check -0x309c 009010 nrtn blank -0x309d 009011 call g24_set0_mem_nodata_timer_enable -0x309e 009014 setarg dongle_search -0x309f 009015 call g24_store_mem_dongle_work_mode -0x30a0 009017 call g24_set0_mem_dongle_mode_init -0x30a1 009019 branch g24_rx_interrupt_clear -: 009021 g24_dongle_search_mode_auto: -0x30a2 009022 bpatch patch18_0 ,mem_patch18 -0x30a3 009023 call g24_fetch_mem_dongle_work_mode -0x30a4 009025 rtnne dongle_search -0x30a5 009026 call g24_dongle_search_mode_init -0x30a6 009027 call g24_rx_auto_addr_ch_search -0x30a7 009028 call g24_receive_transmit_ack -0x30a8 009029 nbranch g24_rx_interrupt_clear ,user3 -0x30a9 009031 call g24_dongle_search_addr_check -0x30aa 009032 call g24_receive_packet_parse ,zero -0x30ab 009036 call dongle_check_mode -0x30ac 009037 call g24_fetch_mem_dongle_mode_init -0x30ad 009039 set1 dongle_work ,pdata -0x30ae 009040 call g24_store_mem_dongle_mode_init -0x30af 009042 call g24_rx_interrupt_clear -0x30b0 009043 call g24_enable_nodata_timer -0x30b1 009044 call g24_dongle_search_addr_check -0x30b2 009045 branch g24_dg_ch_num_reinit ,zero -0x30b3 009046 setarg offset_24g_kb_addr -0x30b4 009047 call g24_set_rega_ifetcht_4byte -0x30b5 009049 call g24_fetch_mem_addr_isub_temp -0x30b6 009050 branch g24_kb_ch_num_reinit ,zero -0x30b7 009051 setarg offset_24g_mouse_addr -0x30b8 009052 call g24_set_rega_ifetcht_4byte -0x30b9 009054 call g24_fetch_mem_addr_isub_temp -0x30ba 009055 branch g24_ms_ch_num_reinit ,zero -0x30bb 009056 rtn -: 009058 g24_dongle_search_addr_check: -0x30bc 009059 setarg offset_24g_rx_addr -0x30bd 009060 call g24_set_rega_ifetcht_4byte -: 009062 g24_fetch_mem_addr_isub_temp: -0x30be 009063 call g24_fetch_mem_addr -0x30bf 009065 isub temp ,null -0x30c0 009066 rtn -: 009068 g24_dg_ch_num_reinit: -0x30c1 009069 setarg offset_24g_dg_ch_number -0x30c2 009070 call g24_set_rega_ifetch_1byte -: 009072 g24_current_ch_num_reinit: -0x30c3 009074 add regc ,offset_24g_current_ch_number ,contw -0x30c4 009075 branch g24_contw_istore_1byte -: 009077 g24_kb_ch_num_reinit: -0x30c5 009078 setarg offset_24g_kb_ch_number -0x30c6 009079 call g24_set_rega_ifetch_1byte -0x30c7 009081 branch g24_current_ch_num_reinit -: 009082 g24_ms_ch_num_reinit: -0x30c8 009083 setarg offset_24g_ms_ch_number -0x30c9 009084 call g24_set_rega_ifetch_1byte -0x30ca 009086 branch g24_current_ch_num_reinit -: 009088 g24_dongle_search_mode_init: -0x30cb 009089 call g24_fetch_mem_dongle_mode_init -0x30cc 009091 rtnbit1 dongle_search -0x30cd 009092 set1 dongle_search ,pdata -0x30ce 009093 call g24_store_mem_dongle_mode_init -0x30cf 009095 call g24_set0_mem_time_slice -0x30d0 009097 call g24_set1_mem_ackpayload_enable -0x30d1 009099 setarg 0 -0x30d2 009100 add regc ,offset_rssi_noise_dg_index ,contw -0x30d3 009101 istore 3 ,contw -0x30d4 009103 arg offset_24g_dg_config_ch_once ,rega -0x30d5 009104 call g24_set_contw_with_temp -0x30d6 009105 istore 7 ,contw -0x30d7 009108 call g24_dongle_search_addr_check -0x30d8 009109 nrtn zero -0x30d9 009110 add regc ,offset_24g_current_ch_number ,rega -0x30da 009111 ifetch 1 ,rega -0x30db 009113 arg offset_24g_dg_ch_number ,rega -0x30dc 009114 call g24_set_contw_with_regb_store_1byte -0x30dd 009116 add regc ,offset_24g_ch ,rega -0x30de 009117 ifetch 1 ,rega -0x30df 009120 branch g24_store_mem_dg_last_ch -: 009122 g24_rx_auto_addr_ch_search: -0x30e0 009123 bpatch patch18_1 ,mem_patch18 -0x30e1 009124 call g24_fetch_mem_time_slice -0x30e2 009126 increase 1 ,pdata -0x30e3 009127 and_into 3 ,pdata -0x30e4 009128 call g24_store_mem_time_slice -0x30e5 009131 beq 0 ,g24_rx_auto_bind_config_kb -0x30e6 009132 beq 1 ,g24_rx_auto_bind_config_dongle -0x30e7 009133 beq 2 ,g24_rx_auto_bind_config_mouse -0x30e8 009134 beq 3 ,g24_rx_auto_bind_config_dongle -0x30e9 009135 rtn -: 009137 g24_rx_auto_bind_config_mouse: -0x30ea 009138 call g24_dongle_bind_ms_payload_cfg -0x30eb 009139 setarg offset_24g_mouse_addr -0x30ec 009140 call g24_set_rega_ifetch_4byte -0x30ed 009142 branch g24_rx_auto_addr_ch_search ,blank -0x30ee 009143 call g24_store_mem_addr -0x30ef 009145 setarg offset_24g_ms_config_ch_once -0x30f0 009146 call g24_set_rega_ifetch_1byte -0x30f1 009148 call g24_ms_config_ch_once ,blank -0x30f2 009149 setarg offset_24g_ms_last_ch -0x30f3 009150 call g24_set_rega_ifetch_1byte -0x30f4 009152 call g24_store_mem_ch -0x30f5 009154 add regc ,offset_rssi_noise_ms_index ,rega -0x30f6 009155 ifetcht 1 ,rega -0x30f7 009157 arg mem_rssi_noise_ms_buffer ,rega -0x30f8 009158 call rssi_noise_store -0x30f9 009159 add regc ,offset_rssi_noise_ms_index ,contw -0x30fa 009160 istoret 1 ,contw -0x30fb 009162 call g24_noise_rssi_average -0x30fc 009163 add regc ,offset_rssi_noise_ms_avg ,contw -0x30fd 009164 istoret 1 ,contw -0x30fe 009166 sub temp ,rssi_thresh_noise ,null -0x30ff 009167 nrtn positive -0x3100 009168 setarg offset_24g_ms_ch_number -0x3101 009169 call g24_set_rega_ifetcht_1byte -0x3102 009171 call g24_ch_temp_incre_size4 -0x3103 009172 arg offset_24g_ms_ch_number ,rega -0x3104 009173 call g24_set_contw_with_regb2 -0x3105 009174 istoret 1 ,contw -: 009176 g24_store_mem_ms_last_ch: -0x3106 009178 arg offset_24g_ms_last_ch ,rega -0x3107 009179 branch g24_set_contw_with_regb_store_1byte -: 009181 g24_ms_config_ch_once: -0x3108 009182 setarg 1 -0x3109 009183 arg offset_24g_ms_config_ch_once ,rega -0x310a 009184 call g24_set_contw_with_regb_store_1byte -0x310b 009186 arg 0 ,temp -0x310c 009187 call g24_ch_calc -0x310d 009190 branch g24_store_mem_ms_last_ch -: 009192 g24_rx_auto_bind_config_kb: -0x310e 009193 call g24_dongle_bind_kb_payload_cfg -0x310f 009194 setarg offset_24g_kb_addr -0x3110 009195 call g24_set_rega_ifetch_4byte -0x3111 009197 branch g24_rx_auto_addr_ch_search ,blank -0x3112 009198 call g24_store_mem_addr -0x3113 009200 setarg offset_24g_kb_config_ch_once -0x3114 009201 call g24_set_rega_ifetch_1byte -0x3115 009203 call g24_kb_config_ch_once ,blank -0x3116 009204 setarg offset_24g_kb_last_ch -0x3117 009205 call g24_set_rega_ifetch_1byte -0x3118 009207 call g24_store_mem_ch -0x3119 009209 add regc ,offset_rssi_noise_kb_index ,rega -0x311a 009210 ifetcht 1 ,rega -0x311b 009212 arg mem_rssi_noise_kb_buffer ,rega -0x311c 009213 call rssi_noise_store -0x311d 009214 add regc ,offset_rssi_noise_kb_index ,contw -0x311e 009215 istoret 1 ,contw -0x311f 009217 call g24_noise_rssi_average -0x3120 009218 add regc ,offset_rssi_noise_kb_avg ,contw -0x3121 009219 istoret 1 ,contw -0x3122 009221 sub temp ,rssi_thresh_noise ,null -0x3123 009222 nrtn positive -0x3124 009223 setarg offset_24g_kb_ch_number -0x3125 009224 call g24_set_rega_ifetcht_1byte -0x3126 009226 call g24_ch_temp_incre_size4 -0x3127 009227 arg offset_24g_kb_ch_number ,rega -0x3128 009228 call g24_set_contw_with_regb2 -0x3129 009229 istoret 1 ,contw -: 009231 g24_store_mem_kb_last_ch: -0x312a 009233 arg offset_24g_kb_last_ch ,rega -0x312b 009234 branch g24_set_contw_with_regb_store_1byte -: 009236 g24_kb_config_ch_once: -0x312c 009237 setarg 1 -0x312d 009238 arg offset_24g_kb_config_ch_once ,rega -0x312e 009239 call g24_set_contw_with_regb_store_1byte -0x312f 009241 arg 0 ,temp -0x3130 009242 call g24_ch_calc -0x3131 009245 branch g24_store_mem_kb_last_ch -: 009247 g24_rx_auto_bind_config_dongle: -0x3132 009248 call g24_dongle_bind_ms_payload_cfg -0x3133 009249 call g24_fetch_mem_rx_addr -0x3134 009251 call g24_store_mem_addr -0x3135 009253 setarg offset_24g_dg_config_ch_once -0x3136 009254 call g24_set_rega_ifetch_1byte -0x3137 009256 call g24_dg_config_ch_once ,blank -0x3138 009257 call g24_dg_store_config_ch -0x3139 009258 add regc ,offset_rssi_noise_dg_index ,rega -0x313a 009259 ifetcht 1 ,rega -0x313b 009261 arg mem_rssi_noise_dg_buffer ,rega -0x313c 009262 call rssi_noise_store -0x313d 009263 add regc ,offset_rssi_noise_dg_index ,contw -0x313e 009264 istoret 1 ,contw -0x313f 009266 call g24_noise_rssi_average -0x3140 009267 add regc ,offset_rssi_noise_dg_avg ,contw -0x3141 009268 istoret 1 ,contw -0x3142 009270 sub temp ,rssi_thresh_noise ,null -0x3143 009271 nrtn positive -0x3144 009272 setarg offset_24g_dg_ch_number -0x3145 009273 call g24_set_rega_ifetcht_1byte -0x3146 009275 call g24_ch_temp_incre_size4 -0x3147 009276 arg offset_24g_dg_ch_number ,rega -0x3148 009277 call g24_set_contw_with_regb2 -0x3149 009278 istoret 1 ,contw -: 009280 g24_store_mem_dg_last_ch: -0x314a 009283 arg offset_24g_dg_last_ch ,rega -0x314b 009284 branch g24_set_contw_with_regb_store_1byte -: 009287 g24_dg_config_ch_once: -0x314c 009292 setarg 1 -0x314d 009293 arg offset_24g_dg_config_ch_once ,rega -0x314e 009294 call g24_set_contw_with_regb_store_1byte -: 009295 g24_dg_store_config_ch: -0x314f 009296 setarg offset_24g_dg_last_ch -0x3150 009297 call g24_set_rega_ifetch_1byte -0x3151 009298 branch g24_store_mem_ch -: 009301 g24_transmit_ack: -0x3152 009303 add regc ,offset_24g_rxbuf ,rega -0x3153 009304 ifetch 1 ,rega -0x3154 009306 call g24_store_mem_data_type -0x3155 009309 call g24_read_len_pid_crc -0x3156 009311 call g24_fetch_mem_rxbuf_add1 -0x3157 009313 isolate1 bit_ack_24g ,pdata -0x3158 009314 branch g24tx_no_ack ,true -: 009315 g24tx_with_ack: -0x3159 009316 call g24_ackpayload_prep -0x315a 009317 call g24_transmit_prep -0x315b 009318 call g24_transmit -: 009319 g24tx_no_ack: -0x315c 009320 branch g24_end_of_packet -: 009322 g24_ackpayload_prep: -0x315d 009323 bpatch patch18_2 ,mem_patch18 -0x315e 009324 add regc ,offset_24g_datalen ,contw -0x315f 009325 call g24_mem_set0 -0x3160 009327 setarg offset_24g_ackpayload_enable -0x3161 009328 call g24_set_rega_ifetch_1byte -0x3162 009330 rtn blank -0x3163 009331 setarg 0x06 -0x3164 009332 add regc ,offset_24g_datalen ,contw -0x3165 009333 istore 1 ,contw -0x3166 009335 arg 0x06 ,loopcnt -0x3167 009336 setarg offset_24g_bind_payload -0x3168 009337 iadd regc ,contr -0x3169 009339 add regc ,offset_24g_txbuf ,contw -0x316a 009341 branch memcpy -: 009344 g24_receive_packet_start: -0x316b 009345 call g24_receive_transmit_ack -0x316c 009346 nbranch g24_rx_interrupt_clear ,user3 -0x316d 009347 branch g24_receive_packet_parse -: 009349 g24_receive_transmit_ack: -0x316e 009350 call g24_rx_interrupt_clear -0x316f 009351 call g24_receive_packet -0x3170 009352 nrtn user3 -0x3171 009353 branch g24_transmit_ack -: 009355 g24_receive_packet_parse: -0x3172 009356 bpatch patch18_3 ,mem_patch18 -0x3173 009357 call g24_receive_packet_parse_pid_crc -0x3174 009358 nbranch g24_rx_interrupt_clear ,user -0x3175 009359 add regc ,offset_24g_rxdata_length ,rega -0x3176 009360 ifetch 1 ,rega -0x3177 009362 branch g24_rx_interrupt_clear ,blank -0x3178 009363 increase 2 ,pdata -0x3179 009364 iforce loopcnt -0x317a 009365 add regc ,offset_24g_rxbuf ,contr -0x317b 009367 setarg offset_24g_rxdata_temp -0x317c 009368 iadd regc ,contw -0x317d 009370 call memcpy -0x317e 009371 call g24_set0_mem_mode_switch -0x317f 009373 call g24_fetch_mem_pair_mode -0x3180 009375 call g24_enable_nodata_timer ,blank -0x3181 009376 setarg offset_24g_rxdata_temp_add2 -0x3182 009377 call g24_set_rega_ifetch_1byte -0x3183 009379 beq 0x01 ,g24_data_type1 -0x3184 009380 beq 0x02 ,g24_data_type2 -0x3185 009381 beq 0x03 ,g24_data_type3 -0x3186 009382 beq 0xff ,g24_data_attemp -0x3187 009383 branch g24_rx_interrupt_clear -: 009385 g24_receive_packet_parse_pid_crc: -0x3188 009386 call g24_head_ptr2regc -0x3189 009387 call disable_user -0x318a 009388 add regc ,offset_24g_sta_pid ,rega -0x318b 009389 ifetch 1 ,rega -0x318c 009391 add regc ,offset_24g_last_pid ,rega -0x318d 009392 ifetcht 1 ,rega -0x318e 009394 isub temp ,null -0x318f 009395 ncall enable_user ,zero -0x3190 009396 add regc ,offset_24g_sta_pid ,rega -0x3191 009397 ifetch 1 ,rega -0x3192 009399 add regc ,offset_24g_last_pid ,contw -0x3193 009400 istore 1 ,contw -0x3194 009402 add regc ,offset_24g_sta_crc ,rega -0x3195 009403 ifetch 3 ,rega -0x3196 009405 add regc ,offset_24g_last_crc ,rega -0x3197 009406 ifetcht 3 ,rega -0x3198 009408 isub temp ,null -0x3199 009409 ncall enable_user ,zero -0x319a 009410 add regc ,offset_24g_sta_crc ,rega -0x319b 009411 ifetch 3 ,rega -0x319c 009413 add regc ,offset_24g_last_crc ,contw -0x319d 009415 branch g24_contw_istore_3byte -: 009417 g24_data_type1: -0x319e 009418 call g24_ch_timer_reinit -0x319f 009419 call g24_fetch_mem_abort_pac -0x31a0 009420 store 1 ,mem_temp -0x31a1 009422 call g24_fetcht_mem_rxdata_temp -0x31a2 009423 fetch 1 ,mem_temp -0x31a3 009425 isolate1 bit_abort ,temp -0x31a4 009426 setflag true ,0 ,pdata -0x31a5 009427 add regc ,offset_24g_abort_pac ,contw -0x31a6 009428 istore 1 ,contw -0x31a7 009430 beq 1 ,g24_data_attemp_mouse -0x31a8 009431 call g24_fetch_mem_hop_pac -0x31a9 009433 call g24_fetcht_mem_rxdata_temp -0x31aa 009435 isolate1 bit_hop ,temp -0x31ab 009436 setflag true ,0 ,pdata -0x31ac 009437 call g24_store_mem_hop_pac -0x31ad 009439 add regc ,offset_24g_cb_rxdata_type1 ,rega -0x31ae 009440 ifetch 2 ,rega -0x31af 009442 branch callback_func -: 009444 dongle_rxdata_type1: -0x31b0 009445 setarg ms_report_id -0x31b1 009446 store 1 ,mem_usb_mouse_data -0x31b2 009447 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b3 009449 istore 7 ,contw -0x31b4 009450 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b5 009452 ncall g24_ms_enable_blank_data_forcibly ,blank -0x31b6 009453 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b7 009455 call g24_ms_disable_blank_data_forcibly ,blank -: 009456 g24_data_type1_usbtx_enable: -0x31b8 009457 jam usb_ep2_ms ,mem_usb_ep2_data -: 009458 g24_data_type1_usbtx_enable_ep2: -0x31b9 009459 fetch 1 ,mem_usb_tx_enable -0x31ba 009460 set1 2 ,pdata -0x31bb 009461 store 1 ,mem_usb_tx_enable -0x31bc 009462 rtn -: 009464 g24_ms_enable_blank_data_forcibly: -0x31bd 009465 setarg 1 -0x31be 009466 call g24_store_mem_ms_blank_data_enable -: 009468 g24_ms_enable_blank_data_timer: -0x31bf 009469 setarg timer_ms_blank_delay -0x31c0 009470 arg timer_ms_blank ,queue -0x31c1 009471 branch timer_init -: 009472 g24_ms_disable_blank_data_forcibly: -0x31c2 009473 call g24_set0_mem_ms_blank_data_enable -: 009475 g24_ms_disable_blank_data_timer: -0x31c3 009476 setarg 0 -0x31c4 009477 arg timer_ms_blank ,queue -0x31c5 009478 branch timer_init -: 009480 g24_data_type2: -0x31c6 009481 call g24_fetcht_mem_rxdata_temp -0x31c7 009483 isolate1 bit_abort ,temp -0x31c8 009484 branch g24_data_attemp_kbd ,true -0x31c9 009485 arg mem_usb_kb_data ,contw -0x31ca 009486 call g24_data_type2_reverse_data -0x31cb 009487 fetch 8 ,mem_usb_kb_data -0x31cc 009488 ncall g24_kb_enable_blank_data_forcibly ,blank -0x31cd 009489 fetch 8 ,mem_usb_kb_data -0x31ce 009490 call g24_kb_disable_blank_data_forcibly ,blank -0x31cf 009491 call g24_head_ptr2regc -0x31d0 009492 fetch 8 ,mem_usb_kb_data -0x31d1 009493 arg offset_24g_kb_data_sta_data ,rega -0x31d2 009494 call g24_set_contw_with_temp -0x31d3 009495 istore 8 ,contw -0x31d4 009497 setarg offset_24g_kb_data_last_data -0x31d5 009498 iadd regc ,rega -0x31d6 009499 ifetcht 8 ,rega -0x31d7 009501 isub temp ,null -0x31d8 009502 ncall g24_kb_data_dispose ,zero -0x31d9 009503 setarg offset_24g_kb_data_sta_data -0x31da 009504 iadd regc ,rega -0x31db 009505 ifetch 8 ,rega -0x31dc 009507 arg offset_24g_kb_data_last_data ,rega -0x31dd 009508 call g24_set_contw_with_temp -0x31de 009509 istore 8 ,contw -0x31df 009511 branch g24_rx_interrupt_clear -: 009513 g24_data_type2_reverse_data: -0x31e0 009514 setarg offset_24g_rxdata_temp_add2 -0x31e1 009515 iadd regc ,contr -0x31e2 009517 arg 9 ,loopcnt -0x31e3 009518 branch reverse_byte -: 009520 g24_kb_enable_blank_data_forcibly: -0x31e4 009521 setarg 1 -0x31e5 009522 call g24_store_mem_kb_blank_data_enable -: 009524 g24_kb_enable_blank_data_timer: -0x31e6 009525 setarg timer_kb_blank_delay -0x31e7 009526 arg timer_kb_blank ,queue -0x31e8 009527 branch timer_init -: 009529 g24_kb_disable_blank_data_forcibly: -0x31e9 009530 call g24_set0_mem_kb_blank_data_enable -: 009532 g24_kb_disable_blank_data_timer: -0x31ea 009533 setarg 0 -0x31eb 009534 arg timer_kb_blank ,queue -0x31ec 009535 branch timer_init -: 009537 g24_kb_data_dispose: -: 009538 g24_kb_data_into_ep1_fifo: -0x31ed 009539 jam usb_ep1_kb ,mem_usb_ep1_data -0x31ee 009540 fetch 1 ,mem_usb_tx_enable -0x31ef 009541 set1 1 ,pdata -0x31f0 009542 store 1 ,mem_usb_tx_enable -0x31f1 009543 rtn -: 009545 g24_data_type3: -0x31f2 009546 arg mem_usb_kb_multikey ,contw -0x31f3 009547 call g24_data_type2_reverse_data -0x31f4 009548 fetch 2 ,mem_usb_kb_multikey + 1 -0x31f5 009549 ncall g24_kb_mul_enable_blank_data_forcibly ,blank -0x31f6 009550 fetch 2 ,mem_usb_kb_multikey + 1 -0x31f7 009551 call g24_kb_mul_disable_blank_data_forcibly ,blank -0x31f8 009552 call g24_head_ptr2regc -0x31f9 009553 fetch 3 ,mem_usb_kb_multikey -0x31fa 009554 arg offset_24g_kb_multikey_sta_data ,rega -0x31fb 009555 call g24_set_contw_with_temp_store_3byte -0x31fc 009557 setarg offset_24g_kb_multikey_last_data -0x31fd 009558 iadd regc ,rega -0x31fe 009559 ifetcht 3 ,rega -0x31ff 009561 isub temp ,null -0x3200 009562 ncall g24_kb_mul_data_into_ep2_fifo ,zero -0x3201 009563 setarg offset_24g_kb_multikey_sta_data -0x3202 009564 iadd regc ,rega -0x3203 009565 ifetch 3 ,rega -0x3204 009567 arg offset_24g_kb_multikey_last_data ,rega -0x3205 009568 call g24_set_contw_with_temp_store_3byte -0x3206 009570 branch g24_rx_interrupt_clear -: 009572 g24_kb_mul_data_into_ep2_fifo: -0x3207 009573 jam usb_ep2_multikey ,mem_usb_ep2_data -0x3208 009574 branch g24_data_type1_usbtx_enable_ep2 -: 009576 g24_kb_mul_enable_blank_data_forcibly: -0x3209 009577 setarg 1 -0x320a 009578 call g24_store_mem_kb_mul_blank_data_enable -: 009580 g24_kb_mul_enable_blank_data_timer: -0x320b 009581 setarg timer_kb_mul_blank_delay -0x320c 009582 arg timer_kb_mul_blank ,queue -0x320d 009583 branch timer_init -: 009585 g24_kb_mul_disable_blank_data_forcibly: -0x320e 009586 call g24_set0_mem_kb_mul_blank_data_enable -: 009588 g24_kb_mul_disable_blank_data_timer: -0x320f 009589 setarg 0 -0x3210 009590 arg timer_kb_mul_blank ,queue -0x3211 009591 branch timer_init -: 009593 g24_data_attemp: -0x3212 009594 call g24_fetch_mem_rxdata_temp_add3_1byte -0x3213 009596 beq datatype_mouse ,g24_data_attemp_mouse -0x3214 009597 beq datatype_keyboard ,g24_data_attemp_kbd -0x3215 009598 rtn -: 009599 g24_data_attemp_mouse: -0x3216 009600 setarg offset_24g_rxdata_temp_add4 -0x3217 009601 call g24_set_rega_ifetch_4byte -0x3218 009602 arg offset_24g_mouse_addr ,rega -0x3219 009603 call g24_set_contw_with_temp -0x321a 009606 branch g24_contw_istore_4byte -: 009608 g24_data_attemp_kbd: -0x321b 009609 setarg offset_24g_rxdata_temp_add4 -0x321c 009610 call g24_set_rega_ifetch_4byte -0x321d 009611 arg offset_24g_kb_addr ,rega -0x321e 009612 call g24_set_contw_with_temp -0x321f 009615 branch g24_contw_istore_4byte -: 009617 g24_store_mem_24g_mode: -0x3220 009618 call g24_head_ptr2regc -0x3221 009619 add regc ,offset_24g_mode ,contw -0x3222 009620 istore 1 ,contw -0x3223 009621 rtn -: 009623 g24_fetch_mem_device_addr: -0x3224 009624 call g24_head_ptr2regc -0x3225 009625 add regc ,offset_24g_device_addr ,rega -0x3226 009626 branch g24_rega_ifetch_4byte -: 009627 g24_store_mem_device_addr: -0x3227 009628 call g24_head_ptr2regc -0x3228 009629 add regc ,offset_24g_device_addr ,contw -0x3229 009630 branch g24_contw_istore_4byte -: 009632 g24_fetch_mem_addr: -0x322a 009633 add regc ,offset_24g_addr ,rega -0x322b 009634 branch g24_rega_ifetch_4byte -: 009635 g24_store_mem_addr: -0x322c 009636 add regc ,offset_24g_addr ,contw -: 009637 g24_contw_istore_4byte: -0x322d 009638 istore 4 ,contw -0x322e 009639 rtn -: 009641 g24_store_mem_ch: -0x322f 009642 add regc ,offset_24g_ch ,contw -0x3230 009643 branch g24_contw_istore_1byte -: 009645 g24_set0_mem_pid: -0x3231 009646 setarg 0 -: 009647 g24_store_mem_pid: -0x3232 009648 call g24_head_ptr2regc -0x3233 009649 add regc ,offset_24g_pid ,contw -0x3234 009650 branch g24_contw_istore_1byte -: 009652 g24_store_mem_txpayload: -0x3235 009653 add regc ,offset_24g_txpayload ,contw -0x3236 009654 branch g24_contw_istore_1byte -: 009656 g24_set4_mem_max_retry: -0x3237 009657 setarg 4 -: 009658 g24_store_mem_max_retry: -0x3238 009659 add regc ,offset_24g_max_retry ,contw -0x3239 009660 branch g24_contw_istore_1byte -: 009662 g24_fetch_mem_data_type: -0x323a 009663 add regc ,offset_24g_data_type ,rega -0x323b 009664 branch g24_rega_ifetch_1byte -: 009665 g24_store_mem_data_type: -0x323c 009666 add regc ,offset_24g_data_type ,contw -0x323d 009667 branch g24_contw_istore_1byte -: 009669 g24_set2_mem_sync_cnt: -0x323e 009670 setarg 2 -: 009671 g24_store_mem_sync_cnt: -0x323f 009672 add regc ,offset_24g_sync_cnt ,contw -0x3240 009673 branch g24_contw_istore_1byte -: 009675 g24_set1_mem_rf_last_sta: -0x3241 009676 setarg 1 -: 009677 g24_store_mem_rf_last_sta: -0x3242 009678 call g24_head_ptr2regc -0x3243 009679 add regc ,offset_24g_rf_last_sta ,contw -0x3244 009680 branch g24_contw_istore_1byte -: 009682 g24_fetch_mem_hop_pac: -0x3245 009683 call g24_head_ptr2regc -0x3246 009684 add regc ,offset_24g_hop_pac ,rega -0x3247 009685 branch g24_rega_ifetch_1byte -: 009686 g24_set1_mem_hop_pac: -0x3248 009687 setarg 1 -: 009688 g24_store_mem_hop_pac: -0x3249 009689 call g24_head_ptr2regc -0x324a 009690 add regc ,offset_24g_hop_pac ,contw -0x324b 009691 branch g24_contw_istore_1byte -: 009693 g24_fetch_mem_abort_pac: -0x324c 009694 call g24_head_ptr2regc -0x324d 009695 add regc ,offset_24g_abort_pac ,rega -0x324e 009696 branch g24_rega_ifetch_1byte -: 009697 g24_set1_mem_abort_pac: -0x324f 009698 setarg 1 -: 009699 g24_store_mem_abort_pac: -0x3250 009700 call g24_head_ptr2regc -0x3251 009701 add regc ,offset_24g_abort_pac ,contw -0x3252 009702 branch g24_contw_istore_1byte -: 009704 g24_fetch_mem_pairing_sm: -0x3253 009705 call g24_head_ptr2regc -0x3254 009706 add regc ,offset_24g_pairing_sm ,rega -0x3255 009707 branch g24_rega_ifetch_1byte -: 009708 g24_store_mem_pairing_sm: -0x3256 009709 add regc ,offset_24g_pairing_sm ,contw -0x3257 009710 branch g24_contw_istore_1byte -: 009712 g24_fetch_mem_rf_hop_ch: -0x3258 009713 add regc ,offset_24g_rf_hop_ch ,rega -0x3259 009714 branch g24_rega_ifetch_1byte -: 009715 g24_set0_mem_rf_hop_ch: -0x325a 009716 setarg 0 -: 009717 g24_store_mem_rf_hop_ch: -0x325b 009718 add regc ,offset_24g_rf_hop_ch ,contw -0x325c 009719 branch g24_contw_istore_1byte -: 009721 g24_fetch_mem_rf_work_stage: -0x325d 009722 add regc ,offset_24g_rf_work_stage ,rega -0x325e 009723 branch g24_rega_ifetch_1byte -: 009725 g24_fetch_mem_rxbuf_add1: -0x325f 009726 add regc ,offset_24g_rxbuf_add1 ,rega -0x3260 009727 branch g24_rega_ifetch_1byte -: 009729 g24_fetch_mem_check_dongle_times: -0x3261 009730 add regc ,offset_24g_check_dongle_times ,rega -0x3262 009731 branch g24_rega_ifetch_1byte -: 009732 g24_set0_mem_check_dongle_times: -0x3263 009733 setarg 0 -: 009734 g24_store_mem_check_dongle_times: -0x3264 009735 call g24_head_ptr2regc -0x3265 009736 add regc ,offset_24g_check_dongle_times ,contw -0x3266 009737 branch g24_contw_istore_1byte -: 009739 g24_store_mem_tx_power: -0x3267 009740 call g24_head_ptr2regc -0x3268 009741 add regc ,offset_tx_power_temp ,rega -0x3269 009742 ifetch 1 ,rega -: 009743 g24_store_mem_txpower: -0x326a 009744 store 1 ,mem_tx_power -0x326b 009745 rtn -: 009747 g24_store_mem_tx_power_temp: -0x326c 009748 call g24_head_ptr2regc -0x326d 009749 fetch 1 ,mem_tx_power -0x326e 009751 add regc ,offset_tx_power_temp ,contw -0x326f 009752 branch g24_contw_istore_1byte -: 009754 g24_fetch_mem_power_ctrl_pac: -0x3270 009755 add regc ,offset_power_ctrl_packet_cnt ,rega -0x3271 009756 branch g24_rega_ifetch_1byte -: 009758 g24_store_mem_power_ctrl_level: -0x3272 009759 add regc ,offset_power_ctrl_level ,contw -0x3273 009760 branch g24_contw_istore_1byte -: 009762 g24_fetcht_mem_rxdata_temp: -0x3274 009763 setarg offset_24g_rxdata_temp -: 009764 g24_set_rega_ifetcht_1byte: -0x3275 009765 iadd regc ,rega -0x3276 009766 ifetcht 1 ,rega -0x3277 009767 rtn -: 009769 g24_fetch_mem_rf_laststa: -0x3278 009770 setarg offset_24g_rf_laststa -0x3279 009771 branch g24_set_rega_ifetch_1byte -: 009772 g24_set0_mem_rf_laststa: -0x327a 009773 setarg 0 -: 009774 g24_store_mem_rf_laststa: -0x327b 009775 arg offset_24g_rf_laststa ,rega -0x327c 009776 branch g24_set_contw_with_regb_store_1byte -: 009778 g24_fetch_mem_rx_addr: -0x327d 009779 setarg offset_24g_rx_addr -: 009780 g24_set_rega_ifetch_4byte: -0x327e 009781 call g24_set_rega -: 009782 g24_rega_ifetch_4byte: -0x327f 009783 ifetch 4 ,rega -0x3280 009784 rtn -: 009786 g24_fetch_mem_time_slice: -0x3281 009787 setarg offset_24g_time_slice -0x3282 009788 branch g24_set_rega_ifetch_1byte -: 009789 g24_set0_mem_time_slice: -0x3283 009790 setarg 0 -: 009791 g24_store_mem_time_slice: -0x3284 009792 arg offset_24g_time_slice ,rega -0x3285 009793 branch g24_set_contw_with_regb_store_1byte -: 009795 g24_set0_mem_mode_switch: -0x3286 009796 setarg 0 -: 009797 g24_store_mem_mode_switch: -0x3287 009798 arg offset_24g_mode_switch ,rega -0x3288 009799 branch g24_set_contw_with_regb_store_1byte -: 009801 g24_store_mem_bind_payload: -0x3289 009802 arg offset_24g_bind_payload ,rega -0x328a 009803 branch g24_set_contw_with_regb_store_1byte -: 009805 g24_fetch_mem_bind_device_status: -0x328b 009806 setarg offset_dongle_bind_device_status -0x328c 009807 branch g24_set_rega_ifetch_1byte -: 009808 g24_store_mem_bind_device_status: -0x328d 009809 arg offset_dongle_bind_device_status ,rega -0x328e 009810 branch g24_set_contw_with_regb_store_1byte -: 009812 g24_fetch_mem_dongle_work_mode: -0x328f 009813 setarg offset_dongle_work_mode -0x3290 009814 branch g24_set_rega_ifetch_1byte -: 009815 g24_set_work_mem_dongle_work_mode: -0x3291 009816 setarg dongle_work -: 009817 g24_store_mem_dongle_work_mode: -0x3292 009818 arg offset_dongle_work_mode ,rega -0x3293 009819 branch g24_set_contw_with_regb_store_1byte -: 009821 g24_fetch_mem_dongle_mode_init: -0x3294 009822 setarg offset_dongle_mode_init -0x3295 009823 branch g24_set_rega_ifetch_1byte -: 009824 g24_set0_mem_dongle_mode_init: -0x3296 009825 setarg clear_init -: 009826 g24_store_mem_dongle_mode_init: -0x3297 009827 arg offset_dongle_mode_init ,rega -0x3298 009828 branch g24_set_contw_with_regb_store_1byte -: 009830 g24_set0_mem_ackpayload_enable: -0x3299 009831 setarg 0 -: 009832 g24_store_mem_ackpayload_enable: -0x329a 009833 arg offset_24g_ackpayload_enable ,rega -0x329b 009834 branch g24_set_contw_with_regb_store_1byte -: 009835 g24_set1_mem_ackpayload_enable: -0x329c 009836 setarg 1 -0x329d 009837 branch g24_store_mem_ackpayload_enable -: 009839 g24_fetch_mem_rxdata_temp_add3_7byte: -0x329e 009840 setarg offset_24g_rxdata_temp_add3 -0x329f 009841 call g24_set_rega -0x32a0 009842 ifetch 7 ,rega -0x32a1 009843 rtn -: 009845 g24_fetch_mem_nodata_timer_enable: -0x32a2 009846 setarg offset_24g_nodata_timer_enable -0x32a3 009847 branch g24_set_rega_ifetch_1byte -: 009848 g24_set0_mem_nodata_timer_enable: -0x32a4 009849 setarg 0 -: 009850 g24_store_mem_nodata_timer_enable: -0x32a5 009851 arg offset_24g_nodata_timer_enable ,rega -0x32a6 009852 branch g24_set_contw_with_regb_store_1byte -: 009854 g24_set0_mem_ms_blank_data_enable: -0x32a7 009855 setarg 0 -: 009856 g24_store_mem_ms_blank_data_enable: -0x32a8 009857 arg offset_24g_ms_blank_data_enable ,rega -0x32a9 009858 branch g24_set_contw_with_regb_store_1byte -: 009860 g24_set0_mem_kb_blank_data_enable: -0x32aa 009861 setarg 0 -: 009862 g24_store_mem_kb_blank_data_enable: -0x32ab 009863 arg offset_24g_kb_blank_data_enable ,rega -0x32ac 009864 branch g24_set_contw_with_regb_store_1byte -: 009866 g24_set0_mem_kb_mul_blank_data_enable: -0x32ad 009867 setarg 0 -: 009868 g24_store_mem_kb_mul_blank_data_enable: -0x32ae 009869 arg offset_24g_kb_mul_blank_data_enable ,rega -0x32af 009870 branch g24_set_contw_with_regb_store_1byte -: 009872 g24_store_mem_power_ctrl_threshold_up: -0x32b0 009873 arg offset_power_ctrl_threshold_up ,rega -0x32b1 009874 branch g24_set_contw_with_regb_store_1byte -: 009876 g24_store_mem_power_ctrl_threshold_down: -0x32b2 009877 arg offset_power_ctrl_threshold_down ,rega -: 009878 g24_set_contw_with_regb_store_1byte: -0x32b3 009879 call g24_set_contw_with_regb -: 009880 g24_contw_istore_1byte: -0x32b4 009881 istore 1 ,contw -0x32b5 009882 rtn -: 009884 g24_fetch_mem_pair_mode: -0x32b6 009885 setarg offset_24g_pair_mode -0x32b7 009886 branch g24_set_rega_ifetch_1byte -: 009888 g24_store_mem_pair_mode: -0x32b8 009889 arg offset_24g_pair_mode ,rega -0x32b9 009890 branch g24_set_contw_with_regb_store_1byte -: 009892 g24_store_mem_pair_txpower: -0x32ba 009893 setarg offset_24g_pair_txpower -0x32bb 009894 call g24_set_rega_ifetch_1byte -0x32bc 009895 branch g24_store_mem_txpower -: 009897 g24_fetch_mem_rxdata_temp_add3_1byte: -0x32bd 009898 setarg offset_24g_rxdata_temp_add3 -0x32be 009899 branch g24_set_rega_ifetch_1byte -: 009901 g24_set_contw_with_temp: -0x32bf 009902 copy pdata ,temp -0x32c0 009903 copy rega ,pdata -0x32c1 009904 iadd regc ,contw -0x32c2 009905 copy temp ,pdata -0x32c3 009906 rtn -: 009908 g24_set_contw_with_temp_store_3byte: -0x32c4 009909 call g24_set_contw_with_temp -: 009910 g24_contw_istore_3byte: -0x32c5 009911 istore 3 ,contw -0x32c6 009912 rtn -: 009914 g24_set_contw_with_regb: -0x32c7 009915 call g24_head_ptr2regc -: 009916 g24_set_contw_with_regb2: -0x32c8 009917 copy pdata ,regb -0x32c9 009918 copy rega ,pdata -0x32ca 009919 iadd regc ,contw -0x32cb 009920 copy regb ,pdata -0x32cc 009921 rtn -: 009923 g24_set_rega: -0x32cd 009924 call g24_head_ptr2regc -0x32ce 009925 iadd regc ,rega -0x32cf 009926 rtn -: 009928 g24_set_rega_ifetch_1byte: -0x32d0 009929 call g24_set_rega -: 009930 g24_rega_ifetch_1byte: -0x32d1 009931 ifetch 1 ,rega -0x32d2 009932 rtn -: 009934 g24_set_rega_ifetcht_4byte: -0x32d3 009935 call g24_set_rega -0x32d4 009936 ifetcht 4 ,rega -0x32d5 009937 rtn -: 009939 g24_mem_set0: -0x32d6 009940 setarg 0 -0x32d7 009941 branch g24_contw_istore_1byte -: 009945 app_init: -0x32d8 009946 bpatch patch18_4 ,mem_patch18 -0x32d9 009947 fetch 1 ,mem_device_option -0x32da 009948 branch app_init ,blank -0x32db 009950 beq dvc_op_dongle ,dongle_init -0x32dc 009951 beq dvc_op_antilost ,antilost_init -0x32dd 009952 beq dvc_op_shutter ,shutter_init -0x32de 009953 beq dvc_op_module ,module_init -0x32df 009954 beq dvc_op_car ,car_init -0x32e0 009955 beq dvc_op_remote_car ,remote_car_init -0x32e1 009956 bbit1 dvc_op_mouse ,mouse_init -0x32e2 009957 rtn -: 009959 app_lpm_init: -0x32e3 009960 bpatch patch18_5 ,mem_patch18 -0x32e4 009961 jam 0 ,mem_tester_emulate -0x32e5 009962 jam 0 ,mem_debug_config -0x32e6 009963 jam 0 ,mem_lch_code -0x32e7 009964 setarg 0 -0x32e8 009965 store 5 ,mem_sp_state_start -0x32e9 009966 fetch 1 ,mem_device_option -0x32ea 009967 branch app_lpm_init ,blank -0x32eb 009968 beq dvc_op_module ,module_lpm_init -: 009969 app_lpm_init0: -0x32ec 009970 rtn -: 009973 app_process_idle: -0x32ed 009974 call ui_dispatch -0x32ee 009975 call check_51cmd -0x32ef 009976 call app_process_bb_event -0x32f0 009977 fetch 2 ,mem_cb_idle_process -0x32f1 009978 branch callback_func -: 009980 app_process_bt: -0x32f2 009981 fetch 2 ,mem_cb_bt_process -0x32f3 009982 branch callback_func -: 009984 app_process_ble: -0x32f4 009985 fetch 2 ,mem_cb_le_process -0x32f5 009986 branch callback_func -: 009988 app_process_bb_event: -0x32f6 009989 bpatch patch18_6 ,mem_patch18 -0x32f7 009991 arg mem_ipc_fifo_bt2c51 ,rega -0x32f8 009992 call fifo_out -0x32f9 009993 rtn blank -0x32fa 009995 copy pdata ,regc -0x32fb 009996 call app_event_normal_process -0x32fc 009997 branch app_process_bb_event_priority -: 009999 app_discard_event: -0x32fd 010000 arg 0 ,regc -0x32fe 010001 rtn -: 010006 app_event_normal_process: -0x32ff 010007 beq bt_evt_bb_connected ,app_evt_bt_conn -0x3300 010008 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed -0x3301 010009 beq bt_evt_setup_complete ,app_evt_setup_complete -0x3302 010010 beq bt_evt_hid_handshake ,app_evt_hid_handshake -0x3303 010011 beq bt_evt_hid_connected ,app_bb_event_hid_connected -0x3304 010012 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed -0x3305 010013 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn -0x3306 010014 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed -0x3307 010015 beq bt_evt_le_connected ,app_le_event_bb_connected -0x3308 010016 beq bt_evt_le_disconnected ,app_le_event_bb_disconn -0x3309 010017 beq bt_evt_reconn_started ,app_event_reconn_start -0x330a 010018 beq bt_evt_enter_sniff ,app_event_enter_sniff -0x330b 010019 beq bt_evt_exit_sniff ,app_event_exit_sniff -0x330c 010021 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused -0x330d 010022 beq bt_evt_linkkey_generate ,app_event_linkkey_generate -0x330e 010023 beq bt_evt_switch_fail_master ,app_event_switch_fail_master -0x330f 010024 beq bt_evt_switch_success_master ,app_event_switch_success -0x3310 010025 rtn -: 010028 app_evt_bt_conn: -0x3311 010029 fetch 2 ,mem_ui_state_map -0x3312 010030 set1 ui_state_bt_connected ,pdata -0x3313 010031 store 2 ,mem_ui_state_map -0x3314 010032 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3315 010033 set0 app_disc_by_button ,pdata -0x3316 010034 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3317 010035 rtn -: 010037 app_event_switch_success: -0x3318 010038 jam 0 ,mem_switch_fail_master_count -0x3319 010039 rtn -: 010041 app_event_switch_fail_master: -0x331a 010042 fetch 1 ,mem_switch_fail_master_count -0x331b 010043 increase 1 ,pdata -0x331c 010044 store 1 ,mem_switch_fail_master_count -0x331d 010045 sub pdata ,1 ,null -0x331e 010046 branch app_bt_role_switch ,positive -0x331f 010047 jam 0 ,mem_switch_fail_master_count -0x3320 010048 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3321 010049 set1 app_disc_switch_fail ,pdata -0x3322 010050 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3323 010051 branch app_bt_disconnect -: 010053 app_process_bb_event_priority: -0x3324 010054 fetch 2 ,mem_cb_bb_event_process -0x3325 010055 branch callback_func -: 010057 app_check_wake_lock: -0x3326 010058 fetch 2 ,mem_cb_check_wakelock -0x3327 010059 branch callback_func -: 010061 app_will_enter_lpm: -0x3328 010062 fetch 2 ,mem_cb_before_lpm -0x3329 010063 branch callback_func -: 010065 app_event_linkkey_generate: -0x332a 010066 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x332b 010067 set1 app_disc_after_pairing ,pdata -0x332c 010068 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x332d 010069 branch app_bt_store_reconn_info -: 010071 app_event_reconn_start: -0x332e 010072 fetch 2 ,mem_ui_state_map -0x332f 010073 set1 ui_state_bt_reconnect ,pdata -0x3330 010074 store 2 ,mem_ui_state_map -0x3331 010075 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3332 010076 set1 app_disc_after_reconn ,pdata -0x3333 010077 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3334 010078 rtn -: 010080 app_evt_setup_complete: -0x3335 010081 fetch 2 ,mem_ui_state_map -0x3336 010082 set1 ui_state_bt_setup_complete ,pdata -0x3337 010083 store 2 ,mem_ui_state_map -0x3338 010084 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3339 010085 set1 app_disc_after_setup_done ,pdata -0x333a 010086 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x333b 010087 rtn -: 010089 app_evt_hid_handshake: -0x333c 010090 fetch 2 ,mem_ui_state_map -0x333d 010091 set1 ui_state_bt_hid_handshake ,pdata -0x333e 010092 store 2 ,mem_ui_state_map -0x333f 010093 rtn -: 010095 app_event_enter_sniff: -0x3340 010096 fetch 2 ,mem_ui_state_map -0x3341 010097 set1 ui_state_bt_sniff ,pdata -0x3342 010098 store 2 ,mem_ui_state_map -0x3343 010099 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3344 010100 set1 app_disc_after_sniff ,pdata -0x3345 010101 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3346 010102 rtn -: 010104 app_event_exit_sniff: -0x3347 010105 fetch 2 ,mem_ui_state_map -0x3348 010106 set0 ui_state_bt_sniff ,pdata -0x3349 010107 store 2 ,mem_ui_state_map -0x334a 010108 rtn -: 010110 app_le_event_bb_connected: -0x334b 010111 fetch 2 ,mem_ui_state_map -0x334c 010112 set1 ui_state_ble_connected ,pdata -0x334d 010113 store 2 ,mem_ui_state_map -0x334e 010114 rtn -: 010116 app_le_event_bb_disconn: -0x334f 010117 fetch 2 ,mem_ui_state_map -0x3350 010118 set0 ui_state_ble_connected ,pdata -0x3351 010119 store 2 ,mem_ui_state_map -0x3352 010120 branch app_lpm_mult_disable -: 010122 app_bb_event_hid_connected: -0x3353 010123 fetch 2 ,mem_ui_state_map -0x3354 010124 set1 ui_state_bt_hid_conn ,pdata -0x3355 010125 store 2 ,mem_ui_state_map -0x3356 010126 rtn -: 010128 app_evt_button_long_pressed: -0x3357 010129 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3358 010130 set1 app_disc_by_button ,pdata -0x3359 010131 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335a 010132 rtn -: 010134 app_event_ml2cap_conn_refused: -0x335b 010135 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335c 010136 set1 app_disc_l2cap_refused ,pdata -0x335d 010137 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335e 010138 branch app_bt_disconnect -: 010141 app_evt_timer: -0x335f 010142 bpatch patch18_7 ,mem_patch18 -0x3360 010143 store 1 ,mem_app_evt_timer_count -: 010144 app_evt_100ms_loop: -0x3361 010145 fetch 1 ,mem_app_evt_timer_count -0x3362 010146 rtn blank -0x3363 010147 increase -1 ,pdata -0x3364 010148 store 1 ,mem_app_evt_timer_count -0x3365 010149 call ui_button_polling -0x3366 010150 call app_lpm_wake_auto_lock_timer -0x3367 010151 call app_unsniff_delay_timer -0x3368 010152 call app_discovery_timer -0x3369 010153 call flash_write_spi_sm_timer -0x336a 010154 fetch 2 ,mem_cb_event_timer -0x336b 010155 call callback_func -0x336c 010156 branch app_evt_100ms_loop -: 010161 timer_single_step: -0x336d 010162 ifetch 1 ,regc -0x336e 010163 rtn blank -0x336f 010164 pincrease -1 -0x3370 010165 istore 1 ,regc -0x3371 010166 nrtn blank -0x3372 010167 copy regb ,pdata -0x3373 010168 branch callback_func -: 010172 timer_single_step_2b: -0x3374 010173 ifetch 2 ,regc -0x3375 010174 rtn blank -0x3376 010175 pincrease -1 -0x3377 010176 istore 2 ,regc -0x3378 010177 nrtn blank -0x3379 010178 copy regb ,pdata -0x337a 010179 branch callback_func -: 010181 app_power_timer: -0x337b 010182 fetcht 2 ,mem_power_param_ptr -0x337c 010183 add temp ,power_timer_offset ,regc -0x337d 010184 arg app_power_timer_timeout ,regb -0x337e 010185 branch timer_single_step -: 010187 app_power_timer_timeout: -0x337f 010188 call app_got_power_state_common -0x3380 010189 beq power_starting ,app_enter_power_stanby_state -: 010190 app_enter_power_off_state: -0x3381 010191 branch app_enter_hibernate -: 010192 app_enter_power_stanby_state: -0x3382 010193 setarg power_standby -0x3383 010194 istore 1 ,regc -0x3384 010195 add temp ,power_standby_cb_offset ,regb -: 010196 app_power_cb_common: -0x3385 010197 ifetch 2 ,regb -0x3386 010198 branch callback_func -: 010200 app_unsniff_delay_timer: -0x3387 010201 arg mem_unsniff2sniff_timer_count ,regc -0x3388 010202 arg app_unsniff_delay_timeout ,regb -0x3389 010203 branch timer_single_step -: 010205 app_unsniff_delay_timeout: -0x338a 010206 call context_check_idle -0x338b 010207 branch app_bt_enter_sniff ,zero -0x338c 010208 rtn -: 010211 app_discovery_timer: -0x338d 010212 arg mem_discovery_timeout_timer_count ,regc -0x338e 010213 arg app_discovery_timeout ,regb -0x338f 010214 branch timer_single_step_2b -: 010216 app_discovery_timeout: -0x3390 010217 call app_bt_stop_discovery -0x3391 010218 call app_led_off -0x3392 010219 fetch 2 ,mem_cb_discovry_timeout -0x3393 010220 branch callback_func -: 010223 app_bb_event_reconn_failed: -0x3394 010224 call app_disconn_reason_flag_clear -: 010225 app_clear_reconnect_flag: -0x3395 010226 fetch 2 ,mem_ui_state_map -0x3396 010227 set0 ui_state_bt_reconnect ,pdata -0x3397 010228 store 2 ,mem_ui_state_map -0x3398 010229 rtn -: 010231 app_bb_event_bb_disconn: -0x3399 010232 jam 0 ,mem_unsniff2sniff_timer_count -0x339a 010233 fetch 2 ,mem_ui_state_map -0x339b 010234 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn -0x339c 010235 isolate0 ui_state_bt_setup_complete ,pdata -0x339d 010236 call app_discard_event ,true -: 010237 app_bb_event_bb_reconn_disconn: -0x339e 010238 bpatch patch19_0 ,mem_patch19 -0x339f 010239 fetch 2 ,mem_ui_state_map -0x33a0 010240 set0 ui_state_bt_connected ,pdata -0x33a1 010241 set0 ui_state_bt_setup_complete ,pdata -0x33a2 010242 set0 ui_state_bt_hid_conn ,pdata -0x33a3 010243 set0 ui_state_bt_hid_handshake ,pdata -0x33a4 010244 set0 ui_state_bt_reconnect ,pdata -0x33a5 010245 store 2 ,mem_ui_state_map -0x33a6 010246 branch app_lpm_mult_disable -: 010248 app_bb_hibernate: -0x33a7 010249 call app_disconn_reason_clear -0x33a8 010250 branch app_enter_hibernate -: 010253 app_disconn_reason_clear: -0x33a9 010254 setarg 0 -0x33aa 010255 store app_disc_rsn_size ,mem_app_disconn_reason -0x33ab 010256 rtn -: 010257 app_disconn_reason_flag_clear: -0x33ac 010258 setarg 0 -0x33ad 010259 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33ae 010260 rtn -: 010262 app_disconn_reason_collect_bt: -0x33af 010263 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b0 010264 store app_disc_rsn_size ,mem_app_disconn_reason -0x33b1 010265 setarg 0 -0x33b2 010266 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b3 010267 rtn -: 010269 app_disconn_reason_collect_ble: -0x33b4 010270 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b5 010271 set1 app_disc_ble ,pdata -0x33b6 010272 store app_disc_rsn_size ,mem_app_disconn_reason -0x33b7 010273 setarg 0 -0x33b8 010274 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b9 010275 rtn -: 010283 app_check_sniff: -0x33ba 010284 fetch 1 ,mem_ui_state_map -0x33bb 010285 isolate1 ui_state_bt_sniff ,pdata -0x33bc 010286 rtn -: 010294 app_initflag_store: -0x33bd 010295 setarg eeprom_init_flag -: 010296 app_flag_store: -0x33be 010297 store 2 ,mem_timeup -0x33bf 010298 bpatch patch19_1 ,mem_patch19 -0x33c0 010299 arg 2 ,temp -0x33c1 010300 arg mem_timeup ,rega -0x33c2 010301 arg eeprom_module_init_flag ,regb -0x33c3 010302 branch iicd_write_eep_data -: 010305 app_initflag_check: -0x33c4 010306 bpatch patch19_2 ,mem_patch19 -0x33c5 010307 arg 2 ,temp -0x33c6 010308 arg mem_pdatatemp ,rega -0x33c7 010309 arg eeprom_module_init_flag ,regb -0x33c8 010310 call iicd_read_eep_data -0x33c9 010311 fetch 2 ,mem_pdatatemp -0x33ca 010312 arg eeprom_init_flag ,temp -0x33cb 010313 isub temp ,null -0x33cc 010314 rtn -: 010317 app_start_auto_sniff: -0x33cd 010318 fetch 1 ,mem_unsniff2sniff_timer -0x33ce 010319 store 1 ,mem_unsniff2sniff_timer_count -0x33cf 010320 rtn -: 010322 app_get_lpm_wake_lock: -0x33d0 010323 arg wake_lock_app ,queue -0x33d1 010324 branch lpm_get_wake_lock -: 010326 app_put_lpm_wake_lock: -0x33d2 010327 arg wake_lock_app ,queue -0x33d3 010328 branch lpm_put_wake_lock -: 010330 app_lpm_wake_auto_lock: -0x33d4 010331 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer -0x33d5 010332 branch app_get_lpm_wake_lock -: 010334 app_lpm_wake_auto_lock_timer: -0x33d6 010335 arg mem_wake_up_delay_timer ,regc -0x33d7 010336 arg app_put_lpm_wake_lock ,regb -0x33d8 010337 branch timer_single_step -: 010339 app_l2cap_flow_control_enable: -0x33d9 010340 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag -0x33da 010341 rtn -: 010343 app_l2cap_flow_control_disable: -0x33db 010344 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag -0x33dc 010345 rtn -: 010347 app_bt_set_pincode: -0x33dd 010348 jam bt_cmd_set_pin_code ,mem_fifo_temp -0x33de 010349 branch ui_ipc_send_cmd -: 010351 app_bt_role_switch: -0x33df 010352 jam bt_cmd_role_switch ,mem_fifo_temp -0x33e0 010353 branch ui_ipc_send_cmd -: 010355 app_bt_start_reconnect: -0x33e1 010356 bpatch patch19_3 ,mem_patch19 -0x33e2 010357 fetch 1 ,mem_app_connection_options -0x33e3 010358 store 1 ,mem_connection_options -0x33e4 010359 jam app_flag_reconnect ,mem_reconnect_flag -0x33e5 010360 jam bt_cmd_reconnect ,mem_fifo_temp -0x33e6 010361 branch ui_ipc_send_cmd -: 010363 app_bt_reconnect_cancel: -0x33e7 010364 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp -0x33e8 010365 branch ui_ipc_send_cmd -: 010367 app_bt_disconnect: -0x33e9 010368 jam bt_cmd_disconnect ,mem_fifo_temp -0x33ea 010369 branch ui_ipc_send_cmd -: 010371 app_bt_start_discovery_short: -0x33eb 010372 fetch 2 ,mem_discovery_timeout -0x33ec 010373 store 2 ,mem_discovery_timeout_timer_count -: 010374 app_bt_start_discovery_led_blink: -0x33ed 010375 call app_led_start_blink -: 010376 app_bt_start_discovery: -0x33ee 010377 jam bt_cmd_start_discovery ,mem_fifo_temp -0x33ef 010378 branch ui_ipc_send_cmd -: 010380 app_bt_stop_discovery: -0x33f0 010381 setarg 0 -0x33f1 010382 store 2 ,mem_discovery_timeout_timer_count -0x33f2 010383 jam bt_cmd_stop_discovery ,mem_fifo_temp -0x33f3 010384 branch ui_ipc_send_cmd -: 010386 app_ble_start_direct_adv: -0x33f4 010387 jam bt_cmd_start_direct_adv ,mem_fifo_temp -0x33f5 010388 branch ui_ipc_send_cmd -: 010390 app_ble_stop_direct_adv: -0x33f6 010391 jam bt_cmd_stop_direct_adv ,mem_fifo_temp -0x33f7 010392 branch ui_ipc_send_cmd -: 010394 app_ble_stop_adv: -0x33f8 010395 jam bt_cmd_stop_adv ,mem_fifo_temp -0x33f9 010396 branch ui_ipc_send_cmd -: 010398 app_ble_start_adv: -0x33fa 010399 jam bt_cmd_start_adv ,mem_fifo_temp -0x33fb 010400 branch ui_ipc_send_cmd -: 010402 app_ble_start_scan: -0x33fc 010403 jam bt_cmd_le_start_scan ,mem_fifo_temp -0x33fd 010404 branch ui_ipc_send_cmd -: 010406 app_ble_stop_scan: -0x33fe 010407 jam bt_cmd_le_stop_scan ,mem_fifo_temp -0x33ff 010408 branch ui_ipc_send_cmd -: 010410 app_ble_start_conn: -0x3400 010411 jam bt_cmd_le_start_conn ,mem_fifo_temp -0x3401 010412 branch ui_ipc_send_cmd -: 010414 app_ble_disconnect: -0x3402 010415 jam bt_cmd_le_disconnect ,mem_fifo_temp -0x3403 010416 branch ui_ipc_send_cmd -: 010418 app_led_start_blink: -0x3404 010419 jam bt_cmd_led_blink ,mem_fifo_temp -0x3405 010420 branch ui_ipc_send_cmd -: 010422 app_led_on: -0x3406 010423 jam bt_cmd_led_on ,mem_fifo_temp -0x3407 010424 branch ui_ipc_send_cmd -: 010426 app_led_stop_blink: -: 010427 app_led_off: -0x3408 010428 jam bt_cmd_led_off ,mem_fifo_temp -0x3409 010429 branch ui_ipc_send_cmd -: 010431 app_enter_hibernate: -0x340a 010432 jam bt_cmd_enter_hibernate ,mem_fifo_temp -0x340b 010433 branch ui_ipc_send_cmd -: 010435 app_bt_sniff_exit: -0x340c 010436 jam bt_cmd_exit_sniff ,mem_fifo_temp -0x340d 010437 branch ui_ipc_send_cmd -: 010439 app_bt_enter_sniff: -0x340e 010440 jam bt_cmd_enter_sniff ,mem_fifo_temp -0x340f 010441 branch ui_ipc_send_cmd -: 010443 app_ble_store_reconn_info: -0x3410 010444 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp -0x3411 010445 branch ui_ipc_send_cmd -: 010447 app_bt_store_reconn_info: -0x3412 010448 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp -0x3413 010449 branch ui_ipc_send_cmd -: 010451 app_store_reconn_info: -0x3414 010452 jam bt_cmd_store_reconn_info ,mem_fifo_temp -0x3415 010453 branch ui_ipc_send_cmd -: 010455 app_lpm_mult_enable: -0x3416 010456 set1 mark_lpm_mult_enable ,mark -0x3417 010457 rtn -: 010459 app_lpm_mult_disable: -0x3418 010460 set0 mark_lpm_mult_enable ,mark -0x3419 010461 rtn -: 010481 app_button_long_pressed: -0x341a 010482 call app_got_power_state_common -0x341b 010483 beq power_standby ,app_power_shutting_down -: 010484 app_power_starting: -0x341c 010485 setarg power_starting -0x341d 010486 istore 1 ,regc -0x341e 010487 add temp ,power_starting_timeout_offset ,rega -0x341f 010488 add temp ,power_starting_cb_offset ,regb -: 010489 app_power_common: -0x3420 010490 ifetcht 1 ,rega -0x3421 010491 increase 1 ,regc -0x3422 010492 istoret 1 ,regc -0x3423 010493 branch app_power_cb_common -: 010495 app_power_shutting_down: -0x3424 010496 setarg power_off -0x3425 010497 istore 1 ,regc -0x3426 010498 fetch 2 ,mem_ui_state_map -0x3427 010499 bbit0 ui_state_ble_connected ,app_power_off_end -0x3428 010500 call app_ble_disconnect -: 010501 app_power_off_end: -0x3429 010502 fetcht 2 ,mem_power_param_ptr -0x342a 010503 add temp ,power_off_timeout_offset ,rega -0x342b 010504 add temp ,power_off_cb_offset ,regb -0x342c 010505 branch app_power_common -: 010507 app_got_power_state_common: -0x342d 010508 fetcht 2 ,mem_power_param_ptr -0x342e 010509 add temp ,power_state_offset ,regc -0x342f 010510 ifetch 1 ,regc -0x3430 010511 rtn -: 010513 app_event_button_up: -0x3431 010514 call app_got_power_state_common -0x3432 010515 bne power_off ,app_power_release -0x3433 010516 branch app_enter_hibernate -: 010517 app_power_release: -0x3434 010518 add temp ,ui_butten_up_cb_offset ,regb -0x3435 010519 branch app_power_cb_common -: 010521 antilost_init: -0x3436 010522 rtn wake -0x3437 010523 jam 0x00 ,core_gpio_sel1 -0x3438 010524 setarg antilost_le_before_hibernate -0x3439 010525 store 2 ,mem_cb_before_hibernate -0x343a 010526 setarg keyscan_process_lpm_before -0x343b 010527 store 2 ,mem_cb_before_lpm -0x343c 010528 setarg antilost_idle_process -0x343d 010529 store 2 ,mem_cb_idle_process -0x343e 010530 setarg antilost_le_conn_process -0x343f 010531 store 2 ,mem_cb_le_process -0x3440 010532 setarg antilost_bb_event_process -0x3441 010533 store 2 ,mem_cb_bb_event_process -0x3442 010534 setarg antilost_le_bb_event_timer -0x3443 010535 store 2 ,mem_cb_event_timer -0x3444 010536 setarg antilost_le_notification -0x3445 010537 store 2 ,mem_cb_ble_transmit -0x3446 010538 setarg antilost_lpm_lock_process -0x3447 010539 store 2 ,mem_cb_check_wakelock -0x3448 010540 setarg antilost_le_receive_data_process -0x3449 010541 store 2 ,mem_cb_att_write -0x344a 010542 bpatch patch19_4 ,mem_patch19 -0x344b 010543 call antilost_buzzer_pwm_init -0x344c 010544 call keyscan_key_init -0x344d 010545 call antilost_adc_init -0x344e 010546 call ui_led_init_global -0x344f 010547 call ui_button_init -0x3450 010548 setarg antilost_key_up_down -0x3451 010549 store 2 ,mem_cb_antl_key -0x3452 010550 setarg antilost_power_off_cb -0x3453 010551 store 2 ,mem_antl_power_off_cb -0x3454 010552 setarg antilost_power_starting_cb -0x3455 010553 store 2 ,mem_antl_power_starting_cb -0x3456 010554 setarg antilost_power_standby_cb -0x3457 010555 store 2 ,mem_antl_power_standby_cb -0x3458 010556 setarg antilost_led_on_cb -0x3459 010557 store 2 ,mem_antl_led_cb_on -0x345a 010558 setarg antilost_led_off_cb -0x345b 010559 store 2 ,mem_antl_led_cb_off -0x345c 010560 setarg antilost_buzzer_on -0x345d 010561 store 2 ,mem_antl_buzzer_cb_on -0x345e 010562 setarg antilost_buzzer_off -0x345f 010563 store 2 ,mem_antl_buzzer_cb_off -0x3460 010564 fetch 2 ,mem_ui_state_map -0x3461 010565 rtnbit1 ui_state_btn_down -0x3462 010566 branch app_enter_hibernate -: 010568 antilost_le_before_hibernate: -0x3463 010569 call antilost_led_buzzer_stop_blink -0x3464 010570 branch app_enter_hibernate -: 010572 antilost_le_notification: -0x3465 010573 call le_fifo_check_nearly_full -0x3466 010574 nrtn blank -0x3467 010575 arg mem_temp_block5 ,rega -0x3468 010576 call queue_pop -0x3469 010577 nrtn user -0x346a 010578 arg mem_temp_block5 ,contr -0x346b 010579 branch le_send_notify_from_list -: 010581 antilost_power_standby_cb: -0x346c 010582 fetch 2 ,mem_antl_le_sleep_timeout -0x346d 010583 store 2 ,mem_antl_le_sleep_timer -0x346e 010584 jam 1 ,mem_antl_key_scan_enable -0x346f 010585 branch antilost_fast_adv_start -: 010587 antilost_lpm_lock_process: -0x3470 010588 fetch 1 ,mem_antl_key_state -0x3471 010589 beq 1 ,antilost_lpm_ctrl_for_led_buzzer -0x3472 010590 fetch 2 ,mem_ui_state_map -0x3473 010591 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer -0x3474 010592 fetch 1 ,mem_antl_lost_mode -0x3475 010593 beq 1 ,app_get_lpm_wake_lock -0x3476 010594 fetch 1 ,mem_antl_queue_curr_num -0x3477 010595 nbranch app_get_lpm_wake_lock ,blank -0x3478 010596 branch app_put_lpm_wake_lock -: 010598 antilost_lpm_ctrl_for_led_buzzer: -0x3479 010599 fetch 1 ,mem_antl_led_state -0x347a 010600 fetcht 1 ,mem_antl_buzzer_state -0x347b 010601 ior temp ,pdata -0x347c 010602 beq 1 ,app_get_lpm_wake_lock -0x347d 010603 branch app_put_lpm_wake_lock -: 010605 antilost_bb_event_process: -0x347e 010606 copy regc ,pdata -0x347f 010607 beq bt_evt_button_up ,app_event_button_up -0x3480 010608 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x3481 010609 beq bt_evt_le_connected ,antilost_le_process_conn -0x3482 010610 beq bt_evt_le_disconnected ,antilost_le_process_discon -0x3483 010611 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved -0x3484 010612 rtn -: 010613 antilost_le_conn_param_update_rsp_recieved: -0x3485 010614 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x3486 010615 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected -: 010616 antilost_le_conn_param_accepted: -0x3487 010617 fetch 2 ,mem_le_new_connslavelatency -0x3488 010618 branch antilost_master_nonsupport_latency ,blank -: 010619 antilost_le_conn_param_updata_procedure_sucsess: -0x3489 010620 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state -0x348a 010621 jam 60 ,mem_antl_conn_update_timer -0x348b 010622 rtn -: 010624 antilost_le_conn_param_rejected: -0x348c 010625 fetch 2 ,mem_le_latency -0x348d 010626 branch antilost_conn_param_updata_procedure_faild ,blank -: 010627 antilost_conn_param_retransimiting: -0x348e 010628 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state -0x348f 010629 fetcht 2 ,mem_interval_increment -0x3490 010630 fetch 2 ,mem_le_interval_min -0x3491 010631 iadd temp ,pdata -0x3492 010632 store 2 ,mem_le_interval_min -0x3493 010633 copy pdata ,rega -0x3494 010634 fetch 2 ,mem_le_interval_max -0x3495 010635 iadd temp ,pdata -0x3496 010636 store 2 ,mem_le_interval_max -0x3497 010637 iadd rega ,pdata -0x3498 010638 rshift pdata ,temp -0x3499 010639 fetch 2 ,mem_antl_le_unnormal_interval_max -0x349a 010640 idiv temp -0x349b 010641 call wait_div_end -0x349c 010642 quotient pdata -0x349d 010643 store 2 ,mem_le_latency -0x349e 010644 jam 1 ,mem_antl_send_updata_le_param_timer -0x349f 010645 rtn -: 010646 antilost_conn_param_updata_procedure_faild: -0x34a0 010647 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state -0x34a1 010648 rtn -: 010650 antilost_master_nonsupport_latency: -0x34a2 010651 jam 0 ,mem_lpm_mult -0x34a3 010652 jam 0 ,mem_antl_send_updata_le_param_timer -0x34a4 010653 fetch 2 ,mem_le_new_conninterval -0x34a5 010654 fetcht 2 ,mem_antl_le_unnormal_interval_min -0x34a6 010655 isub temp ,null -0x34a7 010656 setflag positive ,0 ,rega -0x34a8 010657 fetch 2 ,mem_antl_le_unnormal_interval_max -0x34a9 010658 fetcht 2 ,mem_le_new_conninterval -0x34aa 010659 isub temp ,pdata -0x34ab 010660 setflag positive ,1 ,rega -0x34ac 010661 compare 0x03 ,rega ,0x03 -0x34ad 010662 rtn true -0x34ae 010663 fetch 8 ,mem_antl_le_unnormal_interval_min -0x34af 010664 store 8 ,mem_le_interval_min -0x34b0 010665 jam 1 ,mem_antl_send_updata_le_param_timer -0x34b1 010666 rtn -: 010669 antilost_le_bb_event_timer: -0x34b2 010671 call app_power_timer -0x34b3 010672 call antilost_double_click_timer -0x34b4 010673 call antilost_le_fast_adv_timer -0x34b5 010674 call antilost_le_sleep_timer -0x34b6 010675 call antilost_app_updata_le_param_timer -0x34b7 010676 call antilost_conn_update_timer -0x34b8 010677 branch antilost_adc_check_timer -: 010680 antilost_double_click_timer: -0x34b9 010681 arg mem_double_click_timer ,regc -0x34ba 010682 arg antilost_double_click_timeout ,regb -0x34bb 010683 branch timer_single_step -: 010684 antilost_double_click_timeout: -0x34bc 010685 jam 0 ,mem_butten_click_cnt -0x34bd 010686 rtn -: 010687 antilost_le_fast_adv_timer: -0x34be 010688 arg mem_antl_fast_adv_timer ,regc -0x34bf 010689 arg antilost_le_fast_adv_timeout ,regb -0x34c0 010690 branch timer_single_step_2b -: 010691 antilost_le_fast_adv_timeout: -0x34c1 010692 arg mem_antl_slow_adv_led_style ,regc -0x34c2 010693 arg mem_antl_slow_adv_lpm_interval ,regb -0x34c3 010694 branch antilost_adv_start_common -: 010697 antilost_conn_update_timer: -0x34c4 010698 arg mem_antl_conn_update_timer ,regc -0x34c5 010699 arg antilost_conn_update_timer_time_out ,regb -0x34c6 010700 branch timer_single_step -: 010702 antilost_conn_update_timer_time_out: -0x34c7 010703 fetch 2 ,mem_le_latency -0x34c8 010704 store 1 ,mem_lpm_mult -0x34c9 010705 rtn -: 010706 antilost_app_updata_le_param_timer: -0x34ca 010707 arg mem_antl_send_updata_le_param_timer ,regc -0x34cb 010708 arg antilost_app_updata_le_param_timeout ,regb -0x34cc 010709 branch timer_single_step -: 010710 antilost_app_updata_le_param_timeout: -0x34cd 010711 fetch 1 ,mem_le_state -0x34ce 010712 compare 0 ,pdata ,0x60 -0x34cf 010713 nbranch antilost_wait_for_updata_param_instant_expire ,true -0x34d0 010714 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state -0x34d1 010715 call app_lpm_mult_enable -0x34d2 010716 branch le_l2cap_tx_update_req -: 010717 antilost_wait_for_updata_param_instant_expire: -0x34d3 010718 jam 1 ,mem_antl_send_updata_le_param_timer -0x34d4 010719 rtn -: 010721 antilost_le_sleep_timer: -0x34d5 010722 arg mem_antl_le_sleep_timer ,regc -0x34d6 010723 arg antilost_le_sleep_timer_timeout ,regb -0x34d7 010724 branch timer_single_step_2b -: 010727 antilost_le_sleep_timer_timeout: -0x34d8 010728 branch app_button_long_pressed -: 010730 antilost_adc_check_timer: -0x34d9 010733 arg mem_adc_timer ,regc -0x34da 010734 arg antilost_adc_check_timer_timeout ,regb -0x34db 010735 branch timer_single_step_2b -: 010736 antilost_adc_check_timer_timeout: -0x34dc 010737 fetch 2 ,mem_adc_timeout -0x34dd 010738 store 2 ,mem_adc_timer -0x34de 010739 branch antilost_battery_process -: 010742 antilost_le_process_conn: -0x34df 010743 fetch 2 ,mem_adc_timeout -0x34e0 010744 store 2 ,mem_adc_timer -0x34e1 010745 setarg 0 -0x34e2 010746 store 2 ,mem_antl_fast_adv_timer -0x34e3 010747 store 2 ,mem_antl_le_sleep_timer -0x34e4 010748 call antilost_alert_off -0x34e5 010749 call antilost_led_buzzer_stop_blink -0x34e6 010750 jam 0 ,mem_lpm_mult -0x34e7 010751 branch app_ble_stop_adv -: 010754 antilost_le_process_discon: -0x34e8 010757 setarg 0 -0x34e9 010758 store 4 ,mem_adc_timer -0x34ea 010759 store 3 ,mem_antl_conn_updata_procedure_state -0x34eb 010760 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x34ec 010762 jam 1 ,mem_alarm_config_notfy_cnt -0x34ed 010763 fetch 2 ,mem_antl_le_sleep_timeout -0x34ee 010764 store 2 ,mem_antl_le_sleep_timer -0x34ef 010765 call queue_init -0x34f0 010766 fetch 1 ,mem_antl_power_state -0x34f1 010767 rtneq power_off -0x34f2 010768 call antilost_fast_adv_start -0x34f3 010769 branch antilost_on_off_alarm_after_disconn -: 010772 antilost_le_conn_process: -0x34f4 010774 branch antilost_key_process -: 010776 antilost_idle_process: -0x34f5 010778 fetch 1 ,mem_antl_power_state -0x34f6 010779 rtnne power_standby -0x34f7 010780 branch antilost_key_process -: 010785 antilost_power_starting_cb: -0x34f8 010786 arg mem_antl_power_starting_buzzer_style ,regc -0x34f9 010787 call antilost_buzzer_configuration -0x34fa 010788 arg mem_antl_power_starting_led_style ,regc -: 010789 antilost_power_common: -0x34fb 010790 branch antilost_led_configuration -: 010792 antilost_power_off_cb: -0x34fc 010793 jam off ,mem_le_adv_enable -0x34fd 010794 arg mem_antl_power_off_buzzer_style ,regc -0x34fe 010795 call antilost_buzzer_configuration -0x34ff 010796 arg mem_antl_power_off_led_style ,regc -0x3500 010797 branch antilost_power_common -: 010799 antilost_le_receive_data_process: -0x3501 010800 fetch 1 ,mem_le_att_opcode -0x3502 010801 beq attop_write_request ,antilost_le_parse_att_write_request -0x3503 010802 rtn -: 010803 antilost_le_parse_att_write_request: -0x3504 010804 fetch 2 ,mem_le_att_handle -0x3505 010806 beq new_spec_write_handle ,antilost_cmd_parse_for_application -0x3506 010807 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time -0x3507 010808 rtn -: 010813 antilost_key_process: -0x3508 010814 fetch 1 ,mem_antl_key_scan_enable -0x3509 010815 rtn blank -0x350a 010816 branch keyscan_key_process -: 010820 antilost_key_up_down: -0x350b 010821 copy rega ,pdata -0x350c 010822 branch antilost_key_is_up ,blank -: 010823 antilost_key_is_down: -0x350d 010824 copy queue ,pdata -0x350e 010825 beq 0 ,antilost_key0_down -0x350f 010826 rtn -: 010827 antilost_key_is_up: -0x3510 010828 copy queue ,pdata -0x3511 010829 beq 0 ,antilost_key0_up -0x3512 010830 rtn -: 010832 antilost_key0_down: -0x3513 010833 jam 1 ,mem_antl_key_state -0x3514 010834 arg mem_antl_key_buzzer_style ,regc -0x3515 010835 call antilost_buzzer_configuration -0x3516 010836 arg mem_antl_key_led_style ,regc -0x3517 010837 call antilost_led_configuration -0x3518 010838 fetch 2 ,mem_ui_state_map -0x3519 010839 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn -0x351a 010840 branch antilost_butten_down_after_conn -: 010842 antilost_key0_up: -0x351b 010843 jam 0 ,mem_antl_key_state -0x351c 010844 branch antilost_double_click_timer_init -: 010848 antilost_double_click_timer_init: -0x351d 010849 fetch 1 ,mem_butten_click_cnt -0x351e 010850 rtnne 1 -0x351f 010851 jam 5 ,mem_double_click_timer -0x3520 010852 rtn -: 010854 antilost_butten_down_after_conn: -0x3521 010855 fetch 1 ,mem_butten_click_cnt -0x3522 010856 pincrease 1 -0x3523 010857 store 1 ,mem_butten_click_cnt -0x3524 010858 beq 1 ,antilost_click_once -0x3525 010859 beq 2 ,antilost_click_twice -0x3526 010860 rtn -: 010861 antilost_click_once: -0x3527 010862 call antilost_alert_off -0x3528 010863 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 -0x3529 010864 arg mem_antl_key0_press ,regc -0x352a 010865 branch antilost_prepare_data_and_send -: 010866 antilost_click_twice: -0x352b 010867 jam 0 ,mem_butten_click_cnt -0x352c 010868 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 -0x352d 010869 arg mem_antl_key0_press ,regc -0x352e 010870 call antilost_prepare_data_and_send -0x352f 010871 fetch 1 ,mem_antl_lost_mode -0x3530 010872 beq 1 ,antilost_alert_on -0x3531 010873 rtn -: 010875 antilost_butten_down_while_disconn: -0x3532 010876 fetch 2 ,mem_antl_le_sleep_timeout -0x3533 010877 store 2 ,mem_antl_le_sleep_timer -0x3534 010878 call antilost_alert_off -0x3535 010879 branch antilost_fast_adv_start -: 010882 antilost_cmd_parse_for_application: -0x3536 010883 bpatch patch19_5 ,mem_patch19 -0x3537 010884 call le_app_receive_data -0x3538 010885 ifetch 1 ,rega -0x3539 010886 beq opcode3_antl_start_alram ,antilost_on_of_alram -0x353a 010887 beq opcode7_antl_config_alram ,antilost_configuration_for_alram -0x353b 010888 rtn -: 010890 antilost_on_of_alram: -0x353c 010891 fetch 1 ,mem_antl_lost_mode -0x353d 010892 beq anti_le_alarm_off ,antilost_alert_on -0x353e 010893 beq anti_le_alarm_on ,antilost_alert_off -0x353f 010894 rtn -: 010896 antilost_configuration_for_alram: -0x3540 010897 ifetch 1 ,regb -0x3541 010898 beq 1 ,antilost_set_start_alarm_after_disconn -0x3542 010899 beq 0 ,antilost_set_no_alarm_after_disconn -0x3543 010900 rtn -: 010907 antilost_prepare_data_and_send: -0x3544 010908 bpatch patch19_6 ,mem_patch19 -0x3545 010909 fetch 1 ,mem_client_characteristic_configuration_descriptor -0x3546 010910 isolate1 notification_enable_bit ,pdata -0x3547 010911 nrtn true -0x3548 010912 add regc ,6 ,contr -0x3549 010913 ifetch 2 ,contr -0x354a 010914 byteswap pdata ,pdata -0x354b 010915 add pdata ,5 ,loopcnt -0x354c 010916 add regc ,3 ,contr -0x354d 010917 call calc_check_sum_start -0x354e 010918 istore 1 ,contr -0x354f 010919 copy regc ,rega -0x3550 010920 branch queue_push -: 010926 antilost_alert_on: -0x3551 010927 fetch 1 ,mem_antl_power_state -0x3552 010928 rtn blank -0x3553 010929 jam 1 ,mem_antl_lost_mode -0x3554 010930 arg mem_antl_alert_buzzer_stlye ,regc -0x3555 010931 call antilost_buzzer_configuration -0x3556 010932 arg mem_antl_alert_led_stlye ,regc -0x3557 010933 call antilost_led_configuration -0x3558 010934 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 -0x3559 010935 jam 1 ,mem_antl_key0_release + 8 -0x355a 010936 arg mem_antl_key0_release ,regc -0x355b 010937 branch antilost_prepare_data_and_send -: 010938 antilost_alert_off: -0x355c 010939 fetch 1 ,mem_antl_lost_mode -0x355d 010940 rtn blank -0x355e 010941 jam 0 ,mem_antl_lost_mode -0x355f 010942 call antilost_led_buzzer_stop_blink -0x3560 010943 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 -0x3561 010944 jam 0 ,mem_antl_key0_release + 8 -0x3562 010945 arg mem_antl_key0_release ,regc -0x3563 010946 branch antilost_prepare_data_and_send -: 010948 antilost_set_start_alarm_after_disconn: -0x3564 010949 jam 1 ,mem_alarm_config -0x3565 010950 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x3566 010951 jam 1 ,mem_antl_key0_release + 8 -0x3567 010952 arg mem_antl_key0_release ,regc -0x3568 010953 branch antilost_prepare_data_and_send -: 010954 antilost_set_no_alarm_after_disconn: -0x3569 010955 jam 0 ,mem_alarm_config -0x356a 010956 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x356b 010957 jam 0 ,mem_antl_key0_release + 8 -0x356c 010958 arg mem_antl_key0_release ,regc -0x356d 010959 branch antilost_prepare_data_and_send -: 010960 antilost_on_off_alarm_after_disconn: -0x356e 010961 fetch 1 ,mem_alarm_config -0x356f 010962 rtn blank -0x3570 010963 branch antilost_alert_on -: 010965 antilost_notify_alarm_config_first_time: -0x3571 010966 ifetch 2 ,rega -0x3572 010967 store 2 ,mem_client_characteristic_configuration_descriptor -0x3573 010968 isolate1 notification_enable_bit ,pdata -0x3574 010969 nrtn true -0x3575 010970 fetch 1 ,mem_alarm_config_notfy_cnt -0x3576 010971 rtn blank -0x3577 010972 jam 0 ,mem_alarm_config_notfy_cnt -0x3578 010973 fetch 8 ,mem_antl_le_interval_min -0x3579 010974 store 8 ,mem_le_interval_min -0x357a 010975 jam 2 ,mem_antl_send_updata_le_param_timer -0x357b 010976 call antilost_battery_process -0x357c 010977 call antilost_battery_calculate_end -0x357d 010978 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x357e 010979 fetch 1 ,mem_alarm_config -0x357f 010980 store 1 ,mem_antl_key0_release + 8 -0x3580 010981 arg mem_antl_key0_release ,regc -0x3581 010982 branch antilost_prepare_data_and_send -: 010986 antilost_buzzer_configuration: -0x3582 010987 arg 1 ,rega -0x3583 010988 branch antilost_configuration_common -: 010989 antilost_led_configuration: -0x3584 010990 arg 0 ,rega -: 010991 antilost_configuration_common: -0x3585 010992 branch antilost_led_buzzer_style_configuration -: 010994 antilost_led_buzzer_stop_blink: -0x3586 010995 arg 0 ,rega -0x3587 010996 call ui_led_blink_stop_global -0x3588 010997 arg 1 ,rega -0x3589 010998 call ui_led_blink_stop_global -0x358a 010999 fetch 1 ,mem_buzzer_pwm_conf -0x358b 011000 branch pwm_disable -: 011002 antilost_led_buzzer_style_configuration: -0x358c 011003 call calc_curr_struct_prt -0x358d 011004 arg 7 ,loopcnt -0x358e 011005 branch ui_led_set_style_global + 2 -: 011009 antilost_fast_adv_start: -0x358f 011010 arg mem_antl_fast_adv_led_style ,regc -0x3590 011011 arg mem_antl_lpm_interval ,regb -: 011012 antilost_adv_start_common: -0x3591 011013 call antilost_adv_interval_lpm_interval_set -0x3592 011014 call antilost_led_configuration -0x3593 011015 fetch 2 ,mem_antl_fast_adv_timeout -0x3594 011016 store 2 ,mem_antl_fast_adv_timer -0x3595 011017 branch app_ble_start_adv -: 011019 antilost_adv_interval_lpm_interval_set: -0x3596 011020 ifetch 2 ,regb -0x3597 011021 store 2 ,mem_lpm_interval -0x3598 011022 ifetch 2 ,contr -0x3599 011023 store 2 ,mem_le_adv_interval -0x359a 011024 rtn -: 011026 antilost_buzzer_pwm_init: -0x359b 011027 arg 0 ,rega -0x359c 011028 call pwm_init -0x359d 011029 fetch 6 ,mem_buzzer_pwm_conf -0x359e 011030 store 6 ,mem_pdatatemp -0x359f 011031 call pwm_out_set -0x35a0 011032 fetch 1 ,mem_buzzer_pwm_conf -0x35a1 011033 branch pwm_disable -: 011035 antilost_led_on_cb: -0x35a2 011036 jam 1 ,mem_antl_led_state -0x35a3 011037 rtn -: 011038 antilost_led_off_cb: -0x35a4 011039 jam 0 ,mem_antl_led_state -0x35a5 011040 rtn -: 011044 antilost_buzzer_off: -0x35a6 011045 jam 0 ,mem_antl_buzzer_state -0x35a7 011046 fetch 1 ,mem_buzzer_pwm_conf -0x35a8 011047 branch pwm_disable -: 011049 antilost_buzzer_on: -0x35a9 011050 jam 1 ,mem_antl_buzzer_state -0x35aa 011051 fetch 6 ,mem_buzzer_pwm_conf -0x35ab 011052 store 6 ,mem_pdatatemp -0x35ac 011053 branch pwm_out_set -: 011057 antilost_adc_init: -0x35ad 011058 jam 0 ,mem_adc_config_flag -0x35ae 011059 branch adc_init_data -: 011061 antilost_battery_process: -0x35af 011062 call adc_set_mode -0x35b0 011063 call vdd_calculate_by_mode -0x35b1 011064 store 2 ,mem_battery_current_voltage -0x35b2 011065 arg mem_battery_calculate_set ,rega -0x35b3 011066 call adc_bat_percent_lowpower_out -0x35b4 011067 store 1 ,mem_voltage_remain_percent -0x35b5 011068 beq 0 ,antilost_low_battery -0x35b6 011069 sub pdata ,0x64 ,null -0x35b7 011070 nbranch antilost_full_battery ,positive -0x35b8 011071 store 1 ,mem_antl_key0_release + 8 -: 011072 antilost_battery_calculate_end: -0x35b9 011073 jam opcode5_batter_information ,mem_antl_key0_release + 5 -0x35ba 011074 arg mem_antl_key0_release ,regc -0x35bb 011075 branch antilost_prepare_data_and_send -: 011076 antilost_full_battery: -0x35bc 011077 jam 100 ,mem_antl_key0_release + 8 -0x35bd 011078 branch antilost_battery_calculate_end -: 011080 antilost_low_battery: -0x35be 011081 branch app_button_long_pressed -: 011085 car_init: -0x35bf 011086 rtn wake -0x35c0 011087 hfetch 1 ,core_gpio_sel1 -0x35c1 011088 and_into 0xf0 ,pdata -0x35c2 011089 hstore 1 ,core_gpio_sel1 -0x35c3 011090 setarg car_le_before_hibernate -0x35c4 011091 store 2 ,mem_cb_before_hibernate -0x35c5 011093 setarg car_le_process_lpm_before -0x35c6 011094 store 2 ,mem_cb_before_lpm -0x35c7 011096 setarg app_enter_hibernate -0x35c8 011097 store 2 ,mem_cb_discovry_timeout -0x35c9 011099 setarg car_scale_process_idle -0x35ca 011100 store 2 ,mem_cb_idle_process -0x35cb 011102 setarg car_scale_process_bb_event -0x35cc 011103 store 2 ,mem_cb_bb_event_process -0x35cd 011105 setarg app_get_lpm_wake_lock -0x35ce 011106 store 2 ,mem_cb_check_wakelock -0x35cf 011108 setarg car_le_receive_data -0x35d0 011109 store 2 ,mem_cb_att_write -0x35d1 011111 setarg car_le_bb_event_timer -0x35d2 011112 store 2 ,mem_cb_event_timer -0x35d3 011114 call g24_head_ptr2regc -0x35d4 011115 setarg car_24g_receive_data -0x35d5 011116 add regc ,offset_24g_cb_rxdata_type1 ,contw -0x35d6 011117 istore 2 ,contw -0x35d7 011119 setarg car_power_off_signal -0x35d8 011120 store 2 ,mem_remote_car_power_off_cb -0x35d9 011122 setarg car_soft_switch_power_on_signal -0x35da 011123 store 2 ,mem_remote_car_power_standby_cb -0x35db 011125 bpatch patch19_7 ,mem_patch19 -0x35dc 011126 call car_init_environment -0x35dd 011127 call queue_init -0x35de 011128 jam 2 ,mem_lpm_mult -0x35df 011129 jam power_on ,mem_car_24g_received_pac -0x35e0 011130 fetch 1 ,mem_car_config_soft_switch_enable -0x35e1 011131 store 1 ,mem_car_hard_soft_switch -0x35e2 011132 beq hard_switch ,car_hard_switch_power_on_signal -0x35e3 011133 fetch 1 ,mem_car_config_soft_switch_gpio -0x35e4 011134 store 1 ,mem_ui_button_gpio -0x35e5 011135 jam off ,mem_le_adv_enable -: 011136 car_soft_switch_power_on_init: -0x35e6 011137 call car_ui_led_init -0x35e7 011138 call ui_button_init -0x35e8 011139 call ui_button_polling -0x35e9 011140 jam power_starting ,mem_car_power_state -0x35ea 011141 fetch 2 ,mem_ui_state_map -0x35eb 011142 rtnbit1 ui_state_btn_down -0x35ec 011143 branch app_enter_hibernate -: 011145 car_power_off_signal: -0x35ed 011146 branch car_ui_led_init -: 011148 car_hard_switch_power_on_signal: -0x35ee 011149 jam power_standby ,mem_car_power_state -: 011150 car_soft_switch_power_on_signal: -0x35ef 011151 jam on ,mem_le_adv_enable -0x35f0 011152 call car_ui_led_init -0x35f1 011153 arg 0 ,rega -0x35f2 011154 call ui_led_blink_start_global -0x35f3 011156 setarg fast_adv_interval_value_car -0x35f4 011157 call shutter_ble_adv_interval_set -: 011158 car_le_modified_name_adv: -0x35f5 011159 arg mem_le_name + 7 ,contw -0x35f6 011160 fetch 1 ,mem_le_lap -: 011161 car_name_loop: -0x35f7 011162 and pdata ,0xF0 ,temp -0x35f8 011163 rshift4 temp ,temp -0x35f9 011164 call car_hex_to_ascii -0x35fa 011165 istoret 1 ,contw -0x35fb 011166 and pdata ,0x0F ,temp -0x35fc 011167 call car_hex_to_ascii -0x35fd 011168 istoret 1 ,contw -0x35fe 011169 call le_modified_name_att_list -0x35ff 011170 fetcht 1 ,mem_le_name_len -0x3600 011171 copy temp ,loopcnt -0x3601 011172 arg mem_le_adv_data + 2 ,contw -0x3602 011173 arg mem_le_name ,contr -0x3603 011174 call memcpy -: 011175 car_le_modified_name_scan: -0x3604 011176 fetcht 1 ,mem_le_name_len -0x3605 011177 copy temp ,loopcnt -0x3606 011178 arg mem_le_scan_data + 2 ,contw -0x3607 011179 arg mem_le_name ,contr -0x3608 011180 branch memcpy -: 011181 car_hex_to_ascii: -0x3609 011182 sub temp ,9 ,null -0x360a 011183 branch car_hex_num ,positive -0x360b 011184 add temp ,55 ,temp -0x360c 011185 rtn -: 011186 car_hex_num: -0x360d 011187 add temp ,48 ,temp -0x360e 011188 rtn -: 011190 car_ui_led_init: -0x360f 011191 fetch 1 ,mem_car_config_blood_led1_gpio -0x3610 011192 bne invalid_pin_num ,car_blood_led_gpio_set -: 011193 car_ui_led_init_1: -0x3611 011194 fetch 1 ,mem_car_config_pairing_led_gpio -0x3612 011195 bne invalid_pin_num ,car_pairing_led_gpio_set -: 011196 car_ui_led_init_2: -0x3613 011197 fetch 1 ,mem_car_config_low_voltage_led_gpio -0x3614 011198 bne invalid_pin_num ,car_low_voltage_led_gpio_set -: 011199 car_ui_led_init_3: -0x3615 011200 fetch 1 ,mem_car_led_num -0x3616 011201 copy pdata ,loopcnt -0x3617 011202 setarg mem_car_led_map -0x3618 011203 copy pdata ,rega -: 011204 car_in_lp1: -0x3619 011205 copy rega ,contr -0x361a 011206 ifetch 1 ,contr -0x361b 011207 copy contr ,rega -0x361c 011208 beq invalid_pin_num ,car_in_lp1_end -0x361d 011209 copy pdata ,temp -0x361e 011210 call gpio_config_output -: 011211 car_in_lp1_end: -0x361f 011212 loop car_in_lp1 -: 011213 car_ui_led_init_end: -0x3620 011214 rtn -: 011215 car_blood_led_gpio_set: -0x3621 011216 fetch 8 ,mem_car_config_blood_led1_gpio -0x3622 011217 store 8 ,mem_car_led_map + 2 -0x3623 011218 branch car_ui_led_init_1 -: 011219 car_pairing_led_gpio_set: -0x3624 011220 store 1 ,mem_car_led_map -0x3625 011221 branch car_ui_led_init_2 -: 011222 car_low_voltage_led_gpio_set: -0x3626 011223 store 1 ,mem_car_led_map + 1 -0x3627 011224 branch car_ui_led_init_3 -: 011227 car_init_environment: -0x3628 011228 arg 0 ,rega -0x3629 011229 call pwm_init -0x362a 011230 call car_ir_rx_init -0x362b 011231 call g24_receive_process_init -0x362c 011232 branch car_init_adc_hvin -: 011234 car_init_adc_hvin: -0x362d 011235 jam 100 ,mem_car_notify_vdd_value_last -0x362e 011236 fetch 1 ,mem_car_config_low_voltage_led_gpio -0x362f 011237 store 1 ,mem_car_style2_struct_led_gpio -0x3630 011238 branch adc_init_data -: 011240 car_le_before_hibernate: -0x3631 011241 call gpio_set_before_lpm_common -0x3632 011242 branch keyscan_process_lpm_before -: 011244 car_le_process_lpm_before: -0x3633 011245 branch keyscan_process_lpm_before -: 011247 car_key_scan_process: -0x3634 011250 branch keyscan_key_process -: 011252 car_scale_process_idle: -0x3635 011253 call car_le_send_packet -0x3636 011254 call car_ir_receive_process -0x3637 011255 call car_g24_status_process -0x3638 011256 branch car_key_scan_process -: 011258 car_g24_status_process: -0x3639 011259 fetch 2 ,mem_ui_state_map -0x363a 011260 rtnbit1 ui_state_ble_connected -0x363b 011261 fetch 1 ,mem_car_24g_received_pac -0x363c 011262 beq work_paired ,car_g24_connected_event -0x363d 011263 rtn -: 011264 car_g24_connected_event: -0x363e 011265 fetch 1 ,mem_car_24g_status -0x363f 011266 rtneq work_paired -0x3640 011267 jam work_paired ,mem_car_24g_status -0x3641 011268 branch car_g24_connected -: 011270 car_le_send_packet: -0x3642 011271 fetch 2 ,mem_ui_state_map -0x3643 011272 rtnbit0 ui_state_ble_connected -0x3644 011273 call le_fifo_check_nearly_full -0x3645 011274 nrtn blank -0x3646 011275 arg mem_car_pop_queue_buff ,rega -0x3647 011276 call queue_pop -0x3648 011277 nrtn user -0x3649 011278 arg mem_car_pop_queue_buff ,contr -0x364a 011279 branch le_send_notify_from_list -: 011281 car_scale_process_bb_event: -0x364b 011282 copy regc ,pdata -0x364c 011283 beq bt_evt_button_up ,app_event_button_up -0x364d 011284 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x364e 011285 beq bt_evt_le_connected ,car_scale_event_le_conn -0x364f 011286 beq bt_evt_le_disconnected ,car_scale_event_le_discon -0x3650 011287 rtn -: 011289 car_scale_event_le_conn: -0x3651 011290 setarg disable_24g -0x3652 011291 call g24_store_mem_24g_mode -0x3653 011292 branch car_scale_process_conn -: 011293 car_g24_connected: -0x3654 011294 fetch 2 ,mem_car_24g_no_data_timeout_count -0x3655 011295 store 2 ,mem_car_24g_no_data_timeout_timer -: 011296 car_scale_process_conn: -0x3656 011297 jam 0x14 ,mem_car_notify_vdd_timer -0x3657 011298 jam 0 ,mem_lpm_mode -0x3658 011299 call app_ble_stop_adv -0x3659 011300 call app_lpm_mult_enable -0x365a 011301 fetch 1 ,mem_car_config_pairing_led_conn_status -0x365b 011302 beq 0x01 ,car_pairing_led_conn_status_setting -: 011303 car_scale_process_conn_next: -0x365c 011304 arg 0 ,rega -0x365d 011305 branch ui_led_on_global -: 011306 car_pairing_led_conn_status_setting: -0x365e 011307 arg 0 ,rega -0x365f 011308 branch ui_led_blink_stop_global -: 011310 car_scale_event_le_discon: -0x3660 011311 setarg rx_24g -0x3661 011312 call g24_store_mem_24g_mode -: 011313 car_g24_disconnect: -0x3662 011314 setarg 0 -0x3663 011315 store 5 ,mem_car_led_control -0x3664 011316 setarg 4 -0x3665 011317 call pwm_disable -0x3666 011318 setarg 5 -0x3667 011319 call pwm_disable -0x3668 011320 setarg 20 -0x3669 011321 call pwm_disable -0x366a 011322 setarg 21 -0x366b 011323 call pwm_disable -0x366c 011324 setarg 22 -0x366d 011325 call pwm_disable -0x366e 011326 setarg 7 -0x366f 011327 call pwm_disable -0x3670 011328 call queue_init -0x3671 011329 jam 10 ,mem_motor1_speed -0x3672 011330 jam 10 ,mem_motor2_speed -0x3673 011331 jam 10 ,mem_motor3_speed -0x3674 011333 jam 2 ,mem_lpm_mult -0x3675 011334 arg 0 ,rega -0x3676 011335 call ui_led_blink_start_global -0x3677 011337 setarg fast_adv_interval_value_car -0x3678 011338 call shutter_ble_adv_interval_set -0x3679 011339 branch app_ble_start_adv -: 011341 car_le_bb_event_timer: -0x367a 011343 call car_moto1_blank_data_timer -0x367b 011344 call car_moto2_blank_data_timer -0x367c 011345 call car_moto3_blank_data_timer -0x367d 011346 call app_power_timer -0x367e 011347 call car_led_control_timer -0x367f 011348 call car_notify_vdd_timer -0x3680 011349 call car_24g_no_data_timeout_timer -0x3681 011350 call car_ir_breakdown_timer -0x3682 011351 branch car_attack_shake_timer -: 011353 car_ir_breakdown_timer: -0x3683 011354 arg mem_car_ir_breakdown_check_timer ,regc -0x3684 011355 arg car_ir_breakdown_timeout ,regb -0x3685 011356 branch timer_single_step -: 011357 car_ir_breakdown_timeout: -0x3686 011358 call car_ir_gpio_get_status -0x3687 011359 nrtn true -0x3688 011360 jam 1 ,mem_car_ir_breakdown_flag -0x3689 011361 rtn -: 011363 car_24g_no_data_timeout_timer: -0x368a 011364 arg mem_car_24g_no_data_timeout_timer ,regc -0x368b 011365 arg car_24g_no_data_timer_timeout ,regb -0x368c 011366 branch timer_single_step_2b -: 011367 car_24g_no_data_timer_timeout: -0x368d 011368 jam work_search ,mem_car_24g_status -0x368e 011369 branch car_g24_disconnect -: 011371 car_attack_shake_timer: -0x368f 011372 arg mem_car_attack_shake_timer ,regc -0x3690 011373 arg car_attack_shake ,regb -0x3691 011374 branch timer_single_step -: 011375 car_attack_shake: -0x3692 011376 fetch 1 ,mem_car_attack_shake_flag -0x3693 011377 branch car_attack_shake_stop ,blank -0x3694 011378 jam 2 ,mem_car_attack_shake_timer -0x3695 011379 jam 0 ,mem_car_attack_shake_flag -0x3696 011380 setarg 0x0a02 -0x3697 011381 store 2 ,mem_le_receive_payload -0x3698 011382 fetch 1 ,mem_car_config_device_select -0x3699 011383 beq device_battle_tank ,car_attack_shake_front_battle_tank -: 011384 car_attack_shake_front_battle_car: -0x369a 011385 branch car_motor_control -: 011386 car_attack_shake_front_battle_tank: -0x369b 011387 setarg 0x0a02 -0x369c 011388 store 2 ,mem_le_receive_payload + 2 -0x369d 011389 branch car_motor_control -: 011390 car_attack_shake_stop: -0x369e 011391 setarg 0 -0x369f 011392 store 4 ,mem_le_receive_payload -0x36a0 011393 branch car_motor_control -: 011395 car_notify_vdd_timer: -0x36a1 011396 fetch 1 ,mem_car_config_bat_notify_enable -0x36a2 011397 rtn blank -0x36a3 011398 fetch 2 ,mem_ui_state_map -0x36a4 011399 bbit0 ui_state_ble_connected ,car_low_bat_led_off -0x36a5 011400 arg mem_car_notify_vdd_timer ,regc -0x36a6 011401 arg car_notify_vdd ,regb -0x36a7 011402 branch timer_single_step -: 011403 car_notify_vdd: -0x36a8 011404 fetch 1 ,mem_car_notify_vdd_count -0x36a9 011405 store 1 ,mem_car_notify_vdd_timer -0x36aa 011406 fetch 1 ,mem_car_working_flag -0x36ab 011407 nrtn blank -: 011408 car_read_hvin: -0x36ac 011409 call adc_set_mode -0x36ad 011410 call vdd_calculate_by_mode -0x36ae 011411 store 2 ,mem_vdd_now_vol -0x36af 011412 arg mem_vdd_calculate_set ,rega -0x36b0 011413 call adc_bat_percent_lowpower_out -0x36b1 011414 fetcht 1 ,mem_car_notify_vdd_value_last -0x36b2 011415 isub temp ,null -0x36b3 011416 branch car_notify_vdd_next2 ,positive -0x36b4 011417 store 1 ,mem_car_notify_vdd_value_last -0x36b5 011418 copy pdata ,temp -: 011419 car_notify_vdd_next2: -0x36b6 011420 storet 1 ,mem_car_notify_vdd_percent -0x36b7 011421 fetch 1 ,mem_car_config_low_voltage_percent -0x36b8 011422 isub temp ,null -0x36b9 011423 call car_enter_low_bat ,positive -0x36ba 011424 storet 1 ,mem_notify_bat_payload -0x36bb 011425 arg 6 ,loopcnt -0x36bc 011426 arg mem_notify_bat_head ,contr -0x36bd 011427 call calc_check_sum_start -0x36be 011428 store 1 ,mem_notify_bat_check_sum -0x36bf 011429 arg mem_notify_bat_packet ,rega -0x36c0 011430 branch queue_push -: 011431 car_enter_low_bat: -0x36c1 011432 fetch 1 ,mem_low_bat_flag -0x36c2 011433 nrtn blank -0x36c3 011434 jam 1 ,mem_low_bat_flag -0x36c4 011435 arg 1 ,rega -0x36c5 011436 branch ui_led_blink_start_global -: 011437 car_low_bat_led_off: -0x36c6 011438 arg 1 ,rega -0x36c7 011439 branch ui_led_blink_stop_global -: 011441 car_led_control_timer: -0x36c8 011442 arg mem_car_led_control_timer ,regc -0x36c9 011443 arg car_led_control ,regb -0x36ca 011444 branch timer_single_step -: 011445 car_led_control: -0x36cb 011446 jam 5 ,mem_car_led_control_timer -0x36cc 011447 jam 0 ,mem_car_led_no -0x36cd 011448 fetch 1 ,mem_car_led_blink_status -0x36ce 011449 beq led_on ,car_led_control_blink_off -0x36cf 011450 beq led_off ,car_led_control_blink_on -: 011451 car_led_control_set: -0x36d0 011452 arg mem_car_led_control ,contr -0x36d1 011453 copy contr ,rega -0x36d2 011454 arg 8 ,loopcnt -: 011455 car_led_control_timer_next: -0x36d3 011456 copy rega ,contr -0x36d4 011457 ifetch 1 ,contr -0x36d5 011458 copy contr ,rega -0x36d6 011459 beq led_off ,car_led_control_off -0x36d7 011460 beq led_on ,car_led_control_on -0x36d8 011461 beq led_blink ,car_led_control_blink -: 011462 car_led_control_timer_next_2: -0x36d9 011463 fetch 1 ,mem_car_led_no -0x36da 011464 increase 1 ,pdata -0x36db 011465 store 1 ,mem_car_led_no -0x36dc 011466 loop car_led_control_timer_next -0x36dd 011467 rtn -: 011468 car_led_switch: -0x36de 011469 fetch 1 ,mem_car_led_no -0x36df 011470 arg mem_car_config_blood_led_gpio ,regb -0x36e0 011471 iadd regb ,regb -0x36e1 011472 ifetcht 1 ,regb -0x36e2 011473 rtn -: 011474 car_led_control_off: -0x36e3 011475 call car_led_switch -0x36e4 011476 call gpio_out_inactive -0x36e5 011477 branch car_led_control_timer_next_2 -: 011478 car_led_control_on: -0x36e6 011479 call car_led_switch -0x36e7 011480 call gpio_out_active -0x36e8 011481 branch car_led_control_timer_next_2 -: 011482 car_led_control_blink: -0x36e9 011483 fetch 1 ,mem_car_led_blink_status -0x36ea 011484 beq led_on ,car_led_control_off -0x36eb 011485 branch car_led_control_on -: 011486 car_led_control_blink_on: -0x36ec 011487 jam led_on ,mem_car_led_blink_status -0x36ed 011488 branch car_led_control_set -: 011489 car_led_control_blink_off: -0x36ee 011490 jam led_off ,mem_car_led_blink_status -0x36ef 011491 branch car_led_control_set -: 011495 calc_check_sum_start: -0x36f0 011496 arg 0 ,rega -: 011497 calc_check_sum_loop: -0x36f1 011498 ifetch 1 ,contr -0x36f2 011499 iadd rega ,rega -0x36f3 011500 loop calc_check_sum_loop -: 011501 calc_check_sum_and: -0x36f4 011502 and rega ,0xff ,pdata -0x36f5 011503 rtn -: 011505 car_le_receive_data: -0x36f6 011506 fetch 1 ,mem_le_att_opcode -0x36f7 011507 beq attop_write_request ,car_le_parse_att_write_request -0x36f8 011508 rtn -: 011509 car_le_parse_att_write_request: -0x36f9 011510 fetch 2 ,mem_le_att_handle -0x36fa 011511 beq att_car_control_handle ,car_control_le_receive -0x36fb 011512 rtn -: 011524 le_app_receive_data: -0x36fc 011525 bpatch patch1a_0 ,mem_patch1a -0x36fd 011526 ifetch 5 ,rega -0x36fe 011527 store 5 ,mem_app_receive_temp -0x36ff 011528 fetch 2 ,mem_app_receive_temp -0x3700 011529 arg le_receive_packet_head ,temp -0x3701 011530 isub temp ,null -0x3702 011531 nrtn zero -0x3703 011532 fetch 2 ,mem_app_receive_temp + 3 -0x3704 011533 byteswap pdata ,pdata -0x3705 011534 store 2 ,mem_app_receive_temp + 3 -0x3706 011535 copy pdata ,loopcnt -0x3707 011536 increase 5 ,rega -0x3708 011537 copy rega ,contr -0x3709 011538 arg mem_app_receive_temp + 5 ,contw -0x370a 011539 call memcpy -0x370b 011540 ifetch 1 ,contr -0x370c 011541 store 1 ,mem_app_receive_temp + 15 -0x370d 011542 arg mem_app_receive_temp + 2 ,rega -0x370e 011543 arg mem_app_receive_temp + 5 ,regb -0x370f 011544 rtn -: 011546 car_control_le_receive: -0x3710 011547 setarg 0 -0x3711 011548 store 5 ,mem_le_receive_payload -0x3712 011549 store 5 ,mem_le_receive_payload + 5 -0x3713 011550 call le_app_receive_data -0x3714 011551 copy regb ,contr -0x3715 011552 arg mem_le_receive_payload ,contw -0x3716 011553 arg 10 ,loopcnt -0x3717 011554 call memcpy -: 011555 car_receive_cmd_select: -0x3718 011556 bpatch patch1a_1 ,mem_patch1a -0x3719 011557 ifetch 1 ,rega -0x371a 011558 beq car_cmd_old_car_control ,car_drive_old -0x371b 011559 beq car_cmd_old_speed_control ,car_speed_set_old -0x371c 011560 beq car_cmd_l_r_motor_control ,car_motor_control -0x371d 011561 beq car_cmd_f_b_motor_control ,car_motor_control -0x371e 011562 beq car_cmd_ir_control ,car_ir_data_rx_from_app -0x371f 011563 beq car_cmd_led_control ,car_led_control_receive -0x3720 011564 beq car_cmd_device_info ,car_info_request -0x3721 011565 rtn -: 011567 car_24g_receive_data: -0x3722 011568 fetch 2 ,mem_ui_state_map -0x3723 011569 rtnbit1 ui_state_ble_connected -0x3724 011571 fetch 2 ,mem_car_24g_no_data_timeout_count -0x3725 011572 store 2 ,mem_car_24g_no_data_timeout_timer -0x3726 011574 jam work_paired ,mem_car_24g_received_pac -0x3727 011576 setarg offset_24g_rxdata_temp_add3 -0x3728 011577 call g24_set_rega -0x3729 011578 call car_control_le_receive -0x372a 011580 fetch 1 ,mem_app_receive_temp + 2 -0x372b 011581 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next -0x372c 011582 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next -0x372d 011583 rtn -: 011584 car_24g_receive_data_next: -0x372e 011585 fetch 1 ,mem_le_receive_payload -0x372f 011586 ncall car_moto1_enable_blank_data_timer ,blank -0x3730 011587 fetch 1 ,mem_le_receive_payload + 2 -0x3731 011588 ncall car_moto2_enable_blank_data_timer ,blank -0x3732 011589 fetch 1 ,mem_le_receive_payload + 4 -0x3733 011590 ncall car_moto3_enable_blank_data_timer ,blank -0x3734 011591 rtn -: 011593 car_moto1_enable_blank_data_timer: -0x3735 011594 jam 5 ,mem_car_moto1_blank_timer -0x3736 011595 rtn -: 011596 car_moto2_enable_blank_data_timer: -0x3737 011597 jam 5 ,mem_car_moto2_blank_timer -0x3738 011598 rtn -: 011599 car_moto3_enable_blank_data_timer: -0x3739 011600 jam 5 ,mem_car_moto3_blank_timer -0x373a 011601 rtn -: 011603 car_moto1_blank_data_timer: -0x373b 011604 arg mem_car_moto1_blank_timer ,regc -0x373c 011605 arg car_moto1_blank_data ,regb -0x373d 011606 branch timer_single_step -: 011607 car_moto2_blank_data_timer: -0x373e 011608 arg mem_car_moto2_blank_timer ,regc -0x373f 011609 arg car_moto2_blank_data ,regb -0x3740 011610 branch timer_single_step -: 011611 car_moto3_blank_data_timer: -0x3741 011612 arg mem_car_moto3_blank_timer ,regc -0x3742 011613 arg car_moto3_blank_data ,regb -0x3743 011614 branch timer_single_step -: 011616 car_moto1_blank_data: -0x3744 011617 jam 0 ,mem_le_receive_payload -0x3745 011618 branch car_motor_control -: 011619 car_moto2_blank_data: -0x3746 011620 jam 0 ,mem_le_receive_payload + 2 -0x3747 011621 branch car_motor_control -: 011622 car_moto3_blank_data: -0x3748 011623 jam 0 ,mem_le_receive_payload + 4 -0x3749 011624 branch car_motor_control -: 011629 car_drive_old: -0x374a 011630 call car_left_right_control_old -0x374b 011631 branch car_front_back_control_old -: 011632 car_left_right_control_old: -0x374c 011633 fetch 1 ,mem_le_receive_payload -0x374d 011634 store 1 ,mem_motor2_status -0x374e 011635 branch car_motor2_control -: 011636 car_front_back_control_old: -0x374f 011637 fetch 1 ,mem_motor1_speed -0x3750 011638 call car_reset_old_speed -0x3751 011639 fetch 1 ,mem_le_receive_payload + 1 -0x3752 011640 store 1 ,mem_motor1_status -0x3753 011641 branch car_motor1_control -: 011642 car_reset_old_speed: -0x3754 011643 beq speed_level_2 ,car_reset_old_speed2 -0x3755 011644 beq speed_level_3 ,car_reset_old_speed3 -0x3756 011645 store 1 ,mem_motor1_speed -0x3757 011646 rtn -: 011647 car_reset_old_speed2: -0x3758 011648 jam speed_level_5 ,mem_motor1_speed -0x3759 011649 rtn -: 011650 car_reset_old_speed3: -0x375a 011651 jam speed_level_10 ,mem_motor1_speed -0x375b 011652 rtn -: 011653 car_speed_set_old: -0x375c 011654 fetch 1 ,mem_le_receive_payload -0x375d 011655 call car_reset_old_speed -0x375e 011656 fetch 1 ,mem_motor1_speed -0x375f 011657 call car_motor_speed_duty_setting -0x3760 011658 call car_motor_speed_duty_transform -0x3761 011659 branch pwm_pwm0_duty_set -: 011661 car_motor_control: -0x3762 011662 fetch 1 ,mem_car_24g_go_die_flag -0x3763 011663 nrtn blank -0x3764 011664 fetch 6 ,mem_le_receive_payload -0x3765 011665 store 6 ,mem_motor1_status -0x3766 011666 fetch 1 ,mem_motor1_speed -0x3767 011667 fetcht 1 ,mem_motor2_speed -0x3768 011668 iand temp ,pdata -0x3769 011669 fetcht 1 ,mem_motor3_speed -0x376a 011670 iand temp ,pdata -0x376b 011671 call car_motor_working_flag ,blank -0x376c 011672 bpatch patch1a_2 ,mem_patch1a -0x376d 011673 call car_motor1_control -0x376e 011674 call car_motor2_control -0x376f 011675 branch car_motor3_control -: 011676 car_motor1_control: -0x3770 011677 arg mem_motor1_pwm_set ,regb -0x3771 011678 arg mem_motor1_status ,contr -0x3772 011679 branch car_motor_status_select -: 011680 car_motor2_control: -0x3773 011681 arg mem_motor2_pwm_set ,regb -0x3774 011682 arg mem_motor2_status ,contr -0x3775 011683 branch car_motor_status_select -: 011684 car_motor3_control: -0x3776 011685 arg mem_motor3_pwm_set ,regb -0x3777 011686 arg mem_motor3_status ,contr -0x3778 011687 branch car_motor_status_select -: 011688 car_motor_working_flag: -0x3779 011689 jam 0 ,mem_car_working_flag -0x377a 011690 rtn -: 011692 car_motor_status_select: -0x377b 011693 ifetch 1 ,contr -0x377c 011694 beq motor_stop ,car_motor_stop -0x377d 011695 beq go_front ,car_motor_positive -0x377e 011696 beq go_back ,car_motor_negative -0x377f 011697 rtn -: 011698 car_motor_positive: -0x3780 011699 jam 0 ,mem_motor_select_p_n -0x3781 011700 branch car_motor_negative + 1 -: 011701 car_motor_negative: -0x3782 011702 jam 1 ,mem_motor_select_p_n -0x3783 011703 ifetch 1 ,contr -0x3784 011704 store 1 ,mem_car_motor_speed -0x3785 011705 ifetch 8 ,regb -0x3786 011706 branch car_motor_work -: 011708 car_motor_stop: -0x3787 011709 ifetch 1 ,regb -0x3788 011710 call pwm_disable -0x3789 011711 increase 1 ,regb -0x378a 011712 ifetch 1 ,regb -0x378b 011713 branch pwm_disable -: 011714 car_motor_work: -0x378c 011715 store 8 ,mem_motor_pwm_pin1_set -0x378d 011716 jam 1 ,mem_car_working_flag -0x378e 011717 fetch 1 ,mem_motor_select_p_n -0x378f 011718 beq 0 ,car_motor_select_positive -: 011719 car_motor_select_negative: -0x3790 011720 fetch 1 ,mem_motor_pwm_pin2_set -0x3791 011721 store 1 ,mem_motor_pwm_pin_set -0x3792 011722 fetch 1 ,mem_motor_pwm_pin1_set -: 011723 car_motor_work_next: -0x3793 011724 call pwm_disable -0x3794 011725 fetch 1 ,mem_car_motor_speed -0x3795 011726 call car_motor_speed_duty_setting -0x3796 011727 store 1 ,mem_motor_pwm_dute_set -0x3797 011728 fetch 6 ,mem_motor_pwm_pin_set -0x3798 011729 store 6 ,mem_pdatatemp -0x3799 011730 branch pwm_out_set -: 011731 car_motor_select_positive: -0x379a 011732 fetch 1 ,mem_motor_pwm_pin1_set -0x379b 011733 store 1 ,mem_motor_pwm_pin_set -0x379c 011734 fetch 1 ,mem_motor_pwm_pin2_set -0x379d 011735 branch car_motor_work_next -: 011737 car_motor_speed_duty_setting: -0x379e 011738 mul32 pdata ,5 ,pdata -0x379f 011739 add pdata ,50 ,pdata -0x37a0 011740 rtn -: 011741 car_motor_speed_duty_transform: -0x37a1 011742 arg 12000 ,temp -0x37a2 011743 imul32 temp ,pdata -0x37a3 011744 div pdata ,100 -0x37a4 011745 call wait_div_end -0x37a5 011746 quotient temp -0x37a6 011747 copy temp ,rega -0x37a7 011748 setarg 12000 -0x37a8 011749 isub temp ,regb -0x37a9 011750 rtn -: 011753 car_ir_init: -0x37aa 011754 hfetch 1 ,core_gpio_sel2 -0x37ab 011755 set1 2 ,pdata -0x37ac 011756 hstore 1 ,core_gpio_sel2 -0x37ad 011757 setarg 158 -0x37ae 011758 hstore 2 ,core_pwm_pcnt4 -0x37af 011759 hstore 2 ,core_pwm_ncnt4 -0x37b0 011760 rtn -: 011762 car_ir_data_rx_from_app: -0x37b1 011763 fetch 1 ,mem_car_24g_go_die_flag -0x37b2 011764 nrtn blank -0x37b3 011765 fetch 2 ,mem_le_receive_payload -0x37b4 011766 store 2 ,mem_ir_data -0x37b5 011767 fetch 1 ,mem_car_24g_status -0x37b6 011768 bne work_paired ,car_ir_data_tx -0x37b7 011769 fetch 2 ,mem_le_lap -0x37b8 011770 store 2 ,mem_ir_data -: 011771 car_ir_data_tx: -0x37b9 011772 bpatch patch1a_3 ,mem_patch1a -0x37ba 011773 call car_ir_init -0x37bb 011774 call car_ir_enable -0x37bc 011775 setarg 48000 -0x37bd 011776 call sleep -0x37be 011777 call car_ir_disable -0x37bf 011778 setarg 7200 -0x37c0 011779 call sleep -0x37c1 011780 arg 16 ,loopcnt -: 011781 car_ir_send_loop: -0x37c2 011782 call car_ir_enable -0x37c3 011783 fetch 2 ,mem_ir_data -0x37c4 011784 bbit1 0 ,car_ir_is_bit1 -0x37c5 011785 setarg 7200 -0x37c6 011786 call sleep -0x37c7 011787 call car_ir_disable -0x37c8 011788 branch car_ir_wait_finish -: 011790 car_ir_is_bit1: -0x37c9 011791 setarg 14400 -0x37ca 011792 call sleep -0x37cb 011793 call car_ir_disable -: 011794 car_ir_wait_finish: -0x37cc 011795 setarg 7200 -0x37cd 011796 call sleep -0x37ce 011797 fetch 2 ,mem_ir_data -0x37cf 011798 rshift pdata ,pdata -0x37d0 011799 store 2 ,mem_ir_data -0x37d1 011800 loop car_ir_send_loop -0x37d2 011802 jam 2 ,mem_car_attack_shake_timer -0x37d3 011803 jam 1 ,mem_car_attack_shake_flag -0x37d4 011804 setarg 0x0a01 -0x37d5 011805 store 2 ,mem_le_receive_payload -0x37d6 011806 fetch 1 ,mem_car_config_device_select -0x37d7 011807 beq device_battle_tank ,car_attack_shake_back_battle_tank -: 011808 car_attack_shake_back_battle_car: -0x37d8 011809 branch car_motor_control -: 011810 car_attack_shake_back_battle_tank: -0x37d9 011811 setarg 0x0a01 -0x37da 011812 store 2 ,mem_le_receive_payload + 2 -0x37db 011813 branch car_motor_control -: 011815 car_ir_enable: -0x37dc 011816 hfetch 1 ,core_gpio_key2 -0x37dd 011817 or_into 0x40 ,pdata -0x37de 011818 hstore 1 ,core_gpio_key2 -0x37df 011819 rtn -: 011820 car_ir_disable: -0x37e0 011821 hfetch 1 ,core_gpio_key2 -0x37e1 011822 and_into 0xbf ,pdata -0x37e2 011823 hstore 1 ,core_gpio_key2 -0x37e3 011824 rtn -: 011826 car_ir_rx_init: -0x37e4 011827 fetch 1 ,mem_car_config_ir_enable -0x37e5 011828 rtneq 0x00 -0x37e6 011829 call lpm_disable_exen_output -0x37e7 011830 fetcht 1 ,mem_car_config_ir_rx_gpio -0x37e8 011831 storet 1 ,mem_ir_rx_gpio -0x37e9 011832 call gpio_config_input -0x37ea 011833 call car_ir_gpio_get_status -0x37eb 011834 nrtn true -0x37ec 011835 jam 1 ,mem_car_ir_breakdown_check_timer -0x37ed 011836 rtn -: 011838 car_ir_receive_process: -0x37ee 011839 fetch 1 ,mem_car_config_ir_enable -0x37ef 011840 rtneq flag_ir_disable -0x37f0 011841 fetch 1 ,mem_car_ir_breakdown_flag -0x37f1 011842 nrtn blank -0x37f2 011843 fetch 2 ,mem_ui_state_map -0x37f3 011844 bbit1 ui_state_ble_connected ,car_ir_receive_process_next -0x37f4 011845 fetch 1 ,mem_car_24g_status -0x37f5 011846 rtnne work_paired -: 011847 car_ir_receive_process_next: -0x37f6 011848 bpatch patch1a_4 ,mem_patch1a -0x37f7 011849 call car_ir_gpio_get_status -0x37f8 011850 nrtn true -0x37f9 011851 setarg 36000 -0x37fa 011852 call sleep -0x37fb 011853 call car_ir_gpio_get_status -0x37fc 011854 nrtn true -0x37fd 011855 call car_ir_clk_get -: 011856 car_ir_packet_head_wait_end: -0x37fe 011857 call car_ir_clk_check -0x37ff 011858 nrtn positive -0x3800 011859 call car_ir_gpio_get_status -0x3801 011860 branch car_ir_packet_head_wait_end ,true -0x3802 011861 arg 0 ,rega -0x3803 011862 arg 16 ,loopcnt -0x3804 011863 call car_ir_clk_get -: 011864 car_ir_receive_process_loop: -0x3805 011865 call car_ir_clk_check -0x3806 011866 nrtn positive -0x3807 011867 call car_ir_gpio_get_status -0x3808 011868 nbranch car_ir_receive_process_loop ,true -0x3809 011869 setarg 10800 -0x380a 011870 call sleep -0x380b 011871 call car_ir_gpio_get_status -0x380c 011872 branch car_ir_get_bit1 ,true -: 011873 car_ir_get_bit0: -0x380d 011874 setarg 0 -0x380e 011875 rshift rega ,rega -0x380f 011876 ior rega ,rega -0x3810 011877 loop car_ir_receive_process_loop -0x3811 011878 branch car_ir_receive_process_end -: 011879 car_ir_get_bit1: -0x3812 011880 setarg 0x8000 -0x3813 011881 rshift rega ,rega -0x3814 011882 ior rega ,rega -0x3815 011883 call car_ir_clk_get -: 011884 car_ir_get_bit1_wait_low_end: -0x3816 011885 call car_ir_clk_check -0x3817 011886 nrtn positive -0x3818 011887 call car_ir_gpio_get_status -0x3819 011888 branch car_ir_get_bit1_wait_low_end ,true -0x381a 011889 loop car_ir_receive_process_loop -: 011890 car_ir_receive_process_end: -0x381b 011891 bpatch patch1a_5 ,mem_patch1a -0x381c 011892 copy rega ,pdata -0x381d 011893 store 2 ,mem_ir_rx_buf -0x381e 011894 store 2 ,mem_ir_notify_data + 8 -0x381f 011895 fetch 1 ,mem_car_24g_status -0x3820 011896 beq work_paired ,car_ir_24g_receive_attack -: 011897 car_ir_data_notify: -0x3821 011898 arg 0x07 ,loopcnt -0x3822 011899 arg mem_ir_notify_data_head ,contr -0x3823 011900 call calc_check_sum_start -0x3824 011901 store 1 ,mem_ir_notify_data_check_sum -0x3825 011902 arg mem_ir_notify_data ,rega -0x3826 011903 branch queue_push -: 011905 car_ir_24g_receive_attack: -0x3827 011906 fetch 1 ,mem_car_24g_ir_receive_attack_count -0x3828 011907 increase 1 ,pdata -0x3829 011908 store 1 ,mem_car_24g_ir_receive_attack_count -0x382a 011909 div pdata ,2 -0x382b 011910 call wait_div_end -0x382c 011911 quotient temp -0x382d 011912 remainder pdata -0x382e 011913 nbranch car_ir_24g_receive_attack_blink ,blank -: 011914 car_ir_24g_receive_attack_off: -0x382f 011915 fetch 1 ,mem_car_config_led_num -0x3830 011916 isub temp ,null -0x3831 011917 call car_ir_24g_go_die ,zero -0x3832 011918 arg mem_car_led_control ,pdata -0x3833 011919 increase -1 ,temp -0x3834 011920 iadd temp ,rega -0x3835 011921 arg 0 ,pdata -0x3836 011922 istore 1 ,rega -0x3837 011923 rtn -: 011924 car_ir_24g_receive_attack_blink: -0x3838 011925 arg mem_car_led_control ,pdata -0x3839 011926 iadd temp ,rega -0x383a 011927 arg 2 ,pdata -0x383b 011928 istore 1 ,rega -0x383c 011929 rtn -: 011930 car_ir_24g_go_die: -0x383d 011931 jam 1 ,mem_car_24g_go_die_flag -0x383e 011932 rtn -: 011933 car_ir_clk_get: -0x383f 011934 copy clkn_bt ,pdata -0x3840 011935 store 4 ,mem_ir_receive_clkn -0x3841 011936 rtn -: 011937 car_ir_clk_check: -0x3842 011938 copy clkn_bt ,pdata -0x3843 011939 fetcht 4 ,mem_ir_receive_clkn -0x3844 011940 isub temp ,pdata -0x3845 011941 sub pdata ,200 ,null -0x3846 011942 rtn -: 011944 car_ir_gpio_get_status: -0x3847 011945 fetcht 1 ,mem_ir_rx_gpio -0x3848 011946 branch gpio_get_bit -: 011948 car_led_control_receive: -0x3849 011949 fetch 8 ,mem_le_receive_payload -0x384a 011950 store 8 ,mem_car_led_control -0x384b 011951 rtn -: 011953 car_info_request: -0x384c 011954 fetch 1 ,mem_car_config_device_select -0x384d 011955 store 1 ,mem_car_info_request_payload -0x384e 011956 fetch 1 ,mem_car_config_motor_layout -0x384f 011957 store 1 ,mem_car_info_request_payload + 1 -0x3850 011958 fetch 1 ,mem_car_config_ir_enable -0x3851 011959 store 1 ,mem_car_info_request_payload + 2 -0x3852 011960 arg 13 ,loopcnt -0x3853 011961 arg mem_car_info_request_head ,contr -0x3854 011962 call calc_check_sum_start -0x3855 011963 store 1 ,mem_car_info_request_checksum -0x3856 011964 arg mem_car_info_request ,rega -0x3857 011965 branch queue_push -: 011971 light_init: -0x3858 011972 call clear_eeprom_size_2k -0x3859 011973 jam 0x7a ,mem_curr_packet_num -0x385a 011974 call light_load_controler_list -0x385b 011975 call light_init_crr_cmd_count -0x385c 011976 setarg light_pairing_timer -0x385d 011977 store 2 ,mem_cb_event_timer -0x385e 011978 arg 0 ,rega -0x385f 011979 branch pwm_init -: 011981 light_pairing_timer: -0x3860 011982 fetch 2 ,mem_light_pairing_timer -0x3861 011983 rtn blank -0x3862 011984 increase -1 ,pdata -0x3863 011985 store 2 ,mem_light_pairing_timer -0x3864 011986 rtnne 0 -0x3865 011987 jam 0 ,mem_light_pairing_enable -0x3866 011988 rtn -: 011990 light_init_crr_cmd_count: -0x3867 011991 bpatch patch1a_6 ,mem_patch1a -0x3868 011992 fetch 1 ,mem_light_next_record -0x3869 011993 sub pdata ,40 ,null -0x386a 011994 rtn positive -0x386b 011995 jam 0 ,mem_light_next_record -0x386c 011996 rtn -: 011998 light_load_controler_list: -0x386d 011999 arg mem_light_next_record ,rega -0x386e 012000 arg 0 ,regb -0x386f 012001 arg 81 ,temp -0x3870 012002 branch iicd_read_eep_data -: 012005 light_find_controler_pairing: -0x3871 012006 disable user -0x3872 012007 fetch 1 ,mem_light_cnum -0x3873 012008 copy pdata ,loopcnt -0x3874 012010 arg mem_light_clist ,rega -0x3875 012011 copy regc ,regb -: 012012 light_find_controler_pairing_loop: -0x3876 012013 bpatch patch1a_7 ,mem_patch1a -0x3877 012014 call light_compare_addr_record -0x3878 012015 branch enable_user ,zero -: 012016 light_find_single_pairing_diff: -0x3879 012017 increase 4 ,rega -0x387a 012018 loop light_find_controler_pairing_loop -0x387b 012019 rtn -: 012022 light_compare_addr_record: -0x387c 012023 bpatch patch1b_0 ,mem_patch1b -0x387d 012024 ifetch 3 ,rega -0x387e 012025 ifetcht 3 ,regb -0x387f 012026 isub temp ,null -0x3880 012027 rtn -: 012029 light_compare_single_record: -0x3881 012030 bpatch patch1b_1 ,mem_patch1b -0x3882 012031 ifetch 3 ,rega -0x3883 012032 ifetcht 3 ,regb -0x3884 012033 isub temp ,null -0x3885 012034 nrtn zero -0x3886 012035 ifetch 1 ,contr -0x3887 012036 sub pdata ,0 ,null -0x3888 012037 rtn zero -0x3889 012038 add rega ,3 ,contr -0x388a 012039 ifetcht 1 ,contr -0x388b 012040 isub temp ,null -0x388c 012041 rtn -: 012044 light_find_controler_cmd: -0x388d 012045 bpatch patch1b_2 ,mem_patch1b -0x388e 012046 disable user -0x388f 012047 fetch 1 ,mem_light_cnum -0x3890 012048 copy pdata ,loopcnt -0x3891 012050 arg mem_light_clist ,rega -0x3892 012051 copy regc ,regb -: 012052 light_find_controler_cmd_loop: -0x3893 012053 call light_compare_single_record -0x3894 012054 branch enable_user ,zero -0x3895 012055 increase 4 ,rega -0x3896 012056 loop light_find_controler_cmd_loop -0x3897 012057 rtn -: 012060 light_recv_adv: -0x3898 012061 fetch 1 ,mem_le_scanrsp_rcv -0x3899 012062 increase 1 ,pdata -0x389a 012063 store 1 ,mem_le_scanrsp_rcv -0x389b 012064 arg mem_le_rxbuf + 12 ,regc -: 012066 light_anylize_command: -0x389c 012067 ifetch 2 ,regc -0x389d 012068 arg 0x55aa ,temp -0x389e 012069 isub temp ,null -0x389f 012070 nrtn zero -0x38a0 012071 copy contr ,regc -0x38a1 012072 ifetcht 3 ,regc -0x38a2 012073 setarg 0xffffff -0x38a3 012074 isub temp ,null -0x38a4 012075 branch light_parse_cmd ,zero -0x38a5 012076 call light_find_controler_cmd -0x38a6 012077 branch light_parse_cmd ,user -0x38a7 012078 rtn -: 012080 light_parse_cmd: -0x38a8 012081 bpatch patch1b_3 ,mem_patch1b -0x38a9 012082 increase 4 ,regc -0x38aa 012083 ifetch 1 ,regc -0x38ab 012084 fetcht 1 ,mem_curr_packet_num -0x38ac 012085 isub temp ,null -0x38ad 012086 rtn zero -0x38ae 012087 store 1 ,mem_curr_packet_num -0x38af 012088 fetch 1 ,mem_le_req_rcv -0x38b0 012089 increase 1 ,pdata -0x38b1 012090 store 1 ,mem_le_req_rcv -0x38b2 012092 increase 1 ,regc -0x38b3 012093 ifetch 1 ,regc -0x38b4 012094 store 1 ,mem_light_crr_cmd_count -0x38b5 012095 copy pdata ,loopcnt -0x38b6 012096 rtn blank -: 012097 light_parse_cmd_loop: -0x38b7 012098 ifetch 1 ,contr -0x38b8 012099 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 -0x38b9 012100 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 -0x38ba 012101 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 -0x38bb 012102 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 -0x38bc 012103 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 -0x38bd 012104 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 -0x38be 012105 beq light_cmd_auto_mode ,light_parse_auto_mode -0x38bf 012106 beq light_cmd_pairing ,light_parse_pairing -0x38c0 012107 loop light_parse_cmd_loop -0x38c1 012108 rtn -: 012110 light_parse_cmd_pwm0: -0x38c2 012111 copy contr ,regc -0x38c3 012112 fetch 1 ,mem_light_pwm0 -0x38c4 012113 store 1 ,mem_pdatatemp -0x38c5 012114 arg 0 ,temp -: 012115 light_parse_cmd_pwm_common: -0x38c6 012116 storet 1 ,mem_pdatatemp + 1 -0x38c7 012117 setarg 10000 -0x38c8 012118 store 3 ,mem_pdatatemp + 2 -0x38c9 012119 ifetch 1 ,regc -0x38ca 012120 store 1 ,mem_pdatatemp + 5 -0x38cb 012121 call pwm_out_set -0x38cc 012122 and regc ,1 ,contr -0x38cd 012123 loop light_parse_cmd_loop -0x38ce 012124 rtn -: 012125 light_parse_cmd_pwm1: -0x38cf 012126 copy regc ,contr -0x38d0 012127 fetch 1 ,mem_light_pwm1 -0x38d1 012128 store 1 ,mem_pdatatemp -0x38d2 012129 arg 1 ,temp -0x38d3 012130 branch light_parse_cmd_pwm_common -: 012131 light_parse_cmd_pwm2: -0x38d4 012132 copy regc ,contr -0x38d5 012133 fetch 1 ,mem_light_pwm2 -0x38d6 012134 store 1 ,mem_pdatatemp -0x38d7 012135 arg 2 ,temp -0x38d8 012136 branch light_parse_cmd_pwm_common -: 012137 light_parse_cmd_pwm3: -0x38d9 012138 copy regc ,contr -0x38da 012139 fetch 1 ,mem_light_pwm3 -0x38db 012140 store 1 ,mem_pdatatemp -0x38dc 012141 arg 3 ,temp -0x38dd 012142 branch light_parse_cmd_pwm_common -: 012143 light_parse_cmd_pwm4: -0x38de 012144 copy regc ,contr -0x38df 012145 fetch 1 ,mem_light_pwm4 -0x38e0 012146 store 1 ,mem_pdatatemp -0x38e1 012147 arg 4 ,temp -0x38e2 012148 branch light_parse_cmd_pwm_common -: 012149 light_parse_cmd_pwm5: -0x38e3 012150 copy regc ,contr -0x38e4 012151 fetch 1 ,mem_light_pwm5 -0x38e5 012152 store 1 ,mem_pdatatemp -0x38e6 012153 arg 5 ,temp -0x38e7 012154 branch light_parse_cmd_pwm_common -: 012156 light_parse_auto_mode: -0x38e8 012157 ifetch 1 ,contr -0x38e9 012158 rtn -: 012160 light_parse_pairing: -0x38ea 012161 copy contr ,regc -0x38eb 012162 fetch 1 ,mem_light_pairing_enable -0x38ec 012163 bne 1 ,light_parse_pairing_abandon -0x38ed 012164 call update_controler_list -: 012165 light_parse_pairing_abandon: -0x38ee 012166 and regc ,4 ,contr -0x38ef 012167 rtn -: 012168 update_controler_list: -0x38f0 012169 bpatch patch1b_4 ,mem_patch1b -0x38f1 012170 call light_find_controler_pairing -0x38f2 012171 branch update_conrtoler_list_found ,user -0x38f3 012172 fetch 1 ,mem_light_next_record -0x38f4 012173 copy pdata ,temp -0x38f5 012174 increase 1 ,pdata -0x38f6 012175 store 1 ,mem_light_next_record -0x38f7 012176 call light_init_crr_cmd_count -0x38f8 012177 lshift2 temp ,temp -0x38f9 012178 setarg mem_light_clist -0x38fa 012179 iadd temp ,contw -0x38fb 012180 ifetch 4 ,regc -0x38fc 012181 istore 4 ,contw -0x38fd 012182 branch update_conrtoler_store_list -: 012183 update_conrtoler_list_found: -0x38fe 012184 add regc ,3 ,contr -0x38ff 012185 ifetch 1 ,contr -0x3900 012186 rtn blank -0x3901 012187 ifetch 4 ,regc -0x3902 012188 istore 4 ,rega -: 012189 update_conrtoler_store_list: -0x3903 012190 arg mem_light_next_record ,rega -0x3904 012191 arg 0 ,regb -0x3905 012192 arg 81 ,temp -0x3906 012193 branch iicd_write_eep_data -: 012197 lightc_init: -0x3907 012201 fetcht 1 ,mem_lightc_led_gpio -0x3908 012202 call gpio_out_inactive -0x3909 012203 rtn -: 012206 lightc_dispatch: -0x390a 012209 fetcht 1 ,mem_lightc_led_gpio -0x390b 012210 call gpio_out_active -0x390c 012213 fetcht 1 ,mem_lightc_led_gpio -0x390d 012214 call gpio_out_inactive -0x390e 012217 call lightc_start_adv -0x390f 012219 fetch 1 ,mem_adv_time -0x3910 012220 nrtn blank -0x3911 012222 call lpm_write_gpio_wakeup -0x3912 012223 hfetch 4 ,core_lpm_ctrl -0x3913 012224 set0 15 ,pdata -0x3914 012225 hstore 4 ,core_lpm_reg -0x3915 012226 call lpm_write_ctrl -0x3916 012227 arg param_hibernate_clks ,temp -0x3917 012228 branch lpm_sleep -: 012230 lightc_adv: -0x3918 012231 fetch 1 ,mem_adv_time -0x3919 012232 branch le_adv_loop_tx ,blank -0x391a 012233 increase -1 ,pdata -0x391b 012234 store 1 ,mem_adv_time -0x391c 012235 branch le_adv_loop_tx -: 012237 lightc_start_adv: -0x391d 012238 mul32 pdata ,20 ,pdata -0x391e 012239 arg mem_cmd0_string ,contr -0x391f 012240 iadd contr ,contr -0x3920 012241 ifetch 1 ,contr -0x3921 012242 rtn blank -0x3922 012243 copy pdata ,rega -0x3923 012244 copy rega ,loopcnt -0x3924 012245 arg mem_le_adv_data + 2 ,contw -0x3925 012246 call memcpy -0x3926 012247 copy rega ,pdata -0x3927 012248 increase 2 ,pdata -0x3928 012249 store 1 ,mem_le_adv_data_len -0x3929 012250 rtn -: 012257 module_init: -0x392a 012259 rtn wake -0x392b 012260 call le_modified_name -0x392c 012261 call adc_init_data -0x392d 012262 setarg module_process_idle -0x392e 012263 store 2 ,mem_cb_idle_process -0x392f 012264 setarg module_bt_conn_process -0x3930 012265 store 2 ,mem_cb_bt_process -0x3931 012266 setarg module_process_bb_event -0x3932 012267 store 2 ,mem_cb_bb_event_process -0x3933 012268 setarg module_le_conn_process -0x3934 012269 store 2 ,mem_cb_le_process -0x3935 012270 setarg module_lpm_lock -0x3936 012271 store 2 ,mem_cb_check_wakelock -0x3937 012272 setarg module_hci_cmd_transmit_le_notify -0x3938 012273 store 2 ,mem_cb_ble_transmit -0x3939 012274 setarg module_hci_event_receive_spp_data -0x393a 012275 store 2 ,mem_cb_receive_spp_data -0x393b 012276 setarg module_le_receive_data -0x393c 012277 store 2 ,mem_cb_att_write -0x393d 012278 setarg module_bb_event_timer -0x393e 012279 store 2 ,mem_cb_event_timer -0x393f 012281 call module_spp_clear_last_transmite_clock -0x3940 012282 bpatch patch1b_5 ,mem_patch1b -0x3941 012283 call module_lpm_uart_init -0x3942 012284 call module_gpio_init -0x3943 012285 call check_module_disabled -0x3944 012286 branch module_hci_event_enter_standby_mode -: 012289 module_lpm_uart_init: -0x3945 012290 fetch 4 ,mem_module_uart_rx_buffer -0x3946 012291 hstore 4 ,core_uart_rsaddr -0x3947 012293 fetch 4 ,mem_module_uart_tx_buffer -0x3948 012294 hstore 4 ,core_uart_tsaddr -0x3949 012296 hfetch 1 ,core_gpio_sel1 -0x394a 012297 or_into 0x04 ,pdata -0x394b 012298 and_into 0xfc ,pdata -0x394c 012299 hstore 1 ,core_gpio_sel1 -0x394d 012300 jam 0x00 ,core_uart_ctrl -0x394e 012302 fetch 2 ,mem_module_uart_rx_buffer -0x394f 012303 hstore 2 ,core_uart_rrptr -0x3950 012304 fetch 2 ,mem_module_uart_tx_buffer -0x3951 012305 hstore 2 ,core_uart_twptr -0x3952 012306 hstore 2 ,core_uart_trptrp -0x3953 012308 hfetch 4 ,core_gpio_pu0 -0x3954 012309 set1 7 ,pdata -0x3955 012310 hstore 4 ,core_gpio_pu0 -0x3956 012312 hfetch 2 ,core_clkoff -0x3957 012313 set0 clock_off_uart ,pdata -0x3958 012314 hstore 2 ,core_clkoff -0x3959 012315 call uart_set_baud_by_mem -0x395a 012316 jam uartclk_crystal ,core_uart_clksel -0x395b 012317 jam uart_ctrl_h4 ,core_uart_ctrl -0x395c 012319 fetch 1 ,mem_module_flag -0x395d 012320 isolate1 module_flag_uart_flow_control ,pdata -0x395e 012321 hfetcht 1 ,core_uart_ctrl -0x395f 012322 setflag true ,4 ,temp -0x3960 012323 hstoret 1 ,core_uart_ctrl -0x3961 012324 rtn -: 012328 module_lpm_init: -0x3962 012329 call module_spp_clear_last_transmite_clock -0x3963 012330 branch module_lpm_uart_init -: 012333 module_gpio_init: -0x3964 012338 fetcht 1 ,mem_module_connect_state_gpio -0x3965 012339 call gpio_config_output -0x3966 012340 call module_set_conn_pin_low -0x3967 012342 fetcht 1 ,mem_module_wake_up_gpio -0x3968 012343 branch gpio_config_input -: 012345 module_lpm_lock: -0x3969 012346 fetcht 1 ,mem_module_wake_up_gpio -0x396a 012347 call gpio_get_bit -0x396b 012348 nbranch app_put_lpm_wake_lock ,true -0x396c 012349 branch app_get_lpm_wake_lock -: 012352 module_le_conn_process: -0x396d 012353 rtn -: 012355 module_bt_conn_process: -0x396e 012356 call module_spp_enter_sniff -0x396f 012357 branch module_control_air_flow -: 012359 module_spp_enter_sniff: -0x3970 012360 fetch 1 ,mem_ui_state_map -0x3971 012361 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock -0x3972 012362 bpatch patch1b_6 ,mem_patch1b -0x3973 012363 setarg 0x3eff -0x3974 012364 fetcht 4 ,mem_last_transmite_clock -0x3975 012365 iadd temp ,temp -0x3976 012366 copy clkn_bt ,pdata -0x3977 012367 isub temp ,null -0x3978 012368 nrtn positive -0x3979 012369 fetch 2 ,mem_ui_state_map -0x397a 012370 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock -0x397b 012371 fetch 1 ,mem_module_flag -0x397c 012372 rtnbit1 moudle_task_sniff -0x397d 012373 call module_set_sniff_task_flag -0x397e 012374 call app_bt_enter_sniff -: 012375 module_spp_clear_last_transmite_clock: -0x397f 012376 copy clkn_bt ,pdata -0x3980 012377 store 4 ,mem_last_transmite_clock -0x3981 012378 rtn -: 012381 module_process_idle: -0x3982 012382 call module_control_air_flow -0x3983 012383 call l2cap_malloc_is_fifo_full -0x3984 012384 nrtn blank -0x3985 012385 branch module_process -: 012388 module_process_bb_event: -0x3986 012389 copy regc ,pdata -0x3987 012390 beq bt_evt_bb_connected ,module_process_bb_conn -0x3988 012391 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned -0x3989 012392 beq bt_evt_reconn_failed ,module_process_reconn_fail -0x398a 012393 beq bt_evt_setup_complete ,module_process_setup_complete -0x398b 012394 beq bt_evt_spp_connected ,module_process_spp_connected -0x398c 012395 beq bt_evt_spp_disconnected ,module_process_spp_disconnected -0x398d 012396 beq bt_evt_pincode_req ,module_process_evt_pincode_req -0x398e 012397 beq bt_evt_enter_sniff ,module_process_enter_sniff -0x398f 012398 beq bt_evt_exit_sniff ,module_process_exit_sniff -0x3990 012399 beq bt_evt_reconn_page_timeout ,module_process_page_time_out -0x3991 012400 beq bt_evt_le_connected ,module_process_le_conn -0x3992 012401 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn -0x3993 012402 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept -0x3994 012403 beq bt_evt_unsniff_accept ,module_process_unsniff_accept -0x3995 012404 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept -0x3996 012405 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail -0x3997 012406 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success -0x3998 012407 beq bt_evt_le_start_enc ,module_hci_event_start_enc -0x3999 012408 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc -0x399a 012409 beq bt_evt_le_tk_generate ,module_hci_event_le_tk -0x399b 012410 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate -0x399c 012411 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode -0x399d 012412 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail -0x399e 012413 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success -0x399f 012414 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey -0x39a0 012415 beq bt_evt_store_nvram ,module_hci_event_store_device -0x39a1 012416 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost -0x39a2 012417 rtn -: 012420 module_process_bb_event_disconned: -0x39a3 012421 call module_spp_clear_last_transmite_clock -0x39a4 012422 fetch 1 ,mem_flag_pairing_state -0x39a5 012423 ncall module_hci_event_bt_pairing_fail ,blank -0x39a6 012424 call module_disconn_start -0x39a7 012425 fetch 2 ,mem_ui_state_map -0x39a8 012426 rtnbit0 ui_state_bt_spp_conn -0x39a9 012427 branch module_spp_disconnected -: 012429 module_process_spp_connected: -0x39aa 012430 fetch 2 ,mem_ui_state_map -0x39ab 012431 set1 ui_state_bt_spp_conn ,pdata -0x39ac 012432 store 2 ,mem_ui_state_map -0x39ad 012433 fetch 1 ,mem_module_spp_lpm_mult -0x39ae 012434 store 1 ,mem_lpm_mult -0x39af 012435 call module_set_conn_pin_low -0x39b0 012436 branch module_hci_event_spp_connect -: 012438 module_process_spp_disconnected: -: 012440 module_spp_disconnected: -0x39b1 012441 fetch 2 ,mem_ui_state_map -0x39b2 012442 rtnbit0 ui_state_bt_spp_conn -0x39b3 012443 set0 ui_state_bt_spp_conn ,pdata -0x39b4 012444 store 2 ,mem_ui_state_map -0x39b5 012445 branch module_hci_event_spp_disconnect -: 012448 module_process_enter_sniff: -: 012450 module_sniff_param_check: -0x39b6 012451 call module_spp_clear_last_transmite_clock -0x39b7 012454 fetch 2 ,mem_context + coffset_tsniff -0x39b8 012455 rshift pdata ,pdata -0x39b9 012456 fetcht 2 ,mem_sniff_param_interval -0x39ba 012457 isub temp ,null -0x39bb 012458 nbranch module_sniff_param_check_unsniff ,zero -0x39bc 012459 branch app_lpm_mult_enable -: 012460 module_sniff_param_check_unsniff: -0x39bd 012461 fetch 1 ,mem_module_flag -0x39be 012462 rtnbit1 moudle_task_unsniff -0x39bf 012463 hfetch 2 ,core_uart_rxitems -0x39c0 012464 ncall module_set_unsniff_task_flag ,blank -0x39c1 012465 branch app_bt_sniff_exit -: 012467 module_process_exit_sniff: -0x39c2 012468 call module_clear_sniff_task_flag -0x39c3 012469 branch app_lpm_mult_disable -: 012471 module_process_setup_complete: -0x39c4 012472 call module_spp_clear_last_transmite_clock -0x39c5 012473 branch module_conn_start -: 012475 module_process_bb_even_le_disconn: -0x39c6 012476 call le_clr_config_more_data -0x39c7 012477 call module_disconn_start -0x39c8 012478 branch module_hci_event_le_disconnect -: 012480 module_process_evt_pincode_req: -0x39c9 012481 branch app_bt_set_pincode -: 012484 module_process_sniff_not_accept: -0x39ca 012485 branch module_clear_sniff_task_flag -: 012488 module_process_unsniff_accept: -0x39cb 012489 fetch 1 ,mem_module_flag -0x39cc 012490 bbit0 moudle_task_unsniff ,app_bt_enter_sniff -0x39cd 012491 branch module_clear_unsniff_task_flag -: 012494 module_process_unsniff_not_accept: -0x39ce 012495 branch module_clear_unsniff_task_flag -: 012498 module_process_le_conn: -0x39cf 012499 call le_send_att_exchange_mtu_requset -0x39d0 012500 call module_conn_start -0x39d1 012501 fetch 1 ,mem_module_le_lpm_mult -0x39d2 012502 store 1 ,mem_lpm_mult -0x39d3 012503 branch module_hci_event_le_connect -: 012506 module_process_bb_conn: -0x39d4 012507 jam 0 ,mem_flag_mode_ssp_pin -0x39d5 012508 call module_clear_sniff_task_flag -0x39d6 012509 branch module_clear_unsniff_task_flag -: 012511 module_process_page_time_out: -: 012512 module_process_reconn_fail: -: 012513 module_disconn_start: -0x39d7 012514 call module_start_adv_discovery_by_command -0x39d8 012515 branch module_set_conn_pin_high -: 012518 module_process_ble_ltk_lost: -0x39d9 012519 call le_send_reject_ind -0x39da 012520 branch le_send_smp_security_request -: 012523 module_set_conn_pin_high: -0x39db 012524 fetcht 1 ,mem_module_connect_state_gpio -0x39dc 012525 branch gpio_out_active -: 012527 module_conn_start: -0x39dd 012528 call module_stop_adv_discovery -0x39de 012529 branch module_set_conn_pin_low -: 012531 module_stop_adv_discovery: -0x39df 012532 fetch 1 ,mem_module_state -0x39e0 012533 isolate1 moudle_state_bt_bit ,pdata -0x39e1 012534 call app_bt_stop_discovery ,true -0x39e2 012535 fetch 1 ,mem_module_state -0x39e3 012536 isolate1 moudle_state_ble_bit ,pdata -0x39e4 012537 call app_ble_stop_adv ,true -0x39e5 012538 rtn -: 012539 module_set_conn_pin_low: -0x39e6 012540 fetcht 1 ,mem_module_connect_state_gpio -0x39e7 012541 branch gpio_out_inactive -: 012543 module_process_with_credit: -0x39e8 012544 fetch 1 ,mem_credit_flag -0x39e9 012545 rtneq credit_disable -0x39ea 012546 branch rfcomm_send_uih_without_payload -: 012548 module_process: -0x39eb 012549 hfetch 1 ,core_uart_status -0x39ec 012550 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit -0x39ed 012551 call uartd_prepare_rx -0x39ee 012552 ifetch 1 ,contru -0x39ef 012553 bne 0x01 ,module_hci_in_excp -0x39f0 012554 hfetch 2 ,core_uart_rxitems -0x39f1 012555 sub pdata ,2 ,null -0x39f2 012556 rtn positive -0x39f3 012557 ifetch 1 ,contru -0x39f4 012558 store 1 ,mem_module_uart_opcode -0x39f5 012559 ifetcht 1 ,contru -0x39f6 012560 copy contru ,rega -0x39f7 012561 storet 1 ,mem_module_uart_len -0x39f8 012562 add temp ,3 ,temp -0x39f9 012563 hfetch 2 ,core_uart_rxitems -0x39fa 012564 isub temp ,temp -0x39fb 012565 nrtn positive -0x39fc 012566 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x39fd 012567 call module_hci_cmd_control -0x39fe 012568 fetch 1 ,mem_module_temp_nl_discard_packet -0x39ff 012569 rtneq hci_not_discard_packet -0x3a00 012570 branch module_hci_dicard_packet -: 012572 module_hci_in_excp: -0x3a01 012573 call delay_10ms -0x3a02 012574 call module_hci_event_invalid_packet -0x3a03 012575 branch module_hci_release_except -: 012578 module_hci_release_except: -0x3a04 012579 bpatch patch1b_7 ,mem_patch1b -0x3a05 012580 hfetch 2 ,core_uart_rxitems -0x3a06 012581 rtn blank -0x3a07 012582 call uartd_prepare_rx -0x3a08 012583 ifetch 1 ,contru -0x3a09 012584 sub pdata ,0x01 ,null -0x3a0a 012585 ncall module_hci_dicard_bytes ,zero -0x3a0b 012586 nbranch module_hci_release_except ,zero -0x3a0c 012587 ifetch 1 ,contru -0x3a0d 012588 rtneq hci_cmd_spp_data_req -0x3a0e 012589 rtneq hci_cmd_set_credit_given -0x3a0f 012590 increase -1 ,contru -0x3a10 012591 call module_hci_dicard_bytes -0x3a11 012592 branch module_hci_release_except -: 012594 module_hci_dicard_packet: -0x3a12 012595 call uartd_prepare_rx -0x3a13 012596 increase 2 ,contru -0x3a14 012597 ifetch 1 ,contru -0x3a15 012598 iadd contru ,contru -: 012599 module_hci_dicard_bytes: -0x3a16 012600 branch uartd_rxdone -: 012603 module_hci_cmd_control: -0x3a17 012604 bpatch patch1c_0 ,mem_patch1c -0x3a18 012605 fetch 1 ,mem_module_uart_opcode -0x3a19 012606 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr -0x3a1a 012607 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr -0x3a1b 012608 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility -0x3a1c 012609 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name -0x3a1d 012610 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name -0x3a1e 012611 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data -0x3a1f 012612 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data -0x3a20 012613 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status -0x3a21 012614 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode -0x3a22 012615 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode -0x3a23 012616 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode -0x3a24 012617 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud -0x3a25 012618 beq hci_cmd_version_req ,module_hci_cmd_version_request -0x3a26 012619 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect -0x3a27 012620 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect -0x3a28 012621 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram -0x3a29 012622 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey -0x3a2a 012623 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given -0x3a2b 012624 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv -0x3a2c 012625 beq hci_cmd_power_req ,module_hci_cmd_power_request -0x3a2d 012626 beq hci_cmd_power_set ,module_hci_cmd_power_set -0x3a2e 012627 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry -0x3a2f 012628 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio -0x3a30 012629 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio -0x3a31 012630 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode -0x3a32 012631 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data -0x3a33 012632 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data -0x3a34 012633 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req -0x3a35 012634 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter -0x3a36 012635 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing -0x3a37 012636 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio -0x3a38 012637 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power -0x3a39 012638 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey -0x3a3a 012639 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag -0x3a3b 012640 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip -0x3a3c 012641 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey -0x3a3d 012642 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm -0x3a3e 012643 branch module_hci_event_receive_invalid_cmd -: 012648 module_hci_cmd_set_bt_addr: -0x3a3f 012649 fetch 1 ,mem_module_uart_len -0x3a40 012650 bne 6 ,module_hci_event_receive_invalid_cmd -0x3a41 012651 ifetch 6 ,contru -0x3a42 012652 store 6 ,mem_lap -0x3a43 012653 branch module_hci_event_receive_valid_cmd -: 012656 module_hci_cmd_set_le_addr: -0x3a44 012657 fetch 1 ,mem_module_uart_len -0x3a45 012658 bne 6 ,module_hci_event_receive_invalid_cmd -0x3a46 012659 ifetch 6 ,contru -0x3a47 012660 store 6 ,mem_le_lap -0x3a48 012661 branch module_hci_event_receive_valid_cmd -: 012665 module_hci_cmd_set_visibility: -0x3a49 012666 fetch 1 ,mem_module_uart_len -0x3a4a 012667 bne 1 ,module_hci_event_receive_invalid_cmd -0x3a4b 012668 copy rega ,contru -0x3a4c 012669 call module_hci_event_receive_valid_cmd -0x3a4d 012670 ifetcht 1 ,contru -0x3a4e 012671 storet 1 ,mem_module_bluetooth_stauts_by_command -0x3a4f 012672 fetch 2 ,mem_ui_state_map -0x3a50 012673 rtnbit1 ui_state_ble_connected -0x3a51 012674 rtnbit1 ui_state_bt_connected -: 012675 module_start_adv_discovery_by_command: -0x3a52 012676 fetch 1 ,mem_module_state -0x3a53 012677 isolate1 moudle_state_bt_bit ,pdata -0x3a54 012678 nbranch moudle_start_adv_by_command ,true -0x3a55 012679 fetcht 1 ,mem_module_bluetooth_stauts_by_command -0x3a56 012680 and temp ,0x03 ,pdata -0x3a57 012681 store 1 ,mem_scan_mode -: 012682 moudle_start_adv_by_command: -0x3a58 012683 fetch 1 ,mem_module_state -0x3a59 012684 isolate1 moudle_state_ble_bit ,pdata -0x3a5a 012685 nrtn true -0x3a5b 012686 fetcht 1 ,mem_module_bluetooth_stauts_by_command -0x3a5c 012687 isolate1 2 ,temp -0x3a5d 012688 branch app_ble_start_adv ,true -0x3a5e 012689 branch app_ble_stop_adv -: 012693 module_hci_cmd_set_bt_name: -0x3a5f 012694 fetch 1 ,mem_module_uart_len -0x3a60 012695 sub pdata ,67 ,null -0x3a61 012696 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3a62 012697 store 1 ,mem_local_name_length -0x3a63 012698 arg 8 ,loopcnt -0x3a64 012699 call memset0 -0x3a65 012700 fetch 1 ,mem_module_uart_len -0x3a66 012701 copy pdata ,loopcnt -0x3a67 012702 copy rega ,contru -0x3a68 012703 arg mem_local_name ,contw -0x3a69 012704 call uart_copy_rx_bytes_fast -0x3a6a 012705 branch module_hci_event_receive_valid_cmd -: 012709 module_hci_cmd_set_le_name: -0x3a6b 012710 fetch 1 ,mem_module_uart_len -0x3a6c 012711 sub pdata ,29 ,null -0x3a6d 012712 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3a6e 012713 store 1 ,mem_le_name_len -0x3a6f 012714 copy pdata ,loopcnt -0x3a70 012715 copy rega ,contru -0x3a71 012716 arg mem_le_name ,contw -0x3a72 012717 call uart_copy_rx_bytes_fast -0x3a73 012718 call le_modified_name -0x3a74 012719 branch module_hci_event_receive_valid_cmd -: 012723 module_hci_cmd_receive_spp_data: -0x3a75 012724 fetch 1 ,mem_ui_state_map -0x3a76 012725 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd -0x3a77 012726 call app_check_sniff -0x3a78 012727 branch module_hci_cmd_spp_exit_sniff ,true -0x3a79 012728 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a7a 012730 call module_spp_clear_last_transmite_clock -0x3a7b 012731 fetch 1 ,mem_remote_credits -0x3a7c 012732 rtn blank -0x3a7d 012733 fetch 2 ,mem_nl_rx_len_all -0x3a7e 012734 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all -0x3a7f 012735 fetch 1 ,mem_module_uart_len -0x3a80 012736 store 2 ,mem_nl_rx_len_all -0x3a81 012738 copy rega ,contru -0x3a82 012741 copy contru ,pdata -0x3a83 012742 store 2 ,mem_nl_rx_data_src -: 012743 module_hci_cmd_pass_init_ng_rx_len_all: -0x3a84 012744 call module_hci_cmd_get_current_packet_len_and_remain_len -0x3a85 012745 branch spp_tx_rfcomm_packet -: 012747 module_hci_cmd_spp_exit_sniff: -0x3a86 012748 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a87 012749 branch module_exit_sniff -: 012751 module_hci_cmd_get_current_packet_len_and_remain_len: -0x3a88 012752 call module_hci_cmd_get_current_patcket_len -0x3a89 012753 fetch 2 ,mem_nl_rx_len_all -0x3a8a 012754 fetcht 2 ,mem_current_packet_length -0x3a8b 012755 isub temp ,pdata -0x3a8c 012756 store 2 ,mem_nl_rx_len_all -0x3a8d 012757 rtn -: 012759 module_hci_cmd_get_current_patcket_len: -0x3a8e 012760 fetch 2 ,mem_nl_rx_len_all -0x3a8f 012761 arg dm_refcom_buff_len ,temp -0x3a90 012762 call not_greater_than -0x3a91 012763 fetcht 2 ,mem_rfcomm_max_frame_size -0x3a92 012764 call not_greater_than -0x3a93 012765 fetcht 2 ,mem_pn_max_frame_size -0x3a94 012766 call not_greater_than -0x3a95 012767 store 2 ,mem_current_packet_length -0x3a96 012768 rtn -: 012770 module_hci_command_tx_spp_tx_complete: -0x3a97 012771 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3a98 012772 jam hci_cmd_spp_data_req ,mem_module_uart_opcode -0x3a99 012773 branch module_hci_event_receive_valid_cmd -: 012777 module_hci_cmd_receive_le_data: -0x3a9a 012778 fetch 2 ,mem_ui_state_map -0x3a9b 012779 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -0x3a9c 012780 call module_check_ble_encrypt_state -0x3a9d 012781 branch module_hci_event_receive_invalid_cmd ,user -0x3a9e 012782 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a9f 012783 fetch 1 ,mem_module_flag -0x3aa0 012784 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish -0x3aa1 012785 fetch 1 ,mem_module_hci_notify_len -0x3aa2 012786 nrtn blank -0x3aa3 012787 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3aa4 012788 ifetch 2 ,contru -0x3aa5 012789 store 2 ,mem_module_hci_notify_handle -0x3aa6 012790 copy contru ,pdata -0x3aa7 012791 store 2 ,mem_module_hci_nofiy_addr -0x3aa8 012792 fetch 1 ,mem_module_uart_len -0x3aa9 012793 pincrease -2 -0x3aaa 012794 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3aab 012795 branch module_hci_event_receive_invalid_cmd ,zero -0x3aac 012796 store 1 ,mem_module_hci_notify_len -0x3aad 012797 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3aae 012798 call le_set_config_more_data -0x3aaf 012799 call module_hci_cmd_transmit_le_notify -0x3ab0 012800 call module_hci_cmd_transmit_le_notify -0x3ab1 012801 call module_hci_cmd_transmit_le_notify -0x3ab2 012802 fetch 1 ,mem_module_flag -0x3ab3 012803 rtnbit0 module_flag_ble_data_finish -: 012804 module_hci_cmd_receive_le_data_finish: -0x3ab4 012805 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3ab5 012806 call module_clear_le_tx_data_flag -0x3ab6 012807 branch module_hci_event_receive_valid_cmd -: 012809 module_hci_cmd_transmit_le_notify: -0x3ab7 012810 fetch 1 ,mem_module_hci_notify_len -0x3ab8 012811 rtn blank -0x3ab9 012812 call le_fifo_check_nearly_full -0x3aba 012813 nrtn blank -0x3abb 012814 call module_get_le_remote_mtu -0x3abc 012815 bpatch patch1c_1 ,mem_patch1c -0x3abd 012816 add temp ,-3 ,pdata -0x3abe 012817 fetcht 1 ,mem_module_hci_notify_len -0x3abf 012818 call not_greater_than -0x3ac0 012819 copy pdata ,rega -0x3ac1 012820 copy temp ,pdata -0x3ac2 012821 isub rega ,pdata -0x3ac3 012822 store 1 ,mem_module_hci_notify_len -0x3ac4 012823 fetcht 2 ,mem_module_hci_notify_handle -0x3ac5 012824 call le_att_malloc_tx_notify -0x3ac6 012825 fetch 2 ,mem_module_hci_nofiy_addr -0x3ac7 012826 copy pdata ,contru -0x3ac8 012827 copy rega ,loopcnt -0x3ac9 012828 call uart_copy_rx_bytes_fast -0x3aca 012829 copy contru ,pdata -0x3acb 012830 store 2 ,mem_module_hci_nofiy_addr -0x3acc 012831 fetch 1 ,mem_module_hci_notify_len -0x3acd 012832 nrtn blank -0x3ace 012833 branch module_set_le_tx_data_flag -: 012837 module_get_le_remote_mtu: -0x3acf 012838 arg 0x17 ,temp -0x3ad0 012839 fetch 1 ,mem_module_flag -0x3ad1 012840 rtnbit1 module_flag_ble_send_mtu23 -0x3ad2 012841 fetcht 2 ,mem_le_remote_mtu -0x3ad3 012842 rtn -: 012844 module_check_ble_encrypt_state: -0x3ad4 012845 fetch 1 ,mem_module_flag -0x3ad5 012846 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state -0x3ad6 012847 branch disable_user -: 012851 module_hci_cmd_inquire_status: -0x3ad7 012852 branch module_hci_event_status_res -: 012856 module_hci_cmd_set_pairing_mode: -0x3ad8 012857 copy rega ,contru -0x3ad9 012858 ifetch 1 ,contru -0x3ada 012859 beq pairing_pincode ,module_hci_pairing_pincode_mode -0x3adb 012860 beq pairing_justwork ,module_hci_pairing_just_work_mode -0x3adc 012861 beq pairing_passkey ,module_hci_pairing_passkey -0x3add 012862 beq pairing_confirm ,module_hci_pairing_numeric_comparison -0x3ade 012863 branch module_hci_event_receive_invalid_cmd -: 012864 module_hci_pairing_pincode_mode: -0x3adf 012865 call ssp_disable -0x3ae0 012866 jam 0 ,mem_ssp_enable -0x3ae1 012867 branch module_hci_event_receive_valid_cmd -: 012868 module_hci_pairing_just_work_mode: -0x3ae2 012869 setarg ssp_mode_just_work_io_cap_data -: 012870 module_hci_sspairing_mode: -0x3ae3 012871 store 3 ,mem_sp_iocap_local -0x3ae4 012872 store 1 ,mem_ssp_mode_flag -0x3ae5 012873 call ssp_enable -0x3ae6 012874 jam 1 ,mem_ssp_enable -0x3ae7 012875 branch module_hci_event_receive_valid_cmd -: 012876 module_hci_pairing_passkey: -0x3ae8 012877 setarg ssp_mode_passkey_io_cap_data -0x3ae9 012878 branch module_hci_sspairing_mode -: 012880 module_hci_pairing_numeric_comparison: -0x3aea 012881 setarg ssp_mode_ssp_pin_io_cap_data -0x3aeb 012882 branch module_hci_sspairing_mode -: 012885 module_hci_cmd_set_pincode: -0x3aec 012886 fetch 1 ,mem_module_uart_len -0x3aed 012887 sub pdata ,16 ,null -0x3aee 012888 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3aef 012889 store 1 ,mem_pin_length -0x3af0 012890 copy pdata ,loopcnt -0x3af1 012891 arg mem_pin ,contw -0x3af2 012892 call uart_copy_rx_bytes -0x3af3 012893 branch module_hci_event_receive_valid_cmd -: 012897 module_hci_cmd_set_uart_control_mode: -0x3af4 012898 copy rega ,contru -0x3af5 012899 ifetch 1 ,contru -0x3af6 012900 hfetcht 1 ,core_uart_ctrl -0x3af7 012901 nsetflag blank ,4 ,temp -0x3af8 012902 hstoret 1 ,core_uart_ctrl -0x3af9 012903 branch module_hci_event_receive_valid_cmd -: 012907 module_hci_cmd_set_uart_baud: -0x3afa 012908 fetch 1 ,mem_module_uart_len -0x3afb 012909 copy pdata ,loopcnt -0x3afc 012910 copy rega ,contru -0x3afd 012911 call string2dec_from_uart -0x3afe 012912 setarg uart_clk_24 -0x3aff 012913 idiv temp -0x3b00 012914 call wait_div_end -0x3b01 012915 quotient pdata -: 012916 module_hci_cmd_set_uart_baud_ok: -0x3b02 012917 store uart_baud_len ,mem_baud -0x3b03 012918 call module_hci_event_receive_valid_cmd -0x3b04 012919 call wait_uarttx -0x3b05 012920 branch uart_set_baud_by_mem -: 012924 module_hci_cmd_version_request: -0x3b06 012925 arg 2 ,rega -0x3b07 012926 arg mem_soft_version_num ,regb -0x3b08 012927 arg 0 ,temp -0x3b09 012928 branch module_hci_event_set_cmd -: 012929 module_hci_event_set_cmd_send_response: -0x3b0a 012930 store 2 ,mem_event_cmd_response_content -0x3b0b 012931 arg mem_event_cmd_response_content ,regb -0x3b0c 012932 arg 0 ,temp -0x3b0d 012933 branch module_hci_event_set_cmd -: 012937 module_hci_cmd_bt_disconnect: -0x3b0e 012938 fetch 2 ,mem_ui_state_map -0x3b0f 012939 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd -: 012940 module_hci_cmd_bt_disconnect_doing: -0x3b10 012941 call module_hci_event_receive_valid_cmd -0x3b11 012942 branch app_bt_disconnect -: 012946 module_hci_cmd_ble_disconnect: -0x3b12 012947 fetch 2 ,mem_ui_state_map -0x3b13 012948 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -: 012949 module_hci_cmd_ble_disconnect_doing: -0x3b14 012950 call module_hci_event_receive_valid_cmd -0x3b15 012951 branch app_ble_disconnect -: 012957 module_hci_cmd_set_nvram: -0x3b16 012958 fetch 1 ,mem_module_uart_len -0x3b17 012959 copy pdata ,loopcnt -0x3b18 012960 copy rega ,contru -0x3b19 012961 fetch 2 ,mem_nv_data_ptr -0x3b1a 012962 icopy contw -0x3b1b 012963 call uart_copy_rx_bytes_fast -0x3b1c 012964 branch module_hci_event_receive_valid_cmd -: 012968 module_hci_cmd_confirm_gkey: -0x3b1d 012969 fetch 1 ,mem_ui_state_map -0x3b1e 012970 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd -0x3b1f 012971 ifetch 1 ,contru -0x3b20 012972 fetcht 1 ,mem_flag_mode_ssp_pin -0x3b21 012973 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp -0x3b22 012974 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp -0x3b23 012975 storet 1 ,mem_flag_mode_ssp_pin -0x3b24 012977 call module_hci_event_receive_valid_cmd -0x3b25 012979 fetch 1 ,mem_flag_mode_ssp_pin -0x3b26 012980 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 -0x3b27 012981 rtn -: 012983 dhkey_not_accept: -0x3b28 012984 jam 0 ,mem_flag_mode_ssp_pin -0x3b29 012985 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp -0x3b2a 012986 branch ui_ipc_send_cmd -: 012989 module_hci_cmd_spp_number_comparison_result_is1: -0x3b2b 012990 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed -0x3b2c 012991 branch dhkey_not_accept -: 012995 module_hci_cmd_set_credit_given: -0x3b2d 012996 fetch 1 ,mem_ui_state_map -0x3b2e 012997 rtnbit0 ui_state_bt_spp_conn -0x3b2f 012998 fetch 1 ,mem_credit_flag -0x3b30 012999 rtneq credit_disable -0x3b31 013000 ifetch 1 ,contru -0x3b32 013001 fetcht 1 ,mem_credit_given -0x3b33 013002 iadd temp ,temp -0x3b34 013003 storet 1 ,mem_credit_given -0x3b35 013004 rtn -: 013008 module_hci_cmd_auto_adv: -0x3b36 013009 arg 0x40 ,loopcnt -0x3b37 013010 arg mem_le_adv_data_len ,contw -0x3b38 013011 call clear_mem -0x3b39 013012 setarg 0 -0x3b3a 013013 store 1 ,mem_regb -0x3b3b 013014 copy rega ,contru -: 013015 module_hci_cmd_auto_adv_loop: -0x3b3c 013016 copy contru ,pdata -0x3b3d 013017 store 2 ,mem_regc -0x3b3e 013018 call module_hci_cmd_auto_adv_adv_analys -0x3b3f 013020 fetch 1 ,mem_regb -0x3b40 013021 fetcht 1 ,mem_temp -0x3b41 013022 increase 1 ,temp -0x3b42 013023 iadd temp ,pdata -0x3b43 013024 store 1 ,mem_regb -0x3b44 013026 sub pdata ,31 ,null -0x3b45 013027 nbranch module_hci_cmd_auto_adv_store_scan ,positive -: 013028 module_hci_cmd_auto_adv_store_adv: -0x3b46 013029 fetcht 1 ,mem_le_adv_data_len -0x3b47 013030 setarg mem_le_adv_data -0x3b48 013031 iadd temp ,pdata -0x3b49 013032 store 2 ,mem_contw -0x3b4a 013033 fetcht 1 ,mem_temp -0x3b4b 013034 increase 1 ,temp -0x3b4c 013035 fetch 1 ,mem_le_adv_data_len -0x3b4d 013036 iadd temp ,pdata -0x3b4e 013037 store 1 ,mem_le_adv_data_len -0x3b4f 013038 branch module_hci_cmd_auto_adv_store_common -: 013039 module_hci_cmd_auto_adv_store_scan: -0x3b50 013040 fetcht 1 ,mem_le_scan_data_len -0x3b51 013041 setarg mem_le_scan_data -0x3b52 013042 iadd temp ,pdata -0x3b53 013043 store 2 ,mem_contw -0x3b54 013044 fetcht 1 ,mem_temp -0x3b55 013045 increase 1 ,temp -0x3b56 013046 fetch 1 ,mem_le_scan_data_len -0x3b57 013047 iadd temp ,pdata -0x3b58 013048 store 1 ,mem_le_scan_data_len -: 013049 module_hci_cmd_auto_adv_store_common: -0x3b59 013050 fetch 2 ,mem_contw -0x3b5a 013051 copy pdata ,contw -0x3b5b 013052 fetch 2 ,mem_regc -0x3b5c 013053 copy pdata ,contru -0x3b5d 013055 copy temp ,loopcnt -0x3b5e 013056 call uart_copy_rx_bytes_fast -0x3b5f 013058 fetch 1 ,mem_module_uart_len -0x3b60 013059 fetcht 1 ,mem_regb -0x3b61 013060 isub temp ,null -0x3b62 013061 nbranch module_hci_cmd_auto_adv_loop ,zero -0x3b63 013062 branch module_hci_event_receive_valid_cmd -: 013065 module_hci_cmd_auto_adv_adv_analys: -0x3b64 013066 ifetch 1 ,contru -0x3b65 013067 store 1 ,mem_temp -0x3b66 013068 ifetch 1 ,contru -0x3b67 013069 store 1 ,mem_rega -0x3b68 013070 rtn -: 013074 module_hci_cmd_power_request: -0x3b69 013075 arg 0 ,temp -0x3b6a 013076 arg 2 ,rega -0x3b6b 013077 fetch 2 ,mem_module_vdd_quotient -0x3b6c 013078 store 2 ,mem_event_cmd_response_content -0x3b6d 013079 arg mem_event_cmd_response_content ,regb -0x3b6e 013080 branch module_hci_event_set_cmd -: 013084 module_hci_cmd_power_set: -0x3b6f 013085 fetch 1 ,mem_module_uart_len -0x3b70 013086 bne 1 ,module_hci_event_receive_invalid_cmd -0x3b71 013087 ifetch 1 ,contru -0x3b72 013088 store 1 ,mem_module_read_vdd_flag -0x3b73 013089 setarg 0x00 -0x3b74 013090 store 2 ,mem_module_vdd_quotient -0x3b75 013091 branch module_hci_event_receive_valid_cmd -: 013095 module_hci_cmd_passkey_entry: -0x3b76 013096 ifetch 4 ,contru -0x3b77 013097 store 4 ,mem_pin -0x3b78 013098 jam 4 ,mem_pin_length -0x3b79 013099 jam 0 ,mem_authentication_passkey_times -0x3b7a 013100 call module_hci_event_receive_valid_cmd -0x3b7b 013101 branch authentication_passkey -: 013105 module_hci_cmd_set_gpio: -0x3b7c 013106 fetch 1 ,mem_module_uart_len -0x3b7d 013107 bne 3 ,module_hci_event_receive_invalid_cmd -0x3b7e 013108 ifetch 1 ,contru -0x3b7f 013109 beq hci_cmd_config_gpio_input ,module_set_gpio_input -0x3b80 013110 beq hci_cmd_config_gpio_output ,module_set_gpio_output -0x3b81 013111 branch module_hci_event_receive_invalid_cmd -: 013113 module_set_gpio_input: -0x3b82 013114 ifetcht 1 ,contru -0x3b83 013115 ifetch 1 ,contru -0x3b84 013116 beq gpio_input_high_impedance ,module_set_gpio_high_impedance -0x3b85 013117 nsetflag blank ,7 ,temp -0x3b86 013118 call gpio_config_input -0x3b87 013119 branch module_hci_event_receive_valid_cmd -: 013121 module_set_gpio_high_impedance: -0x3b88 013122 call gpio_set_high_impedance -0x3b89 013123 branch module_hci_event_receive_valid_cmd -: 013125 module_set_gpio_output: -0x3b8a 013126 ifetcht 1 ,contru -0x3b8b 013127 call gpio_config_output0 -0x3b8c 013128 ifetch 1 ,contru -0x3b8d 013129 isolate1 0 ,pdata -0x3b8e 013130 call gpio_out_flag -0x3b8f 013131 branch module_hci_event_receive_valid_cmd -: 013135 module_hci_cmd_read_gpio: -0x3b90 013136 fetch 1 ,mem_module_uart_len -0x3b91 013137 bne 1 ,module_hci_event_receive_invalid_cmd -0x3b92 013138 ifetcht 1 ,contru -0x3b93 013139 call gpio_get_bit -0x3b94 013140 setarg 0x0 -0x3b95 013141 nsetflag true ,0 ,pdata -0x3b96 013142 arg 1 ,rega -0x3b97 013143 branch module_hci_event_set_cmd_send_response -: 013147 module_hci_cmd_le_set_pairing_mode: -0x3b98 013148 copy rega ,contru -0x3b99 013149 ifetch 1 ,contru -0x3b9a 013150 copy pdata ,temp -0x3b9b 013151 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork -0x3b9c 013152 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric -0x3b9d 013153 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey -0x3b9e 013154 store 1 ,mem_le_pairing_mode -0x3b9f 013155 beq le_pairing_mode_none ,module_le_set_no_pairing -0x3ba0 013156 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work -0x3ba1 013157 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey -0x3ba2 013158 branch module_hci_event_receive_invalid_cmd -: 013160 module_le_set_pairing_mode_secure_justwork: -0x3ba3 013161 fetch 1 ,mem_le_secure_connect_enable -0x3ba4 013162 branch module_hci_event_receive_invalid_cmd ,blank -0x3ba5 013163 storet 1 ,mem_le_pairing_mode -0x3ba6 013164 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3ba7 013165 branch module_le_set_noinputnooutput -: 013166 module_le_set_pairing_mode_secure_numeric: -0x3ba8 013167 fetch 1 ,mem_le_secure_connect_enable -0x3ba9 013168 branch module_hci_event_receive_invalid_cmd ,blank -0x3baa 013169 storet 1 ,mem_le_pairing_mode -0x3bab 013170 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3bac 013171 jam flag_iocap_displayyesno ,mem_le_pres_iocap -0x3bad 013172 branch module_hci_event_receive_valid_cmd -: 013173 module_le_set_pairing_mode_secure_passkey: -0x3bae 013174 fetch 1 ,mem_le_secure_connect_enable -0x3baf 013175 branch module_hci_event_receive_invalid_cmd ,blank -0x3bb0 013176 storet 1 ,mem_le_pairing_mode -0x3bb1 013177 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3bb2 013178 branch module_le_set_displayonly -: 013179 module_le_set_no_pairing: -0x3bb3 013180 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth -: 013181 module_le_set_noinputnooutput: -0x3bb4 013182 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap -0x3bb5 013183 branch module_hci_event_receive_valid_cmd -: 013184 module_le_set_pairing_mode_lagacy_just_work: -0x3bb6 013185 jam flag_le_bonding_mitm ,mem_le_pres_auth -0x3bb7 013186 branch module_le_set_noinputnooutput -: 013187 module_le_set_pairing_mode_lagacy_passkey: -0x3bb8 013188 jam flag_le_bonding_mitm ,mem_le_pres_auth -: 013189 module_le_set_displayonly: -0x3bb9 013190 jam flag_iocap_displayonly ,mem_le_pres_iocap -0x3bba 013191 branch module_hci_event_receive_valid_cmd -: 013195 module_hci_cmd_le_set_adv_data: -0x3bbb 013196 fetch 1 ,mem_module_uart_len -0x3bbc 013197 sub pdata ,31 ,null -0x3bbd 013198 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3bbe 013199 store 1 ,mem_le_adv_data_len -0x3bbf 013200 copy pdata ,loopcnt -0x3bc0 013201 copy rega ,contru -0x3bc1 013202 arg mem_le_adv_data ,contw -0x3bc2 013203 call uart_copy_rx_bytes_fast -0x3bc3 013204 branch module_hci_event_receive_valid_cmd -: 013208 module_hci_cmd_le_set_scan_data: -0x3bc4 013209 fetch 1 ,mem_module_uart_len -0x3bc5 013210 sub pdata ,31 ,null -0x3bc6 013211 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3bc7 013212 store 1 ,mem_le_scan_data_len -0x3bc8 013213 copy pdata ,loopcnt -0x3bc9 013214 copy rega ,contru -0x3bca 013215 arg mem_le_scan_data ,contw -0x3bcb 013216 call uart_copy_rx_bytes_fast -0x3bcc 013217 branch module_hci_event_receive_valid_cmd -: 013221 module_hci_cmd_le_send_conn_update_req: -0x3bcd 013222 fetch 2 ,mem_ui_state_map -0x3bce 013223 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -0x3bcf 013224 fetch 1 ,mem_module_uart_len -0x3bd0 013225 bne 0x08 ,module_hci_event_receive_invalid_cmd -0x3bd1 013226 copy rega ,contru -0x3bd2 013227 ifetch 8 ,contru -0x3bd3 013228 store 8 ,mem_le_interval_min -0x3bd4 013229 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x3bd5 013230 call ui_ipc_send_cmd -0x3bd6 013231 branch module_hci_event_receive_valid_cmd -: 013235 module_hci_cmd_set_le_adv_parameter: -0x3bd7 013236 ifetch 2 ,contru -0x3bd8 013237 store 2 ,mem_le_adv_interval -0x3bd9 013238 branch module_hci_event_receive_valid_cmd -: 013242 module_hci_cmd_le_start_pairing: -0x3bda 013243 fetch 1 ,mem_le_pairing_mode -0x3bdb 013244 branch module_hci_event_receive_invalid_cmd ,blank -0x3bdc 013245 fetch 1 ,mem_le_pairing_state -0x3bdd 013246 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd -0x3bde 013247 fetch 1 ,mem_le_enc_state -0x3bdf 013248 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd -0x3be0 013249 call check_51cmd_le_smp_sec_req -0x3be1 013250 branch module_hci_event_receive_valid_cmd -: 013254 module_hci_cmd_set_wake_gpio: -0x3be2 013255 fetch 1 ,mem_module_uart_len -0x3be3 013256 bne 5 ,module_hci_event_receive_invalid_cmd -0x3be4 013257 ifetch 1 ,contru -0x3be5 013258 store 1 ,mem_module_mcu_wake_pin -0x3be6 013259 ifetch 4 ,contru -0x3be7 013260 store 4 ,mem_module_mcu_wake_delay_us -0x3be8 013261 fetcht 1 ,mem_module_mcu_wake_pin -0x3be9 013262 call gpio_config_output -0x3bea 013263 call module_set_mcu_wake_pin_low -0x3beb 013264 branch module_hci_event_receive_valid_cmd -: 013268 module_hci_cmd_set_tx_power: -0x3bec 013269 fetch 1 ,mem_module_uart_len -0x3bed 013270 bne 0x01 ,module_hci_event_receive_invalid_cmd -0x3bee 013271 ifetch 1 ,contru -0x3bef 013272 store 1 ,mem_tx_power -0x3bf0 013273 branch module_hci_event_receive_valid_cmd -: 013277 module_hci_cmd_le_confirm_gkey: -0x3bf1 013278 ifetch 1 ,contru -0x3bf2 013279 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail -0x3bf3 013280 fetch 1 ,mem_le_secure_connect_state -0x3bf4 013281 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok -0x3bf5 013282 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok -0x3bf6 013283 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok -0x3bf7 013284 branch module_hci_event_receive_invalid_cmd -: 013285 module_hci_cmd_le_confirm_gkey_ok: -0x3bf8 013286 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag -0x3bf9 013287 branch module_hci_event_receive_valid_cmd -: 013289 module_hci_cmd_le_confirm_gkey_fail: -0x3bfa 013290 call le_send_pairing_confirm_value_failed -0x3bfb 013291 branch module_hci_event_receive_valid_cmd -: 013295 module_hci_cmd_set_reject_justwork_flag: -0x3bfc 013296 fetch 1 ,mem_module_uart_len -0x3bfd 013297 bne 0x01 ,module_hci_event_receive_invalid_cmd -0x3bfe 013298 call module_hci_event_receive_valid_cmd -0x3bff 013299 ifetch 1 ,contru -0x3c00 013300 branch classic_bt_clr_reject_justwork_flag ,blank -0x3c01 013301 branch classic_bt_set_reject_justwork_flag -: 013305 module_hci_cmd_reset_chip: -0x3c02 013306 call module_hci_event_receive_valid_cmd -0x3c03 013307 call wait_uarttx -0x3c04 013308 jam 0x01 ,core_reset -0x3c05 013309 branch loop -: 013313 module_hci_cmd_le_set_fixed_passkey: -0x3c06 013314 fetch 1 ,mem_module_uart_len -0x3c07 013315 beq 0 ,module_hci_event_receive_invalid_cmd -0x3c08 013316 ifetch 1 ,contru -0x3c09 013317 branch module_hci_cmd_le_set_random_passkey ,blank -0x3c0a 013318 fetch 1 ,mem_module_uart_len -0x3c0b 013319 bne 5 ,module_hci_event_receive_invalid_cmd -0x3c0c 013320 ifetch 4 ,contru -0x3c0d 013321 arg 1000000 ,temp -0x3c0e 013322 isub temp ,null -0x3c0f 013323 branch module_hci_event_receive_invalid_cmd ,positive -0x3c10 013324 store 4 ,mem_le_tk -0x3c11 013325 call le_set_config_fixed_tk -0x3c12 013326 branch module_hci_event_receive_valid_cmd -: 013328 module_hci_cmd_le_set_random_passkey: -0x3c13 013329 call le_clr_config_fixed_tk -0x3c14 013330 branch module_hci_event_receive_valid_cmd -: 013334 module_hci_test_cmde_close_lpm: -0x3c15 013335 jam 0 ,mem_lpm_mode -0x3c16 013336 branch module_hci_event_receive_valid_cmd -: 013341 module_hci_event_receive_invalid_cmd: -0x3c17 013342 arg 1 ,temp -0x3c18 013343 arg 0 ,rega -0x3c19 013344 branch module_hci_event_set_cmd -: 013347 module_hci_event_receive_valid_cmd: -0x3c1a 013348 arg 0 ,temp -0x3c1b 013349 arg 0 ,rega -0x3c1c 013350 branch module_hci_event_set_cmd -: 013354 module_hci_event_spp_connect: -0x3c1d 013355 jam hci_event_spp_conn_rep ,mem_module_uart_opcode -0x3c1e 013356 branch module_hci_event_enter_standby_mode_len0 -: 013360 module_hci_event_le_connect: -0x3c1f 013361 jam hci_event_le_conn_rep ,mem_module_uart_opcode -0x3c20 013362 branch module_hci_event_enter_standby_mode_len0 -: 013366 module_hci_event_spp_disconnect: -0x3c21 013367 jam hci_event_spp_dis_rep ,mem_module_uart_opcode -0x3c22 013368 branch module_hci_event_enter_standby_mode_len0 -: 013372 module_hci_event_le_disconnect: -0x3c23 013373 jam hci_event_le_dis_rep ,mem_module_uart_opcode -0x3c24 013374 branch module_hci_event_enter_standby_mode_len0 -: 013382 module_hci_event_set_cmd: -0x3c25 013383 fetch 1 ,mem_module_uart_opcode -0x3c26 013384 copy pdata ,regc -0x3c27 013385 jam hci_event_cmd_res ,mem_module_uart_opcode -0x3c28 013386 setarg 2 -0x3c29 013387 iadd rega ,pdata -0x3c2a 013388 call module_hci_prepare_tx -0x3c2b 013389 copy regc ,pdata -0x3c2c 013390 istore 1 ,contwu -0x3c2d 013391 istoret 1 ,contwu -0x3c2e 013392 copy rega ,loopcnt -0x3c2f 013393 copy regb ,contr -0x3c30 013394 call uart_copy_tx_bytes -0x3c31 013395 branch uartd_send -: 013399 module_hci_event_receive_spp_data: -0x3c32 013401 call module_spp_clear_last_transmite_clock -0x3c33 013402 jam hci_event_spp_data_rep ,mem_module_uart_opcode -0x3c34 013403 fetch 1 ,mem_current_length -0x3c35 013404 rtn blank -0x3c36 013405 call module_hci_prepare_tx -0x3c37 013406 fetch 1 ,mem_current_length -0x3c38 013407 copy pdata ,loopcnt -0x3c39 013408 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x3c3a 013409 copy pdata ,contr -0x3c3b 013410 call uart_copy_tx_bytes_fast -0x3c3c 013411 branch uartd_send -: 013415 module_hci_event_receive_le_data: -0x3c3d 013416 jam hci_event_le_data_rep ,mem_module_uart_opcode -0x3c3e 013417 fetch 1 ,mem_module_le_rx_data_len -0x3c3f 013418 icopy loopcnt -0x3c40 013419 increase 2 ,pdata -0x3c41 013420 call module_hci_prepare_tx -0x3c42 013421 fetch 2 ,mem_module_le_rx_data_handle -0x3c43 013422 istore 2 ,contwu -0x3c44 013423 fetch 2 ,mem_module_le_rx_data_address -0x3c45 013424 icopy contr -0x3c46 013425 call uart_copy_tx_bytes_fast -0x3c47 013426 branch uartd_send -: 013430 module_hci_event_enter_standby_mode: -0x3c48 013431 jam hci_event_standby_rep ,mem_module_uart_opcode -: 013432 module_hci_event_enter_standby_mode_len0: -0x3c49 013433 setarg 0 -0x3c4a 013434 call module_hci_prepare_tx -0x3c4b 013435 branch uartd_send -: 013439 module_hci_event_status_res: -0x3c4c 013440 jam hci_event_status_res ,mem_module_uart_opcode -0x3c4d 013441 setarg 1 -0x3c4e 013442 call module_hci_prepare_tx -0x3c4f 013444 call module_hci_read_bt_status -0x3c50 013446 fetch 2 ,mem_ui_state_map -0x3c51 013447 arg ui_state_bt_hid_conn ,queue -0x3c52 013448 qisolate1 pdata -0x3c53 013449 setflag true ,3 ,temp -0x3c54 013451 arg ui_state_ble_connected ,queue -0x3c55 013452 qisolate1 pdata -0x3c56 013453 setflag true ,5 ,temp -0x3c57 013455 fetch 1 ,mem_ui_state_map -0x3c58 013456 arg ui_state_bt_spp_conn ,queue -0x3c59 013457 qisolate1 pdata -0x3c5a 013458 setflag true ,4 ,temp -0x3c5b 013460 istoret 1 ,contwu -0x3c5c 013461 branch uartd_send -: 013465 module_hci_read_bt_status: -0x3c5d 013466 arg 0 ,temp -0x3c5e 013467 fetch 1 ,mem_scan_mode -0x3c5f 013468 arg inq_scan_mode ,queue -0x3c60 013469 qisolate1 pdata -0x3c61 013470 setflag true ,0 ,temp -0x3c62 013471 arg page_scan_mode ,queue -0x3c63 013472 qisolate1 pdata -0x3c64 013473 setflag true ,1 ,temp -0x3c65 013475 fetch 1 ,mem_le_adv_enable -0x3c66 013476 arg 0 ,queue -0x3c67 013477 qisolate1 pdata -0x3c68 013478 setflag true ,2 ,temp -0x3c69 013479 rtn -: 013483 module_hci_event_store_device: -0x3c6a 013484 jam hci_event_nvram_rep ,mem_module_uart_opcode -0x3c6b 013485 fetch 1 ,mem_nv_data_number -0x3c6c 013486 mul32 pdata ,34 ,pdata -0x3c6d 013487 icopy loopcnt -0x3c6e 013488 call module_hci_prepare_tx -0x3c6f 013489 fetch 2 ,mem_nv_data_ptr -0x3c70 013490 icopy contr -0x3c71 013491 call uart_copy_tx_bytes_fast -0x3c72 013492 branch uartd_send -: 013496 module_hci_event_gkey_generate: -0x3c73 013497 jam hci_event_gkey ,mem_module_uart_opcode -0x3c74 013498 setarg 4 -0x3c75 013499 call module_hci_prepare_tx -0x3c76 013500 fetch 4 ,mem_gkey -0x3c77 013501 istore 4 ,contwu -0x3c78 013502 branch uartd_send -: 013506 module_hci_event_invalid_packet: -0x3c79 013507 jam hci_event_invalid_packet ,mem_module_uart_opcode -0x3c7a 013508 hfetch 2 ,core_uart_rxitems -0x3c7b 013509 arg 0xff ,temp -0x3c7c 013510 call not_greater_than -0x3c7d 013511 copy pdata ,loopcnt -0x3c7e 013512 call module_hci_prepare_tx -0x3c7f 013513 call uartd_prepare_rx -0x3c80 013514 call uart_copy_rx2tx -0x3c81 013515 branch uartd_send -: 013519 module_hci_event_passkey_entry_mode: -0x3c82 013520 jam hci_event_get_passkey ,mem_module_uart_opcode -0x3c83 013521 branch module_hci_event_enter_standby_mode_len0 -: 013525 module_hci_event_le_tk: -0x3c84 013526 jam hci_event_le_tk ,mem_module_uart_opcode -0x3c85 013527 setarg 4 -0x3c86 013528 call module_hci_prepare_tx -0x3c87 013529 fetch 4 ,mem_le_tk -0x3c88 013530 istore 4 ,contwu -0x3c89 013531 branch uartd_send -: 013535 module_hci_event_le_pairing_fail: -0x3c8a 013536 arg flag_ble_pairing_fail ,rega -0x3c8b 013537 branch module_hci_event_pairing_completed -: 013539 module_hci_event_le_pairing_success: -0x3c8c 013540 arg flag_ble_pairing_success ,rega -0x3c8d 013541 branch module_hci_event_pairing_completed -: 013543 module_hci_event_bt_pairing_fail: -0x3c8e 013544 arg flag_bt_pairing_fail ,rega -0x3c8f 013545 branch module_hci_event_pairing_completed -: 013547 module_hci_event_bt_pairing_success: -0x3c90 013548 arg flag_bt_pairing_success ,rega -: 013550 module_hci_event_pairing_completed: -0x3c91 013551 jam 0 ,mem_flag_mode_ssp_pin -0x3c92 013552 jam hci_event_le_pairing_state ,mem_module_uart_opcode -0x3c93 013553 setarg 2 -0x3c94 013554 call module_hci_prepare_tx -0x3c95 013555 copy rega ,pdata -0x3c96 013556 istore 2 ,contwu -0x3c97 013557 branch uartd_send -: 013561 module_hci_event_pause_enc: -0x3c98 013562 arg flag_event_pause_enc ,regc -0x3c99 013563 branch module_hci_event_enc -: 013565 module_hci_event_start_enc: -0x3c9a 013566 arg flag_event_start_enc ,regc -: 013568 module_hci_event_enc: -0x3c9b 013569 jam hci_event_le_encryption_state ,mem_module_uart_opcode -0x3c9c 013570 setarg 1 -0x3c9d 013571 call module_hci_prepare_tx -0x3c9e 013572 copy regc ,pdata -0x3c9f 013573 istore 1 ,contwu -0x3ca0 013574 branch uartd_send -: 013578 module_hci_event_le_gkey: -0x3ca1 013579 jam hci_event_le_gkey ,mem_module_uart_opcode -0x3ca2 013580 setarg 4 -0x3ca3 013581 call module_hci_prepare_tx -0x3ca4 013582 fetch 4 ,mem_gkey -0x3ca5 013583 istore 4 ,contwu -0x3ca6 013584 branch uartd_send -: 013595 module_hci_prepare_tx: -0x3ca7 013596 jam 0x02 ,mem_module_uart_cmd -0x3ca8 013597 store 1 ,mem_module_uart_len -0x3ca9 013598 storet 8 ,mem_temp -0x3caa 013599 bpatch patch1c_2 ,mem_patch1c -0x3cab 013600 call module_set_mcu_wake_pin_high_delay -0x3cac 013601 fetcht 8 ,mem_temp -0x3cad 013602 call uartd_prepare_tx -0x3cae 013603 fetch 3 ,mem_module_uart_cmd -0x3caf 013604 istore 3 ,contwu -0x3cb0 013605 rtn -: 013608 module_set_mcu_wake_pin_high_delay: -0x3cb1 013609 call module_check_mcu_wake_pin_high -0x3cb2 013610 rtn true -: 013611 module_set_mcu_wake_pin_h_delay: -0x3cb3 013612 call module_set_mcu_wake_pin_high -0x3cb4 013613 fetch 4 ,mem_module_mcu_wake_delay_us -0x3cb5 013614 rshift2 pdata ,pdata -0x3cb6 013615 rtn blank -0x3cb7 013616 branch delay -: 013618 module_set_mcu_wake_pin_high: -0x3cb8 013620 fetcht 1 ,mem_module_mcu_wake_pin -0x3cb9 013621 branch gpio_out_active -: 013623 module_check_mcu_wake_pin_high: -0x3cba 013624 fetcht 1 ,mem_module_mcu_wake_pin -0x3cbb 013625 branch gpio_check_active -: 013627 module_set_mcu_wake_pin_low: -0x3cbc 013628 fetcht 1 ,mem_module_mcu_wake_pin -0x3cbd 013629 branch gpio_out_inactive -: 013632 delay: -0x3cbe 013633 increase -1 ,pdata -0x3cbf 013634 nop 38 -0x3cc0 013635 nbranch delay ,blank -0x3cc1 013636 rtn -: 013645 module_le_receive_data: -0x3cc2 013646 call module_check_ble_encrypt_state -0x3cc3 013647 rtn user -0x3cc4 013648 copy rega ,pdata -0x3cc5 013649 store 2 ,mem_module_le_rx_data_address -0x3cc6 013650 copy regb ,pdata -0x3cc7 013651 store 1 ,mem_module_le_rx_data_len -0x3cc8 013652 fetch 2 ,mem_le_att_handle -0x3cc9 013653 fetcht 2 ,mem_module_data_write_handle -0x3cca 013654 isub temp ,null -0x3ccb 013655 branch module_le_receive_data_ok ,zero -0x3ccc 013656 fetcht 2 ,mem_module_data_write_handle2 -0x3ccd 013657 isub temp ,null -0x3cce 013658 nrtn zero -: 013659 module_le_receive_data_ok: -0x3ccf 013660 store 2 ,mem_module_le_rx_data_handle -0x3cd0 013661 branch module_hci_event_receive_le_data -: 013666 module_exit_sniff: -0x3cd1 013667 fetch 1 ,mem_module_flag -0x3cd2 013668 rtnbit1 moudle_task_unsniff -0x3cd3 013669 call module_set_unsniff_task_flag -0x3cd4 013670 branch app_bt_sniff_exit -: 013673 module_set_lpm_mult_2: -0x3cd5 013674 jam 2 ,mem_lpm_mult -0x3cd6 013675 rtn -: 013679 module_bb_event_timer: -0x3cd7 013680 branch module_read_vdd_timer -: 013682 module_read_vdd_timer: -0x3cd8 013683 fetch 1 ,mem_module_read_vdd_flag -0x3cd9 013684 rtn blank -0x3cda 013685 fetch 1 ,mem_module_read_vdd_count -0x3cdb 013686 rtn blank -0x3cdc 013687 increase -1 ,pdata -0x3cdd 013688 store 1 ,mem_module_read_vdd_count -0x3cde 013689 nrtn blank -0x3cdf 013690 jam flag_module_read_vdd_count ,mem_module_read_vdd_count -0x3ce0 013691 call adc_set_mode -0x3ce1 013692 call vdd_calculate_by_mode -0x3ce2 013693 div pdata ,0x64 -0x3ce3 013694 call wait_div_end -0x3ce4 013695 quotient pdata -0x3ce5 013696 remainder temp -0x3ce6 013697 store 1 ,mem_module_vdd_quotient -0x3ce7 013698 storet 1 ,mem_module_vdd_remainder -0x3ce8 013699 rtn -: 013702 module_control_air_flow: -0x3ce9 013703 call check_uart_tx_buff -0x3cea 013704 branch app_l2cap_flow_control_enable ,positive -0x3ceb 013705 branch app_l2cap_flow_control_disable -: 013709 module_set_sniff_task_flag: -0x3cec 013710 arg moudle_task_sniff ,queue -0x3ced 013711 branch module_set_state -: 013713 module_clear_sniff_task_flag: -0x3cee 013714 arg moudle_task_sniff ,queue -0x3cef 013715 branch module_clr_state -: 013717 module_set_unsniff_task_flag: -0x3cf0 013718 arg moudle_task_unsniff ,queue -0x3cf1 013719 branch module_set_state -: 013721 module_clear_unsniff_task_flag: -0x3cf2 013722 arg moudle_task_unsniff ,queue -0x3cf3 013723 branch module_clr_state -: 013725 module_set_le_tx_data_flag: -0x3cf4 013726 arg module_flag_ble_data_finish ,queue -0x3cf5 013727 branch module_set_state -: 013729 module_clear_le_tx_data_flag: -0x3cf6 013730 arg module_flag_ble_data_finish ,queue -0x3cf7 013731 branch module_clr_state -: 013733 module_clr_state: -0x3cf8 013734 fetch 1 ,mem_module_flag -0x3cf9 013735 qset0 pdata -0x3cfa 013736 store 1 ,mem_module_flag -0x3cfb 013737 rtn -: 013739 module_set_state: -0x3cfc 013740 fetch 1 ,mem_module_flag -0x3cfd 013741 qset1 pdata -0x3cfe 013742 store 1 ,mem_module_flag -0x3cff 013743 rtn -: 013753 mouse_init: -0x3d00 013754 call mouse_setting_config -0x3d01 013755 call spi_ncs_enable -0x3d02 013756 call mouse_init_sunt -0x3d03 013757 call mouse_dpi_config -0x3d04 013758 call spi_ncs_disable -0x3d05 013759 rtn wake -0x3d06 013760 call mouse_cheak_enable_usb -0x3d07 013761 call mouse_cb_fuction -0x3d08 013764 fetch mouse_flag_len ,mem_mouse_flag -0x3d09 013765 rtnbit1 mouse_enable_usb -0x3d0a 013766 call mouse_wakeup_from_power -0x3d0b 013767 rtnmark1 mark_24g -0x3d0c 013768 fetch 2 ,mem_ui_state_map -0x3d0d 013769 bbit1 ui_state_btn_down ,mouse_start_discovery -0x3d0e 013770 branch mouse_check_reconn_target -: 013773 mouse_delay_4s: -0x3d0f 013774 fetch mouse_flag_len ,mem_mouse_flag -0x3d10 013775 rtnbit0 mouse_enable_init_delay -0x3d11 013776 arg 20 ,loopcnt -: 013777 mouse_delay_20ms: -0x3d12 013778 setarg 200000 -0x3d13 013779 call sleep -0x3d14 013780 loop delay_10ms -0x3d15 013781 rtn -: 013784 mouse_cheak_enable_usb: -0x3d16 013785 fetch mouse_flag_len ,mem_mouse_flag -0x3d17 013786 rtnbit0 mouse_enable_usb -0x3d18 013787 branch usb_init -: 013790 mouse_cb_fuction: -0x3d19 013791 setarg mouse_le -0x3d1a 013792 store 2 ,mem_cb_le_process -0x3d1b 013793 setarg mouse_send_process -0x3d1c 013794 store 2 ,mem_cb_bt_process -0x3d1d 013795 setarg mouse_process_lpm_before -0x3d1e 013796 store 2 ,mem_cb_before_lpm -0x3d1f 013797 setarg mouse_priority_bb_event -0x3d20 013798 store 2 ,mem_cb_bb_event_process -0x3d21 013799 setarg mouse_idle -0x3d22 013800 store 2 ,mem_cb_idle_process -0x3d23 013801 setarg mouse_before_hibernate -0x3d24 013802 store 2 ,mem_cb_before_hibernate -0x3d25 013803 setarg le_mouse_bb_event_connect_complete -0x3d26 013804 store 2 ,mem_cb_att_write -0x3d27 013806 call g24_head_ptr2regc -0x3d28 013807 setarg mouse_g24_package_data -0x3d29 013808 add regc ,offset_24g_cb_data ,contw -0x3d2a 013809 istore 2 ,contw -0x3d2b 013810 setarg mouse_g24_enter_lpm -0x3d2c 013811 add regc ,offset_24g_cb_lpm_prepare ,contw -0x3d2d 013812 istore 2 ,contw -0x3d2e 013813 setarg mouse_lpm_before_common -0x3d2f 013814 add regc ,offset_24g_cb_lpm_before ,contw -0x3d30 013815 istore 2 ,contw -0x3d31 013817 setarg mouse_bb_event_timer -0x3d32 013818 store 2 ,mem_cb_event_timer -0x3d33 013819 setarg mouse_spi_write_flash_cb -0x3d34 013820 store 2 ,mem_cb_spi_flash_write_complate -0x3d35 013821 rtn -: 013822 mouse_spi_write_flash_cb: -: 013823 mouse_spi_init: -0x3d36 013824 fetch mouse_flag_len ,mem_mouse_flag -0x3d37 013825 bbit0 mouse_enable_spi2 ,spid_init -0x3d38 013826 branch spid_init2 -: 013828 mouse_setting_config: -0x3d39 013829 rtn wake -0x3d3a 013830 call g24_set_device_addr -0x3d3b 013831 call mouse_gpio_init -0x3d3c 013832 call mouse_param_init -0x3d3d 013833 call mouse_adc_init -0x3d3e 013834 call le_set_config_fixed_ltk -0x3d3f 013835 call le_set_justwork -0x3d40 013836 call le_set_fixed_ltk -0x3d41 013837 call le_set_config_read_authentication -0x3d42 013838 fetch mouse_flag_len ,mem_mouse_flag -0x3d43 013839 bbit1 mouse_enable_eeprom ,mouse_init_iic -0x3d44 013840 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak -0x3d45 013841 rtn -: 013843 mouse_init_iic: -0x3d46 013844 call iic_init_390k -0x3d47 013845 fetch mouse_flag_len ,mem_mouse_flag -0x3d48 013846 isolate1 mouse_enable_2k_eeprom ,pdata -0x3d49 013847 ncall clear_eeprom_size_2k ,true -0x3d4a 013848 call mouse_load_eeprom_dpi -0x3d4b 013849 call mouse_init_environment -0x3d4c 013850 call mouse_set_24g_addr_eeprom -0x3d4d 013851 branch iicd_read_eep_data -: 013853 mouse_wakeup_from_power: -0x3d4e 013854 fetch mouse_flag_len ,mem_mouse_flag -0x3d4f 013855 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power -0x3d50 013856 fetch 1 ,mem_wakup_from_power_flag -0x3d51 013857 isolate0 gpio_latch ,pdata -0x3d52 013858 nrtn true -: 013859 mouse_wakeup_no_from_power: -0x3d53 013860 fetch 1 ,mem_reconn_times_init -0x3d54 013861 store 1 ,mem_reconn_times -0x3d55 013862 fetch 1 ,mem_config_function_enable -0x3d56 013863 rtnbit1 enable_select_device_by_switch -: 013864 mouse_start_24g_mode: -0x3d57 013865 fetch mouse_flag_len ,mem_mouse_flag -0x3d58 013866 rtnbit0 mouse_enable_24g -0x3d59 013867 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start -0x3d5a 013868 branch g24_check_51cmd_start_24g -: 013869 le_mouse_bb_event_connect_complete: -0x3d5b 013870 fetch 1 ,mem_le_att_handle -0x3d5c 013871 sub pdata ,26 ,pdata -0x3d5d 013872 nrtn zero -0x3d5e 013873 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x3d5f 013874 call ui_ipc_send_cmd -: 013875 mouse_le_write_enable: -0x3d60 013876 arg write_req_enable_flag ,queue -0x3d61 013877 branch mouse_le_enable_connect_flag -: 013879 mouse_dpi_up: -0x3d62 013880 fetch 1 ,mem_mouse_dpi_button_state -0x3d63 013881 rtneq dpi_button_state_up -0x3d64 013882 jam dpi_button_state_up ,mem_mouse_dpi_button_state -0x3d65 013883 rtn -: 013884 mouse_dpi_config: -0x3d66 013885 fetch 1 ,mem_config_sensor_motion -0x3d67 013886 and pdata ,0x0f ,pdata -0x3d68 013887 store 1 ,mem_mouse_dpi -0x3d69 013888 branch mouse_seting_dpi + 2 -: 013891 mouse_dpi_cheak: -0x3d6a 013892 fetcht 1 ,mem_dpi_button_gpio -0x3d6b 013893 call gpio_get_bit -0x3d6c 013894 nbranch mouse_dpi_up ,true -: 013895 mouse_dpi_down: -0x3d6d 013896 fetch 1 ,mem_mouse_dpi_button_state -0x3d6e 013897 rtneq dpi_button_state_down -0x3d6f 013898 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0x3d70 013899 fetch 1 ,mem_mouse_dpi -0x3d71 013900 increase 1 ,pdata -0x3d72 013901 and pdata ,0x03 ,pdata -0x3d73 013902 store 1 ,mem_mouse_dpi -0x3d74 013903 call mouse_seting_dpi -0x3d75 013904 fetch mouse_flag_len ,mem_mouse_flag -0x3d76 013905 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi -0x3d77 013906 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi -0x3d78 013907 rtn -: 013908 mouse_before_store_flash_cpi: -0x3d79 013909 arg mouse_spi2_clk_gpio ,temp -0x3d7a 013910 call gpio_config_output -0x3d7b 013911 arg mouse_spi2_sdio_gpio ,temp -0x3d7c 013912 call gpio_config_output -0x3d7d 013913 branch mouse_store_flash_device_info -: 013915 mouse_seting_dpi: -0x3d7e 013916 bpatch patch1c_3 ,mem_patch1c -0x3d7f 013917 call mosue_dpi_led_blink_init -0x3d80 013918 fetch 1 ,mem_config_sensor_type -0x3d81 013919 beq p3610 ,mouse_seting_3610_dpi -0x3d82 013920 beq p3212 ,mouse_seting_3212_dpi -0x3d83 013921 fetch 1 ,mem_mouse_dpi -0x3d84 013922 beq mouse_dpi_level1 ,mouse_set_cpi1 -0x3d85 013923 beq mouse_dpi_level2 ,mouse_set_cpi2 -0x3d86 013924 beq mouse_dpi_level3 ,mouse_set_cpi3 -0x3d87 013925 beq mouse_dpi_level4 ,mouse_set_cpi4 -: 013926 mouse_set_cpi2: -0x3d88 013927 fetch 1 ,mem_320x_dpi_2 -0x3d89 013928 branch mouse_p3205_dpi -: 013929 mouse_set_cpi1: -0x3d8a 013930 fetch 1 ,mem_320x_dpi_1 -0x3d8b 013931 branch mouse_p3205_dpi -: 013932 mouse_set_cpi3: -0x3d8c 013933 fetch 1 ,mem_320x_dpi_3 -0x3d8d 013934 branch mouse_p3205_dpi -: 013935 mouse_set_cpi4: -0x3d8e 013936 fetch 1 ,mem_320x_dpi_4 -0x3d8f 013937 branch mouse_p3205_dpi -: 013938 moue_seting_cpi_count: -0x3d90 013939 fetch 1 ,mem_config_sensor_type -0x3d91 013940 rtneq p3065_xy -0x3d92 013941 fetch 1 ,mem_mouse_cpi_count -0x3d93 013942 increase 1 ,pdata -0x3d94 013943 store 1 ,mem_mouse_cpi_count -0x3d95 013944 rtn -: 013946 mouse_seting_3212_dpi: -0x3d96 013947 fetch 1 ,mem_mouse_dpi -0x3d97 013948 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 -0x3d98 013949 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 -0x3d99 013950 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 -0x3d9a 013951 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -: 013952 mouse_set_p3212_cpi2: -0x3d9b 013953 fetch 1 ,mem_3212_dpi_2 -0x3d9c 013954 branch mouse_p3212_dpi -: 013955 mouse_set_p3212_cpi1: -0x3d9d 013956 fetch 1 ,mem_3212_dpi_1 -0x3d9e 013957 branch mouse_p3212_dpi -: 013958 mouse_set_p3212_cpi3: -0x3d9f 013959 fetch 1 ,mem_3212_dpi_3 -0x3da0 013960 branch mouse_p3212_dpi -: 013961 mouse_set_p3212_cpi4: -0x3da1 013962 fetch 1 ,mem_3212_dpi_4 -: 013963 mouse_p3212_dpi: -0x3da2 013964 store 1 ,mem_mouse_cpi_count -0x3da3 013965 lshift8 pdata ,pdata -0x3da4 013966 copy pdata ,rega -0x3da5 013967 add pdata ,mouse_p3212_dpi_xaddress ,pdata -0x3da6 013968 call twspi_write -0x3da7 013969 copy rega ,pdata -0x3da8 013970 add pdata ,mouse_p3212_dpi_yaddress ,pdata -0x3da9 013971 branch twspi_write -: 013973 mouse_seting_3610_dpi: -0x3daa 013974 fetch 1 ,mem_mouse_dpi -0x3dab 013975 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 -0x3dac 013976 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 -0x3dad 013977 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 -0x3dae 013978 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 -: 013979 mouse_set_p3610_cpi2: -0x3daf 013980 fetch 1 ,mem_3610_dpi_2 -0x3db0 013981 branch mouse_p3610_dpi -: 013982 mouse_set_p3610_cpi1: -0x3db1 013983 fetch 1 ,mem_3610_dpi_1 -0x3db2 013984 branch mouse_p3610_dpi -: 013985 mouse_set_p3610_cpi3: -0x3db3 013986 fetch 1 ,mem_3610_dpi_3 -0x3db4 013987 branch mouse_p3610_dpi -: 013988 mouse_set_p3610_cpi4: -0x3db5 013989 fetch 1 ,mem_3610_dpi_4 -: 013990 mouse_p3610_dpi: -0x3db6 013991 store 1 ,mem_mouse_cpi_count -0x3db7 013992 call mouse_spi_sdio_gpio_pollup -0x3db8 013993 fetch 1 ,mem_mouse_cpi_count -: 013994 mouse_reset_p3610_dpi: -0x3db9 013995 add pdata ,0x80 ,pdata -0x3dba 013996 lshift8 pdata ,pdata -0x3dbb 013997 add pdata ,mouse_p3610_dpi_address ,pdata -0x3dbc 013998 copy pdata ,rega -0x3dbd 013999 branch mouse_set_sensor_reg -: 014001 mouse_p3205_dpi: -0x3dbe 014002 store 1 ,mem_mouse_cpi_count -0x3dbf 014003 call moue_seting_cpi_count -0x3dc0 014004 fetch 1 ,mem_mouse_cpi_count -0x3dc1 014005 setarg mouse_dpi_address -0x3dc2 014006 call twspi_read -0x3dc3 014007 and pdata ,0xf8 ,temp -0x3dc4 014008 fetch 1 ,mem_mouse_cpi_count -0x3dc5 014009 iadd temp ,pdata -0x3dc6 014010 lshift8 pdata ,pdata -0x3dc7 014011 add pdata ,mouse_dpi_address ,pdata -0x3dc8 014012 branch twspi_write -: 014015 mouse_init_environment: -0x3dc9 014016 call app_initflag_check -0x3dca 014017 branch mouse_eeprom_load_recon_info ,zero -0x3dcb 014018 call mouse_ble_init_address -0x3dcc 014019 call mouse_store_eeprom_device_info -0x3dcd 014020 branch app_initflag_store -: 014023 mouse_24g_pairing_button: -0x3dce 014024 fetch 2 ,mem_24g_pairing_timer_count -0x3dcf 014025 rtn blank -0x3dd0 014026 fetch mouse_flag_len ,mem_mouse_flag -0x3dd1 014027 rtnbit0 mouse_enable_24g -0x3dd2 014028 rtnbit1 mosue_24g_pairing_flag -0x3dd3 014029 rtnmark1 mark_24g -0x3dd4 014030 call mouse_check_key_gpio -0x3dd5 014031 rtnne mouse_lmr_button -0x3dd6 014032 call mouse_devce_led_off -0x3dd7 014033 arg mosue_24g_pairing_flag ,queue -0x3dd8 014034 call mouse_enable_function_flag -0x3dd9 014035 setarg 0 -0x3dda 014036 store 2 ,mem_mouse_direct_timer -0x3ddb 014037 store 1 ,mem_mouse_send_blank_timer -0x3ddc 014038 call g24_set0_mem_check_dongle_times -0x3ddd 014040 fetch 2 ,mem_ui_state_map -0x3dde 014041 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect -0x3ddf 014042 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x3de0 014043 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x3de1 014044 call mouse_stop_discovery -0x3de2 014045 branch g24_start_pairing_sm1 -: 014048 mouse_idle: -0x3de3 014049 call mouse_24g_pairing_button -0x3de4 014050 call ui_check_paring_button -0x3de5 014051 call mouse_dpi_cheak -0x3de6 014052 call mouse_usb_isr -0x3de7 014053 call mouse_wheel_check -0x3de8 014054 branch mouse_usb_mode -: 014055 mouse_usb_isr: -0x3de9 014056 fetch mouse_flag_len ,mem_mouse_flag -0x3dea 014057 rtnbit0 mouse_enable_usb -0x3deb 014058 call usb_isr -0x3dec 014059 branch usb_offline_state -: 014061 mouse_cheak_usb: -0x3ded 014062 hfetch 1 ,core_usb_addr -0x3dee 014063 bbit0 7 ,mouse_usb_no_exsit -0x3def 014064 bbit1 7 ,mouse_usb_exsit -0x3df0 014065 rtn -: 014066 mouse_usb_no_exsit: -0x3df1 014067 fetch 1 ,mem_usb_addr -0x3df2 014068 rtnbit0 7 -0x3df3 014069 branch soft_reset_chip -: 014070 mouse_usb_exsit: -0x3df4 014071 fetch 1 ,mem_usb_addr -0x3df5 014072 rtnbit1 7 -0x3df6 014073 branch mouse_stop_bluetooth_mode -: 014075 mouse_usb_mode: -0x3df7 014076 call mouse_cheak_usb -0x3df8 014077 hfetch 1 ,core_usb_addr -0x3df9 014078 store 1 ,mem_usb_addr -0x3dfa 014079 rtnbit0 7 -0x3dfb 014080 call mouse_clkn_check -0x3dfc 014081 fetch 4 ,mem_btclk_sensor -0x3dfd 014082 fetcht 1 ,mem_wire_usb_interval -0x3dfe 014083 iadd temp ,temp -0x3dff 014084 copy clkn_bt ,pdata -0x3e00 014085 isub temp ,null -0x3e01 014086 nrtn positive -0x3e02 014087 store 4 ,mem_btclk_sensor -0x3e03 014088 call mouse_motion -0x3e04 014089 nrtn user -0x3e05 014090 jam 4 ,mem_usb_tx_enable -0x3e06 014091 branch mouse_wired_to_usb -: 014093 mouse_clkn_check: -0x3e07 014094 fetcht 4 ,mem_btclk_sensor -0x3e08 014095 copy clkn_bt ,pdata -0x3e09 014096 isub temp ,null -0x3e0a 014097 ncall mouse_clkn_timeout ,positive -0x3e0b 014098 rtn -: 014099 mouse_clkn_timeout: -0x3e0c 014100 setarg 0 -0x3e0d 014101 store 4 ,mem_btclk_sensor -0x3e0e 014102 rtn -: 014106 mouse_wired_to_usb: -0x3e0f 014107 fetch 1 ,mem_usb_tx_enable -0x3e10 014108 rtnbit0 2 -0x3e11 014109 branch mouse_data_push -: 014110 mouse_data_push: -0x3e12 014111 hfetch 1 ,core_usb_addr -0x3e13 014112 rtnbit0 7 -0x3e14 014113 jam usb_ep2_ms ,mem_usb_ep2_data -0x3e15 014114 setarg ms_report_id -0x3e16 014115 store 1 ,mem_usb_mouse_data -0x3e17 014116 fetch 7 ,mem_mouse_key -0x3e18 014117 istore 7 ,contw -0x3e19 014118 rtn -: 014121 mouse_enable_clock_qdecoder: -0x3e1a 014122 hfetch 2 ,core_clkoff -0x3e1b 014123 set0 clock_off_qdecoder ,pdata -0x3e1c 014124 hstore 2 ,core_clkoff -0x3e1d 014125 rtn -: 014127 mouse_param_init: -0x3e1e 014128 setarg 0x8c00 -0x3e1f 014129 store 2 ,mem_ui_uuid_table -0x3e20 014130 setarg 0x8e7a -0x3e21 014131 store 2 ,mem_ui_le_uuid_table -0x3e22 014132 setarg 0x2402 -0x3e23 014133 store 2 ,mem_fcomp_mul -0x3e24 014134 setarg 0x2580 -0x3e25 014135 store 3 ,mem_class -0x3e26 014136 jam 3 ,mem_lpm_mult_timeout -0x3e27 014137 jam 8 ,mem_lpm_overhead -0x3e28 014138 jam dpi_button_state_up ,mem_select_device_button_statue -0x3e29 014139 setarg 0x0200 -0x3e2a 014140 store 2 ,mem_lpm_interval -0x3e2b 014141 jam 0x17 ,mem_le_local_mtu -0x3e2c 014142 jam 0x17 ,mem_le_remote_mtu -0x3e2d 014144 setarg 0x0a77 -0x3e2e 014145 store 2 ,mem_spi_init_clk -0x3e2f 014161 setsect 0 ,0x306 -0x3e30 014162 setsect 1 ,0x4440 -0x3e31 014163 setsect 2 ,0x10000 -0x3e32 014164 setsect 3 ,0x4408 -0x3e33 014165 store 9 ,mem_all_uuid_16bits -0x3e34 014166 setsect 0 ,0x1224 -0x3e35 014167 setsect 1 ,0x4000 -0x3e36 014168 setsect 2 ,0x0 -0x3e37 014169 istore 5 ,contw -0x3e38 014171 setsect 0 ,0x3ffff -0x3e39 014172 setsect 1 ,0x2fe23 -0x3e3a 014173 setsect 2 ,0x199d9 -0x3e3b 014174 setsect 3 ,0x20d -0x3e3c 014175 store 8 ,mem_features -0x3e3d 014177 setarg 0x012c -0x3e3e 014178 store 2 ,mem_24g_pairing_timer_count -0x3e3f 014179 call le_modified_name -0x3e40 014180 fetch mouse_flag_len ,mem_mouse_flag -0x3e41 014181 rtnbit0 mouse_enable_gpio_control_adc_sensor -0x3e42 014182 call mouse_sensor_set_angle -0x3e43 014183 branch mouse_select_adc -: 014185 mouse_sensor_set_angle: -0x3e44 014186 fetcht 1 ,mem_select_sensor_angle_gpio -0x3e45 014187 call gpio_config_input -0x3e46 014188 fetcht 1 ,mem_select_sensor_angle_gpio -0x3e47 014189 call gpio_get_bit -0x3e48 014190 jam mouse_3clk_angle ,mem_config_sensor_angle -0x3e49 014191 rtn true -0x3e4a 014192 jam mouse_12clk_angle ,mem_config_sensor_angle -0x3e4b 014193 rtn -: 014195 mouse_select_adc: -0x3e4c 014196 fetcht 1 ,mem_select_adc_gpio -0x3e4d 014197 call gpio_config_input -0x3e4e 014198 fetcht 1 ,mem_select_adc_gpio -0x3e4f 014199 call gpio_get_bit -0x3e50 014200 jam adc_config_vinlpm ,mem_adc_config_flag -0x3e51 014201 rtn true -0x3e52 014202 jam adc_config_gpio ,mem_adc_config_flag -0x3e53 014203 rtn -: 014206 mouse_adc_init: -0x3e54 014207 fetch 1 ,mem_adc_config_flag -0x3e55 014208 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm -0x3e56 014209 beq adc_config_hvin ,mouse_adc_init_data_hvin -0x3e57 014210 beq adc_config_gpio ,mouse_adc_init_data_io -0x3e58 014211 branch mouse_adc_init_data_vinlpm -: 014213 mouse_adc_init_data_vinlpm: -0x3e59 014214 fetcht 2 ,mem_2v_adc_vinlpm_data -0x3e5a 014215 fetch 2 ,mem_3v_adc_vinlpm_data -0x3e5b 014216 isub temp ,pdata -0x3e5c 014217 mul32 pdata ,20 ,pdata -0x3e5d 014218 div pdata ,100 -0x3e5e 014219 call wait_div_end -0x3e5f 014220 quotient pdata -0x3e60 014221 store 2 ,mem_adc_reference_voltage -0x3e61 014222 rtn -: 014223 mouse_adc_init_data_hvin: -0x3e62 014224 fetcht 2 ,mem_1v_adc_hvin_data -0x3e63 014225 fetch 2 ,mem_5v_adc_hvin_data -0x3e64 014226 isub temp ,pdata -0x3e65 014227 mul32 pdata ,230 ,pdata -0x3e66 014228 div pdata ,400 -0x3e67 014229 call wait_div_end -0x3e68 014230 quotient pdata -0x3e69 014231 store 2 ,mem_adc_reference_voltage -0x3e6a 014232 rtn -: 014233 mouse_adc_init_data_io: -0x3e6b 014234 fetch 2 ,mem_1v_adc_io_data -0x3e6c 014235 store 2 ,mem_adc_reference_voltage -0x3e6d 014236 rtn -: 014237 mouse_gpio_init: -0x3e6e 014238 fetcht 1 ,mem_eeprom_wp_gpio -0x3e6f 014239 call gpio_config_output -0x3e70 014240 call usb_offline_check_init -0x3e71 014241 fetcht 1 ,mem_lbutton_gpio -0x3e72 014242 call gpio_config_input -0x3e73 014243 fetcht 1 ,mem_rbutton_gpio -0x3e74 014244 call gpio_config_input -0x3e75 014245 fetcht 1 ,mem_mbutton_gpio -0x3e76 014246 call gpio_config_input -0x3e77 014247 fetcht 1 ,mem_sensor_data_gpio -0x3e78 014248 call gpio_config_input -0x3e79 014250 fetcht 1 ,mem_sensor_reset_gpio -0x3e7a 014251 call gpio_config_output -0x3e7b 014253 fetcht 1 ,mem_whee_a_data_gpio -0x3e7c 014254 call gpio_config_input -0x3e7d 014256 fetcht 1 ,mem_whee_b_data_gpio -0x3e7e 014257 call gpio_config_input -0x3e7f 014259 fetcht 1 ,mem_whee_ta_data_gpio -0x3e80 014260 call gpio_config_input -0x3e81 014261 fetcht 1 ,mem_whee_tb_data_gpio -0x3e82 014262 call gpio_config_input -0x3e83 014264 fetcht 1 ,mem_bk_button_gpio -0x3e84 014265 call gpio_config_input -0x3e85 014266 fetcht 1 ,mem_fw_button_gpio -0x3e86 014267 call gpio_config_input -0x3e87 014269 fetcht 1 ,mem_config_low_voltage_alarm_gpio -0x3e88 014270 call gpio_config_output -0x3e89 014272 fetcht 1 ,mem_config_device1_led_gpio -0x3e8a 014273 call gpio_config_output -0x3e8b 014275 fetcht 1 ,mem_config_device2_led_gpio -0x3e8c 014276 call gpio_config_output -0x3e8d 014278 fetcht 1 ,mem_config_device3_led_gpio -0x3e8e 014279 call gpio_config_output -0x3e8f 014281 fetcht 1 ,mem_dpi_led_gpio -0x3e90 014282 call gpio_config_output -0x3e91 014284 fetcht 1 ,mem_config_select_device_button_gpio -0x3e92 014285 call gpio_config_input -0x3e93 014287 fetcht 1 ,mem_config_bt_button_gpio -0x3e94 014288 call gpio_config_input -0x3e95 014290 fetcht 1 ,mem_dpi_button_gpio -0x3e96 014291 branch gpio_config_input -: 014293 mouse_wheel_gpio_set_wake: -0x3e97 014294 fetcht 1 ,mem_whee_a_data_gpio -0x3e98 014295 call gpio_set_wake_by_current_state -0x3e99 014296 fetcht 1 ,mem_whee_b_data_gpio -0x3e9a 014297 call gpio_set_wake_by_current_state -0x3e9b 014298 fetcht 1 ,mem_whee_ta_data_gpio -0x3e9c 014299 call gpio_set_wake_by_current_state -0x3e9d 014300 fetcht 1 ,mem_whee_tb_data_gpio -0x3e9e 014301 branch gpio_set_wake_by_current_state -: 014303 mouse_before_hibernate_wheel_gpio_set: -0x3e9f 014304 fetcht 1 ,mem_whee_a_data_gpio -0x3ea0 014305 call mouse_gpio_set_pupd_by_input -0x3ea1 014306 fetcht 1 ,mem_whee_b_data_gpio -0x3ea2 014307 call mouse_gpio_set_pupd_by_input -0x3ea3 014308 fetcht 1 ,mem_whee_ta_data_gpio -0x3ea4 014309 call mouse_gpio_set_pupd_by_input -0x3ea5 014310 fetcht 1 ,mem_whee_tb_data_gpio -0x3ea6 014311 branch mouse_gpio_set_pupd_by_input -: 014313 mouse_gpio_set_pupd_by_input: -0x3ea7 014314 sub temp ,ui_button_gpio_disable ,null -0x3ea8 014315 rtn zero -0x3ea9 014316 and temp ,0x7f ,queue -0x3eaa 014317 hfetch 4 ,core_gpio_in -0x3eab 014318 qisolate1 pdata -0x3eac 014319 hfetch 4 ,core_gpio_pu0 -0x3ead 014320 qsetflag true ,pdata -0x3eae 014321 hstore 4 ,core_gpio_pu0 -0x3eaf 014322 hfetch 4 ,core_gpio_pd0 -0x3eb0 014323 nqsetflag true ,pdata -0x3eb1 014324 hstore 4 ,core_gpio_pd0 -0x3eb2 014325 rtn -: 014327 mouse_before_hibernate: -0x3eb3 014328 enable user -0x3eb4 014329 hfetch 4 ,0x8138 -0x3eb5 014330 setflag user ,26 ,pdata -0x3eb6 014331 hstore 4 ,core_lpm_reg -0x3eb7 014332 call lpm_write_ctrl -0x3eb8 014333 call mouse_devce_led_off -0x3eb9 014334 call mouse_before_hibernate_wheel_gpio_set -0x3eba 014336 branch mouse_lpm_before_common -: 014340 mouse_process_lpm_before: -0x3ebb 014341 call mouse_lpm_before_common -0x3ebc 014342 fetch 1 ,mem_lpm_current_mult -0x3ebd 014343 nrtn blank -0x3ebe 014344 branch gpio_clr_wake -: 014346 mouse_lpm_before_common: -0x3ebf 014347 call mouse_wheel_check -0x3ec0 014348 arg mouse_spi1_clk_gpio ,temp -0x3ec1 014349 fetch mouse_flag_len ,mem_mouse_flag -0x3ec2 014350 isolate1 mouse_enable_spi2 ,pdata -0x3ec3 014351 call mouse_spi_clk_gpio ,true -0x3ec4 014352 call gpio_config_output -0x3ec5 014353 call twspi_disable -0x3ec6 014357 fetcht 1 ,mem_lbutton_gpio -0x3ec7 014358 call gpio_set_wake_by_current_state -0x3ec8 014359 fetcht 1 ,mem_rbutton_gpio -0x3ec9 014360 call gpio_set_wake_by_current_state -0x3eca 014361 fetcht 1 ,mem_mbutton_gpio -0x3ecb 014362 call gpio_set_wake_by_current_state -0x3ecc 014364 fetcht 1 ,mem_bk_button_gpio -0x3ecd 014365 call gpio_set_wake_by_current_state -0x3ece 014366 fetcht 1 ,mem_fw_button_gpio -0x3ecf 014367 call gpio_set_wake_by_current_state -0x3ed0 014368 fetcht 1 ,mem_dpi_button_gpio -0x3ed1 014369 call gpio_set_wake_by_current_state -0x3ed2 014370 fetcht 1 ,mem_config_select_device_button_gpio -0x3ed3 014371 call gpio_set_wake_by_current_state -0x3ed4 014372 fetcht 1 ,mem_whee_a_data_gpio -0x3ed5 014373 call gpio_set_wake_by_current_state -0x3ed6 014374 fetcht 1 ,mem_whee_b_data_gpio -0x3ed7 014375 call gpio_set_wake_by_current_state -0x3ed8 014376 fetcht 1 ,mem_whee_ta_data_gpio -0x3ed9 014377 call gpio_set_wake_by_current_state -0x3eda 014378 fetcht 1 ,mem_whee_tb_data_gpio -0x3edb 014379 call gpio_set_wake_by_current_state -0x3edc 014380 fetcht 1 ,mem_sensor_data_gpio -0x3edd 014381 branch gpio_set_wake -: 014385 mouse_spi_clk_gpio: -0x3ede 014386 arg mouse_spi2_clk_gpio ,temp -0x3edf 014387 rtn -: 014389 mouse_wheel_check: -0x3ee0 014390 bpatch patch1c_4 ,mem_patch1c -0x3ee1 014391 call mouse_t_wheel_scan -0x3ee2 014392 call mouse_wheel_scan -0x3ee3 014393 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3ee4 014394 fetcht 1 ,mem_wheel_tb_old_pinlevel -0x3ee5 014395 store 1 ,mem_wheel_tb_old_pinlevel -0x3ee6 014396 isub temp ,null -0x3ee7 014397 nbranch app_lpm_wake_auto_lock ,zero -0x3ee8 014398 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3ee9 014399 fetcht 1 ,mem_mwheel_b_old_pinlevel -0x3eea 014400 store 1 ,mem_mwheel_b_old_pinlevel -0x3eeb 014401 isub temp ,null -0x3eec 014402 nbranch app_lpm_wake_auto_lock ,zero -0x3eed 014403 rtn -: 014404 mouse_t_wheel_scan: -0x3eee 014405 fetch 1 ,mem_whee_ta_data_gpio -0x3eef 014406 rtneq gpio_disable -0x3ef0 014407 arg 0 ,rega -0x3ef1 014408 fetcht 1 ,mem_whee_ta_data_gpio -0x3ef2 014409 call gpio_get_bit -0x3ef3 014410 setflag true ,0 ,rega -0x3ef4 014411 fetcht 1 ,mem_whee_tb_data_gpio -0x3ef5 014412 call gpio_get_bit -0x3ef6 014413 setflag true ,1 ,rega -0x3ef7 014414 copy rega ,pdata -0x3ef8 014415 store 1 ,mem_wheel_tb_new_pinlevel -0x3ef9 014416 beq 0x01 ,mouse_t_wheel_scan_judge1 -0x3efa 014417 beq 0x02 ,mouse_t_wheel_scan_judge2 -0x3efb 014418 fetch 1 ,mem_wheel_tog -0x3efc 014419 bbit1 7 ,mouse_t_wheel_scan_judge3 -0x3efd 014420 rtn -: 014422 mouse_t_wheel_scan_judge1: -0x3efe 014423 fetch 1 ,mem_wheel_tb_old_pinlevel -0x3eff 014424 beq 0 ,mouse_t_wheel_scan_judge11 -0x3f00 014425 beq 3 ,mouse_t_wheel_scan_judge12 -0x3f01 014426 rtn -: 014427 mouse_t_wheel_scan_judge2: -0x3f02 014428 fetch 1 ,mem_wheel_tb_old_pinlevel -0x3f03 014429 beq 0 ,mouse_t_wheel_scan_judge21 -0x3f04 014430 beq 3 ,mouse_t_wheel_scan_judge22 -0x3f05 014431 rtn -: 014432 mouse_t_wheel_scan_judge11: -0x3f06 014433 jam 0x82 ,mem_wheel_tog -0x3f07 014434 rtn -: 014435 mouse_t_wheel_scan_judge12: -0x3f08 014436 jam 0x81 ,mem_wheel_tog -0x3f09 014437 rtn -: 014438 mouse_t_wheel_scan_judge21: -0x3f0a 014439 jam 0x80 ,mem_wheel_tog -0x3f0b 014440 rtn -: 014441 mouse_t_wheel_scan_judge22: -0x3f0c 014442 jam 0x83 ,mem_wheel_tog -0x3f0d 014443 rtn -: 014444 mouse_t_wheel_scan_judge3: -0x3f0e 014445 fetch 1 ,mem_wheel_tog -0x3f0f 014446 set0 7 ,pdata -0x3f10 014447 store 1 ,mem_wheel_tog -0x3f11 014448 beq 0 ,mouse_t_wheel_scan_judge30 -0x3f12 014449 beq 1 ,mouse_t_wheel_scan_judge31 -0x3f13 014450 beq 2 ,mouse_t_wheel_scan_judge32 -0x3f14 014451 beq 3 ,mouse_t_wheel_scan_judge33 -0x3f15 014452 rtn -: 014453 mouse_t_wheel_scan_judge30: -0x3f16 014454 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f17 014455 beq 3 ,mouse_wheel_t_forward -0x3f18 014456 rtn -: 014457 mouse_t_wheel_scan_judge31: -0x3f19 014458 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f1a 014459 beq 0 ,mouse_wheel_t_forward -0x3f1b 014460 rtn -: 014461 mouse_t_wheel_scan_judge32: -0x3f1c 014462 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f1d 014463 beq 3 ,mouse_wheel_t_back -0x3f1e 014464 rtn -: 014465 mouse_t_wheel_scan_judge33: -0x3f1f 014466 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f20 014467 beq 0 ,mouse_wheel_t_back -0x3f21 014468 rtn -: 014469 mouse_wheel_t_forward: -0x3f22 014470 fetch 1 ,mem_mouse_tz_data_count1 -0x3f23 014471 increase 1 ,pdata -0x3f24 014472 store 1 ,mem_mouse_tz_data_count1 -0x3f25 014473 sub pdata ,1 ,null -0x3f26 014474 rtn positive -0x3f27 014475 jam 0 ,mem_mouse_tz_data_count1 -0x3f28 014476 fetch 1 ,mem_mouse_tz_data -0x3f29 014477 increase 1 ,pdata -0x3f2a 014478 store 1 ,mem_mouse_tz_data -0x3f2b 014479 rtn -: 014480 mouse_wheel_t_back: -0x3f2c 014481 fetch 1 ,mem_mouse_tz_data_count -0x3f2d 014482 increase 1 ,pdata -0x3f2e 014483 store 1 ,mem_mouse_tz_data_count -0x3f2f 014484 sub pdata ,1 ,null -0x3f30 014485 rtn positive -0x3f31 014486 jam 0 ,mem_mouse_tz_data_count -0x3f32 014487 fetch 1 ,mem_mouse_tz_data -0x3f33 014488 increase -1 ,pdata -0x3f34 014489 store 1 ,mem_mouse_tz_data -0x3f35 014490 rtn -: 014493 mouse_wheel_scan: -0x3f36 014494 fetch 1 ,mem_whee_a_data_gpio -0x3f37 014495 rtneq gpio_disable -0x3f38 014496 arg 0 ,rega -0x3f39 014497 fetcht 1 ,mem_whee_a_data_gpio -0x3f3a 014498 call gpio_get_bit -0x3f3b 014499 setflag true ,0 ,rega -0x3f3c 014500 fetcht 1 ,mem_whee_b_data_gpio -0x3f3d 014501 call gpio_get_bit -0x3f3e 014502 setflag true ,1 ,rega -0x3f3f 014503 copy rega ,pdata -0x3f40 014504 store 1 ,mem_mwheel_b_new_pinlevel -0x3f41 014505 beq 0x01 ,mouse_wheel_scan_judge1 -0x3f42 014506 beq 0x02 ,mouse_wheel_scan_judge2 -0x3f43 014507 fetch 1 ,mem_mwheel_tog -0x3f44 014508 bbit1 7 ,mouse_wheel_scan_judge3 -0x3f45 014509 rtn -: 014511 mouse_wheel_scan_judge1: -0x3f46 014512 fetch 1 ,mem_mwheel_b_old_pinlevel -0x3f47 014513 beq 0 ,mouse_wheel_scan_judge11 -0x3f48 014514 beq 3 ,mouse_wheel_scan_judge12 -0x3f49 014515 rtn -: 014516 mouse_wheel_scan_judge2: -0x3f4a 014517 fetch 1 ,mem_mwheel_b_old_pinlevel -0x3f4b 014518 beq 0 ,mouse_wheel_scan_judge21 -0x3f4c 014519 beq 3 ,mouse_wheel_scan_judge22 -0x3f4d 014520 rtn -: 014521 mouse_wheel_scan_judge11: -0x3f4e 014522 jam 0x82 ,mem_mwheel_tog -0x3f4f 014523 rtn -: 014524 mouse_wheel_scan_judge12: -0x3f50 014525 jam 0x81 ,mem_mwheel_tog -0x3f51 014526 rtn -: 014527 mouse_wheel_scan_judge21: -0x3f52 014528 jam 0x80 ,mem_mwheel_tog -0x3f53 014529 rtn -: 014530 mouse_wheel_scan_judge22: -0x3f54 014531 jam 0x83 ,mem_mwheel_tog -0x3f55 014532 rtn -: 014533 mouse_wheel_scan_judge3: -0x3f56 014534 fetch 1 ,mem_mwheel_tog -0x3f57 014535 set0 7 ,pdata -0x3f58 014536 store 1 ,mem_mwheel_tog -0x3f59 014537 beq 0 ,mouse_wheel_scan_judge30 -0x3f5a 014538 beq 1 ,mouse_wheel_scan_judge31 -0x3f5b 014539 beq 2 ,mouse_wheel_scan_judge32 -0x3f5c 014540 beq 3 ,mouse_wheel_scan_judge33 -0x3f5d 014541 rtn -: 014542 mouse_wheel_scan_judge30: -0x3f5e 014543 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f5f 014544 beq 3 ,mouse_wheel_forward -0x3f60 014545 rtn -: 014546 mouse_wheel_scan_judge31: -0x3f61 014547 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f62 014548 beq 0 ,mouse_wheel_forward -0x3f63 014549 rtn -: 014550 mouse_wheel_scan_judge32: -0x3f64 014551 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f65 014552 beq 3 ,mouse_wheel_back -0x3f66 014553 rtn -: 014554 mouse_wheel_scan_judge33: -0x3f67 014555 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f68 014556 beq 0 ,mouse_wheel_back -0x3f69 014557 rtn -: 014558 mouse_wheel_forward: -0x3f6a 014559 jam 0 ,mem_mouse_z_data_count1 -0x3f6b 014560 fetch 1 ,mem_mouse_z_data -0x3f6c 014561 increase 1 ,pdata -0x3f6d 014562 store 1 ,mem_mouse_z_data -0x3f6e 014563 rtn -: 014564 mouse_wheel_back: -0x3f6f 014565 jam 0 ,mem_mouse_z_data_count -0x3f70 014566 fetch 1 ,mem_mouse_z_data -0x3f71 014567 increase -1 ,pdata -0x3f72 014568 store 1 ,mem_mouse_z_data -0x3f73 014569 rtn -: 014572 mouse_hid_connected: -0x3f74 014573 setarg hid_handshake_timeout -0x3f75 014574 store 1 ,mem_hid_handshake_timer_count -0x3f76 014575 rtn -: 014577 mouse_send_process: -0x3f77 014578 fetch 1 ,mem_app_handshake_flag -0x3f78 014579 rtn blank -0x3f79 014580 call l2cap_malloc_is_fifo_nearly_full -0x3f7a 014581 nrtn blank -0x3f7b 014582 fetch mouse_flag_len ,mem_mouse_flag -0x3f7c 014583 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data -0x3f7d 014584 bbit1 mouse_select_device_flag ,mouse_send_empty_data -0x3f7e 014585 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -0x3f7f 014586 call mouse_motion -0x3f80 014587 nrtn user -: 014588 mouse_send_data: -0x3f81 014589 arg 9 ,rega -0x3f82 014590 call hid_malloc_tx_buff -0x3f83 014591 fetch 2 ,mem_hid_int_remote_cid -0x3f84 014592 istore 2 ,contw -0x3f85 014593 setarg 0x02a1 -0x3f86 014594 istore 2 ,contw -0x3f87 014595 fetch 7 ,mem_mouse_key -0x3f88 014596 istore 7 ,contw -0x3f89 014597 rtn -: 014600 mouse_send_empty_data: -0x3f8a 014601 setarg 0 -0x3f8b 014602 store 7 ,mem_mouse_key -0x3f8c 014603 branch mouse_send_data -: 014606 mouse_no_data_timer_init: -0x3f8d 014607 fetch 2 ,mem_mouse_no_data_timeout -0x3f8e 014608 store 2 ,mem_mouse_no_data_timer -0x3f8f 014609 rtn -: 014612 mouse_fill_data_le: -0x3f90 014613 bpatch patch1c_5 ,mem_patch1c -0x3f91 014614 arg 7 ,rega -0x3f92 014615 fetcht 2 ,mem_le_notify_handle -0x3f93 014616 call le_att_malloc_tx_notify -0x3f94 014617 fetch 7 ,mem_mouse_key -0x3f95 014618 istore 7 ,contw -0x3f96 014619 rtn -: 014621 mouse_motion: -0x3f97 014622 bpatch patch1c_6 ,mem_patch1c -0x3f98 014623 disable user -0x3f99 014624 setarg 0 -0x3f9a 014625 store 6 ,mem_mouse_x -0x3f9b 014626 call mouse_cheak_sensor_data -0x3f9c 014627 call mouse_zwheel -0x3f9d 014628 call mouse_t_zwheel -0x3f9e 014629 call mouse_key -0x3f9f 014630 nrtn user -0x3fa0 014631 call mouse_no_data_timer_init -0x3fa1 014632 arg mouse_statue_up_flag ,queue -0x3fa2 014633 branch mouse_enable_function_flag -: 014635 motion_6clk_direction_dispose: -0x3fa3 014636 fetch 2 ,mem_mouse_x -0x3fa4 014637 sub pdata ,0 ,pdata -0x3fa5 014638 store 2 ,mem_mouse_x -0x3fa6 014639 branch enable_user -: 014640 motion_12clk_direction_dispose: -0x3fa7 014641 fetch 2 ,mem_mouse_y -0x3fa8 014642 sub pdata ,0 ,pdata -0x3fa9 014643 store 2 ,mem_mouse_y -0x3faa 014644 branch enable_user -: 014645 motion_9clk_direction_dispose: -0x3fab 014646 fetch 2 ,mem_mouse_y -0x3fac 014647 sub pdata ,0 ,pdata -0x3fad 014648 store 2 ,mem_mouse_y -0x3fae 014649 fetch 2 ,mem_mouse_x -0x3faf 014650 sub pdata ,0 ,pdata -0x3fb0 014651 store 2 ,mem_mouse_x -0x3fb1 014652 call mouse_sensor_data_swap_places -0x3fb2 014653 branch enable_user -: 014654 motion_3clk_direction_dispose: -0x3fb3 014655 call mouse_sensor_data_swap_places -0x3fb4 014656 branch enable_user -: 014657 mouse_cheak_sensor_data: -0x3fb5 014658 fetch 1 ,mem_spi_write_flash_sm -0x3fb6 014659 rtnne flash_sm_no_buys -0x3fb7 014660 fetch 1 ,mem_config_sensor_type -0x3fb8 014661 beq p3205 ,mouse_p32xx_sensor_motion -0x3fb9 014662 beq p3065 ,mouse_p32xx_sensor_motion -0x3fba 014663 beq ka8 ,mouse_p32xx_sensor_motion -0x3fbb 014664 beq p3204 ,mouse_p32xx_sensor_motion -0x3fbc 014665 beq p3212 ,mouse_p3212_sensor_motion -0x3fbd 014666 beq p3610 ,mouse_p3610_sensor_motion -0x3fbe 014667 beq p3065_xy ,mouse_p32xx_sensor_motion -0x3fbf 014668 branch mouse_p32xx_sensor_motion -: 014670 mouse_clear_sensor_data: -0x3fc0 014671 fetch 1 ,mem_mouse_move_flag -0x3fc1 014672 call mouse_read_sensor_common ,blank -0x3fc2 014673 jam 1 ,mem_mouse_move_flag -0x3fc3 014674 rtn -: 014677 mouse_p3212_sensor_motion: -0x3fc4 014678 call mouse_clear_sensor_data -0x3fc5 014679 fetcht 1 ,mem_sensor_data_gpio -0x3fc6 014680 call gpio_get_bit -0x3fc7 014681 nrtn true -: 014682 mouse_p3212_sensor_motion_next: -0x3fc8 014683 setarg pan_reg_pid_l -0x3fc9 014684 call twspi_read -0x3fca 014685 bne p32xx_id1 ,mouse_twspi_reset -0x3fcb 014686 setarg pan_reg_motion_staus -0x3fcc 014687 call twspi_read -0x3fcd 014688 rtnbit0 7 -0x3fce 014689 call mouse_read_sensor_common -0x3fcf 014690 call mouse_read_3212sensor_xy_high -0x3fd0 014691 store 1 ,mem_mouse_xy_h -0x3fd1 014692 rshift4 pdata ,pdata -0x3fd2 014693 call extsign_bit3 -0x3fd3 014694 store 1 ,mem_mouse_x + 1 -0x3fd4 014695 fetch 1 ,mem_mouse_xy_h -0x3fd5 014696 and pdata ,0x0f ,pdata -0x3fd6 014697 call extsign_bit3 -0x3fd7 014698 store 1 ,mem_mouse_y + 1 -0x3fd8 014699 fetch 1 ,mem_config_sensor_angle -0x3fd9 014700 beq mouse_6clk_angle ,motion_6clk_direction_dispose -0x3fda 014701 beq mouse_9clk_angle ,motion_9clk_direction_dispose -0x3fdb 014702 beq mouse_12clk_angle ,motion_12clk_direction_dispose -0x3fdc 014703 beq mouse_3clk_angle ,motion_3clk_direction_dispose -0x3fdd 014704 rtn -: 014706 mouse_read_3212sensor_xy_high: -0x3fde 014707 setarg 0x12 -0x3fdf 014708 branch twspi_read -: 014710 mouse_p3065_judge: -0x3fe0 014711 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 -0x3fe1 014712 branch mouse_twspi_reset -: 014714 mouse_p32xx_sensor_motion: -0x3fe2 014715 call mouse_clear_sensor_data -0x3fe3 014716 disable user -0x3fe4 014717 fetcht 1 ,mem_sensor_data_gpio -0x3fe5 014718 call gpio_get_bit -0x3fe6 014719 nrtn true -: 014720 mouse_p32xx_sensor_motion_2: -0x3fe7 014721 setarg pan_reg_pid_l -0x3fe8 014722 call twspi_read -0x3fe9 014723 bne p32xx_id1 ,mouse_p3065_judge -: 014724 mouse_p32xx_sensor_motion_1: -0x3fea 014725 setarg pan_reg_motion_staus -0x3feb 014726 call twspi_read -0x3fec 014727 rtnbit0 7 -0x3fed 014728 call mouse_read_sensor_common -0x3fee 014729 fetch 1 ,mem_mouse_x -0x3fef 014730 call extsign -0x3ff0 014731 store 2 ,mem_mouse_x -0x3ff1 014732 fetch 1 ,mem_mouse_y -0x3ff2 014733 call extsign -0x3ff3 014734 store 2 ,mem_mouse_y -0x3ff4 014735 fetch 1 ,mem_config_sensor_angle -0x3ff5 014736 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection -0x3ff6 014737 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection -0x3ff7 014738 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection -0x3ff8 014739 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection -0x3ff9 014740 rtn -: 014742 motion32xx_6clk_direction_selection: -0x3ffa 014743 call motion_6clk_direction_dispose -0x3ffb 014744 branch mouse_sensor_sdio_low -: 014745 motion32xx_9clk_direction_selection: -0x3ffc 014746 call motion_9clk_direction_dispose -0x3ffd 014747 branch mouse_sensor_sdio_low -: 014748 motion32xx_12clk_direction_selection: -0x3ffe 014749 call motion_12clk_direction_dispose -0x3fff 014750 branch mouse_sensor_sdio_low -: 014751 motion32xx_3clk_direction_selection: -0x4000 014752 call motion_3clk_direction_dispose -0x4001 014753 branch mouse_sensor_sdio_low -: 014755 mouse_sensor_data_swap_places: -0x4002 014756 fetch 2 ,mem_mouse_y -0x4003 014757 fetcht 2 ,mem_mouse_x -0x4004 014758 store 2 ,mem_mouse_x -0x4005 014759 storet 2 ,mem_mouse_y -0x4006 014760 rtn -: 014762 mouse_p3610sensor_read: -0x4007 014763 call spi_ncs_enable -0x4008 014764 nop 100 -0x4009 014765 copy regb ,pdata -0x400a 014766 call twspi_read -0x400b 014767 copy pdata ,regb -0x400c 014768 call spi_ncs_disable -0x400d 014769 nop 100 -0x400e 014770 copy regb ,pdata -0x400f 014771 rtn -: 014772 mouse_p3610_sensor_motion: -0x4010 014773 disable user -0x4011 014774 fetcht 1 ,mem_sensor_data_gpio -0x4012 014775 call gpio_get_bit -0x4013 014776 nrtn true -0x4014 014777 arg pan_reg_motion_staus ,regb -0x4015 014778 call mouse_p3610sensor_read -0x4016 014779 rtnbit0 7 -0x4017 014780 arg pan_reg_pid_l ,regb -0x4018 014781 call mouse_p3610sensor_read -0x4019 014782 store 1 ,mem_sensor_id1 -0x401a 014783 bne p3610_id1 ,mouse_init_3610sensor_reset -0x401b 014784 fetch 1 ,mem_mouse_move_flag -0x401c 014785 call mouse_read_sensor3610_data ,blank -0x401d 014786 jam 1 ,mem_mouse_move_flag -0x401e 014787 call mouse_read_sensor3610_data -0x401f 014788 fetch 1 ,mem_mouse_xy_h -0x4020 014789 rshift4 pdata ,pdata -0x4021 014790 call extsign_bit3 -0x4022 014791 store 1 ,mem_mouse_x + 1 -0x4023 014792 fetch 1 ,mem_mouse_xy_h -0x4024 014793 and pdata ,0x0f ,pdata -0x4025 014794 call extsign_bit3 -0x4026 014795 store 1 ,mem_mouse_y + 1 -0x4027 014796 fetch 1 ,mem_config_sensor_angle -0x4028 014797 beq 0 ,motion3610_6clk_direction_selection -0x4029 014798 beq 1 ,motion3610_9clk_direction_selection -0x402a 014799 beq 2 ,motion3610_12clk_direction_selection -0x402b 014800 beq 3 ,motion3610_3clk_direction_selection -0x402c 014801 rtn -: 014803 mouse_3610_smart_select: -0x402d 014804 fetch 1 ,mem_sensor_smart_flag -0x402e 014805 beq p3610_smart_enable ,mouse_3610_smart_disable -0x402f 014806 beq p3610_smart_disable ,mouse_3610_smart_enable -0x4030 014807 rtn -: 014810 motion3610_6clk_direction_selection: -0x4031 014811 call motion_6clk_direction_dispose -0x4032 014812 branch mouse_3610_smart_select -: 014814 motion3610_12clk_direction_selection: -0x4033 014815 call motion_12clk_direction_dispose -0x4034 014816 branch mouse_3610_smart_select -: 014818 motion3610_9clk_direction_selection: -0x4035 014819 call motion_9clk_direction_dispose -0x4036 014820 branch mouse_3610_smart_select -: 014822 motion3610_3clk_direction_selection: -0x4037 014823 call motion_3clk_direction_dispose -0x4038 014824 branch mouse_3610_smart_select -: 014826 mouse_read_sensor3610_data: -0x4039 014827 call spi_ncs_enable -0x403a 014828 call mouse_read_sensor_common -0x403b 014829 arg 5 ,pdata -0x403c 014830 call twspi_read -0x403d 014831 store 1 ,mem_mouse_xy_h -0x403e 014832 arg 7 ,pdata -0x403f 014833 call twspi_read -0x4040 014834 store 1 ,mem_sensor_shutter_hi -0x4041 014835 arg 8 ,pdata -0x4042 014836 call twspi_read -0x4043 014837 store 1 ,mem_sensor_shutter_lo -0x4044 014838 branch spi_ncs_disable -: 014841 mouse_3610_smart_enable: -0x4045 014842 fetch 1 ,mem_sensor_shutter_hi -0x4046 014843 rtnne 0 -0x4047 014844 fetch 1 ,mem_sensor_shutter_lo -0x4048 014845 sub pdata ,45 ,null -0x4049 014846 rtn positive -0x404a 014847 jam p3610_smart_enable ,mem_sensor_smart_flag -0x404b 014848 setarg 0xba41 -0x404c 014849 call sensor_write -0x404d 014850 setarg 0x0032 -0x404e 014851 call sensor_write -0x404f 014852 setarg 0xb541 -0x4050 014853 branch sensor_write -: 014854 mouse_3610_smart_disable: -0x4051 014855 fetch 1 ,mem_sensor_shutter_hi -0x4052 014856 rtnne 0 -0x4053 014857 fetch 1 ,mem_sensor_shutter_lo -0x4054 014858 sub pdata ,45 ,null -0x4055 014859 nrtn positive -0x4056 014860 jam p3610_smart_disable ,mem_sensor_smart_flag -0x4057 014861 setarg 0xba41 -0x4058 014862 call sensor_write -0x4059 014863 setarg 0x8032 -0x405a 014864 call sensor_write -0x405b 014865 setarg 0xb541 -0x405c 014866 branch sensor_write -: 014870 mouse_read_sensor_common: -0x405d 014871 arg pan_reg_delta_x ,pdata -0x405e 014872 call twspi_read -0x405f 014873 store 2 ,mem_mouse_x -0x4060 014874 arg pan_reg_delta_y ,pdata -0x4061 014875 call twspi_read -0x4062 014876 store 2 ,mem_mouse_y -0x4063 014877 rtn -: 014879 mouse_set_qdecoder_x: -0x4064 014880 arg mouse_default_xa_gpio ,temp -0x4065 014881 call gpio_config_input -0x4066 014882 arg mouse_default_xa_gpio ,temp -0x4067 014883 call gpio_get_bit -0x4068 014884 rtn true -0x4069 014885 hfetch 1 ,core_qdec_cntx -0x406a 014886 set1 4 ,pdata -0x406b 014887 hstore 1 ,core_qdec_cntx -0x406c 014888 rtn -: 014890 mouse_hardware_zwheel: -0x406d 014891 fetcht 1 ,mem_mouse_z_data -0x406e 014892 hfetch 1 ,core_qdec_cntx -0x406f 014893 iadd temp ,pdata -0x4070 014894 rtn blank -0x4071 014895 store 1 ,mem_mouse_z -0x4072 014896 jam 0 ,mem_mouse_z_data -0x4073 014897 branch enable_user -: 014898 mouse_hardware_zwheel_beforelpm: -0x4074 014899 fetcht 1 ,mem_mouse_z_data -0x4075 014900 hfetch 1 ,core_qdec_cntx -0x4076 014901 iadd temp ,pdata -0x4077 014902 store 1 ,mem_mouse_z_data -0x4078 014903 rtn -: 014904 mouse_zwheel: -0x4079 014905 fetch 1 ,mem_mouse_z_data -0x407a 014906 rtn blank -0x407b 014907 store 1 ,mem_mouse_z -0x407c 014908 jam 0 ,mem_mouse_z_data -0x407d 014909 branch enable_user -: 014911 mouse_t_zwheel: -0x407e 014912 fetch 1 ,mem_mouse_tz_data -0x407f 014913 rtn blank -0x4080 014914 store 1 ,mem_mouse_tz -0x4081 014915 jam 0 ,mem_mouse_tz_data -0x4082 014916 branch enable_user -: 014918 mouse_check_key_gpio: -0x4083 014919 arg 0 ,rega -0x4084 014920 fetcht 1 ,mem_lbutton_gpio -0x4085 014921 call gpio_get_bit -0x4086 014922 setflag true ,0 ,rega -0x4087 014923 fetcht 1 ,mem_rbutton_gpio -0x4088 014924 call gpio_get_bit -0x4089 014925 setflag true ,1 ,rega -0x408a 014926 fetcht 1 ,mem_mbutton_gpio -0x408b 014927 call gpio_get_bit -0x408c 014928 setflag true ,2 ,rega -0x408d 014929 call mouse_check_s_key_gpio -: 014930 mouse_check_key_gpio_output: -0x408e 014931 copy rega ,pdata -0x408f 014932 rtn -: 014933 mouse_check_s_key_gpio: -0x4090 014934 fetch 1 ,mem_bk_button_gpio -0x4091 014935 rtneq gpio_disable -0x4092 014936 fetcht 1 ,mem_bk_button_gpio -0x4093 014937 call gpio_get_bit -0x4094 014938 setflag true ,3 ,rega -0x4095 014939 fetcht 1 ,mem_fw_button_gpio -0x4096 014940 call gpio_get_bit -0x4097 014941 setflag true ,4 ,rega -0x4098 014942 rtn -: 014944 mouse_key: -0x4099 014945 call mouse_check_key_gpio -0x409a 014946 call mouse_set_mult -0x409b 014947 call mouse_24g_key -0x409c 014948 copy rega ,pdata -0x409d 014949 fetcht 1 ,mem_mouse_key -0x409e 014950 store 1 ,mem_mouse_key -0x409f 014951 ixor temp ,pdata -0x40a0 014952 sub pdata ,0 ,null -0x40a1 014953 rtn zero -0x40a2 014954 branch enable_user -: 014956 mouse_24g_key: -0x40a3 014957 rtnmark0 mark_24g -0x40a4 014958 copy rega ,pdata -0x40a5 014959 rtn blank -0x40a6 014960 store 1 ,mem_mouse_key -0x40a7 014961 branch enable_user -: 014964 mouse_set_mult: -0x40a8 014965 fetch 2 ,mem_ui_state_map -0x40a9 014966 bbit1 ui_state_ble_connected ,mouse_set_ble_mult -0x40aa 014967 fetch 2 ,mem_ui_state_map -0x40ab 014968 bbit1 ui_state_bt_connected ,mouse_set_bt_mult -0x40ac 014969 rtn -: 014970 mouse_set_ble_mult: -0x40ad 014971 copy rega ,pdata -0x40ae 014972 nbranch le_set_config_short_mult ,blank -0x40af 014973 branch le_clr_config_short_mult -: 014974 mouse_set_bt_mult: -0x40b0 014975 copy rega ,pdata -0x40b1 014976 nbranch classic_bt_set_mult_short_flag ,blank -0x40b2 014977 branch classic_bt_clr_mult_short_flag -: 014980 mouse_sensor_sdio_low: -0x40b3 014981 bpatch patch1c_7 ,mem_patch1c -0x40b4 014982 arg mouse_spi1_sdio_gpio ,temp -0x40b5 014983 fetch mouse_flag_len ,mem_mouse_flag -0x40b6 014984 isolate1 mouse_enable_spi2 ,pdata -0x40b7 014985 call mouse_sensor_sdio_low2 ,true -0x40b8 014986 call gpio_get_bit -0x40b9 014987 rtn true -0x40ba 014988 setarg 0x0a -0x40bb 014989 call twspi_read -0x40bc 014990 nop 1000 -0x40bd 014991 branch mouse_sensor_sdio_low -: 014992 mouse_sensor_sdio_low2: -0x40be 014993 arg mouse_spi2_sdio_gpio ,temp -0x40bf 014994 rtn -: 014996 mouse_spi_sdio_gpio_pollup: -0x40c0 014997 fetch mouse_flag_len ,mem_mouse_flag -0x40c1 014998 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup -: 014999 mouse_spi1_sdio_gpio_pollup: -0x40c2 015000 arg mouse_spi1_sdio_gpio ,temp -0x40c3 015001 branch gpio_config_input_without_wake -: 015002 mouse_spi2_sdio_gpio_pollup: -0x40c4 015003 arg mouse_spi2_sdio_gpio ,temp -0x40c5 015004 branch gpio_config_input_without_wake -: 015007 mouse_init_sunt: -0x40c6 015008 call mouse_spi_init -0x40c7 015009 rtn wake -0x40c8 015010 call mouse_spi_sdio_gpio_pollup -0x40c9 015011 fetch 1 ,mem_config_sensor_type -0x40ca 015012 beq p3610 ,mouse_init_3610sensor -: 015013 mouse_init_sensor: -0x40cb 015014 call mouse_read_sensor_id -0x40cc 015015 beq p32xx_id1 ,mouse_init_p32xx_id2_judge -0x40cd 015016 beq p3065_id1 ,mouse_p3065_init_param -0x40ce 015017 call mouse_twspi_reset -0x40cf 015018 nop 1000 -0x40d0 015019 branch mouse_init_sensor -: 015020 mouse_twspi_reset: -0x40d1 015021 bpatch patch1d_0 ,mem_patch1d -0x40d2 015022 fetch mouse_flag_len ,mem_mouse_flag -0x40d3 015023 bbit1 mouse_enable_spi2 ,twspi_reset2 -0x40d4 015024 branch twspi_reset -: 015026 mouse_init_3610sensor: -0x40d5 015027 call mouse_read_sensor_id -0x40d6 015028 beq p3610_id1 ,mouse_init_p3610 -0x40d7 015029 call mouse_init_3610sensor_reset -0x40d8 015030 branch mouse_init_3610sensor -: 015032 mouse_read_sensor_id: -0x40d9 015033 setarg pan_reg_pid_h -0x40da 015034 call twspi_read -0x40db 015035 store 1 ,mem_sensor_id2 -0x40dc 015036 setarg pan_reg_pid_l -0x40dd 015037 call twspi_read -0x40de 015038 store 1 ,mem_sensor_id1 -0x40df 015039 rtn -: 015040 mouse_init_p32xx_id2_judge: -0x40e0 015041 fetch 1 ,mem_sensor_id2 -0x40e1 015042 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param -0x40e2 015043 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param -0x40e3 015044 beq p3212_id2 ,mouse_3212_init_param -0x40e4 015045 beq pka8_id2 ,mouse_ka8_init_param -0x40e5 015046 rtn -: 015047 mouse_ka8_init_param: -0x40e6 015048 jam ka8 ,mem_config_sensor_type -0x40e7 015049 rtn -: 015050 mouse_p3065xy_init_param: -0x40e8 015051 jam p3065_xy ,mem_config_sensor_type -0x40e9 015052 rtn -: 015053 mouse_p3065_init_param: -0x40ea 015054 fetch 1 ,mem_sensor_id2 -0x40eb 015055 beq p3065_xy_id2 ,mouse_p3065xy_init_param -0x40ec 015056 jam p3065 ,mem_config_sensor_type -0x40ed 015057 rtn -: 015058 mouse_3212_init_param: -0x40ee 015059 jam p3212 ,mem_config_sensor_type -0x40ef 015060 call mouse_sensor_disable_wp -0x40f0 015061 setarg 0x3426 -0x40f1 015062 call twspi_write -0x40f2 015063 setarg 0x0419 -0x40f3 015064 call twspi_write -: 015065 mouse_sensor_enable_wp: -0x40f4 015066 setarg 0x0009 -0x40f5 015067 branch twspi_write -: 015068 mouse_sensor_disable_wp: -0x40f6 015069 setarg 0x5a09 -0x40f7 015070 branch twspi_write -: 015072 mouse_3204_3l_init_param: -0x40f8 015073 jam p3204 ,mem_config_sensor_type -0x40f9 015074 call mouse_sensor_disable_wp -0x40fa 015075 setarg 0x0f0d -0x40fb 015076 call twspi_write -0x40fc 015077 setarg 0xe31d -0x40fd 015078 call twspi_write -0x40fe 015079 setarg 0xd27d -0x40ff 015080 call twspi_write -0x4100 015081 call mouse_32xx_init_param -0x4101 015082 branch mouse_32xx_init_param_1 -: 015084 mouse_32xx_init_param: -0x4102 015085 setarg 0x351b -0x4103 015086 call twspi_write -0x4104 015087 setarg 0xb428 -0x4105 015088 call twspi_write -0x4106 015089 setarg 0x4629 -0x4107 015090 call twspi_write -0x4108 015091 setarg 0x962a -0x4109 015092 call twspi_write -0x410a 015093 setarg 0x8c2b -0x410b 015094 call twspi_write -0x410c 015095 setarg 0x6e2c -0x410d 015096 call twspi_write -0x410e 015097 setarg 0x642d -0x410f 015098 call twspi_write -0x4110 015099 setarg 0x5f38 -0x4111 015100 call twspi_write -0x4112 015101 setarg 0x0f39 -0x4113 015102 call twspi_write -0x4114 015103 setarg 0x323a -0x4115 015104 call twspi_write -0x4116 015105 setarg 0x473b -0x4117 015106 call twspi_write -0x4118 015107 setarg 0x1042 -0x4119 015108 branch twspi_write -: 015109 mouse_32xx_init_param_1: -0x411a 015110 setarg 0x2e54 -0x411b 015111 call twspi_write -0x411c 015112 setarg 0xf255 -0x411d 015113 call twspi_write -0x411e 015114 setarg 0xf461 -0x411f 015115 call twspi_write -0x4120 015116 setarg 0x7063 -0x4121 015117 call twspi_write -0x4122 015118 setarg 0x5275 -0x4123 015119 call twspi_write -0x4124 015120 setarg 0x4176 -0x4125 015121 call twspi_write -0x4126 015122 setarg 0xed77 -0x4127 015123 call twspi_write -0x4128 015124 setarg 0x2378 -0x4129 015125 call twspi_write -0x412a 015126 setarg 0x4679 -0x412b 015127 call twspi_write -0x412c 015128 setarg 0xe57a -0x412d 015129 call twspi_write -0x412e 015130 setarg 0x487c -0x412f 015131 call twspi_write -0x4130 015132 setarg 0x777e -0x4131 015133 call twspi_write -0x4132 015134 setarg 0x017f -0x4133 015135 call twspi_write -0x4134 015136 setarg 0x000b -0x4135 015137 call twspi_write -0x4136 015138 setarg 0x007f -0x4137 015139 call twspi_write -0x4138 015140 branch mouse_sensor_enable_wp -: 015143 mouse_3205_3t_init_param: -0x4139 015144 jam p3205 ,mem_config_sensor_type -0x413a 015145 call mouse_sensor_disable_wp -0x413b 015146 setarg 0x100d -0x413c 015147 call twspi_write -0x413d 015148 setarg 0xed1d -0x413e 015149 call twspi_write -0x413f 015150 setarg 0x807d -0x4140 015151 call twspi_write -0x4141 015152 call mouse_32xx_init_param -0x4142 015153 setarg 0x0943 -0x4143 015154 call twspi_write -0x4144 015155 branch mouse_32xx_init_param_1 -: 015158 mouse_init_3610sensor_reset: -0x4145 015159 fetcht 1 ,mem_sensor_reset_gpio -0x4146 015160 call gpio_out_active -0x4147 015161 call delay_10ms -0x4148 015162 fetcht 1 ,mem_sensor_reset_gpio -0x4149 015163 call gpio_out_inactive -0x414a 015164 branch delay_10ms -: 015166 mouse_init_p3610: -0x414b 015167 jam p3610 ,mem_config_sensor_type -0x414c 015168 setarg 0xba41 -0x414d 015169 call sensor_write -0x414e 015170 setarg 0x0d11 -0x414f 015171 call sensor_write -0x4150 015172 setarg 0x041b -0x4151 015173 call sensor_write -0x4152 015174 setarg 0x041c -0x4153 015175 call sensor_write -0x4154 015176 setarg 0x0f1d -0x4155 015177 call sensor_write -0x4156 015178 setarg 0x0032 -0x4157 015179 call sensor_write -0x4158 015180 setarg 0xb541 -0x4159 015181 branch sensor_write -: 015185 mouse_set_sensor_reg: -0x415a 015186 setarg 0xba41 -0x415b 015187 call sensor_write -0x415c 015188 nop 4000 -0x415d 015189 setarg 0xff7f -0x415e 015190 call sensor_write -0x415f 015191 copy rega ,pdata -0x4160 015192 call sensor_write -0x4161 015193 setarg 0x007f -0x4162 015194 call sensor_write -0x4163 015195 setarg 0xb541 -0x4164 015196 branch sensor_write -: 015198 extsign: -0x4165 015199 rtnbit0 7 -0x4166 015200 arg 0xff00 ,temp -0x4167 015201 ior temp ,pdata -0x4168 015202 rtn -: 015204 extsign_bit3: -0x4169 015205 rtnbit0 3 -0x416a 015206 arg 0xf0 ,temp -0x416b 015207 ior temp ,pdata -0x416c 015208 rtn -: 015211 mouse_le: -0x416d 015212 call le_fifo_check_nearly_full -0x416e 015213 nrtn blank -0x416f 015214 fetch 1 ,mem_le_connect_status_flag -0x4170 015215 and pdata ,0x03 ,pdata -0x4171 015216 rtnne 0x03 -0x4172 015217 fetch mouse_flag_len ,mem_mouse_flag -0x4173 015218 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet -0x4174 015219 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet -0x4175 015220 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0x4176 015221 call mouse_motion -0x4177 015222 nrtn user -0x4178 015223 branch mouse_fill_data_le -: 015225 mouse_le_send_empty_packet: -0x4179 015226 setarg 0 -0x417a 015227 store 7 ,mem_mouse_key -0x417b 015228 branch mouse_fill_data_le -: 015230 mouse_priority_bb_event: -0x417c 015231 copy regc ,pdata -0x417d 015232 beq bt_evt_le_connected ,mouse_le_bb_event_connected -0x417e 015233 beq bt_evt_bb_connected ,mouse_stop_discovery -0x417f 015234 beq bt_evt_le_disconnected ,mouse_bb_disconnected -0x4180 015235 beq bt_evt_bb_disconnected ,mouse_bb_disconnected -0x4181 015236 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete -0x4182 015237 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn -0x4183 015238 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake -0x4184 015239 beq bt_evt_hid_connected ,mouse_bt_hid_connected -0x4185 015240 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed -0x4186 015241 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout -0x4187 015242 beq bt_evt_pincode_req ,mouse_bb_event_pincode -0x4188 015243 beq bt_evt_remote_unsniff ,app_start_auto_sniff -0x4189 015244 beq bt_evt_le_pairing_success ,mouse_le_pairing_success -0x418a 015245 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt -0x418b 015246 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete -0x418c 015247 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug -0x418d 015248 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete -0x418e 015249 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail -0x418f 015250 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success -0x4190 015251 rtn -: 015254 mouse_le_pairing_complete: -0x4191 015255 branch app_ble_store_reconn_info -: 015257 mouse_24g_attempt_fail: -0x4192 015258 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x4193 015259 fetch 1 ,mem_reconn_times -0x4194 015260 nbranch mouse_polling_device ,blank -0x4195 015261 fetch 1 ,mem_device_flag -0x4196 015262 fetcht 1 ,mem_24g_device_number -0x4197 015263 isub temp ,null -0x4198 015264 branch app_enter_hibernate ,zero -0x4199 015265 rtn -: 015266 mouse_24g_attempt_success: -0x419a 015267 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x419b 015268 rtn -: 015269 mouse_24g_pairing_complete: -0x419c 015270 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x419d 015271 arg mosue_24g_pairing_flag ,queue -0x419e 015272 call mouse_disable_function_flag -0x419f 015273 setarg 0 -0x41a0 015274 store 2 ,mem_24g_pairing_timer_count -0x41a1 015275 jam 0 ,mem_mouse_move_flag -0x41a2 015277 fetch 1 ,mem_config_sensor_type -0x41a3 015278 sub pdata ,p3610 ,null -0x41a4 015279 call mouse_read_sensor3610_data ,zero -0x41a5 015280 ncall mouse_read_sensor_common ,zero -0x41a6 015282 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x41a7 015283 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address -0x41a8 015284 call mouse_set_24g_addr_eeprom -0x41a9 015285 branch iicd_write_protect_eep_data -: 015287 mouse_set_24g_addr_eeprom: -0x41aa 015288 call g24_head_ptr2regc -0x41ab 015289 add regc ,offset_24g_addr ,rega -0x41ac 015290 arg mouse_g24_addr_eeprom_offect ,regb -0x41ad 015291 arg 4 ,temp -0x41ae 015292 rtn -: 015294 mouse_store_flash_24g_address: -0x41af 015295 call g24_head_ptr2regc -0x41b0 015296 add regc ,offset_24g_addr ,regb -0x41b1 015297 ifetch 1 ,regb -0x41b2 015298 store 1 ,mem_mouse_24g_addr -0x41b3 015299 branch mouse_store_flash_device_info -: 015302 mouse_le_pairing_success: -0x41b4 015303 arg ll_pairing_success_flag ,queue -0x41b5 015304 branch mouse_le_enable_connect_flag -: 015305 mouse_le_ll_start_encryt: -0x41b6 015306 jam 2 ,mem_le_start_encrypt_timer -0x41b7 015307 arg ll_start_enc_flag ,queue -0x41b8 015308 branch mouse_le_enable_connect_flag -: 015311 mouse_le_enable_connect_flag: -0x41b9 015312 fetch 1 ,mem_le_connect_status_flag -0x41ba 015313 qset1 pdata -0x41bb 015314 store 1 ,mem_le_connect_status_flag -0x41bc 015315 rtn -: 015317 mouse_le_disable_connect_flag: -0x41bd 015318 fetch 1 ,mem_le_connect_status_flag -0x41be 015319 qset0 pdata -0x41bf 015320 store 1 ,mem_le_connect_status_flag -0x41c0 015321 rtn -: 015322 mouse_le_clean_connect_flag: -0x41c1 015323 jam 0 ,mem_le_connect_status_flag -0x41c2 015324 rtn -: 015326 mouse_le_bb_event_connected: -0x41c3 015327 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x41c4 015328 set0 app_disc_by_button ,pdata -0x41c5 015329 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x41c6 015330 setarg 0 -0x41c7 015331 store 2 ,mem_mouse_direct_timer -0x41c8 015332 call mouse_no_data_timer_init -0x41c9 015333 branch mouse_stop_discovery -: 015335 mouse_bb_event_pincode: -0x41ca 015336 call pincode_reinit -0x41cb 015337 branch app_bt_set_pincode -: 015338 mouse_bb_event_reconn_timeout: -: 015339 mouse_bb_event_reconn_failed: -0x41cc 015340 fetch 1 ,mem_reconn_times -0x41cd 015341 nbranch mouse_polling_device ,blank -0x41ce 015342 fetch 2 ,mem_ui_state_map -0x41cf 015343 bbit1 ui_state_btn_down ,mouse_start_discovery -0x41d0 015344 fetch mouse_flag_len ,mem_mouse_flag -0x41d1 015345 bbit1 mouse_select_device_flag ,mouse_soft_reset -0x41d2 015346 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery -0x41d3 015347 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 -0x41d4 015348 branch app_bb_hibernate -: 015351 mouse_bt_hid_connected: -0x41d5 015352 branch mouse_hid_connected -: 015354 mouse_bt_event_setup_complete: -0x41d6 015355 rtn -: 015357 mouse_soft_reset: -0x41d7 015358 call mouse_select_device_enable -0x41d8 015359 branch soft_reset_chip -: 015361 mouse_bb_disconnected: -0x41d9 015362 bpatch patch1d_1 ,mem_patch1d -0x41da 015363 call mouse_bb_discon_clear_stack -0x41db 015364 fetch mouse_flag_len ,mem_mouse_flag -0x41dc 015365 bbit1 mouse_select_device_flag ,mouse_soft_reset -0x41dd 015366 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 -0x41de 015367 fetch 1 ,mem_reconn_times -0x41df 015368 nbranch mouse_polling_device ,blank -0x41e0 015369 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x41e1 015370 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn -0x41e2 015371 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x41e3 015372 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing -0x41e4 015373 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate -0x41e5 015374 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate -0x41e6 015375 branch mouse_start_discovery -: 015376 mouse_bb_discon_clear_stack: -0x41e7 015377 setarg 0 -0x41e8 015378 store 8 ,mem_wheel_tb_old_pinlevel -0x41e9 015379 istore 4 ,contw -0x41ea 015380 jam 0 ,mem_mouse_send_blank_timer -0x41eb 015381 jam 0 ,mem_mouse_move_flag -0x41ec 015382 jam app_handshake_null ,mem_app_handshake_flag -0x41ed 015383 jam 0 ,mem_ltk_exists -0x41ee 015384 rtn -: 015386 mouse_event_light_state_pairing: -0x41ef 015387 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate -0x41f0 015388 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate -0x41f1 015389 branch mouse_start_discovery -: 015390 mouse_event_light_state_hibernate: -0x41f2 015391 fetch 2 ,mem_ui_state_map -0x41f3 015392 bbit1 ui_state_btn_down ,mouse_start_discovery -0x41f4 015393 branch app_bb_hibernate -: 015395 mouse4_0_event_bb_disconn: -0x41f5 015396 call mouse_le_clean_connect_flag -0x41f6 015397 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x41f7 015398 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x41f8 015399 branch app_bb_hibernate -: 015401 mouse_bb_event_timer: -0x41f9 015402 call mouse_adc_read -0x41fa 015403 call mouse_24g_delay_timer -0x41fb 015404 call mouse_ban_24g_pairing_timer -0x41fc 015405 call mouse_dpi_led_blink_delay_timer -0x41fd 015406 call mouse_statue_up_timer -0x41fe 015408 call mouse_statue_cheak_timer -0x41ff 015409 call mouse_select_device -0x4200 015410 call mouse_bt_discovery_cheak -0x4201 015411 call mouse_low_voltage_led_timer -0x4202 015412 call mouse_sensor_led_contrl_timer -0x4203 015413 call mouse_check_hid_handshake_timer -0x4204 015414 call mouse_check_discovery_timeout_timer -0x4205 015415 call mouse_check_direct_timeout_timer -0x4206 015416 call mouse_check_no_data_timeout_timer -0x4207 015417 call mouse_check_mouse_state_timer -0x4208 015418 branch mouse_le_enable_att_list_timer -: 015422 mouse_sensor_led_contrl_timer: -0x4209 015423 fetch 1 ,mem_mouse_sensor_timer_count -0x420a 015424 rtn blank -0x420b 015425 increase -1 ,pdata -0x420c 015426 store 1 ,mem_mouse_sensor_timer_count -0x420d 015427 nrtn blank -0x420e 015428 branch mouse_sensor_led_contrl -: 015429 mouse_sensor_led_contrl: -0x420f 015430 fetch 1 ,mem_sensor_led_style -0x4210 015431 rtneq ui_led_state_blink_stop -0x4211 015432 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking -: 015433 mouse_sensor_led_blink_state_lighting: -0x4212 015434 call mouse_sensor_led_on -0x4213 015435 jam ui_led_state_blink_darking ,mem_sensor_led_style -0x4214 015436 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x4215 015437 rtn -: 015438 mouse_sensor_led_blink_state_darking: -0x4216 015439 call mouse_sensor_led_off -0x4217 015440 jam ui_led_state_blink_lighting ,mem_sensor_led_style -0x4218 015441 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x4219 015442 rtn -: 015444 mouse_sensor_led_blink_stop: -: 015445 mouse_sensor_reset: -0x421a 015446 setarg 0x8006 -0x421b 015447 call twspi_write -0x421c 015448 nop 1000 -0x421d 015449 jam 0x00 ,mem_mouse_sensor_timer_count -0x421e 015450 jam ui_led_state_blink_stop ,mem_sensor_led_style -0x421f 015451 branch mouse_init_p32xx_id2_judge -: 015453 mouse_p3212sensor_led_on: -0x4220 015454 setarg 0xa006 -0x4221 015455 call twspi_write -0x4222 015456 setarg 0xa005 -0x4223 015457 branch twspi_write -: 015458 mouse_sensor_led_on_global: -0x4224 015459 jam 0 ,mem_mouse_sensor_timer_count -: 015460 mouse_sensor_led_on: -0x4225 015461 fetch 1 ,mem_config_sensor_type -0x4226 015462 beq p3212 ,mouse_p3212sensor_led_on -0x4227 015463 setarg 0x0106 -0x4228 015464 call twspi_write -0x4229 015465 setarg 0xa105 -0x422a 015466 branch twspi_write -: 015468 mouse_sensor_led_off_global: -0x422b 015469 jam 0 ,mem_mouse_sensor_timer_count -: 015470 mouse_sensor_led_off: -0x422c 015471 setarg 0x0906 -0x422d 015472 branch twspi_write -: 015473 mouse_sensor_start_blink: -0x422e 015474 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x422f 015475 jam ui_led_state_blink_start ,mem_sensor_led_style -0x4230 015476 rtn -: 015478 mouse_check_hid_handshake_timer: -0x4231 015479 arg mem_hid_handshake_timer_count ,regc -0x4232 015480 arg mouse_bt_hid_handshake ,regb -0x4233 015481 branch timer_single_step -: 015483 mouse_check_discovery_timeout_timer: -0x4234 015484 arg mem_mouse_discovery_timer ,regc -0x4235 015485 arg mouse_check_discovery_timeout ,regb -0x4236 015486 branch timer_single_step_2b -: 015488 mouse_check_direct_timeout_timer: -0x4237 015489 arg mem_mouse_direct_timer ,regc -0x4238 015490 arg mouse_check_direct_timeout ,regb -0x4239 015491 branch timer_single_step_2b -: 015493 mouse_check_no_data_timeout_timer: -0x423a 015494 arg mem_mouse_no_data_timer ,regc -0x423b 015495 arg mouse_check_no_data_timeout ,regb -0x423c 015496 branch timer_single_step_2b -: 015498 mouse_check_mouse_state_timer: -0x423d 015499 arg mem_mouse_statue_led_timer ,regc -0x423e 015500 arg mouse_statue_led_off ,regb -0x423f 015501 branch timer_single_step -: 015505 mouse_le_enable_att_list_timer: -0x4240 015506 arg mem_le_start_encrypt_timer ,regc -0x4241 015507 arg mouse_le_enable_att_list ,regb -0x4242 015508 branch timer_single_step -: 015510 mouse_24g_delay_timer: -0x4243 015511 arg mem_24g_enter_lpm_timer ,regc -0x4244 015512 arg mouse_24g_delay ,regb -0x4245 015513 branch timer_single_step -: 015515 mouse_ban_24g_pairing_timer: -0x4246 015516 arg mem_24g_pairing_timer_count ,regc -0x4247 015517 arg mouse_ban_24g_pairing ,regb -0x4248 015518 branch timer_single_step_2b -: 015519 mouse_ban_24g_pairing: -: 015520 mouse_24g_delay: -0x4249 015521 rtn -: 015524 mosue_dpi_led_blink_init: -0x424a 015525 fetch mouse_flag_len ,mem_mouse_flag -0x424b 015526 rtnbit0 mouse_enable_dpi_led_blink -0x424c 015527 jam 10 ,mem_mouse_dpi_led_delay_count -0x424d 015528 fetch 1 ,mem_dpi_led_gpio -0x424e 015529 store 1 ,mem_mouse_struct_led_gpio -0x424f 015530 rtn -: 015533 mouse_dpi_led_blink_delay_timer: -0x4250 015534 arg mem_mouse_dpi_led_delay_count ,regc -0x4251 015535 arg mouse_dpi_led_setting ,regb -0x4252 015536 branch timer_single_step -: 015537 mouse_dpi_led_setting: -0x4253 015538 fetch 1 ,mem_dpi_led_gpio -0x4254 015539 store 1 ,mem_mouse_struct_led_gpio -0x4255 015540 setarg led_dpi_blink -0x4256 015541 store 2 ,mem_mouse_on_time -0x4257 015542 store 2 ,mem_mouse_off_time -0x4258 015543 arg 0 ,rega -0x4259 015544 fetcht 1 ,mem_mouse_dpi -0x425a 015545 increase 1 ,temp -0x425b 015546 storet 1 ,mem_mouse_blink_count -0x425c 015547 jam ui_led_state_blink_start ,mem_mouse_led_type -0x425d 015548 rtn -: 015550 mouse_le_enable_att_list: -0x425e 015551 fetch 1 ,mem_le_connect_status_flag -0x425f 015552 rtnbit1 ll_pairing_success_flag -0x4260 015553 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x4261 015554 call ui_ipc_send_cmd -0x4262 015555 arg write_req_enable_flag ,queue -0x4263 015556 branch mouse_le_enable_connect_flag -: 015559 mouse_check_discovery_timeout: -0x4264 015560 call mouse_stop_discovery -0x4265 015561 branch app_enter_hibernate -: 015563 mouse_check_direct_timeout: -0x4266 015564 call app_ble_stop_direct_adv -0x4267 015565 fetch 1 ,mem_reconn_times -0x4268 015566 nbranch mouse_polling_device ,blank -0x4269 015567 branch app_enter_hibernate -: 015569 mouse_check_no_data_timeout: -0x426a 015570 bmark1 mark_24g ,check_51cmd_hibernate -0x426b 015571 branch mouse_disconnect -: 015575 mouse_bb_event_discovery_btn: -0x426c 015576 bpatch patch1d_2 ,mem_patch1d -0x426d 015577 jam 0 ,mem_mouse_send_blank_timer -0x426e 015578 call mouse_disconnect -0x426f 015579 call mouse_le_clean_connect_flag -0x4270 015580 branch mouse_start_discovery -: 015584 mouse3_0_check_reconn_target: -0x4271 015585 fetch 6 ,mem_hci_plap -0x4272 015586 branch app_bt_start_discovery_short ,blank -0x4273 015587 call mouse_reconn_setting_led_gpio -0x4274 015588 jam 0x17 ,mem_connection_options -0x4275 015589 fetch 1 ,mem_ssp_enable -0x4276 015590 nbranch app_bt_start_reconnect ,blank -0x4277 015591 jam 0x04 ,mem_connection_options -0x4278 015592 branch app_bt_start_reconnect -: 015594 mouse4_0_check_reconn_target: -0x4279 015595 fetch 2 ,mem_mouse_direct_timeout -0x427a 015596 store 2 ,mem_mouse_direct_timer -0x427b 015597 call mouse_reconn_setting_led_gpio -0x427c 015598 call app_lpm_mult_disable -0x427d 015599 branch check_51cmd_adv -: 015601 mouse_reconn_setting_led_gpio: -0x427e 015602 setarg led_reconnect_blink -0x427f 015603 store 2 ,mem_mouse_on_time -0x4280 015604 store 2 ,mem_mouse_off_time -0x4281 015605 branch mouse_setting_led_gpio_comman -: 015607 mouse_discover_setting_led_gpio: -0x4282 015608 setarg led_discovery_blink -0x4283 015609 store 2 ,mem_mouse_on_time -0x4284 015610 store 2 ,mem_mouse_off_time -: 015611 mouse_setting_led_gpio_comman: -0x4285 015612 fetch 1 ,mem_device_flag -0x4286 015613 beq mode_bt_device1 ,mouse_device_led1 -0x4287 015614 beq mode_bt_device2 ,mouse_device_led2 -0x4288 015615 beq mode_bt_device3 ,mouse_device_led3 -0x4289 015616 rtn -: 015617 mouse_device_led1: -0x428a 015618 fetch 1 ,mem_config_device1_led_gpio -0x428b 015619 branch mouse_led_blink -: 015620 mouse_device_led2: -0x428c 015621 fetch 1 ,mem_config_device2_led_gpio -0x428d 015622 branch mouse_led_blink -: 015623 mouse_device_led3: -0x428e 015624 fetch 1 ,mem_config_device3_led_gpio -: 015625 mouse_led_blink: -0x428f 015626 store 1 ,mem_temp -0x4290 015627 call mouse_devce_led_off -0x4291 015628 fetch 1 ,mem_temp -0x4292 015629 store 1 ,mem_mouse_struct_led_gpio -0x4293 015630 arg 0 ,rega -0x4294 015631 jam ui_led_state_blink_start ,mem_mouse_led_type -0x4295 015632 branch ui_led_blink_start_global -: 015634 mouse_led_off: -0x4296 015635 arg 0 ,rega -0x4297 015636 branch ui_led_off_global -: 015637 mouse_led_on: -0x4298 015638 arg 0 ,rega -0x4299 015639 branch ui_led_on_global -: 015641 mouse4_0_bb_event_discovery_btn: -0x429a 015642 branch mouse_le_clean_connect_flag -: 015644 mouse_bt_hid_handshake: -0x429b 015645 jam app_handshake_done ,mem_app_handshake_flag -0x429c 015646 call app_lpm_mult_enable -0x429d 015647 call app_bt_store_reconn_info -0x429e 015648 setarg 0 -0x429f 015649 store 2 ,mem_discovery_timeout_timer_count -0x42a0 015650 store 1 ,mem_hid_handshake_timer_count -0x42a1 015651 branch app_bt_enter_sniff -: 015653 mouse_check_reconn_target: -0x42a2 015654 call mouse_cheak_select_device_by_switch -0x42a3 015655 fetch 1 ,mem_device_flag -0x42a4 015656 fetcht 1 ,mem_24g_device_number -0x42a5 015657 isub temp ,null -0x42a6 015658 branch mouse_connect_24g_mode ,zero -0x42a7 015659 fetch 1 ,mem_xrecord_mode -0x42a8 015660 beq rec_3_mode ,mouse3_0_check_reconn_target -0x42a9 015661 beq rec_4_mode ,mouse4_0_check_reconn_target -0x42aa 015662 branch mouse_start_discovery -: 015663 mouse_connect_24g_mode: -0x42ab 015664 call mouse_start_24g_mode -0x42ac 015665 rtnmark1 mark_24g -0x42ad 015666 fetch 1 ,mem_reconn_times -0x42ae 015667 nbranch mouse_polling_device ,blank -0x42af 015668 rtn -: 015670 mouse_start_discovery: -0x42b0 015671 bpatch patch1d_3 ,mem_patch1d -0x42b1 015672 fetch 2 ,mem_ui_state_map -0x42b2 015673 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom -0x42b3 015674 fetch mouse_flag_len ,mem_mouse_flag -0x42b4 015675 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom -0x42b5 015676 random pdata -0x42b6 015677 store 1 ,mem_le_lap + 1 -: 015678 mouse_start_discovery_norandom: -0x42b7 015679 call app_lpm_mult_disable -0x42b8 015680 fetch 2 ,mem_discovery_timeout -0x42b9 015681 store 2 ,mem_mouse_discovery_timer -0x42ba 015682 jam 6 ,mem_connection_options -0x42bb 015683 setarg 0 -0x42bc 015684 store 2 ,mem_mouse_no_data_timer -0x42bd 015685 store 2 ,mem_mouse_direct_timer -0x42be 015686 arg mouse_store_eeprom_flag ,queue -0x42bf 015687 call mouse_enable_function_flag -0x42c0 015688 call mouse_bt_discovery_button_down_disable -0x42c1 015689 fetch 1 ,mem_device_option -0x42c2 015690 isolate1 mode_4_mouse ,pdata -0x42c3 015691 call check_51cmd_adv ,true -0x42c4 015692 fetch 1 ,mem_device_option -0x42c5 015693 isolate1 mode_3_mouse ,pdata -0x42c6 015694 call check_51cmd_start_discovery ,true -0x42c7 015695 fetch mouse_flag_len ,mem_mouse_flag -0x42c8 015696 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink -0x42c9 015697 branch mouse_discover_setting_led_gpio -: 015699 mouse_stop_discovery: -0x42ca 015700 bpatch patch1d_4 ,mem_patch1d -0x42cb 015701 fetch 1 ,mem_device_option -0x42cc 015702 isolate1 mode_4_mouse ,pdata -0x42cd 015703 call mouse_stop_le_adv ,true -0x42ce 015704 fetch 1 ,mem_device_option -0x42cf 015705 isolate1 mode_3_mouse ,pdata -0x42d0 015706 call mouse_stop_bt3_discovery ,true -0x42d1 015707 fetch mouse_flag_len ,mem_mouse_flag -0x42d2 015708 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop -0x42d3 015709 branch mouse_devce_led_off -: 015710 mouse_stop_le_adv: -0x42d4 015711 setarg 0 -0x42d5 015712 store 2 ,mem_mouse_direct_timer -0x42d6 015713 branch check_51cmd_stop_adv -: 015714 mouse_stop_bt3_discovery: -0x42d7 015715 setarg 0 -0x42d8 015716 store 2 ,mem_mouse_discovery_timer -0x42d9 015717 branch check_51cmd_stop_discovery -: 015723 mouse_store_remote_bdaddr: -0x42da 015724 fetch mouse_flag_len ,mem_mouse_flag -0x42db 015725 rtnbit0 mouse_store_eeprom_flag -0x42dc 015726 arg mouse_store_eeprom_flag ,queue -0x42dd 015727 call mouse_disable_function_flag -0x42de 015728 call mouse_check_device_addr -: 015729 mouse_unplug_clean_bdaddr: -0x42df 015730 call mouse_before_store_reconn_info -0x42e0 015731 fetch mouse_flag_len ,mem_mouse_flag -0x42e1 015732 bbit1 mouse_enable_flash ,mouse_store_flash_device_info -0x42e2 015733 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info -0x42e3 015734 rtn -: 015735 mouse_store_eeprom_device_info: -0x42e4 015736 arg 88 ,temp -0x42e5 015737 arg mem_device_flag ,rega -0x42e6 015738 arg mouse_info_eeprom_offect ,regb -0x42e7 015739 branch iicd_write_protect_eep_data -: 015741 mouse_check_device_addr: -0x42e8 015742 fetch 1 ,mem_record_bt_mode -0x42e9 015743 beq rec_4_mode ,mouse_check_le_device_addr -0x42ea 015744 beq rec_3_mode ,mouse_check_bt_device_addr -0x42eb 015745 rtn -: 015746 mouse_check_le_device_addr: -0x42ec 015747 store 1 ,mem_device_addr_temp -0x42ed 015748 fetch 6 ,mem_le_plap -0x42ee 015749 branch mouse_check_bt_device_addr_common -: 015750 mouse_check_bt_device_addr: -0x42ef 015751 store 1 ,mem_device_addr_temp -0x42f0 015752 fetch 6 ,mem_plap -: 015753 mouse_check_bt_device_addr_common: -0x42f1 015754 store 6 ,mem_device_addr_temp + 1 -0x42f2 015755 fetch 7 ,mem_device_addr_temp -0x42f3 015756 arg mem_device1_type ,contr -0x42f4 015757 arg 3 ,loopcnt -: 015758 mouse_check_device_addr_end: -0x42f5 015759 ifetcht 7 ,contr -0x42f6 015760 isub temp ,null -0x42f7 015761 branch mouse_clean_addr ,zero -0x42f8 015762 increase 22 ,contr -0x42f9 015763 loop mouse_check_device_addr_end -0x42fa 015764 rtn -: 015765 mouse_before_store_reconn_info: -0x42fb 015766 arg mem_device1_type ,rega -0x42fc 015767 fetch 1 ,mem_device_flag -0x42fd 015768 increase -1 ,pdata -0x42fe 015769 mul32 pdata ,29 ,pdata -0x42ff 015770 iadd rega ,rega -0x4300 015771 fetch 1 ,mem_record_bt_mode -0x4301 015772 istore 1 ,rega -0x4302 015773 beq rec_4_mode ,mouse_store_le_device -0x4303 015774 beq rec_3_mode ,mouse_store_bt_device -0x4304 015775 rtn -: 015777 mouse_store_le_device: -0x4305 015778 fetch 6 ,mem_le_plap -0x4306 015779 istore 6 ,contw -0x4307 015780 arg mem_le_ltk ,contr -0x4308 015781 call memcpy16 -0x4309 015782 fetch 6 ,mem_le_lap -0x430a 015783 istore 6 ,contw -0x430b 015784 rtn -: 015785 mouse_store_bt_device: -0x430c 015786 fetch 6 ,mem_plap -0x430d 015787 istore 6 ,contw -0x430e 015788 arg mem_link_key ,contr -0x430f 015789 branch memcpy16 -: 015791 mouse_clean_addr: -0x4310 015792 increase -6 ,contr -0x4311 015793 copy contr ,contw -0x4312 015794 fetcht 6 ,mem_device_addr_temp + 1 -0x4313 015795 increase 3 ,temp -0x4314 015796 istoret 6 ,contw -0x4315 015797 rtn -: 015801 mouse_eeprom_load_recon_info: -0x4316 015802 arg 88 ,temp -0x4317 015803 arg mem_device_flag ,rega -0x4318 015804 arg mouse_info_eeprom_offect ,regb -0x4319 015805 call iicd_read_eep_data -: 015806 mouse_select_reconn_device: -0x431a 015807 arg mem_device1_type ,rega -0x431b 015808 fetch 1 ,mem_device_flag -0x431c 015809 fetcht 1 ,mem_24g_device_number -0x431d 015810 isub temp ,null -0x431e 015811 rtn zero -0x431f 015812 increase -1 ,pdata -0x4320 015813 mul32 pdata ,29 ,pdata -0x4321 015814 iadd rega ,rega -0x4322 015815 ifetch 1 ,rega -0x4323 015816 store 1 ,mem_xrecord_mode -0x4324 015817 beq rec_3_mode ,mouse_load_bt_device -0x4325 015818 beq rec_4_mode ,mouse_load_le_device -0x4326 015819 rtn -: 015821 mouse_load_bt_device: -0x4327 015822 ifetch 6 ,contr -: 015823 mouse_load_bt_device_end: -0x4328 015824 store 6 ,mem_hci_plap -0x4329 015825 arg mem_link_key ,contw -0x432a 015826 call memcpy16 -0x432b 015827 branch check_link_key_load -: 015829 mouse_load_le_device: -0x432c 015830 ifetch 6 ,contr -: 015831 mouse_load_le_device_end: -0x432d 015832 store 6 ,mem_hci_plap -0x432e 015833 arg mem_le_ltk ,contw -0x432f 015834 call memcpy16 -0x4330 015835 ifetch 6 ,contr -0x4331 015836 store 6 ,mem_le_lap -0x4332 015837 rtn -: 015840 mouse_select_device: -0x4333 015841 fetch 1 ,mem_config_function_enable -0x4334 015842 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button -0x4335 015843 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch -0x4336 015844 branch mouse_select_device_by_combination_key -: 015846 mouse_select_device_by_combination_key: -0x4337 015847 call mouse_check_key_gpio -0x4338 015848 beq mouse_rm_button ,mouse_select_device_commbination_key_down -: 015849 mouse_select_device_commbination_key_up: -0x4339 015850 jam 30 ,mem_combination_select_device_count -0x433a 015851 fetch 1 ,mem_select_device_button_statue -0x433b 015852 rtneq dpi_button_state_up -0x433c 015853 jam dpi_button_state_up ,mem_select_device_button_statue -0x433d 015854 rtn -: 015856 mouse_select_device_commbination_key_down: -0x433e 015857 call mouse_combination_select_device_timer -0x433f 015858 fetch 1 ,mem_select_device_button_statue -0x4340 015859 rtneq dpi_button_state_down -0x4341 015860 jam dpi_button_state_down ,mem_select_device_button_statue -0x4342 015861 branch mouse_select_device_enable -: 015863 mouse_combination_select_device_timer: -0x4343 015864 fetch 1 ,mem_combination_select_device_count -0x4344 015865 rtn blank -0x4345 015866 pincrease -1 -0x4346 015867 store 1 ,mem_combination_select_device_count -0x4347 015868 nrtn blank -0x4348 015869 branch mouse_ready_reconnection_by_button -: 015871 mouse_select_device_by_button: -0x4349 015872 fetch 1 ,mem_config_select_device_button_gpio -0x434a 015873 rtneq gpio_disable -0x434b 015874 fetcht 1 ,mem_config_select_device_button_gpio -0x434c 015875 call gpio_get_bit -0x434d 015876 branch mouse_select_device_button_down ,true -: 015877 mouse_select_device_button_up: -0x434e 015878 fetch 1 ,mem_select_device_button_statue -0x434f 015879 rtneq dpi_button_state_up -0x4350 015880 jam dpi_button_state_up ,mem_select_device_button_statue -0x4351 015881 fetch mouse_flag_len ,mem_mouse_flag -0x4352 015882 rtnbit1 mouse_long_bt_button_flag -0x4353 015883 branch mouse_ready_reconnection_by_button -: 015885 mouse_select_device_button_down: -0x4354 015886 fetch 1 ,mem_select_device_button_statue -0x4355 015887 rtneq dpi_button_state_down -0x4356 015888 jam dpi_button_state_down ,mem_select_device_button_statue -0x4357 015889 arg mouse_long_bt_button_flag ,queue -0x4358 015890 branch mouse_disable_function_flag -: 015894 mouse_select_device_by_switch: -0x4359 015895 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x435a 015896 rtnbit0 enable_select_device_by_switch -0x435b 015897 fetch 1 ,mem_device_flag -0x435c 015898 beq mode_bt_device1 ,mouse_select1_device -0x435d 015899 beq mode_24g_device ,mouse_select2_device -0x435e 015900 rtn -: 015901 mouse_cheak_select_device_by_switch: -0x435f 015902 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x4360 015903 rtnbit0 enable_select_device_by_switch -0x4361 015904 fetcht 1 ,mem_config_select_device_button_gpio -0x4362 015905 call gpio_get_bit -0x4363 015906 branch mouse_cheak_select_24gdevice ,true -: 015907 mouse_select_btdevice: -0x4364 015908 jam mode_bt_device1 ,mem_device_flag -0x4365 015909 rtn -: 015910 mouse_cheak_select_24gdevice: -0x4366 015911 fetch 1 ,mem_24g_device_number -0x4367 015912 store 1 ,mem_device_flag -0x4368 015913 rtn -: 015914 mouse_select1_device: -0x4369 015915 fetcht 1 ,mem_config_select_device_button_gpio -0x436a 015916 nbranch mouse_ready_reconnection_by_button ,true -0x436b 015917 rtn -: 015918 mouse_select2_device: -0x436c 015919 fetcht 1 ,mem_config_select_device_button_gpio -0x436d 015920 call gpio_get_bit -0x436e 015921 branch mouse_select_device_button_down ,true -0x436f 015922 rtn -: 015927 mouse_ready_reconnection_by_button: -0x4370 015928 fetcht 1 ,mem_device_flag -0x4371 015929 increase 1 ,temp -0x4372 015930 fetch 1 ,mem_device_number -0x4373 015931 isub temp ,null -0x4374 015932 ncall mouse_select_device_count_clean ,positive -0x4375 015933 storet 1 ,mem_device_flag -0x4376 015934 jam 0 ,mem_link_key_exists -0x4377 015935 call mouse_store_device_number2eeprom -0x4378 015936 call mouse_select_device_enable -0x4379 015938 branch mouse_set_reconnection -: 015940 mouse_store_device_number2eeprom: -0x437a 015941 arg 1 ,temp -0x437b 015942 arg mem_device_flag ,rega -0x437c 015943 arg 0 ,regb -0x437d 015944 branch iicd_write_eep_data -: 015946 mouse_set_reconnection: -0x437e 015947 call mouse_stop_bluetooth_mode -0x437f 015948 call mouse_select_device_disable -0x4380 015949 branch mouse_soft_reset -: 015950 mouse_stop_bluetooth_mode: -0x4381 015951 fetch 2 ,mem_ui_state_map -0x4382 015952 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect -0x4383 015953 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x4384 015954 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x4385 015955 branch mouse_stop_discovery -: 015957 mouse_disconnect: -0x4386 015958 bpatch patch1d_5 ,mem_patch1d -0x4387 015959 setarg 0 -0x4388 015960 store 2 ,mem_mouse_no_data_timer -0x4389 015961 fetch 2 ,mem_ui_state_map -0x438a 015962 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x438b 015963 fetch 2 ,mem_ui_state_map -0x438c 015964 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x438d 015965 rtn -: 015967 mouse_irtual_cable_unplug: -0x438e 015968 setarg 0x01 -0x438f 015969 store 6 ,mem_plap -0x4390 015970 jam rec_3_mode ,mem_record_bt_mode -0x4391 015971 branch mouse_unplug_clean_bdaddr -: 015974 mouse_cancel_reconnect: -0x4392 015975 call mouse_bt_cannel_reconn_enable -0x4393 015976 branch check_51cmd_bb_reconn_cancel -: 015978 mouse_bt_discovery_by_button: -0x4394 015979 fetch 1 ,mem_config_bt_button_gpio -0x4395 015980 rtneq gpio_disable -0x4396 015981 fetcht 1 ,mem_config_bt_button_gpio -0x4397 015982 call gpio_get_bit -0x4398 015983 branch mouse_bt_discovery_button_down ,true -: 015984 mouse_bt_discovery_button_up: -0x4399 015985 fetch 1 ,mem_ui_button_timeout -0x439a 015986 store 1 ,mem_combination_ui_button_count -0x439b 015987 fetch 1 ,mem_bt_discovey_button_statue -0x439c 015988 rtneq dpi_button_state_up -0x439d 015989 jam dpi_button_state_up ,mem_bt_discovey_button_statue -0x439e 015990 branch mouse_bt_discovery_button_down_disable -: 015991 mouse_bt_discovery_button_down: -0x439f 015992 call mouse_bt_discovry_timer -0x43a0 015993 fetch 1 ,mem_bt_discovey_button_statue -0x43a1 015994 rtneq dpi_button_state_down -0x43a2 015995 jam dpi_button_state_down ,mem_bt_discovey_button_statue -0x43a3 015996 call check_51cmd_bb_reconn_cancel -0x43a4 015997 branch mouse_bt_discovery_button_down_enable -: 016000 mouse_bt_discovery_cheak: -0x43a5 016001 fetch 1 ,mem_config_function_enable -0x43a6 016002 bbit1 enable_bt_button ,mouse_bt_discovery_by_button -: 016003 mouse_bt_discovery_commbination_key: -0x43a7 016004 call mouse_check_key_gpio -0x43a8 016005 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down -: 016006 mouse_bt_discovery_commbination_key_up: -0x43a9 016007 fetch 1 ,mem_ui_button_timeout -0x43aa 016008 store 1 ,mem_combination_ui_button_count -0x43ab 016009 fetch 1 ,mem_bt_discovey_button_statue -0x43ac 016010 rtneq dpi_button_state_up -0x43ad 016011 jam dpi_button_state_up ,mem_bt_discovey_button_statue -0x43ae 016012 branch mouse_bt_discovery_button_down_disable -: 016015 mouse_bt_discovery_commbination_key_down: -0x43af 016016 call mouse_bt_discovry_timer -0x43b0 016017 fetch 1 ,mem_bt_discovey_button_statue -0x43b1 016018 rtneq dpi_button_state_down -0x43b2 016019 jam dpi_button_state_down ,mem_bt_discovey_button_statue -0x43b3 016020 call check_51cmd_bb_reconn_cancel -0x43b4 016021 branch mouse_bt_discovery_button_down_enable -: 016023 mouse_bt_discovry_timer: -0x43b5 016024 arg mem_combination_ui_button_count ,regc -0x43b6 016025 arg mouse_long_button_bt_discovry ,regb -0x43b7 016026 branch timer_single_step -: 016028 mouse_long_button_bt_discovry: -0x43b8 016029 arg mouse_long_bt_button_flag ,queue -0x43b9 016030 call mouse_enable_function_flag -0x43ba 016031 call app_evt_button_long_pressed -0x43bb 016032 branch mouse_bb_event_discovery_btn -: 016035 mouse_cpi_enable: -0x43bc 016036 arg mouse_cpi_flag ,queue -0x43bd 016037 branch mouse_enable_function_flag -: 016038 mouse_cpi_disable: -0x43be 016039 arg mouse_cpi_flag ,queue -0x43bf 016040 branch mouse_disable_function_flag -: 016041 mouse_select_device_enable: -0x43c0 016042 arg mouse_select_device_flag ,queue -0x43c1 016043 branch mouse_enable_function_flag -: 016044 mouse_select_device_disable: -0x43c2 016045 arg mouse_select_device_flag ,queue -0x43c3 016046 branch mouse_disable_function_flag -: 016047 mouse_bt_cannel_reconn_enable: -0x43c4 016048 arg mouse_bt_cannel_reconn_flag ,queue -0x43c5 016049 branch mouse_enable_function_flag -: 016050 mouse_bt_cannel_reconn_disable: -0x43c6 016051 arg mouse_bt_cannel_reconn_flag ,queue -0x43c7 016052 branch mouse_disable_function_flag -: 016053 mouse_bt_discovery_button_down_enable: -0x43c8 016054 arg mouse_bt_discovery_button_down_flag ,queue -0x43c9 016055 branch mouse_enable_function_flag -: 016056 mouse_bt_discovery_button_down_disable: -0x43ca 016057 arg mouse_bt_discovery_button_down_flag ,queue -0x43cb 016058 branch mouse_disable_function_flag -: 016062 mouse_select_device_count_clean: -0x43cc 016063 arg 1 ,temp -0x43cd 016064 rtn -: 016066 mouse_enable_function_flag: -0x43ce 016067 fetch mouse_flag_len ,mem_mouse_flag -0x43cf 016068 qset1 pdata -0x43d0 016069 store mouse_flag_len ,mem_mouse_flag -0x43d1 016070 rtn -: 016072 mouse_disable_function_flag: -0x43d2 016073 fetch mouse_flag_len ,mem_mouse_flag -0x43d3 016074 qset0 pdata -0x43d4 016075 store mouse_flag_len ,mem_mouse_flag -0x43d5 016076 rtn -: 016078 mouse_adc_read: -0x43d6 016079 fetch mouse_flag_len ,mem_mouse_flag -0x43d7 016080 rtnbit0 mouse_enable_adc -0x43d8 016081 fetch 1 ,mem_adc_read_timer -0x43d9 016082 increase 1 ,pdata -0x43da 016083 store 1 ,mem_adc_read_timer -0x43db 016084 sub pdata ,10 ,null -0x43dc 016085 rtn positive -0x43dd 016086 jam 0 ,mem_adc_read_timer -0x43de 016087 call adc_set_mode -0x43df 016088 call vdd_calculate_by_mode -0x43e0 016089 store 2 ,mem_mouse_vdd_now_vol -0x43e1 016090 arg mem_mouse_vdd_calculate_set ,rega -0x43e2 016091 call adc_bat_percent_lowpower_out -0x43e3 016092 fetch 1 ,mem_adc_power_flag -0x43e4 016093 bbit1 1 ,mouse_power_down -0x43e5 016094 bbit0 0 ,mouse_adc_no_low_voltage -0x43e6 016095 branch mouse_adc_low_voltage -: 016096 mouse_adc_low_voltage: -0x43e7 016097 arg mouse_low_voltage_flag ,queue -0x43e8 016098 branch mouse_enable_function_flag -: 016099 mouse_adc_no_low_voltage: -0x43e9 016100 arg mouse_low_voltage_flag ,queue -0x43ea 016101 branch mouse_disable_function_flag -: 016103 mouse_low_voltage_led_timer: -0x43eb 016104 fetch mouse_flag_len ,mem_mouse_flag -0x43ec 016105 rtnbit0 mouse_low_voltage_flag -0x43ed 016106 fetch 1 ,mem_config_low_voltage_alarm_gpio -0x43ee 016107 store 1 ,mem_mouse_struct_led_gpio -0x43ef 016108 fetch 1 ,mem_adc_low_volatage_led_timer_count -0x43f0 016109 pincrease 1 -0x43f1 016110 store 1 ,mem_adc_low_volatage_led_timer_count -0x43f2 016111 sub pdata ,20 ,null -0x43f3 016112 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive -0x43f4 016113 beq 2 ,mouse_low_voltage_led_on -0x43f5 016114 beq 4 ,mouse_low_voltage_led_off -0x43f6 016115 beq 6 ,mouse_low_voltage_led_on -0x43f7 016116 beq 8 ,mouse_low_voltage_led_off -0x43f8 016117 rtn -: 016118 mouse_adc_low_volatage_led_timer_count_clean: -0x43f9 016119 jam 1 ,mem_adc_low_volatage_led_timer_count -0x43fa 016120 branch mouse_low_voltage_led_off -: 016121 mouse_low_voltage_led_on: -0x43fb 016122 arg 0 ,rega -0x43fc 016123 jam ui_led_state_lighting ,mem_mouse_led_type -0x43fd 016124 branch ui_led_on_global -: 016125 mouse_low_voltage_led_off: -0x43fe 016126 arg 0 ,rega -0x43ff 016127 jam ui_led_state_lighting ,mem_mouse_led_type -0x4400 016128 branch ui_led_off_global -: 016130 mouse_g24_package_data: -0x4401 016131 call mouse_motion -0x4402 016132 nrtn user -0x4403 016133 arg 7 ,rega -0x4404 016134 arg mem_mouse_key ,regb -0x4405 016135 rtn -: 016137 mouse_g24_enter_lpm: -0x4406 016138 fetch 1 ,mem_mouse_24g_enter_lpm_enable -0x4407 016139 rtn blank -0x4408 016141 fetcht 1 ,mem_dpi_button_gpio -0x4409 016142 call gpio_get_bit -0x440a 016143 call mouse_24g_dpi_delay_init ,true -0x440b 016144 fetch 1 ,mem_24g_enter_lpm_timer -0x440c 016145 nrtn blank -0x440d 016146 call mouse_check_key_gpio -0x440e 016147 nrtn blank -0x440f 016148 branch g24_lpm_long_sleep -: 016150 mouse_24g_dpi_delay_init: -0x4410 016151 fetch 1 ,mem_dpi_button_gpio -0x4411 016152 rtneq ui_button_gpio_disable -0x4412 016153 jam 10 ,mem_24g_enter_lpm_timer -0x4413 016154 rtn -: 016157 mouse_load_flash_info_cheak: -0x4414 016158 call mouse_load_flash_flag -0x4415 016159 fetch 2 ,mem_store_flag -0x4416 016160 arg eeprom_init_flag ,temp -0x4417 016161 isub temp ,null -0x4418 016162 branch mouse_load_flash_device_info ,zero -0x4419 016163 storet 2 ,mem_store_flag -0x441a 016164 call mouse_ble_init_address -0x441b 016165 branch mouse_store_flash_device_info -: 016166 mouse_ble_init_address: -0x441c 016167 fetch 6 ,mem_le_lap -0x441d 016168 store 6 ,mem_device1_locall_addr -0x441e 016169 add pdata ,0x0100 ,pdata -0x441f 016170 store 6 ,mem_device2_locall_addr -0x4420 016171 add pdata ,0x0100 ,pdata -0x4421 016172 store 6 ,mem_device3_locall_addr -0x4422 016173 rtn -: 016176 mouse_load_flash_flag: -0x4423 016177 setarg mem_store_flag -0x4424 016178 arg mem_mouse_information_start ,temp -0x4425 016179 isub temp ,temp -0x4426 016180 fetch 3 ,mem_flash_base -0x4427 016181 iadd temp ,pdata -0x4428 016182 arg 2 ,temp -0x4429 016183 arg mem_store_flag ,rega -0x442a 016184 branch spid_read_flash -: 016187 mouse_load_flash_device_info: -0x442b 016188 setarg mem_mouse_information_end -0x442c 016189 arg mem_mouse_information_start ,temp -0x442d 016190 isub temp ,temp -0x442e 016191 fetch 3 ,mem_flash_base -0x442f 016192 arg mem_mouse_information_start ,rega -0x4430 016193 call spid_read_flash -0x4431 016194 call mouse_select_reconn_device -0x4432 016195 fetch 4 ,mem_mouse_24g_addr -0x4433 016196 call g24_head_ptr2regc -0x4434 016197 branch g24_store_mem_addr -: 016199 mouse_store_flash_device_info: -0x4435 016200 setarg mem_mouse_information_end -0x4436 016201 arg mem_mouse_information_start ,temp -0x4437 016202 isub temp ,temp -0x4438 016203 arg mem_mouse_information_start ,rega -0x4439 016204 fetch 3 ,mem_flash_base -0x443a 016205 branch flash_write -: 016207 mouse_store_eerpom_dpi: -0x443b 016208 arg 1 ,temp -0x443c 016209 arg mem_mouse_dpi ,rega -0x443d 016210 arg mouse_dpi_eeprom_offect ,regb -0x443e 016211 branch iicd_write_protect_eep_data -: 016213 mouse_load_eeprom_dpi: -0x443f 016214 arg 1 ,temp -0x4440 016215 arg mem_mouse_dpi ,rega -0x4441 016216 arg mouse_dpi_eeprom_offect ,regb -0x4442 016217 branch iicd_read_eep_data -: 016219 mouse_statue_cheak_timer: -0x4443 016220 rtnmark1 mark_24g -0x4444 016221 fetch mouse_flag_len ,mem_mouse_flag -0x4445 016222 rtnbit0 mouse_enable_statue_up -0x4446 016223 fetch 1 ,mem_mouse_1step_up_count -0x4447 016224 pincrease 1 -0x4448 016225 and pdata ,0x07 ,pdata -0x4449 016226 store 1 ,mem_mouse_1step_up_count -0x444a 016227 rtnne 0x07 -0x444b 016228 fetch 2 ,mem_ui_state_map -0x444c 016229 bbit1 ui_state_bt_connected ,mouse_check_statue_up -0x444d 016230 bbit1 ui_state_ble_connected ,mouse_check_statue_up -0x444e 016231 rtn -: 016236 mouse_check_statue_up: -0x444f 016237 bpatch patch1d_6 ,mem_patch1d -0x4450 016238 fetch 1 ,mem_mouse_2step_up_count -0x4451 016239 nrtn blank -0x4452 016240 fetch mouse_flag_len ,mem_mouse_flag -0x4453 016241 rtnbit0 mouse_statue_up_flag -0x4454 016242 fetch 1 ,mem_sensor_squal_reg -0x4455 016243 call sensor_read -0x4456 016244 store 1 ,mem_sensor_iqc -0x4457 016245 sub pdata ,0x10 ,null -0x4458 016246 branch mouse_statue_up_timer_init ,positive -0x4459 016247 jam 0 ,mem_mouse_2step_up_count -0x445a 016248 rtn -: 016250 mouse_statue_up_timer_init: -0x445b 016251 jam 30 ,mem_mouse_2step_up_count -0x445c 016252 rtn -: 016253 mouse_statue_up_timer: -0x445d 016254 arg mem_mouse_2step_up_count ,regc -0x445e 016255 arg mouse_statue_up ,regb -0x445f 016256 branch timer_single_step -: 016258 mouse_statue_up: -0x4460 016259 fetch 1 ,mem_sensor_squal_reg -0x4461 016260 call twspi_read -0x4462 016261 sub pdata ,0x10 ,null -0x4463 016262 nrtn positive -0x4464 016263 fetch mouse_flag_len ,mem_mouse_flag -0x4465 016264 rtnbit0 mouse_statue_up_flag -0x4466 016265 arg mouse_statue_up_flag ,queue -0x4467 016266 call mouse_disable_function_flag -0x4468 016267 jam 0 ,mem_lpm_mult -0x4469 016268 jam 30 ,mem_mouse_statue_led_timer -0x446a 016269 call mouse_devce_led_off -0x446b 016270 fetch mouse_flag_len ,mem_mouse_flag -0x446c 016271 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up -: 016272 mouse_two_device_statue_up: -0x446d 016273 fetch 1 ,mem_device_flag -0x446e 016274 beq mode_bt_device1 ,mouse_device1_led_on -0x446f 016275 beq mode_bt_device2 ,mouse_device_blink_led_init -0x4470 016276 rtn -: 016277 mouse_three_device_statue_up: -0x4471 016278 fetch 1 ,mem_device_flag -0x4472 016279 beq mode_bt_device1 ,mouse_device1_led_on -0x4473 016280 beq mode_bt_device2 ,mouse_device2_led_on -0x4474 016281 beq mode_bt_device3 ,mouse_device3_led_on -0x4475 016282 rtn -: 016284 mouse_device_blink_led_init: -0x4476 016285 fetch 1 ,mem_config_device1_led_gpio -0x4477 016286 branch mouse_led_blink -: 016290 mouse_statue_led_off: -0x4478 016291 jam 0x20 ,mem_lpm_mult -0x4479 016292 branch mouse_devce_led_off -: 016296 mouse_devce1_led_off: -0x447a 016297 fetch 1 ,mem_config_device1_led_gpio -0x447b 016298 rtneq gpio_disable -0x447c 016299 store 1 ,mem_mouse_struct_led_gpio -0x447d 016300 branch mouse_led_off -: 016302 mouse_devce2_led_off: -0x447e 016303 fetch 1 ,mem_config_device2_led_gpio -0x447f 016304 rtneq gpio_disable -0x4480 016305 store 1 ,mem_mouse_struct_led_gpio -0x4481 016306 branch mouse_led_off -: 016308 mouse_devce_led_off: -0x4482 016309 call mouse_led_off -0x4483 016310 call mouse_devce1_led_off -0x4484 016311 call mouse_devce2_led_off -: 016312 mouse_devce3_led_off: -0x4485 016313 fetch 1 ,mem_config_device3_led_gpio -0x4486 016314 rtneq gpio_disable -0x4487 016315 store 1 ,mem_mouse_struct_led_gpio -0x4488 016316 branch mouse_led_off -: 016318 mouse_device1_led_on: -0x4489 016319 fetch 1 ,mem_config_device1_led_gpio -0x448a 016320 store 1 ,mem_mouse_struct_led_gpio -0x448b 016321 branch mouse_led_on -: 016322 mouse_device2_led_on: -0x448c 016323 fetch 1 ,mem_config_device2_led_gpio -0x448d 016324 store 1 ,mem_mouse_struct_led_gpio -0x448e 016325 branch mouse_led_on -: 016326 mouse_device3_led_on: -0x448f 016327 fetch 1 ,mem_config_device3_led_gpio -0x4490 016328 store 1 ,mem_mouse_struct_led_gpio -0x4491 016329 branch mouse_led_on -: 016333 mouse_polling_device: -0x4492 016334 bpatch patch1d_7 ,mem_patch1d -0x4493 016335 fetch 1 ,mem_reconn_times -0x4494 016336 increase -1 ,pdata -0x4495 016337 store 1 ,mem_reconn_times -0x4496 016338 fetcht 1 ,mem_device_flag -0x4497 016339 increase 1 ,temp -0x4498 016340 fetch 1 ,mem_device_number -0x4499 016341 isub temp ,null -0x449a 016342 ncall mouse_select_device_count_clean ,positive -0x449b 016343 storet 1 ,mem_device_flag -0x449c 016344 jam 0 ,mem_link_key_exists -0x449d 016345 call mouse_store_device_number2eeprom -0x449e 016346 call mouse_before_store_reconn_info -0x449f 016347 branch mouse_check_reconn_target -: 016349 mouse_power_down: -0x44a0 016350 call mouse_devce_led_off -0x44a1 016351 setarg 0 -0x44a2 016352 store 8 ,mem_gpio_wakeup_low -0x44a3 016353 branch lpm_hibernate -: 016364 remote_car_init: -0x44a4 016365 rtn wake -0x44a5 016366 hfetch 1 ,core_gpio_sel1 -0x44a6 016367 and_into 0xf0 ,pdata -0x44a7 016368 hstore 1 ,core_gpio_sel1 -0x44a8 016369 call keyscan_key_init -0x44a9 016370 setarg remote_car_le_before_hibernate -0x44aa 016371 store 2 ,mem_cb_before_hibernate -0x44ab 016373 setarg remote_car_process_lpm_before -0x44ac 016374 store 2 ,mem_cb_before_lpm -0x44ad 016376 setarg remote_car_scale_process_idle -0x44ae 016377 store 2 ,mem_cb_idle_process -0x44af 016379 setarg remote_car_scale_process_bb_event -0x44b0 016380 store 2 ,mem_cb_bb_event_process -0x44b1 016382 setarg app_get_lpm_wake_lock -0x44b2 016383 store 2 ,mem_cb_check_wakelock -0x44b3 016385 call g24_head_ptr2regc -0x44b4 016386 setarg remote_car_g24_package_data -0x44b5 016387 add regc ,offset_24g_cb_data ,contw -0x44b6 016388 istore 2 ,contw -0x44b7 016390 setarg remote_car_g24_enter_lpm -0x44b8 016391 add regc ,offset_24g_cb_lpm_prepare ,contw -0x44b9 016392 istore 2 ,contw -0x44ba 016394 setarg remote_car_process_lpm_before -0x44bb 016395 add regc ,offset_24g_cb_lpm_before ,contw -0x44bc 016396 istore 2 ,contw -0x44bd 016398 setarg remote_car_event_timer -0x44be 016399 store 2 ,mem_cb_event_timer -0x44bf 016401 setarg remote_car_power_off_signal -0x44c0 016402 store 2 ,mem_remote_car_power_off_cb -0x44c1 016404 setarg remote_car_soft_switch_power_on_signal -0x44c2 016405 store 2 ,mem_remote_car_power_standby_cb -0x44c3 016407 setarg remote_car_send_key_data -0x44c4 016408 store 2 ,mem_cb_remote_car_keyscan -0x44c5 016410 bpatch patch1e_0 ,mem_patch1e -0x44c6 016411 call remote_car_init_environment -0x44c7 016412 call queue_init -0x44c8 016413 jam 2 ,mem_lpm_mult -0x44c9 016414 fetch 1 ,mem_remote_car_config_soft_switch_enable -0x44ca 016415 store 1 ,mem_remote_car_hard_soft_switch -0x44cb 016416 beq hard_switch ,remote_car_hard_switch_power_on_signal -0x44cc 016417 fetch 1 ,mem_remote_car_config_soft_switch_gpio -0x44cd 016418 store 1 ,mem_ui_button_gpio -: 016419 remote_car_soft_switch_power_on_init: -0x44ce 016420 call remote_car_ui_led_init -0x44cf 016421 call ui_button_init -0x44d0 016422 call ui_button_polling -0x44d1 016423 jam power_starting ,mem_remote_car_power_state -0x44d2 016424 fetch 2 ,mem_ui_state_map -0x44d3 016425 rtnbit1 ui_state_btn_down -0x44d4 016426 branch app_enter_hibernate -: 016430 remote_car_hard_switch_power_on_signal: -0x44d5 016431 jam power_standby ,mem_remote_car_power_state -: 016432 remote_car_soft_switch_power_on_signal: -0x44d6 016433 call remote_car_ui_led_init -0x44d7 016435 arg 0 ,rega -0x44d8 016436 call ui_led_blink_start_global -: 016437 remote_car_connect_24g_mode: -0x44d9 016438 branch g24_auto_pair_start -: 016440 remote_car_power_off_signal: -0x44da 016441 branch remote_car_ui_led_init -: 016443 remote_car_ui_led_init: -0x44db 016444 bpatch patch1e_1 ,mem_patch1e -0x44dc 016445 fetch 1 ,mem_remote_car_config_connect_led_gpio -0x44dd 016446 bne invalid_pin_num ,remote_car_pairing_led_gpio_set -: 016447 remote_car_ui_led_init_1: -0x44de 016448 fetcht 1 ,mem_remote_car_led_map -0x44df 016449 branch gpio_config_output -: 016450 remote_car_pairing_led_gpio_set: -0x44e0 016451 store 1 ,mem_remote_car_led_map -0x44e1 016452 branch remote_car_ui_led_init_1 -: 016455 remote_car_init_environment: -0x44e2 016456 call g24_set_device_addr -0x44e3 016457 fetch 2 ,mem_remote_car_no_data_timeout -0x44e4 016458 store 2 ,mem_remote_car_no_data_timer -0x44e5 016459 branch remote_car_get_adc_default_data -: 016461 remote_car_le_before_hibernate: -: 016466 remote_car_in_enter_hibernate: -0x44e6 016467 call gpio_set_before_lpm_common -0x44e7 016468 call remote_car_process_lpm_before -0x44e8 016469 branch app_enter_hibernate -: 016471 remote_car_process_lpm_before: -0x44e9 016472 branch keyscan_process_lpm_before -: 016474 remote_car_g24_enter_lpm: -0x44ea 016475 fetch 1 ,mem_remote_car_24g_enter_lpm_enable -0x44eb 016476 rtn blank -0x44ec 016478 branch g24_lpm_long_sleep -: 016480 remote_car_process_auto_pair_exit: -0x44ed 016481 rtn -: 016483 remote_car_key_scan_process: -0x44ee 016484 branch keyscan_key_process -: 016486 remote_car_scale_process_idle: -0x44ef 016487 call remote_car_rocker_process -0x44f0 016488 call remote_car_24g_status_process -0x44f1 016489 branch remote_car_key_scan_process -: 016491 remote_car_scale_process_bb_event: -0x44f2 016492 copy regc ,pdata -0x44f3 016493 beq bt_evt_button_up ,app_event_button_up -0x44f4 016494 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x44f5 016495 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete -0x44f6 016496 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success -0x44f7 016497 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail -0x44f8 016498 rtn -: 016500 remote_car_24g_attempt_fail: -0x44f9 016501 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x44fa 016502 rtn -: 016504 remote_car_24g_pairing_complete: -0x44fb 016505 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x44fc 016506 jam work_paired ,mem_remote_car_24g_auto_work_step -0x44fd 016507 jam work_paired ,mem_remote_car_24g_pair_success_flag -0x44fe 016508 rtn -: 016510 remote_car_24g_attempt_success: -0x44ff 016511 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x4500 016512 jam work_paired ,mem_remote_car_24g_auto_work_step -0x4501 016513 jam work_paired ,mem_remote_car_24g_pair_success_flag -0x4502 016514 rtn -: 016516 remote_car_24g_status_process: -0x4503 016517 fetch 1 ,mem_remote_car_24g_auto_work_step -0x4504 016518 rtneq power_on -0x4505 016519 fetch 1 ,mem_remote_car_24g_status -0x4506 016520 rtneq work_paired -0x4507 016521 jam work_paired ,mem_remote_car_24g_status -: 016522 remote_car_scale_process_paired: -0x4508 016523 arg 0 ,rega -0x4509 016524 branch ui_led_off_global -: 016525 remote_car_scale_process_shutdown: -0x450a 016526 arg 0 ,rega -0x450b 016527 call ui_led_off_global -0x450c 016528 call remote_car_ui_led_init -0x450d 016529 branch app_enter_hibernate -: 016531 remote_car_event_timer: -0x450e 016532 call app_power_timer -0x450f 016533 branch remote_car_no_data_timer -: 016535 remote_car_no_data_timer: -0x4510 016536 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable -0x4511 016537 rtn blank -0x4512 016538 arg mem_remote_car_no_data_timer ,regc -0x4513 016539 arg remote_car_scale_process_shutdown ,regb -0x4514 016540 branch timer_single_step_2b -: 016543 remote_car_get_adc_default_data: -0x4515 016544 call remote_car_rocker_get_x -0x4516 016545 storet 2 ,mem_current_vdd_value_default_mid_x -0x4517 016546 call remote_car_rocker_get_y -0x4518 016547 storet 2 ,mem_current_vdd_value_default_mid_y -0x4519 016548 rtn -: 016549 remote_car_rocker_data_get: -: 016550 remote_car_rocker_get_x: -0x451a 016551 fetch 2 ,mem_current_vdd_value_default_mid_x -0x451b 016552 store 2 ,mem_current_vdd_value_default_mid_temp -0x451c 016553 call remote_car_get_adc_from_gpio6 -0x451d 016554 call remote_car_rocker_get_value -0x451e 016555 store 1 ,mem_rocker_status -: 016556 remote_car_rocker_get_y: -0x451f 016557 fetch 2 ,mem_current_vdd_value_default_mid_y -0x4520 016558 store 2 ,mem_current_vdd_value_default_mid_temp -0x4521 016559 call remote_car_get_adc_from_gpio7 -0x4522 016560 call remote_car_rocker_get_value -0x4523 016561 store 1 ,mem_rocker_status + 1 -0x4524 016562 rtn -: 016563 remote_car_rocker_get_value: -0x4525 016564 fetch 2 ,mem_current_vdd_default_range -0x4526 016565 copy pdata ,rega -0x4527 016566 fetch 2 ,mem_current_vdd_value_default_mid_temp -0x4528 016567 call remote_car_rocker_mid_value_adjust -0x4529 016568 fetch 1 ,mem_rocker_work_status -0x452a 016569 nbranch remote_car_rocker_translate_key ,blank -0x452b 016570 nrtn positive -0x452c 016571 fetcht 2 ,mem_current_vdd_value_default_mid_temp -0x452d 016572 rtn -: 016573 remote_car_rocker_mid_value_adjust: -0x452e 016574 isub temp ,pdata -0x452f 016575 branch remote_car_rocker_mid_adjust_positive ,positive -0x4530 016576 sub pdata ,0 ,pdata -0x4531 016577 jam 1 ,mem_rocker_negative_flag -0x4532 016578 isub rega ,null -0x4533 016579 rtn -: 016580 remote_car_rocker_mid_adjust_positive: -0x4534 016581 jam 0 ,mem_rocker_negative_flag -0x4535 016582 isub rega ,null -0x4536 016583 rtn -: 016584 remote_car_rocker_translate_key: -0x4537 016585 nbranch remote_car_rocker_middle_key ,positive -0x4538 016586 fetch 1 ,mem_rocker_negative_flag -0x4539 016587 nbranch remote_car_rocker_negative_key ,blank -: 016588 remote_car_rocker_positive_key: -0x453a 016589 setarg rocker_positive_key -0x453b 016590 rtn -: 016591 remote_car_rocker_negative_key: -0x453c 016592 setarg rocker_negative_key -0x453d 016593 rtn -: 016594 remote_car_rocker_middle_key: -0x453e 016595 setarg rocker_middle_key -0x453f 016596 rtn -: 016597 remote_car_get_adc_from_gpio6: -0x4540 016598 jam 0x33 ,mem_adc_channel -0x4541 016599 branch adc_set_mode -: 016600 remote_car_get_adc_from_gpio7: -0x4542 016601 jam 0x34 ,mem_adc_channel -0x4543 016602 branch adc_set_mode -: 016605 remote_car_rocker_process: -0x4544 016606 fetch 1 ,mem_remote_car_config_check_way -0x4545 016607 rtnne car_remote_check_rocker -: 016608 remote_car_read_rocker_check_start: -0x4546 016609 bpatch patch1e_2 ,mem_patch1e -0x4547 016610 jam 1 ,mem_rocker_work_status -0x4548 016611 call remote_car_rocker_data_get -0x4549 016612 fetch 2 ,mem_rocker_status -0x454a 016613 fetcht 2 ,mem_rocker_last_status -0x454b 016614 isub temp ,null -0x454c 016615 rtn zero -0x454d 016616 store 2 ,mem_rocker_last_status -0x454e 016617 call remote_car_rocker_x_to_key -0x454f 016618 branch remote_car_rocker_y_to_key -: 016620 remote_car_rocker_x_to_key: -0x4550 016621 fetch 1 ,mem_rocker_x_status -0x4551 016622 branch rocker_to_queue_set_0 ,blank -0x4552 016623 increase -1 ,pdata -0x4553 016624 branch remote_car_rocker_to_key -: 016625 remote_car_rocker_y_to_key: -0x4554 016626 fetch 1 ,mem_rocker_y_status -0x4555 016627 branch rocker_to_queue_set_2 ,blank -0x4556 016628 increase 1 ,pdata -: 016629 remote_car_rocker_to_key: -0x4557 016630 copy pdata ,queue -0x4558 016631 arg 1 ,rega -0x4559 016632 branch remote_car_send_key_data -: 016634 rocker_to_queue_set_0: -0x455a 016635 arg 0 ,queue -0x455b 016636 arg 0 ,rega -0x455c 016637 branch remote_car_send_key_data -: 016638 rocker_to_queue_set_2: -0x455d 016639 arg 2 ,queue -0x455e 016640 arg 0 ,rega -0x455f 016641 branch remote_car_send_key_data -: 016643 remote_car_send_key_data: -0x4560 016644 copy rega ,pdata -0x4561 016645 store 1 ,mem_remote_key_status -0x4562 016646 fetch 1 ,mem_remote_car_24g_auto_work_step -0x4563 016647 beq power_on ,g24_auto_pair_start -0x4564 016648 fetch 2 ,mem_remote_car_no_data_timeout -0x4565 016649 store 2 ,mem_remote_car_no_data_timer -0x4566 016650 fetch 1 ,mem_remote_key_status -0x4567 016651 branch remote_car_key_is_release ,blank -: 016652 remote_car_key_is_press: -0x4568 016653 bpatch patch1e_3 ,mem_patch1e -0x4569 016654 arg 0 ,rega -0x456a 016655 call ui_led_on_global -: 016656 remote_car_attack_key_press: -0x456b 016657 copy queue ,pdata -0x456c 016658 beq 4 ,remote_car_send_attack_key4_press -0x456d 016659 beq 5 ,remote_car_send_attack_key5_press -0x456e 016660 beq 6 ,remote_car_send_fire_key6_press -: 016663 remote_car_motor_key_press: -0x456f 016664 call remote_car_device_layout_select -0x4570 016665 beq control_f_b_ten ,remote_car_single_motor_key_is_press -0x4571 016666 beq control_l_r_ten ,remote_car_double_motor_key_press -0x4572 016667 beq control_l_r_lr ,remote_car_single_motor_key_is_press -0x4573 016668 rtn -: 016670 remote_car_single_motor_key_is_press: -0x4574 016671 copy queue ,pdata -0x4575 016672 beq 0 ,remote_car_send_motor1_key0_press -0x4576 016673 beq 1 ,remote_car_send_motor1_key1_press -0x4577 016674 beq 2 ,remote_car_send_motor2_key2_press -0x4578 016675 beq 3 ,remote_car_send_motor2_key3_press -0x4579 016676 rtn -: 016678 remote_car_double_motor_key_press: -0x457a 016679 copy queue ,pdata -0x457b 016680 beq 0 ,remote_car_send_double_motor_key0_press -0x457c 016681 beq 1 ,remote_car_send_double_motor_key1_press -0x457d 016682 beq 2 ,remote_car_send_double_motor_key2_press -0x457e 016683 beq 3 ,remote_car_send_double_motor_key3_press -0x457f 016684 rtn -: 016686 remote_car_key_is_release: -0x4580 016687 bpatch patch1e_4 ,mem_patch1e -0x4581 016688 arg 0 ,rega -0x4582 016689 call ui_led_off_global -: 016690 remote_car_attack_key_release: -0x4583 016691 copy queue ,pdata -0x4584 016692 beq 4 ,remote_car_send_attack_key4_rel -0x4585 016693 beq 5 ,remote_car_send_attack_key5_rel -: 016696 remote_car_motor_key_release: -0x4586 016697 call remote_car_device_layout_select -0x4587 016698 beq control_f_b_ten ,remote_car_single_motor_key_rel -0x4588 016699 beq control_l_r_ten ,remote_car_double_motor_key_rel -0x4589 016700 beq control_l_r_lr ,remote_car_single_motor_key_rel -0x458a 016701 rtn -: 016703 remote_car_device_layout_select: -0x458b 016704 fetch 1 ,mem_remote_car_config_layout -0x458c 016705 fetcht 1 ,mem_remote_car_config_key_map -0x458d 016706 ior temp ,pdata -0x458e 016707 rtn -: 016710 remote_car_send_motor1_key0_press: -0x458f 016711 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x4590 016712 branch remote_car_send_key -: 016713 remote_car_send_motor1_key1_press: -0x4591 016714 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x4592 016715 branch remote_car_send_key -: 016716 remote_car_send_motor2_key2_press: -0x4593 016717 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x4594 016718 branch remote_car_send_key -: 016719 remote_car_send_motor2_key3_press: -0x4595 016720 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x4596 016721 branch remote_car_send_key -: 016724 remote_car_send_double_motor_key0_press: -0x4597 016725 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x4598 016726 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x4599 016727 branch remote_car_send_key -: 016728 remote_car_send_double_motor_key1_press: -0x459a 016729 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x459b 016730 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x459c 016731 branch remote_car_send_key -: 016732 remote_car_send_double_motor_key2_press: -0x459d 016733 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x459e 016734 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x459f 016735 branch remote_car_send_key -: 016736 remote_car_send_double_motor_key3_press: -0x45a0 016737 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x45a1 016738 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x45a2 016739 branch remote_car_send_key -: 016742 remote_car_send_attack_key4_press: -0x45a3 016743 jam motor_positive ,mem_remote_car_24g_motor3_payload -0x45a4 016744 branch remote_car_send_key -: 016745 remote_car_send_attack_key5_press: -0x45a5 016746 jam motor_negative ,mem_remote_car_24g_motor3_payload -0x45a6 016747 branch remote_car_send_key -: 016749 remote_car_send_fire_key6_press: -0x45a7 016750 jam 0x01 ,mem_remote_car_24g_fire_send_payload -0x45a8 016751 branch remote_car_send_attack -: 016753 remote_car_single_motor_key_rel: -0x45a9 016754 copy queue ,pdata -0x45aa 016755 beq 0 ,remote_car_send_motor1_key0_rel -0x45ab 016756 beq 1 ,remote_car_send_motor1_key1_rel -0x45ac 016757 beq 2 ,remote_car_send_motor2_key2_rel -0x45ad 016758 beq 3 ,remote_car_send_motor2_key3_rel -0x45ae 016759 rtn -: 016761 remote_car_double_motor_key_rel: -0x45af 016762 copy queue ,pdata -0x45b0 016763 beq 0 ,remote_car_send_double_motor_key0_rel -0x45b1 016764 beq 1 ,remote_car_send_double_motor_key1_rel -0x45b2 016765 beq 2 ,remote_car_send_double_motor_key2_rel -0x45b3 016766 beq 3 ,remote_car_send_double_motor_key3_rel -0x45b4 016767 rtn -: 016769 remote_car_send_motor1_key0_rel: -: 016770 remote_car_send_motor1_key1_rel: -0x45b5 016771 jam motor_stop ,mem_remote_car_24g_motor1_payload -0x45b6 016772 branch remote_car_send_key -: 016773 remote_car_send_motor2_key2_rel: -: 016774 remote_car_send_motor2_key3_rel: -0x45b7 016775 jam motor_stop ,mem_remote_car_24g_motor2_payload -0x45b8 016776 branch remote_car_send_key -: 016778 remote_car_send_double_motor_key0_rel: -: 016779 remote_car_send_double_motor_key1_rel: -: 016780 remote_car_send_double_motor_key2_rel: -: 016781 remote_car_send_double_motor_key3_rel: -0x45b9 016782 jam motor_stop ,mem_remote_car_24g_motor1_payload -0x45ba 016783 jam motor_stop ,mem_remote_car_24g_motor2_payload -0x45bb 016784 branch remote_car_send_key -: 016786 remote_car_send_attack_key4_rel: -: 016787 remote_car_send_attack_key5_rel: -0x45bc 016788 jam motor_stop ,mem_remote_car_24g_motor3_payload -0x45bd 016789 branch remote_car_send_key -: 016791 remote_car_send_key: -0x45be 016792 arg mem_remote_car_24g_motor_packet ,rega -0x45bf 016793 branch queue_push -: 016794 remote_car_send_attack: -0x45c0 016795 arg mem_remote_car_24g_fire_packet ,rega -0x45c1 016796 branch queue_push -: 016798 remote_car_g24_package_data: -0x45c2 016799 fetch 1 ,mem_remote_car_24g_pair_success_flag -0x45c3 016800 beq work_paired ,remote_car_g24_send_empty -0x45c4 016801 arg mem_remote_car_24g_tx_temp ,rega -0x45c5 016802 call queue_pop -0x45c6 016803 nbranch remote_car_moto_data ,user -: 016804 remote_car_g24_package_data_continue: -0x45c7 016805 arg mem_remote_car_24g_tx_temp ,contr -0x45c8 016806 ifetch 1 ,contr -0x45c9 016807 copy pdata ,rega -0x45ca 016808 arg mem_remote_car_24g_tx_temp + 1 ,regb -0x45cb 016811 rtn -: 016813 remote_car_g24_send_empty: -0x45cc 016814 jam 0 ,mem_remote_car_24g_pair_success_flag -0x45cd 016815 enable user -0x45ce 016816 arg 1 ,rega -0x45cf 016817 arg mem_remote_car_empty_packet ,regb -0x45d0 016818 rtn -: 016820 remote_car_moto_data: -0x45d1 016821 fetch 1 ,mem_remote_car_24g_tx_temp + 3 -0x45d2 016822 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next -0x45d3 016823 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next -0x45d4 016824 rtn -: 016825 remote_car_moto_data_next: -0x45d5 016826 fetch 1 ,mem_remote_car_24g_tx_temp + 6 -0x45d6 016827 nbranch remote_car_moto_data_enable_user ,blank -0x45d7 016828 fetch 1 ,mem_remote_car_24g_tx_temp + 8 -0x45d8 016829 nbranch remote_car_moto_data_enable_user ,blank -0x45d9 016830 fetch 1 ,mem_remote_car_24g_tx_temp + 10 -0x45da 016831 nbranch remote_car_moto_data_enable_user ,blank -0x45db 016832 rtn -: 016833 remote_car_moto_data_enable_user: -0x45dc 016834 enable user -0x45dd 016835 branch remote_car_g24_package_data_continue -: 016843 shutter_init: -0x45de 016844 rtn wake -0x45df 016845 hfetch 1 ,core_gpio_sel1 -0x45e0 016846 and_into 0xfc ,pdata -0x45e1 016847 hstore 1 ,core_gpio_sel1 -0x45e2 016848 setarg shutter_le_before_hibernate -0x45e3 016849 store 2 ,mem_cb_before_hibernate -0x45e4 016851 setarg shutter_process_lpm_before -0x45e5 016852 store 2 ,mem_cb_before_lpm -0x45e6 016854 setarg app_enter_hibernate -0x45e7 016855 store 2 ,mem_cb_discovry_timeout -0x45e8 016857 setarg shutter_process_idle -0x45e9 016858 store 2 ,mem_cb_idle_process -0x45ea 016860 setarg shutter_process_bb_event -0x45eb 016861 store 2 ,mem_cb_bb_event_process -0x45ec 016863 setarg shutter_le_scale_lpm_lock -0x45ed 016864 store 2 ,mem_cb_check_wakelock -0x45ee 016866 setarg ble_shutter_receive_data -0x45ef 016867 store 2 ,mem_cb_att_write -0x45f0 016869 setarg shutter_le_bb_event_timer -0x45f1 016870 store 2 ,mem_cb_event_timer -0x45f2 016872 setarg shutter_key_change -0x45f3 016873 store 2 ,mem_cb_shutter_keycan -0x45f4 016875 setarg shutter_soft_swtich_power_on -0x45f5 016876 store 2 ,mem_shutter_soft_switch_poweron_callback_function -0x45f6 016877 setarg shutter_soft_swtich_power_off -0x45f7 016878 store 2 ,mem_shutter_soft_switch_poweroff_callback_function -0x45f8 016880 call le_modified_name -0x45f9 016881 call shutter_load_bluetooth_config_by_user_config -0x45fa 016882 call shutter_init_bluetooth_config -0x45fb 016883 call shutter_init_param -0x45fc 016884 call keyscan_key_init -0x45fd 016885 call shutter_load_buffer_config_form_datarom -0x45fe 016886 call queue_init -0x45ff 016887 call ui_led_init_global -0x4600 016888 call shutter_load_bluetooth_config -0x4601 016889 call shutter_load_bluetooth_config_by_eeprom -0x4602 016891 bpatch patch1e_5 ,mem_patch1e -0x4603 016892 call classic_shutter_load_reconn_info -0x4604 016893 fetch 1 ,mem_shutter_hard_soft_switch_case -0x4605 016894 beq hard_switch ,shutter_hart_swtich_power_on -0x4606 016895 fetch 1 ,mem_shutter_soft_switch_button_gpio -0x4607 016896 store 1 ,mem_ui_button_gpio -0x4608 016897 branch ui_soft_swtich_init -: 016900 shutter_hart_swtich_power_on: -0x4609 016901 jam ui_button_gpio_disable ,mem_ui_button_gpio -0x460a 016902 jam ss_state_power_on ,mem_shutter_soft_switch_power_state -0x460b 016903 branch shutter_start_reconnect -: 016907 shutter_le_scale_lpm_lock: -0x460c 016908 fetch 1 ,mem_shutter_soft_switch_power_state -0x460d 016909 beq ss_state_power_off ,app_get_lpm_wake_lock -0x460e 016910 call l2cap_malloc_get_full_map -0x460f 016911 fetch 1 ,mem_used_map -0x4610 016912 nbranch app_get_lpm_wake_lock ,blank -0x4611 016913 branch app_put_lpm_wake_lock -: 016917 shutter_process_bb_event: -0x4612 016918 copy regc ,pdata -0x4613 016920 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect -0x4614 016921 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect -0x4615 016922 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed -0x4616 016923 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete -0x4617 016924 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect -0x4618 016925 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect -0x4619 016926 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake -0x461a 016927 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout -0x461b 016928 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug -0x461c 016929 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff -0x461d 016930 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information -0x461e 016932 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect -0x461f 016933 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect -0x4620 016934 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete -0x4621 016935 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response -0x4622 016937 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press -0x4623 016938 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down -0x4624 016939 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up -0x4625 016940 rtn -: 016945 classic_shutter_process_baseband_connect: -0x4626 016946 jam 0 ,mem_classic_shutter_hid_disconn_count -0x4627 016947 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x4628 016948 rtn -: 016951 classic_shutter_process_baseband_disconnect: -0x4629 016952 call classic_shutter_disconnect_clear_flag -0x462a 016953 branch classic_shutter_process_reconnect_failed -: 016955 classic_shutter_disconnect_clear_flag: -0x462b 016956 jam app_handshake_null ,mem_app_handshake_flag -0x462c 016957 jam 0 ,mem_hid_handshake_timer_count -0x462d 016958 jam 0 ,mem_unsniff2sniff_timer_count -0x462e 016959 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x462f 016960 jam 0 ,mem_classic_shutter_hid_disconn_count -0x4630 016961 branch queue_init -: 016964 classic_shutter_process_reconnect_failed: -0x4631 016965 call app_disconn_reason_clear -0x4632 016966 branch shutter_start_bluetooth_discovery -: 016969 classic_shutter_process_setup_complete: -0x4633 016970 call shutter_stop_bluetooth_discovery -0x4634 016971 branch app_led_stop_blink -: 016974 classic_shutter_process_hid_connect: -0x4635 016975 setarg hid_handshake_timeout -0x4636 016976 store 1 ,mem_hid_handshake_timer_count -0x4637 016977 rtn -: 016980 classic_shutter_process_hid_disconnect: -0x4638 016981 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x4639 016982 setarg flag_shutter_hid_disconn_timeout -0x463a 016983 store 1 ,mem_classic_shutter_hid_disconn_count -0x463b 016984 rtn -: 016987 classic_shutter_process_hid_handshake: -0x463c 016988 fetch 1 ,mem_app_handshake_flag -0x463d 016989 rtneq app_handshake_done -0x463e 016990 jam app_handshake_done ,mem_app_handshake_flag -0x463f 016991 call app_lpm_mult_enable -0x4640 016992 call app_store_reconn_info -0x4641 016993 call shutter_stop_bluetooth_discovery -0x4642 016994 call app_led_off -0x4643 016995 branch app_bt_enter_sniff -: 016998 classic_shutter_process_reconnect_page_timeout: -0x4644 016999 branch classic_shutter_process_reconnect_failed -: 017002 classic_shutter_process_virtual_cable_unplug: -0x4645 017003 setarg flag_shutter_cable_unplug_timeout -0x4646 017004 store 1 ,mem_classic_shutter_cable_unplug_conut -0x4647 017005 rtn -: 017008 classic_shutter_process_remote_unsniff: -0x4648 017009 branch app_start_auto_sniff -: 017013 classic_shutter_process_store_reconnect_information: -0x4649 017014 arg nvram_eeprom_offset ,regb -0x464a 017015 fetch 1 ,mem_nv_data_number -0x464b 017016 mul32 pdata ,34 ,temp -0x464c 017017 fetch 2 ,mem_nv_data_ptr -0x464d 017018 copy pdata ,rega -0x464e 017019 branch iicd_write_eep_data -: 017021 classic_shutter_load_reconn_info: -0x464f 017022 arg nvram_eeprom_offset ,regb -0x4650 017023 fetch 1 ,mem_shutter_bluetooth_type -0x4651 017024 rtnbit0 classic_shutter -0x4652 017025 fetch 1 ,mem_nv_data_number -0x4653 017026 rtn blank -0x4654 017027 mul32 pdata ,34 ,temp -0x4655 017028 fetch 2 ,mem_nv_data_ptr -0x4656 017029 copy pdata ,rega -0x4657 017030 branch iicd_read_eep_data -: 017034 ble_shutter_process_baseband_connect: -0x4658 017035 call shutter_stop_bluetooth_discovery -0x4659 017036 setarg 0 -0x465a 017037 store 2 ,mem_ble_shutter_reconn_timer -0x465b 017038 branch app_led_off -: 017041 ble_shutter_process_baseband_disconnect: -0x465c 017042 call queue_init -0x465d 017043 jam 0 ,mem_ble_shutter_enable_notify -0x465e 017044 branch shutter_start_reconnect -: 017047 ble_shutter_process_reconnect_complete: -0x465f 017048 call queue_init -0x4660 017049 jam 1 ,mem_ble_shutter_enable_notify -0x4661 017050 fetch 8 ,mem_ble_shutter_interval_min -0x4662 017051 store 8 ,mem_le_interval_min -0x4663 017052 call app_lpm_mult_enable -0x4664 017053 branch le_l2cap_tx_update_req -: 017056 ble_shutter_process_parse_connect_parameter_update_response: -0x4665 017057 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x4666 017058 rtneq ble_signaling_connect_parameter_update_accepted -0x4667 017059 fetch 8 ,mem_ble_shutter_interval_min_new -0x4668 017060 rtn blank -0x4669 017061 store 8 ,mem_le_interval_min -0x466a 017062 branch le_l2cap_tx_update_req -: 017066 shutter_process_soft_swtich_button_long_press: -0x466b 017067 branch ui_soft_switch_botton_long_press -: 017069 shutter_process_soft_swtich_button_down: -0x466c 017070 fetch 1 ,mem_shutter_hard_soft_switch_case -0x466d 017071 rtneq hard_switch -0x466e 017072 fetch 1 ,mem_shutter_soft_switch_power_state -0x466f 017073 rtnne ss_state_power_on -0x4670 017074 call shutter_store_currenct_led_state -0x4671 017075 branch app_led_on -: 017077 shutter_store_currenct_led_state: -0x4672 017078 jam 1 ,mem_shutter_soft_swtich_botton_down -0x4673 017079 arg 11 ,loopcnt -0x4674 017080 arg mem_shutter_soft_swtich_led_struct_temp ,contw -0x4675 017081 arg mem_shutter_led_struct_app_led ,contr -0x4676 017082 branch memcpy -: 017084 shutter_process_soft_swtich_button_up: -0x4677 017085 fetch 1 ,mem_shutter_hard_soft_switch_case -0x4678 017086 rtneq hard_switch -0x4679 017087 fetch 1 ,mem_shutter_soft_switch_power_state -0x467a 017088 beq ss_state_power_on ,shutter_load_currenct_led_state -0x467b 017089 branch ui_soft_switch_botton_up -: 017091 shutter_load_currenct_led_state: -0x467c 017092 fetch 1 ,mem_shutter_soft_swtich_botton_down -0x467d 017093 rtnne 1 -0x467e 017094 jam 0 ,mem_shutter_soft_swtich_botton_down -0x467f 017095 fetch 2 ,mem_ui_state_map -0x4680 017096 bbit1 ui_state_bt_connected ,app_led_off -0x4681 017097 bbit1 ui_state_ble_connected ,app_led_off -0x4682 017098 arg 11 ,loopcnt -0x4683 017099 arg mem_shutter_soft_swtich_led_struct_temp ,contr -0x4684 017100 arg mem_shutter_led_struct_app_led ,contw -0x4685 017101 branch memcpy -: 017106 shutter_le_bb_event_timer: -0x4686 017108 call shutter_check_sleep_timer -0x4687 017111 call shutter_check_power_off_timer -0x4688 017114 call classic_shutter_check_unplug_timer -0x4689 017115 call classic_shutter_hid_handshake_timer -0x468a 017116 call classic_shutter_hid_disconn_timer -0x468b 017119 branch ble_shutter_reconn_timer -: 017123 shutter_check_sleep_timer: -0x468c 017124 arg mem_shutter_sleep_timer ,regc -0x468d 017125 arg shutter_sleep_timeout ,regb -0x468e 017126 branch timer_single_step_2b -: 017127 shutter_sleep_timeout: -0x468f 017128 jam ss_state_power_off ,mem_shutter_soft_switch_power_state -0x4690 017129 call app_led_off -0x4691 017130 call shutter_disconnect_current_connection -0x4692 017131 branch shutter_wait_power_off -: 017134 shutter_check_power_off_timer: -0x4693 017135 arg mem_shutter_power_off_timer ,regc -0x4694 017136 arg shutter_check_power_off_timeout ,regb -0x4695 017137 branch timer_single_step -: 017139 shutter_check_power_off_timeout: -0x4696 017140 fetch 2 ,mem_ui_state_map -0x4697 017141 bbit1 ui_state_ble_connected ,shutter_wait_power_off -0x4698 017142 bbit1 ui_state_bt_connected ,shutter_wait_power_off -0x4699 017143 fetch 1 ,mem_shutter_led_struct_app_led_type -0x469a 017144 beq ui_led_state_blink_start ,shutter_wait_power_off -0x469b 017145 beq ui_led_state_blink_lighting ,shutter_wait_power_off -0x469c 017146 beq ui_led_state_blink_darking ,shutter_wait_power_off -0x469d 017147 branch app_enter_hibernate -: 017151 classic_shutter_check_unplug_timer: -0x469e 017152 arg mem_classic_shutter_cable_unplug_conut ,regc -0x469f 017153 arg classic_shutter_unplug_timeout ,regb -0x46a0 017154 branch timer_single_step -: 017156 classic_shutter_unplug_timeout: -0x46a1 017157 fetch 1 ,mem_control_tasks -0x46a2 017158 set1 l2cap_disconnect_interrupt ,pdata -0x46a3 017159 set1 l2cap_disconnect_control ,pdata -0x46a4 017160 store 1 ,mem_control_tasks -0x46a5 017161 rtn -: 017163 classic_shutter_hid_handshake_timer: -0x46a6 017164 arg mem_hid_handshake_timer_count ,regc -0x46a7 017165 arg classic_shutter_process_hid_handshake ,regb -0x46a8 017166 branch timer_single_step -: 017168 classic_shutter_hid_disconn_timer: -0x46a9 017169 arg mem_classic_shutter_hid_disconn_count ,regc -0x46aa 017170 arg app_bt_disconnect ,regb -0x46ab 017171 branch timer_single_step -: 017176 ble_shutter_reconn_timer: -0x46ac 017177 fetch 1 ,mem_shutter_soft_switch_power_state -0x46ad 017178 rtnne ss_state_power_on -0x46ae 017179 arg mem_ble_shutter_reconn_timer ,regc -0x46af 017180 arg shutter_start_bluetooth_discovery ,regb -0x46b0 017181 branch timer_single_step_2b -: 017184 shutter_process_idle: -0x46b1 017185 call shutter_send_data_to_master -0x46b2 017186 branch keyscan_key_process -: 017189 shutter_process_lpm_before: -0x46b3 017190 branch keyscan_process_lpm_before -: 017192 shutter_le_before_hibernate: -0x46b4 017193 call gpio_set_before_lpm_common -0x46b5 017194 branch shutter_process_lpm_before -: 017200 shutter_stop_bluetooth_discovery: -0x46b6 017201 fetch 1 ,mem_shutter_bluetooth_type -0x46b7 017202 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery -0x46b8 017203 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery -0x46b9 017204 rtn -: 017206 ble_shutter_stop_bluetooth_discovery: -0x46ba 017207 fetch 2 ,mem_ble_shutter_connect_timeout -0x46bb 017208 store 2 ,mem_shutter_sleep_timeout -0x46bc 017209 store 2 ,mem_shutter_sleep_timer -0x46bd 017210 branch app_ble_stop_adv -: 017212 classic_shutter_stop_bluetooth_discovery: -0x46be 017213 fetch 2 ,mem_classic_shutter_connect_timeout -0x46bf 017214 store 2 ,mem_shutter_sleep_timeout -0x46c0 017215 store 2 ,mem_shutter_sleep_timer -0x46c1 017216 branch app_bt_stop_discovery -: 017218 shutter_start_bluetooth_discovery: -0x46c2 017219 fetch 1 ,mem_shutter_soft_switch_power_state -0x46c3 017220 rtnne ss_state_power_on -0x46c4 017221 fetch 1 ,mem_shutter_bluetooth_type -0x46c5 017222 bbit1 classic_shutter ,classic_shutter_start_discovery -0x46c6 017223 bbit1 ble_shutter ,ble_shutter_start_discovery -0x46c7 017224 rtn -: 017226 classic_shutter_start_discovery: -0x46c8 017227 fetch 2 ,mem_classic_shutter_discovery_timeout , -0x46c9 017228 store 2 ,mem_shutter_sleep_timeout -0x46ca 017229 store 2 ,mem_shutter_sleep_timer -0x46cb 017230 branch app_bt_start_discovery_short -: 017232 ble_shutter_start_discovery: -0x46cc 017233 fetch 2 ,mem_ui_state_map -0x46cd 017234 rtnbit1 ui_state_ble_connected -0x46ce 017235 fetch 2 ,mem_ble_shutter_discovery_timeout -0x46cf 017236 store 2 ,mem_shutter_sleep_timeout -0x46d0 017237 store 2 ,mem_shutter_sleep_timer -0x46d1 017238 fetch 2 ,mem_ble_shutter_discovery_adv_interval -0x46d2 017239 call shutter_ble_adv_interval_set -0x46d3 017240 call app_led_start_blink -0x46d4 017241 fetch 4 ,mem_ble_shutter_discovery_blink_on_time -0x46d5 017242 store 4 ,mem_shutter_led_struct_app_led_on_time -0x46d6 017243 fetch 2 ,mem_ui_state_map -0x46d7 017244 rtnbit1 ui_state_ble_adv -0x46d8 017245 branch app_ble_start_adv -: 017248 shutter_start_reconnect: -0x46d9 017249 fetch 1 ,mem_shutter_soft_switch_power_state -0x46da 017250 rtnne ss_state_power_on -0x46db 017251 fetch 1 ,mem_shutter_bluetooth_type -0x46dc 017252 bbit1 classic_shutter ,classic_shutter_start_reconnect -0x46dd 017253 bbit1 ble_shutter ,ble_shutter_start_reconnect -0x46de 017254 rtn -: 017256 classic_shutter_start_reconnect: -0x46df 017257 call app_check_reconn_target -0x46e0 017258 branch shutter_start_bluetooth_discovery ,blank -0x46e1 017259 call app_led_on -0x46e2 017260 call app_bt_stop_discovery -0x46e3 017261 branch app_bt_start_reconnect -: 017263 ble_shutter_start_reconnect: -0x46e4 017264 fetch 2 ,mem_ble_shutter_reconn_timer -0x46e5 017265 fetcht 2 ,mem_ble_shutter_reconn_timeout -0x46e6 017266 storet 2 ,mem_ble_shutter_reconn_timer -0x46e7 017267 nrtn blank -0x46e8 017268 fetch 2 ,mem_ble_shutter_reconn_dav_interval -0x46e9 017269 call shutter_ble_adv_interval_set -0x46ea 017270 call app_led_start_blink -0x46eb 017271 fetch 4 ,mem_ble_shutter_reconn_blink_on_time -0x46ec 017272 store 4 ,mem_shutter_led_struct_app_led_on_time -0x46ed 017273 fetch 2 ,mem_ui_state_map -0x46ee 017274 rtnbit1 ui_state_ble_adv -0x46ef 017275 branch app_ble_start_adv -: 017278 shutter_ble_adv_interval_set: -0x46f0 017279 store 2 ,mem_lpm_interval -0x46f1 017280 increase -4 ,pdata -0x46f2 017281 store 2 ,mem_le_adv_interval -0x46f3 017282 rtn -: 017285 shutter_disconnect_current_connection: -0x46f4 017286 fetch 2 ,mem_ui_state_map -0x46f5 017287 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x46f6 017288 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x46f7 017289 branch shutter_stop_bluetooth_discovery -: 017293 app_check_reconn_target: -0x46f8 017294 fetch 1 ,mem_nv_data_number -0x46f9 017295 copy pdata ,loopcnt -0x46fa 017296 fetch 2 ,mem_nv_data_ptr -0x46fb 017297 copy pdata ,rega -: 017298 app_check_reconn_target_loop: -0x46fc 017299 ifetch 2 ,rega -0x46fd 017300 beq 0 ,found_reconn_device -0x46fe 017301 increase nv_data_len ,rega -0x46ff 017302 loop app_check_reconn_target_loop -0x4700 017303 branch enable_blank -: 017305 found_reconn_device: -0x4701 017306 ifetch 6 ,contr -0x4702 017307 store 6 ,mem_hci_plap -0x4703 017308 increase 10 ,contr -0x4704 017309 arg mem_link_key ,contw -0x4705 017310 call memcpy16 -0x4706 017311 call check_link_key_load -0x4707 017312 branch disable_blank -: 017318 shutter_check_data_enable: -0x4708 017319 call disable_user -0x4709 017320 fetch 2 ,mem_ui_state_map -0x470a 017321 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable -0x470b 017322 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable -0x470c 017323 rtn -: 017325 shutter_check_bt_data_enable: -0x470d 017326 fetch 1 ,mem_hid_interrupt_state -0x470e 017327 rtnne 0x3f -0x470f 017328 branch enable_user -: 017330 shutter_check_ble_data_enable: -0x4710 017331 fetch 1 ,mem_ble_shutter_enable_notify -0x4711 017332 rtn blank -0x4712 017333 branch enable_user -: 017338 shutter_check_bluetooth_conn: -0x4713 017339 call disable_user -0x4714 017340 fetch 2 ,mem_ui_state_map -0x4715 017341 rtnbit1 ui_state_bt_connected -0x4716 017342 rtnbit1 ui_state_ble_connected -0x4717 017343 branch enable_user -: 017347 shutter_change_bluetooth_status_bt_disconn: -0x4718 017348 fetch 1 ,mem_shutter_bluetooth_type -0x4719 017349 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn -0x471a 017350 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn -0x471b 017351 rtn -: 017353 classic_shutter_change_bluetooth_status_bt_disconn: -0x471c 017354 fetch 1 ,mem_scan_mode -0x471d 017355 rtnne 0x03 -0x471e 017356 branch shutter_start_reconnect -: 017358 ble_shutter_change_bluetooth_status_bt_disconn: -0x471f 017359 branch shutter_start_reconnect -: 017362 shutter_check_send_data: -0x4720 017363 disable user2 -0x4721 017364 fetch 2 ,mem_shutter_sleep_timeout -0x4722 017365 store 2 ,mem_shutter_sleep_timer -0x4723 017367 call shutter_check_bluetooth_conn -0x4724 017368 branch shutter_change_bluetooth_status_bt_disconn ,user -0x4725 017370 call shutter_check_data_enable -0x4726 017371 nrtn user -0x4727 017372 enable user2 -0x4728 017373 rtn -: 017377 shutter_key_change: -0x4729 017378 call shutter_check_send_data -0x472a 017379 nrtn user2 -0x472b 017380 deposit rega -0x472c 017381 branch shutter_key_release ,blank -: 017382 shutter_key_press: -0x472d 017383 call app_led_on -0x472e 017384 arg mem_key0_press ,regc -0x472f 017385 branch push_queue_press_or_release -: 017387 shutter_key_release: -0x4730 017388 call app_led_off -0x4731 017389 arg mem_key0_release ,regc -: 017391 push_queue_press_or_release: -0x4732 017392 arg max_queue_num ,pdata -0x4733 017393 imul32 queue ,pdata -0x4734 017394 iadd regc ,regc -: 017397 push_buffer_in_queue: -0x4735 017398 ifetch 1 ,regc -0x4736 017399 rtn blank -0x4737 017400 call queue_push_one_byte -0x4738 017401 increase 1 ,regc -0x4739 017402 branch push_buffer_in_queue -: 017405 shutter_send_data_to_master: -0x473a 017406 fetch 2 ,mem_ui_state_map -0x473b 017407 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data -0x473c 017408 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data -0x473d 017409 rtn -: 017411 pop_queue_to_ble_data: -0x473e 017412 call le_fifo_check_nearly_full -0x473f 017413 nrtn blank -0x4740 017414 call queue_pop_one_byte -0x4741 017415 nrtn user -0x4742 017416 pincrease -1 -0x4743 017417 mul32 pdata ,shutter_ble_data_buffer ,pdata -0x4744 017418 arg mem_ble_data_buffer1 ,temp -0x4745 017419 iadd temp ,contr -: 017420 le_send_notify_from_list: -0x4746 017421 ifetch 1 ,contr -0x4747 017422 copy pdata ,rega -0x4748 017423 ifetcht 2 ,contr -0x4749 017424 call store_contr -0x474a 017425 call le_att_malloc_tx_notify -0x474b 017426 copy rega ,loopcnt -0x474c 017427 call get_contr -0x474d 017428 branch memcpy -: 017431 pop_queue_to_classic_data: -0x474e 017432 call l2cap_malloc_is_fifo_nearly_full -0x474f 017433 nrtn blank -0x4750 017434 call queue_pop_one_byte -0x4751 017435 nrtn user -0x4752 017436 pincrease -1 -0x4753 017437 mul32 pdata ,shutter_classic_data_buffer ,pdata -0x4754 017438 arg mem_classic_data_buffer1 ,temp -0x4755 017439 iadd temp ,contr -0x4756 017440 ifetch 5 ,contr -0x4757 017441 store 5 ,mem_classic_data_buffer -: 017442 classic_send_hid_data: -0x4758 017443 fetch 1 ,mem_classic_data_buffer -0x4759 017444 copy pdata ,rega -0x475a 017445 call hid_malloc_tx_buff -0x475b 017446 fetch 2 ,mem_hid_int_remote_cid -0x475c 017447 istore 2 ,contw -0x475d 017448 setarg 0xa1 -0x475e 017449 istore 1 ,contw -0x475f 017450 fetch 4 ,mem_classic_data_buffer + 1 -0x4760 017451 istore 9 ,contw -0x4761 017452 rtn -: 017456 queue_push_one_byte: -0x4762 017457 store 1 ,mem_pdatatemp -0x4763 017458 arg mem_pdatatemp ,rega -0x4764 017459 branch queue_push -: 017461 queue_pop_one_byte: -0x4765 017462 arg mem_pdatatemp ,rega -0x4766 017463 call queue_pop -0x4767 017464 nrtn user -0x4768 017465 fetch 1 ,mem_pdatatemp -0x4769 017466 rtn -: 017469 ble_shutter_receive_data: -0x476a 017470 fetch 2 ,mem_le_att_handle -0x476b 017471 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete -0x476c 017472 rtn -: 017474 shutter_init_param: -0x476d 017475 setarg 0x02 -0x476e 017476 store 1 ,mem_shutter_power_off_timeout -0x476f 017478 setarg 0x00200008 -0x4770 017479 store 4 ,mem_ble_shutter_interval_min -0x4771 017480 setarg 0x012c0005 -0x4772 017481 istore 4 ,contw -0x4773 017484 jam 0x17 ,mem_le_local_mtu -0x4774 017487 setarg 0x1b -0x4775 017488 store 2 ,mem_le_pairing_handle -0x4776 017489 call le_set_config_fixed_ltk -0x4777 017490 call le_set_fixed_ltk -0x4778 017491 call le_set_justwork -0x4779 017492 branch le_set_config_read_authentication -: 017495 shutter_load_buffer_config_form_datarom: -0x477a 017497 arg ble_key_value_list_size ,loopcnt -0x477b 017498 arg mem_ble_data_buffer1 ,contw -0x477c 017499 arg ble_shutter_key_value_list ,contr -0x477d 017500 call memcpy_fast -0x477e 017501 arg bt_key_value_list_size ,loopcnt -0x477f 017502 arg mem_classic_data_buffer1 ,contw -0x4780 017503 arg classic_shutter_key_value_list ,contr -0x4781 017504 branch memcpy_fast -: 017507 shutter_load_ble_gatt_form_datarom: -0x4782 017508 arg ble_gatt_list_size ,loopcnt -0x4783 017509 arg ble_shutter_gatt_list ,contr -0x4784 017510 branch memcpy_fast -: 017513 shutter_load_bt_sdp_form_datarom: -0x4785 017514 arg bt_sdp_list_size ,loopcnt -0x4786 017515 arg classic_shutter_sdp_list ,contr -0x4787 017516 branch memcpy_fast -: 017520 shutter_init_bluetooth_config: -0x4788 017521 call shutter_check_load_config_flag -0x4789 017522 nrtn user -0x478a 017523 fetch 1 ,mem_shutter_config_select_gpio1 -0x478b 017524 call shutter_init_bluetooth_config_gpio_input -0x478c 017525 fetch 1 ,mem_shutter_config_select_gpio2 -0x478d 017526 call shutter_init_bluetooth_config_gpio_input -0x478e 017527 fetch 1 ,mem_shutter_config_select_gpio3 -0x478f 017528 branch shutter_init_bluetooth_config_gpio_input -: 017530 shutter_init_bluetooth_config_gpio_input: -0x4790 017531 rtn blank -0x4791 017532 or pdata ,0x80 ,temp -0x4792 017533 branch gpio_config_input_nowake -: 017536 shutter_load_bluetooth_config: -0x4793 017537 call shutter_check_load_config_flag -0x4794 017538 nrtn user -0x4795 017539 call shutter_load_bluetooth_config_label -0x4796 017540 branch shutter_load_bluetooth_config_by_otp -: 017542 shutter_load_bluetooth_config_label: -0x4797 017543 arg 0 ,rega -0x4798 017544 fetch 1 ,mem_shutter_config_select_gpio1 -0x4799 017545 call shutter_load_bluetooth_config_read_gpio_input -0x479a 017546 nsetflag blank ,0 ,rega -0x479b 017547 fetch 1 ,mem_shutter_config_select_gpio2 -0x479c 017548 call shutter_load_bluetooth_config_read_gpio_input -0x479d 017549 nsetflag blank ,1 ,rega -0x479e 017550 fetch 1 ,mem_shutter_config_select_gpio3 -0x479f 017551 call shutter_load_bluetooth_config_read_gpio_input -0x47a0 017552 nsetflag blank ,2 ,rega -0x47a1 017553 copy rega ,pdata -0x47a2 017554 store 1 ,mem_shutter_config_label -0x47a3 017555 fetch 1 ,mem_shutter_config_size -0x47a4 017556 imul32 rega ,pdata -0x47a5 017557 fetcht 2 ,mem_shutter_config_otp_base_address -0x47a6 017558 iadd temp ,pdata -0x47a7 017559 store 2 ,mem_shutter_config_otp_addr -0x47a8 017560 rtn -: 017562 shutter_load_bluetooth_config_read_gpio_input: -0x47a9 017563 rtn blank -0x47aa 017564 or pdata ,0x80 ,temp -0x47ab 017565 call gpio_get_bit -0x47ac 017566 nbranch enable_blank ,true -0x47ad 017567 branch disable_blank -: 017570 shutter_check_load_config_flag: -0x47ae 017571 call disable_user -0x47af 017572 fetch 1 ,mem_shutter_config_user_size -0x47b0 017573 nrtn blank -0x47b1 017574 fetch 1 ,mem_shutter_config_enable -0x47b2 017575 rtn blank -0x47b3 017576 branch enable_user -: 017579 shutter_load_bluetooth_config_by_otp: -0x47b4 017580 call otp_enable_chgpump -0x47b5 017581 fetch 2 ,mem_shutter_config_otp_addr -0x47b6 017582 arg mem_shutter_config_data_temp ,rega -0x47b7 017583 fetcht 1 ,mem_shutter_config_size -0x47b8 017584 call otpd_read_data -0x47b9 017585 call otp_disable_chgpump -: 017586 shutter_load_bluetooth_config_store_name: -0x47ba 017587 fetch 1 ,mem_shutter_config_data_temp -0x47bb 017588 copy pdata ,loopcnt -0x47bc 017589 store 1 ,mem_le_name_len -0x47bd 017590 call memcpy_fast -0x47be 017591 fetch 1 ,mem_shutter_config_data_temp -0x47bf 017592 copy pdata ,loopcnt -0x47c0 017593 store 1 ,mem_local_name_length -0x47c1 017594 call memcpy_fast -0x47c2 017595 ifetch 1 ,contr -0x47c3 017596 store 1 ,mem_shutter_key_num -0x47c4 017597 ifetch 1 ,contr -0x47c5 017598 store 1 ,mem_shutter_hard_soft_switch_case -0x47c6 017599 rtn -: 017602 shutter_load_bluetooth_config_by_eeprom: -0x47c7 017603 fetch 1 ,mem_shutter_bluetooth_type -0x47c8 017604 rtnbit0 classic_shutter -0x47c9 017605 arg 3 ,temp -0x47ca 017606 fetch 2 ,mem_shutter_config_eeprom_offset_addr -0x47cb 017607 copy pdata ,regb -0x47cc 017608 arg mem_shutter_config_eeprom_start_flag ,rega -0x47cd 017609 call iicd_read_eep_data -0x47ce 017610 fetcht 2 ,mem_shutter_config_eeprom_start_flag -0x47cf 017611 setarg shutter_eeprom_config_crc -0x47d0 017612 isub temp ,null -0x47d1 017613 nrtn zero -0x47d2 017614 fetch 1 ,mem_shutter_config_user_size -0x47d3 017615 rtn blank -0x47d4 017616 copy pdata ,temp -0x47d5 017617 fetch 2 ,mem_shutter_config_eeprom_offset_addr -0x47d6 017618 add pdata ,3 ,regb -0x47d7 017619 arg mem_shutter_config_data_temp ,rega -0x47d8 017620 call iicd_read_eep_data -0x47d9 017621 branch shutter_store_config -: 017623 shutter_load_bluetooth_config_by_user_config: -0x47da 017624 fetch 2 ,mem_shutter_config_user_otp_address -0x47db 017625 rtn blank -0x47dc 017626 call otp_enable_chgpump -0x47dd 017627 arg 1 ,temp -0x47de 017628 arg mem_shutter_config_user_size ,rega -0x47df 017629 call otpd_read_data -0x47e0 017631 fetch 1 ,mem_shutter_config_user_size -0x47e1 017632 rtn blank -0x47e2 017634 fetch 2 ,mem_shutter_config_user_otp_address -0x47e3 017635 pincrease 1 -0x47e4 017636 arg mem_shutter_config_data_temp ,rega -0x47e5 017637 fetcht 1 ,mem_shutter_config_user_size -0x47e6 017638 call otpd_read_data -0x47e7 017639 call otp_disable_chgpump -: 017640 shutter_store_config: -0x47e8 017641 call shutter_load_bluetooth_config_store_name -: 017642 shutter_load_bluetooth_config_custom: -0x47e9 017643 ifetch 2 ,contr -0x47ea 017644 rtn blank -0x47eb 017645 copy pdata ,contw -0x47ec 017646 ifetcht 1 ,contr -0x47ed 017647 copy temp ,loopcnt -0x47ee 017648 call memcpy -0x47ef 017649 branch shutter_load_bluetooth_config_custom -: 017653 shutter_random_mac_addr: -0x47f0 017654 fetch 1 ,mem_shutter_bluetooth_type -0x47f1 017655 rtnbit0 classic_shutter -0x47f2 017656 fetch 2 ,mem_classic_shutter_random_mac_offset_addr -0x47f3 017657 copy pdata ,regb -0x47f4 017658 arg 4 ,temp -0x47f5 017659 arg mem_shutter_random_mac_data_temp ,rega -0x47f6 017660 call iicd_read_eep_data -0x47f7 017661 fetch 1 ,mem_shutter_random_mac_data_temp -0x47f8 017662 bne 1 ,shutter_write_random_mac_addr_to_eeprom -: 017663 shutter_write_random_mac_addr_to_eeprom: -0x47f9 017664 setarg 1 -0x47fa 017665 store 1 ,mem_shutter_random_mac_data_temp -0x47fb 017666 force 3 ,loopcnt -0x47fc 017667 call generate_random_loop -0x47fd 017668 fetch 2 ,mem_classic_shutter_random_mac_offset_addr -0x47fe 017669 copy pdata ,regb -0x47ff 017670 arg 4 ,temp -0x4800 017671 arg mem_shutter_random_mac_data_temp ,rega -0x4801 017672 call iicd_write_eep_data -: 017673 shutter_write_random_mac_addr: -0x4802 017674 fetch 3 ,mem_shutter_random_mac_data_temp + 1 -0x4803 017675 store 3 ,mem_lap -0x4804 017676 store 3 ,mem_le_lap -0x4805 017677 rtn -: 017680 shutter_soft_swtich_power_on: -0x4806 017681 branch shutter_start_reconnect -: 017684 shutter_soft_swtich_power_off: -0x4807 017685 arg 0 ,rega -0x4808 017686 arg mem_shutter_power_off_led_style ,regc -0x4809 017687 call ui_led_set_style_global -0x480a 017688 call shutter_disconnect_current_connection -: 017689 shutter_wait_power_off: -0x480b 017690 fetch 1 ,mem_shutter_power_off_timeout -0x480c 017691 store 1 ,mem_shutter_power_off_timer -0x480d 017692 rtn -: 017696 ui_soft_swtich_init: -0x480e 017697 setarg ss_state_power_up -0x480f 017698 call ui_soft_swtich_init_power_on_time -0x4810 017699 jam ui_button_state_up ,mem_ui_button_last_state -0x4811 017700 call ui_button_init -0x4812 017701 call ui_button_polling -0x4813 017702 fetch 2 ,mem_ui_state_map -0x4814 017703 rtnbit1 ui_state_btn_down -0x4815 017704 branch app_enter_hibernate -: 017706 ui_soft_swtich_init_power_on_time: -0x4816 017707 fetcht 2 ,mem_power_param_ptr -0x4817 017708 istore 1 ,temp -0x4818 017709 ifetch 1 ,contw -0x4819 017710 store 1 ,mem_ui_button_timeout -0x481a 017711 rtn -: 017714 ui_soft_switch_botton_up: -0x481b 017715 fetch 2 ,mem_power_param_ptr -0x481c 017716 ifetch 1 ,pdata -0x481d 017717 rtnne ss_state_power_up -0x481e 017718 branch app_enter_hibernate -: 017721 ui_soft_switch_botton_long_press: -0x481f 017722 fetcht 2 ,mem_power_param_ptr -0x4820 017723 ifetch 1 ,temp -0x4821 017724 beq ss_state_power_on ,ui_soft_switch_power_off -: 017725 ui_soft_switch_power_on: -0x4822 017726 setarg ss_state_power_on -0x4823 017727 fetcht 2 ,mem_power_param_ptr -0x4824 017728 istore 1 ,temp -0x4825 017729 add temp ,ss_power_off_time ,contr -0x4826 017730 ifetch 1 ,contr -0x4827 017731 istore 1 ,mem_ui_button_timeout -0x4828 017732 ifetch 2 ,contr -0x4829 017733 branch callback_func -: 017735 ui_soft_switch_power_off: -0x482a 017736 setarg ss_state_power_off -0x482b 017737 call ui_soft_swtich_init_power_on_time -0x482c 017738 add temp ,ss_power_off_cb ,contr -0x482d 017739 ifetch 2 ,contr -0x482e 017740 branch app_enter_hibernate ,blank -0x482f 017741 branch callback_func -: 017747 shutter_byteswap: -0x4830 017748 store 6 ,mem_tmp_buffer -0x4831 017749 fetch 1 ,mem_tmp_buffer -0x4832 017750 store 1 ,mem_tmp_buffer + 11 -0x4833 017751 ifetch 1 ,contr -0x4834 017752 store 1 ,mem_tmp_buffer + 10 -0x4835 017753 ifetch 1 ,contr -0x4836 017754 store 1 ,mem_tmp_buffer + 9 -0x4837 017755 ifetch 1 ,contr -0x4838 017756 store 1 ,mem_tmp_buffer + 8 -0x4839 017757 ifetch 1 ,contr -0x483a 017758 store 1 ,mem_tmp_buffer + 7 -0x483b 017759 ifetch 1 ,contr -0x483c 017760 store 1 ,mem_tmp_buffer + 6 -0x483d 017761 fetch 6 ,mem_tmp_buffer + 6 -0x483e 017762 rtn -: 017764 shutter_random_addr_by_otp: -0x483f 017765 call load_adc_init -0x4840 017766 fetch 1 ,mem_1v_adc_io_data -0x4841 017767 store 1 ,mem_le_lap -0x4842 017768 fetch 1 ,mem_5v_adc_hvin_data -0x4843 017769 istore 1 ,contw -0x4844 017770 fetch 1 ,mem_3v_adc_vinlpm_data -0x4845 017771 istore 1 ,contw -0x4846 017772 fetch 3 ,mem_le_lap -0x4847 017773 store 3 ,mem_lap -0x4848 017774 rtn -: 017786 sim_iic_read_eep_data: -0x4849 017787 fetch 2 ,mem_eeprom_base -0x484a 017788 iadd regb ,pdata -0x484b 017789 byteswap pdata ,pdata -0x484c 017790 store 2 ,mem_addr_mi -0x484d 017791 copy temp ,regb -0x484e 017793 call sim_iic_start -0x484f 017794 setarg 0xa0 -0x4850 017795 call sim_iic_send_byte -0x4851 017796 fetch 1 ,mem_addr_mi -0x4852 017797 call sim_iic_send_byte -0x4853 017798 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k -0x4854 017799 fetch 1 ,mem_addr_mi + 1 -0x4855 017800 call sim_iic_send_byte -: 017801 sim_iic_read_eep_data_2k: -0x4856 017802 call sim_iic_stop -0x4857 017804 call sim_iic_start -0x4858 017805 setarg 0xa1 -0x4859 017806 call sim_iic_send_byte -: 017808 sim_iic_read_eep_data_loop: -0x485a 017809 call sim_iic_read_byte -0x485b 017810 istore 1 ,rega -0x485c 017811 increase 1 ,rega -0x485d 017812 increase -1 ,regb -0x485e 017813 nbranch sim_iic_read_eep_data_loop ,zero -0x485f 017814 branch sim_iic_stop -: 017825 sim_iic_write_eep_data: -0x4860 017826 byteswap regb ,pdata -0x4861 017827 store 2 ,mem_addr_mi -0x4862 017828 copy temp ,regb -0x4863 017830 call sim_iic_start -0x4864 017831 setarg 0xa0 -0x4865 017832 call sim_iic_send_byte -0x4866 017834 fetch 1 ,mem_addr_mi -0x4867 017835 call sim_iic_send_byte -0x4868 017836 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop -0x4869 017837 fetch 1 ,mem_addr_mi + 1 -0x486a 017838 call sim_iic_send_byte -: 017839 sim_iic_write_eep_data_loop: -0x486b 017840 ifetch 1 ,rega -0x486c 017841 call sim_iic_send_byte -0x486d 017842 increase 1 ,rega -0x486e 017843 increase -1 ,regb -0x486f 017844 nbranch sim_iic_write_eep_data_loop ,zero -0x4870 017845 branch sim_iic_stop -: 017849 sim_iic_wait_ack: -0x4871 017850 arg 10 ,loopcnt -0x4872 017851 call sim_iic_release_sda -0x4873 017852 call sim_iic_scl_output_high -0x4874 017853 call sim_iic_delay -: 017854 sim_iic_wait_ack_loop: -0x4875 017855 call sim_iic_read_sda_level -0x4876 017856 branch sim_iic_scl_output_low ,blank -0x4877 017857 loop sim_iic_wait_ack_loop -0x4878 017858 branch sim_iic_scl_output_low -: 017862 sim_iic_ack_slave: -0x4879 017863 call sim_iic_scl_output_low -0x487a 017864 call sim_iic_sda_output_low -0x487b 017865 call sim_iic_delay -0x487c 017866 call sim_iic_scl_output_high -0x487d 017867 call sim_iic_delay -0x487e 017868 branch sim_iic_scl_output_low -: 017873 sim_iic_read_byte: -0x487f 017874 arg 8 ,loopcnt -0x4880 017875 arg 0 ,regc -0x4881 017876 call sim_iic_release_sda -: 017877 sim_iic_read_byte_loop: -0x4882 017878 call sim_iic_scl_output_high -0x4883 017879 call sim_iic_delay -0x4884 017880 lshift regc ,regc -0x4885 017881 call sim_iic_read_sda_level -0x4886 017882 iadd regc ,regc -0x4887 017883 call sim_iic_delay -0x4888 017884 call sim_iic_scl_output_low -0x4889 017885 loop sim_iic_read_byte_loop -0x488a 017886 call sim_iic_ack_slave -0x488b 017887 copy regc ,pdata -0x488c 017888 rtn -: 017892 sim_iic_send_byte: -0x488d 017893 arg 8 ,loopcnt -0x488e 017894 copy pdata ,regc -0x488f 017895 call sim_iic_scl_output_low -: 017896 sim_iic_send_byte_loop: -0x4890 017897 isolate1 7 ,regc -0x4891 017898 call sim_iic_sda_output_high ,true -0x4892 017899 ncall sim_iic_sda_output_low ,true -0x4893 017900 lshift regc ,regc -0x4894 017901 call sim_iic_delay -0x4895 017902 call sim_iic_scl_output_high -0x4896 017903 call sim_iic_delay -0x4897 017904 call sim_iic_scl_output_low -0x4898 017905 call sim_iic_delay -0x4899 017906 loop sim_iic_send_byte_loop -0x489a 017907 branch sim_iic_wait_ack -: 017911 sim_iic_start: -0x489b 017912 call sim_iic_sda_output_high -0x489c 017913 call sim_iic_scl_output_high -0x489d 017914 call sim_iic_delay -0x489e 017915 call sim_iic_sda_output_low -0x489f 017916 call sim_iic_delay -0x48a0 017917 branch sim_iic_scl_output_low -: 017921 sim_iic_stop: -0x48a1 017922 call sim_iic_sda_output_low -0x48a2 017923 call sim_iic_scl_output_high -0x48a3 017924 call sim_iic_delay -0x48a4 017925 call sim_iic_sda_output_high -0x48a5 017926 branch sim_iic_delay -: 017930 sim_iic_scl_output_high: -0x48a6 017931 enable user -0x48a7 017932 fetch 1 ,sim_iic_scl_gpio_num -0x48a8 017933 branch sim_iic_config_gpio -: 017936 sim_iic_scl_output_low: -0x48a9 017937 disable user -0x48aa 017938 fetch 1 ,sim_iic_scl_gpio_num -0x48ab 017939 branch sim_iic_config_gpio -: 017942 sim_iic_sda_output_high: -0x48ac 017943 enable user -0x48ad 017944 fetch 1 ,sim_iic_sda_gpio_num -0x48ae 017945 branch sim_iic_config_gpio -: 017948 sim_iic_sda_output_low: -0x48af 017949 disable user -0x48b0 017950 fetch 1 ,sim_iic_sda_gpio_num -0x48b1 017951 branch sim_iic_config_gpio -: 017956 sim_iic_config_gpio: -0x48b2 017957 and pdata ,0x07 ,queue -0x48b3 017958 rshift3 pdata ,pdata -0x48b4 017959 arg core_gpio_oe0 ,temp -0x48b5 017960 iadd temp ,temp -0x48b6 017961 ifetch 1 ,temp -0x48b7 017962 qset1 pdata -0x48b8 017963 istore 1 ,temp -0x48b9 017964 increase 4 ,temp -0x48ba 017965 ifetch 1 ,temp -0x48bb 017966 qsetflag user ,pdata -0x48bc 017967 istore 1 ,temp -0x48bd 017968 rtn -: 017971 sim_iic_release_sda: -0x48be 017972 fetch 1 ,sim_iic_sda_gpio_num -0x48bf 017973 and pdata ,0x07 ,queue -0x48c0 017974 rshift3 pdata ,pdata -0x48c1 017975 arg core_gpio_oe0 ,temp -0x48c2 017976 iadd temp ,temp -0x48c3 017977 ifetch 1 ,temp -0x48c4 017978 qset0 pdata -0x48c5 017979 istore 1 ,temp -0x48c6 017980 rtn -: 017985 sim_iic_read_sda_level: -0x48c7 017986 nop 4 -0x48c8 017987 fetch 1 ,sim_iic_sda_gpio_num -0x48c9 017988 and pdata ,0x07 ,queue -0x48ca 017989 rshift3 pdata ,pdata -0x48cb 017990 arg core_gpio_in ,temp -0x48cc 017991 iadd temp ,temp -0x48cd 017992 setarg 0 -0x48ce 017993 ifetcht 1 ,temp -0x48cf 017994 qisolate1 temp -0x48d0 017995 setflag true ,0 ,pdata -0x48d1 017996 rtn -: 017999 sim_iic_delay: -0x48d2 018001 rtn -: 018007 usb_isr: -0x48d3 018008 bpatch patch1e_6 ,mem_patch1e -0x48d4 018009 hfetch 1 ,core_usb_status -0x48d5 018010 isolate1 7 ,pdata -0x48d6 018011 call usb_init ,true -0x48d7 018012 call usb_nak_state_judge -0x48d8 018013 hfetch 1 ,core_usb_status -0x48d9 018014 store 1 ,mem_usb_status -0x48da 018015 hfetch 1 ,core_usb_fifo_empty -0x48db 018016 store 1 ,mem_usb_fifo_empty -0x48dc 018017 hstore 1 ,core_usb_fifo_empty -0x48dd 018018 pinvert -0x48de 018019 fetcht 1 ,mem_usb_tx_wait -0x48df 018020 iand temp ,pdata -0x48e0 018021 store 1 ,mem_usb_tx_wait -0x48e1 018022 jam 0xe0 ,core_usb_status -0x48e2 018023 fetch 1 ,mem_usb_fifo_empty -0x48e3 018024 compare 0x1 ,pdata ,0x1 -0x48e4 018025 call usb0_fifo_empty ,true -0x48e5 018026 fetch 1 ,mem_usb_status -0x48e6 018027 compare 0x1 ,pdata ,0x1 -0x48e7 018028 call usb_status1 ,true -0x48e8 018029 call usb_tx -0x48e9 018030 branch usb_nak_state -: 018032 usb_init: -0x48ea 018033 bpatch patch1e_7 ,mem_patch1e -0x48eb 018034 call usb_init_param -0x48ec 018035 jam 0x00 ,core_usb_config -0x48ed 018036 nop 10000 -0x48ee 018037 jam 0xc0 ,core_usb_trig -0x48ef 018038 hfetch 2 ,core_clkoff -0x48f0 018039 set0 clock_off_usb ,pdata -0x48f1 018040 hstore 2 ,core_clkoff -0x48f2 018041 jam 0x3c ,core_usb_config -0x48f3 018042 jam 0xff ,core_usb_status -0x48f4 018043 jam 0xff ,core_usb_fifo_empty -0x48f5 018044 jam 0 ,core_usb_addr -0x48f6 018045 jam dev_default ,mem_usb0_state -0x48f7 018046 setarg mem_usb_clear_mem_end -0x48f8 018047 arg mem_usb_clear_mem_start ,contw -0x48f9 018048 isub contw ,loopcnt -0x48fa 018049 branch clear_mem -: 018051 usb_offline_check_init: -0x48fb 018052 fetcht 1 ,mem_usb_offline_check_gpio -0x48fc 018053 branch gpio_config_input -: 018054 usb_offline_state: -0x48fd 018055 fetch 1 ,mem_usb_device_enumeration_endflag -0x48fe 018056 rtn blank -0x48ff 018057 fetcht 1 ,mem_usb_offline_check_gpio -0x4900 018058 call gpio_get_bit -0x4901 018059 branch usb_init ,true -0x4902 018060 rtn -: 018063 usb_nak_state: -0x4903 018064 arg timer_nak ,queue -0x4904 018065 call timer_check -0x4905 018066 nrtn blank -0x4906 018067 fetch 1 ,mem_usb_wakestate_onetime_flag -0x4907 018068 nrtn blank -0x4908 018069 fetch 1 ,mem_usb_device_enumeration_endflag -0x4909 018070 ncall usb_mac_wakeup_judge ,blank -0x490a 018071 rtn -: 018073 usb_mem_devicedesc_init: -0x490b 018074 arg mem_devicedesc ,contw -0x490c 018075 setsect 0 ,0x11212 -0x490d 018076 setsect 1 ,0x8000 -0x490e 018077 setsect 2 ,0x0 -0x490f 018078 setsect 3 ,0x10000 -0x4910 018079 istore 9 ,contw -0x4911 018080 setsect 0 ,0x22412 -0x4912 018081 setsect 1 ,0x8604 -0x4913 018082 setsect 2 ,0x1000 -0x4914 018083 setsect 3 ,0x8 -0x4915 018084 istore 9 ,contw -0x4916 018085 setsect 0 ,0x1 -0x4917 018086 istore 1 ,contw -0x4918 018087 rtn -: 018089 usb_init_param: -0x4919 018090 jam 2 ,mem_usb0_state -0x491a 018091 setarg 0x0 -0x491b 018092 store 1 ,mem_remain -0x491c 018093 store 2 ,mem_usb_zero_packet -0x491d 018094 pincrease 1 -0x491e 018095 store 2 ,mem_usb_ones_packet -0x491f 018096 pincrease 1 -0x4920 018097 store 2 ,mem_usb_two_packet -0x4921 018098 setarg hid_kbdata_addr -0x4922 018099 store 2 ,mem_hidreportdesc_kb -0x4923 018100 setarg hid_msdata_addr -0x4924 018101 store 2 ,mem_hidreportdesc_m -0x4925 018102 arg mem_confdesc ,contw -0x4926 018103 arg hid_confdata_addr ,contr -0x4927 018104 call memcpy64 -0x4928 018105 fetch 1 ,mem_usb_tx_interval -0x4929 018106 ncall usb_tx_interval_config ,blank -0x492a 018107 branch usb_mem_devicedesc_init -: 018109 usb_tx_interval_config: -0x492b 018110 store 1 ,mem_confdesc + 34 -0x492c 018111 store 1 ,mem_confdesc + 59 -0x492d 018112 rtn -: 018113 usb_nak_state_judge: -0x492e 018114 hfetch 1 ,core_usb_status -0x492f 018115 bbit1 usb_status_nak ,usb_nak_state_timer_init -0x4930 018116 rtn -: 018118 usb_nak_state_timer_init: -0x4931 018119 call usb0_attached_state_judge -0x4932 018120 call timer_reinit -0x4933 018121 setarg timer_nak_delay -0x4934 018122 arg timer_nak ,queue -0x4935 018123 branch timer_init -: 018125 usb0_attached_state_judge: -0x4936 018126 fetch 1 ,mem_usb_state -0x4937 018127 bne usb_connected ,usb_clear_halt_dispose -0x4938 018128 jam 0 ,mem_usb_wakestate_onetime_flag -0x4939 018129 jam 0 ,mem_usb_mac_wakeup_trig -0x493a 018130 rtn -: 018131 usb_clear_halt_dispose: -0x493b 018132 fetch 1 ,mem_usb_clear_halt -0x493c 018133 rtn blank -0x493d 018134 jam 0 ,mem_usb_clear_halt -0x493e 018135 jam usb_connected ,mem_usb_state -0x493f 018136 jam 1 ,mem_usb_device_enumeration_endflag -0x4940 018137 rtn -: 018139 usb0_fifo_empty: -0x4941 018140 jam 0x1 ,core_usb_fifo_empty -0x4942 018141 branch usb0_tx -: 018143 usb_rx_no_data: -0x4943 018144 fetch 1 ,mem_usb_status -0x4944 018145 bbit1 usb_status_setup ,usb_class_type -0x4945 018146 rtn -: 018148 usb_rx_read: -0x4946 018149 hfetch 1 ,core_usb_ep -0x4947 018150 istore 1 ,contw -0x4948 018151 loop usb_rx_read -0x4949 018152 rtn -: 018154 usb_status1: -0x494a 018155 bpatch patch1f_0 ,mem_patch1f -0x494b 018156 jam 0x11 ,core_usb_status -0x494c 018157 hfetch 1 ,core_usb_ep_len -0x494d 018158 store 1 ,mem_usb_read_len -0x494e 018159 copy pdata ,loopcnt -0x494f 018160 branch usb_rx_no_data ,blank -0x4950 018161 arg mem_usb_setup ,contw -0x4951 018162 call usb_rx_read -0x4952 018163 fetch 1 ,mem_usb_read_len -0x4953 018164 sub pdata ,7 ,null -0x4954 018165 rtn positive -: 018166 usb_class_type: -0x4955 018167 fetch 1 ,mem_usb_setup_bmrequesttype -0x4956 018168 and_into 0x80 ,pdata -0x4957 018169 beq in_device ,usb_in_device -0x4958 018170 beq out_device ,usb_out_device -0x4959 018171 branch assert -: 018173 usb_in_device: -0x495a 018174 fetch 1 ,mem_usb_setup_bmrequesttype -0x495b 018175 rshift4 pdata ,pdata -0x495c 018176 rshift pdata ,pdata -0x495d 018177 and_into 0x03 ,pdata -0x495e 018178 beq standard_req ,usb_in_standard_req -0x495f 018179 beq class_req ,usb_in_class_req -0x4960 018180 beq manufacturer_req ,usb_in_manufacturer_req -0x4961 018181 branch assert -: 018183 usb_out_device: -0x4962 018184 fetch 1 ,mem_usb_setup_bmrequesttype -0x4963 018185 rshift4 pdata ,pdata -0x4964 018186 rshift pdata ,pdata -0x4965 018187 and_into 0x03 ,pdata -0x4966 018188 beq standard_req ,usb_out_standard_req -0x4967 018189 beq class_req ,usb_out_class_req -0x4968 018190 beq manufacturer_req ,usb_out_manufacturer_req -0x4969 018191 branch assert -: 018193 usb_in_standard_req: -0x496a 018194 fetch 1 ,mem_usb_setup_brequest -0x496b 018195 beq get_configuration ,usb0_request_get_configuration -0x496c 018196 beq get_descriptor ,usb0_request_get_descriptor -0x496d 018197 beq get_interface ,usb0_request_get_interface -0x496e 018198 beq get_status ,usb0_request_get_status -0x496f 018199 branch usb0_force_stall -: 018201 usb_in_class_req: -0x4970 018202 fetch 1 ,mem_usb_setup_brequest -0x4971 018203 beq get_idle ,usb_get_idle -0x4972 018204 beq get_report ,usb_get_report -0x4973 018205 beq get_protocol ,usb_get_protocol_req -0x4974 018206 branch usb0_force_stall -: 018208 usb_in_manufacturer_req: -0x4975 018209 branch usb0_force_stall -: 018211 usb_out_standard_req: -0x4976 018212 fetch 1 ,mem_usb_setup_brequest -0x4977 018213 beq clear_feature ,usb0_request_clear_feature -0x4978 018214 beq set_feature ,usb0_request_set_feature -0x4979 018215 beq set_address ,usb0_request_set_address -0x497a 018216 beq set_configuration ,usb0_request_set_configuration -0x497b 018217 beq set_interface ,usb0_request_set_interface -0x497c 018218 beq set_descriptor ,usb0_force_stall -0x497d 018219 branch usb0_force_stall -: 018221 usb_out_class_req: -0x497e 018222 fetch 1 ,mem_usb_setup_brequest -0x497f 018223 beq set_idle ,usb_set_idle -0x4980 018224 beq set_report ,usb_set_report -0x4981 018225 beq set_protocol ,usb_set_protocol_req -0x4982 018226 branch usb0_force_stall -: 018228 usb_out_manufacturer_req: -0x4983 018229 branch usb0_force_stall -: 018231 usb0_force_stall: -0x4984 018232 hfetch 1 ,core_usb_stall -0x4985 018233 set1 0 ,pdata -0x4986 018234 hstore 1 ,core_usb_stall -0x4987 018235 branch usb0_reply_zerolen -: 018237 usb0_reply_zerolen: -0x4988 018238 jam 0x40 ,core_usb_clear -0x4989 018239 rtn -: 018241 usb0_request_get_configuration: -0x498a 018242 fetch 1 ,mem_usb_setup_bmrequesttype -0x498b 018243 bne in_device ,usb0_force_stall -0x498c 018244 fetch 1 ,mem_usb_setup_windex -0x498d 018245 bne 0 ,usb0_force_stall -0x498e 018246 fetch 1 ,mem_usb_setup_windex + 1 -0x498f 018247 bne 0 ,usb0_force_stall -0x4990 018248 fetch 1 ,mem_usb_setup_blength -0x4991 018249 bne 1 ,usb0_force_stall -0x4992 018250 fetch 1 ,mem_usb_setup_blengthh -0x4993 018251 bne 0 ,usb0_force_stall -0x4994 018252 fetch 1 ,mem_usb_setup_bvalue -0x4995 018253 bne 0 ,usb0_force_stall -0x4996 018254 fetch 1 ,mem_usb_setup_bvalue + 1 -0x4997 018255 bne 0 ,usb0_force_stall -0x4998 018256 fetch 1 ,mem_usb0_state -0x4999 018257 beq dev_configured ,usb0_request_get_cfg_dev_cfg -0x499a 018258 beq dev_address ,usb0_request_get_cfg_dev_addr -0x499b 018259 branch usb0_force_stall -: 018261 usb0_request_get_cfg_dev_cfg: -0x499c 018262 arg 1 ,regb -0x499d 018263 branch usb_send_ones_packet -: 018265 usb0_request_get_cfg_dev_addr: -0x499e 018266 arg 1 ,regb -0x499f 018267 branch usb_send_zero_packet -: 018269 usb0_request_get_descriptor: -0x49a0 018270 bpatch patch1f_1 ,mem_patch1f -0x49a1 018271 set0 mark_isstr ,mark -0x49a2 018272 fetch 1 ,mem_usb_setup_bvalueh -0x49a3 018273 beq dsc_device ,dsc_device_info -0x49a4 018274 beq dsc_config ,dsc_config_info -0x49a5 018275 beq dsc_string ,dsc_string_info -0x49a6 018276 beq dsc_hid ,dsc_hid_info -0x49a7 018277 beq dsc_hid_report ,dsc_hid_report_info -0x49a8 018278 branch usb0_force_stall -: 018280 dsc_hid_info: -0x49a9 018281 jam 0 ,mem_usb_get_protocol_flag -0x49aa 018282 fetch 1 ,mem_usb_setup_windex -0x49ab 018283 beq 0 ,dsc_hid_info_interface0 -0x49ac 018284 beq 1 ,dsc_hid_info_interface1 -0x49ad 018285 branch usb0_force_stall -: 018287 dsc_hid_info_interface0: -0x49ae 018288 arg mem_confdesc + 19 ,rega -0x49af 018289 ifetch 1 ,rega -0x49b0 018290 iforce regb -0x49b1 018291 branch usb0_respond -: 018293 dsc_hid_info_interface1: -0x49b2 018294 arg mem_confdesc + 44 ,rega -0x49b3 018295 ifetch 1 ,rega -0x49b4 018296 iforce regb -0x49b5 018297 branch usb0_respond -: 018299 dsc_device_info: -0x49b6 018303 fetch 1 ,mem_usb_set_high_addr_flag -0x49b7 018304 ncall usb_set_high_addr ,blank -0x49b8 018305 setarg mem_devicedesc -0x49b9 018306 fetcht 1 ,mem_devicedesc -: 018307 dsc_info_set_data_len: -0x49ba 018308 store 2 ,mem_dsc_info_data_pointer -0x49bb 018309 storet 1 ,mem_dsc_info_len -0x49bc 018310 fetch 1 ,mem_usb_setup_blength -0x49bd 018311 isub temp ,null -0x49be 018312 nbranch dsc_info_set_current_data_len ,positive -: 018313 dsc_info_set_initial_data_len: -0x49bf 018314 fetch 1 ,mem_dsc_info_len -: 018315 dsc_info_set_data_size_completed: -0x49c0 018316 iforce regb -0x49c1 018317 fetch 2 ,mem_dsc_info_data_pointer -0x49c2 018318 add pdata ,1 ,pdata -0x49c3 018319 iforce rega -0x49c4 018320 branch usb0_respond -: 018321 dsc_info_set_current_data_len: -0x49c5 018322 fetch 1 ,mem_usb_setup_blength -0x49c6 018323 branch dsc_info_set_data_size_completed -: 018325 usb_set_high_addr: -0x49c7 018326 hfetch 1 ,core_usb_addr -0x49c8 018327 ncall usb0_set_addr ,blank -0x49c9 018328 jam 0 ,mem_usb_set_high_addr_flag -0x49ca 018329 rtn -: 018330 usb0_set_addr: -0x49cb 018331 hfetch 1 ,core_usb_addr -0x49cc 018332 set1 7 ,pdata -0x49cd 018333 hstore 1 ,core_usb_addr -0x49ce 018334 rtn -: 018336 dsc_config_info: -0x49cf 018337 setarg mem_confdesc -0x49d0 018338 fetcht 1 ,mem_confdesc -0x49d1 018339 branch dsc_info_set_data_len -: 018341 dsc_string_info: -0x49d2 018342 fetch 1 ,mem_usb_setup_bvalue -0x49d3 018343 sub pdata ,3 ,null -0x49d4 018344 nbranch usb0_force_stall ,positive -0x49d5 018345 fetch 1 ,mem_usb_setup_bvalue -0x49d6 018346 arg mem_string0 ,rega -0x49d7 018347 beq 0 ,usb0_respond_length -0x49d8 018348 set1 mark_isstr ,mark -0x49d9 018349 arg mem_string1 ,rega -0x49da 018350 beq 1 ,usb0_respond_length -0x49db 018351 arg mem_string2 ,rega -0x49dc 018352 beq 2 ,usb0_respond_length -0x49dd 018353 arg mem_string3 ,rega -0x49de 018354 beq 3 ,usb0_respond_length -0x49df 018355 rtn -: 018357 dsc_hid_report_info: -0x49e0 018358 fetch 2 ,mem_usb_setup_windex -0x49e1 018359 beq 1 ,dsc_hid_report_info0 -0x49e2 018360 fetch 2 ,mem_hidreportdesc_kb -0x49e3 018361 copy pdata ,rega -0x49e4 018363 branch usb0_respond_length -: 018364 dsc_hid_report_info0: -0x49e5 018365 jam 1 ,mem_usb_device_enumeration_endflag -0x49e6 018366 jam usb_got_report_req ,mem_usb_state -0x49e7 018367 fetch 2 ,mem_hidreportdesc_m -0x49e8 018368 copy pdata ,rega -0x49e9 018370 branch usb0_respond_length -: 018373 usb0_request_get_interface: -0x49ea 018374 fetch 1 ,mem_usb0_state -0x49eb 018375 bne dev_configured ,usb0_force_stall -0x49ec 018376 fetch 1 ,mem_usb_setup_bmrequesttype -0x49ed 018377 bne in_interface ,usb0_force_stall -0x49ee 018378 fetch 1 ,mem_usb_setup_bvalue -0x49ef 018379 bne 0 ,usb0_force_stall -0x49f0 018380 fetch 1 ,mem_usb_setup_bvalueh -0x49f1 018381 bne 0 ,usb0_force_stall -0x49f2 018382 fetch 1 ,mem_usb_setup_blength -0x49f3 018383 bne 1 ,usb0_force_stall -0x49f4 018384 fetch 1 ,mem_usb_setup_blengthh -0x49f5 018385 bne 0 ,usb0_force_stall -0x49f6 018386 fetch 1 ,mem_usb_setup_windex -0x49f7 018387 bne 0 ,usb0_force_stall -0x49f8 018388 fetch 1 ,mem_usb_setup_windex + 1 -0x49f9 018389 bne 0 ,usb0_force_stall -0x49fa 018390 arg 1 ,regb -0x49fb 018391 branch usb_send_zero_packet -: 018394 usb0_request_get_status: -0x49fc 018395 fetch 1 ,mem_usb0_state -0x49fd 018396 beq dev_default ,usb0_force_stall -0x49fe 018397 fetch 1 ,mem_usb_setup_bvalue -0x49ff 018398 bne 0 ,usb0_force_stall -0x4a00 018399 fetch 1 ,mem_usb_setup_bvalueh -0x4a01 018400 bne 0 ,usb0_force_stall -0x4a02 018401 fetch 1 ,mem_usb_setup_blength -0x4a03 018402 bne 2 ,usb0_force_stall -0x4a04 018403 fetch 1 ,mem_usb_setup_blengthh -0x4a05 018404 bne 0 ,usb0_force_stall -0x4a06 018405 fetch 1 ,mem_usb_setup_windex + 1 -0x4a07 018406 bne 0 ,usb0_force_stall -0x4a08 018407 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a09 018408 beq in_device ,usb0_get_status_in_device -0x4a0a 018409 beq in_interface ,usb0_get_status_in_interface -0x4a0b 018410 beq in_endpoint ,usb0_get_status_in_endpoint -0x4a0c 018411 branch usb0_force_stall -: 018413 usb0_get_status_in_device: -0x4a0d 018414 fetch 1 ,mem_usb_setup_windex -0x4a0e 018415 bne 0 ,usb0_force_stall -0x4a0f 018416 arg 2 ,regb -0x4a10 018417 fetch 1 ,mem_usb_remote_wakeup -0x4a11 018418 beq 0x01 ,usb_send_two_packet -: 018420 usb_send_zero_packet: -0x4a12 018421 arg mem_usb_zero_packet ,rega -0x4a13 018422 branch usb0_respond -: 018423 usb_send_ones_packet: -0x4a14 018424 arg mem_usb_ones_packet ,rega -0x4a15 018425 branch usb0_respond -: 018426 usb_send_two_packet: -0x4a16 018427 arg mem_usb_two_packet ,rega -0x4a17 018428 branch usb0_respond -: 018430 usb0_get_status_in_interface: -0x4a18 018431 fetch 1 ,mem_usb0_state -0x4a19 018432 bne dev_configured ,usb0_force_stall -0x4a1a 018433 arg 2 ,regb -0x4a1b 018434 branch usb_send_zero_packet -: 018436 usb0_get_status_in_endpoint: -0x4a1c 018437 fetch 1 ,mem_usb0_state -0x4a1d 018438 bne dev_configured ,usb0_force_stall -0x4a1e 018439 fetch 1 ,mem_usb_setup_windex -0x4a1f 018440 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 -0x4a20 018441 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 -0x4a21 018442 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 -0x4a22 018443 and_into 0x7f ,pdata -0x4a23 018444 beq 0x00 ,usb0_get_status_in_ep_in_ep0 -0x4a24 018445 branch usb0_force_stall -: 018447 usb0_get_status_in_ep_in_ep0: -0x4a25 018448 fetch 1 ,mem_usb_ep0_stall_status -: 018449 usb0_get_status_in_ep_in_ack: -0x4a26 018450 arg 2 ,regb -0x4a27 018451 beq 1 ,usb_send_ones_packet -0x4a28 018452 branch usb_send_zero_packet -: 018453 usb0_get_status_in_ep_in_ep1: -0x4a29 018454 fetch 1 ,mem_usb_ep1_stall_status -0x4a2a 018455 branch usb0_get_status_in_ep_in_ack -: 018456 usb0_get_status_in_ep_in_ep2: -0x4a2b 018457 fetch 1 ,mem_usb_ep2_stall_status -0x4a2c 018458 branch usb0_get_status_in_ep_in_ack -: 018459 usb0_get_status_in_ep_in_ep3: -0x4a2d 018460 fetch 1 ,mem_usb_ep3_stall_status -0x4a2e 018461 branch usb0_get_status_in_ep_in_ack -: 018463 usb_get_idle: -0x4a2f 018464 jam 1 ,mem_usb_idle_flag -0x4a30 018465 arg mem_usb_idle_rate ,rega -0x4a31 018466 arg 1 ,regb -0x4a32 018467 branch usb0_respond -: 018469 usb_get_report: -0x4a33 018470 fetch 2 ,mem_usb_setup_bvalue -0x4a34 018471 arg pc_get_report ,temp -0x4a35 018472 isub temp ,null -0x4a36 018473 nbranch usb0_force_stall ,zero -0x4a37 018474 set0 mark_isstr ,mark -: 018475 usb_get_report_dispose: -0x4a38 018476 fetch 1 ,mem_usb0_data_ready_report -0x4a39 018477 nbranch usb_get_report_data_success ,blank -0x4a3a 018478 jam pc_get_nondata ,mem_usb0_get_report_data -: 018479 usb_get_report_send_data: -0x4a3b 018480 fetch 1 ,mem_usb_setup_blength -0x4a3c 018481 iforce regb -0x4a3d 018482 arg mem_usb0_get_report_data ,rega -0x4a3e 018483 call usb0_respond -: 018484 usb_get_report_data_release: -0x4a3f 018485 arg mem_usb0_get_report_data ,contw -0x4a40 018486 arg 8 ,loopcnt -0x4a41 018487 branch memset0 -: 018488 usb_get_report_data_success: -0x4a42 018489 jam 0 ,mem_usb0_data_ready_report -0x4a43 018490 jam pc_get_data ,mem_usb0_get_report_data -0x4a44 018491 branch usb_get_report_send_data -: 018493 usb_get_protocol_req: -0x4a45 018494 fetch 1 ,mem_usb_setup_blength -0x4a46 018495 bne 1 ,usb0_force_stall -0x4a47 018496 jam 1 ,mem_usb_get_protocol_flag -0x4a48 018497 arg 1 ,regb -0x4a49 018498 fetch 1 ,mem_usb_set_protocol_value -0x4a4a 018499 beq 0 ,usb_get_report_protocol -0x4a4b 018500 beq 1 ,usb_get_boot_protocol -0x4a4c 018501 branch usb_send_zero_packet -: 018502 usb_get_report_protocol: -0x4a4d 018503 branch usb_send_ones_packet -: 018504 usb_get_boot_protocol: -0x4a4e 018505 branch usb_send_zero_packet -: 018510 usb0_request_clear_feature: -0x4a4f 018511 fetch 1 ,mem_usb0_state -0x4a50 018512 bne dev_configured ,usb0_force_stall -0x4a51 018513 fetch 1 ,mem_usb_setup_blength -0x4a52 018514 bne 0 ,usb0_force_stall -0x4a53 018515 fetch 1 ,mem_usb_setup_blengthh -0x4a54 018516 bne 0 ,usb0_force_stall -0x4a55 018517 fetch 1 ,mem_usb_setup_bvalueh -0x4a56 018518 bne 0 ,usb0_force_stall -0x4a57 018519 fetch 1 ,mem_usb_setup_windex + 1 -0x4a58 018520 bne 0 ,usb0_force_stall -0x4a59 018521 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a5a 018522 beq out_device ,usb0_request_clear_feature_out_device -0x4a5b 018523 beq out_interface ,usb0_request_clear_feature_out_interface -0x4a5c 018524 beq out_endpoint ,usb0_request_clear_feature_out_endpoint -0x4a5d 018525 branch usb0_force_stall -: 018527 usb0_request_clear_feature_out_device: -0x4a5e 018528 fetch 1 ,mem_usb_setup_bvalue -0x4a5f 018529 bne device_remote_wakeup ,usb0_force_stall -0x4a60 018530 hfetch 1 ,core_usb_config -0x4a61 018531 set0 7 ,pdata -0x4a62 018532 hstore 1 ,core_usb_config -0x4a63 018533 jam 0 ,mem_usb_remote_wakeup -0x4a64 018534 jam 1 ,mem_usb_clear_remote_wakeup -0x4a65 018535 branch usb0_reply_zerolen -: 018537 usb0_request_clear_feature_out_interface: -0x4a66 018538 branch usb0_force_stall -: 018540 usb0_request_clear_feature_out_endpoint: -0x4a67 018541 fetch 1 ,mem_usb_setup_bvalue -0x4a68 018542 bne endpoint_halt ,usb0_force_stall -0x4a69 018543 fetch 1 ,mem_usb_setup_windex -0x4a6a 018544 beq in_ep1 ,usb0_force_stall_ep1_in_off -0x4a6b 018545 beq in_ep2 ,usb0_force_stall_ep2_in_off -0x4a6c 018546 beq in_ep3 ,usb0_force_stall_ep3_in_off -0x4a6d 018547 and_into 0x7f ,pdata -0x4a6e 018548 beq 0x00 ,usb0_force_stall_ep0_in_off -0x4a6f 018549 branch usb0_force_stall -: 018551 usb0_force_stall_ep0_in_off: -0x4a70 018552 jam 0 ,mem_usb_ep0_stall_status -0x4a71 018553 branch usb0_reply_zerolen -: 018554 usb0_force_stall_ep1_in_off: -0x4a72 018555 jam 0 ,mem_usb_ep1_stall_status -: 018556 usb0_force_stall_ep1_in_off_reply: -0x4a73 018557 jam 1 ,mem_usb_clear_halt -0x4a74 018558 branch usb0_reply_zerolen -: 018559 usb0_force_stall_ep2_in_off: -0x4a75 018560 jam 0 ,mem_usb_ep2_stall_status -0x4a76 018561 branch usb0_force_stall_ep1_in_off_reply -: 018562 usb0_force_stall_ep3_in_off: -0x4a77 018563 jam 0 ,mem_usb_ep3_stall_status -0x4a78 018564 branch usb0_force_stall_ep1_in_off_reply -: 018567 usb0_request_set_feature: -0x4a79 018568 fetch 1 ,mem_usb_setup_blength -0x4a7a 018569 bne 0 ,usb0_force_stall -0x4a7b 018570 fetch 1 ,mem_usb_setup_blengthh -0x4a7c 018571 bne 0 ,usb0_force_stall -0x4a7d 018572 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a7e 018573 beq out_device ,usb0_request_set_feature_out_device -0x4a7f 018574 beq out_interface ,usb0_request_set_feature_out_interface -0x4a80 018575 beq out_endpoint ,usb0_request_set_feature_out_endpoint -0x4a81 018576 branch usb0_force_stall -: 018578 usb0_request_set_feature_out_device: -0x4a82 018579 fetch 1 ,mem_usb_setup_bvalue -0x4a83 018580 bne device_remote_wakeup ,usb0_force_stall -0x4a84 018581 hfetch 1 ,core_usb_config -0x4a85 018582 set1 7 ,pdata -0x4a86 018583 hstore 1 ,core_usb_config -0x4a87 018584 jam 1 ,mem_usb_remote_wakeup -0x4a88 018585 jam usb_sleep ,mem_usb_state -0x4a89 018586 jam 0 ,mem_usb_tx_win_enable -0x4a8a 018587 call usb0_reply_zerolen -: 018588 usb_wakeup_timer_reinit: -0x4a8b 018589 call timer_reinit -0x4a8c 018590 setarg timer_wakeup_delay -0x4a8d 018591 arg timer_wakeup ,queue -0x4a8e 018592 branch timer_init -: 018594 usb0_request_set_feature_out_interface: -0x4a8f 018595 branch usb0_force_stall -: 018597 usb0_request_set_feature_out_endpoint: -0x4a90 018598 fetch 1 ,mem_usb_setup_bvalue -0x4a91 018599 bne endpoint_halt ,usb0_force_stall -0x4a92 018600 fetch 1 ,mem_usb_setup_bvalueh -0x4a93 018601 bne 0 ,usb0_force_stall -0x4a94 018602 fetch 1 ,mem_usb_setup_windex -0x4a95 018603 beq in_ep1 ,usb0_force_stall_ep1_in_on -0x4a96 018604 beq in_ep2 ,usb0_force_stall_ep2_in_on -0x4a97 018605 beq in_ep3 ,usb0_force_stall_ep3_in_on -0x4a98 018606 and_into 0x7f ,pdata -0x4a99 018607 beq 0x00 ,usb0_force_stall_ep0_in_on -0x4a9a 018608 branch usb0_force_stall -: 018610 usb0_force_stall_ep0_in_on: -0x4a9b 018611 jam 1 ,mem_usb_ep0_stall_status -0x4a9c 018612 branch usb0_reply_zerolen -: 018613 usb0_force_stall_ep1_in_on: -0x4a9d 018614 jam 1 ,mem_usb_ep1_stall_status -0x4a9e 018615 branch usb0_reply_zerolen -: 018616 usb0_force_stall_ep2_in_on: -0x4a9f 018617 jam 1 ,mem_usb_ep2_stall_status -0x4aa0 018618 branch usb0_reply_zerolen -: 018619 usb0_force_stall_ep3_in_on: -0x4aa1 018620 jam 1 ,mem_usb_ep3_stall_status -0x4aa2 018621 branch usb0_reply_zerolen -: 018624 usb0_request_set_address: -0x4aa3 018625 fetch 1 ,mem_usb_setup_bmrequesttype -0x4aa4 018626 bne out_device ,usb0_force_stall -0x4aa5 018627 fetch 1 ,mem_usb_setup_windex -0x4aa6 018628 bne 0 ,usb0_force_stall -0x4aa7 018629 fetch 1 ,mem_usb_setup_windex + 1 -0x4aa8 018630 bne 0 ,usb0_force_stall -0x4aa9 018631 fetch 1 ,mem_usb_setup_blength -0x4aaa 018632 bne 0 ,usb0_force_stall -0x4aab 018633 fetch 1 ,mem_usb_setup_blengthh -0x4aac 018634 bne 0 ,usb0_force_stall -0x4aad 018635 fetch 1 ,mem_usb_setup_bvalueh -0x4aae 018636 bne 0 ,usb0_force_stall -0x4aaf 018637 fetch 1 ,mem_usb_setup_bvalue -0x4ab0 018638 and_into 0x80 ,pdata -0x4ab1 018639 bne 0 ,usb0_force_stall -0x4ab2 018640 fetch 1 ,mem_usb_setup_bvalue -0x4ab3 018641 bne 0 ,usb_usb0_state_set_dev_addr -: 018642 usb_usb0_state_set_dev_default: -0x4ab4 018643 jam dev_default ,mem_usb0_state -: 018644 usb0_request_set_wait_address: -0x4ab5 018645 fetch 1 ,mem_usb_setup_bvalue -0x4ab6 018646 hstore 1 ,core_usb_addr -0x4ab7 018647 call usb0_reply_zerolen -0x4ab8 018648 jam 1 ,mem_usb_set_high_addr_flag -0x4ab9 018649 rtn -: 018650 usb_usb0_state_set_dev_addr: -0x4aba 018651 jam dev_address ,mem_usb0_state -0x4abb 018652 branch usb0_request_set_wait_address -: 018655 usb0_request_set_configuration: -0x4abc 018656 fetch 1 ,mem_usb0_state -0x4abd 018657 beq dev_default ,usb0_force_stall -0x4abe 018658 fetch 1 ,mem_usb_setup_bmrequesttype -0x4abf 018659 bne out_device ,usb0_force_stall -0x4ac0 018660 fetch 1 ,mem_usb_setup_windex -0x4ac1 018661 bne 0 ,usb0_force_stall -0x4ac2 018662 fetch 1 ,mem_usb_setup_windex + 1 -0x4ac3 018663 bne 0 ,usb0_force_stall -0x4ac4 018664 fetch 1 ,mem_usb_setup_blength -0x4ac5 018665 bne 0 ,usb0_force_stall -0x4ac6 018666 fetch 1 ,mem_usb_setup_blengthh -0x4ac7 018667 bne 0 ,usb0_force_stall -0x4ac8 018668 fetch 1 ,mem_usb_setup_bvalue + 1 -0x4ac9 018669 bne 0 ,usb0_force_stall -0x4aca 018670 fetch 1 ,mem_usb_setup_bvalue -0x4acb 018671 sub pdata ,usb_max_num_cfg ,null -0x4acc 018672 nbranch usb0_force_stall ,positive -0x4acd 018673 fetch 1 ,mem_usb0_state -0x4ace 018674 beq dev_address ,usb0_request_set_cfg_addr_state -0x4acf 018675 beq dev_configured ,usb0_request_set_cfg_cfg_state -0x4ad0 018676 branch usb0_force_stall -: 018678 usb0_request_set_cfg_addr_state: -: 018679 usb0_request_set_cfg_cfg_state: -0x4ad1 018680 fetch 1 ,mem_usb_setup_bvalue -0x4ad2 018681 beq 0 ,usb0_request_set_cfg_stay_addr_state -0x4ad3 018682 jam dev_configured ,mem_usb0_state -0x4ad4 018683 branch usb0_reply_zerolen -: 018684 usb0_request_set_cfg_stay_addr_state: -0x4ad5 018685 jam dev_address ,mem_usb0_state -0x4ad6 018686 branch usb0_reply_zerolen -: 018689 usb0_request_set_interface: -0x4ad7 018690 fetch 1 ,mem_usb0_state -0x4ad8 018691 bne dev_configured ,usb0_force_stall -0x4ad9 018692 fetch 1 ,mem_usb_setup_bmrequesttype -0x4ada 018693 bne out_interface ,usb0_force_stall -0x4adb 018694 fetch 1 ,mem_usb_setup_bvalue -0x4adc 018695 bne 0 ,usb0_force_stall -0x4add 018696 fetch 1 ,mem_usb_setup_bvalueh -0x4ade 018697 bne 0 ,usb0_force_stall -0x4adf 018698 fetch 1 ,mem_usb_setup_blength -0x4ae0 018699 bne 0 ,usb0_force_stall -0x4ae1 018700 fetch 1 ,mem_usb_setup_blengthh -0x4ae2 018701 bne 0 ,usb0_force_stall -0x4ae3 018702 fetch 1 ,mem_usb_setup_windex -0x4ae4 018703 bne 0 ,usb0_force_stall -0x4ae5 018704 fetch 1 ,mem_usb_setup_windex + 1 -0x4ae6 018705 bne 0 ,usb0_force_stall -0x4ae7 018706 branch usb0_reply_zerolen -: 018709 usb_set_idle: -0x4ae8 018710 jam 1 ,mem_usb_idle_flag -0x4ae9 018711 fetch 1 ,mem_usb_setup_bvalueh -0x4aea 018712 store 1 ,mem_usb_idle_rate -0x4aeb 018713 fetch 1 ,mem_usb_setup_windex -0x4aec 018714 sub pdata ,1 ,null -0x4aed 018715 call usb_clear_remote_wakeup_set0 ,zero -0x4aee 018716 fetch 1 ,mem_usb_state -0x4aef 018717 bne usb_resume ,usb0_reply_zerolen -0x4af0 018718 jam usb_connected ,mem_usb_state -0x4af1 018719 call usb0_reply_zerolen -0x4af2 018720 nop 30000 -0x4af3 018721 nop 30000 -0x4af4 018722 rtn -: 018723 usb_clear_remote_wakeup_set0: -0x4af5 018724 jam 1 ,mem_usb_device_enumeration_endflag -0x4af6 018725 jam 0 ,mem_usb_clear_remote_wakeup -0x4af7 018726 jam usb_resume ,mem_usb_state -0x4af8 018727 rtn -: 018730 usb_set_report: -0x4af9 018731 jam 1 ,mem_usb0_get_set_report -0x4afa 018732 call usb_set_report_resume_judge -0x4afb 018733 fetch 2 ,mem_usb_setup_bvalue -0x4afc 018734 store 2 ,mem_usb_setup_bvalue_temp -0x4afd 018735 fetch 1 ,mem_usb_setup_blength -0x4afe 018736 iforce loopcnt -0x4aff 018737 arg mem_usb0_setup ,contr -0x4b00 018738 arg mem_usb0_set_report_data ,contw -0x4b01 018739 call memcpy -0x4b02 018740 branch usb0_reply_zerolen -: 018742 usb_set_report_resume_judge: -0x4b03 018743 fetch 2 ,mem_usb_setup_bvalue -0x4b04 018744 arg pc_set_report_bvalue ,temp -0x4b05 018745 isub temp ,null -0x4b06 018746 nrtn zero -0x4b07 018747 fetch 2 ,mem_usb_setup_windex -0x4b08 018748 arg pc_set_report_windex ,temp -0x4b09 018749 isub temp ,null -0x4b0a 018750 nrtn zero -0x4b0b 018751 fetch 2 ,mem_usb_setup_blength -0x4b0c 018752 arg pc_set_report_blength ,temp -0x4b0d 018753 isub temp ,null -0x4b0e 018754 nrtn zero -0x4b0f 018755 jam 1 ,mem_usb_tx_win_enable -0x4b10 018756 rtn -: 018759 usb_set_protocol_req: -0x4b11 018760 fetch 1 ,mem_usb_setup_blength -0x4b12 018761 bne 0 ,usb0_force_stall -0x4b13 018762 fetch 1 ,mem_usb_setup_bvalue -0x4b14 018763 beq boot_protocol ,usb_set_boot_protocol -0x4b15 018764 beq report_protocol ,usb_set_report_protocol -0x4b16 018765 branch usb0_force_stall -: 018766 usb_set_boot_protocol: -0x4b17 018767 jam 0 ,mem_usb_set_protocol_status -0x4b18 018768 jam 1 ,mem_usb_set_protocol_value -0x4b19 018769 branch usb0_reply_zerolen -: 018770 usb_set_report_protocol: -0x4b1a 018771 jam 1 ,mem_usb_tx_mac_enable -0x4b1b 018772 jam 1 ,mem_usb_set_protocol_status -0x4b1c 018773 jam 0 ,mem_usb_set_protocol_value -0x4b1d 018774 branch usb0_reply_zerolen -: 018777 usb0_respond_length: -0x4b1e 018778 ifetch 1 ,rega -0x4b1f 018779 iforce regb -0x4b20 018780 increase 1 ,rega -: 018782 usb0_respond: -0x4b21 018783 bpatch patch1f_2 ,mem_patch1f -0x4b22 018784 bmark0 mark_isstr ,usb0_respond0 -0x4b23 018785 add regb ,1 ,pdata -0x4b24 018786 lshift pdata ,pdata -0x4b25 018787 hstore 1 ,core_usb_dfifo0 -0x4b26 018788 jam 3 ,core_usb_dfifo0 -0x4b27 018789 fetch 1 ,mem_usb_setup_blength -0x4b28 018790 increase -2 ,pdata -0x4b29 018791 rshift pdata ,pdata -0x4b2a 018792 store 1 ,mem_usb_setup_blength -0x4b2b 018793 beq 0 ,usb_no_respond_data -: 018794 usb0_respond0: -0x4b2c 018795 fetch 2 ,mem_usb_setup_blength -0x4b2d 018796 isub regb ,null -0x4b2e 018797 branch usb0_respond1 ,positive -0x4b2f 018798 copy pdata ,regb -: 018799 usb0_respond1: -0x4b30 018800 deposit rega -0x4b31 018801 store 2 ,mem_bufptr -0x4b32 018802 deposit regb -0x4b33 018803 store 1 ,mem_remain -0x4b34 018804 branch usb0_tx -: 018806 usb_no_respond_data: -0x4b35 018807 arg 0 ,queue -0x4b36 018808 branch usb_trig -: 018811 usb0_tx: -0x4b37 018812 bpatch patch1f_3 ,mem_patch1f -0x4b38 018813 fetch 1 ,mem_remain -0x4b39 018814 rtn blank -0x4b3a 018815 copy pdata ,loopcnt -0x4b3b 018816 sub pdata ,ep0_packet_size ,null -0x4b3c 018817 branch usb0_tx_info ,positive -0x4b3d 018818 arg ep0_packet_size ,loopcnt -: 018819 usb0_tx_info: -0x4b3e 018820 fetch 1 ,mem_remain -0x4b3f 018821 isub loopcnt ,pdata -0x4b40 018822 store 1 ,mem_remain -0x4b41 018823 fetch 2 ,mem_bufptr -0x4b42 018824 copy pdata ,contr -: 018825 usb0_tx0: -0x4b43 018826 ifetch 1 ,contr -0x4b44 018827 hstore 1 ,core_usb_dfifo0 -0x4b45 018828 bmark0 mark_isstr ,usb0_tx1 -0x4b46 018829 jam 0 ,core_usb_dfifo0 -: 018830 usb0_tx1: -0x4b47 018831 loop usb0_tx0 -0x4b48 018832 copy contr ,pdata -0x4b49 018833 store 2 ,mem_bufptr -0x4b4a 018834 arg 0 ,queue -0x4b4b 018835 call usb_trig -0x4b4c 018836 fetch 1 ,mem_remain -0x4b4d 018837 nrtn blank -0x4b4e 018838 fetch 1 ,mem_usb_state -0x4b4f 018839 rtnne usb_got_report_req -0x4b50 018840 jam usb_connected ,mem_usb_state -0x4b51 018841 rtn -: 018844 usb_tx_ep1: -0x4b52 018845 arg core_usb_dfifo1 ,rega -0x4b53 018846 arg 1 ,queue -: 018847 usb_tx_loop: -0x4b54 018848 ifetch 1 ,contr -0x4b55 018849 istore 1 ,rega -0x4b56 018850 loop usb_tx_loop -: 018851 usb_trig: -0x4b57 018852 setarg 0 -0x4b58 018853 qset1 pdata -0x4b59 018854 hstore 1 ,core_usb_trig -0x4b5a 018855 fetcht 1 ,mem_usb_tx_wait -0x4b5b 018856 ior temp ,pdata -0x4b5c 018857 store 1 ,mem_usb_tx_wait -0x4b5d 018858 rtn -: 018860 usb_tx_ep2: -0x4b5e 018861 arg 2 ,queue -0x4b5f 018862 arg core_usb_dfifo2 ,rega -0x4b60 018863 branch usb_tx_loop -: 018865 usb_tx: -0x4b61 018866 bpatch patch1f_4 ,mem_patch1f -0x4b62 018867 fetch 1 ,mem_usb_tx_enable -0x4b63 018868 rtn blank -0x4b64 018869 fetch 1 ,mem_usb_tx_wait -0x4b65 018870 nbranch usb_inwake_state_tx_dispose ,blank -0x4b66 018871 fetch 1 ,mem_usb_device_enumeration_endflag -0x4b67 018872 branch usb_tx_fifo_release ,blank -0x4b68 018873 fetch 1 ,mem_usb_state -0x4b69 018874 beq usb_sleep ,usb_windows_wakeup -0x4b6a 018875 bne usb_connected ,usb_tx_fifo_release -0x4b6b 018876 fetch 1 ,mem_usb_clear_remote_wakeup -0x4b6c 018877 nbranch usb_tx_fifo_release ,blank -0x4b6d 018878 call usb_tx_data_ep1 -0x4b6e 018879 branch usb_tx_data_ep2 -: 018881 usb_tx_data_ep1: -0x4b6f 018882 fetch 1 ,mem_usb_tx_enable -0x4b70 018883 rtnbit0 1 -0x4b71 018884 fetch 1 ,mem_usb_tx_wait -0x4b72 018885 rtnbit1 1 -0x4b73 018886 fetch 1 ,mem_usb_tx_enable -0x4b74 018887 set0 1 ,pdata -0x4b75 018888 store 1 ,mem_usb_tx_enable -0x4b76 018889 fetch 1 ,mem_usb_ep1_data -0x4b77 018890 rtn blank -0x4b78 018891 beq usb_ep1_kb ,usb_tx_kb_normal_data -0x4b79 018892 branch assert -: 018894 usb_tx_data_ep2: -0x4b7a 018895 fetch 1 ,mem_usb_tx_enable -0x4b7b 018896 rtnbit0 2 -0x4b7c 018897 fetch 1 ,mem_usb_tx_wait -0x4b7d 018898 rtnbit1 2 -0x4b7e 018899 fetch 1 ,mem_usb_tx_enable -0x4b7f 018900 set0 2 ,pdata -0x4b80 018901 store 1 ,mem_usb_tx_enable -0x4b81 018902 fetch 1 ,mem_usb_ep2_data -0x4b82 018903 rtn blank -0x4b83 018904 beq usb_ep2_ms ,usb_tx_ms_data -0x4b84 018905 beq usb_ep2_multikey ,usb_tx_kb_multikey_data -0x4b85 018906 branch assert -: 018908 usb_tx_fifo_release: -0x4b86 018910 arg mem_usb_mouse_data ,contw -0x4b87 018911 arg 6 ,loopcnt -0x4b88 018912 branch memset0 -: 018914 usb_tx_ms_data: -0x4b89 018915 fetch 1 ,mem_usb_idle_flag -0x4b8a 018916 fetcht 1 ,mem_usb_get_protocol_flag -0x4b8b 018917 iand temp ,pdata -0x4b8c 018918 branch usb_tx_ms_data_normal_mode ,blank -0x4b8d 018919 fetcht 1 ,mem_usb_set_protocol_status -0x4b8e 018920 iadd temp ,pdata -0x4b8f 018921 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode -0x4b90 018922 branch usb_tx_ms_data_normal_mode -: 018924 usb_tx_ms_data_mac_boot_mode: -0x4b91 018925 jam 0 ,mem_usb_ep2_data -: 018926 usb_tx_ms_data_mac_boot_regroup: -0x4b92 018927 fetch 1 ,mem_usb_mouse_data + 1 -0x4b93 018928 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey -0x4b94 018929 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey -0x4b95 018930 fetch 1 ,mem_usb_mouse_data + 1 -0x4b96 018931 store 1 ,mem_usb_mouse_data -0x4b97 018932 fetch 1 ,mem_usb_mouse_data + 2 -0x4b98 018933 istore 1 ,contw -0x4b99 018934 fetch 1 ,mem_usb_mouse_data + 4 -0x4b9a 018935 istore 1 ,contw -0x4b9b 018936 fetch 1 ,mem_usb_mouse_data + 6 -0x4b9c 018937 istore 1 ,contw -0x4b9d 018938 arg 4 ,loopcnt -0x4b9e 018939 arg mem_usb_mouse_data ,contr -0x4b9f 018940 branch usb_tx_ep2 -: 018942 usb_tx_ms_data_normal_mode: -0x4ba0 018943 jam 0 ,mem_usb_ep2_data -: 018944 usb_tx_mac_boot_ms_regroup_r_or_lrkey: -0x4ba1 018945 arg 8 ,loopcnt -0x4ba2 018946 arg mem_usb_mouse_data ,contr -0x4ba3 018947 branch usb_tx_ep2 -: 018949 usb_tx_kb_multikey_data: -0x4ba4 018950 jam 0 ,mem_usb_ep2_data -0x4ba5 018951 arg 3 ,loopcnt -0x4ba6 018952 arg mem_usb_kb_multikey ,contr -0x4ba7 018953 branch usb_tx_ep2 -: 018955 usb_tx_kb_normal_data: -0x4ba8 018956 jam 0 ,mem_usb_ep1_data -0x4ba9 018957 arg 8 ,loopcnt -0x4baa 018958 arg mem_usb_kb_data ,contr -0x4bab 018959 branch usb_tx_ep1 -: 018961 usb_inwake_state_tx_dispose: -0x4bac 018962 fetch 1 ,mem_usb_state -0x4bad 018963 beq usb_sleep ,usb_clear_tx_wait -0x4bae 018964 beq usb_connected ,usb_mac_wakeup_trig -0x4baf 018965 rtn -: 018966 usb_clear_tx_wait: -0x4bb0 018967 jam 0 ,mem_usb_tx_wait -0x4bb1 018968 rtn -: 018969 usb_mac_wakeup_trig: -0x4bb2 018970 hfetch 1 ,core_usb_config -0x4bb3 018971 set1 7 ,pdata -0x4bb4 018972 hstore 1 ,core_usb_config -0x4bb5 018973 jam 1 ,mem_usb_mac_wakeup_trig -0x4bb6 018974 rtn -: 018976 usb_mac_wakeup_judge: -0x4bb7 018977 fetch 1 ,mem_usb_state -0x4bb8 018978 rtneq usb_sleep -0x4bb9 018979 beq usb_connected ,usb_mac_wakeup -0x4bba 018980 rtn -: 018981 usb_mac_wakeup: -0x4bbb 018982 fetch 1 ,mem_usb_mac_wakeup_trig -0x4bbc 018983 rtn blank -0x4bbd 018984 jam 1 ,mem_usb_wakestate_onetime_flag -0x4bbe 018985 branch usb_wakeup -: 018987 usb_windows_wakeup: -0x4bbf 018988 arg timer_wakeup ,queue -0x4bc0 018989 call timer_check -0x4bc1 018990 nrtn blank -: 018991 usb_wakeup: -0x4bc2 018992 hfetch 1 ,core_usb_config -0x4bc3 018993 rtnbit0 7 -0x4bc4 018994 jam 0xfc ,core_usb_config -0x4bc5 018995 nop 30000 -0x4bc6 018996 jam 0x3c ,core_usb_config -0x4bc7 018997 rtn -: 019004 hci_rx_h4: -0x4bc8 019005 bpatch patch1f_5 ,mem_patch1f -0x4bc9 019006 fetch 1 ,mem_hci_cmd -0x4bca 019007 nrtn blank -: 019008 hci_rx_h4_1: -0x4bcb 019009 call hci_h4_parse_packet -0x4bcc 019010 ncall h4_rx_discard_packet ,user -0x4bcd 019011 rtn -: 019013 hci_h4_parse_packet: -0x4bce 019014 bpatch patch1f_6 ,mem_patch1f -0x4bcf 019015 copy contru ,rega -0x4bd0 019016 arg 4 ,temp -0x4bd1 019017 ifetch 1 ,contru -0x4bd2 019018 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len -0x4bd3 019019 increase 1 ,temp -0x4bd4 019020 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len -0x4bd5 019021 copy contru ,pdata -0x4bd6 019022 hstore 2 ,core_uart_rrptr -0x4bd7 019023 rtn -: 019024 hci_h4_parse_packet_wait_len: -0x4bd8 019025 hfetch 2 ,core_uart_rxitems -0x4bd9 019026 isub temp ,null -0x4bda 019027 nbranch hci_h4_parse_packet_wait_len ,positive -0x4bdb 019029 disable user -0x4bdc 019030 copy rega ,contru -0x4bdd 019031 call h4_get_rx_payload_len -0x4bde 019032 iadd temp ,temp -: 019033 hci_h4_parse_packet_wait: -0x4bdf 019034 hfetch 2 ,core_uart_rxitems -0x4be0 019035 isub temp ,null -0x4be1 019036 nbranch hci_h4_parse_packet_wait ,positive -0x4be2 019037 copy rega ,contru -0x4be3 019038 ifetch 1 ,contru -0x4be4 019039 beq hci_h4_type_cmd ,process_hci_cmd -0x4be5 019040 branch assert -: 019042 h4_rx_discard_packet: -0x4be6 019043 bpatch patch1f_7 ,mem_patch1f -0x4be7 019044 hfetch 2 ,core_uart_rrptr -0x4be8 019045 iforce contru -0x4be9 019046 call h4_get_rx_payload_len -0x4bea 019047 iadd contru ,contru -0x4beb 019048 deposit contru -0x4bec 019049 hstore 2 ,core_uart_rrptr -0x4bed 019050 rtn -: 019055 h4_get_rx_payload_len: -0x4bee 019056 ifetch 1 ,contru -0x4bef 019057 increase 2 ,contru -0x4bf0 019058 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl -0x4bf1 019059 ifetch 1 ,contru -0x4bf2 019060 rtn -: 019061 h4_get_rx_payload_len_acl: -0x4bf3 019062 ifetch 2 ,contru -0x4bf4 019063 rtn -: 019065 h4_get_tx_ptr: -0x4bf5 019066 hfetch 2 ,core_uart_twptr -0x4bf6 019067 increase -5 ,contwu -0x4bf7 019068 iadd contwu ,contwu -0x4bf8 019069 rtn -: 019071 h4_send_packet_event: -0x4bf9 019072 arg hci_h4_type_event ,temp -0x4bfa 019073 branch h4_send_packet -: 019074 h4_send_packet_acl: -0x4bfb 019075 arg hci_h4_type_acl ,temp -: 019076 h4_send_packet: -0x4bfc 019077 bpatchx patch20_0 ,mem_patch20 -0x4bfd 019078 increase 1 ,loopcnt -0x4bfe 019079 hfetch 2 ,core_uart_twptr -0x4bff 019080 copy pdata ,contwu -0x4c00 019081 copy loopcnt ,pdata -0x4c01 019082 istoret 1 ,contwu -0x4c02 019083 increase -1 ,pdata -0x4c03 019084 iadd contwu ,contwu -0x4c04 019085 copy contwu ,pdata -0x4c05 019086 store 2 ,mem_hci_acl_tx_trigger_wptr -0x4c06 019087 copy temp ,pdata -0x4c07 019088 rtneq hci_h4_type_acl -0x4c08 019089 fetch 2 ,mem_hci_acl_tx_trigger_wptr -0x4c09 019090 hstore 2 ,core_uart_twptr -0x4c0a 019091 branch h4_send_acl_trigger_clear -: 019094 h4_send_acl_trigger_clear: -0x4c0b 019095 setarg 0 -0x4c0c 019096 store 2 ,mem_hci_acl_tx_trigger_wptr -0x4c0d 019097 rtn -: 019104 hci_init: -0x4c0e 019105 rtn wake -0x4c0f 019106 setarg hci_idle_dispatch -0x4c10 019107 store 2 ,mem_cb_idle_process -0x4c11 019109 setarg uart_baud_115200 -0x4c12 019110 store uart_baud_len ,mem_baud -: 019111 hci_lpm_init: -0x4c13 019112 setarg mem_h5rx_buf -0x4c14 019113 hstore 2 ,core_uart_rsaddr -0x4c15 019114 setarg mem_h5rx_buf_end -0x4c16 019115 hstore 2 ,core_uart_readdr -0x4c17 019116 setarg mem_h5tx_buf -0x4c18 019117 hstore 2 ,core_uart_tsaddr -0x4c19 019118 call hci_sel_init -: 019119 hci_reinit: -0x4c1a 019120 jam 0x0 ,core_uart_ctrl -0x4c1b 019121 setarg mem_h5tx_buf -0x4c1c 019122 hstore 2 ,core_uart_twptr -0x4c1d 019123 hstore 2 ,core_uart_trptrp -0x4c1e 019124 setarg mem_h5rx_buf -0x4c1f 019125 hstore 2 ,core_uart_rrptr -0x4c20 019126 store 2 ,mem_h5rx_rptr -: 019127 hci_init_common: -0x4c21 019128 hfetch 2 ,core_clkoff -0x4c22 019129 set0 clock_off_uart ,pdata -0x4c23 019130 hstore 2 ,core_clkoff -0x4c24 019131 call uart_set_baud_by_mem -0x4c25 019132 jam uartclk_dpll ,core_uart_clksel -0x4c26 019133 jam uart_ctrl_h4 ,core_uart_ctrl -0x4c27 019134 rtn -: 019136 hci_sel_init: -0x4c28 019137 setarg mem_h5tx_buf_end -0x4c29 019138 hstore 2 ,core_uart_teaddr -0x4c2a 019139 hfetch 1 ,core_gpio_sel1 -0x4c2b 019140 or_into 0x07 ,pdata -0x4c2c 019141 hstore 1 ,core_gpio_sel1 -0x4c2d 019142 rtn -: 019145 hci_rx_packet: -0x4c2e 019146 bpatchx patch20_1 ,mem_patch20 -0x4c2f 019147 hfetch 1 ,core_uart_status -0x4c30 019148 iforce regb -0x4c31 019149 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont -0x4c32 019150 hfetch 2 ,core_uart_rxitems -0x4c33 019151 iforce regc -0x4c34 019152 arg 0x44f ,temp -0x4c35 019153 isub temp ,null -0x4c36 019154 nrtn zero -: 019155 hci_rx_packet_cont: -0x4c37 019156 hfetch 2 ,core_uart_rrptr -0x4c38 019157 iforce contru -0x4c39 019158 branch hci_rx_h4 -: 019160 uart_send_byte: -0x4c3a 019161 hfetcht 1 ,core_uart_status -0x4c3b 019162 isolate1 6 ,temp -0x4c3c 019163 branch uart_send_byte ,true -0x4c3d 019164 hstore 1 ,core_uart_txd -0x4c3e 019165 rtn -: 019167 process_hci_cmd: -0x4c3f 019168 bpatchx patch20_2 ,mem_patch20 -0x4c40 019169 fetch 1 ,mem_hci_cmd -0x4c41 019170 branch process_hci_cmd_cont ,blank -0x4c42 019171 enable user -0x4c43 019172 rtn -: 019173 process_hci_cmd_cont: -0x4c44 019174 ifetch 2 ,contru -0x4c45 019175 iforce alarm -0x4c46 019176 iforce queue -0x4c47 019177 ifetch 1 ,contru -0x4c48 019178 iforce temp -0x4c49 019179 rshift2 alarm ,pdata -0x4c4a 019180 rshift8 pdata ,pdata -0x4c4b 019181 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific -0x4c4c 019182 rtn -: 019185 phci_grp_vendor_specific: -0x4c4d 019186 bpatchx patch20_3 ,mem_patch20 -0x4c4e 019187 deposit queue -0x4c4f 019188 beq hci_vendor_cmd_reset ,hci_normal_reply -0x4c50 019189 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid -0x4c51 019190 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud -0x4c52 019191 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch -0x4c53 019192 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done -0x4c54 019193 beq hci_vendor_cmd_echo ,hci_normal_reply -0x4c55 019194 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr -0x4c56 019195 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm -0x4c57 019197 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem -0x4c58 019198 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep -0x4c59 019199 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init -0x4c5a 019200 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec -0x4c5b 019201 branch hci_normal_reply -: 019203 phci_grp_vendor_enter_lpm: -0x4c5c 019204 call hci_normal_reply -0x4c5d 019205 call wait_uarttx -0x4c5e 019206 call gpio_pu_uart_tx -: 019207 hci_enter_lpm: -0x4c5f 019208 call app_put_lpm_wake_lock -0x4c60 019209 call app_l2cap_flow_control_enable -0x4c61 019210 branch gpio_rx_config_input_with_pu -: 019212 hci_exit_lpm: -0x4c62 019213 jam hci_rx_ready ,mem_hci_lt_rx_state -0x4c63 019214 call app_get_lpm_wake_lock -0x4c64 019215 call hci_lpm_init -0x4c65 019216 branch app_l2cap_flow_control_disable -: 019218 phci_grp_vendor_chipid: -0x4c66 019219 call hci_get_cmd_complete_ptr -0x4c67 019220 hfetch 2 ,core_chipid -0x4c68 019221 istore 2 ,contwu -0x4c69 019222 force 6 ,loopcnt -0x4c6a 019223 branch hci_command_complete -: 019225 phci_grp_vendor_baud: -0x4c6b 019226 ifetch 2 ,contru -0x4c6c 019227 store 2 ,mem_baud -0x4c6d 019228 hstore 2 ,core_uart_baud -0x4c6e 019229 rtn -: 019232 phci_grp_vendor_patch_common: -0x4c6f 019234 ifetch 1 ,contru -0x4c70 019235 copy pdata ,temp -0x4c71 019236 hstore 1 ,core_ucode_low -0x4c72 019237 ifetch 1 ,contru -0x4c73 019238 iadd temp ,temp -0x4c74 019239 set1 7 ,pdata -0x4c75 019240 hstore 1 ,core_ucode_ctrl -0x4c76 019241 ifetch 1 ,contru -0x4c77 019242 iadd temp ,temp -0x4c78 019243 copy pdata ,loopcnt -0x4c79 019244 rtn -: 019246 phci_grp_vendor_patch: -0x4c7a 019247 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4c7b 019248 call phci_grp_vendor_patch_common -: 019249 phci_grp_vendor_patch_loop: -0x4c7c 019250 ifetch 1 ,contru -0x4c7d 019251 hstore 1 ,core_ucode_data -0x4c7e 019252 iadd temp ,temp -0x4c7f 019253 loop phci_grp_vendor_patch_loop -: 019254 phci_grp_vendor_patch_check_sum: -0x4c80 019255 and temp ,0xff ,temp -0x4c81 019256 ifetch 1 ,contru -0x4c82 019257 isub temp ,null -0x4c83 019258 nbranch phci_grp_vendor_patch_bad ,zero -0x4c84 019259 branch hci_normal_reply -: 019262 phci_grp_vendor_patch_sec: -0x4c85 019263 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4c86 019264 call phci_grp_vendor_patch_common -0x4c87 019265 store 8 ,mem_pdatatemp -: 019266 phci_grp_vendor_patch_sec_loop: -0x4c88 019267 call do_aes_cbc -0x4c89 019268 arg 16 ,loopcnt -0x4c8a 019269 arg mem_temp_block0 ,contw -0x4c8b 019270 call load_uart_sum_loop -0x4c8c 019271 storet 8 ,mem_temp -0x4c8d 019272 arg mem_temp_block2 ,contw -0x4c8e 019273 call store_aes_result -0x4c8f 019274 arg mem_temp_block2 ,rega -0x4c90 019275 arg mem_temp_block0 ,regb -0x4c91 019276 arg mem_temp_block3 ,contw -0x4c92 019277 call xor16 -0x4c93 019278 arg 16 ,loopcnt -0x4c94 019279 arg mem_temp_block3 ,contr -0x4c95 019280 call load_ucode_only_loop -0x4c96 019281 fetcht 8 ,mem_temp -0x4c97 019282 fetch 8 ,mem_pdatatemp -0x4c98 019283 increase -16 ,pdata -0x4c99 019284 store 8 ,mem_pdatatemp -0x4c9a 019285 nbranch phci_grp_vendor_patch_sec_loop ,blank -0x4c9b 019286 branch phci_grp_vendor_patch_check_sum -: 019288 load_ucode_only_loop: -0x4c9c 019289 ifetch 1 ,contr -0x4c9d 019290 hstore 1 ,core_ucode_data -0x4c9e 019291 loop load_ucode_only_loop -0x4c9f 019292 rtn -: 019294 load_uart_sum_loop: -0x4ca0 019295 ifetch 1 ,contru -0x4ca1 019296 istore 1 ,contw -0x4ca2 019297 iadd temp ,temp -0x4ca3 019298 loop load_uart_sum_loop -0x4ca4 019299 rtn -: 019301 phci_grp_vendor_patch_sec_init: -0x4ca5 019302 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4ca6 019303 arg 0 ,temp -0x4ca7 019304 arg 16 ,loopcnt -0x4ca8 019305 arg mem_temp_block0 ,contw -0x4ca9 019306 call load_uart_sum_loop -0x4caa 019307 hfetch 1 ,core_gpio_key2 -0x4cab 019308 and_into 0xfd ,pdata -0x4cac 019309 hstore 1 ,core_gpio_key2 -0x4cad 019310 arg mem_temp_block0 ,contr -0x4cae 019311 arg 16 ,loopcnt -0x4caf 019312 call aes_load_data -0x4cb0 019313 call aes_init -0x4cb1 019314 call aes_clear_data -0x4cb2 019315 branch phci_grp_vendor_patch_check_sum -: 019318 phci_grp_vendor_done: -0x4cb3 019319 arg 0x20 ,loopcnt -0x4cb4 019320 arg mem_patch00 ,contw -0x4cb5 019321 arg 0 ,temp -: 019322 phci_grp_vendor_done_loop: -0x4cb6 019323 ifetch 1 ,contru -0x4cb7 019324 istore 1 ,contw -0x4cb8 019325 iadd temp ,temp -0x4cb9 019326 loop phci_grp_vendor_done_loop -0x4cba 019327 and temp ,0xff ,temp -0x4cbb 019328 ifetch 1 ,contru -0x4cbc 019329 isub temp ,null -0x4cbd 019330 nbranch phci_grp_vendor_patch_bad ,zero -0x4cbe 019331 jam 0 ,core_ucode_ctrl -0x4cbf 019332 call hci_normal_reply -0x4cc0 019333 call h4_rx_discard_packet -0x4cc1 019334 call clear_key_buf -0x4cc2 019335 call wait_uarttx -0x4cc3 019336 branch soft_reset -: 019338 phci_grp_vendor_patch_bad: -0x4cc4 019339 jam 0 ,core_ucode_ctrl -0x4cc5 019340 branch start -: 019342 phci_grp_vendor_bdaddr: -0x4cc6 019343 ifetch 6 ,contru -0x4cc7 019344 store 6 ,mem_lap -0x4cc8 019345 branch hci_normal_reply -: 019348 phci_grp_vendor_mem: -0x4cc9 019349 ifetch 1 ,contru -0x4cca 019350 store 1 ,mem_hci_curr_len -0x4ccb 019351 copy pdata ,loopcnt -0x4ccc 019352 ifetch 2 ,contru -0x4ccd 019353 store 2 ,mem_hci_curr_target -0x4cce 019354 copy pdata ,contw -0x4ccf 019355 call uart_copy_rx_bytes -0x4cd0 019356 branch hci_normal_reply -: 019359 phci_grp_vendor_eep: -0x4cd1 019360 ifetch 1 ,contru -0x4cd2 019361 store 1 ,mem_hci_curr_len -0x4cd3 019362 copy pdata ,loopcnt -0x4cd4 019363 ifetch 2 ,contru -0x4cd5 019364 store 2 ,mem_hci_curr_target -0x4cd6 019365 arg mem_l2cap_rxbuff1 ,contw -0x4cd7 019366 call uart_copy_rx_bytes -0x4cd8 019367 fetcht 1 ,mem_hci_curr_len -0x4cd9 019368 arg mem_l2cap_rxbuff1 ,rega -0x4cda 019369 fetch 2 ,mem_hci_curr_target -0x4cdb 019370 branch iicd_write_ota_data -: 019375 hci_normal_reply: -0x4cdc 019376 force 4 ,loopcnt -: 019377 hci_command_complete: -0x4cdd 019378 call hci_get_payload_ptr -0x4cde 019379 force 0x1 ,pdata -0x4cdf 019380 istore 1 ,contwu -0x4ce0 019381 deposit alarm -0x4ce1 019382 istore 3 ,contwu -0x4ce2 019383 force hci_event_command_complete ,queue -: 019384 hci_send_event: -0x4ce3 019385 bpatchx patch20_4 ,mem_patch20 -0x4ce4 019386 call hci_get_packet_ptr -0x4ce5 019387 deposit queue -0x4ce6 019388 istore 1 ,contwu -0x4ce7 019389 deposit loopcnt -0x4ce8 019390 istore 1 ,contwu -: 019391 hci_send_event_raw: -0x4ce9 019392 force 5 ,queue -0x4cea 019393 increase 2 ,loopcnt -: 019394 hci_send_packet: -0x4ceb 019395 branch h4_send_packet_event -: 019397 hci_send_commu_ready_event: -0x4cec 019398 force hci_event_vendor_specific ,queue -0x4ced 019399 call hci_get_payload_ptr -0x4cee 019400 setarg hci_vendor_event_commu_ready -0x4cef 019401 istore 1 ,contwu -0x4cf0 019402 force 1 ,loopcnt -0x4cf1 019403 branch hci_send_event -: 019405 hci_get_cmd_complete_ptr: -0x4cf2 019406 force 12 ,contwu -0x4cf3 019407 branch hci_get_tx_ptr -: 019409 hci_get_payload_ptr: -0x4cf4 019410 force 8 ,contwu -0x4cf5 019411 branch hci_get_tx_ptr -: 019413 hci_get_packet_ptr: -0x4cf6 019414 force 6 ,contwu -: 019415 hci_get_tx_ptr: -0x4cf7 019416 branch h4_get_tx_ptr -: 019420 calc_tx_crc16: -0x4cf8 019421 pulse crc16 -0x4cf9 019422 enable enable_crc -: 019423 crcloop: -0x4cfa 019424 ifetch 1 ,contwu -0x4cfb 019425 inject bucket ,8 -0x4cfc 019426 loop crcloop -0x4cfd 019427 enable enable_parity -0x4cfe 019428 inject bucket ,16 -0x4cff 019429 disable enable_parity -0x4d00 019430 disable enable_crc -0x4d01 019431 disable crc16 -0x4d02 019432 byteswap pdata ,pdata -0x4d03 019433 rtn -: 019437 cmd_exit: -0x4d04 019438 jam 0 ,mem_hci_cmd -0x4d05 019439 rtn -: 019440 cmd_check_plap: -0x4d06 019441 fetch 6 ,mem_hci_plap -0x4d07 019442 fetcht 6 ,mem_plap -0x4d08 019443 isub temp ,null -0x4d09 019444 rtn -: 019449 cmd_pair: -0x4d0a 019450 fetch 1 ,mem_op -0x4d0b 019451 bbit1 op_inrand_req ,cmd_pair_passive -0x4d0c 019452 call tid_initiate -0x4d0d 019453 jam lmp_in_rand ,mem_lmo_opcode2 -0x4d0e 019454 branch cmd_exit -: 019455 cmd_pair_passive: -0x4d0f 019456 set0 op_inrand_req ,pdata -0x4d10 019457 store 1 ,mem_op -0x4d11 019458 call lmp_accept_inrand -0x4d12 019459 setarg 0 -0x4d13 019460 setflag master ,smap_lmptid ,pdata -0x4d14 019461 store 1 ,mem_lmo_tid2 -0x4d15 019462 branch cmd_exit -0x4d16 019463 rtn -: 019464 cmd_in_sniff: -0x4d17 019465 jam lmp_sniff_req ,mem_lmo_opcode2 -0x4d18 019466 arg mem_sniff_payload ,contw -0x4d19 019467 setarg 0 -0x4d1a 019468 isolate1 27 ,clke_bt -0x4d1b 019469 setflag true ,1 ,pdata -0x4d1c 019470 istore 1 ,contw -0x4d1d 019471 setarg 0 -0x4d1e 019472 istore 2 ,contw -0x4d1f 019473 fetch 2 ,mem_sniff_param_interval -0x4d20 019474 istore 2 ,contw -0x4d21 019475 fetch 1 ,mem_sniff_param_attempt -0x4d22 019476 istore 2 ,contw -0x4d23 019477 fetch 1 ,mem_sniff_param_timeout -0x4d24 019478 istore 2 ,contw -0x4d25 019479 branch cmd_exit -: 019481 cmd_exit_sniff: -0x4d26 019482 jam lmp_unsniff_req ,mem_lmo_opcode2 -0x4d27 019483 branch cmd_exit -: 019485 hci_idle_dispatch: -0x4d28 019486 call gpio_check_uart_state -0x4d29 019487 rtn true -0x4d2a 019488 arg uart_wakeup_rx ,temp -0x4d2b 019489 call gpio_get_bit -0x4d2c 019490 nbranch uart_wake_up ,true -0x4d2d 019491 jam hci_rx_wake ,mem_hci_lt_rx_state -0x4d2e 019492 rtn -: 019493 uart_wake_up: -0x4d2f 019494 fetch 1 ,mem_hci_lt_rx_state -0x4d30 019495 rtnne hci_rx_wake -0x4d31 019496 call hci_exit_lpm -0x4d32 019497 branch hci_send_commu_ready_event -: 019511 hid_rx_process: -0x4d33 019512 bpatchx patch20_5 ,mem_patch20 -0x4d34 019513 fetch 2 ,mem_l2cap_payload_ptr -0x4d35 019514 copy pdata ,contr -0x4d36 019515 ifetch 1 ,contr -0x4d37 019516 and pdata ,0x0f ,temp -0x4d38 019517 rshift4 pdata ,pdata -0x4d39 019518 beq hid_type_set_idle ,hid_rx_process_handshake -0x4d3a 019519 beq hid_type_set_protocol ,hid_rx_process_handshake -0x4d3b 019520 beq hid_type_data ,hid_rx_process_data -0x4d3c 019521 beq hid_type_set_report ,hid_rx_process_set_report -0x4d3d 019522 beq hid_type_control ,hid_rx_process_hid_control -0x4d3e 019523 rtn -: 019525 hid_rx_process_hid_control: -0x4d3f 019526 copy temp ,pdata -0x4d40 019527 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug -0x4d41 019528 beq hid_control_p_suspend ,hid_rx_process_suspend -0x4d42 019529 rtn -: 019531 hid_rx_process_virtual_cable_unplug: -0x4d43 019532 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp -0x4d44 019533 call ui_ipc_send_event -0x4d45 019534 fetch 1 ,mem_device_option -0x4d46 019535 rtnbit0 dvc_op_mouse -0x4d47 019536 copy temp ,pdata -0x4d48 019537 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug -0x4d49 019538 rtn -: 019539 hid_rx_process_suspend: -0x4d4a 019540 rtn -: 019542 hid_rx_process_set_report: -0x4d4b 019543 call hid_rx_process_data -0x4d4c 019544 arg 0x01 ,rega -0x4d4d 019545 call hid_malloc_tx_buff -0x4d4e 019546 fetch 2 ,mem_hid_ctrl_remote_cid -0x4d4f 019547 istore 2 ,contw -0x4d50 019548 setarg 0x00 -0x4d51 019549 istore 1 ,contw -0x4d52 019550 rtn -: 019552 hid_rx_process_handshake: -0x4d53 019553 arg 1 ,rega -0x4d54 019554 call hid_malloc_tx_buff -0x4d55 019555 fetch 2 ,mem_hid_ctrl_remote_cid -0x4d56 019556 istore 2 ,contw -0x4d57 019557 setarg 0 -0x4d58 019558 istore 1 ,contw -0x4d59 019559 jam 1 ,mem_ui_data_txbuff_length -0x4d5a 019560 fetch 1 ,mem_hid_control_state -0x4d5b 019561 set1 l2cap_channel_hid_handshake_done -0x4d5c 019562 store 1 ,mem_hid_control_state -0x4d5d 019563 jam bt_evt_hid_handshake ,mem_fifo_temp -0x4d5e 019564 branch ui_ipc_send_event -: 019566 hid_rx_process_data: -0x4d5f 019567 ifetch 1 ,contr -0x4d60 019568 beq hid_report_id_kb ,hid_rx_process_data_hid_kb -0x4d61 019569 rtn -: 019571 hid_rx_process_data_hid_kb: -0x4d62 019572 rtn -: 019575 hid_malloc_tx_buff: -0x4d63 019576 call l2cap_malloc -0x4d64 019577 copy rega ,temp -0x4d65 019578 storet 1 ,mem_ui_data_txbuff_length -0x4d66 019579 copy pdata ,contw -0x4d67 019580 copy rega ,pdata -0x4d68 019581 istore 2 ,contw -0x4d69 019582 rtn -: 019599 l2cap_init: -0x4d6a 019600 branch l2cap_init_wake ,wake -: 019601 l2cap_init_work: -0x4d6b 019602 setarg mem_l2cap_xmem_end -0x4d6c 019603 arg mem_l2cap_xmem_start ,contw -0x4d6d 019604 isub contw ,loopcnt -0x4d6e 019605 call clear_mem -: 019606 l2cap_init_wake: -0x4d6f 019607 bpatchx patch20_6 ,mem_patch20 -0x4d70 019608 setarg mem_sdp_mem_end -0x4d71 019609 arg mem_sdp_mem_start ,contw -0x4d72 019610 isub contw ,loopcnt -0x4d73 019611 call clear_mem -0x4d74 019612 setarg mem_l2cap_mem_end -0x4d75 019613 arg mem_l2cap_mem_start ,contw -0x4d76 019614 isub contw ,loopcnt -0x4d77 019615 call clear_mem -0x4d78 019616 branch l2cap_lpm_load_txbuf -: 019618 process_rx_l2cap_pkt: -0x4d79 019619 bpatchx patch20_7 ,mem_patch20 -0x4d7a 019620 copy contr ,temp -0x4d7b 019623 copy temp ,contr -0x4d7c 019624 ifetch 2 ,contr -0x4d7d 019625 store 2 ,mem_l2cap_rx_pkt_length -0x4d7e 019626 ifetch 2 ,contr -0x4d7f 019627 store 2 ,mem_l2cap_rx_cid -0x4d80 019628 deposit contr -0x4d81 019629 store 2 ,mem_l2cap_payload_ptr -0x4d82 019630 fetch 1 ,memui_reconnect_mode -0x4d83 019631 beq no_reconnection ,l2cap_rx_multiplexing -0x4d84 019632 branch ml2cap_rx_multiplexing -: 019634 l2cap_rx_multiplexing: -0x4d85 019635 fetch 2 ,mem_l2cap_rx_pkt_length -0x4d86 019636 branch l2cap_rx_reset_state ,blank -0x4d87 019637 bpatchx patch21_0 ,mem_patch21 -0x4d88 019638 fetch 1 ,mem_l2cap_rx_cid -0x4d89 019639 beq l2cap_signal_channel ,l2cap_call_proc_signal -: 019640 l2cap_rx_multiplexing0: -0x4d8a 019641 beq l2cap_sdp_channel ,l2cap_call_proc_sdp -0x4d8b 019642 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm -0x4d8c 019643 beq l2cap_hid_control_channel ,l2cap_call_proc_hid -0x4d8d 019644 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid -0x4d8e 019645 branch l2cap_rx_reset_state -: 019647 l2cap_check_map: -0x4d8f 019650 bpatchx patch21_1 ,mem_patch21 -0x4d90 019651 call l2cap_malloc_get_full_map -0x4d91 019652 fetch 1 ,mem_used_map -0x4d92 019653 beq 0 ,set_pdata_0 -0x4d93 019654 beq 1 ,set_pdata_0 -0x4d94 019655 beq 2 ,set_pdata_0 -0x4d95 019656 beq 3 ,set_pdata_0 -0x4d96 019657 beq 0x81 ,set_pdata_0 -0x4d97 019658 beq 0xc0 ,set_pdata_0 -0x4d98 019659 beq 0x80 ,set_pdata_0 -0x4d99 019660 beq 0x40 ,set_pdata_0 -0x4d9a 019661 rtn -: 019663 set_pdata_0: -0x4d9b 019664 setarg 0 -0x4d9c 019665 rtn -: 019668 l2cap_call_proc_signal: -0x4d9d 019669 call l2cap_check_map -0x4d9e 019670 nrtn blank -: 019671 l2cap_call_proc_signal0: -0x4d9f 019672 call l2cap_malloc_signal_channel -0x4da0 019673 call l2cap_process_signal_pkt -0x4da1 019674 fetcht 2 ,mem_l2cap_signal_tx_length -0x4da2 019675 branch l2cap_call_proc_no_reply ,blank -0x4da3 019676 call l2cap_get_signal_tx_buff -0x4da4 019677 fetch 2 ,mem_l2cap_signal_tx_length -0x4da5 019678 istore 2 ,contw -0x4da6 019679 force l2cap_signal_channel ,pdata -0x4da7 019680 istore 2 ,contw -0x4da8 019681 branch l2cap_rx_reset_state -: 019683 l2cap_call_proc_sigal_pending: -0x4da9 019684 fetch 1 ,mem_l2cap_pending_item -0x4daa 019685 rtn blank -0x4dab 019686 copy pdata ,rega -0x4dac 019687 bpatchx patch21_2 ,mem_patch21 -0x4dad 019688 fetch 4 ,mem_l2cap_sdpres_delay_time -0x4dae 019689 arg 0x100 ,temp -0x4daf 019690 iadd temp ,temp -0x4db0 019691 copy clkn_bt ,pdata -0x4db1 019692 isub temp ,null -0x4db2 019693 nrtn positive -0x4db3 019694 jam 0 ,mem_l2cap_pending_item -0x4db4 019695 copy rega ,pdata -0x4db5 019696 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ -0x4db6 019697 branch assert -: 019698 l2cap_sdp_conn_succ: -0x4db7 019699 arg 0 ,debug -0x4db8 019700 call l2cap_malloc_signal_channel -0x4db9 019701 call restore_l2cap_req_param -0x4dba 019702 call l2cap_get_signal_tx_payload -0x4dbb 019703 call save_cont_pointers -0x4dbc 019704 call send_connection_sdp_res -0x4dbd 019705 call l2cap_get_signal_tx_buff -0x4dbe 019707 setarg 0x000c -0x4dbf 019708 istore 2 ,contw -0x4dc0 019709 force l2cap_signal_channel ,pdata -0x4dc1 019710 istore 2 ,contw -0x4dc2 019711 branch l2cap_rx_reset_state -: 019715 l2cap_reset_sdp_map: -0x4dc3 019716 bpatchx patch21_3 ,mem_patch21 -0x4dc4 019717 fetch 2 ,mem_sdp_tx_pkt_length -0x4dc5 019718 increase 4 ,pdata -0x4dc6 019719 rshift4 pdata ,pdata -0x4dc7 019720 rshift3 pdata ,pdata -0x4dc8 019721 add pdata ,1 ,temp -0x4dc9 019722 arg mem_tx_fifo3 ,contr -0x4dca 019723 ifetch 3 ,contr -0x4dcb 019724 rtn blank -0x4dcc 019725 store 3 ,mem_tx_fifo_map_temp -0x4dcd 019726 fetch 1 ,mem_tx_fifo_map_temp -0x4dce 019727 copy pdata ,rega -0x4dcf 019728 call check_l2cap_map -0x4dd0 019729 copy regb ,pdata -0x4dd1 019730 store 1 ,mem_tx_fifo3 -0x4dd2 019731 rtn -: 019733 check_l2cap_map: -0x4dd3 019734 arg 0 ,queue -0x4dd4 019735 arg 0 ,regb -: 019737 check_l2cap_map_loop: -0x4dd5 019738 sub queue ,7 ,null -0x4dd6 019739 nrtn positive -0x4dd7 019740 qisolate1 rega -0x4dd8 019741 branch check_l2cap_map_used ,true -0x4dd9 019742 branch check_l2cap_map_used2 -: 019744 check_l2cap_map_used: -0x4dda 019745 copy temp ,pdata -0x4ddb 019746 branch check_l2cap_map_used2 ,blank -0x4ddc 019747 qset1 regb -0x4ddd 019748 increase -1 ,temp -: 019750 check_l2cap_map_used2: -0x4dde 019751 increase 1 ,queue -0x4ddf 019752 branch check_l2cap_map_loop -: 019754 l2cap_call_proc_sdp: -0x4de0 019755 call l2cap_malloc_is_fifo_empty -0x4de1 019756 nrtn blank -0x4de2 019757 call l2cap_check_map -0x4de3 019758 nrtn blank -0x4de4 019759 call l2cap_malloc_sdp_channel -0x4de5 019760 call sdp_process -0x4de6 019761 call l2cap_reset_sdp_map -0x4de7 019762 branch l2cap_call_proc_sdp_common -: 019765 ml2cap_call_proc_sdp: -0x4de8 019766 call l2cap_malloc_is_fifo_empty -0x4de9 019767 nrtn blank -0x4dea 019768 call l2cap_malloc_sdp_channel -0x4deb 019769 call sdp_process -: 019770 l2cap_call_proc_sdp_common: -0x4dec 019771 call l2cap_get_sdp_tx_buff -0x4ded 019772 fetch 2 ,mem_sdp_tx_pkt_length -0x4dee 019773 branch l2cap_call_proc_no_reply ,blank -0x4def 019774 istore 2 ,contw -0x4df0 019775 fetch 2 ,mem_sdp_remote_cid -0x4df1 019776 istore 2 ,contw -0x4df2 019777 branch l2cap_rx_reset_state -: 019779 l2cap_call_proc_hid: -0x4df3 019780 call hid_rx_process -0x4df4 019781 branch l2cap_rx_reset_state -: 019783 l2cap_call_proc_rfcomm: -0x4df5 019784 bpatchx patch21_4 ,mem_patch21 -0x4df6 019785 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag -0x4df7 019786 call rfcomm_rx_process -0x4df8 019787 fetch 1 ,mem_rfcomm_malloc_fail_flag -0x4df9 019788 rtneq rfcomm_malloc_fail -0x4dfa 019789 branch l2cap_rx_reset_state -: 019790 l2cap_call_proc_no_reply: -0x4dfb 019791 call l2cap_malloc_discard -: 019793 l2cap_rx_reset_state: -0x4dfc 019794 setarg 0 -0x4dfd 019795 store 2 ,mem_l2cap_rx_pkt_length -0x4dfe 019796 store 2 ,mem_l2cap_rx_cid -0x4dff 019797 jam l2cap_rx_done ,mem_l2cap_rx_done -0x4e00 019798 rtn -: 019800 l2cap_process_signal_pkt: -0x4e01 019801 bpatchx patch21_5 ,mem_patch21 -0x4e02 019802 call l2cap_get_signal_tx_payload -0x4e03 019803 force 0 ,regb -0x4e04 019804 fetch 2 ,mem_l2cap_rx_pkt_length -0x4e05 019805 copy pdata ,regc -0x4e06 019806 fetch 2 ,mem_l2cap_payload_ptr -0x4e07 019807 iforce contr -: 019808 l2cap_process_signal_pkt_loop: -0x4e08 019809 call l2cap_process_one_signal -0x4e09 019810 deposit regc -0x4e0a 019811 increase -4 ,regc -0x4e0b 019812 increase -4 ,pdata -0x4e0c 019813 nbranch l2cap_process_signal_pkt_loop ,blank -0x4e0d 019814 copy regb ,pdata -0x4e0e 019815 store 2 ,mem_l2cap_signal_tx_length -0x4e0f 019816 rtn -: 019818 l2cap_process_one_signal: -0x4e10 019819 bpatchx patch21_6 ,mem_patch21 -0x4e11 019820 ifetch 1 ,contr -0x4e12 019821 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject -0x4e13 019822 beq signal_connect_req ,l2cap_proc_signal_connect_req -0x4e14 019823 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp -0x4e15 019824 beq signal_config_req ,l2cap_proc_signal_config_req -0x4e16 019825 beq signal_config_rsp ,l2cap_proc_signal_config_rsp -0x4e17 019826 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req -0x4e18 019827 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp -0x4e19 019828 beq signal_echo_req ,l2cap_proc_signal_echo_req -0x4e1a 019829 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp -0x4e1b 019830 beq signal_info_req ,l2cap_proc_signal_info_req -0x4e1c 019831 beq signal_info_rsp ,l2cap_proc_signal_info_rsp -0x4e1d 019832 call l2cap_reject_command -: 019833 l2cap_process_one_signal_rtn: -0x4e1e 019834 rtn -: 019836 l2cap_proc_signal_info_req: -0x4e1f 019837 ifetch 1 ,contr -0x4e20 019838 copy pdata ,queue -0x4e21 019839 ifetch 2 ,contr -0x4e22 019840 copy pdata ,rega -0x4e23 019841 copy regc ,pdata -0x4e24 019842 isub rega ,regc -0x4e25 019843 setarg signal_info_rsp -0x4e26 019844 istore 1 ,contw -0x4e27 019845 copy queue ,pdata -0x4e28 019846 istore 1 ,contw -0x4e29 019847 ifetch 2 ,contr -: 019848 l2cap_proc_signal_info_req_reply: -0x4e2a 019849 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext -0x4e2b 019850 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix -0x4e2c 019851 rtn -: 019852 l2cap_proc_signal_info_req_ext: -0x4e2d 019853 setarg 0x020008 -0x4e2e 019854 istore 6 ,contw -0x4e2f 019855 setarg 0x0280 -0x4e30 019856 istore 4 ,contw -0x4e31 019857 force 12 ,pdata -0x4e32 019858 branch l2cap_proc_signal_info_req_common -: 019859 l2cap_proc_signal_info_req_fix: -0x4e33 019860 setarg 0x3000c -0x4e34 019861 istore 6 ,contw -0x4e35 019862 setarg 0x0006 -0x4e36 019863 istore 8 ,contw -0x4e37 019864 force 16 ,pdata -: 019865 l2cap_proc_signal_info_req_common: -0x4e38 019866 iadd regb ,regb -0x4e39 019867 branch l2cap_process_one_signal_rtn -: 019869 ml2cap_proc_signal_info_req: -0x4e3a 019870 ifetch 1 ,contr -0x4e3b 019871 copy pdata ,queue -0x4e3c 019872 ifetch 2 ,contr -0x4e3d 019873 copy pdata ,rega -0x4e3e 019874 ifetch 2 ,contr -0x4e3f 019875 store 2 ,mem_temp -0x4e40 019876 copy regc ,pdata -0x4e41 019877 isub rega ,regc -0x4e42 019878 call l2cap_get_signal_tx_payload -0x4e43 019879 setarg signal_info_rsp -0x4e44 019880 istore 1 ,contw -0x4e45 019881 copy queue ,pdata -0x4e46 019882 istore 1 ,contw -0x4e47 019883 fetch 2 ,mem_temp -0x4e48 019884 branch l2cap_proc_signal_info_req_reply -: 019888 l2cap_proc_signal_cmd_reject: -0x4e49 019889 ifetch 1 ,contr -0x4e4a 019890 copy pdata ,queue -0x4e4b 019891 ifetch 2 ,contr -0x4e4c 019892 copy pdata ,rega -0x4e4d 019893 iadd contr ,contr -0x4e4e 019894 copy regc ,pdata -0x4e4f 019895 isub rega ,regc -: 019896 l2cap_proc_signal_cmd_reject_rtn: -0x4e50 019897 branch l2cap_process_one_signal_rtn -: 019899 l2cap_proc_signal_connect_req: -0x4e51 019900 call save_cont_pointers -0x4e52 019903 call load_cont_pointers -0x4e53 019904 arg 0 ,debug -0x4e54 019905 ifetch 1 ,contr -0x4e55 019906 copy pdata ,queue -0x4e56 019907 ifetch 2 ,contr -0x4e57 019908 copy pdata ,rega -0x4e58 019909 ifetch 2 ,contr -0x4e59 019910 copy pdata ,temp -0x4e5a 019911 ifetch 2 ,contr -0x4e5b 019912 copy pdata ,timeup -0x4e5c 019913 bpatchx patch21_7 ,mem_patch21 -0x4e5d 019914 copy temp ,pdata -0x4e5e 019915 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp -0x4e5f 019916 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm -0x4e60 019917 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl -0x4e61 019918 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int -0x4e62 019919 call l2cap_reject_command -0x4e63 019920 branch l2cap_proc_signal_connect_req_rtn -: 019922 l2cap_proc_signal_connect_req_sdp: -0x4e64 019923 call save_cont_pointers -0x4e65 019924 arg l2cap_sdp_channel ,temp -0x4e66 019925 fetch 2 ,mem_sdp_remote_cid -0x4e67 019926 nbranch already_connected ,blank -0x4e68 019927 copy timeup ,pdata -0x4e69 019928 store 2 ,mem_sdp_remote_cid -0x4e6a 019929 copy clkn_bt ,pdata -0x4e6b 019930 store 4 ,mem_l2cap_sdpres_delay_time -0x4e6c 019931 call store_l2cap_req_param -0x4e6d 019932 branch send_connection_pending -: 019934 store_l2cap_req_param: -0x4e6e 019935 storet 2 ,mem_psm -0x4e6f 019936 deposit timeup -0x4e70 019937 store 2 ,mem_scid -0x4e71 019938 deposit rega -0x4e72 019939 store 2 ,mem_cmd_length -0x4e73 019940 deposit regb -0x4e74 019941 store 2 ,mem_tt2 -0x4e75 019942 deposit regc -0x4e76 019943 store 2 ,mem_tt3 -0x4e77 019944 deposit queue -0x4e78 019945 store 2 ,mem_id -0x4e79 019946 rtn -: 019948 restore_l2cap_req_param: -0x4e7a 019949 fetcht 2 ,mem_psm -0x4e7b 019950 fetch 2 ,mem_scid -0x4e7c 019951 copy pdata ,timeup -0x4e7d 019952 fetch 2 ,mem_cmd_length -0x4e7e 019953 copy pdata ,rega -0x4e7f 019954 fetch 2 ,mem_tt2 -0x4e80 019955 copy pdata ,regb -0x4e81 019956 fetch 2 ,mem_tt3 -0x4e82 019957 copy pdata ,regc -0x4e83 019958 fetch 2 ,mem_id -0x4e84 019959 copy pdata ,queue -0x4e85 019960 rtn -: 019962 l2cap_proc_signal_connect_req_rfcomm: -0x4e86 019963 call save_cont_pointers -0x4e87 019964 setarg l2cap_rfcomm_channel -0x4e88 019965 arg l2cap_rfcomm_channel ,temp -0x4e89 019966 fetch 2 ,mem_rfcomm_remote_cid -0x4e8a 019967 nbranch already_connected ,blank -0x4e8b 019968 copy timeup ,pdata -0x4e8c 019969 store 2 ,mem_rfcomm_remote_cid -0x4e8d 019970 fetch 1 ,mem_rfcomm_state -0x4e8e 019971 set1 l2cap_channel_state_conn_req ,pdata -0x4e8f 019972 set1 l2cap_channel_state_conn_res ,pdata -0x4e90 019973 store 1 ,mem_rfcomm_state -0x4e91 019974 branch send_connection_res -: 019975 l2cap_proc_signal_connect_req_hid_ctrl: -0x4e92 019976 call save_cont_pointers -0x4e93 019977 arg l2cap_hid_control_channel ,temp -0x4e94 019978 fetch 2 ,mem_hid_ctrl_remote_cid -0x4e95 019979 nbranch already_connected ,blank -0x4e96 019980 copy timeup ,pdata -0x4e97 019981 store 2 ,mem_hid_ctrl_remote_cid -0x4e98 019982 fetch 1 ,mem_hid_control_state -0x4e99 019983 set1 l2cap_channel_state_conn_req ,pdata -0x4e9a 019984 set1 l2cap_channel_state_conn_res ,pdata -0x4e9b 019985 store 1 ,mem_hid_control_state -0x4e9c 019986 branch send_connection_res -: 019987 l2cap_proc_signal_connect_req_hid_int: -0x4e9d 019988 call save_cont_pointers -0x4e9e 019989 deposit clke -0x4e9f 019990 arg l2cap_hid_interrupt_channel ,temp -0x4ea0 019991 fetch 2 ,mem_hid_int_remote_cid -0x4ea1 019992 nbranch already_connected ,blank -0x4ea2 019993 copy timeup ,pdata -0x4ea3 019994 store 2 ,mem_hid_int_remote_cid -0x4ea4 019995 fetch 1 ,mem_hid_interrupt_state -0x4ea5 019996 set1 l2cap_channel_state_conn_req ,pdata -0x4ea6 019997 set1 l2cap_channel_state_conn_res ,pdata -0x4ea7 019998 store 1 ,mem_hid_interrupt_state -0x4ea8 019999 branch send_connection_res -: 020001 send_connection_pending: -0x4ea9 020002 setarg l2cap_connect_pending -0x4eaa 020003 store 2 ,meml2cap_t1 -0x4eab 020004 jam l2cap_sdp_channel ,mem_l2cap_pending_item -0x4eac 020005 branch send_connection_res0 -: 020006 send_connection_sdp_res: -0x4ead 020007 fetch 1 ,mem_sdp_state -0x4eae 020008 set1 l2cap_channel_state_conn_req ,pdata -0x4eaf 020009 set1 l2cap_channel_state_conn_res ,pdata -0x4eb0 020010 store 1 ,mem_sdp_state -: 020011 send_connection_res: -0x4eb1 020012 setarg l2cap_connect_successful -0x4eb2 020013 store 2 ,meml2cap_t1 -: 020014 send_connection_res0: -0x4eb3 020015 bpatchx patch22_0 ,mem_patch22 -0x4eb4 020016 call load_cont_pointers -0x4eb5 020017 setarg signal_connect_rsp -0x4eb6 020018 istore 1 ,contw -0x4eb7 020019 copy queue ,pdata -0x4eb8 020020 istore 1 ,contw -0x4eb9 020021 setarg 0x0008 -0x4eba 020022 istore 2 ,contw -0x4ebb 020023 copy temp ,pdata -0x4ebc 020024 istore 2 ,contw -0x4ebd 020025 copy timeup ,pdata -0x4ebe 020026 istore 2 ,contw -0x4ebf 020027 fetch 2 ,meml2cap_t1 -0x4ec0 020028 beq l2cap_connect_pending ,connect_pending -0x4ec1 020029 isolate0 0 ,debug -0x4ec2 020030 branch connect_suc ,true -0x4ec3 020031 setarg l2cap_connect_refused_no_resources -: 020032 connect_suc: -0x4ec4 020033 istore 2 ,contw -0x4ec5 020034 force 0x0000 ,pdata -0x4ec6 020035 istore 2 ,contw -0x4ec7 020036 setarg 12 -0x4ec8 020037 branch connect_req_update_byte_counts -: 020038 connect_pending: -0x4ec9 020039 istore 2 ,contw -0x4eca 020040 force 0x0002 ,pdata -0x4ecb 020041 istore 2 ,contw -0x4ecc 020042 setarg 12 -0x4ecd 020043 branch connect_req_update_byte_counts -: 020045 already_connected: -0x4ece 020046 set1 0 ,debug -0x4ecf 020047 branch send_connection_res -: 020048 connect_req_update_byte_counts: -0x4ed0 020049 iadd regb ,regb -0x4ed1 020050 copy regc ,pdata -0x4ed2 020051 isub rega ,regc -0x4ed3 020052 branch l2cap_proc_signal_connect_req_rtn -: 020053 l2cap_proc_signal_connect_req_rtn: -0x4ed4 020054 branch l2cap_process_one_signal_rtn -: 020056 l2cap_proc_signal_connect_rsp: -0x4ed5 020057 ifetch 1 ,contr -0x4ed6 020058 copy pdata ,queue -0x4ed7 020059 ifetch 2 ,contr -0x4ed8 020060 copy pdata ,rega -0x4ed9 020061 copy regc ,pdata -0x4eda 020062 isub rega ,regc -0x4edb 020063 ifetch 2 ,contr -0x4edc 020064 copy pdata ,timeup -0x4edd 020065 ifetch 2 ,contr -0x4ede 020066 copy pdata ,temp -0x4edf 020067 bpatchx patch22_1 ,mem_patch22 -0x4ee0 020068 setarg l2cap_sdp_channel -0x4ee1 020069 isub temp ,null -0x4ee2 020070 branch l2cap_proc_signal_connect_rsp_sdp ,zero -0x4ee3 020071 setarg l2cap_rfcomm_channel -0x4ee4 020072 isub temp ,null -0x4ee5 020073 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero -0x4ee6 020074 setarg l2cap_hid_control_channel -0x4ee7 020075 isub temp ,null -0x4ee8 020076 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero -0x4ee9 020077 setarg l2cap_hid_interrupt_channel -0x4eea 020078 isub temp ,null -0x4eeb 020079 branch l2cap_proc_signal_connect_rsp_hid_int ,zero -0x4eec 020080 rtn -: 020082 l2cap_proc_signal_connect_rsp_sdp: -0x4eed 020083 copy timeup ,pdata -0x4eee 020084 store 2 ,mem_sdp_remote_cid -0x4eef 020085 fetch 1 ,mem_sdp_state -0x4ef0 020086 set1 l2cap_channel_state_conn_res ,pdata -0x4ef1 020087 store 1 ,mem_sdp_state -0x4ef2 020088 branch l2cap_process_one_signal_rtn -: 020089 l2cap_proc_signal_connect_rsp_rfcomm: -0x4ef3 020090 copy timeup ,pdata -0x4ef4 020091 store 2 ,mem_rfcomm_remote_cid -0x4ef5 020092 fetch 1 ,mem_rfcomm_state -0x4ef6 020093 set1 l2cap_channel_state_conn_res ,pdata -0x4ef7 020094 store 1 ,mem_rfcomm_state -0x4ef8 020095 rtn -: 020096 l2cap_proc_signal_connect_rsp_hid_int: -0x4ef9 020097 copy timeup ,pdata -0x4efa 020098 store 2 ,mem_hid_ctrl_remote_cid -0x4efb 020099 fetch 1 ,mem_hid_interrupt_state -0x4efc 020100 set1 l2cap_channel_state_conn_res ,pdata -0x4efd 020101 store 1 ,mem_hid_interrupt_state -0x4efe 020102 rtn -: 020103 l2cap_proc_signal_connect_rsp_hid_ctrl: -0x4eff 020104 copy timeup ,pdata -0x4f00 020105 store 2 ,mem_hid_int_remote_cid -0x4f01 020106 fetch 1 ,mem_hid_control_state -0x4f02 020107 set1 l2cap_channel_state_conn_res ,pdata -0x4f03 020108 store 1 ,mem_hid_control_state -0x4f04 020109 rtn -: 020111 l2cap_proc_signal_config_req: -0x4f05 020112 ifetch 1 ,contr -0x4f06 020113 copy pdata ,queue -0x4f07 020114 ifetch 2 ,contr -0x4f08 020115 copy pdata ,rega -0x4f09 020116 copy regc ,pdata -0x4f0a 020117 isub rega ,regc -0x4f0b 020118 ifetch 2 ,contr -0x4f0c 020119 copy pdata ,temp -0x4f0d 020120 copy temp ,rega -0x4f0e 020121 bpatchx patch22_2 ,mem_patch22 -0x4f0f 020122 setarg l2cap_sdp_channel -0x4f10 020123 isub temp ,null -0x4f11 020124 branch l2cap_proc_signal_config_req_sdp ,zero -0x4f12 020125 setarg l2cap_rfcomm_channel -0x4f13 020126 isub temp ,null -0x4f14 020127 branch l2cap_proc_signal_config_req_rfcomm ,zero -0x4f15 020128 setarg l2cap_hid_control_channel -0x4f16 020129 isub temp ,null -0x4f17 020130 branch l2cap_proc_signal_config_req_hid_ctrl ,zero -0x4f18 020131 setarg l2cap_hid_interrupt_channel -0x4f19 020132 isub temp ,null -0x4f1a 020133 branch l2cap_proc_signal_config_req_hid_int ,zero -0x4f1b 020134 branch l2cap_reject_command -: 020136 l2cap_proc_signal_config_req_sdp: -0x4f1c 020137 copy contw ,timeup -0x4f1d 020138 fetch 1 ,mem_sdp_state -0x4f1e 020139 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f1f 020140 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f20 020142 store 1 ,mem_sdp_state -0x4f21 020143 copy timeup ,contw -0x4f22 020144 arg l2cap_sdp_channel ,timeup -0x4f23 020145 fetch 2 ,mem_sdp_remote_cid -0x4f24 020146 copy pdata ,temp -0x4f25 020147 branch l2cap_send_config_rsp -: 020148 l2cap_proc_signal_config_req_hid_ctrl: -0x4f26 020149 copy contw ,timeup -0x4f27 020150 fetch 1 ,mem_hid_control_state -0x4f28 020151 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f29 020152 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f2a 020154 store 1 ,mem_hid_control_state -0x4f2b 020155 copy timeup ,contw -0x4f2c 020156 arg l2cap_hid_control_channel ,timeup -0x4f2d 020157 fetch 2 ,mem_hid_ctrl_remote_cid -0x4f2e 020158 copy pdata ,temp -0x4f2f 020159 branch l2cap_send_config_rsp -: 020160 l2cap_proc_signal_config_req_hid_int: -0x4f30 020161 copy contw ,timeup -0x4f31 020162 fetch 1 ,mem_hid_interrupt_state -0x4f32 020163 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f33 020164 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f34 020166 store 1 ,mem_hid_interrupt_state -0x4f35 020167 copy timeup ,contw -0x4f36 020168 arg l2cap_hid_interrupt_channel ,timeup -0x4f37 020169 fetch 2 ,mem_hid_int_remote_cid -0x4f38 020170 copy pdata ,temp -0x4f39 020171 branch l2cap_send_config_rsp -: 020172 l2cap_proc_signal_config_req_rfcomm: -0x4f3a 020173 copy contw ,timeup -0x4f3b 020174 fetch 1 ,mem_rfcomm_state -0x4f3c 020175 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f3d 020176 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f3e 020178 store 1 ,mem_rfcomm_state -0x4f3f 020180 copy timeup ,contw -0x4f40 020181 arg l2cap_rfcomm_channel ,timeup -0x4f41 020182 fetch 2 ,mem_rfcomm_remote_cid -0x4f42 020183 copy pdata ,temp -: 020184 l2cap_send_config_rsp: -0x4f43 020185 bpatchx patch22_3 ,mem_patch22 -0x4f44 020186 setarg signal_config_rsp -0x4f45 020187 istore 1 ,contw -0x4f46 020188 copy queue ,pdata -0x4f47 020189 istore 1 ,contw -0x4f48 020190 setarg 0x0006 -0x4f49 020191 istore 2 ,contw -0x4f4a 020192 copy temp ,pdata -0x4f4b 020193 istore 2 ,contw -0x4f4c 020194 force 0x00 ,pdata -0x4f4d 020195 istore 2 ,contw -0x4f4e 020196 force l2cap_config_success ,pdata -0x4f4f 020197 istore 2 ,contw -0x4f50 020198 force 10 ,pdata -0x4f51 020199 iadd regb ,regb -0x4f52 020201 storet 2 ,mem_config_req_dest_cid -0x4f53 020202 copy queue ,pdata -0x4f54 020203 store 1 ,mem_config_identifier -0x4f55 020204 force l2cap_sdp_channel ,pdata -0x4f56 020205 icompare 0xff ,timeup -0x4f57 020206 branch l2cap_send_config_rsp_is_sdp ,true -0x4f58 020207 increase 1 ,pdata -: 020208 l2cap_send_config_rsp_is_sdp: -0x4f59 020210 rtn -: 020211 l2cap_check_channel_state: -0x4f5a 020212 disable user -0x4f5b 020213 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata -0x4f5c 020214 rtnbit0 l2cap_channel_state_conn_req ,pdata -0x4f5d 020215 rtnbit0 l2cap_channel_state_conn_res ,pdata -0x4f5e 020216 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x4f5f 020217 copy contr ,contw -0x4f60 020218 increase -1 ,contw -0x4f61 020219 istore 1 ,contw -0x4f62 020220 enable user -0x4f63 020221 rtn -: 020222 l2cap_send_config_req: -: 020223 l2cap_send_config_req_sdp: -0x4f64 020224 fetch 1 ,mem_sdp_state -0x4f65 020225 call l2cap_check_channel_state -0x4f66 020226 nbranch l2cap_send_config_req_rfcomm ,user -0x4f67 020227 jam l2cap_sdp_channel ,mem_send_config_req -0x4f68 020228 fetch 2 ,mem_sdp_remote_cid -0x4f69 020229 store 2 ,mem_config_req_dest_cid -0x4f6a 020230 branch l2cap_generate_config_req -: 020231 l2cap_send_config_req_rfcomm: -0x4f6b 020232 fetch 1 ,mem_rfcomm_state -0x4f6c 020233 call l2cap_check_channel_state -0x4f6d 020234 nbranch l2cap_send_config_req_hid_ctrl ,user -0x4f6e 020235 jam l2cap_rfcomm_channel ,mem_send_config_req -0x4f6f 020236 fetch 2 ,mem_rfcomm_remote_cid -0x4f70 020237 store 2 ,mem_config_req_dest_cid -0x4f71 020238 branch l2cap_generate_config_req -: 020239 l2cap_send_config_req_hid_ctrl: -0x4f72 020240 fetch 1 ,mem_hid_control_state -0x4f73 020241 call l2cap_check_channel_state -0x4f74 020242 nbranch l2cap_send_config_req_hid_int ,user -0x4f75 020243 jam l2cap_hid_control_channel ,mem_send_config_req -0x4f76 020244 fetch 2 ,mem_hid_ctrl_remote_cid -0x4f77 020245 store 2 ,mem_config_req_dest_cid -0x4f78 020246 branch l2cap_generate_config_req -: 020247 l2cap_send_config_req_hid_int: -0x4f79 020248 fetch 1 ,mem_hid_interrupt_state -0x4f7a 020249 call l2cap_check_channel_state -0x4f7b 020250 nrtn user -0x4f7c 020251 jam l2cap_hid_interrupt_channel ,mem_send_config_req -0x4f7d 020252 fetch 2 ,mem_hid_int_remote_cid -0x4f7e 020253 store 2 ,mem_config_req_dest_cid -: 020256 l2cap_generate_config_req: -0x4f7f 020257 bpatchx patch22_4 ,mem_patch22 -0x4f80 020258 call l2cap_get_req_id -0x4f81 020259 call l2cap_malloc_signal_channel -0x4f82 020260 force 0 ,regb -0x4f83 020261 call l2cap_get_signal_tx_payload -0x4f84 020262 force signal_config_req ,pdata -0x4f85 020263 istore 1 ,contw -0x4f86 020264 fetch 1 ,mem_ml2cap_comm_id -0x4f87 020265 istore 1 ,contw -0x4f88 020266 setarg 0x0008 -0x4f89 020267 istore 2 ,contw -0x4f8a 020268 fetch 2 ,mem_config_req_dest_cid -0x4f8b 020269 istore 2 ,contw -0x4f8c 020270 setarg 0x0000 -0x4f8d 020271 istore 2 ,contw -0x4f8e 020272 force 1 ,pdata -0x4f8f 020273 istore 1 ,contw -0x4f90 020274 force 2 ,pdata -0x4f91 020275 istore 1 ,contw -0x4f92 020276 fetch 1 ,mem_send_config_req -0x4f93 020277 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm -0x4f94 020278 setarg l2cap_config_mtu_sdp -0x4f95 020279 istore 2 ,contw -0x4f96 020280 branch l2cap_generate_config_req_done -: 020281 l2cap_generate_config_req_rfcomm: -0x4f97 020282 setarg l2cap_config_mtu_rfcomm -0x4f98 020283 istore 2 ,contw -: 020284 l2cap_generate_config_req_done: -0x4f99 020285 arg 0x0c ,temp -0x4f9a 020286 storet 2 ,mem_l2cap_signal_tx_length -0x4f9b 020287 call l2cap_get_signal_tx_buff -0x4f9c 020288 fetch 2 ,mem_l2cap_signal_tx_length -0x4f9d 020289 istore 2 ,contw -0x4f9e 020290 force l2cap_signal_channel ,pdata -0x4f9f 020291 istore 2 ,contw -0x4fa0 020292 jam 0 ,mem_send_config_req -: 020293 l2cap_proc_signal_config_req_rtn: -0x4fa1 020294 branch l2cap_process_one_signal_rtn -: 020296 l2cap_proc_signal_config_rsp: -0x4fa2 020297 increase 1 ,contr -0x4fa3 020298 ifetch 2 ,contr -0x4fa4 020299 copy pdata ,rega -0x4fa5 020300 copy regc ,pdata -0x4fa6 020301 isub rega ,regc -0x4fa7 020302 ifetch 2 ,contr -0x4fa8 020303 copy pdata ,rega -0x4fa9 020304 bpatchx patch22_5 ,mem_patch22 -0x4faa 020305 setarg l2cap_sdp_channel -0x4fab 020306 isub rega ,null -0x4fac 020307 branch l2cap_proc_signal_config_rsp_sdp ,zero -0x4fad 020308 setarg l2cap_rfcomm_channel -0x4fae 020309 isub rega ,null -0x4faf 020310 branch l2cap_proc_signal_config_rsp_rfcomm ,zero -0x4fb0 020311 setarg l2cap_hid_control_channel -0x4fb1 020312 isub rega ,null -0x4fb2 020313 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero -0x4fb3 020314 setarg l2cap_hid_interrupt_channel -0x4fb4 020315 isub rega ,null -0x4fb5 020316 branch l2cap_proc_signal_config_rsp_hid_int ,zero -0x4fb6 020317 increase 2 ,contr -0x4fb7 020318 ifetch 2 ,contr -0x4fb8 020319 iforce null -0x4fb9 020320 branch l2cap_process_one_signal_rtn -: 020321 l2cap_proc_signal_config_rsp_sdp: -0x4fba 020322 fetch 1 ,mem_sdp_state -0x4fbb 020323 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fbc 020324 store 1 ,mem_sdp_state -0x4fbd 020325 branch l2cap_process_one_signal_rtn -: 020326 l2cap_proc_signal_config_rsp_rfcomm: -0x4fbe 020327 fetch 1 ,mem_rfcomm_state -0x4fbf 020328 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc0 020329 store 1 ,mem_rfcomm_state -0x4fc1 020330 branch l2cap_process_one_signal_rtn -: 020331 l2cap_proc_signal_config_rsp_hid_ctrl: -0x4fc2 020332 fetch 1 ,mem_hid_control_state -0x4fc3 020333 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc4 020334 store 1 ,mem_hid_control_state -0x4fc5 020335 branch l2cap_process_one_signal_rtn -: 020336 l2cap_proc_signal_config_rsp_hid_int: -0x4fc6 020337 fetch 1 ,mem_hid_interrupt_state -0x4fc7 020338 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc8 020339 store 1 ,mem_hid_interrupt_state -0x4fc9 020340 jam bt_evt_hid_connected ,mem_fifo_temp -0x4fca 020341 branch ui_ipc_send_event -: 020345 l2cap_proc_signal_disconnect_req: -0x4fcb 020346 ifetch 1 ,contr -0x4fcc 020347 copy pdata ,queue -0x4fcd 020348 ifetch 2 ,contr -0x4fce 020349 copy pdata ,rega -0x4fcf 020350 copy regc ,pdata -0x4fd0 020351 isub rega ,regc -0x4fd1 020352 ifetch 2 ,contr -0x4fd2 020353 copy pdata ,rega -0x4fd3 020354 ifetch 2 ,contr -0x4fd4 020355 copy pdata ,timeup -0x4fd5 020356 copy rega ,temp -0x4fd6 020357 call save_cont_pointers -0x4fd7 020358 bpatchx patch22_6 ,mem_patch22 -0x4fd8 020359 setarg l2cap_sdp_channel -0x4fd9 020360 isub temp ,null -0x4fda 020361 branch l2cap_proc_signal_disconnect_req_sdp ,zero -0x4fdb 020362 setarg l2cap_rfcomm_channel -0x4fdc 020363 isub temp ,null -0x4fdd 020364 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero -0x4fde 020365 setarg l2cap_hid_control_channel -0x4fdf 020366 isub temp ,null -0x4fe0 020367 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero -0x4fe1 020368 setarg l2cap_hid_interrupt_channel -0x4fe2 020369 isub temp ,null -0x4fe3 020370 branch l2cap_proc_signal_disconnect_req_hid_int ,zero -0x4fe4 020371 call l2cap_reject_command -0x4fe5 020372 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020373 l2cap_proc_signal_disconnect_req_hid_ctrl: -0x4fe6 020374 copy timeup ,temp -0x4fe7 020375 fetch 2 ,mem_hid_ctrl_remote_cid -0x4fe8 020376 isub temp ,null -0x4fe9 020377 branch l2cap_disconnect_hid_control_now ,zero -0x4fea 020378 call l2cap_reject_command -0x4feb 020379 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020380 l2cap_proc_signal_disconnect_req_hid_int: -0x4fec 020381 copy timeup ,temp -0x4fed 020382 fetch 2 ,mem_hid_int_remote_cid -0x4fee 020383 isub temp ,null -0x4fef 020384 branch l2cap_disconnect_hid_interrupt_now ,zero -0x4ff0 020385 call l2cap_reject_command -0x4ff1 020386 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020388 l2cap_proc_signal_disconnect_req_sdp: -0x4ff2 020389 copy timeup ,temp -0x4ff3 020390 fetch 2 ,mem_sdp_remote_cid -0x4ff4 020391 isub temp ,null -0x4ff5 020392 branch l2cap_disconnect_sdp_now ,zero -0x4ff6 020393 call l2cap_reject_command -0x4ff7 020394 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020395 l2cap_disconnect_hid_control_now: -0x4ff8 020396 call l2cap_reset_hid_ctrl_state -0x4ff9 020397 branch l2cap_send_disconnect_rsp_pkt -: 020398 l2cap_disconnect_hid_interrupt_now: -0x4ffa 020399 call l2cap_reset_hid_int_state -0x4ffb 020400 fetch 2 ,mem_hid_ctrl_remote_cid -0x4ffc 020401 branch l2cap_send_disconnect_rsp_pkt ,blank -0x4ffd 020409 branch l2cap_send_disconnect_rsp_pkt -: 020411 l2cap_disconnect_sdp_now: -0x4ffe 020412 call l2cap_reset_sdp_channel_state -0x4fff 020413 fetch 1 ,mem_upper_sm_ss -0x5000 020414 nbranch l2cap_send_disconnect_rsp_pkt ,blank -0x5001 020417 branch l2cap_send_disconnect_rsp_pkt -: 020418 l2cap_proc_signal_disconnect_req_rfcomm: -0x5002 020419 copy timeup ,temp -0x5003 020420 fetch 2 ,mem_rfcomm_remote_cid -0x5004 020421 isub temp ,null -0x5005 020422 branch l2cap_disconnect_rfcomm_now ,zero -0x5006 020423 call l2cap_reject_command -0x5007 020424 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020425 l2cap_disconnect_rfcomm_now: -0x5008 020426 call l2cap_reset_rfcomm_channel_state -0x5009 020427 branch l2cap_send_disconnect_rsp_pkt -: 020428 l2cap_send_disconnect_rsp_pkt: -0x500a 020429 call load_cont_pointers -0x500b 020430 setarg signal_disconnect_rsp -0x500c 020431 istore 1 ,contw -0x500d 020432 copy queue ,pdata -0x500e 020433 istore 1 ,contw -0x500f 020434 setarg 0x0004 -0x5010 020435 istore 2 ,contw -0x5011 020436 copy rega ,pdata -0x5012 020437 istore 2 ,contw -0x5013 020438 copy timeup ,pdata -0x5014 020439 istore 2 ,contw -0x5015 020440 force 8 ,pdata -0x5016 020441 branch l2cap_proc_signal_disconnect_req_rtn -: 020442 l2cap_proc_signal_disconnect_req_err_rtn: -0x5017 020443 call load_cont_pointers -0x5018 020444 branch l2cap_proc_signal_disconnect_req_rtn -: 020445 l2cap_proc_signal_disconnect_req_rtn: -0x5019 020446 iadd regb ,regb -0x501a 020447 branch l2cap_process_one_signal_rtn -: 020448 l2cap_proc_signal_disconnect_rsp: -0x501b 020449 ifetch 1 ,contr -0x501c 020450 copy pdata ,queue -0x501d 020451 ifetch 2 ,contr -0x501e 020452 copy pdata ,rega -0x501f 020453 copy regc ,pdata -0x5020 020454 isub rega ,regc -0x5021 020455 ifetch 2 ,contr -0x5022 020456 copy pdata ,timeup -0x5023 020457 ifetch 2 ,contr -0x5024 020458 copy pdata ,temp -0x5025 020459 call save_cont_pointers -0x5026 020460 bpatchx patch22_7 ,mem_patch22 -0x5027 020461 setarg l2cap_sdp_channel -0x5028 020462 isub temp ,null -0x5029 020463 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero -0x502a 020464 setarg l2cap_rfcomm_channel -0x502b 020465 isub temp ,null -0x502c 020466 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero -0x502d 020467 setarg l2cap_hid_control_channel -0x502e 020468 isub temp ,null -0x502f 020469 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero -0x5030 020470 setarg l2cap_hid_interrupt_channel -0x5031 020471 isub temp ,null -0x5032 020472 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero -0x5033 020473 call l2cap_reject_command -0x5034 020474 branch l2cap_proc_signal_disconnect_rsp_err_rtn -: 020475 l2cap_proc_signal_disconnect_rsp_sdp: -0x5035 020476 copy temp ,rega -0x5036 020477 copy timeup ,temp -0x5037 020478 fetch 2 ,mem_sdp_remote_cid -0x5038 020479 isub temp ,null -0x5039 020480 call l2cap_reset_sdp_channel_state ,zero -0x503a 020481 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020482 l2cap_proc_signal_disconnect_rsp_rfcomm: -0x503b 020483 copy temp ,rega -0x503c 020484 copy timeup ,temp -0x503d 020485 fetch 2 ,mem_rfcomm_remote_cid -0x503e 020486 isub temp ,null -0x503f 020487 call l2cap_reset_rfcomm_channel_state ,zero -0x5040 020488 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020489 l2cap_proc_signal_disconnect_rsp_hid_ctrl: -0x5041 020490 copy temp ,rega -0x5042 020491 copy timeup ,temp -0x5043 020492 fetch 2 ,mem_hid_ctrl_remote_cid -0x5044 020493 isub temp ,null -0x5045 020494 call l2cap_reset_hid_ctrl_state ,zero -0x5046 020495 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020496 l2cap_proc_signal_disconnect_rsp_hid_int: -0x5047 020497 copy temp ,rega -0x5048 020498 copy timeup ,temp -0x5049 020499 fetch 2 ,mem_hid_int_remote_cid -0x504a 020500 isub temp ,null -0x504b 020501 call l2cap_reset_hid_int_state ,zero -0x504c 020502 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020503 l2cap_proc_signal_disconnect_rsp_rtn: -0x504d 020504 call load_cont_pointers -0x504e 020505 branch l2cap_process_one_signal_rtn -: 020506 l2cap_proc_signal_disconnect_rsp_err_rtn: -0x504f 020507 branch l2cap_process_one_signal_rtn -: 020510 l2cap_proc_signal_echo_req: -0x5050 020511 ifetch 1 ,contr -0x5051 020512 copy pdata ,queue -0x5052 020513 ifetch 2 ,contr -0x5053 020514 copy pdata ,rega -0x5054 020515 iadd contr ,contr -0x5055 020516 setarg 9 -0x5056 020517 istore 1 ,contw -0x5057 020518 copy queue ,pdata -0x5058 020519 istore 1 ,contw -0x5059 020520 force 0x0000 ,pdata -0x505a 020521 istore 2 ,contw -0x505b 020522 force 4 ,pdata -0x505c 020523 iadd regb ,regb -0x505d 020524 copy regc ,pdata -0x505e 020525 isub rega ,regc -0x505f 020526 branch l2cap_process_one_signal_rtn -: 020527 l2cap_proc_signal_echo_rsp: -0x5060 020528 branch l2cap_process_one_signal_rtn -: 020530 l2cap_proc_signal_info_rsp: -0x5061 020531 branch l2cap_process_one_signal_rtn -: 020532 l2cap_reject_command: -0x5062 020533 force 0 ,regb -0x5063 020534 call l2cap_get_signal_tx_payload -0x5064 020535 setarg signal_cmd_reject -0x5065 020536 istore 1 ,contw -0x5066 020537 copy queue ,pdata -0x5067 020538 istore 1 ,contw -0x5068 020539 setarg 2 -0x5069 020540 istore 2 ,contw -0x506a 020541 setarg cmd_not_understood -0x506b 020542 istore 2 ,contw -0x506c 020543 increase 6 ,regb -0x506d 020544 arg 4 ,regc -0x506e 020545 branch l2cap_process_one_signal_rtn -: 020549 l2cap_reset_rfcomm_channel_state: -0x506f 020550 setarg 0 -0x5070 020551 store 2 ,mem_rfcomm_tx_pkt_length -0x5071 020552 store 2 ,mem_rfcomm_remote_cid -0x5072 020553 jam 0 ,mem_rfcomm_state -0x5073 020554 rtn -: 020555 l2cap_reset_sdp_channel_state: -0x5074 020556 setarg 0 -0x5075 020557 store 2 ,mem_sdp_tx_pkt_length -0x5076 020558 store 2 ,mem_sdp_remote_cid -0x5077 020559 jam 0 ,mem_sdp_state -0x5078 020560 rtn -: 020561 l2cap_reset_hid_ctrl_state: -0x5079 020562 setarg 0 -0x507a 020563 store 2 ,mem_hid_ctrl_remote_cid -0x507b 020564 jam 0 ,mem_hid_control_state -0x507c 020565 fetch 1 ,mem_hid_interrupt_state -0x507d 020566 beq 0 ,l2cap_reset_hid_disconnected -0x507e 020567 rtn -: 020569 l2cap_reset_hid_int_state: -0x507f 020570 setarg 0 -0x5080 020571 store 2 ,mem_hid_int_remote_cid -0x5081 020572 jam 0 ,mem_hid_interrupt_state -0x5082 020573 fetch 1 ,mem_hid_control_state -0x5083 020574 beq 0 ,l2cap_reset_hid_disconnected -0x5084 020575 rtn -: 020577 l2cap_reset_hid_disconnected: -0x5085 020578 jam bt_evt_hid_disconnected ,mem_fifo_temp -0x5086 020579 branch ui_ipc_send_event -: 020581 l2cap_disconnect_interrupt_req: -0x5087 020582 fetch 1 ,mem_control_tasks -0x5088 020583 set0 l2cap_disconnect_interrupt ,pdata -0x5089 020584 store 1 ,mem_control_tasks -0x508a 020585 fetch 2 ,mem_hid_int_remote_cid -0x508b 020586 rtn blank -0x508c 020587 call l2cap_malloc_signal_channel -0x508d 020588 fetch 2 ,mem_hid_int_remote_cid -0x508e 020589 copy pdata ,rega -0x508f 020590 force l2cap_hid_interrupt_channel ,regb -0x5090 020591 branch l2cap_generate_disconnect_req -: 020592 l2cap_disconnect_control_req: -0x5091 020593 fetch 1 ,mem_control_tasks -0x5092 020594 set0 l2cap_disconnect_control ,pdata -0x5093 020595 store 1 ,mem_control_tasks -0x5094 020596 fetch 2 ,mem_hid_ctrl_remote_cid -0x5095 020597 rtn blank -0x5096 020598 call l2cap_malloc_signal_channel -0x5097 020599 fetch 2 ,mem_hid_ctrl_remote_cid -0x5098 020600 copy pdata ,rega -0x5099 020601 force l2cap_hid_control_channel ,regb -: 020602 l2cap_generate_disconnect_req: -0x509a 020603 call l2cap_get_req_id -0x509b 020604 call l2cap_get_signal_tx_payload -0x509c 020605 force signal_disconnect_req ,pdata -0x509d 020606 istore 1 ,contw -0x509e 020607 fetch 1 ,mem_ml2cap_comm_id -0x509f 020608 istore 1 ,contw -0x50a0 020609 setarg 0x0004 -0x50a1 020610 istore 2 ,contw -0x50a2 020611 copy rega ,pdata -0x50a3 020612 istore 2 ,contw -0x50a4 020613 copy regb ,pdata -0x50a5 020614 istore 2 ,contw -0x50a6 020615 force 0x08 ,temp -0x50a7 020616 branch ml2cap_send_signal -: 020618 ml2cap_send_signal_connect_req: -0x50a8 020619 bpatchx patch23_0 ,mem_patch23 -0x50a9 020620 call l2cap_get_req_id -0x50aa 020621 call l2cap_get_signal_tx_payload -0x50ab 020622 setarg signal_connect_req -0x50ac 020623 istore 1 ,contw -0x50ad 020624 fetch 1 ,mem_ml2cap_comm_id -0x50ae 020625 istore 1 ,contw -0x50af 020626 setarg 0x0004 -0x50b0 020627 istore 2 ,contw -0x50b1 020628 copy temp ,pdata -0x50b2 020629 istore 2 ,contw -0x50b3 020630 copy timeup ,pdata -0x50b4 020631 istore 2 ,contw -0x50b5 020632 arg 8 ,temp -0x50b6 020633 branch ml2cap_send_signal -: 020634 ml2cap_send_signal_config_req: -0x50b7 020635 bpatchx patch23_1 ,mem_patch23 -0x50b8 020636 call l2cap_get_req_id -0x50b9 020637 call l2cap_get_signal_tx_payload -0x50ba 020638 setarg signal_config_req -0x50bb 020639 istore 1 ,contw -0x50bc 020640 fetch 1 ,mem_ml2cap_comm_id -0x50bd 020641 istore 1 ,contw -0x50be 020642 setarg 0x0008 -0x50bf 020643 istore 2 ,contw -0x50c0 020645 copy temp ,pdata -0x50c1 020647 istore 2 ,contw -0x50c2 020648 setarg 0x0000 -0x50c3 020649 istore 2 ,contw -0x50c4 020650 setarg 0x01 -0x50c5 020651 istore 1 ,contw -0x50c6 020652 setarg 0x02 -0x50c7 020653 istore 1 ,contw -0x50c8 020654 setarg l2cap_config_mtu_rfcomm -0x50c9 020655 istore 2 ,contw -0x50ca 020656 arg 0xc ,temp -0x50cb 020657 branch ml2cap_send_signal -: 020658 ml2cap_send_signal_disconn_req: -0x50cc 020659 bpatchx patch23_2 ,mem_patch23 -0x50cd 020660 call l2cap_get_req_id -0x50ce 020661 call l2cap_get_signal_tx_payload -0x50cf 020662 setarg signal_disconnect_req -0x50d0 020663 istore 1 ,contw -0x50d1 020664 fetch 1 ,mem_ml2cap_comm_id -0x50d2 020665 increase 1 ,pdata -0x50d3 020666 copy contw ,rega -0x50d4 020667 store 1 ,mem_ml2cap_comm_id -0x50d5 020668 copy rega ,contw -0x50d6 020669 istore 1 ,contw -0x50d7 020670 setarg 0x0004 -0x50d8 020671 istore 2 ,contw -0x50d9 020672 copy temp ,pdata -0x50da 020673 istore 2 ,contw -0x50db 020674 copy timeup ,pdata -0x50dc 020675 istore 2 ,contw -0x50dd 020676 arg 0x8 ,temp -: 020679 ml2cap_send_signal: -0x50de 020680 storet 2 ,mem_l2cap_signal_tx_length -0x50df 020681 copy temp ,pdata -0x50e0 020682 branch l2cap_malloc_discard ,blank -0x50e1 020683 call l2cap_get_signal_tx_buff -0x50e2 020684 fetch 2 ,mem_l2cap_signal_tx_length -0x50e3 020685 istore 2 ,contw -0x50e4 020686 force l2cap_signal_channel ,pdata -0x50e5 020687 istore 2 ,contw -0x50e6 020688 rtn -: 020690 msdp_send_req_done: -0x50e7 020691 fetch 2 ,mem_sdp_tx_pkt_length -0x50e8 020692 branch assert ,blank -0x50e9 020693 call l2cap_get_sdp_tx_buff -0x50ea 020694 fetch 2 ,mem_sdp_tx_pkt_length -0x50eb 020695 istore 2 ,contw -0x50ec 020696 fetch 2 ,mem_sdp_remote_cid -0x50ed 020697 istore 2 ,contw -0x50ee 020698 rtn -: 020699 ml2cap_rx_multiplexing: -0x50ef 020700 fetch 2 ,mem_l2cap_rx_pkt_length -0x50f0 020701 branch l2cap_rx_reset_state ,blank -0x50f1 020702 bpatchx patch23_3 ,mem_patch23 -0x50f2 020703 fetch 1 ,mem_l2cap_rx_cid -0x50f3 020704 beq l2cap_signal_channel ,ml2cap_call_proc_signal -0x50f4 020705 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp -0x50f5 020706 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm -0x50f6 020707 beq l2cap_hid_control_channel ,l2cap_call_proc_hid -0x50f7 020708 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid -0x50f8 020709 branch l2cap_rx_reset_state -: 020711 ml2cap_call_proc_signal: -0x50f9 020712 bpatchx patch23_4 ,mem_patch23 -0x50fa 020713 call l2cap_malloc_signal_channel -0x50fb 020714 force 0 ,regb -0x50fc 020715 call l2cap_get_signal_tx_payload -0x50fd 020716 copy pdata ,contw -0x50fe 020717 fetch 2 ,mem_l2cap_rx_pkt_length -0x50ff 020718 copy pdata ,regc -0x5100 020719 fetch 2 ,mem_l2cap_payload_ptr -0x5101 020720 iforce contr -: 020721 ml2cap_proc_one_comm_loop: -0x5102 020722 call ml2cap_proc_one_comm -0x5103 020723 increase -4 ,regc -0x5104 020724 nbranch ml2cap_proc_one_comm_loop ,zero -0x5105 020725 copy regb ,temp -0x5106 020726 call ml2cap_send_signal -0x5107 020727 branch l2cap_rx_reset_state -: 020729 ml2cap_proc_one_comm: -0x5108 020730 ifetch 1 ,contr -0x5109 020731 beq signal_connect_req ,ml2cap_proc_signal_connect_req -0x510a 020732 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject -0x510b 020733 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp -0x510c 020734 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp -0x510d 020735 beq signal_config_req ,ml2cap_proc_signal_config_req -0x510e 020736 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp -0x510f 020737 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req -0x5110 020738 beq signal_echo_req ,l2cap_proc_signal_echo_req -0x5111 020739 beq signal_info_req ,ml2cap_proc_signal_info_req -0x5112 020740 branch ml2cap_proc_send_reject -: 020742 ml2cap_proc_signal_connect_req: -0x5113 020743 call save_cont_pointers -0x5114 020745 call load_cont_pointers -0x5115 020746 branch l2cap_proc_signal_connect_req -: 020747 ml2cap_proc_signal_cmd_reject: -0x5116 020748 ifetch 1 ,contr -0x5117 020749 copy pdata ,queue -0x5118 020750 ifetch 2 ,contr -0x5119 020751 copy pdata ,rega -0x511a 020752 copy regc ,pdata -0x511b 020753 isub rega ,regc -: 020754 mvptr: -0x511c 020755 ifetch 1 ,contr -0x511d 020756 increase -1 ,rega -0x511e 020757 nbranch mvptr ,zero -0x511f 020758 rtn -: 020759 ml2cap_proc_signal_connect_rsp: -0x5120 020760 ifetch 1 ,contr -0x5121 020761 copy pdata ,queue -0x5122 020762 ifetch 2 ,contr -0x5123 020763 copy pdata ,rega -0x5124 020764 ifetch 2 ,contr -0x5125 020765 copy pdata ,timeup -0x5126 020766 ifetch 2 ,contr -0x5127 020767 copy pdata ,temp -0x5128 020768 ifetch 2 ,contr -0x5129 020769 sub pdata ,0 ,null -0x512a 020770 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero -0x512b 020771 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result -0x512c 020772 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result -0x512d 020773 branch ml2cap_proc_signal_connect_rsp_mnosucc -: 020774 ml2cap_proc_signal_connect_refused_result: -0x512e 020775 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp -0x512f 020776 call ui_ipc_send_event -: 020777 ml2cap_proc_signal_connect_rsp_mnosucc: -0x5130 020778 ifetch 2 ,contr -0x5131 020779 branch mnosucc -: 020780 ml2cap_proc_signal_connect_rsp_sucessful: -0x5132 020781 call save_cont_pointers -0x5133 020785 bpatchx patch23_5 ,mem_patch23 -0x5134 020786 setarg l2cap_sdp_channel -0x5135 020787 isub temp ,null -0x5136 020788 branch ml2cap_proc_signal_connect_rsp_sdp ,zero -0x5137 020789 setarg l2cap_rfcomm_channel -0x5138 020790 isub temp ,null -0x5139 020791 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero -0x513a 020792 setarg l2cap_hid_interrupt_channel -0x513b 020793 isub temp ,null -0x513c 020794 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero -0x513d 020795 setarg l2cap_hid_control_channel -0x513e 020796 isub temp ,null -0x513f 020797 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero -0x5140 020798 branch mnosucc -: 020799 ml2cap_proc_signal_connect_rsp_sdp: -0x5141 020800 copy timeup ,pdata -0x5142 020801 store 2 ,mem_sdp_remote_cid -0x5143 020802 fetch 1 ,mem_sdp_state -0x5144 020803 set1 l2cap_channel_state_conn_res -0x5145 020804 store 1 ,mem_sdp_state -0x5146 020805 branch mnosucc1 -: 020806 ml2cap_proc_signal_connect_rsp_rfcomm: -0x5147 020807 copy timeup ,pdata -0x5148 020808 store 2 ,mem_rfcomm_remote_cid -0x5149 020809 fetch 1 ,mem_rfcomm_state -0x514a 020810 set1 l2cap_channel_state_conn_res -0x514b 020811 store 1 ,mem_rfcomm_state -0x514c 020812 branch mnosucc1 -: 020813 ml2cap_proc_signal_connect_rsp_hid_ctrl: -0x514d 020814 copy timeup ,pdata -0x514e 020815 store 2 ,mem_hid_ctrl_remote_cid -0x514f 020816 fetch 1 ,mem_hid_control_state -0x5150 020817 set1 l2cap_channel_state_conn_res -0x5151 020818 store 1 ,mem_hid_control_state -0x5152 020819 branch mnosucc1 -: 020820 ml2cap_proc_signal_connect_rsp_hid_int: -0x5153 020821 copy timeup ,pdata -0x5154 020822 store 2 ,mem_hid_int_remote_cid -0x5155 020823 fetch 1 ,mem_hid_interrupt_state -0x5156 020824 set1 l2cap_channel_state_conn_res -0x5157 020825 store 1 ,mem_hid_interrupt_state -: 020828 mnosucc1: -0x5158 020829 call load_cont_pointers -: 020830 mnosucc: -0x5159 020831 copy regc ,pdata -0x515a 020832 isub rega ,regc -0x515b 020833 rtn -: 020835 ml2cap_proc_signal_config_rsp: -0x515c 020836 ifetch 1 ,contr -0x515d 020837 copy pdata ,queue -0x515e 020838 ifetch 2 ,contr -0x515f 020839 copy pdata ,rega -0x5160 020840 copy regc ,pdata -0x5161 020841 isub rega ,regc -0x5162 020842 ifetch 2 ,contr -0x5163 020843 copy pdata ,timeup -0x5164 020844 ifetch 2 ,contr -0x5165 020845 ifetch 2 ,contr -0x5166 020846 nbranch mcrsdone1 ,blank -0x5167 020847 call save_cont_pointers -0x5168 020851 copy timeup ,temp -0x5169 020852 bpatchx patch23_6 ,mem_patch23 -0x516a 020853 setarg l2cap_sdp_channel -0x516b 020854 isub temp ,null -0x516c 020855 branch ml2cap_proc_signal_config_rsp_sdp ,zero -0x516d 020856 setarg l2cap_rfcomm_channel -0x516e 020857 isub temp ,null -0x516f 020858 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero -0x5170 020859 setarg l2cap_hid_control_channel -0x5171 020860 isub temp ,null -0x5172 020861 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero -0x5173 020862 setarg l2cap_hid_interrupt_channel -0x5174 020863 isub temp ,null -0x5175 020864 branch ml2cap_proc_signal_config_rsp_hid_int ,zero -: 020865 ml2cap_proc_signal_config_rsp_sdp: -0x5176 020866 fetch 1 ,mem_sdp_state -0x5177 020867 set1 l2cap_channel_state_rcv_cfg_res -0x5178 020868 store 1 ,mem_sdp_state -0x5179 020869 rtn -: 020870 ml2cap_proc_signal_config_rsp_rfcomm: -0x517a 020871 fetch 1 ,mem_rfcomm_state -0x517b 020872 set1 l2cap_channel_state_rcv_cfg_res -0x517c 020873 store 1 ,mem_rfcomm_state -0x517d 020874 rtn -: 020875 ml2cap_proc_signal_config_rsp_hid_ctrl: -0x517e 020876 fetch 1 ,mem_hid_control_state -0x517f 020877 set1 l2cap_channel_state_rcv_cfg_res -0x5180 020878 store 1 ,mem_hid_control_state -0x5181 020879 rtn -: 020880 ml2cap_proc_signal_config_rsp_hid_int: -0x5182 020881 fetch 1 ,mem_hid_interrupt_state -0x5183 020882 set1 l2cap_channel_state_rcv_cfg_res -0x5184 020883 store 1 ,mem_hid_interrupt_state -0x5185 020884 jam bt_evt_hid_connected ,mem_fifo_temp -0x5186 020885 branch ui_ipc_send_event -: 020888 mcfrsdone: -0x5187 020889 call load_cont_pointers -: 020890 mcrsdone1: -0x5188 020891 increase -6 ,rega -: 020892 mloop2: -0x5189 020893 branch mcrsdone ,zero -0x518a 020894 increase 1 ,contr -0x518b 020895 increase -1 ,rega -0x518c 020896 branch mloop2 -: 020897 mcrsdone: -0x518d 020898 rtn -: 020899 ml2cap_proc_signal_config_req: -0x518e 020900 ifetch 1 ,contr -0x518f 020901 copy pdata ,queue -0x5190 020902 ifetch 2 ,contr -0x5191 020903 copy pdata ,rega -0x5192 020904 copy regc ,pdata -0x5193 020905 isub rega ,regc -0x5194 020906 ifetch 2 ,contr -0x5195 020907 increase 2 ,contr -0x5196 020908 copy pdata ,temp -0x5197 020909 setarg signal_config_rsp -0x5198 020910 istore 1 ,contw -0x5199 020911 copy queue ,pdata -0x519a 020912 istore 1 ,contw -0x519b 020913 increase 2 ,rega -0x519c 020914 copy rega ,pdata -0x519d 020915 istore 2 ,contw -0x519e 020916 call save_cont_pointers -0x519f 020917 bpatchx patch23_7 ,mem_patch23 -0x51a0 020918 setarg l2cap_sdp_channel -0x51a1 020919 isub temp ,null -0x51a2 020920 branch ml2cap_proc_signal_config_req_sdp ,zero -0x51a3 020921 setarg l2cap_rfcomm_channel -0x51a4 020922 isub temp ,null -0x51a5 020923 branch ml2cap_proc_signal_config_req_rfcomm ,zero -0x51a6 020924 setarg l2cap_hid_control_channel -0x51a7 020925 isub temp ,null -0x51a8 020926 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero -0x51a9 020927 setarg l2cap_hid_interrupt_channel -0x51aa 020928 isub temp ,null -0x51ab 020929 branch ml2cap_proc_signal_config_req_hid_int ,zero -0x51ac 020930 branch mcfgrq_done -: 020931 ml2cap_proc_signal_config_req_sdp: -0x51ad 020932 fetch 1 ,mem_sdp_state -0x51ae 020933 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51af 020934 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51b0 020935 store 1 ,mem_sdp_state -0x51b1 020936 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq -0x51b2 020937 fetcht 1 ,mem_control_tasks -0x51b3 020938 set1 l2cap_init_config_req ,temp -0x51b4 020939 storet 1 ,mem_control_tasks -0x51b5 020940 copy queue ,pdata -0x51b6 020941 increase 1 ,pdata -0x51b7 020942 store 1 ,mem_config_identifier -0x51b8 020943 fetch 1 ,mem_sdp_state -0x51b9 020944 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x51ba 020945 store 1 ,mem_sdp_state -: 020946 ml2cap_proc_signal_config_req_sdp_nsndreq: -0x51bb 020947 fetch 2 ,mem_sdp_remote_cid -0x51bc 020948 store 2 ,mem_config_req_dest_cid -0x51bd 020949 branch mcfgrq_done -: 020950 ml2cap_proc_signal_config_req_rfcomm: -0x51be 020951 fetch 1 ,mem_rfcomm_state -0x51bf 020952 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51c0 020953 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51c1 020954 store 1 ,mem_rfcomm_state -0x51c2 020955 fetch 2 ,mem_rfcomm_remote_cid -0x51c3 020956 branch mcfgrq_done -: 020957 ml2cap_proc_signal_config_req_hid_ctrl: -0x51c4 020958 fetch 1 ,mem_hid_control_state -0x51c5 020959 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51c6 020960 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51c7 020961 store 1 ,mem_hid_control_state -0x51c8 020962 fetch 2 ,mem_hid_ctrl_remote_cid -0x51c9 020963 branch mcfgrq_done -: 020964 ml2cap_proc_signal_config_req_hid_int: -0x51ca 020965 fetch 1 ,mem_hid_interrupt_state -0x51cb 020966 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51cc 020967 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51cd 020968 store 1 ,mem_hid_interrupt_state -0x51ce 020969 fetch 2 ,mem_hid_int_remote_cid -: 020972 mcfgrq_done: -0x51cf 020973 copy pdata ,timeup -0x51d0 020974 call load_cont_pointers -0x51d1 020976 copy timeup ,pdata -0x51d2 020978 istore 2 ,contw -0x51d3 020979 force 0x0000 ,pdata -0x51d4 020980 istore 2 ,contw -0x51d5 020981 force 0x0000 ,pdata -0x51d6 020982 istore 2 ,contw -0x51d7 020983 force 10 ,pdata -0x51d8 020984 iadd regb ,regb -0x51d9 020985 increase -6 ,rega -: 020986 mloop1: -0x51da 020987 branch mcrqdone ,zero -0x51db 020988 ifetch 1 ,contr -0x51dc 020989 istore 1 ,contw -0x51dd 020990 increase 1 ,regb -0x51de 020991 increase -1 ,rega -0x51df 020992 branch mloop1 -: 020993 mcrqdone: -0x51e0 020994 rtn -: 020995 ml2cap_proc_signal_disconn_req: -0x51e1 020996 ifetch 1 ,contr -0x51e2 020997 copy pdata ,queue -0x51e3 020998 ifetch 2 ,contr -0x51e4 020999 copy pdata ,rega -0x51e5 021000 copy regc ,pdata -0x51e6 021001 isub rega ,regc -0x51e7 021003 ifetch 2 ,contr -0x51e8 021004 copy pdata ,rega -0x51e9 021005 ifetch 2 ,contr -0x51ea 021006 copy pdata ,timeup -0x51eb 021007 call save_cont_pointers -0x51ec 021008 bpatchx patch24_0 ,mem_patch24 -0x51ed 021009 setarg l2cap_sdp_channel -0x51ee 021010 copy rega ,temp -0x51ef 021011 isub temp ,null -0x51f0 021012 branch ml2cap_proc_signal_disconn_sdp ,zero -0x51f1 021013 setarg l2cap_hid_control_channel -0x51f2 021014 copy rega ,temp -0x51f3 021015 isub temp ,null -0x51f4 021016 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero -0x51f5 021017 setarg l2cap_hid_interrupt_channel -0x51f6 021018 copy rega ,temp -0x51f7 021019 isub temp ,null -0x51f8 021020 branch ml2cap_proc_signal_disconn_hid_int ,zero -0x51f9 021021 branch mclsrfc -: 021022 ml2cap_proc_signal_disconn_sdp: -0x51fa 021023 setarg 0x0000 -0x51fb 021024 store 2 ,mem_sdp_tx_pkt_length -0x51fc 021025 store 2 ,mem_sdp_remote_cid -0x51fd 021026 store 1 ,mem_sdp_state -0x51fe 021027 branch mclssdp -: 021028 ml2cap_proc_signal_disconn_hid_ctrl: -0x51ff 021029 call l2cap_reset_hid_ctrl_state -0x5200 021030 branch mclssdp -: 021031 ml2cap_proc_signal_disconn_hid_int: -0x5201 021032 call l2cap_reset_hid_int_state -0x5202 021038 branch mclssdp -: 021039 mclsrfc: -0x5203 021040 setarg 0x0000 -0x5204 021041 store 2 ,mem_rfcomm_tx_pkt_length -: 021042 mclssdp: -0x5205 021043 call load_cont_pointers -0x5206 021044 setarg signal_disconnect_rsp -0x5207 021045 istore 1 ,contw -0x5208 021046 copy queue ,pdata -0x5209 021047 istore 1 ,contw -0x520a 021048 setarg 0x0004 -0x520b 021049 istore 2 ,contw -0x520c 021050 copy rega ,pdata -0x520d 021051 istore 2 ,contw -0x520e 021052 copy timeup ,pdata -0x520f 021053 istore 2 ,contw -0x5210 021054 force 8 ,pdata -0x5211 021055 iadd regb ,regb -0x5212 021056 rtn -: 021058 ml2cap_proc_signal_disconn_rsp: -0x5213 021059 ifetch 1 ,contr -0x5214 021060 copy pdata ,queue -0x5215 021061 ifetch 2 ,contr -0x5216 021062 copy pdata ,rega -0x5217 021063 ifetch 2 ,contr -0x5218 021064 copy pdata ,timeup -0x5219 021065 ifetch 2 ,contr -0x521a 021066 copy pdata ,temp -0x521b 021067 call save_cont_pointers -0x521c 021068 bpatchx patch24_1 ,mem_patch24 -0x521d 021069 fetch 1 ,mem_ml2cap_comm_id -0x521e 021070 icompare 0xff ,queue -0x521f 021071 nbranch mdisdone ,true -0x5220 021072 setarg l2cap_sdp_channel -0x5221 021073 isub temp ,null -0x5222 021074 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero -0x5223 021075 setarg l2cap_rfcomm_channel -0x5224 021076 isub temp ,null -0x5225 021077 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero -0x5226 021078 branch mdisdone -: 021079 ml2cap_proc_signal_disconn_rsp_sdp: -0x5227 021080 jam 0 ,mem_sdp_remote_cid -0x5228 021081 jam 0 ,mem_sdp_state -0x5229 021082 branch mdisdone -: 021083 ml2cap_proc_signal_disconn_rsp_rfcomm: -: 021086 mdisdone: -0x522a 021087 call load_cont_pointers -0x522b 021088 copy regc ,pdata -0x522c 021089 isub rega ,regc -0x522d 021090 rtn -: 021092 ml2cap_proc_send_reject: -0x522e 021093 setarg signal_cmd_reject -0x522f 021094 istore 1 ,contw -0x5230 021095 ifetch 1 ,contr -0x5231 021096 istore 1 ,contw -0x5232 021097 setarg 0x0002 -0x5233 021098 istore 2 ,contw -0x5234 021099 setarg 0x0000 -0x5235 021100 istore 2 ,contw -0x5236 021101 setarg 0x0006 -0x5237 021102 iadd regb ,regb -0x5238 021103 force 4 ,regc -0x5239 021104 rtn -: 021107 l2cap_get_req_id: -0x523a 021108 fetch 1 ,mem_ml2cap_comm_id -0x523b 021109 increase 1 ,pdata -0x523c 021110 bne 0 ,l2cap_get_req_id_ok -0x523d 021111 increase 1 ,pdata -: 021112 l2cap_get_req_id_ok: -0x523e 021113 store 1 ,mem_ml2cap_comm_id -0x523f 021114 rtn -: 021124 l2cap_malloc: -0x5240 021125 bpatchx patch24_2 ,mem_patch24 -0x5241 021126 arg 0 ,regb -0x5242 021127 call l2cap_malloc_is_fifo_full -0x5243 021128 nbranch assert ,blank -0x5244 021129 call l2cap_malloc_get_full_map -0x5245 021130 arg mem_tx_buff0 ,regb -0x5246 021131 arg 0 ,queue -: 021132 l2cap_malloc_loop: -0x5247 021133 fetcht 1 ,mem_used_map -0x5248 021134 qisolate1 temp -0x5249 021135 branch l2cap_malloc_next ,true -0x524a 021136 call l2cap_malloc_enough -0x524b 021137 sub timeup ,0 ,null -0x524c 021138 branch l2cap_malloc_next ,positive -0x524d 021139 call l2cap_malloc_into_fifo -0x524e 021140 branch l2cap_malloc_rtn -: 021141 l2cap_malloc_next: -0x524f 021142 increase 128 ,regb -0x5250 021143 increase 1 ,queue -0x5251 021144 setarg 8 -0x5252 021145 isub queue ,null -0x5253 021146 branch l2cap_malloc_loop ,positive -0x5254 021147 arg 0 ,regb -: 021148 l2cap_malloc_rtn: -0x5255 021149 copy regb ,pdata -0x5256 021150 branch assert ,blank -0x5257 021151 rtn -: 021159 l2cap_malloc_fifo_out: -0x5258 021160 bpatchx patch24_3 ,mem_patch24 -0x5259 021161 call l2cap_malloc_fifo_get_first_ptr -0x525a 021162 increase 1 ,contr -0x525b 021163 ifetch 2 ,contr -0x525c 021164 rtn -: 021170 l2cap_malloc_free: -0x525d 021171 bpatchx patch24_4 ,mem_patch24 -0x525e 021172 call l2cap_malloc_fifo_get_first_ptr -0x525f 021173 copy contr ,contw -0x5260 021174 copy contr ,temp -0x5261 021175 setarg 0 -0x5262 021176 istore 3 ,contw -0x5263 021177 rtn -: 021182 l2cap_malloc_discard: -0x5264 021183 bpatchx patch24_5 ,mem_patch24 -0x5265 021184 call l2cap_malloc_is_fifo_empty -0x5266 021185 branch assert ,blank -0x5267 021186 fetch 3 ,mem_tx_fifo2 -0x5268 021187 store 3 ,mem_tx_fifo3 -0x5269 021188 fetch 3 ,mem_tx_fifo1 -0x526a 021189 store 3 ,mem_tx_fifo2 -0x526b 021190 fetch 3 ,mem_tx_fifo0 -0x526c 021191 store 3 ,mem_tx_fifo1 -0x526d 021192 rtn -: 021198 l2cap_malloc_is_fifo_full: -0x526e 021199 bpatchx patch24_6 ,mem_patch24 -0x526f 021200 fetch 3 ,mem_tx_fifo0 -0x5270 021201 rtn -: 021207 l2cap_malloc_is_fifo_nearly_full: -0x5271 021208 bpatchx patch24_7 ,mem_patch24 -0x5272 021209 fetch 3 ,mem_tx_fifo1 -0x5273 021210 rtn -: 021216 l2cap_malloc_is_fifo_empty: -0x5274 021217 bpatchx patch25_0 ,mem_patch25 -0x5275 021218 fetch 3 ,mem_tx_fifo3 -0x5276 021219 rtn -: 021224 l2cap_malloc_fifo_get_first_ptr: -0x5277 021225 call l2cap_malloc_is_fifo_empty -0x5278 021226 branch assert ,blank -0x5279 021227 arg mem_tx_fifo0 ,contr -: 021228 l2cap_malloc_free_loop: -0x527a 021229 ifetch 3 ,contr -0x527b 021230 branch l2cap_malloc_free_loop ,blank -0x527c 021231 increase -3 ,contr -0x527d 021232 rtn -: 021239 l2cap_malloc_get_full_map: -0x527e 021240 bpatchx patch25_1 ,mem_patch25 -0x527f 021241 arg 4 ,loopcnt -0x5280 021242 arg mem_tx_fifo0_map ,contr -0x5281 021243 arg 0 ,temp -: 021244 l2cap_malloc_get_full_map_loop: -0x5282 021245 ifetch 3 ,contr -0x5283 021246 and pdata ,0xff ,pdata -0x5284 021247 ior temp ,temp -0x5285 021248 loop l2cap_malloc_get_full_map_loop -0x5286 021249 storet 1 ,mem_used_map -0x5287 021250 rtn -: 021258 l2cap_malloc_into_fifo: -0x5288 021259 bpatchx patch25_2 ,mem_patch25 -0x5289 021260 call l2cap_malloc_is_fifo_full -0x528a 021261 nbranch assert ,blank -0x528b 021262 call l2cap_malloc_is_fifo_empty -0x528c 021263 branch l2cap_malloc_into_fifo_no_push ,blank -0x528d 021264 fetch 3 ,mem_tx_fifo1 -0x528e 021265 store 3 ,mem_tx_fifo0 -0x528f 021266 ifetch 3 ,contr -0x5290 021267 istore 3 ,contw -0x5291 021268 ifetch 3 ,contr -0x5292 021269 istore 3 ,contw -0x5293 021270 setarg 0 -0x5294 021271 istore 3 ,contw -: 021272 l2cap_malloc_into_fifo_no_push: -0x5295 021273 arg 0 ,temp -0x5296 021274 copy timeup ,pdata -0x5297 021275 iadd queue ,pdata -: 021276 l2cap_malloc_into_fifo_loop: -0x5298 021277 qset1 temp -0x5299 021278 increase 1 ,queue -0x529a 021279 isub queue ,null -0x529b 021280 nbranch l2cap_malloc_into_fifo_loop ,zero -0x529c 021282 lshift8 regb ,pdata -0x529d 021283 ior temp ,pdata -0x529e 021284 store 3 ,mem_tx_fifo3 -0x529f 021285 rtn -: 021295 l2cap_malloc_enough: -0x52a0 021296 bpatchx patch25_3 ,mem_patch25 -0x52a1 021297 call l2cap_malloc_get_full_map -0x52a2 021298 copy queue ,regc -0x52a3 021299 arg 0 ,temp -0x52a4 021300 arg 0 ,timeup -: 021302 l2cap_malloc_enough_loop: -0x52a5 021303 copy queue ,pdata -0x52a6 021304 beq 8 ,l2cap_malloc_enough_end -0x52a7 021305 fetch 1 ,mem_used_map -0x52a8 021306 qisolate1 pdata -0x52a9 021307 branch l2cap_malloc_enough_end ,true -0x52aa 021308 increase 128 ,temp -0x52ab 021309 increase 1 ,queue -0x52ac 021310 copy rega ,pdata -0x52ad 021311 isub temp ,null -0x52ae 021312 branch l2cap_malloc_enough_end ,zero -0x52af 021313 branch l2cap_malloc_enough_loop ,positive -: 021314 l2cap_malloc_enough_end: -0x52b0 021315 copy temp ,pdata -0x52b1 021316 isub rega ,null -0x52b2 021317 nbranch l2cap_malloc_enough_rtn ,positive -0x52b3 021318 copy queue ,pdata -0x52b4 021319 copy regc ,temp -0x52b5 021320 isub temp ,timeup -: 021321 l2cap_malloc_enough_rtn: -0x52b6 021322 copy regc ,queue -0x52b7 021323 rtn -: 021326 l2cap_malloc_signal_channel: -0x52b8 021327 bpatchx patch25_4 ,mem_patch25 -0x52b9 021328 arg l2cap_signal_malloc_size ,rega -0x52ba 021329 call l2cap_malloc -0x52bb 021330 store 2 ,mem_l2cap_signal_tx_buff_ptr -0x52bc 021331 increase 4 ,pdata -0x52bd 021332 store 2 ,mem_l2cap_signal_tx_payload_ptr -0x52be 021333 setarg 0 -0x52bf 021334 store 2 ,mem_l2cap_signal_tx_length -0x52c0 021335 rtn -: 021337 l2cap_get_signal_tx_buff: -0x52c1 021338 fetch 2 ,mem_l2cap_signal_tx_buff_ptr -0x52c2 021339 branch l2cap_util_pdata_to_contw -: 021341 l2cap_get_signal_tx_payload: -0x52c3 021342 fetch 2 ,mem_l2cap_signal_tx_payload_ptr -0x52c4 021343 branch l2cap_util_pdata_to_contw -: 021346 l2cap_malloc_sdp_channel: -0x52c5 021347 bpatchx patch25_5 ,mem_patch25 -0x52c6 021348 arg sdp_malloc_size ,rega -0x52c7 021349 call l2cap_malloc -0x52c8 021350 store 2 ,mem_sdp_tx_buff_ptr -0x52c9 021351 increase 4 ,pdata -0x52ca 021352 store 2 ,mem_sdp_tx_payload_ptr -0x52cb 021353 setarg 0 -0x52cc 021354 store 2 ,mem_sdp_tx_pkt_length -0x52cd 021355 rtn -: 021357 l2cap_get_sdp_tx_buff: -0x52ce 021358 fetch 2 ,mem_sdp_tx_buff_ptr -0x52cf 021359 branch l2cap_util_pdata_to_contw -: 021361 l2cap_get_sdp_tx_payload: -0x52d0 021362 fetch 2 ,mem_sdp_tx_payload_ptr -0x52d1 021363 branch l2cap_util_pdata_to_contw -: 021366 l2cap_malloc_rfcomm_channel: -0x52d2 021367 bpatchx patch25_6 ,mem_patch25 -0x52d3 021368 call push_stack -0x52d4 021369 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag -0x52d5 021370 call l2cap_malloc_is_fifo_full -0x52d6 021371 nrtn blank -0x52d7 021372 arg rfcomm_malloc_size ,rega -0x52d8 021373 call l2cap_malloc -0x52d9 021374 store 2 ,mem_rfcomm_tx_buff_ptr -0x52da 021375 increase 4 ,pdata -0x52db 021376 store 2 ,mem_rfcomm_tx_payload_ptr -0x52dc 021377 setarg 0 -0x52dd 021378 store 2 ,mem_rfcomm_tx_pkt_length -0x52de 021379 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag -0x52df 021380 branch pop_stack -: 021382 l2cap_get_rfcomm_tx_buff: -0x52e0 021383 fetch 2 ,mem_rfcomm_tx_buff_ptr -0x52e1 021384 branch l2cap_util_pdata_to_contw -: 021386 l2cap_util_pdata_to_contw: -0x52e2 021387 branch assert ,blank -0x52e3 021388 copy pdata ,contw -0x52e4 021389 rtn -: 021392 l2cap_lpm_save_calc_len: -0x52e5 021393 bpatchx patch25_7 ,mem_patch25 -0x52e6 021394 arg 0 ,regb -0x52e7 021395 arg mem_tx_fifo0_map ,rega -0x52e8 021396 increase -2 ,rega -: 021397 l2cap_lpm_save_calc_len_loop: -0x52e9 021398 increase 2 ,rega -0x52ea 021399 setarg mem_tx_fifo_end -0x52eb 021400 isub rega ,null -0x52ec 021401 branch l2cap_lpm_save_calc_len_end ,zero -0x52ed 021402 ifetch 1 ,rega -0x52ee 021403 increase 1 ,rega -0x52ef 021404 branch l2cap_lpm_save_calc_len_loop ,blank -0x52f0 021405 ifetcht 2 ,rega -0x52f1 021406 ifetch 2 ,temp -0x52f2 021407 iadd regb ,regb -0x52f3 021408 increase 4 ,regb -0x52f4 021409 branch l2cap_lpm_save_calc_len_loop -: 021410 l2cap_lpm_save_calc_len_end: -0x52f5 021411 copy regb ,pdata -0x52f6 021412 rtn -: 021415 l2cap_lpm_get_wake_lock: -0x52f7 021416 arg wake_lock_l2cap_tx ,queue -0x52f8 021417 branch lpm_get_wake_lock -: 021419 l2cap_lpm_put_wake_lock: -0x52f9 021420 arg wake_lock_l2cap_tx ,queue -0x52fa 021421 branch lpm_put_wake_lock -: 021423 l2cap_lpm_save_txbuf: -0x52fb 021424 bpatchx patch26_0 ,mem_patch26 -0x52fc 021425 call l2cap_malloc_get_full_map -0x52fd 021426 fetch 1 ,mem_used_map -0x52fe 021427 rtn blank -0x52ff 021428 call l2cap_lpm_save_calc_len -0x5300 021429 arg l2cap_lpm_txbuf_len ,temp -0x5301 021430 isub temp ,null -0x5302 021431 branch l2cap_lpm_get_wake_lock ,positive -0x5303 021432 call l2cap_lpm_put_wake_lock -0x5304 021433 arg mem_l2cap_lpm_txbuf ,contw -0x5305 021434 arg mem_tx_fifo0 ,rega -: 021435 l2cap_lpm_save_txbuf_loop: -0x5306 021436 setarg mem_tx_fifo_end -0x5307 021437 isub rega ,null -0x5308 021438 rtn zero -0x5309 021439 ifetch 1 ,rega -0x530a 021440 increase 1 ,rega -0x530b 021441 nbranch l2cap_lpm_save_txbuf_nempty ,blank -0x530c 021442 istore 2 ,contw -0x530d 021443 increase 2 ,rega -0x530e 021444 branch l2cap_lpm_save_txbuf_loop -: 021445 l2cap_lpm_save_txbuf_nempty: -0x530f 021446 ifetch 2 ,rega -0x5310 021447 increase 2 ,rega -0x5311 021448 copy pdata ,contr -0x5312 021449 ifetch 2 ,contr -0x5313 021450 istore 2 ,contw -0x5314 021451 copy pdata ,loopcnt -0x5315 021452 increase 2 ,loopcnt -0x5316 021453 call memcpy -0x5317 021454 branch l2cap_lpm_save_txbuf_loop -: 021456 l2cap_lpm_load_txbuf: -0x5318 021457 bpatchx patch26_1 ,mem_patch26 -0x5319 021458 call l2cap_malloc_get_full_map -0x531a 021459 fetch 1 ,mem_used_map -0x531b 021460 rtn blank -0x531c 021461 arg mem_tx_fifo0_ptr ,rega -0x531d 021462 increase -3 ,rega -0x531e 021463 arg mem_l2cap_lpm_txbuf ,contr -: 021464 l2cap_lpm_load_txbuf_loop: -0x531f 021465 increase 3 ,rega -0x5320 021466 setarg mem_tx_fifo_end + 1 -0x5321 021467 isub rega ,null -0x5322 021468 rtn zero -0x5323 021469 ifetch 2 ,contr -0x5324 021470 branch l2cap_lpm_load_txbuf_loop ,blank -0x5325 021471 increase 4 ,pdata -0x5326 021472 copy pdata ,loopcnt -0x5327 021473 copy contr ,regb -0x5328 021474 ifetch 2 ,rega -0x5329 021475 copy pdata ,contw -0x532a 021476 copy regb ,contr -0x532b 021477 increase -2 ,contr -0x532c 021478 call memcpy -0x532d 021479 branch l2cap_lpm_load_txbuf_loop -: 021489 le_init_conn: -0x532e 021490 bpatchx patch26_2 ,mem_patch26 -0x532f 021491 disable wake -0x5330 021492 jam 1 ,mem_le_conn_handle -0x5331 021493 jam 3 ,mem_le_state -0x5332 021494 jam 1 ,mem_le_arq -0x5333 021495 setarg -1 -0x5334 021496 store 2 ,mem_le_event_count -0x5335 021497 force 0 ,pdata -0x5336 021498 store 1 ,mem_le_ch -0x5337 021499 store 1 ,mem_le_op -0x5338 021500 store 3 ,mem_sniff_rcv -0x5339 021501 store 3 ,mem_sniff_lost -0x533a 021502 store 5 ,mem_le_pcnt_tx -0x533b 021503 set1 39 ,pdata -0x533c 021504 store 5 ,mem_le_pcnt_rx -0x533d 021505 jam 1 ,mem_le_txheader -0x533e 021506 jam 0 ,mem_le_txlen -0x533f 021507 branch le_supervision_flush -: 021509 le_init_master: -0x5340 021510 bpatchx patch26_3 ,mem_patch26 -0x5341 021511 enable master -0x5342 021512 jam lemode_master ,mem_le_mode -0x5343 021513 jam 1 ,mem_le_att_handle -0x5344 021514 jam 1 ,mem_le_search_handle_start -0x5345 021515 setarg 0xffff -0x5346 021516 store 2 ,mem_le_search_handle_end -0x5347 021517 force 0 ,pdata -0x5348 021518 store 5 ,mem_le_pcnt_rx -0x5349 021519 set1 39 ,pdata -0x534a 021520 store 5 ,mem_le_pcnt_tx -0x534b 021521 branch le_init_conn -: 021524 le_init_slave: -0x534c 021525 bpatchx patch26_4 ,mem_patch26 -0x534d 021526 disable master -0x534e 021527 setarg 0x17 -0x534f 021528 store 2 ,mem_le_remote_mtu -0x5350 021529 jam lemode_slave ,mem_le_mode -0x5351 021530 jam 0 ,mem_le_adv_enable -0x5352 021531 jam 0 ,mem_lpm_current_mult -0x5353 021532 jam flag_le_pairing_null ,mem_le_pairing_state -0x5354 021533 jam flag_le_enc_null ,mem_le_enc_state -0x5355 021534 fetch 2 ,mem_le_superto -0x5356 021535 store 2 ,mem_le_init_superto -0x5357 021536 fetch 2 ,mem_le_tsniff -0x5358 021537 mul32 pdata ,5 ,pdata -0x5359 021538 rshift4 pdata ,pdata -0x535a 021539 store 2 ,mem_le_superto -0x535b 021540 branch le_init_conn -: 021546 le_dispatch: -0x535c 021547 call le_enable -0x535d 021548 call le_scan -0x535e 021549 call le_adv -0x535f 021550 branch le_disable -: 021552 le_conn_dispatch: -0x5360 021553 bpatchx patch26_5 ,mem_patch26 -0x5361 021554 call le_enable -0x5362 021555 call app_process_ble -0x5363 021556 fetch 1 ,mem_le_mode -0x5364 021557 beq lemode_master ,le_master_dispatch -0x5365 021558 branch le_slave_dispatch -: 021564 le_master_dispatch: -0x5366 021565 bpatchx patch26_6 ,mem_patch26 -0x5367 021566 enable master -0x5368 021567 call le_supervision_update -0x5369 021568 branch le_master_disconn ,positive -0x536a 021569 call check_ble_disabled -0x536b 021570 call le_setup -0x536c 021571 call le_prepare_tx -0x536d 021572 disable match -0x536e 021573 call le_transmit_receive_sifs -0x536f 021574 nrtn match -0x5370 021575 bpatchx patch26_7 ,mem_patch26 -0x5371 021576 fetch 1 ,mem_le_conn_rcv -0x5372 021577 increase 1 ,pdata -0x5373 021578 store 1 ,mem_le_conn_rcv -0x5374 021579 call le_acknowledge -0x5375 021580 disable master -0x5376 021581 rtn -: 021583 le_master_disconn: -0x5377 021584 call le_disconnect -0x5378 021585 disable master -0x5379 021586 rtn -: 021591 le_slave_dispatch: -0x537a 021592 bpatchx patch27_0 ,mem_patch27 -0x537b 021593 jam 0 ,mem_le_md_count -0x537c 021594 call sp_calc_sequence_256 -0x537d 021595 call le_secure_connect_sm -0x537e 021596 disable attempt -0x537f 021597 call le_supervision_update -0x5380 021598 branch le_slave_disconn ,positive -0x5381 021599 call check_ble_disabled -0x5382 021600 call le_setup -0x5383 021601 call le_receive_slave -0x5384 021602 nbranch le_slave_unsync ,sync -0x5385 021603 call le_got_first_packet -0x5386 021604 branch le_slave_match ,match -0x5387 021605 branch le_slave_cont -: 021608 le_slave_match: -0x5388 021609 bpatchx patch27_1 ,mem_patch27 -0x5389 021610 fetch 1 ,mem_le_md_count -0x538a 021611 pincrease 1 -0x538b 021612 store 1 ,mem_le_md_count -0x538c 021613 beq le_md_max_count ,le_slave_cont -0x538d 021614 call le_acknowledge -0x538e 021615 call le_prepare_tx -0x538f 021616 call le_transmit_norx -0x5390 021617 call le_parse -0x5391 021618 fetch 2 ,mem_cb_ble_transmit -0x5392 021619 call callback_func -0x5393 021620 call le_check_md -0x5394 021621 branch le_slave_more_data ,user -: 021622 le_slave_cont: -0x5395 021623 bpatchx patch27_2 ,mem_patch27 -0x5396 021624 call le_pairing_sm -0x5397 021625 call le_check_paring_time -0x5398 021626 call check_51cmd -0x5399 021627 fetch 1 ,mem_le_op -0x539a 021628 bbit1 op_disconn ,le_slave_disconn -: 021629 le_slave_unsync: -0x539b 021630 bpatchx patch27_3 ,mem_patch27 -0x539c 021631 call le_lpm_set_mult -0x539d 021632 call le_update_channel_map -0x539e 021633 call le_update_param -0x539f 021634 branch calc_clke_offset -: 021637 le_check_md: -0x53a0 021638 disable user -0x53a1 021639 bmark1 mark_ble_rx_md ,enable_user -0x53a2 021640 bmark1 mark_ble_tx_md ,enable_user -0x53a3 021641 rtn -: 021644 le_slave_more_data: -0x53a4 021645 bpatchx patch27_4 ,mem_patch27 -0x53a5 021646 enable attempt -0x53a6 021647 call le_transmit_receive_sifs_notx -0x53a7 021648 branch le_slave_match ,match -0x53a8 021649 branch le_slave_cont -: 021651 le_slave_disconn: -: 021654 le_disconnect: -0x53a9 021655 bpatchx patch27_5 ,mem_patch27 -0x53aa 021656 call le_clear_connection_info -0x53ab 021657 call app_disconn_reason_collect_ble -0x53ac 021658 call sp_initialize_256 -0x53ad 021659 jam bt_evt_le_disconnected ,mem_fifo_temp -0x53ae 021660 branch ui_ipc_send_event -: 021662 le_clear_connection_info: -0x53af 021663 setarg 0 -0x53b0 021664 store 9 ,mem_le_tx_buff_used -0x53b1 021665 jam 0 ,mem_le_conn_handle -0x53b2 021666 jam lemode_idle ,mem_le_mode -0x53b3 021667 jam 0 ,mem_le_state -0x53b4 021668 jam flag_le_enc_null ,mem_le_enc_state -0x53b5 021669 jam flag_le_pairing_null ,mem_le_pairing_state -0x53b6 021670 rtn -: 021672 le_got_first_packet: -0x53b7 021673 bpatchx patch27_6 ,mem_patch27 -0x53b8 021674 fetch 1 ,mem_le_conn_rcv -0x53b9 021675 increase 1 ,pdata -0x53ba 021676 store 1 ,mem_le_conn_rcv -0x53bb 021677 fetch 1 ,mem_le_state -0x53bc 021678 rtnbit1 lestate_got_first_packet -0x53bd 021679 set1 lestate_got_first_packet -0x53be 021680 store 1 ,mem_le_state -0x53bf 021681 fetch 2 ,mem_le_init_superto -0x53c0 021682 store 2 ,mem_le_superto -0x53c1 021683 setarg 0 -0x53c2 021684 store 4 ,mem_le_transmit_window -0x53c3 021685 rtn -: 021688 le_enable: -0x53c4 021689 bpatchx patch27_7 ,mem_patch27 -0x53c5 021690 jam 0x36 ,rf_adc_goff -0x53c6 021691 jam 0x5f ,rf_agc_nsat -0x53c7 021692 enable le -0x53c8 021693 jam 7 ,rfen_ulp -0x53c9 021694 call check_ble_disabled -0x53ca 021695 fetch 1 ,mem_250k_freq_enable -0x53cb 021696 rtn blank -0x53cc 021697 jam 0xb8 ,rf_iq_gain -0x53cd 021698 rtn -: 021700 le_disable: -0x53ce 021701 bpatchx patch28_0 ,mem_patch28 -0x53cf 021702 jam 0x2e ,rf_adc_goff -0x53d0 021703 jam 0xff ,rf_agc_nsat -0x53d1 021704 disable le -0x53d2 021705 jam 3 ,rfen_ulp -0x53d3 021706 arg 0 ,stop_watch -0x53d4 021707 rtn -: 021709 le_prep: -0x53d5 021710 disable enable_crc -0x53d6 021711 disable enable_white -0x53d7 021712 fetch 3 ,mem_le_crcinit -0x53d8 021713 iforce crc24_init -0x53d9 021714 fetch 1 ,mem_le_ch_mapped -: 021715 le_prep2: -0x53da 021716 reverse pdata ,temp -0x53db 021717 set1 1 ,temp -0x53dc 021718 rshift temp ,white_init -0x53dd 021719 rtn -: 021722 lerx_setfreq: -0x53de 021723 call le_setfreq -0x53df 021724 call set_freq_rx -0x53e0 021725 setarg param_pll_setup -0x53e1 021726 call sleep -0x53e2 021727 branch rf_rx_enable -: 021729 letx_setfreq: -0x53e3 021730 branch txon ,match -: 021731 letx_setfreq0: -0x53e4 021732 call le_setfreq -0x53e5 021733 branch set_freq_tx -: 021734 le_setfreq: -0x53e6 021735 bpatchx patch28_1 ,mem_patch28 -0x53e7 021736 call set_sync_on -0x53e8 021737 fetch 1 ,mem_le_testtype -0x53e9 021738 nbranch le_ctf_test ,blank -0x53ea 021739 fetch 1 ,mem_le_ch_mapped -0x53eb 021740 sub pdata ,36 ,null -0x53ec 021741 branch le_ctf_normal ,positive -0x53ed 021742 force 0 ,temp -0x53ee 021743 rtneq 37 -0x53ef 021744 force 24 ,temp -0x53f0 021745 rtneq 38 -0x53f1 021746 force 78 ,temp -0x53f2 021747 rtn -: 021749 le_ctf_normal: -0x53f3 021750 sub pdata ,10 ,null -0x53f4 021751 branch le_ctf_low ,positive -0x53f5 021752 increase 1 ,pdata -: 021754 le_ctf_low: -0x53f6 021755 lshift pdata ,pdata -0x53f7 021756 add pdata ,2 ,temp -0x53f8 021757 rtn -: 021759 le_ctf_test: -0x53f9 021760 fetch 1 ,mem_le_ch_mapped -0x53fa 021761 lshift pdata ,temp -0x53fb 021762 rtn -: 021764 le_sca_map: -0x53fc 021765 arg 500 ,temp -0x53fd 021766 rtn blank -0x53fe 021767 arg 250 ,temp -0x53ff 021768 rtneq 1 -0x5400 021769 arg 150 ,temp -0x5401 021770 rtneq 2 -0x5402 021771 arg 100 ,temp -0x5403 021772 rtneq 3 -0x5404 021773 arg 75 ,temp -0x5405 021774 rtneq 4 -0x5406 021775 arg 50 ,temp -0x5407 021776 rtneq 5 -0x5408 021777 arg 40 ,temp -0x5409 021778 rtneq 6 -0x540a 021779 arg 20 ,temp -0x540b 021780 rtn -: 021784 le_adv_access: -0x540c 021785 setarg 0x8e89be -0x540d 021786 lshift8 pdata ,pdata -0x540e 021787 or_into 0xd6 ,pdata -0x540f 021788 iforce access -0x5410 021789 setarg 0x555555 -0x5411 021790 store 3 ,mem_le_crcinit -0x5412 021791 rtn -: 021793 le_setup: -0x5413 021794 bpatchx patch28_2 ,mem_patch28 -0x5414 021795 enable swfine -0x5415 021796 fetch 4 ,mem_le_access -0x5416 021797 iforce access -0x5417 021798 call le_map_channel -0x5418 021799 setarg 0x200 -0x5419 021800 branch le_setup_master ,master -0x541a 021801 fetch 2 ,mem_le_receive_window -0x541b 021802 rshift pdata ,pdata -: 021803 le_setup_master: -0x541c 021804 arg param_pll_setup ,temp -0x541d 021805 iadd temp ,pdata -0x541e 021806 call ahead_window -0x541f 021807 deposit clke -0x5420 021808 store 6 ,mem_le_rxon_ts -0x5421 021809 rtn -: 021811 le_next_adv_channel: -0x5422 021812 bpatchx patch28_3 ,mem_patch28 -0x5423 021813 fetch 1 ,mem_le_ch_mapped -0x5424 021814 beq 37 ,le_next_adv_channel_curr_channel_37 -0x5425 021815 beq 38 ,le_next_adv_channel_curr_channel_38 -0x5426 021816 beq 39 ,le_next_adv_channel_curr_channel_39 -0x5427 021817 branch le_next_adv_channel_curr_channel_39 -: 021819 le_next_adv_channel_curr_channel_37: -0x5428 021820 fetcht 1 ,mem_le_adv_channel_map -0x5429 021821 isolate1 bit_adv_channel_map_38 ,temp -0x542a 021822 branch set_le_next_adv_channel_38 ,true -0x542b 021823 isolate1 bit_adv_channel_map_39 ,temp -0x542c 021824 branch set_le_next_adv_channel_39 ,true -0x542d 021825 branch set_le_next_adv_channel_37 -: 021828 le_next_adv_channel_curr_channel_38: -0x542e 021829 fetcht 1 ,mem_le_adv_channel_map -0x542f 021830 isolate1 bit_adv_channel_map_39 ,temp -0x5430 021831 branch set_le_next_adv_channel_39 ,true -0x5431 021832 isolate1 bit_adv_channel_map_37 ,temp -0x5432 021833 branch set_le_next_adv_channel_37 ,true -0x5433 021834 branch set_le_next_adv_channel_38 -: 021837 le_next_adv_channel_curr_channel_39: -0x5434 021838 fetcht 1 ,mem_le_adv_channel_map -0x5435 021839 isolate1 bit_adv_channel_map_37 ,temp -0x5436 021840 branch set_le_next_adv_channel_37 ,true -0x5437 021841 isolate1 bit_adv_channel_map_38 ,temp -0x5438 021842 branch set_le_next_adv_channel_38 ,true -0x5439 021843 branch set_le_next_adv_channel_39 -: 021847 set_le_next_adv_channel_37: -0x543a 021848 jam 37 ,mem_le_ch_mapped -0x543b 021849 fetch 1 ,mem_le_adv_channel_map_temp -0x543c 021850 set1 bit_adv_channel_map_37 ,pdata -0x543d 021851 store 1 ,mem_le_adv_channel_map_temp -0x543e 021852 rtn -: 021854 set_le_next_adv_channel_38: -0x543f 021855 jam 38 ,mem_le_ch_mapped -0x5440 021856 fetch 1 ,mem_le_adv_channel_map_temp -0x5441 021857 set1 bit_adv_channel_map_38 ,pdata -0x5442 021858 store 1 ,mem_le_adv_channel_map_temp -0x5443 021859 rtn -: 021861 set_le_next_adv_channel_39: -0x5444 021862 jam 39 ,mem_le_ch_mapped -0x5445 021863 fetch 1 ,mem_le_adv_channel_map_temp -0x5446 021864 set1 bit_adv_channel_map_39 ,pdata -0x5447 021865 store 1 ,mem_le_adv_channel_map_temp -0x5448 021866 rtn -: 021870 le_context_nexthop: -0x5449 021871 bpatchx patch28_4 ,mem_patch28 -0x544a 021872 add rega ,coffset_mode ,contr -0x544b 021873 ifetch 1 ,contr -0x544c 021874 rtnbit0 mode_le -0x544d 021875 add rega ,coffset_le_event_cnt ,contw -0x544e 021876 ifetch 2 ,contw -0x544f 021877 increase 1 ,pdata -0x5450 021878 istore 2 ,contw -0x5451 021879 add rega ,coffset_le_hop ,contr -0x5452 021880 ifetch 1 ,contr -0x5453 021881 add rega ,coffset_le_ch ,contw -0x5454 021882 ifetcht 1 ,contw -0x5455 021883 iadd temp ,pdata -0x5456 021884 sub pdata ,36 ,null -0x5457 021885 branch le_nexthop_nowrap ,positive -0x5458 021886 increase -37 ,pdata -: 021887 le_nexthop_nowrap: -0x5459 021888 istore 1 ,contw -0x545a 021889 rtn -: 021892 le_calc_channel_map: -0x545b 021893 bpatchx patch28_5 ,mem_patch28 -0x545c 021894 fetch 5 ,mem_le_channel_map -0x545d 021895 force 0 ,temp -0x545e 021896 force 37 ,loopcnt -: 021897 le_count_channels_loop: -0x545f 021898 bbit0 0 ,le_count_channels_notused -0x5460 021899 increase 1 ,temp -: 021900 le_count_channels_notused: -0x5461 021901 rshift pdata ,pdata -0x5462 021902 loop le_count_channels_loop -0x5463 021903 add temp ,-1 ,pdata -0x5464 021904 store 1 ,mem_le_channels -0x5465 021905 rtn -: 021907 le_map_channel: -0x5466 021908 bpatchx patch28_6 ,mem_patch28 -0x5467 021909 fetch 1 ,mem_le_ch -0x5468 021910 iforce queue -0x5469 021911 fetcht 5 ,mem_le_channel_map -0x546a 021912 qisolate1 temp -0x546b 021913 branch le_map_channel_end ,true -: 021914 le_map_channel_next: -0x546c 021915 bpatchx patch28_7 ,mem_patch28 -0x546d 021916 fetch 1 ,mem_le_channels -0x546e 021917 isub queue ,pdata -0x546f 021918 branch le_map_channel_cont ,positive -0x5470 021919 sub pdata ,-1 ,queue -0x5471 021920 branch le_map_channel_next -: 021921 le_map_channel_cont: -0x5472 021922 copy queue ,loopcnt -0x5473 021923 force 0 ,queue -: 021924 le_map_channel_loop: -0x5474 021925 qisolate1 temp -0x5475 021926 branch le_map_channel_skip ,true -0x5476 021927 increase 1 ,loopcnt -: 021928 le_map_channel_skip: -0x5477 021929 deposit loopcnt -0x5478 021930 branch le_map_channel_end ,blank -0x5479 021931 increase 1 ,queue -0x547a 021932 increase -1 ,loopcnt -0x547b 021933 branch le_map_channel_loop -: 021934 le_map_channel_end: -0x547c 021935 deposit queue -0x547d 021936 store 1 ,mem_le_ch_mapped -0x547e 021937 rtn -: 021940 le_wait_tx: -0x547f 021941 branch le_wait_master ,master -0x5480 021942 until null ,timeout -0x5481 021943 rtn -: 021945 le_wait_master: -0x5482 021946 arg 0xea0 ,timeup -0x5483 021947 until clkn_rt ,meet -0x5484 021948 rtn -: 021950 le_receive_adv: -0x5485 021951 disable swfine -0x5486 021952 fetch 2 ,mem_le_scan_window -0x5487 021953 copy pdata ,timeup -0x5488 021954 branch le_receive_packet -: 021957 le_receive_slave: -0x5489 021958 bpatchx patch29_0 ,mem_patch29 -0x548a 021959 enable swfine -0x548b 021960 fetch 2 ,mem_le_receive_window -0x548c 021961 fetcht 4 ,mem_le_transmit_window -0x548d 021962 iadd temp ,timeup -: 021963 le_receive_packet: -0x548e 021964 call lerx_setfreq -: 021965 le_receive_rxon: -0x548f 021966 bpatchx patch29_1 ,mem_patch29 -0x5490 021967 call le_prep -0x5491 021968 disable match -0x5492 021969 enable decode_fec0 -0x5493 021970 enable is_rx -0x5494 021971 disable is_tx -0x5495 021972 copy timeup ,stop_watch -0x5496 021973 correlate null ,timeout -0x5497 021974 branch le_receive_on_attempt ,attempt -0x5498 021975 copy clke ,temp -0x5499 021976 storet 6 ,mem_sync_clke -: 021977 le_receive_on_attempt: -0x549a 021978 nbranch end_of_packet ,sync -0x549b 021979 branch le_receive_skip ,attempt -0x549c 021980 arg param_clke_cal_le ,clke_rt -0x549d 021981 copy bt_clk ,clke_bt -0x549e 021982 fetch 1 ,mem_le_state -0x549f 021983 bbit0 lestate_got_first_packet ,le_receive_skip -0x54a0 021984 call lpm_adjust_clk ,wake -: 021985 le_receive_skip: -0x54a1 021986 bpatchx patch29_2 ,mem_patch29 -0x54a2 021987 call save_rssi -0x54a3 021988 enable enable_white -0x54a4 021989 enable enable_crc -0x54a5 021990 parse demod ,bucket ,8 -0x54a6 021991 rshift3 pwindow ,pdata -0x54a7 021992 store 1 ,mem_le_rxbuf -0x54a8 021993 parse demod ,bucket ,8 -0x54a9 021994 rshift3 pwindow ,pdata -0x54aa 021995 istore 1 ,contw -0x54ab 021996 and pdata ,0x3f ,loopcnt -0x54ac 021997 branch lerx_nopayload ,zero -: 021999 lerx_loop: -0x54ad 022000 parse demod ,bucket ,8 -0x54ae 022001 rshift3 pwindow ,pdata -0x54af 022002 istore 1 ,contw -0x54b0 022003 loop lerx_loop -: 022005 lerx_nopayload: -0x54b1 022006 bpatchx patch29_3 ,mem_patch29 -0x54b2 022007 parse demod ,bucket ,24 -0x54b3 022008 enable swfine -0x54b4 022009 arg param_sifs ,stop_watch -0x54b5 022010 rshift32 pdata ,pdata -0x54b6 022011 rshift16 pdata ,pdata -0x54b7 022012 istore 3 ,contw -0x54b8 022013 branch end_of_packet ,crc_failed -0x54b9 022014 enable match -0x54ba 022015 fetch 1 ,mem_last_freq -0x54bb 022016 add pdata ,0 ,rega -0x54bc 022017 call rf_write_freq -0x54bd 022018 disable decode_fec0 -0x54be 022019 branch set_sync_on -: 022021 le_transmit_receive_sifs: -0x54bf 022022 bpatchx patch29_4 ,mem_patch29 -0x54c0 022023 call le_transmit -: 022024 le_transmit_receive_sifs_notx: -0x54c1 022025 fetcht 1 ,mem_last_freq -0x54c2 022026 call set_freq_rx -0x54c3 022027 call rf_rx_enable -0x54c4 022028 enable swfine -0x54c5 022029 arg 5500 ,timeup -0x54c6 022030 branch le_receive_rxon -: 022032 le_transmit_norx: -0x54c7 022033 call le_transmit -0x54c8 022034 branch end_of_packet -: 022036 le_transmit: -0x54c9 022037 bpatchx patch29_5 ,mem_patch29 -0x54ca 022038 call le_prep -0x54cb 022039 call letx_setfreq -0x54cc 022040 branch le_transmit0 -: 022042 le_transmit0: -0x54cd 022043 set1 txgfsk ,radio_ctrl -0x54ce 022044 enable encode_fec0 -0x54cf 022045 enable is_tx -0x54d0 022046 disable is_rx -0x54d1 022047 call le_wait_tx -0x54d2 022048 rshift16 access ,pdata -0x54d3 022049 rshift8 pdata ,pdata -0x54d4 022050 rshift4 pdata ,pdata -0x54d5 022051 inject mod ,40 -0x54d6 022052 enable enable_white -0x54d7 022053 enable enable_crc -0x54d8 022054 bpatchx patch29_6 ,mem_patch29 -0x54d9 022055 fetch 1 ,mem_le_txheader -0x54da 022056 inject mod ,8 -0x54db 022057 ifetch 1 ,contr -0x54dc 022058 and pdata ,0x3f ,loopcnt -0x54dd 022059 inject mod ,8 -0x54de 022060 branch letr_nopayload ,zero -: 022061 letr_loop: -0x54df 022062 ifetch 1 ,contr -0x54e0 022063 inject mod ,8 -0x54e1 022064 loop letr_loop -: 022066 letr_nopayload: -0x54e2 022067 enable enable_parity -0x54e3 022068 inject mod ,24 -0x54e4 022069 disable enable_parity -0x54e5 022070 until null ,tx_clear -0x54e6 022071 nop 100 -0x54e7 022072 disable encode_fec0 -0x54e8 022073 rtn -: 022075 le_send_adv_ind: -0x54e9 022076 bpatchx patch29_7 ,mem_patch29 -0x54ea 022077 fetch 1 ,mem_le_adv_type -0x54eb 022078 beq adv_direct_ind ,le_send_adv_direct_ind -0x54ec 022079 fetch 1 ,mem_le_adv_own_addr_type -0x54ed 022080 lshift4 pdata ,pdata -0x54ee 022081 lshift2 pdata ,pdata -0x54ef 022082 store 1 ,mem_le_txheader -0x54f0 022083 fetcht 1 ,mem_le_adv_data_len -0x54f1 022084 add temp ,6 ,pdata -0x54f2 022085 store 1 ,mem_le_txlen -0x54f3 022086 fetch 6 ,mem_le_lap -0x54f4 022087 store 6 ,mem_le_txpayload -0x54f5 022088 copy temp ,loopcnt -0x54f6 022089 arg mem_le_adv_data ,contr -0x54f7 022090 call memcpy_fast -0x54f8 022091 branch le_send_adv_transmit -: 022092 le_send_adv_direct_ind: -0x54f9 022093 fetch 1 ,mem_le_adv_direct_addr_type -0x54fa 022094 lshift4 pdata ,pdata -0x54fb 022095 lshift2 pdata ,pdata -0x54fc 022096 increase 1 ,pdata -0x54fd 022097 store 1 ,mem_le_txheader -0x54fe 022098 setarg 12 -0x54ff 022099 store 1 ,mem_le_txlen -0x5500 022100 fetch 6 ,mem_le_lap -0x5501 022101 store 6 ,mem_le_txpayload -0x5502 022102 fetch 6 ,mem_hci_plap -0x5503 022103 istore 6 ,contw -: 022104 le_send_adv_transmit: -0x5504 022105 bpatchx patch2a_0 ,mem_patch2a -0x5505 022106 fetch 1 ,mem_le_adv_transmit -0x5506 022107 increase 1 ,pdata -0x5507 022108 store 1 ,mem_le_adv_transmit -0x5508 022109 arg 1800 ,stop_watch -0x5509 022110 disable match -0x550a 022111 branch le_transmit_receive_sifs -: 022113 le_send_scan_request: -0x550b 022114 bpatchx patch2a_1 ,mem_patch2a -0x550c 022115 fetch 1 ,mem_le_scan_type -0x550d 022116 rtnne le_scan_type_active -0x550e 022117 fetch 1 ,mem_le_adv_transmit -0x550f 022118 increase 1 ,pdata -0x5510 022119 store 1 ,mem_le_adv_transmit -0x5511 022120 arg 0x0c03 ,temp -0x5512 022121 fetch 1 ,mem_le_scan_own_addr_type -0x5513 022122 nsetflag blank ,le_sender_addr_bit ,temp -0x5514 022123 copy rega ,pdata -0x5515 022124 nsetflag blank ,le_receiver_addr_bit ,temp -0x5516 022125 storet 2 ,mem_le_txheader -0x5517 022126 fetch 6 ,mem_le_lap -0x5518 022127 istore 6 ,contw -0x5519 022128 fetch 6 ,mem_le_plap -0x551a 022129 istore 6 ,contw -0x551b 022130 branch le_transmit_receive_sifs -: 022133 le_send_scan_response: -0x551c 022134 bpatchx patch2a_2 ,mem_patch2a -0x551d 022135 arg scan_rsp ,temp -0x551e 022136 fetch 1 ,mem_le_adv_own_addr_type -0x551f 022137 nsetflag blank ,le_sender_addr_bit ,temp -0x5520 022138 storet 1 ,mem_le_txheader -0x5521 022139 fetcht 1 ,mem_le_scan_data_len -0x5522 022140 add temp ,6 ,pdata -0x5523 022141 store 1 ,mem_le_txlen -0x5524 022142 fetch 6 ,mem_le_lap -0x5525 022143 store 6 ,mem_le_txpayload -0x5526 022144 arg mem_le_scan_data ,contr -0x5527 022145 copy temp ,loopcnt -0x5528 022146 call memcpy_fast -0x5529 022147 call le_transmit_norx -0x552a 022148 branch le_adv_not_match -: 022150 le_connect_request: -0x552b 022151 bpatchx patch2a_3 ,mem_patch2a -0x552c 022152 force -1 ,pdata -0x552d 022153 setsect 2 ,1 -0x552e 022154 store 5 ,mem_le_channel_map -0x552f 022155 call le_calc_channel_map -0x5530 022156 force 4 ,loopcnt -0x5531 022157 arg mem_le_access ,contw -0x5532 022158 call generate_random_loop -0x5533 022159 fetch 2 ,mem_le_timeout -0x5534 022160 store 2 ,mem_le_superto -: 022161 le_con_req_hop_retry: -0x5535 022162 random pdata -0x5536 022163 and_into 0xf ,pdata -0x5537 022164 sub pdata ,4 ,null -0x5538 022165 branch le_con_req_hop_retry ,positive -0x5539 022166 store 1 ,mem_le_hop -0x553a 022167 store 1 ,mem_tmp1 -0x553b 022168 bpatchx patch2a_4 ,mem_patch2a -0x553c 022169 fetcht 2 ,mem_le_conn_interval -0x553d 022170 storet 2 ,mem_le_tsniff -0x553e 022171 copy temp ,regc -0x553f 022172 add clkn_bt ,7 ,pdata -0x5540 022173 idiv regc -0x5541 022174 call wait_div_end -0x5542 022175 remainder rega -0x5543 022176 isub rega ,pdata -0x5544 022177 iadd regc ,pdata -0x5545 022178 fetcht 2 ,mem_le_dsniff -0x5546 022179 iadd temp ,pdata -0x5547 022180 store 4 ,mem_le_anchor -0x5548 022181 isub clkn_bt ,rega -0x5549 022182 increase -6 ,rega -0x554a 022183 arg 0x2205 ,regb -0x554b 022184 fetch 1 ,mem_le_conn_own_addr_type -0x554c 022185 nsetflag blank ,le_sender_addr_bit ,regb -0x554d 022186 fetch 1 ,mem_le_conn_peer_addr_type -0x554e 022187 nsetflag blank ,le_receiver_addr_bit ,regb -0x554f 022188 copy regb ,pdata -0x5550 022189 store 2 ,mem_le_txheader -0x5551 022190 fetch 6 ,mem_le_lap -0x5552 022191 istore 6 ,contw -0x5553 022192 fetch 6 ,mem_le_plap -0x5554 022193 istore 6 ,contw -0x5555 022194 fetch 4 ,mem_le_access -0x5556 022195 istore 4 ,contw -0x5557 022196 random pdata -0x5558 022197 istore 2 ,contw -0x5559 022198 random pdata -0x555a 022199 istore 1 ,contw -0x555b 022200 force 2 ,pdata -0x555c 022201 istore 1 ,contw -0x555d 022202 rshift2 rega ,pdata -0x555e 022203 istore 2 ,contw -0x555f 022204 rshift2 regc ,pdata -0x5560 022205 istore 2 ,contw -0x5561 022206 bpatchx patch2a_5 ,mem_patch2a -0x5562 022207 setarg 0 -0x5563 022208 istore 2 ,contw -0x5564 022209 fetch 2 ,mem_le_timeout -0x5565 022210 istore 2 ,contw -0x5566 022211 fetch 5 ,mem_le_channel_map -0x5567 022212 istore 5 ,contw -0x5568 022213 fetch 1 ,mem_le_hop -0x5569 022214 arg param_le_sca ,temp -0x556a 022215 ior temp ,pdata -0x556b 022216 istore 1 ,contw -0x556c 022217 call le_transmit_norx -0x556d 022218 setarg mem_le_txheader -0x556e 022219 add pdata ,18 ,contr -0x556f 022220 ifetch 3 ,contr -0x5570 022221 store 3 ,mem_le_crcinit -0x5571 022222 rtn -: 022224 le_init_adv: -0x5572 022225 bpatchx patch2a_6 ,mem_patch2a -0x5573 022226 disable master -0x5574 022227 branch le_adv_access -: 022231 le_update_param: -0x5575 022232 fetch 1 ,mem_le_state -0x5576 022233 rtnbit0 lestate_update_param -0x5577 022234 fetch 2 ,mem_le_event_count -0x5578 022235 fetcht 2 ,mem_le_instant -0x5579 022236 isub temp ,pdata -0x557a 022237 nrtn positive -0x557b 022238 store 2 ,mem_pdatatemp -0x557c 022239 bpatchx patch2a_7 ,mem_patch2a -0x557d 022240 fetch 1 ,mem_le_state -0x557e 022241 set0 lestate_update_param ,pdata -0x557f 022242 set0 lestate_got_first_packet ,pdata -0x5580 022243 store 1 ,mem_le_state -0x5581 022244 fetch 4 ,mem_le_anchor -0x5582 022245 fetcht 2 ,mem_le_tsniff -0x5583 022246 storet 2 ,mem_temp -0x5584 022247 isub temp ,rega -0x5585 022248 bpatchx patch2b_0 ,mem_patch2b -0x5586 022249 fetch 1 ,mem_le_new_param -0x5587 022250 store 1 ,mem_le_window_size -0x5588 022251 ifetcht 2 ,contr -0x5589 022252 ifetch 2 ,contr -0x558a 022253 lshift2 pdata ,pdata -0x558b 022254 store 2 ,mem_le_tsniff -0x558c 022255 lshift2 temp ,temp -0x558d 022256 iadd temp ,pdata -0x558e 022257 ifetcht 4 ,contr -0x558f 022258 storet 4 ,mem_le_slave_latency -0x5590 022259 iadd rega ,pdata -0x5591 022260 copy pdata ,regab -0x5592 022261 fetch 2 ,mem_le_tsniff -0x5593 022262 fetcht 2 ,mem_temp -0x5594 022263 isub temp ,pdata -0x5595 022264 fetcht 2 ,mem_pdatatemp -0x5596 022265 imul32 temp ,pdata -0x5597 022266 iadd regab ,pdata -0x5598 022267 store 4 ,mem_le_anchor -0x5599 022268 call le_receive_window_size -0x559a 022269 fetch 2 ,mem_le_superto -0x559b 022270 store 2 ,mem_le_init_superto -0x559c 022271 rtn -: 022274 le_update_channel_map: -0x559d 022275 bpatchx patch2b_1 ,mem_patch2b -0x559e 022276 fetch 1 ,mem_le_state -0x559f 022277 rtnbit0 lestate_update_map -0x55a0 022278 fetch 2 ,mem_le_event_count -0x55a1 022279 fetcht 2 ,mem_le_instant -0x55a2 022280 isub temp ,pdata -0x55a3 022281 nrtn positive -0x55a4 022282 fetch 1 ,mem_le_state -0x55a5 022283 set0 lestate_update_map ,pdata -0x55a6 022284 store 1 ,mem_le_state -0x55a7 022285 fetch 5 ,mem_le_new_map -0x55a8 022286 store 5 ,mem_le_channel_map -0x55a9 022287 branch le_calc_channel_map -: 022290 le_acknowledge: -0x55aa 022291 bpatchx patch2b_2 ,mem_patch2b -0x55ab 022292 call le_supervision_flush -0x55ac 022293 call le_check_wak -0x55ad 022294 fetch 1 ,mem_le_rxbuf -0x55ae 022295 isolate1 md ,pdata -0x55af 022296 setflag true ,mark_ble_rx_md ,mark -0x55b0 022297 rshift pdata ,pdata -0x55b1 022298 ixor temp ,pdata -0x55b2 022299 isolate1 nesn ,pdata -0x55b3 022300 setflag true ,mark_old_packet ,mark -0x55b4 022301 rtnmark1 mark_old_packet -0x55b5 022302 fetch 1 ,mem_le_rxbuf + 1 -0x55b6 022303 branch le_ack_unenc ,blank -0x55b7 022304 fetch 1 ,mem_le_state -0x55b8 022305 bbit0 lestate_encryption ,le_ack_unenc -0x55b9 022306 call load_sk -0x55ba 022307 call le_decrypt -0x55bb 022308 nrtn blank -: 022309 le_ack_unenc: -0x55bc 022310 fetcht 1 ,mem_le_arq -0x55bd 022311 setflip nesn ,temp -0x55be 022312 storet 1 ,mem_le_arq -0x55bf 022313 rtn -: 022316 le_check_wak: -0x55c0 022317 bpatchx patch2b_3 ,mem_patch2b -0x55c1 022318 fetcht 1 ,mem_le_arq -0x55c2 022319 isolate0 wak ,temp -0x55c3 022320 rtn true -0x55c4 022321 fetch 1 ,mem_le_rxbuf -0x55c5 022322 lshift pdata ,pdata -0x55c6 022323 ixor temp ,pdata -0x55c7 022324 rtnbit0 sn -0x55c8 022325 set0 wak ,temp -0x55c9 022326 setflip sn ,temp -0x55ca 022327 storet 1 ,mem_le_arq -0x55cb 022328 compare 3 ,temp ,3 -0x55cc 022329 nrtn true -0x55cd 022330 fetch 1 ,mem_le_txpayload -0x55ce 022331 beq ll_start_enc_req ,le_set_enc -0x55cf 022332 fetch 1 ,mem_le_enc_state -0x55d0 022333 beq flag_le_enc_pause ,le_clear_enc -0x55d1 022334 rtn -: 022337 le_set_enc: -0x55d2 022338 fetch 1 ,mem_le_state -0x55d3 022339 set1 lestate_encryption ,pdata -0x55d4 022340 store 1 ,mem_le_state -0x55d5 022341 rtn -: 022343 le_clear_enc: -0x55d6 022344 bpatchx patch2b_4 ,mem_patch2b -0x55d7 022345 jam flag_le_enc_null ,mem_le_enc_state -0x55d8 022346 arg 0 ,pdata -0x55d9 022347 store 4 ,mem_le_last_mic -0x55da 022348 store 5 ,mem_le_pcnt_tx -0x55db 022349 set1 39 ,pdata -0x55dc 022350 store 5 ,mem_le_pcnt_rx -0x55dd 022351 fetch 1 ,mem_le_state -0x55de 022352 set0 lestate_encryption ,pdata -0x55df 022353 store 1 ,mem_le_state -0x55e0 022354 rtn -: 022357 le_wait_adv: -0x55e1 022358 bpatchx patch2b_5 ,mem_patch2b -0x55e2 022359 call le_next_adv_channel -0x55e3 022360 call le_receive_adv -0x55e4 022361 fetch 1 ,mem_le_adv_waitcnt -0x55e5 022362 increase 1 ,pdata -0x55e6 022363 store 1 ,mem_le_adv_waitcnt -0x55e7 022364 rtn -: 022367 le_scan: -0x55e8 022368 bpatchx patch2b_6 ,mem_patch2b -0x55e9 022369 fetch 1 ,mem_le_scan_enable -0x55ea 022370 rtnne le_scan_enable -0x55eb 022371 arg le_scan_interval_timer ,queue -0x55ec 022372 call timer_check -0x55ed 022373 nrtn blank -0x55ee 022374 fetch 2 ,mem_le_scan_interval -0x55ef 022375 fetcht 2 ,mem_le_scan_window -0x55f0 022376 isub temp ,pdata -0x55f1 022377 arg le_scan_interval_timer ,queue -0x55f2 022378 call timer_init -0x55f3 022379 disable master -0x55f4 022380 call le_init_adv -0x55f5 022381 call le_wait_adv -0x55f6 022382 nrtn match -0x55f7 022383 bpatchx patch2b_7 ,mem_patch2b -0x55f8 022384 fetch 6 ,mem_le_rxbuf + 2 -0x55f9 022385 store 6 ,mem_le_plap -0x55fa 022388 fetch 1 ,mem_le_adv_rcv -0x55fb 022389 increase 1 ,pdata -0x55fc 022390 store 1 ,mem_le_adv_rcv -0x55fd 022391 call le_create_conn -0x55fe 022392 rtn master -0x55ff 022393 call le_send_scan_request -0x5600 022394 nrtn match -0x5601 022395 bpatchx patch2c_0 ,mem_patch2c -0x5602 022396 fetch 1 ,mem_le_scanrsp_rcv -0x5603 022397 increase 1 ,pdata -0x5604 022398 store 1 ,mem_le_scanrsp_rcv -0x5605 022399 fetch 9 ,mem_le_rxbuf + 8 -0x5606 022400 store 9 ,mem_tmp_buffer -0x5607 022401 rtn -: 022403 le_create_conn: -0x5608 022404 bpatchx patch2c_1 ,mem_patch2c -0x5609 022405 fetch 1 ,mem_cmd_le_create_conn -0x560a 022406 rtnne hci_cmd_le_create_conn -0x560b 022407 fetch 6 ,mem_le_plap -0x560c 022408 fetcht 6 ,mem_le_conn_peer_addr -0x560d 022409 isub temp ,null -0x560e 022410 nrtn zero -0x560f 022411 call context_new -0x5610 022412 nrtn zero -0x5611 022413 call le_connect_request -0x5612 022414 call le_init_master -0x5613 022415 bpatchx patch2c_2 ,mem_patch2c -0x5614 022416 jam 0 ,mem_hci_cmd -0x5615 022417 jam 0 ,mem_le_peer_sca -0x5616 022418 jam 0 ,mem_le_scan_enable -0x5617 022419 jam 0 ,mem_cmd_le_create_conn -0x5618 022420 branch context_save -: 022422 le_scan_check_sender_addr_type: -0x5619 022423 arg 1 ,rega -0x561a 022424 fetch 1 ,mem_le_rxbuf -0x561b 022425 rtnbit1 le_sender_addr_bit -0x561c 022426 arg 0 ,rega -0x561d 022427 rtn -: 022431 le_prepare_tx: -0x561e 022432 bpatchx patch2c_3 ,mem_patch2c -0x561f 022433 fetch 1 ,mem_le_arq -0x5620 022434 rtnbit1 wak -0x5621 022435 call le_check_tx_md -0x5622 022436 call le_fifo_get_first_tx_ptr -0x5623 022437 branch le_send_empty ,blank -0x5624 022438 ifetch 1 ,contr -0x5625 022439 ifetcht 1 ,contr -0x5626 022440 copy temp ,rega -0x5627 022441 isub rega ,pdata -0x5628 022442 arg le_max_paket_len ,temp -0x5629 022443 call not_greater_than -0x562a 022444 copy pdata ,temp -0x562b 022445 ifetch 1 ,contr -0x562c 022446 copy pdata ,type -0x562d 022447 copy rega ,pdata -0x562e 022448 iadd contr ,contr -0x562f 022449 arg mem_le_txpayload ,contw -0x5630 022450 copy temp ,loopcnt -0x5631 022451 call memcpy -0x5632 022452 call le_update_tx_type -0x5633 022453 call le_send_packet -0x5634 022455 call le_fifo_get_first_tx_ptr -0x5635 022456 ifetch 1 ,contr -0x5636 022457 copy pdata ,rega -0x5637 022458 copy contr ,regc -0x5638 022459 ifetcht 1 ,contr -0x5639 022460 copy temp ,regb -0x563a 022461 isub regb ,pdata -0x563b 022462 arg le_max_paket_len ,temp -0x563c 022463 call not_greater_than -0x563d 022464 iadd regb ,pdata -0x563e 022465 istore 1 ,regc -0x563f 022466 isub rega ,null -0x5640 022467 nrtn zero -0x5641 022468 branch le_fifo_release_first_node -: 022471 le_check_tx_md: -0x5642 022472 call le_check_continue -0x5643 022473 rtnmark1 mark_ble_tx_md -0x5644 022474 fetch 1 ,mem_le_configuration -0x5645 022475 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md -0x5646 022476 call le_fifo_get_second_tx_ptr -0x5647 022477 branch le_clear_md ,blank -0x5648 022478 branch le_set_md -: 022481 le_check_continue: -0x5649 022482 call le_fifo_get_first_tx_ptr -0x564a 022483 branch le_clear_md ,blank -0x564b 022484 ifetch 1 ,contr -0x564c 022485 ifetcht 1 ,contr -0x564d 022486 isub temp ,pdata -0x564e 022487 sub pdata ,le_max_paket_len ,null -0x564f 022488 branch le_clear_md ,positive -: 022489 le_set_md: -0x5650 022490 set1 mark_ble_tx_md ,mark -0x5651 022491 rtn -: 022493 le_clear_md: -0x5652 022494 set0 mark_ble_tx_md ,mark -0x5653 022495 rtn -: 022497 le_update_tx_type: -0x5654 022498 copy rega ,pdata -0x5655 022499 rtn blank -0x5656 022500 arg llid_continue ,type -0x5657 022501 rtn -: 022504 le_att_check_notification_enable: -0x5658 022505 bpatchx patch2c_4 ,mem_patch2c -0x5659 022506 increase 1 ,temp -0x565a 022507 call le_att_get_handle_ptr -0x565b 022508 increase -2 ,contr -0x565c 022509 ifetch 2 ,contr -0x565d 022510 arg client_charactertic_configuration ,temp -0x565e 022511 isub temp ,null -0x565f 022512 nrtn zero -0x5660 022513 increase 1 ,contr -0x5661 022514 copy contr ,rega -0x5662 022515 ifetch 1 ,contr -0x5663 022516 rtn -: 022519 le_send_empty: -0x5664 022520 force 0 ,temp -0x5665 022521 force 1 ,type -: 022523 le_send_packet: -0x5666 022524 bpatchx patch2c_5 ,mem_patch2c -0x5667 022525 storet 1 ,mem_le_txlen -0x5668 022526 fetcht 1 ,mem_le_arq -0x5669 022527 set1 wak ,temp -0x566a 022528 and temp ,0xfc ,pdata -0x566b 022529 ior type ,pdata -0x566c 022530 store 1 ,mem_le_arq -0x566d 022531 and_into 0x1f ,pdata -0x566e 022532 isolate1 mark_ble_tx_md ,mark -0x566f 022533 setflag true ,md ,pdata -0x5670 022534 store 1 ,mem_le_txheader -0x5671 022536 fetch 1 ,mem_le_txheader -0x5672 022537 compare 1 ,type ,3 -0x5673 022538 nbranch le_send_no_txlen ,true -0x5674 022539 fetch 1 ,mem_le_txlen -0x5675 022540 rtn blank -: 022541 le_send_no_txlen: -0x5676 022542 fetch 1 ,mem_le_state -0x5677 022543 rtnbit0 lestate_encryption -0x5678 022544 call load_sk -0x5679 022545 branch le_encrypt -: 022548 get_lpm_wake_ble_rx_lock: -0x567a 022549 arg wake_lock_ble_rx ,queue -0x567b 022550 branch lpm_get_wake_lock -: 022552 put_lpm_wake_ble_rx_lock: -0x567c 022553 arg wake_lock_ble_rx ,queue -0x567d 022554 branch lpm_put_wake_lock -: 022557 le_parse: -0x567e 022558 bpatchx patch2c_6 ,mem_patch2c -0x567f 022559 rtnmark1 mark_old_packet -0x5680 022560 call le_fifo_check_full -0x5681 022561 nrtn blank -0x5682 022562 fetch 1 ,mem_le_rxbuf -0x5683 022563 and pdata ,0x3 ,pdata -0x5684 022564 store 1 ,mem_le_packet_llid -0x5685 022565 ifetch 1 ,contr -0x5686 022566 and pdata ,0x1f ,pdata -0x5687 022567 store 1 ,mem_le_packet_size -0x5688 022568 rtn blank -0x5689 022569 copy contr ,pdata -0x568a 022570 store 2 ,mem_le_payload_ptr -0x568b 022571 fetch 1 ,mem_le_packet_llid -0x568c 022572 beq llid_le_ll ,le_parse_ll -: 022573 le_parse_l2cap: -0x568d 022574 call le_check_l2cap_complete -0x568e 022575 nbranch get_lpm_wake_ble_rx_lock ,user -0x568f 022576 call put_lpm_wake_ble_rx_lock -0x5690 022577 fetch 2 ,mem_le_payload_ptr -0x5691 022578 copy pdata ,contr -0x5692 022579 ifetch 2 ,contr -0x5693 022580 store 2 ,mem_le_l2cap_size -0x5694 022581 bpatchx patch2c_7 ,mem_patch2c -0x5695 022582 ifetch 2 ,contr -0x5696 022583 beq le_l2cap_cid_att ,le_parse_att -0x5697 022584 beq le_l2cap_cid_smp ,le_parse_smp -0x5698 022585 beq le_l2cap_cid_signal ,le_parse_signaling -0x5699 022586 rtn -: 022589 le_check_l2cap_complete: -0x569a 022590 fetch 1 ,mem_le_packet_llid -0x569b 022591 beq llid_start ,le_check_l2cap_llid_start -0x569c 022592 beq llid_continue ,le_check_l2cap_llid_continue -0x569d 022593 rtn -: 022598 le_check_l2cap_cid_legal: -0x569e 022599 call enable_user -0x569f 022600 arg le_l2cap_cid_att ,temp -0x56a0 022601 isub pdata ,null -0x56a1 022602 rtn zero -0x56a2 022603 arg le_l2cap_cid_signal ,temp -0x56a3 022604 isub pdata ,null -0x56a4 022605 rtn zero -0x56a5 022606 arg le_l2cap_cid_smp ,temp -0x56a6 022607 isub pdata ,null -0x56a7 022608 rtn zero -0x56a8 022609 branch disable_user -: 022612 le_check_l2cap_llid_start: -0x56a9 022613 fetch 2 ,mem_le_payload_ptr -0x56aa 022614 copy pdata ,contr -0x56ab 022615 ifetch 2 ,contr -0x56ac 022616 store 2 ,mem_le_l2cap_size -0x56ad 022617 ifetch 2 ,contr -0x56ae 022618 call le_check_l2cap_cid_legal -0x56af 022619 nrtn user -0x56b0 022620 fetcht 1 ,mem_le_packet_size -0x56b1 022621 storet 1 ,mem_le_packet_len_recved -0x56b2 022622 fetch 2 ,mem_le_l2cap_size -0x56b3 022623 increase 4 ,pdata -0x56b4 022624 isub temp ,null -0x56b5 022625 branch enable_user ,zero -0x56b6 022626 fetch 1 ,mem_le_packet_size -0x56b7 022627 copy pdata ,loopcnt -0x56b8 022628 arg mem_le_l2capbuf ,contw -0x56b9 022629 fetch 2 ,mem_le_payload_ptr -0x56ba 022630 copy pdata ,contr -0x56bb 022631 call memcpy -0x56bc 022632 branch disable_user -: 022637 le_check_l2cap_continue_legal: -0x56bd 022638 call enable_user -0x56be 022639 fetch 1 ,mem_le_packet_len_recved -0x56bf 022640 nrtn blank -0x56c0 022641 branch disable_user -: 022643 le_check_l2cap_llid_continue: -0x56c1 022644 call le_check_l2cap_continue_legal -0x56c2 022645 nrtn user -0x56c3 022646 fetch 1 ,mem_le_packet_len_recved -0x56c4 022647 arg mem_le_l2capbuf ,contw -0x56c5 022648 iadd contw ,rega -0x56c6 022649 fetcht 1 ,mem_le_packet_size -0x56c7 022650 iadd temp ,pdata -0x56c8 022651 store 1 ,mem_le_packet_len_recved -0x56c9 022652 fetch 1 ,mem_le_packet_size -0x56ca 022653 copy pdata ,loopcnt -0x56cb 022654 copy rega ,contw -0x56cc 022655 fetch 2 ,mem_le_payload_ptr -0x56cd 022656 copy pdata ,contr -0x56ce 022657 call memcpy_fast -0x56cf 022658 setarg mem_le_l2capbuf -0x56d0 022659 store 2 ,mem_le_payload_ptr -0x56d1 022660 fetch 2 ,mem_le_l2cap_size -0x56d2 022661 increase 4 ,pdata -0x56d3 022662 fetcht 1 ,mem_le_packet_len_recved -0x56d4 022663 isub temp ,null -0x56d5 022664 branch enable_user ,zero -0x56d6 022665 branch disable_user -: 022671 le_get_search_att_type: -0x56d7 022672 call store_contr -0x56d8 022673 arg mem_le_search_att_type_length ,contw -: 022674 le_get_search_common: -0x56d9 022675 fetch 2 ,mem_le_l2cap_size -0x56da 022676 increase -5 ,pdata -: 022677 le_get_search_common2: -0x56db 022678 istore 1 ,contw -0x56dc 022679 copy pdata ,loopcnt -0x56dd 022680 call get_contr -0x56de 022681 branch memcpy_fast -: 022683 le_get_search_att_uuid: -0x56df 022684 call store_contr -0x56e0 022685 arg mem_le_search_uuid_length ,contw -0x56e1 022686 branch le_get_search_common -: 022690 le_writeatt_cb: -0x56e2 022691 fetch 2 ,mem_cb_att_write -0x56e3 022692 branch callback_func -: 022694 le_supervision_update: -0x56e4 022695 fetcht 4 ,mem_le_supervision_timer -0x56e5 022696 call get_clkbt -0x56e6 022697 isub temp ,timeup -0x56e7 022698 deposit timeup -0x56e8 022699 fetcht 2 ,mem_le_superto -0x56e9 022700 lshift4 temp ,temp -0x56ea 022701 lshift temp ,temp -0x56eb 022702 isub temp ,pdata -0x56ec 022703 rtn -: 022705 le_supervision_flush: -0x56ed 022706 call get_clkbt -0x56ee 022707 store 4 ,mem_le_supervision_timer -0x56ef 022708 rtn -: 022711 le_adv: -0x56f0 022712 jam 36 ,mem_le_ch_mapped -0x56f1 022713 jam 0 ,mem_le_adv_channel_map_temp -: 022714 le_adv_loop: -0x56f2 022715 bpatchx patch2d_0 ,mem_patch2d -0x56f3 022716 fetch 1 ,mem_le_adv_enable -0x56f4 022717 rtn blank -0x56f5 022718 arg le_adv_interval_timer ,queue -0x56f6 022719 call timer_check -0x56f7 022720 nrtn blank -0x56f8 022721 bpatchx patch2d_1 ,mem_patch2d -: 022722 le_adv_loop_tx: -0x56f9 022723 disable master -0x56fa 022724 enable swfine -0x56fb 022725 call le_init_adv -0x56fc 022726 call le_next_adv_channel -0x56fd 022727 call le_send_adv_ind -0x56fe 022728 nbranch le_adv_not_match ,match -0x56ff 022729 fetch 1 ,mem_le_req_rcv -0x5700 022730 increase 1 ,pdata -0x5701 022731 store 1 ,mem_le_req_rcv -0x5702 022732 fetch 1 ,mem_le_rxbuf -0x5703 022733 and pdata ,0x0f ,pdata -0x5704 022734 beq scan_req ,le_send_scan_response -0x5705 022735 beq connect_req ,le_parse_connect_req -: 022736 le_adv_not_match: -0x5706 022737 bpatchx patch2d_2 ,mem_patch2d -0x5707 022738 random pdata -0x5708 022739 arg 0x1ff ,temp -0x5709 022740 iand temp ,pdata -0x570a 022741 add pdata ,250 ,pdata -0x570b 022742 call delay -0x570c 022743 fetch 1 ,mem_le_adv_channel_map_temp -0x570d 022744 fetcht 1 ,mem_le_adv_channel_map -0x570e 022745 isub temp ,null -0x570f 022746 nbranch le_adv_loop ,zero -0x5710 022747 arg le_adv_interval_timer ,queue -0x5711 022748 fetch 2 ,mem_le_adv_interval -0x5712 022749 branch timer_init -: 022752 le_receive_window_size: -0x5713 022753 bpatchx patch2d_3 ,mem_patch2d -0x5714 022754 fetch 1 ,mem_le_peer_sca -0x5715 022755 call le_sca_map -0x5716 022756 fetch 2 ,mem_le_tsniff -0x5717 022757 imul32 temp ,pdata -0x5718 022758 arg 375 ,temp -0x5719 022759 imul32 temp ,pdata -0x571a 022760 arg 100000 ,temp -0x571b 022761 idiv temp -0x571c 022762 fetch 1 ,mem_le_window_size -0x571d 022763 arg 20000 ,temp -0x571e 022764 imul32 temp ,pdata -0x571f 022765 iadd temp ,pdata -0x5720 022766 store 4 ,mem_le_transmit_window -0x5721 022767 bpatchx patch2d_4 ,mem_patch2d -0x5722 022768 fetch 2 ,mem_rx_window_sniff -0x5723 022769 call wait_div_end -0x5724 022770 quotient temp -0x5725 022771 iadd temp ,pdata -0x5726 022772 store 2 ,mem_le_receive_window -0x5727 022773 rtn -: 022775 le_parse_connect_req: -0x5728 022776 bpatchx patch2d_5 ,mem_patch2d -0x5729 022777 fetch 6 ,mem_le_rxbuf + 8 -0x572a 022778 fetcht 6 ,mem_le_lap -0x572b 022779 isub temp ,null -0x572c 022780 nrtn zero -0x572d 022781 call le_scan_check_sender_addr_type -0x572e 022782 copy rega ,pdata -0x572f 022783 store 1 ,mem_le_conn_peer_addr_type -0x5730 022784 fetch 7 ,mem_le_rxbuf + 21 -0x5731 022785 store 7 ,mem_tmp_buffer -0x5732 022786 ifetch 8 ,contr -0x5733 022787 istore 8 ,contw -0x5734 022788 fetch 6 ,mem_le_rxbuf + 2 -0x5735 022789 store 6 ,mem_le_plap -0x5736 022790 increase 6 ,contr -0x5737 022791 ifetch 8 ,contr -0x5738 022792 store 8 ,mem_le_access -0x5739 022793 ifetcht 2 ,contr -0x573a 022794 bpatchx patch2d_6 ,mem_patch2d -0x573b 022795 lshift2 temp ,temp -0x573c 022796 ifetch 2 ,contr -0x573d 022797 lshift2 pdata ,pdata -0x573e 022798 store 2 ,mem_le_tsniff -0x573f 022799 store 4 ,mem_le_anchor -0x5740 022800 isub temp ,pdata -0x5741 022801 add pdata ,-2 ,clke_bt -0x5742 022802 ifetch 9 ,contr -0x5743 022803 store 9 ,mem_le_slave_latency -0x5744 022804 bpatchx patch2d_7 ,mem_patch2d -0x5745 022805 ifetch 1 ,contr -0x5746 022806 rshift4 pdata ,temp -0x5747 022807 rshift temp ,temp -0x5748 022808 storet 1 ,mem_le_peer_sca -0x5749 022809 and_into 0x1f ,pdata -0x574a 022810 store 1 ,mem_le_hop -0x574b 022811 call le_receive_window_size -0x574c 022812 call le_calc_channel_map -0x574d 022813 call le_init_slave -0x574e 022814 call context_new -0x574f 022815 nrtn zero -0x5750 022816 bpatchx patch2e_0 ,mem_patch2e -0x5751 022817 call calc_clke_offset -0x5752 022818 call le_l2cap_reset_signaling_identifier -0x5753 022819 jam bt_evt_le_connected ,mem_fifo_temp -0x5754 022820 call ui_ipc_send_event -0x5755 022821 branch context_save -: 022824 le_init_attlist_search: -0x5756 022825 bpatchx patch2e_1 ,mem_patch2e -0x5757 022826 fetch 2 ,mem_le_search_handle_start -0x5758 022827 iforce regb -0x5759 022828 fetch 2 ,mem_le_search_handle_end -0x575a 022829 iforce regc -0x575b 022830 fetch 2 ,mem_ui_le_uuid_table -0x575c 022831 iforce contr -0x575d 022832 enable user -0x575e 022833 rtn -: 022836 le_att_handle_inrange: -0x575f 022837 ifetch 2 ,contr -0x5760 022838 rtn blank -0x5761 022839 isub regb ,null -0x5762 022840 nrtn positive -0x5763 022841 isub regc ,null -0x5764 022842 rtn zero -0x5765 022843 branch le_att_handle_blank ,positive -0x5766 022844 force 1 ,null -0x5767 022845 rtn -: 022846 le_att_handle_blank: -0x5768 022847 force 0 ,pdata -0x5769 022848 rtn -: 022852 le_att_get_handle_ptr: -0x576a 022853 call le_att_get_handle_ptr2 -0x576b 022854 branch le_att_get_handle_ptr_found ,zero -0x576c 022855 rtn -: 022857 le_att_get_handle_ptr2: -0x576d 022858 bpatchx patch2e_2 ,mem_patch2e -0x576e 022859 fetch 2 ,mem_ui_le_uuid_table -0x576f 022860 iforce contr -: 022861 le_att_get_handle_loop1: -0x5770 022862 ifetch 2 ,contr -0x5771 022863 rtn blank -0x5772 022864 isub temp ,null -0x5773 022865 rtn zero -0x5774 022866 ifetch 1 ,contr -0x5775 022867 iadd contr ,contr -0x5776 022868 ifetch 1 ,contr -0x5777 022869 iadd contr ,contr -0x5778 022870 branch le_att_get_handle_loop1 -: 022871 le_att_get_handle_ptr_found: -0x5779 022872 ifetch 1 ,contr -0x577a 022873 iadd contr ,contr -0x577b 022874 rtn -: 022878 le_att_get_short_uuid_ptr: -0x577c 022879 bpatchx patch2e_3 ,mem_patch2e -0x577d 022880 fetch 2 ,mem_ui_le_uuid_table -0x577e 022881 iforce contr -: 022882 le_att_get_short_uuid_loop: -0x577f 022883 ifetch 2 ,contr -0x5780 022884 rtn blank -0x5781 022885 ifetch 1 ,contr -0x5782 022886 iadd contr ,contr -0x5783 022887 increase -2 ,contr -0x5784 022888 ifetch 2 ,contr -0x5785 022889 isub temp ,null -0x5786 022890 rtn zero -0x5787 022891 ifetch 1 ,contr -0x5788 022892 iadd contr ,contr -0x5789 022893 branch le_att_get_short_uuid_loop -: 022897 le_att_get_handle_info_from_ptr: -0x578a 022898 fetch 2 ,mem_le_cur_attlist_start_ptr -0x578b 022899 branch le_att_get_handle_info_fast -: 022901 le_att_get_handle_info: -0x578c 022902 bpatchx patch2e_4 ,mem_patch2e -0x578d 022903 fetch 2 ,mem_ui_le_uuid_table -: 022904 le_att_get_handle_info_fast: -0x578e 022905 iforce contr -0x578f 022906 copy temp ,rega -: 022907 le_att_get_handle_loop: -0x5790 022908 ifetch 2 ,contr -0x5791 022909 branch le_att_unfind_handle ,blank -0x5792 022910 isub rega ,null -0x5793 022911 branch le_att_finded_handle ,zero -0x5794 022912 ifetch 1 ,contr -0x5795 022913 iadd contr ,contr -0x5796 022914 ifetch 1 ,contr -0x5797 022915 iadd contr ,contr -0x5798 022916 branch le_att_get_handle_loop -: 022917 le_att_unfind_handle: -0x5799 022918 branch disable_blank -: 022920 le_att_finded_handle: -0x579a 022921 ifetch 1 ,contr -0x579b 022922 store 1 ,mem_le_cur_uuid_length -0x579c 022923 copy pdata ,loopcnt -0x579d 022924 arg mem_le_cur_uuid ,contw -0x579e 022925 call memcpy_fast -0x579f 022926 ifetch 1 ,contr -0x57a0 022927 store 1 ,mem_le_curr_att_len -0x57a1 022928 call store_contr -0x57a2 022929 branch enable_blank -: 022932 le_modified_name: -0x57a3 022933 bpatchx patch2e_5 ,mem_patch2e -0x57a4 022934 call le_modified_name_att_list -0x57a5 022935 branch le_modified_name_adv -: 022937 le_modified_name_att_list: -0x57a6 022938 arg uuid_chrctr_device_name ,temp -0x57a7 022939 call le_att_get_short_uuid_ptr -0x57a8 022940 rtn blank -0x57a9 022941 ifetch 1 ,contr -0x57aa 022942 copy contr ,contw -0x57ab 022943 fetcht 1 ,mem_le_name_len -0x57ac 022944 copy temp ,loopcnt -0x57ad 022945 isub temp ,null -0x57ae 022946 nbranch le_name_length_longer_than_att ,positive -0x57af 022947 isub temp ,temp -0x57b0 022948 arg mem_le_name ,contr -0x57b1 022949 call memcpy -0x57b2 022950 copy temp ,loopcnt -0x57b3 022951 ncall memcpy_empty ,zero -0x57b4 022952 rtn -: 022953 le_name_length_longer_than_att: -0x57b5 022954 copy pdata ,loopcnt -0x57b6 022955 arg mem_le_name ,contr -0x57b7 022956 branch memcpy_fast -: 022959 le_modified_name_adv: -0x57b8 022960 arg mem_le_adv_data_len + 32 ,regc -0x57b9 022961 arg mem_le_adv_data ,rega -0x57ba 022962 call le_modified_name_adv_and_scan -0x57bb 022963 setarg 0 -0x57bc 022964 setflag user ,0 ,pdata -0x57bd 022965 store 1 ,mem_pdatatemp -0x57be 022966 arg mem_le_scan_data_len + 32 ,regc -0x57bf 022967 arg mem_le_scan_data ,rega -0x57c0 022968 call le_modified_name_adv_and_scan -0x57c1 022969 rtn user -0x57c2 022970 fetch 1 ,mem_pdatatemp -0x57c3 022971 branch assert ,blank -0x57c4 022972 rtn -: 022975 le_modified_name_adv_and_scan: -0x57c5 022976 bpatchx patch2e_6 ,mem_patch2e -0x57c6 022977 call enable_user -0x57c7 022978 call clear_temp_block -0x57c8 022979 arg 0 ,regb -0x57c9 022980 arg mem_le_data_temp ,contw -0x57ca 022981 call le_modified_name_adv_loop -0x57cb 022982 fetch 1 ,mem_le_name_len -0x57cc 022983 add pdata ,1 ,temp -0x57cd 022984 iadd regb ,rega -0x57ce 022985 increase 2 ,rega -0x57cf 022986 sub rega ,0x1f ,null -0x57d0 022987 nbranch le_modified_name_adv_and_scan_name_overflow ,positive -0x57d1 022988 istoret 1 ,contw -0x57d2 022989 arg gap_adtype_local_name_complete ,temp -0x57d3 022990 istoret 1 ,contw -0x57d4 022991 iforce loopcnt -0x57d5 022992 call memcpy_fast -0x57d6 022993 copy rega ,regb -: 022994 le_modified_name_adv_and_scan_store_data: -0x57d7 022995 deposit regb -0x57d8 022996 store 1 ,mem_le_data_len_temp -0x57d9 022997 arg mem_le_data_len_temp ,contr -0x57da 022998 setarg -32 -0x57db 022999 iadd regc ,contw -0x57dc 023000 branch memcpy32 -: 023002 le_modified_name_adv_and_scan_name_overflow: -0x57dd 023003 call disable_user -0x57de 023004 branch le_modified_name_adv_and_scan_store_data -: 023006 le_modified_name_adv_loop: -0x57df 023007 ifetch 1 ,rega -0x57e0 023008 rtn blank -0x57e1 023009 pincrease 1 -0x57e2 023010 ifetcht 1 ,contr -0x57e3 023011 sub temp ,gap_adtype_local_name_complete ,null -0x57e4 023012 branch le_modified_name_adv_found_name ,zero -0x57e5 023013 iadd regb ,regb -0x57e6 023014 copy rega ,contr -0x57e7 023015 iforce loopcnt -0x57e8 023016 call memcpy_fast -0x57e9 023017 copy contr ,rega -: 023018 le_modified_name_adv_loop2: -0x57ea 023019 deposit rega -0x57eb 023020 isub regc ,null -0x57ec 023021 rtn positive -0x57ed 023022 branch le_modified_name_adv_loop -: 023024 le_modified_name_adv_found_name: -0x57ee 023025 iadd rega ,rega -0x57ef 023026 branch le_modified_name_adv_loop2 -: 023029 memcpy_empty: -0x57f0 023030 setarg space -0x57f1 023031 istore 1 ,contw -0x57f2 023032 loop memcpy_empty -0x57f3 023033 rtn -: 023036 le_lpm_set_mult: -0x57f4 023037 bpatchx patch2e_7 ,mem_patch2e -0x57f5 023038 disable wake -0x57f6 023039 branch le_lpm_set_mult_attempt ,attempt -0x57f7 023040 nbranch le_lpm_lost ,match -: 023041 le_lpm_set_mult_attempt: -0x57f8 023042 call lpm_match -0x57f9 023043 fetch 2 ,mem_rx_window_sniff -0x57fa 023044 store 2 ,mem_le_receive_window -0x57fb 023046 nbranch lpm_mult_short ,match -0x57fc 023047 bmark1 mark_old_packet ,lpm_mult_short -0x57fd 023049 fetch 1 ,mem_le_packet_size -0x57fe 023050 nbranch lpm_mult_short ,blank -0x57ff 023051 fetch 1 ,mem_le_txlen -0x5800 023052 nbranch lpm_mult_short ,blank -0x5801 023054 fetch 1 ,mem_le_configuration -0x5802 023055 bbit1 bit_ble_short_mult ,lpm_mult_short -0x5803 023057 fetch 1 ,mem_le_state -0x5804 023058 bbit1 lestate_update_param ,lpm_mult_short -0x5805 023059 branch lpm_mult_wait_timeout -: 023061 le_lpm_lost: -0x5806 023062 fetcht 2 ,mem_rx_window_sniff -0x5807 023063 rshift temp ,temp -0x5808 023064 fetch 2 ,mem_le_receive_window -0x5809 023065 iadd temp ,pdata -0x580a 023066 store 2 ,mem_le_receive_window -0x580b 023067 branch lpm_lost -: 023070 le_set_config_fixed_tk: -0x580c 023071 arg bit_ble_passkey_fixed_key ,queue -0x580d 023072 branch le_set_config -: 023074 le_clr_config_fixed_tk: -0x580e 023075 arg bit_ble_passkey_fixed_key ,queue -0x580f 023076 branch le_clr_config -: 023078 le_set_config_fixed_ltk: -0x5810 023079 arg bit_ble_pairing_fixed_ltk ,queue -0x5811 023080 branch le_set_config -: 023082 le_clr_config_fixed_ltk: -0x5812 023083 arg bit_ble_pairing_fixed_ltk ,queue -0x5813 023084 branch le_clr_config -: 023086 le_set_config_more_data: -0x5814 023087 arg bit_ble_transmit_packet_by_md ,queue -0x5815 023088 branch le_set_config -: 023090 le_clr_config_more_data: -0x5816 023091 arg bit_ble_transmit_packet_by_md ,queue -0x5817 023092 branch le_clr_config -: 023094 le_set_config_read_authentication: -0x5818 023095 arg bit_ble_read_auth ,queue -0x5819 023096 branch le_set_config -: 023098 le_clr_config_read_authentication: -0x581a 023099 arg bit_ble_read_auth ,queue -0x581b 023100 branch le_clr_config -: 023102 le_set_config_write_authentication: -0x581c 023103 arg bit_ble_write_auth ,queue -0x581d 023104 branch le_set_config -: 023106 le_clr_config_write_authentication: -0x581e 023107 arg bit_ble_write_auth ,queue -0x581f 023108 branch le_clr_config -: 023110 le_set_config_short_mult: -0x5820 023111 arg bit_ble_short_mult ,queue -0x5821 023112 branch le_set_config -: 023114 le_clr_config_short_mult: -0x5822 023115 arg bit_ble_short_mult ,queue -0x5823 023116 branch le_clr_config -: 023119 le_set_config: -0x5824 023120 fetch 1 ,mem_le_configuration -0x5825 023121 qset1 pdata -0x5826 023122 store 1 ,mem_le_configuration -0x5827 023123 rtn -: 023125 le_clr_config: -0x5828 023126 fetch 1 ,mem_le_configuration -0x5829 023127 qset0 pdata -0x582a 023128 store 1 ,mem_le_configuration -0x582b 023129 rtn -: 023131 le_set_fixed_ltk: -0x582c 023132 setarg 0x112233 -0x582d 023133 store 3 ,mem_le_fixed_ltk -0x582e 023134 setarg 0x445566 -0x582f 023135 istore 3 ,contw -0x5830 023136 setarg 0x778899 -0x5831 023137 istore 3 ,contw -0x5832 023138 setarg 0x001122 -0x5833 023139 istore 3 ,contw -0x5834 023140 setarg 0x334455 -0x5835 023141 istore 3 ,contw -0x5836 023142 setarg 0x66 -0x5837 023143 istore 1 ,contw -0x5838 023144 rtn -: 023147 le_set_justwork: -0x5839 023148 setarg 0x01000302 -0x583a 023149 store 4 ,mem_le_pres -0x583b 023150 setarg 0x010010 -0x583c 023151 store 3 ,mem_le_pres_max_keysize -0x583d 023152 jam 1 ,mem_le_pairing_mode -0x583e 023153 rtn -: 023157 le_fifo_malloc_tx_empty: -0x583f 023158 arg 0 ,rega -0x5840 023159 arg llid_empty ,type -0x5841 023160 branch le_fifo_malloc_tx -: 023164 le_fifo_malloc_tx_ll: -0x5842 023165 arg llid_le_ll ,type -0x5843 023166 call le_fifo_malloc_tx -0x5844 023167 copy regb ,pdata -0x5845 023168 istore 1 ,contw -0x5846 023169 rtn -: 023173 le_fifo_malloc_tx_l2cap: -0x5847 023174 force llid_l2cap_start ,type -0x5848 023175 increase 4 ,rega -0x5849 023176 call le_fifo_malloc_tx -0x584a 023177 increase -4 ,rega -0x584b 023178 copy rega ,pdata -0x584c 023179 istore 2 ,contw -0x584d 023180 copy regb ,pdata -0x584e 023181 istore 2 ,contw -0x584f 023182 rtn -: 023186 le_fifo_malloc_tx: -0x5850 023187 sub rega ,240 ,null -0x5851 023188 nbranch assert ,positive -0x5852 023189 fetch 1 ,mem_le_tx_buff_used -0x5853 023190 arg 1 ,temp -0x5854 023191 arg le_tx_buff_count ,loopcnt -: 023192 le_fifo_malloc_tx_loop: -0x5855 023193 iand temp ,null -0x5856 023194 branch le_fifo_malloc_tx_got_empty ,zero -0x5857 023195 lshift temp ,temp -0x5858 023196 loop le_fifo_malloc_tx_loop -0x5859 023197 branch assert -: 023198 le_fifo_malloc_tx_got_empty: -0x585a 023199 ixor temp ,pdata -0x585b 023200 store 1 ,mem_le_tx_buff_used -0x585c 023201 sub loopcnt ,le_tx_buff_count ,pdata -0x585d 023202 lshift4 pdata ,pdata -0x585e 023203 lshift4 pdata ,pdata -0x585f 023204 arg mem_le_tx_buffer0 ,temp -0x5860 023205 iadd temp ,temp -: 023206 le_fifo_tx_find_empty_ptr: -0x5861 023207 arg 0 ,loopcnt -0x5862 023208 arg mem_le_tx_ptr0 ,contr -: 023209 le_fifo_tx_find_empty_ptr_loop: -0x5863 023210 ifetch 2 ,contr -0x5864 023211 branch le_fifo_tx_found_empty_ptr ,blank -0x5865 023212 copy loopcnt ,pdata -0x5866 023213 increase 1 ,loopcnt -0x5867 023214 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop -0x5868 023215 branch assert -: 023218 le_fifo_tx_found_empty_ptr: -0x5869 023219 increase -2 ,contr -0x586a 023220 istoret 2 ,contr -0x586b 023221 copy temp ,contw -0x586c 023222 copy rega ,pdata -0x586d 023223 istore 1 ,contw -0x586e 023224 setarg 0 -0x586f 023225 istore 1 ,contw -0x5870 023226 copy type ,pdata -0x5871 023227 istore 1 ,contw -0x5872 023228 rtn -: 023232 le_fifo_get_first_tx_ptr: -0x5873 023233 fetch 2 ,mem_le_tx_ptr0 -0x5874 023234 copy pdata ,contr -0x5875 023235 rtn -: 023237 le_fifo_get_second_tx_ptr: -0x5876 023238 fetch 2 ,mem_le_tx_ptr1 -0x5877 023239 copy pdata ,contr -0x5878 023240 rtn -: 023242 le_fifo_get_last_tx_ptr: -0x5879 023243 call le_fifo_get_last_tx_ptr0 -0x587a 023244 copy pdata ,contr -0x587b 023245 rtn -: 023246 le_fifo_get_last_tx_ptr0: -0x587c 023247 fetch 2 ,mem_le_tx_ptr3 -0x587d 023248 nrtn blank -0x587e 023249 fetch 2 ,mem_le_tx_ptr2 -0x587f 023250 nrtn blank -0x5880 023251 fetch 2 ,mem_le_tx_ptr1 -0x5881 023252 nrtn blank -0x5882 023253 fetch 2 ,mem_le_tx_ptr0 -0x5883 023254 rtn -: 023256 le_fifo_get_first_l2cap_ptr: -0x5884 023257 call le_fifo_get_first_tx_ptr -0x5885 023258 increase 3 ,contr -0x5886 023259 rtn -: 023261 le_fifo_get_first_att_ptr: -0x5887 023262 call le_fifo_get_first_tx_ptr -0x5888 023263 increase 7 ,contr -0x5889 023264 rtn -: 023266 le_fifo_get_last_att_ptr: -0x588a 023267 call le_fifo_get_last_tx_ptr -0x588b 023268 increase 7 ,contr -0x588c 023269 rtn -: 023271 le_fifo_get_last_l2cap_ptr: -0x588d 023272 call le_fifo_get_last_tx_ptr -0x588e 023273 increase 3 ,contr -0x588f 023274 rtn -: 023278 le_fifo_check_full: -0x5890 023279 fetch 2 ,mem_le_tx_ptr3 -0x5891 023280 rtn -: 023283 le_fifo_check_nearly_full: -0x5892 023284 fetch 2 ,mem_le_tx_ptr2 -0x5893 023285 rtn -: 023288 le_fifo_check_empty: -0x5894 023289 fetch 2 ,mem_le_tx_ptr0 -0x5895 023290 rtn -: 023293 le_fifo_release_first_node: -0x5896 023294 fetch 2 ,mem_le_tx_ptr0 -0x5897 023295 arg mem_le_tx_buffer0 ,temp -0x5898 023296 isub temp ,pdata -0x5899 023297 rshift4 pdata ,pdata -0x589a 023298 rshift4 pdata ,queue -0x589b 023299 fetch 1 ,mem_le_tx_buff_used -0x589c 023300 qset0 pdata -0x589d 023301 store 1 ,mem_le_tx_buff_used -0x589e 023302 arg 0 ,loopcnt -: 023303 le_fifo_release_first_node_loop: -0x589f 023304 lshift loopcnt ,pdata -0x58a0 023305 arg mem_le_tx_ptr1 ,temp -0x58a1 023306 iadd temp ,temp -0x58a2 023307 ifetch 2 ,temp -0x58a3 023308 increase -2 ,temp -0x58a4 023309 istore 2 ,temp -0x58a5 023310 copy loopcnt ,pdata -0x58a6 023311 increase 1 ,loopcnt -0x58a7 023312 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop -0x58a8 023313 setarg 0 -0x58a9 023314 istore 2 ,temp -0x58aa 023315 rtn -: 023321 le_parse_att: -0x58ab 023322 ifetch 3 ,contr -0x58ac 023323 store 3 ,mem_le_att_opcode -0x58ad 023324 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request -0x58ae 023325 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response -0x58af 023326 beq attop_find_information_request ,le_parse_att_find_information_request -0x58b0 023327 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request -0x58b1 023328 beq attop_read_by_type_request ,le_parse_att_read_by_type_request -0x58b2 023329 beq attop_read_request ,le_parse_att_read_request -0x58b3 023330 beq attop_read_blob_request ,le_parse_att_read_blob_request -0x58b4 023331 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request -0x58b5 023332 beq attop_write_request ,le_parse_att_write_request -0x58b6 023333 beq attop_prepare_write_request ,le_parse_att_prepare_write_request -0x58b7 023334 beq attop_execute_write_request ,le_parse_att_execute_write_request -0x58b8 023335 beq attop_write_command ,le_parse_att_write_command -0x58b9 023336 rtn -: 023339 le_send_att_exchange_mtu_requset: -0x58ba 023340 force 3 ,rega -0x58bb 023341 call le_fifo_malloc_tx_l2cap_gatt -0x58bc 023342 setarg attop_exchange_mtu_request -0x58bd 023343 istore 1 ,contw -0x58be 023344 fetch 2 ,mem_le_local_mtu -0x58bf 023345 istore 2 ,contw -0x58c0 023346 rtn -: 023349 le_parse_att_exchange_mtu_request: -0x58c1 023350 call le_parse_att_exchange_mtu_response -: 023351 le_send_att_exchange_mtu_response: -0x58c2 023352 force 3 ,rega -0x58c3 023353 call le_fifo_malloc_tx_l2cap_gatt -0x58c4 023354 setarg attop_exchange_mtu_response -0x58c5 023355 istore 1 ,contw -0x58c6 023356 fetch 2 ,mem_le_local_mtu -0x58c7 023357 istore 2 ,contw -0x58c8 023358 rtn -: 023360 le_parse_att_exchange_mtu_response: -0x58c9 023361 rshift8 pdata ,pdata -0x58ca 023362 store 2 ,mem_le_remote_mtu -0x58cb 023363 rtn -: 023365 le_parse_att_find_information_request: -0x58cc 023366 call le_get_search_handle_start_end_common -0x58cd 023367 call enable_user -0x58ce 023368 branch le_send_att_find_information_response -: 023370 le_send_att_find_information_response: -0x58cf 023371 arg 3 ,timeup -0x58d0 023372 call le_init_attlist_search -: 023373 le_send_att_find_information_res_loop: -0x58d1 023374 call le_att_handle_inrange -0x58d2 023375 branch le_send_att_find_information_res_end ,blank -0x58d3 023376 nbranch le_send_att_find_information_res_next ,positive -0x58d4 023377 increase -2 ,contr -0x58d5 023378 call store_contr -0x58d6 023379 call get_contw -0x58d7 023380 nbranch le_send_att_find_information_res_store_info ,user -0x58d8 023381 call push_stack_rega_b_c -0x58d9 023382 call disable_user -0x58da 023383 force 20 ,rega -0x58db 023384 call le_fifo_malloc_tx_l2cap_gatt -0x58dc 023385 call pop_stack_rega_b_c -0x58dd 023386 setarg attop_find_information_response -0x58de 023387 istore 1 ,contw -0x58df 023388 setarg uuid_size_16bit -0x58e0 023389 istore 1 ,contw -: 023390 le_send_att_find_information_res_store_info: -0x58e1 023391 call get_contr -0x58e2 023392 ifetch 2 ,contr -0x58e3 023393 istore 2 ,contw -0x58e4 023394 ifetch 1 ,contr -0x58e5 023395 copy pdata ,loopcnt -0x58e6 023396 call memcpy -0x58e7 023397 call store_contw -0x58e8 023398 increase -1 ,timeup -0x58e9 023399 branch le_send_att_find_information_res_end ,zero -: 023400 le_send_att_find_information_res_cont: -0x58ea 023401 ifetch 1 ,contr -0x58eb 023402 iadd contr ,contr -0x58ec 023403 branch le_send_att_find_information_res_loop -: 023404 le_send_att_find_information_res_next: -0x58ed 023405 ifetch 1 ,contr -0x58ee 023406 iadd contr ,contr -0x58ef 023407 branch le_send_att_find_information_res_cont -: 023408 le_send_att_find_information_res_end: -0x58f0 023409 branch le_send_att_error_response_notfound ,user -0x58f1 023410 branch le_send_auto_len_by_mem -: 023413 le_parse_att_find_by_type_value_request: -0x58f2 023414 call le_get_search_handle_start_end_common -0x58f3 023415 ifetch 2 ,contr -0x58f4 023416 store 2 ,mem_le_search_uuid -0x58f5 023417 call store_contr -0x58f6 023418 arg mem_le_search_att_type_length ,contw -0x58f7 023419 fetch 2 ,mem_le_l2cap_size -0x58f8 023420 increase -7 ,pdata -0x58f9 023421 call le_get_search_common2 -0x58fa 023422 branch le_send_att_find_by_type_value_response -: 023425 le_start_end_handle_check_1: -0x58fb 023426 disable user -0x58fc 023427 fetcht 2 ,mem_le_search_handle_start -0x58fd 023428 fetch 2 ,mem_le_search_handle_end -0x58fe 023429 isub temp ,null -0x58ff 023430 nbranch le_start_end_handle_check_1_fail ,positive -0x5900 023431 deposit temp -0x5901 023432 rtnne 0 -: 023433 le_start_end_handle_check_1_fail: -0x5902 023434 enable user -0x5903 023435 jam att_err_invalid_handle ,mem_le_err_code -0x5904 023436 branch le_send_att_error_response -: 023439 le_send_att_find_by_type_value_response: -0x5905 023440 call le_start_end_handle_check_1 -0x5906 023441 rtn user -0x5907 023442 fetcht 2 ,mem_le_search_uuid -0x5908 023443 setarg uuid_gatt_primary_service -0x5909 023444 isub temp ,null -0x590a 023445 branch le_send_att_find_by_type_value_res_primary ,zero -0x590b 023446 branch le_send_att_error_response_notfound -: 023449 le_send_att_find_by_type_value_res_primary: -0x590c 023450 jam le_find_by_type_val_res_not_found ,mem_le_search_res -0x590d 023451 fetcht 2 ,mem_le_search_handle_start -0x590e 023452 storet 2 ,mem_temp -0x590f 023453 call le_att_get_handle_info -0x5910 023454 nbranch le_send_att_error_response_notfound ,blank -: 023455 le_send_att_find_primary_search_loop: -0x5911 023456 fetcht 2 ,mem_temp -0x5912 023457 call le_att_get_handle_info -0x5913 023458 nbranch le_send_att_error_response_notfound2 ,blank -0x5914 023459 copy contr ,rega -0x5915 023460 fetch 1 ,mem_le_curr_att_len -0x5916 023461 copy pdata ,loopcnt -0x5917 023462 fetcht 1 ,mem_le_search_att_type_length -0x5918 023463 isub temp ,null -0x5919 023464 nbranch le_send_att_find_primary_search_loop1 ,zero -0x591a 023465 arg mem_le_search_att_type ,regb -0x591b 023466 call string_compare -0x591c 023468 branch le_send_att_find_primary_search_end_start_handle_found ,zero -0x591d 023470 fetch 2 ,mem_le_cur_uuid -0x591e 023471 fetcht 2 ,mem_le_search_uuid -0x591f 023472 isub temp ,null -0x5920 023473 branch le_send_att_find_primary_search_end_ending_handle_found ,zero -: 023474 le_send_att_find_primary_search_loop1: -0x5921 023475 fetch 2 ,mem_temp -0x5922 023476 increase 1 ,pdata -0x5923 023477 store 2 ,mem_temp -0x5924 023478 branch le_send_att_find_primary_search_loop -: 023480 le_send_att_error_response_notfound2: -0x5925 023481 fetch 1 ,mem_le_search_res -0x5926 023482 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found -0x5927 023483 branch le_send_att_error_response_notfound -: 023486 le_send_att_find_primary_search_end_start_handle_found: -0x5928 023487 fetch 2 ,mem_le_cur_uuid -0x5929 023488 fetcht 2 ,mem_le_search_uuid -0x592a 023489 isub temp ,null -0x592b 023490 nbranch le_send_att_find_primary_search_loop1 ,zero -0x592c 023491 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res -0x592d 023493 fetcht 2 ,mem_temp -0x592e 023494 storet 2 ,mem_le_cur_handle_start -0x592f 023495 branch le_send_att_find_primary_search_loop1 -: 023497 le_send_att_find_primary_search_end_ending_handle_found: -0x5930 023498 fetch 1 ,mem_le_search_res -0x5931 023499 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 -0x5932 023500 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res -0x5933 023501 fetcht 2 ,mem_temp -0x5934 023502 increase -1 ,temp -0x5935 023503 storet 2 ,mem_le_cur_handle_end -: 023505 le_send_att_find_primary_search_end: -0x5936 023506 arg 5 ,rega -0x5937 023507 call le_fifo_malloc_tx_l2cap_gatt -0x5938 023508 setarg attop_find_by_type_value_response -0x5939 023509 istore 1 ,contw -0x593a 023510 fetch 2 ,mem_le_cur_handle_start -0x593b 023511 istore 2 ,contw -0x593c 023512 fetch 2 ,mem_le_cur_handle_end -0x593d 023513 istore 2 ,contw -0x593e 023514 rtn -: 023518 le_parse_att_read_by_type_request: -0x593f 023519 call le_get_search_handle_start_end_common -0x5940 023520 call le_get_search_att_uuid -0x5941 023521 branch le_send_att_read_by_type_response -: 023523 le_send_att_read_by_type_response: -0x5942 023524 fetcht 2 ,mem_le_search_handle_start -0x5943 023525 storet 2 ,mem_temp -0x5944 023526 call le_init_attlist_search -0x5945 023527 call le_att_get_handle_ptr2 -0x5946 023528 increase -2 ,contr -0x5947 023529 copy contr ,pdata -0x5948 023530 store 2 ,mem_le_cur_attlist_start_ptr -0x5949 023532 fetcht 2 ,mem_le_search_uuid -0x594a 023533 setarg uuid_chrctr_device_name -0x594b 023534 isub temp ,null -0x594c 023535 branch le_send_att_read_by_type_res_device_name ,zero -0x594d 023536 setarg uuid_gatt_characteristic -0x594e 023537 isub temp ,null -0x594f 023538 nbranch le_send_att_read_by_type_res_not_characteristic ,zero -0x5950 023539 arg 2 ,timeup -: 023540 le_send_att_read_by_type_response_loop: -0x5951 023541 call le_att_check_handle_end -0x5952 023542 nbranch le_send_att_read_by_type_response_end ,positive -0x5953 023543 fetcht 2 ,mem_temp -0x5954 023544 call le_att_get_handle_info_from_ptr -0x5955 023545 beq 1 ,le_send_att_read_by_type_response_end -0x5956 023546 call le_att_same_uuid -0x5957 023547 nbranch le_send_att_read_by_type_response_next_handle ,zero -0x5958 023548 nbranch le_send_att_read_by_type_res_found_next ,user -0x5959 023549 disable user -0x595a 023550 arg 20 ,rega -0x595b 023551 call le_fifo_malloc_tx_l2cap_gatt -0x595c 023552 setarg attop_read_by_type_response -0x595d 023553 istore 1 ,contw -0x595e 023554 copy contw ,alarm -0x595f 023555 increase 1 ,contw -0x5960 023557 call le_send_att_read_by_type_write_properties -0x5961 023558 call le_att_next_handle -0x5962 023559 call le_att_get_handle_info_from_ptr -0x5963 023560 call le_send_att_read_by_type_write_uuid -0x5964 023561 fetch 1 ,mem_le_cur_uuid_length -0x5965 023562 increase 5 ,pdata -0x5966 023563 istore 1 ,alarm -0x5967 023564 fetch 1 ,mem_le_cur_uuid_length -0x5968 023565 beq 16 ,le_send_att_read_by_type_response_end -0x5969 023566 increase -1 ,timeup -0x596a 023567 branch le_send_att_read_by_type_response_end ,zero -: 023568 le_send_att_read_by_type_response_next_handle: -0x596b 023569 call le_att_next_handle -0x596c 023570 branch le_send_att_read_by_type_response_loop -: 023571 le_send_att_read_by_type_response_end: -0x596d 023572 branch le_send_att_error_response_notfound ,user -0x596e 023573 branch le_send_auto_len_by_mem -: 023575 le_send_att_read_by_type_res_found_next: -0x596f 023576 call le_store_att_record -0x5970 023577 call le_att_next_handle -0x5971 023578 call le_att_get_handle_info_from_ptr -0x5972 023579 fetch 1 ,mem_le_cur_uuid_length -0x5973 023580 beq 16 ,le_send_att_read_by_type_response_end -0x5974 023582 call get_contw -0x5975 023583 fetch 2 ,mem_temp -0x5976 023584 increase -1 ,pdata -0x5977 023585 istore 2 ,contw -0x5978 023586 call le_write_att_record_common -0x5979 023587 call le_send_att_read_by_type_write_uuid -0x597a 023588 increase -1 ,timeup -0x597b 023589 branch le_send_att_read_by_type_response_end ,zero -0x597c 023590 branch le_send_att_read_by_type_response_next_handle -: 023593 le_send_att_read_by_type_write_properties: -0x597d 023594 fetch 2 ,mem_temp -0x597e 023595 istore 2 ,contw -0x597f 023597 fetch 1 ,mem_le_curr_att_len -0x5980 023598 copy pdata ,loopcnt -0x5981 023599 call get_contr -0x5982 023600 call memcpy_fast -0x5983 023601 branch store_contw -: 023602 le_send_att_read_by_type_write_uuid: -0x5984 023603 call get_contw -0x5985 023604 fetch 2 ,mem_temp -0x5986 023605 istore 2 ,contw -0x5987 023606 call store_contw -0x5988 023607 fetch 1 ,mem_le_cur_uuid_length -0x5989 023608 copy pdata ,loopcnt -0x598a 023609 call get_contw -0x598b 023610 call get_contr -0x598c 023611 isub loopcnt ,contr -0x598d 023612 increase -1 ,contr -0x598e 023613 call memcpy_fast -0x598f 023614 branch store_contw -: 023618 le_send_att_read_by_type_res_not_characteristic: -0x5990 023619 fetcht 2 ,mem_le_search_handle_start -0x5991 023620 storet 2 ,mem_temp -: 023621 le_send_att_read_by_type_res_not_char_loop: -0x5992 023622 call le_att_check_handle_end -0x5993 023623 nbranch le_send_att_error_response_notfound ,positive -0x5994 023624 call le_att_get_handle_info_from_ptr -0x5995 023625 beq 1 ,le_send_att_error_response_notfound -0x5996 023626 call le_att_same_uuid -0x5997 023627 nbranch le_send_att_read_by_type_res_not_char_next ,zero -: 023629 le_send_att_read_by_type_res_not_char_common: -0x5998 023630 arg 20 ,rega -0x5999 023631 call le_fifo_malloc_tx_l2cap_gatt -0x599a 023632 setarg attop_read_by_type_response -0x599b 023633 istore 1 ,contw -0x599c 023634 fetch 1 ,mem_le_curr_att_len -0x599d 023635 copy pdata ,loopcnt -0x599e 023636 increase 2 ,pdata -0x599f 023637 istore 1 ,contw -0x59a0 023638 fetch 2 ,mem_temp -0x59a1 023639 istore 2 ,contw -0x59a2 023640 call get_contr -0x59a3 023641 call memcpy_fast -0x59a4 023642 call store_contw -0x59a5 023643 branch le_send_auto_len_by_mem -: 023645 le_send_att_read_by_type_res_not_char_next: -0x59a6 023646 call le_att_next_handle -0x59a7 023647 branch le_send_att_read_by_type_res_not_char_loop -: 023650 le_send_att_read_by_type_res_device_name: -0x59a8 023651 arg uuid_chrctr_device_name ,temp -0x59a9 023652 call le_att_get_short_uuid_ptr -0x59aa 023653 rtn blank -0x59ab 023654 increase -5 ,contr -0x59ac 023655 ifetch 2 ,contr -0x59ad 023656 store 2 ,mem_temp -0x59ae 023657 arg 20 ,rega -0x59af 023658 call le_fifo_malloc_tx_l2cap_gatt -0x59b0 023659 setarg attop_read_by_type_response -0x59b1 023660 istore 1 ,contw -0x59b2 023661 fetch 1 ,mem_le_name_len -0x59b3 023662 copy pdata ,loopcnt -0x59b4 023663 increase 2 ,pdata -0x59b5 023664 istore 1 ,contw -0x59b6 023665 fetch 2 ,mem_temp -0x59b7 023666 istore 2 ,contw -0x59b8 023667 arg mem_le_name ,contr -0x59b9 023668 call memcpy_fast -0x59ba 023669 call store_contw -0x59bb 023670 branch le_send_auto_len_by_mem -: 023674 le_parse_att_read_request: -0x59bc 023675 fetcht 2 ,mem_le_att_handle -0x59bd 023676 fetch 1 ,mem_le_configuration -0x59be 023677 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth -: 023679 le_send_att_read_response: -0x59bf 023680 call le_att_get_handle_ptr -0x59c0 023681 branch le_send_att_error_response_notfound ,blank -0x59c1 023682 increase -2 ,contr -0x59c2 023683 ifetch 2 ,contr -0x59c3 023684 arg uuid_chrctr_device_name ,temp -0x59c4 023685 isub temp ,null -0x59c5 023686 branch le_send_device_name ,zero -0x59c6 023687 ifetch 1 ,contr -0x59c7 023688 sub pdata ,22 ,null -0x59c8 023689 branch le_send_att_read_response_less ,positive -0x59c9 023690 force 22 ,pdata -: 023691 le_send_att_read_response_less: -0x59ca 023692 copy pdata ,regc -0x59cb 023693 call store_contr -0x59cc 023694 add regc ,1 ,rega -0x59cd 023695 call le_fifo_malloc_tx_l2cap_gatt -0x59ce 023696 setarg attop_read_response -0x59cf 023697 istore 1 ,contw -0x59d0 023698 copy regc ,loopcnt -0x59d1 023699 call get_contr -0x59d2 023700 branch memcpy -: 023702 le_send_device_name: -0x59d3 023703 call store_contr -0x59d4 023704 fetch 1 ,mem_le_name_len -0x59d5 023705 add pdata ,1 ,rega -0x59d6 023706 call le_fifo_malloc_tx_l2cap_gatt -0x59d7 023707 setarg attop_read_response -0x59d8 023708 istore 1 ,contw -0x59d9 023709 fetch 1 ,mem_le_name_len -0x59da 023710 copy pdata ,loopcnt -0x59db 023711 arg mem_le_name ,contr -0x59dc 023712 branch memcpy -: 023715 le_send_att_read_response_check_auth: -0x59dd 023716 fetch 2 ,mem_le_pairing_handle -0x59de 023717 isub temp ,null -0x59df 023718 nbranch le_send_att_read_response ,zero -0x59e0 023720 call le_check_encrypt_state -0x59e1 023721 nbranch le_send_att_read_response ,user -0x59e2 023722 jam att_err_insufficient_authentication ,mem_le_err_code -0x59e3 023723 branch le_send_att_error_response -: 023726 le_parse_att_read_blob_request: -0x59e4 023727 ifetch 2 ,contr -0x59e5 023728 store 2 ,mem_le_att_offset -: 023729 le_send_att_read_blob_response: -0x59e6 023730 arg 20 ,rega -0x59e7 023731 call le_fifo_malloc_tx_l2cap_gatt -0x59e8 023732 setarg attop_read_blob_response -0x59e9 023733 istore 1 ,contw -0x59ea 023734 fetch 2 ,mem_le_att_offset -0x59eb 023735 iforce rega -0x59ec 023736 fetcht 2 ,mem_le_att_handle -0x59ed 023737 call le_att_get_handle_ptr -0x59ee 023738 branch le_send_att_error_response_notfound ,blank -0x59ef 023739 ifetch 1 ,contr -0x59f0 023740 isub rega ,loopcnt -0x59f1 023741 nbranch le_send_att_error_response_notfound ,positive -0x59f2 023742 sub loopcnt ,22 ,null -0x59f3 023743 branch le_send_att_read_blob_response_less ,positive -0x59f4 023744 force 22 ,loopcnt -: 023745 le_send_att_read_blob_response_less: -0x59f5 023746 deposit rega -0x59f6 023747 iadd contr ,contr -0x59f7 023748 call memcpy_fast -0x59f8 023749 call store_contw -0x59f9 023750 branch le_send_auto_len_by_mem -: 023753 le_parse_att_read_by_group_type_request: -0x59fa 023754 call le_get_search_handle_start_end_common -0x59fb 023755 call le_get_search_att_type -0x59fc 023756 branch le_send_att_read_by_group_type_response -: 023761 le_send_att_read_by_group_type_response: -0x59fd 023762 arg 2 ,timeup -0x59fe 023763 fetcht 2 ,mem_le_search_handle_start -0x59ff 023767 storet 2 ,mem_temp -0x5a00 023768 call le_init_attlist_search -0x5a01 023769 call le_att_get_handle_ptr2 -0x5a02 023770 increase -2 ,contr -0x5a03 023771 copy contr ,pdata -0x5a04 023772 store 2 ,mem_le_cur_attlist_start_ptr -: 023773 le_send_att_read_by_group_type_response_loop: -0x5a05 023774 call le_att_check_handle_end -0x5a06 023775 nbranch le_send_att_read_by_group_type_end0 ,positive -0x5a07 023776 fetcht 2 ,mem_temp -0x5a08 023777 call le_att_get_handle_info_from_ptr -0x5a09 023778 beq 1 ,le_send_att_read_by_group_type_end1 -0x5a0a 023780 call le_att_same_type -0x5a0b 023781 nbranch le_send_att_read_by_group_type_next_handle ,zero -0x5a0c 023782 copy timeup ,pdata -0x5a0d 023783 beq 0 ,le_send_att_read_by_group_type_end1 -0x5a0e 023784 nbranch le_send_att_read_by_group_type_store_write_record ,user -0x5a0f 023785 disable user -0x5a10 023787 arg 20 ,rega -0x5a11 023788 call le_fifo_malloc_tx_l2cap_gatt -0x5a12 023789 setarg attop_read_by_group_type_response -0x5a13 023790 istore 1 ,contw -0x5a14 023791 fetch 1 ,mem_le_curr_att_len -0x5a15 023792 increase 4 ,pdata -0x5a16 023793 istore 1 ,contw -0x5a17 023794 call store_contw -0x5a18 023795 branch le_send_att_read_by_group_type_store_record -: 023796 le_send_att_read_by_group_type_store_write_record: -0x5a19 023797 fetch 1 ,mem_le_curr_att_len -0x5a1a 023798 beq 16 ,le_send_att_read_by_group_type_end1 -0x5a1b 023799 fetch 2 ,mem_temp -0x5a1c 023800 increase -1 ,pdata -0x5a1d 023801 store 2 ,mem_le_cur_handle_end -0x5a1e 023802 call le_write_att_record -: 023803 le_send_att_read_by_group_type_store_record: -0x5a1f 023804 fetch 2 ,mem_temp -0x5a20 023805 store 2 ,mem_le_cur_handle_start -0x5a21 023806 call le_store_att_record -0x5a22 023807 increase -1 ,timeup -: 023809 le_send_att_read_by_group_type_next_handle: -0x5a23 023810 call le_att_next_handle -0x5a24 023811 branch le_send_att_read_by_group_type_response_loop -: 023813 le_send_att_read_by_group_type_end0: -0x5a25 023814 fetch 2 ,mem_temp -0x5a26 023815 store 2 ,mem_le_cur_handle_end -0x5a27 023816 branch le_send_att_read_by_group_type_end_common -: 023817 le_send_att_read_by_group_type_end1: -0x5a28 023818 fetch 2 ,mem_temp -0x5a29 023819 increase -1 ,pdata -0x5a2a 023820 store 2 ,mem_le_cur_handle_end -0x5a2b 023821 branch le_send_att_read_by_group_type_end_common -: 023822 le_send_att_read_by_group_type_end_common: -0x5a2c 023823 branch le_send_att_error_response_notfound ,user -0x5a2d 023824 call le_write_att_record -0x5a2e 023825 branch le_send_auto_len_by_mem -: 023830 le_parse_att_write_request: -0x5a2f 023831 copy contr ,rega -0x5a30 023832 fetch 2 ,mem_le_l2cap_size -0x5a31 023833 add pdata ,-3 ,regb -0x5a32 023834 call le_writeatt_cb -: 023835 le_send_att_write_response_check_auth: -0x5a33 023836 fetch 1 ,mem_le_configuration -0x5a34 023837 bbit0 bit_ble_write_auth ,le_send_att_write_response -0x5a35 023839 fetcht 2 ,mem_le_att_handle -0x5a36 023840 fetch 2 ,mem_le_pairing_handle -0x5a37 023841 isub temp ,null -0x5a38 023842 nbranch le_send_att_write_response ,zero -0x5a39 023843 call le_check_encrypt_state -0x5a3a 023844 nbranch le_send_att_write_response ,user -0x5a3b 023845 jam att_err_insufficient_authentication ,mem_le_err_code -0x5a3c 023846 branch le_send_att_error_response -: 023848 le_send_att_write_response: -0x5a3d 023849 force 1 ,rega -0x5a3e 023850 call le_fifo_malloc_tx_l2cap_gatt -0x5a3f 023851 setarg attop_write_response -0x5a40 023852 istore 1 ,contw -0x5a41 023853 rtn -: 023855 le_check_encrypt_state: -0x5a42 023856 call disable_user -0x5a43 023857 fetch 1 ,mem_le_pairing_mode -0x5a44 023858 rtneq le_pairing_mode_none -0x5a45 023859 fetch 1 ,mem_context -0x5a46 023860 rtnbit1 lestate_encryption -0x5a47 023861 branch enable_user -: 023864 le_parse_att_prepare_write_request: -0x5a48 023865 add contr ,2 ,rega -0x5a49 023866 fetch 2 ,mem_le_l2cap_size -0x5a4a 023867 add pdata ,-5 ,regb -0x5a4b 023868 call le_writeatt_cb -0x5a4c 023869 branch le_send_att_prepare_write_response -: 023872 le_send_att_prepare_write_response: -0x5a4d 023873 fetch 2 ,mem_le_l2cap_size -0x5a4e 023874 copy pdata ,rega -0x5a4f 023875 call le_fifo_malloc_tx_l2cap_gatt -0x5a50 023876 setarg attop_prepare_write_response -0x5a51 023877 istore 1 ,contw -0x5a52 023878 fetch 2 ,mem_le_att_handle -0x5a53 023879 istore 2 ,contw -0x5a54 023880 fetch 2 ,mem_le_l2cap_size -0x5a55 023881 add pdata ,-5 ,loopcnt -0x5a56 023882 fetch 2 ,mem_le_payload_ptr -0x5a57 023883 add pdata ,7 ,contr -0x5a58 023884 ifetch 2 ,contr -0x5a59 023885 istore 2 ,contw -0x5a5a 023886 branch memcpy_fast -: 023890 le_parse_att_execute_write_request: -: 023892 le_send_att_execute_write_response: -0x5a5b 023893 force 1 ,rega -0x5a5c 023894 call le_fifo_malloc_tx_l2cap_gatt -0x5a5d 023895 setarg attop_execute_write_response -0x5a5e 023896 istore 1 ,contw -0x5a5f 023897 rtn -: 023901 le_parse_att_write_command: -0x5a60 023902 copy contr ,rega -0x5a61 023903 fetch 2 ,mem_le_l2cap_size -0x5a62 023904 add pdata ,-3 ,regb -0x5a63 023905 branch le_writeatt_cb -: 023910 le_att_malloc_tx_notify: -0x5a64 023911 copy temp ,regc -0x5a65 023912 increase 3 ,rega -0x5a66 023913 call le_fifo_malloc_tx_l2cap_gatt -0x5a67 023914 increase -3 ,rega -0x5a68 023915 setarg attop_handle_value_notification -0x5a69 023916 istore 1 ,contw -0x5a6a 023917 copy regc ,temp -0x5a6b 023918 istoret 2 ,contw -0x5a6c 023919 rtn -: 023922 le_att_malloc_tx_indication: -0x5a6d 023923 copy temp ,regc -0x5a6e 023924 increase 3 ,rega -0x5a6f 023925 call le_fifo_malloc_tx_l2cap_gatt -0x5a70 023926 increase -3 ,rega -0x5a71 023927 setarg attop_handle_value_indication -0x5a72 023928 istore 1 ,contw -0x5a73 023929 copy regc ,temp -0x5a74 023930 istoret 2 ,contw -0x5a75 023931 rtn -: 023936 le_send_att_error_response_notfound: -0x5a76 023937 jam att_err_attribute_not_found ,mem_le_err_code -: 023938 le_send_att_error_response: -0x5a77 023939 force 5 ,rega -0x5a78 023940 call le_fifo_malloc_tx_l2cap_gatt -0x5a79 023941 setarg attop_error_response -0x5a7a 023942 istore 1 ,contw -0x5a7b 023943 fetch 1 ,mem_le_att_opcode -0x5a7c 023944 istore 1 ,contw -0x5a7d 023945 fetch 2 ,mem_le_att_handle -0x5a7e 023946 istore 2 ,contw -0x5a7f 023947 fetch 1 ,mem_le_err_code -0x5a80 023948 istore 1 ,contw -0x5a81 023949 rtn -: 023952 le_fifo_malloc_tx_l2cap_gatt: -0x5a82 023953 force le_l2cap_cid_att ,regb -0x5a83 023954 branch le_fifo_malloc_tx_l2cap -: 023957 le_att_next_handle: -0x5a84 023958 fetcht 2 ,mem_temp -0x5a85 023959 increase 1 ,temp -0x5a86 023960 storet 2 ,mem_temp -0x5a87 023961 rtn -: 023963 le_att_check_handle_end: -0x5a88 023964 fetcht 2 ,mem_temp -0x5a89 023965 fetch 2 ,mem_le_search_handle_end -0x5a8a 023966 isub temp ,null -0x5a8b 023967 rtn -: 023970 le_att_same_type: -0x5a8c 023971 fetcht 1 ,mem_le_search_att_type_length -0x5a8d 023972 arg mem_le_search_att_type ,rega -: 023973 le_att_check_same_common: -0x5a8e 023974 fetch 1 ,mem_le_cur_uuid_length -0x5a8f 023975 copy pdata ,loopcnt -0x5a90 023976 isub temp ,null -0x5a91 023977 nrtn zero -0x5a92 023978 arg mem_le_cur_uuid ,regb -0x5a93 023979 branch string_compare -: 023981 le_att_same_uuid: -0x5a94 023982 fetcht 1 ,mem_le_search_uuid_length -0x5a95 023983 arg mem_le_search_uuid ,rega -0x5a96 023984 branch le_att_check_same_common -: 023987 le_store_att_record: -0x5a97 023988 fetch 1 ,mem_le_curr_att_len -0x5a98 023989 store 1 ,mem_tmp_buffer -0x5a99 023990 copy pdata ,loopcnt -0x5a9a 023991 call get_contr -0x5a9b 023992 branch memcpy_fast -: 023995 le_write_att_record: -0x5a9c 023996 call get_contw -0x5a9d 023997 fetch 2 ,mem_le_cur_handle_start -0x5a9e 023998 istore 2 ,contw -0x5a9f 023999 fetch 2 ,mem_le_cur_handle_end -0x5aa0 024000 istore 2 ,contw -: 024001 le_write_att_record_common: -0x5aa1 024002 fetch 1 ,mem_tmp_buffer -0x5aa2 024003 copy pdata ,loopcnt -0x5aa3 024004 call memcpy_fast -0x5aa4 024005 branch store_contw -: 024009 le_send_auto_len_by_mem: -0x5aa5 024010 call get_contw -0x5aa6 024011 call le_fifo_get_last_att_ptr -0x5aa7 024012 copy contw ,pdata -0x5aa8 024013 isub contr ,rega -0x5aa9 024014 call le_fifo_get_last_l2cap_ptr -0x5aaa 024015 copy rega ,pdata -0x5aab 024016 istore 2 ,contr -0x5aac 024017 increase 4 ,rega -0x5aad 024018 call le_fifo_get_last_tx_ptr -0x5aae 024019 copy rega ,pdata -0x5aaf 024020 istore 1 ,contr -0x5ab0 024021 rtn -: 024024 le_get_search_handle_start_end_common: -0x5ab1 024025 rshift8 pdata ,pdata -0x5ab2 024026 store 2 ,mem_le_search_handle_start -0x5ab3 024027 ifetch 2 ,contr -0x5ab4 024028 store 2 ,mem_le_search_handle_end -0x5ab5 024029 rtn -: 024034 le_parse_signaling: -0x5ab6 024035 ifetch 1 ,contr -0x5ab7 024036 ifetcht 1 ,contr -0x5ab8 024037 ifetcht 2 ,contr -0x5ab9 024038 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp -0x5aba 024039 rtn -: 024040 le_l2cap_parse_conn_parameter_update_rsp: -0x5abb 024041 ifetch 2 ,contr -0x5abc 024042 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x5abd 024043 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp -0x5abe 024044 branch ui_ipc_send_event -: 024050 le_l2cap_tx_update_req: -0x5abf 024051 arg 0x0c ,rega -0x5ac0 024052 arg l2cap_connection_parameter_update_request ,regc -0x5ac1 024053 call le_fifo_malloc_tx_l2cap_signaling -0x5ac2 024054 setarg 0x08 -0x5ac3 024055 istore 2 ,contw -0x5ac4 024056 fetch 8 ,mem_le_interval_min -0x5ac5 024057 istore 8 ,contw -0x5ac6 024058 rtn -: 024062 le_fifo_malloc_tx_l2cap_signaling: -0x5ac7 024063 call le_l2cap_update_signaling_identifier -0x5ac8 024064 arg le_l2cap_cid_signal ,regb -0x5ac9 024065 call le_fifo_malloc_tx_l2cap -0x5aca 024066 copy regc ,pdata -0x5acb 024067 istore 1 ,contw -0x5acc 024068 fetch 1 ,mem_le_signaling_identifier -0x5acd 024069 istore 1 ,contw -0x5ace 024070 rtn -: 024073 le_l2cap_update_signaling_identifier: -0x5acf 024074 fetch 1 ,mem_le_signaling_identifier -0x5ad0 024076 pincrease 1 -0x5ad1 024077 store 1 ,mem_le_signaling_identifier -0x5ad2 024078 rtnne 0 -: 024080 le_l2cap_reset_signaling_identifier: -0x5ad3 024081 jam 1 ,mem_le_signaling_identifier -0x5ad4 024082 rtn -: 024087 le_pairing_mode_init: -0x5ad5 024088 fetch 1 ,mem_le_pairing_mode -0x5ad6 024089 beq le_pairing_mode_none ,le_set_no_pairing -0x5ad7 024090 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work -0x5ad8 024091 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey -0x5ad9 024092 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork -0x5ada 024093 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric -0x5adb 024094 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey -0x5adc 024095 rtn -: 024097 le_set_pairing_mode_secure_justwork: -0x5add 024098 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ade 024099 branch le_set_noinputnooutput -: 024100 le_set_pairing_mode_secure_numeric: -0x5adf 024101 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ae0 024102 jam flag_iocap_displayyesno ,mem_le_pres_iocap -0x5ae1 024103 rtn -: 024104 le_set_pairing_mode_secure_passkey: -0x5ae2 024105 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ae3 024106 branch le_set_displayonly -: 024107 le_set_no_pairing: -0x5ae4 024108 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth -: 024109 le_set_noinputnooutput: -0x5ae5 024110 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap -0x5ae6 024111 rtn -: 024112 le_set_pairing_mode_lagacy_just_work: -0x5ae7 024113 jam flag_le_bonding_mitm ,mem_le_pres_auth -0x5ae8 024114 branch le_set_noinputnooutput -: 024115 le_set_pairing_mode_lagacy_passkey: -0x5ae9 024116 jam flag_le_bonding_mitm ,mem_le_pres_auth -: 024117 le_set_displayonly: -0x5aea 024118 jam flag_iocap_displayonly ,mem_le_pres_iocap -0x5aeb 024119 rtn -: 024122 le_secure_connection_enable: -0x5aec 024123 fetch 1 ,mem_le_pres_auth -0x5aed 024124 set1 le_auth_secure_connection_pairing_bit ,pdata -0x5aee 024125 store 1 ,mem_le_pres_auth -0x5aef 024126 rtn -: 024127 le_secure_connection_disable: -0x5af0 024128 fetch 1 ,mem_le_pres_auth -0x5af1 024129 set0 le_auth_secure_connection_pairing_bit ,pdata -0x5af2 024130 store 1 ,mem_le_pres_auth -0x5af3 024131 rtn -: 024133 le_parse_smp: -0x5af4 024134 ifetch 1 ,contr -0x5af5 024135 beq smp_pairing_request ,le_parse_smp_pairing_request -0x5af6 024137 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm -0x5af7 024138 beq smp_pairing_random ,le_parse_smp_pairing_random -0x5af8 024139 beq smp_pairing_failed ,le_parse_smp_pairing_failed -0x5af9 024140 beq smp_encryption_information ,le_parse_smp_encryption_information -0x5afa 024141 beq smp_master_identification ,le_parse_smp_master_identification -0x5afb 024142 beq smp_identity_information ,le_parse_smp_identity_information -0x5afc 024143 beq smp_identity_address_information ,le_parse_smp_identity_address_information -0x5afd 024144 beq smp_signing_information ,le_parse_smp_signing_information -0x5afe 024145 beq smp_security_request ,le_parse_smp_security_request -0x5aff 024146 beq smp_pairing_public_key ,le_parse_smp_public_key -0x5b00 024147 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check -0x5b01 024148 rtn -: 024152 le_send_smp_security_request: -0x5b02 024153 force 2 ,rega -0x5b03 024154 call le_fifo_malloc_tx_l2cap_smp -0x5b04 024155 setarg smp_security_request -0x5b05 024156 istore 1 ,contw -0x5b06 024157 fetch 1 ,mem_le_pres_auth -0x5b07 024158 istore 1 ,contw -0x5b08 024159 rtn -: 024161 le_parse_smp_pairing_request: -0x5b09 024162 store 1 ,mem_le_preq -0x5b0a 024163 ifetch 6 ,contr -0x5b0b 024164 istore 6 ,contw -0x5b0c 024165 fetch 1 ,mem_le_pairing_mode -0x5b0d 024166 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing -0x5b0e 024167 call le_send_smp_pairing_response -0x5b0f 024168 call le_check_master_support_secure_connect -0x5b10 024169 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state -0x5b11 024170 fetch 1 ,mem_le_preq_iocap -0x5b12 024171 beq flag_iocap_displayonly ,le_set_tk_0 -0x5b13 024172 beq flag_iocap_displayyesno ,le_set_tk_0 -0x5b14 024173 beq flag_iocap_noinputnooutput ,le_set_tk_0 -0x5b15 024174 fetch 1 ,mem_le_pairing_mode -0x5b16 024175 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey -0x5b17 024176 rtneq le_pairing_mode_secure_connect_passkey -: 024177 le_set_tk_0: -0x5b18 024178 arg 0 ,pdata -0x5b19 024179 store 4 ,mem_le_tk -0x5b1a 024180 rtn -: 024182 le_parse_smp_pairing_req_passkey: -0x5b1b 024183 fetch 1 ,mem_le_configuration -0x5b1c 024184 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey -: 024185 le_genernate_tk: -0x5b1d 024186 arg mem_le_tk ,rega -0x5b1e 024187 copy rega ,contw -0x5b1f 024188 arg 3 ,loopcnt -0x5b20 024189 call generate_random_loop -0x5b21 024190 fetch 2 ,mem_le_tk + 2 -0x5b22 024191 and_into 0x7 ,pdata -0x5b23 024192 store 2 ,mem_le_tk + 2 -: 024193 le_parse_smp_pairing_req_fixed_passkey: -0x5b24 024194 jam bt_evt_le_tk_generate ,mem_fifo_temp -0x5b25 024195 branch ui_ipc_send_event -: 024197 le_check_master_support_secure_connect: -0x5b26 024198 fetch 1 ,mem_le_preq_auth -0x5b27 024199 rtnbit1 le_auth_secure_connection_pairing_bit -0x5b28 024200 fetch 1 ,mem_le_pairing_mode -0x5b29 024201 rtnbit0 le_pairing_mode_secure_connect_bit -0x5b2a 024202 branch app_ble_disconnect -: 024204 le_send_smp_pairing_response: -0x5b2b 024205 force 7 ,rega -0x5b2c 024206 call le_fifo_malloc_tx_l2cap_smp -0x5b2d 024207 fetch 7 ,mem_le_pres -0x5b2e 024208 istore 7 ,contw -0x5b2f 024209 rtn -: 024212 le_parse_smp_pairing_confirm: -0x5b30 024213 copy contr ,rega -0x5b31 024214 fetch 1 ,mem_le_pairing_mode -0x5b32 024215 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey -0x5b33 024216 copy rega ,contr -0x5b34 024217 arg mem_le_rconfirm ,contw -0x5b35 024218 call memcpy16 -0x5b36 024219 branch le_send_smp_pairing_confirm -: 024220 le_parse_smp_pairing_confirm_secure_passkey: -0x5b37 024221 copy rega ,contr -0x5b38 024222 arg mem_le_rconfirm ,contw -0x5b39 024223 call memcpy16 -0x5b3a 024224 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5b3b 024225 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state -0x5b3c 024226 rtn -: 024229 le_send_smp_pairing_confirm: -0x5b3d 024230 fetch 1 ,mem_le_pairing_mode -0x5b3e 024231 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc -0x5b3f 024232 call generate_confirm -0x5b40 024233 force 17 ,rega -0x5b41 024234 call le_fifo_malloc_tx_l2cap_smp -0x5b42 024235 setarg smp_pairing_confirm -0x5b43 024236 istore 1 ,contw -0x5b44 024237 branch store_aes_result -: 024240 le_send_smp_pairing_confirm_sc: -0x5b45 024241 arg mem_le_srand ,contw -0x5b46 024242 call generate_random -0x5b47 024243 call function_f4_cb -0x5b48 024244 force 17 ,rega -0x5b49 024245 call le_fifo_malloc_tx_l2cap_smp -0x5b4a 024246 setarg smp_pairing_confirm -0x5b4b 024247 istore 1 ,contw -0x5b4c 024248 branch load_inverse_result -: 024252 le_parse_smp_pairing_random: -0x5b4d 024253 copy contr ,rega -0x5b4e 024254 fetch 1 ,mem_le_pairing_mode -0x5b4f 024255 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc -0x5b50 024256 copy rega ,contr -0x5b51 024257 call authenticate_rconfirm -0x5b52 024258 branch le_parse_smp_pairing_random_success ,zero -: 024259 le_send_pairing_confirm_value_failed: -0x5b53 024260 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason -: 024261 le_send_pairing_failed: -0x5b54 024262 force 2 ,rega -0x5b55 024263 call le_fifo_malloc_tx_l2cap_smp -0x5b56 024264 setarg smp_pairing_failed -0x5b57 024265 istore 1 ,contw -0x5b58 024266 fetch 1 ,mem_le_ll_pairing_fail_reason -0x5b59 024267 istore 1 ,contw -: 024268 le_parse_smp_pairing_failed: -0x5b5a 024269 force smp_pairing_timer ,queue -0x5b5b 024270 call timer_stop -0x5b5c 024271 jam flag_le_pairing_null ,mem_le_pairing_state -0x5b5d 024272 jam bt_evt_le_pairing_fail ,mem_fifo_temp -0x5b5e 024273 branch ui_ipc_send_event -: 024275 le_smp_pairing_fail_reason_not_support_pairing: -0x5b5f 024276 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason -0x5b60 024277 branch le_send_pairing_failed -: 024280 le_parse_smp_pairing_random_sc: -0x5b61 024281 arg mem_le_mrand ,contw -0x5b62 024282 copy rega ,contr -0x5b63 024283 call memcpy16 -0x5b64 024284 fetch 1 ,mem_le_pairing_mode -0x5b65 024285 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey -0x5b66 024286 call function_g2 -0x5b67 024289 call le_send_smp_pairing_random -0x5b68 024290 fetch 1 ,mem_le_pairing_mode -0x5b69 024291 rtnne le_pairing_mode_secure_connect_numeric -0x5b6a 024292 jam bt_evt_le_gkey_generate ,mem_fifo_temp -0x5b6b 024293 branch ui_ipc_send_event -: 024295 le_parse_smp_pairing_random_sc_passkey: -0x5b6c 024296 call function_f4_ca -0x5b6d 024297 arg mem_aes_cmac_temp ,contw -0x5b6e 024298 call load_inverse_result -0x5b6f 024299 arg mem_aes_cmac_temp ,rega -0x5b70 024300 arg mem_le_rconfirm ,regb -0x5b71 024301 arg 16 ,loopcnt -0x5b72 024302 call string_compare -0x5b73 024303 nbranch le_send_pairing_confirm_value_failed ,zero -0x5b74 024304 branch le_send_smp_pairing_random -: 024306 le_parse_smp_pairing_random_success: -0x5b75 024307 call generate_stk -0x5b76 024308 jam bt_evt_le_pairing_success ,mem_fifo_temp -0x5b77 024309 call ui_ipc_send_event -0x5b78 024310 jam 1 ,mem_ltk_exists -0x5b79 024311 jam flag_le_pairing_after_auth ,mem_le_pairing_state -: 024313 le_send_smp_pairing_random: -0x5b7a 024314 force 17 ,rega -0x5b7b 024315 call le_fifo_malloc_tx_l2cap_smp -0x5b7c 024316 setarg smp_pairing_random -0x5b7d 024317 istore 1 ,contw -0x5b7e 024318 arg mem_le_srand ,contr -0x5b7f 024319 branch memcpy16 -: 024321 le_parse_smp_encryption_information: -0x5b80 024322 arg mem_le_peer_ltk ,contw -0x5b81 024323 branch memcpy16 -: 024325 le_send_smp_encryption_information: -0x5b82 024326 force 17 ,rega -0x5b83 024327 call le_fifo_malloc_tx_l2cap_smp -0x5b84 024328 setarg smp_encryption_information -0x5b85 024329 istore 1 ,contw -0x5b86 024330 fetch 1 ,mem_le_configuration -0x5b87 024331 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk -0x5b88 024332 arg mem_le_ltk ,contr -0x5b89 024333 branch memcpy16 -: 024335 le_send_fixed_ltk: -0x5b8a 024336 arg mem_le_fixed_ltk ,contr -0x5b8b 024337 branch memcpy16 -: 024340 le_send_smp_master_identification: -0x5b8c 024341 arg mem_le_ediv ,contw -0x5b8d 024342 force 10 ,loopcnt -0x5b8e 024343 call generate_random_loop -0x5b8f 024344 force 11 ,rega -0x5b90 024345 call le_fifo_malloc_tx_l2cap_smp -0x5b91 024346 setarg smp_master_identification -0x5b92 024347 istore 1 ,contw -0x5b93 024348 fetch 2 ,mem_le_ediv -0x5b94 024349 istore 2 ,contw -0x5b95 024350 fetch 8 ,mem_le_rand -0x5b96 024351 istore 8 ,contw -0x5b97 024352 rtn -: 024354 le_send_smp_identity_information: -0x5b98 024355 force 17 ,rega -0x5b99 024356 call le_fifo_malloc_tx_l2cap_smp -0x5b9a 024357 setarg smp_identity_information -0x5b9b 024358 istore 1 ,contw -0x5b9c 024359 setarg 0 -0x5b9d 024360 istore 8 ,contw -0x5b9e 024361 istore 8 ,contw -0x5b9f 024362 rtn -: 024365 le_send_smp_identity_address_information: -0x5ba0 024366 force 8 ,rega -0x5ba1 024367 call le_fifo_malloc_tx_l2cap_smp -0x5ba2 024368 setarg smp_identity_address_information -0x5ba3 024369 istore 1 ,contw -0x5ba4 024370 fetch 1 ,mem_le_conn_own_addr_type -0x5ba5 024371 istore 1 ,contw -0x5ba6 024372 fetch 6 ,mem_le_lap -0x5ba7 024373 istore 6 ,contw -0x5ba8 024374 rtn -: 024377 le_send_pairing_fail_unspecified_reason: -0x5ba9 024378 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason -0x5baa 024379 branch le_send_pairing_failed -: 024381 le_check_init_key_distribution: -0x5bab 024382 fetch 1 ,mem_le_pres_init_key_distribution -0x5bac 024383 fetcht 1 ,mem_le_pres_init_key_distribution -0x5bad 024384 iand temp ,pdata -0x5bae 024385 rtn -: 024387 le_parse_smp_identity_information: -0x5baf 024388 arg mem_le_irk ,contw -0x5bb0 024389 call memcpy16 -0x5bb1 024390 call le_check_init_key_distribution -0x5bb2 024391 isolate0 le_initator_irk_bit ,pdata -0x5bb3 024392 branch le_send_pairing_fail_unspecified_reason ,true -0x5bb4 024393 fetch 1 ,mem_device_option -0x5bb5 024394 rtnne dvc_op_module -0x5bb6 024395 call le_check_master_addr_type -0x5bb7 024396 nrtn user -0x5bb8 024397 branch app_ble_store_reconn_info -: 024400 le_check_master_addr_type: -0x5bb9 024401 call disable_user -0x5bba 024402 fetch 1 ,mem_le_conn_peer_addr_type -0x5bbb 024403 rtneq master_public_addr -0x5bbc 024404 fetch 1 ,mem_le_plap + 5 -0x5bbd 024405 compare 0xc0 ,pdata ,0xc0 -0x5bbe 024406 rtn true -0x5bbf 024407 branch enable_user -: 024409 le_parse_smp_identity_address_information: -0x5bc0 024410 call le_check_init_key_distribution -0x5bc1 024411 isolate0 le_initator_irk_bit ,pdata -0x5bc2 024412 branch le_send_pairing_fail_unspecified_reason ,true -0x5bc3 024413 rtn -: 024415 le_parse_smp_master_identification: -: 024416 le_parse_smp_signing_information: -: 024417 le_parse_smp_security_request: -0x5bc4 024418 rtn -: 024420 le_parse_smp_public_key: -0x5bc5 024421 arg mem_le_pubkey_remote_x_256 ,contw -0x5bc6 024422 call memcpy64 -0x5bc7 024423 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5bc8 024424 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state -0x5bc9 024425 rtn -: 024427 le_parse_smp_dhkey_check: -0x5bca 024428 arg mem_sp_confirm_remote ,contw -0x5bcb 024429 call memcpy16 -0x5bcc 024430 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state -0x5bcd 024431 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5bce 024432 rtn -: 024434 le_send_smp_pairing_public_key: -0x5bcf 024435 force 65 ,rega -0x5bd0 024436 call le_fifo_malloc_tx_l2cap_smp -0x5bd1 024437 setarg smp_pairing_public_key -0x5bd2 024438 istore 1 ,contw -0x5bd3 024439 arg mem_le_pubkey_local_x_256 ,contr -0x5bd4 024440 branch memcpy64 -: 024442 le_send_smp_pairing_dhkey_check: -0x5bd5 024443 call function_f6_eb -0x5bd6 024444 force 17 ,rega -0x5bd7 024445 call le_fifo_malloc_tx_l2cap_smp -0x5bd8 024446 setarg smp_pairing_dhkey_check -0x5bd9 024447 istore 1 ,contw -0x5bda 024448 branch load_inverse_result -: 024451 le_check_paring_time: -0x5bdb 024452 fetch 1 ,mem_le_pairing_state -0x5bdc 024453 rtneq flag_le_pairing_end -0x5bdd 024454 arg flag_le_pairing_rcv_pairing_req ,temp -0x5bde 024455 isub temp ,null -0x5bdf 024456 nrtn positive -0x5be0 024457 arg smp_pairing_timer ,queue -0x5be1 024458 call timer_check -0x5be2 024459 nrtn blank -0x5be3 024460 branch le_send_pairing_fail_unspecified_reason -: 024462 le_pairing_sm: -0x5be4 024463 bpatchx patch2f_0 ,mem_patch2f -0x5be5 024464 fetch 1 ,mem_le_pairing_state -0x5be6 024465 beq flag_le_pairing_null ,le_pairing_sm_null -0x5be7 024466 beq flag_le_pairing_start ,le_pairing_sm_start -0x5be8 024467 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req -0x5be9 024468 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req -0x5bea 024469 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth -0x5beb 024470 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information -0x5bec 024471 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification -0x5bed 024472 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information -0x5bee 024473 rtn -: 024475 le_pairing_sm_null: -: 024476 le_pairing_sm_send_sec_req: -0x5bef 024477 fetch 1 ,mem_le_enc_state -0x5bf0 024478 rtnne flag_le_send_start_enc_rsp -0x5bf1 024479 jam flag_le_enc_end ,mem_le_enc_state -0x5bf2 024480 jam flag_le_pairing_end ,mem_le_pairing_state -0x5bf3 024481 jam bt_evt_le_reconnect_complete ,mem_fifo_temp -0x5bf4 024482 branch ui_ipc_send_event -: 024485 le_pairing_sm_start: -0x5bf5 024486 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state -0x5bf6 024487 branch le_send_smp_security_request -: 024489 le_pairing_sm_rcv_pairing_req: -0x5bf7 024490 jam flag_le_pairing_auth ,mem_le_pairing_state -0x5bf8 024491 setarg timer_smp_pairing_timeout -0x5bf9 024492 arg smp_pairing_timer ,queue -0x5bfa 024493 branch timer_init -: 024495 le_pairing_sm_after_auth: -0x5bfb 024496 fetch 1 ,mem_le_enc_state -0x5bfc 024497 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc -0x5bfd 024498 rtn -: 024500 le_pairing_sm_after_auth_start_enc: -0x5bfe 024501 jam flag_le_paring_send_enc_information ,mem_le_pairing_state -0x5bff 024502 jam bt_evt_le_enc_info ,mem_fifo_temp -0x5c00 024503 call ui_ipc_send_event -0x5c01 024504 call le_send_smp_encryption_information -0x5c02 024505 fetch 1 ,mem_device_option -0x5c03 024506 rtnne dvc_op_module -0x5c04 024507 call le_check_master_addr_type -0x5c05 024508 rtn user -0x5c06 024509 branch app_ble_store_reconn_info -: 024512 le_pairng_sm_send_enc_information: -0x5c07 024513 jam flag_le_paring_send_master_identification ,mem_le_pairing_state -0x5c08 024514 branch le_send_smp_master_identification -: 024516 le_pairng_sm_send_master_indentification: -0x5c09 024517 fetch 1 ,mem_le_preq_resp_key_distribution -0x5c0a 024518 fetcht 1 ,mem_le_pres_resp_key_distribution -0x5c0b 024519 iand temp ,pdata -0x5c0c 024520 isolate0 le_initator_irk_bit ,pdata -0x5c0d 024521 branch le_parse_start_enc_rsp_after_auth_end ,true -0x5c0e 024522 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state -0x5c0f 024523 branch le_send_smp_identity_information -: 024525 le_pairng_sm_send_indentity_information: -0x5c10 024526 call le_send_smp_identity_address_information -0x5c11 024527 branch le_parse_start_enc_rsp_after_auth_end -: 024530 le_parse_start_enc_rsp_after_auth_end: -0x5c12 024531 force smp_pairing_timer ,queue -0x5c13 024532 call timer_stop -0x5c14 024533 jam flag_le_enc_end ,mem_le_enc_state -0x5c15 024534 jam flag_le_pairing_end ,mem_le_pairing_state -0x5c16 024535 jam bt_evt_le_pairing_complete ,mem_fifo_temp -0x5c17 024536 branch ui_ipc_send_event -: 024540 le_secure_connect_sm: -0x5c18 024541 bpatchx patch2f_1 ,mem_patch2f -0x5c19 024542 fetch 1 ,mem_le_pairing_mode -0x5c1a 024543 rtnbit0 le_pairing_mode_secure_connect_bit -0x5c1b 024544 fetch 1 ,mem_le_secure_connect_flag -0x5c1c 024545 rtnne le_sp_flag_commit_256 -0x5c1d 024546 jam sp_flag_standby ,mem_le_secure_connect_flag -0x5c1e 024547 fetch 1 ,mem_le_secure_connect_state -0x5c1f 024548 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key -0x5c20 024549 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key -0x5c21 024550 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key -0x5c22 024551 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey -0x5c23 024552 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey -0x5c24 024553 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm -0x5c25 024554 rtn -: 024557 le_sc_sm_passkey_wait_confirm: -0x5c26 024558 fetch 1 ,mem_authentication_passkey_times -0x5c27 024559 copy pdata ,queue -0x5c28 024560 increase 1 ,pdata -0x5c29 024561 store 1 ,mem_authentication_passkey_times -0x5c2a 024562 fetch 4 ,mem_le_tk -0x5c2b 024563 qisolate1 pdata -0x5c2c 024564 setarg 0x80 -0x5c2d 024565 setflag true ,0 ,pdata -0x5c2e 024566 store 1 ,mem_passkey_1bit -0x5c2f 024567 branch le_sc_sm_ready_send_pairing_confirm -: 024569 le_sc_sm_wait_confirm_gkey: -0x5c30 024570 fetch 1 ,mem_le_sc_confirm_gkey_flag -0x5c31 024571 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag -0x5c32 024572 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok -0x5c33 024573 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c34 024574 rtn -: 024576 le_sc_confirm_gkey_ok: -0x5c35 024577 jam bt_evt_le_pairing_success ,mem_fifo_temp -0x5c36 024578 call ui_ipc_send_event -0x5c37 024579 jam flag_le_pairing_after_auth ,mem_le_pairing_state -0x5c38 024580 branch le_send_smp_pairing_dhkey_check -: 024582 le_sc_sm_receive_dhkey: -0x5c39 024583 fetch 1 ,mem_sp_dhkey_invalid -0x5c3a 024584 beq sp_key_valid_256 ,le_dhkey_ready -0x5c3b 024585 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c3c 024586 rtn -: 024588 le_dhkey_ready: -0x5c3d 024589 call function_f5 -0x5c3e 024593 fetch 1 ,mem_le_pairing_mode -0x5c3f 024594 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common -0x5c40 024595 call le_set_tk_0 -: 024596 le_dhkey_ready_common: -0x5c41 024597 call function_f6_ea -0x5c42 024598 arg mem_aes_cmac_temp ,rega -0x5c43 024599 arg mem_sp_confirm_remote ,regb -0x5c44 024600 arg 16 ,loopcnt -0x5c45 024601 call string_compare -0x5c46 024602 branch le_dhkey_check_ok ,zero -: 024603 le_dhkey_check_fail: -0x5c47 024604 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason -0x5c48 024605 branch le_send_pairing_failed -: 024608 le_dhkey_check_ok: -0x5c49 024609 call sp_calc_check_publickey_256 -0x5c4a 024610 nbranch le_dhkey_check_fail ,zero -0x5c4b 024611 jam 1 ,mem_ltk_exists -0x5c4c 024612 fetch 1 ,mem_le_pairing_mode -0x5c4d 024613 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok -0x5c4e 024614 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok -0x5c4f 024615 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c50 024616 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state -0x5c51 024617 rtn -: 024619 le_sc_sm_send_public_key: -0x5c52 024620 fetch 1 ,mem_le_pairing_mode -0x5c53 024621 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey -0x5c54 024622 jam 0 ,mem_passkey_1bit -: 024623 le_sc_sm_ready_send_pairing_confirm: -0x5c55 024624 branch le_send_smp_pairing_confirm -: 024626 le_sc_sm_send_public_key_passkey: -0x5c56 024630 jam 0 ,mem_authentication_passkey_times -0x5c57 024631 branch le_parse_smp_pairing_req_passkey -: 024634 le_sc_sm_receive_public_key: -0x5c58 024635 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c59 024636 fetch 1 ,mem_le_sc_local_key_invalid -0x5c5a 024637 beq sp_key_valid_256 ,le_public_key_ready -0x5c5b 024639 rtn -: 024641 le_public_key_ready: -0x5c5c 024642 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state -0x5c5d 024643 jam sp_key_invalid ,mem_sp_dhkey_invalid -0x5c5e 024644 branch sp_dhkey_calc_256 -: 024646 le_sc_sm_wait_send_public_key: -0x5c5f 024647 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c60 024648 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state -0x5c61 024649 branch le_send_smp_pairing_public_key -: 024653 le_fifo_malloc_tx_l2cap_smp: -0x5c62 024654 force le_l2cap_cid_smp ,regb -0x5c63 024655 branch le_fifo_malloc_tx_l2cap -: 024659 le_parse_ll: -0x5c64 024660 fetch 1 ,mem_le_rxbuf + 2 -0x5c65 024661 beq ll_connection_update_req ,le_parse_connection_update_req -0x5c66 024662 beq ll_channel_map_req ,le_parse_channel_map_req -0x5c67 024663 beq ll_terminate_ind ,le_parse_terminate_ind -0x5c68 024664 beq ll_enc_req ,le_parse_enc_req -0x5c69 024665 beq ll_enc_rsp ,le_parse_enc_rsp -0x5c6a 024666 beq ll_start_enc_req ,le_parse_start_enc_req -0x5c6b 024667 beq ll_start_enc_rsp ,le_parse_start_enc_rsp -0x5c6c 024668 beq ll_unknown_rsp ,le_parse_unknown_rsp -0x5c6d 024669 beq ll_feature_req ,le_parse_feature_req -0x5c6e 024670 beq ll_feature_rsp ,le_parse_feature_rsp -0x5c6f 024671 beq ll_pause_enc_req ,le_parse_pause_enc_req -0x5c70 024672 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp -0x5c71 024673 beq ll_version_ind ,le_parse_version_ind -0x5c72 024674 beq ll_reject_ind ,le_parse_reject_ind -0x5c73 024675 beq ll_ping_req ,le_parse_ping_req -0x5c74 024676 beq ll_ping_rsp ,le_parse_ping_rsp -0x5c75 024677 arg 2 ,rega -0x5c76 024678 arg ll_unknown_rsp ,regb -0x5c77 024679 call le_fifo_malloc_tx_ll -0x5c78 024680 fetch 1 ,mem_le_rxbuf + 2 -0x5c79 024681 istore 1 ,contw -0x5c7a 024682 rtn -: 024685 le_parse_connection_update_req: -0x5c7b 024686 ifetch 9 ,contr -0x5c7c 024687 store 9 ,mem_le_new_param -0x5c7d 024688 ifetch 2 ,contr -0x5c7e 024689 store 2 ,mem_le_instant -0x5c7f 024690 fetch 1 ,mem_le_state -0x5c80 024691 set1 lestate_update_param ,pdata -0x5c81 024692 store 1 ,mem_le_state -0x5c82 024693 rtn -: 024695 le_parse_channel_map_req: -0x5c83 024696 ifetch 5 ,contr -0x5c84 024697 store 5 ,mem_le_new_map -0x5c85 024698 ifetch 2 ,contr -0x5c86 024699 store 2 ,mem_le_instant -0x5c87 024700 fetcht 2 ,mem_le_event_count -0x5c88 024701 isub temp ,null -0x5c89 024702 nbranch le_parse_terminate_ind ,positive -0x5c8a 024703 fetch 1 ,mem_le_state -0x5c8b 024704 set1 lestate_update_map ,pdata -0x5c8c 024705 store 1 ,mem_le_state -0x5c8d 024706 rtn -: 024709 le_parse_terminate_ind: -0x5c8e 024710 setarg 20 -0x5c8f 024711 store 2 ,mem_le_superto -0x5c90 024712 store 2 ,mem_le_init_superto -0x5c91 024713 rtn -: 024715 le_send_terminate_ind_user_terminated: -0x5c92 024716 arg error_remote_user_terminated_connection ,regc -: 024719 le_send_terminate_ind: -0x5c93 024720 arg 2 ,rega -0x5c94 024721 arg ll_terminate_ind ,regb -0x5c95 024722 call le_fifo_malloc_tx_ll -0x5c96 024723 copy regc ,pdata -0x5c97 024724 istore 1 ,contw -0x5c98 024725 rtn -: 024727 le_parse_feature_req: -: 024729 le_send_feature_rsp: -0x5c99 024730 arg 9 ,rega -0x5c9a 024731 arg ll_feature_rsp ,regb -0x5c9b 024732 call le_fifo_malloc_tx_ll -0x5c9c 024733 setarg param_le_features -0x5c9d 024734 istore 8 ,contw -0x5c9e 024735 rtn -: 024738 le_parse_version_ind: -0x5c9f 024739 rtn master -: 024740 le_send_version_ind: -0x5ca0 024741 arg 6 ,rega -0x5ca1 024742 arg ll_version_ind ,regb -0x5ca2 024743 call le_fifo_malloc_tx_ll -0x5ca3 024744 fetch 5 ,mem_lmp_version -0x5ca4 024745 istore 5 ,contw -0x5ca5 024746 rtn -: 024749 le_parse_ping_req: -0x5ca6 024750 arg ll_ping_rsp ,regb -0x5ca7 024751 branch le_send_ll_one_lenth -: 024754 le_send_ll_one_lenth: -0x5ca8 024755 arg 1 ,rega -0x5ca9 024756 branch le_fifo_malloc_tx_ll -: 024759 le_parse_enc_req: -0x5caa 024760 ifetch 8 ,contr -0x5cab 024761 store 8 ,mem_le_rand -0x5cac 024762 ifetch 2 ,contr -0x5cad 024763 store 2 ,mem_le_ediv -0x5cae 024764 ifetch 8 ,contr -0x5caf 024765 store 8 ,mem_le_skdm -0x5cb0 024766 ifetch 4 ,contr -0x5cb1 024767 store 4 ,mem_le_ivm -0x5cb2 024768 call le_send_enc_rsp -0x5cb3 024769 bpatchx patch2f_2 ,mem_patch2f -0x5cb4 024770 fetch 1 ,mem_le_pairing_state -0x5cb5 024771 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth -0x5cb6 024772 fetch 1 ,mem_le_configuration -0x5cb7 024773 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk -0x5cb8 024774 fetch 1 ,mem_nv_data_number -0x5cb9 024775 ncall load_device_list_mode_4 ,blank -0x5cba 024776 fetch 1 ,mem_ltk_exists -0x5cbb 024777 beq 0 ,le_ltk_lost -: 024778 le_parse_enc_req_after_auth: -0x5cbc 024779 jam flag_le_rcv_enc_start ,mem_le_enc_state -0x5cbd 024780 call le_send_start_enc_req -0x5cbe 024781 branch generate_sk -: 024783 le_parse_enc_req_fixed_ltk: -0x5cbf 024784 jam 1 ,mem_ltk_exists -0x5cc0 024785 arg mem_le_fixed_ltk ,contr -0x5cc1 024786 arg mem_le_ltk ,contw -0x5cc2 024787 call memcpy16 -0x5cc3 024788 branch le_parse_enc_req_after_auth -: 024791 le_ltk_lost: -0x5cc4 024792 bpatchx patch2f_3 ,mem_patch2f -0x5cc5 024793 jam flag_le_enc_null ,mem_le_enc_state -0x5cc6 024794 jam flag_le_enc_null ,mem_le_pairing_state -0x5cc7 024795 jam bt_evt_le_ltk_lost ,mem_fifo_temp -0x5cc8 024796 branch ui_ipc_send_event -: 024798 le_send_reject_ind: -0x5cc9 024799 arg 2 ,rega -0x5cca 024800 arg ll_reject_ind ,regb -0x5ccb 024801 call le_fifo_malloc_tx_ll -0x5ccc 024802 setarg le_err_pin_or_key_missing -0x5ccd 024803 istore 1 ,contw -0x5cce 024804 rtn -: 024806 le_send_enc_rsp: -0x5ccf 024807 arg mem_le_skds ,contw -0x5cd0 024808 force 8 ,loopcnt -0x5cd1 024809 call generate_random_loop -0x5cd2 024810 arg mem_le_ivs ,contw -0x5cd3 024811 force 4 ,loopcnt -0x5cd4 024812 call generate_random_loop -0x5cd5 024813 arg 13 ,rega -0x5cd6 024814 arg ll_enc_rsp ,regb -0x5cd7 024815 call le_fifo_malloc_tx_ll -0x5cd8 024816 fetch 8 ,mem_le_skds -0x5cd9 024817 istore 8 ,contw -0x5cda 024818 fetch 4 ,mem_le_ivs -0x5cdb 024819 istore 4 ,contw -0x5cdc 024820 rtn -: 024822 le_send_start_enc_req: -0x5cdd 024823 arg ll_start_enc_req ,regb -0x5cde 024824 branch le_send_ll_one_lenth -: 024826 le_send_start_enc_rsp: -0x5cdf 024827 arg ll_start_enc_rsp ,regb -0x5ce0 024828 branch le_send_ll_one_lenth -: 024831 le_parse_enc_rsp: -0x5ce1 024832 ifetch 8 ,contr -0x5ce2 024833 store 8 ,mem_le_skds -0x5ce3 024834 ifetch 4 ,contr -0x5ce4 024835 store 4 ,mem_le_ivs -0x5ce5 024836 branch generate_sk -: 024838 le_parse_start_enc_req: -0x5ce6 024839 fetch 1 ,mem_le_state -0x5ce7 024840 set1 lestate_encryption ,pdata -0x5ce8 024841 store 1 ,mem_le_state -0x5ce9 024842 rtn -: 024844 le_parse_start_enc_rsp: -0x5cea 024845 rtn master -0x5ceb 024846 jam bt_evt_le_start_enc ,mem_fifo_temp -0x5cec 024847 call ui_ipc_send_event -0x5ced 024848 jam flag_le_send_start_enc_rsp ,mem_le_enc_state -0x5cee 024849 branch le_send_start_enc_rsp -: 024851 le_parse_pause_enc_req: -0x5cef 024852 jam flag_le_enc_pause ,mem_le_enc_state -0x5cf0 024853 call le_send_pause_enc_rsp -0x5cf1 024854 jam bt_evt_le_pause_enc ,mem_fifo_temp -0x5cf2 024855 branch ui_ipc_send_event -: 024857 le_send_pause_enc_rsp: -0x5cf3 024858 arg ll_pause_enc_rsp ,regb -0x5cf4 024859 branch le_send_ll_one_lenth -: 024862 le_parse_feature_rsp: -: 024863 le_parse_unknown_rsp: -: 024864 le_parse_pause_enc_rsp: -: 024865 le_parse_reject_ind: -: 024866 le_parse_ping_rsp: -0x5cf5 024867 rtn -: 024874 init_lmp: -0x5cf6 024875 rtn wake -: 024876 init_lmp_work: -0x5cf7 024877 bpatchx patch2f_4 ,mem_patch2f -0x5cf8 024878 setarg 0 -0x5cf9 024879 store 1 ,mem_lmp_to_send -0x5cfa 024880 store 1 ,mem_conn_sm -0x5cfb 024881 store 1 ,mem_lmo_opcode1 -0x5cfc 024882 store 1 ,mem_lmo_opcode2 -0x5cfd 024883 store 1 ,mem_esco_addr -0x5cfe 024884 store 1 ,mem_auth_enable -0x5cff 024885 store 1 ,mem_connection_options -0x5d00 024886 store 1 ,mem_pairing_auth -0x5d01 024887 jam switch_flag_init ,mem_switch_flag -0x5d02 024888 jam 0 ,mem_switch_fail_master_count -0x5d03 024889 jam null_encryp ,mem_wait_encryption -: 024890 init_lmp_reinit: -0x5d04 024891 jam 0 ,mem_pairing_auth -0x5d05 024892 jam 0 ,mem_sp_localsm -0x5d06 024893 jam 0 ,mem_lmp_conn_state -: 024895 parse_rx_done: -0x5d07 024896 rtn -: 024898 parse_lmp: -0x5d08 024899 bpatchx patch2f_5 ,mem_patch2f -0x5d09 024900 call setlocalsm_master ,master -0x5d0a 024901 ncall setlocalsm_slave ,master -0x5d0b 024902 call lmo_fifo_check -0x5d0c 024903 nrtn blank -0x5d0d 024904 fetch 1 ,mem_state_map -0x5d0e 024905 rtnbit0 smap_rxlmp -0x5d0f 024906 set0 smap_rxlmp ,pdata -0x5d10 024907 set0 mark_rxbuf_inuse ,mark -0x5d11 024908 store 1 ,mem_state_map -0x5d12 024909 fetch 1 ,mem_rxbuf -0x5d13 024910 fetcht 1 ,mem_state_map -0x5d14 024911 isolate1 smap_lmptidinit ,pdata -0x5d15 024912 setflag true ,smap_lmptid ,temp -0x5d16 024913 storet 1 ,mem_state_map -0x5d17 024914 and_into 0x2 ,temp -0x5d18 024915 storet 1 ,mem_lmo_tid2 -0x5d19 024916 fetcht 1 ,mem_state_map -0x5d1a 024917 rshift pdata ,pdata -0x5d1b 024918 store 1 ,mem_lmi_opcode2 -0x5d1c 024919 bpatchx patch2f_6 ,mem_patch2f -0x5d1d 024920 fetch 1 ,mem_lmi_opcode2 -0x5d1e 024921 beq lmp_escape ,parse_lmp_escape -0x5d1f 024922 beq lmp_accepted ,parse_lmp_accepted -0x5d20 024923 beq lmp_not_accepted ,parse_lmp_not_accepted -0x5d21 024924 beq lmp_set_afh ,parse_lmp_set_afh -0x5d22 024925 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req -0x5d23 024926 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req -0x5d24 024927 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key -0x5d25 024928 beq lmp_auto_rate ,parse_lmp_auto_rate -0x5d26 024929 beq lmp_test_control ,parse_lmp_test_control -0x5d27 024930 beq lmp_test_activate ,parse_lmp_test_activate -0x5d28 024931 beq lmp_setup_complete ,parse_lmp_setup_complete -0x5d29 024932 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout -0x5d2a 024933 beq lmp_features_req ,parse_lmp_features_req -0x5d2b 024934 beq lmp_host_connection_req ,parse_lmp_conn_req -0x5d2c 024935 beq lmp_version_req ,parse_lmp_version_req -0x5d2d 024936 beq lmp_version_res ,parse_lmp_version_res -0x5d2e 024937 beq lmp_detach ,parse_lmp_detach -0x5d2f 024938 beq lmp_max_slot ,parse_lmp_max_slot -0x5d30 024939 beq lmp_max_slot_req ,parse_lmp_max_slot_req -0x5d31 024940 beq lmp_name_req ,parse_lmp_name_req -0x5d32 024941 beq lmp_name_res ,parse_lmp_name_res -0x5d33 024942 beq lmp_features_res ,parse_lmp_features_res -0x5d34 024943 beq lmp_comb_key ,parse_lmp_comb_key -0x5d35 024944 beq lmp_au_rand ,parse_lmp_au_rand -0x5d36 024945 beq lmp_in_rand ,parse_lmp_in_rand -0x5d37 024946 beq lmp_sres ,parse_lmp_sres -0x5d38 024947 beq lmp_incr_power_req ,parse_lmp_incr_power -0x5d39 024948 beq lmp_decr_power_req ,parse_lmp_decr_power -0x5d3a 024949 beq lmp_max_power ,parse_lmp_max_power -0x5d3b 024950 beq lmp_min_power ,parse_lmp_min_power -0x5d3c 024951 beq lmp_page_mode_req ,parse_lmp_page_mode_req -0x5d3d 024952 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req -0x5d3e 024953 beq lmp_preferred_rate ,parse_lmp_preferred_rate -0x5d3f 024954 beq lmp_slot_offset ,parse_lmp_slot_offset -0x5d40 024955 beq lmp_sniff_req ,parse_lmp_sniff_req -0x5d41 024956 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req -0x5d42 024957 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req -0x5d43 024958 beq lmp_switch_req ,parse_lmp_switch_req -0x5d44 024959 beq lmp_temp_rand ,parse_lmp_temp_rand -0x5d45 024960 beq lmp_temp_key ,parse_lmp_temp_key -0x5d46 024961 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req -0x5d47 024962 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res -0x5d48 024963 beq lmp_unit_key ,parse_lmp_unit_key -0x5d49 024964 beq lmp_unsniff_req ,parse_lmp_unsniff_req -0x5d4a 024965 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key -0x5d4b 024966 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header -0x5d4c 024967 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload -0x5d4d 024968 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm -0x5d4e 024969 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number -0x5d4f 024970 beq lmp_dhkey_check ,parse_dhkey_check -0x5d50 024971 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res -0x5d51 024972 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req -: 024975 reject_unknown_packet: -0x5d52 024976 jam unknown_lmp_pdu ,mem_lmo_reason2 -: 024977 reject_lmp_packet: -0x5d53 024978 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5d54 024979 rtn -: 024981 parse_lmp_clkoffset_req: -0x5d55 024982 jam lmp_clkoffset_res ,mem_lmo_opcode2 -0x5d56 024983 rtn -: 024985 parse_enc_key_size_mask_req: -0x5d57 024986 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 -0x5d58 024987 rtn -: 024989 parse_lmp_set_afh: -0x5d59 024990 fetch 4 ,mem_rxbuf + 1 -0x5d5a 024991 lshift pdata ,pdata -0x5d5b 024992 store 4 ,mem_afh_instant -0x5d5c 024993 fetch 1 ,mem_rxbuf + 5 -0x5d5d 024994 store 1 ,mem_afh_new_mod -0x5d5e 024995 fetch 5 ,mem_rxbuf + 6 -0x5d5f 024996 store 5 ,mem_afh_map_new -0x5d60 024997 fetch 5 ,mem_rxbuf + 11 -0x5d61 024998 istore 5 ,contw -0x5d62 024999 fetch 1 ,mem_mode -0x5d63 025000 set1 afh_change ,pdata -0x5d64 025001 store 1 ,mem_mode -0x5d65 025002 rtn -: 025003 parse_lmp_escape: -0x5d66 025004 bpatchx patch2f_7 ,mem_patch2f -0x5d67 025005 fetch 1 ,mem_rxbuf + 1 -0x5d68 025006 set1 7 ,pdata -0x5d69 025007 store 1 ,mem_lmi_opcode2 -0x5d6a 025008 beq lmp_ext_accepted ,parse_lmpext_accepted -0x5d6b 025009 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted -0x5d6c 025010 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req -0x5d6d 025011 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res -0x5d6e 025012 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req -0x5d6f 025013 beq lmp_ext_features_req ,parse_lmpext_features_req -0x5d70 025014 beq lmp_ext_features_res ,parse_lmpext_features_res -0x5d71 025015 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req -0x5d72 025016 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt -0x5d73 025017 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt -0x5d74 025018 beq lmp_io_cap_req ,parse_lmpext_iocap_req -0x5d75 025019 beq lmp_io_cap_res ,parse_lmpext_iocap_res -0x5d76 025020 rtneq lmp_ext_features_res -: 025023 reject_unknown_ext_packet: -0x5d77 025024 jam lmp_not_accepted_ext ,mem_lmo_opcode2 -0x5d78 025025 jam unknown_lmp_pdu ,mem_lmo_reason2 -0x5d79 025027 rtn -: 025028 parse_lmpext_chn_classification_req: -0x5d7a 025029 jam lmp_not_accepted_ext ,mem_lmo_opcode2 -0x5d7b 025030 jam not_support_chn_classification ,mem_lmo_reason2 -0x5d7c 025031 rtn -: 025033 parse_lmpext_iocap_req: -0x5d7d 025034 call iocap_lmpext_load -0x5d7e 025035 jam lmp_io_cap_res ,mem_lmo_opcode2 -0x5d7f 025036 rtn -: 025038 parse_lmpext_iocap_res: -0x5d80 025039 call iocap_lmpext_load -0x5d81 025040 branch iocap_lmpext_common -: 025042 iocap_lmpext_load: -0x5d82 025043 arg mem_sp_iocap_remote ,contw -0x5d83 025044 fetch 3 ,mem_rxbuf + 2 -0x5d84 025045 istore 3 ,contw -0x5d85 025046 rtn -: 025048 iocap_lmpext_common: -0x5d86 025049 branch master_set_mem_master_sp_flag ,true -0x5d87 025050 rtn -: 025051 parse_lmpext_accepted: -0x5d88 025052 fetch 1 ,mem_rxbuf + 3 -0x5d89 025053 set1 7 ,pdata -0x5d8a 025054 store 1 ,mem_lmi_accepted_opcode -0x5d8b 025055 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt -0x5d8c 025056 rtn -: 025059 parse_lmpext_not_accepted: -0x5d8d 025060 fetch 1 ,mem_rxbuf + 3 -0x5d8e 025061 set1 7 ,pdata -0x5d8f 025062 store 1 ,mem_lmi_accepted_opcode -0x5d90 025063 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt -0x5d91 025064 rtn -: 025066 parse_lmpext_accepted_ptt: -0x5d92 025067 fetch 1 ,mem_ptt -0x5d93 025068 fetcht 1 ,mem_state_map -0x5d94 025069 nsetflag blank ,smap_edr ,temp -0x5d95 025070 storet 1 ,mem_state_map -: 025071 parse_lmpext_not_accepted_ptt: -0x5d96 025072 fetch 1 ,mem_state -0x5d97 025073 rtnbit0 state_init_seq -0x5d98 025074 set0 state_init_seq ,pdata -0x5d99 025075 store 1 ,mem_state -0x5d9a 025076 fetch 1 ,mem_auth_enable -0x5d9b 025077 nrtn blank -0x5d9c 025078 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5d9d 025079 rtn -: 025081 parse_lmpext_pause_encrypt: -0x5d9e 025082 nbranch parse_lmpext_pause_encrypt_slave ,master -0x5d9f 025083 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x5da0 025084 branch tid_reply -: 025086 parse_lmpext_pause_encrypt_slave: -0x5da1 025087 jam lmp_pause_encryption_req ,mem_lmo_opcode2 -0x5da2 025088 rtn -: 025090 parse_lmpext_resume_encrypt: -0x5da3 025093 call tid_reply -0x5da4 025094 branch lmp_start_encryption -: 025096 parse_lmpext_features_req: -0x5da5 025097 jam lmp_ext_features_res ,mem_lmo_opcode2 -0x5da6 025098 rtn -: 025100 parse_lmpext_features_res: -0x5da7 025101 fetcht 1 ,mem_rxbuf + 4 -0x5da8 025102 and temp ,0x1 ,temp -0x5da9 025103 storet 1 ,mem_remote_sppcap -0x5daa 025104 fetch 1 ,mem_hci_cmd -0x5dab 025105 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci -0x5dac 025106 jam 0 ,mem_hci_cmd -: 025107 parse_lmpext_features_res_not_hci: -0x5dad 025108 fetch 1 ,mem_conn_sm -0x5dae 025109 rtnne conn_sm_wait_features_ext -0x5daf 025110 jam conn_sm_send_conn_req ,mem_conn_sm -0x5db0 025111 branch process_conn_sm -: 025113 parse_lmp_accepted: -0x5db1 025114 bpatchx patch30_0 ,mem_patch30 -0x5db2 025115 fetch 1 ,mem_rxbuf + 1 -0x5db3 025116 store 1 ,mem_lmi_accepted_opcode -0x5db4 025117 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn -0x5db5 025118 beq lmp_in_rand ,parse_lmp_accepted_inrand -0x5db6 025119 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode -0x5db7 025120 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize -0x5db8 025121 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc -0x5db9 025122 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc -0x5dba 025123 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req -0x5dbb 025124 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req -0x5dbc 025125 beq lmp_switch_req ,parse_lmp_accepted_switch -0x5dbd 025127 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header -0x5dbe 025128 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload -0x5dbf 025129 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number -0x5dc0 025130 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check -0x5dc1 025131 rtn -: 025133 parse_lmp_not_accepted: -0x5dc2 025134 bpatchx patch30_1 ,mem_patch30 -0x5dc3 025135 fetch 1 ,mem_rxbuf + 1 -0x5dc4 025136 store 1 ,mem_lmi_accepted_opcode -0x5dc5 025137 beq lmp_name_req ,parse_lmp_not_accepted_name_req -0x5dc6 025138 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn -0x5dc7 025139 beq lmp_au_rand ,parse_lmp_not_accepted_aurand -0x5dc8 025140 beq lmp_in_rand ,parse_lmp_not_accepted_inrand -0x5dc9 025141 beq lmp_switch_req ,parse_lmp_not_accepted_switch -0x5dca 025143 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number -0x5dcb 025144 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check -0x5dcc 025145 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req -0x5dcd 025146 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req -0x5dce 025147 rtn -: 025149 parse_lmp_accepted_switch: -0x5dcf 025150 jam bt_evt_switch_accept ,mem_fifo_temp -0x5dd0 025151 call ui_ipc_send_event -0x5dd1 025152 branch role_switch_prepare0 -: 025153 parse_lmp_not_accepted_switch: -0x5dd2 025154 jam bt_evt_switch_not_accept ,mem_fifo_temp -0x5dd3 025155 call ui_ipc_send_event -0x5dd4 025156 jam switch_flag_not_accept ,mem_switch_flag -0x5dd5 025157 setarg timer_switch_waite -0x5dd6 025158 arg switch_wait_timer ,queue -0x5dd7 025159 branch timer_init -: 025162 parse_lmp_accepted_hostconn: -0x5dd8 025165 fetch 1 ,mem_lmp_conn_state -0x5dd9 025166 set1 received_conn_req ,pdata -0x5dda 025167 store 1 ,mem_lmp_conn_state -0x5ddb 025168 jam bt_evt_bb_connected ,mem_fifo_temp -0x5ddc 025169 call ui_ipc_send_event -0x5ddd 025170 jam lmp_packet_type_table_req ,mem_lmo_opcode2 -: 025172 parse_lmp_accepted_hostconn_ctn: -0x5dde 025174 fetch 1 ,mem_conn_sm -0x5ddf 025175 bne conn_sm_wait_conn_accept ,parse_rx_done -0x5de0 025178 jam conn_sm_auth_pair ,mem_conn_sm -0x5de1 025179 rtn -: 025187 parse_lmp_not_accepted_hostconn: -0x5de2 025188 jam acl_connection_already_exists ,mem_disconn_reason_send -0x5de3 025189 jam lmp_detach ,mem_lmo_opcode2 -0x5de4 025191 jam conn_sm_standby ,mem_conn_sm -0x5de5 025193 branch parse_rx_done ,true -0x5de6 025194 rtn -: 025196 parse_lmp_accepted_inrand: -0x5de7 025197 fetch 1 ,mem_link_key_exists -0x5de8 025198 nrtn blank -0x5de9 025199 call clear_linkkey -0x5dea 025200 call lmp_generate_key -0x5deb 025201 rtn master -0x5dec 025202 set1 mark_slave_in_rand_accepted ,mark -0x5ded 025203 rtn -: 025205 parse_lmp_accepted_enc_mode: -0x5dee 025206 nrtn master -0x5def 025207 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 -0x5df0 025208 fetch 1 ,mem_state_map -0x5df1 025209 rtnbit0 smap_encryption -0x5df2 025210 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x5df3 025211 rtn -: 025213 parse_lmp_accepted_enc_keysize: -0x5df4 025214 branch lmp_start_encryption -: 025216 parse_lmp_accepted_start_enc: -0x5df5 025217 call send_create_conn_start_l2cap_timer_sm -0x5df6 025218 fetch 1 ,mem_state -0x5df7 025219 rtnbit1 state_conn_comp -0x5df8 025220 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5df9 025221 fetch 1 ,mem_conn_sm -0x5dfa 025222 rtnne conn_sm_encrypt_wait -0x5dfb 025223 jam conn_sm_encrypt_wait_clear ,mem_conn_sm -0x5dfc 025224 rtn -: 025226 parse_lmp_accepted_stop_enc: -0x5dfd 025234 rtn -: 025236 parse_lmp_not_accepted_aurand: -: 025237 parse_lmp_not_accepted_aurand_send_detach: -0x5dfe 025238 jam lmp_detach ,mem_lmo_opcode2 -0x5dff 025239 jam other_end_terminated ,mem_disconn_reason_send -0x5e00 025240 rtn -: 025242 parse_lmp_not_accepted_inrand: -0x5e01 025243 fetch 1 ,mem_rxbuf + 2 -0x5e02 025244 beq key_missing ,parse_lmp_inrand_key_missing -0x5e03 025245 rtnne pairing_not_allowed -0x5e04 025246 jam pairing_not_allowed ,mem_disconn_reason_send -0x5e05 025247 jam lmp_detach ,mem_lmo_opcode2 -0x5e06 025248 rtn -: 025249 parse_lmp_inrand_key_missing: -0x5e07 025250 jam key_missing ,mem_disconn_reason_send -0x5e08 025251 jam lmp_detach ,mem_lmo_opcode2 -0x5e09 025252 rtn -: 025254 parse_lmp_not_accepted_name_req: -0x5e0a 025255 rtn -: 025257 parse_lmp_not_accepted_simple_pairing_number: -0x5e0b 025258 jam sp_stat_null ,mem_sp_state -0x5e0c 025259 jam lmp_detach ,mem_lmo_opcode2 -0x5e0d 025260 branch parse_rx_done -: 025262 parse_lmp_not_accepted_dhkey_check: -0x5e0e 025263 jam sp_stat_null ,mem_sp_state -0x5e0f 025264 jam lmp_detach ,mem_lmo_opcode2 -0x5e10 025265 branch parse_rx_done -: 025266 parse_lmp_not_accepted_unsniff_req: -0x5e11 025267 jam bt_evt_unsniff_not_accept ,mem_fifo_temp -0x5e12 025268 branch ui_ipc_send_event -: 025270 parse_lmp_accepted_unsniff_req: -0x5e13 025271 jam bt_evt_unsniff_accept ,mem_fifo_temp -0x5e14 025272 call ui_ipc_send_event -0x5e15 025273 branch sniff_exit -: 025275 parse_lmp_accepted_sniff_req: -0x5e16 025276 jam bt_evt_sniff_accept ,mem_fifo_temp -0x5e17 025277 call ui_ipc_send_event -0x5e18 025278 setarg 0 -0x5e19 025279 store 2 ,mem_dsniff -0x5e1a 025280 fetch 2 ,mem_sniff_param_interval -0x5e1b 025281 lshift pdata ,pdata -0x5e1c 025282 store 2 ,mem_tsniff -0x5e1d 025283 fetch 1 ,mem_sniff_param_attempt -0x5e1e 025284 store 1 ,mem_sniff_attempt -0x5e1f 025285 fetch 1 ,mem_sniff_param_timeout -0x5e20 025286 store 1 ,mem_sniff_timeout -0x5e21 025287 branch sniff_init -: 025289 parse_lmp_not_acdcept_sniff_req: -0x5e22 025290 jam bt_evt_sniff_not_accept ,mem_fifo_temp -0x5e23 025291 branch ui_ipc_send_event -: 025293 parse_lmp_crypt_key: -0x5e24 025294 fetcht 1 ,mem_rxbuf + 1 -0x5e25 025295 storet 1 ,mem_key_size -0x5e26 025296 branch accept_lmp_msg -: 025298 parse_lmp_setup_complete: -0x5e27 025299 fetch 1 ,mem_lmp_conn_state -0x5e28 025300 set1 received_setup_complete ,pdata -0x5e29 025301 store 1 ,mem_lmp_conn_state -0x5e2a 025302 rtnbit1 sent_setup_complete -0x5e2b 025303 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5e2c 025304 branch parse_rx_done -: 025306 parse_lmp_max_slot: -0x5e2d 025309 rtn -: 025311 parse_lmp_max_slot_req: -0x5e2e 025312 fetch 1 ,mem_max_slot -0x5e2f 025313 fetcht 1 ,mem_rxbuf + 1 -0x5e30 025314 isub temp ,null -0x5e31 025316 branch accept_lmp_msg ,positive -0x5e32 025317 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5e33 025318 jam unspecified_error ,mem_lmo_reason2 -0x5e34 025319 jam lmp_max_slot_req ,mem_lmi_opcode2 -0x5e35 025320 rtn -: 025322 parse_lmp_detach: -0x5e36 025323 call prepare_disconnect -0x5e37 025324 branch accept_lmp_msg -: 025326 accept_lmp_msg: -0x5e38 025327 jam lmp_accepted ,mem_lmo_opcode2 -0x5e39 025328 rtn -: 025330 parse_lmp_incr_power: -0x5e3a 025331 jam lmp_max_power ,mem_lmo_opcode2 -0x5e3b 025332 rtn -: 025334 parse_lmp_decr_power: -0x5e3c 025335 jam lmp_min_power ,mem_lmo_opcode2 -0x5e3d 025336 rtn -: 025338 parse_lmp_version_res: -0x5e3e 025339 fetch 1 ,mem_conn_sm -0x5e3f 025340 rtneq conn_sm_wait_version -0x5e40 025342 jam conn_sm_send_features ,mem_conn_sm -0x5e41 025344 rtn -: 025347 parse_lmp_auto_rate: -0x5e42 025348 rtn -: 025350 parse_lmp_in_rand: -0x5e43 025351 call lmp_copy_rand -0x5e44 025352 jam pincode_state_wait_pincode ,mem_pincode_state -0x5e45 025353 jam bt_evt_pincode_req ,mem_fifo_temp -0x5e46 025354 call ui_ipc_send_event -0x5e47 025356 call tid_check -0x5e48 025357 nbranch lmp_accept_inrand ,true -0x5e49 025359 nbranch parse_lmp_inrand_res ,master -0x5e4a 025360 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5e4b 025361 jam lmp_in_rand ,mem_lmi_opcode2 -0x5e4c 025362 jam transaction_collision ,mem_lmo_reason2 -0x5e4d 025363 rtn -: 025364 parse_lmp_inrand_res: -0x5e4e 025365 fetch 1 ,mem_op -0x5e4f 025366 set1 op_inrand_req ,pdata -0x5e50 025367 store 1 ,mem_op -0x5e51 025368 rtn -: 025371 pop_tid_follow: -0x5e52 025372 fetcht 1 ,mem_state_map -0x5e53 025373 nsetflag blank ,smap_lmptid ,temp -0x5e54 025374 storet 1 ,mem_state_map -0x5e55 025375 rtn -: 025378 push_tid_follow: -0x5e56 025379 fetch 1 ,mem_lmo_tid2 -0x5e57 025380 rshift pdata ,pdata -0x5e58 025381 and_into 1 ,pdata -0x5e59 025382 rtn -: 025384 parse_lmp_au_rand_moudle: -0x5e5a 025385 fetch 1 ,mem_nv_data_number -0x5e5b 025386 rtn blank -0x5e5c 025387 fetch 1 ,mem_pairing_auth -0x5e5d 025388 call load_device_list ,blank -0x5e5e 025389 rtn -: 025391 parse_lmp_au_rand: -0x5e5f 025392 call parse_lmp_au_rand_moudle -0x5e60 025393 call push_tid_follow -0x5e61 025394 store 1 ,mem_sres_tid -0x5e62 025395 call lmp_copy_rand -0x5e63 025396 jam lmp_sres ,mem_lmo_opcode2 -0x5e64 025397 fetch 1 ,mem_link_key_exists -0x5e65 025398 nrtn blank -0x5e66 025399 fetch 1 ,mem_state -0x5e67 025400 rtnbit1 state_combkey -0x5e68 025401 jam key_missing ,mem_lmo_reason2 -0x5e69 025402 branch reject_lmp_packet -: 025404 parse_lmp_sres: -0x5e6a 025405 arg mem_plap ,rega -0x5e6b 025406 call function_e1 -0x5e6c 025407 fetch 4 ,mem_rxbuf + 1 -0x5e6d 025408 fetcht 4 ,mem_input_store -0x5e6e 025409 isub temp ,null -0x5e6f 025410 branch authentication_ok ,zero -0x5e70 025411 jam lmp_detach ,mem_lmo_opcode2 -0x5e71 025412 jam authentication_failure_error ,mem_disconn_reason_send -0x5e72 025413 rtn -: 025414 authentication_ok: -0x5e73 025415 call authentication_ok_common -0x5e74 025416 fetch 1 ,mem_ssp_enable -0x5e75 025417 branch pairing_success ,blank -0x5e76 025418 rtn -: 025421 authentication_ok_common: -0x5e77 025422 call copy_aco -0x5e78 025423 call linkkey_ready -0x5e79 025424 fetch 1 ,mem_op -0x5e7a 025425 isolate1 op_auth_req ,pdata -0x5e7b 025426 set0 op_auth_req ,pdata -0x5e7c 025427 store 1 ,mem_op -0x5e7d 025428 fetch 1 ,mem_conn_sm -0x5e7e 025429 beq conn_sm_auth_wait ,authentication_ok_conn_sm -0x5e7f 025430 beq conn_sm_pairing_wait ,authentication_ok_conn_sm -0x5e80 025431 rtn -: 025432 authentication_ok_conn_sm: -0x5e81 025433 fetch 1 ,mem_pairing_auth -0x5e82 025434 rtnne defalt_pairing_auth -0x5e83 025435 fetch 1 ,mem_state_map -0x5e84 025436 rtnbit1 smap_encryption -0x5e85 025437 branch host_create_conn_encrypt -: 025439 parse_lmp_comb_key: -0x5e86 025440 arg mem_rxbuf + 1 ,rega -0x5e87 025441 arg mem_kinit ,regb -0x5e88 025442 arg mem_random_number ,contw -0x5e89 025443 call xor16 -0x5e8a 025444 arg mem_plap ,rega -0x5e8b 025445 call generate_linkkey -0x5e8c 025446 jam lmp_au_rand ,mem_lmo_opcode2 -0x5e8d 025447 fetch 1 ,mem_state -0x5e8e 025448 bbit0 state_combkey ,lmp_generate_key -0x5e8f 025449 rtn -: 025451 parse_lmp_name_res: -0x5e90 025452 fetch 2 ,mem_len -0x5e91 025453 add pdata ,-3 ,loopcnt -0x5e92 025454 fetcht 1 ,mem_rxbuf + 1 -0x5e93 025455 setarg mem_tmp_buffer -0x5e94 025456 iadd temp ,contw -0x5e95 025457 arg mem_rxbuf + 3 ,contr -0x5e96 025458 call memcpy -0x5e97 025459 fetcht 1 ,mem_name_offset -0x5e98 025460 fetch 1 ,mem_rxbuf + 2 -0x5e99 025461 isub temp ,pdata -0x5e9a 025462 sub pdata ,14 ,null -0x5e9b 025463 branch parse_lmp_name_res_end ,positive -0x5e9c 025464 add temp ,14 ,pdata -0x5e9d 025465 store 1 ,mem_name_offset -0x5e9e 025466 jam lmp_name_req ,mem_lmo_opcode2 -0x5e9f 025467 rtn -: 025468 parse_lmp_name_res_end: -0x5ea0 025469 fetch 1 ,mem_state_map -0x5ea1 025470 set1 smap_name_res ,pdata -0x5ea2 025471 store 1 ,mem_state_map -0x5ea3 025472 bbit1 smap_name_req ,lmp_disconnect -0x5ea4 025473 rtn -: 025474 parse_lmp_name_req: -0x5ea5 025475 fetch 1 ,mem_rxbuf + 1 -0x5ea6 025476 store 1 ,mem_lmi_opcode2 -0x5ea7 025477 jam lmp_name_res ,mem_lmo_opcode2 -0x5ea8 025478 rtn -: 025480 parse_lmp_conn_req: -0x5ea9 025481 branch accept_lmp_msg -: 025483 parse_lmp_timing_accuracy_req: -0x5eaa 025484 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 -0x5eab 025485 rtn -: 025487 parse_lmp_features_req: -0x5eac 025488 jam lmp_features_res ,mem_lmo_opcode2 -0x5ead 025489 rtn -: 025491 parse_lmp_version_req: -0x5eae 025492 jam lmp_version_res ,mem_lmo_opcode2 -0x5eaf 025493 rtn -: 025495 parse_lmp_supervision_timeout: -0x5eb0 025498 rtn -: 025502 parse_lmp_sniff_subrating_req: -0x5eb1 025503 fetch 2 ,mem_tsniff -0x5eb2 025504 iforce temp -0x5eb3 025505 fetch 1 ,mem_rxbuf + 2 -0x5eb4 025506 store 1 ,mem_subsniff_rate -0x5eb5 025507 imul32 temp ,temp -0x5eb6 025508 fetch 2 ,mem_rxbuf + 3 -0x5eb7 025509 lshift pdata ,pdata -0x5eb8 025510 store 2 ,mem_subsniff_tcmax -0x5eb9 025511 fetch 4 ,mem_rxbuf + 5 -0x5eba 025512 lshift pdata ,pdata -0x5ebb 025513 store 4 ,mem_subsniff_instant -0x5ebc 025515 deposit temp -0x5ebd 025516 store 2 ,mem_subsniff_tsniff -0x5ebe 025517 rtn -: 025518 parse_lmpext_packet_type_table_req: -0x5ebf 025519 fetcht 1 ,mem_ptt -0x5ec0 025520 fetch 1 ,mem_rxbuf + 2 -0x5ec1 025521 ixor temp ,null -0x5ec2 025522 nbranch reject_unknown_ext_packet ,zero -0x5ec3 025523 isolate1 0 ,pdata -0x5ec4 025524 fetch 1 ,mem_state_map -0x5ec5 025525 setflag true ,smap_edr ,pdata -0x5ec6 025526 store 1 ,mem_state_map -0x5ec7 025527 jam lmp_ext_accepted ,mem_lmo_opcode2 -0x5ec8 025528 jam lmp_packet_type_table_req ,mem_lmi_opcode2 -0x5ec9 025529 rtn -: 025532 parse_lmp_sniff_subrating_res: -: 025533 parse_lmp_preferred_rate: -: 025534 parse_lmp_max_power: -: 025535 parse_lmp_min_power: -0x5eca 025536 rtn -: 025537 parse_lmp_page_mode_req: -0x5ecb 025539 branch accept_lmp_msg -: 025540 parse_lmp_page_scan_mode_req: -0x5ecc 025543 branch accept_lmp_msg -: 025547 parse_lmp_slot_offset: -0x5ecd 025548 fetch 2 ,mem_rxbuf + 1 -0x5ece 025549 store 2 ,mem_slot_offset -0x5ecf 025550 rtn -: 025552 parse_lmp_sniff_req_check_sniff_para: -0x5ed0 025553 fetch 2 ,mem_rxbuf + 4 -0x5ed1 025554 fetcht 1 ,mem_lpm_mult -0x5ed2 025555 imul32 temp ,pdata -0x5ed3 025556 arg 0x640 ,temp -0x5ed4 025557 isub temp ,null -0x5ed5 025559 rtn -: 025561 parse_lmp_sniff_req: -0x5ed6 025562 fetch 2 ,mem_rxbuf + 6 -0x5ed7 025563 branch lmp_reject_sniff ,blank -0x5ed8 025564 call parse_lmp_sniff_req_check_sniff_para -0x5ed9 025565 branch lmp_reject_sniff ,positive -0x5eda 025566 fetch 1 ,mem_device_option -0x5edb 025567 sub pdata ,dvc_op_module ,null -0x5edc 025568 call module_set_lpm_mult_2 ,zero -0x5edd 025569 fetch 1 ,mem_state -0x5ede 025570 bbit1 state_insniff ,lmp_reject_sniff -0x5edf 025571 fetch 2 ,mem_rxbuf + 2 -0x5ee0 025572 lshift pdata ,pdata -0x5ee1 025573 store 2 ,mem_dsniff -0x5ee2 025574 fetch 2 ,mem_rxbuf + 4 -0x5ee3 025575 lshift pdata ,pdata -0x5ee4 025576 store 2 ,mem_tsniff -0x5ee5 025577 fetch 2 ,mem_rxbuf + 6 -0x5ee6 025578 store 1 ,mem_sniff_attempt -0x5ee7 025579 iforce temp -0x5ee8 025580 fetch 2 ,mem_rxbuf + 8 -0x5ee9 025581 store 1 ,mem_sniff_timeout -0x5eea 025582 isub temp ,null -0x5eeb 025583 nbranch set_big_value_to_attempt ,positive -0x5eec 025584 store 1 ,mem_sniff_attempt -: 025585 set_big_value_to_attempt: -0x5eed 025587 jam lmp_accepted ,mem_lmo_opcode2 -0x5eee 025588 jam lmp_sniff_req ,mem_lmi_opcode2 -0x5eef 025589 rtn -: 025591 lmp_reject_sniff: -0x5ef0 025592 jam pdu_not_allowed ,mem_lmo_reason2 -0x5ef1 025593 branch reject_lmp_packet -: 025595 parse_lmp_start_encryption_req: -0x5ef2 025596 call accept_lmp_msg -0x5ef3 025597 call lmp_copy_rand -0x5ef4 025598 call function_e3 -0x5ef5 025599 branch start_encryption -: 025601 parse_lmp_stop_encryption_req: -0x5ef6 025602 call accept_lmp_msg -0x5ef7 025603 branch stop_encryption -: 025606 parse_lmp_switch_req: -0x5ef8 025607 fetch 4 ,mem_rxbuf + 1 -0x5ef9 025608 lshift pdata ,pdata -0x5efa 025610 branch parse_lmp_switch_accept ,master -0x5efb 025611 fetcht 1 ,mem_link_key_exists -0x5efc 025612 nbranch parse_lmp_switch_req_clear_mark ,blank -: 025613 parse_lmp_switch_req_not_accept: -0x5efd 025614 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5efe 025615 jam lmp_switch_req ,mem_lmi_opcode2 -0x5eff 025616 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f00 025617 rtn -: 025618 parse_lmp_switch_req_clear_mark: -0x5f01 025619 jam lmp_slot_offset ,mem_lmo_opcode2 -0x5f02 025620 jam 0 ,mem_conn_sm -0x5f03 025621 branch role_switch_prepare -: 025623 parse_lmp_switch_accept: -0x5f04 025624 call role_switch_prepare -0x5f05 025625 set1 mark_reconn_recieve_switch ,mark -0x5f06 025626 fetch 1 ,mem_connection_options -0x5f07 025627 set0 connection_switch ,pdata -0x5f08 025628 store 1 ,mem_connection_options -0x5f09 025629 branch accept_lmp_msg -: 025633 parse_lmp_temp_rand: -: 025634 parse_lmp_temp_key: -: 025635 parse_lmp_timing_accuracy_res: -: 025636 parse_lmp_unit_key: -: 025637 parse_lmp_use_semi_permanend_key: -0x5f0a 025638 rtn -: 025641 parse_lmp_unsniff_req: -0x5f0b 025642 jam lmp_accepted ,mem_lmo_opcode2 -0x5f0c 025643 jam lmp_unsniff_req ,mem_lmi_opcode2 -0x5f0d 025644 jam bt_evt_remote_unsniff ,mem_fifo_temp -0x5f0e 025645 call ui_ipc_send_event -0x5f0f 025646 branch sniff_exit -: 025648 parse_lmp_encapsulated_header: -0x5f10 025649 fetch 1 ,mem_rxbuf + 1 -0x5f11 025650 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject -0x5f12 025651 fetch 1 ,mem_rxbuf + 2 -0x5f13 025652 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject -0x5f14 025653 fetch 1 ,mem_rxbuf + 3 -0x5f15 025654 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject -0x5f16 025655 call check_localsm -0x5f17 025656 branch parse_lmp_encapsulated_header_master ,true -0x5f18 025657 jam sp_stat_key_recv ,mem_sp_state -: 025658 parse_lmp_encapsulated_header_master: -0x5f19 025659 jam lmp_accepted ,mem_lmo_opcode2 -0x5f1a 025660 jam lmp_encapsulated_header ,mem_lmi_opcode2 -0x5f1b 025661 branch parse_rx_done -: 025663 parse_lmp_encapsulated_header_reject: -0x5f1c 025664 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f1d 025665 branch reject_lmp_packet -: 025667 parse_lmp_accepted_encapsulated_header: -0x5f1e 025670 jam lmp_encapsulated_payload ,mem_lmo_opcode2 -0x5f1f 025672 rtn -: 025673 parse_lmp_accepted_simple_pairing_number: -0x5f20 025674 fetch 1 ,mem_ssp_mode_flag -0x5f21 025675 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin -0x5f22 025676 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey -: 025677 parse_lmp_accepted_simple_pairing_number_common: -0x5f23 025678 call check_localsm -0x5f24 025679 rtn true -0x5f25 025680 jam sp_stat_confirm_recv ,mem_sp_state -0x5f26 025681 rtn -: 025683 parse_lmp_accepted_simple_pairing_number_ssp_pin: -0x5f27 025684 call g_noninit_number_confirm -0x5f28 025685 jam bt_evt_bt_gkey_generate ,mem_fifo_temp -0x5f29 025686 call ui_ipc_send_event -0x5f2a 025687 branch parse_lmp_accepted_simple_pairing_number_common -: 025690 parse_lmp_accepted_simple_pairing_number_passkey: -0x5f2b 025691 call check_localsm -0x5f2c 025692 rtn true -0x5f2d 025693 fetch 1 ,mem_authentication_passkey_times -0x5f2e 025694 beq 19 ,authentication_passkey_end -0x5f2f 025695 increase 1 ,pdata -0x5f30 025696 store 1 ,mem_authentication_passkey_times -: 025699 authentication_passkey: -0x5f31 025700 jam sp_flag_commit ,mem_sp_flag -0x5f32 025701 jam sp_stat_commit_calc ,mem_sp_state -0x5f33 025702 fetch 1 ,mem_authentication_passkey_times -0x5f34 025703 copy pdata ,queue -0x5f35 025704 fetch 6 ,mem_pin -0x5f36 025705 qisolate1 pdata -0x5f37 025706 setarg 0x80 -0x5f38 025707 setflag true ,0 ,pdata -0x5f39 025708 store 1 ,mem_passkey_1bit -0x5f3a 025709 rtn -: 025711 authentication_passkey_end: -0x5f3b 025712 jam sp_stat_confirm_recv ,mem_sp_state -0x5f3c 025713 rtn -: 025715 parse_lmp_accepted_dhkey_check: -0x5f3d 025716 call parse_lmp_accepted_dhkey_check_common -: 025717 pairing_success: -0x5f3e 025718 fetch 1 ,mem_flag_pairing_state -0x5f3f 025719 rtn blank -0x5f40 025720 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state -0x5f41 025721 jam bt_evt_bt_pairing_success ,mem_fifo_temp -0x5f42 025722 branch ui_ipc_send_event -: 025725 parse_lmp_accepted_dhkey_check_common: -0x5f43 025727 call check_localsm -0x5f44 025728 ncall g_noninit ,true -0x5f45 025729 call g_init ,true -0x5f46 025730 call check_localsm -0x5f47 025731 rtn true -0x5f48 025732 jam sp_stat_link_key_calc ,mem_sp_state -0x5f49 025733 jam sp_flag_commit ,mem_sp_flag -0x5f4a 025734 rtn -: 025736 parse_simple_pairing_confirm: -0x5f4b 025737 arg mem_sp_confirm_remote ,contw -0x5f4c 025738 arg mem_rxbuf + 1 ,contr -0x5f4d 025739 call memcpy16 -0x5f4e 025740 fetch 1 ,mem_ssp_mode_flag -0x5f4f 025741 rtneq ssp_mode_passkey_entry_flag -0x5f50 025742 branch master_set_mem_master_sp_flag -: 025744 parse_lmp_encapsulated_payload: -0x5f51 025745 fetch 1 ,mem_master_sp_state -0x5f52 025746 beq sp_stat_random_send ,parse_encapsulated_payload_master -0x5f53 025747 fetch 1 ,mem_sp_state -0x5f54 025748 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject -: 025749 parse_encapsulated_payload_master: -0x5f55 025750 fetch 1 ,mem_sp_remote_key_recv_count -0x5f56 025751 sub pdata ,0x20 ,contw -0x5f57 025752 nbranch parse_lmp_encapsulated_payload_reject ,positive -0x5f58 025753 arg mem_sp_pubkey_remote ,contw -0x5f59 025754 iadd contw ,contw -0x5f5a 025755 fetch 8 ,mem_rxbuf + 1 -0x5f5b 025756 istore 8 ,contw -0x5f5c 025757 fetch 8 ,mem_rxbuf + 9 -0x5f5d 025758 istore 8 ,contw -0x5f5e 025759 fetch 1 ,mem_sp_remote_key_recv_count -0x5f5f 025760 increase 16 ,pdata -0x5f60 025761 store 1 ,mem_sp_remote_key_recv_count -0x5f61 025762 bne encapsulated_len_p192 ,accept_lmp_msg -: 025763 parse_lmp_encapsulated_payload_completed: -0x5f62 025764 call check_localsm -0x5f63 025765 branch accept_lmp_msg ,true -0x5f64 025766 jam sp_key_valid ,mem_sp_remote_key_invalid -0x5f65 025767 jam sp_stat_key_generate ,mem_sp_state -0x5f66 025768 jam sp_flag_commit ,mem_sp_flag -0x5f67 025769 branch accept_lmp_msg -: 025770 parse_lmp_encapsulated_payload_reject: -0x5f68 025771 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f69 025772 branch reject_lmp_packet -: 025773 parse_lmp_accepted_encapsulated_payload: -0x5f6a 025774 fetch 1 ,mem_sp_local_key_send_count -0x5f6b 025775 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted -0x5f6c 025776 jam lmp_encapsulated_payload ,mem_lmo_opcode2 -0x5f6d 025777 branch parse_rx_done -: 025779 parse_lmp_encapsulated_payload_all_accepted: -0x5f6e 025780 call check_localsm -0x5f6f 025781 branch parse_lmp_encapsulated_payload_all_accepted_master ,true -0x5f70 025782 fetch 1 ,mem_ssp_mode_flag -0x5f71 025783 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey -0x5f72 025784 jam sp_flag_commit ,mem_sp_flag -0x5f73 025785 jam sp_stat_commit_calc ,mem_sp_state -0x5f74 025786 branch parse_rx_done -: 025788 parse_lmp_encapsulated_payload_all_accepted_get_passkey: -0x5f75 025789 jam bt_evt_bt_get_passkey ,mem_fifo_temp -0x5f76 025790 branch ui_ipc_send_event -: 025793 parse_lmp_encapsulated_payload_all_accepted_master: -0x5f77 025795 branch parse_rx_done -: 025797 parse_lmp_simple_pairing_number: -0x5f78 025798 fetch 1 ,mem_master_sp_state -0x5f79 025799 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master -0x5f7a 025800 fetch 1 ,mem_sp_state -0x5f7b 025801 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject -: 025802 parse_lmp_simple_pairing_number_master: -0x5f7c 025803 arg mem_sp_random_remote ,contw -0x5f7d 025804 fetch 8 ,mem_rxbuf + 1 -0x5f7e 025805 istore 8 ,contw -0x5f7f 025806 fetch 8 ,mem_rxbuf + 9 -0x5f80 025807 istore 8 ,contw -0x5f81 025808 call check_localsm -0x5f82 025809 branch parse_lmp_simple_pairing_number_master0 ,true -0x5f83 025810 jam sp_stat_random_send ,mem_sp_state -0x5f84 025811 jam sp_flag_commit ,mem_sp_flag -0x5f85 025812 branch accept_lmp_msg -: 025813 parse_lmp_simple_pairing_number_master0: -0x5f86 025814 jam sp_stat_commit_calc ,mem_master_sp_state -0x5f87 025815 branch master_set_mem_master_sp_flag -: 025818 parse_lmp_simple_pairing_number_reject: -0x5f88 025819 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f89 025820 branch reject_lmp_packet -: 025822 parse_dhkey_check: -0x5f8a 025823 fetch 1 ,mem_master_sp_state -0x5f8b 025824 beq sp_stat_confirm_send ,parse_dhkey_check_master -0x5f8c 025825 fetch 1 ,mem_sp_state -0x5f8d 025826 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject -: 025827 parse_dhkey_check_master: -0x5f8e 025828 arg mem_sp_check_result ,contw -0x5f8f 025829 arg mem_rxbuf + 1 ,contr -0x5f90 025830 call memcpy16 -0x5f91 025831 call check_localsm -0x5f92 025832 branch parse_dhkey_check_master0 ,true -0x5f93 025833 fetch 1 ,mem_ssp_mode_flag -0x5f94 025834 beq ssp_mode_ssp_pin_flag ,number_comparison_mode -: 025835 number_comparison_successed: -0x5f95 025836 jam 0 ,mem_flag_mode_ssp_pin -0x5f96 025837 jam sp_stat_confirm_check ,mem_sp_state -0x5f97 025838 jam sp_flag_commit ,mem_sp_flag -0x5f98 025839 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x5f99 025840 branch parse_rx_done -: 025842 parse_dhkey_check_master0: -0x5f9a 025843 jam sp_stat_confirm_check ,mem_master_sp_state -0x5f9b 025844 jam sp_flag_commit ,mem_master_sp_flag -0x5f9c 025845 branch parse_rx_done -: 025846 parse_lmp_dhkey_check_reject: -0x5f9d 025847 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f9e 025848 branch reject_lmp_packet -: 025850 number_comparison_mode: -0x5f9f 025851 fetch 1 ,mem_flag_mode_ssp_pin -0x5fa0 025852 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result -0x5fa1 025853 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata -0x5fa2 025854 store 1 ,mem_flag_mode_ssp_pin -0x5fa3 025855 rtn -: 025857 comparison_result: -0x5fa4 025858 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed -0x5fa5 025859 jam 0 ,mem_flag_mode_ssp_pin -0x5fa6 025860 branch parse_lmp_dhkey_check_reject -: 025863 parse_lmp_clkoffset_res: -0x5fa7 025864 branch parse_rx_done -: 025866 parse_lmp_encryption_mode_req: -0x5fa8 025867 fetch 1 ,mem_connection_options -0x5fa9 025868 set0 connection_encrypt -0x5faa 025869 store 1 ,mem_connection_options -0x5fab 025870 call accept_lmp_msg -0x5fac 025871 nrtn master -0x5fad 025872 fetch 1 ,mem_rxbuf + 1 -0x5fae 025873 fetcht 1 ,mem_op -0x5faf 025874 setflag blank ,op_stop_enc ,temp -0x5fb0 025875 nsetflag blank ,op_start_enc ,temp -0x5fb1 025876 storet 1 ,mem_op -0x5fb2 025877 rtn -: 025879 parse_lmp_features_res: -0x5fb3 025880 fetcht 8 ,mem_rxbuf + 1 -: 025881 parse_lmp_features_res_not_hci: -0x5fb4 025882 fetch 1 ,mem_conn_sm -0x5fb5 025883 rtnne conn_sm_wait_features_res -0x5fb6 025885 fetch 1 ,mem_connection_options -0x5fb7 025886 bbit0 connection_feature_ext ,parse_lmp_send_conn -0x5fb8 025888 jam conn_sm_send_features_ext ,mem_conn_sm -0x5fb9 025889 rtn -: 025890 parse_lmp_send_conn: -0x5fba 025891 jam conn_sm_send_conn_req ,mem_conn_sm -0x5fbb 025892 rtn -: 025893 parse_lmp_test_activate: -0x5fbc 025894 fetch 1 ,mem_debug_config -0x5fbd 025895 store 1 ,mem_test_mode_old_debug_config -0x5fbe 025896 jam lmp_accepted ,mem_lmo_opcode2 -0x5fbf 025897 jam lmp_test_activate ,mem_lmi_opcode2 -0x5fc0 025898 rtn -: 025899 parse_lmp_test_control: -0x5fc1 025902 jam lmp_accepted ,mem_lmo_opcode2 -0x5fc2 025903 jam lmp_test_control ,mem_lmi_opcode2 -0x5fc3 025904 force 9 ,loopcnt -0x5fc4 025905 arg mem_rxbuf + 1 ,contr -0x5fc5 025906 arg mem_temp_payload ,contw -: 025907 parse_lmp_test_xor: -0x5fc6 025908 ifetch 1 ,contr -0x5fc7 025909 xor_into 0x55 ,pdata -0x5fc8 025910 istore 1 ,contw -0x5fc9 025911 loop parse_lmp_test_xor -0x5fca 025912 fetch 1 ,test_mode_scenario -0x5fcb 025913 fetcht 1 ,mem_tester_emulate -0x5fcc 025914 set0 tester_no_whitening ,temp -0x5fcd 025915 set0 tester_pattern_test ,temp -0x5fce 025916 beq exit_test_mode ,parse_lmp_test_control_exit -0x5fcf 025917 beq pause_test_mode ,parse_lmp_test_control_pause -0x5fd0 025918 beq closed_loop_back_acl ,parse_lmp_test_control_loopback -0x5fd1 025919 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite -0x5fd2 025920 beq closed_loop_back_sco ,parse_lmp_test_control_loopback -0x5fd3 025921 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite -0x5fd4 025922 beq zero_pattern ,parse_lmp_test_control_pattern -0x5fd5 025923 beq one_pattern ,parse_lmp_test_control_pattern -0x5fd6 025924 beq alt_pattern ,parse_lmp_test_control_pattern -0x5fd7 025925 beq alt2_pattern ,parse_lmp_test_control_pattern -0x5fd8 025926 beq pseudorandom ,parse_lmp_test_control_pattern -0x5fd9 025927 rtn -: 025928 parse_lmp_test_control_exit: -0x5fda 025930 fetch 1 ,mem_tester_emulate -0x5fdb 025931 set1 tester_exit ,pdata -0x5fdc 025932 set1 tester_change ,pdata -0x5fdd 025933 store 1 ,mem_tester_emulate -0x5fde 025934 rtn -: 025935 parse_lmp_test_control_pattern: -0x5fdf 025936 set1 tester_pattern_test ,temp -0x5fe0 025937 jam 5 ,mem_lch_code -0x5fe1 025938 fetch 2 ,test_mode_data_length -0x5fe2 025939 iforce loopcnt -0x5fe3 025940 store 2 ,mem_len -0x5fe4 025941 arg mem_rxbuf ,contw -0x5fe5 025942 call pn9 -: 025943 parse_lmp_test_control_loopback_nowhite: -0x5fe6 025944 set1 tester_no_whitening ,temp -: 025945 parse_lmp_test_control_loopback: -0x5fe7 025946 set1 tester_change ,temp -0x5fe8 025947 force 0 ,pdata -0x5fe9 025948 store 1 ,mem_slave_rcvcnt -0x5fea 025949 store 2 ,mem_tst_pktcnt_crc -0x5feb 025950 store 2 ,mem_tst_pktcnt_dmh -0x5fec 025951 store 2 ,mem_tst_pktcnt_hec -0x5fed 025952 store 2 ,mem_tst_pktcnt_sync -0x5fee 025953 fetch 1 ,test_mode_hopping_mode -0x5fef 025954 compare fixed_freq ,pdata ,0xff -0x5ff0 025955 setflag true ,tester_fixed_freq ,temp -0x5ff1 025956 storet 1 ,mem_tester_emulate -0x5ff2 025957 rtn -: 025959 parse_lmp_test_control_pause: -0x5ff3 025960 set0 mark_testmode ,mark -0x5ff4 025961 jam 0 ,mem_tester_emulate -0x5ff5 025962 fetch 1 ,mem_debug_config -0x5ff6 025963 set0 debug_tx_pattern ,pdata -0x5ff7 025964 store 1 ,mem_debug_config -0x5ff8 025965 rtn -: 025971 lmp_copy_rand: -0x5ff9 025972 arg mem_rxbuf + 1 ,contr -0x5ffa 025973 arg mem_random_number ,contw -0x5ffb 025974 branch memcpy16 -: 025976 lmp_generate_key: -0x5ffc 025977 jam lmp_comb_key ,mem_lmo_opcode2 -0x5ffd 025978 rtn -: 025980 lmp_start_encryption: -0x5ffe 025981 nrtn master -0x5fff 025982 jam lmp_start_encryption_req ,mem_lmo_opcode2 -0x6000 025983 rtn -: 025985 lmp_accept_inrand: -0x6001 025986 arg mem_lap ,rega -0x6002 025987 call generate_kinit -0x6003 025988 jam lmp_accepted ,mem_lmo_opcode2 -0x6004 025989 jam lmp_in_rand ,mem_lmi_opcode2 -0x6005 025990 rtn -: 025992 lmp_disconnect: -0x6006 025993 jam 10 ,mem_conn_timer -0x6007 025994 jam lmp_detach ,mem_lmo_opcode2 -0x6008 025995 jam local_host ,mem_disconn_reason_send -0x6009 025996 rtn -: 026002 send_lmp: -0x600a 026003 bpatchx patch30_2 ,mem_patch30 -0x600b 026004 disable user -0x600c 026005 call lmo_fifo_process -0x600d 026006 fetch 1 ,mem_lmp_to_send -0x600e 026007 rtn blank -0x600f 026012 bbit1 7 ,send_lmp_escape -: 026013 send_lmp0: -0x6010 026014 beq lmp_name_req ,send_lmp_name_req -0x6011 026015 beq lmp_name_res ,send_lmp_name_res -0x6012 026016 beq lmp_accepted ,send_lmp_accepted -0x6013 026017 beq lmp_not_accepted ,send_lmp_not_accepted -0x6014 026018 beq lmp_features_req ,send_lmp_features_req -0x6015 026019 beq lmp_features_res ,send_lmp_features_res -0x6016 026020 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res -0x6017 026021 beq lmp_version_req ,send_lmp_version_req -0x6018 026022 beq lmp_version_res ,send_lmp_version_res -0x6019 026023 beq lmp_setup_complete ,send_lmp_setup_complete -0x601a 026024 beq lmp_supervision_timeout ,send_lmp_superto -0x601b 026025 beq lmp_host_connection_req ,send_lmp_no_payload -0x601c 026026 beq lmp_in_rand ,send_lmp_inrand -0x601d 026027 beq lmp_comb_key ,send_lmp_comb_key -0x601e 026028 beq lmp_au_rand ,send_lmp_aurand -0x601f 026029 beq lmp_sres ,send_lmp_sres -0x6020 026030 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req -0x6021 026031 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req -0x6022 026032 beq lmp_start_encryption_req ,send_lmp_start_encryption -0x6023 026033 beq lmp_detach ,send_lmp_detach -0x6024 026034 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req -0x6025 026035 beq lmp_unit_key ,send_lmp_unit_key -0x6026 026037 beq lmp_incr_power_req ,send_lmp_inc_power -0x6027 026038 beq lmp_clkoffset_res ,send_lmp_clkoffset_res -0x6028 026039 beq lmp_max_power ,send_lmp_nopayload_reply -0x6029 026040 beq lmp_max_slot ,send_lmp_max_slot -0x602a 026041 beq lmp_max_slot_req ,send_lmp_max_slot_req -0x602b 026042 beq lmp_min_power ,send_lmp_nopayload_reply -0x602c 026043 beq lmp_slot_offset ,send_lmp_slot_offset -0x602d 026044 beq lmp_switch_req ,send_lmp_switch_req -0x602e 026045 beq lmp_sniff_req ,send_lmp_sniff_req -0x602f 026046 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req -0x6030 026047 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req -0x6031 026048 beq lmp_unsniff_req ,send_lmp_unsniff_req -0x6032 026049 beq lmp_encapsulated_header ,send_lmp_encapsulated_header -0x6033 026050 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload -0x6034 026051 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm -0x6035 026052 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number -0x6036 026053 beq lmp_dhkey_check ,send_lmp_dhkey_check -0x6037 026054 beq lmp_auto_rate ,send_lmp_auto_rate -0x6038 026055 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res -0x6039 026057 beq lmp_clkoffset_req ,send_lmp_clkoffset_req -0x603a 026058 beq lmp_quality_of_service ,send_lmp_quality_of_service -0x603b 026059 beq lmp_test_activate ,send_lmp_test_activate -0x603c 026060 beq lmp_test_control ,send_lmp_test_control -: 026061 send_lmp_error: -0x603d 026062 branch assert -0x603e 026063 rtn -: 026064 send_lmp_escape: -0x603f 026065 beq lmp_ext_accepted ,send_lmpext_accepted -0x6040 026066 beq lmp_ext_features_res ,send_lmpext_features_res -0x6041 026067 beq lmp_not_accepted_ext ,send_lmpext_not_accepted -0x6042 026068 beq lmp_ext_features_req ,send_lmpext_features_req -0x6043 026069 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req -0x6044 026070 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req -0x6045 026071 beq lmp_io_cap_req ,send_lmp_io_cap_req -0x6046 026072 beq lmp_io_cap_res ,send_lmpext_io_cap_res -0x6047 026073 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req -0x6048 026074 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res -0x6049 026075 branch assert -: 026081 send_lmp_accepted: -0x604a 026082 force 2 ,pdata -0x604b 026083 call msg_send_lmp -0x604c 026084 fetch 1 ,mem_lmi_opcode -0x604d 026085 istore 1 ,contw -0x604e 026086 call send_lmp_follow -0x604f 026087 bpatchx patch30_3 ,mem_patch30 -0x6050 026088 fetch 1 ,mem_lmi_opcode -0x6051 026089 beq lmp_in_rand ,send_lmp_accepted_inrand -0x6052 026090 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode -0x6053 026091 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key -0x6054 026092 beq lmp_sniff_req ,send_lmp_accept_sniff_req -0x6055 026093 beq lmp_host_connection_req ,send_lmp_accepted_connection -0x6056 026094 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check -0x6057 026095 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm -0x6058 026096 rtn -: 026098 send_create_conn_start_l2cap_timer_sm: -0x6059 026099 fetch 1 ,mem_conn_sm -0x605a 026100 rtn blank -0x605b 026101 jam conn_sm_wait_done ,mem_conn_sm -0x605c 026102 setarg timer_enpt_waite -0x605d 026103 arg enpt_delay_timer ,queue -0x605e 026104 branch timer_init -: 026106 send_lmp_accept_sniff_req: -0x605f 026107 branch sniff_init -: 026108 send_lmp_not_accepted: -0x6060 026109 force 3 ,pdata -0x6061 026110 call msg_send_lmp -0x6062 026111 fetch 1 ,mem_lmi_opcode -0x6063 026112 beq lmp_au_rand ,send_not_accept_aurand -0x6064 026113 istore 1 ,contw -0x6065 026114 fetch 1 ,mem_lmo_reason -0x6066 026115 istore 1 ,contw -0x6067 026116 branch send_lmp_follow -: 026118 send_not_accept_aurand: -0x6068 026119 istore 1 ,contw -0x6069 026120 fetch 1 ,mem_lmo_reason -0x606a 026121 istore 1 ,contw -0x606b 026122 arg mem_sres_tid ,temp -0x606c 026123 branch special_tid_store -: 026125 send_lmpext_accepted: -0x606d 026126 force 4 ,queue -0x606e 026127 call send_lmpext -0x606f 026128 setarg lmp_escape -0x6070 026129 istore 1 ,contw -0x6071 026130 fetch 1 ,mem_lmi_opcode -0x6072 026131 set0 7 ,pdata -0x6073 026132 istore 1 ,contw -0x6074 026133 fetch 1 ,mem_lmi_opcode -0x6075 026134 branch send_lmp_follow -: 026136 send_lmpext_not_accepted: -0x6076 026137 force 5 ,queue -0x6077 026138 call send_lmpext -0x6078 026139 setarg lmp_escape -0x6079 026140 istore 1 ,contw -0x607a 026141 fetch 1 ,mem_lmi_opcode -0x607b 026142 set0 7 ,pdata -0x607c 026143 istore 1 ,contw -0x607d 026144 fetch 1 ,mem_lmo_reason -0x607e 026145 istore 1 ,contw -0x607f 026146 branch send_lmp_follow -: 026149 send_lmp_accepted_inrand: -0x6080 026150 call clear_linkkey -0x6081 026151 call tid_check -0x6082 026152 rtn true -0x6083 026153 branch lmp_generate_key -: 026155 send_lmp_accepted_enc_mode: -0x6084 026156 fetch 1 ,mem_op -0x6085 026157 bbit1 op_start_enc ,send_lmp_accepted_enc_start -0x6086 026158 rtnbit0 op_stop_enc -0x6087 026159 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x6088 026160 set0 op_stop_enc ,pdata -0x6089 026161 call tid_reply -0x608a 026162 branch send_lmp_accepted_enc_exit -: 026163 send_lmp_accepted_enc_start: -0x608b 026164 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 -0x608c 026165 set0 op_start_enc ,pdata -: 026166 send_lmp_accepted_enc_exit: -0x608d 026167 store 1 ,mem_op -0x608e 026168 rtn -: 026170 send_lmp_accepted_enc_key: -0x608f 026171 call check_localsm -0x6090 026172 branch lmp_start_encryption ,true -0x6091 026173 rtn -: 026175 send_lmp_accepted_connection: -0x6092 026176 jam lmp_packet_type_table_req ,mem_lmo_opcode2 -0x6093 026178 fetch 1 ,mem_lmp_conn_state -0x6094 026179 set1 received_conn_req ,pdata -0x6095 026180 store 1 ,mem_lmp_conn_state -0x6096 026181 jam bt_evt_bb_connected ,mem_fifo_temp -0x6097 026182 branch ui_ipc_send_event -: 026185 send_lmp_accept_dhkey_check: -0x6098 026186 rtn -: 026190 send_lmpext_features_res: -0x6099 026191 force 12 ,queue -0x609a 026192 call send_lmpext -0x609b 026193 setarg 0x01 -0x609c 026194 istore 1 ,contw -0x609d 026195 fetch 2 ,mem_lmpext_ssp_enable -0x609e 026196 istore 2 ,contw -0x609f 026197 setarg 0 -0x60a0 026198 istore 3 ,contw -0x60a1 026199 setarg 0x00 -0x60a2 026200 istore 4 ,contw -0x60a3 026201 branch send_lmp_reply -: 026202 send_lmpext_io_cap_res: -0x60a4 026203 force 5 ,queue -0x60a5 026204 call send_lmpext -0x60a6 026205 fetch 3 ,mem_sp_iocap_local -0x60a7 026206 istore 3 ,contw -0x60a8 026207 call send_lmp_reply -0x60a9 026208 jam flag_pairing_state_pairing ,mem_flag_pairing_state -0x60aa 026209 fetch 1 ,mem_sp_iocap_local -0x60ab 026210 beq display_yesno ,responder_iocap_display_yesno -0x60ac 026211 beq keyboard_only ,responder_iocap_keyboard_only -0x60ad 026212 beq no_input_no_output ,responder_iocap_no_input_no_output -0x60ae 026213 rtn -: 026215 responder_iocap_keyboard_only: -0x60af 026216 fetch 1 ,mem_sp_iocap_remote -0x60b0 026217 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only -0x60b1 026218 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno -0x60b2 026219 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only -0x60b3 026220 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output -0x60b4 026221 rtn -: 026224 responder_iocap_display_yesno: -0x60b5 026225 fetch 1 ,mem_sp_iocap_remote -0x60b6 026226 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only -0x60b7 026227 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno -0x60b8 026228 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only -0x60b9 026229 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output -0x60ba 026230 rtn -: 026233 responder_iocap_no_input_no_output: -0x60bb 026234 fetch 1 ,mem_sp_iocap_remote -0x60bc 026235 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only -0x60bd 026236 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno -0x60be 026237 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only -0x60bf 026238 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output -0x60c0 026239 rtn -: 026241 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: -: 026242 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: -: 026243 responder_iocap_display_yesno_initiator_iocap_display_only: -: 026244 responder_iocap_no_input_no_output_initiator_iocap_display_only: -: 026245 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: -: 026246 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: -: 026247 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: -: 026248 set_ssp_mode_justwork: -0x60c1 026249 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag -0x60c2 026250 fetch 1 ,mem_classic_bt_flag -0x60c3 026251 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect -0x60c4 026252 rtn -: 026254 responder_iocap_display_yesno_initiator_iocap_display_yesno: -: 026255 set_ssp_mode_numeric_comparison: -0x60c5 026256 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag -0x60c6 026257 rtn -: 026259 responder_iocap_keyboard_only_initiator_iocap_display_yesno: -: 026260 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: -: 026261 responder_iocap_keyboard_only_initiator_iocap_display_only: -: 026262 responder_iocap_display_yesno_initiator_iocap_keyboard_only: -: 026263 set_ssp_mode_passkey: -0x60c7 026264 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag -0x60c8 026265 rtn -: 026268 classic_bt_set_reject_justwork_flag: -0x60c9 026269 arg flag_ssp_reject_justwork ,queue -0x60ca 026270 branch classic_bluetooth_set_flag -: 026272 classic_bt_clr_reject_justwork_flag: -0x60cb 026273 arg flag_ssp_reject_justwork ,queue -0x60cc 026274 branch classic_bluetooth_clr_flag -: 026276 classic_bluetooth_set_flag: -0x60cd 026277 fetch 1 ,mem_classic_bt_flag -0x60ce 026278 qset1 pdata -0x60cf 026279 store 1 ,mem_classic_bt_flag -0x60d0 026280 rtn -: 026282 classic_bluetooth_clr_flag: -0x60d1 026283 fetch 1 ,mem_classic_bt_flag -0x60d2 026284 qset0 pdata -0x60d3 026285 store 1 ,mem_classic_bt_flag -0x60d4 026286 rtn -: 026289 send_lmp_io_cap_req: -0x60d5 026290 force 5 ,queue -0x60d6 026291 call send_lmpext -0x60d7 026292 fetch 3 ,mem_sp_iocap_local -0x60d8 026293 istore 3 ,contw -0x60d9 026294 branch send_lmp_request -: 026297 send_lmpext_sniff_subrating_req: -0x60da 026299 rtn -: 026300 send_lmpext_sniff_subrating_res: -0x60db 026301 force 9 ,queue -0x60dc 026302 call send_lmpext -0x60dd 026303 fetch 1 ,mem_subsniff_rate -0x60de 026304 istore 1 ,contw -0x60df 026305 fetch 2 ,mem_subsniff_tcmax -0x60e0 026306 istore 2 ,contw -0x60e1 026307 fetch 4 ,mem_subsniff_instant -0x60e2 026308 istore 4 ,contw -0x60e3 026309 branch send_lmp_reply -: 026311 send_lmp_name_res: -0x60e4 026312 force 17 ,pdata -0x60e5 026313 call msg_send_lmp -0x60e6 026314 fetch 1 ,mem_lmi_opcode -0x60e7 026315 copy pdata ,temp -0x60e8 026316 beq 0x00 ,send_lmp_name_res_offset_ok -0x60e9 026317 beq 0x0e ,send_lmp_name_res_offset_ok -0x60ea 026318 beq 0x1c ,send_lmp_name_res_offset_ok -0x60eb 026319 rtn -: 026320 send_lmp_name_res_offset_ok: -0x60ec 026321 istore 1 ,contw -0x60ed 026322 fetch 1 ,mem_local_name_length -0x60ee 026323 istore 1 ,contw -0x60ef 026324 arg 14 ,loopcnt -0x60f0 026325 setarg mem_local_name -0x60f1 026326 iadd temp ,contr -0x60f2 026327 call memcpy -0x60f3 026328 branch send_lmp_reply -: 026331 send_lmp_timing_accuracy_res: -0x60f4 026332 force 3 ,pdata -0x60f5 026333 call msg_send_lmp -0x60f6 026334 setarg 0x0114 -0x60f7 026335 istore 2 ,contw -0x60f8 026336 branch send_lmp_reply -: 026338 send_lmp_clkoffset_res: -0x60f9 026340 force 3 ,pdata -0x60fa 026341 call msg_send_lmp -0x60fb 026342 fetch 4 ,mem_clke_bt -0x60fc 026343 isub clkn_bt ,pdata -0x60fd 026344 branch send_lmp_clkoffset_res_master ,master -0x60fe 026345 sub pdata ,0 ,pdata -: 026346 send_lmp_clkoffset_res_master: -0x60ff 026348 rshift2 pdata ,pdata -0x6100 026349 set0 15 ,pdata -0x6101 026350 istore 2 ,contw -0x6102 026351 branch send_lmp_reply -: 026353 send_lmp_version_res: -0x6103 026354 force 6 ,pdata -0x6104 026355 call msg_send_lmp -0x6105 026356 fetch 5 ,mem_lmp_version -0x6106 026357 istore 5 ,contw -0x6107 026358 branch send_lmp_reply -: 026360 send_lmp_features_res: -0x6108 026361 force 9 ,pdata -0x6109 026362 call msg_send_lmp -0x610a 026363 fetch 8 ,mem_features -0x610b 026364 istore 8 ,contw -0x610c 026365 branch send_lmp_reply -: 026372 send_lmpext_features_req: -0x610d 026373 force 12 ,queue -0x610e 026374 call send_lmpext -0x610f 026375 setarg 0x01 -0x6110 026376 istore 1 ,contw -0x6111 026377 fetch 2 ,mem_lmpext_ssp_enable -0x6112 026378 istore 2 ,contw -0x6113 026379 setarg 0 -0x6114 026380 istore 3 ,contw -0x6115 026381 setarg 0x00 -0x6116 026382 istore 4 ,contw -0x6117 026383 branch send_lmp_request -: 026385 send_lmpext_packet_type_table_req: -0x6118 026386 force 3 ,queue -0x6119 026387 call send_lmpext -0x611a 026388 fetch 1 ,mem_ptt -0x611b 026389 istore 1 ,contw -0x611c 026390 disable user -0x611d 026391 call send_lmp_request -0x611e 026392 nrtn user -0x611f 026393 nrtn master -0x6120 026394 fetch 1 ,mem_afh_cfg -0x6121 026395 rtnbit0 afh_cfg_on -0x6122 026396 call afh_init -0x6123 026397 branch afh_open_all_channels -: 026400 ssp_enable: -0x6124 026401 bpatchx patch30_4 ,mem_patch30 -0x6125 026402 fetch 1 ,mem_features + 6 -0x6126 026403 set1 param_featrue_ssp ,pdata -0x6127 026404 store 1 ,mem_features + 6 -0x6128 026405 setarg param_lmpext_ssp_enable -0x6129 026406 store 2 ,mem_lmpext_ssp_enable -0x612a 026407 rtn -: 026409 ssp_disable: -0x612b 026410 bpatchx patch30_5 ,mem_patch30 -0x612c 026411 fetch 1 ,mem_features + 6 -0x612d 026412 set0 param_featrue_ssp ,pdata -0x612e 026413 store 1 ,mem_features + 6 -0x612f 026414 setarg 0 -0x6130 026415 store 2 ,mem_lmpext_ssp_enable -0x6131 026416 rtn -: 026418 afh_init: -0x6132 026419 jam 0x3 ,mem_afh_cfg -0x6133 026420 setarg 0 -0x6134 026421 store 4 ,mem_afh_timer -0x6135 026422 arg mem_afh_map_lo ,contw -0x6136 026423 call afh_reset_map -0x6137 026424 arg mem_afh_map_new ,contw -0x6138 026425 call afh_reset_map -0x6139 026426 arg mem_afh_classify_channel_map ,contw -0x613a 026427 call afh_reset_map -0x613b 026428 branch afh_clear_error_counter -: 026429 afh_open_all_channels: -0x613c 026430 arg mem_afh_map_new ,contw -0x613d 026431 call afh_reset_map -0x613e 026432 call afh_clear_error_counter -0x613f 026433 branch afh_set_send_flag -: 026436 afh_reset_map: -0x6140 026437 setarg 0xffffff -0x6141 026438 istore 3 ,contw -0x6142 026439 istore 3 ,contw -0x6143 026440 istore 3 ,contw -0x6144 026441 setarg 0x7f -0x6145 026442 istore 1 ,contw -0x6146 026443 rtn -: 026444 afh_clear_error_counter: -0x6147 026445 setarg 0 -0x6148 026446 store 2 ,mem_afh_error_total -0x6149 026447 rtn -: 026448 afh_set_send_flag: -0x614a 026449 fetch 1 ,mem_afh_cfg -0x614b 026450 set1 send_lmp_set_afh ,pdata -0x614c 026451 store 1 ,mem_afh_cfg -0x614d 026452 rtn -: 026455 send_lmpext_pause_encryption_req: -0x614e 026456 force 2 ,queue -0x614f 026457 call send_lmpext -0x6150 026458 nbranch send_lmp_reply ,master -0x6151 026460 branch send_lmp_request -: 026464 send_lmp_detach: -0x6152 026465 force 2 ,pdata -0x6153 026466 call msg_send_lmp -0x6154 026467 fetch 1 ,mem_disconn_reason_send -0x6155 026468 istore 1 ,contw -0x6156 026469 call send_lmp_request -: 026470 prepare_disconnect: -0x6157 026471 fetch 1 ,mem_op -0x6158 026472 set1 op_disconn ,pdata -0x6159 026473 store 1 ,mem_op -0x615a 026474 jam 50 ,mem_conn_timer -0x615b 026475 rtn -: 026478 send_lmp_no_payload: -0x615c 026479 force 1 ,pdata -0x615d 026480 call msg_send_lmp -0x615e 026481 branch send_lmp_request -: 026482 send_lmp_nopayload_reply: -0x615f 026483 force 1 ,pdata -0x6160 026484 call msg_send_lmp -0x6161 026485 branch send_lmp_reply -: 026488 send_lmp_encryption_mode_req: -0x6162 026489 force 2 ,pdata -0x6163 026490 call msg_send_lmp -0x6164 026491 fetch 1 ,mem_state_map -0x6165 026492 isolate0 smap_encryption ,pdata -0x6166 026493 setflag true ,0 ,pdata -0x6167 026494 and_into 1 ,pdata -0x6168 026495 istore 1 ,contw -0x6169 026496 branch send_lmp_request -: 026499 send_lmp_superto: -0x616a 026500 force 3 ,pdata -0x616b 026501 call msg_send_lmp -0x616c 026502 fetch 2 ,mem_supervision_to -0x616d 026503 istore 2 ,contw -0x616e 026504 branch send_lmp_request -: 026506 send_lmp_name_req: -0x616f 026507 jam 250 ,mem_conn_timer -0x6170 026508 force 2 ,pdata -0x6171 026509 call msg_send_lmp -0x6172 026510 fetch 1 ,mem_name_offset -0x6173 026511 istore 1 ,contw -0x6174 026512 branch send_lmp_request -: 026514 send_lmp_test_control: -0x6175 026515 force 10 ,pdata -0x6176 026516 call msg_send_lmp -0x6177 026517 arg mem_temp_payload ,contr -0x6178 026518 force 9 ,loopcnt -: 026519 send_lmp_test_control_loop: -0x6179 026520 ifetch 1 ,contr -0x617a 026521 xor_into 0x55 ,pdata -0x617b 026522 istore 1 ,contw -0x617c 026523 loop send_lmp_test_control_loop -0x617d 026524 branch send_lmp_request -: 026526 send_lmp_quality_of_service_req: -0x617e 026527 branch send_lmp_request -: 026528 send_lmp_unit_key: -0x617f 026529 branch send_lmp_request -: 026531 send_lmp_slot_offset: -0x6180 026532 rtn master -0x6181 026533 call calc_slot_offset -0x6182 026534 force 9 ,pdata -0x6183 026535 call msg_send_lmp -0x6184 026536 fetch 2 ,mem_slot_offset -0x6185 026537 istore 2 ,contw -0x6186 026538 fetch 3 ,mem_lap -0x6187 026539 istore 3 ,contw -0x6188 026540 fetch 1 ,mem_uap -0x6189 026541 istore 1 ,contw -0x618a 026542 fetch 2 ,mem_nap -0x618b 026543 istore 2 ,contw -0x618c 026544 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply -0x618d 026545 set0 mark_switch_initiated ,mark -0x618e 026546 call send_lmp_request -0x618f 026547 jam lmp_switch_req ,mem_lmo_opcode2 -0x6190 026548 rtn -: 026549 send_lmp_slot_offset_reply: -0x6191 026550 call send_lmp_reply -0x6192 026551 jam lmp_accepted ,mem_lmo_opcode2 -0x6193 026552 jam lmp_switch_req ,mem_lmi_opcode2 -0x6194 026553 rtn -: 026555 send_lmp_switch_req: -0x6195 026556 arg 0x200 ,temp -0x6196 026557 branch switch_on_native ,master -0x6197 026558 deposit clke_bt -0x6198 026559 branch switch_slack -: 026560 switch_on_native: -0x6199 026561 deposit clkn_bt -: 026562 switch_slack: -0x619a 026563 deposit bt_clk -0x619b 026564 iadd temp ,pdata -0x619c 026565 and_into 0x1fc ,pdata -0x619d 026566 store 4 ,mem_sniff_anchor -0x619e 026567 force 5 ,pdata -0x619f 026568 call msg_send_lmp -0x61a0 026569 fetch 4 ,mem_sniff_anchor -0x61a1 026570 rshift pdata ,pdata -0x61a2 026571 istore 4 ,contw -0x61a3 026572 branch send_lmp_request -: 026574 send_lmp_sniff_req: -0x61a4 026575 force 10 ,pdata -0x61a5 026576 call msg_send_lmp -0x61a6 026577 arg mem_sniff_payload ,contr -0x61a7 026578 ifetch 9 ,contr -0x61a8 026579 istore 9 ,contw -0x61a9 026580 branch send_lmp_request -: 026583 send_lmp_timing_accuracy_req: -0x61aa 026585 force 3 ,pdata -0x61ab 026586 call msg_send_lmp -0x61ac 026587 setarg 0x0114 -0x61ad 026588 istore 2 ,contw -0x61ae 026589 branch send_lmp_request -: 026591 send_lmp_unsniff_req: -0x61af 026593 force 1 ,pdata -0x61b0 026594 call msg_send_lmp -0x61b1 026603 branch send_lmp_request -: 026606 send_lmp_max_slot: -0x61b2 026607 force 2 ,pdata -0x61b3 026608 call msg_send_lmp -0x61b4 026609 fetch 1 ,mem_max_slot -0x61b5 026610 istore 1 ,contw -0x61b6 026611 branch send_lmp_request -: 026614 send_lmp_max_slot_req: -0x61b7 026615 force 2 ,pdata -0x61b8 026616 call msg_send_lmp -0x61b9 026617 setarg 0x05 -0x61ba 026618 istore 1 ,contw -0x61bb 026619 branch send_lmp_request -: 026622 send_lmp_inc_power: -0x61bc 026623 force 2 ,pdata -0x61bd 026624 call msg_send_lmp -0x61be 026625 setarg 0x00 -0x61bf 026626 istore 1 ,contw -0x61c0 026627 branch send_lmp_request -: 026630 send_lmp_setup_complete_by_module: -0x61c1 026631 jam lmp_max_slot_req ,mem_lmo_opcode2 -0x61c2 026632 rtn -: 026633 send_lmp_setup_complete: -0x61c3 026634 fetch 1 ,mem_device_option -0x61c4 026635 sub pdata ,dvc_op_module ,null -0x61c5 026636 call send_lmp_setup_complete_by_module ,zero -0x61c6 026637 fetch 1 ,mem_state -0x61c7 026638 set1 state_conn_comp ,pdata -0x61c8 026639 store 1 ,mem_state -0x61c9 026640 copy clkn_bt ,pdata -0x61ca 026641 store 4 ,mem_aurand_send_delay_time -0x61cb 026642 fetch 1 ,mem_lmp_conn_state -0x61cc 026643 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent -0x61cd 026644 set1 sent_setup_complete ,pdata -0x61ce 026645 store 1 ,mem_lmp_conn_state -0x61cf 026646 jam bt_evt_setup_complete ,mem_fifo_temp -0x61d0 026647 call ui_ipc_send_event -0x61d1 026648 force 1 ,pdata -0x61d2 026649 call msg_send_lmp -0x61d3 026650 branch send_lmp_request -: 026651 send_lmp_setup_complete_has_sent: -0x61d4 026652 jam 0 ,mem_lmp_to_send -0x61d5 026653 rtn -: 026655 send_lmp_version_req: -0x61d6 026656 force 6 ,pdata -0x61d7 026657 call msg_send_lmp -0x61d8 026658 fetch 5 ,mem_lmp_version -0x61d9 026659 istore 5 ,contw -0x61da 026660 branch send_lmp_request -: 026662 send_lmp_features_req: -0x61db 026663 force 9 ,pdata -0x61dc 026664 call msg_send_lmp -0x61dd 026665 fetch 8 ,mem_features -0x61de 026666 istore 8 ,contw -0x61df 026667 branch send_lmp_request -: 026669 sp_master_send_io_cap_get: -0x61e0 026670 jam sp_flag_commit ,mem_master_sp_flag -0x61e1 026671 fetch 1 ,mem_sp_local_key_invalid -0x61e2 026672 rtnne sp_key_valid -0x61e3 026673 jam sp_master_stat_start_done ,mem_master_sp_state -0x61e4 026674 rtn -: 026676 sp_master_send_io_cap_send: -0x61e5 026677 call tid_initiate -0x61e6 026678 jam lmp_io_cap_req ,mem_lmo_opcode2 -0x61e7 026679 jam sp_stat_key_send ,mem_master_sp_state -0x61e8 026680 rtn -: 026683 sp_master_send_lmp_encapsulated_header: -0x61e9 026684 call tid_initiate -0x61ea 026685 jam lmp_encapsulated_header ,mem_lmo_opcode2 -0x61eb 026686 jam sp_stat_random_send ,mem_master_sp_state -0x61ec 026687 rtn -: 026689 sp_master_commitment_compare: -0x61ed 026690 arg mem_sp_calc_result_high ,rega -0x61ee 026691 arg mem_sp_confirm_remote ,regb -0x61ef 026692 arg 16 ,loopcnt -0x61f0 026693 call string_compare -0x61f1 026694 branch sp_master_commitment_compare_success ,zero -0x61f2 026695 jam sp_stat_null ,mem_master_sp_state -0x61f3 026696 call master_clear_mem_master_sp_flag -0x61f4 026697 jam pdu_not_allowed ,mem_lmo_reason2 -0x61f5 026698 jam lmp_simple_pairing_number ,mem_lmi_opcode2 -0x61f6 026699 branch reject_lmp_packet -: 026700 sp_master_commitment_compare_success: -0x61f7 026701 jam sp_stat_confirm_calc ,mem_master_sp_state -0x61f8 026702 call master_set_mem_master_sp_flag -0x61f9 026703 jam lmp_simple_pairing_number ,mem_lmi_opcode2 -0x61fa 026704 branch accept_lmp_msg -: 026708 sp_master_send_lmp_simple_pairing_number: -0x61fb 026709 jam lmp_simple_pairing_number ,mem_lmo_opcode2 -0x61fc 026710 rtn -: 026714 sp_send_lmp_encapsulated_header: -0x61fd 026717 jam lmp_encapsulated_header ,mem_lmo_opcode2 -0x61fe 026719 rtn -: 026725 send_lmp_encapsulated_header: -0x61ff 026726 jam 0 ,mem_sp_local_key_send_count -0x6200 026727 force 4 ,pdata -0x6201 026728 call msg_send_lmp -0x6202 026729 force encapsulated_major_type_p192 ,pdata -0x6203 026730 istore 1 ,contw -0x6204 026731 force encapsulated_minor_type_p192 ,pdata -0x6205 026732 istore 1 ,contw -0x6206 026733 force encapsulated_len_p192 ,pdata -0x6207 026734 istore 1 ,contw -0x6208 026735 call check_localsm -0x6209 026736 branch send_lmp_request ,true -0x620a 026737 branch send_lmp_reply -: 026739 send_lmp_encapsulated_payload: -0x620b 026741 force 17 ,pdata -0x620c 026742 call msg_send_lmp -0x620d 026743 fetch 1 ,mem_sp_local_key_send_count -0x620e 026744 arg mem_sp_pubkey_local ,contr -0x620f 026745 iadd contr ,contr -0x6210 026746 ifetch 8 ,contr -0x6211 026747 istore 8 ,contw -0x6212 026748 ifetch 8 ,contr -0x6213 026749 istore 8 ,contw -0x6214 026750 fetch 1 ,mem_sp_local_key_send_count -0x6215 026751 increase 16 ,pdata -0x6216 026752 store 1 ,mem_sp_local_key_send_count -0x6217 026753 call check_localsm -0x6218 026754 branch send_lmp_request ,true -0x6219 026755 branch send_lmp_reply -: 026758 sp_send_lmp_simple_pairing_comfirm: -0x621a 026759 jam sp_stat_random_recv ,mem_sp_state -0x621b 026760 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 -0x621c 026761 rtn -: 026762 send_lmp_simple_pairing_comfirm: -0x621d 026765 force 17 ,pdata -0x621e 026766 call msg_send_lmp -0x621f 026767 arg mem_sp_calc_result_high ,contr -0x6220 026768 ifetch 8 ,contr -0x6221 026769 istore 8 ,contw -0x6222 026770 ifetch 8 ,contr -0x6223 026771 istore 8 ,contw -0x6224 026772 branch send_lmp_reply -: 026774 sp_send_lmp_simple_pairing_number: -0x6225 026775 jam lmp_simple_pairing_number ,mem_lmo_opcode2 -0x6226 026776 rtn -: 026778 send_lmp_simple_pairing_number: -0x6227 026780 call check_localsm -0x6228 026781 call sp_local_random_key_generator ,true -0x6229 026782 force 17 ,pdata -0x622a 026783 call msg_send_lmp -0x622b 026784 arg mem_sp_random_local ,contr -0x622c 026785 ifetch 8 ,contr -0x622d 026786 istore 8 ,contw -0x622e 026787 ifetch 8 ,contr -0x622f 026788 istore 8 ,contw -0x6230 026789 call check_localsm -0x6231 026790 nbranch send_lmp_reply ,true -0x6232 026791 branch send_lmp_request ,true -: 026793 master_sp_sm_end: -0x6233 026795 jam sp_stat_done ,mem_master_sp_state -: 026796 sp_aurand_send: -0x6234 026797 call tid_initiate -0x6235 026798 jam lmp_au_rand ,mem_lmo_opcode2 -0x6236 026799 call check_localsm_master -0x6237 026800 branch sp_master_key_prarm_push ,true -0x6238 026801 branch sp_link_key_prarm_push -: 026802 master_sp_send_lmp_dhkey_check: -0x6239 026803 call tid_reply -: 026804 sp_send_lmp_dhkey_check: -0x623a 026805 jam lmp_dhkey_check ,mem_lmo_opcode2 -0x623b 026806 rtn -: 026807 send_lmp_dhkey_check: -0x623c 026809 force 17 ,pdata -0x623d 026810 call msg_send_lmp -0x623e 026811 arg mem_sp_calc_result_high ,contr -0x623f 026812 ifetch 8 ,contr -0x6240 026813 istore 8 ,contw -0x6241 026814 ifetch 8 ,contr -0x6242 026815 istore 8 ,contw -0x6243 026816 call check_localsm -0x6244 026817 nbranch send_lmp_reply ,true -0x6245 026818 branch send_lmp_request ,true -: 026820 send_lmp_enc_key_size_mask_res: -0x6246 026821 force 3 ,pdata -0x6247 026822 call msg_send_lmp -0x6248 026823 setarg 0xfffe -0x6249 026824 istore 2 ,contw -0x624a 026825 branch send_lmp_reply -: 026827 send_lmp_auto_rate: -0x624b 026828 branch send_lmp_request -: 026829 send_lmp_clkoffset_req: -0x624c 026830 branch send_lmp_request -: 026831 send_lmp_quality_of_service: -0x624d 026832 branch send_lmp_request -: 026833 send_lmp_test_activate: -0x624e 026834 branch send_lmp_request -: 026839 send_lmp_comb_key: -0x624f 026840 call generate_random_number -0x6250 026841 arg mem_lap ,rega -0x6251 026842 call generate_linkkey -0x6252 026843 force 17 ,pdata -0x6253 026844 call msg_send_lmp -0x6254 026845 arg mem_kinit ,rega -0x6255 026846 arg mem_random_number ,regb -0x6256 026847 call xor16 -0x6257 026848 nbranch send_lmp_follow ,master -0x6258 026849 branch send_lmp_tid -: 026851 send_lmp_inrand: -0x6259 026852 call generate_random_number -0x625a 026853 arg mem_plap ,rega -0x625b 026854 call generate_kinit -: 026855 send_lmp_rand: -0x625c 026856 force 17 ,pdata -0x625d 026857 call msg_send_lmp -0x625e 026858 arg mem_random_number ,contr -0x625f 026859 call memcpy16 -0x6260 026860 fetch 1 ,mem_conn_sm -0x6261 026861 beq conn_sm_auth_wait ,send_lmp_request -0x6262 026862 beq conn_sm_pairing_wait ,send_lmp_request -0x6263 026863 branch send_lmp_tid -: 026865 send_lmp_aurand: -0x6264 026866 fetch 1 ,mem_pairing_auth -0x6265 026867 branch send_lmp_aurand_notpairing ,blank -0x6266 026868 call check_localsm -0x6267 026869 call tid_initiate ,true -0x6268 026870 ncall tid_reply ,true -0x6269 026871 branch send_lmp_aurand_common -: 026872 send_lmp_aurand_notpairing: -0x626a 026873 call tid_initiate -: 026874 send_lmp_aurand_common: -0x626b 026875 call generate_random_number -0x626c 026876 branch send_lmp_rand -: 026878 send_lmp_sres: -0x626d 026879 arg mem_lap ,rega -0x626e 026880 call function_e1 -0x626f 026881 force 5 ,pdata -0x6270 026882 call msg_send_lmp -0x6271 026883 fetch 4 ,mem_input_store -0x6272 026884 istore 4 ,contw -0x6273 026885 arg mem_sres_tid ,temp -0x6274 026886 call special_tid_store -0x6275 026887 call copy_aco -0x6276 026888 call check_localsm -0x6277 026889 branch send_lmp_sres_master ,true -0x6278 026890 jam done_encryp ,mem_wait_encryption -0x6279 026891 fetch 1 ,mem_pairing_auth -0x627a 026892 rtn blank -0x627b 026893 jam lmp_au_rand ,mem_lmo_opcode2 -: 026894 send_lmp_sres_master: -0x627c 026895 fetch 1 ,mem_link_key_exists -0x627d 026896 rtn blank -: 026897 send_lmp_sres_startenc: -0x627e 026898 call check_localsm -0x627f 026899 nbranch send_lmp_sres_startenc_slave ,true -0x6280 026900 fetch 1 ,mem_auth_enable -0x6281 026901 rtn blank -0x6282 026902 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x6283 026903 rtn -: 026904 send_lmp_sres_startenc_slave: -0x6284 026905 rtnmark0 mark_slave_in_rand_accepted -0x6285 026906 set0 mark_slave_in_rand_accepted ,mark -0x6286 026907 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x6287 026908 rtn -: 026912 send_lmp_start_encryption: -0x6288 026913 call generate_random_number -0x6289 026914 call function_e3 -0x628a 026915 force 17 ,pdata -0x628b 026916 call msg_send_lmp -0x628c 026917 arg mem_random_number ,contr -0x628d 026918 call memcpy16 -0x628e 026919 branch send_lmp_tid -: 026921 send_lmp_stop_encryption_req: -0x628f 026922 force 1 ,pdata -0x6290 026923 call msg_send_lmp -0x6291 026924 branch send_lmp_tid -: 026926 send_lmp_encryption_key_size_req: -0x6292 026927 force 2 ,pdata -0x6293 026928 call msg_send_lmp -0x6294 026929 force 16 ,pdata -0x6295 026930 istore 1 ,contw -0x6296 026931 store 1 ,mem_key_size -0x6297 026932 branch send_lmp_tid -: 026934 msg_send_lmp: -0x6298 026936 lshift3 pdata ,pdata -0x6299 026937 or_into 0x07 ,pdata -0x629a 026938 store 1 ,mem_lmo_header_length -0x629b 026939 arg 17 ,loopcnt -0x629c 026940 arg mem_lmo_payload ,contw -0x629d 026941 call clear_mem -0x629e 026942 arg mem_lmo_payload ,contw -0x629f 026943 rtn -: 026945 send_lmpext: -0x62a0 026946 and pdata ,0x7f ,rega -0x62a1 026947 jam lmp_escape ,mem_lmp_to_send -0x62a2 026948 deposit queue -0x62a3 026949 call msg_send_lmp -0x62a4 026950 deposit rega -0x62a5 026951 istore 1 ,contw -0x62a6 026952 rtn -: 026954 send_lmp_follow: -0x62a7 026955 fetch 1 ,mem_lmp_to_send -0x62a8 026956 lshift pdata ,pdata -0x62a9 026957 fetcht 1 ,mem_state_map -0x62aa 026958 isolate1 smap_lmptid ,temp -0x62ab 026959 setflag true ,0 ,pdata -0x62ac 026960 branch send_lmp_exit -: 026963 send_lmp_tid: -0x62ad 026964 fetcht 1 ,mem_state_map -0x62ae 026965 and_into 1 ,temp -0x62af 026966 branch send_lmp_end -: 026968 send_lmp_reply: -0x62b0 026969 force 0 ,temp -0x62b1 026970 branch send_lmp_end -: 026972 send_lmp_request: -0x62b2 026973 force 1 ,temp -: 026974 send_lmp_end: -0x62b3 026975 fetch 1 ,mem_lmp_to_send -0x62b4 026976 lshift pdata ,pdata -0x62b5 026977 setflag master ,0 ,pdata -0x62b6 026978 ixor temp ,pdata -: 026979 send_lmp_exit: -0x62b7 026980 store 1 ,mem_lmo_header_opcode -0x62b8 026981 jam 0 ,mem_lmp_to_send -0x62b9 026982 call lmo_fifo_process_lmo0empty -0x62ba 026983 enable user -0x62bb 026984 rtn -: 026987 lmo_fifo_check: -0x62bc 026988 fetch 1 ,mem_lmo_opcode2 -0x62bd 026989 rtn blank -0x62be 026990 call lmo_fifo_process -0x62bf 026991 fetch 1 ,mem_lmo_opcode2 -0x62c0 026992 rtn -: 026994 lmo_fifo_process: -0x62c1 026995 bpatchx patch30_6 ,mem_patch30 -0x62c2 026996 fetch 1 ,mem_lmp_to_send -0x62c3 026997 branch lmo_fifo_process_lmo0empty ,blank -0x62c4 026998 fetch 1 ,mem_lmo_opcode1 -0x62c5 026999 nrtn blank -0x62c6 027000 branch lmo_fifo_process_lmo2to1 -: 027001 lmo_fifo_process_lmo0empty: -0x62c7 027002 fetch 1 ,mem_lmo_opcode1 -0x62c8 027003 branch lmo_fifo_process_lmo1_empty ,blank -0x62c9 027004 fetch 3 ,mem_lmo_opcode1 -0x62ca 027005 store 3 ,mem_lmp_to_send -0x62cb 027006 fetcht 1 ,mem_lmo_tid1 -0x62cc 027007 fetch 1 ,mem_state_map -0x62cd 027008 set0 smap_lmptid ,pdata -0x62ce 027009 ior temp ,pdata -0x62cf 027010 store 1 ,mem_state_map -0x62d0 027011 jam 0 ,mem_lmo_opcode1 -: 027012 lmo_fifo_process_lmo2to1: -0x62d1 027013 fetch 1 ,mem_lmo_opcode2 -0x62d2 027014 rtn blank -0x62d3 027015 fetch 4 ,mem_lmo_opcode2 -0x62d4 027016 store 4 ,mem_lmo_opcode1 -0x62d5 027017 jam 0 ,mem_lmo_opcode2 -0x62d6 027018 rtn -: 027019 lmo_fifo_process_lmo1_empty: -0x62d7 027020 fetch 1 ,mem_lmo_opcode2 -0x62d8 027021 rtn blank -0x62d9 027022 fetch 3 ,mem_lmo_opcode2 -0x62da 027023 store 3 ,mem_lmp_to_send -0x62db 027024 fetcht 1 ,mem_lmo_tid2 -0x62dc 027025 fetch 1 ,mem_state_map -0x62dd 027026 set0 smap_lmptid ,pdata -0x62de 027027 ior temp ,pdata -0x62df 027028 store 1 ,mem_state_map -0x62e0 027029 jam 0 ,mem_lmo_opcode2 -0x62e1 027030 rtn -: 027033 special_tid_store: -0x62e2 027034 bpatchx patch30_7 ,mem_patch30 -0x62e3 027035 fetch 1 ,mem_state_map -0x62e4 027036 copy pdata ,regc -0x62e5 027037 ifetch 1 ,temp -0x62e6 027038 call pop_tid_follow -0x62e7 027039 call send_lmp_follow -0x62e8 027040 copy regc ,pdata -0x62e9 027041 store 1 ,mem_state_map -0x62ea 027042 rtn -: 027044 tid_reply: -0x62eb 027045 fetcht 1 ,mem_state_map -0x62ec 027046 set0 smap_lmptidinit ,temp -0x62ed 027047 storet 1 ,mem_state_map -0x62ee 027048 rtn -: 027050 tid_initiate: -0x62ef 027051 fetcht 1 ,mem_state_map -0x62f0 027052 set1 smap_lmptidinit ,temp -0x62f1 027053 storet 1 ,mem_state_map -0x62f2 027054 rtn -: 027057 tid_check: -0x62f3 027058 nsetflag master ,smap_lmptid ,pdata -0x62f4 027059 fetcht 1 ,mem_state_map -0x62f5 027060 ixor temp ,pdata -0x62f6 027061 isolate1 smap_lmptid ,pdata -0x62f7 027062 rtn -: 027065 tid_set_reply: -0x62f8 027066 fetch 1 ,mem_state_map -0x62f9 027067 setflag master ,smap_lmptid ,pdata -0x62fa 027068 store 1 ,mem_state_map -0x62fb 027069 rtn -: 027072 check_localsm: -0x62fc 027073 fetch 1 ,mem_sp_localsm -0x62fd 027074 compare local_statemachine ,pdata ,0x7f -0x62fe 027075 rtn -: 027076 setlocalsm_master: -0x62ff 027077 fetch 1 ,mem_sp_localsm -0x6300 027078 set1 7 ,pdata -0x6301 027079 store 1 ,mem_sp_localsm -0x6302 027080 rtn -: 027081 setlocalsm_slave: -0x6303 027082 fetch 1 ,mem_sp_localsm -0x6304 027083 set0 7 ,pdata -0x6305 027084 store 1 ,mem_sp_localsm -0x6306 027085 rtn -: 027086 check_localsm_master: -0x6307 027087 fetch 1 ,mem_sp_localsm -0x6308 027088 isolate1 7 ,pdata -0x6309 027089 store 1 ,mem_sp_localsm -0x630a 027090 rtn -: 027092 generate_random_number: -0x630b 027094 arg mem_random_number ,contw -: 027095 generate_random: -0x630c 027096 force 16 ,loopcnt -: 027097 generate_random_another: -: 027098 generate_random_loop: -0x630d 027099 random pdata -0x630e 027100 istore 1 ,contw -0x630f 027101 loop generate_random_another -0x6310 027102 rtn -: 027104 generate_linkkey: -0x6311 027105 call function_e21 -0x6312 027106 arg mem_link_key ,rega -0x6313 027107 arg mem_input_store ,regb -0x6314 027108 ifetch 8 ,rega -0x6315 027109 fetcht 1 ,mem_state -0x6316 027110 nsetflag blank ,state_combkey ,temp -0x6317 027111 storet 1 ,mem_state -0x6318 027112 copy rega ,contw -0x6319 027113 call xor16 -0x631a 027114 branch generate_linkkey_continue -: 027120 process_conn_sm: -0x631b 027122 bpatchx patch31_0 ,mem_patch31 -0x631c 027124 call lmo_fifo_check -0x631d 027125 nrtn blank -: 027126 process_conn_sm_continue: -0x631e 027127 fetch 1 ,mem_conn_sm -0x631f 027128 rtn blank -0x6320 027132 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req -0x6321 027133 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept -0x6322 027134 beq conn_sm_send_features ,host_create_conn_send_features -0x6323 027135 beq conn_sm_wait_features_res ,host_create_conn_waiting -0x6324 027136 beq conn_sm_send_switch ,host_create_conn_send_switch -0x6325 027137 beq conn_sm_auth_pair ,host_create_conn_auth_pair -0x6326 027138 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait -0x6327 027139 beq conn_sm_encrypt ,host_create_conn_encrypt -0x6328 027140 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait -0x6329 027141 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear -0x632a 027142 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete -0x632b 027143 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete -0x632c 027144 beq conn_sm_detach_delay ,host_create_conn_master_detach -0x632d 027145 beq conn_sm_send_version ,host_create_conn_send_version -0x632e 027146 beq conn_sm_wait_version ,host_create_conn_waiting -0x632f 027147 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch -0x6330 027148 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext -0x6331 027149 beq conn_sm_wait_features_ext ,host_create_conn_waiting -0x6332 027150 beq conn_sm_pairing ,host_create_conn_pairing -0x6333 027151 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait -0x6334 027152 beq conn_sm_auth ,host_create_conn_auth -0x6335 027153 beq conn_sm_auth_wait ,host_create_conn_auth_wait -0x6336 027154 beq conn_sm_done ,host_create_conn_done -0x6337 027155 beq conn_sm_wait_done ,host_create_conn_done_wait -0x6338 027156 jam conn_sm_standby ,mem_conn_sm -0x6339 027158 rtn -: 027159 host_create_conn_done: -0x633a 027160 fetch 1 ,mem_lmp_conn_state -0x633b 027161 rtnbit0 received_setup_complete -0x633c 027162 rtnbit0 sent_setup_complete -0x633d 027163 jam conn_sm_standby ,mem_conn_sm -0x633e 027164 call host_conn_judge_encrypt -0x633f 027165 branch scheduler_start_upper_sm -: 027167 host_conn_judge_encrypt: -0x6340 027168 fetch 1 ,mem_connection_options -0x6341 027169 rtnbit0 connection_encrypt -0x6342 027170 jam conn_sm_encrypt_wait ,mem_conn_sm -0x6343 027171 rtn -: 027173 host_create_conn_done_wait: -0x6344 027174 arg enpt_delay_timer ,queue -0x6345 027175 call timer_check -0x6346 027176 nrtn blank -0x6347 027177 jam conn_sm_done ,mem_conn_sm -0x6348 027178 rtn -: 027180 host_create_conn_auth: -0x6349 027181 fetch 1 ,mem_connection_options -0x634a 027182 set0 connection_auth ,pdata -0x634b 027183 store 1 ,mem_connection_options -0x634c 027184 jam conn_sm_auth_wait ,mem_conn_sm -0x634d 027185 jam lmp_au_rand ,mem_lmo_opcode2 -0x634e 027186 rtn -: 027187 host_create_conn_auth_wait: -0x634f 027188 rtn -: 027189 host_create_conn_pairing: -0x6350 027190 fetch 1 ,mem_pincode_state -0x6351 027191 rtnne pincode_state_pincode_ready -0x6352 027192 call host_auth -0x6353 027193 jam conn_sm_pairing_wait ,mem_conn_sm -0x6354 027194 rtn -: 027196 host_create_conn_pairing_wait: -0x6355 027197 rtn -: 027198 host_creat_conn_send_feat_ext: -0x6356 027199 jam conn_sm_wait_features_ext ,mem_conn_sm -0x6357 027200 jam lmp_ext_features_req ,mem_lmo_opcode2 -0x6358 027201 rtn -: 027202 host_create_conn_send_version: -0x6359 027203 jam conn_sm_wait_version ,mem_conn_sm -0x635a 027204 jam lmp_version_req ,mem_lmo_opcode2 -0x635b 027205 rtn -: 027207 host_creat_conn_wait_switch: -0x635c 027208 fetch 1 ,mem_switch_flag -0x635d 027209 rtneq switch_flag_init -0x635e 027210 beq switch_flag_accept ,host_create_conn_switch_accept -0x635f 027211 arg switch_wait_timer ,queue -0x6360 027212 call timer_check -0x6361 027213 nrtn blank -0x6362 027214 jam switch_flag_init ,mem_switch_flag -0x6363 027215 branch host_create_conn_switch -: 027216 host_create_conn_switch_accept: -0x6364 027217 rtn master -0x6365 027218 branch host_create_conn_auth_pair -: 027220 host_create_conn_send_features: -0x6366 027221 jam conn_sm_wait_features_res ,mem_conn_sm -0x6367 027222 jam lmp_features_req ,mem_lmo_opcode2 -0x6368 027223 rtn -: 027224 host_create_conn_send_switch: -0x6369 027225 jam lmp_switch_req ,mem_lmo_opcode2 -0x636a 027226 set1 mark_switch_initiated ,mark -0x636b 027227 jam conn_sm_wait_conn_accept ,mem_conn_sm -0x636c 027228 setarg 0x1ff -0x636d 027229 store 2 ,mem_soft_timer -0x636e 027230 rtn -: 027231 host_create_conn_send_conn_req: -0x636f 027232 jam conn_sm_wait_conn_accept ,mem_conn_sm -0x6370 027233 jam 0xff ,mem_soft_timer -0x6371 027234 set0 mark_reconn_recieve_switch ,mark -0x6372 027235 jam lmp_host_connection_req ,mem_lmo_opcode2 -0x6373 027236 branch init_lmp_reinit -: 027237 host_create_conn_wait_accept: -0x6374 027238 rtnmark1 mark_reconn_recieve_switch -0x6375 027239 fetch 2 ,mem_soft_timer -0x6376 027240 sub pdata ,1 ,pdata -0x6377 027241 branch host_create_conn_resend ,zero -0x6378 027242 store 2 ,mem_soft_timer -0x6379 027243 rtn -: 027244 host_create_conn_resend: -0x637a 027245 jam conn_sm_send_switch ,mem_conn_sm -0x637b 027246 rtn -: 027247 host_create_conn_waiting: -0x637c 027249 rtn -: 027251 host_create_conn_switch: -0x637d 027252 fetch 1 ,mem_lmp_conn_state -0x637e 027253 rtnbit0 sent_setup_complete -0x637f 027254 rtnbit0 received_setup_complete -0x6380 027255 fetch 1 ,mem_connection_options -0x6381 027256 set0 connection_switch ,pdata -0x6382 027257 store 1 ,mem_connection_options -0x6383 027258 jam lmp_switch_req ,mem_lmo_opcode2 -0x6384 027259 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm -0x6385 027260 rtn -: 027262 host_create_conn_send_setup_complete: -0x6386 027263 jam conn_sm_wait_setup_complete ,mem_conn_sm -0x6387 027264 jam lmp_setup_complete ,mem_lmo_opcode2 -0x6388 027265 rtn -: 027267 host_create_conn_wait_setup_complete: -0x6389 027268 fetch 1 ,mem_lmp_conn_state -0x638a 027269 rtnbit0 received_setup_complete -0x638b 027270 jam conn_sm_standby ,mem_conn_sm -0x638c 027272 rtn -: 027273 host_create_conn_wait_setup_complete_rtn: -0x638d 027274 jam conn_sm_auth_pair ,mem_conn_sm -0x638e 027275 rtn -: 027277 host_create_conn_master_detach: -0x638f 027278 fetch 1 ,mem_soft_timer -0x6390 027279 increase -1 ,pdata -0x6391 027280 branch host_create_conn_send_detach ,blank -0x6392 027281 store 1 ,mem_soft_timer -0x6393 027282 rtn -: 027283 host_create_conn_send_detach: -0x6394 027284 jam lmp_detach ,mem_lmo_opcode2 -0x6395 027285 jam local_host ,mem_disconn_reason_send -0x6396 027286 jam 0 ,mem_conn_sm -0x6397 027287 rtn -: 027288 host_create_conn_auth_pair: -0x6398 027290 fetch 1 ,mem_connection_options -0x6399 027291 bbit1 connection_switch ,host_create_conn_switch -0x639a 027292 bbit1 connection_auth ,host_create_conn_auth_pair_true -: 027293 host_create_conn_sm_done: -0x639b 027294 jam conn_sm_done ,mem_conn_sm -0x639c 027295 rtn -: 027296 host_create_conn_auth_pair_true: -0x639d 027297 fetch 1 ,mem_link_key_exists -0x639e 027298 branch host_create_conn_auth_pair_nokey ,blank -0x639f 027299 fetch 1 ,mem_lmp_conn_state -0x63a0 027300 rtnbit0 sent_setup_complete -0x63a1 027301 rtnbit0 received_setup_complete -0x63a2 027302 fetch 4 ,mem_aurand_send_delay_time -0x63a3 027303 arg 100 ,temp -0x63a4 027304 iadd temp ,temp -0x63a5 027305 copy clkn_bt ,pdata -0x63a6 027306 isub temp ,null -0x63a7 027307 nrtn positive -0x63a8 027308 branch host_create_conn_auth -: 027312 host_create_conn_auth_pair_nokey: -0x63a9 027313 jam conn_sm_pairing ,mem_conn_sm -0x63aa 027314 jam 4 ,mem_pin_length -0x63ab 027315 setarg 0x3030 -0x63ac 027316 store 2 ,mem_pin -0x63ad 027317 istore 2 ,contw -0x63ae 027318 jam pincode_state_pincode_ready ,mem_pincode_state -0x63af 027319 branch host_create_conn_pairing -: 027321 host_create_conn_auth_pair_wait: -0x63b0 027322 rtn -: 027323 host_create_conn_encrypt: -0x63b1 027324 fetch 1 ,mem_connection_options -0x63b2 027325 bbit1 connection_encrypt ,host_create_conn_encrypt_start -0x63b3 027326 jam conn_sm_done ,mem_conn_sm -0x63b4 027327 rtn -: 027329 host_create_conn_encrypt_start: -0x63b5 027330 fetch 1 ,mem_connection_options -0x63b6 027331 set0 connection_encrypt ,pdata -0x63b7 027332 store 1 ,mem_connection_options -0x63b8 027333 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x63b9 027334 rtn -: 027336 host_create_conn_encrypt_wait: -0x63ba 027337 fetch 1 ,mem_wait_encryption -0x63bb 027338 rtn blank -0x63bc 027339 jam conn_sm_standby ,mem_conn_sm -0x63bd 027340 branch host_create_conn_encrypt_start -: 027342 host_create_conn_encrypt_wait_clear: -0x63be 027343 jam conn_sm_send_setup_complete ,mem_conn_sm -0x63bf 027344 rtn -: 027346 host_auth: -0x63c0 027347 fetch 1 ,mem_op -0x63c1 027348 bbit1 op_inrand_req ,remote_auth -0x63c2 027349 call tid_initiate -0x63c3 027350 jam lmp_in_rand ,mem_lmo_opcode2 -0x63c4 027351 branch cmd_exit -: 027352 remote_auth: -0x63c5 027353 fetch 1 ,mem_op -0x63c6 027354 set0 op_inrand_req ,pdata -0x63c7 027355 store 1 ,mem_op -0x63c8 027356 call lmp_accept_inrand -0x63c9 027357 call tid_set_reply -0x63ca 027358 branch cmd_exit -: 027360 pincode_reinit: -0x63cb 027361 setarg 4 -0x63cc 027362 store 1 ,mem_pin_length -0x63cd 027363 setarg 0x3030 -0x63ce 027364 istore 2 ,contw -0x63cf 027365 istore 2 ,contw -0x63d0 027366 rtn -: 027372 twspi_reset: -0x63d1 027373 bpatchx patch31_4 ,mem_patch31 -0x63d2 027374 hfetch 1 ,core_gpio_oe3 -0x63d3 027375 arg 0x06 ,temp -0x63d4 027376 ior temp ,pdata -0x63d5 027377 hstore 1 ,core_gpio_oe3 -0x63d6 027378 hfetch 1 ,core_gpio_out3 -0x63d7 027379 ior temp ,pdata -0x63d8 027380 hstore 1 ,core_gpio_out3 -0x63d9 027381 call twspi_disable -0x63da 027382 hfetch 1 ,core_gpio_out3 -0x63db 027383 set0 1 ,pdata -0x63dc 027384 set0 2 ,pdata -0x63dd 027385 hstore 1 ,core_gpio_out3 -0x63de 027386 nop 30 -0x63df 027387 branch twspi_enable -: 027389 twspi_reset2: -0x63e0 027390 hfetch 1 ,core_gpio_oe3 -0x63e1 027391 arg 0xc0 ,temp -0x63e2 027392 ior temp ,pdata -0x63e3 027393 hstore 1 ,core_gpio_oe3 -0x63e4 027394 hfetch 1 ,core_gpio_out3 -0x63e5 027395 ior temp ,pdata -0x63e6 027396 hstore 1 ,core_gpio_out3 -0x63e7 027397 call twspi_disable -0x63e8 027398 hfetch 1 ,core_gpio_out3 -0x63e9 027399 set0 6 ,pdata -0x63ea 027400 set0 7 ,pdata -0x63eb 027401 hstore 1 ,core_gpio_out3 -0x63ec 027402 nop 30 -0x63ed 027403 branch twspi_enable2 -: 027405 twspi_disable: -0x63ee 027406 hfetch 1 ,core_gpio_sel1 -0x63ef 027407 and pdata ,0xfc ,pdata -0x63f0 027408 hstore 1 ,core_gpio_sel1 -0x63f1 027409 rtn -: 027410 twspi_enable: -0x63f2 027411 hfetch 1 ,core_gpio_sel1 -0x63f3 027412 or pdata ,0x01 ,pdata -0x63f4 027413 hstore 1 ,core_gpio_sel1 -0x63f5 027414 rtn -: 027415 twspi_enable2: -0x63f6 027416 hfetch 1 ,core_gpio_sel1 -0x63f7 027417 or pdata ,0x03 ,pdata -0x63f8 027418 set0 4 ,pdata -0x63f9 027419 hstore 1 ,core_gpio_sel1 -0x63fa 027420 rtn -: 027424 sensor_read: -0x63fb 027425 copy pdata ,regb -0x63fc 027426 call spi_ncs_enable -0x63fd 027427 nop 100 -0x63fe 027428 copy regb ,pdata -0x63ff 027429 call twspi_read -0x6400 027430 copy pdata ,regb -0x6401 027431 call spi_ncs_disable -0x6402 027432 nop 100 -0x6403 027433 copy regb ,pdata -0x6404 027434 rtn -: 027436 sensor_write: -0x6405 027437 copy pdata ,regb -0x6406 027438 call spi_ncs_enable -0x6407 027439 nop 100 -0x6408 027440 copy regb ,pdata -0x6409 027441 call twspi_write -0x640a 027442 call spi_ncs_disable -0x640b 027443 nop 100 -0x640c 027444 rtn -: 027447 spi_ncs_gpio_init: -0x640d 027448 fetcht 1 ,mem_spi_ncs_gpio -0x640e 027449 branch gpio_config_output -: 027452 spi_ncs_enable: -0x640f 027453 fetcht 1 ,mem_spi_ncs_gpio -0x6410 027454 branch gpio_out_active -: 027457 spi_ncs_disable: -0x6411 027458 fetcht 1 ,mem_spi_ncs_gpio -0x6412 027459 branch gpio_out_inactive -: 027462 twspi_write: -0x6413 027463 branch spid_write_reg -: 027465 twspi_read: -0x6414 027466 branch spid_read_reg -: 027473 read_function_aes: -0x6415 027474 nbranch read_function ,user -0x6416 027475 hfetch 1 ,core_gpio_key2 -0x6417 027476 or_into 0x2 ,pdata -0x6418 027477 hstore 1 ,core_gpio_key2 -: 027478 read_function: -0x6419 027479 copy temp ,null -0x641a 027480 branch read_fuction_zero ,zero -0x641b 027481 copy regc ,pc -: 027482 read_fuction_zero: -0x641c 027483 isolate0 0 ,null -0x641d 027484 branch set_ucode_status -: 027487 get_block_header: -0x641e 027488 force 4 ,temp -: 027489 get_block_header0: -0x641f 027490 arg mem_ucode_buf ,rega -0x6420 027491 hfetch 1 ,core_gpio_key2 -0x6421 027492 and_into 0xfd ,pdata -0x6422 027493 hstore 1 ,core_gpio_key2 -0x6423 027494 call read_function -0x6424 027495 arg 0x55aa ,rega -0x6425 027496 fetch 2 ,mem_ucode_buf -0x6426 027497 ifetcht 2 ,contr -0x6427 027498 isub rega ,null -0x6428 027499 rtn -: 027501 read_first_block: -0x6429 027502 arg 2 ,temp -0x642a 027503 arg mem_ucode_ptr ,rega -0x642b 027504 call read_function -0x642c 027505 fetch 2 ,mem_ucode_ptr -0x642d 027506 store 2 ,mem_addr_mi -0x642e 027507 call get_iv ,user -0x642f 027508 rtn -: 027510 get_iv: -0x6430 027511 arg 16 ,temp -0x6431 027512 arg mem_ucode_keybuf ,rega -0x6432 027513 hfetch 1 ,core_gpio_key2 -0x6433 027514 and_into 0xfd ,pdata -0x6434 027515 hstore 1 ,core_gpio_key2 -0x6435 027516 call read_function -0x6436 027517 arg mem_ucode_keybuf ,contr -0x6437 027518 arg 16 ,loopcnt -0x6438 027519 call aes_load_data -0x6439 027520 call aes_init -0x643a 027521 call aes_clear_data -0x643b 027522 branch do_aes_cbc -: 027524 load_storage: -0x643c 027525 disable match -0x643d 027526 call get_block_header -0x643e 027527 nrtn zero -0x643f 027528 enable match -0x6440 027529 jam 0x80 ,core_ucode_ctrl -0x6441 027530 jam 0 ,core_ucode_hi -0x6442 027531 jam 0 ,core_ucode_low -0x6443 027532 arg core_ucode_data ,rega -0x6444 027533 call read_function_aes -0x6445 027534 jam 0x0 ,core_ucode_ctrl -: 027535 load_storage_loop: -0x6446 027536 arg 6 ,temp -0x6447 027537 call get_block_header0 -0x6448 027538 nrtn zero -0x6449 027539 ifetch 2 ,contr -0x644a 027540 iforce rega -0x644b 027541 call read_function -0x644c 027542 branch load_storage_loop -: 027546 reload_eeprom: -0x644d 027547 call clean_mem -0x644e 027548 setarg 0x1000 -0x644f 027549 store 2 ,mem_addr_mi -0x6450 027550 arg iicd_read_eep ,regc -0x6451 027551 arg 2 ,loopcnt -: 027552 reload_eeprom_loop: -0x6452 027553 call get_block_header -0x6453 027554 nrtn zero -0x6454 027555 fetch 2 ,mem_addr_mi -0x6455 027556 byteswap pdata ,pdata -0x6456 027557 iadd temp ,pdata -0x6457 027558 byteswap pdata ,pdata -0x6458 027559 store 2 ,mem_addr_mi -0x6459 027560 loop reload_eeprom_loop -0x645a 027561 branch load_storage_loop -: 027563 loadcode: -0x645b 027564 call clean_mem -0x645c 027565 disable user -0x645d 027566 call otp_enable_chgpump -0x645e 027567 setarg otp_ucode_flag -0x645f 027568 arg mem_otp_ucode_flag ,rega -0x6460 027569 arg 2 ,temp -0x6461 027570 call otpd_read_data -0x6462 027571 fetch 2 ,mem_otp_ucode_flag -0x6463 027572 bbit0 otp_uflag_aes ,loadcode_otp -0x6464 027573 jam 0x25 ,core_clkoff -0x6465 027574 setarg otp_ucode_aeskey -0x6466 027575 arg mem_ucode_keybuf ,rega -0x6467 027576 arg 16 ,temp -0x6468 027577 call otpd_read_data -0x6469 027578 jam lock_otp ,core_misc_ctrl -0x646a 027579 set1 mark_otp_encrypt ,mark -0x646b 027580 arg mem_ucode_keybuf ,contr -0x646c 027581 call load_key -0x646d 027582 enable user -: 027583 loadcode_otp: -0x646e 027584 jam 0 ,mem_loadcode_times -: 027585 loadcode_otp_2: -0x646f 027586 call loadcode_check_times -0x6470 027587 fetch 2 ,mem_otp_ucode_flag -0x6471 027588 byteswap pdata ,pdata -0x6472 027589 arg 0x7ff ,temp -0x6473 027590 iand temp ,pdata -0x6474 027591 branch loadcode_iic ,zero -0x6475 027592 call otp_set_addr -0x6476 027593 arg otpd_read_code ,regc -0x6477 027594 call get_iv ,user -0x6478 027595 call load_storage -0x6479 027596 fetch 1 ,mem_ucode_status -0x647a 027597 bbit0 0 ,loadcode_otp_2 -: 027599 loadcode_iic: -0x647b 027600 call otp_disable_chgpump -0x647c 027601 jam 0 ,mem_loadcode_times -: 027602 loadcode_iic_2: -0x647d 027603 call loadcode_check_times -0x647e 027604 call clear_eeprom_size_2k -0x647f 027605 fetch 1 ,mem_otp_ucode_flag -0x6480 027606 bbit1 otp_uflag_skip_eep ,loadcode_spi -0x6481 027607 call loadcode_iic_by_eeprom -0x6482 027608 nbranch loadcode_iic_eeprom_2k ,match -0x6483 027609 fetch 1 ,mem_ucode_status -0x6484 027610 bbit0 0 ,loadcode_iic_2 -0x6485 027611 branch loadcode_hci -: 027612 loadcode_iic_eeprom_2k: -0x6486 027613 call set_eeprom_size_2k -0x6487 027614 fetch 1 ,mem_otp_ucode_flag -0x6488 027615 bbit1 otp_uflag_skip_eep ,loadcode_spi -0x6489 027616 call loadcode_iic_by_eeprom -0x648a 027617 nbranch loadcode_spi ,match -0x648b 027618 fetch 1 ,mem_ucode_status -0x648c 027619 bbit0 0 ,loadcode_iic_2 -0x648d 027620 branch loadcode_hci -: 027622 loadcode_spi: -0x648e 027623 jam 0 ,mem_loadcode_times -: 027624 loadcode_spi_2: -0x648f 027625 call loadcode_check_times -0x6490 027626 fetch 1 ,mem_otp_ucode_flag -0x6491 027627 bbit1 otp_uflag_skip_flash ,loadcode_hci -0x6492 027628 setarg 0x0 -0x6493 027629 store 3 ,mem_addr_hi -0x6494 027630 call spid_init_flash -0x6495 027631 arg spid_load_flash ,regc -0x6496 027632 call read_first_block -0x6497 027633 call load_storage -0x6498 027634 nbranch loadcode_hci ,match -0x6499 027635 fetch 1 ,mem_ucode_status -0x649a 027636 bbit0 0 ,loadcode_spi_2 -: 027638 loadcode_hci: -0x649b 027639 bmark1 mark_otp_encrypt ,loadcode_hci_enc -0x649c 027640 call clear_key_buf -: 027641 loadcode_hci_enc: -0x649d 027642 fetch 1 ,mem_otp_ucode_flag -0x649e 027643 bbit0 otp_uflag_hci ,clear_key_buf -0x649f 027644 jam 0x21 ,core_clkoff -0x64a0 027645 call hci_init -: 027646 loadcode_hci_loop: -0x64a1 027647 call hci_rx_packet -0x64a2 027648 branch loadcode_hci_loop -: 027650 clear_key_buf: -0x64a3 027651 setarg 0 -0x64a4 027652 store 8 ,mem_ucode_keybuf -0x64a5 027653 store 8 ,mem_ucode_keybuf + 8 -0x64a6 027654 force regidx_key ,regext_index -0x64a7 027655 call aes_clear -0x64a8 027656 jam 0x21 ,core_clkoff -0x64a9 027657 rtn -: 027660 loadcode_iic_by_eeprom: -0x64aa 027661 setarg 0x0 -0x64ab 027662 store 2 ,mem_addr_mi -0x64ac 027663 arg iicd_read_eep ,regc -0x64ad 027664 call iicd_init_12m -0x64ae 027665 call read_first_block -0x64af 027666 branch load_storage -: 027669 loadcode_check_times: -0x64b0 027670 fetch 1 ,mem_loadcode_times -0x64b1 027671 increase 1 ,pdata -0x64b2 027672 sub pdata ,3 ,null -0x64b3 027673 nbranch loadcode_error ,positive -0x64b4 027674 store 1 ,mem_loadcode_times -0x64b5 027675 rtn -: 027677 loadcode_error: -0x64b6 027678 call clear_key_buf -0x64b7 027679 call ice_break -0x64b8 027680 rtn -: 027684 set_ucode_status: -0x64b9 027685 fetch 1 ,mem_ucode_status -0x64ba 027686 lshift pdata ,pdata -0x64bb 027687 setflag true ,0 ,pdata -0x64bc 027688 isolate0 15 ,rega -0x64bd 027689 rtn true -0x64be 027690 store 1 ,mem_ucode_status -0x64bf 027691 rtn -: 027694 decrypt_code: -0x64c0 027695 hfetch 1 ,core_gpio_key2 -0x64c1 027696 rtnbit0 1 -0x64c2 027697 branch decrypt_code_skip -: 027698 decrypt_code_loop: -0x64c3 027699 hfetch 1 ,core_dma_status -0x64c4 027700 qisolate1 pdata -0x64c5 027701 rtn true -: 027702 decrypt_code_skip: -0x64c6 027703 hfetch 1 ,core_misc_status -0x64c7 027704 bbit0 1 ,decrypt_code_loop -0x64c8 027705 call do_aes_cbc -0x64c9 027706 branch decrypt_code_loop -: 027710 load_ucode: -0x64ca 027711 fetch 2 ,mem_patch_ptr -0x64cb 027712 rtn blank -0x64cc 027713 jam 0x80 ,core_ucode_ctrl -0x64cd 027714 jam 0 ,core_ucode_hi -0x64ce 027715 jam 0 ,core_ucode_low -0x64cf 027716 fetcht 2 ,mem_patch_len -0x64d0 027717 lshift2 temp ,loopcnt -0x64d1 027718 iforce contr -: 027719 load_ucode_loop: -0x64d2 027720 ifetch 1 ,contr -0x64d3 027721 hstore 1 ,core_ucode_data -0x64d4 027722 loop load_ucode_loop -0x64d5 027723 jam 0x0 ,core_ucode_ctrl -0x64d6 027724 rtn -: 027729 spid_init: -0x64d7 027730 bpatchx patch31_5 ,mem_patch31 -0x64d8 027731 call spid_init_common -0x64d9 027732 branch twspi_enable -: 027734 spid_init2: -0x64da 027735 call spid_init_common -0x64db 027736 call twspi_disable -0x64dc 027737 branch twspi_enable2 -: 027739 spid_init_common: -0x64dd 027740 fetch 1 ,mem_spi_init_clk -0x64de 027741 hstore 1 ,core_spid_ctrl -0x64df 027742 fetch 1 ,mem_spi_init_delay_time -0x64e0 027743 hstore 1 ,core_spid_delay -0x64e1 027744 setarg mem_spid_tbuf -0x64e2 027745 hstore 2 ,core_spid_txaddr -0x64e3 027746 setarg mem_spid_rbuf -0x64e4 027747 hstore 2 ,core_spid_rxaddr -0x64e5 027748 branch twspi_disable -: 027750 spid_reset: -0x64e6 027751 hfetch 1 ,core_spid_ctrl -0x64e7 027752 set1 7 ,pdata -0x64e8 027753 hstore 1 ,core_spid_ctrl -0x64e9 027754 set0 7 ,pdata -0x64ea 027755 hstore 1 ,core_spid_ctrl -0x64eb 027756 rtn -: 027760 spid_write_reg: -0x64ec 027761 set1 7 ,pdata -0x64ed 027762 store 2 ,mem_spid_tbuf -0x64ee 027763 bpatchx patch31_6 ,mem_patch31 -0x64ef 027764 jam 2 ,core_spid_txlen -0x64f0 027765 jam 0 ,core_spid_rxlen -0x64f1 027766 jam spid_start ,core_misc_ctrl -0x64f2 027767 branch wait_spid_done -: 027770 spid_read_reg: -0x64f3 027771 force 1 ,temp -: 027773 spid_read_regs: -0x64f4 027775 store 1 ,mem_spid_tbuf -0x64f5 027776 bpatchx patch31_7 ,mem_patch31 -0x64f6 027777 jam 1 ,core_spid_txlen -0x64f7 027778 hstoret 2 ,core_spid_rxlen -0x64f8 027779 jam spid_start ,core_misc_ctrl -0x64f9 027780 call wait_spid_done -0x64fa 027781 fetch 1 ,mem_spid_rbuf -0x64fb 027782 rtn -: 027784 wait_spid_done: -0x64fc 027785 fetch 2 ,mem_afh_error_total -0x64fd 027786 increase 1 ,pdata -0x64fe 027787 store 2 ,mem_afh_error_total -0x64ff 027788 hfetch 1 ,core_dma_status -0x6500 027789 bbit0 spid_done ,wait_spid_done -0x6501 027790 rtn -: 027792 spid_init_flash: -0x6502 027793 jam 0x40 ,core_spid_ctrl -0x6503 027794 jam 0x0 ,core_spid_delay -0x6504 027795 hfetch 1 ,core_gpio_sel1 -0x6505 027796 set0 0 ,pdata -0x6506 027797 set1 1 ,pdata -0x6507 027798 hstore 1 ,core_gpio_sel1 -0x6508 027799 setarg 0 -0x6509 027800 store 4 ,mem_spid_tbuf -0x650a 027801 rtn -: 027804 spid_unlock_flash: -0x650b 027805 setarg 0 -0x650c 027806 hstore 2 ,core_spid_rxlen -0x650d 027807 setarg 1 -0x650e 027808 hstore 2 ,core_spid_txlen -0x650f 027809 setarg mem_spid_tbuf -0x6510 027810 hstore 2 ,core_spid_txaddr -0x6511 027811 jam 6 ,mem_spid_tbuf -0x6512 027812 jam spid_start ,core_misc_ctrl -0x6513 027813 branch wait_spid_done -: 027828 flash_write: -0x6514 027829 disable user -0x6515 027830 copy pdata ,regb -0x6516 027831 fetch 1 ,mem_spi_write_flash_sm -0x6517 027832 rtnne flash_sm_no_buys -0x6518 027833 enable user -0x6519 027834 copy regb ,pdata -0x651a 027835 branch flash_write_start -: 027838 flash_write_spi_sm_timer: -0x651b 027839 fetch 1 ,mem_spi_write_flash_sm -0x651c 027840 beq flash_sm_start ,flash_write_start -0x651d 027841 beq flash_sm_erase_sector ,flash_erase_sector -0x651e 027842 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector -0x651f 027843 beq flash_sm_write_data ,flash_write_data -0x6520 027844 beq flash_sm_wait_write_data ,flash_wait_write_data -0x6521 027845 rtn -: 027847 flash_write_start: -0x6522 027848 store 3 ,mem_spi_write_addr -0x6523 027849 copy rega ,pdata -0x6524 027850 store 2 ,mem_spi_write_ptr -0x6525 027851 storet 2 ,mem_spi_write_len -0x6526 027852 jam flash_sm_erase_sector ,mem_spi_write_flash_sm -0x6527 027853 branch spid_init_flash -: 027854 flash_erase_sector: -0x6528 027855 call spid_init_flash -0x6529 027856 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm -0x652a 027857 call spid_unlock_flash -0x652b 027858 arg mem_spid_tbuf ,rega -0x652c 027859 fetch 3 ,mem_spi_write_addr -0x652d 027860 jam 4 ,core_spid_txlen -0x652e 027861 arg flash_command_sector_erase ,temp -0x652f 027862 branch spid_write_flash_common -: 027864 flash_wait_erase_sector: -0x6530 027865 call spid_init_flash -0x6531 027866 call spid_unlock_flash -0x6532 027867 setarg flash_read_satus -0x6533 027868 call spid_read_reg -0x6534 027869 rtnbit1 flash_status_wip -0x6535 027870 jam flash_sm_write_data ,mem_spi_write_flash_sm -0x6536 027871 rtn -: 027872 flash_write_data: -0x6537 027873 call spid_init_flash -0x6538 027874 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm -0x6539 027875 call spid_unlock_flash -0x653a 027876 call flash_data_preserve -0x653b 027877 call spid_write_flash -0x653c 027878 branch flash_data_recover -: 027879 flash_wait_write_data: -0x653d 027880 call spid_init_flash -0x653e 027881 call spid_unlock_flash -0x653f 027882 setarg flash_read_satus -0x6540 027883 call spid_read_reg -0x6541 027884 rtnbit1 flash_status_wip -0x6542 027885 jam flash_sm_no_buys ,mem_spi_write_flash_sm -0x6543 027886 fetch 2 ,mem_cb_spi_flash_write_complate -0x6544 027887 branch callback_func -: 027888 flash_data_recover: -0x6545 027889 fetch 4 ,mem_temp -0x6546 027890 fetcht 2 ,mem_spi_write_ptr -0x6547 027891 increase -4 ,temp -0x6548 027892 istore 4 ,temp -0x6549 027893 rtn -: 027894 flash_data_preserve: -0x654a 027895 fetcht 2 ,mem_spi_write_ptr -0x654b 027896 copy temp ,rega -0x654c 027897 increase -4 ,temp -0x654d 027898 ifetch 4 ,temp -0x654e 027899 store 4 ,mem_temp -0x654f 027900 fetcht 2 ,mem_spi_write_len -0x6550 027901 fetch 3 ,mem_spi_write_addr -0x6551 027902 rtn -: 027906 spid_write_flash: -0x6552 027907 increase 4 ,temp -0x6553 027908 hstoret 2 ,core_spid_txlen -0x6554 027909 arg flash_command_write_data ,temp -0x6555 027910 increase -4 ,rega -: 027911 spid_write_flash_common: -0x6556 027913 istoret 1 ,rega -0x6557 027914 rshift16 pdata ,temp -0x6558 027915 istoret 1 ,contw -0x6559 027916 rshift8 pdata ,temp -0x655a 027917 istoret 1 ,contw -0x655b 027918 istore 1 ,contw -0x655c 027919 deposit rega -0x655d 027920 hstore 2 ,core_spid_txaddr -0x655e 027921 setarg 0 -0x655f 027922 hstore 2 ,core_spid_rxlen -0x6560 027923 jam spid_start ,core_misc_ctrl -0x6561 027924 branch wait_spid_done -: 027928 spid_read_flash: -0x6562 027929 hstoret 2 ,core_spid_rxlen -0x6563 027930 rshift16 pdata ,temp -0x6564 027931 storet 1 ,mem_addr_hi -0x6565 027932 rshift8 pdata ,temp -0x6566 027933 storet 1 ,mem_addr_mi -0x6567 027934 store 1 ,mem_addr_lo -0x6568 027935 setarg 4 -0x6569 027936 hstore 2 ,core_spid_txlen -0x656a 027937 jam flash_command_read_data ,mem_spid_tbuf -0x656b 027938 setarg mem_spid_tbuf -0x656c 027939 hstore 2 ,core_spid_txaddr -0x656d 027940 deposit rega -0x656e 027941 hstore 2 ,core_spid_rxaddr -0x656f 027942 hfetch 1 ,core_spid_ctrl -0x6570 027943 isolate0 15 ,rega -0x6571 027944 setflag true ,6 ,pdata -0x6572 027945 hstore 1 ,core_spid_ctrl -0x6573 027946 jam spid_start ,core_misc_ctrl -: 027947 spi_read_flash_wait: -0x6574 027948 hfetch 1 ,core_dma_status -0x6575 027949 bbit1 7 ,spi_read_flash_wait -0x6576 027950 arg spid_done ,queue -0x6577 027951 branch wait_spid_done -: 027955 spid_load_flash: -0x6578 027956 hstoret 2 ,core_spid_rxlen -0x6579 027957 setarg 4 -0x657a 027958 hstore 2 ,core_spid_txlen -0x657b 027959 jam 3 ,mem_spid_tbuf -0x657c 027960 setarg mem_spid_tbuf -0x657d 027961 hstore 2 ,core_spid_txaddr -0x657e 027962 deposit rega -0x657f 027963 hstore 2 ,core_spid_rxaddr -0x6580 027964 hfetch 1 ,core_spid_ctrl -0x6581 027965 isolate0 15 ,rega -0x6582 027966 setflag true ,6 ,pdata -0x6583 027967 hstore 1 ,core_spid_ctrl -0x6584 027968 jam spid_start ,core_misc_ctrl -: 027969 spi_load_flash_wait: -0x6585 027970 hfetch 1 ,core_dma_status -0x6586 027971 bbit1 7 ,spi_load_flash_wait -0x6587 027972 arg spid_done ,queue -0x6588 027973 call decrypt_code -0x6589 027974 call wait_spid_done -0x658a 027975 isolate1 spid_crcok ,pdata -0x658b 027976 call set_ucode_status -0x658c 027977 fetch 1 ,mem_addr_hi -0x658d 027978 lshift16 pdata ,regb -0x658e 027979 fetch 1 ,mem_addr_mi -0x658f 027980 lshift8 pdata ,pdata -0x6590 027981 ior regb ,regb -0x6591 027982 fetch 1 ,mem_addr_lo -0x6592 027983 ior regb ,pdata -0x6593 027984 iadd temp ,pdata -0x6594 027985 store 1 ,mem_addr_lo -0x6595 027986 rshift8 pdata ,pdata -0x6596 027987 store 1 ,mem_addr_mi -0x6597 027988 rshift8 pdata ,pdata -0x6598 027989 store 1 ,mem_addr_hi -0x6599 027990 rtn -: 027995 soft_reset_chip: -0x659a 027996 jam 1 ,core_reset -0x659b 027997 rtn -: 028003 iic_init_390k: -0x659c 028004 jam 12 ,core_iicd_scl_low -0x659d 028005 jam 13 ,core_iicd_scl_high -0x659e 028006 jam 13 ,core_iicd_start_setup -0x659f 028007 jam 13 ,core_iicd_start_hold -0x65a0 028008 jam 13 ,core_iicd_stop_setup -0x65a1 028009 jam 12 ,core_iicd_data_setup -0x65a2 028010 branch iicd_init_gpio -: 028013 iicd_init_12m: -0x65a3 028014 jam 5 ,core_iicd_scl_low -0x65a4 028015 jam 7 ,core_iicd_scl_high -0x65a5 028016 jam 7 ,core_iicd_start_setup -0x65a6 028017 jam 7 ,core_iicd_start_hold -0x65a7 028018 jam 7 ,core_iicd_stop_setup -0x65a8 028019 jam 5 ,core_iicd_data_setup -: 028020 iicd_init_gpio: -0x65a9 028021 hfetch 1 ,core_gpio_pu3 -0x65aa 028022 or_into 0xc0 ,pdata -0x65ab 028023 hstore 1 ,core_gpio_pu3 -0x65ac 028024 hfetch 1 ,core_gpio_sel1 -0x65ad 028025 or_into 0x10 ,pdata -0x65ae 028026 hstore 1 ,core_gpio_sel1 -0x65af 028027 rtn -: 028031 wait_iicd_done: -0x65b0 028032 hfetch 1 ,core_dma_status -0x65b1 028033 bbit0 iicd_done ,wait_iicd_done -0x65b2 028034 rtn -: 028042 iicd_read_data: -0x65b3 028043 hstore 2 ,core_iicd_txlen -0x65b4 028044 deposit rega -0x65b5 028045 hstore 2 ,core_iicd_txaddr -0x65b6 028046 deposit regb -0x65b7 028047 hstore 2 ,core_iicd_rxaddr -0x65b8 028048 deposit temp -0x65b9 028049 hstore 2 ,core_iicd_rxlen -0x65ba 028050 arg 1 ,temp -0x65bb 028051 nsetflag blank ,1 ,temp -0x65bc 028052 hstore 1 ,core_iicd_ctrl -0x65bd 028053 jam iicd_start ,core_misc_ctrl -0x65be 028054 branch wait_iicd_done -: 028057 set_eeprom_size_2k: -0x65bf 028058 set1 mark_eeprom_size ,mark -0x65c0 028059 jam 0x08 ,mem_eeprom_block_size -0x65c1 028060 rtn -: 028062 clear_eeprom_size_2k: -0x65c2 028063 set0 mark_eeprom_size ,mark -0x65c3 028064 jam 0x20 ,mem_eeprom_block_size -0x65c4 028065 rtn -: 028068 iicd_read_eep_data_size_2k: -0x65c5 028069 fetch 1 ,mem_eeprom_base -0x65c6 028070 iadd regb ,pdata -0x65c7 028071 store 1 ,mem_addr_mi -0x65c8 028072 branch iicd_read_eep_size_2k -: 028074 iicd_read_eep_size_2k_lcadcode: -0x65c9 028075 fetch 2 ,mem_addr_mi -0x65ca 028076 byteswap pdata ,pdata -0x65cb 028077 store 1 ,mem_addr_mi -: 028082 iicd_read_eep_size_2k: -0x65cc 028083 setarg 3 -0x65cd 028084 hstore 2 ,core_iicd_txlen -0x65ce 028085 jam 0xa0 ,mem_iicd_tbuf -0x65cf 028086 jam 0xa1 ,mem_iicd_tbuf + 2 -0x65d0 028087 branch iicd_read_eep_common -: 028093 iicd_write_protect_eep_data: -0x65d1 028094 storet 2 ,mem_temp -0x65d2 028095 call iicd_eeprom_write_enable -0x65d3 028096 fetcht 2 ,mem_temp -0x65d4 028097 call iicd_write_eep_data -0x65d5 028098 branch iicd_eeprom_write_disable -: 028100 iicd_eeprom_write_enable: -0x65d6 028101 fetch 1 ,mem_eeprom_wp_gpio -0x65d7 028102 rtneq gpio_disable -0x65d8 028103 bbit0 6 ,iicd_wp_gpio_output_low -0x65d9 028104 setarg 150000 -0x65da 028105 call sleep -: 028106 iicd_wp_gpio_output_low: -0x65db 028107 fetcht 1 ,mem_eeprom_wp_gpio -0x65dc 028108 branch gpio_out_active -: 028110 iicd_eeprom_write_disable: -0x65dd 028111 fetcht 1 ,mem_eeprom_wp_gpio -0x65de 028112 branch gpio_out_inactive -: 028117 iicd_read_eep_data: -0x65df 028118 bpatchx patch32_0 ,mem_patch32 -0x65e0 028119 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k -0x65e1 028120 fetch 2 ,mem_eeprom_base -0x65e2 028121 iadd regb ,pdata -0x65e3 028122 byteswap pdata ,pdata -0x65e4 028123 store 2 ,mem_addr_mi -: 028126 iicd_read_eep: -0x65e5 028127 bpatchx patch32_1 ,mem_patch32 -0x65e6 028128 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode -0x65e7 028129 setarg 4 -0x65e8 028130 hstore 2 ,core_iicd_txlen -0x65e9 028131 jam 0xa0 ,mem_iicd_tbuf -0x65ea 028132 jam 0xa1 ,mem_iicd_tbuf + 3 -: 028133 iicd_read_eep_common: -0x65eb 028134 setarg mem_iicd_tbuf -0x65ec 028135 hstore 2 ,core_iicd_txaddr -0x65ed 028136 hstoret 2 ,core_iicd_rxlen -0x65ee 028137 deposit rega -0x65ef 028138 hstore 2 ,core_iicd_rxaddr -0x65f0 028139 setarg 2 -0x65f1 028140 isolate0 15 ,rega -0x65f2 028141 setflag true ,0 ,pdata -0x65f3 028142 hstore 1 ,core_iicd_ctrl -0x65f4 028143 jam iicd_start ,core_misc_ctrl -0x65f5 028144 arg iicd_done ,queue -0x65f6 028145 call decrypt_code -0x65f7 028146 call wait_iicd_done -0x65f8 028147 isolate1 iicd_crcok ,pdata -0x65f9 028148 call set_ucode_status -0x65fa 028149 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k -0x65fb 028150 fetch 2 ,mem_addr_mi -0x65fc 028151 byteswap pdata ,pdata -0x65fd 028152 iadd temp ,pdata -0x65fe 028153 byteswap pdata ,pdata -0x65ff 028154 store 2 ,mem_addr_mi -0x6600 028155 rtn -: 028157 iicd_read_eep_load_code_size_2k: -0x6601 028158 fetch 1 ,mem_addr_mi -0x6602 028159 iadd temp ,pdata -0x6603 028160 byteswap pdata ,pdata -0x6604 028161 store 2 ,mem_addr_mi -0x6605 028162 rtn -: 028168 iicd_write_eep_data: -0x6606 028169 fetch 2 ,mem_eeprom_base -0x6607 028170 iadd regb ,pdata -: 028173 iicd_write_ota_data: -0x6608 028174 store 2 ,mem_pdatatemp -0x6609 028175 bpatchx patch32_2 ,mem_patch32 -0x660a 028176 storet 2 ,mem_temp -0x660b 028177 copy rega ,pdata -0x660c 028178 store 2 ,mem_contr -: 028179 iicd_write_eep_loop: -0x660d 028180 call iicd_eep_transparency -0x660e 028182 fetcht 2 ,mem_regb -0x660f 028183 fetch 2 ,mem_contr -0x6610 028184 copy pdata ,rega -0x6611 028185 fetch 2 ,mem_pdatatemp -0x6612 028187 call iicd_write_eep -0x6613 028189 fetch 2 ,mem_regb -0x6614 028190 fetcht 2 ,mem_contr -0x6615 028191 iadd temp ,temp -0x6616 028192 storet 2 ,mem_contr -0x6617 028193 fetcht 2 ,mem_pdatatemp -0x6618 028194 iadd temp ,temp -0x6619 028195 storet 2 ,mem_pdatatemp -0x661a 028196 fetch 2 ,mem_temp -0x661b 028197 nbranch iicd_write_eep_loop ,blank -0x661c 028198 rtn -: 028206 iicd_eep_transparency: -0x661d 028207 bpatchx patch32_3 ,mem_patch32 -0x661e 028208 fetch 1 ,mem_eeprom_block_size -0x661f 028209 increase -1 ,pdata -0x6620 028210 fetcht 2 ,mem_pdatatemp -0x6621 028211 ior temp ,pdata -0x6622 028212 increase 1 ,pdata -0x6623 028213 store 3 ,mem_regc -0x6624 028215 fetch 2 ,mem_temp -0x6625 028216 iadd temp ,pdata -0x6626 028218 fetcht 3 ,mem_regc -0x6627 028219 isub temp ,pdata -0x6628 028220 nbranch iicd_eep_deal_short_packet ,positive -0x6629 028221 store 2 ,mem_temp -0x662a 028222 fetch 3 ,mem_regc -0x662b 028223 fetcht 2 ,mem_pdatatemp -0x662c 028224 isub temp ,pdata -0x662d 028225 store 2 ,mem_regb -0x662e 028226 rtn -: 028227 iicd_eep_deal_short_packet: -0x662f 028228 fetch 2 ,mem_temp -0x6630 028229 store 2 ,mem_regb -0x6631 028230 setarg 0 -0x6632 028231 store 2 ,mem_temp -0x6633 028232 rtn -: 028234 iicd_write_eep_size_2k: -0x6634 028235 increase 2 ,temp -0x6635 028236 hstoret 2 ,core_iicd_txlen -0x6636 028237 increase -2 ,rega -0x6637 028238 ifetcht 3 ,rega -0x6638 028239 copy temp ,regb -0x6639 028240 arg 0xa0 ,temp -0x663a 028241 istoret 1 ,rega -0x663b 028243 istore 1 ,contw -0x663c 028244 branch iicd_write_eep_common -: 028247 iicd_write_eep: -0x663d 028248 copy pdata ,regb -0x663e 028249 bpatchx patch32_4 ,mem_patch32 -0x663f 028250 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k -0x6640 028251 copy regb ,pdata -0x6641 028252 increase 3 ,temp -0x6642 028253 hstoret 2 ,core_iicd_txlen -0x6643 028254 increase -3 ,rega -0x6644 028255 ifetcht 3 ,rega -0x6645 028256 copy temp ,regb -0x6646 028257 arg 0xa0 ,temp -0x6647 028258 istoret 1 ,rega -0x6648 028259 byteswap pdata ,pdata -0x6649 028260 istore 2 ,contw -: 028261 iicd_write_eep_common: -0x664a 028262 deposit rega -0x664b 028263 hstore 2 ,core_iicd_txaddr -0x664c 028264 setarg 0 -0x664d 028265 hstore 2 ,core_iicd_rxlen -0x664e 028266 jam 1 ,core_iicd_ctrl -0x664f 028267 jam iicd_start ,core_misc_ctrl -0x6650 028268 call wait_iicd_done -0x6651 028269 copy regb ,pdata -0x6652 028270 istore 3 ,rega -: 028272 iic_check_eeprom_standby: -0x6653 028273 bpatchx patch32_5 ,mem_patch32 -0x6654 028274 jam 0 ,mem_iicd_tbuf + 3 -: 028275 iic_check_eeprom_standby_wait: -0x6655 028276 setarg 1 -0x6656 028277 hstore 2 ,core_iicd_txlen -0x6657 028278 jam 0xa0 ,mem_iicd_tbuf -0x6658 028279 setarg mem_iicd_tbuf -0x6659 028280 hstore 2 ,core_iicd_txaddr -0x665a 028281 setarg 0 -0x665b 028282 hstore 2 ,core_iicd_rxlen -0x665c 028283 hstore 2 ,core_iicd_rxaddr -0x665d 028284 setarg 3 -0x665e 028285 hstore 1 ,core_iicd_ctrl -0x665f 028286 jam iicd_start ,core_misc_ctrl -0x6660 028287 call wait_iicd_done -0x6661 028288 hfetch 1 ,core_dma_status -0x6662 028289 rtnbit0 iicd_ack -0x6663 028290 nop 1500 -0x6664 028291 fetch 1 ,mem_iicd_tbuf + 3 -0x6665 028292 increase 1 ,pdata -0x6666 028293 store 1 ,mem_iicd_tbuf + 3 -0x6667 028294 sub pdata ,40 ,null -0x6668 028295 nrtn positive -0x6669 028296 branch iic_check_eeprom_standby_wait -: 028300 otp_enable_chgpump: -0x666a 028301 jam 0x70 ,rfen_chgpump -0x666b 028302 nop param_chgpump_delay -0x666c 028303 rtn -: 028305 otp_disable_chgpump: -0x666d 028306 jam 0x30 ,rfen_chgpump -0x666e 028307 rtn -: 028309 otp_set_addr: -0x666f 028310 lshift3 pdata ,pdata -0x6670 028311 hstore 2 ,core_otp_addr -0x6671 028312 jam 0 ,core_otpd_ctrl -0x6672 028313 rtn -: 028316 otp_write: -0x6673 028317 call otp_set_addr -0x6674 028318 call otp_ce -: 028319 otp_program: -0x6675 028320 ifetcht 1 ,rega -0x6676 028321 increase 1 ,rega -0x6677 028322 force 0 ,queue -: 028323 otp_program_bit: -0x6678 028324 qisolate0 temp -0x6679 028325 branch otp_skip_0 ,true -0x667a 028326 hfetch 1 ,core_otp_din -0x667b 028327 set1 6 ,pdata -0x667c 028328 set1 7 ,pdata -0x667d 028329 hstore 1 ,core_otp_din -0x667e 028330 jam 0x02 ,core_otp_ctrl -0x667f 028331 jam 0x82 ,core_otp_ctrl -0x6680 028332 set0 7 ,pdata -0x6681 028333 hstore 1 ,core_otp_din -0x6682 028334 jam 0x8a ,core_otp_ctrl -0x6683 028335 nop 11 -0x6684 028336 jam 0xca ,core_otp_ctrl -0x6685 028337 nop 33 -0x6686 028338 jam 0x4a ,core_otp_ctrl -0x6687 028339 nop 44 -0x6688 028340 jam 0xca ,core_otp_ctrl -0x6689 028341 nop 22 -0x668a 028342 jam 0x8a ,core_otp_ctrl -0x668b 028343 nop 33 -0x668c 028344 jam 0x82 ,core_otp_ctrl -0x668d 028345 nop 1 -0x668e 028346 jam 0x92 ,core_otp_ctrl -0x668f 028347 nop 10 -0x6690 028348 jam 0xb2 ,core_otp_ctrl -0x6691 028349 hfetch 1 ,core_otp_rdata -0x6692 028350 jam 0x92 ,core_otp_ctrl -0x6693 028351 nop 1 -0x6694 028352 jam 0x82 ,core_otp_ctrl -0x6695 028353 qisolate0 pdata -0x6696 028354 branch otp_program_bit ,true -: 028355 otp_skip_0: -0x6697 028356 hfetch 2 ,core_otp_addr -0x6698 028357 increase 1 ,pdata -0x6699 028358 hstore 2 ,core_otp_addr -0x669a 028359 increase 1 ,queue -0x669b 028360 compare 8 ,queue ,0xf -0x669c 028361 nbranch otp_program_bit ,true -0x669d 028362 loop otp_program -0x669e 028363 jam 0x83 ,core_otp_ctrl -0x669f 028364 rtn -: 028366 otp_ce: -0x66a0 028367 jam 0x82 ,core_otp_ctrl -0x66a1 028368 nop 12 -0x66a2 028369 jam 0x80 ,core_otp_ctrl -0x66a3 028370 jam 0x82 ,core_otp_ctrl -0x66a4 028371 nop 150 -0x66a5 028372 rtn -: 028375 otpd_read_init: -0x66a6 028376 call otp_ce -0x66a7 028377 jam 0xa2 ,core_otp_ctrl -0x66a8 028378 deposit rega -0x66a9 028379 hstore 2 ,core_otpd_addr -0x66aa 028380 set1 11 ,temp -0x66ab 028381 isolate0 15 ,pdata -0x66ac 028382 setflag true ,15 ,temp -0x66ad 028383 hstoret 2 ,core_otpd_len -0x66ae 028384 jam otpd_start ,core_misc_ctrl -0x66af 028385 rtn -: 028387 otpd_wait_end: -0x66b0 028388 hfetch 1 ,core_dma_status -0x66b1 028389 bbit0 otpd_done ,otpd_wait_end -0x66b2 028390 rtn -: 028393 otpd_read_data: -0x66b3 028394 call otp_set_addr -0x66b4 028395 call otpd_read_init -0x66b5 028396 call otpd_wait_end -0x66b6 028397 jam 0x83 ,core_otp_ctrl -0x66b7 028398 rtn -: 028403 otpd_read_code: -0x66b8 028404 hfetch 2 ,core_current_otp_addr -0x66b9 028405 hstore 2 ,core_otp_addr -0x66ba 028406 call otpd_read_init -0x66bb 028407 arg otpd_done ,queue -0x66bc 028408 call decrypt_code -0x66bd 028409 call otpd_wait_end -0x66be 028410 isolate1 otpd_crcok ,pdata -0x66bf 028411 call set_ucode_status -0x66c0 028412 jam 0x83 ,core_otp_ctrl -0x66c1 028413 rtn -: 028416 uartd_prepare_tx: -0x66c2 028417 hfetch 2 ,core_uart_twptr -0x66c3 028418 iforce contwu -0x66c4 028419 rtn -: 028421 uartd_send: -0x66c5 028422 deposit contwu -0x66c6 028423 hstore 2 ,core_uart_twptr -0x66c7 028424 rtn -: 028426 uartd_rxdone: -0x66c8 028427 deposit contru -0x66c9 028428 hstore 2 ,core_uart_rrptr -0x66ca 028429 rtn -: 028431 uartd_prepare_rx: -0x66cb 028432 hfetch 2 ,core_uart_rrptr -0x66cc 028433 copy pdata ,contru -0x66cd 028434 rtn -: 028436 uart_set_baud_by_mem: -0x66ce 028437 fetch uart_baud_len ,mem_baud -0x66cf 028438 hstore uart_baud_len ,core_uart_baud -0x66d0 028439 rtn -: 028441 uart_copy_tx_bytes_fast: -0x66d1 028442 deposit loopcnt -0x66d2 028443 rtn blank -: 028444 uart_copy_tx_bytes_fast_loop: -0x66d3 028445 increase -8 ,loopcnt -0x66d4 028446 call uart_tx_8_bytes ,positive -0x66d5 028447 rtn zero -0x66d6 028448 branch uart_copy_tx_bytes_fast_loop ,positive -0x66d7 028449 increase 8 ,loopcnt -: 028450 uart_copy_tx_bytes_fast_loop_four: -0x66d8 028451 increase -4 ,loopcnt -0x66d9 028452 call uart_tx_4_bytes ,positive -0x66da 028453 rtn zero -0x66db 028454 branch uart_copy_tx_bytes_fast_loop_four ,positive -0x66dc 028455 increase 4 ,loopcnt -0x66dd 028456 branch uart_copy_tx_bytes -: 028458 uart_tx_8_bytes: -0x66de 028459 ifetch 8 ,contr -0x66df 028460 istore 8 ,contwu -0x66e0 028461 rtn -: 028463 uart_tx_4_bytes: -0x66e1 028464 ifetch 4 ,contr -0x66e2 028465 istore 4 ,contwu -0x66e3 028466 rtn -: 028468 uart_copy_tx_bytes: -0x66e4 028469 deposit loopcnt -0x66e5 028470 rtn blank -: 028471 uart_copy_tx_bytes_loop: -0x66e6 028472 ifetch 1 ,contr -0x66e7 028473 istore 1 ,contwu -0x66e8 028474 loop uart_copy_tx_bytes_loop -0x66e9 028475 rtn -: 028477 uart_copy_rx_bytes_fast: -0x66ea 028478 deposit loopcnt -0x66eb 028479 rtn blank -: 028480 uart_copy_rx_bytes_fast_loop: -0x66ec 028481 increase -8 ,loopcnt -0x66ed 028482 call uart_rx_8_bytes ,positive -0x66ee 028483 rtn zero -0x66ef 028484 branch uart_copy_rx_bytes_fast_loop ,positive -0x66f0 028485 increase 8 ,loopcnt -: 028486 uart_copy_rx_bytes_fast_loop_four: -0x66f1 028487 increase -4 ,loopcnt -0x66f2 028488 call uart_rx_4_bytes ,positive -0x66f3 028489 rtn zero -0x66f4 028490 branch uart_copy_rx_bytes_fast_loop_four ,positive -0x66f5 028491 increase 4 ,loopcnt -0x66f6 028492 branch uart_copy_rx_bytes -: 028494 uart_rx_8_bytes: -0x66f7 028495 ifetch 8 ,contru -0x66f8 028496 istore 8 ,contw -0x66f9 028497 rtn -: 028499 uart_rx_4_bytes: -0x66fa 028500 ifetch 4 ,contru -0x66fb 028501 istore 4 ,contw -0x66fc 028502 rtn -: 028505 uart_copy_rx_bytes: -0x66fd 028506 deposit loopcnt -0x66fe 028507 rtn blank -: 028508 uart_copy_rx_bytes_loop: -0x66ff 028509 ifetch 1 ,contru -0x6700 028510 istore 1 ,contw -0x6701 028511 loop uart_copy_rx_bytes_loop -0x6702 028512 rtn -: 028515 uart_copy_rx2tx: -0x6703 028516 deposit loopcnt -0x6704 028517 rtn blank -: 028518 uart_copy_rx2tx_loop: -0x6705 028519 ifetch 1 ,contru -0x6706 028520 istore 1 ,contwu -0x6707 028521 loop uart_copy_rx2tx_loop -0x6708 028522 rtn -: 028527 app_store_nvram_event: -0x6709 028528 jam bt_evt_store_nvram ,mem_fifo_temp -0x670a 028529 branch ui_ipc_send_event -: 028531 check_51cmd_store_reconn_info: -: 028532 check_51cmd_update_device_record: -0x670b 028533 bpatchx patch32_6 ,mem_patch32 -0x670c 028534 fetch 1 ,mem_nv_data_number -0x670d 028535 rtn blank -0x670e 028536 call check_nvram -0x670f 028537 call init_device_list ,zero -0x6710 028538 call nvram_find_addr_from_bd_list -: 028539 write_device_record: -0x6711 028540 fetch 1 ,mem_nv_data_number -0x6712 028541 icopy regc -0x6713 028542 fetcht 2 ,mem_nv_data_ptr -0x6714 028543 storet 2 ,mem_list_item_ptr -: 028544 write_device_loop_find: -0x6715 028545 copy regc ,pdata -0x6716 028546 branch app_store_nvram_event ,blank -0x6717 028547 increase -1 ,regc -0x6718 028548 copy temp ,rega -0x6719 028549 ifetch 1 ,rega -0x671a 028550 fetcht 1 ,mem_select_list_item -0x671b 028551 isub temp ,null -0x671c 028552 call set_index_finded_device ,zero -0x671d 028553 branch write_device_loop_find0 ,positive -0x671e 028554 ifetch 1 ,rega -0x671f 028555 increase 1 ,pdata -0x6720 028556 istore 1 ,rega -: 028557 write_device_loop_find0: -0x6721 028558 fetcht 2 ,mem_list_item_ptr -0x6722 028559 increase nv_data_len ,temp -0x6723 028560 storet 2 ,mem_list_item_ptr -0x6724 028561 branch write_device_loop_find -: 028563 set_index_finded_device: -0x6725 028564 setarg 0 -0x6726 028565 istore 1 ,rega -0x6727 028566 fetch 1 ,mem_temp_reconn_record -0x6728 028567 istore 1 ,contw -0x6729 028568 bne rec_3_mode ,set_index_finded_device_ble_mode -0x672a 028569 arg mem_link_key ,regb -: 028570 set_index_find_device_master_addr: -0x672b 028571 ifetch 6 ,contr -0x672c 028572 istore 8 ,contw -0x672d 028573 setarg 0 -0x672e 028574 istore 8 ,contw -0x672f 028575 copy regb ,contr -: 028576 store_rec_data_common: -0x6730 028577 call memcpy16 -0x6731 028578 force 1 ,null -0x6732 028579 rtn -: 028581 set_index_finded_device_ble_mode: -0x6733 028582 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk -0x6734 028583 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv -0x6735 028584 arg mem_le_ltk ,regb -0x6736 028585 branch set_index_find_device_master_addr -: 028587 set_index_finded_device_irk: -0x6737 028588 arg mem_le_irk ,contr -0x6738 028589 call memcpy16 -: 028590 store_ble_rec_data_common: -0x6739 028591 arg mem_le_ltk ,contr -0x673a 028592 branch store_rec_data_common -: 028594 set_index_finded_device_ediv: -0x673b 028595 arg mem_le_rand ,contr -0x673c 028596 call memcpy16 -0x673d 028597 branch store_ble_rec_data_common -: 028600 nvram_find_addr_from_bd_list: -0x673e 028601 call disable_user -0x673f 028602 fetch 1 ,mem_nv_data_number -0x6740 028603 rtn blank -0x6741 028604 fetch 2 ,mem_ui_state_map -0x6742 028605 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode -: 028606 find_addr_from_bd_list_ble_mode: -0x6743 028607 bpatchx patch32_7 ,mem_patch32 -0x6744 028608 fetch 1 ,mem_le_conn_peer_addr_type -0x6745 028609 beq master_public_addr ,find_addr_from_bd_list_static_addr -0x6746 028610 fetch 1 ,mem_le_plap + 5 -0x6747 028611 compare 0xc0 ,pdata ,0xc0 -0x6748 028612 branch find_addr_from_bd_list_static_addr ,true -0x6749 028613 compare 0x40 ,pdata ,0xc0 -0x674a 028614 branch find_addr_from_bd_list_random_addr ,true -0x674b 028615 compare 0x00 ,pdata ,0xc0 -0x674c 028616 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true -: 028617 find_addr_from_bd_list_static_addr: -0x674d 028618 jam rec_4_mode_static_address ,mem_temp_reconn_record -0x674e 028619 fetch 6 ,mem_le_plap -0x674f 028620 branch find_addr_from_bd_list_common -: 028622 find_addr_from_bd_list_random_non_resolvable_private_address: -0x6750 028623 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record -0x6751 028624 branch find_addr_from_bd_list_common -: 028627 find_addr_from_bd_list_random_addr: -0x6752 028628 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record -0x6753 028629 branch find_addr_from_bd_list_common -: 028632 find_addr_from_bd_list_spp_mode: -0x6754 028633 bpatchx patch33_0 ,mem_patch33 -0x6755 028634 jam rec_3_mode ,mem_temp_reconn_record -0x6756 028635 fetch 6 ,mem_plap -: 028636 find_addr_from_bd_list_common: -0x6757 028637 store 6 ,mem_temp_reconn_record + 1 -0x6758 028638 fetch 2 ,mem_nv_data_ptr -0x6759 028639 ifetcht 1 ,pdata -0x675a 028640 pincrease 1 -0x675b 028641 store 2 ,mem_list_item_ptr -0x675c 028642 storet 1 ,mem_select_list_item -0x675d 028643 fetch 1 ,mem_nv_data_number -0x675e 028644 icopy regc -: 028645 nvram_find_addr_from_list: -0x675f 028646 fetch 2 ,mem_list_item_ptr -0x6760 028647 copy pdata ,rega -0x6761 028648 call nvram_find_addr_from_list_compare -0x6762 028649 rtn user -0x6763 028650 fetcht 2 ,mem_list_item_ptr -0x6764 028651 increase nv_data_len ,temp -0x6765 028652 storet 2 ,mem_list_item_ptr -0x6766 028653 increase -1 ,temp -0x6767 028654 ifetch 1 ,temp -0x6768 028655 store 1 ,mem_select_list_item -0x6769 028656 increase -1 ,regc -0x676a 028657 nbranch nvram_find_addr_from_list ,zero -0x676b 028658 fetch 1 ,mem_nv_data_number -0x676c 028659 pincrease decreased_one -0x676d 028660 store 1 ,mem_select_list_item -0x676e 028661 rtn -: 028662 nvram_find_addr_from_list_compare: -0x676f 028663 fetch 1 ,mem_temp_reconn_record -0x6770 028664 bne rec_3_mode ,find_addr_from_list_compare_ble_mode -: 028665 find_master_addr_from_list_compare: -0x6771 028666 arg mem_temp_reconn_record ,regb -0x6772 028667 arg 7 ,loopcnt -0x6773 028668 call string_compare -0x6774 028669 branch enable_user ,zero -0x6775 028670 rtn -: 028672 find_addr_from_list_compare_ble_mode: -0x6776 028673 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare -0x6777 028674 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare -0x6778 028675 branch find_master_addr_from_list_compare -: 028677 find_irk_form_list_compare: -0x6779 028678 ifetcht 1 ,rega -0x677a 028679 isub temp ,null -0x677b 028680 nrtn zero -0x677c 028681 arg mem_le_prand ,contw -0x677d 028682 arg 16 ,loopcnt -0x677e 028683 call clear_mem -0x677f 028684 fetch 3 ,mem_le_plap + 3 -0x6780 028685 store 3 ,mem_le_prand -0x6781 028686 call genernate_master_macaddress -0x6782 028687 fetch 2 ,mem_le_aes_128 + 13 -0x6783 028688 byteswap pdata ,pdata -0x6784 028689 lshift8 pdata ,temp -0x6785 028690 ifetch 1 ,contr -0x6786 028691 iadd temp ,pdata -0x6787 028692 fetcht 3 ,mem_le_plap -0x6788 028693 isub temp ,null -0x6789 028694 branch enable_user ,zero -0x678a 028695 rtn -: 028698 genernate_master_macaddress: -0x678b 028699 arg mem_le_prand ,contr -0x678c 028700 call load_data128 -0x678d 028702 ifetch 1 ,rega -0x678e 028703 call load_regext -0x678f 028704 force 0x38 ,aes_ctrl -0x6790 028705 force 0x0 ,aes_ctrl -0x6791 028706 call wait_aes -0x6792 028707 arg mem_le_aes_128 ,contw -0x6793 028708 branch store_aes_result -: 028710 find_ediv_form_list_compare: -0x6794 028711 ifetcht 1 ,rega -0x6795 028712 isub temp ,null -0x6796 028713 nrtn zero -0x6797 028714 copy contr ,rega -0x6798 028715 add contr ,8 ,regc -0x6799 028716 arg mem_le_rand ,regb -0x679a 028717 arg 8 ,loopcnt -0x679b 028718 call string_compare -0x679c 028719 branch enable_user ,zero -0x679d 028720 copy regc ,rega -0x679e 028721 arg mem_le_irk ,regb -0x679f 028722 arg 8 ,loopcnt -0x67a0 028723 call string_compare -0x67a1 028724 branch enable_user ,zero -0x67a2 028725 rtn -: 028727 check_nvram: -0x67a3 028728 fetch 2 ,mem_nv_data_ptr -0x67a4 028729 ifetcht 1 ,pdata -0x67a5 028730 pincrease nv_data_len -0x67a6 028731 ifetch 1 ,pdata -0x67a7 028732 isub temp ,null -0x67a8 028733 rtn -: 028735 init_device_list: -0x67a9 028736 fetch 1 ,mem_nv_data_number -0x67aa 028737 icopy loopcnt -0x67ab 028738 fetcht 2 ,mem_nv_data_ptr -0x67ac 028739 setarg 0 -: 028740 init_device_list_loop: -0x67ad 028741 istore 1 ,temp -0x67ae 028742 increase nv_data_len ,temp -0x67af 028743 pincrease 1 -0x67b0 028744 loop init_device_list_loop -0x67b1 028745 rtn -: 028747 load_device_list: -0x67b2 028748 bpatchx patch33_1 ,mem_patch33 -0x67b3 028749 call nvram_find_addr_from_bd_list -0x67b4 028750 fetch 1 ,mem_state -0x67b5 028751 setflag user ,state_combkey ,pdata -0x67b6 028752 store 1 ,mem_state -0x67b7 028753 nbranch clear_key_exists ,user -0x67b8 028754 add rega ,10 ,contr -0x67b9 028756 arg mem_link_key ,contw -0x67ba 028757 call memcpy16 -0x67bb 028758 branch check_link_key_load -: 028759 clear_key_exists: -0x67bc 028760 jam 0 ,mem_link_key_exists -0x67bd 028761 rtn -: 028763 load_device_list_mode_4: -0x67be 028764 fetch 9 ,mem_le_ediv -0x67bf 028765 branch clear_ltk_exists ,blank -0x67c0 028766 call nvram_find_addr_from_bd_list -0x67c1 028767 nbranch clear_ltk_exists ,user -0x67c2 028768 fetch 2 ,mem_list_item_ptr -0x67c3 028769 add pdata ,1 ,contr -0x67c4 028770 arg mem_le_irk ,contw -0x67c5 028771 call memcpy16 -0x67c6 028772 arg mem_le_ltk ,contw -0x67c7 028773 call memcpy16 -0x67c8 028774 jam 1 ,mem_ltk_exists -0x67c9 028775 rtn -: 028777 clear_ltk_exists: -0x67ca 028778 jam 0 ,mem_ltk_exists -0x67cb 028779 rtn -: 028782 eeprom_store_le_reconn_info: -0x67cc 028783 fetch 6 ,mem_le_plap -0x67cd 028784 store 6 ,mem_temp_lap -0x67ce 028785 jam rec_4_mode ,mem_record_bt_mode -0x67cf 028786 branch eeprom_store_reconn_info -: 028787 eeprom_store_bd_reconn_info: -0x67d0 028788 fetch 6 ,mem_plap -0x67d1 028789 store 6 ,mem_temp_lap -0x67d2 028790 jam rec_3_mode ,mem_record_bt_mode -: 028791 eeprom_store_reconn_info: -0x67d3 028792 fetch 1 ,mem_device_option -0x67d4 028793 beq dvc_op_module ,check_51cmd_update_device_record -0x67d5 028794 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr -0x67d6 028795 rtn -: 028798 check_link_key_load: -0x67d7 028799 fetch 8 ,mem_link_key -0x67d8 028800 fetcht 8 ,mem_link_key + 8 -0x67d9 028801 ior temp ,pdata -0x67da 028802 rtn blank -0x67db 028803 jam 1 ,mem_link_key_exists -0x67dc 028804 rtn -: 028811 gpio_set_wake_by_current_state: -0x67dd 028812 bpatchx patch33_2 ,mem_patch33 -0x67de 028813 set1 7 ,temp -0x67df 028814 call gpio_get_bit -0x67e0 028815 nsetflag true ,7 ,temp -: 028820 gpio_set_wake: -0x67e1 028821 bpatchx patch33_3 ,mem_patch33 -0x67e2 028822 sub temp ,ui_button_gpio_disable ,null -0x67e3 028823 rtn zero -0x67e4 028824 isolate0 7 ,temp -0x67e5 028825 and temp ,0x1f ,queue -0x67e6 028826 fetch 4 ,mem_gpio_wakeup_low -0x67e7 028827 qsetflag true ,pdata -0x67e8 028828 store 4 ,mem_gpio_wakeup_low -0x67e9 028829 fetch 4 ,mem_gpio_wakeup_high -0x67ea 028830 nqsetflag true ,pdata -0x67eb 028831 store 4 ,mem_gpio_wakeup_high -0x67ec 028832 rtn -: 028835 gpio_clr_wake: -0x67ed 028836 bpatchx patch33_4 ,mem_patch33 -0x67ee 028837 sub temp ,ui_button_gpio_disable ,null -0x67ef 028838 rtn zero -0x67f0 028839 isolate0 7 ,temp -0x67f1 028840 and temp ,0x1f ,queue -0x67f2 028841 fetch 4 ,mem_gpio_wakeup_low -0x67f3 028842 qset0 pdata -0x67f4 028843 store 4 ,mem_gpio_wakeup_low -0x67f5 028844 fetch 4 ,mem_gpio_wakeup_high -0x67f6 028845 qset0 pdata -0x67f7 028846 store 4 ,mem_gpio_wakeup_high -0x67f8 028847 rtn -: 028850 gpio_config_input_nowake: -0x67f9 028851 call gpio_clr_wake -0x67fa 028852 branch gpio_config_input_without_wake -: 028855 gpio_config_input: -0x67fb 028856 sub temp ,ui_button_gpio_disable ,null -0x67fc 028857 rtn zero -0x67fd 028858 ncall gpio_set_wake ,wake -: 028860 gpio_config_input_without_wake: -0x67fe 028861 arg core_gpio_pd0 ,contw -0x67ff 028862 call gpio_set_bit -0x6800 028863 setflip gpio_active_bit ,temp -0x6801 028864 arg core_gpio_pu0 ,contw -0x6802 028865 call gpio_set_bit -0x6803 028866 set0 gpio_active_bit ,temp -0x6804 028867 arg core_gpio_oe0 ,contw -0x6805 028868 branch gpio_set_bit -: 028871 gpio_set_high_impedance: -0x6806 028872 arg core_gpio_pd0 ,contw -0x6807 028873 call gpio_set_bit -0x6808 028874 set0 gpio_active_bit ,temp -0x6809 028875 arg core_gpio_pu0 ,contw -0x680a 028876 call gpio_set_bit -0x680b 028877 set0 gpio_active_bit ,temp -0x680c 028878 arg core_gpio_oe0 ,contw -0x680d 028879 branch gpio_set_bit -: 028883 gpio_config_output: -0x680e 028884 sub temp ,ui_button_gpio_disable ,null -0x680f 028885 rtn zero -0x6810 028886 setflip gpio_active_bit ,temp -0x6811 028887 call gpio_out -: 028888 gpio_config_output0: -0x6812 028889 set1 gpio_active_bit ,temp -0x6813 028890 arg core_gpio_oe0 ,contw -0x6814 028891 branch gpio_set_bit -: 028893 gpio_common: -0x6815 028894 and temp ,0x07 ,queue -0x6816 028895 rshift3 temp ,pdata -0x6817 028896 and_into 3 ,pdata -0x6818 028897 iadd contw ,contw -0x6819 028898 ifetch 1 ,contw -0x681a 028899 rtn -: 028901 gpio_check_active: -0x681b 028902 arg core_gpio_out0 ,contw -0x681c 028903 branch get_bit_common -: 028907 gpio_get_bit: -0x681d 028908 arg core_gpio_in ,contw -: 028909 get_bit_common: -0x681e 028910 call gpio_common -0x681f 028911 isolate1 gpio_active_bit ,temp -0x6820 028912 branch gpio_get_bit_reverse ,true -0x6821 028913 qisolate0 pdata -0x6822 028914 rtn -: 028915 gpio_get_bit_reverse: -0x6823 028916 qisolate1 pdata -0x6824 028917 rtn -: 028919 gpio_out_inactive: -0x6825 028920 sub temp ,ui_button_gpio_disable ,null -0x6826 028921 rtn zero -0x6827 028922 isolate1 7 ,null -0x6828 028923 branch gpio_out_flag -: 028925 gpio_out_active: -0x6829 028926 sub temp ,ui_button_gpio_disable ,null -0x682a 028927 rtn zero -0x682b 028928 isolate0 7 ,null -: 028931 gpio_out_flag: -0x682c 028932 setarg 0 -0x682d 028933 nsetflag true ,gpio_active_bit ,pdata -0x682e 028934 ixor temp ,temp -: 028937 gpio_out: -0x682f 028938 arg core_gpio_out0 ,contw -: 028941 gpio_set_bit: -0x6830 028942 call gpio_common -0x6831 028943 isolate1 gpio_active_bit ,temp -0x6832 028944 qsetflag true ,pdata -0x6833 028945 istore 1 ,contw -0x6834 028946 rtn -: 028948 gpio_set_before_lpm_common: -0x6835 028949 arg -1 ,rega -0x6836 028950 hfetch 1 ,core_gpio_sel1 -0x6837 028951 compare 0x02 ,pdata ,0x03 -0x6838 028952 call neglact4_from_23_pin ,true -0x6839 028954 compare 0x01 ,pdata ,0x03 -0x683a 028955 call neglact2_form_25_pin ,true -0x683b 028957 compare 0x03 ,pdata ,0x03 -0x683c 028958 call neglact2_form_25_pin ,true -0x683d 028960 isolate1 2 ,pdata -0x683e 028961 call neglect2_from_6_pin ,true -0x683f 028963 isolate1 3 ,pdata -0x6840 028964 call neglect4_from_9_pin ,true -0x6841 028966 isolate1 4 ,pdata -0x6842 028967 call neglact2_form_30_pin ,true -0x6843 028969 isolate1 6 ,pdata -0x6844 028970 nsetflag true ,04 ,rega -0x6845 028972 isolate1 7 ,pdata -0x6846 028973 nsetflag true ,05 ,rega -0x6847 028975 hfetch 1 ,core_gpio_sel2 -0x6848 028976 isolate1 0 ,pdata -0x6849 028977 nsetflag true ,27 ,rega -0x684a 028978 isolate1 1 ,pdata -0x684b 028979 nsetflag true ,28 ,rega -0x684c 028980 isolate1 2 ,pdata -0x684d 028981 nsetflag true ,03 ,rega -0x684e 028982 isolate1 3 ,pdata -0x684f 028983 nsetflag true ,08 ,rega -0x6850 028984 isolate1 4 ,pdata -0x6851 028985 nsetflag true ,20 ,rega -0x6852 028986 isolate1 5 ,pdata -0x6853 028987 nsetflag true ,21 ,rega -0x6854 028988 isolate1 6 ,pdata -0x6855 028989 nsetflag true ,22 ,rega -0x6856 028990 isolate1 7 ,pdata -0x6857 028991 nsetflag true ,23 ,rega -0x6858 028993 hfetch 1 ,core_gpio_sel -0x6859 028994 isolate1 0 ,pdata -0x685a 028995 nsetflag true ,05 ,rega -0x685b 028996 isolate1 1 ,pdata -0x685c 028997 nsetflag true ,06 ,rega -0x685d 028998 isolate1 2 ,pdata -0x685e 028999 nsetflag true ,07 ,rega -0x685f 029000 isolate1 3 ,pdata -0x6860 029001 nsetflag true ,18 ,rega -0x6861 029002 isolate1 4 ,pdata -0x6862 029003 nsetflag true ,19 ,rega -0x6863 029004 isolate1 5 ,pdata -0x6864 029005 nsetflag true ,20 ,rega -0x6865 029006 isolate1 6 ,pdata -0x6866 029007 nsetflag true ,21 ,rega -0x6867 029008 isolate1 7 ,pdata -0x6868 029009 nsetflag true ,22 ,rega -0x6869 029011 hfetch 1 ,core_uart_ctrl -0x686a 029012 isolate1 4 ,pdata -0x686b 029013 call neglact2_form_2_pin ,true -0x686c 029014 bpatchx patch33_5 ,mem_patch33 -0x686d 029016 hfetch 4 ,core_gpio_pu0 -0x686e 029017 hfetcht 4 ,core_gpio_pd0 -0x686f 029018 ior temp ,pdata -0x6870 029019 invert pdata ,pdata -0x6871 029020 iand rega ,pdata -0x6872 029022 hstore 4 ,core_gpio_oe0 -0x6873 029023 rtn -: 029026 neglect2_from_6_pin: -0x6874 029027 arg 6 ,queue -0x6875 029028 branch neglect_2_pin -: 029029 neglect4_from_9_pin: -0x6876 029030 arg 9 ,queue -0x6877 029031 branch neglact_4_pin -: 029032 neglact4_from_23_pin: -0x6878 029033 arg 23 ,queue -0x6879 029034 branch neglact_4_pin -: 029035 neglact2_form_25_pin: -0x687a 029036 arg 25 ,queue -0x687b 029037 branch neglect_2_pin -: 029038 neglact2_form_30_pin: -0x687c 029039 arg 30 ,queue -0x687d 029040 branch neglect_2_pin -: 029041 neglact2_form_2_pin: -0x687e 029042 arg 2 ,queue -0x687f 029043 branch neglect_2_pin -: 029044 neglact_1_pin: -0x6880 029045 arg 1 ,loopcnt -0x6881 029046 branch neglect_pin_loop -: 029047 neglact_4_pin: -0x6882 029048 arg 4 ,loopcnt -0x6883 029049 branch neglect_pin_loop -: 029050 neglect_2_pin: -0x6884 029051 arg 2 ,loopcnt -: 029052 neglect_pin_loop: -0x6885 029053 qset0 rega -0x6886 029054 increase 1 ,queue -0x6887 029055 loop neglect_pin_loop -0x6888 029056 rtn -: 029064 gpio_cfg_uart_tx_output: -0x6889 029065 call gpio_uart2gpio -0x688a 029066 arg uart_wakeup_tx ,temp -0x688b 029067 branch gpio_config_output -: 029069 gpio_pu_uart_tx: -0x688c 029070 call gpio_cfg_uart_tx_output -0x688d 029071 arg uart_wakeup_tx ,temp -0x688e 029072 branch gpio_out_inactive -: 029076 gpio_rx_config_input_with_pu: -0x688f 029077 call gpio_uart2gpio -0x6890 029078 hfetch 1 ,core_gpio_pu0 -0x6891 029079 set1 uart_wakeup_rx ,pdata -0x6892 029080 hstore 1 ,core_gpio_pu0 -0x6893 029081 arg uart_wakeup_rx ,temp -0x6894 029082 branch gpio_config_input -: 029084 gpio_uart2gpio: -0x6895 029085 hfetch 1 ,core_gpio_sel1 -0x6896 029086 and_into 0xfb ,pdata -0x6897 029087 hstore 1 ,core_gpio_sel1 -0x6898 029088 rtn -: 029090 gpio_check_uart_state: -0x6899 029091 hfetch 1 ,core_gpio_sel1 -0x689a 029092 isolate1 2 ,pdata -0x689b 029093 rtn -: 029095 load_chip_option: -0x689c 029096 call otp_enable_chgpump -0x689d 029097 setarg otp_chip_functions -0x689e 029098 arg mem_chip_functions ,rega -0x689f 029099 arg 0x02 ,temp -0x68a0 029100 call otpd_read_data -0x68a1 029101 branch otp_disable_chgpump -: 029104 load_adc_init: -0x68a2 029105 call otp_enable_chgpump -0x68a3 029106 setarg otp_adc_io_0_5v_addr -0x68a4 029107 arg mem_0_5_adc_io_data ,rega -0x68a5 029108 arg 14 ,temp -0x68a6 029109 call otpd_read_data -0x68a7 029110 branch otp_disable_chgpump -: 029114 adc_init_data: -0x68a8 029115 bpatchx patch33_6 ,mem_patch33 -0x68a9 029117 call load_adc_init -0x68aa 029119 fetch 1 ,mem_adc_config_flag -0x68ab 029120 beq adc_config_vinlpm ,adc_init_data_vinlpm -0x68ac 029121 beq adc_config_hvin ,adc_init_data_hvin -0x68ad 029122 beq adc_config_gpio ,adc_init_data_io -0x68ae 029123 rtn -: 029125 adc_init_data_vinlpm: -0x68af 029126 fetcht 2 ,mem_otp_adc_flag -0x68b0 029127 setarg otp_adc_flag -0x68b1 029128 isub temp ,null -0x68b2 029129 branch adc_check_data_vinlpm ,zero -0x68b3 029130 setarg 0x4dfa -0x68b4 029131 store 2 ,mem_3v_adc_vinlpm_data -0x68b5 029132 setarg 0x4894 -0x68b6 029133 store 2 ,mem_2v_adc_vinlpm_data -0x68b7 029134 branch set_vdd_reference_voltage_1v -: 029136 adc_check_data_vinlpm: -0x68b8 029137 fetch 2 ,mem_3v_adc_vinlpm_data -0x68b9 029138 nbranch adc_check_2v_vinlpm ,blank -0x68ba 029139 setarg 0x4dfa -0x68bb 029140 store 2 ,mem_3v_adc_vinlpm_data -: 029141 adc_check_2v_vinlpm: -0x68bc 029142 fetch 2 ,mem_2v_adc_vinlpm_data -0x68bd 029143 nbranch set_vdd_reference_voltage_1v ,blank -0x68be 029144 setarg 0x4894 -0x68bf 029145 store 2 ,mem_2v_adc_vinlpm_data -: 029146 set_vdd_reference_voltage_1v: -0x68c0 029147 setarg 100 -0x68c1 029148 store 2 ,mem_reference_voltage -0x68c2 029149 rtn -: 029151 adc_init_data_hvin: -0x68c3 029152 fetcht 2 ,mem_otp_adc_flag -0x68c4 029153 setarg otp_adc_flag -0x68c5 029154 isub temp ,null -0x68c6 029155 branch adc_check_data_hvin ,zero -0x68c7 029156 setarg 0x5932 -0x68c8 029157 store 2 ,mem_5v_adc_hvin_data -0x68c9 029158 setarg 0x4323 -0x68ca 029159 store 2 ,mem_1v_adc_hvin_data -0x68cb 029160 branch set_vdd_reference_voltage_4v -: 029162 adc_check_data_hvin: -0x68cc 029163 fetch 2 ,mem_5v_adc_hvin_data -0x68cd 029164 nbranch adc_check_1v_hvin ,blank -0x68ce 029165 setarg 0x5932 -0x68cf 029166 store 2 ,mem_5v_adc_hvin_data -: 029167 adc_check_1v_hvin: -0x68d0 029168 fetch 2 ,mem_1v_adc_hvin_data -0x68d1 029169 nbranch set_vdd_reference_voltage_4v ,blank -0x68d2 029170 setarg 0x4323 -0x68d3 029171 store 2 ,mem_1v_adc_hvin_data -: 029172 set_vdd_reference_voltage_4v: -0x68d4 029173 setarg 400 -0x68d5 029174 store 2 ,mem_reference_voltage -0x68d6 029175 rtn -: 029177 adc_init_data_io: -0x68d7 029178 fetcht 2 ,mem_otp_adc_flag -0x68d8 029179 setarg otp_adc_flag -0x68d9 029180 isub temp ,null -0x68da 029181 branch adc_check_data_io ,zero -0x68db 029182 setarg 0x6946 -0x68dc 029183 store 2 ,mem_1v_adc_io_data -0x68dd 029184 setarg 0x5377 -0x68de 029185 store 2 ,mem_0_5_adc_io_data -0x68df 029186 branch set_vdd_reference_voltage_0_5v -: 029188 adc_check_data_io: -0x68e0 029189 fetch 2 ,mem_1v_adc_io_data -0x68e1 029190 nbranch adc_check_0_5v_io ,blank -0x68e2 029191 setarg 0x6946 -0x68e3 029192 store 2 ,mem_1v_adc_io_data -: 029193 adc_check_0_5v_io: -0x68e4 029194 fetch 2 ,mem_0_5_adc_io_data -0x68e5 029195 nbranch set_vdd_reference_voltage_0_5v ,blank -0x68e6 029196 setarg 0x5377 -0x68e7 029197 store 2 ,mem_0_5_adc_io_data -: 029198 set_vdd_reference_voltage_0_5v: -0x68e8 029199 setarg 50 -0x68e9 029200 store 2 ,mem_reference_voltage -0x68ea 029201 rtn -: 029204 adc_set_mode: -0x68eb 029205 fetch 1 ,mem_adc_config_flag -0x68ec 029206 beq adc_config_vinlpm ,adc_check_vinlpm -0x68ed 029207 beq adc_config_hvin ,adc_check_hvin -0x68ee 029208 beq adc_config_gpio ,adc_check_gpio -0x68ef 029209 rtn -: 029210 adc_check_vinlpm: -0x68f0 029211 jam 0xbf ,rf_adc_mode -0x68f1 029212 branch read_adc -: 029213 adc_check_hvin: -0x68f2 029214 jam 0xaf ,rf_adc_mode -0x68f3 029215 branch read_adc -: 029216 adc_check_gpio: -0x68f4 029217 jam 0x8f ,rf_adc_mode -0x68f5 029218 fetch 1 ,mem_adc_channel -0x68f6 029219 hstore 1 ,rf_adc_ch -0x68f7 029220 branch read_adc -: 029221 read_adc: -0x68f8 029222 bpatchx patch33_7 ,mem_patch33 -0x68f9 029223 hfetch 1 ,core_uart_baud + 1 -0x68fa 029224 set1 7 ,pdata -0x68fb 029225 hstore 1 ,core_uart_baud + 1 -0x68fc 029226 hfetch 1 ,rf_adc_ch -0x68fd 029227 or_into 0x30 ,pdata -0x68fe 029228 hstore 1 ,rf_adc_ch -0x68ff 029229 jam 0x7c ,rfen_adc -0x6900 029230 jam 0xaa ,rf_adc_gc -0x6901 029231 nop 5000 -0x6902 029232 hfetcht 2 ,core_adc_sum -0x6903 029233 hfetch 1 ,core_uart_baud + 1 -0x6904 029234 set0 7 ,pdata -0x6905 029235 hstore 1 ,core_uart_baud + 1 -0x6906 029236 storet 2 ,mem_adc_current_value -0x6907 029237 rtn -: 029239 vdd_calculate_by_mode: -0x6908 029240 bpatchx patch34_0 ,mem_patch34 -0x6909 029241 fetch 1 ,mem_adc_config_flag -0x690a 029242 beq adc_config_vinlpm ,vdd_calculate_vinlpm -0x690b 029243 beq adc_config_hvin ,vdd_calculate_hvin -0x690c 029244 beq adc_config_gpio ,vdd_calculate_io -0x690d 029245 rtn -: 029247 vdd_calculate_vinlpm: -0x690e 029248 fetch 2 ,mem_3v_adc_vinlpm_data -0x690f 029249 fetcht 2 ,mem_2v_adc_vinlpm_data -0x6910 029250 arg 200 ,regc -0x6911 029251 branch vdd_calculate -: 029253 vdd_calculate_hvin: -0x6912 029254 fetch 2 ,mem_5v_adc_hvin_data -0x6913 029255 fetcht 2 ,mem_1v_adc_hvin_data -0x6914 029256 arg 100 ,regc -0x6915 029257 branch vdd_calculate -: 029259 vdd_calculate_io: -0x6916 029260 fetch 2 ,mem_1v_adc_io_data -0x6917 029261 fetcht 2 ,mem_0_5_adc_io_data -0x6918 029262 arg 50 ,regc -0x6919 029263 branch vdd_calculate -: 029265 vdd_calculate: -0x691a 029266 isub temp ,rega -0x691b 029267 fetch 2 ,mem_adc_current_value -0x691c 029268 isub temp ,pdata -0x691d 029269 nbranch vdd_calculate1 ,positive -0x691e 029270 fetcht 2 ,mem_reference_voltage -0x691f 029271 imul32 temp ,regb -0x6920 029272 copy regc ,pdata -0x6921 029273 imul32 rega ,pdata -0x6922 029274 iadd regb ,pdata -: 029275 vdd_calculate2: -0x6923 029276 idiv rega -0x6924 029277 call wait_div_end -0x6925 029278 quotient pdata -0x6926 029279 rtn -: 029281 vdd_calculate1: -0x6927 029282 copy temp ,pdata -0x6928 029283 fetcht 2 ,mem_adc_current_value -0x6929 029284 isub temp ,pdata -0x692a 029285 fetcht 2 ,mem_reference_voltage -0x692b 029286 imul32 temp ,regb -0x692c 029287 copy regc ,pdata -0x692d 029288 imul32 rega ,pdata -0x692e 029289 isub regb ,pdata -0x692f 029290 branch vdd_calculate2 -: 029301 adc_bat_percent_lowpower_out: -0x6930 029302 ifetch 8 ,rega -0x6931 029303 store 8 ,mem_pdatatemp -0x6932 029304 fetch 2 ,mem_pdatatemp -0x6933 029305 fetcht 2 ,mem_pdatatemp + 2 -0x6934 029306 isub temp ,rega -0x6935 029307 fetch 2 ,mem_pdatatemp + 6 -0x6936 029308 isub temp ,regb -0x6937 029309 fetcht 2 ,mem_pdatatemp + 4 -0x6938 029310 isub temp ,null -0x6939 029311 ncall adc_set_low_power_flag ,positive -0x693a 029312 mul32 regb ,100 ,pdata -0x693b 029313 idiv rega -0x693c 029314 call wait_div_end -0x693d 029315 quotient pdata -0x693e 029316 call adc_set_no_power_flag ,blank -0x693f 029317 rtn -: 029318 adc_set_low_power_flag: -0x6940 029319 fetch 1 ,mem_adc_power_flag -0x6941 029320 set1 0 ,pdata -0x6942 029321 store 1 ,mem_adc_power_flag -0x6943 029322 rtn -: 029323 adc_set_no_power_flag: -0x6944 029324 fetcht 1 ,mem_adc_power_flag -0x6945 029325 set1 1 ,temp -0x6946 029326 storet 1 ,mem_adc_power_flag -0x6947 029327 rtn -: 029332 keyscan_key_init: -0x6948 029333 fetch 2 ,mem_key_num_ptr -0x6949 029334 ifetch 1 ,pdata -: 029335 keyscan_key_init_next: -0x694a 029336 rtn blank -0x694b 029337 copy pdata ,loopcnt -0x694c 029339 fetch 2 ,mem_keyscan_ptr -0x694d 029340 increase 3 ,pdata -0x694e 029341 copy pdata ,rega -: 029342 keyscan_key_init_lp1: -0x694f 029343 ifetcht 1 ,rega -0x6950 029344 call gpio_config_input -0x6951 029345 increase key_conf_struct_len ,rega -0x6952 029346 loop keyscan_key_init_lp1 -: 029347 keyscan_key_init_end: -0x6953 029348 rtn -: 029350 keyscan_scan_key: -0x6954 029351 fetch 2 ,mem_keyscan_ptr -0x6955 029352 increase 3 ,pdata -0x6956 029353 copy pdata ,rega -0x6957 029355 force 0 ,regb -0x6958 029356 jam 0 ,mem_key_value_temp -: 029357 keyscan_scan_key_lp1: -0x6959 029358 ifetcht 1 ,rega -0x695a 029359 call gpio_get_bit -0x695b 029360 bpatchx patch34_1 ,mem_patch34 -0x695c 029361 fetch 2 ,mem_key_value_temp -0x695d 029362 copy regb ,queue -0x695e 029363 qsetflag true ,pdata -0x695f 029364 store 2 ,mem_key_value_temp -0x6960 029365 increase key_conf_struct_len ,rega -0x6961 029366 increase 1 ,regb -0x6962 029367 fetch 2 ,mem_key_num_ptr -0x6963 029368 ifetch 1 ,pdata -: 029369 keyscan_scan_key_lp1_next: -0x6964 029370 ixor regb ,null -0x6965 029371 nbranch keyscan_scan_key_lp1 ,zero -0x6966 029372 fetch 2 ,mem_key_value_temp -0x6967 029373 fetcht 2 ,mem_key_value -0x6968 029374 ixor temp ,null -0x6969 029375 rtn zero -0x696a 029376 enable user -0x696b 029377 rtn -: 029379 keyscan_process_lpm_before: -0x696c 029380 fetch 2 ,mem_key_num_ptr -0x696d 029381 ifetch 1 ,pdata -: 029382 keyscan_process_lpm_before_next: -0x696e 029383 rtn blank -0x696f 029384 copy pdata ,loopcnt -0x6970 029385 fetch 2 ,mem_keyscan_ptr -0x6971 029386 increase 3 ,pdata -0x6972 029387 copy pdata ,rega -: 029388 keyscan_process_lpm_before_lp1: -0x6973 029389 ifetcht 1 ,rega -0x6974 029390 call gpio_set_wake_by_current_state -0x6975 029391 increase key_conf_struct_len ,rega -0x6976 029392 loop keyscan_process_lpm_before_lp1 -: 029393 keyscan_process_lpm_before_end: -0x6977 029394 rtn -: 029396 keyscan_key_process: -0x6978 029397 arg key_scan_timer ,queue -0x6979 029398 call timer_check -0x697a 029399 nrtn blank -0x697b 029400 setarg 0x20 -0x697c 029401 arg key_scan_timer ,queue -0x697d 029402 call timer_init -0x697e 029403 disable user -0x697f 029404 call keyscan_process_lpm_before -0x6980 029405 bpatchx patch34_2 ,mem_patch34 -0x6981 029406 fetch 2 ,mem_key_num_ptr -0x6982 029407 ifetch 1 ,pdata -: 029408 keyscan_key_process_next: -0x6983 029409 rtn blank -0x6984 029410 call keyscan_scan_key -0x6985 029411 nbranch lpm_button_clean_wake_lock ,user -0x6986 029412 call lpm_button_get_wake_lock -0x6987 029413 disable user -0x6988 029414 fetch 2 ,mem_key_value_temp -0x6989 029415 store 2 ,mem_key_value_temp4 -0x698a 029416 jam 0 ,mem_key_value_temp6 -0x698b 029417 force 0 ,queue -: 029418 keyscan_key_lp1: -0x698c 029419 fetch 2 ,mem_key_value -0x698d 029420 rshift pdata ,temp -0x698e 029421 storet 2 ,mem_key_value -0x698f 029422 and pdata ,0x01 ,pdata -0x6990 029423 fetcht 2 ,mem_key_value_temp4 -0x6991 029424 and temp ,0x01 ,rega -0x6992 029425 rshift temp ,temp -0x6993 029426 storet 2 ,mem_key_value_temp4 -0x6994 029427 ixor rega ,null -0x6995 029428 ncall keyscan_send_key_data ,zero -0x6996 029429 fetch 2 ,mem_key_num_ptr -0x6997 029430 ifetch 1 ,pdata -: 029431 keyscan_key_lp1_next: -0x6998 029432 fetcht 1 ,mem_key_value_temp6 -0x6999 029433 increase 1 ,temp -0x699a 029434 storet 1 ,mem_key_value_temp6 -0x699b 029435 copy temp ,queue -0x699c 029436 ixor queue ,null -0x699d 029437 nbranch keyscan_key_lp1 ,zero -0x699e 029438 fetch 2 ,mem_key_value_temp -0x699f 029439 store 2 ,mem_key_value -0x69a0 029440 rtn -: 029441 keyscan_send_key_data: -0x69a1 029442 bpatchx patch34_3 ,mem_patch34 -0x69a2 029443 fetch 2 ,mem_keyscan_ptr -0x69a3 029444 increase 1 ,pdata -0x69a4 029445 ifetch 2 ,pdata -0x69a5 029446 branch callback_func -: 029457 pwm_init: -0x69a6 029458 hfetch 1 ,core_clksel -0x69a7 029459 ior rega ,pdata -0x69a8 029460 hstore 1 ,core_clksel -0x69a9 029461 hfetch 2 ,core_clkoff -0x69aa 029462 set0 clock_off_pwm ,pdata -0x69ab 029463 hstore 2 ,core_clkoff -: 029464 delay_nop100: -0x69ac 029465 nop 100 -0x69ad 029466 rtn -: 029477 pwm_out_set: -0x69ae 029478 fetcht 3 ,mem_pdatatemp + 2 -0x69af 029479 setarg pwm_12mhz -0x69b0 029480 idiv temp -0x69b1 029481 call wait_div_end -0x69b2 029482 quotient temp -0x69b3 029483 fetch 1 ,mem_pdatatemp + 5 -0x69b4 029484 imul32 temp ,pdata -0x69b5 029485 div pdata ,100 -0x69b6 029486 call wait_div_end -0x69b7 029487 quotient rega -0x69b8 029488 copy temp ,pdata -0x69b9 029489 isub rega ,regb -0x69ba 029490 fetch 1 ,mem_pdatatemp + 1 -0x69bb 029491 call pwm_duty_cycle_set -0x69bc 029492 fetch 1 ,mem_pdatatemp -0x69bd 029493 branch pwm_enable -: 029496 pwm_duty_cycle_set: -0x69be 029497 beq 0 ,pwm_pwm0_duty_set -0x69bf 029498 beq 1 ,pwm_pwm1_duty_set -0x69c0 029499 beq 2 ,pwm_pwm2_duty_set -0x69c1 029500 beq 3 ,pwm_pwm3_duty_set -0x69c2 029501 beq 4 ,pwm_pwm4_duty_set -0x69c3 029502 beq 5 ,pwm_pwm5_duty_set -: 029503 pwm_pwm0_duty_set: -0x69c4 029504 arg core_pwm_pcnt0 ,contw -0x69c5 029505 branch pwm_set_pncnt -: 029506 pwm_pwm1_duty_set: -0x69c6 029507 arg core_pwm_pcnt1 ,contw -0x69c7 029508 branch pwm_set_pncnt -: 029509 pwm_pwm2_duty_set: -0x69c8 029510 arg core_pwm_pcnt2 ,contw -0x69c9 029511 branch pwm_set_pncnt -: 029512 pwm_pwm3_duty_set: -0x69ca 029513 arg core_pwm_pcnt3 ,contw -0x69cb 029514 branch pwm_set_pncnt -: 029515 pwm_pwm4_duty_set: -0x69cc 029516 arg core_pwm_pcnt4 ,contw -0x69cd 029517 branch pwm_set_pncnt -: 029518 pwm_pwm5_duty_set: -0x69ce 029519 arg core_pwm_pcnt5 ,contw -0x69cf 029520 branch pwm_set_pncnt -: 029521 pwm_set_pncnt: -0x69d0 029522 copy rega ,pdata -0x69d1 029523 istore 2 ,contw -0x69d2 029524 copy regb ,pdata -0x69d3 029525 istore 2 ,contw -0x69d4 029526 rtn -: 029530 pwm_enable: -0x69d5 029531 enable user -0x69d6 029532 branch pwm_gpio_set -: 029533 pwm_disable: -0x69d7 029534 disable user -: 029535 pwm_gpio_set: -0x69d8 029536 beq 4 ,pwm_gpio4_set -0x69d9 029537 beq 5 ,pwm_gpio5_set -0x69da 029538 beq 27 ,pwm_gpio27_set -0x69db 029539 beq 28 ,pwm_gpio28_set -0x69dc 029540 beq 3 ,pwm_gpio3_set -0x69dd 029541 beq 8 ,pwm_gpio8_set -0x69de 029542 beq 20 ,pwm_gpio20_set -0x69df 029543 beq 21 ,pwm_gpio21_set -0x69e0 029544 beq 22 ,pwm_gpio22_set -0x69e1 029545 beq 23 ,pwm_gpio23_set -0x69e2 029546 rtn -: 029549 pwm_gpio4_set: -0x69e3 029550 arg 6 ,queue -0x69e4 029551 branch pwm_one_set_select -: 029552 pwm_gpio5_set: -0x69e5 029553 arg 7 ,queue -0x69e6 029554 branch pwm_one_set_select -: 029555 pwm_gpio27_set: -0x69e7 029556 arg 8 ,queue -0x69e8 029557 branch pwm_one_set_select -: 029558 pwm_gpio28_set: -0x69e9 029559 arg 9 ,queue -0x69ea 029560 branch pwm_one_set_select -: 029561 pwm_gpio3_set: -0x69eb 029562 arg 10 ,queue -0x69ec 029563 branch pwm_one_set_select -: 029564 pwm_gpio8_set: -0x69ed 029565 arg 11 ,queue -0x69ee 029566 branch pwm_one_set_select -: 029567 pwm_gpio20_set: -0x69ef 029568 arg 12 ,queue -0x69f0 029569 branch pwm_tw0_set_select -: 029570 pwm_gpio21_set: -0x69f1 029571 arg 13 ,queue -0x69f2 029572 branch pwm_tw0_set_select -: 029573 pwm_gpio22_set: -0x69f3 029574 arg 14 ,queue -0x69f4 029575 branch pwm_tw0_set_select -: 029576 pwm_gpio23_set: -0x69f5 029577 arg 15 ,queue -0x69f6 029578 branch pwm_tw0_set_select -: 029580 pwm_set_select: -0x69f7 029581 hfetch 2 ,core_gpio_sel1 -0x69f8 029582 qsetflag user ,pdata -0x69f9 029583 hstore 2 ,core_gpio_sel1 -0x69fa 029584 copy rega ,queue -0x69fb 029585 hfetch 1 ,core_gpio_key2 -0x69fc 029586 qsetflag user ,pdata -0x69fd 029587 hstore 1 ,core_gpio_key2 -0x69fe 029588 rtn -: 029590 pwm_one_set_select: -0x69ff 029591 add queue ,-4 ,rega -0x6a00 029592 branch pwm_set_select -: 029594 pwm_tw0_set_select: -0x6a01 029595 add queue ,-10 ,rega -0x6a02 029596 branch pwm_set_select -: 029601 rfcomm_init: -0x6a03 029602 rtn wake -0x6a04 029603 jam 0 ,mem_rfcomm_send_more_pkt -0x6a05 029604 jam bits9600 ,memremoterpnbitrate -0x6a06 029605 jam databits8 ,memremoteprndatabits -0x6a07 029606 jam 0x11 ,memremoteprnxon -0x6a08 029607 jam 0x13 ,memremoteprnxoff -0x6a09 029608 setarg 0 -0x6a0a 029609 store 3 ,memremoteprnstopbit -0x6a0b 029610 store 1 ,mem_spp_state -0x6a0c 029611 jam 0 ,memui_reconnect_mode -: 029613 rfcomm_init_spp: -0x6a0d 029614 bpatchx patch34_4 ,mem_patch34 -0x6a0e 029615 setarg 0 -0x6a0f 029616 store 1 ,mem_spp_state -0x6a10 029617 store 1 ,mem_remote_spp_channel -0x6a11 029618 store 1 ,mem_pn_dlci -0x6a12 029619 fetch 1 ,mem_credit_flag -0x6a13 029620 beq credit_enable ,rfcomm_init_spp_with_credit -0x6a14 029621 jam 0x50 ,mem_credit_given -0x6a15 029622 rtn -: 029624 rfcomm_init_spp_with_credit: -0x6a16 029625 jam 0x00 ,mem_credit_given -0x6a17 029626 rtn -: 029628 set_cr_bit: -0x6a18 029629 or_into 0x02 ,temp -0x6a19 029630 rtn -: 029642 rfcomm_calculate_fcs_sabm: -0x6a1a 029643 copy temp ,pdata -0x6a1b 029644 reverse pdata ,pdata -0x6a1c 029645 store 1 ,memfcstemp3 -0x6a1d 029646 force ini_tx_sabm ,pdata -0x6a1e 029647 reverse pdata ,pdata -0x6a1f 029648 store 1 ,memfcstemp2 -0x6a20 029649 force 0x01 ,pdata -0x6a21 029650 reverse pdata ,pdata -0x6a22 029651 store 1 ,memfcstemp1 -0x6a23 029652 call caculate_fcs -0x6a24 029653 copy temp ,pdata -0x6a25 029654 rtn -: 029655 rfcomm_calculate_fcs_ua: -0x6a26 029656 reverse pdata ,pdata -0x6a27 029657 store 1 ,memfcstemp3 -0x6a28 029658 force rsp_tx_ua ,pdata -0x6a29 029659 reverse pdata ,pdata -0x6a2a 029660 store 1 ,memfcstemp2 -0x6a2b 029661 force 0x01 ,pdata -0x6a2c 029662 reverse pdata ,pdata -0x6a2d 029663 store 1 ,memfcstemp1 -0x6a2e 029664 branch caculate_fcs -: 029666 rfcomm_calculate_fcs_dlci0: -0x6a2f 029667 fetch 1 ,mem_rfcomm_initiator -0x6a30 029668 branch rfcomm_calculate_fcs_dlci0_res ,blank -0x6a31 029669 setarg 0x70 -0x6a32 029670 rtn -: 029671 rfcomm_calculate_fcs_dlci0_res: -0x6a33 029672 setarg 0xaa -0x6a34 029673 rtn -: 029675 rfcomm_save_fcs_uih: -0x6a35 029676 reverse pdata ,pdata -0x6a36 029677 store 1 ,memfcstemp3 -0x6a37 029678 force rsp_rx_uih ,pdata -0x6a38 029679 call caculate_uihdata_fcs -0x6a39 029680 fetcht 2 ,mem_contw_temp -0x6a3a 029681 copy temp ,contw -0x6a3b 029682 istore 1 ,contw -0x6a3c 029683 copy contw ,temp -0x6a3d 029684 storet 2 ,mem_contw_temp -0x6a3e 029685 force rsp_rx_uih_wdata ,pdata -0x6a3f 029686 call caculate_uihdata_fcs -0x6a40 029687 fetcht 2 ,mem_contw_temp -0x6a41 029688 copy temp ,contw -0x6a42 029689 istore 1 ,contw -0x6a43 029690 rtn -: 029699 caculate_uihdata_fcs: -0x6a44 029700 reverse pdata ,pdata -0x6a45 029701 store 1 ,memfcstemp2 -0x6a46 029702 fetch 2 ,memfcstemp2 -0x6a47 029703 lshift8 pdata ,pdata -0x6a48 029704 store 3 ,mem_mod2div_temp -0x6a49 029705 arg 0x107 ,rega -0x6a4a 029706 arg 0xf ,regb -0x6a4b 029707 call mod2div -0x6a4c 029708 xor_into 0xd7 ,pdata -0x6a4d 029709 invert pdata ,pdata -0x6a4e 029710 reverse pdata ,pdata -0x6a4f 029711 rtn -: 029721 caculate_fcs: -0x6a50 029722 fetch 3 ,memfcstemp1 -0x6a51 029723 store 3 ,mem_mod2div_temp -0x6a52 029724 arg 0x107 ,rega -0x6a53 029725 arg 0xf ,regb -0x6a54 029726 call mod2div -0x6a55 029727 lshift8 pdata ,pdata -0x6a56 029728 arg 0x7 ,regb -0x6a57 029729 call mod2div -0x6a58 029730 xor_into 0x2b ,pdata -0x6a59 029731 invert pdata ,pdata -0x6a5a 029732 reverse pdata ,pdata -0x6a5b 029733 copy pdata ,temp -0x6a5c 029734 rtn -: 029736 mod2div: -0x6a5d 029737 arg 0 ,regc -0x6a5e 029738 copy regb ,loopcnt -0x6a5f 029739 call right_shift_n -0x6a60 029740 icopy temp -: 029741 mod2div_loop: -0x6a61 029746 copy temp ,pdata -0x6a62 029747 lshift regc ,regc -0x6a63 029748 bbit0 8 ,mod2div_not_enough_reduction -0x6a64 029749 ixor rega ,temp -0x6a65 029750 increase 1 ,regc -: 029751 mod2div_not_enough_reduction: -0x6a66 029752 lshift temp ,temp -0x6a67 029753 fetch 3 ,mem_mod2div_temp -0x6a68 029754 increase -1 ,regb -0x6a69 029755 compare 0xff ,regb ,0xff -0x6a6a 029756 branch mod2div_end ,true -0x6a6b 029757 copy regb ,loopcnt -0x6a6c 029758 call right_shift_n -0x6a6d 029759 isolate1 0 ,pdata -0x6a6e 029760 setflag true ,0 ,temp -0x6a6f 029761 branch mod2div_loop -: 029762 mod2div_end: -0x6a70 029764 rshift temp ,pdata -0x6a71 029765 rtn -: 029767 get_rfcomm_snd_adss: -0x6a72 029768 fetcht 1 ,mem_pn_dlci -: 029769 dlci_to_address_cmd: -0x6a73 029771 lshift2 temp ,temp -0x6a74 029772 set1 rfcomm_address_ext_len ,temp -0x6a75 029773 fetch 1 ,mem_rfcomm_initiator -0x6a76 029774 ncall set_cr_bit ,blank -0x6a77 029775 storet 1 ,mem_rfcomm_send_adss -0x6a78 029776 rtn -: 029778 channel_to_dlci: -0x6a79 029780 lshift temp ,temp -0x6a7a 029781 fetch 1 ,mem_rfcomm_initiator -0x6a7b 029782 setflag blank ,0 ,temp -0x6a7c 029784 rtn -: 029785 rfcomm_rx_process_dlci0_sabm: -0x6a7d 029786 fetcht 1 ,mem_current_channel -0x6a7e 029787 jam 0xd7 ,mem_current_fcs -0x6a7f 029788 call rfcomm_send_ua -0x6a80 029789 fetch 1 ,mem_rfcomm_state -0x6a81 029790 set1 l2cap_channel_rfcomm_only_sabm ,pdata -0x6a82 029791 set1 l2cap_channel_rfcomm_only_ua ,pdata -0x6a83 029792 store 1 ,mem_rfcomm_state -0x6a84 029793 jam 0 ,mem_rfcomm_initiator -0x6a85 029794 branch rfcomm_rx_process_end -: 029795 rfcomm_rx_process_dlci0_ua: -0x6a86 029796 fetch 1 ,mem_rfcomm_state -0x6a87 029797 set1 l2cap_channel_rfcomm_only_ua ,pdata -0x6a88 029798 store 1 ,mem_rfcomm_state -0x6a89 029799 branch rfcomm_rx_process_end -: 029802 rfcomm_rx_process: -0x6a8a 029803 bpatchx patch34_5 ,mem_patch34 -0x6a8b 029804 fetch 1 ,memui_reconnect_mode -0x6a8c 029805 beq no_reconnection ,rfcomm_rx_process_remote_page -0x6a8d 029806 branch rfcomm_rx_process_reconn -: 029808 rfcomm_rx_process_remote_page: -0x6a8e 029809 fetch 2 ,mem_l2cap_payload_ptr -0x6a8f 029810 copy pdata ,contr -0x6a90 029811 call get_rfcomm_head_struct -0x6a91 029812 fetch 1 ,mem_current_channel -0x6a92 029813 beq 0 ,parse_dlci0_rp -0x6a93 029814 branch parse_uih_rp -: 029815 parse_dlci0_rp: -0x6a94 029816 bpatchx patch34_6 ,mem_patch34 -0x6a95 029817 fetch 1 ,mem_current_frame_type -0x6a96 029818 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm -0x6a97 029819 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua -0x6a98 029820 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih -0x6a99 029821 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event -0x6a9a 029822 rtn -: 029825 parse_dlci0_rp_uih: -0x6a9b 029826 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6a9c 029827 copy pdata ,contr -0x6a9d 029828 call get_rfcomm_uih_head_struct -0x6a9e 029829 fetch 1 ,mem_uih_cmd_type -0x6a9f 029830 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd -0x6aa0 029831 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res -0x6aa1 029832 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd -0x6aa2 029833 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res -0x6aa3 029834 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port -0x6aa4 029835 branch rfcomm_rx_process_end -: 029837 parse_dlci0_rp_uih_pn_cmd: -0x6aa5 029838 call parse_dlci0_rp_uih_pn_res_common -0x6aa6 029840 branch parse_dlci0_rp_uih_pn_cmd_spp -: 029842 parse_dlci0_rp_uih_pn_cmd_spp: -0x6aa7 029843 fetch 1 ,mem_spp_state -0x6aa8 029844 set1 rfcomm_channel_state_pn_cmd ,pdata -0x6aa9 029845 set1 rfcomm_channel_state_pn_res ,pdata -0x6aaa 029846 store 1 ,mem_spp_state -0x6aab 029847 call rfcomm_send_param_neg_res -0x6aac 029848 branch rfcomm_rx_process_end -: 029850 parse_dlci0_rp_uih_pn_res: -0x6aad 029851 call parse_dlci0_rp_uih_pn_res_common -0x6aae 029852 branch rfcomm_rx_process_end -: 029854 parse_dlci0_rp_uih_pn_res_common: -0x6aaf 029855 call get_param_payload_ptr -0x6ab0 029856 branch get_rfcomm_prarmer_negotiation -: 029858 get_rfcomm_param_modem_status: -0x6ab1 029859 call get_param_payload_ptr -0x6ab2 029860 ifetch 1 ,contr -0x6ab3 029861 rshift3 pdata ,pdata -0x6ab4 029862 store 1 ,mem_ms_channel -0x6ab5 029863 ifetch 1 ,contr -0x6ab6 029864 store 1 ,mem_ms_param -0x6ab7 029865 rtn -: 029868 get_rfcomm_head_struct: -0x6ab8 029869 ifetch 1 ,contr -0x6ab9 029870 store 1 ,mem_current_adss -0x6aba 029871 rshift3 pdata ,pdata -0x6abb 029872 store 1 ,mem_current_channel -0x6abc 029873 ifetch 1 ,contr -0x6abd 029874 store 1 ,mem_current_frame_type -: 029875 get_rfcomm_current_length: -0x6abe 029876 call get_rfcomm_length_common -0x6abf 029877 storet 2 ,mem_current_length -0x6ac0 029878 copy contr ,pdata -0x6ac1 029879 store 2 ,mem_rfcomm_uih_payload_ptr -0x6ac2 029880 rtn -: 029882 get_rfcomm_uih_head_struct: -0x6ac3 029883 ifetch 1 ,contr -0x6ac4 029884 rshift pdata ,pdata -0x6ac5 029885 store 1 ,mem_uih_cmd_type -0x6ac6 029886 call get_rfcomm_length_common -0x6ac7 029887 storet 2 ,mem_uih_length -0x6ac8 029888 copy contr ,pdata -0x6ac9 029889 store 2 ,mem_param_payload_ptr -0x6aca 029890 rtn -: 029893 get_param_payload_ptr: -0x6acb 029894 fetch 2 ,mem_param_payload_ptr -0x6acc 029895 copy pdata ,contr -0x6acd 029896 rtn -: 029898 get_rfcomm_length_common: -0x6ace 029899 ifetch 1 ,contr -0x6acf 029900 copy pdata ,temp -0x6ad0 029901 rshift temp ,temp -0x6ad1 029902 rtnbit1 0 -0x6ad2 029903 ifetch 1 ,contr -0x6ad3 029904 lshift3 pdata ,pdata -0x6ad4 029905 lshift4 pdata ,pdata -0x6ad5 029906 iadd temp ,temp -0x6ad6 029907 rtn -: 029909 get_rfcomm_prarmer_negotiation: -0x6ad7 029910 ifetch 1 ,contr -0x6ad8 029911 store 1 ,mem_pn_dlci -0x6ad9 029912 ifetch 1 ,contr -0x6ada 029913 store 1 ,mem_pn_credit_flow_type_info -0x6adb 029914 ifetch 1 ,contr -0x6adc 029915 store 1 ,mem_pn_priority -0x6add 029916 ifetch 1 ,contr -0x6ade 029917 store 1 ,mem_pn_acknowledg_timer -0x6adf 029918 ifetch 2 ,contr -0x6ae0 029919 store 2 ,mem_pn_max_frame_size -0x6ae1 029920 ifetch 1 ,contr -0x6ae2 029921 store 1 ,mem_pn_max_retrans -0x6ae3 029922 ifetch 1 ,contr -0x6ae4 029923 store 1 ,mem_remote_credits -0x6ae5 029924 rtn -: 029927 parse_dlci0_rp_uih_ms_cmd: -0x6ae6 029928 call get_rfcomm_param_modem_status -0x6ae7 029930 branch parse_dlci0_rp_uih_ms_cmd_spp -: 029932 parse_dlci0_rp_uih_ms_cmd_spp: -0x6ae8 029933 fetch 1 ,mem_spp_state -0x6ae9 029934 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata -0x6aea 029935 set1 rfcomm_channel_state_snd_ms_res ,pdata -0x6aeb 029936 store 1 ,mem_spp_state -0x6aec 029937 fetcht 1 ,mem_pn_dlci -0x6aed 029938 lshift2 temp ,temp -0x6aee 029939 or_into 3 ,temp -0x6aef 029940 call rfcomm_send_modem_status_res -0x6af0 029941 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt -0x6af1 029942 branch rfcomm_rx_process_end -: 029944 parse_dlci0_rp_uih_ms_res: -0x6af2 029945 jam bt_evt_spp_connected ,mem_fifo_temp -0x6af3 029946 call ui_ipc_send_event -0x6af4 029947 call get_rfcomm_param_modem_status -0x6af5 029948 fetch 1 ,mem_ms_channel -0x6af6 029949 sub pdata ,1 ,null -0x6af7 029950 branch parse_dlci0_rp_uih_ms_res_spp ,zero -0x6af8 029951 branch assert -: 029952 parse_dlci0_rp_uih_ms_res_spp: -0x6af9 029953 fetch 1 ,mem_spp_state -0x6afa 029954 set1 rfcomm_channel_state_rcv_ms_res ,pdata -0x6afb 029955 store 1 ,mem_spp_state -0x6afc 029956 branch rfcomm_rx_process_end -: 029958 parse_dlci0_rp_uih_cmd_port: -0x6afd 029959 call get_param_payload_ptr -0x6afe 029960 ifetch 1 ,contr -0x6aff 029961 store 1 ,mem_rpn_dlci -0x6b00 029962 call l2cap_malloc_rfcomm_channel -0x6b01 029963 call l2cap_get_rfcomm_tx_buff -0x6b02 029964 setarg 0x000e -0x6b03 029965 istore 2 ,contw -0x6b04 029966 fetch 2 ,mem_rfcomm_remote_cid -0x6b05 029967 istore 2 ,contw -0x6b06 029968 fetch 1 ,mem_rfcomm_initiator -0x6b07 029970 lshift pdata ,pdata -0x6b08 029971 set1 0 ,pdata -0x6b09 029972 istore 1 ,contw -0x6b0a 029973 bpatchx patch34_7 ,mem_patch34 -0x6b0b 029974 setarg 0x15ef -0x6b0c 029975 istore 2 ,contw -0x6b0d 029976 setarg 0x1191 -0x6b0e 029977 istore 2 ,contw -0x6b0f 029980 fetch 1 ,mem_rpn_dlci -0x6b10 029981 istore 1 ,contw -0x6b11 029982 setarg 0x000007 -0x6b12 029983 istore 5 ,contw -0x6b13 029986 setarg 0x01 -0x6b14 029987 istore 2 ,contw -0x6b15 029990 call rfcomm_calculate_fcs_dlci0 -0x6b16 029991 istore 1 ,contw -0x6b17 029992 rtn -: 029996 parse_uih_rp: -0x6b18 029997 branch parse_uih_rp_spp -: 029999 parse_uih_rp_spp: -0x6b19 030000 bpatchx patch35_0 ,mem_patch35 -0x6b1a 030001 fetch 1 ,mem_current_frame_type -0x6b1b 030002 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua -0x6b1c 030003 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm -0x6b1d 030004 beq rfcomm_frame_type_uih ,parse_uih_spp_uih -0x6b1e 030005 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits -0x6b1f 030006 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn -0x6b20 030007 rtn -: 030008 parse_uih_rp_spp_ua: -0x6b21 030009 fetch 1 ,mem_spp_state -0x6b22 030010 set1 rfcomm_channel_state_ua ,pdata -0x6b23 030011 store 1 ,mem_spp_state -0x6b24 030012 branch rfcomm_rx_process_end -: 030013 parse_uih_rp_spp_sabm: -0x6b25 030014 fetch 1 ,mem_spp_state -0x6b26 030015 set1 rfcomm_channel_state_ua ,pdata -0x6b27 030016 set1 rfcomm_channel_state_sabm ,pdata -0x6b28 030017 store 1 ,mem_spp_state -0x6b29 030018 fetch 1 ,mem_current_adss -0x6b2a 030019 call rfcomm_calculate_fcs_ua -0x6b2b 030020 store 1 ,mem_current_fcs -0x6b2c 030021 call rfcomm_send_ua -0x6b2d 030022 fetch 1 ,mem_current_adss -0x6b2e 030023 rshift2 pdata ,pdata -0x6b2f 030024 store 1 ,mem_pn_dlci -0x6b30 030025 lshift2 pdata ,pdata -0x6b31 030026 set0 rfcomm_address_cr ,pdata -0x6b32 030027 set1 rfcomm_address_ext_len ,pdata -0x6b33 030028 arg mem_hiufcs_spp ,temp -0x6b34 030029 storet 2 ,mem_contw_temp -0x6b35 030030 call rfcomm_save_fcs_uih -0x6b36 030031 branch rfcomm_rx_process_end -: 030033 parse_uih_spp_uih_credits: -0x6b37 030034 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6b38 030035 copy pdata ,contr -0x6b39 030036 increase 1 ,pdata -0x6b3a 030037 store 2 ,mem_rfcomm_uih_payload_ptr -0x6b3b 030038 ifetch 1 ,contr -0x6b3c 030039 fetcht 1 ,mem_remote_credits -0x6b3d 030040 iadd temp ,pdata -0x6b3e 030041 store 1 ,mem_remote_credits -: 030042 parse_uih_spp_uih: -0x6b3f 030043 call rfcomm_increase_credit_given -: 030044 parse_uih_spp_uih_cont: -0x6b40 030045 call get_rfcomm_snd_adss -0x6b41 030046 call rfcomm_send_uih_without_payload -0x6b42 030047 call spp_process_rx_data -0x6b43 030048 branch rfcomm_rx_process_end -: 030050 parse_uih_rp_spp_disconn_send_event: -0x6b44 030051 jam bt_evt_spp_disconnected ,mem_fifo_temp -0x6b45 030052 call ui_ipc_send_event -: 030053 parse_uih_rp_spp_disconn: -0x6b46 030054 call rfcomm_init_spp -0x6b47 030055 fetch 1 ,mem_current_adss -0x6b48 030056 call rfcomm_calculate_fcs_ua -0x6b49 030057 store 1 ,mem_current_fcs -0x6b4a 030058 call rfcomm_send_ua -0x6b4b 030059 branch rfcomm_rx_process_end -: 030064 rfcomm_rx_process_reconn: -0x6b4c 030065 fetch 2 ,mem_l2cap_payload_ptr -0x6b4d 030066 copy pdata ,contr -0x6b4e 030067 call get_rfcomm_head_struct -0x6b4f 030068 fetch 1 ,mem_current_channel -0x6b50 030069 beq 0 ,parse_dlci0_reconn -0x6b51 030070 branch parse_uih_reconn -: 030072 parse_dlci0_reconn: -0x6b52 030073 bpatchx patch35_1 ,mem_patch35 -0x6b53 030074 fetch 1 ,mem_current_frame_type -0x6b54 030075 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm -0x6b55 030076 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua -0x6b56 030077 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih -0x6b57 030078 branch rfcomm_rx_process_end -: 030079 parse_dlci0_reconn_uih: -0x6b58 030080 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6b59 030081 copy pdata ,contr -0x6b5a 030082 call get_rfcomm_uih_head_struct -0x6b5b 030083 fetch 1 ,mem_uih_cmd_type -0x6b5c 030084 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd -0x6b5d 030085 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd -0x6b5e 030086 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd -0x6b5f 030087 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res -0x6b60 030088 branch rfcomm_rx_process_end -: 030090 parse_dlci0_reconn_uih_pn_cmd: -0x6b61 030091 call parse_dlci0_rp_uih_pn_res_common -0x6b62 030092 fetch 1 ,mem_pn_dlci -0x6b63 030093 rshift pdata ,pdata -0x6b64 030094 fetcht 1 ,mem_remote_spp_channel -0x6b65 030095 isub temp ,null -0x6b66 030096 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero -0x6b67 030097 branch assert -: 030098 parse_dlci0_reconn_uih_pn_cmd_spp: -0x6b68 030099 fetch 1 ,mem_spp_state -0x6b69 030100 set1 rfcomm_channel_state_pn_res ,pdata -0x6b6a 030101 store 1 ,mem_spp_state -0x6b6b 030102 branch rfcomm_rx_process_end -: 030104 parse_dlci0_reconn_uih_ms_cmd: -0x6b6c 030105 call get_rfcomm_param_modem_status -0x6b6d 030106 fetch 1 ,mem_ms_channel -0x6b6e 030107 fetcht 1 ,mem_remote_spp_channel -0x6b6f 030108 isub temp ,null -0x6b70 030109 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero -0x6b71 030110 branch assert -0x6b72 030111 branch rfcomm_rx_process_end -: 030112 parse_dlci0_reconn_uih_ms_cmd_spp: -0x6b73 030113 fetch 1 ,mem_spp_state -0x6b74 030114 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata -0x6b75 030115 set1 rfcomm_channel_state_snd_ms_res ,pdata -0x6b76 030116 store 1 ,mem_spp_state -0x6b77 030117 fetcht 1 ,mem_pn_dlci -0x6b78 030118 lshift2 temp ,temp -0x6b79 030119 or_into 3 ,temp -0x6b7a 030120 call rfcomm_send_modem_status_res -0x6b7b 030121 branch rfcomm_rx_process_end -: 030123 parse_dlci0_reconn_uih_ms_res: -0x6b7c 030124 call get_rfcomm_param_modem_status -0x6b7d 030125 fetch 1 ,mem_ms_channel -0x6b7e 030126 fetcht 1 ,mem_remote_spp_channel -0x6b7f 030127 isub temp ,null -0x6b80 030128 branch parse_dlci0_reconn_uih_ms_res_spp ,zero -0x6b81 030129 branch assert -: 030130 parse_dlci0_reconn_uih_ms_res_spp: -0x6b82 030131 fetch 1 ,mem_spp_state -0x6b83 030132 set1 rfcomm_channel_state_rcv_ms_res ,pdata -0x6b84 030133 store 1 ,mem_spp_state -0x6b85 030134 branch rfcomm_rx_process_end -: 030136 parse_uih_reconn: -0x6b86 030137 fetch 1 ,mem_current_channel -0x6b87 030138 fetcht 1 ,mem_remote_spp_channel -0x6b88 030139 isub temp ,null -0x6b89 030140 branch parse_uih_reconn_spp ,zero -0x6b8a 030141 branch assert -0x6b8b 030142 branch rfcomm_rx_process_end -: 030144 parse_uih_reconn_spp: -0x6b8c 030145 fetch 1 ,mem_current_frame_type -0x6b8d 030146 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua -0x6b8e 030147 beq rfcomm_frame_type_uih ,parse_uih_spp_uih -0x6b8f 030148 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits -0x6b90 030149 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn -: 030150 parse_uih_reconn_spp_ua: -0x6b91 030151 fetch 1 ,mem_spp_state -0x6b92 030152 set1 rfcomm_channel_state_ua ,pdata -0x6b93 030153 store 1 ,mem_spp_state -0x6b94 030154 branch rfcomm_rx_process_end -: 030155 parse_uih_reconn_spp_sabm: -0x6b95 030156 branch parse_uih_reconn_spp_sabm -: 030157 parse_uih_reconn_spp_disconn: -0x6b96 030158 branch parse_uih_rp_spp_disconn -: 030159 rfcomm_rx_process_end: -0x6b97 030160 rtn -: 030162 rfcomm_send_more_pkt: -0x6b98 030163 fetch 1 ,mem_rfcomm_send_more_pkt -0x6b99 030164 rtn blank -0x6b9a 030165 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp -0x6b9b 030166 branch assert -: 030168 rfcomm_send_more_pkt_msc_cmd_spp: -0x6b9c 030169 jam 0 ,mem_rfcomm_send_more_pkt -0x6b9d 030170 call l2cap_malloc_rfcomm_channel -0x6b9e 030171 arg spp_slave_channel ,temp -0x6b9f 030172 fetcht 1 ,mem_pn_dlci -0x6ba0 030173 lshift2 temp ,temp -: 030174 rfcomm_send_more_pkt_msc_cmd_spp0: -0x6ba1 030175 or_into 0x03 ,temp -0x6ba2 030176 arg 0xaa ,rega -0x6ba3 030177 call rfcomm_send_modem_status_cmd -0x6ba4 030178 call l2cap_get_rfcomm_tx_buff -0x6ba5 030179 copy contw ,contr -0x6ba6 030180 ifetch 2 ,contr -0x6ba7 030181 branch assert ,blank -0x6ba8 030182 rtn -: 030184 rfcomm_send_sabm: -0x6ba9 030185 call l2cap_get_rfcomm_tx_buff -0x6baa 030186 setarg 0x0004 -0x6bab 030187 istore 2 ,contw -0x6bac 030188 fetch 2 ,mem_rfcomm_remote_cid -0x6bad 030189 istore 2 ,contw -0x6bae 030190 fetch 1 ,mem_current_adss -0x6baf 030191 istore 1 ,contw -0x6bb0 030192 bpatchx patch35_2 ,mem_patch35 -0x6bb1 030193 setarg 0x013f -0x6bb2 030194 istore 2 ,contw -0x6bb3 030195 fetch 1 ,mem_current_fcs -0x6bb4 030196 istore 1 ,contw -0x6bb5 030197 rtn -: 030198 rfcomm_send_ua: -0x6bb6 030199 call l2cap_malloc_rfcomm_channel -0x6bb7 030200 call l2cap_get_rfcomm_tx_buff -0x6bb8 030201 setarg 0x0004 -0x6bb9 030202 istore 2 ,contw -0x6bba 030203 fetch 2 ,mem_rfcomm_remote_cid -0x6bbb 030204 istore 2 ,contw -0x6bbc 030205 fetch 1 ,mem_current_adss -0x6bbd 030206 istore 1 ,contw -0x6bbe 030207 bpatchx patch35_3 ,mem_patch35 -0x6bbf 030208 setarg 0x0173 -0x6bc0 030209 istore 2 ,contw -0x6bc1 030210 fetch 1 ,mem_current_fcs -0x6bc2 030211 istore 1 ,contw -0x6bc3 030212 rtn -: 030213 rfcomm_send_param_neg_cmd: -0x6bc4 030214 call l2cap_get_rfcomm_tx_buff -0x6bc5 030215 setarg 0x000e -0x6bc6 030216 istore 2 ,contw -0x6bc7 030217 fetch 2 ,mem_rfcomm_remote_cid -0x6bc8 030218 istore 2 ,contw -0x6bc9 030219 fetch 1 ,mem_rfcomm_initiator -0x6bca 030220 lshift pdata ,pdata -0x6bcb 030221 set1 0 ,pdata -0x6bcc 030222 istore 1 ,contw -0x6bcd 030223 bpatchx patch35_4 ,mem_patch35 -0x6bce 030224 setarg 0x15ef -0x6bcf 030225 istore 2 ,contw -0x6bd0 030226 setarg 0x1183 -0x6bd1 030227 istore 2 ,contw -0x6bd2 030228 copy temp ,pdata -0x6bd3 030229 istore 1 ,contw -0x6bd4 030230 setarg 0x0000f0 -0x6bd5 030231 istore 3 ,contw -0x6bd6 030232 setarg rfcomm_max_frame_size -0x6bd7 030233 istore 2 ,contw -0x6bd8 030234 setarg 0 -0x6bd9 030235 istore 1 ,contw -0x6bda 030236 setarg 0x01 -0x6bdb 030237 istore 1 ,contw -0x6bdc 030238 call rfcomm_calculate_fcs_dlci0 -0x6bdd 030239 istore 1 ,contw -0x6bde 030240 jam 0x10 ,mem_credit_given -0x6bdf 030241 rtn -: 030242 rfcomm_send_param_neg_res: -0x6be0 030243 call l2cap_malloc_rfcomm_channel -0x6be1 030244 call l2cap_get_rfcomm_tx_buff -0x6be2 030245 setarg 0x000e -0x6be3 030246 istore 2 ,contw -0x6be4 030247 fetch 2 ,mem_rfcomm_remote_cid -0x6be5 030248 istore 2 ,contw -0x6be6 030249 fetch 1 ,mem_rfcomm_initiator -0x6be7 030250 lshift pdata ,pdata -0x6be8 030251 set1 0 ,pdata -0x6be9 030252 istore 1 ,contw -0x6bea 030253 bpatchx patch35_5 ,mem_patch35 -0x6beb 030254 setarg 0x15ef -0x6bec 030255 istore 2 ,contw -0x6bed 030256 setarg 0x1181 -0x6bee 030257 istore 2 ,contw -0x6bef 030258 fetch 1 ,mem_pn_dlci -0x6bf0 030259 istore 1 ,contw -0x6bf1 030260 setarg 0x0000e0 -0x6bf2 030261 istore 3 ,contw -0x6bf3 030262 fetch 2 ,mem_rfcomm_max_frame_size -0x6bf4 030263 istore 2 ,contw -0x6bf5 030264 setarg 0x00 -0x6bf6 030265 istore 1 ,contw -0x6bf7 030266 fetch 1 ,mem_rfcomm_credit_init_data -0x6bf8 030267 istore 1 ,contw -0x6bf9 030268 call rfcomm_calculate_fcs_dlci0 -0x6bfa 030269 istore 1 ,contw -0x6bfb 030270 rtn -: 030271 rfcomm_send_modem_status_cmd: -0x6bfc 030272 call l2cap_get_rfcomm_tx_buff -0x6bfd 030273 setarg 0x0008 -0x6bfe 030274 istore 2 ,contw -0x6bff 030275 fetch 2 ,mem_rfcomm_remote_cid -0x6c00 030276 istore 2 ,contw -0x6c01 030277 fetch 1 ,mem_rfcomm_initiator -0x6c02 030278 lshift pdata ,pdata -0x6c03 030279 set1 0 ,pdata -0x6c04 030280 istore 1 ,contw -0x6c05 030281 bpatchx patch35_6 ,mem_patch35 -0x6c06 030282 setarg 0x09ef -0x6c07 030283 istore 2 ,contw -0x6c08 030284 setarg 0x05e3 -0x6c09 030285 istore 2 ,contw -0x6c0a 030286 copy temp ,pdata -0x6c0b 030287 istore 1 ,contw -0x6c0c 030288 setarg 0x8d -0x6c0d 030289 istore 1 ,contw -0x6c0e 030290 call rfcomm_calculate_fcs_dlci0 -0x6c0f 030291 istore 1 ,contw -0x6c10 030292 rtn -: 030294 rfcomm_send_modem_status_res: -0x6c11 030295 call l2cap_malloc_rfcomm_channel -0x6c12 030296 call l2cap_get_rfcomm_tx_buff -0x6c13 030297 setarg 0x0008 -0x6c14 030298 istore 2 ,contw -0x6c15 030299 fetch 2 ,mem_rfcomm_remote_cid -0x6c16 030300 istore 2 ,contw -0x6c17 030301 copy temp ,timeup -0x6c18 030302 fetch 1 ,mem_rfcomm_initiator -0x6c19 030303 lshift pdata ,pdata -0x6c1a 030304 set1 0 ,pdata -0x6c1b 030305 istore 1 ,contw -0x6c1c 030306 bpatchx patch35_7 ,mem_patch35 -0x6c1d 030307 setarg 0x09ef -0x6c1e 030308 istore 2 ,contw -0x6c1f 030309 setarg 0x05e1 -0x6c20 030310 istore 2 ,contw -0x6c21 030311 copy timeup ,pdata -0x6c22 030312 istore 1 ,contw -0x6c23 030313 setarg 0x8d -0x6c24 030314 istore 1 ,contw -0x6c25 030315 call rfcomm_calculate_fcs_dlci0 -0x6c26 030316 istore 1 ,contw -0x6c27 030317 rtn -: 030319 rfcomm_send_uih_without_payload: -0x6c28 030320 bpatchx patch36_0 ,mem_patch36 -0x6c29 030321 fetch 1 ,mem_credit_given -0x6c2a 030322 rtn blank -0x6c2b 030323 hfetch 2 ,core_uart_rxitems -0x6c2c 030324 nrtn blank -0x6c2d 030325 copy rega ,pdata -0x6c2e 030326 store 1 ,mem_pdatatemp + 1 -0x6c2f 030327 storet 1 ,mem_pdatatemp -0x6c30 030328 call l2cap_malloc_is_fifo_full -0x6c31 030329 nrtn blank -0x6c32 030330 call l2cap_malloc_rfcomm_channel -0x6c33 030331 call l2cap_get_rfcomm_tx_buff -0x6c34 030332 setarg 0x05 -0x6c35 030333 istore 2 ,contw -0x6c36 030334 fetch 2 ,mem_rfcomm_remote_cid -0x6c37 030335 istore 2 ,contw -0x6c38 030336 fetch 1 ,mem_rfcomm_send_adss -0x6c39 030337 istore 1 ,contw -0x6c3a 030338 setarg 0x01ff -0x6c3b 030339 istore 2 ,contw -0x6c3c 030340 fetch 1 ,mem_credit_given -0x6c3d 030341 istore 1 ,contw -0x6c3e 030342 fetch 1 ,mem_hiufcs_spp_wcredits -0x6c3f 030343 istore 1 ,contw -0x6c40 030344 jam 0 ,mem_credit_given -0x6c41 030345 rtn -: 030347 rfcomm_increase_credit_given: -0x6c42 030348 bpatchx patch36_1 ,mem_patch36 -0x6c43 030349 fetch 1 ,mem_credit_flag -0x6c44 030350 rtneq credit_enable -0x6c45 030351 fetch 2 ,mem_current_length -0x6c46 030352 rtn blank -0x6c47 030353 fetch 1 ,mem_credit_given -0x6c48 030354 increase 1 ,pdata -0x6c49 030355 store 1 ,mem_credit_given -0x6c4a 030356 rtn -: 030358 spp_process_rx_data: -0x6c4b 030359 fetch 2 ,mem_cb_receive_spp_data -0x6c4c 030360 branch callback_func -: 030362 spp_tx_rfcomm_packet: -0x6c4d 030363 bpatchx patch36_2 ,mem_patch36 -0x6c4e 030365 fetch 1 ,mem_remote_credits -0x6c4f 030366 rtn blank -0x6c50 030367 increase -1 ,pdata -0x6c51 030368 store 1 ,mem_remote_credits -0x6c52 030369 fetch 2 ,mem_pn_max_frame_size -0x6c53 030370 fetcht 2 ,mem_current_packet_length -0x6c54 030371 isub temp ,null -0x6c55 030372 branch ssp_tx_rfcomm_from_uart ,positive -0x6c56 030373 store 2 ,mem_current_packet_length -: 030374 ssp_tx_rfcomm_from_uart: -0x6c57 030375 fetch 1 ,mem_credit_given -0x6c58 030376 branch ssp_tx_rfcomm_from_uart_without_credit ,blank -0x6c59 030377 jam 1 ,mem_rfcomm_send_offset -0x6c5a 030378 fetch 1 ,mem_hiufcs_spp_wcredits -0x6c5b 030379 store 1 ,mem_rfcomm_send_fcs -0x6c5c 030380 setarg rsp_rx_uih_wdata -0x6c5d 030381 store 1 ,mem_rfcomm_send_frame_type -0x6c5e 030382 branch ssp_tx_rfcomm_from_uart_common -: 030383 ssp_tx_rfcomm_from_uart_without_credit: -0x6c5f 030384 jam 0 ,mem_rfcomm_send_offset -0x6c60 030385 fetch 1 ,mem_hiufcs_spp -0x6c61 030386 store 1 ,mem_rfcomm_send_fcs -0x6c62 030387 setarg rsp_tx_uih -0x6c63 030388 store 1 ,mem_rfcomm_send_frame_type -: 030389 ssp_tx_rfcomm_from_uart_common: -0x6c64 030390 bpatchx patch36_3 ,mem_patch36 -0x6c65 030391 fetch 2 ,mem_current_packet_length -0x6c66 030392 sub pdata ,127 ,null -0x6c67 030393 branch ssp_tx_rfcomm_from_uart_common0 ,positive -0x6c68 030394 fetch 1 ,mem_rfcomm_send_offset -0x6c69 030395 increase 1 ,pdata -0x6c6a 030396 store 1 ,mem_rfcomm_send_offset -: 030397 ssp_tx_rfcomm_from_uart_common0: -0x6c6b 030398 call get_rfcomm_snd_adss -0x6c6c 030399 fetch 2 ,mem_current_packet_length -0x6c6d 030400 increase 8 ,pdata -0x6c6e 030401 fetcht 1 ,mem_rfcomm_send_offset -0x6c6f 030402 iadd temp ,rega -0x6c70 030404 call l2cap_malloc -0x6c71 030405 store 2 ,mem_rfcomm_tx_buff_ptr -0x6c72 030406 increase 4 ,pdata -0x6c73 030407 store 2 ,mem_rfcomm_tx_payload_ptr -0x6c74 030408 copy pdata ,contw -0x6c75 030409 fetch 1 ,mem_rfcomm_send_adss -0x6c76 030410 istore 1 ,contw -0x6c77 030411 fetch 1 ,mem_rfcomm_send_frame_type -0x6c78 030412 istore 1 ,contw -0x6c79 030413 call ssp_tx_write_length -0x6c7a 030414 call ssp_tx_write_given_credit -0x6c7b 030415 bpatchx patch36_4 ,mem_patch36 -0x6c7c 030416 fetch 2 ,mem_nl_rx_data_src -0x6c7d 030417 copy pdata ,contru -0x6c7e 030418 fetch 2 ,mem_current_packet_length -0x6c7f 030419 copy pdata ,loopcnt -0x6c80 030420 call uart_copy_rx_bytes_fast -0x6c81 030421 copy contw ,temp -0x6c82 030422 copy contru ,pdata -0x6c83 030423 store 2 ,mem_nl_rx_data_src -0x6c84 030424 copy temp ,contw -0x6c85 030425 fetch 1 ,mem_rfcomm_send_fcs -0x6c86 030426 istore 1 ,contw -0x6c87 030427 fetch 2 ,mem_rfcomm_tx_buff_ptr -0x6c88 030428 copy pdata ,contw -0x6c89 030429 fetch 2 ,mem_current_packet_length -0x6c8a 030430 fetcht 1 ,mem_rfcomm_send_offset -0x6c8b 030431 iadd temp ,pdata -0x6c8c 030432 increase 4 ,pdata -0x6c8d 030433 istore 2 ,contw -0x6c8e 030434 fetch 2 ,mem_rfcomm_remote_cid -0x6c8f 030435 istore 2 ,contw -0x6c90 030436 jam 0 ,mem_credit_given -0x6c91 030437 fetch 2 ,mem_nl_rx_len_all -0x6c92 030438 beq 0 ,module_hci_command_tx_spp_tx_complete -0x6c93 030439 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x6c94 030440 rtn -: 030442 ssp_tx_write_length: -0x6c95 030443 bpatchx patch36_5 ,mem_patch36 -0x6c96 030444 fetch 2 ,mem_current_packet_length -0x6c97 030445 sub pdata ,0x7f ,null -0x6c98 030446 nbranch ssp_tx_write_long_packet ,positive -0x6c99 030447 lshift pdata ,pdata -0x6c9a 030448 set1 0 ,pdata -0x6c9b 030449 istore 1 ,contw -0x6c9c 030450 rtn -: 030451 ssp_tx_write_long_packet: -0x6c9d 030452 fetch 2 ,mem_current_packet_length -0x6c9e 030453 rshift3 pdata ,pdata -0x6c9f 030454 rshift4 pdata ,temp -0x6ca0 030455 and_into 0x7f ,pdata -0x6ca1 030456 lshift pdata ,pdata -0x6ca2 030457 set0 0 ,pdata -0x6ca3 030458 istore 1 ,contw -0x6ca4 030459 istoret 1 ,contw -0x6ca5 030460 rtn -: 030461 ssp_tx_write_given_credit: -0x6ca6 030462 fetch 1 ,mem_credit_given -0x6ca7 030463 rtn blank -0x6ca8 030464 istore 1 ,contw -0x6ca9 030465 rtn -: 030470 scheduler_process: -0x6caa 030471 bpatchx patch36_6 ,mem_patch36 -0x6cab 030472 call check_51cmd -0x6cac 030473 call app_process_bb_event -0x6cad 030474 call process_conn_sm -0x6cae 030476 bpatchx patch36_7 ,mem_patch36 -0x6caf 030477 call sp_calc_sequence -0x6cb0 030478 call simple_pairing_sequence -0x6cb1 030479 call master_simple_paring_sequence -0x6cb2 030482 call l2cap_malloc_is_fifo_full -0x6cb3 030483 nrtn blank -0x6cb4 030485 call l2cap_call_proc_sigal_pending -0x6cb5 030486 call l2cap_malloc_is_fifo_full -0x6cb6 030487 nrtn blank -0x6cb7 030488 bpatchx patch37_0 ,mem_patch37 -0x6cb8 030490 call process_upper_sm -0x6cb9 030491 call l2cap_send_config_req -0x6cba 030492 call rfcomm_send_more_pkt -: 030493 scheduler_process0: -0x6cbb 030494 call scheduler_tx_disconnect_hid -0x6cbc 030495 bpatchx patch37_1 ,mem_patch37 -0x6cbd 030498 branch app_process_bt -: 030500 scheduler_tx_disconnect_hid: -0x6cbe 030501 fetch 1 ,mem_control_tasks -0x6cbf 030502 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req -0x6cc0 030503 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req -0x6cc1 030504 rtn -: 030506 scheduler_tx_l2cap_pkt: -0x6cc2 030507 bpatchx patch37_2 ,mem_patch37 -0x6cc3 030508 call l2cap_malloc_is_fifo_empty -0x6cc4 030509 rtn blank -0x6cc5 030510 fetch 1 ,mem_op -0x6cc6 030511 rtnbit1 op_txl2cap -0x6cc7 030512 call l2cap_malloc_fifo_out -0x6cc8 030513 store 2 ,mem_txptr -0x6cc9 030514 copy pdata ,contr -0x6cca 030515 ifetch 2 ,contr -0x6ccb 030516 increase 4 ,pdata -0x6ccc 030517 store 2 ,mem_tx_len -0x6ccd 030518 jam 6 ,mem_tx_lch -0x6cce 030519 bpatchx patch37_3 ,mem_patch37 -0x6ccf 030520 fetch 2 ,mem_l2cap_tx_multi_offset -0x6cd0 030521 branch scheduler_tx_l2cap_start_pkt ,blank -0x6cd1 030522 fetch 1 ,mem_op -0x6cd2 030523 rtnbit0 op_pkt_comp -0x6cd3 030524 set0 op_pkt_comp ,pdata -0x6cd4 030525 store 1 ,mem_op -0x6cd5 030526 jam 5 ,mem_tx_lch -0x6cd6 030527 fetcht 2 ,mem_l2cap_tx_multi_offset -0x6cd7 030528 fetch 2 ,mem_txptr -0x6cd8 030529 iadd temp ,pdata -0x6cd9 030530 store 2 ,mem_txptr -0x6cda 030531 fetch 2 ,mem_tx_len -0x6cdb 030532 isub temp ,pdata -0x6cdc 030533 store 2 ,mem_tx_len -: 030534 scheduler_tx_l2cap_start_pkt: -0x6cdd 030535 bpatchx patch37_4 ,mem_patch37 -0x6cde 030536 fetch 2 ,mem_tx_len -0x6cdf 030537 branch assert ,blank -0x6ce0 030538 arg l2cap_max_pkt_len ,temp -0x6ce1 030539 isub temp ,pdata -0x6ce2 030540 nbranch scheduler_tx_l2cap_last_pkt ,positive -0x6ce3 030541 bpatchx patch37_5 ,mem_patch37 -0x6ce4 030542 storet 2 ,mem_tx_len -0x6ce5 030543 fetch 2 ,mem_l2cap_tx_multi_offset -0x6ce6 030544 iadd temp ,pdata -0x6ce7 030545 store 2 ,mem_l2cap_tx_multi_offset -0x6ce8 030546 branch scheduler_tx_l2cap_pkt_end -: 030547 scheduler_tx_l2cap_last_pkt: -0x6ce9 030548 setarg 0 -0x6cea 030549 store 2 ,mem_l2cap_tx_multi_offset -: 030550 scheduler_tx_l2cap_pkt_end: -0x6ceb 030551 fetch 1 ,mem_op -0x6cec 030552 set1 op_txl2cap ,pdata -0x6ced 030553 store 1 ,mem_op -0x6cee 030554 rtn -: 030556 scheduler_start_upper_sm: -0x6cef 030557 fetch 1 ,mem_ui_profile_supported -0x6cf0 030558 bbit1 support_hid ,scheduler_start_upper_sm_hid -0x6cf1 030559 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn -0x6cf2 030560 rtn -: 030561 scheduler_start_upper_sm_hid: -0x6cf3 030562 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn -0x6cf4 030563 rtn -: 030565 process_upper_sm: -0x6cf5 030566 fetch 1 ,memui_reconnect_mode -0x6cf6 030567 nbranch process_upper_sm_reconn ,blank -: 030568 process_upper_sm_remote_page: -0x6cf7 030569 fetch 1 ,mem_upper_sm_remote_page -0x6cf8 030571 rtn blank -0x6cf9 030573 jam 0 ,mem_upper_sm_remote_page -: 030574 process_upper_sm_rp_wait: -0x6cfa 030575 rtn -: 030578 process_upper_sm_reconn: -0x6cfb 030579 bpatchx patch37_6 ,mem_patch37 -0x6cfc 030580 fetch 1 ,mem_upper_sm_reconn -0x6cfd 030581 rtn blank -0x6cfe 030582 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn -0x6cff 030583 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait -0x6d00 030584 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg -0x6d01 030585 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait -0x6d02 030586 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp -0x6d03 030587 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait -0x6d04 030588 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn -0x6d05 030589 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait -0x6d06 030590 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn -0x6d07 030591 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait -0x6d08 030592 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg -0x6d09 030593 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait -0x6d0a 030594 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn -0x6d0b 030595 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait -0x6d0c 030596 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg -0x6d0d 030597 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait -0x6d0e 030598 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn -0x6d0f 030599 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait -0x6d10 030600 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg -0x6d11 030601 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait -0x6d12 030602 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm -0x6d13 030603 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait -0x6d14 030604 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn -0x6d15 030605 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait -0x6d16 030606 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm -0x6d17 030607 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait -0x6d18 030608 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms -0x6d19 030609 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait -: 030610 process_upper_sm_reconn_wait: -0x6d1a 030611 rtn -: 030612 process_upper_sm_reconn_sdp_conn: -0x6d1b 030613 call upper_sm_send_sdp_conn -0x6d1c 030614 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn -0x6d1d 030615 fetch 1 ,mem_sdp_state -0x6d1e 030616 set1 l2cap_channel_state_conn_req ,pdata -0x6d1f 030617 store 1 ,mem_sdp_state -0x6d20 030618 rtn -: 030619 process_upper_sm_reconn_sdp_cfg: -0x6d21 030620 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn -0x6d22 030621 fetch 1 ,mem_sdp_state -0x6d23 030622 rtnbit1 l2cap_channel_state_snd_cfg_req -0x6d24 030623 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn -0x6d25 030624 call upper_sm_send_sdp_cfg -0x6d26 030625 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn -0x6d27 030626 fetch 1 ,mem_sdp_state -0x6d28 030627 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d29 030628 store 1 ,mem_sdp_state -0x6d2a 030629 rtn -: 030630 process_upper_sm_reconn_ss_spp: -0x6d2b 030631 call l2cap_malloc_is_fifo_empty -0x6d2c 030632 nrtn blank -0x6d2d 030633 call upper_sm_send_ss_spp -0x6d2e 030634 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn -0x6d2f 030635 rtn -: 030636 process_upper_sm_reconn_sdp_disconn: -0x6d30 030637 call upper_sm_send_sdp_disconn -0x6d31 030638 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn -0x6d32 030639 rtn -: 030640 process_upper_sm_reconn_hid_ctrl_conn: -0x6d33 030641 call upper_sm_send_hid_ctrl_conn -0x6d34 030642 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn -0x6d35 030643 fetch 1 ,mem_hid_control_state -0x6d36 030644 set1 l2cap_channel_state_conn_req ,pdata -0x6d37 030645 store 1 ,mem_hid_control_state -0x6d38 030646 rtn -: 030647 process_upper_sm_reconn_hid_ctrl_cfg: -0x6d39 030648 call upper_sm_send_hid_ctrl_cfg -0x6d3a 030649 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn -0x6d3b 030650 fetch 1 ,mem_hid_control_state -0x6d3c 030651 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d3d 030652 store 1 ,mem_hid_control_state -0x6d3e 030653 rtn -: 030654 process_upper_sm_reconn_hid_int_conn: -0x6d3f 030655 call upper_sm_send_hid_int_conn -0x6d40 030656 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn -0x6d41 030657 fetch 1 ,mem_hid_interrupt_state -0x6d42 030658 set1 l2cap_channel_state_conn_req ,pdata -0x6d43 030659 store 1 ,mem_hid_interrupt_state -0x6d44 030660 rtn -: 030661 process_upper_sm_reconn_hid_int_cfg: -0x6d45 030662 call upper_sm_send_hid_int_cfg -0x6d46 030663 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn -0x6d47 030664 fetch 1 ,mem_hid_interrupt_state -0x6d48 030665 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d49 030666 store 1 ,mem_hid_interrupt_state -0x6d4a 030667 rtn -: 030668 process_upper_sm_reconn_rfcomm_conn: -0x6d4b 030669 call upper_sm_send_rfcomm_conn -0x6d4c 030670 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn -0x6d4d 030671 fetch 1 ,mem_rfcomm_state -0x6d4e 030672 set1 l2cap_channel_state_conn_req ,pdata -0x6d4f 030673 store 1 ,mem_rfcomm_state -0x6d50 030674 rtn -: 030675 process_upper_sm_reconn_rfcomm_cfg: -0x6d51 030676 call upper_sm_send_rfcomm_cfg -0x6d52 030677 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn -0x6d53 030678 fetch 1 ,mem_rfcomm_state -0x6d54 030679 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d55 030680 store 1 ,mem_rfcomm_state -0x6d56 030681 rtn -: 030682 process_upper_sm_reconn_rfcomm_sabm: -0x6d57 030683 call upper_sm_send_rfcomm_sabm -0x6d58 030684 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn -0x6d59 030685 fetch 1 ,mem_rfcomm_state -0x6d5a 030686 set1 l2cap_channel_rfcomm_only_sabm ,pdata -0x6d5b 030687 store 1 ,mem_rfcomm_state -0x6d5c 030688 rtn -: 030689 process_upper_sm_reconn_spp_cmd_pn: -0x6d5d 030690 call upper_sm_send_spp_cmd_pn -0x6d5e 030691 fetch 1 ,mem_spp_state -0x6d5f 030692 set1 rfcomm_channel_state_pn_cmd -0x6d60 030693 store 1 ,mem_spp_state -0x6d61 030694 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn -0x6d62 030695 rtn -: 030696 process_upper_sm_reconn_spp_sabm: -0x6d63 030697 call upper_sm_send_spp_sabm -0x6d64 030698 fetch 1 ,mem_spp_state -0x6d65 030699 set1 rfcomm_channel_state_sabm -0x6d66 030700 store 1 ,mem_spp_state -0x6d67 030701 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn -0x6d68 030702 fetch 1 ,mem_remote_spp_channel -0x6d69 030703 lshift3 pdata ,pdata -0x6d6a 030704 or_into 3 ,pdata -0x6d6b 030705 arg mem_hiufcs_spp ,temp -0x6d6c 030706 storet 2 ,mem_contw_temp -0x6d6d 030707 branch rfcomm_save_fcs_uih -: 030708 process_upper_sm_reconn_spp_cmd_ms: -0x6d6e 030709 call upper_sm_send_spp_cmd_ms -0x6d6f 030710 fetch 1 ,mem_spp_state -0x6d70 030711 set1 rfcomm_channel_state_snd_ms_cmd -0x6d71 030712 store 1 ,mem_spp_state -0x6d72 030713 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn -0x6d73 030714 rtn -: 030716 process_upper_sm_reconn_sdp_conn_wait: -0x6d74 030717 fetch 1 ,mem_sdp_state -0x6d75 030718 rtnbit0 l2cap_channel_state_conn_res -0x6d76 030719 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn -0x6d77 030720 branch process_upper_sm_reconn -: 030721 process_upper_sm_reconn_sdp_cfg_wait: -0x6d78 030722 fetch 1 ,mem_sdp_state -0x6d79 030723 rtnne l2cap_channel_setup_complete -0x6d7a 030724 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn -: 030725 process_upper_sm_reconn_ss_spp_wait: -0x6d7b 030726 fetch 1 ,mem_message_to_uppersm -0x6d7c 030727 rtnne recieve_ss_reasult_hf -0x6d7d 030728 jam 0 ,mem_message_to_uppersm -0x6d7e 030729 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn -0x6d7f 030730 branch process_upper_sm_reconn -: 030731 process_upper_sm_reconn_sdp_disconn_wait: -0x6d80 030732 fetch 1 ,mem_sdp_state -0x6d81 030733 nrtn blank -0x6d82 030734 fetch 1 ,mem_ui_profile_supported -0x6d83 030735 bbit1 support_hid ,process_upper_sm_reconn_setup_hid -0x6d84 030736 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm -0x6d85 030737 branch process_upper_sm_reconn_termination -: 030738 process_upper_sm_reconn_hid_ctrl_conn_wait: -0x6d86 030739 fetch 1 ,mem_hid_control_state -0x6d87 030740 rtnbit0 l2cap_channel_state_conn_res -0x6d88 030741 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn -0x6d89 030742 branch process_upper_sm_reconn -: 030743 process_upper_sm_reconn_hid_ctrl_cfg_wait: -0x6d8a 030744 fetch 1 ,mem_hid_control_state -0x6d8b 030745 rtnne l2cap_channel_setup_complete -0x6d8c 030746 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn -0x6d8d 030747 branch process_upper_sm_reconn -: 030748 process_upper_sm_reconn_hid_int_conn_wait: -0x6d8e 030749 fetch 1 ,mem_hid_interrupt_state -0x6d8f 030750 rtnbit0 l2cap_channel_state_conn_res -0x6d90 030751 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn -0x6d91 030752 branch process_upper_sm_reconn -: 030753 process_upper_sm_reconn_hid_int_cfg_wait: -0x6d92 030754 fetch 1 ,mem_hid_interrupt_state -0x6d93 030755 rtnne l2cap_channel_setup_complete -0x6d94 030756 fetch 1 ,mem_ui_profile_supported -0x6d95 030757 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm -0x6d96 030758 branch process_upper_sm_reconn_termination -: 030759 process_upper_sm_reconn_rfcomm_conn_wait: -0x6d97 030760 fetch 1 ,mem_rfcomm_state -0x6d98 030761 rtnbit0 l2cap_channel_state_conn_res -0x6d99 030762 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn -0x6d9a 030763 branch process_upper_sm_reconn -: 030764 process_upper_sm_reconn_rfcomm_cfg_wait: -0x6d9b 030765 fetch 1 ,mem_rfcomm_state -0x6d9c 030766 rtnne l2cap_channel_setup_complete -0x6d9d 030767 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn -0x6d9e 030768 branch process_upper_sm_reconn -: 030769 process_upper_sm_reconn_rfcomm_sabm_wait: -0x6d9f 030770 fetch 1 ,mem_rfcomm_state -0x6da0 030771 rtnne l2cap_channel_rfcomm_dlci0_opened -0x6da1 030772 fetch 1 ,mem_ui_profile_supported -0x6da2 030773 bbit1 support_spp ,process_upper_sm_reconn_setup_spp -0x6da3 030774 branch process_upper_sm_reconn_termination -: 030775 process_upper_sm_reconn_spp_cmd_pn_wait: -0x6da4 030776 fetch 1 ,mem_spp_state -0x6da5 030777 rtnbit0 rfcomm_channel_state_pn_res -0x6da6 030778 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn -0x6da7 030779 branch process_upper_sm_reconn -: 030780 process_upper_sm_reconn_spp_sabm_wait: -0x6da8 030781 fetch 1 ,mem_spp_state -0x6da9 030782 rtnbit0 rfcomm_channel_state_ua -0x6daa 030783 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn -0x6dab 030784 branch process_upper_sm_reconn -: 030785 process_upper_sm_reconn_spp_cmd_ms_wait: -0x6dac 030786 fetch 1 ,mem_spp_state -0x6dad 030787 rtnne rfcomm_channel_setup_complete -0x6dae 030788 branch process_upper_sm_reconn_termination -: 030790 process_upper_sm_reconn_setup_hid: -0x6daf 030791 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn -0x6db0 030792 branch process_upper_sm_reconn -: 030794 process_upper_sm_reconn_setup_rfcomm: -0x6db1 030795 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn -0x6db2 030796 branch process_upper_sm_reconn -: 030797 process_upper_sm_reconn_setup_spp: -0x6db3 030798 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn -0x6db4 030799 branch process_upper_sm_reconn -: 030803 process_upper_sm_reconn_termination: -0x6db5 030804 jam 0 ,mem_upper_sm_reconn -0x6db6 030805 rtn -: 030806 upper_sm_send_sdp_conn: -0x6db7 030807 bpatchx patch37_7 ,mem_patch37 -0x6db8 030808 call l2cap_malloc_signal_channel -0x6db9 030809 setarg psm_sdp -0x6dba 030810 copy pdata ,temp -0x6dbb 030811 setarg l2cap_sdp_channel -0x6dbc 030812 copy pdata ,timeup -0x6dbd 030813 branch ml2cap_send_signal_connect_req -: 030815 upper_sm_send_sdp_cfg: -0x6dbe 030816 bpatchx patch38_0 ,mem_patch38 -0x6dbf 030817 call l2cap_malloc_signal_channel -0x6dc0 030818 fetch 2 ,mem_sdp_remote_cid -0x6dc1 030819 copy pdata ,temp -0x6dc2 030820 branch ml2cap_send_signal_config_req -: 030822 upper_sm_send_sdp_disconn: -0x6dc3 030823 bpatchx patch38_1 ,mem_patch38 -0x6dc4 030824 call l2cap_malloc_signal_channel -0x6dc5 030825 fetch 2 ,mem_sdp_remote_cid -0x6dc6 030826 copy pdata ,temp -0x6dc7 030827 arg l2cap_sdp_channel ,timeup -0x6dc8 030828 call ml2cap_send_signal_disconn_req -0x6dc9 030829 fetch 1 ,mem_sdp_state -0x6dca 030830 set0 l2cap_channel_state_rcv_cfg_res ,pdata -0x6dcb 030831 store 1 ,mem_sdp_state -0x6dcc 030832 rtn -: 030834 upper_sm_send_ss_spp: -0x6dcd 030835 bpatchx patch38_2 ,mem_patch38 -0x6dce 030836 call l2cap_malloc_sdp_channel -0x6dcf 030837 call sdp_send_spp_request -0x6dd0 030838 branch msdp_send_req_done -: 030840 upper_sm_send_rfcomm_conn: -0x6dd1 030841 bpatchx patch38_3 ,mem_patch38 -0x6dd2 030842 call l2cap_malloc_signal_channel -0x6dd3 030843 setarg psm_rfcomm -0x6dd4 030844 copy pdata ,temp -0x6dd5 030845 setarg l2cap_rfcomm_channel -0x6dd6 030846 copy pdata ,timeup -0x6dd7 030847 branch ml2cap_send_signal_connect_req -: 030849 upper_sm_send_rfcomm_cfg: -0x6dd8 030850 bpatchx patch38_4 ,mem_patch38 -0x6dd9 030851 call l2cap_malloc_signal_channel -0x6dda 030852 fetch 2 ,mem_rfcomm_remote_cid -0x6ddb 030853 copy pdata ,temp -0x6ddc 030854 branch ml2cap_send_signal_config_req -: 030856 upper_sm_send_hid_ctrl_conn: -0x6ddd 030857 bpatchx patch38_5 ,mem_patch38 -0x6dde 030858 call l2cap_malloc_signal_channel -0x6ddf 030859 setarg psm_hid_control -0x6de0 030860 copy pdata ,temp -0x6de1 030861 setarg l2cap_hid_control_channel -0x6de2 030862 copy pdata ,timeup -0x6de3 030863 branch ml2cap_send_signal_connect_req -: 030865 upper_sm_send_hid_ctrl_cfg: -0x6de4 030866 bpatchx patch38_6 ,mem_patch38 -0x6de5 030867 call l2cap_malloc_signal_channel -0x6de6 030868 fetch 2 ,mem_hid_ctrl_remote_cid -0x6de7 030869 copy pdata ,temp -0x6de8 030870 branch ml2cap_send_signal_config_req -: 030872 upper_sm_send_hid_int_conn: -0x6de9 030873 bpatchx patch38_7 ,mem_patch38 -0x6dea 030874 call l2cap_malloc_signal_channel -0x6deb 030875 setarg psm_hid_interrupt -0x6dec 030876 copy pdata ,temp -0x6ded 030877 setarg l2cap_hid_interrupt_channel -0x6dee 030878 copy pdata ,timeup -0x6def 030879 branch ml2cap_send_signal_connect_req -: 030881 upper_sm_send_hid_int_cfg: -0x6df0 030882 bpatchx patch39_0 ,mem_patch39 -0x6df1 030883 call l2cap_malloc_signal_channel -0x6df2 030884 fetch 2 ,mem_hid_int_remote_cid -0x6df3 030885 copy pdata ,temp -0x6df4 030886 branch ml2cap_send_signal_config_req -: 030888 upper_sm_send_rfcomm_sabm: -0x6df5 030889 bpatchx patch39_1 ,mem_patch39 -0x6df6 030890 call l2cap_malloc_rfcomm_channel -0x6df7 030892 jam 3 ,mem_current_adss -0x6df8 030893 jam 0x1c ,mem_current_fcs -0x6df9 030894 call rfcomm_send_sabm -0x6dfa 030895 jam 1 ,mem_rfcomm_initiator -0x6dfb 030896 rtn -: 030898 upper_sm_send_spp_cmd_pn: -0x6dfc 030899 bpatchx patch39_2 ,mem_patch39 -0x6dfd 030900 call l2cap_malloc_rfcomm_channel -0x6dfe 030901 fetcht 1 ,mem_remote_spp_channel -0x6dff 030902 call channel_to_dlci -0x6e00 030903 storet 1 ,mem_pn_dlci -0x6e01 030904 branch rfcomm_send_param_neg_cmd -: 030906 upper_sm_send_spp_sabm: -0x6e02 030907 bpatchx patch39_3 ,mem_patch39 -0x6e03 030908 call l2cap_malloc_rfcomm_channel -0x6e04 030909 fetcht 1 ,mem_pn_dlci -0x6e05 030910 call dlci_to_address_cmd -0x6e06 030911 call rfcomm_calculate_fcs_sabm -0x6e07 030912 store 1 ,mem_current_fcs -0x6e08 030913 fetcht 1 ,mem_pn_dlci -0x6e09 030914 call dlci_to_address_cmd -0x6e0a 030915 storet 1 ,mem_current_adss -0x6e0b 030916 branch rfcomm_send_sabm -: 030918 upper_sm_send_spp_cmd_ms: -0x6e0c 030919 bpatchx patch39_4 ,mem_patch39 -0x6e0d 030920 call l2cap_malloc_rfcomm_channel -0x6e0e 030921 fetcht 1 ,mem_pn_dlci -0x6e0f 030922 call dlci_to_address_cmd -0x6e10 030923 branch rfcomm_send_modem_status_cmd -: 030936 sdp_process: -0x6e11 030937 bpatchx patch39_5 ,mem_patch39 -0x6e12 030938 fetch 2 ,mem_l2cap_payload_ptr -0x6e13 030939 iforce contr -0x6e14 030942 ifetch 1 ,contr -0x6e15 030943 copy pdata ,regb -0x6e16 030944 store 1 ,mem_sdp_pduid -0x6e17 030945 ifetch 2 ,contr -0x6e18 030946 store 2 ,mem_sdp_transactionid -0x6e19 030947 ifetch 1 ,contr -0x6e1a 030948 lshift8 pdata ,timeup -0x6e1b 030949 ifetch 1 ,contr -0x6e1c 030950 iadd timeup ,timeup -0x6e1d 030951 bpatchx patch39_6 ,mem_patch39 -0x6e1e 030952 copy contr ,temp -0x6e1f 030953 arg 4 ,loopcnt -0x6e20 030954 arg mem_sdp_handle_list ,contw -0x6e21 030955 call memset0 -0x6e22 030956 copy temp ,contr -0x6e23 030957 deposit regb -0x6e24 030958 beq sdp_error_res ,sdp_process_error_res -0x6e25 030959 beq sdp_search_req ,sdp_process_ss_req -0x6e26 030960 beq sdp_search_res ,sdp_process_ss_res -0x6e27 030961 beq sdp_attribute_req ,sdp_process_sa_req -0x6e28 030962 beq sdp_attribute_res ,sdp_process_sa_res -0x6e29 030963 beq sdp_searchattrib_req ,sdp_process_ssa_req -0x6e2a 030964 beq sdp_searchattrib_res ,sdp_process_ssa_res -0x6e2b 030965 branch sdp_insufficient_resource -: 030976 sdp_process_ss_req: -0x6e2c 030977 bpatchx patch39_7 ,mem_patch39 -0x6e2d 030978 call ask_serviceclassid -0x6e2e 030979 compare 1 ,temp ,0xff -0x6e2f 030980 branch ss_empty_rsp ,true -0x6e30 030981 compare 0xff ,temp ,0xff -0x6e31 030982 branch sdp_invalid_request_syntax ,true -0x6e32 030984 ifetch 2 ,contr -0x6e33 030985 store 2 ,mem_sdp_record_maxcnt -0x6e34 030986 increase -2 ,timeup -0x6e35 030988 increase -1 ,timeup -0x6e36 030989 nbranch sdp_invalid_pdu_size ,zero -0x6e37 030990 arg mem_sdp_uuid_search_ptr ,timeup -0x6e38 030991 ifetch 2 ,timeup -0x6e39 030992 rtn blank -0x6e3a 030993 call search_all_uuid -0x6e3b 030994 call l2cap_get_sdp_tx_payload -0x6e3c 030995 force 3 ,pdata -0x6e3d 030996 istore 1 ,contw -0x6e3e 030997 fetch 2 ,mem_sdp_transactionid -0x6e3f 030998 istore 2 ,contw -0x6e40 030999 lshift2 queue ,pdata -0x6e41 031000 add pdata ,5 ,pdata -0x6e42 031001 add pdata ,5 ,regc -0x6e43 031002 byteswap pdata ,pdata -0x6e44 031003 istore 2 ,contw -0x6e45 031004 deposit queue -0x6e46 031005 byteswap pdata ,pdata -0x6e47 031006 istore 2 ,contw -0x6e48 031007 istore 2 ,contw -0x6e49 031008 arg mem_sdp_handle_list ,contr -0x6e4a 031009 copy queue ,loopcnt -0x6e4b 031010 branch ss_req_blank ,zero -: 031011 ss_req_loop: -0x6e4c 031012 ifetch 4 ,contr -0x6e4d 031013 istore 4 ,contw -0x6e4e 031014 loop ss_req_loop -: 031015 ss_req_blank: -0x6e4f 031016 force 0 ,pdata -0x6e50 031017 istore 1 ,contw -0x6e51 031018 deposit regc -0x6e52 031019 store 2 ,mem_sdp_tx_pkt_length -0x6e53 031021 rtn -: 031032 sdp_process_sa_req: -0x6e54 031033 bpatchx patch3a_0 ,mem_patch3a -0x6e55 031034 ifetch 4 ,contr -0x6e56 031035 store 4 ,mem_sdp_record_handle -0x6e57 031036 increase -4 ,timeup -0x6e58 031037 call sdp_store_maxbyte -0x6e59 031038 store 2 ,mem_sdp_attribute_maxbyte -0x6e5a 031039 increase -2 ,timeup -0x6e5b 031040 call dataelementtype6 -0x6e5c 031041 branch sdp_invalid_request_syntax ,zero -0x6e5d 031042 compare 5 ,rega ,0xff -0x6e5e 031044 branch sa_judge_wholerange ,true -: 031045 sa_isnot_wholerange: -0x6e5f 031046 arg mem_sdp_attrib_list ,contw -0x6e60 031047 force 0 ,queue -0x6e61 031048 branch sa_req_loop -: 031049 sa_judge_wholerange: -0x6e62 031050 ifetch 1 ,contr -0x6e63 031051 bne sdp_attribute_range ,sdp_invalid_request_syntax -0x6e64 031052 ifetch 2 ,contr -0x6e65 031053 nbranch sa_judge_wholerange_false1 ,blank -0x6e66 031054 ifetch 1 ,contr -0x6e67 031055 bne 0xff ,sa_judge_wholerange_false2 -0x6e68 031056 ifetch 1 ,contr -0x6e69 031057 bne 0xff ,sa_judge_wholerange_false3 -0x6e6a 031058 branch sa_req_all -: 031059 sa_judge_wholerange_false3: -0x6e6b 031060 increase -5 ,contr -0x6e6c 031061 branch sa_isnot_wholerange -: 031062 sa_judge_wholerange_false2: -0x6e6d 031063 increase -4 ,contr -0x6e6e 031064 branch sa_isnot_wholerange -: 031065 sa_judge_wholerange_false1: -0x6e6f 031066 increase -3 ,contr -0x6e70 031067 branch sa_isnot_wholerange -: 031068 sa_req_loop: -0x6e71 031069 ifetch 1 ,contr -0x6e72 031070 beq sdp_attribute_id ,sa_req_one_id -0x6e73 031071 beq sdp_attribute_range ,sa_req_range -: 031072 sa_req_range: -0x6e74 031073 ifetch 2 ,contr -0x6e75 031074 istore 2 ,contw -0x6e76 031075 increase 1 ,queue -0x6e77 031076 byteswap pdata ,regb -0x6e78 031077 ifetch 2 ,contr -0x6e79 031078 byteswap pdata ,pdata -: 031079 sa_req_range_id_increase: -0x6e7a 031080 increase 1 ,regb -0x6e7b 031081 isub regb ,null -0x6e7c 031082 nbranch sa_req_range_id_finish ,positive -0x6e7d 031083 copy pdata ,regc -0x6e7e 031084 byteswap regb ,pdata -0x6e7f 031085 istore 2 ,contw -0x6e80 031086 increase 1 ,queue -0x6e81 031087 copy regc ,pdata -0x6e82 031088 branch sa_req_range_id_increase -: 031089 sa_req_range_id_finish: -0x6e83 031090 increase -5 ,timeup -0x6e84 031091 increase -5 ,rega -0x6e85 031092 branch sa_req_check_next_id -: 031093 sa_req_one_id: -0x6e86 031094 ifetch 2 ,contr -0x6e87 031095 istore 2 ,contw -0x6e88 031096 increase 1 ,queue -0x6e89 031097 increase -3 ,timeup -0x6e8a 031098 increase -3 ,rega -: 031099 sa_req_check_next_id: -0x6e8b 031100 nbranch sdp_invalid_request_syntax ,positive -0x6e8c 031101 nbranch sa_req_loop ,zero -0x6e8d 031102 increase -1 ,timeup -0x6e8e 031103 nbranch sdp_invalid_request_syntax ,zero -0x6e8f 031105 call l2cap_get_sdp_tx_payload -0x6e90 031106 increase 10 ,contw -0x6e91 031107 arg mem_sdp_attrib_list ,rega -: 031108 sa_req_handle_attributelist_next: -0x6e92 031109 copy queue ,pdata -0x6e93 031110 branch sa_req_handle_attributelist_end ,blank -0x6e94 031111 ifetch 2 ,rega -0x6e95 031112 branch sa_req_handle_attributelist_end ,blank -0x6e96 031113 iforce regb -0x6e97 031114 fetch 4 ,mem_sdp_record_handle -0x6e98 031115 iforce temp -0x6e99 031116 call search_handle_attrib -0x6e9a 031117 copy contr ,pdata -0x6e9b 031118 branch sa_req_handle_attributelist_notfound ,blank -0x6e9c 031119 increase -3 ,contr -0x6e9d 031120 ifetch 3 ,contr -0x6e9e 031121 istore 3 ,contw -0x6e9f 031122 call sdp_data_len -0x6ea0 031123 iforce loopcnt -0x6ea1 031124 call memcpy -: 031125 sa_req_handle_attributelist_notfound: -0x6ea2 031126 increase 2 ,rega -0x6ea3 031127 increase -1 ,queue -0x6ea4 031128 branch sa_req_handle_attributelist_next -: 031130 sa_req_handle_attributelist_end: -0x6ea5 031131 arg sdp_attribute_res ,rega -0x6ea6 031132 call ssa_req_range_lastfreg_common -0x6ea7 031133 fetch 2 ,mem_sdp_tx_pkt_length -0x6ea8 031134 beq 11 ,sa_empty_rsp -0x6ea9 031135 branch ssa_req_range_attrbutes_length_no_continue -: 031138 sdp_store_continue_common: -0x6eaa 031139 ifetch 1 ,contr -0x6eab 031140 beq 0 ,sdp_store_continue_0byte -0x6eac 031141 beq 1 ,sdp_store_continue_1byte -0x6ead 031142 beq 2 ,sdp_store_continue_2byte -: 031143 sdp_store_continue_0byte: -0x6eae 031144 increase -1 ,timeup -0x6eaf 031145 branch sdp_store_continue_end -: 031146 sdp_store_continue_1byte: -0x6eb0 031147 ifetch 1 ,contr -0x6eb1 031148 increase -2 ,timeup -0x6eb2 031149 branch sdp_store_continue_end -: 031150 sdp_store_continue_2byte: -0x6eb3 031151 ifetch 2 ,contr -0x6eb4 031152 byteswap pdata ,pdata -0x6eb5 031153 increase -3 ,timeup -: 031154 sdp_store_continue_end: -0x6eb6 031155 store 2 ,mem_sdp_continue_byte -0x6eb7 031156 rtn -: 031158 sa_req_all: -0x6eb8 031159 increase -5 ,timeup -0x6eb9 031160 call sdp_store_continue_common -0x6eba 031161 nbranch sdp_invalid_pdu_size ,zero -0x6ebb 031162 fetcht 4 ,mem_sdp_record_handle -0x6ebc 031163 call search_handle -0x6ebd 031164 nbranch sdp_invalid_service_record_handle ,zero -0x6ebe 031165 copy contr ,rega -0x6ebf 031166 call l2cap_get_sdp_tx_payload -0x6ec0 031167 copy rega ,contr -0x6ec1 031168 increase 3 ,contw -0x6ec2 031169 copy contr ,timeup -0x6ec3 031170 call sdp_get_data -0x6ec4 031171 copy pdata ,rega -0x6ec5 031173 fetch 2 ,mem_sdp_continue_byte -0x6ec6 031174 copy pdata ,regb -0x6ec7 031175 copy rega ,pdata -0x6ec8 031176 isub regb ,regb -0x6ec9 031177 fetch 2 ,mem_sdp_attribute_maxbyte -0x6eca 031178 isub regb ,null -0x6ecb 031179 nbranch sa_req_all_fragment_sdp ,positive -0x6ecc 031181 disable user -0x6ecd 031182 fetch 2 ,mem_sdp_continue_byte -0x6ece 031183 branch sa_req_all_fisrt_fragment ,blank -0x6ecf 031184 iadd timeup ,contr -0x6ed0 031185 increase 3 ,regb -0x6ed1 031186 copy regb ,loopcnt -0x6ed2 031187 copy loopcnt ,pdata -0x6ed3 031188 increase 3 ,pdata -0x6ed4 031189 byteswap pdata ,pdata -0x6ed5 031190 istore 2 ,contw -0x6ed6 031191 copy loopcnt ,pdata -0x6ed7 031192 byteswap pdata ,pdata -0x6ed8 031193 istore 2 ,contw -0x6ed9 031194 branch sa_req_all_answer_attributelist_full_loop -: 031195 sa_req_all_fisrt_fragment: -0x6eda 031196 add rega ,6 ,loopcnt -0x6edb 031197 branch sa_req_all_parlength_continue_byte ,user -0x6edc 031198 byteswap loopcnt ,pdata -0x6edd 031199 branch sa_req_all_parlength_continue_byte_end -: 031200 sa_req_all_parlength_continue_byte: -0x6ede 031201 copy loopcnt ,pdata -0x6edf 031202 increase 2 ,pdata -0x6ee0 031203 byteswap pdata ,pdata -: 031204 sa_req_all_parlength_continue_byte_end: -0x6ee1 031205 istore 2 ,contw -0x6ee2 031206 increase -3 ,loopcnt -0x6ee3 031207 byteswap loopcnt ,pdata -0x6ee4 031208 istore 2 ,contw -0x6ee5 031209 copy timeup ,contr -0x6ee6 031210 branch sa_req_all_answer_attributelist_full_loop -: 031211 sa_req_all_fragment_sdp: -0x6ee7 031212 enable user -0x6ee8 031214 fetch 2 ,mem_sdp_attribute_maxbyte -0x6ee9 031215 copy pdata ,rega -0x6eea 031216 copy rega ,loopcnt -0x6eeb 031217 fetch 2 ,mem_sdp_continue_byte -0x6eec 031218 branch sa_req_all_fisrt_fragment ,blank -0x6eed 031219 iadd timeup ,contr -0x6eee 031220 copy rega ,pdata -0x6eef 031221 increase 5 ,pdata -0x6ef0 031222 byteswap pdata ,pdata -0x6ef1 031223 istore 2 ,contw -0x6ef2 031224 copy rega ,pdata -0x6ef3 031225 byteswap pdata ,pdata -0x6ef4 031226 istore 2 ,contw -: 031227 sa_req_all_answer_attributelist_full_loop: -0x6ef5 031228 call memcpy -0x6ef6 031229 nbranch sa_req_all_last_frag_continue ,user -0x6ef7 031230 force 2 ,pdata -0x6ef8 031231 istore 1 ,contw -0x6ef9 031232 copy contr ,pdata -0x6efa 031233 isub timeup ,pdata -0x6efb 031234 byteswap pdata ,pdata -0x6efc 031235 istore 2 ,contw -0x6efd 031236 branch sa_req_all_frag_end -: 031237 sa_req_all_last_frag_continue: -0x6efe 031238 force 0 ,pdata -0x6eff 031239 istore 1 ,contw -: 031240 sa_req_all_frag_end: -0x6f00 031241 arg sdp_attribute_res ,rega -0x6f01 031242 branch ssa_req_range_common -: 031253 sdp_process_ssa_req: -0x6f02 031254 bpatchx patch3a_1 ,mem_patch3a -0x6f03 031255 call ask_serviceclassid -0x6f04 031256 compare 0xff ,temp ,0xff -0x6f05 031257 branch sdp_invalid_request_syntax ,true -0x6f06 031258 call sdp_store_maxbyte -0x6f07 031259 store 2 ,mem_sdp_attribute_maxbyte -0x6f08 031260 increase -2 ,timeup -0x6f09 031261 call dataelementtype6 -0x6f0a 031262 arg mem_sdp_attrib_list ,contw -0x6f0b 031263 force 0 ,queue -: 031264 ssa_req_loop: -0x6f0c 031265 ifetch 1 ,contr -0x6f0d 031266 beq sdp_attribute_range ,ssa_req_range -0x6f0e 031267 ifetch 2 ,contr -0x6f0f 031268 istore 2 ,contw -0x6f10 031269 increase 1 ,queue -0x6f11 031270 increase -3 ,timeup -0x6f12 031271 increase -3 ,rega -0x6f13 031272 nbranch sdp_invalid_request_syntax ,positive -0x6f14 031273 nbranch ssa_req_loop ,zero -0x6f15 031274 increase -1 ,timeup -0x6f16 031275 nbranch sdp_invalid_request_syntax ,zero -0x6f17 031276 call l2cap_get_sdp_tx_payload -0x6f18 031277 increase 13 ,contw -0x6f19 031278 fetch 2 ,mem_sdp_uuid_search_ptr -0x6f1a 031279 iforce regc -0x6f1b 031280 arg mem_sdp_attrib_list ,rega -: 031281 ssa_req_attributelist_next: -0x6f1c 031282 ifetch 2 ,rega -0x6f1d 031283 branch ssa_req_attributelist_end ,blank -0x6f1e 031284 iforce regb -0x6f1f 031285 call search_attrib -0x6f20 031286 branch ssa_req_attributelist_notfound ,blank -0x6f21 031287 increase -3 ,contr -0x6f22 031288 ifetch 3 ,contr -0x6f23 031289 istore 3 ,contw -0x6f24 031290 call sdp_data_len -0x6f25 031291 iforce loopcnt -0x6f26 031292 call memcpy -: 031293 ssa_req_attributelist_notfound: -0x6f27 031294 increase 2 ,rega -0x6f28 031295 branch ssa_req_attributelist_next -: 031297 ssa_req_attributelist_end: -0x6f29 031298 call ssa_req_range_lastfreg -0x6f2a 031299 fetch 2 ,mem_sdp_tx_pkt_length -0x6f2b 031300 beq 14 ,ssa_empty_rsp -0x6f2c 031301 call ssa_req_range_attrbutes_length_no_continue -0x6f2d 031302 branch ssa_req_range_attrbutes_length_no_continue -: 031305 sdp_store_maxbyte: -0x6f2e 031306 ifetch 2 ,contr -0x6f2f 031307 byteswap pdata ,pdata -0x6f30 031308 increase -3 ,pdata -0x6f31 031309 arg 200 ,temp -0x6f32 031310 isub temp ,null -0x6f33 031311 nrtn positive -0x6f34 031312 setarg 200 -0x6f35 031313 rtn -: 031316 ssa_req_range: -0x6f36 031317 increase 4 ,contr -0x6f37 031318 increase -5 ,timeup -0x6f38 031319 increase -5 ,rega -0x6f39 031320 nbranch sdp_invalid_request_syntax ,zero -0x6f3a 031321 call sdp_store_continue_common -0x6f3b 031322 nbranch sdp_invalid_pdu_size ,zero -0x6f3c 031323 arg mem_sdp_uuid_search_ptr ,timeup -0x6f3d 031324 call search_all_uuid -0x6f3e 031325 deposit queue -0x6f3f 031326 branch ssa_empty_rsp ,blank -0x6f40 031327 store 1 ,mem_handle_humber -0x6f41 031329 copy regb ,pdata -0x6f42 031330 store 2 ,mem_sdp_all_length -0x6f43 031331 arg 0 ,queue -0x6f44 031332 arg 0 ,rega -0x6f45 031333 call l2cap_get_sdp_tx_payload -0x6f46 031334 increase 10 ,contw -: 031335 ssa_req_range_find_handle: -0x6f47 031336 call ssa_req_range_get_length -0x6f48 031337 nbranch assert ,user -0x6f49 031338 copy contr ,timeup -0x6f4a 031339 copy pdata ,regc -0x6f4b 031340 iadd rega ,rega -0x6f4c 031343 fetch 2 ,mem_sdp_continue_byte -0x6f4d 031344 copy pdata ,regb -0x6f4e 031345 branch ssa_req_range_first_freg ,blank -: 031346 ssa_req_range_later_freg_with_continue: -0x6f4f 031347 copy rega ,pdata -0x6f50 031348 isub regb ,regb -0x6f51 031349 branch ssa_req_range_next_handle ,zero -0x6f52 031350 nbranch ssa_req_range_next_handle ,positive -0x6f53 031351 fetch 2 ,mem_sdp_attribute_maxbyte -0x6f54 031352 isub regb ,null -0x6f55 031353 branch ssa_req_range_maxbyte_with_continue ,zero -0x6f56 031354 nbranch ssa_req_range_maxbyte_with_continue ,positive -: 031357 ssa_req_range_send_not_maxbyte: -0x6f57 031358 copy regb ,loopcnt -0x6f58 031359 call ssa_req_range_maxbyte_with_continue_cpy -0x6f59 031360 fetch 1 ,mem_handle_humber -0x6f5a 031361 increase 1 ,queue -0x6f5b 031362 isub queue ,null -0x6f5c 031363 branch ssa_req_range_lastfreg ,zero -0x6f5d 031364 branch ssa_req_range_freg_with_continue -: 031366 ssa_req_range_maxbyte_with_continue: -0x6f5e 031367 copy pdata ,loopcnt -0x6f5f 031368 call ssa_req_range_maxbyte_with_continue_cpy -0x6f60 031369 branch ssa_req_range_freg_with_continue -: 031371 ssa_req_range_maxbyte_with_continue_cpy: -0x6f61 031372 increase -3 ,contw -0x6f62 031373 copy loopcnt ,temp -0x6f63 031374 copy regc ,pdata -0x6f64 031375 isub regb ,pdata -0x6f65 031376 iadd timeup ,contr -0x6f66 031377 branch memcpy -: 031379 ssa_req_range_next_handle: -0x6f67 031380 fetch 1 ,mem_handle_humber -0x6f68 031381 increase 1 ,queue -0x6f69 031382 isub queue ,null -0x6f6a 031383 rtn zero -0x6f6b 031384 branch ssa_req_range_find_handle -: 031386 ssa_req_range_get_length: -0x6f6c 031387 call disable_user -0x6f6d 031388 arg mem_sdp_handle_list ,contr -0x6f6e 031389 lshift2 queue ,pdata -0x6f6f 031390 iadd contr ,contr -0x6f70 031391 ifetcht 4 ,contr -0x6f71 031392 call search_handle -0x6f72 031393 nrtn zero -0x6f73 031394 call sdp_data_len -0x6f74 031395 branch enable_user -: 031397 ssa_req_range_first_freg: -0x6f75 031398 fetch 2 ,mem_sdp_attribute_maxbyte -0x6f76 031399 isub rega ,null -0x6f77 031400 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive -0x6f78 031401 copy rega ,loopcnt -0x6f79 031402 copy loopcnt ,temp -0x6f7a 031403 copy timeup ,contr -0x6f7b 031404 call memcpy -0x6f7c 031405 fetch 2 ,mem_sdp_all_length -0x6f7d 031406 isub rega ,null -0x6f7e 031407 branch ssa_req_range_freg_no_continue ,zero -: 031408 ssa_req_range_firstfreg_not_maxbyte_with_continue: -0x6f7f 031409 call ssa_req_range_freg_with_continue -0x6f80 031410 branch ssa_req_range_attrbutes_length -: 031412 ssa_req_range_freg_no_continue: -0x6f81 031413 call ssa_req_range_lastfreg -0x6f82 031414 branch ssa_req_range_attrbutes_length -: 031416 ssa_req_range_lastfreg: -0x6f83 031417 arg sdp_searchattrib_res ,rega -: 031418 ssa_req_range_lastfreg_common: -0x6f84 031419 force 0 ,pdata -0x6f85 031420 istore 1 ,contw -0x6f86 031421 call ssa_req_range_common -0x6f87 031422 fetcht 2 ,mem_sdp_tx_pkt_length -0x6f88 031423 increase -5 ,temp -0x6f89 031424 byteswap temp ,pdata -0x6f8a 031425 istore 2 ,contw -0x6f8b 031426 increase -3 ,temp -0x6f8c 031427 byteswap temp ,pdata -0x6f8d 031428 istore 2 ,contw -0x6f8e 031429 rtn -: 031431 ssa_req_range_firstfreg_maxbyte_with_continue: -0x6f8f 031432 copy pdata ,loopcnt -0x6f90 031433 copy loopcnt ,temp -0x6f91 031434 copy timeup ,contr -0x6f92 031435 call memcpy -0x6f93 031436 call ssa_req_range_freg_with_continue -: 031437 ssa_req_range_attrbutes_length: -0x6f94 031438 setarg 0x36 -0x6f95 031439 istore 1 ,contw -0x6f96 031440 fetch 2 ,mem_sdp_all_length -0x6f97 031441 byteswap pdata ,pdata -0x6f98 031442 istore 2 ,contw -0x6f99 031443 rtn -: 031445 ssa_req_range_attrbutes_length_no_continue: -0x6f9a 031446 setarg 0x36 -0x6f9b 031447 istore 1 ,contw -0x6f9c 031448 increase -3 ,temp -0x6f9d 031449 byteswap temp ,pdata -0x6f9e 031450 istore 2 ,contw -0x6f9f 031451 rtn -: 031453 ssa_req_range_freg_with_continue: -0x6fa0 031454 arg sdp_searchattrib_res ,rega -0x6fa1 031455 setarg 2 -0x6fa2 031456 istore 1 ,contw -0x6fa3 031457 fetch 2 ,mem_sdp_continue_byte -0x6fa4 031458 iadd temp ,temp -0x6fa5 031459 byteswap temp ,pdata -0x6fa6 031460 istore 2 ,contw -0x6fa7 031461 call ssa_req_range_common -0x6fa8 031462 fetcht 2 ,mem_sdp_tx_pkt_length -0x6fa9 031463 increase -5 ,temp -0x6faa 031464 byteswap temp ,pdata -0x6fab 031465 istore 2 ,contw -0x6fac 031466 increase -5 ,temp -0x6fad 031467 byteswap temp ,pdata -0x6fae 031468 istore 2 ,contw -0x6faf 031469 rtn -: 031471 ssa_req_range_common: -0x6fb0 031472 fetch 2 ,mem_sdp_tx_payload_ptr -0x6fb1 031473 isub contw ,pdata -0x6fb2 031474 sub pdata ,0 ,pdata -0x6fb3 031475 store 2 ,mem_sdp_tx_pkt_length -0x6fb4 031476 call l2cap_get_sdp_tx_payload -0x6fb5 031477 copy rega ,pdata -0x6fb6 031478 istore 1 ,contw -0x6fb7 031479 fetch 2 ,mem_sdp_transactionid -0x6fb8 031480 istore 2 ,contw -0x6fb9 031481 rtn -: 031494 sdp_process_ssa_res: -: 031495 sdp_process_ss_res: -: 031496 sdp_process_sa_res: -: 031497 sdp_process_error_res: -0x6fba 031498 rtn -: 031531 sdp_invalid_service_record_handle: -0x6fbb 031532 setarg 0x0200 -0x6fbc 031533 store 2 ,mem_sdp_error_code -0x6fbd 031534 branch sdp_error_response -: 031535 sdp_invalid_pdu_size: -0x6fbe 031536 setarg 0x0400 -0x6fbf 031537 store 2 ,mem_sdp_error_code -0x6fc0 031538 branch sdp_error_response -: 031539 sdp_insufficient_resource: -0x6fc1 031540 setarg 0x0600 -0x6fc2 031541 store 2 ,mem_sdp_error_code -0x6fc3 031542 branch sdp_error_response -: 031543 sdp_invalid_request_syntax: -0x6fc4 031544 setarg 0x0300 -0x6fc5 031545 store 2 ,mem_sdp_error_code -: 031546 sdp_error_response: -0x6fc6 031547 call l2cap_get_sdp_tx_payload -0x6fc7 031548 istore 1 ,contw -0x6fc8 031549 fetch 2 ,mem_sdp_transactionid -0x6fc9 031550 istore 2 ,contw -0x6fca 031551 setarg 0x0200 -0x6fcb 031552 istore 2 ,contw -0x6fcc 031553 fetch 2 ,mem_sdp_error_code -0x6fcd 031554 istore 2 ,contw -0x6fce 031555 jam 7 ,mem_sdp_tx_pkt_length -0x6fcf 031556 rtn -: 031561 ask_serviceclassid: -0x6fd0 031562 arg 0 ,regb -0x6fd1 031563 force 0 ,temp -0x6fd2 031564 arg mem_sdp_uuid_search_ptr ,contw -0x6fd3 031565 call dataelementtype6 -0x6fd4 031566 branch asksrv_error ,zero -: 031567 classidloop: -0x6fd5 031568 increase 1 ,regb -0x6fd6 031569 ifetch 1 ,contr -0x6fd7 031570 increase -1 ,rega -0x6fd8 031571 increase -1 ,timeup -0x6fd9 031572 compare 0x18 ,pdata ,0xf8 -0x6fda 031573 nbranch asksrv_error ,true -0x6fdb 031574 compare 0x04 ,pdata ,0x07 -0x6fdc 031575 nbranch cmp032 ,true -0x6fdd 031576 force 1 ,temp -: 031577 skip2bytes: -0x6fde 031578 ifetch 1 ,contr -0x6fdf 031579 increase -1 ,rega -0x6fe0 031580 increase -1 ,timeup -0x6fe1 031581 bne 0x00 ,frstbwrong -0x6fe2 031582 ifetch 1 ,contr -0x6fe3 031583 increase -1 ,rega -0x6fe4 031584 increase -1 ,timeup -0x6fe5 031585 beq 0x00 ,cmpuuid -0x6fe6 031586 branch scndbwrong -: 031587 frstbwrong: -0x6fe7 031588 increase 1 ,contr -0x6fe8 031589 increase -1 ,rega -0x6fe9 031590 increase -1 ,timeup -: 031591 scndbwrong: -0x6fea 031592 increase 2 ,contr -0x6feb 031593 increase -2 ,rega -0x6fec 031594 increase -2 ,timeup -0x6fed 031595 compare 0x00 ,temp ,0xff -0x6fee 031596 branch loopornot ,true -0x6fef 031597 increase 12 ,contr -0x6ff0 031598 increase -12 ,rega -0x6ff1 031599 increase -12 ,timeup -0x6ff2 031600 branch loopornot -: 031601 cmp032: -0x6ff3 031602 compare 0x02 ,pdata ,0x07 -0x6ff4 031603 nbranch cmp016 ,true -0x6ff5 031604 branch skip2bytes -: 031605 cmp016: -0x6ff6 031606 compare 0x01 ,pdata ,0x07 -0x6ff7 031607 nbranch asksrv_error ,true -: 031608 cmpuuid: -0x6ff8 031609 increase -2 ,rega -0x6ff9 031610 increase -2 ,timeup -0x6ffa 031611 ifetch 2 ,contr -0x6ffb 031612 sub regb ,4 ,null -0x6ffc 031613 branch uuidsize ,zero -0x6ffd 031614 istore 2 ,contw -: 031615 uuidsize: -0x6ffe 031616 compare 0x00 ,temp ,0xff -0x6fff 031617 branch loopornot ,true -0x7000 031618 copy contr ,temp -0x7001 031619 ifetch 1 ,contr -0x7002 031620 bne 0x00 ,wrong12b -0x7003 031621 ifetch 1 ,contr -0x7004 031622 bne 0x00 ,wrong12b -0x7005 031623 ifetch 1 ,contr -0x7006 031624 bne 0x10 ,wrong12b -0x7007 031625 ifetch 1 ,contr -0x7008 031626 bne 0x00 ,wrong12b -0x7009 031627 ifetch 1 ,contr -0x700a 031628 bne 0x80 ,wrong12b -0x700b 031629 ifetch 1 ,contr -0x700c 031630 bne 0x00 ,wrong12b -0x700d 031631 ifetch 1 ,contr -0x700e 031632 bne 0x00 ,wrong12b -0x700f 031633 ifetch 1 ,contr -0x7010 031634 bne 0x80 ,wrong12b -0x7011 031635 ifetch 1 ,contr -0x7012 031636 bne 0x5f ,wrong12b -0x7013 031637 ifetch 1 ,contr -0x7014 031638 bne 0x9b ,wrong12b -0x7015 031639 ifetch 1 ,contr -0x7016 031640 bne 0x34 ,wrong12b -0x7017 031641 ifetch 1 ,contr -0x7018 031642 beq 0xfb ,chck12dn -: 031643 wrong12b: -0x7019 031644 copy temp ,contr -: 031645 wrong12b1: -0x701a 031646 increase 12 ,contr -0x701b 031647 force 0x00 ,queue -0x701c 031648 force 0x00 ,temp -0x701d 031649 branch chck12dn -: 031651 chck12dn: -0x701e 031652 increase -12 ,timeup -0x701f 031653 increase -12 ,rega -: 031654 loopornot: -0x7020 031655 force 0x00 ,temp -0x7021 031656 compare 0x00 ,rega ,0xff -0x7022 031657 nbranch classidloop ,true -0x7023 031658 force 0 ,pdata -0x7024 031659 istore 2 ,contw -0x7025 031660 rtn -: 031661 asksrv_error: -0x7026 031662 arg 0xff ,temp -0x7027 031663 rtn -: 031673 dataelementtype6: -0x7028 031674 bpatchx patch3a_4 ,mem_patch3a -0x7029 031675 ifetch 1 ,contr -0x702a 031676 increase -1 ,timeup -0x702b 031677 compare 0x30 ,pdata ,0xf8 -0x702c 031678 nbranch dsize_error ,true -0x702d 031679 compare 0x07 ,pdata ,0x07 -0x702e 031680 branch dsize32 ,true -0x702f 031681 compare 0x06 ,pdata ,0x07 -0x7030 031682 branch dsize16 ,true -0x7031 031683 compare 0x05 ,pdata ,0x07 -0x7032 031684 nbranch dsize_error ,true -0x7033 031686 ifetch 1 ,contr -0x7034 031687 copy pdata ,rega -0x7035 031688 increase -1 ,timeup -0x7036 031689 branch dsize -: 031690 dsize32: -0x7037 031691 increase 2 ,contr -0x7038 031692 increase -2 ,timeup -: 031693 dsize16: -0x7039 031694 ifetch 2 ,contr -0x703a 031695 byteswap pdata ,rega -0x703b 031696 increase -2 ,timeup -: 031697 dsize: -0x703c 031698 force 0x01 ,pdata -0x703d 031699 rtn -: 031700 dsize_error: -0x703e 031701 force 0x00 ,pdata -0x703f 031702 rtn -: 031712 ss_empty_rsp: -0x7040 031713 setarg sdp_search_res -0x7041 031714 store 1 ,mem_sdp_pduid -0x7042 031715 branch empty_response -: 031716 sa_empty_rsp: -0x7043 031717 setarg sdp_attribute_res -0x7044 031718 store 1 ,mem_sdp_pduid -0x7045 031719 branch empty_response -: 031720 ssa_empty_rsp: -0x7046 031721 setarg sdp_searchattrib_res -0x7047 031722 store 1 ,mem_sdp_pduid -: 031723 empty_response: -0x7048 031724 call l2cap_get_sdp_tx_payload -0x7049 031727 fetch 1 ,mem_sdp_pduid -0x704a 031728 copy pdata ,regb -0x704b 031729 istore 1 ,contw -0x704c 031730 fetch 2 ,mem_sdp_transactionid -0x704d 031731 istore 2 ,contw -0x704e 031732 setarg 0x0500 -0x704f 031733 istore 2 ,contw -0x7050 031734 compare sdp_attribute_res ,regb ,0xff -0x7051 031735 branch fullsearch ,true -0x7052 031736 compare sdp_searchattrib_res ,regb ,0xff -0x7053 031737 branch fullsearch ,true -0x7054 031738 setarg 0x000000 -0x7055 031739 istore 5 ,contw -0x7056 031740 branch outempty -: 031742 fullsearch: -0x7057 031743 setarg 0x350200 -0x7058 031744 istore 5 ,contw -: 031745 outempty: -0x7059 031746 jam 10 ,mem_sdp_tx_pkt_length -0x705a 031747 rtn -: 031750 sdp_data_len: -0x705b 031751 call store_contw -0x705c 031752 call store_contr -0x705d 031753 call sdp_get_data -0x705e 031754 call get_contw -0x705f 031755 call get_contr -0x7060 031756 copy temp ,pdata -0x7061 031757 rtn -: 031760 sdp_get_data: -0x7062 031761 ifetch 1 ,contr -0x7063 031762 and pdata ,0x7 ,loopcnt -0x7064 031763 rshift3 pdata ,pdata -0x7065 031764 bne 0 ,sdp_get_data_type_not0 -: 031765 sdp_get_data_type0: -0x7066 031766 force 1 ,pdata -0x7067 031767 force 1 ,temp -0x7068 031768 rtn -: 031770 sdp_get_data_type_not0_sizeindex01234: -0x7069 031771 call left_shift_n -0x706a 031772 add pdata ,1 ,temp -0x706b 031773 rtn -: 031774 sdp_get_data_type_not0: -0x706c 031775 deposit loopcnt -0x706d 031776 sub pdata ,4 ,null -0x706e 031777 branch sdp_get_data_type_not0_sizeindex01234 ,positive -0x706f 031778 beq 5 ,sdp_get_data_type_not0_sizeindex5 -0x7070 031779 beq 6 ,sdp_get_data_type_not0_sizeindex6 -0x7071 031780 beq 7 ,sdp_get_data_type_not0_sizeindex7 -0x7072 031781 rtn -: 031783 sdp_get_data_type_not0_sizeindex5: -0x7073 031784 ifetch 1 ,contr -0x7074 031785 add pdata ,2 ,temp -0x7075 031786 rtn -: 031787 sdp_get_data_type_not0_sizeindex6: -0x7076 031788 ifetch 2 ,contr -0x7077 031789 byteswap pdata ,pdata -0x7078 031790 add pdata ,3 ,temp -0x7079 031791 rtn -: 031792 sdp_get_data_type_not0_sizeindex7: -0x707a 031793 ifetch 2 ,contr -0x707b 031794 byteswap pdata ,pdata -0x707c 031795 ifetcht 2 ,contr -0x707d 031796 byteswap temp ,temp -0x707e 031797 lshift16 temp ,temp -0x707f 031798 iadd temp ,pdata -0x7080 031799 add pdata ,5 ,temp -0x7081 031800 rtn -: 031806 search_all_uuid: -0x7082 031807 bpatchx patch3a_5 ,mem_patch3a -0x7083 031808 force 0 ,queue -0x7084 031809 arg 0 ,regb -0x7085 031810 arg mem_sdp_handle_list ,contw -: 031811 search_all_uuid_llop: -0x7086 031812 ifetch 2 ,timeup -0x7087 031813 rtn blank -0x7088 031814 call search_uuid -0x7089 031815 copy queue ,pdata -0x708a 031816 rtneq sdp_max_handle_number -0x708b 031817 increase 2 ,timeup -0x708c 031818 branch search_all_uuid_llop -: 031820 search_uuid: -0x708d 031822 iforce regc -0x708e 031824 fetch 2 ,mem_ui_uuid_table -0x708f 031825 iforce contr -: 031826 search_uuid_next: -0x7090 031827 copy queue ,pdata -0x7091 031828 rtneq sdp_max_handle_number -0x7092 031829 disable user -0x7093 031830 ifetch 1 ,contr -0x7094 031831 rtn blank -0x7095 031832 iforce loopcnt -: 031833 search_uuid_loop: -0x7096 031834 ifetch 2 ,contr -0x7097 031835 isub regc ,null -0x7098 031836 nbranch search_uuid_not_found ,zero -0x7099 031837 enable user -: 031838 search_uuid_not_found: -0x709a 031839 loop search_uuid_loop -0x709b 031840 ifetcht 4 ,contr -0x709c 031841 copy contr ,rega -0x709d 031842 nbranch search_uuid_nomatch ,user -0x709e 031843 arg mem_sdp_handle_list ,contr -0x709f 031844 arg sdp_max_handle_number ,loopcnt -: 031845 search_uuid_check_same_handle: -0x70a0 031846 ifetch 4 ,contr -0x70a1 031847 branch search_uuid_store_handle ,blank -0x70a2 031848 isub temp ,null -0x70a3 031849 branch search_uuid_nomatch ,zero -0x70a4 031850 loop search_uuid_check_same_handle -0x70a5 031851 rtn -: 031852 search_uuid_store_handle: -0x70a6 031853 istoret 4 ,contw -0x70a7 031854 increase 1 ,queue -0x70a8 031855 copy rega ,contr -0x70a9 031856 call sdp_data_len -0x70aa 031857 iadd regb ,regb -0x70ab 031858 iadd contr ,contr -0x70ac 031859 branch search_uuid_next -: 031860 search_uuid_nomatch: -0x70ad 031861 copy rega ,contr -0x70ae 031862 call sdp_get_data -0x70af 031863 iadd contr ,contr -0x70b0 031864 branch search_uuid_next -: 031870 search_handle: -0x70b1 031871 bpatchx patch3a_6 ,mem_patch3a -0x70b2 031872 fetch 2 ,mem_ui_uuid_table -0x70b3 031873 iforce contr -: 031874 search_handle_loop: -0x70b4 031875 ifetch 1 ,contr -0x70b5 031876 branch disable_zero ,blank -0x70b6 031877 lshift pdata ,pdata -0x70b7 031878 iadd contr ,contr -0x70b8 031879 ifetch 4 ,contr -0x70b9 031880 isub temp ,null -0x70ba 031881 rtn zero -0x70bb 031882 deposit contw -0x70bc 031883 store 2 ,mem_contw -0x70bd 031884 storet 8 ,mem_temp -0x70be 031885 call sdp_get_data -0x70bf 031886 iadd contr ,contr -0x70c0 031887 copy contr ,pdata -0x70c1 031888 fetcht 2 ,mem_contw -0x70c2 031889 copy temp ,contw -0x70c3 031890 fetcht 8 ,mem_temp -0x70c4 031891 copy pdata ,contr -0x70c5 031892 branch search_handle_loop -: 031898 search_attrib: -0x70c6 031899 bpatchx patch3a_7 ,mem_patch3a -0x70c7 031900 fetch 2 ,mem_ui_uuid_table -0x70c8 031901 iforce contr -: 031902 search_attrib_next: -0x70c9 031903 ifetch 1 ,contr -0x70ca 031904 branch search_attrib_end ,blank -0x70cb 031905 iforce loopcnt -: 031906 search_attrib_loop: -0x70cc 031907 ifetch 2 ,contr -0x70cd 031908 isub regc ,null -0x70ce 031909 branch search_attrib_found_uuid ,zero -0x70cf 031910 loop search_attrib_loop -0x70d0 031911 increase 4 ,contr -0x70d1 031912 call sdp_get_data -0x70d2 031913 iadd contr ,contr -0x70d3 031914 branch search_attrib_next -: 031915 search_attrib_found_uuid: -0x70d4 031916 increase -1 ,loopcnt -0x70d5 031917 lshift loopcnt ,pdata -0x70d6 031918 iadd contr ,contr -0x70d7 031919 increase 4 ,contr -0x70d8 031920 call sdp_get_data -0x70d9 031921 iadd contr ,timeup -: 031922 search_attrib_loop_attribs: -0x70da 031923 increase 1 ,contr -0x70db 031924 ifetch 2 ,contr -0x70dc 031925 isub regb ,null -0x70dd 031929 branch disable_blank ,zero -0x70de 031930 call sdp_data_len -0x70df 031931 iadd contr ,contr -0x70e0 031932 deposit timeup -0x70e1 031933 isub contr ,null -0x70e2 031934 branch search_attrib_end ,zero -0x70e3 031935 branch search_attrib_loop_attribs -: 031936 search_attrib_end: -0x70e4 031937 force 0 ,contr -0x70e5 031938 force 0 ,pdata -0x70e6 031939 rtn -: 031945 search_handle_attrib: -0x70e7 031946 bpatchx patch3b_0 ,mem_patch3b -0x70e8 031947 fetch 2 ,mem_ui_uuid_table -0x70e9 031948 iforce contr -: 031949 search_handle_attrib_next: -0x70ea 031950 ifetch 1 ,contr -0x70eb 031951 branch search_handle_attrib_end ,blank -0x70ec 031952 lshift pdata ,pdata -0x70ed 031953 iadd contr ,contr -0x70ee 031954 ifetch 4 ,contr -0x70ef 031955 isub temp ,null -0x70f0 031956 branch search_handl_attrib_found_handle ,zero -0x70f1 031957 call sdp_get_data -0x70f2 031958 iadd contr ,contr -0x70f3 031959 branch search_handle_attrib_next -: 031960 search_handl_attrib_found_handle: -0x70f4 031961 call sdp_get_data -0x70f5 031962 iadd contr ,timeup -: 031963 search_handle_attrib_loop_attribs: -0x70f6 031964 increase 1 ,contr -0x70f7 031965 ifetch 2 ,contr -0x70f8 031966 isub regb ,null -0x70f9 031967 rtn zero -0x70fa 031968 call sdp_data_len -0x70fb 031969 iadd contr ,contr -0x70fc 031970 deposit timeup -0x70fd 031971 isub contr ,null -0x70fe 031972 branch search_handle_attrib_end ,zero -0x70ff 031973 branch search_handle_attrib_loop_attribs -: 031974 search_handle_attrib_end: -0x7100 031975 force 0 ,contr -0x7101 031976 rtn -: 031980 search_rfcomm_cn: -0x7102 031981 arg 0x0400 ,regb -0x7103 031982 call search_handl_attrib_found_handle -0x7104 031983 arg 0x0300 ,regb -0x7105 031984 call search_uuid_in_data -0x7106 031985 nrtn user -0x7107 031986 sub rega ,3 ,null -0x7108 031987 branch disable_user ,positive -0x7109 031988 ifetch 1 ,contr -0x710a 031989 bne 0x08 ,disable_user -0x710b 031990 ifetch 1 ,contr -0x710c 031991 rtn -: 031996 search_uuid_in_data: -0x710d 031997 bpatchx patch3b_1 ,mem_patch3b -0x710e 031998 call sdp_get_data -0x710f 031999 copy pdata ,rega -: 032000 search_uuid_in_data_loop: -0x7110 032001 ifetch 1 ,contr -0x7111 032002 and pdata ,0x7 ,loopcnt -0x7112 032003 rshift3 pdata ,pdata -0x7113 032004 sub pdata ,3 ,null -0x7114 032005 branch search_uuid_in_data_found_uuid ,zero -0x7115 032006 copy loopcnt ,pdata -0x7116 032007 beq 5 ,search_uuid_in_data_found_element_index5 -0x7117 032008 beq 6 ,search_uuid_in_data_found_element_index6 -0x7118 032009 beq 7 ,search_uuid_in_data_found_element_index7 -0x7119 032010 increase -1 ,contr -0x711a 032011 call sdp_get_data -0x711b 032012 iadd contr ,contr -0x711c 032013 copy rega ,pdata -0x711d 032014 isub temp ,rega -0x711e 032015 branch disable_user ,zero -0x711f 032016 branch search_uuid_in_data_loop -: 032018 search_uuid_in_data_found_element_index5: -0x7120 032019 increase -2 ,rega -0x7121 032020 increase 1 ,contr -0x7122 032021 branch search_uuid_in_data_loop -: 032022 search_uuid_in_data_found_element_index6: -0x7123 032023 increase -3 ,rega -0x7124 032024 increase 2 ,contr -0x7125 032025 branch search_uuid_in_data_loop -: 032026 search_uuid_in_data_found_element_index7: -0x7126 032027 increase -5 ,rega -0x7127 032028 increase 4 ,contr -0x7128 032029 branch search_uuid_in_data_loop -: 032031 search_uuid_in_data_found_uuid: -0x7129 032032 increase -1 ,rega -0x712a 032033 copy loopcnt ,pdata -0x712b 032034 beq 1 ,search_uuid_in_data_type_uuid_16 -0x712c 032035 beq 2 ,search_uuid_in_data_type_uuid_32 -0x712d 032036 beq 4 ,search_uuid_in_data_type_uuid_128 -0x712e 032037 branch disable_user -: 032038 search_uuid_in_data_type_uuid_128: -0x712f 032039 increase -12 ,rega -: 032040 search_uuid_in_data_type_uuid_32: -0x7130 032041 ifetch 2 ,contr -0x7131 032042 increase -2 ,rega -: 032043 search_uuid_in_data_type_uuid_16: -0x7132 032044 ifetch 2 ,contr -0x7133 032045 isub regb ,null -0x7134 032046 branch enable_user ,zero -0x7135 032047 increase -2 ,rega -0x7136 032048 branch disable_user ,zero -0x7137 032049 branch search_uuid_in_data_loop -: 032108 sdp_send_spp_request: -0x7138 032109 call l2cap_get_sdp_tx_payload -0x7139 032110 copy pdata ,contw -0x713a 032111 setarg 6 -0x713b 032112 istore 1 ,contw -0x713c 032113 setarg sdp_tid_spp -0x713d 032114 istore 2 ,contw -0x713e 032115 setarg 0x0f00 -0x713f 032116 istore 2 ,contw -0x7140 032117 setarg 0x1a0535 -0x7141 032118 istore 3 ,contw -0x7142 032119 setarg 0x0111 -0x7143 032120 lshift16 pdata ,pdata -0x7144 032121 istore 4 ,contw -0x7145 032122 setarg 0x2600 -0x7146 032123 istore 2 ,contw -0x7147 032124 setarg 0x0335 -0x7148 032125 istore 2 ,contw -0x7149 032126 setarg 0x0009 -0x714a 032127 istore 2 ,contw -0x714b 032128 setarg 0x0004 -0x714c 032129 istore 2 ,contw -0x714d 032130 jam 0x14 ,mem_sdp_tx_pkt_length -0x714e 032131 rtn -: 032135 function_g2: -0x714f 032136 bpatchx patch3b_2 ,mem_patch3b -0x7150 032137 jam 80 ,mem_aes_cmac_data_length -0x7151 032138 arg memdat ,contw -0x7152 032139 arg mem_le_srand ,contr -0x7153 032140 call memcpy16 -0x7154 032141 arg mem_le_pubkey_local_x_256 ,contr -0x7155 032142 call memcpy32 -0x7156 032143 arg mem_le_pubkey_remote_x_256 ,contr -0x7157 032144 call memcpy32 -0x7158 032145 call inverse_memdat -0x7159 032146 arg mem_le_mrand ,contr -0x715a 032147 call store_inverse_k -0x715b 032148 call function_aes_cmac -0x715c 032150 arg mem_aes_cmac_temp ,contw -0x715d 032151 call load_inverse_result -0x715e 032152 setarg 1000000 -0x715f 032153 copy pdata ,rega -0x7160 032154 fetch 4 ,mem_aes_cmac_temp -0x7161 032155 idiv rega -0x7162 032156 call wait_div_end -0x7163 032157 remainder pdata -0x7164 032158 store 4 ,mem_gkey -0x7165 032160 rtn -: 032162 function_f6_eb: -0x7166 032163 jam 65 ,mem_aes_cmac_data_length -0x7167 032164 arg memdat ,contw -0x7168 032165 call store_addr_common_a -0x7169 032166 call store_addr_common_b -0x716a 032167 fetch 3 ,mem_le_pres + 1 -0x716b 032168 istore 3 ,contw -0x716c 032171 call get_r -0x716d 032173 arg mem_le_mrand ,contr -0x716e 032174 call memcpy16 -0x716f 032175 arg mem_le_srand ,contr -0x7170 032176 call memcpy16 -0x7171 032177 call inverse_memdat -0x7172 032178 arg mem_le_mackey ,contr -0x7173 032179 arg mem_aes_cmac_k ,contw -0x7174 032180 call memcpy16 -0x7175 032182 branch function_aes_cmac -: 032186 get_r: -0x7176 032187 fetch 4 ,mem_le_tk -0x7177 032188 istore 4 ,contw -0x7178 032189 call memset0_4 -0x7179 032190 branch memset0_8 -: 032192 function_f6_ea: -0x717a 032193 bpatchx patch3b_3 ,mem_patch3b -0x717b 032194 jam 65 ,mem_aes_cmac_data_length -0x717c 032195 arg memdat ,contw -0x717d 032196 call store_addr_common_b -0x717e 032197 call store_addr_common_a -0x717f 032198 fetch 3 ,mem_le_preq + 1 -0x7180 032199 istore 3 ,contw -0x7181 032202 call get_r -0x7182 032203 arg mem_le_srand ,contr -0x7183 032204 call memcpy16 -0x7184 032205 arg mem_le_mrand ,contr -0x7185 032206 call memcpy16 -0x7186 032207 call inverse_memdat -0x7187 032208 arg mem_le_mackey ,contr -0x7188 032209 arg mem_aes_cmac_k ,contw -0x7189 032210 call memcpy16 -0x718a 032212 call function_aes_cmac -0x718b 032213 arg mem_aes_cmac_temp ,contw -0x718c 032214 branch load_inverse_result -: 032216 function_f5: -0x718d 032217 jam 32 ,mem_aes_cmac_data_length -0x718e 032218 arg mem_le_dhkey_256 ,contr -0x718f 032219 arg memdat ,contw -0x7190 032220 call memcpy32 -0x7191 032221 call inverse_memdat -0x7192 032222 arg mem_le_slat ,contr -0x7193 032223 call store_inverse_k -0x7194 032224 call function_aes_cmac -0x7195 032225 arg mem_aes_cmac_k ,contw -0x7196 032226 call store_aes_result -0x7197 032227 arg 1 ,temp -0x7198 032228 call function_f5_common -0x7199 032229 arg mem_le_ltk ,contw -0x719a 032230 call load_inverse_result -0x719b 032231 arg 0 ,temp -0x719c 032232 call function_f5_common -0x719d 032233 arg mem_le_mackey ,contw -0x719e 032235 branch store_aes_result -: 032238 function_f5_common: -0x719f 032239 bpatchx patch3b_4 ,mem_patch3b -0x71a0 032240 jam 53 ,mem_aes_cmac_data_length -0x71a1 032241 setarg 0x100 -0x71a2 032242 store 2 ,memdat -0x71a3 032243 call store_addr_common_b -0x71a4 032244 call store_addr_common_a -0x71a5 032245 arg mem_le_srand ,contr -0x71a6 032246 call memcpy16 -0x71a7 032247 arg mem_le_mrand ,contr -0x71a8 032248 call memcpy16 -0x71a9 032250 setarg 0x6c65 -0x71aa 032251 istore 2 ,contw -0x71ab 032252 setarg 0x6274 -0x71ac 032253 istore 2 ,contw -0x71ad 032254 istoret 1 ,contw -0x71ae 032255 call inverse_memdat -0x71af 032256 branch function_aes_cmac -: 032258 store_addr_common_b: -0x71b0 032259 fetch 6 ,mem_le_lap -0x71b1 032260 istore 6 ,contw -0x71b2 032261 fetch 1 ,mem_le_conn_own_addr_type -0x71b3 032262 istore 1 ,contw -0x71b4 032263 rtn -: 032265 store_addr_common_a: -0x71b5 032266 fetch 6 ,mem_le_plap -0x71b6 032267 istore 6 ,contw -0x71b7 032272 fetch 1 ,mem_le_conn_peer_addr_type -0x71b8 032273 istore 1 ,contw -0x71b9 032274 rtn -: 032276 function_f4_ca: -0x71ba 032277 jam 65 ,mem_aes_cmac_data_length -0x71bb 032278 fetch 1 ,mem_passkey_1bit -0x71bc 032279 store 1 ,memdat -0x71bd 032280 arg mem_le_pubkey_local_x_256 ,contr -0x71be 032281 call memcpy32 -0x71bf 032282 arg mem_le_pubkey_remote_x_256 ,contr -0x71c0 032283 call memcpy32 -0x71c1 032284 call inverse_memdat -0x71c2 032285 arg mem_le_mrand ,contr -0x71c3 032286 call store_inverse_k -0x71c4 032287 branch function_aes_cmac -: 032290 function_f4_cb: -0x71c5 032291 jam 65 ,mem_aes_cmac_data_length -0x71c6 032292 fetch 1 ,mem_passkey_1bit -0x71c7 032293 store 1 ,memdat -0x71c8 032294 arg mem_le_pubkey_remote_x_256 ,contr -0x71c9 032295 call memcpy32 -0x71ca 032296 arg mem_le_pubkey_local_x_256 ,contr -0x71cb 032297 call memcpy32 -0x71cc 032298 call inverse_memdat -0x71cd 032299 arg mem_le_srand ,contr -0x71ce 032300 call store_inverse_k -0x71cf 032301 branch function_aes_cmac -: 032303 function_aes_cmac: -0x71d0 032304 bpatchx patch3b_5 ,mem_patch3b -0x71d1 032305 call function_aes_cmac_generate_subkey -0x71d2 032309 fetch 1 ,mem_aes_cmac_data_length -0x71d3 032310 copy pdata ,temp -: 032311 function_ceil16: -0x71d4 032312 increase 15 ,pdata -0x71d5 032313 rshift4 pdata ,pdata -0x71d6 032314 copy pdata ,regb -0x71d7 032315 branch function_aes_cmac_set_flag_0_balnk ,blank -0x71d8 032316 and temp ,0x0f ,pdata -0x71d9 032317 nbranch function_aes_cmac_set_flag_0 ,blank -0x71da 032319 arg mem_aes_cmac_k1 ,regc -0x71db 032320 arg memdat ,pdata -0x71dc 032321 increase -16 ,pdata -0x71dd 032324 iadd temp ,rega -0x71de 032325 arg mem_aes_cmac_m_last ,contw -0x71df 032326 arg 4 ,loopcnt -0x71e0 032327 call xor_loop -0x71e1 032331 branch function_aes_cmac_aes -: 032333 function_aes_cmac_set_flag_0_balnk: -0x71e2 032334 arg 1 ,regb -0x71e3 032335 arg 0 ,rega -0x71e4 032337 branch function_aes_cmac_set_flag_0_common -: 032340 function_aes_cmac_set_flag_0: -0x71e5 032342 and temp ,0x0f ,rega -: 032343 function_aes_cmac_set_flag_0_common: -0x71e6 032344 arg memdat ,pdata -0x71e7 032345 iadd temp ,pdata -0x71e8 032346 isub rega ,contr -0x71e9 032348 arg mem_aes_cmac_temp ,contw -0x71ea 032349 call function_aes_cmac_padding -0x71eb 032351 arg mem_aes_cmac_k2 ,regc -0x71ec 032352 arg mem_aes_cmac_temp ,rega -0x71ed 032353 arg mem_aes_cmac_m_last ,contw -0x71ee 032354 arg 4 ,loopcnt -0x71ef 032355 call xor_loop -: 032362 function_aes_cmac_aes: -0x71f0 032367 call aes_clear_data -0x71f1 032368 call aes_init -0x71f2 032371 arg memdat ,contr -: 032372 function_aes_cmac_aes_loop: -0x71f3 032374 increase -1 ,regb -0x71f4 032375 deposit regb -0x71f5 032376 branch function_aes_cmac_aes_loop_end ,blank -0x71f6 032377 call load_data128 -0x71f7 032378 call do_aes_cbc -0x71f8 032379 branch function_aes_cmac_aes_loop -: 032381 function_aes_cmac_aes_loop_end: -0x71f9 032382 arg mem_aes_cmac_temp ,contw -0x71fa 032383 call store_aes_result -0x71fb 032384 arg mem_aes_cmac_m_last ,contr -0x71fc 032385 call load_data128 -0x71fd 032386 call aes_init -0x71fe 032387 arg mem_aes_cmac_temp ,contr -0x71ff 032388 call load_data128 -0x7200 032389 branch do_aes_cbc -: 032393 load_inverse_result: -0x7201 032395 copy contw ,rega -0x7202 032396 call store_aes_result -0x7203 032398 arg 16 ,loopcnt -0x7204 032399 branch inverse_data -: 032401 store_inverse_k: -0x7205 032402 arg mem_aes_cmac_k ,contw -0x7206 032403 call memcpy16 -: 032404 inverse_k: -0x7207 032405 arg 16 ,loopcnt -0x7208 032406 arg mem_aes_cmac_k ,rega -0x7209 032407 branch inverse_data -: 032409 inverse_memdat: -0x720a 032410 fetch 1 ,mem_aes_cmac_data_length -0x720b 032411 copy pdata ,loopcnt -0x720c 032412 arg memdat ,rega -0x720d 032413 branch inverse_data -: 032415 bn_lshift_0_inverse: -0x720e 032416 ifetch 1 ,rega -0x720f 032417 lshift pdata ,pdata -0x7210 032418 isolate1 0 ,regc -0x7211 032419 setflag true ,0 ,pdata -0x7212 032420 isolate1 8 ,pdata -0x7213 032421 setflag true ,0 ,regc -0x7214 032422 istore 1 ,rega -0x7215 032423 increase -1 ,rega -0x7216 032424 loop bn_lshift_0_inverse -0x7217 032425 rtn -: 032427 function_aes_cmac_k1_inverse: -0x7218 032428 arg mem_aes_cmac_k1 ,rega -: 032429 function_aes_cmac_inverse_common: -0x7219 032430 increase 15 ,rega -0x721a 032431 force 16 ,loopcnt -0x721b 032432 force 0 ,regc -0x721c 032433 branch bn_lshift_0_inverse -: 032435 function_aes_cmac_k2_inverse: -0x721d 032436 arg mem_aes_cmac_k2 ,rega -0x721e 032437 branch function_aes_cmac_inverse_common -: 032440 function_aes_cmac_generate_subkey: -0x721f 032441 arg mem_aes_cmac_k ,contr -0x7220 032442 call load_key -0x7221 032445 force regidx_xor ,regext_index -0x7222 032446 call aes_clear -0x7223 032447 call aes_clear_data -0x7224 032448 call do_aes_ocb -0x7225 032453 arg mem_aes_cmac_k1 ,contw -0x7226 032454 call store_aes_result -: 032455 function_aes_cmac_k1: -0x7227 032456 bpatchx patch3b_6 ,mem_patch3b -0x7228 032457 fetch 1 ,mem_aes_cmac_k1 -0x7229 032458 isolate1 7 ,pdata -0x722a 032459 nbranch function_aes_cmac_k1_0 ,true -0x722b 032460 call function_aes_cmac_k1_inverse -0x722c 032463 arg mem_aes_cmac_k1 ,regc -0x722d 032465 arg mem_aes_cmac_k1 ,contw -0x722e 032468 call function_aes_cmac_xor_rb -0x722f 032469 branch function_aes_cmac_k2 -: 032470 function_aes_cmac_k1_0: -0x7230 032471 call function_aes_cmac_k1_inverse -: 032472 function_aes_cmac_k2: -0x7231 032474 arg mem_aes_cmac_k1 ,contr -0x7232 032475 arg mem_aes_cmac_k2 ,contw -0x7233 032476 call memcpy16 -0x7234 032477 fetch 1 ,mem_aes_cmac_k2 -0x7235 032478 isolate1 7 ,pdata -0x7236 032479 nbranch function_aes_cmac_k2_inverse ,true -0x7237 032480 call function_aes_cmac_k2_inverse -0x7238 032482 arg mem_aes_cmac_k2 ,regc -0x7239 032484 arg mem_aes_cmac_k2 ,contw -: 032490 function_aes_cmac_xor_rb: -0x723a 032491 arg 3 ,loopcnt -: 032492 function_aes_cmac_xor_rb_loop: -0x723b 032493 arg 0 ,temp -0x723c 032494 call function_aes_cmac_xor_loop_common -0x723d 032495 increase 4 ,regc -0x723e 032496 loop function_aes_cmac_xor_rb_loop -0x723f 032497 arg 0x8700 ,temp -0x7240 032498 lshift16 temp ,temp -: 032499 function_aes_cmac_xor_loop_common: -0x7241 032500 ifetch 4 ,regc -0x7242 032501 ixor temp ,pdata -0x7243 032502 istore 4 ,contw -0x7244 032503 rtn -: 032509 function_aes_cmac_padding: -0x7245 032510 bpatchx patch3b_7 ,mem_patch3b -0x7246 032511 arg 16 ,loopcnt -0x7247 032512 arg 0 ,pdata -: 032513 function_aes_cmac_padding_loop: -0x7248 032514 isub rega ,null -0x7249 032515 branch function_aes_cmac_padding_beq_length ,zero -0x724a 032516 branch function_aes_cmac_padding_big_length ,positive -0x724b 032517 ifetcht 1 ,contr -0x724c 032518 istoret 1 ,contw -: 032519 function_aes_cmac_padding_loop2: -0x724d 032520 increase 1 ,pdata -0x724e 032521 loop function_aes_cmac_padding_loop -0x724f 032522 rtn -: 032523 function_aes_cmac_padding_beq_length: -0x7250 032524 arg 0x80 ,temp -: 032525 function_aes_cmac_padding_common: -0x7251 032526 istoret 1 ,contw -0x7252 032527 branch function_aes_cmac_padding_loop2 -: 032529 function_aes_cmac_padding_big_length: -0x7253 032530 arg 0 ,temp -0x7254 032531 branch function_aes_cmac_padding_common -: 032534 generate_kinit: -0x7255 032535 call function_e22 -0x7256 032536 arg mem_input_store ,contr -0x7257 032537 arg mem_kinit ,contw -0x7258 032538 branch memcpy16 -: 032541 function_e21: -0x7259 032542 disable user -0x725a 032543 call function_expand -0x725b 032544 arg mem_random_number ,contr -0x725c 032545 arg mem_x ,contw -0x725d 032546 force 15 ,loopcnt -0x725e 032547 call memcpy -0x725f 032548 ifetch 1 ,contr -0x7260 032549 xor_into 6 ,pdata -0x7261 032550 istore 1 ,contw -0x7262 032551 setarg mem_y -0x7263 032552 store 2 ,memp_ar_input -0x7264 032553 setarg mem_x -0x7265 032554 store 2 ,memp_ar_key -0x7266 032555 set1 mark_ar2 ,mark -0x7267 032556 branch function_ar -: 032560 function_e22: -0x7268 032561 fetcht 1 ,mem_pin_length -0x7269 032562 force 16 ,regb -0x726a 032563 add temp ,6 ,regc -0x726b 032564 sub regc ,16 ,null -0x726c 032565 branch function_e22_pin_init ,positive -0x726d 032566 force 16 ,regc -: 032567 function_e22_pin_init: -0x726e 032568 arg mem_x ,contw -: 032569 function_e22_genx_pin: -0x726f 032570 arg mem_pin ,contr -0x7270 032571 copy temp ,loopcnt -0x7271 032572 disable user -: 032573 function_e22_genx_loop: -0x7272 032574 ifetch 1 ,contr -0x7273 032575 istore 1 ,contw -0x7274 032576 increase -1 ,regb -0x7275 032577 branch function_e22_genx_end ,zero -0x7276 032578 loop function_e22_genx_loop -0x7277 032579 branch function_e22_genx_pin ,user -0x7278 032580 enable user -0x7279 032581 force 6 ,loopcnt -0x727a 032582 copy rega ,contr -0x727b 032583 branch function_e22_genx_loop -: 032584 function_e22_genx_end: -0x727c 032585 arg mem_random_number ,contr -0x727d 032586 arg mem_y ,contw -0x727e 032587 call memcpy16 -0x727f 032588 fetch 1 ,mem_y15 -0x7280 032589 ixor regc ,pdata -0x7281 032590 store 1 ,mem_y15 -0x7282 032591 setarg mem_y -0x7283 032592 store 2 ,memp_ar_input -0x7284 032593 setarg mem_x -0x7285 032594 store 2 ,memp_ar_key -0x7286 032595 set1 mark_ar2 ,mark -0x7287 032596 branch function_ar -: 032601 function_e1: -0x7288 032602 disable user -0x7289 032603 call function_expand -0x728a 032604 branch function_hash -: 032606 function_e3: -0x728b 032607 arg mem_aco ,rega -0x728c 032608 enable user -0x728d 032609 call function_expand -0x728e 032610 call function_hash -0x728f 032611 arg mem_input_store ,contr -0x7290 032612 arg mem_kc ,contw -0x7291 032613 branch memcpy16 -: 032616 function_hash: -0x7292 032617 setarg mem_random_number -0x7293 032618 store 2 ,memp_ar_input -0x7294 032619 setarg mem_link_key -0x7295 032620 store 2 ,memp_ar_key -0x7296 032621 set0 mark_ar2 ,mark -0x7297 032622 call function_ar -0x7298 032623 arg mem_input_store ,rega -0x7299 032624 arg mem_random_number ,regb -0x729a 032625 arg mem_x ,contw -0x729b 032626 call xor16 -0x729c 032627 arg mem_x ,rega -0x729d 032628 arg mem_y ,regb -0x729e 032629 copy regb ,contw -0x729f 032630 enable user -0x72a0 032631 call add16 -0x72a1 032632 call key_offset -0x72a2 032633 setarg mem_y -0x72a3 032634 store 2 ,memp_ar_input -0x72a4 032635 setarg mem_x -0x72a5 032636 store 2 ,memp_ar_key -0x72a6 032637 set1 mark_ar2 ,mark -0x72a7 032638 branch function_ar -: 032642 function_ar: -0x72a8 032643 jam 0 ,mem_ar_hround -0x72a9 032644 fetch 2 ,memp_ar_key -0x72aa 032645 iforce contr -0x72ab 032646 arg mem_key_store ,contw -0x72ac 032647 call memcpy16 -0x72ad 032648 fetch 2 ,memp_ar_input -0x72ae 032649 iforce contr -0x72af 032650 arg mem_input_store ,contw -0x72b0 032651 call memcpy16 -: 032653 function_ar_loop: -0x72b1 032654 call key_scheduling -0x72b2 032655 disable user -0x72b3 032656 bmark0 mark_ar2 ,function_ar_original -0x72b4 032657 fetch 1 ,mem_ar_hround -0x72b5 032658 bne 4 ,function_ar_original -0x72b6 032659 fetch 2 ,memp_ar_input -0x72b7 032660 iforce regb -0x72b8 032661 call xor_mod32_ar2 -: 032662 function_ar_original: -0x72b9 032663 call xor_mod32 -0x72ba 032664 call el_boxes -0x72bb 032665 fetch 1 ,mem_ar_hround -0x72bc 032666 increase 1 ,pdata -0x72bd 032667 store 1 ,mem_ar_hround -0x72be 032669 call key_scheduling -0x72bf 032670 enable user -0x72c0 032671 call xor_mod32 -0x72c1 032672 call pht -0x72c2 032673 call permute -0x72c3 032674 call pht -0x72c4 032675 call permute -0x72c5 032676 call pht -0x72c6 032677 call permute -0x72c7 032678 call pht -0x72c8 032679 fetch 1 ,mem_ar_hround -0x72c9 032680 increase 1 ,pdata -0x72ca 032681 store 1 ,mem_ar_hround -0x72cb 032682 bne 16 ,function_ar_loop -0x72cc 032683 call key_scheduling -0x72cd 032684 disable user -0x72ce 032685 branch xor_mod32 -: 032689 key_scheduling: -0x72cf 032690 fetch 1 ,mem_ar_hround -0x72d0 032691 arg mem_key_store ,contr -0x72d1 032692 branch key_sched_zero ,blank -0x72d2 032693 iforce regb -0x72d3 032694 force 17 ,loopcnt -0x72d4 032695 copy contr ,contw -: 032696 key_rotateloop: -0x72d5 032697 ifetch 1 ,contr -0x72d6 032698 lshift3 pdata ,temp -0x72d7 032699 rshift2 pdata ,pdata -0x72d8 032700 rshift3 pdata ,pdata -0x72d9 032701 ior temp ,pdata -0x72da 032702 istore 1 ,contw -0x72db 032703 loop key_rotateloop -0x72dc 032704 setarg mem_key_store -0x72dd 032705 iadd regb ,contr -0x72de 032706 force 16 ,loopcnt -0x72df 032707 arg mem_round_key ,contw -: 032708 key_select_octet_loop: -0x72e0 032709 ifetch 1 ,contr -0x72e1 032710 istore 1 ,contw -0x72e2 032711 compare mem_key_store_end ,contr ,0xff -0x72e3 032712 nbranch key_select_octet_nwrap ,true -0x72e4 032713 increase -17 ,contr -: 032714 key_select_octet_nwrap: -0x72e5 032715 loop key_select_octet_loop -0x72e6 032716 force 0 ,rega -0x72e7 032717 add regb ,-1 ,regc -0x72e8 032718 lshift2 regc ,regc -0x72e9 032719 lshift2 regc ,regc -0x72ea 032720 call enable_authrom -0x72eb 032721 setarg mem_b_box -0x72ec 032722 iadd regc ,regc -0x72ed 032723 arg mem_round_key ,contw -0x72ee 032724 force 16 ,loopcnt -: 032725 bias_round_key_loop: -0x72ef 032726 ifetcht 1 ,regc -0x72f0 032727 ifetch 1 ,contw -0x72f1 032728 iadd temp ,pdata -0x72f2 032729 istore 1 ,contw -0x72f3 032730 increase 1 ,regc -0x72f4 032731 loop bias_round_key_loop -0x72f5 032732 branch disable_authrom -: 032734 key_sched_zero: -0x72f6 032735 force 16 ,loopcnt -0x72f7 032736 force 0 ,temp -: 032737 create_byte_16_loop: -0x72f8 032738 ifetch 1 ,contr -0x72f9 032739 ixor temp ,temp -0x72fa 032740 loop create_byte_16_loop -0x72fb 032741 deposit temp -0x72fc 032742 istore 1 ,contr -0x72fd 032743 arg mem_key_store ,contr -0x72fe 032744 arg mem_round_key ,contw -0x72ff 032745 branch memcpy16 -: 032747 xor_mod32: -0x7300 032748 arg mem_round_key ,regb -: 032749 xor_mod32_ar2: -0x7301 032750 force 16 ,loopcnt -0x7302 032751 arg mem_input_store ,rega -0x7303 032752 copy rega ,contw -: 032753 xor_mod32_loop: -0x7304 032754 ifetcht 1 ,rega -0x7305 032755 ifetch 1 ,regb -0x7306 032756 ixor temp ,alarm -0x7307 032757 and loopcnt ,3 ,regc -0x7308 032758 nbranch xor_mod32_invert ,user -0x7309 032759 xor_into 3 ,regc -: 032760 xor_mod32_invert: -0x730a 032761 sub regc ,1 ,regc -0x730b 032762 branch xor_even ,positive -0x730c 032763 iadd temp ,alarm -: 032764 xor_even: -0x730d 032765 deposit alarm -0x730e 032766 istore 1 ,contw -0x730f 032767 increase 1 ,rega -0x7310 032768 increase 1 ,regb -0x7311 032769 loop xor_mod32_loop -0x7312 032770 rtn -: 032772 el_boxes: -0x7313 032773 call enable_authrom -0x7314 032774 force 16 ,loopcnt -0x7315 032775 arg mem_input_store ,rega -: 032776 el_box_loop: -0x7316 032777 ifetch 1 ,rega -0x7317 032778 arg mem_e_box ,contr -0x7318 032779 and loopcnt ,3 ,regc -0x7319 032780 sub regc ,1 ,null -0x731a 032781 branch e_boxes ,positive -0x731b 032782 arg mem_l_box ,contr -: 032783 e_boxes: -0x731c 032784 iadd contr ,contr -0x731d 032785 ifetch 1 ,contr -0x731e 032786 istore 1 ,rega -0x731f 032787 increase 1 ,rega -0x7320 032788 loop el_box_loop -0x7321 032789 branch disable_authrom -: 032791 pht: -0x7322 032792 force 8 ,loopcnt -0x7323 032793 arg mem_input_store ,contr -0x7324 032794 copy contr ,contw -: 032795 pht_loop: -0x7325 032796 ifetch 1 ,contr -0x7326 032797 iforce rega -0x7327 032798 ifetch 1 ,contr -0x7328 032799 iforce regb -0x7329 032800 lshift rega ,pdata -0x732a 032801 iadd regb ,pdata -0x732b 032802 istore 1 ,contw -0x732c 032803 deposit rega -0x732d 032804 iadd regb ,pdata -0x732e 032805 istore 1 ,contw -0x732f 032806 loop pht_loop -0x7330 032807 rtn -: 032810 permute: -0x7331 032811 setarg 0x8ae42c -0x7332 032812 iforce temp -0x7333 032813 force 7 ,loopcnt -0x7334 032814 call permute_exchange -0x7335 032815 setarg 0xd751b -0x7336 032816 iforce temp -0x7337 032817 force 5 ,loopcnt -0x7338 032818 call permute_exchange -0x7339 032819 fetch 1 ,mem_input_store + 15 -0x733a 032820 iforce rega -0x733b 032821 fetch 1 ,mem_input_store + 3 -0x733c 032822 store 1 ,mem_input_store + 15 -0x733d 032823 deposit rega -0x733e 032824 store 1 ,mem_input_store + 3 -0x733f 032825 rtn -: 032827 permute_exchange: -0x7340 032828 and temp ,0xf ,regb -: 032829 permute_loop: -0x7341 032830 and temp ,0xf ,pdata -0x7342 032831 arg mem_input_store ,contw -0x7343 032832 iadd contw ,contw -0x7344 032833 ifetch 1 ,contw -0x7345 032834 iforce regc -0x7346 032835 deposit rega -0x7347 032836 istore 1 ,contw -0x7348 032837 copy regc ,rega -0x7349 032838 rshift4 temp ,temp -0x734a 032839 loop permute_loop -0x734b 032840 setarg mem_input_store -0x734c 032841 iadd regb ,contw -0x734d 032842 deposit rega -0x734e 032843 istore 1 ,contw -0x734f 032844 rtn -: 032846 add16: -0x7350 032847 enable user -0x7351 032848 branch xor_add16 -: 032850 xor16: -0x7352 032851 disable user -: 032852 xor_add16: -0x7353 032853 force 16 ,loopcnt -: 032854 xoradd_loop: -0x7354 032855 ifetcht 1 ,rega -0x7355 032856 ifetch 1 ,regb -0x7356 032857 branch xoradd_add ,user -0x7357 032858 ixor temp ,pdata -0x7358 032859 branch xoradd_store -: 032860 xoradd_add: -0x7359 032861 iadd temp ,pdata -: 032862 xoradd_store: -0x735a 032863 istore 1 ,contw -0x735b 032864 increase 1 ,rega -0x735c 032865 increase 1 ,regb -0x735d 032866 loop xoradd_loop -0x735e 032867 rtn -: 032870 function_expand: -0x735f 032871 arg mem_y ,contw -0x7360 032872 ifetch 6 ,rega -0x7361 032873 istore 6 ,contw -0x7362 032874 branch expand_12 ,user -0x7363 032875 ifetch 6 ,rega -0x7364 032876 branch expand_cont -: 032877 expand_12: -0x7365 032878 ifetch 6 ,contr -: 032879 expand_cont: -0x7366 032880 istore 6 ,contw -0x7367 032881 ifetch 4 ,rega -0x7368 032882 istore 4 ,contw -0x7369 032883 rtn -: 032885 key_offset: -0x736a 032886 arg mem_link_key ,contr -0x736b 032887 arg mem_x ,contw -0x736c 032888 arg 0 ,temp -0x736d 032889 setarg 0x8395a7 -0x736e 032890 call concatenate_temp24 -0x736f 032891 setarg 0xb3c1df -0x7370 032892 call concatenate_temp24 -0x7371 032893 setarg 0xe5e9 -0x7372 032894 call concatenate_temp16 -0x7373 032895 copy temp ,regab -0x7374 032896 disable user -0x7375 032897 call key_addxor -0x7376 032898 copy regab ,temp -0x7377 032899 enable user -0x7378 032900 branch key_addxor -: 032902 key_addxor: -0x7379 032903 force 8 ,loopcnt -: 032904 key_addxor_loop: -0x737a 032905 ifetch 1 ,contr -0x737b 032906 compare 1 ,loopcnt ,1 -0x737c 032907 branch key_high ,user -0x737d 032908 branch key_xor ,true -: 032909 key_add: -0x737e 032910 iadd temp ,pdata -0x737f 032911 branch key_store -: 032912 key_high: -0x7380 032913 branch key_add ,true -: 032914 key_xor: -0x7381 032915 ixor temp ,pdata -: 032916 key_store: -0x7382 032917 istore 1 ,contw -0x7383 032918 rshift8 temp ,temp -0x7384 032919 loop key_addxor_loop -0x7385 032920 rtn -: 032922 copy_aco: -0x7386 032923 fetch 6 ,mem_input_store + 4 -0x7387 032924 store 6 ,mem_aco -0x7388 032925 ifetch 6 ,contr -0x7389 032926 istore 6 ,contw -0x738a 032927 rtn -: 032929 concatenate_temp24: -0x738b 032930 lshift8 temp ,temp -: 032931 concatenate_temp16: -0x738c 032932 lshift16 temp ,temp -0x738d 032933 ior temp ,temp -0x738e 032934 rtn -: 032938 loop1: -0x738f 032939 branch loop1 -: 032943 generate_stk: -0x7390 032944 bpatchx patch3c_0 ,mem_patch3c -0x7391 032945 call function_s1 -0x7392 032946 arg mem_le_ltk ,contw -0x7393 032947 branch store_aes_result -: 032950 authenticate_rconfirm: -0x7394 032951 arg mem_le_srand ,contw -0x7395 032952 branch authenticate_mconfirm ,master -0x7396 032953 arg mem_le_mrand ,contw -: 032954 authenticate_mconfirm: -0x7397 032955 copy contr ,rega -0x7398 032956 call memcpy16 -0x7399 032957 call function_c1 -0x739a 032958 arg mem_le_rconfirm ,contr -0x739b 032959 branch compare_res -: 032961 generate_confirm: -0x739c 032962 arg mem_le_mrand ,rega -0x739d 032963 branch generate_mrand ,master -0x739e 032964 arg mem_le_srand ,rega -: 032965 generate_mrand: -0x739f 032966 copy rega ,contw -0x73a0 032967 call generate_random -0x73a1 032968 branch function_c1 -: 032970 generate_sk: -0x73a2 032971 arg mem_le_skdm ,contr -0x73a3 032972 call load_data128 -0x73a4 032973 arg mem_le_ltk ,contr -0x73a5 032974 call load_regext -0x73a6 032975 force 0x38 ,aes_ctrl -0x73a7 032976 force 0x0 ,aes_ctrl -0x73a8 032977 call wait_aes -0x73a9 032978 arg mem_le_sk ,contw -0x73aa 032979 branch store_aes_result -: 032982 first_block_counter: -0x73ab 032983 force 0x49 ,pdata -0x73ac 032984 branch first_block -: 032985 first_block_data: -0x73ad 032986 force 1 ,pdata -: 032987 first_block: -0x73ae 032988 force regidx_data ,regext_index -0x73af 032989 lshift8 temp ,regext -0x73b0 032990 ior regext ,regext -0x73b1 032991 increase 1 ,regext_index -0x73b2 032992 rshift8 temp ,regext -0x73b3 032993 rshift16 regext ,regext -0x73b4 032994 fetch 2 ,mem_le_ivm -0x73b5 032995 lshift16 ,pdata ,pdata -0x73b6 032996 ior regext ,regext -0x73b7 032997 increase 1 ,regext_index -0x73b8 032998 ifetch 4 ,contr -0x73b9 032999 iforce regext -0x73ba 033000 increase 1 ,regext_index -0x73bb 033001 ifetch 2 ,contr -0x73bc 033002 byteswap rega ,regext -0x73bd 033003 lshift16 regext ,regext -0x73be 033004 ior regext ,regext -0x73bf 033005 increase 1 ,regext_index -0x73c0 033006 rtn -: 033010 generate_mic: -0x73c1 033011 add regc ,1 ,contr -0x73c2 033012 ifetch 1 ,contr -0x73c3 033013 iforce rega -0x73c4 033014 call first_block_counter -0x73c5 033015 call do_aes_ocb -0x73c6 033017 force regidx_data ,regext_index -0x73c7 033018 ifetch 1 ,regc -0x73c8 033019 and_into 0x3 ,pdata -0x73c9 033020 lshift16 pdata ,regext -0x73ca 033021 set1 8 ,regext -0x73cb 033022 call clear_hidata -0x73cc 033023 call do_aes_cbc -0x73cd 033025 copy rega ,loopcnt -0x73ce 033026 add regc ,2 ,contr -0x73cf 033027 call padding_data -: 033028 generate_mic_loop: -0x73d0 033029 call aes_load_data -0x73d1 033030 call do_aes_cbc -0x73d2 033031 deposit loopcnt -0x73d3 033032 branch generate_mic_end ,blank -0x73d4 033033 branch generate_mic_loop -: 033034 generate_mic_end: -0x73d5 033035 force regidx_result ,regext_index -0x73d6 033036 deposit regext -0x73d7 033037 store 4 ,mem_le_mic -0x73d8 033038 rtn -: 033040 aes_crypt_data: -0x73d9 033041 increase 1 ,rega -0x73da 033042 call first_block_data -0x73db 033043 copy regc ,contr -0x73dc 033044 call aes_load_xor -0x73dd 033045 call do_aes_ctr -0x73de 033046 call store_enc_data -0x73df 033047 increase 16 ,regc -0x73e0 033048 increase -16 ,regb -0x73e1 033049 branch aes_crypt_data ,positive -0x73e2 033050 rtn -: 033052 le_encrypt: -0x73e3 033053 bpatchx patch3c_1 ,mem_patch3c -0x73e4 033054 arg mem_le_txheader ,regc -0x73e5 033055 fetcht 5 ,mem_le_pcnt_tx -0x73e6 033056 call generate_mic -0x73e7 033057 force regidx_xor ,regext_index -0x73e8 033058 iforce regext -0x73e9 033059 force 0 ,rega -0x73ea 033060 call first_block_data -0x73eb 033061 call do_aes_ctr -0x73ec 033062 arg mem_le_txpayload ,regc -0x73ed 033063 fetch 1 ,mem_le_txlen -0x73ee 033064 add pdata ,-1 ,regb -0x73ef 033065 iadd regc ,contw -0x73f0 033066 force regidx_result ,regext_index -0x73f1 033067 deposit regext -0x73f2 033068 istore 4 ,contw -0x73f3 033069 call aes_crypt_data -0x73f4 033070 fetch 1 ,mem_le_txlen -0x73f5 033071 increase 4 ,pdata -0x73f6 033072 store 1 ,mem_le_txlen -0x73f7 033073 fetcht 5 ,mem_le_pcnt_tx -0x73f8 033074 increase 1 ,temp -0x73f9 033075 storet 5 ,mem_le_pcnt_tx -0x73fa 033076 rtn -: 033078 le_decrypt: -0x73fb 033079 bpatchx patch3c_2 ,mem_patch3c -0x73fc 033080 fetch 1 ,mem_le_rxbuf + 1 -0x73fd 033081 sub pdata ,20 ,null -0x73fe 033082 branch le_dec_cont ,positive -: 033083 le_dec_cont: -0x73ff 033084 arg mem_le_rxbuf + 2 ,regc -0x7400 033085 add pdata ,-1 ,regb -0x7401 033086 increase -4 ,pdata -0x7402 033087 store 1 ,mem_le_rxbuf + 1 -0x7403 033088 iadd regc ,contr -0x7404 033089 ifetch 4 ,contr -0x7405 033090 force regidx_xor ,regext_index -0x7406 033091 iforce regext -0x7407 033092 force 0 ,rega -0x7408 033093 fetcht 5 ,mem_le_pcnt_rx -0x7409 033094 call first_block_data -0x740a 033095 call do_aes_ctr -0x740b 033096 force regidx_result ,regext_index -0x740c 033097 deposit regext -0x740d 033098 store 4 ,mem_le_peer_mic -0x740e 033099 call aes_crypt_data -0x740f 033100 arg mem_le_rxbuf ,regc -0x7410 033101 call generate_mic -0x7411 033102 fetcht 4 ,mem_le_peer_mic -0x7412 033103 isub temp ,pdata -0x7413 033104 nrtn blank -0x7414 033105 fetch 4 ,mem_le_last_mic -0x7415 033106 isub temp ,pdata -0x7416 033107 rtn blank -0x7417 033108 storet 4 ,mem_le_last_mic -0x7418 033109 fetch 5 ,mem_le_pcnt_rx -0x7419 033110 increase 1 ,pdata -0x741a 033111 store 5 ,mem_le_pcnt_rx -0x741b 033112 force 0 ,pdata -0x741c 033113 rtn -: 033115 wait_aes: -0x741d 033116 nbranch wait_aes ,aes_ready -0x741e 033117 rtn -: 033119 do_aes_ocb: -0x741f 033120 force 0x30 ,aes_ctrl -0x7420 033121 force 0x0 ,aes_ctrl -0x7421 033122 branch wait_aes -: 033124 do_aes_cbc: -0x7422 033125 force 0x32 ,aes_ctrl -0x7423 033126 force 0x2 ,aes_ctrl -0x7424 033127 branch wait_aes -: 033129 do_aes_ctr: -0x7425 033130 force 0x34 ,aes_ctrl -0x7426 033131 force 0x4 ,aes_ctrl -0x7427 033132 branch wait_aes -: 033135 aes_init: -0x7428 033136 force 1 ,aes_ctrl -0x7429 033137 force 0 ,aes_ctrl -0x742a 033138 rtn -: 033139 function_s1: -0x742b 033140 force regidx_data ,regext_index -0x742c 033141 fetch 4 ,mem_le_mrand -0x742d 033142 iforce regext -0x742e 033143 increase 1 ,regext_index -0x742f 033144 ifetch 4 ,contr -0x7430 033145 iforce regext -0x7431 033146 increase 1 ,regext_index -0x7432 033147 fetch 4 ,mem_le_srand -0x7433 033148 iforce regext -0x7434 033149 increase 1 ,regext_index -0x7435 033150 ifetch 4 ,contr -0x7436 033151 iforce regext -0x7437 033152 increase 1 ,regext_index -0x7438 033153 call aes_clear -0x7439 033154 increase -4 ,regext_index -0x743a 033155 fetch 4 ,mem_le_tk -0x743b 033156 copy pdata ,regext -0x743c 033157 increase 4 ,regext_index -0x743d 033158 force 0x38 ,aes_ctrl -0x743e 033159 force 0x8 ,aes_ctrl -0x743f 033160 branch wait_aes -: 033163 function_c1: -0x7440 033164 bpatchx patch3c_3 ,mem_patch3c -0x7441 033165 fetch 6 ,mem_le_lap -0x7442 033166 fetcht 6 ,mem_le_plap -0x7443 033167 branch function_c1_master ,master -0x7444 033168 fetch 6 ,mem_le_plap -0x7445 033169 fetcht 6 ,mem_le_lap -: 033170 function_c1_master: -0x7446 033171 force regidx_xor ,regext_index -0x7447 033172 copy temp ,regext -0x7448 033173 increase 1 ,regext_index -0x7449 033174 rshift32 temp ,regext -0x744a 033175 lshift16 pdata ,pdata -0x744b 033176 ior regext ,regext -0x744c 033177 increase 1 ,regext_index -0x744d 033178 rshift32 pdata ,regext -0x744e 033179 increase 1 ,regext_index -0x744f 033180 force 0 ,regext -0x7450 033181 force 0 ,pdata -0x7451 033182 fetch 1 ,mem_le_conn_peer_addr_type -0x7452 033183 fetcht 1 ,mem_le_adv_own_addr_type -0x7453 033184 nbranch function_c1_irat ,master -0x7454 033186 fetch 1 ,mem_le_conn_own_addr_type -0x7455 033187 fetcht 1 ,mem_le_conn_peer_addr_type -: 033188 function_c1_irat: -0x7456 033189 store 1 ,mem_le_iat -0x7457 033190 storet 1 ,mem_le_rat -0x7458 033191 force regidx_data ,regext_index -0x7459 033192 arg mem_le_iat ,regb -0x745a 033193 force 4 ,loopcnt -: 033194 function_c1_loop1: -0x745b 033195 ifetch 4 ,rega -0x745c 033196 ifetcht 4 ,regb -0x745d 033197 ixor temp ,regext -0x745e 033198 increase 1 ,regext_index -0x745f 033199 increase 4 ,rega -0x7460 033200 increase 4 ,regb -0x7461 033201 loop function_c1_loop1 -0x7462 033202 call aes_clear -0x7463 033203 increase -4 ,regext_index -0x7464 033204 fetch 4 ,mem_le_tk -0x7465 033205 copy pdata ,regext -0x7466 033206 increase 4 ,regext_index -0x7467 033207 force 0x38 ,aes_ctrl -0x7468 033208 force 0xc ,aes_ctrl -0x7469 033209 call wait_aes -0x746a 033211 call aes_clear_data -0x746b 033212 force 0x3a ,aes_ctrl -0x746c 033213 force 0x8 ,aes_ctrl -0x746d 033214 branch wait_aes -: 033216 padding_data: -0x746e 033217 compare 0 ,loopcnt ,3 -0x746f 033218 rtn true -0x7470 033219 deposit contr -0x7471 033220 iadd loopcnt ,contw -0x7472 033221 force 0 ,pdata -: 033222 padding_loop: -0x7473 033223 istore 1 ,contw -0x7474 033224 increase 1 ,loopcnt -0x7475 033225 compare 0 ,loopcnt ,3 -0x7476 033226 rtn true -0x7477 033227 branch padding_loop -: 033229 aes_load_data: -0x7478 033230 force regidx_data ,regext_index -: 033231 load_data_loop: -0x7479 033232 deposit loopcnt -0x747a 033233 branch load_data_padding ,blank -0x747b 033234 ifetch 4 ,contr -0x747c 033235 increase -4 ,loopcnt -: 033236 load_data_padding: -0x747d 033237 iforce regext -0x747e 033238 increase 1 ,regext_index -0x747f 033239 compare regidx_key ,regext_index ,0xf -0x7480 033240 rtn true -0x7481 033241 branch load_data_loop -: 033243 aes_load_xor: -0x7482 033244 force regidx_xor ,regext_index -0x7483 033245 branch load_regext -: 033246 load_key: -0x7484 033247 force regidx_key ,regext_index -0x7485 033248 branch load_regext -: 033249 load_data128: -0x7486 033250 force regidx_data ,regext_index -: 033251 load_regext: -0x7487 033252 force 4 ,loopcnt -: 033253 load_regext_loop: -0x7488 033254 ifetch 4 ,contr -0x7489 033255 iforce regext -0x748a 033256 increase 1 ,regext_index -0x748b 033257 loop load_regext_loop -0x748c 033258 rtn -: 033260 load_sk: -0x748d 033261 arg mem_le_sk ,contr -0x748e 033262 branch load_key -: 033264 clear_hidata: -0x748f 033265 force 4 ,loopcnt -0x7490 033266 branch clear_data_rest -: 033268 aes_clear_data: -0x7491 033269 force regidx_data ,regext_index -: 033270 aes_clear: -0x7492 033271 force 4 ,loopcnt -: 033272 clear_loop: -0x7493 033273 force 0 ,regext -: 033274 clear_data_rest: -0x7494 033275 increase 1 ,regext_index -0x7495 033276 loop clear_loop -0x7496 033277 rtn -: 033279 store_aes_result: -0x7497 033280 force regidx_result ,regext_index -0x7498 033281 force 4 ,loopcnt -: 033282 send_aes_result_loop: -0x7499 033283 deposit regext -0x749a 033284 istore 4 ,contw -0x749b 033285 increase 1 ,regext_index -0x749c 033286 loop send_aes_result_loop -0x749d 033287 rtn -: 033289 store_enc_data: -0x749e 033290 force regidx_result ,regext_index -0x749f 033291 copy regc ,contw -0x74a0 033292 add regb ,1 ,loopcnt -0x74a1 033293 sub loopcnt ,15 ,null -0x74a2 033294 branch store_enc_loop ,positive -0x74a3 033295 force 16 ,loopcnt -: 033296 store_enc_loop: -0x74a4 033297 deposit regext -0x74a5 033298 sub loopcnt ,3 ,null -0x74a6 033299 branch store_enc_byte ,positive -0x74a7 033300 istore 4 ,contw -0x74a8 033301 increase -4 ,loopcnt -0x74a9 033302 rtn zero -0x74aa 033303 increase 1 ,regext_index -0x74ab 033304 branch store_enc_loop -: 033305 store_enc_byte: -0x74ac 033306 istore 1 ,contw -0x74ad 033307 rshift8 pdata ,pdata -0x74ae 033308 loop store_enc_byte -0x74af 033309 rtn -: 033312 compare_res: -0x74b0 033313 force regidx_result ,regext_index -0x74b1 033314 force 4 ,loopcnt -: 033315 compare_res_loop: -0x74b2 033316 ifetch 4 ,contr -0x74b3 033317 isub regext ,null -0x74b4 033318 nrtn zero -0x74b5 033319 increase 1 ,regext_index -0x74b6 033320 loop compare_res_loop -0x74b7 033321 force 0 ,null -0x74b8 033322 rtn -: 033324 enable_authrom: -0x74b9 033325 hfetch 1 ,core_clkoff -0x74ba 033326 set0 clock_off_auth_rom ,pdata -0x74bb 033327 hstore 1 ,core_clkoff -0x74bc 033328 rtn -: 033330 disable_authrom: -0x74bd 033331 hfetch 1 ,core_clkoff -0x74be 033332 set1 clock_off_auth_rom ,pdata -0x74bf 033333 hstore 1 ,core_clkoff -0x74c0 033334 rtn -: 033336 init_memp: -0x74c1 033337 arg mem_p ,contw -0x74c2 033338 setsect 0 ,0x3ffff -0x74c3 033339 setsect 1 ,0x3ffff -0x74c4 033340 setsect 2 ,0x3ffff -0x74c5 033341 setsect 3 ,0x3fbff -0x74c6 033342 istore 9 ,contw -0x74c7 033343 setsect 0 ,0x3ffff -0x74c8 033344 setsect 1 ,0x3ffff -0x74c9 033345 setsect 2 ,0x3ffff -0x74ca 033346 setsect 3 ,0x3ffff -0x74cb 033347 istore 9 ,contw -0x74cc 033348 setsect 0 ,0x3ffff -0x74cd 033349 setsect 1 ,0x3ffff -0x74ce 033350 setsect 2 ,0x3cfff -0x74cf 033351 setsect 3 ,0x3ffff -0x74d0 033352 istore 9 ,contw -0x74d1 033353 setsect 0 ,0x3ffff -0x74d2 033354 setsect 1 ,0x3ffff -0x74d3 033355 setsect 2 ,0x3ffef -0x74d4 033356 setsect 3 ,0x3ffff -0x74d5 033357 istore 9 ,contw -0x74d6 033358 setsect 0 ,0x3ffff -0x74d7 033359 setsect 1 ,0x3ffff -0x74d8 033360 setsect 2 ,0x3ffff -0x74d9 033361 setsect 3 ,0x3ffff -0x74da 033362 istore 9 ,contw -0x74db 033363 setsect 0 ,0x3ffff -0x74dc 033364 setsect 1 ,0x26c7f -0x74dd 033365 setsect 2 ,0x146b -0x74de 033366 setsect 3 ,0x37bb3 -0x74df 033367 istore 9 ,contw -0x74e0 033368 setsect 0 ,0x1feb8 -0x74e1 033369 setsect 1 ,0x10c12 -0x74e2 033370 setsect 2 ,0x2b722 -0x74e3 033371 setsect 3 ,0x29fa6 -0x74e4 033372 istore 9 ,contw -0x74e5 033373 setsect 0 ,0xe70f -0x74e6 033374 setsect 1 ,0x16720 -0x74e7 033375 setsect 2 ,0x519e -0x74e8 033376 setsect 3 ,0x19084 -0x74e9 033377 istore 9 ,contw -0x74ea 033378 setsect 0 ,0x31012 -0x74eb 033379 setsect 1 ,0x360bf -0x74ec 033380 setsect 2 ,0x3f0af -0x74ed 033381 setsect 3 ,0x3d3 -0x74ee 033382 istore 9 ,contw -0x74ef 033383 setsect 0 ,0x3a188 -0x74f0 033384 setsect 1 ,0x3ad0 -0x74f1 033385 setsect 2 ,0x3cbf2 -0x74f2 033386 setsect 3 ,0x243d9 -0x74f3 033387 istore 9 ,contw -0x74f4 033388 setsect 0 ,0x2b030 -0x74f5 033389 setsect 1 ,0x36a03 -0x74f6 033390 setsect 2 ,0x11188 -0x74f7 033391 setsect 3 ,0x1e520 -0x74f8 033392 istore 9 ,contw -0x74f9 033393 setsect 0 ,0x3a11e -0x74fa 033394 setsect 1 ,0xfe5d -0x74fb 033395 setsect 2 ,0xdd57 -0x74fc 033396 setsect 3 ,0x1ac93 -0x74fd 033397 istore 9 ,contw -0x74fe 033398 setsect 0 ,0x11ed -0x74ff 033399 setsect 1 ,0x218c4 -0x7500 033400 setsect 2 ,0x8da7 -0x7501 033401 setsect 3 ,0x257ff -0x7502 033402 istore 9 ,contw -0x7503 033403 setsect 0 ,0x3192b -0x7504 033404 setsect 1 ,0x34641 -0x7505 033405 setsect 2 ,0x1be0c -0x7506 033406 setsect 3 ,0x366ad -0x7507 033407 istore 9 ,contw -0x7508 033408 setsect 0 ,0x1f83 -0x7509 033409 setsect 1 ,0x15a23 -0x750a 033410 setsect 2 ,0x3f9b0 -0x750b 033411 setsect 3 ,0x3949 -0x750c 033412 istore 9 ,contw -0x750d 033413 setsect 0 ,0x13a51 -0x750e 033414 setsect 1 ,0x153fd -0x750f 033415 setsect 2 ,0x3372a -0x7510 033416 setsect 3 ,0xf1bb -0x7511 033417 istore 9 ,contw -0x7512 033418 setsect 0 ,0x3ae85 -0x7513 033419 setsect 1 ,0x1eed9 -0x7514 033420 setsect 2 ,0x9e66 -0x7515 033421 setsect 3 ,0x1a8 -0x7516 033422 istore 8 ,contw -0x7517 033423 rtn -: 033427 init_memp_256: -0x7518 033428 arg mem_p_256 ,contw -0x7519 033429 setsect 0 ,0x3ffff -0x751a 033430 setsect 1 ,0x3ffff -0x751b 033431 setsect 2 ,0x3ffff -0x751c 033432 setsect 3 ,0x3ffff -0x751d 033433 istore 9 ,contw -0x751e 033434 setsect 0 ,0x3ffff -0x751f 033435 setsect 1 ,0x3f -0x7520 033436 setsect 2 ,0x0 -0x7521 033437 setsect 3 ,0x0 -0x7522 033438 istore 9 ,contw -0x7523 033439 setsect 0 ,0x0 -0x7524 033440 setsect 1 ,0x0 -0x7525 033441 setsect 2 ,0x1000 -0x7526 033442 setsect 3 ,0x0 -0x7527 033443 istore 9 ,contw -0x7528 033444 setsect 0 ,0x3ff00 -0x7529 033445 setsect 1 ,0x3ffff -0x752a 033446 setsect 2 ,0x3ffcf -0x752b 033447 setsect 3 ,0x3ffff -0x752c 033448 istore 9 ,contw -0x752d 033449 setsect 0 ,0x3ffff -0x752e 033450 setsect 1 ,0x3ffff -0x752f 033451 setsect 2 ,0x3ffff -0x7530 033452 setsect 3 ,0x3ff -0x7531 033453 istore 9 ,contw -0x7532 033454 setsect 0 ,0x0 -0x7533 033455 setsect 1 ,0x0 -0x7534 033456 setsect 2 ,0x0 -0x7535 033457 setsect 3 ,0x0 -0x7536 033458 istore 9 ,contw -0x7537 033459 setsect 0 ,0x10000 -0x7538 033460 setsect 1 ,0x0 -0x7539 033461 setsect 2 ,0x3f000 -0x753a 033462 setsect 3 ,0x3ffff -0x753b 033463 istore 9 ,contw -0x753c 033464 setsect 0 ,0x296ff -0x753d 033465 setsect 1 ,0x22630 -0x753e 033466 setsect 2 ,0x3945d -0x753f 033467 setsect 3 ,0x3d284 -0x7540 033468 istore 9 ,contw -0x7541 033469 setsect 0 ,0x333a0 -0x7542 033470 setsect 1 ,0x4b7a -0x7543 033471 setsect 2 ,0x37d8 -0x7544 033472 setsect 3 ,0x3c9dc -0x7545 033473 istore 9 ,contw -0x7546 033474 setsect 0 ,0x3a440 -0x7547 033475 setsect 1 ,0x1b958 -0x7548 033476 setsect 2 ,0x38bce -0x7549 033477 setsect 3 ,0x1091f -0x754a 033478 istore 9 ,contw -0x754b 033479 setsect 0 ,0x2e12c -0x754c 033480 setsect 1 ,0x1f47c -0x754d 033481 setsect 2 ,0x356b1 -0x754e 033482 setsect 3 ,0x2fd47 -0x754f 033483 istore 9 ,contw -0x7550 033484 setsect 0 ,0x6837 -0x7551 033485 setsect 1 ,0x2ed90 -0x7552 033486 setsect 2 ,0x1ecec -0x7553 033487 setsect 3 ,0x1acc5 -0x7554 033488 istore 9 ,contw -0x7555 033489 setsect 0 ,0x23357 -0x7556 033490 setsect 1 ,0x18af3 -0x7557 033491 setsect 2 ,0xf9e1 -0x7558 033492 setsect 3 ,0x129f0 -0x7559 033493 istore 9 ,contw -0x755a 033494 setsect 0 ,0x2e7eb -0x755b 033495 setsect 1 ,0x3e6e3 -0x755c 033496 setsect 2 ,0x3e1a7 -0x755d 033497 setsect 3 ,0x10b8b -0x755e 033498 istore 9 ,contw -0x755f 033499 setsect 0 ,0x24fe3 -0x7560 033500 setsect 1 ,0x20ef -0x7561 033501 setsect 2 ,0x1b5a6 -0x7562 033502 setsect 3 ,0xdc2f -0x7563 033503 istore 9 ,contw -0x7564 033504 setsect 0 ,0x13860 -0x7565 033505 setsect 1 ,0x2bd69 -0x7566 033506 setsect 2 ,0x391a -0x7567 033507 setsect 3 ,0x1b222 -0x7568 033508 istore 9 ,contw -0x7569 033509 rtn -: 033512 publickey_init: -0x756a 033513 fetch 1 ,mem_ssp_enable -0x756b 033514 nbranch sp_initialize ,blank -0x756c 033515 branch sp_initialize_256 -: 033517 sp_calc_sequence_256_check: -0x756d 033518 bpatchx patch3c_4 ,mem_patch3c -0x756e 033519 fetch 1 ,mem_ssp_enable -0x756f 033520 rtn blank -0x7570 033521 fetch 1 ,mem_sp_local_key_invalid -0x7571 033522 rtnne sp_key_valid -0x7572 033523 fetch 1 ,mem_le_secure_connect_enable -0x7573 033524 rtn blank -0x7574 033525 fetch 1 ,mem_le_sc_local_key_invalid -0x7575 033526 rtneq sp_key_valid_256 -0x7576 033527 fetch 2 ,mem_ui_state_map -0x7577 033528 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 -0x7578 033529 fetch 1 ,mem_le_sc_calc -0x7579 033530 beq sp_calc_standby ,sp_initialize_256 -0x757a 033531 rtn -: 033532 stop_publickey_calc_256: -0x757b 033533 jam sp_calc_standby ,mem_le_sc_calc -0x757c 033534 rtn -: 033537 sp_initialize: -0x757d 033538 bpatchx patch3c_5 ,mem_patch3c -0x757e 033539 fetch 1 ,mem_ssp_enable -0x757f 033540 branch ssp_disable ,blank -0x7580 033541 call ssp_enable -0x7581 033542 call sp_clear_flags -0x7582 033543 branch sp_pubkey_calc -: 033545 sp_clear_flags: -0x7583 033546 setarg 0 -0x7584 033547 store 8 ,mem_sp_state_start -0x7585 033548 store 4 ,mem_sp_flag_start -0x7586 033549 store 7 ,mem_sp_iocap_remote -0x7587 033550 rtn -: 033552 sp_generate_local_key: -0x7588 033553 jam sp_flag_commit ,mem_sp_flag -0x7589 033554 branch sp_generate_local_key0 -: 033555 sp_master_generate_local_key: -0x758a 033556 fetch 1 ,mem_sp_local_key_invalid -0x758b 033557 beq sp_key_valid ,sp_dhkey_calc -0x758c 033558 branch assert -: 033559 sp_generate_local_key0: -0x758d 033560 fetch 1 ,mem_sp_local_key_invalid -0x758e 033561 beq sp_key_valid ,sp_start_send_pubkey -0x758f 033562 branch sp_pubkey_calc -: 033564 sp_start_send_pubkey: -0x7590 033565 call sp_dhkey_calc -0x7591 033566 fetch 1 ,mem_master_sp_state -0x7592 033567 nrtn blank -0x7593 033568 jam sp_stat_key_send ,mem_sp_state -0x7594 033569 rtn -: 033572 sp_calc_check_publickey_256: -0x7595 033573 call sp_calc_b256 -0x7596 033574 arg mem_le_pubkey_remote_y_256 ,rega -0x7597 033575 arg mem_t7_256 ,contw -0x7598 033576 call bn_sqrmod_256 -0x7599 033577 arg mem_le_pubkey_remote_x_256 ,rega -0x759a 033578 arg mem_t2_256 ,contw -0x759b 033579 call bn_sqrmod_256 -0x759c 033580 arg mem_t2_256 ,rega -0x759d 033581 arg mem_le_pubkey_remote_x_256 ,regb -0x759e 033582 arg mem_t2_256 ,contw -0x759f 033583 call bn_mulmod_256 -0x75a0 033584 arg mem_a_256 ,rega -0x75a1 033585 arg mem_le_pubkey_remote_x_256 ,regb -0x75a2 033586 arg mem_t3_256 ,contw -0x75a3 033587 call bn_mulmod_256 -0x75a4 033588 arg mem_t3_256 ,rega -0x75a5 033589 arg mem_t2_256 ,regb -0x75a6 033590 arg mem_t2_256 ,contw -0x75a7 033591 call bn_addmod_256 -0x75a8 033592 arg mem_t0_256 ,rega -0x75a9 033593 arg mem_t2_256 ,regb -0x75aa 033594 arg mem_t0_256 ,contw -0x75ab 033595 call bn_addmod_256 -0x75ac 033596 arg 32 ,loopcnt -0x75ad 033597 arg mem_t7_256 ,rega -0x75ae 033598 arg mem_t0_256 ,regb -0x75af 033599 branch string_compare -: 033601 sp_calc_b256: -0x75b0 033602 arg mem_gy_256 ,rega -0x75b1 033603 arg mem_t0_256 ,contw -0x75b2 033604 call bn_sqrmod_256 -0x75b3 033605 arg mem_gx_256 ,rega -0x75b4 033606 arg mem_t2_256 ,contw -0x75b5 033607 call bn_sqrmod_256 -0x75b6 033608 arg mem_t2_256 ,rega -0x75b7 033609 arg mem_gx_256 ,regb -0x75b8 033610 arg mem_t2_256 ,contw -0x75b9 033611 call bn_mulmod_256 -0x75ba 033612 arg mem_a_256 ,rega -0x75bb 033613 arg mem_gx_256 ,regb -0x75bc 033614 arg mem_t3_256 ,contw -0x75bd 033615 call bn_mulmod_256 -0x75be 033616 arg mem_t3_256 ,rega -0x75bf 033617 arg mem_t2_256 ,regb -0x75c0 033618 arg mem_t2_256 ,contw -0x75c1 033619 call bn_addmod_256 -0x75c2 033620 arg mem_t0_256 ,rega -0x75c3 033621 arg mem_t2_256 ,regb -0x75c4 033622 arg mem_t0_256 ,contw -0x75c5 033623 branch bn_submod_256 -: 033625 sp_calc_check_publickey: -0x75c6 033626 call sp_calc_b -0x75c7 033627 arg mem_sp_pubkey_remote_y ,rega -0x75c8 033628 arg mem_t7_256 ,contw -0x75c9 033629 call bn_sqrmod -0x75ca 033630 arg mem_sp_pubkey_remote_x ,rega -0x75cb 033631 arg mem_t2_256 ,contw -0x75cc 033632 call bn_sqrmod -0x75cd 033633 arg mem_t2_256 ,rega -0x75ce 033634 arg mem_sp_pubkey_remote_x ,regb -0x75cf 033635 arg mem_t2_256 ,contw -0x75d0 033636 call bn_mulmod -0x75d1 033637 arg mem_a ,rega -0x75d2 033638 arg mem_sp_pubkey_remote_x ,regb -0x75d3 033639 arg mem_t3_256 ,contw -0x75d4 033640 call bn_mulmod -0x75d5 033641 arg mem_t3_256 ,rega -0x75d6 033642 arg mem_t2_256 ,regb -0x75d7 033643 arg mem_t2_256 ,contw -0x75d8 033644 call bn_addmod -0x75d9 033645 arg mem_t0_256 ,rega -0x75da 033646 arg mem_t2_256 ,regb -0x75db 033647 arg mem_t0_256 ,contw -0x75dc 033648 call bn_addmod -0x75dd 033649 arg 24 ,loopcnt -0x75de 033650 arg mem_t7_256 ,rega -0x75df 033651 arg mem_t0_256 ,regb -0x75e0 033652 branch string_compare -: 033654 sp_calc_b: -0x75e1 033655 arg mem_gy ,rega -0x75e2 033656 arg mem_t0_256 ,contw -0x75e3 033657 call bn_sqrmod -0x75e4 033658 arg mem_gx ,rega -0x75e5 033659 arg mem_t2_256 ,contw -0x75e6 033660 call bn_sqrmod -0x75e7 033661 arg mem_t2_256 ,rega -0x75e8 033662 arg mem_gx ,regb -0x75e9 033663 arg mem_t2_256 ,contw -0x75ea 033664 call bn_mulmod -0x75eb 033665 arg mem_a ,rega -0x75ec 033666 arg mem_gx ,regb -0x75ed 033667 arg mem_t3_256 ,contw -0x75ee 033668 call bn_mulmod -0x75ef 033669 arg mem_t3_256 ,rega -0x75f0 033670 arg mem_t2_256 ,regb -0x75f1 033671 arg mem_t2_256 ,contw -0x75f2 033672 call bn_addmod -0x75f3 033673 arg mem_t0_256 ,rega -0x75f4 033674 arg mem_t2_256 ,regb -0x75f5 033675 arg mem_t0_256 ,contw -0x75f6 033676 branch bn_submod -: 033679 sp_calculate_commitment: -0x75f7 033680 fetch 1 ,mem_sp_calc -0x75f8 033681 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc -0x75f9 033682 call sp_local_random_key_generator -0x75fa 033683 arg mem_sp_prarm_stack ,contw -0x75fb 033684 setarg mem_sp_random_local_end -0x75fc 033685 istore 2 ,contw -0x75fd 033686 setarg mem_sp_pubkey_local_x_end -0x75fe 033687 istore 2 ,contw -0x75ff 033688 setarg mem_sp_pubkey_remote_x_end -0x7600 033689 istore 2 ,contw -0x7601 033690 branch sp_calculate_commitment0 -: 033691 master_sp_calculate_commitment: -0x7602 033692 arg mem_sp_prarm_stack ,contw -0x7603 033693 setarg mem_sp_random_remote_end -0x7604 033694 istore 2 ,contw -0x7605 033695 setarg mem_sp_pubkey_remote_x_end -0x7606 033696 istore 2 ,contw -0x7607 033697 setarg mem_sp_pubkey_local_x_end -0x7608 033698 istore 2 ,contw -: 033699 sp_calculate_commitment0: -0x7609 033700 call function_f1 -0x760a 033701 fetch 1 ,mem_master_sp_state -0x760b 033702 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 -0x760c 033703 jam sp_flag_commit ,mem_sp_flag -0x760d 033704 jam sp_stat_commit_send ,mem_sp_state -0x760e 033705 rtn -: 033706 master_sp_calculate_commitment0: -0x760f 033707 jam sp_stat_commitment_compare ,mem_master_sp_state -0x7610 033708 call sp_master_generate_local_key -0x7611 033709 branch master_set_mem_master_sp_flag -: 033711 sp_local_random_key_generator: -0x7612 033712 arg mem_sp_random_local ,contw -0x7613 033713 force 8 ,queue -0x7614 033714 branch random_generator -: 033716 sp_calculate_commitment_wait_dhkey_calc: -0x7615 033717 jam sp_flag_commit ,mem_sp_flag -0x7616 033718 rtn -: 033720 sp_confirm_check: -0x7617 033722 bpatchx patch3c_6 ,mem_patch3c -0x7618 033723 arg mem_addr_value ,contw -0x7619 033724 fetch 6 ,mem_lap -0x761a 033725 istore 6 ,contw -0x761b 033726 fetch 6 ,mem_plap -0x761c 033727 istore 6 ,contw -0x761d 033728 fetch 3 ,mem_sp_iocap_remote -0x761e 033729 istore 3 ,contw -0x761f 033731 call function_f3a -0x7620 033733 arg mem_sp_calc_result_high ,rega -0x7621 033734 arg mem_sp_check_result ,regb -0x7622 033735 force 4 ,queue -0x7623 033736 call compare4 -0x7624 033737 nbranch sp_confirm_check_failed ,true -0x7625 033739 call sp_confirm_check_success -0x7626 033740 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x7627 033741 branch tid_set_reply -: 033743 sp_confirm_check_success: -0x7628 033744 fetch 1 ,mem_master_sp_state -0x7629 033745 beq sp_stat_confirm_check ,sp_confirm_check_success_master -0x762a 033746 jam sp_stat_confirm_calc ,mem_sp_state -0x762b 033747 jam sp_flag_commit ,mem_sp_flag -0x762c 033748 jam lmp_accepted ,mem_lmo_opcode2 -0x762d 033749 rtn -: 033750 sp_confirm_check_success_master: -0x762e 033751 jam lmp_accepted ,mem_lmo_opcode2 -0x762f 033752 jam sp_state_end ,mem_master_sp_state -0x7630 033753 branch master_set_mem_master_sp_flag -: 033756 sp_confirm_check_failed: -0x7631 033757 fetch 1 ,mem_master_sp_state -0x7632 033758 beq sp_stat_confirm_check ,sp_confirm_check_failed_master -0x7633 033759 jam sp_stat_null ,mem_sp_state -0x7634 033760 jam lmp_not_accepted ,mem_lmo_opcode2 -0x7635 033762 jam authentication_failure_error ,mem_lmo_reason2 -0x7636 033763 rtn -: 033764 sp_confirm_check_failed_master: -0x7637 033765 jam lmp_not_accepted ,mem_lmo_opcode2 -0x7638 033766 jam sp_stat_null ,mem_master_sp_state -0x7639 033767 rtn -: 033769 sp_confirm_calc: -0x763a 033770 fetch 1 ,mem_sp_dh_ready -0x763b 033771 beq sp_flag_commit ,sp_confirm_calc_ready -0x763c 033772 jam sp_stat_confirm_calc ,mem_master_sp_state -0x763d 033773 branch master_set_mem_master_sp_flag -: 033774 sp_confirm_calc_ready: -0x763e 033775 arg mem_addr_value ,contw -0x763f 033776 fetch 6 ,mem_plap -0x7640 033777 istore 6 ,contw -0x7641 033778 fetch 6 ,mem_lap -0x7642 033779 istore 6 ,contw -0x7643 033780 fetch 3 ,mem_sp_iocap_local -0x7644 033781 istore 3 ,contw -0x7645 033783 call function_f3b -0x7646 033784 fetch 1 ,mem_master_sp_state -0x7647 033785 beq sp_stat_confirm_calc ,sp_confirm_calc_master -0x7648 033786 jam sp_stat_confirm_send ,mem_sp_state -0x7649 033787 jam sp_flag_commit ,mem_sp_flag -0x764a 033788 rtn -: 033789 sp_confirm_calc_master: -0x764b 033790 jam sp_stat_confirm_send ,mem_master_sp_state -0x764c 033791 jam sp_flag_commit ,mem_master_sp_flag -0x764d 033792 rtn -: 033794 sp_master_key_prarm_push: -0x764e 033795 arg mem_sp_prarm_stack ,contw -0x764f 033796 fetch 6 ,mem_plap -0x7650 033797 istore 6 ,contw -0x7651 033798 fetch 6 ,mem_lap -0x7652 033799 istore 6 ,contw -0x7653 033800 setarg mem_sp_random_local_end -0x7654 033801 istore 2 ,contw -0x7655 033802 setarg mem_sp_random_remote_end -0x7656 033803 istore 2 ,contw -0x7657 033804 branch sp_link_key_calc -: 033805 sp_link_key_prarm_push: -0x7658 033806 jam sp_stat_done ,mem_sp_state -0x7659 033807 arg mem_sp_prarm_stack ,contw -0x765a 033808 fetch 6 ,mem_lap -0x765b 033809 istore 6 ,contw -0x765c 033810 fetch 6 ,mem_plap -0x765d 033811 istore 6 ,contw -0x765e 033812 setarg mem_sp_random_remote_end -0x765f 033813 istore 2 ,contw -0x7660 033814 setarg mem_sp_random_local_end -0x7661 033815 istore 2 ,contw -: 033816 sp_link_key_calc: -0x7662 033818 arg mem_addr_value ,contw -0x7663 033819 fetch 6 ,mem_sp_prarm_stack -0x7664 033820 istore 6 ,contw -0x7665 033821 fetch 6 ,mem_sp_prarm_stack + 6 -0x7666 033822 istore 6 ,contw -0x7667 033824 call function_f2 -0x7668 033827 jam 1 ,mem_link_key_exists -0x7669 033828 arg mem_link_key ,contw -0x766a 033829 arg mem_sp_calc_result_high ,contr -0x766b 033830 call memcpy16 -0x766c 033831 branch generate_linkkey_continue -: 033834 sp_pubkey_calc: -0x766d 033835 bpatchx patch3c_7 ,mem_patch3c -0x766e 033836 fetch 1 ,mem_sp_local_key_invalid -0x766f 033837 rtnne sp_key_invalid -0x7670 033838 fetch 1 ,mem_sp_calc -0x7671 033839 rtnne sp_calc_standby -0x7672 033840 arg mem_sp_private_key ,contw -0x7673 033841 force 11 ,queue -0x7674 033842 call random_generator -0x7675 033843 random pdata -0x7676 033844 rshift pdata ,pdata -0x7677 033845 istore 2 ,contw -0x7678 033847 arg mem_k ,contw -0x7679 033848 arg mem_sp_private_key ,contr -0x767a 033849 call memcpy24 -0x767b 033851 arg mem_ax ,contw -0x767c 033852 arg mem_gx ,contr -0x767d 033853 call memcpy48 -0x767e 033855 arg mem_az ,contw -0x767f 033856 call bn_zero -0x7680 033857 jam 1 ,mem_az -0x7681 033859 call eckp_calc_init -0x7682 033860 jam sp_calc_pubkey ,mem_sp_calc -0x7683 033861 rtn -: 033863 sp_pubkey_generated: -0x7684 033864 arg mem_sp_pubkey_local ,contw -0x7685 033865 arg mem_bx ,contr -0x7686 033866 call memcpy48 -0x7687 033867 jam sp_key_valid ,mem_sp_local_key_invalid -0x7688 033868 jam sp_calc_standby ,mem_sp_calc -0x7689 033869 rtn -: 033871 sp_dhkey_calc: -0x768a 033872 bpatchx patch3d_0 ,mem_patch3d -0x768b 033873 fetch 1 ,mem_sp_dhkey_invalid -0x768c 033874 rtnne sp_key_invalid -0x768d 033875 fetch 1 ,mem_sp_calc -0x768e 033876 rtnne sp_calc_standby -0x768f 033878 arg mem_k ,contw -0x7690 033879 arg mem_sp_private_key ,contr -0x7691 033880 call memcpy24 -0x7692 033882 arg mem_ax ,contw -0x7693 033883 arg mem_sp_pubkey_remote ,contr -0x7694 033884 call memcpy48 -0x7695 033886 arg mem_az ,contw -0x7696 033887 call bn_zero -0x7697 033888 jam 1 ,mem_az -0x7698 033890 call eckp_calc_init -0x7699 033891 jam sp_calc_dhkey ,mem_sp_calc -0x769a 033892 rtn -: 033894 sp_dhkey_generated: -0x769b 033895 jam sp_flag_commit ,mem_sp_dh_ready -0x769c 033896 arg mem_sp_dhkey ,contw -0x769d 033897 arg mem_bx ,contr -0x769e 033898 call memcpy24 -0x769f 033899 jam sp_key_valid ,mem_sp_dhkey_invalid -0x76a0 033900 jam sp_calc_standby ,mem_sp_calc -0x76a1 033901 rtn -: 033903 random_generator: -0x76a2 033904 increase -1 ,queue -0x76a3 033905 nrtn positive -0x76a4 033906 random pdata -0x76a5 033907 istore 2 ,contw -0x76a6 033908 branch random_generator -: 033909 compare4: -0x76a7 033910 increase -1 ,queue -0x76a8 033911 nbranch compare4_success ,positive -0x76a9 033912 ifetch 4 ,rega -0x76aa 033913 copy pdata ,temp -0x76ab 033914 ifetch 4 ,regb -0x76ac 033915 iflip temp ,pdata -0x76ad 033916 nbranch compare4_failed ,zero -0x76ae 033917 increase 4 ,rega -0x76af 033918 increase 4 ,regb -0x76b0 033919 branch compare4 -: 033920 compare4_failed: -0x76b1 033921 disable true -0x76b2 033922 rtn -: 033923 compare4_success: -0x76b3 033924 enable true -0x76b4 033925 rtn -: 033932 simple_pairing_sequence: -0x76b5 033933 bpatchx patch3d_1 ,mem_patch3d -0x76b6 033934 fetch 1 ,mem_sp_flag -0x76b7 033935 rtn blank -0x76b8 033936 call lmo_fifo_check -0x76b9 033937 nrtn blank -0x76ba 033938 jam sp_flag_standby ,mem_sp_flag -0x76bb 033939 fetch 1 ,mem_sp_state -0x76bc 033940 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header -0x76bd 033941 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm -0x76be 033942 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number -0x76bf 033943 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check -0x76c0 033944 beq sp_stat_key_generate ,sp_generate_local_key -0x76c1 033945 beq sp_stat_commit_calc ,sp_calculate_commitment -0x76c2 033946 beq sp_stat_confirm_check ,sp_confirm_check -0x76c3 033947 beq sp_stat_confirm_calc ,sp_confirm_calc -0x76c4 033948 beq sp_stat_link_key_calc ,sp_link_key_prarm_push -0x76c5 033950 rtn -: 033952 master_simple_paring_sequence: -0x76c6 033953 bpatchx patch3d_2 ,mem_patch3d -0x76c7 033954 fetch 1 ,mem_master_sp_flag -0x76c8 033955 rtn blank -0x76c9 033956 call lmo_fifo_check -0x76ca 033957 nrtn blank -0x76cb 033958 jam sp_flag_standby ,mem_master_sp_flag -0x76cc 033959 fetch 1 ,mem_master_sp_state -0x76cd 033960 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get -0x76ce 033961 beq sp_master_stat_start_done ,sp_master_send_io_cap_send -0x76cf 033962 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header -0x76d0 033963 beq sp_stat_commit_calc ,master_sp_calculate_commitment -0x76d1 033964 beq sp_stat_commitment_compare ,sp_master_commitment_compare -0x76d2 033965 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number -0x76d3 033966 beq sp_stat_confirm_calc ,sp_confirm_calc -0x76d4 033967 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check -0x76d5 033968 beq sp_stat_confirm_check ,sp_confirm_check -0x76d6 033969 beq sp_state_end ,master_sp_sm_end -0x76d7 033970 rtn -: 033972 master_set_mem_master_sp_flag: -0x76d8 033973 jam sp_flag_commit ,mem_master_sp_flag -0x76d9 033974 rtn -: 033976 master_clear_mem_master_sp_flag: -0x76da 033977 jam sp_flag_standby ,mem_master_sp_flag -0x76db 033978 rtn -: 033979 sp_calc_sequence: -0x76dc 033980 bpatchx patch3d_3 ,mem_patch3d -0x76dd 033981 fetch 1 ,mem_ssp_enable -0x76de 033982 rtn blank -0x76df 033983 fetch 1 ,mem_sp_calc -0x76e0 033984 rtn blank -0x76e1 033985 increase 0x80 ,pdata -0x76e2 033986 store 1 ,mem_sp_calc -0x76e3 033987 rtnbit1 7 -0x76e4 033988 fetch 1 ,mem_ec_loopc -0x76e5 033989 branch sp_calc_sequence_done ,blank -0x76e6 033990 branch eckp_calc -: 033992 sp_calc_sequence_done: -0x76e7 033993 call ecunmapz -0x76e8 033994 fetch 1 ,mem_sp_calc -0x76e9 033995 beq sp_calc_pubkey ,sp_pubkey_generated -0x76ea 033996 beq sp_calc_dhkey ,sp_dhkey_generated -0x76eb 033997 rtn -: 034000 bn_testbit: -0x76ec 034001 and pdata ,7 ,queue -0x76ed 034002 rshift3 pdata ,pdata -0x76ee 034003 iadd contr ,contr -0x76ef 034004 ifetch 1 ,contr -0x76f0 034005 qisolate0 pdata -0x76f1 034006 rtn -: 034009 ec_copy: -0x76f2 034010 call memcpy24 -0x76f3 034011 call memcpy24 -0x76f4 034012 branch memcpy24 -: 034015 bn_eq_zero: -0x76f5 034016 ifetch 8 ,contr -0x76f6 034017 nrtn blank -0x76f7 034018 ifetch 8 ,contr -0x76f8 034019 nrtn blank -0x76f9 034020 ifetch 8 ,contr -0x76fa 034021 rtn -: 034026 bn_eq_0: -0x76fb 034027 ifetch 4 ,rega -0x76fc 034028 iforce temp -0x76fd 034029 ifetch 4 ,regb -0x76fe 034030 isub temp ,null -0x76ff 034031 nrtn zero -0x7700 034032 increase 4 ,rega -0x7701 034033 increase 4 ,regb -0x7702 034034 loop bn_eq_0 -0x7703 034035 rtn -: 034038 bn_bigeq: -0x7704 034039 force 6 ,loopcnt -0x7705 034040 increase 20 ,rega -0x7706 034041 increase 20 ,regb -: 034042 bn_bigeq_0: -0x7707 034043 ifetch 4 ,regb -0x7708 034044 iforce temp -0x7709 034045 ifetch 4 ,rega -0x770a 034046 isub temp ,pdata -0x770b 034047 nrtn positive -0x770c 034048 nrtn blank -0x770d 034049 increase -4 ,rega -0x770e 034050 increase -4 ,regb -0x770f 034051 loop bn_bigeq_0 -0x7710 034052 rtn -: 034054 bn_add: -0x7711 034055 force 6 ,loopcnt -0x7712 034056 force 0 ,regc -: 034057 bn_add_0: -0x7713 034058 ifetch 4 ,rega -0x7714 034059 iforce temp -0x7715 034060 ifetch 4 ,regb -0x7716 034061 iadd temp ,pdata -0x7717 034062 iadd regc ,pdata -0x7718 034063 istore 4 ,contw -0x7719 034064 isolate1 32 ,pdata -0x771a 034065 setflag true ,0 ,regc -0x771b 034066 increase 4 ,rega -0x771c 034067 increase 4 ,regb -0x771d 034068 loop bn_add_0 -0x771e 034069 rtn -: 034071 bn_sub: -0x771f 034072 force 6 ,loopcnt -0x7720 034073 force 0 ,regc -: 034074 bn_sub_0: -0x7721 034075 ifetch 4 ,regb -0x7722 034076 iforce temp -0x7723 034077 ifetch 4 ,rega -0x7724 034078 isub temp ,pdata -0x7725 034079 isub regc ,pdata -0x7726 034080 istore 4 ,contw -0x7727 034081 isolate1 32 ,pdata -0x7728 034082 setflag true ,0 ,regc -0x7729 034083 increase 4 ,rega -0x772a 034084 increase 4 ,regb -0x772b 034085 loop bn_sub_0 -0x772c 034086 rtn -: 034088 bn_rshift6: -0x772d 034089 force 6 ,loopcnt -0x772e 034090 increase 20 ,rega -: 034091 bn_rshift: -0x772f 034092 force 0 ,regc -: 034093 bn_rshift_0: -0x7730 034094 ifetch 4 ,rega -0x7731 034095 isolate1 0 ,pdata -0x7732 034096 setflag true ,1 ,regc -0x7733 034097 rshift pdata ,pdata -0x7734 034098 isolate1 0 ,regc -0x7735 034099 setflag true ,31 ,pdata -0x7736 034100 istore 4 ,rega -0x7737 034101 increase -4 ,rega -0x7738 034102 rshift regc ,regc -0x7739 034103 loop bn_rshift_0 -0x773a 034104 rtn -: 034106 bn_lshift: -0x773b 034107 force 6 ,loopcnt -0x773c 034108 force 0 ,regc -: 034109 bn_lshift_0: -0x773d 034110 ifetch 4 ,rega -0x773e 034111 isolate1 31 ,pdata -0x773f 034112 setflag true ,1 ,regc -0x7740 034113 lshift pdata ,pdata -0x7741 034114 isolate1 0 ,regc -0x7742 034115 setflag true ,0 ,pdata -0x7743 034116 istore 4 ,rega -0x7744 034117 increase 4 ,rega -0x7745 034118 rshift regc ,regc -0x7746 034119 loop bn_lshift_0 -0x7747 034120 rtn -: 034122 bn_lshiftmod: -0x7748 034123 call bn_lshift -: 034124 bn_lshiftmod_ismod: -0x7749 034125 isolate1 0 ,regc -0x774a 034126 branch bn_lshiftmod_0 ,true -0x774b 034127 arg mem_p ,regb -0x774c 034128 copy rega ,regc -0x774d 034129 increase -24 ,rega -0x774e 034130 call bn_bigeq -0x774f 034131 nrtn positive -0x7750 034132 copy regc ,rega -: 034133 bn_lshiftmod_0: -0x7751 034134 increase -24 ,rega -0x7752 034135 arg mem_p ,regb -0x7753 034136 copy rega ,contw -0x7754 034137 branch bn_sub -: 034140 bn_addmod: -0x7755 034141 call bn_add -0x7756 034142 copy contw ,rega -0x7757 034143 branch bn_lshiftmod_ismod -: 034145 bn_submod: -0x7758 034146 call bn_sub -0x7759 034147 isolate0 0 ,regc -0x775a 034148 rtn true -0x775b 034149 arg mem_p ,regb -0x775c 034150 add contw ,-24 ,rega -0x775d 034151 copy rega ,contw -0x775e 034152 branch bn_add -: 034155 bn_p192mod: -0x775f 034156 copy contw ,timeup -0x7760 034157 copy rega ,alarm -0x7761 034158 arg mem_tmp2 ,regb -0x7762 034159 copy regb ,contw -0x7763 034160 add rega ,24 ,contr -0x7764 034161 ifetch 8 ,contr -0x7765 034162 istore 8 ,contw -0x7766 034163 istore 8 ,contw -0x7767 034164 force 0 ,pdata -0x7768 034165 istore 8 ,contw -0x7769 034166 copy timeup ,contw -0x776a 034167 call bn_addmod -0x776b 034168 arg mem_tmp2 ,regb -0x776c 034169 copy regb ,contw -0x776d 034170 force 0 ,pdata -0x776e 034171 istore 8 ,contw -0x776f 034172 add alarm ,32 ,contr -0x7770 034173 ifetch 8 ,contr -0x7771 034174 istore 8 ,contw -0x7772 034175 istore 8 ,contw -0x7773 034176 copy timeup ,rega -0x7774 034177 copy rega ,contw -0x7775 034178 call bn_addmod -0x7776 034179 arg mem_tmp2 ,regb -0x7777 034180 copy regb ,contw -0x7778 034181 add alarm ,40 ,contr -0x7779 034182 ifetch 8 ,contr -0x777a 034183 istore 8 ,contw -0x777b 034184 istore 8 ,contw -0x777c 034185 istore 8 ,contw -0x777d 034186 copy timeup ,rega -0x777e 034187 copy rega ,contw -0x777f 034188 branch bn_addmod -: 034191 bn_load: -0x7780 034192 force 6 ,loopcnt -: 034193 bn_load_0: -0x7781 034194 ifetch 4 ,contr -0x7782 034195 iforce regext -0x7783 034196 increase 1 ,regext_index -0x7784 034197 loop bn_load_0 -0x7785 034198 rtn -: 034202 bn_mulmod: -0x7786 034203 copy contw ,timeup -0x7787 034204 arg mem_tmp1 ,contw -0x7788 034205 call bn_zero -0x7789 034206 arg mem_tmp1 ,contw -0x778a 034207 copy rega ,contr -0x778b 034208 force 0 ,regext_index -0x778c 034209 call bn_load -0x778d 034210 copy regb ,contr -0x778e 034211 call bn_load -0x778f 034212 force 0 ,regb -: 034213 bn_mulmod_1: -0x7790 034214 force 0 ,temp -0x7791 034215 force 6 ,regc -: 034216 bn_mulmod_0: -0x7792 034217 ifetch 4 ,contw -0x7793 034218 iforce rega -0x7794 034219 copy regb ,regext_index -0x7795 034220 deposit regext -0x7796 034221 copy regc ,regext_index -0x7797 034222 imul32 regext ,pdata -0x7798 034223 iadd rega ,pdata -0x7799 034224 iadd temp ,pdata -0x779a 034225 istore 4 ,contw -0x779b 034226 rshift32 pdata ,temp -0x779c 034227 increase 1 ,regc -0x779d 034228 compare 12 ,regc ,0xff -0x779e 034229 nbranch bn_mulmod_0 ,true -0x779f 034230 deposit temp -0x77a0 034231 istore 4 ,contw -0x77a1 034232 increase -24 ,contw -0x77a2 034233 increase 1 ,regb -0x77a3 034234 compare 6 ,regb ,0xff -0x77a4 034235 nbranch bn_mulmod_1 ,true -0x77a5 034236 arg mem_tmp1 ,rega -0x77a6 034237 copy timeup ,contw -0x77a7 034238 branch bn_p192mod -: 034241 bn_sqrmod: -0x77a8 034242 copy rega ,regb -0x77a9 034243 branch bn_mulmod -: 034245 bn_rshifteven: -0x77aa 034246 copy rega ,alarm -: 034247 bn_rshifteven_1: -0x77ab 034248 copy alarm ,rega -0x77ac 034249 ifetch 1 ,rega -0x77ad 034250 isolate1 0 ,pdata -0x77ae 034251 rtn true -0x77af 034252 call bn_rshift6 -0x77b0 034253 ifetch 1 ,regb -0x77b1 034254 isolate0 0 ,pdata -0x77b2 034255 branch bn_rshifteven_0 ,true -0x77b3 034256 arg mem_p ,rega -0x77b4 034257 copy regb ,contw -0x77b5 034258 call bn_add -0x77b6 034259 ifetch 1 ,regb -0x77b7 034260 iadd regc ,pdata -0x77b8 034261 istore 1 ,regb -0x77b9 034262 increase -24 ,regb -: 034263 bn_rshifteven_0: -0x77ba 034264 add regb ,24 ,rega -0x77bb 034265 force 7 ,loopcnt -0x77bc 034266 call bn_rshift -0x77bd 034267 branch bn_rshifteven_1 -: 034270 bn_invmod: -0x77be 034271 copy contw ,timeup -0x77bf 034272 arg mem_tmp0 ,contw -0x77c0 034273 call bn_zero -0x77c1 034274 force 0 ,pdata -0x77c2 034275 store 4 ,mem_tmp5 -0x77c3 034276 store 4 ,mem_t2 -0x77c4 034277 jam 1 ,mem_tmp0 -0x77c5 034278 arg mem_tmp1 ,contw -0x77c6 034279 call bn_zero -0x77c7 034280 arg mem_p ,contr -0x77c8 034281 arg mem_tmp2 ,contw -0x77c9 034282 call memcpy24 -0x77ca 034283 copy rega ,contr -0x77cb 034284 arg mem_tmp3 ,contw -0x77cc 034285 call memcpy24 -: 034286 bn_invmod_2: -0x77cd 034287 arg mem_tmp3 ,contr -0x77ce 034288 call bn_eq_zero -0x77cf 034289 branch bn_invmod_0 ,blank -0x77d0 034290 arg mem_tmp3 ,rega -0x77d1 034291 arg mem_tmp0 ,regb -0x77d2 034292 call bn_rshifteven -0x77d3 034294 arg mem_tmp2 ,rega -0x77d4 034295 arg mem_tmp1 ,regb -0x77d5 034296 call bn_rshifteven -0x77d6 034297 arg mem_tmp3 ,rega -0x77d7 034298 arg mem_tmp2 ,regb -0x77d8 034299 call bn_bigeq -0x77d9 034300 branch bn_invmod_1 ,positive -0x77da 034301 arg mem_tmp2 ,rega -0x77db 034302 arg mem_tmp3 ,regb -0x77dc 034303 copy rega ,contw -0x77dd 034304 call bn_sub -0x77de 034305 arg mem_tmp0 ,rega -0x77df 034306 arg mem_tmp1 ,regb -0x77e0 034307 copy regb ,contw -0x77e1 034308 call bn_add -0x77e2 034309 ifetch 1 ,rega -0x77e3 034310 iadd regc ,regc -0x77e4 034311 ifetch 1 ,regb -0x77e5 034312 iadd regc ,pdata -0x77e6 034313 istore 1 ,regb -0x77e7 034314 branch bn_invmod_2 -: 034315 bn_invmod_1: -0x77e8 034316 arg mem_tmp3 ,rega -0x77e9 034317 arg mem_tmp2 ,regb -0x77ea 034318 copy rega ,contw -0x77eb 034319 call bn_sub -0x77ec 034320 arg mem_tmp1 ,rega -0x77ed 034321 arg mem_tmp0 ,regb -0x77ee 034322 copy regb ,contw -0x77ef 034323 call bn_add -0x77f0 034324 ifetch 1 ,rega -0x77f1 034325 iadd regc ,regc -0x77f2 034326 ifetch 1 ,regb -0x77f3 034327 iadd regc ,pdata -0x77f4 034328 istore 1 ,regb -0x77f5 034329 branch bn_invmod_2 -: 034330 bn_invmod_0: -0x77f6 034331 arg mem_tmp0 ,contw -0x77f7 034332 call bn_zero -0x77f8 034333 fetch 1 ,mem_tmp5 -0x77f9 034334 store 1 ,mem_tmp0 -0x77fa 034335 store 1 ,mem_tmp0a -0x77fb 034336 arg mem_tmp0 ,rega -0x77fc 034337 arg mem_tmp1 ,regb -0x77fd 034338 copy regb ,contw -0x77fe 034339 call bn_addmod -0x77ff 034340 arg mem_p ,rega -0x7800 034341 arg mem_tmp1 ,regb -0x7801 034342 copy timeup ,contw -0x7802 034343 branch bn_submod -: 034348 ecdbl: -0x7803 034349 arg mem_cz ,rega -0x7804 034350 arg mem_t2 ,contw -0x7805 034351 call bn_sqrmod -0x7806 034352 arg mem_t2 ,rega -0x7807 034353 arg mem_t3 ,contw -0x7808 034354 call bn_sqrmod -0x7809 034355 arg mem_a ,rega -0x780a 034356 arg mem_t3 ,regb -0x780b 034357 arg mem_t3 ,contw -0x780c 034358 call bn_mulmod -0x780d 034359 arg mem_cx ,rega -0x780e 034360 arg mem_t2 ,contw -0x780f 034361 call bn_sqrmod -0x7810 034362 arg mem_t2 ,contr -0x7811 034363 arg mem_t1 ,contw -0x7812 034364 call memcpy24 -0x7813 034365 arg mem_t1 ,rega -0x7814 034366 call bn_lshiftmod -0x7815 034367 arg mem_t2 ,rega -0x7816 034368 arg mem_t1 ,regb -0x7817 034369 arg mem_t2 ,contw -0x7818 034370 call bn_addmod -0x7819 034371 arg mem_t2 ,rega -0x781a 034372 arg mem_t3 ,regb -0x781b 034373 arg mem_t2 ,contw -0x781c 034374 call bn_addmod -0x781d 034375 arg mem_cx ,contr -0x781e 034376 arg mem_t1 ,contw -0x781f 034377 call memcpy24 -0x7820 034378 arg mem_cy ,rega -0x7821 034379 arg mem_t3 ,contw -0x7822 034380 call bn_sqrmod -0x7823 034381 arg mem_t1 ,rega -0x7824 034382 call bn_lshiftmod -0x7825 034383 arg mem_t1 ,rega -0x7826 034384 call bn_lshiftmod -0x7827 034385 arg mem_t1 ,rega -0x7828 034386 arg mem_t3 ,regb -0x7829 034387 arg mem_t1 ,contw -0x782a 034388 call bn_mulmod -0x782b 034389 arg mem_t3 ,rega -0x782c 034390 arg mem_t0 ,contw -0x782d 034391 call bn_sqrmod -0x782e 034392 arg mem_t0 ,rega -0x782f 034393 call bn_lshiftmod -0x7830 034394 arg mem_t0 ,rega -0x7831 034395 call bn_lshiftmod -0x7832 034396 arg mem_t0 ,rega -0x7833 034397 call bn_lshiftmod -0x7834 034398 arg mem_cy ,contr -0x7835 034399 arg mem_t3 ,contw -0x7836 034400 call memcpy24 -0x7837 034401 arg mem_t3 ,rega -0x7838 034402 call bn_lshiftmod -0x7839 034403 arg mem_t3 ,rega -0x783a 034404 arg mem_cz ,regb -0x783b 034405 arg mem_cz ,contw -0x783c 034406 call bn_mulmod -0x783d 034407 arg mem_t2 ,rega -0x783e 034408 arg mem_t3 ,contw -0x783f 034409 call bn_sqrmod -0x7840 034410 arg mem_t3 ,rega -0x7841 034411 arg mem_t1 ,regb -0x7842 034412 arg mem_t3 ,contw -0x7843 034413 call bn_submod -0x7844 034414 arg mem_t3 ,rega -0x7845 034415 arg mem_t1 ,regb -0x7846 034416 arg mem_cx ,contw -0x7847 034417 call bn_submod -0x7848 034418 arg mem_t1 ,rega -0x7849 034419 arg mem_cx ,regb -0x784a 034420 arg mem_t3 ,contw -0x784b 034421 call bn_submod -0x784c 034422 arg mem_t3 ,rega -0x784d 034423 arg mem_t2 ,regb -0x784e 034424 arg mem_t3 ,contw -0x784f 034425 call bn_mulmod -0x7850 034426 arg mem_t3 ,rega -0x7851 034427 arg mem_t0 ,regb -0x7852 034428 arg mem_cy ,contw -0x7853 034429 branch bn_submod -: 034433 ecadd: -0x7854 034434 arg mem_az ,rega -0x7855 034435 arg mem_t7 ,contw -0x7856 034436 call bn_sqrmod -0x7857 034437 arg mem_cx ,rega -0x7858 034438 arg mem_t7 ,regb -0x7859 034439 arg mem_t0 ,contw -0x785a 034440 call bn_mulmod -0x785b 034441 arg mem_az ,rega -0x785c 034442 arg mem_t7 ,regb -0x785d 034443 arg mem_t7 ,contw -0x785e 034444 call bn_mulmod -0x785f 034445 arg mem_cy ,rega -0x7860 034446 arg mem_t7 ,regb -0x7861 034447 arg mem_t1 ,contw -0x7862 034448 call bn_mulmod -0x7863 034449 arg mem_cz ,rega -0x7864 034450 arg mem_t7 ,contw -0x7865 034451 call bn_sqrmod -0x7866 034452 arg mem_ax ,rega -0x7867 034453 arg mem_t7 ,regb -0x7868 034454 arg mem_t2 ,contw -0x7869 034455 call bn_mulmod -0x786a 034456 arg mem_cz ,rega -0x786b 034457 arg mem_t7 ,regb -0x786c 034458 arg mem_t7 ,contw -0x786d 034459 call bn_mulmod -0x786e 034460 arg mem_ay ,rega -0x786f 034461 arg mem_t7 ,regb -0x7870 034462 arg mem_t3 ,contw -0x7871 034463 call bn_mulmod -0x7872 034464 arg mem_t0 ,rega -0x7873 034465 arg mem_t2 ,regb -0x7874 034466 arg mem_t7 ,contw -0x7875 034467 call bn_submod -0x7876 034468 arg mem_t0 ,rega -0x7877 034469 arg mem_t2 ,regb -0x7878 034470 arg mem_t0 ,contw -0x7879 034471 call bn_addmod -0x787a 034472 arg mem_t1 ,rega -0x787b 034473 arg mem_t3 ,regb -0x787c 034474 arg mem_t2 ,contw -0x787d 034475 call bn_submod -0x787e 034476 arg mem_t1 ,rega -0x787f 034477 arg mem_t3 ,regb -0x7880 034478 arg mem_t1 ,contw -0x7881 034479 call bn_addmod -0x7882 034480 arg mem_t1 ,rega -0x7883 034481 arg mem_t7 ,regb -0x7884 034482 arg mem_t1 ,contw -0x7885 034483 call bn_mulmod -0x7886 034484 arg mem_cz ,rega -0x7887 034485 arg mem_az ,regb -0x7888 034486 arg mem_t3 ,contw -0x7889 034487 call bn_mulmod -0x788a 034488 arg mem_t3 ,rega -0x788b 034489 arg mem_t7 ,regb -0x788c 034490 arg mem_cz ,contw -0x788d 034491 call bn_mulmod -0x788e 034492 arg mem_t7 ,rega -0x788f 034493 arg mem_t7 ,contw -0x7890 034494 call bn_sqrmod -0x7891 034495 arg mem_t7 ,rega -0x7892 034496 arg mem_t0 ,regb -0x7893 034497 arg mem_t3 ,contw -0x7894 034498 call bn_mulmod -0x7895 034499 arg mem_t7 ,rega -0x7896 034500 arg mem_t1 ,regb -0x7897 034501 arg mem_t1 ,contw -0x7898 034502 call bn_mulmod -0x7899 034503 arg mem_t2 ,rega -0x789a 034504 arg mem_cx ,contw -0x789b 034505 call bn_sqrmod -0x789c 034506 arg mem_cx ,rega -0x789d 034507 arg mem_t3 ,regb -0x789e 034508 arg mem_cx ,contw -0x789f 034509 call bn_submod -0x78a0 034510 arg mem_cx ,contr -0x78a1 034511 arg mem_t7 ,contw -0x78a2 034512 call memcpy24 -0x78a3 034513 arg mem_t7 ,rega -0x78a4 034514 call bn_lshiftmod -0x78a5 034515 arg mem_t3 ,rega -0x78a6 034516 arg mem_t7 ,regb -0x78a7 034517 arg mem_t3 ,contw -0x78a8 034518 call bn_submod -0x78a9 034519 arg mem_t3 ,rega -0x78aa 034520 arg mem_t2 ,regb -0x78ab 034521 arg mem_t2 ,contw -0x78ac 034522 call bn_mulmod -0x78ad 034523 arg mem_t2 ,rega -0x78ae 034524 arg mem_t1 ,regb -0x78af 034525 arg mem_cy ,contw -0x78b0 034526 call bn_submod -0x78b1 034527 arg mem_cy ,rega -0x78b2 034528 arg mem_p ,regb -0x78b3 034529 arg mem_cy ,contw -0x78b4 034530 force 0 ,regc -0x78b5 034531 fetch 1 ,mem_cy -0x78b6 034532 isolate1 0 ,pdata -0x78b7 034533 call bn_add ,true -0x78b8 034534 copy regc ,alarm -0x78b9 034535 arg mem_cy ,rega -0x78ba 034536 call bn_rshift6 -0x78bb 034537 fetch 1 ,mem_cy5 -0x78bc 034538 isolate1 0 ,alarm -0x78bd 034539 setflag true ,7 ,pdata -0x78be 034540 store 1 ,mem_cy5 -0x78bf 034541 rtn -: 034545 eckp_0: -0x78c0 034546 fetch 1 ,mem_ec_loopc -0x78c1 034547 increase -1 ,pdata -0x78c2 034548 nrtn positive -0x78c3 034549 store 1 ,mem_ec_loopc -0x78c4 034550 fetch 1 ,mem_ec_infinite -0x78c5 034551 call ecdbl ,blank -0x78c6 034552 fetch 1 ,mem_ec_loopc -0x78c7 034553 arg mem_k ,contr -0x78c8 034554 call bn_testbit -0x78c9 034555 branch eckp_0 ,true -0x78ca 034556 fetch 1 ,mem_ec_infinite -0x78cb 034557 nbranch eckp_1 ,blank -0x78cc 034558 call ecadd -0x78cd 034559 branch eckp_0 -: 034560 eckp_1: -0x78ce 034561 jam 0 ,mem_ec_infinite -0x78cf 034562 arg mem_ax ,contr -0x78d0 034563 arg mem_cx ,contw -0x78d1 034564 call ec_copy -0x78d2 034565 branch eckp_0 -: 034568 ecunmapz: -0x78d3 034569 arg mem_cz ,rega -0x78d4 034570 arg mem_t3 ,contw -0x78d5 034571 call bn_invmod -0x78d6 034572 arg mem_t3 ,rega -0x78d7 034573 arg mem_t1 ,contw -0x78d8 034574 call bn_sqrmod -0x78d9 034575 arg mem_cx ,rega -0x78da 034576 arg mem_t1 ,regb -0x78db 034577 arg mem_bx ,contw -0x78dc 034578 call bn_mulmod -0x78dd 034579 arg mem_t3 ,rega -0x78de 034580 arg mem_t1 ,regb -0x78df 034581 arg mem_t2 ,contw -0x78e0 034582 call bn_mulmod -0x78e1 034583 arg mem_cy ,rega -0x78e2 034584 arg mem_t2 ,regb -0x78e3 034585 arg mem_by ,contw -0x78e4 034586 branch bn_mulmod -: 034590 sha_endian_swap2: -0x78e5 034591 ifetch 4 ,contr -0x78e6 034592 force 4 ,rega -0x78e7 034593 increase 3 ,contw -: 034594 sha_endian_loop: -0x78e8 034595 istore 1 ,contw -0x78e9 034596 rshift8 pdata ,pdata -0x78ea 034597 increase -2 ,contw -0x78eb 034598 increase -1 ,rega -0x78ec 034599 nbranch sha_endian_loop ,zero -0x78ed 034600 increase 5 ,contw -0x78ee 034601 loop sha_endian_swap2 -0x78ef 034602 rtn -: 034605 sha_getw: -0x78f0 034606 lshift2 queue ,pdata -0x78f1 034607 iadd timeup ,contr -0x78f2 034608 ifetch 4 ,contr -0x78f3 034609 rtn -: 034611 sha_r: -0x78f4 034612 force 16 ,alarm -0x78f5 034613 arg memdat ,timeup -: 034614 sha_r_loop: -0x78f6 034615 add alarm ,-7 ,queue -0x78f7 034616 call sha_getw -0x78f8 034617 iforce temp -0x78f9 034618 add alarm ,-16 ,queue -0x78fa 034619 call sha_getw -0x78fb 034620 iadd temp ,temp -0x78fc 034621 add alarm ,-2 ,queue -0x78fd 034622 call sha_getw -0x78fe 034623 shasx pdata ,1 ,pdata -0x78ff 034624 iadd temp ,temp -0x7900 034625 add alarm ,-15 ,queue -0x7901 034626 call sha_getw -0x7902 034627 shasx pdata ,0 ,pdata -0x7903 034628 iadd temp ,temp -0x7904 034629 lshift2 alarm ,pdata -0x7905 034630 iadd timeup ,contw -0x7906 034631 istoret 4 ,contw -0x7907 034632 increase 1 ,alarm -0x7908 034633 compare 64 ,alarm ,0xff -0x7909 034634 nbranch sha_r_loop ,true -0x790a 034635 rtn -: 034638 sha_init: -0x790b 034639 arg memh0 ,contr -0x790c 034640 force 7 ,regext_index -: 034641 sha_init_0: -0x790d 034642 ifetch 4 ,contr -0x790e 034643 iforce regext -0x790f 034644 increase -1 ,regext_index -0x7910 034645 branch sha_init_0 ,positive -0x7911 034646 rtn -: 034648 sha: -0x7912 034649 bpatchx patch3d_4 ,mem_patch3d -0x7913 034650 call sha_r -0x7914 034651 arg memahbak ,contw -0x7915 034652 force 0 ,regext_index -: 034653 sha_0: -0x7916 034654 deposit regext -0x7917 034655 istore 4 ,contw -0x7918 034656 increase 1 ,regext_index -0x7919 034657 compare 8 ,regext_index ,0xff -0x791a 034658 nbranch sha_0 ,true -0x791b 034659 call enable_authrom -0x791c 034660 arg memk ,timeup -0x791d 034661 arg memdat ,alarm -0x791e 034662 force 64 ,loopcnt -: 034663 sha_loop: -0x791f 034664 ifetcht 4 ,alarm -0x7920 034665 ifetch 4 ,timeup -0x7921 034666 increase 4 ,timeup -0x7922 034667 increase 4 ,alarm -0x7923 034668 iadd temp ,pdata -0x7924 034669 force 7 ,regext_index -0x7925 034670 iadd regext ,temp -0x7926 034671 force 4 ,regext_index -0x7927 034672 shasx regext ,3 ,pdata -0x7928 034673 iadd temp ,temp -0x7929 034674 force 5 ,regext_index -0x792a 034675 deposit regext -0x792b 034676 force 6 ,regext_index -0x792c 034677 ixor regext ,pdata -0x792d 034678 force 4 ,regext_index -0x792e 034679 iand regext ,pdata -0x792f 034680 force 6 ,regext_index -0x7930 034681 ixor regext ,pdata -0x7931 034682 iadd temp ,temp -0x7932 034683 force 7 ,regext_index -0x7933 034684 copy temp ,regext -0x7934 034685 force 3 ,regext_index -0x7935 034686 deposit regext -0x7936 034687 iadd temp ,regext -0x7937 034688 force 0 ,regext_index -0x7938 034689 deposit regext -0x7939 034690 force 1 ,regext_index -0x793a 034691 iand regext ,temp -0x793b 034692 ior regext ,pdata -0x793c 034693 force 2 ,regext_index -0x793d 034694 iand regext ,pdata -0x793e 034695 ior temp ,temp -0x793f 034696 force 0 ,regext_index -0x7940 034697 shasx regext ,2 ,pdata -0x7941 034698 iadd temp ,pdata -0x7942 034699 force 7 ,regext_index -0x7943 034700 iadd regext ,regext -0x7944 034701 regexrot -0x7945 034702 loop sha_loop -0x7946 034703 arg memahbak ,contr -0x7947 034704 force 0 ,regext_index -: 034705 sha_1: -0x7948 034706 ifetch 4 ,contr -0x7949 034707 iadd regext ,regext -0x794a 034708 increase 1 ,regext_index -0x794b 034709 compare 8 ,regext_index ,0xff -0x794c 034710 nbranch sha_1 ,true -0x794d 034711 branch disable_authrom -: 034714 sha_result: -0x794e 034715 arg memresult ,contw -0x794f 034716 force 7 ,regext_index -: 034717 sha_regext_save: -0x7950 034718 deposit regext -0x7951 034719 istore 4 ,contw -0x7952 034720 increase -1 ,regext_index -0x7953 034721 branch sha_regext_save ,positive -0x7954 034722 rtn -: 034724 pad_xor: -0x7955 034726 arg memdat ,contw -0x7956 034727 increase -4 ,contr -0x7957 034728 sub loopcnt ,16 ,rega -: 034729 pad_xor_0: -0x7958 034730 ifetch 4 ,contr -0x7959 034731 ixor temp ,pdata -0x795a 034732 istore 4 ,contw -0x795b 034733 increase -8 ,contr -0x795c 034734 loop pad_xor_0 -0x795d 034735 copy rega ,loopcnt -0x795e 034736 deposit temp -: 034737 pad_xor_1: -0x795f 034738 istore 4 ,contw -0x7960 034739 loop pad_xor_1 -0x7961 034740 rtn -: 034742 g_noninit_number_confirm: -0x7962 034743 call g_noninit0 -0x7963 034744 call sha_result -0x7964 034745 branch g_common0 -: 034747 g_noninit: -0x7965 034748 call g_noninit0 -0x7966 034749 branch g_common0 -: 034751 g_noninit0: -0x7967 034752 arg mem_sp_pubkey_remote_x_end ,contr -0x7968 034753 arg memdat ,contw -0x7969 034754 force 6 ,loopcnt -0x796a 034755 call memcpy_dword_swap -0x796b 034756 arg mem_sp_pubkey_local_x_end ,contr -0x796c 034757 force 6 ,loopcnt -0x796d 034758 call memcpy_dword_swap -0x796e 034759 arg mem_sp_random_remote_end ,contr -0x796f 034760 call memcpy_dword_swap4 -0x7970 034761 call sha_init -0x7971 034762 call sha -0x7972 034763 arg mem_sp_random_local_end ,contr -0x7973 034764 arg memdat ,contw -0x7974 034765 branch g_common -: 034767 g_init: -0x7975 034768 arg mem_sp_pubkey_local_x_end ,contr -0x7976 034769 arg memdat ,contw -0x7977 034770 force 6 ,loopcnt -0x7978 034771 call memcpy_dword_swap -0x7979 034772 arg mem_sp_pubkey_remote_x_end ,contr -0x797a 034773 force 6 ,loopcnt -0x797b 034774 call memcpy_dword_swap -0x797c 034775 arg mem_sp_random_local_end ,contr -0x797d 034776 call memcpy_dword_swap4 -0x797e 034777 call sha_init -0x797f 034778 call sha -0x7980 034779 arg mem_sp_random_remote_end ,contr -0x7981 034780 arg memdat ,contw -0x7982 034781 call g_common -0x7983 034782 branch g_common0 -: 034784 g_common: -0x7984 034785 call memcpy_dword_swap4 -0x7985 034786 setarg 0x800000 -0x7986 034787 lshift8 pdata ,pdata -0x7987 034788 istore 4 ,contw -0x7988 034789 force 5 ,loopcnt -0x7989 034790 call memset0 -0x798a 034791 setarg 640 -0x798b 034792 istore 4 ,contw -0x798c 034793 branch sha -: 034794 g_common0: -0x798d 034795 fetch 4 ,memresult -0x798e 034797 arg 1000 ,rega -0x798f 034798 idiv rega -0x7990 034799 call wait_div_end -0x7991 034800 remainder pdata -0x7992 034801 store 4 ,mem_gkey -0x7993 034802 quotient pdata -0x7994 034803 arg 1000 ,rega -0x7995 034804 idiv rega -0x7996 034805 call wait_div_end -0x7997 034806 remainder pdata -0x7998 034807 arg 1000 ,rega -0x7999 034808 imul32 rega ,pdata -0x799a 034809 fetcht 4 ,mem_gkey -0x799b 034810 iadd temp ,pdata -0x799c 034811 store 4 ,mem_gkey -0x799d 034812 rtn -: 034814 function_f1_no_key: -0x799e 034815 jam 0 ,mem_passkey_1bit -0x799f 034816 branch function_f1_common -: 034818 function_f1: -0x79a0 034819 fetch 1 ,mem_ssp_mode_flag -0x79a1 034820 bne ssp_mode_passkey_entry_flag ,function_f1_no_key -: 034821 function_f1_common: -0x79a2 034822 bpatchx patch3d_5 ,mem_patch3d -0x79a3 034823 setarg 0x363636 -0x79a4 034824 lshift8 pdata ,temp -0x79a5 034825 or_into 0x36 ,temp -0x79a6 034826 fetch 2 ,mem_sp_prarm_stack -0x79a7 034827 copy pdata ,contr -0x79a8 034828 force 4 ,loopcnt -0x79a9 034829 call pad_xor -0x79aa 034830 call sha_init -0x79ab 034831 call sha -0x79ac 034832 fetch 2 ,mem_sp_prarm_stack + 2 -0x79ad 034833 copy pdata ,contr -0x79ae 034834 arg memdat ,contw -0x79af 034835 force 6 ,loopcnt -0x79b0 034836 call memcpy_dword_swap -0x79b1 034837 fetch 2 ,mem_sp_prarm_stack + 4 -0x79b2 034838 copy pdata ,contr -0x79b3 034839 force 6 ,loopcnt -0x79b4 034840 call memcpy_dword_swap -0x79b5 034841 setarg 0x800000 -0x79b6 034842 istore 3 ,contw -0x79b7 034844 fetch 1 ,mem_passkey_1bit -0x79b8 034846 istore 1 ,contw -0x79b9 034847 force 0 ,pdata -0x79ba 034848 istore 8 ,contw -0x79bb 034849 setarg 0x0388 -0x79bc 034850 istore 4 ,contw -0x79bd 034851 call sha -0x79be 034852 call sha_result -0x79bf 034853 arg memresult ,contr -0x79c0 034854 arg memahsave ,contw -0x79c1 034855 call memcpy32 -0x79c2 034857 setarg 0x5c5c5c -0x79c3 034858 lshift8 pdata ,temp -0x79c4 034859 or_into 0x5c ,temp -0x79c5 034860 fetch 2 ,mem_sp_prarm_stack -0x79c6 034861 copy pdata ,contr -0x79c7 034862 force 4 ,loopcnt -0x79c8 034863 call pad_xor -0x79c9 034864 call sha_init -0x79ca 034865 call sha -0x79cb 034866 arg memahsave_end ,contr -0x79cc 034867 arg memdat ,contw -0x79cd 034868 force 8 ,loopcnt -0x79ce 034869 call memcpy_dword_swap -0x79cf 034870 setarg 0x800000 -0x79d0 034871 lshift8 pdata ,pdata -0x79d1 034872 istore 4 ,contw -0x79d2 034873 call bn_zero -0x79d3 034874 setarg 0x0300 -0x79d4 034875 istore 4 ,contw -0x79d5 034876 call sha -0x79d6 034877 branch sha_result -: 034880 function_f2: -0x79d7 034881 setarg 0x363636 -0x79d8 034882 lshift8 pdata ,temp -0x79d9 034883 or_into 0x36 ,temp -0x79da 034884 arg mem_sp_dhkey_end ,contr -0x79db 034885 force 6 ,loopcnt -0x79dc 034886 call pad_xor -0x79dd 034887 call sha_init -0x79de 034888 call sha -0x79df 034889 fetch 2 ,mem_sp_prarm_stack + 12 -0x79e0 034890 copy pdata ,contr -0x79e1 034891 arg memdat ,contw -0x79e2 034892 call memcpy_dword_swap4 -0x79e3 034893 fetch 2 ,mem_sp_prarm_stack + 14 -0x79e4 034894 copy pdata ,contr -0x79e5 034895 call memcpy_dword_swap4 -0x79e6 034897 setarg 0x62746c -0x79e7 034898 lshift8 pdata ,pdata -0x79e8 034899 or_into 0x6b ,pdata -0x79e9 034900 istore 4 ,contw -0x79ea 034901 arg mem_addr_value_end ,contr -0x79eb 034902 force 3 ,loopcnt -0x79ec 034903 call memcpy_dword_swap -0x79ed 034905 setarg 0x800000 -0x79ee 034906 lshift8 pdata ,pdata -0x79ef 034907 istore 4 ,contw -0x79f0 034908 force 0 ,pdata -0x79f1 034909 istore 8 ,contw -0x79f2 034910 setarg 0x0380 -0x79f3 034911 istore 4 ,contw -0x79f4 034912 call sha -0x79f5 034914 call sha_result -0x79f6 034915 arg memresult ,contr -0x79f7 034916 arg memahsave ,contw -0x79f8 034917 call memcpy32 -0x79f9 034919 setarg 0x5c5c5c -0x79fa 034920 lshift8 pdata ,temp -0x79fb 034921 or_into 0x5c ,temp -0x79fc 034922 arg mem_sp_dhkey_end ,contr -0x79fd 034923 force 6 ,loopcnt -0x79fe 034924 call pad_xor -0x79ff 034925 call sha_init -0x7a00 034926 call sha -0x7a01 034927 arg memahsave_end ,contr -0x7a02 034928 arg memdat ,contw -0x7a03 034929 force 8 ,loopcnt -0x7a04 034930 call memcpy_dword_swap -0x7a05 034931 setarg 0x800000 -0x7a06 034932 lshift8 pdata ,pdata -0x7a07 034933 istore 4 ,contw -0x7a08 034934 call bn_zero -0x7a09 034935 setarg 0x0300 -0x7a0a 034936 istore 4 ,contw -0x7a0b 034937 call sha -0x7a0c 034938 branch sha_result -: 034941 function_f3a: -0x7a0d 034942 fetch 1 ,mem_ssp_mode_flag -0x7a0e 034943 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin -: 034944 function_f3a_common: -0x7a0f 034945 bpatchx patch3d_6 ,mem_patch3d -0x7a10 034946 setarg 0x363636 -0x7a11 034947 lshift8 pdata ,temp -0x7a12 034948 or_into 0x36 ,temp -0x7a13 034949 arg mem_sp_dhkey_end ,contr -0x7a14 034950 force 6 ,loopcnt -0x7a15 034951 call pad_xor -0x7a16 034952 call sha_init -0x7a17 034953 call sha -0x7a18 034954 arg mem_sp_random_remote_end ,contr -0x7a19 034955 arg memdat ,contw -0x7a1a 034956 call memcpy_dword_swap4 -0x7a1b 034957 arg mem_sp_random_local_end ,contr -0x7a1c 034958 call memcpy_dword_swap4 -0x7a1d 034959 branch function_f3_common -: 034961 function_f3a_no_pin: -0x7a1e 034962 setarg 0 -0x7a1f 034963 store 4 ,mem_pin -0x7a20 034964 branch function_f3a_common -: 034966 function_f3b_no_pin: -0x7a21 034967 setarg 0 -0x7a22 034968 store 4 ,mem_pin -0x7a23 034969 branch function_f3b_common -: 034972 function_f3b: -0x7a24 034973 fetch 1 ,mem_ssp_mode_flag -0x7a25 034974 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin -: 034975 function_f3b_common: -0x7a26 034976 setarg 0x363636 -0x7a27 034977 lshift8 pdata ,temp -0x7a28 034978 or_into 0x36 ,temp -0x7a29 034979 arg mem_sp_dhkey_end ,contr -0x7a2a 034980 force 6 ,loopcnt -0x7a2b 034981 call pad_xor -0x7a2c 034982 call sha_init -0x7a2d 034983 call sha -0x7a2e 034985 arg mem_sp_random_local_end ,contr -0x7a2f 034986 arg memdat ,contw -0x7a30 034987 call memcpy_dword_swap4 -0x7a31 034988 arg mem_sp_random_remote_end ,contr -0x7a32 034989 call memcpy_dword_swap4 -: 034990 function_f3_common: -0x7a33 034991 setarg 0x0 -0x7a34 034992 istore 8 ,contw -0x7a35 034993 istore 4 ,contw -0x7a36 034994 fetch 4 ,mem_pin -0x7a37 034995 istore 4 ,contw -0x7a38 034997 copy contw ,temp -0x7a39 034998 jam 0x80 ,mem_addr_padding -0x7a3a 034999 copy temp ,contw -0x7a3b 035000 arg mem_addr_iocap_end ,contr -0x7a3c 035001 call memcpy_dword_swap4 -0x7a3d 035003 call sha -0x7a3e 035005 arg memdat ,contw -0x7a3f 035006 force 7 ,loopcnt -0x7a40 035007 call memset0 -0x7a41 035008 istore 4 ,contw -0x7a42 035009 setarg 0x03F8 -0x7a43 035010 istore 4 ,contw -0x7a44 035011 call sha -0x7a45 035012 call sha_result -0x7a46 035014 arg memresult ,contr -0x7a47 035015 arg memahsave ,contw -0x7a48 035016 call memcpy32 -0x7a49 035018 setarg 0x5c5c5c -0x7a4a 035019 lshift8 pdata ,temp -0x7a4b 035020 or_into 0x5c ,temp -0x7a4c 035021 arg mem_sp_dhkey_end ,contr -0x7a4d 035022 force 6 ,loopcnt -0x7a4e 035023 call pad_xor -0x7a4f 035024 call sha_init -0x7a50 035025 call sha -0x7a51 035026 arg memahsave_end ,contr -0x7a52 035027 arg memdat ,contw -0x7a53 035028 force 8 ,loopcnt -0x7a54 035029 call memcpy_dword_swap -0x7a55 035030 setarg 0x800000 -0x7a56 035031 lshift8 pdata ,pdata -0x7a57 035032 istore 4 ,contw -0x7a58 035033 call bn_zero -0x7a59 035034 setarg 0x0300 -0x7a5a 035035 istore 4 ,contw -0x7a5b 035036 call sha -0x7a5c 035037 branch sha_result -: 035044 eckp_calc_init: -0x7a5d 035045 jam 192 ,mem_ec_loopc -: 035046 eckp_calc_init_1: -0x7a5e 035047 fetch 1 ,mem_ec_loopc -0x7a5f 035048 rtn blank -0x7a60 035049 increase -1 ,pdata -0x7a61 035050 store 1 ,mem_ec_loopc -0x7a62 035051 arg mem_k ,contr -0x7a63 035052 call bn_testbit -0x7a64 035053 branch eckp_calc_init_1 ,true -0x7a65 035054 arg mem_ax ,contr -0x7a66 035055 arg mem_cx ,contw -0x7a67 035056 branch ec_copy -: 035058 eckp_calc: -0x7a68 035059 call ecdbl -0x7a69 035060 fetch 1 ,mem_ec_loopc -0x7a6a 035061 increase -1 ,pdata -0x7a6b 035062 store 1 ,mem_ec_loopc -0x7a6c 035063 arg mem_k ,contr -0x7a6d 035064 call bn_testbit -0x7a6e 035065 rtn true -0x7a6f 035066 branch ecadd -: 035068 memcpy_dword_swap4: -0x7a70 035069 force 4 ,loopcnt -: 035070 memcpy_dword_swap: -0x7a71 035071 increase -4 ,contr -: 035072 memcpy_dword_swap_loop: -0x7a72 035073 ifetch 4 ,contr -0x7a73 035074 istore 4 ,contw -0x7a74 035075 increase -8 ,contr -0x7a75 035076 loop memcpy_dword_swap_loop -0x7a76 035077 rtn -: 035082 sp_initialize_256: -0x7a77 035083 bpatchx patch3d_7 ,mem_patch3d -0x7a78 035084 fetch 1 ,mem_le_secure_connect_enable -0x7a79 035085 branch le_secure_connection_disable ,blank -0x7a7a 035086 call le_secure_connection_enable -0x7a7b 035087 call sp_clear_flags -0x7a7c 035089 branch sp_pubkey_calc_256 -: 035094 sp_pubkey_calc_256: -0x7a7d 035095 fetch 1 ,mem_le_sc_local_key_invalid -0x7a7e 035096 rtnne sp_key_invalid -0x7a7f 035097 fetch 1 ,mem_le_sc_calc -0x7a80 035098 rtnne sp_calc_standby -0x7a81 035100 arg mem_le_private_key_256 ,contw -0x7a82 035101 force 15 ,queue -0x7a83 035102 call random_generator -0x7a84 035103 random pdata -0x7a85 035104 rshift pdata ,pdata -0x7a86 035105 istore 2 ,contw -0x7a87 035107 arg mem_k_256 ,contw -0x7a88 035108 arg mem_le_private_key_256 ,contr -0x7a89 035109 call memcpy32 -0x7a8a 035111 arg mem_ax_256 ,contw -0x7a8b 035112 arg mem_gx_256 ,contr -0x7a8c 035113 call memcpy64 -0x7a8d 035115 arg mem_az_256 ,contw -0x7a8e 035116 call clear_mem_256 -0x7a8f 035117 jam 1 ,mem_az_256 -0x7a90 035119 call eckp_calc_init_256 -0x7a91 035120 jam sp_calc_pubkey_256 ,mem_le_sc_calc -0x7a92 035121 rtn -: 035123 sp_pubkey_generated_256: -0x7a93 035124 arg mem_le_pubkey_local_x_256 ,contw -0x7a94 035125 arg mem_bx_256 ,contr -0x7a95 035126 call memcpy64 -0x7a96 035127 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid -0x7a97 035128 jam sp_calc_standby ,mem_le_sc_calc -0x7a98 035129 rtn -: 035133 sp_dhkey_calc_256: -0x7a99 035134 fetch 1 ,mem_sp_dhkey_invalid -0x7a9a 035135 rtnne sp_key_invalid -0x7a9b 035136 fetch 1 ,mem_le_sc_calc -0x7a9c 035137 rtnne sp_calc_standby -0x7a9d 035139 arg mem_k_256 ,contw -0x7a9e 035140 arg mem_le_private_key_256 ,contr -0x7a9f 035141 call memcpy32 -0x7aa0 035143 arg mem_ax_256 ,contw -0x7aa1 035144 arg mem_le_pubkey_remote_x_256 ,contr -0x7aa2 035145 call memcpy64 -0x7aa3 035147 arg mem_az_256 ,contw -0x7aa4 035148 call clear_mem_256 -0x7aa5 035149 jam 1 ,mem_az_256 -0x7aa6 035151 call eckp_calc_init_256 -0x7aa7 035152 jam sp_calc_dhkey_256 ,mem_le_sc_calc -0x7aa8 035153 rtn -: 035156 sp_dhkey_generated_256: -0x7aa9 035158 arg mem_le_dhkey_256 ,contw -0x7aaa 035159 arg mem_bx_256 ,contr -0x7aab 035160 call memcpy32 -0x7aac 035161 jam sp_key_valid_256 ,mem_sp_dhkey_invalid -0x7aad 035162 jam sp_calc_standby ,mem_le_sc_calc -0x7aae 035163 rtn -: 035167 sp_calc_sequence_256: -0x7aaf 035168 fetch 1 ,mem_le_secure_connect_enable -0x7ab0 035169 rtn blank -0x7ab1 035170 fetch 1 ,mem_le_sc_calc -0x7ab2 035171 rtn blank -0x7ab3 035172 increase 0x80 ,pdata -0x7ab4 035173 store 1 ,mem_le_sc_calc -0x7ab5 035174 rtnbit1 7 -0x7ab6 035175 fetch 2 ,mem_ec_loopc -0x7ab7 035176 branch sp_calc_sequence_done_256 ,blank -0x7ab8 035177 branch eckp_calc_256 -: 035179 sp_calc_sequence_done_256: -0x7ab9 035180 bpatchx patch3e_0 ,mem_patch3e -0x7aba 035181 call ecunmapz_256 -0x7abb 035182 fetch 1 ,mem_le_sc_calc -0x7abc 035183 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 -0x7abd 035184 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 -0x7abe 035185 rtn -: 035188 eckp_calc_256: -0x7abf 035189 call ecdbl_256 -0x7ac0 035190 fetch 2 ,mem_ec_loopc -0x7ac1 035191 increase -1 ,pdata -0x7ac2 035192 store 2 ,mem_ec_loopc -0x7ac3 035193 arg mem_k_256 ,contr -0x7ac4 035194 call bn_testbit -0x7ac5 035195 rtn true -0x7ac6 035196 branch ecadd_256 -: 035198 eckp_calc_init_256: -0x7ac7 035199 bpatchx patch3e_1 ,mem_patch3e -0x7ac8 035200 setarg 256 ,pdata -0x7ac9 035201 store 2 ,mem_ec_loopc -: 035202 eckp_calc_init_256_1: -0x7aca 035203 fetch 2 ,mem_ec_loopc -0x7acb 035204 rtn blank -0x7acc 035205 increase -1 ,pdata -0x7acd 035206 store 2 ,mem_ec_loopc -0x7ace 035207 arg mem_k_256 ,contr -0x7acf 035208 call bn_testbit -0x7ad0 035209 branch eckp_calc_init_256_1 ,true -0x7ad1 035210 arg mem_ax_256 ,contr -0x7ad2 035211 arg mem_cx_256 ,contw -0x7ad3 035212 branch memcpy96 -: 035215 ecunmapz_256: -0x7ad4 035216 arg mem_cz_256 ,rega -0x7ad5 035217 arg mem_t3_256 ,contw -0x7ad6 035218 call bn_invmod_256 -0x7ad7 035219 arg mem_t3_256 ,rega -0x7ad8 035220 arg mem_t1_256 ,contw -0x7ad9 035221 call bn_sqrmod_256 -0x7ada 035222 arg mem_cx_256 ,rega -0x7adb 035223 arg mem_t1_256 ,regb -0x7adc 035224 arg mem_bx_256 ,contw -0x7add 035225 call bn_mulmod_256 -0x7ade 035226 arg mem_t3_256 ,rega -0x7adf 035227 arg mem_t1_256 ,regb -0x7ae0 035228 arg mem_t2_256 ,contw -0x7ae1 035229 call bn_mulmod_256 -0x7ae2 035230 arg mem_cy_256 ,rega -0x7ae3 035231 arg mem_t2_256 ,regb -0x7ae4 035232 arg mem_by_256 ,contw -0x7ae5 035233 branch bn_mulmod_256 -: 035235 ecdbl_256: -0x7ae6 035236 arg mem_cz_256 ,rega -0x7ae7 035237 arg mem_t2_256 ,contw -0x7ae8 035238 call bn_sqrmod_256 -0x7ae9 035239 arg mem_t2_256 ,rega -0x7aea 035240 arg mem_t3_256 ,contw -0x7aeb 035241 call bn_sqrmod_256 -0x7aec 035243 arg mem_a_256 ,rega -0x7aed 035244 arg mem_t3_256 ,regb -0x7aee 035245 arg mem_t3_256 ,contw -0x7aef 035246 call bn_mulmod_256 -0x7af0 035247 arg mem_cx_256 ,rega -0x7af1 035248 arg mem_t2_256 ,contw -0x7af2 035249 call bn_sqrmod_256 -0x7af3 035251 arg mem_t2_256 ,contr -0x7af4 035252 arg mem_t1_256 ,contw -0x7af5 035253 call memcpy32 -0x7af6 035254 arg mem_t1_256 ,rega -0x7af7 035255 call bn_lshiftmod_256 -0x7af8 035256 arg mem_t2_256 ,rega -0x7af9 035257 arg mem_t1_256 ,regb -0x7afa 035258 arg mem_t2_256 ,contw -0x7afb 035259 call bn_addmod_256 -0x7afc 035261 arg mem_t2_256 ,rega -0x7afd 035262 arg mem_t3_256 ,regb -0x7afe 035263 arg mem_t2_256 ,contw -0x7aff 035264 call bn_addmod_256 -0x7b00 035266 arg mem_cx_256 ,contr -0x7b01 035267 arg mem_t1_256 ,contw -0x7b02 035268 call memcpy32 -0x7b03 035269 arg mem_cy_256 ,rega -0x7b04 035270 arg mem_t3_256 ,contw -0x7b05 035271 call bn_sqrmod_256 -0x7b06 035272 arg mem_t1_256 ,rega -0x7b07 035273 call bn_lshiftmod_256 -0x7b08 035274 arg mem_t1_256 ,rega -0x7b09 035275 call bn_lshiftmod_256 -0x7b0a 035276 arg mem_t1_256 ,rega -0x7b0b 035277 arg mem_t3_256 ,regb -0x7b0c 035278 arg mem_t1_256 ,contw -0x7b0d 035279 call bn_mulmod_256 -0x7b0e 035280 arg mem_t3_256 ,rega -0x7b0f 035281 arg mem_t0_256 ,contw -0x7b10 035282 call bn_sqrmod_256 -0x7b11 035283 arg mem_t0_256 ,rega -0x7b12 035284 call bn_lshiftmod_256 -0x7b13 035285 arg mem_t0_256 ,rega -0x7b14 035286 call bn_lshiftmod_256 -0x7b15 035287 arg mem_t0_256 ,rega -0x7b16 035288 call bn_lshiftmod_256 -0x7b17 035289 arg mem_cy_256 ,contr -0x7b18 035290 arg mem_t3_256 ,contw -0x7b19 035291 call memcpy32 -0x7b1a 035292 arg mem_t3_256 ,rega -0x7b1b 035293 call bn_lshiftmod_256 -0x7b1c 035294 arg mem_t3_256 ,rega -0x7b1d 035295 arg mem_cz_256 ,regb -0x7b1e 035296 arg mem_cz_256 ,contw -0x7b1f 035297 call bn_mulmod_256 -0x7b20 035300 arg mem_t2_256 ,rega -0x7b21 035301 arg mem_t3_256 ,contw -0x7b22 035302 call bn_sqrmod_256 -0x7b23 035304 arg mem_t3_256 ,rega -0x7b24 035305 arg mem_t1_256 ,regb -0x7b25 035306 arg mem_t3_256 ,contw -0x7b26 035307 call bn_submod_256 -0x7b27 035308 arg mem_t3_256 ,rega -0x7b28 035309 arg mem_t1_256 ,regb -0x7b29 035310 arg mem_cx_256 ,contw -0x7b2a 035311 call bn_submod_256 -0x7b2b 035312 arg mem_t1_256 ,rega -0x7b2c 035313 arg mem_cx_256 ,regb -0x7b2d 035314 arg mem_t3_256 ,contw -0x7b2e 035315 call bn_submod_256 -0x7b2f 035316 arg mem_t3_256 ,rega -0x7b30 035317 arg mem_t2_256 ,regb -0x7b31 035318 arg mem_t3_256 ,contw -0x7b32 035319 call bn_mulmod_256 -0x7b33 035320 arg mem_t3_256 ,rega -0x7b34 035321 arg mem_t0_256 ,regb -0x7b35 035322 arg mem_cy_256 ,contw -0x7b36 035323 branch bn_submod_256 -: 035325 ecadd_256: -0x7b37 035327 arg mem_az_256 ,rega -0x7b38 035328 arg mem_t7_256 ,contw -0x7b39 035329 call bn_sqrmod_256 -0x7b3a 035330 arg mem_cx_256 ,rega -0x7b3b 035331 arg mem_t7_256 ,regb -0x7b3c 035332 arg mem_t0_256 ,contw -0x7b3d 035333 call bn_mulmod_256 -0x7b3e 035336 arg mem_az_256 ,rega -0x7b3f 035337 arg mem_t7_256 ,regb -0x7b40 035338 arg mem_t7_256 ,contw -0x7b41 035339 call bn_mulmod_256 -0x7b42 035340 arg mem_cy_256 ,rega -0x7b43 035341 arg mem_t7_256 ,regb -0x7b44 035342 arg mem_t1_256 ,contw -0x7b45 035343 call bn_mulmod_256 -0x7b46 035346 arg mem_cz_256 ,rega -0x7b47 035347 arg mem_t7_256 ,contw -0x7b48 035348 call bn_sqrmod_256 -0x7b49 035349 arg mem_ax_256 ,rega -0x7b4a 035350 arg mem_t7_256 ,regb -0x7b4b 035351 arg mem_t2_256 ,contw -0x7b4c 035352 call bn_mulmod_256 -0x7b4d 035354 arg mem_cz_256 ,rega -0x7b4e 035355 arg mem_t7_256 ,regb -0x7b4f 035356 arg mem_t7_256 ,contw -0x7b50 035357 call bn_mulmod_256 -0x7b51 035358 arg mem_ay_256 ,rega -0x7b52 035359 arg mem_t7_256 ,regb -0x7b53 035360 arg mem_t3_256 ,contw -0x7b54 035361 call bn_mulmod_256 -0x7b55 035366 arg mem_t0_256 ,regb -0x7b56 035367 arg mem_t2_256 ,rega -0x7b57 035368 arg mem_t7_256 ,contw -0x7b58 035369 call bn_submod_256 -0x7b59 035370 arg mem_t0_256 ,rega -0x7b5a 035371 arg mem_t2_256 ,regb -0x7b5b 035372 arg mem_t0_256 ,contw -0x7b5c 035373 call bn_addmod_256 -0x7b5d 035376 arg mem_t1_256 ,regb -0x7b5e 035377 arg mem_t3_256 ,rega -0x7b5f 035378 arg mem_t2_256 ,contw -0x7b60 035379 call bn_submod_256 -0x7b61 035380 arg mem_t1_256 ,rega -0x7b62 035381 arg mem_t3_256 ,regb -0x7b63 035382 arg mem_t1_256 ,contw -0x7b64 035383 call bn_addmod_256 -0x7b65 035384 arg mem_t1_256 ,rega -0x7b66 035385 arg mem_t7_256 ,regb -0x7b67 035386 arg mem_t1_256 ,contw -0x7b68 035387 call bn_mulmod_256 -0x7b69 035388 arg mem_cz_256 ,rega -0x7b6a 035389 arg mem_az_256 ,regb -0x7b6b 035390 arg mem_t3_256 ,contw -0x7b6c 035391 call bn_mulmod_256 -0x7b6d 035392 arg mem_t3_256 ,rega -0x7b6e 035393 arg mem_t7_256 ,regb -0x7b6f 035394 arg mem_cz_256 ,contw -0x7b70 035395 call bn_mulmod_256 -0x7b71 035397 arg mem_t7_256 ,rega -0x7b72 035398 arg mem_t7_256 ,contw -0x7b73 035399 call bn_sqrmod_256 -0x7b74 035400 arg mem_t7_256 ,rega -0x7b75 035401 arg mem_t0_256 ,regb -0x7b76 035402 arg mem_t3_256 ,contw -0x7b77 035403 call bn_mulmod_256 -0x7b78 035404 arg mem_t7_256 ,rega -0x7b79 035405 arg mem_t1_256 ,regb -0x7b7a 035406 arg mem_t1_256 ,contw -0x7b7b 035407 call bn_mulmod_256 -0x7b7c 035408 arg mem_t2_256 ,rega -0x7b7d 035409 arg mem_cx_256 ,contw -0x7b7e 035410 call bn_sqrmod_256 -0x7b7f 035411 arg mem_cx_256 ,rega -0x7b80 035412 arg mem_t3_256 ,regb -0x7b81 035413 arg mem_cx_256 ,contw -0x7b82 035414 call bn_submod_256 -0x7b83 035415 arg mem_cx_256 ,contr -0x7b84 035416 arg mem_t7_256 ,contw -0x7b85 035417 call memcpy32 -0x7b86 035418 arg mem_t7_256 ,rega -0x7b87 035419 call bn_lshiftmod_256 -0x7b88 035420 arg mem_t3_256 ,rega -0x7b89 035421 arg mem_t7_256 ,regb -0x7b8a 035422 arg mem_t3_256 ,contw -0x7b8b 035423 call bn_submod_256 -0x7b8c 035424 arg mem_t3_256 ,rega -0x7b8d 035425 arg mem_t2_256 ,regb -0x7b8e 035426 arg mem_t2_256 ,contw -0x7b8f 035427 call bn_mulmod_256 -0x7b90 035428 arg mem_t2_256 ,rega -0x7b91 035429 arg mem_t1_256 ,regb -0x7b92 035430 arg mem_cy_256 ,contw -0x7b93 035431 call bn_submod_256 -0x7b94 035432 arg mem_cy_256 ,rega -0x7b95 035433 arg mem_p_256 ,regb -0x7b96 035434 arg mem_cy_256 ,contw -0x7b97 035435 force 0 ,regc -0x7b98 035436 fetch 1 ,mem_cy_256 -0x7b99 035437 isolate1 0 ,pdata -0x7b9a 035438 call bn_add_256 ,true -0x7b9b 035439 copy regc ,alarm -0x7b9c 035440 arg mem_cy_256 ,rega -0x7b9d 035441 call bn_rshift_256 -0x7b9e 035442 fetch 1 ,mem_cy5_256 -0x7b9f 035443 isolate1 0 ,alarm -0x7ba0 035444 setflag true ,7 ,pdata -0x7ba1 035445 store 1 ,mem_cy5_256 -0x7ba2 035446 rtn -: 035448 bn_invmod_256: -0x7ba3 035449 copy contw ,timeup -0x7ba4 035450 arg mem_tmp0_256 ,contw -0x7ba5 035451 call clear_mem_256 -0x7ba6 035452 force 0 ,pdata -0x7ba7 035454 store 4 ,mem_t2_256 -0x7ba8 035455 jam 1 ,mem_tmp0_256 -0x7ba9 035456 arg mem_tmp1_256 ,contw -0x7baa 035457 call clear_mem_512 -0x7bab 035458 arg mem_p_256 ,contr -0x7bac 035459 arg mem_tmp2_256 ,contw -0x7bad 035460 call memcpy32 -0x7bae 035461 copy rega ,contr -0x7baf 035462 arg mem_tmp3_256 ,contw -0x7bb0 035463 call memcpy32 -: 035469 bn_invmod_256_2: -0x7bb1 035470 arg mem_tmp3_256 ,contr -0x7bb2 035471 call bn_eq_zero_256 -0x7bb3 035472 branch bn_invmod_256_0 ,blank -0x7bb4 035477 arg mem_tmp3_256 ,rega -0x7bb5 035478 arg mem_tmp0_256 ,regb -0x7bb6 035479 call bn_rshifteven_256 -0x7bb7 035480 arg mem_tmp2_256 ,rega -0x7bb8 035481 arg mem_tmp1_256 ,regb -0x7bb9 035482 call bn_rshifteven_256 -0x7bba 035484 arg mem_tmp3_256 ,rega -0x7bbb 035485 arg mem_tmp2_256 ,regb -0x7bbc 035486 call bn_bigeq_256 -0x7bbd 035487 branch bn_invmod_256_1 ,positive -0x7bbe 035488 arg mem_tmp2_256 ,rega -0x7bbf 035489 arg mem_tmp3_256 ,regb -0x7bc0 035490 copy rega ,contw -0x7bc1 035491 call bn_sub_256 -0x7bc2 035492 arg mem_tmp0_256 ,rega -0x7bc3 035493 arg mem_tmp1_256 ,regb -0x7bc4 035494 copy regb ,contw -0x7bc5 035495 call bn_add_256 -0x7bc6 035496 ifetch 1 ,rega -0x7bc7 035497 iadd regc ,regc -0x7bc8 035498 ifetch 1 ,regb -0x7bc9 035499 iadd regc ,pdata -0x7bca 035500 istore 1 ,regb -0x7bcb 035501 branch bn_invmod_256_2 -: 035502 bn_invmod_256_1: -0x7bcc 035503 arg mem_tmp3_256 ,rega -0x7bcd 035504 arg mem_tmp2_256 ,regb -0x7bce 035505 copy rega ,contw -0x7bcf 035506 call bn_sub_256 -0x7bd0 035507 arg mem_tmp1_256 ,rega -0x7bd1 035508 arg mem_tmp0_256 ,regb -0x7bd2 035509 copy regb ,contw -0x7bd3 035510 call bn_add_256 -0x7bd4 035511 ifetch 1 ,rega -0x7bd5 035512 iadd regc ,regc -0x7bd6 035513 ifetch 1 ,regb -0x7bd7 035514 iadd regc ,pdata -0x7bd8 035515 istore 1 ,regb -0x7bd9 035516 branch bn_invmod_256_2 -: 035517 bn_invmod_256_0: -0x7bda 035519 arg mem_tmp1_256 ,rega -0x7bdb 035520 copy timeup ,contw -0x7bdc 035521 call bn_p256mod -0x7bdd 035523 arg mem_p_256 ,rega -0x7bde 035524 copy timeup ,regb -0x7bdf 035525 copy timeup ,contw -0x7be0 035526 branch bn_submod_256 -: 035529 bn_mulmod_256: -0x7be1 035530 copy contw ,timeup -0x7be2 035532 force 0 ,regext_index -0x7be3 035534 arg mem_tmp1_256 ,contw -0x7be4 035535 call clear_mem_512 -0x7be5 035536 arg mem_regext ,contw -0x7be6 035537 call clear_mem_512 -0x7be7 035541 copy rega ,contr -0x7be8 035543 jam 0 ,mem_regext -0x7be9 035544 setarg 0 -0x7bea 035545 call bn_load_mem -0x7beb 035546 copy regb ,contr -0x7bec 035547 call bn_load_256 -0x7bed 035550 force 0 ,queue -0x7bee 035551 arg mem_tmp1_256 ,contw -: 035552 bn_mulmod_256_1: -0x7bef 035555 arg mem_regext ,temp -0x7bf0 035556 copy queue ,regb -0x7bf1 035557 lshift2 regb ,pdata -0x7bf2 035559 iadd temp ,regb -0x7bf3 035560 force 0 ,temp -0x7bf4 035561 force 0 ,regc -: 035562 bn_mulmod_256_0: -0x7bf5 035567 ifetch 4 ,contw -0x7bf6 035568 iforce rega -0x7bf7 035571 ifetch 4 ,regb -0x7bf8 035572 copy regc ,regext_index -0x7bf9 035573 imul32 regext ,pdata -0x7bfa 035574 iadd rega ,pdata -0x7bfb 035575 iadd temp ,pdata -0x7bfc 035576 istore 4 ,contw -0x7bfd 035577 rshift32 pdata ,temp -0x7bfe 035578 increase 1 ,regc -0x7bff 035579 compare 8 ,regc ,0xff -0x7c00 035580 nbranch bn_mulmod_256_0 ,true -0x7c01 035582 deposit temp -0x7c02 035583 istore 4 ,contw -0x7c03 035584 increase -32 ,contw -0x7c04 035587 increase 1 ,queue -0x7c05 035588 compare 8 ,queue ,0xff -0x7c06 035589 nbranch bn_mulmod_256_1 ,true -0x7c07 035590 arg mem_tmp1_256 ,rega -0x7c08 035591 copy timeup ,contw -0x7c09 035592 branch bn_p256mod -: 035594 bn_p256mod: -0x7c0a 035595 bpatchx patch3e_2 ,mem_patch3e -0x7c0b 035596 copy contw ,timeup -0x7c0c 035597 copy rega ,alarm -0x7c0d 035598 arg mem_tmp2_256 ,regb -0x7c0e 035599 copy regb ,contw -0x7c0f 035600 call memset0_4 -0x7c10 035601 istore 8 ,contw -0x7c11 035602 add rega ,44 ,contr -0x7c12 035603 call memcpy8 -0x7c13 035604 call memcpy12 -0x7c14 035605 copy regb ,rega -0x7c15 035606 call bn_lshiftmod_256 -0x7c16 035607 arg mem_tmp2_256 ,regb -0x7c17 035608 copy alarm ,rega -0x7c18 035609 copy timeup ,contw -0x7c19 035610 call bn_addmod_256 -0x7c1a 035612 arg mem_tmp2_256 ,regb -0x7c1b 035613 copy regb ,contw -0x7c1c 035614 call memset0_4 -0x7c1d 035615 istore 8 ,contw -0x7c1e 035616 add alarm ,48 ,contr -0x7c1f 035617 call memcpy16 -0x7c20 035618 call memset0_4 -0x7c21 035619 copy regb ,rega -0x7c22 035620 call bn_lshiftmod_256 -0x7c23 035624 arg mem_tmp2_256 ,regb -0x7c24 035625 copy timeup ,rega -0x7c25 035626 copy rega ,contw -0x7c26 035627 call bn_addmod_256 -0x7c27 035631 arg mem_tmp2_256 ,regb -0x7c28 035632 copy regb ,contw -0x7c29 035633 add alarm ,32 ,contr -0x7c2a 035634 call memcpy12 -0x7c2b 035635 call memset0_4 -0x7c2c 035636 istore 8 ,contw -0x7c2d 035637 add alarm ,56 ,contr -0x7c2e 035638 call memcpy8 -0x7c2f 035639 copy timeup ,rega -0x7c30 035640 copy rega ,contw -0x7c31 035641 call bn_addmod_256 -0x7c32 035645 arg mem_tmp2_256 ,regb -0x7c33 035646 copy regb ,contw -0x7c34 035647 add alarm ,36 ,contr -0x7c35 035648 call memcpy12 -0x7c36 035649 add alarm ,52 ,contr -0x7c37 035650 call memcpy12 -0x7c38 035651 add alarm ,52 ,contr -0x7c39 035652 call memcpy4 -0x7c3a 035653 add alarm ,32 ,contr -0x7c3b 035654 call memcpy4 -0x7c3c 035655 copy timeup ,rega -0x7c3d 035656 copy rega ,contw -0x7c3e 035657 call bn_addmod_256 -0x7c3f 035660 arg mem_tmp2_256 ,regb -0x7c40 035661 copy regb ,contw -0x7c41 035662 add alarm ,44 ,contr -0x7c42 035663 call memcpy12 -0x7c43 035664 call memset0_4 -0x7c44 035665 istore 8 ,contw -0x7c45 035666 add alarm ,32 ,contr -0x7c46 035667 call memcpy4 -0x7c47 035668 add alarm ,40 ,contr -0x7c48 035669 call memcpy4 -0x7c49 035670 copy timeup ,rega -0x7c4a 035671 copy rega ,contw -0x7c4b 035672 call bn_submod_256 -0x7c4c 035675 arg mem_tmp2_256 ,regb -0x7c4d 035676 copy regb ,contw -0x7c4e 035677 add alarm ,48 ,contr -0x7c4f 035678 call memcpy8 -0x7c50 035679 call memcpy8 -0x7c51 035680 force 0 ,pdata -0x7c52 035681 istore 8 ,contw -0x7c53 035682 add alarm ,36 ,contr -0x7c54 035683 call memcpy4 -0x7c55 035684 add alarm ,44 ,contr -0x7c56 035685 call memcpy4 -0x7c57 035686 copy timeup ,rega -0x7c58 035687 copy rega ,contw -0x7c59 035688 call bn_submod_256 -0x7c5a 035691 arg mem_tmp2_256 ,regb -0x7c5b 035692 copy regb ,contw -0x7c5c 035693 add alarm ,52 ,contr -0x7c5d 035694 call memcpy12 -0x7c5e 035695 add alarm ,32 ,contr -0x7c5f 035696 call memcpy12 -0x7c60 035697 call memset0_4 -0x7c61 035698 add alarm ,48 ,contr -0x7c62 035699 call memcpy4 -0x7c63 035700 copy timeup ,rega -0x7c64 035701 copy rega ,contw -0x7c65 035702 call bn_submod_256 -0x7c66 035705 arg mem_tmp2_256 ,regb -0x7c67 035706 copy regb ,contw -0x7c68 035707 add alarm ,56 ,contr -0x7c69 035708 call memcpy8 -0x7c6a 035709 call memset0_4 -0x7c6b 035710 add alarm ,36 ,contr -0x7c6c 035711 call memcpy12 -0x7c6d 035712 call memset0_4 -0x7c6e 035713 add alarm ,52 ,contr -0x7c6f 035714 call memcpy4 -0x7c70 035715 copy timeup ,rega -0x7c71 035716 copy rega ,contw -0x7c72 035717 branch bn_submod_256 -: 035720 bn_load_mem: -0x7c73 035721 force 32 ,loopcnt -0x7c74 035722 arg mem_regext ,contw -0x7c75 035723 iadd contw ,contw -0x7c76 035724 branch memcpy -: 035726 bn_load_256: -0x7c77 035727 force 8 ,loopcnt -0x7c78 035728 branch bn_load_0 -: 035730 bn_sqrmod_256: -0x7c79 035731 copy rega ,regb -0x7c7a 035732 branch bn_mulmod_256 -: 035734 bn_add_256: -0x7c7b 035735 force 8 ,loopcnt -0x7c7c 035736 branch bn_add + 1 -: 035738 bn_addmod_256: -0x7c7d 035739 call bn_add_256 -0x7c7e 035740 copy contw ,rega -0x7c7f 035741 branch bn_lshiftmod_ismod_256 -: 035743 bn_lshiftmod_256: -0x7c80 035744 call bn_lshift_256 -: 035745 bn_lshiftmod_ismod_256: -0x7c81 035746 isolate1 0 ,regc -0x7c82 035747 branch bn_lshiftmod_p_256 ,true -0x7c83 035748 arg mem_p_256 ,regb -0x7c84 035749 copy rega ,regc -0x7c85 035750 increase -32 ,rega -0x7c86 035751 call bn_bigeq_256 -0x7c87 035752 nrtn positive -0x7c88 035753 copy regc ,rega -0x7c89 035754 branch sub_p2_256 -: 035756 bn_lshiftmod_p_256: -0x7c8a 035757 call sub_p2_256 -0x7c8b 035759 copy rega ,regc -0x7c8c 035760 increase -32 ,rega -0x7c8d 035761 arg mem_p_256 ,regb -0x7c8e 035762 call bn_bigeq_256 -0x7c8f 035763 nrtn positive -0x7c90 035764 copy regc ,rega -0x7c91 035765 branch sub_p2_256 -: 035768 sub_p2_256: -0x7c92 035769 increase -32 ,rega -0x7c93 035770 arg mem_p_256 ,regb -0x7c94 035771 copy rega ,contw -0x7c95 035772 branch bn_sub_256 -: 035777 bn_submod_256: -0x7c96 035778 call bn_sub_256 -0x7c97 035780 branch bn_submod_256_np ,true -0x7c98 035783 add contw ,-32 ,rega -0x7c99 035784 arg mem_p_256 ,regb -0x7c9a 035785 call bn_bigeq_256 -0x7c9b 035786 nrtn positive -0x7c9c 035787 arg mem_p_256 ,regb -0x7c9d 035788 add contw ,-32 ,rega -0x7c9e 035790 copy rega ,contw -0x7c9f 035791 branch bn_sub_256 -: 035792 bn_submod_256_np: -0x7ca0 035793 add contw ,-32 ,rega -0x7ca1 035794 arg mem_p_256 ,regb -0x7ca2 035795 copy rega ,contw -0x7ca3 035796 call bn_add_256 -0x7ca4 035798 rtn true -0x7ca5 035799 add contw ,-32 ,rega -0x7ca6 035800 arg mem_p_256 ,regb -0x7ca7 035801 copy rega ,contw -0x7ca8 035802 branch bn_add_256 -: 035806 bn_sub_256: -0x7ca9 035807 force 8 ,loopcnt -0x7caa 035808 branch bn_sub + 1 -: 035810 bn_rshift_256: -0x7cab 035811 force 8 ,loopcnt -0x7cac 035812 increase 28 ,rega -0x7cad 035813 branch bn_rshift -: 035815 bn_lshift_256: -0x7cae 035816 force 8 ,loopcnt -0x7caf 035817 force 0 ,regc -0x7cb0 035818 branch bn_lshift_0 -: 035820 bn_bigeq_256: -0x7cb1 035821 force 8 ,loopcnt -0x7cb2 035822 increase 28 ,rega -0x7cb3 035823 increase 28 ,regb -0x7cb4 035824 branch bn_bigeq_0 -: 035827 bn_eq_zero_256: -0x7cb5 035828 ifetch 8 ,contr -0x7cb6 035829 nrtn blank -0x7cb7 035830 branch bn_eq_zero -: 035835 bn_rshifteven_256: -0x7cb8 035836 copy rega ,alarm -: 035837 bn_rshifteven_256_1: -0x7cb9 035838 copy alarm ,rega -0x7cba 035839 ifetch 1 ,rega -0x7cbb 035840 isolate1 0 ,pdata -0x7cbc 035841 rtn true -0x7cbd 035842 call bn_rshift_256 -0x7cbe 035843 ifetch 1 ,regb -0x7cbf 035844 isolate0 0 ,pdata -0x7cc0 035845 branch bn_rshifteven_256_0 ,true -0x7cc1 035846 arg mem_p_256 ,rega -0x7cc2 035847 copy regb ,contw -0x7cc3 035848 call bn_add_256 -0x7cc4 035849 ifetch 1 ,regb -0x7cc5 035850 iadd regc ,pdata -0x7cc6 035851 istore 1 ,regb -0x7cc7 035852 increase -32 ,regb -: 035853 bn_rshifteven_256_0: -0x7cc8 035854 add regb ,32 ,rega -0x7cc9 035855 force 9 ,loopcnt -0x7cca 035856 call bn_rshift -0x7ccb 035857 branch bn_rshifteven_256_1 -: 035861 ui_init: -0x7ccc 035862 call lpm_disable_exen_output -0x7ccd 035863 rtn wake -0x7cce 035864 call ui_button_init -0x7ccf 035865 call ui_timer_init -0x7cd0 035866 branch ui_led_init_global -: 035868 ui_dispatch: -0x7cd1 035869 call ui_led_dispatch -0x7cd2 035871 branch ui_timer_check -: 035873 ui_button_init: -0x7cd3 035874 fetch 1 ,mem_ui_button_gpio -0x7cd4 035875 rtneq ui_button_gpio_disable -0x7cd5 035876 iforce temp -0x7cd6 035877 call gpio_config_output -0x7cd7 035878 fetcht 1 ,mem_ui_button_gpio -0x7cd8 035879 call gpio_out_inactive -0x7cd9 035880 nop 100 -0x7cda 035881 fetcht 1 ,mem_ui_button_gpio -0x7cdb 035882 call gpio_config_input -0x7cdc 035883 branch ui_button_polling -: 035887 ui_button_polling: -0x7cdd 035888 bpatchx patch3e_3 ,mem_patch3e -0x7cde 035889 fetch 1 ,mem_ui_button_gpio -0x7cdf 035890 rtneq ui_button_gpio_disable -0x7ce0 035891 copy pdata ,temp -0x7ce1 035892 call gpio_get_bit -0x7ce2 035893 nbranch ui_button_up ,true -: 035895 ui_button_down: -0x7ce3 035896 call ui_button_check_long_press -0x7ce4 035897 fetch 2 ,mem_ui_state_map -0x7ce5 035898 set1 ui_state_btn_down -0x7ce6 035899 store 2 ,mem_ui_state_map -0x7ce7 035900 fetch 1 ,mem_ui_button_last_state -0x7ce8 035901 rtneq ui_button_state_down -0x7ce9 035902 jam ui_button_state_down ,mem_ui_button_last_state -0x7cea 035904 fetch 1 ,mem_ui_button_timeout -0x7ceb 035905 store 1 ,mem_ui_button_timer -0x7cec 035906 call lpm_button_get_wake_lock -0x7ced 035907 jam bt_evt_button_down ,mem_fifo_temp -0x7cee 035908 branch ui_ipc_send_event -: 035909 ui_button_up: -0x7cef 035910 fetch 2 ,mem_ui_state_map -0x7cf0 035911 set0 ui_state_btn_down -0x7cf1 035912 store 2 ,mem_ui_state_map -0x7cf2 035913 fetch 1 ,mem_ui_button_last_state -0x7cf3 035914 rtneq ui_button_state_up -0x7cf4 035915 jam ui_button_state_up ,mem_ui_button_last_state -0x7cf5 035917 jam 0 ,mem_ui_button_timer -0x7cf6 035918 call lpm_button_clean_wake_lock -0x7cf7 035919 jam bt_evt_button_up ,mem_fifo_temp -0x7cf8 035920 branch ui_ipc_send_event -: 035922 ui_button_check_long_press: -0x7cf9 035923 fetch 1 ,mem_ui_button_timer -0x7cfa 035924 rtn blank -0x7cfb 035925 increase -1 ,pdata -0x7cfc 035926 store 1 ,mem_ui_button_timer -0x7cfd 035927 nrtn blank -0x7cfe 035929 jam bt_evt_button_long_pressed ,mem_fifo_temp -0x7cff 035930 branch ui_ipc_send_event -: 035932 lpm_button_get_wake_lock: -0x7d00 035933 arg wake_lock_button ,queue -0x7d01 035934 branch lpm_get_wake_lock -: 035936 lpm_button_clean_wake_lock: -0x7d02 035937 arg wake_lock_button ,queue -0x7d03 035938 branch lpm_put_wake_lock -: 035960 calc_curr_struct_prt: -0x7d04 035961 fetch 2 ,mem_ui_led_struct_ptr -0x7d05 035962 mul32 rega ,led_offset_length ,regb -0x7d06 035963 iadd regb ,regb -0x7d07 035964 rtn -: 035967 ui_led_init_global: -0x7d08 035968 fetch 1 ,mem_ui_led_struct_num -0x7d09 035969 rtn blank -0x7d0a 035970 copy pdata ,loopcnt -0x7d0b 035971 fetch 2 ,mem_ui_led_struct_ptr -0x7d0c 035972 copy pdata ,regb -: 035973 ui_led_init_loop: -0x7d0d 035974 add regb ,led_offset_led_gpio ,regc -0x7d0e 035975 ifetcht 1 ,regc -0x7d0f 035976 call gpio_config_output -0x7d10 035977 call ui_led_off_static -0x7d11 035978 increase led_offset_length ,regb -0x7d12 035979 loop ui_led_init_loop -0x7d13 035980 rtn -: 035984 ui_led_on_global: -0x7d14 035985 call calc_curr_struct_prt -0x7d15 035986 setarg ui_led_state_lighting -0x7d16 035987 istore 1 ,regb -0x7d17 035988 call ui_led_stop_timer -0x7d18 035989 branch ui_led_on_static -: 035993 ui_led_blink_stop_global: -: 035994 ui_led_off_global: -0x7d19 035995 call calc_curr_struct_prt -0x7d1a 035996 setarg ui_led_state_darking -0x7d1b 035997 istore 1 ,regb -0x7d1c 035998 call ui_led_stop_timer -0x7d1d 035999 branch ui_led_off_static -: 036003 ui_led_blink_start_global: -0x7d1e 036004 call calc_curr_struct_prt -0x7d1f 036005 setarg ui_led_state_blink_start -0x7d20 036006 istore 1 ,regb -0x7d21 036007 setarg led_infinite_flash_num -0x7d22 036008 istore 1 ,contw -0x7d23 036009 branch ui_led_off_static -: 036014 ui_led_set_style_global: -0x7d24 036015 call calc_curr_struct_prt -0x7d25 036016 arg led_offset_length ,loopcnt -0x7d26 036017 copy regc ,contr -0x7d27 036018 copy regb ,contw -0x7d28 036019 branch memcpy_fast -: 036023 ui_led_dispatch: -0x7d29 036024 fetch 1 ,mem_ui_led_struct_num -0x7d2a 036025 rtn blank -0x7d2b 036026 arg 0 ,rega -: 036027 ui_led_blink_polling: -0x7d2c 036028 call ui_led_change_style_by_type -0x7d2d 036029 increase 1 ,rega -0x7d2e 036030 fetch 1 ,mem_ui_led_struct_num -0x7d2f 036031 isub rega ,null -0x7d30 036032 rtn zero -0x7d31 036033 branch ui_led_blink_polling -: 036036 ui_led_off_static: -0x7d32 036037 add regb ,led_offset_led_gpio ,regc -0x7d33 036038 ifetcht 1 ,regc -0x7d34 036039 branch gpio_out_inactive -: 036042 ui_led_on_static: -0x7d35 036043 add regb ,led_offset_led_gpio ,regc -0x7d36 036044 ifetcht 1 ,regc -0x7d37 036045 branch gpio_out_active -: 036049 ui_led_change_style_by_type: -0x7d38 036050 add rega ,ui_led_blink ,queue -0x7d39 036051 call timer_check -0x7d3a 036052 nrtn blank -0x7d3b 036054 call calc_curr_struct_prt -0x7d3c 036056 ifetch 1 ,regb -0x7d3d 036058 beq ui_led_state_lighting ,ui_led_on_static -0x7d3e 036059 beq ui_led_state_darking ,ui_led_off_static -0x7d3f 036060 beq ui_led_state_blink_stop ,ui_led_off_static -0x7d40 036061 beq ui_led_state_blink_darking ,ui_led_blink_state_darking -: 036062 ui_led_blink_state_lighting: -0x7d41 036063 call ui_led_on_static -0x7d42 036064 add regb ,led_offset_cb_ledon ,regc -0x7d43 036065 call push_stack -0x7d44 036066 ifetch 2 ,regc -0x7d45 036067 call callback_func -0x7d46 036068 call pop_stack -0x7d47 036069 setarg ui_led_state_blink_darking -0x7d48 036070 istore 1 ,regb -0x7d49 036071 add regb ,led_offset_on_time ,regc -0x7d4a 036072 ifetch 2 ,regc -0x7d4b 036073 branch ui_led_blink_timer_start -: 036076 ui_led_blink_state_darking: -0x7d4c 036077 call ui_led_off_static -0x7d4d 036078 add regb ,led_offset_cb_ledoff ,regc -0x7d4e 036079 call push_stack -0x7d4f 036080 ifetch 2 ,regc -0x7d50 036081 call callback_func -0x7d51 036082 call pop_stack -0x7d52 036084 add regb ,led_offset_blink_count ,regc -0x7d53 036085 ifetch 1 ,regc -0x7d54 036086 beq led_infinite_flash_num ,ui_led_blink_infinite -0x7d55 036087 increase -1 ,pdata -0x7d56 036088 istore 1 ,regc -0x7d57 036089 branch ui_led_blink_stop_global ,blank -: 036090 ui_led_blink_infinite: -0x7d58 036091 setarg ui_led_state_blink_lighting -0x7d59 036092 istore 1 ,regb -0x7d5a 036093 add regb ,led_offset_off_time ,regc -0x7d5b 036094 ifetch 2 ,regc -: 036095 ui_led_blink_timer_start: -0x7d5c 036096 add rega ,ui_led_blink ,queue -0x7d5d 036097 branch timer_init -: 036099 ui_led_stop_timer: -0x7d5e 036100 setarg 0 -0x7d5f 036101 branch ui_led_blink_timer_start -: 036107 ui_timer_timeout: -0x7d60 036108 setarg 0x1000 -0x7d61 036109 lshift16 pdata ,pdata -0x7d62 036110 iadd regb ,regb -0x7d63 036111 rtn -: 036113 ui_timer_check: -0x7d64 036114 bpatchx patch3e_4 ,mem_patch3e -0x7d65 036115 arg 0 ,rega -0x7d66 036116 fetcht 4 ,mem_ui_timer_last_btclk -0x7d67 036117 copy clkn_bt ,regb -0x7d68 036118 copy regb ,pdata -0x7d69 036119 isub temp ,null -0x7d6a 036120 ncall ui_timer_timeout ,positive -: 036122 ui_timer_check_loop: -0x7d6b 036123 copy regb ,pdata -0x7d6c 036124 increase 160 ,temp -0x7d6d 036125 increase 160 ,temp -0x7d6e 036126 isub temp ,null -0x7d6f 036127 nbranch ui_timer_check_end ,positive -0x7d70 036128 increase 1 ,rega -0x7d71 036129 and rega ,0x0f ,pdata -0x7d72 036130 nbranch ui_timer_check_loop ,blank -0x7d73 036131 arg 0 ,rega -0x7d74 036132 call ui_timer_check_send_evt -: 036133 ui_timer_init: -0x7d75 036134 copy clkn_bt ,pdata -0x7d76 036135 store 4 ,mem_ui_timer_last_btclk -0x7d77 036136 rtn -: 036137 ui_timer_check_end: -0x7d78 036138 bpatchx patch3e_5 ,mem_patch3e -0x7d79 036139 copy rega ,pdata -0x7d7a 036140 rtn blank -0x7d7b 036141 increase -160 ,temp -0x7d7c 036142 increase -160 ,temp -0x7d7d 036143 set0 28 ,temp -0x7d7e 036144 storet 4 ,mem_ui_timer_last_btclk -: 036145 ui_timer_check_send_evt: -0x7d7f 036146 branch app_evt_timer -: 036153 ui_ipc_get_lock: -0x7d80 036154 jam 1 ,mem_ipc_lock_bt -: 036155 ui_ipc_get_lock_wait: -0x7d81 036156 fetch 1 ,mem_ipc_lock_c51 -0x7d82 036157 nbranch ui_ipc_get_lock_wait ,blank -0x7d83 036158 rtn -: 036160 ui_ipc_put_lock: -0x7d84 036161 jam 0 ,mem_ipc_lock_bt -0x7d85 036162 rtn -: 036166 ui_ipc_send_event: -0x7d86 036167 bpatchx patch3e_6 ,mem_patch3e -0x7d87 036168 call ui_ipc_get_lock -0x7d88 036169 copy rega ,pdata -0x7d89 036170 store 4 ,mem_ipc_rega_temp -0x7d8a 036171 arg mem_ipc_fifo_bt2c51 ,rega -0x7d8b 036172 call fifo_in -0x7d8c 036173 fetch 4 ,mem_ipc_rega_temp -0x7d8d 036174 copy pdata ,rega -0x7d8e 036175 branch ui_ipc_put_lock -: 036177 ui_ipc_send_cmd: -0x7d8f 036178 bpatchx patch3e_7 ,mem_patch3e -0x7d90 036179 call ui_ipc_get_lock -0x7d91 036180 copy rega ,pdata -0x7d92 036181 store 4 ,mem_ipc_rega_temp -0x7d93 036182 arg mem_ipc_fifo_c512bt ,rega -0x7d94 036183 call fifo_in -0x7d95 036184 fetch 4 ,mem_ipc_rega_temp -0x7d96 036185 copy pdata ,rega -0x7d97 036186 branch ui_ipc_put_lock -: 036188 ui_ipc_clean_all_fifo: -0x7d98 036189 setarg 0 -0x7d99 036190 store util_fifo_len ,mem_ipc_fifo_c512bt -0x7d9a 036191 store util_fifo_len ,mem_ipc_fifo_bt2c51 -0x7d9b 036192 rtn -: 036194 check_51cmd: -0x7d9c 036195 bpatchx patch3f_0 ,mem_patch3f -0x7d9d 036196 fetch 1 ,mem_hci_cmd -0x7d9e 036197 nrtn blank -0x7d9f 036198 arg mem_ipc_fifo_c512bt ,rega -0x7da0 036199 call fifo_is_empty -0x7da1 036200 rtn blank -0x7da2 036201 jam ipc_continue_process ,mem_ipc_skip_continue_proc -0x7da3 036202 call check_51cmd_once -0x7da4 036203 fetch 1 ,mem_ipc_skip_continue_proc -0x7da5 036204 branch check_51cmd ,blank -0x7da6 036205 rtn -: 036207 check_51cmd_once: -0x7da7 036208 call ui_ipc_get_lock -0x7da8 036209 arg mem_ipc_fifo_c512bt ,rega -0x7da9 036210 call fifo_out -0x7daa 036211 copy pdata ,temp -0x7dab 036212 call ui_ipc_put_lock -0x7dac 036213 bpatchx patch3f_1 ,mem_patch3f -0x7dad 036214 copy temp ,pdata -0x7dae 036215 rtn blank -0x7daf 036216 beq bt_cmd_start_discovery ,check_51cmd_start_discovery -0x7db0 036217 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery -0x7db1 036218 beq bt_cmd_reconnect ,check_51cmd_reconnect -0x7db2 036219 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating -0x7db3 036220 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating -0x7db4 036221 beq bt_cmd_sniff_test ,check_51cmd_sniff_test -0x7db5 036222 beq bt_cmd_start_inquiry ,check_51cmd_inq -0x7db6 036223 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq -0x7db7 036224 beq bt_cmd_start_adv ,check_51cmd_adv -0x7db8 036225 beq bt_cmd_stop_adv ,check_51cmd_stop_adv -0x7db9 036226 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv -0x7dba 036227 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv -0x7dbb 036228 beq bt_cmd_led_off ,check_51cmd_led_off -0x7dbc 036229 beq bt_cmd_led_on ,check_51cmd_led_on -0x7dbd 036230 beq bt_cmd_led_blink ,check_51cmd_led_start_blink -0x7dbe 036231 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con -0x7dbf 036232 beq bt_cmd_le_start_scan ,check_51cmd_start_scan -0x7dc0 036233 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan -0x7dc1 036234 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate -0x7dc2 036235 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req -0x7dc3 036236 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel -0x7dc4 036238 store 1 ,mem_fifo_temp -0x7dc5 036239 bpatchx patch3f_2 ,mem_patch3f -0x7dc6 036240 call lmo_fifo_check -0x7dc7 036241 nbranch check_51cmd_restore ,blank -: 036242 check_51cmd_once_continue: -0x7dc8 036243 fetch 1 ,mem_fifo_temp -0x7dc9 036244 bmark0 mark_context ,check_51cmd_check_idle -0x7dca 036245 beq bt_cmd_disconnect ,check_51cmd_disconnect -0x7dcb 036246 beq bt_cmd_enter_sniff ,cmd_in_sniff -0x7dcc 036247 beq bt_cmd_exit_sniff ,cmd_exit_sniff -0x7dcd 036248 beq bt_cmd_set_pin_code ,check_51cmd_pincode -0x7dce 036249 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect -0x7dcf 036250 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param -0x7dd0 036251 beq bt_cmd_role_switch ,check_51cmd_role_switch -0x7dd1 036252 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info -0x7dd2 036253 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info -0x7dd3 036254 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept -0x7dd4 036255 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info -0x7dd5 036256 rtn -: 036258 check_51cmd_check_idle: -0x7dd6 036259 store 1 ,mem_fifo_temp -0x7dd7 036260 call context_check_idle -0x7dd8 036261 branch check_51cmd_restore ,zero -0x7dd9 036262 call context_search_plap -0x7dda 036263 nrtn zero -: 036264 check_51cmd_restore: -0x7ddb 036265 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc -0x7ddc 036266 branch ui_ipc_send_cmd -: 036271 check_51cmd_start_discovery: -0x7ddd 036272 fetch 2 ,mem_ui_state_map -0x7dde 036273 set1 ui_state_bt_discovery -0x7ddf 036274 store 2 ,mem_ui_state_map -0x7de0 036275 jam 3 ,mem_scan_mode -0x7de1 036276 rtn -: 036280 check_51cmd_stop_discovery: -0x7de2 036281 jam 0 ,mem_hid_handshake_timer_count -0x7de3 036282 jam 0 ,mem_scan_mode -0x7de4 036283 fetch 2 ,mem_ui_state_map -0x7de5 036284 set0 ui_state_bt_discovery -0x7de6 036285 store 2 ,mem_ui_state_map -0x7de7 036286 rtn -: 036290 check_51cmd_reconnect: -0x7de8 036291 jam hci_cmd_create_conn ,mem_hci_cmd -0x7de9 036292 rtn -: 036296 check_51cmd_disconnect: -0x7dea 036297 jam lmp_detach ,mem_lmo_opcode2 -0x7deb 036298 jam other_end_terminated ,mem_disconn_reason_send -0x7dec 036299 rtn -: 036303 check_51cmd_enter_sniff_subrating: -0x7ded 036304 rtn -: 036308 check_51cmd_exit_sniff_subrating: -0x7dee 036309 rtn -: 036313 check_51cmd_sniff_test: -0x7def 036314 rtn -: 036318 check_51cmd_pincode: -0x7df0 036319 jam pincode_state_pincode_ready ,mem_pincode_state -0x7df1 036320 branch cmd_pair -: 036324 check_51cmd_inq: -0x7df2 036325 rtn -: 036329 check_51cmd_stop_inq: -0x7df3 036330 rtn -: 036334 check_51cmd_adv: -0x7df4 036335 jam on ,mem_le_adv_enable -0x7df5 036336 jam adv_ind ,mem_le_adv_type -0x7df6 036337 fetch 2 ,mem_ui_state_map -0x7df7 036338 set1 ui_state_ble_adv ,pdata -0x7df8 036339 store 2 ,mem_ui_state_map -0x7df9 036340 rtn -: 036344 check_51cmd_stop_adv: -0x7dfa 036345 fetch 2 ,mem_ui_state_map -0x7dfb 036346 set0 ui_state_ble_adv ,pdata -0x7dfc 036347 store 2 ,mem_ui_state_map -0x7dfd 036348 jam off ,mem_le_adv_enable -0x7dfe 036349 rtn -: 036353 check_51cmd_direct_adv: -0x7dff 036354 jam on ,mem_le_adv_enable -0x7e00 036355 jam adv_direct_ind ,mem_le_adv_type -0x7e01 036356 fetch 2 ,mem_ui_state_map -0x7e02 036357 set1 ui_state_ble_adv ,pdata -0x7e03 036358 store 2 ,mem_ui_state_map -0x7e04 036359 rtn -: 036363 check_51cmd_stop_direct_adv: -0x7e05 036364 fetch 2 ,mem_ui_state_map -0x7e06 036365 set0 ui_state_ble_adv ,pdata -0x7e07 036366 store 2 ,mem_ui_state_map -0x7e08 036367 jam off ,mem_le_adv_enable -0x7e09 036368 rtn -: 036372 check_51cmd_le_disconnect: -0x7e0a 036373 setarg 20 -0x7e0b 036374 store 2 ,mem_le_superto -0x7e0c 036375 store 2 ,mem_le_init_superto -0x7e0d 036376 branch le_send_terminate_ind_user_terminated -: 036380 check_51cmd_ble_update_connect_param: -0x7e0e 036381 branch le_l2cap_tx_update_req -: 036385 check_51cmd_led_off: -0x7e0f 036386 arg 0 ,rega -0x7e10 036387 branch ui_led_off_global -: 036391 check_51cmd_led_on: -0x7e11 036392 arg 0 ,rega -0x7e12 036393 branch ui_led_on_global -: 036397 check_51cmd_led_start_blink: -0x7e13 036398 arg 0 ,rega -0x7e14 036399 branch ui_led_blink_start_global -: 036403 check_51cmd_le_start_con: -0x7e15 036404 jam on ,mem_le_scan_enable -0x7e16 036405 jam hci_cmd_le_create_conn ,mem_hci_cmd -0x7e17 036408 rtn -: 036412 check_51cmd_start_scan: -0x7e18 036413 jam on ,mem_le_scan_enable -0x7e19 036414 rtn -: 036418 check_51cmd_stop_scan: -0x7e1a 036419 jam off ,mem_le_scan_enable -0x7e1b 036420 jam 0 ,mem_hci_cmd -0x7e1c 036421 rtn -: 036425 check_51cmd_hibernate: -0x7e1d 036426 fetch 2 ,mem_cb_before_hibernate -0x7e1e 036427 call callback_func -0x7e1f 036428 fetch 1 ,mem_ui_button_gpio -0x7e20 036429 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled -0x7e21 036430 copy pdata ,temp -0x7e22 036431 call gpio_config_input -: 036432 check_51cmd_hibernate_btn_disabled: -0x7e23 036433 call ui_ipc_clean_all_fifo -0x7e24 036434 branch lpm_hibernate -: 036438 check_51cmd_le_smp_sec_req: -0x7e25 036439 branch le_send_smp_security_request -: 036443 check_51cmd_role_switch: -0x7e26 036444 jam lmp_slot_offset ,mem_lmo_opcode2 -0x7e27 036445 set1 mark_switch_initiated ,mark -0x7e28 036446 nrtn master -0x7e29 036447 jam switch_flag_init ,mem_switch_flag -0x7e2a 036448 jam lmp_switch_req ,mem_lmo_opcode2 -0x7e2b 036449 fetch 1 ,mem_connection_options -0x7e2c 036450 set0 connection_switch ,pdata -0x7e2d 036451 store 1 ,mem_connection_options -0x7e2e 036452 rtn -: 036456 check_51cmd_bb_reconn_cancel: -0x7e2f 036457 force page_length_timer ,queue -0x7e30 036458 branch timer_stop -: 036462 check_51cmd_dhkey_not_accept: -0x7e31 036463 call tid_set_reply -0x7e32 036464 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x7e33 036465 branch parse_lmp_dhkey_check_reject -: 036468 ui_check_paring_button: -0x7e34 036469 fetch 1 ,mem_ui_state_map -0x7e35 036470 rtnbit0 ui_state_btn_down -0x7e36 036471 rtnbit0 ui_state_bt_reconnect -0x7e37 036472 branch check_51cmd_bb_reconn_cancel -: 036477 queue_init: -0x7e38 036478 fetch 2 ,mem_queue_ptr -0x7e39 036479 add pdata ,queue_offset_curr_num ,contw -0x7e3a 036480 setarg 0 -0x7e3b 036481 istore 3 ,contw -0x7e3c 036482 rtn -: 036486 queue_push: -0x7e3d 036487 call disable_user -0x7e3e 036488 call queue_full -0x7e3f 036489 rtn blank -0x7e40 036490 fetch 2 ,mem_queue_ptr -0x7e41 036491 add pdata ,queue_offset_curr_num ,regb -0x7e42 036492 ifetcht 1 ,regb -0x7e43 036493 increase 1 ,temp -0x7e44 036494 istoret 1 ,regb -0x7e45 036496 ifetcht 1 ,pdata -0x7e46 036497 copy temp ,loopcnt -0x7e47 036498 add pdata ,queue_offset_write_ptr ,regb -0x7e48 036499 ifetch 1 ,regb -0x7e49 036500 imul32 temp ,pdata -0x7e4a 036501 iadd contr ,contw -0x7e4b 036502 copy rega ,contr -: 036503 calc_queue_next_ptr: -0x7e4c 036504 call memcpy -0x7e4d 036505 call queue_get_size -0x7e4e 036506 pincrease -1 -0x7e4f 036507 ifetcht 1 ,regb -0x7e50 036508 increase 1 ,temp -0x7e51 036509 iand temp ,temp -0x7e52 036510 istoret 1 ,regb -0x7e53 036511 branch enable_user -: 036516 queue_pop: -0x7e54 036517 call disable_user -0x7e55 036518 call queue_empty -0x7e56 036519 rtn blank -0x7e57 036520 fetch 2 ,mem_queue_ptr -0x7e58 036521 add pdata ,queue_offset_curr_num ,regb -0x7e59 036522 ifetcht 1 ,regb -0x7e5a 036523 increase -1 ,temp -0x7e5b 036524 istoret 1 ,regb -0x7e5c 036525 ifetcht 1 ,pdata -0x7e5d 036526 copy temp ,loopcnt -0x7e5e 036527 add pdata ,queue_offset_read_ptr ,regb -0x7e5f 036528 ifetch 1 ,regb -0x7e60 036529 imul32 temp ,pdata -0x7e61 036530 iadd contr ,contr -0x7e62 036531 increase 1 ,contr -0x7e63 036532 copy rega ,contw -0x7e64 036533 branch calc_queue_next_ptr -: 036537 queue_empty: -0x7e65 036538 fetch 2 ,mem_queue_ptr -0x7e66 036539 add pdata ,queue_offset_curr_num ,contr -0x7e67 036540 ifetch 1 ,contr -0x7e68 036541 rtn -: 036544 queue_full: -0x7e69 036545 call queue_get_size -0x7e6a 036546 ifetcht 1 ,contr -0x7e6b 036547 isub temp ,pdata -0x7e6c 036548 rtn -: 036551 queue_get_size: -0x7e6d 036552 fetch 2 ,mem_queue_ptr -0x7e6e 036553 add pdata ,queue_offset_length ,contr -0x7e6f 036554 ifetch 1 ,contr -0x7e70 036555 rtn -: 036563 right_shift_n: -0x7e71 036564 sub loopcnt ,0 ,null -0x7e72 036565 rtn zero -: 036566 right_shift_n_loop: -0x7e73 036567 rshift pdata ,pdata -0x7e74 036568 loop right_shift_n_loop -0x7e75 036569 rtn -: 036572 left_shift_n: -0x7e76 036573 force 1 ,pdata -0x7e77 036574 sub loopcnt ,0 ,null -0x7e78 036575 rtn zero -: 036576 left_shift_n_loop: -0x7e79 036577 lshift pdata ,pdata -0x7e7a 036578 loop left_shift_n_loop -0x7e7b 036579 rtn -: 036580 push_stack: -0x7e7c 036581 deposit contw -0x7e7d 036582 store 2 ,mem_contw -0x7e7e 036583 storet 8 ,mem_temp -0x7e7f 036584 deposit timeup -0x7e80 036585 store 4 ,mem_timeup -0x7e81 036586 call push_stack_rega_b_c -0x7e82 036587 deposit contr -0x7e83 036588 store 2 ,mem_contr -0x7e84 036589 rtn -: 036591 push_stack_rega_b_c: -0x7e85 036592 deposit rega -0x7e86 036593 store 4 ,mem_rega -0x7e87 036594 deposit regb -0x7e88 036595 store 4 ,mem_regb -0x7e89 036596 deposit regc -0x7e8a 036597 store 3 ,mem_regc -0x7e8b 036598 rtn -: 036600 pop_stack: -0x7e8c 036601 fetcht 8 ,mem_temp -0x7e8d 036602 fetch 4 ,mem_timeup -0x7e8e 036603 iforce timeup -0x7e8f 036604 call pop_stack_rega_b_c -0x7e90 036605 fetch 2 ,mem_contw -0x7e91 036606 iforce contw -0x7e92 036607 fetch 2 ,mem_contr -0x7e93 036608 iforce contr -0x7e94 036609 rtn -: 036611 pop_stack_rega_b_c: -0x7e95 036612 fetch 4 ,mem_rega -0x7e96 036613 iforce rega -0x7e97 036614 fetch 4 ,mem_regb -0x7e98 036615 iforce regb -0x7e99 036616 fetch 3 ,mem_regc -0x7e9a 036617 iforce regc -0x7e9b 036618 rtn -: 036620 get_contw: -0x7e9c 036621 fetch 2 ,mem_contw -0x7e9d 036622 copy pdata ,contw -0x7e9e 036623 rtn -: 036624 get_contr: -0x7e9f 036625 fetch 2 ,mem_contr -0x7ea0 036626 copy pdata ,contr -0x7ea1 036627 rtn -: 036628 store_contw: -0x7ea2 036629 copy contw ,pdata -0x7ea3 036630 store 2 ,mem_contw -0x7ea4 036631 rtn -: 036632 store_contr: -0x7ea5 036633 copy contr ,pdata -0x7ea6 036634 store 2 ,mem_contr -0x7ea7 036635 rtn -: 036639 save_cont_pointers: -0x7ea8 036640 copy contw ,pdata -0x7ea9 036641 store 2 ,mem_hold_contw -0x7eaa 036642 copy contr ,pdata -0x7eab 036643 store 2 ,mem_hold_contr -0x7eac 036644 rtn -: 036645 load_cont_pointers: -0x7ead 036646 fetch 2 ,mem_hold_contw -0x7eae 036647 copy pdata ,contw -0x7eaf 036648 fetch 2 ,mem_hold_contr -0x7eb0 036649 copy pdata ,contr -0x7eb1 036650 rtn -: 036652 memcpy96: -0x7eb2 036653 call memcpy32 -: 036654 memcpy64: -0x7eb3 036655 call memcpy32 -0x7eb4 036656 branch memcpy32 -: 036657 memcpy12: -0x7eb5 036658 call memcpy8 -: 036659 memcpy4: -0x7eb6 036660 ifetch 4 ,contr -0x7eb7 036661 istore 4 ,contw -0x7eb8 036662 rtn -: 036663 memcpy8: -0x7eb9 036664 ifetch 8 ,contr -0x7eba 036665 istore 8 ,contw -0x7ebb 036666 rtn -: 036668 memcpy48: -0x7ebc 036669 call memcpy16 -: 036670 memcpy32: -0x7ebd 036671 call memcpy8 -: 036672 memcpy24: -0x7ebe 036673 call memcpy8 -: 036674 memcpy16: -0x7ebf 036675 call memcpy8 -0x7ec0 036676 branch memcpy8 -: 036680 delay_10ms: -0x7ec1 036681 arg 10 ,loopcnt -: 036682 delay_ms_wait: -0x7ec2 036683 nop 12000 -0x7ec3 036684 loop delay_ms_wait -0x7ec4 036685 rtn -: 036687 bn_zero: -0x7ec5 036688 force 3 ,loopcnt -: 036689 memset0: -0x7ec6 036690 force 0 ,pdata -: 036691 memset8: -0x7ec7 036692 istore 8 ,contw -0x7ec8 036693 loop memset8 -0x7ec9 036694 rtn -: 036696 memset0_8: -0x7eca 036697 force 0 ,pdata -0x7ecb 036698 istore 8 ,contw -0x7ecc 036699 rtn -: 036700 memset0_4: -0x7ecd 036701 force 0 ,pdata -0x7ece 036702 istore 4 ,contw -0x7ecf 036703 rtn -: 036705 clear_mem_256: -0x7ed0 036706 force 4 ,loopcnt -0x7ed1 036707 branch memset0 -: 036708 clear_mem_512: -0x7ed2 036709 force 8 ,loopcnt -0x7ed3 036710 branch memset0 -: 036712 clear_mem: -0x7ed4 036713 deposit loopcnt -0x7ed5 036714 rtn blank -0x7ed6 036715 setarg 0 -: 036716 clear_mem_loop: -0x7ed7 036717 istore 1 ,contw -0x7ed8 036718 loop clear_mem_loop -0x7ed9 036719 rtn -: 036722 clear_temp_block: -0x7eda 036723 arg 32 ,loopcnt -0x7edb 036724 arg mem_temp_block0 ,contw -0x7edc 036725 branch clear_mem -: 036727 xor_loop: -0x7edd 036728 ifetch 4 ,regc -0x7ede 036729 ifetcht 4 ,rega -0x7edf 036730 ixor temp ,pdata -0x7ee0 036731 istore 4 ,contw -0x7ee1 036732 increase 4 ,rega -0x7ee2 036733 increase 4 ,regc -0x7ee3 036734 loop xor_loop -0x7ee4 036735 rtn -: 036739 inverse_data: -0x7ee5 036740 bpatchx patch3f_3 ,mem_patch3f -0x7ee6 036741 copy loopcnt ,pdata -0x7ee7 036742 sub pdata ,1 ,null -0x7ee8 036743 rtn positive -0x7ee9 036744 iadd rega ,regb -0x7eea 036745 increase -1 ,regb -0x7eeb 036746 rshift loopcnt ,loopcnt -: 036747 inverse_loop: -0x7eec 036748 ifetcht 1 ,rega -0x7eed 036749 ifetch 1 ,regb -0x7eee 036750 istore 1 ,rega -0x7eef 036751 istoret 1 ,regb -0x7ef0 036752 increase -1 ,regb -0x7ef1 036753 increase 1 ,rega -0x7ef2 036754 loop inverse_loop -0x7ef3 036755 rtn -: 036758 memcpy_fast: -0x7ef4 036759 deposit loopcnt -0x7ef5 036760 rtn blank -: 036761 memcpy_fast_loop: -0x7ef6 036762 increase -8 ,loopcnt -0x7ef7 036763 call memcpy8 ,positive -0x7ef8 036764 rtn zero -0x7ef9 036765 branch memcpy_fast_loop ,positive -0x7efa 036766 increase 8 ,loopcnt -: 036767 memcpy_fast_loop_four: -0x7efb 036768 increase -4 ,loopcnt -0x7efc 036769 call memcpy4 ,positive -0x7efd 036770 rtn zero -0x7efe 036771 branch memcpy_fast_loop_four ,positive -0x7eff 036772 increase 4 ,loopcnt -0x7f00 036773 branch memcpy -: 036775 memcpy: -0x7f01 036776 deposit loopcnt -0x7f02 036777 rtn blank -: 036778 memcpy_loop: -0x7f03 036779 ifetch 1 ,contr -0x7f04 036780 istore 1 ,contw -0x7f05 036781 loop memcpy_loop -0x7f06 036782 rtn -: 036784 timer_stop: -0x7f07 036785 setarg 0 -: 036786 timer_init: -0x7f08 036787 rshift clkn_bt ,temp -0x7f09 036788 storet 4 ,mem_last_clkn -0x7f0a 036789 arg mem_timers ,contw -0x7f0b 036790 iforce temp -0x7f0c 036791 lshift queue ,pdata -0x7f0d 036792 iadd contw ,contw -0x7f0e 036793 istoret 2 ,contw -0x7f0f 036794 bpatchx patch3f_4 ,mem_patch3f -0x7f10 036795 rtn -: 036797 timer_check_timeout: -0x7f11 036798 arg 0x800 ,timeup -0x7f12 036799 lshift16 timeup ,timeup -0x7f13 036800 iadd timeup ,pdata -0x7f14 036801 rtn -: 036804 timer_reinit: -0x7f15 036805 arg 0 ,queue -: 036806 timer_check: -0x7f16 036807 bpatchx patch3f_5 ,mem_patch3f -0x7f17 036808 fetcht 4 ,mem_last_clkn -0x7f18 036809 rshift clkn_bt ,pdata -0x7f19 036810 store 4 ,mem_last_clkn -0x7f1a 036811 isub temp ,null -0x7f1b 036812 ncall timer_check_timeout ,positive -0x7f1c 036813 isub temp ,timeup -0x7f1d 036814 copy timeup ,temp -0x7f1e 036815 arg mem_timers ,contr -0x7f1f 036816 copy contr ,contw -0x7f20 036817 arg 16 ,loopcnt -: 036818 timer_loop: -0x7f21 036819 ifetch 2 ,contr -0x7f22 036820 isub temp ,pdata -0x7f23 036821 branch timer_counting ,positive -0x7f24 036822 force 0 ,pdata -: 036823 timer_counting: -0x7f25 036824 istore 2 ,contw -0x7f26 036825 loop timer_loop -0x7f27 036826 arg mem_timers ,contr -0x7f28 036827 lshift queue ,pdata -0x7f29 036828 iadd contr ,contr -0x7f2a 036829 ifetch 2 ,contr -0x7f2b 036830 rtn -: 036835 clk_add: -0x7f2c 036836 iadd temp ,temp -0x7f2d 036837 copy temp ,loopcnt -0x7f2e 036838 setarg 3750 -0x7f2f 036839 isub loopcnt ,pdata -0x7f30 036840 rtn positive -0x7f31 036841 sub pdata ,0 ,pdata -0x7f32 036842 rshift16 temp ,temp -0x7f33 036843 increase 1 ,temp -0x7f34 036844 lshift16 temp ,temp -0x7f35 036845 ior temp ,temp -0x7f36 036846 rtn -: 036848 clk_diff_rt: -0x7f37 036849 call clk_diff -0x7f38 036850 branch clk2rt -: 036853 clk_diff: -0x7f39 036854 disable user -0x7f3a 036855 isub temp ,pdata -0x7f3b 036856 branch clk_diff_pos ,positive -0x7f3c 036857 enable user -0x7f3d 036858 sub pdata ,0 ,pdata -: 036859 clk_diff_pos: -0x7f3e 036860 rtnbit0 15 -0x7f3f 036861 arg -61786 ,temp -0x7f40 036862 iadd temp ,pdata -0x7f41 036863 set0 64 ,pdata -0x7f42 036864 rtn -: 036866 clk2rt: -0x7f43 036867 iforce contr -0x7f44 036868 rshift16 pdata ,pdata -0x7f45 036869 arg 3750 ,temp -0x7f46 036870 imul32 temp ,pdata -0x7f47 036871 iadd contr ,pdata -0x7f48 036872 rtn -: 036875 clk2lpo: -0x7f49 036876 lshift8 pdata ,pdata -0x7f4a 036877 lshift4 pdata ,pdata -0x7f4b 036878 fetcht 3 ,mem_clks_per_lpo -0x7f4c 036879 idiv temp -0x7f4d 036880 call wait_div_end -0x7f4e 036881 quotient temp -0x7f4f 036882 rtn -: 036885 clk2bt: -0x7f50 036886 arg 3750 ,temp -0x7f51 036887 idiv temp -0x7f52 036888 call wait_div_end -0x7f53 036889 quotient pdata -0x7f54 036890 lshift16 pdata ,pdata -: 036891 clk2bt_next: -0x7f55 036892 remainder temp -0x7f56 036893 ior temp ,temp -0x7f57 036894 rtn -: 036901 string2dec_from_uart: -0x7f58 036902 arg 0 ,temp -: 036903 string2dec_from_uart_done: -0x7f59 036904 copy temp ,regc -0x7f5a 036905 ifetch 1 ,contru -0x7f5b 036906 call uchar2dialog -0x7f5c 036907 copy regc ,temp -0x7f5d 036908 call swap -0x7f5e 036909 arg 10 ,regb -0x7f5f 036910 imul32 regb ,pdata -0x7f60 036911 iadd temp ,pdata -0x7f61 036912 copy pdata ,temp -0x7f62 036913 loop string2dec_from_uart_done -0x7f63 036914 rtn -: 036918 uchar2dialog: -0x7f64 036919 arg 0x3a ,temp -0x7f65 036920 isub temp ,null -0x7f66 036921 nbranch uchar2dialog_number ,positive -0x7f67 036922 arg 0x61 ,temp -0x7f68 036923 isub temp ,null -0x7f69 036924 branch uchar2dialog_a2f ,positive -0x7f6a 036925 arg 0x37 ,temp -0x7f6b 036926 isub temp ,pdata -0x7f6c 036927 rtn -: 036928 uchar2dialog_number: -0x7f6d 036929 arg 0x30 ,temp -0x7f6e 036930 isub temp ,pdata -0x7f6f 036931 rtn -: 036932 uchar2dialog_a2f: -0x7f70 036933 arg 0x57 ,temp -0x7f71 036934 isub temp ,pdata -0x7f72 036935 rtn -: 036937 pn9: -0x7f73 036938 copy temp ,alarm -0x7f74 036939 setarg 0x1ff -0x7f75 036940 force 0 ,regb -: 036941 pn9_loop: -0x7f76 036942 rshift3 pdata ,rega -0x7f77 036943 rshift rega ,rega -0x7f78 036944 ixor rega ,rega -0x7f79 036945 isolate1 0 ,rega -0x7f7a 036946 setflag true ,9 ,pdata -0x7f7b 036947 rshift temp ,temp -0x7f7c 036948 isolate1 0 ,pdata -0x7f7d 036949 setflag true ,7 ,temp -0x7f7e 036950 rshift pdata ,pdata -0x7f7f 036951 increase 1 ,regb -0x7f80 036952 compare 0 ,regb ,0x7 -0x7f81 036953 nbranch pn9_loop ,true -0x7f82 036954 istoret 1 ,contw -0x7f83 036955 loop pn9_loop -0x7f84 036956 copy alarm ,temp -0x7f85 036957 rtn -: 036960 wait_div_end: -0x7f86 036961 rtn modone -0x7f87 036962 branch wait_div_end -: 036972 compare_loop: -: 036973 string_compare: -0x7f88 036974 ifetch 1 ,rega -0x7f89 036975 ifetcht 1 ,regb -0x7f8a 036976 isub temp ,null -0x7f8b 036977 nrtn zero -0x7f8c 036978 increase 1 ,rega -0x7f8d 036979 increase 1 ,regb -0x7f8e 036980 loop string_compare -0x7f8f 036981 force 0 ,null -0x7f90 036982 rtn -: 036985 ceiling: -0x7f91 036986 isub temp ,null -0x7f92 036987 nrtn positive -0x7f93 036988 deposit temp -0x7f94 036989 rtn -: 036991 swap: -0x7f95 036992 iadd temp ,pdata -0x7f96 036993 isub temp ,temp -0x7f97 036994 isub temp ,pdata -0x7f98 036995 rtn -: 036997 clean_mem: -0x7f99 036998 arg 0x200 ,loopcnt -0x7f9a 036999 arg 0x4000 ,contw -0x7f9b 037000 branch memset0 -: 037003 callback_func: -0x7f9c 037004 rtn blank -0x7f9d 037005 copy pdata ,pc -: 037008 wait_uarttx: -0x7f9e 037009 hfetch 2 ,core_uart_txitems -0x7f9f 037010 nbranch wait_uarttx ,blank -0x7fa0 037011 rtn -: 037013 ice_break: -0x7fa1 037014 jam 0x1 ,core_ice_ctrl -0x7fa2 037015 rtn -: 037017 ice_setbp: -0x7fa3 037018 hstore 2 ,core_ice_break0 -0x7fa4 037019 hfetch 1 ,core_ice_ctrl -0x7fa5 037020 set1 4 ,pdata -0x7fa6 037021 hstore 1 ,core_ice_ctrl -0x7fa7 037022 rtn -: 037023 ice_setbp2: -0x7fa8 037024 hstore 2 ,core_ice_break1 -0x7fa9 037025 hfetch 1 ,core_ice_ctrl -0x7faa 037026 set1 6 ,pdata -0x7fab 037027 hstore 1 ,core_ice_ctrl -0x7fac 037028 rtn -: 037030 ice_set_write_bp: -0x7fad 037031 hstore 2 ,core_ice_break0 -0x7fae 037032 jam 0x30 ,core_ice_ctrl -0x7faf 037033 rtn -: 037037 test_enable_white: -0x7fb0 037038 hfetch 1 ,core_config -0x7fb1 037039 set0 whiteoff_bit ,pdata -0x7fb2 037040 hstore 1 ,core_config -0x7fb3 037041 rtn -: 037043 check_uart_tx_buff: -0x7fb4 037044 hfetch 2 ,core_uart_txitems -0x7fb5 037045 arg uart_air_control_threshold ,temp -: 037046 pdata_sub_temp: -0x7fb6 037047 isub temp ,null -0x7fb7 037048 rtn -: 037054 fifo_in: -0x7fb8 037055 bpatchx patch3f_6 ,mem_patch3f -0x7fb9 037056 ifetcht util_fifo_len ,rega -0x7fba 037057 and temp ,0xff ,pdata -0x7fbb 037058 nbranch fifo_in_push ,blank -0x7fbc 037059 rshift8 temp ,pdata -0x7fbd 037060 istore util_fifo_len ,rega -: 037061 fifo_in_push: -0x7fbe 037062 increase util_fifo_len + util_fifo_offset ,rega -0x7fbf 037063 ifetch 1 ,rega -0x7fc0 037064 nbranch assert ,blank -0x7fc1 037065 fetch 1 ,mem_fifo_temp -0x7fc2 037066 istore 1 ,rega -0x7fc3 037067 rtn -: 037072 fifo_out: -0x7fc4 037073 bpatchx patch3f_7 ,mem_patch3f -0x7fc5 037074 arg util_fifo_len ,loopcnt -0x7fc6 037075 ifetch util_fifo_len ,rega -0x7fc7 037076 rtn blank -: 037077 fifo_out_loop: -0x7fc8 037078 ifetch 1 ,rega -0x7fc9 037079 nbranch fifo_out_end ,blank -0x7fca 037080 increase 1 ,rega -0x7fcb 037081 loop fifo_out_loop -0x7fcc 037082 branch assert -: 037083 fifo_out_end: -0x7fcd 037084 arg 0 ,temp -0x7fce 037085 istoret 1 ,rega -0x7fcf 037086 rtn -: 037091 fifo_is_empty: -0x7fd0 037092 ifetch util_fifo_len ,rega -0x7fd1 037093 rtn -: 037098 fifo_is_full: -0x7fd2 037099 ifetch 1 ,rega -0x7fd3 037100 rtn -: 037103 fifo_is_near_full: -0x7fd4 037104 ifetch 2 ,rega -0x7fd5 037105 rtn -: 037109 fifo_content_count: -0x7fd6 037110 arg 0 ,temp -: 037111 fifo_content_count_loop: -0x7fd7 037112 fetch 1 ,contr -0x7fd8 037113 loop fifo_content_count_loop ,blank -0x7fd9 037114 increase 1 ,temp -0x7fda 037115 loop fifo_content_count_loop -0x7fdb 037116 copy temp ,pdata -0x7fdc 037117 rtn -: 037119 not_greater_than: -0x7fdd 037120 isub temp ,null -0x7fde 037121 nrtn positive -0x7fdf 037122 copy temp ,pdata -0x7fe0 037123 rtn -: 037126 disable_positive: -0x7fe1 037127 force -1 ,null -0x7fe2 037128 rtn -: 037129 enable_positive: -: 037130 disable_zero: -0x7fe3 037131 force 1 ,null -0x7fe4 037132 rtn -: 037133 enable_zero: -0x7fe5 037134 force 0 ,null -0x7fe6 037135 rtn -: 037137 enable_user: -0x7fe7 037138 enable user -0x7fe8 037139 rtn -: 037141 disable_user: -0x7fe9 037142 disable user -0x7fea 037143 rtn -: 037145 enable_user2: -0x7feb 037146 enable user2 -0x7fec 037147 rtn -: 037149 disable_user2: -0x7fed 037150 disable user2 -0x7fee 037151 rtn -: 037153 disable_blank: -0x7fef 037154 setarg 1 -0x7ff0 037155 rtn -: 037157 enable_blank: -0x7ff1 037158 setarg 0 -0x7ff2 037159 rtn -: 037162 reverse_byte: -0x7ff3 037163 copy loopcnt ,pdata -0x7ff4 037164 rtn blank -0x7ff5 037165 copy contr ,pdata -0x7ff6 037166 iadd loopcnt ,pdata -0x7ff7 037167 increase -1 ,pdata -0x7ff8 037168 copy pdata ,contr -: 037169 reverse_loop: -0x7ff9 037170 ifetch 1 ,contr -0x7ffa 037171 increase -2 ,contr -0x7ffb 037172 istore 1 ,contw -0x7ffc 037173 loop reverse_loop -0x7ffd 037174 rtn +: 003254 start: +0x2000 003255 call lpmstate +: 003257 soft_reset: +0x2001 003258 bpatch patch00_0 ,mem_patch00 +0x2002 003259 clear_stack +0x2003 003260 call spi_ncs_gpio_init +0x2004 003261 call initialize_radio +0x2005 003262 call iicd_init_12m +0x2006 003263 call init_param +0x2007 003264 call l2cap_init +0x2008 003265 bpatch patch00_1 ,mem_patch00 +0x2009 003266 call rfcomm_init +0x200a 003267 call init_lmp +0x200b 003268 call ui_init +0x200c 003269 call app_init +0x200d 003270 ncall load_chip_option ,wake +0x200e 003271 bpatch patch00_2 ,mem_patch00 +0x200f 003272 call app_lpm_init ,wake +0x2010 003273 call publickey_init +0x2011 003274 call lpm_recover_clk ,wake +: 003275 main_loop: +0x2012 003276 bpatch patch00_3 ,mem_patch00 +0x2013 003277 call sp_calc_sequence +0x2014 003278 call sp_calc_sequence_256 +0x2015 003279 call sp_calc_sequence_256_check +0x2016 003280 call le_dispatch +0x2017 003281 bpatch patch00_4 ,mem_patch00 +0x2018 003282 call idle_dispatch +0x2019 003283 call app_process_idle +0x201a 003284 call inquiry_dispatch +0x201b 003285 call inquiry_scan_dispatch +0x201c 003286 call page_scan_dispatch +0x201d 003287 call connection_dispatch +0x201e 003288 call lpm_dispatch +0x201f 003289 call g24_dispatch +0x2020 003290 branch main_loop +: 003292 connection_dispatch: +0x2021 003293 call connection_incontext +0x2022 003294 rtnmark0 mark_context +0x2023 003295 set0 mark_context ,mark +0x2024 003296 call context_save +0x2025 003297 branch le_disable +: 003299 connection_incontext: +0x2026 003300 bpatch patch00_5 ,mem_patch00 +0x2027 003301 call context_search_insniff +0x2028 003302 nbranch connection_nosniff ,zero +0x2029 003303 call context_load +0x202a 003304 add rega ,coffset_mode ,contr +0x202b 003305 ifetch 1 ,contr +0x202c 003306 bbit1 mode_le ,le_conn_dispatch +0x202d 003307 bbit1 mode_master ,master_dispatch +0x202e 003308 branch slave_dispatch +: 003309 connection_nosniff: +0x202f 003310 call context_get_next +0x2030 003311 copy loopcnt ,null +0x2031 003312 rtn zero +0x2032 003313 call context_load +0x2033 003314 fetch 1 ,mem_state +0x2034 003315 bbit1 state_inpage ,master_page +0x2035 003316 fetch 1 ,mem_mode +0x2036 003317 bbit1 mode_master ,master_dispatch +0x2037 003318 branch slave_dispatch +: 003326 idle_dispatch: +0x2038 003327 fetch 1 ,mem_hci_cmd +0x2039 003328 rtn blank +0x203a 003329 beq hci_cmd_inquiry ,idle_inquiry +0x203b 003330 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +0x203c 003331 beq hci_cmd_remote_name_req ,idle_remote_name_req +0x203d 003332 beq hci_cmd_create_conn ,idle_create_conn +0x203e 003333 beq hci_cmd_le_create_conn ,idle_le_create_conn +0x203f 003334 call context_search_conn_handle +0x2040 003335 rtn zero +0x2041 003336 call context_search_plap +0x2042 003337 rtn zero +: 003338 idle_exit: +0x2043 003339 jam 0 ,mem_hci_cmd +0x2044 003340 rtn +: 003342 idle_le_create_conn: +0x2045 003343 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +0x2046 003344 jam 0 ,mem_hci_cmd +0x2047 003345 rtn +: 003347 idle_inquiry: +0x2048 003348 set1 mark_inquiry_on ,mark +0x2049 003349 set0 mark_inquiry_trainb ,mark +0x204a 003350 jam param_ninquiry ,mem_ninqy_index +0x204b 003351 jam 31 ,mem_nfreq_index_inq +0x204c 003352 branch idle_exit +: 003354 idle_inquiry_cancel: +0x204d 003355 set0 mark_inquiry_on ,mark +0x204e 003356 force 0 ,stop_watch +0x204f 003357 branch idle_exit +: 003359 idle_remote_name_req: +0x2050 003360 call context_search_plap +0x2051 003361 rtn zero +0x2052 003362 force lmp_name_req ,temp +0x2053 003363 jam 5 ,mem_nameres_cnt +0x2054 003364 branch idle_start_page +: 003366 idle_create_conn: +0x2055 003367 bpatch patch00_6 ,mem_patch00 +: 003368 idle_create_conn_device: +0x2056 003369 fetch 6 ,mem_hci_plap +0x2057 003370 branch idle_exit ,blank +0x2058 003371 jam reconnect_hid ,memui_reconnect_mode +0x2059 003373 jam conn_sm_wait_features_res ,mem_conn_sm +0x205a 003374 branch idle_create_conn_cont +: 003376 idle_create_conn_cont: +0x205b 003377 force lmp_version_req ,temp +: 003378 idle_start_page: +0x205c 003379 bpatch patch00_7 ,mem_patch00 +0x205d 003380 fetch 1 ,mem_page_mode +0x205e 003381 branch idle_page_mode_r0 ,blank +0x205f 003382 lshift3 pdata ,pdata +0x2060 003383 lshift4 pdata ,pdata +0x2061 003384 increase -1 ,pdata +: 003385 idle_page_mode_r0: +0x2062 003386 store 1 ,mem_npage +0x2063 003387 store 1 ,mem_npage_index +0x2064 003388 jam 31 ,mem_nfreq_index_page +0x2065 003389 set0 mark_page_trainb ,mark +0x2066 003390 call context_new +0x2067 003391 nbranch idle_page_fail ,zero +0x2068 003392 call get_free_amaddr +0x2069 003393 store 1 ,mem_amaddr +0x206a 003394 storet 1 ,mem_lmo_opcode2 +0x206b 003395 fetch 6 ,mem_hci_plap +0x206c 003396 store 6 ,mem_plap +0x206d 003397 bpatch patch01_0 ,mem_patch01 +0x206e 003398 call timer_reinit +0x206f 003399 force 0 ,pdata +0x2070 003400 compare lmp_name_req ,temp ,0xff +0x2071 003401 nsetflag true ,state_init_seq ,pdata +0x2072 003402 set1 state_inpage ,pdata +0x2073 003403 store 1 ,mem_state +0x2074 003404 jam bt_evt_reconn_started ,mem_fifo_temp +0x2075 003405 call ui_ipc_send_event +0x2076 003406 force 0 ,pdata +0x2077 003407 setflag true ,smap_name_req ,pdata +0x2078 003408 store 1 ,mem_state_map +0x2079 003409 setarg 0 +0x207a 003410 set1 mode_master ,pdata +0x207b 003411 store 1 ,mem_mode +0x207c 003412 enable master +0x207d 003413 call context_save +0x207e 003414 disable master +0x207f 003415 force page_length_timer ,queue +0x2080 003416 fetch 2 ,mem_page_to +0x2081 003417 call timer_init +0x2082 003418 branch idle_exit +: 003419 idle_page_fail: +0x2083 003420 bpatch patch01_1 ,mem_patch01 +0x2084 003421 fetch 6 ,mem_hci_plap +0x2085 003422 store 6 ,mem_plap +0x2086 003423 compare lmp_name_req ,temp ,0xff +0x2087 003424 branch idle_name_fail ,true +0x2088 003425 branch idle_exit +: 003426 idle_name_fail: +0x2089 003427 arg mem_tmp_buffer ,contw +0x208a 003428 arg 8 ,loopcnt +0x208b 003429 call memset0 +0x208c 003430 jam bt_evt_reconn_failed ,mem_fifo_temp +0x208d 003431 call ui_ipc_send_event +0x208e 003432 branch idle_exit +: 003439 inquiry_dispatch: +0x208f 003440 rtnmark0 mark_inquiry_on +0x2090 003441 force inquiry_length_timer ,queue +0x2091 003442 call timer_check +0x2092 003443 nsetflag blank ,mark_inquiry_on ,mark +0x2093 003444 nbranch inquiry_start ,blank +0x2094 003445 rtn +: 003449 inquiry_start: +0x2095 003450 bpatch patch01_2 ,mem_patch01 +0x2096 003451 fetcht 2 ,mem_inq_window +0x2097 003452 force 4 ,queue +0x2098 003453 call sniff_check_window +0x2099 003454 rtn user +0x209a 003455 call afh_clear +0x209b 003456 force 0 ,freq_mode +: 003457 inquiry_restart: +0x209c 003458 rtn timeout +0x209d 003459 set0 mark_fhs_already_good ,mark +0x209e 003460 set0 mark_fhs_eir ,mark +: 003461 inquiry_rx_restart: +0x209f 003462 add clkn_bt ,1 ,bt_clk +0x20a0 003463 isolate1 mark_inquiry_trainb ,mark +0x20a1 003464 setflag true ,2 ,freq_mode +0x20a2 003465 compare 0x00 ,bt_clk ,0x02 +0x20a3 003466 nbranch inquiry_receive ,true +: 003468 inquiry_transmit: +0x20a4 003469 bpatch patch01_3 ,mem_patch01 +0x20a5 003470 fetch 1 ,mem_inquiry_transmit +0x20a6 003471 increase 1 ,pdata +0x20a7 003472 store 1 ,mem_inquiry_transmit +0x20a8 003473 call fetch_giac +0x20a9 003474 call tx_radio_freq +0x20aa 003475 call fetch_diac +0x20ab 003476 call start_transmitter +0x20ac 003477 call start_tx_native +0x20ad 003478 call send_access_word +0x20ae 003479 call end_of_packet +0x20af 003480 call inquiry_check_train +0x20b0 003481 branch inquiry_restart +: 003483 inquiry_check_train: +0x20b1 003484 bpatch patch01_4 ,mem_patch01 +0x20b2 003485 fetch 1 ,mem_nfreq_index_inq +0x20b3 003486 increase -1 ,pdata +0x20b4 003487 store 1 ,mem_nfreq_index_inq +0x20b5 003488 rtn positive +0x20b6 003489 jam 31 ,mem_nfreq_index_inq +0x20b7 003490 fetch 1 ,mem_ninqy_index +0x20b8 003491 increase -1 ,pdata +0x20b9 003492 store 1 ,mem_ninqy_index +0x20ba 003493 rtn positive +0x20bb 003494 setflip mark_inquiry_trainb ,mark +0x20bc 003495 jam param_ninquiry ,mem_ninqy_index +0x20bd 003496 rtn +: 003498 inquiry_receive: +0x20be 003499 bpatch patch01_5 ,mem_patch01 +0x20bf 003500 call fetch_giac +0x20c0 003501 call rx_radio_freq +0x20c1 003502 call fetch_diac +0x20c2 003503 call start_rx_native +0x20c3 003504 call start_receiver +0x20c4 003505 call wait_access_clkn_rt +0x20c5 003506 branch inquiry_sync ,sync +0x20c6 003507 call inquiry_check_train +0x20c7 003508 branch inquiry_rx_restart +: 003509 inquiry_sync: +0x20c8 003510 bpatch patch01_6 ,mem_patch01 +0x20c9 003511 call save_rssi +0x20ca 003512 call scan_mode_whiten +0x20cb 003513 call receive_packet_whitened +0x20cc 003514 set0 mark_rxbuf_inuse ,mark +0x20cd 003515 rtnmark0 mark_fhs_already_good +: 003516 inquiry_receive_rtn: +0x20ce 003517 bpatch patch01_7 ,mem_patch01 +: 003518 inquiry_receive_eir_rtn: +0x20cf 003519 fetch 1 ,mem_inquiry_rcv +0x20d0 003520 increase 1 ,pdata +0x20d1 003521 store 1 ,mem_inquiry_rcv +0x20d2 003522 rtn +: 003530 master_page: +0x20d3 003531 bpatch patch02_0 ,mem_patch02 +0x20d4 003532 enable master +0x20d5 003533 enable clknt +0x20d6 003534 fetch 2 ,mem_page_interval +0x20d7 003535 branch master_page_no_interval ,blank +0x20d8 003536 force page_interval_timer ,queue +0x20d9 003537 call timer_check +0x20da 003538 nrtn blank +: 003539 master_page_no_interval: +0x20db 003540 bpatch patch02_1 ,mem_patch02 +0x20dc 003541 fetcht 2 ,mem_page_window +0x20dd 003542 force 40 ,queue +0x20de 003543 call sniff_check_window +0x20df 003544 branch page_exit ,user +0x20e0 003545 force page_length_timer ,queue +0x20e1 003546 call timer_check +0x20e2 003547 nbranch page_start ,blank +0x20e3 003548 fetch 1 ,mem_state_map +0x20e4 003549 bbit1 smap_name_req ,master_npage_timeout +0x20e5 003550 branch master_page_timeout +: 003551 master_npage_timeout: +0x20e6 003552 arg mem_tmp_buffer ,contw +0x20e7 003553 arg 8 ,loopcnt +0x20e8 003554 call memset0 +: 003555 master_page_timeout: +0x20e9 003556 bpatch patch02_2 ,mem_patch02 +0x20ea 003557 jam 0 ,mem_state +0x20eb 003558 call init_lmp_work +0x20ec 003559 jam 0 ,memui_reconnect_mode +0x20ed 003560 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +0x20ee 003561 call ui_ipc_send_event +0x20ef 003562 branch page_exit +: 003564 page_start: +0x20f0 003565 bpatch patch02_3 ,mem_patch02 +0x20f1 003566 force 0 ,timeup +0x20f2 003567 until clkn_rt ,meet +0x20f3 003568 fetch 1 ,mem_page_clk +0x20f4 003569 increase -1 ,pdata +0x20f5 003570 ixor clkn_bt ,pdata +0x20f6 003571 compare 0 ,pdata ,3 +0x20f7 003572 nbranch page_start ,true +0x20f8 003573 deposit am_addr +0x20f9 003574 store 1 ,mem_fhs_am_addr +0x20fa 003575 force 0 ,n_tx_slot +0x20fb 003576 force 0 ,freq_mode +: 003578 page_restart: +0x20fc 003579 bpatch patch02_4 ,mem_patch02 +0x20fd 003580 branch page_exit ,timeout +0x20fe 003581 call fetch_page_bt_adr +0x20ff 003582 arg param_rf_setup ,timeup +0x2100 003583 until clkn_rt ,meet +: 003584 page_rx_restart: +0x2101 003585 bpatch patch02_5 ,mem_patch02 +0x2102 003586 fetch 4 ,mem_page_clk +0x2103 003587 iforce bt_clk +0x2104 003588 increase 1 ,pdata +0x2105 003589 store 4 ,mem_page_clk +0x2106 003590 isolate1 mark_page_trainb ,mark +0x2107 003591 setflag true ,2 ,freq_mode +0x2108 003592 compare 0x00 ,bt_clk ,0x02 +0x2109 003593 nbranch page_receive ,true +0x210a 003594 fetch 1 ,mem_page_transmit +0x210b 003595 increase 1 ,pdata +0x210c 003596 store 1 ,mem_page_transmit +0x210d 003597 call tx_radio_freq +0x210e 003598 call start_transmitter +0x210f 003599 call start_tx_native +0x2110 003600 call send_access_word +0x2111 003601 call end_of_packet +0x2112 003602 call page_check_train +0x2113 003603 branch page_restart +: 003604 page_exit: +0x2114 003605 bpatch patch02_6 ,mem_patch02 +0x2115 003606 disable master +0x2116 003607 fetch 2 ,mem_page_interval +0x2117 003608 rtn blank +0x2118 003609 force page_interval_timer ,queue +0x2119 003610 branch timer_init +: 003612 page_check_train: +0x211a 003613 bpatch patch02_7 ,mem_patch02 +0x211b 003614 fetch 1 ,mem_nfreq_index_page +0x211c 003615 increase -1 ,pdata +0x211d 003616 store 1 ,mem_nfreq_index_page +0x211e 003617 rtn positive +0x211f 003618 jam 31 ,mem_nfreq_index_page +0x2120 003619 fetch 1 ,mem_npage_index +0x2121 003620 increase -1 ,pdata +0x2122 003621 store 1 ,mem_npage_index +0x2123 003622 rtn positive +0x2124 003623 setflip mark_page_trainb ,mark +0x2125 003624 fetch 1 ,mem_npage +0x2126 003625 store 1 ,mem_npage_index +0x2127 003626 rtn +: 003628 page_receive: +0x2128 003629 bpatch patch03_0 ,mem_patch03 +0x2129 003630 call rx_radio_freq +0x212a 003631 call start_rx_native +0x212b 003632 call start_receiver +0x212c 003633 call wait_access_clkn_rt +0x212d 003634 branch page_sync ,sync +0x212e 003635 call page_check_train +0x212f 003636 branch page_rx_restart +: 003637 page_sync: +0x2130 003638 call end_of_packet +0x2131 003639 fetch 1 ,mem_page_rcv +0x2132 003640 increase 1 ,pdata +0x2133 003641 store 1 ,mem_page_rcv +0x2134 003642 force 0 ,stop_watch +0x2135 003643 fetch 4 ,mem_page_clk +: 003644 page_send_fhs: +0x2136 003645 bpatch patch03_1 ,mem_patch03 +0x2137 003646 call rf_setup_time_master_slot +0x2138 003647 call fetch_page_bt_adr +0x2139 003648 increase 1 ,n_tx_slot +: 003649 page_send_fhs_continue: +0x213a 003650 and_into 0x1fd ,bt_clk +0x213b 003651 and_into 0x1fc ,freq_mode +0x213c 003652 call tx_radio_freq +0x213d 003653 call start_transmitter +0x213e 003654 call start_tx_native +0x213f 003655 call send_access_word +0x2140 003656 deposit clkn_bt +0x2141 003657 store 4 ,mem_clkn_bt +0x2142 003658 force 0 ,am_addr +0x2143 003659 force type_fhs ,type +0x2144 003660 call scan_mode_whiten +0x2145 003661 call transmit_packet_whitened +: 003662 page_wait_fhs_reply: +0x2146 003663 bpatch patch03_2 ,mem_patch03 +0x2147 003664 call rf_setup_time_slave_slot +0x2148 003665 or_into 0x02 ,bt_clk +0x2149 003666 and_into 0x1fc ,freq_mode +0x214a 003667 call rx_radio_freq +0x214b 003668 call start_rx_native +0x214c 003669 call start_receiver +0x214d 003670 call wait_access_clkn_rt +0x214e 003671 call end_of_packet ,sync +0x214f 003672 branch page_wait_fhs_reply_ok ,sync +0x2150 003673 fetch 1 ,mem_fhs_wait_counter +0x2151 003674 branch page_restart ,blank +0x2152 003675 increase -1 ,pdata +0x2153 003676 store 1 ,mem_fhs_wait_counter +0x2154 003677 branch page_send_fhs +: 003679 page_wait_fhs_reply_ok: +0x2155 003680 bpatch patch03_3 ,mem_patch03 +0x2156 003681 fetch 1 ,mem_page_rcv_fhs +0x2157 003682 increase 1 ,pdata +0x2158 003683 store 1 ,mem_page_rcv_fhs +0x2159 003684 call prepare_newconn +: 003685 master_newconn_loop: +0x215a 003686 call master_newconn_once +0x215b 003687 branch newconn_poll_responded ,sync +0x215c 003688 call new_conn_timeout +0x215d 003689 nbranch master_newconn_loop ,blank +0x215e 003690 branch page_restart +: 003692 newconn_poll_responded: +0x215f 003693 bpatch patch03_4 ,mem_patch03 +0x2160 003694 fetch 1 ,mem_state +0x2161 003695 set0 state_inpage ,pdata +0x2162 003696 store 1 ,mem_state +0x2163 003697 call newconn_init +0x2164 003698 disable master +0x2165 003699 rtn +: 003702 master_dispatch: +0x2166 003703 bpatch patch03_5 ,mem_patch03 +0x2167 003704 enable master +0x2168 003705 enable clknt +0x2169 003706 call role_switch_master +0x216a 003707 rtn user +0x216b 003708 call check_bt_disabled +0x216c 003709 call rf_setup_time_master_slot +0x216d 003710 add clkn_bt ,1 ,bt_clk +0x216e 003711 call fetch_self_bt_adr +0x216f 003712 force 0x03 ,freq_mode +0x2170 003713 call scheduler_tx_l2cap_pkt +0x2171 003714 call prepare_tx +0x2172 003715 call tx_radio_freq +0x2173 003716 call start_transmitter +0x2174 003717 call start_tx_native +0x2175 003718 call send_access_word +0x2176 003719 call transmit_packet +: 003720 master_loop: +0x2177 003721 bpatch patch03_6 ,mem_patch03 +0x2178 003722 call parse_lmp +0x2179 003723 call master_conn_recv_packet +0x217a 003724 nbranch master_notmatch ,match +0x217b 003725 call supervision_flush +0x217c 003726 call parse_l2cap +0x217d 003727 fetch 1 ,mem_master_rcvcnt +0x217e 003728 increase 1 ,pdata +0x217f 003729 store 1 ,mem_master_rcvcnt +: 003730 master_notmatch: +0x2180 003731 bpatch patch03_7 ,mem_patch03 +0x2181 003732 call scheduler_process +0x2182 003733 call check_master_disconnect +0x2183 003734 nrtn master +0x2184 003735 call check_attempt +0x2185 003736 nbranch master_attempt ,blank +: 003737 master_exit: +0x2186 003738 disable master +0x2187 003739 rtn +: 003741 master_attempt: +0x2188 003742 call prepare_tx +0x2189 003743 call master_conn_send_packet +0x218a 003744 branch master_loop +: 003747 check_master_disconnect: +0x218b 003748 branch check_master_match ,match +0x218c 003749 call supervision_update +0x218d 003750 branch master_disconnect ,positive +: 003751 check_master_match: +0x218e 003752 call check_disconnect_timeout +0x218f 003753 nbranch master_disconnect ,user +0x2190 003754 fetch 1 ,mem_state_map +0x2191 003755 rtnbit0 smap_name_req +0x2192 003756 rtnbit1 smap_name_res +0x2193 003757 fetch 1 ,mem_op +0x2194 003758 rtnbit1 op_disconn +0x2195 003759 call conn_timer_expired +0x2196 003760 nrtn blank +0x2197 003761 fetch 1 ,mem_nameres_cnt +0x2198 003762 increase -1 ,pdata +0x2199 003763 store 1 ,mem_nameres_cnt +0x219a 003764 nrtn blank +0x219b 003765 branch lmp_disconnect +: 003767 master_disconnect: +0x219c 003768 bpatch patch04_0 ,mem_patch04 +0x219d 003769 call quit_connection +0x219e 003770 disable master +0x219f 003771 fetch 1 ,mem_state_map +0x21a0 003772 bbit1 smap_name_req ,master_name_disconnect +0x21a1 003773 rtn +: 003775 master_name_disconnect: +0x21a2 003776 fetch 1 ,mem_state_map +0x21a3 003777 rtnbit1 smap_name_res +: 003778 master_name_error: +0x21a4 003779 arg mem_tmp_buffer ,contw +0x21a5 003780 arg 8 ,loopcnt +0x21a6 003781 branch memset0 +: 003783 check_disconnect_timeout: +0x21a7 003784 bpatch patch04_1 ,mem_patch04 +0x21a8 003785 enable user +0x21a9 003786 fetch 1 ,mem_op +0x21aa 003787 rtnbit0 op_disconn +0x21ab 003788 call conn_timer_expired +0x21ac 003789 nrtn blank +0x21ad 003790 branch disable_user +: 003792 conn_timer_expired: +0x21ae 003793 fetch 1 ,mem_conn_timer +0x21af 003794 increase -1 ,pdata +0x21b0 003795 store 1 ,mem_conn_timer +0x21b1 003796 rtn +: 003798 linkkey_ready: +0x21b2 003799 bpatch patch04_2 ,mem_patch04 +0x21b3 003800 fetch 1 ,mem_state +0x21b4 003801 bbit1 state_linkkey ,linkkey_set +0x21b5 003802 fetch 1 ,mem_pairing_auth +0x21b6 003803 branch linkkey_set ,blank +0x21b7 003804 jam defalt_pairing_auth ,mem_pairing_auth +0x21b8 003805 jam bt_evt_linkkey_generate ,mem_fifo_temp +0x21b9 003806 call ui_ipc_send_event +0x21ba 003807 branch linkkey_set +: 003808 linkkey_set: +0x21bb 003809 bpatch patch04_3 ,mem_patch04 +0x21bc 003810 call context_traverse_linkkey +0x21bd 003811 fetch 1 ,mem_state +0x21be 003812 set1 state_linkkey ,pdata +0x21bf 003813 store 1 ,mem_state +0x21c0 003814 jam 1 ,mem_link_key_exists +0x21c1 003815 fetch 1 ,mem_conn_sm +0x21c2 003816 bne conn_sm_pairing ,linkkey_set_continue +: 003817 linkkey_set_continue: +0x21c3 003818 rtn +: 003820 generate_linkkey_continue: +0x21c4 003821 jam pairing_auth ,mem_pairing_auth +: 003822 clear_linkstate: +0x21c5 003823 fetch 1 ,mem_state +0x21c6 003824 set0 state_linkkey ,pdata +0x21c7 003825 store 1 ,mem_state +0x21c8 003826 rtn +: 003830 role_switch_check: +0x21c9 003831 bpatch patch04_4 ,mem_patch04 +0x21ca 003832 disable user +0x21cb 003833 fetch 2 ,mem_tsniff +0x21cc 003834 arg 0xffff ,temp +0x21cd 003835 isub temp ,null +0x21ce 003836 nrtn zero +0x21cf 003837 fetch 4 ,mem_sniff_anchor +0x21d0 003838 branch role_switch_clkn ,clknt +0x21d1 003839 isub clke_bt ,pdata +0x21d2 003840 branch role_switch_clke +: 003841 role_switch_clkn: +0x21d3 003842 isub clkn_bt ,pdata +: 003843 role_switch_clke: +0x21d4 003844 sub pdata ,4 ,null +0x21d5 003845 nrtn positive +0x21d6 003846 force 0 ,pdata +0x21d7 003847 store 2 ,mem_tsniff +0x21d8 003848 branch enable_user +: 003852 role_switch_prepare: +0x21d9 003853 copy pdata ,temp +0x21da 003854 bpatch patch04_5 ,mem_patch04 +0x21db 003855 storet 4 ,mem_sniff_anchor +: 003856 role_switch_prepare0: +0x21dc 003857 jam switch_flag_accept ,mem_switch_flag +0x21dd 003858 setarg 0xffff +0x21de 003859 store 2 ,mem_tsniff +0x21df 003860 jam 1 ,mem_sniff_attempt +0x21e0 003861 rtn +: 003864 role_switch_master: +0x21e1 003865 bpatch patch04_6 ,mem_patch04 +0x21e2 003866 call role_switch_check +0x21e3 003867 nrtn user +0x21e4 003868 disable user +0x21e5 003869 jam param_newconnto ,mem_newconnto_counter +0x21e6 003870 set0 mark_fhs_already_good ,mark +: 003871 roles_waitfhs_loop: +0x21e7 003872 call rf_setup_time_master_slot +0x21e8 003873 call master_recv_packet +0x21e9 003874 bmark1 mark_fhs_already_good ,roles_replyto_fhs +0x21ea 003875 call new_conn_timeout +0x21eb 003876 nbranch roles_waitfhs_loop ,blank +: 003877 role_switch_fail_master: +0x21ec 003878 bpatch patch04_7 ,mem_patch04 +0x21ed 003879 disable user +0x21ee 003880 deposit clkn_bt +0x21ef 003881 store 4 ,mem_next_btclk +0x21f0 003882 enable clknt +0x21f1 003883 enable master +0x21f2 003884 jam bt_evt_switch_fail_master ,mem_fifo_temp +0x21f3 003885 branch ui_ipc_send_event +: 003887 roles_replyto_fhs: +0x21f4 003888 bpatch patch05_0 ,mem_patch05 +0x21f5 003889 call rf_setup_time_slave_slot +0x21f6 003890 arg type_id ,type +0x21f7 003891 call master_send_packet +0x21f8 003892 disable clknt +0x21f9 003893 disable master +0x21fa 003894 call apply_switch_clke +0x21fb 003895 call prepare_newconn +: 003896 roles_newconns_loop: +0x21fc 003897 bpatch patch05_1 ,mem_patch05 +0x21fd 003898 call slave_newconn_once +0x21fe 003899 branch roles_newconns_responded ,match +0x21ff 003900 call new_conn_timeout +0x2200 003901 nbranch roles_newconns_loop ,blank +0x2201 003902 branch role_switch_fail_master +: 003903 roles_newconns_responded: +0x2202 003904 fetch 1 ,mem_mode +0x2203 003905 set0 mode_master ,pdata +0x2204 003906 store 1 ,mem_mode +0x2205 003907 call supervision_flush +0x2206 003908 call calc_clke_offset +0x2207 003909 enable user +0x2208 003910 jam bt_evt_switch_success_master ,mem_fifo_temp +0x2209 003911 branch ui_ipc_send_event +: 003916 context_load: +0x220a 003917 bpatch patch05_2 ,mem_patch05 +0x220b 003918 set1 mark_context ,mark +0x220c 003919 deposit rega +0x220d 003920 store 2 ,mem_context_ptr +0x220e 003921 force context_size ,loopcnt +0x220f 003922 arg mem_le_state ,contw +0x2210 003923 add rega ,coffset_mode ,contr +0x2211 003924 ifetch 1 ,contr +0x2212 003925 copy rega ,contr +0x2213 003926 bbit1 mode_le ,memcpy +0x2214 003927 arg mem_state ,contw +0x2215 003928 call memcpy +0x2216 003929 disable attempt +0x2217 003930 fetch 1 ,mem_amaddr +0x2218 003931 iforce am_addr +0x2219 003932 jam 1 ,mem_current_sniff_attempt +0x221a 003933 branch context_load_master ,master +0x221b 003934 jam 1 ,mem_current_sniff_attempt +: 003935 context_load_master: +0x221c 003936 fetch 1 ,mem_state +0x221d 003937 rtnbit0 state_insniff +0x221e 003938 fetch 1 ,mem_sniff_attempt +0x221f 003939 store 1 ,mem_current_sniff_attempt +0x2220 003940 fetch 1 ,mem_sniff_timeout +0x2221 003941 store 1 ,mem_current_sniff_timeout +0x2222 003942 rtn +: 003944 context_save: +0x2223 003945 bpatch patch05_3 ,mem_patch05 +0x2224 003946 fetch 2 ,mem_context_ptr +0x2225 003947 iforce contw +0x2226 003948 force context_size ,loopcnt +0x2227 003949 arg mem_le_state ,contr +0x2228 003950 branch memcpy ,le +0x2229 003951 arg mem_state ,contr +0x222a 003952 branch memcpy +: 003956 context_get_next: +0x222b 003957 arg context_num ,loopcnt +0x222c 003958 fetcht 1 ,mem_current_context +: 003959 context_get_next_loop: +0x222d 003960 increase 1 ,temp +0x222e 003961 compare context_num ,temp ,0xff +0x222f 003962 nbranch context_get_next_cont ,true +0x2230 003963 arg 0 ,temp +: 003964 context_get_next_cont: +0x2231 003965 storet 1 ,mem_current_context +0x2232 003966 mul32 temp ,context_size ,pdata +0x2233 003967 arg mem_context ,rega +0x2234 003968 iadd rega ,rega +0x2235 003969 ifetch 1 ,rega +0x2236 003970 bbit1 state_insniff ,context_get_next_sniff +0x2237 003971 rtnbit1 state_inconn +0x2238 003972 rtnbit1 state_inpage +: 003973 context_get_next_sniff: +0x2239 003974 loop context_get_next_loop +0x223a 003975 rtn +: 003977 context_new: +0x223b 003978 bpatch patch05_4 ,mem_patch05 +0x223c 003979 arg context_search_empty ,regc +0x223d 003980 call context_search +0x223e 003981 nrtn zero +0x223f 003982 deposit rega +0x2240 003983 store 2 ,mem_context_ptr +0x2241 003984 force 0 ,null +0x2242 003985 rtn +: 003989 context_check_all_wack: +0x2243 003990 call check_esco_amaddr +0x2244 003991 branch context_check_esco_wack ,true +0x2245 003992 fetch 2 ,mem_context_ptr +0x2246 003993 add pdata ,coffset_arq ,contw +0x2247 003994 fetch 1 ,mem_arq +0x2248 003995 istore 1 ,contw +0x2249 003996 arg context_check_a_wack ,regc +0x224a 003997 branch context_search +: 003999 context_check_esco_wack: +0x224b 004000 fetch 1 ,mem_arq +0x224c 004001 isolate1 wack ,pdata +0x224d 004002 branch context_esco_wack ,true +0x224e 004003 force 1 ,null +0x224f 004004 rtn +: 004005 context_esco_wack: +0x2250 004006 force 0 ,null +0x2251 004007 rtn +: 004010 context_check_idle: +0x2252 004011 arg context_check_inconn ,regc +0x2253 004012 branch context_search +: 004014 context_traverse_linkkey: +0x2254 004015 fetcht 2 ,mem_context_ptr +0x2255 004016 arg context_traverse_clearkey ,regc +0x2256 004017 branch context_search +: 004021 context_search_conn_handle: +0x2257 004022 fetcht 1 ,mem_hci_conn_handle +: 004023 context_search_conn_handle2: +0x2258 004024 arg context_search_handle ,regc +0x2259 004025 branch context_search +: 004027 context_search_plap: +0x225a 004028 bpatch patch05_5 ,mem_patch05 +0x225b 004029 fetcht 6 ,mem_hci_plap +: 004030 context_search_plap2: +0x225c 004031 arg context_search_lap ,regc +0x225d 004032 branch context_search +: 004034 context_search_insniff: +0x225e 004035 arg context_search_sniff ,regc +0x225f 004036 branch context_search +: 004038 context_search_sniff_window: +0x2260 004039 arg context_search_window ,regc +: 004040 context_search: +0x2261 004041 bpatch patch05_6 ,mem_patch05 +0x2262 004042 arg mem_context ,rega +0x2263 004043 arg context_num ,loopcnt +: 004044 context_search_loop: +0x2264 004045 ifetch 1 ,rega +0x2265 004046 copy regc ,pc +: 004047 context_search_next: +0x2266 004048 increase context_size ,rega +0x2267 004049 loop context_search_loop +0x2268 004050 force 1 ,null +0x2269 004051 rtn +: 004053 context_search_empty: +0x226a 004054 bbit1 state_inconn ,context_search_next +0x226b 004055 bbit1 state_inpage ,context_search_next +0x226c 004056 force 0 ,null +0x226d 004057 rtn +: 004059 context_search_lap: +0x226e 004060 bbit1 state_inpage ,context_search_lap_cont +0x226f 004061 bbit0 state_inconn ,context_search_next +: 004062 context_search_lap_cont: +0x2270 004063 add rega ,coffset_plap ,contr +0x2271 004064 ifetch 6 ,contr +0x2272 004065 isub temp ,null +0x2273 004066 rtn zero +0x2274 004067 branch context_search_next +: 004069 context_search_handle: +0x2275 004070 bbit0 state_inconn ,context_search_next +0x2276 004071 add rega ,coffset_conn_handle ,contr +0x2277 004072 ifetch 1 ,contr +0x2278 004073 isub temp ,null +0x2279 004074 rtn zero +0x227a 004075 branch context_search_next +: 004077 context_search_sniff: +0x227b 004078 bbit0 state_insniff ,context_search_next +: 004079 context_search_sniff_loop: +0x227c 004080 call context_get_anchor +0x227d 004081 call sign_pdata_temp +0x227e 004082 isub temp ,pdata +0x227f 004083 increase 1 ,pdata +0x2280 004084 branch context_search_sniff_miss ,positive +0x2281 004085 copy contr ,regb +0x2282 004086 store 9 ,mem_temp +0x2283 004087 fetch 1 ,mem_le_sc_calc +0x2284 004088 nbranch context_search_sniff_sc ,blank +0x2285 004089 fetch 9 ,mem_temp +0x2286 004090 copy regb ,contr +0x2287 004091 increase 5 ,pdata +0x2288 004092 branch context_search_meet1 +: 004093 context_search_sniff_sc: +0x2289 004094 fetch 9 ,mem_temp +0x228a 004095 copy regb ,contr +0x228b 004096 increase 20 ,pdata +: 004097 context_search_meet1: +0x228c 004098 nbranch context_search_next ,positive +: 004099 context_search_meet: +0x228d 004100 copy temp ,bt_clk +0x228e 004101 call context_next_anchor +0x228f 004102 force 0 ,null +0x2290 004103 rtn +: 004106 context_search_sniff_miss: +0x2291 004107 iforce regb +0x2292 004108 add rega ,coffset_tsniff ,contr +0x2293 004109 ifetch 2 ,contr +0x2294 004110 branch context_search_meet ,blank +0x2295 004111 call context_next_anchor +0x2296 004112 branch context_search_sniff_loop +: 004114 sign_pdata_temp: +0x2297 004115 rshift16 pdata ,timeup +0x2298 004116 rshift8 timeup ,timeup +0x2299 004117 branch sign_pdata_temp_p0 ,zero +0x229a 004118 compare 0xf ,timeup ,0xf +0x229b 004119 nrtn true +0x229c 004120 rshift16 temp ,timeup +0x229d 004121 rshift8 timeup ,timeup +0x229e 004122 nrtn zero +0x229f 004123 set1 28 ,temp +0x22a0 004124 rtn +: 004125 sign_pdata_temp_p0: +0x22a1 004126 rshift16 temp ,timeup +0x22a2 004127 rshift8 timeup ,timeup +0x22a3 004128 compare 0xf ,timeup ,0xf +0x22a4 004129 nrtn true +0x22a5 004130 set1 28 ,pdata +0x22a6 004131 rtn +: 004133 context_check_inconn: +0x22a7 004134 bbit0 state_inconn ,context_search_next +0x22a8 004135 force 0 ,null +0x22a9 004136 rtn +: 004138 context_check_a_wack: +0x22aa 004139 bbit0 state_inconn ,context_search_next +0x22ab 004140 add rega ,coffset_mode ,contr +0x22ac 004141 ifetch 1 ,contr +0x22ad 004142 bbit1 mode_le ,context_search_next +0x22ae 004143 add rega ,coffset_arq ,contr +0x22af 004144 ifetch 1 ,contr +0x22b0 004145 bbit0 wack ,context_search_next +0x22b1 004146 force 0 ,null +0x22b2 004147 rtn +: 004149 context_get_anchor: +0x22b3 004150 add rega ,coffset_mode ,contr +0x22b4 004151 ifetcht 1 ,contr +0x22b5 004152 deposit clkn_bt +0x22b6 004153 isolate1 mode_master ,temp +0x22b7 004154 add rega ,coffset_sniff_anchor ,contr +0x22b8 004155 ifetcht 4 ,contr +0x22b9 004156 rtn true +0x22ba 004157 add rega ,coffset_clk_offset ,contr +0x22bb 004158 ifetch 6 ,contr +0x22bc 004159 call calc_clke2 +0x22bd 004160 deposit clke_bt +0x22be 004161 rtn +: 004163 context_next_anchor: +0x22bf 004164 add rega ,coffset_tsniff ,contr +0x22c0 004165 add rega ,coffset_sniff_anchor ,contw +0x22c1 004166 ifetch 2 ,contr +0x22c2 004167 iadd temp ,timeup +0x22c3 004168 deposit timeup +0x22c4 004169 istore 4 ,contw +0x22c5 004170 branch le_context_nexthop +: 004173 context_search_window: +0x22c6 004174 bbit0 state_insniff ,context_search_next +0x22c7 004175 call context_get_anchor +0x22c8 004176 iadd stop_watch ,pdata +0x22c9 004177 iadd stop_watch ,pdata +0x22ca 004178 iadd queue ,pdata +0x22cb 004179 isub temp ,null +0x22cc 004180 nbranch context_search_next ,positive +0x22cd 004181 force 0 ,null +0x22ce 004182 rtn +: 004184 context_traverse_clearkey: +0x22cf 004185 bbit0 state_inconn ,context_search_next +0x22d0 004186 deposit temp +0x22d1 004187 isub rega ,null +0x22d2 004188 branch context_search_next ,null +0x22d3 004189 add rega ,coffset_mode ,contr +0x22d4 004190 ifetch 1 ,contr +0x22d5 004191 bbit1 mode_le ,context_search_next +0x22d6 004192 ifetch 1 ,rega +0x22d7 004193 set0 state_linkkey ,pdata +0x22d8 004194 istore 1 ,rega +0x22d9 004195 branch context_search_next +: 004198 master_conn_send_packet: +0x22da 004199 bpatch patch05_7 ,mem_patch05 +0x22db 004200 call rf_setup_time_master_slot +: 004201 master_send_packet: +0x22dc 004202 add clkn_bt ,1 ,bt_clk +0x22dd 004203 call fetch_self_bt_adr +0x22de 004204 force 0x03 ,freq_mode +0x22df 004205 call tx_radio_freq +0x22e0 004206 call start_transmitter +0x22e1 004207 call start_tx_native +0x22e2 004208 call send_access_word +0x22e3 004209 branch transmit_packet +: 004211 master_conn_recv_packet: +0x22e4 004212 bpatch patch06_0 ,mem_patch06 +0x22e5 004213 call rf_setup_time_slave_slot +: 004214 master_recv_packet: +0x22e6 004215 add clkn_bt ,1 ,bt_clk +0x22e7 004216 call fetch_self_bt_adr +0x22e8 004217 force 0x03 ,freq_mode +0x22e9 004218 call rx_radio_freq +0x22ea 004219 call init_rx_packet_flags +0x22eb 004220 call prep_crypt +0x22ec 004221 call start_rx_native +0x22ed 004222 call start_receiver +: 004223 master_rx_conn_finish_packet: +0x22ee 004224 call wait_access_clkn_rt +0x22ef 004225 nrtn sync +0x22f0 004226 call save_rssi +0x22f1 004227 branch receive_packet +: 004231 master_newconn_once: +0x22f2 004232 bpatch patch06_1 ,mem_patch06 +0x22f3 004233 fetch 1 ,mem_fhs_am_addr +0x22f4 004234 iforce am_addr +0x22f5 004235 force type_poll ,type +0x22f6 004236 call master_conn_send_packet +0x22f7 004237 branch master_conn_recv_packet +: 004248 inquiry_scan_dispatch: +0x22f8 004249 fetch 1 ,mem_scan_mode +0x22f9 004250 rtnbit0 inq_scan_mode +0x22fa 004251 force iscan_interval_timer ,queue +0x22fb 004252 call timer_check +0x22fc 004253 nrtn blank +0x22fd 004254 fetcht 2 ,mem_iscan_window +0x22fe 004255 force 4 ,queue +0x22ff 004256 call sniff_check_window +0x2300 004257 rtn user +0x2301 004258 call inquiry_scan_start +0x2302 004259 force iscan_interval_timer ,queue +0x2303 004260 fetch 2 ,mem_iscan_interval +0x2304 004261 nbranch timer_init ,sync +0x2305 004262 random pdata +0x2306 004263 iand mask3ff ,pdata +0x2307 004264 branch timer_init +: 004267 inquiry_scan_start: +0x2308 004268 bpatch patch06_2 ,mem_patch06 +0x2309 004269 jam 0 ,mem_fhs_am_addr +0x230a 004270 disable clknt +0x230b 004271 disable attempt +0x230c 004272 call afh_clear +0x230d 004273 and clkn_bt ,0x1fc ,bt_clk +0x230e 004274 force 0x01 ,freq_mode +0x230f 004275 call fetch_giac +0x2310 004276 call rx_radio_freq +0x2311 004277 setflip mark_inquiry_state ,mark +0x2312 004278 fetch 1 ,mem_inquiryscan_waitcnt +0x2313 004279 increase 1 ,pdata +0x2314 004280 store 1 ,mem_inquiryscan_waitcnt +0x2315 004281 call fetch_diac +0x2316 004282 call start_receiver +0x2317 004283 call wait_access_forever +0x2318 004284 nrtn sync +0x2319 004285 bpatch patch06_3 ,mem_patch06 +0x231a 004286 force 0 ,stop_watch +0x231b 004287 call shutdown_radio +0x231c 004288 fetch 1 ,mem_inquiryscan_rcvcnt +0x231d 004289 increase 1 ,pdata +0x231e 004290 store 1 ,mem_inquiryscan_rcvcnt +0x231f 004291 call fetch_giac +0x2320 004292 call rf_setup_time_slave_slot +0x2321 004293 or_into 0x002 ,bt_clk +0x2322 004294 force 0x01 ,freq_mode +0x2323 004295 call tx_radio_freq +0x2324 004296 call fetch_diac +0x2325 004297 call start_transmitter +0x2326 004298 call start_tx_external +0x2327 004299 deposit clkn_bt +0x2328 004300 store 4 ,mem_clkn_bt +0x2329 004301 call send_access_word +0x232a 004302 force type_fhs ,type +0x232b 004303 force 0 ,am_addr +0x232c 004304 call scan_mode_whiten +0x232d 004305 call transmit_packet_whitened +0x232e 004306 call send_eir +0x232f 004307 and_into 0x1fd ,bt_clk +0x2330 004308 increase 1 ,n_tx_slot +0x2331 004309 rtn +: 004311 send_eir: +0x2332 004312 bpatch patch06_4 ,mem_patch06 +0x2333 004313 fetch 1 ,mem_eir_enable +0x2334 004314 rtn blank +0x2335 004315 arg mem_eir ,contw +0x2336 004316 fetch 1 ,mem_local_name_length +0x2337 004317 copy pdata ,loopcnt +0x2338 004318 increase 1 ,pdata +0x2339 004319 istore 1 ,contw +0x233a 004320 copy contw ,temp +0x233b 004321 increase 1 ,pdata +0x233c 004322 store 2 ,mem_tx_len +0x233d 004323 copy temp ,contw +0x233e 004324 setarg 0x09 +0x233f 004325 istore 1 ,contw +0x2340 004326 arg mem_local_name ,contr +0x2341 004327 call memcpy +0x2342 004329 arg mem_all_uuid_128bits ,regc +0x2343 004330 arg 4 ,loopcnt +0x2344 004331 call get_all_uuid +0x2345 004332 arg mem_all_uuid_16bits ,regc +0x2346 004333 arg 1 ,loopcnt +0x2347 004334 call get_all_uuid +0x2348 004336 force type_dm3 ,type +0x2349 004337 jam 2 ,mem_tx_lch +0x234a 004338 setarg mem_eir +0x234b 004339 store 2 ,mem_txptr +0x234c 004340 call rf_setup_time_slave_slot +0x234d 004341 call tx_radio_freq +0x234e 004342 call start_transmitter +0x234f 004343 call start_tx_external +0x2350 004344 call send_access_word +0x2351 004345 call scan_mode_whiten +0x2352 004346 call transmit_packet_whitened +0x2353 004347 rtn +: 004350 get_all_uuid: +0x2354 004351 copy contw ,temp +0x2355 004352 copy regc ,contr +0x2356 004353 ifetch 1 ,contr +0x2357 004354 rtn blank +: 004355 lshift_loop: +0x2358 004356 lshift pdata ,pdata +0x2359 004357 loop lshift_loop +0x235a 004358 copy pdata ,rega +0x235b 004359 increase 2 ,pdata +0x235c 004360 copy pdata ,queue +0x235d 004361 fetch 2 ,mem_tx_len +0x235e 004362 iadd queue ,pdata +0x235f 004363 store 2 ,mem_tx_len +0x2360 004364 copy temp ,contw +0x2361 004365 copy rega ,pdata +0x2362 004366 increase 1 ,pdata +0x2363 004367 istore 1 ,contw +0x2364 004368 copy regc ,contr +0x2365 004369 ifetch 1 ,contr +0x2366 004370 ifetch 1 ,contr +0x2367 004371 istore 1 ,contw +0x2368 004372 copy rega ,loopcnt +0x2369 004373 branch memcpy +: 004379 page_scan_dispatch: +0x236a 004380 fetch 1 ,mem_scan_mode +0x236b 004381 rtnbit0 page_scan_mode +0x236c 004382 force pscan_interval_timer ,queue +0x236d 004383 call timer_check +0x236e 004384 nrtn blank +0x236f 004385 fetcht 2 ,mem_pscan_window +0x2370 004386 force 40 ,queue +0x2371 004387 call sniff_check_window +0x2372 004388 rtn user +0x2373 004389 force 0 ,am_addr +0x2374 004390 jam param_pagerespto ,mem_fhs_wait_counter +0x2375 004391 set0 mark_fhs_already_good ,mark +0x2376 004392 call page_scan_start +0x2377 004393 force pscan_interval_timer ,queue +0x2378 004394 fetch 2 ,mem_pscan_interval +0x2379 004395 branch timer_init +: 004398 page_scan_start: +0x237a 004399 bpatch patch06_5 ,mem_patch06 +0x237b 004400 disable clknt +0x237c 004401 call afh_clear +0x237d 004402 fetch 1 ,mem_pagescan_waitcnt +0x237e 004403 increase 1 ,pdata +0x237f 004404 store 1 ,mem_pagescan_waitcnt +0x2380 004405 force 0 ,n_tx_slot +0x2381 004406 call fetch_self_bt_adr +0x2382 004407 add clkn_bt ,1 ,bt_clk +0x2383 004408 force 0x02 ,freq_mode +0x2384 004409 bpatch patch06_6 ,mem_patch06 +0x2385 004410 call rx_radio_freq +0x2386 004411 call start_receiver +0x2387 004412 call wait_access_forever +0x2388 004413 nrtn sync +0x2389 004414 call shutdown_radio +0x238a 004415 fetch 1 ,mem_pagescan_rcvcnt +0x238b 004416 increase 1 ,pdata +0x238c 004417 store 1 ,mem_pagescan_rcvcnt +0x238d 004418 force 0 ,stop_watch +0x238e 004419 call rf_setup_time_slave_slot +0x238f 004420 or_into 0x002 ,bt_clk +0x2390 004421 force 0x01 ,freq_mode +0x2391 004422 call tx_radio_freq +0x2392 004423 call start_transmitter +0x2393 004424 call start_tx_external +0x2394 004425 call send_access_word +0x2395 004426 call end_of_packet +0x2396 004427 force 0 ,am_addr +0x2397 004428 arg param_rf_setup ,timeup +0x2398 004429 until clke_rt ,meet +0x2399 004430 or_into 0x03 ,clke_bt +0x239a 004431 and_into 0x1fd ,bt_clk +: 004432 page_scan_wait_fhs_restart: +0x239b 004433 bpatch patch06_7 ,mem_patch06 +0x239c 004434 increase 1 ,n_tx_slot +0x239d 004435 call rx_radio_freq +0x239e 004436 call start_receiver +0x239f 004437 call wait_access_mhalfbnd +0x23a0 004438 nbranch page_scan_wait_fhs_again ,sync +0x23a1 004439 call scan_mode_whiten +0x23a2 004440 call receive_packet_whitened +0x23a3 004441 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs +: 004442 page_scan_wait_fhs_again: +0x23a4 004443 bpatch patch07_0 ,mem_patch07 +0x23a5 004444 fetch 1 ,mem_fhs_wait_counter +0x23a6 004445 rtn blank +0x23a7 004446 increase -1 ,pdata +0x23a8 004447 store 1 ,mem_fhs_wait_counter +0x23a9 004448 call rf_setup_time_master_slot +0x23aa 004449 branch page_scan_wait_fhs_restart +: 004452 page_scan_reply_to_fhs: +0x23ab 004453 bpatch patch07_1 ,mem_patch07 +0x23ac 004454 set0 1 ,clke_bt +0x23ad 004455 set1 0 ,clke_bt +0x23ae 004456 fetch 1 ,mem_pagescan_rcvfhscnt +0x23af 004457 increase 1 ,pdata +0x23b0 004458 store 1 ,mem_pagescan_rcvfhscnt +0x23b1 004459 call rf_setup_time_slave_slot +0x23b2 004460 or_into 0x02 ,bt_clk +0x23b3 004461 call tx_radio_freq +0x23b4 004462 call start_transmitter +0x23b5 004463 call start_tx_external +0x23b6 004464 call send_access_word +0x23b7 004465 call end_of_packet +: 004466 slave_apply_clke_bt: +0x23b8 004467 compare 0x03 ,clke_bt ,0x03 +0x23b9 004468 branch slave_apply_clke_bt_now ,true +0x23ba 004469 until null ,mhalfbnd +0x23bb 004470 branch slave_apply_clke_bt +: 004471 slave_apply_clke_bt_now: +0x23bc 004472 fetch 4 ,mem_clke_bt +0x23bd 004473 or_into 0x03 ,pdata +0x23be 004474 icopy clke_bt +: 004476 start_slave_connection: +0x23bf 004477 bpatch patch07_2 ,mem_patch07 +0x23c0 004478 fetch 6 ,extm_lap +0x23c1 004479 store 6 ,mem_plap +0x23c2 004480 call prepare_newconn +: 004481 slave_newconn_loop: +0x23c3 004482 call slave_newconn_once +0x23c4 004483 branch sconn_successful ,match +0x23c5 004484 call new_conn_timeout +0x23c6 004485 nbranch slave_newconn_loop ,blank +0x23c7 004486 rtn +: 004489 sconn_successful: +0x23c8 004490 bpatch patch07_3 ,mem_patch07 +0x23c9 004491 call newconn_init +0x23ca 004492 call context_new +0x23cb 004493 nrtn zero +0x23cc 004494 jam 0 ,mem_mode +0x23cd 004495 call calc_clke_offset +0x23ce 004496 branch context_save +: 004501 slave_dispatch: +0x23cf 004502 bpatch patch07_4 ,mem_patch07 +0x23d0 004503 call calc_clke +0x23d1 004504 call role_switch_slave +0x23d2 004505 rtn user +: 004506 slave_loop: +0x23d3 004507 bpatch patch07_5 ,mem_patch07 +0x23d4 004508 call check_bt_disabled +0x23d5 004509 call scheduler_process +0x23d6 004510 call slave_conn_recv_packet +0x23d7 004511 nbranch slave_notmatch ,match +0x23d8 004512 call supervision_flush +0x23d9 004513 call scheduler_tx_l2cap_pkt +0x23da 004514 call prepare_tx +0x23db 004515 call slave_conn_send_packet +0x23dc 004516 call parse_l2cap +0x23dd 004517 call parse_lmp +0x23de 004518 fetch 1 ,mem_slave_rcvcnt +0x23df 004519 increase 1 ,pdata +0x23e0 004520 store 1 ,mem_slave_rcvcnt +0x23e1 004521 call calc_clke_offset +: 004522 slave_notmatch: +0x23e2 004523 bpatch patch07_6 ,mem_patch07 +0x23e3 004524 call lpm_set_mult +0x23e4 004525 call supervision_update +0x23e5 004526 branch slave_disconnect ,positive +0x23e6 004527 call check_disconnect_timeout +0x23e7 004528 nbranch slave_disconnect ,user +0x23e8 004529 call check_attempt +0x23e9 004530 nbranch slave_loop ,blank +0x23ea 004531 rtn +: 004533 slave_disconnect: +0x23eb 004534 bpatch patch07_7 ,mem_patch07 +0x23ec 004535 jam 0 ,mem_tester_emulate +0x23ed 004536 jam 0 ,mem_debug_config +0x23ee 004537 call quit_connection +0x23ef 004538 set0 mark_testmode ,mark +0x23f0 004539 call test_enable_white +0x23f1 004540 fetch 1 ,mem_state +0x23f2 004541 rtn +: 004544 role_switch_slave: +0x23f3 004545 bpatch patch08_0 ,mem_patch08 +0x23f4 004546 call role_switch_check +0x23f5 004547 nrtn user +0x23f6 004548 copy am_addr ,temp +0x23f7 004549 call get_free_amaddr +0x23f8 004550 store 1 ,mem_fhs_am_addr +0x23f9 004551 copy temp ,am_addr +0x23fa 004552 jam param_newconnto ,mem_newconnto_counter +: 004553 roles_sendfhs_loop: +0x23fb 004554 bpatch patch08_1 ,mem_patch08 +0x23fc 004555 call rf_setup_time_master_slot +0x23fd 004556 force type_fhs ,type +0x23fe 004557 call slave_send_access +0x23ff 004558 deposit clkn_bt +0x2400 004559 store 4 ,mem_clkn_bt +0x2401 004560 call transmit_packet +0x2402 004561 call rf_setup_time_slave_slot +0x2403 004562 enable user3 +0x2404 004563 call slave_receive_access +0x2405 004564 branch roles_got_fhs_reply ,sync +0x2406 004565 call shutdown_radio +0x2407 004566 call new_conn_timeout +0x2408 004567 nbranch roles_sendfhs_loop ,blank +0x2409 004568 rtnmark0 mark_accept_switch +0x240a 004569 jam lmp_slot_offset ,mem_lmo_opcode2 +0x240b 004570 set1 mark_switch_initiated ,mark +0x240c 004571 rtn +: 004572 roles_got_fhs_reply: +0x240d 004573 enable clknt +0x240e 004574 call prepare_newconn +0x240f 004575 call afh_clear +: 004576 roles_newconn_loop: +0x2410 004577 bpatch patch08_2 ,mem_patch08 +0x2411 004578 call master_newconn_once +0x2412 004579 branch roles_newconn_responded ,sync +0x2413 004580 call new_conn_timeout +0x2414 004581 nbranch roles_newconn_loop ,blank +0x2415 004582 disable clknt +0x2416 004583 deposit clke_bt +0x2417 004584 store 4 ,mem_next_btclk +0x2418 004585 rtn +: 004586 roles_newconn_responded: +0x2419 004587 enable master +0x241a 004588 bmark0 mark_accept_switch ,roles_newconn_nolmp +0x241b 004589 set0 mark_accept_switch ,mark +0x241c 004590 jam lmp_accepted ,mem_lmo_opcode2 +0x241d 004591 jam lmp_host_connection_req ,mem_lmi_opcode2 +0x241e 004592 call tid_set_reply +: 004593 roles_newconn_nolmp: +0x241f 004594 deposit am_addr +0x2420 004595 store 1 ,mem_amaddr +0x2421 004596 force 0 ,pdata +0x2422 004597 store 6 ,mem_clk_offset +0x2423 004598 fetch 1 ,mem_mode +0x2424 004599 set1 mode_master ,pdata +0x2425 004600 store 1 ,mem_mode +0x2426 004601 call supervision_flush +0x2427 004602 disable master +0x2428 004603 enable user +0x2429 004604 rtn +: 004608 init_rx_packet_flags: +0x242a 004609 bpatch patch08_3 ,mem_patch08 +0x242b 004610 disable match +0x242c 004611 set0 mark_loopback ,mark +0x242d 004612 set0 mark_am_addr_broadcast ,mark +0x242e 004613 set0 mark_longpacket ,mark +0x242f 004614 set0 mark_old_packet ,mark +0x2430 004615 fetch 1 ,mem_arq +0x2431 004616 set0 arqnx ,pdata +0x2432 004617 set1 flowx ,pdata +0x2433 004618 store 1 ,mem_arq +0x2434 004619 rtn +: 004621 prepare_newconn: +0x2435 004622 bpatch patch08_4 ,mem_patch08 +0x2436 004623 jam param_newconnto ,mem_newconnto_counter +0x2437 004624 jam param_newconn_arq ,mem_arq +0x2438 004625 fetch 2 ,mem_rx_window_init +0x2439 004626 store 2 ,mem_rx_window +0x243a 004627 deposit clkn_bt +0x243b 004628 store 4 ,mem_next_btclk +0x243c 004629 rtn clknt +0x243d 004630 deposit clke_bt +0x243e 004631 store 4 ,mem_next_btclk +0x243f 004632 rtn +: 004634 newconn_init: +0x2440 004635 bpatch patch08_5 ,mem_patch08 +0x2441 004636 call init_lmp_reinit +0x2442 004637 call new_conn_handle +0x2443 004638 store 1 ,mem_conn_handle +0x2444 004639 setarg 0 +0x2445 004640 store 2 ,mem_l2cap_rxbuff1_len +0x2446 004641 setarg param_supervision_to +0x2447 004642 store 2 ,mem_supervision_to +0x2448 004643 fetch 1 ,mem_state +0x2449 004644 set1 state_inconn ,pdata +0x244a 004645 store 1 ,mem_state +0x244b 004646 jam 0 ,mem_op +0x244c 004647 jam 0 ,mem_state_map +0x244d 004648 jam 0 ,mem_lpm_current_mult +0x244e 004649 branch supervision_flush +: 004652 clear_linkkey: +0x244f 004653 bpatch patch08_6 ,mem_patch08 +0x2450 004654 force 0 ,pdata +0x2451 004655 store 8 ,mem_link_key +0x2452 004656 istore 8 ,contw +0x2453 004657 call clear_linkstate +0x2454 004658 branch context_traverse_linkkey +: 004660 new_conn_timeout: +0x2455 004661 fetch 1 ,mem_newconnto_counter +0x2456 004662 increase -1 ,pdata +0x2457 004663 store 1 ,mem_newconnto_counter +0x2458 004664 rtn +: 004666 new_conn_handle: +0x2459 004667 fetch 1 ,mem_handle_num +0x245a 004668 increase 1 ,pdata +0x245b 004669 store 1 ,mem_handle_num +0x245c 004670 rtn +: 004673 quit_connection: +0x245d 004674 bpatch patch08_7 ,mem_patch08 +0x245e 004675 fetch 1 ,mem_hci_cmd +0x245f 004676 beq hci_cmd_remote_name_req ,quit_connection_name +0x2460 004677 fetch 1 ,mem_lmp_to_send +0x2461 004678 bne lmp_name_req ,quit_connection_cont +: 004679 quit_connection_name: +0x2462 004680 call cmd_check_plap +0x2463 004681 nbranch quit_connection_cont ,zero +0x2464 004682 call master_name_error +0x2465 004683 jam 0 ,mem_hci_cmd +: 004684 quit_connection_cont: +0x2466 004685 bpatch patch09_0 ,mem_patch09 +0x2467 004686 call app_disconn_reason_collect_bt +0x2468 004687 call sniff_exit +0x2469 004688 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x246a 004689 call ui_ipc_send_event +0x246b 004690 call init_lmp_work +0x246c 004691 call l2cap_init_work +0x246d 004692 call sp_initialize +0x246e 004693 fetch 1 ,mem_state +0x246f 004694 set0 state_inconn +0x2470 004695 store 1 ,mem_state +0x2471 004696 jam 0 ,memui_reconnect_mode +0x2472 004698 fetch 1 ,mem_state_map +0x2473 004699 compare 0x0 ,pdata ,0xc0 +0x2474 004700 branch quit_connection_not_clear_mark ,true +0x2475 004701 set0 mark_rxbuf_inuse ,mark +: 004702 quit_connection_not_clear_mark: +0x2476 004703 fetch 1 ,mem_arq +0x2477 004704 bbit0 wack ,quit_connection_not_clear_tx +: 004705 quit_connection_not_clear_tx: +0x2478 004706 fetch 1 ,mem_op +0x2479 004707 rtnbit0 op_txl2cap +0x247a 004708 set0 mark_tx_l2cap ,mark +0x247b 004709 rtn +: 004711 slave_newconn_once: +0x247c 004712 bpatch patch09_1 ,mem_patch09 +0x247d 004713 fetch 1 ,extm_newconn_am_addr +0x247e 004714 rtn blank +0x247f 004715 icopy am_addr +0x2480 004716 call slave_conn_recv_packet +0x2481 004717 nrtn match +0x2482 004718 force type_null ,type +0x2483 004719 call slave_conn_send_packet +0x2484 004720 deposit am_addr +0x2485 004721 store 1 ,mem_amaddr +0x2486 004722 force 0 ,pdata +0x2487 004723 store 1 ,extm_newconn_am_addr +0x2488 004724 rtn +: 004730 prepare_tx: +0x2489 004731 bpatch patch09_2 ,mem_patch09 +0x248a 004732 fetch 1 ,mem_state +0x248b 004733 bbit0 state_insco ,prepare_tx_not_sco +0x248c 004734 force type_hv3 ,type +0x248d 004735 bmark0 mark_esco ,prepare_tx_not_esco +0x248e 004736 call check_esco_amaddr +0x248f 004737 nbranch prepare_tx_not_sco ,true +0x2490 004738 branch prepare_tx_not_sco ,attempt +0x2491 004739 call set_wait_ack +0x2492 004740 setarg 2 +0x2493 004741 store 2 ,mem_retransmission_cnt +0x2494 004742 rtn +: 004743 prepare_tx_not_esco: +0x2495 004744 nrtn attempt +: 004745 prepare_tx_not_sco: +0x2496 004746 bpatch patch09_3 ,mem_patch09 +0x2497 004747 call context_check_all_wack +0x2498 004748 nbranch prepare_tx_no_retransmit ,zero +0x2499 004749 fetch 1 ,mem_arq +0x249a 004750 bbit0 wack ,prepare_tx_pollnull +: 004751 prepare_tx_retransmit: +0x249b 004752 bmark1 mark_loopback ,prepare_tx_loopback +0x249c 004753 fetch 1 ,mem_debug_config +0x249d 004754 bbit1 debug_tx_pattern ,prepare_tx_txpat +0x249e 004755 fetch 2 ,mem_retransmission_cnt +0x249f 004756 increase -1 ,pdata +0x24a0 004757 store 2 ,mem_retransmission_cnt +0x24a1 004758 branch prepare_tx_nomore_retransmit ,blank +0x24a2 004759 fetch 1 ,mem_last_type +0x24a3 004760 iforce type +0x24a4 004761 rtn +: 004763 prepare_tx_nomore_retransmit: +0x24a5 004764 bpatch patch09_4 ,mem_patch09 +0x24a6 004765 call clear_got_tx +: 004766 prepare_tx_no_retransmit: +0x24a7 004767 call check_esco_amaddr +0x24a8 004768 branch prepare_tx_pollnull ,true +0x24a9 004769 call send_lmp +0x24aa 004770 branch prepare_tx_sendlmp ,user +0x24ab 004771 fetch 1 ,mem_op +0x24ac 004772 bbit1 op_txl2cap ,prepare_tx_sendl2cap +0x24ad 004773 bmark1 mark_loopback ,prepare_tx_loopback +0x24ae 004774 fetch 1 ,mem_debug_config +0x24af 004775 bbit1 debug_tx_pattern ,prepare_tx_txpat +: 004776 prepare_tx_pollnull: +0x24b0 004777 force type_poll ,type +0x24b1 004778 rtn master +0x24b2 004779 force type_null ,type +0x24b3 004780 rtn +: 004781 prepare_tx_loopback: +0x24b4 004782 bpatch patch09_5 ,mem_patch09 +0x24b5 004783 fetch 1 ,mem_rx_type +0x24b6 004784 iforce type +0x24b7 004785 rtnne 1 +0x24b8 004786 force type_null ,type +0x24b9 004787 rtn +: 004788 prepare_tx_txpat: +0x24ba 004789 fetch 1 ,test_mode_packet_type +0x24bb 004790 and pdata ,0xf ,type +0x24bc 004791 set1 mark_loopback ,mark +0x24bd 004792 rtn +: 004793 prepare_tx_sendlmp: +0x24be 004794 force type_lmp ,type +0x24bf 004795 branch set_wait_ack +: 004796 prepare_tx_sendl2cap: +0x24c0 004797 call tx_l2cap_type +: 004799 set_wait_ack: +0x24c1 004800 bpatch patch09_6 ,mem_patch09 +0x24c2 004801 fetcht 1 ,mem_arq +0x24c3 004802 set1 wack ,temp +0x24c4 004803 storet 1 ,mem_arq +0x24c5 004804 deposit type +0x24c6 004805 store 1 ,mem_last_type +0x24c7 004806 setarg 0xffff +0x24c8 004807 store 2 ,mem_retransmission_cnt +0x24c9 004808 rtn +: 004810 tx_l2cap_type: +0x24ca 004811 bpatch patch09_7 ,mem_patch09 +0x24cb 004812 fetch 1 ,mem_state_map +0x24cc 004813 isolate1 smap_edr ,pdata +0x24cd 004814 fetch 2 ,mem_tx_len +0x24ce 004815 branch tx_l2cap_type_edr ,true +0x24cf 004816 force type_dm1 ,type +0x24d0 004817 sub pdata ,17 ,null +0x24d1 004818 rtn positive +0x24d2 004819 force type_dh1 ,type +0x24d3 004820 sub pdata ,27 ,null +0x24d4 004821 rtn positive +0x24d5 004822 force type_dm3 ,type +0x24d6 004823 sub pdata ,121 ,null +0x24d7 004824 rtn positive +0x24d8 004825 force type_dh3 ,type +0x24d9 004826 sub pdata ,183 ,null +0x24da 004827 rtn positive +0x24db 004828 force type_dm5 ,type +0x24dc 004829 sub pdata ,224 ,null +0x24dd 004830 rtn positive +0x24de 004831 force type_dh5 ,type +0x24df 004832 rtn +: 004833 tx_l2cap_type_edr: +0x24e0 004834 force type_dm1 ,type +0x24e1 004835 sub pdata ,17 ,null +0x24e2 004836 rtn positive +0x24e3 004837 force type_dh1 ,type +0x24e4 004838 sub pdata ,54 ,null +0x24e5 004839 rtn positive +0x24e6 004840 force type_dm3 ,type +0x24e7 004841 arg 367 ,temp +0x24e8 004842 isub temp ,null +0x24e9 004843 nrtn positive +0x24ea 004844 force type_dm5 ,type +0x24eb 004845 arg 679 ,temp +0x24ec 004846 isub temp ,null +0x24ed 004847 nrtn positive +0x24ee 004848 force type_dh5 ,type +0x24ef 004849 rtn +: 004858 slave_receive_master_slot: +0x24f0 004859 fetch 1 ,mem_state +0x24f1 004860 bbit0 state_insniff ,slave_receive_notsniff +0x24f2 004861 fetch 2 ,mem_tsniff +0x24f3 004862 branch slave_receive_notsniff ,blank +0x24f4 004863 nbranch slave_receive_sniff ,attempt +: 004864 slave_receive_notsniff: +0x24f5 004865 call rf_setup_time_master_slot +: 004866 slave_receive_access: +0x24f6 004867 add clke_bt ,1 ,bt_clk +: 004868 slave_receive_sniff: +0x24f7 004869 enable swfine +0x24f8 004870 fetch 2 ,mem_rx_window +0x24f9 004871 rshift pdata ,pdata +0x24fa 004872 arg param_pll_setup ,temp +0x24fb 004873 iadd temp ,pdata +0x24fc 004874 call ahead_window +0x24fd 004875 call fetch_extm_bt_adr +0x24fe 004876 force 0x03 ,freq_mode +0x24ff 004877 call rx_radio_freq +0x2500 004878 call init_rx_packet_flags +0x2501 004879 call prep_crypt +0x2502 004880 bpatch patch0a_0 ,mem_patch0a +0x2503 004881 fetch 2 ,mem_rx_window +0x2504 004882 rshift pdata ,pdata +0x2505 004883 call ahead_window +0x2506 004884 call start_receiver +0x2507 004885 enable decode_fec0 +0x2508 004886 fetch 2 ,mem_rx_window +0x2509 004887 arg param_clke_cal ,temp +0x250a 004888 iadd temp ,stop_watch +0x250b 004889 correlate null ,timeout +0x250c 004890 copy clke ,temp +0x250d 004891 storet 6 ,mem_sync_clke +0x250e 004892 disable decode_fec0 +0x250f 004893 nrtn sync +0x2510 004894 arg param_clke_cal ,clke_rt +0x2511 004895 copy bt_clk ,clke_bt +0x2512 004896 branch lpm_adjust_clk ,wake +0x2513 004897 rtn +: 004900 slave_conn_recv_packet: +0x2514 004901 bpatch patch0a_1 ,mem_patch0a +0x2515 004902 call slave_receive_master_slot +0x2516 004903 nbranch shutdown_radio ,sync +0x2517 004904 call save_rssi +0x2518 004905 bmark0 mark_testmode ,receive_packet +0x2519 004906 fetch 2 ,mem_tst_pktcnt_sync +0x251a 004907 increase 1 ,pdata +0x251b 004908 store 2 ,mem_tst_pktcnt_sync +: 004909 receive_packet: +0x251c 004910 rshift bt_clk ,temp +0x251d 004911 or temp ,0x40 ,white_init +: 004912 receive_packet_whitened: +0x251e 004913 bpatch patch0a_2 ,mem_patch0a +0x251f 004914 enable enable_white +0x2520 004915 enable enable_hec +0x2521 004916 enable decode_fec1 +0x2522 004917 parse demod ,bucket ,3 +0x2523 004918 rshift8 pwindow ,pdata +0x2524 004919 store 1 ,mem_temp_am_addr +0x2525 004920 parse demod ,bucket ,4 +0x2526 004921 inject bucket ,7 +0x2527 004922 copy pwindow ,pdata +0x2528 004923 store 1 ,mem_rx_type +0x2529 004924 parse demod ,bucket ,3 +0x252a 004925 rshift8 pwindow ,pdata +0x252b 004926 store 1 ,mem_temp_arq +0x252c 004927 fetch 1 ,mem_rx_type +0x252d 004928 sub pdata ,3 ,null +0x252e 004929 branch receive_packet_noedr ,positive +0x252f 004930 beq 7 ,receive_packet_noedr +0x2530 004931 fetch 1 ,mem_state_map +0x2531 004932 isolate1 smap_edr ,pdata +0x2532 004933 setflag true ,psk ,radio_ctrl +: 004934 receive_packet_noedr: +0x2533 004935 bpatch patch0a_3 ,mem_patch0a +0x2534 004936 parse demod ,bucket ,8 +0x2535 004937 disable decode_fec1 +0x2536 004938 disable enable_hec +0x2537 004939 branch error_header ,crc_failed +0x2538 004940 bmark0 mark_testmode ,receive_packet_amchk +0x2539 004941 fetch 2 ,mem_tst_pktcnt_hec +0x253a 004942 increase 1 ,pdata +0x253b 004943 store 2 ,mem_tst_pktcnt_hec +: 004944 receive_packet_amchk: +0x253c 004945 bpatch patch0a_4 ,mem_patch0a +0x253d 004946 fetch 1 ,mem_temp_am_addr +0x253e 004947 compare 0 ,pdata ,0x07 +0x253f 004948 setflag true ,mark_am_addr_broadcast ,mark +0x2540 004949 branch am_addr_ok ,true +0x2541 004950 icompare 0x07 ,am_addr +0x2542 004951 branch am_addr_match ,true +0x2543 004952 bmark0 mark_esco ,end_of_packet +0x2544 004953 fetcht 1 ,mem_saved_amaddr +0x2545 004954 icompare 0x7 ,temp +0x2546 004955 nbranch end_of_packet ,true +0x2547 004956 fetch 1 ,mem_arq +0x2548 004957 set0 arqnx ,pdata +0x2549 004958 set1 flowx ,pdata +0x254a 004959 store 1 ,mem_arq +: 004960 am_addr_match: +0x254b 004961 enable match +: 004962 am_addr_ok: +0x254c 004963 bpatch patch0a_5 ,mem_patch0a +0x254d 004964 fetch 1 ,mem_rx_type +0x254e 004965 icopy type +0x254f 004966 bmark1 mark_am_addr_broadcast ,arqn_bypass +0x2550 004967 fetcht 1 ,mem_temp_arq +0x2551 004968 fetch 1 ,mem_arq +0x2552 004969 set0 flow ,pdata +0x2553 004970 isolate1 flow ,temp +0x2554 004971 setflag true ,flow ,pdata +0x2555 004972 isolate1 arqn ,temp +0x2556 004973 setflag true ,arqn ,pdata +0x2557 004974 store 1 ,mem_arq +0x2558 004975 isolate0 arqn ,temp +0x2559 004976 branch arqn_bypass ,true +0x255a 004977 call clear_got_tx +: 004978 arqn_bypass: +0x255b 004979 bpatch patch0a_6 ,mem_patch0a +0x255c 004980 arg 0 ,temp +0x255d 004981 call reserve_slot +0x255e 004982 and type ,0xf ,pdata +0x255f 004983 beq type_poll ,process_poll +0x2560 004984 beq type_null ,end_of_packet +0x2561 004985 beq type_fhs ,process_fhs +0x2562 004986 fetcht 1 ,mem_temp_arq +0x2563 004987 fetch 1 ,mem_arq +0x2564 004988 icompare 0x04 ,temp +0x2565 004989 nbranch rx_type_dispatch ,true +0x2566 004990 bmark0 mark_am_addr_broadcast ,failed_seqn +0x2567 004991 bbit0 bcast1 ,rx_type_dispatch +: 004992 failed_seqn: +0x2568 004993 set1 mark_old_packet ,mark +: 004994 rx_type_dispatch: +0x2569 004995 bpatch patch0a_7 ,mem_patch0a +0x256a 004996 deposit type +0x256b 004997 beq type_dm1 ,process_dm1 +0x256c 004998 beq type_dh1 ,process_dh1 +0x256d 004999 beq type_hv3 ,process_hev +0x256e 005000 beq type_3dh1 ,process_3dh1 +0x256f 005001 arg 4 ,temp +0x2570 005002 call reserve_slot +0x2571 005003 beq type_dm3 ,process_dm3 +0x2572 005004 beq type_dh3 ,process_dh3 +0x2573 005005 arg 8 ,temp +0x2574 005006 call reserve_slot +0x2575 005007 beq type_dm5 ,process_dm5 +0x2576 005008 beq type_dh5 ,process_dh5 +0x2577 005009 rtn +: 005012 process_hev: +0x2578 005013 bpatch patch0b_0 ,mem_patch0b +0x2579 005014 enable decode_fec0 +0x257a 005015 enable enable_crc +0x257b 005016 enable encrypt +0x257c 005017 arg mem_sco_ibuf ,contw +0x257d 005018 force 30 ,loopcnt +: 005019 process_hev_loop: +0x257e 005020 parse demod ,bucket ,8 +0x257f 005021 rshift3 pwindow ,pdata +0x2580 005022 istore 1 ,contw +0x2581 005023 loop process_hev_loop +0x2582 005024 bmark0 mark_esco ,end_of_packet +0x2583 005025 parse demod ,bucket ,16 +0x2584 005026 nsetflag crc_failed ,mark_esco_rxok ,mark +0x2585 005027 branch error_payload ,crc_failed +0x2586 005028 branch ack_payload +: 005031 process_poll: +0x2587 005032 branch end_of_packet +: 005034 process_dm3: +: 005035 process_dm5: +0x2588 005036 set1 mark_longpacket ,mark +: 005037 process_dm1: +0x2589 005038 enable decode_fec2 +0x258a 005039 branch process_dmh +: 005041 process_dh3: +: 005042 process_dh5: +0x258b 005043 set1 mark_longpacket ,mark +: 005044 process_3dh1: +0x258c 005045 set1 psk3m ,radio_ctrl +: 005046 process_dh1: +0x258d 005047 enable decode_fec0 +: 005048 process_dmh: +0x258e 005049 bpatch patch0b_1 ,mem_patch0b +0x258f 005050 bmark1 mark_rxbuf_inuse ,end_of_packet +0x2590 005051 isolate0 psk ,radio_ctrl +0x2591 005052 branch process_dmh_noedr ,true +0x2592 005053 disable enable_white +0x2593 005054 enable decode_fec0 +0x2594 005055 disable decode_fec2 +0x2595 005056 add clkn_bt ,2 ,timeup +0x2596 005057 correlate clkn_bt ,meet +0x2597 005058 nbranch error_payload ,sync +0x2598 005059 set1 mark_longpacket ,mark +0x2599 005060 enable enable_white +: 005061 process_dmh_noedr: +0x259a 005062 bpatch patch0b_2 ,mem_patch0b +0x259b 005063 enable encrypt +0x259c 005064 enable enable_crc +0x259d 005065 parse demod ,bucket ,3 +0x259e 005066 rshift8 pwindow ,pdata +0x259f 005067 store 1 ,mem_lch_code +0x25a0 005068 parse demod ,bucket ,5 +0x25a1 005069 bmark1 mark_longpacket ,process_dmh_long +0x25a2 005070 rshift3 pwindow ,loopcnt +0x25a3 005071 rshift3 loopcnt ,loopcnt +0x25a4 005072 branch process_dmh_common +: 005073 process_dmh_long: +0x25a5 005074 parse demod ,bucket ,5 +0x25a6 005075 rshift pwindow ,loopcnt +0x25a7 005076 parse demod ,bucket ,3 +: 005077 process_dmh_common: +0x25a8 005078 bpatch patch0b_3 ,mem_patch0b +0x25a9 005079 deposit loopcnt +0x25aa 005080 store 2 ,mem_len +0x25ab 005081 branch process_dmh_data_end ,blank +0x25ac 005082 isub mask3ff ,null +0x25ad 005083 branch error_payload ,positive +0x25ae 005084 bpatch patch0b_4 ,mem_patch0b +0x25af 005085 set0 mark_fhs_eir ,mark +0x25b0 005086 fetch 1 ,mem_lch_code +0x25b1 005087 and_into 0x03 ,pdata +0x25b2 005088 arg mem_rxbuf ,contw +0x25b3 005089 beq llid_lmp ,process_lmp +0x25b4 005090 bmark1 mark_testmode ,process_dmh_data +0x25b5 005092 fetch 1 ,mem_lch_code +0x25b6 005093 and_into 0x03 ,pdata +0x25b7 005094 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +0x25b8 005095 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +0x25b9 005096 branch error_payload +: 005098 process_lmp: +0x25ba 005099 fetch 2 ,mem_len +0x25bb 005100 sub pdata ,0x70 ,null +0x25bc 005101 nbranch error_payload ,positive +0x25bd 005102 bmark1 mark_old_packet ,ack_payload +0x25be 005103 branch process_dmh_data +: 005106 process_dmh_data_l2cap_start_pkt: +0x25bf 005107 bpatch patch0b_5 ,mem_patch0b +0x25c0 005108 bmark1 mark_old_packet ,ack_payload +0x25c1 005109 fetch 2 ,mem_len +0x25c2 005110 arg 0x2e0 ,temp +0x25c3 005111 isub temp ,null +0x25c4 005112 branch error_payload ,positive +0x25c5 005113 fetch 1 ,mem_l2cap_rxbuff_inuse +0x25c6 005114 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +0x25c7 005115 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +0x25c8 005116 branch end_of_packet +: 005117 process_dmh_data_into_buff1: +0x25c9 005118 jam 1 ,mem_l2cap_rxbuff_new +0x25ca 005119 fetch 2 ,mem_l2cap_rxbuff1_len +0x25cb 005120 bne 0 ,end_of_packet +0x25cc 005121 arg mem_l2cap_rxbuff1 ,contw +0x25cd 005122 branch process_dmh_data +: 005123 process_dmh_data_into_buff2: +0x25ce 005124 jam 2 ,mem_l2cap_rxbuff_new +0x25cf 005125 fetch 2 ,mem_l2cap_rxbuff2_len +0x25d0 005126 bne 0 ,end_of_packet +0x25d1 005127 arg mem_l2cap_rxbuff2 ,contw +0x25d2 005128 branch process_dmh_data +: 005130 process_dmh_data_l2cap_continue_pkt: +0x25d3 005131 bpatch patch0b_6 ,mem_patch0b +0x25d4 005132 bmark1 mark_old_packet ,ack_payload +0x25d5 005133 fetch 2 ,mem_len +0x25d6 005134 arg 0x2e0 ,temp +0x25d7 005135 isub temp ,null +0x25d8 005136 branch error_payload ,positive +0x25d9 005137 fetch 1 ,mem_l2cap_rxbuff_new +0x25da 005138 beq 1 ,process_dmh_data_l2cap_continue_pkt1 +0x25db 005139 beq 2 ,process_dmh_data_l2cap_continue_pkt2 +0x25dc 005140 branch end_of_packet +: 005141 process_dmh_data_l2cap_continue_pkt1: +0x25dd 005142 arg mem_l2cap_rxbuff1 ,contw +0x25de 005143 fetch 2 ,mem_l2cap_rxbuff1_len +0x25df 005144 iadd contw ,contw +0x25e0 005145 branch process_dmh_data +: 005146 process_dmh_data_l2cap_continue_pkt2: +0x25e1 005147 arg mem_l2cap_rxbuff2 ,contw +0x25e2 005148 fetch 2 ,mem_l2cap_rxbuff2_len +0x25e3 005149 iadd contw ,contw +: 005150 process_dmh_data: +0x25e4 005151 parse demod ,bucket ,8 +0x25e5 005152 rshift3 pwindow ,pdata +0x25e6 005153 istore 1 ,contw +0x25e7 005154 loop process_dmh_data +: 005155 process_dmh_data_end: +0x25e8 005156 bpatch patch0b_7 ,mem_patch0b +0x25e9 005157 parse demod ,bucket ,16 +0x25ea 005158 branch error_payload_crc ,crc_failed +0x25eb 005159 fetch 1 ,mem_l2cap_flow_ctrl_flag +0x25ec 005160 beq l2cap_flow_ctrl_enable ,end_of_packet +0x25ed 005161 bmark1 mark_testmode ,process_dmh_cont +0x25ee 005162 bmark1 mark_old_packet ,redundant_payload +0x25ef 005163 fetch 1 ,mem_lch_code +0x25f0 005164 compare 3 ,pdata ,3 +0x25f1 005165 branch process_dmh_cont ,true +0x25f2 005166 fetch 2 ,mem_len +0x25f3 005167 branch process_dmh_cont ,blank +0x25f4 005168 bpatch patch0c_0 ,mem_patch0c +0x25f5 005169 fetch 1 ,mem_l2cap_rxbuff_new +0x25f6 005170 beq 1 ,process_l2cap_pass_crc_buff1 +0x25f7 005171 beq 2 ,process_l2cap_pass_crc_buff2 +0x25f8 005172 branch assert +: 005173 process_l2cap_pass_crc_buff1: +0x25f9 005174 fetch 2 ,mem_l2cap_rxbuff1_len +0x25fa 005175 fetcht 2 ,mem_len +0x25fb 005176 iadd temp ,pdata +0x25fc 005177 store 2 ,mem_l2cap_rxbuff1_len +0x25fd 005178 beq 0 ,assert +0x25fe 005179 fetcht 2 ,mem_l2cap_rxbuff1 +0x25ff 005180 increase 4 ,temp +0x2600 005181 isub temp ,null +0x2601 005182 call l2cap_buff1_inuse ,zero +0x2602 005183 branch process_dmh_cont +: 005184 process_l2cap_pass_crc_buff2: +0x2603 005185 fetch 2 ,mem_l2cap_rxbuff2_len +0x2604 005186 fetcht 2 ,mem_len +0x2605 005187 iadd temp ,pdata +0x2606 005188 store 2 ,mem_l2cap_rxbuff2_len +0x2607 005189 beq 0 ,assert +0x2608 005190 fetcht 2 ,mem_l2cap_rxbuff2 +0x2609 005191 add temp ,4 ,temp +0x260a 005192 isub temp ,null +0x260b 005193 call l2cap_buff2_inuse ,zero +0x260c 005194 branch process_dmh_cont +: 005195 process_dmh_cont: +0x260d 005196 bpatch patch0c_1 ,mem_patch0c +0x260e 005197 fetcht 1 ,mem_state_map +0x260f 005198 fetch 1 ,mem_lch_code +0x2610 005199 compare 3 ,pdata ,0x03 +0x2611 005200 setflag true ,smap_rxlmp ,temp +0x2612 005201 nsetflag true ,smap_rxl2cap ,temp +0x2613 005202 storet 1 ,mem_state_map +0x2614 005203 nbranch process_dmh_cont_rxbuf_not_use ,true +0x2615 005204 set1 mark_rxbuf_inuse ,mark +: 005205 process_dmh_cont_rxbuf_not_use: +0x2616 005206 bmark0 mark_testmode ,ack_payload +0x2617 005207 isolate1 smap_rxlmp ,temp +0x2618 005208 branch ack_payload ,true +0x2619 005209 fetch 2 ,mem_tst_pktcnt_crc +0x261a 005210 increase 1 ,pdata +0x261b 005211 store 2 ,mem_tst_pktcnt_crc +0x261c 005212 set1 mark_loopback ,mark +0x261d 005213 set0 smap_rxl2cap ,temp +0x261e 005214 set0 mark_rxbuf_inuse ,mark +0x261f 005215 storet 1 ,mem_state_map +: 005216 ack_payload: +0x2620 005217 bpatch patch0c_2 ,mem_patch0c +0x2621 005218 fetcht 1 ,mem_temp_arq +0x2622 005219 fetch 1 ,mem_arq +0x2623 005220 set1 arqnx ,pdata +0x2624 005221 isolate1 seqn ,temp +0x2625 005222 setflag true ,seqn ,pdata +0x2626 005223 isolate1 mark_am_addr_broadcast ,mark +0x2627 005224 setflag true ,bcast1 ,pdata +0x2628 005225 store 1 ,mem_arq +0x2629 005226 fetch 2 ,mem_len +0x262a 005227 nbranch end_of_packet ,blank +0x262b 005228 fetch 1 ,mem_state_map +0x262c 005229 set0 smap_rxl2cap ,pdata +0x262d 005230 store 1 ,mem_state_map +0x262e 005231 fetch 1 ,mem_lch_code +0x262f 005232 compare 0x01 ,pdata ,0x07 +0x2630 005234 branch end_of_packet +: 005236 error_header: +0x2631 005237 bpatch patch0c_3 ,mem_patch0c +0x2632 005238 disable match +0x2633 005239 fetch 2 ,mem_rx_hec_err +0x2634 005240 increase 1 ,pdata +0x2635 005241 store 2 ,mem_rx_hec_err +0x2636 005242 branch end_of_packet +: 005243 error_payload_crc: +0x2637 005244 fetch 2 ,mem_rx_crc_err +0x2638 005245 increase 1 ,pdata +0x2639 005246 store 2 ,mem_rx_crc_err +0x263a 005247 call discard_pkt +0x263b 005248 bmark0 mark_testmode ,error_payload +0x263c 005249 set1 mark_loopback ,mark +: 005250 error_payload: +0x263d 005251 branch end_of_packet +: 005253 discard_pkt: +0x263e 005254 bpatch patch0c_4 ,mem_patch0c +0x263f 005255 fetch 1 ,mem_lch_code +0x2640 005256 compare 3 ,pdata ,0x03 +0x2641 005257 nbranch discard_pkt_l2cap ,true +: 005258 discard_pkt_lmp: +0x2642 005259 fetcht 1 ,mem_state_map +0x2643 005260 set0 smap_rxlmp ,temp +0x2644 005261 storet 1 ,mem_state_map +0x2645 005262 rtn +: 005263 discard_pkt_l2cap: +0x2646 005266 fetcht 1 ,mem_state_map +0x2647 005267 set0 smap_rxl2cap ,temp +0x2648 005268 storet 1 ,mem_state_map +0x2649 005269 branch h4_send_acl_trigger_clear +: 005271 redundant_payload: +0x264a 005272 fetch 1 ,mem_arq +0x264b 005273 set1 arqnx ,pdata +0x264c 005274 store 1 ,mem_arq +: 005275 end_of_packet: +0x264d 005276 bpatch patch0c_5 ,mem_patch0c +0x264e 005277 disable encode_fec0 +0x264f 005278 disable encode_fec2 +0x2650 005279 disable decode_fec0 +0x2651 005280 disable decode_fec2 +0x2652 005281 disable enable_crc +0x2653 005282 disable encrypt +0x2654 005283 disable enable_white +0x2655 005284 branch shutdown_radio ,is_rx +0x2656 005285 until null ,tx_clear +0x2657 005286 nop 100 +0x2658 005287 branch shutdown_radio +: 005289 process_fhs: +0x2659 005290 bpatch patch0c_6 ,mem_patch0c +0x265a 005291 enable enable_crc +0x265b 005292 enable decode_fec2 +0x265c 005293 parse demod ,bucket ,72 +0x265d 005294 isolate1 58 ,pdata +0x265e 005295 setflag true ,mark_fhs_eir ,mark +0x265f 005296 copy bt_adr ,temp +0x2660 005297 ialigned bt_adr +0x2661 005298 ialigned fhs0 +0x2662 005299 pulse recalc +0x2663 005300 setsect 2 ,0xfffff +0x2664 005301 setsect 3 ,0x0ffff +0x2665 005302 nop 32 +0x2666 005303 iverify fhs_parity +0x2667 005304 deposit lap +0x2668 005305 store 3 ,extm_lap +0x2669 005306 deposit uap +0x266a 005307 store 1 ,extm_uap +0x266b 005308 copy temp ,bt_adr +0x266c 005309 branch fhs_parity_ok ,true +0x266d 005310 branch error_payload +: 005311 fhs_parity_ok: +0x266e 005312 bpatch patch0c_7 ,mem_patch0c +0x266f 005313 parse demod ,bucket ,72 +0x2670 005314 ialigned fhs1 +0x2671 005315 ialigned am_addr +0x2672 005316 ialigned nap +0x2673 005317 ialigned regb +0x2674 005318 force 0 ,pdata +0x2675 005319 parse demod ,bucket ,16 +0x2676 005320 branch error_payload ,crc_failed +0x2677 005321 setarg 0x0ffffffc +0x2678 005322 iand regb ,pdata +0x2679 005323 store 4 ,mem_clke_bt +0x267a 005324 deposit fhs_class +0x267b 005325 store 3 ,extm_class +0x267c 005326 deposit fhs_misc +0x267d 005327 store 1 ,extm_fhs_misc +0x267e 005328 deposit am_addr +0x267f 005329 store 1 ,extm_newconn_am_addr +0x2680 005330 deposit nap +0x2681 005331 store 2 ,extm_nap +0x2682 005332 deposit bt_clk +0x2683 005333 inject rxf ,32 +0x2684 005334 compare type_fhs ,type ,0x0f +0x2685 005335 setflag true ,mark_fhs_already_good ,mark +0x2686 005336 branch end_of_packet +: 005338 clear_got_tx: +0x2687 005339 bpatch patch0d_0 ,mem_patch0d +0x2688 005340 fetch 1 ,mem_arq +0x2689 005341 rtnbit0 wack +0x268a 005342 set0 wack ,pdata +0x268b 005343 setflip seqnx ,pdata +0x268c 005344 store 1 ,mem_arq +0x268d 005345 fetch 1 ,mem_last_type +0x268e 005346 beq type_lmp ,clear_got_txlmp +0x268f 005347 rtneq type_hv3 +0x2690 005348 fetch 1 ,mem_op +0x2691 005349 rtnbit0 op_txl2cap ,pdata +0x2692 005350 set0 op_txl2cap ,pdata +0x2693 005351 set1 op_pkt_comp ,pdata +0x2694 005352 store 1 ,mem_op +0x2695 005353 set0 mark_tx_l2cap ,mark +0x2696 005354 fetch 2 ,mem_l2cap_tx_multi_offset +0x2697 005355 nrtn blank +0x2698 005356 fetch 1 ,mem_op +0x2699 005357 set0 op_pkt_comp ,pdata +0x269a 005358 store 1 ,mem_op +0x269b 005359 branch l2cap_malloc_free +: 005361 clear_got_txlmp: +0x269c 005362 bpatch patch0d_1 ,mem_patch0d +0x269d 005363 fetch 1 ,mem_lmo_header_opcode +0x269e 005364 rshift pdata ,pdata +0x269f 005365 beq lmp_start_encryption_req ,start_encryption +0x26a0 005366 beq lmp_stop_encryption_req ,stop_encryption +0x26a1 005367 beq lmp_unsniff_req ,sniff_exit +0x26a2 005368 beq lmp_escape ,clear_lmp_escape +0x26a3 005369 rtnne lmp_accepted +0x26a4 005370 fetch 1 ,mem_lmo_payload +0x26a5 005371 beq lmp_sco_link_req ,sco_link_req_by_slave +0x26a6 005372 beq lmp_start_encryption_req ,clear_send_setup_complete +0x26a7 005373 rtn +: 005375 clear_lmp_escape: +0x26a8 005376 fetch 1 ,mem_lmo_payload +0x26a9 005377 set1 7 ,pdata +0x26aa 005378 rtn +: 005379 clear_send_setup_complete: +0x26ab 005380 rtn master +0x26ac 005381 fetch 1 ,mem_state +0x26ad 005382 rtnbit1 state_conn_comp +0x26ae 005383 jam lmp_setup_complete ,mem_lmo_opcode2 +0x26af 005384 rtn +: 005387 sco_link_req_by_slave: +0x26b0 005388 rtn master +0x26b1 005389 fetch 1 ,mem_mode +0x26b2 005390 isolate1 send_sco_when_slave ,pdata +0x26b3 005391 branch clean_mem_mode ,true +0x26b4 005393 rtn +: 005394 clean_mem_mode: +0x26b5 005395 set0 send_sco_when_slave ,pdata +0x26b6 005396 store 1 ,mem_mode +0x26b7 005397 rtn +: 005399 start_encryption: +0x26b8 005400 bpatch patch0d_2 ,mem_patch0d +0x26b9 005401 fetch 1 ,mem_state_map +0x26ba 005402 set1 smap_encryption ,pdata +0x26bb 005403 store 1 ,mem_state_map +0x26bc 005404 jam 1 ,core_encrypt +0x26bd 005405 fetch 1 ,mem_state +0x26be 005406 isolate1 state_conn_comp ,pdata +0x26bf 005407 rtn +: 005409 stop_encryption: +0x26c0 005410 bpatch patch0d_3 ,mem_patch0d +0x26c1 005411 fetch 1 ,mem_state_map +0x26c2 005412 set0 smap_encryption ,pdata +0x26c3 005413 store 1 ,mem_state_map +0x26c4 005414 jam 0 ,core_encrypt +0x26c5 005415 rtn +: 005418 sniff_init: +0x26c6 005419 bpatch patch0d_4 ,mem_patch0d +0x26c7 005420 copy clkn_bt ,pdata +0x26c8 005421 store 4 ,mem_lpm_delay_after_sniff +0x26c9 005422 add clkn_bt ,3 ,rega +0x26ca 005423 branch sniff_init_master ,master +0x26cb 005424 add clke_bt ,3 ,rega +: 005425 sniff_init_master: +0x26cc 005426 fetcht 2 ,mem_tsniff +0x26cd 005427 deposit rega +0x26ce 005428 set0 27 ,pdata +0x26cf 005429 idiv temp +0x26d0 005430 fetch 2 ,mem_dsniff +0x26d1 005431 call wait_div_end +0x26d2 005432 remainder regc +0x26d3 005433 isub regc ,pdata +0x26d4 005434 branch sniff_init_nowrap ,positive +0x26d5 005435 iadd temp ,pdata +: 005436 sniff_init_nowrap: +0x26d6 005437 iadd rega ,pdata +0x26d7 005438 store 4 ,mem_sniff_anchor +0x26d8 005439 jam switch_flag_init ,mem_switch_flag +0x26d9 005440 fetch 1 ,mem_state +0x26da 005441 set1 state_insniff ,pdata +0x26db 005442 store 1 ,mem_state +0x26dc 005443 fetch 1 ,mem_sniff_attempt +0x26dd 005444 store 1 ,mem_current_sniff_attempt +0x26de 005445 setarg 0 +0x26df 005446 store 3 ,mem_sniff_rcv +0x26e0 005447 store 3 ,mem_sniff_lost +0x26e1 005448 store 1 ,mem_sniff_unint_lost +0x26e2 005449 jam bt_evt_enter_sniff ,mem_fifo_temp +0x26e3 005450 call ui_ipc_send_event +0x26e4 005451 fetch 2 ,mem_rx_window_sniff +0x26e5 005452 store 2 ,mem_rx_window +0x26e6 005453 nrtn master +0x26e7 005454 add am_addr ,-1 ,queue +0x26e8 005455 rtn +: 005457 sniff_exit: +0x26e9 005458 bpatch patch0d_5 ,mem_patch0d +0x26ea 005459 fetch 1 ,mem_state +0x26eb 005460 rtnbit0 state_insniff +0x26ec 005461 set0 state_insniff ,pdata +0x26ed 005462 store 1 ,mem_state +0x26ee 005463 fetch 2 ,mem_rx_window_init +0x26ef 005464 store 2 ,mem_rx_window +0x26f0 005465 disable wake +0x26f1 005466 jam bt_evt_exit_sniff ,mem_fifo_temp +0x26f2 005467 branch ui_ipc_send_event +: 005470 check_attempt: +0x26f3 005471 bpatch patch0d_6 ,mem_patch0d +0x26f4 005472 enable attempt +0x26f5 005473 fetch 1 ,mem_state +0x26f6 005474 bbit1 state_insniff ,check_attempt_sniff +0x26f7 005475 rtnmark1 mark_testmode +0x26f8 005476 fetch 1 ,mem_arq +0x26f9 005477 rtnbit1 wack +0x26fa 005478 fetch 1 ,mem_lmp_to_send +0x26fb 005479 nrtn blank +0x26fc 005480 fetch 1 ,mem_op +0x26fd 005481 rtnbit1 op_txl2cap +: 005482 check_attempt_nomore: +0x26fe 005483 force 0 ,pdata +0x26ff 005484 rtn +: 005486 check_attempt_sniff: +0x2700 005487 bbit0 state_insco ,check_attempt_not_sco +0x2701 005488 fetch 1 ,mem_current_sniff_attempt +0x2702 005489 beq 2 ,check_attempt_sniff_restore_sco +0x2703 005490 fetch 1 ,mem_arq +0x2704 005491 bbit1 wack ,check_attempt_notimeout +0x2705 005492 bmark0 mark_esco_rxok ,check_attempt_notimeout +: 005493 check_attempt_sniff_restore_sco: +0x2706 005494 nbranch check_attempt_notimeout ,master +0x2707 005495 fetch 1 ,mem_lmp_to_send +0x2708 005496 nbranch check_attempt_notimeout ,blank +: 005497 check_attempt_sco_master: +0x2709 005498 fetch 1 ,mem_sco_poll +0x270a 005499 increase -1 ,pdata +0x270b 005500 store 1 ,mem_sco_poll +0x270c 005501 nbranch check_attempt_nomore ,blank +0x270d 005502 jam param_sco_poll ,mem_sco_poll +0x270e 005503 branch check_attempt_notimeout +: 005510 check_attempt_not_sco: +0x270f 005511 fetch 1 ,mem_current_sniff_attempt +0x2710 005512 bne 1 ,check_attempt_notimeout +0x2711 005513 fetch 1 ,mem_current_sniff_timeout +0x2712 005514 branch check_attempt_notimeout ,blank +0x2713 005515 increase -1 ,pdata +0x2714 005516 store 1 ,mem_current_sniff_timeout +0x2715 005517 fetch 1 ,mem_arq +0x2716 005518 rtnbit1 wack +0x2717 005519 nrtn match +: 005520 check_attempt_notimeout: +0x2718 005521 fetch 1 ,mem_current_sniff_attempt +0x2719 005522 increase -1 ,pdata +0x271a 005523 store 1 ,mem_current_sniff_attempt +0x271b 005524 rtn +: 005535 sniff_check_window: +0x271c 005536 bpatch patch0d_7 ,mem_patch0d +0x271d 005537 disable swfine +0x271e 005538 copy temp ,stop_watch +0x271f 005539 call context_search_sniff_window +0x2720 005540 disable user +0x2721 005541 nrtn zero +0x2722 005542 force 0 ,stop_watch +0x2723 005543 enable user +0x2724 005544 rtn +: 005547 check_esco_amaddr: +0x2725 005548 fetch 1 ,mem_esco_addr +0x2726 005549 icompare 0xff ,am_addr +0x2727 005550 rtn +: 005553 parse_l2cap: +0x2728 005554 bpatch patch0e_0 ,mem_patch0e +0x2729 005555 set0 mark_rxbuf_inuse ,mark +: 005556 parse_l2cap_cont: +0x272a 005557 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x272b 005558 fetch 1 ,mem_l2cap_rxbuff_inuse +0x272c 005559 rtn blank +0x272d 005560 isolate1 l2cap_inuse_buff1 ,pdata +0x272e 005561 arg mem_l2cap_rxbuff1 ,contr +0x272f 005562 call process_rx_l2cap_pkt ,true +0x2730 005563 bpatch patch0e_1 ,mem_patch0e +0x2731 005564 fetch 1 ,mem_l2cap_rx_done +0x2732 005565 beq l2cap_rx_done ,parse_l2cap_release_buff1 +0x2733 005567 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x2734 005568 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2735 005569 rtnbit0 l2cap_inuse_buff2 +0x2736 005570 arg mem_l2cap_rxbuff2 ,contr +0x2737 005571 call process_rx_l2cap_pkt +0x2738 005572 fetch 1 ,mem_l2cap_rx_done +0x2739 005573 beq l2cap_rx_done ,parse_l2cap_release_buff2 +0x273a 005574 rtn +: 005576 parse_l2cap_release_buff1: +0x273b 005577 fetch 1 ,mem_l2cap_rxbuff_inuse +0x273c 005578 set0 l2cap_inuse_buff1 ,pdata +0x273d 005579 store 1 ,mem_l2cap_rxbuff_inuse +0x273e 005580 setarg 0 +0x273f 005581 store 2 ,mem_l2cap_rxbuff1_len +0x2740 005582 rtn +: 005583 parse_l2cap_release_buff2: +0x2741 005584 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2742 005585 set0 l2cap_inuse_buff2 ,pdata +0x2743 005586 store 1 ,mem_l2cap_rxbuff_inuse +0x2744 005587 setarg 0 +0x2745 005588 store 2 ,mem_l2cap_rxbuff2_len +0x2746 005589 rtn +: 005591 l2cap_buff1_inuse: +0x2747 005592 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2748 005593 set1 l2cap_inuse_buff1 ,pdata +0x2749 005594 store 1 ,mem_l2cap_rxbuff_inuse +0x274a 005595 rtn +: 005597 l2cap_buff2_inuse: +0x274b 005598 fetch 1 ,mem_l2cap_rxbuff_inuse +0x274c 005599 set1 l2cap_inuse_buff2 ,pdata +0x274d 005600 store 1 ,mem_l2cap_rxbuff_inuse +0x274e 005601 rtn +: 005607 slave_send_access: +0x274f 005608 bpatch patch0e_2 ,mem_patch0e +0x2750 005609 add clke_bt ,1 ,bt_clk +0x2751 005610 call fetch_extm_bt_adr +0x2752 005611 force 0x03 ,freq_mode +0x2753 005612 call tx_radio_freq +0x2754 005613 call start_transmitter +0x2755 005614 call start_tx_external +0x2756 005615 branch send_access_word +: 005618 slave_conn_send_packet: +0x2757 005619 bpatch patch0e_3 ,mem_patch0e +0x2758 005620 call rf_setup_time_slave_slot +0x2759 005621 deposit clke_bt +0x275a 005622 fetcht 4 ,mem_next_btclk +0x275b 005623 isub temp ,pdata +0x275c 005624 rtnne 1 +0x275d 005625 compare type_null ,type ,0x1f +0x275e 005626 nbranch slave_conn_send_access ,true +0x275f 005627 fetch 1 ,mem_rx_type +0x2760 005628 rtn blank +: 005629 slave_conn_send_access: +0x2761 005630 call slave_send_access +: 005631 transmit_packet: +0x2762 005632 compare type_id ,type ,0x1f +0x2763 005633 branch end_of_packet ,true +0x2764 005634 rshift bt_clk ,temp +0x2765 005635 or temp ,0x40 ,white_init +: 005636 transmit_packet_whitened: +0x2766 005637 bpatch patch0e_4 ,mem_patch0e +0x2767 005638 enable enable_white +0x2768 005639 enable enable_hec +0x2769 005640 enable encode_fec1 +0x276a 005641 set0 mark_longpacket ,mark +0x276b 005642 deposit am_addr +0x276c 005643 inject mod ,3 +0x276d 005644 deposit type +0x276e 005645 inject mod ,4 +0x276f 005646 fetch 1 ,mem_arq +0x2770 005647 inject bucket ,4 +0x2771 005648 inject mod ,3 +0x2772 005649 enable enable_parity +0x2773 005650 inject mod ,8 +0x2774 005651 disable encode_fec1 +0x2775 005652 disable enable_parity +0x2776 005653 disable enable_hec +0x2777 005654 set0 psk3m ,radio_ctrl +0x2778 005655 arg 0 ,temp +0x2779 005656 call reserve_slot +0x277a 005657 bpatch patch0e_5 ,mem_patch0e +0x277b 005658 and type ,0x1f ,pdata +0x277c 005659 beq type_lmp ,transmit_lmp +0x277d 005660 beq type_null ,end_of_packet +0x277e 005661 beq type_poll ,end_of_packet +0x277f 005662 beq type_fhs ,transmit_fhs +0x2780 005663 beq type_dm1 ,transmit_dm1 +0x2781 005664 beq type_dh1 ,transmit_dh1 +0x2782 005665 beq type_hv3 ,transmit_hev +0x2783 005666 beq type_3dh1 ,transmit_3dh1 +0x2784 005667 arg 4 ,temp +0x2785 005668 call reserve_slot +0x2786 005669 beq type_dm3 ,transmit_dm3 +0x2787 005670 beq type_dh3 ,transmit_dh3 +0x2788 005671 arg 8 ,temp +0x2789 005672 call reserve_slot +0x278a 005673 beq type_dh5 ,transmit_dh5 +0x278b 005674 branch transmit_dm5 +: 005677 transmit_hev: +0x278c 005678 bpatch patch0e_6 ,mem_patch0e +0x278d 005679 enable encode_fec0 +0x278e 005680 enable enable_crc +0x278f 005681 enable encrypt +0x2790 005682 force 30 ,loopcnt +0x2791 005683 arg mem_sco_obuf ,contr +: 005684 transmit_ev_loop: +0x2792 005685 ifetch 1 ,contr +0x2793 005686 inject mod ,8 +0x2794 005687 loop transmit_ev_loop +0x2795 005688 bmark1 mark_esco ,transmit_end +0x2796 005689 branch end_of_packet +: 005691 transmit_fhs: +0x2797 005692 bpatch patch0e_7 ,mem_patch0e +0x2798 005693 fetch 1 ,mem_fhs_am_addr +0x2799 005694 icopy am_addr +0x279a 005695 fetch 1 ,mem_fhs_misc +0x279b 005696 icopy fhs_misc +0x279c 005697 fetch 3 ,mem_class +0x279d 005698 icopy fhs_class +0x279e 005699 fetch 2 ,mem_nap +0x279f 005700 icopy nap +0x27a0 005701 enable enable_crc +0x27a1 005702 enable encode_fec2 +0x27a2 005703 copy bt_adr ,rega +0x27a3 005704 call fetch_self_bt_adr +0x27a4 005705 pulse recalc +0x27a5 005706 nop 32 +0x27a6 005707 copy bt_clk ,timeup +0x27a7 005708 fetch 4 ,mem_clkn_bt +0x27a8 005709 icopy bt_clk +0x27a9 005710 preload fhs0 +0x27aa 005711 set1 58 ,pdata +0x27ab 005712 inject mod ,72 +0x27ac 005713 preload fhs1 +0x27ad 005714 inject mod ,72 +0x27ae 005715 copy timeup ,bt_clk +0x27af 005716 copy rega ,bt_adr +0x27b0 005717 enable enable_parity +0x27b1 005718 inject mod ,16 +0x27b2 005719 disable enable_parity +0x27b3 005720 branch end_of_packet +: 005722 transmit_lmp: +0x27b4 005723 bpatch patch0f_0 ,mem_patch0f +0x27b5 005724 enable encrypt +0x27b6 005725 enable enable_crc +0x27b7 005726 enable encode_fec2 +0x27b8 005727 fetch 1 ,mem_lmo_header_length +0x27b9 005728 and pdata ,0x1f8 ,temp +0x27ba 005729 arg mem_lmo_header_length ,contr +0x27bb 005730 increase 8 ,temp +: 005731 transmit_lmp_loop: +0x27bc 005732 add temp ,-72 ,regc +0x27bd 005733 nbranch transmit_lmp_finish ,positive +0x27be 005734 ifetch 9 ,contr +0x27bf 005735 inject mod ,72 +0x27c0 005736 copy regc ,temp +0x27c1 005737 branch transmit_lmp_loop +: 005738 transmit_lmp_finish: +0x27c2 005739 ifetch 9 ,contr +0x27c3 005740 iinject mod ,temp +0x27c4 005741 branch transmit_end +: 005743 transmit_dm1: +0x27c5 005744 enable encode_fec2 +0x27c6 005745 branch transmit_dmh +: 005746 transmit_dm3: +: 005747 transmit_dm5: +0x27c7 005748 enable encode_fec2 +0x27c8 005749 set1 mark_longpacket ,mark +0x27c9 005750 branch transmit_dmh +: 005752 transmit_3dh1: +0x27ca 005753 set1 psk3m ,radio_ctrl +: 005754 transmit_dh1: +0x27cb 005755 enable encode_fec0 +0x27cc 005756 branch transmit_dmh +: 005758 transmit_dh3: +: 005759 transmit_dh5: +0x27cd 005760 set1 psk3m ,radio_ctrl +0x27ce 005761 enable encode_fec0 +0x27cf 005762 set1 mark_longpacket ,mark +: 005764 transmit_dmh: +0x27d0 005765 bpatch patch0f_1 ,mem_patch0f +0x27d1 005766 fetch 1 ,mem_state_map +0x27d2 005767 bbit0 smap_edr ,transmit_noedr +0x27d3 005768 sub type ,3 ,null +0x27d4 005769 branch transmit_noedr ,positive +0x27d5 005770 disable encrypt +0x27d6 005771 disable encode_fec2 +0x27d7 005772 enable encode_fec0 +0x27d8 005773 disable enable_white +0x27d9 005774 set1 psk ,radio_ctrl +0x27da 005775 isolate1 psk3m ,radio_ctrl +0x27db 005776 branch transmit_edr3m ,true +0x27dc 005777 setarg 0xabeee +0x27dd 005778 inject mod ,20 +0x27de 005779 branch transmit_edr_sync_end +: 005780 transmit_edr3m: +0x27df 005781 setarg 0x5faeba +0x27e0 005782 inject mod ,24 +0x27e1 005783 setarg 0x12 +0x27e2 005784 inject mod ,6 +: 005785 transmit_edr_sync_end: +0x27e3 005786 enable enable_white +0x27e4 005787 set1 mark_longpacket ,mark +: 005788 transmit_noedr: +0x27e5 005789 enable encrypt +0x27e6 005790 enable enable_crc +0x27e7 005791 bmark1 mark_loopback ,transmit_loopback +0x27e8 005792 fetch 1 ,mem_tx_lch +0x27e9 005793 inject mod ,3 +0x27ea 005794 fetch 2 ,mem_tx_len +0x27eb 005795 iforce loopcnt +0x27ec 005796 bmark1 mark_longpacket ,transmit_long +0x27ed 005797 inject mod ,5 +0x27ee 005798 branch transmit_stuff +: 005799 transmit_long: +0x27ef 005800 inject mod ,13 +: 005801 transmit_stuff: +0x27f0 005802 deposit loopcnt +0x27f1 005803 branch transmit_end ,blank +0x27f2 005804 fetch 2 ,mem_txptr +0x27f3 005805 iforce contr +: 005806 transmit_stuff_loop: +0x27f4 005807 ifetch 1 ,contr +0x27f5 005808 inject mod ,8 +0x27f6 005809 loop transmit_stuff_loop +: 005812 transmit_end: +0x27f7 005813 enable enable_parity +0x27f8 005814 inject mod ,16 +0x27f9 005815 disable enable_parity +0x27fa 005816 call set_wait_ack +0x27fb 005817 fetch 1 ,mem_state_map +0x27fc 005818 bbit0 smap_edr ,end_of_packet +0x27fd 005819 force 0 ,pdata +0x27fe 005820 inject mod ,6 +0x27ff 005821 branch end_of_packet +: 005824 transmit_loopback: +0x2800 005825 bpatch patch0f_2 ,mem_patch0f +0x2801 005826 bmark1 mark_longpacket ,transmit_loopback_long +: 005827 transmit_loopback_short: +0x2802 005828 fetch 1 ,mem_lch_code +0x2803 005829 inject mod ,3 +0x2804 005830 fetch 1 ,mem_len +0x2805 005831 iforce regc +0x2806 005832 inject mod ,5 +0x2807 005833 branch transmit_loopback_cont +: 005834 transmit_loopback_long: +0x2808 005835 fetch 1 ,mem_lch_code +0x2809 005836 inject mod ,3 +0x280a 005837 fetch 2 ,mem_len +0x280b 005838 iforce regc +0x280c 005839 inject mod ,13 +: 005840 transmit_loopback_cont: +0x280d 005841 arg mem_rxbuf ,contr +: 005842 transmit_loopback_loop: +0x280e 005843 copy regc ,null +0x280f 005844 branch transmit_loopback_end ,zero +0x2810 005845 ifetch 1 ,contr +0x2811 005846 inject mod ,8 +0x2812 005847 increase -1 ,regc +0x2813 005848 branch transmit_loopback_loop +: 005849 transmit_loopback_end: +0x2814 005850 fetch 2 ,mem_tst_pktcnt_dmh +0x2815 005851 increase 1 ,pdata +0x2816 005852 store 2 ,mem_tst_pktcnt_dmh +0x2817 005853 branch transmit_end +: 005856 apply_switch_clke: +0x2818 005857 fetch 4 ,mem_clke_bt +0x2819 005858 add pdata ,7 ,rega +0x281a 005859 fetch 2 ,mem_slot_offset +0x281b 005860 nbranch apply_switch_nozero ,blank +0x281c 005861 increase -3 ,rega +0x281d 005862 branch apply_switch_wait_loop +: 005863 apply_switch_nozero: +0x281e 005864 mul32 pdata ,12 ,pdata +0x281f 005865 hfetcht 2 ,core_halfslot +0x2820 005866 increase 1 ,temp +: 005867 apply_switch_loop: +0x2821 005868 isub temp ,pdata +0x2822 005869 nbranch apply_switch_bt ,positive +0x2823 005870 increase -1 ,rega +0x2824 005871 branch apply_switch_loop +: 005872 apply_switch_bt: +0x2825 005873 sub pdata ,0 ,pdata +: 005874 apply_switch_wait_loop: +0x2826 005875 until null ,oneslot +0x2827 005876 compare 0 ,clkn_bt ,3 +0x2828 005877 nbranch apply_switch_wait_loop ,true +0x2829 005878 iforce clke_rt +0x282a 005879 copy rega ,clke_bt +0x282b 005880 iforce clke_rt +0x282c 005881 rtn +: 005884 calc_slot_offset: +0x282d 005885 bpatch patch0f_3 ,mem_patch0f +0x282e 005886 until null ,halfslot +0x282f 005887 deposit clke +0x2830 005888 iforce contr +0x2831 005889 rshift16 ,pdata ,pdata +0x2832 005890 isub clkn_bt ,loopcnt +0x2833 005891 and_into 3 ,loopcnt +0x2834 005892 nbranch calc_bt_portion ,zero +0x2835 005893 force 0 ,pdata +0x2836 005894 branch calc_skip_bt +: 005895 calc_bt_portion: +0x2837 005896 arg 3750 ,temp +0x2838 005897 force 0 ,pdata +: 005898 calc_slot_offset_loop: +0x2839 005899 iadd temp ,pdata +0x283a 005900 loop calc_slot_offset_loop +: 005901 calc_skip_bt: +0x283b 005902 iadd contr ,pdata +0x283c 005903 div pdata ,12 +0x283d 005904 call wait_div_end +0x283e 005905 quotient pdata +0x283f 005906 store 2 ,mem_slot_offset +0x2840 005907 rtn +: 005909 calc_clke_offset: +0x2841 005910 bpatch patch0f_4 ,mem_patch0f +0x2842 005911 deposit clke +0x2843 005912 copy clkn ,temp +0x2844 005913 isub temp ,null +0x2845 005914 nsetflag positive ,44 ,pdata +0x2846 005915 isub temp ,temp +0x2847 005916 setarg 3750 +0x2848 005917 isolate0 15 ,temp +0x2849 005918 branch calc_clke_pos ,true +0x284a 005919 setarg -61786 +0x284b 005920 iadd temp ,temp +: 005921 calc_clke_pos: +0x284c 005922 storet 6 ,mem_le_clk_offset +0x284d 005923 rtn le +0x284e 005924 storet 6 ,mem_clk_offset +0x284f 005925 rtn +: 005927 calc_clke: +0x2850 005928 disable clknt +0x2851 005929 fetch 6 ,mem_le_clk_offset +0x2852 005930 branch calc_clke2 ,le +0x2853 005931 fetch 6 ,mem_clk_offset +: 005932 calc_clke2: +0x2854 005933 iadd clkn ,alarm +0x2855 005934 increase 10 ,alarm +0x2856 005935 setarg 3750 +0x2857 005936 isub alarm ,pdata +0x2858 005937 isolate0 15 ,pdata +0x2859 005938 branch calc_clke_pos_adj ,true +0x285a 005939 setarg 0xf15a +0x285b 005940 iadd alarm ,alarm +: 005941 calc_clke_pos2: +0x285c 005942 copy alarm ,clke +0x285d 005943 rtn +: 005944 calc_clke_pos_adj: +0x285e 005945 force 0 ,null +0x285f 005946 branch calc_clke_pos2 +: 005953 calc_radio_freq: +0x2860 005954 bpatch patch0f_5 ,mem_patch0f +0x2861 005955 call set_sync_on +0x2862 005956 copy bt_clk ,pdata +0x2863 005957 and_into 0x180 ,pdata +0x2864 005958 compare 3 ,freq_mode ,0x07 +0x2865 005959 nbranch freq_not_connection ,true +0x2866 005960 rshift3 pdata ,pdata +0x2867 005961 iadd freq_index ,pdata +0x2868 005962 branch do_hop_mod_now +: 005963 freq_not_connection: +0x2869 005964 copy freq_index ,pdata +: 005965 do_hop_mod_now: +0x286a 005966 div pdata ,79 +0x286b 005967 pulse recalc +0x286c 005968 call wait_div_end +0x286d 005969 remainder rega +0x286e 005970 add rega ,-40 ,temp +0x286f 005971 branch odd_half ,positive +0x2870 005972 lshift rega ,temp +0x2871 005973 branch freq_result +: 005974 odd_half: +0x2872 005975 lshift temp ,temp +0x2873 005976 increase 1 ,temp +: 005977 freq_result: +0x2874 005978 bpatch patch0f_6 ,mem_patch0f +0x2875 005979 fetch 1 ,mem_mode +0x2876 005980 bbit0 afh_change ,afh_process_con +: 005981 afh_process_0: +0x2877 005982 fetch 4 ,mem_afh_instant +0x2878 005983 isub bt_clk ,null +0x2879 005984 branch afh_process_con ,positive +0x287a 005985 call afh_clear +0x287b 005986 fetch 1 ,mem_afh_new_mod +0x287c 005987 rtn blank +0x287d 005988 fetch 1 ,mem_mode +0x287e 005989 set1 afh_enable ,pdata +0x287f 005990 store 1 ,mem_mode +0x2880 005991 fetch 5 ,mem_afh_map_new +0x2881 005992 store 5 ,mem_afh_map_lo +0x2882 005993 ifetch 5 ,contr +0x2883 005994 store 5 ,mem_afh_map_hi +0x2884 005995 call afh_process_freq_map +: 005996 afh_process_con: +0x2885 005997 fetch 1 ,mem_mode +0x2886 005998 rtnbit0 afh_enable +0x2887 005999 isolate1 1 ,bt_clk +0x2888 006000 branch afh_same_channel ,true +0x2889 006001 rshift3 temp ,rega +0x288a 006002 and temp ,7 ,queue +0x288b 006003 setarg mem_afh_map_lo +0x288c 006004 iadd rega ,rega +0x288d 006005 ifetch 1 ,rega +0x288e 006006 qisolate0 pdata +0x288f 006007 branch afh_process_1 ,true +0x2890 006008 deposit temp +0x2891 006009 branch afh_process_end +: 006010 afh_process_1: +0x2892 006011 fetch 1 ,mem_afh_used +0x2893 006012 iforce regb +0x2894 006013 deposit bt_clk +0x2895 006014 and_into 0x180 ,pdata +0x2896 006015 rshift3 pdata ,pdata +0x2897 006016 iadd freq_index ,pdata +0x2898 006017 idiv regb +0x2899 006018 setarg mem_afh_map +0x289a 006019 call wait_div_end +0x289b 006020 remainder rega +0x289c 006021 iadd rega ,contr +0x289d 006022 ifetch 1 ,contr +: 006023 afh_process_end: +0x289e 006024 store 1 ,mem_afh_index +0x289f 006025 iforce temp +0x28a0 006026 rtn +: 006028 afh_same_channel: +0x28a1 006029 fetch 1 ,mem_afh_index +0x28a2 006030 iforce temp +0x28a3 006031 rtn +: 006033 afh_clear: +0x28a4 006034 fetch 1 ,mem_mode +0x28a5 006035 set0 afh_enable ,pdata +0x28a6 006036 set0 afh_change ,pdata +0x28a7 006037 store 1 ,mem_mode +0x28a8 006038 rtn +: 006044 afh_process_freq_map: +0x28a9 006045 bpatch patch0f_7 ,mem_patch0f +0x28aa 006046 arg mem_afh_map ,contw +0x28ab 006047 force 10 ,loopcnt +0x28ac 006048 call memset0 +0x28ad 006049 arg mem_afh_map ,contw +0x28ae 006050 force 0 ,regc +0x28af 006051 force 2 ,queue +: 006052 process_freq_3: +0x28b0 006053 fetch 5 ,mem_afh_map_lo +0x28b1 006054 iforce temp +0x28b2 006055 compare 2 ,queue ,0xff +0x28b3 006056 branch process_freq_1 ,true +0x28b4 006057 rshift temp ,temp +: 006058 process_freq_1: +0x28b5 006059 isolate0 0 ,temp +0x28b6 006060 branch process_freq_0 ,true +0x28b7 006061 deposit regc +0x28b8 006062 istore 1 ,contw +: 006063 process_freq_0: +0x28b9 006064 rshift2 temp ,temp +0x28ba 006065 increase 2 ,regc +0x28bb 006066 compare 40 ,regc ,0xfe +0x28bc 006067 nbranch process_freq_2 ,true +0x28bd 006068 fetch 5 ,mem_afh_map_hi +0x28be 006069 iforce temp +0x28bf 006070 compare 2 ,queue ,0xff +0x28c0 006071 branch process_freq_2 ,true +0x28c1 006072 rshift temp ,temp +: 006073 process_freq_2: +0x28c2 006074 sub regc ,78 ,null +0x28c3 006075 branch process_freq_1 ,positive +0x28c4 006076 force 1 ,regc +0x28c5 006077 increase -1 ,queue +0x28c6 006078 nbranch process_freq_3 ,zero +0x28c7 006079 arg mem_afh_map ,rega +0x28c8 006080 deposit contw +0x28c9 006081 isub rega ,pdata +0x28ca 006082 store 1 ,mem_afh_used +0x28cb 006083 rtn +: 006085 rx_radio_freq: +0x28cc 006086 bpatch patch10_0 ,mem_patch10 +0x28cd 006087 call calc_radio_freq +0x28ce 006088 fetch 1 ,mem_debug_config +0x28cf 006089 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +0x28d0 006090 fetcht 1 ,mem_rx_fixed_freq +: 006091 rx_radio_freq_now: +0x28d1 006092 branch set_freq_rx +: 006095 tx_radio_freq: +0x28d2 006096 bpatch patch10_1 ,mem_patch10 +0x28d3 006097 call calc_radio_freq +0x28d4 006098 fetch 1 ,mem_debug_config +0x28d5 006099 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +0x28d6 006100 fetcht 1 ,mem_tx_fixed_freq +: 006101 tx_radio_freq_now: +0x28d7 006102 branch set_freq_tx +: 006105 fetch_giac: +0x28d8 006106 force 0 ,uap +0x28d9 006107 fetch 3 ,mem_glap +0x28da 006108 iforce lap +0x28db 006109 rtn +: 006111 fetch_page_bt_adr: +0x28dc 006112 bpatch patch10_2 ,mem_patch10 +0x28dd 006113 fetch 1 ,mem_hci_puap +0x28de 006114 icopy uap +0x28df 006115 fetch 3 ,mem_hci_plap +0x28e0 006116 icopy lap +0x28e1 006117 rtn +: 006119 fetch_self_bt_adr: +0x28e2 006120 bpatch patch10_3 ,mem_patch10 +0x28e3 006121 fetch 2 ,mem_nap +0x28e4 006122 icopy nap +0x28e5 006123 fetch 1 ,mem_uap +0x28e6 006124 icopy uap +0x28e7 006125 fetch 3 ,mem_lap +0x28e8 006126 icopy lap +0x28e9 006127 rtn +: 006129 fetch_extm_bt_adr: +0x28ea 006130 bpatch patch10_4 ,mem_patch10 +0x28eb 006131 fetch 2 ,mem_pnap +0x28ec 006132 icopy nap +0x28ed 006133 fetch 1 ,mem_puap +0x28ee 006134 icopy uap +0x28ef 006135 fetch 3 ,mem_plap +0x28f0 006136 icopy lap +0x28f1 006137 rtn +: 006140 fetch_diac: +0x28f2 006141 bmark1 mark_all_diac ,fetch_diac_do +0x28f3 006142 rtnmark0 mark_inquiry_state +0x28f4 006143 rtnmark0 mark_periodical_diac +: 006144 fetch_diac_do: +0x28f5 006145 and_into -256 ,lap +0x28f6 006146 pulse recalc +0x28f7 006147 nop 32 +0x28f8 006148 rtn +: 006151 shutdown_radio: +0x28f9 006152 bpatch patch10_5 ,mem_patch10 +0x28fa 006153 branch shutdown_radio0 ,is_rx +0x28fb 006154 jam 0xd4 ,rf_tx_pa_ib +0x28fc 006155 nop 4 +0x28fd 006156 jam 0xd2 ,rf_tx_pa_ib +0x28fe 006157 nop 4 +0x28ff 006158 jam 0xd1 ,rf_tx_pa_ib +0x2900 006159 nop 4 +0x2901 006160 fetch 1 ,mem_tx_power +0x2902 006161 beq tx_power_0db ,shutdown_radio_0db +0x2903 006162 beq tx_power_3db ,shutdown_radio_3db +0x2904 006163 beq tx_power_5db ,shutdown_radio_5db +0x2905 006164 beq tx_power_f3db ,shutdown_radio_f3db +0x2906 006165 beq tx_power_f5db ,shutdown_radio_f5db +0x2907 006166 beq tx_power_pair ,shutdown_radio_pair +: 006167 shutdown_radio_5db: +: 006168 shutdown_radio_0db: +0x2908 006169 jam 0xd0 ,rf_tx_pa_ib +0x2909 006170 jam 0xe0 ,rf_tx_pa_gc +: 006171 shutdown_radio0: +0x290a 006172 force 0 ,radio_ctrl +0x290b 006173 disable is_rx +0x290c 006174 disable is_tx +0x290d 006175 pulse packet_end +0x290e 006176 jam 0x0 ,rfen_mdm +0x290f 006177 jam 0x0 ,rfen_tx +0x2910 006178 jam 0x0 ,rfen_rx +0x2911 006179 jam 0 ,rfen_sn +0x2912 006180 jam 0x70 ,rfen_msc +0x2913 006181 jam 0x0 ,rfen_adc +0x2914 006182 rtn +: 006184 shutdown_radio_pair: +: 006185 shutdown_radio_f5db: +: 006186 shutdown_radio_f3db: +: 006187 shutdown_radio_3db: +0x2915 006188 jam 0xd0 ,rf_tx_pa_ib +0x2916 006189 jam 0xc0 ,rf_tx_pa_gc +0x2917 006190 branch shutdown_radio0 +: 006192 set_sync_on: +0x2918 006193 bpatch patch10_6 ,mem_patch10 +0x2919 006194 jam 0x0 ,rfen_mdm +0x291a 006195 jam 0x0 ,rfen_tx +0x291b 006196 jam 0x18 ,rfen_rx +0x291c 006197 jam 0xa7 ,rfen_sn +0x291d 006198 jam 0x7f ,rfen_msc +0x291e 006199 rtn +: 006201 set_freq_rx: +0x291f 006202 bpatch patch10_7 ,mem_patch10 +0x2920 006204 storet 1 ,mem_last_freq +0x2921 006205 add temp ,rx_freq_offset ,rega +0x2922 006206 jam 0x07 ,rf_balun_ctrim +0x2923 006207 branch rf_write_freq +: 006208 rf_rx_enable: +0x2924 006209 bpatch patch11_0 ,mem_patch11 +0x2925 006210 jam 0xcf ,rfen_tx +0x2926 006211 nop 10 +0x2927 006212 jam 0xff ,rfen_rx +0x2928 006213 jam 0xaf ,rfen_sn +0x2929 006214 jam 0xff ,rfen_msc +0x292a 006215 nop 10 +0x292b 006216 jam 0xa0 ,rfen_mdm +0x292c 006217 rtn +: 006219 set_freq_tx_offset: +0x292d 006220 fetch 1 ,mem_250k_freq_enable +0x292e 006221 branch set_freq_tx_2m_offset ,blank +: 006222 set_freq_tx_0m_offset: +0x292f 006223 add temp ,2 ,rega +0x2930 006224 rtn +: 006225 set_freq_tx_2m_offset: +0x2931 006226 add temp ,0 ,rega +0x2932 006227 rtn +: 006229 set_freq_tx: +0x2933 006230 bpatch patch11_1 ,mem_patch11 +0x2934 006231 storet 1 ,mem_last_freq +0x2935 006232 call set_freq_tx_offset +0x2936 006233 call rf_write_freq +0x2937 006234 setarg param_pll_setup +0x2938 006235 call sleep +: 006236 txon: +0x2939 006237 jam 0x1 ,rfen_adc +0x293a 006238 jam 0x3c ,rfen_rx +0x293b 006239 jam 0xe0 ,rfen_tx +0x293c 006240 jam 0x12 ,rf_balun_ctrim +0x293d 006241 nop 10 +0x293e 006242 jam 0x01 ,rfen_mdm +0x293f 006243 jam 0x3d ,rfen_mdm +0x2940 006244 nop 10 +0x2941 006245 jam 0xb7 ,rfen_sn +0x2942 006246 nop 10 +0x2943 006247 jam 0x7f ,rfen_mdm +: 006248 txon_power_select: +0x2944 006249 fetch 1 ,mem_tx_power +0x2945 006250 beq tx_power_0db ,set_tx_power_0db +0x2946 006251 beq tx_power_3db ,set_tx_power_3db +0x2947 006252 beq tx_power_5db ,set_tx_power_5db +0x2948 006253 beq tx_power_f3db ,set_tx_power_f3db +0x2949 006254 beq tx_power_f5db ,set_tx_power_f5db +0x294a 006255 beq tx_power_pair ,set_tx_power_pair +: 006256 set_tx_power_0db: +0x294b 006257 jam 0xf0 ,rf_tx_pa_gc +0x294c 006258 call txon_common +0x294d 006259 jam 0xd8 ,rf_tx_pa_ib +0x294e 006260 rtn +: 006262 set_tx_power_3db: +0x294f 006263 jam 0xdf ,rf_tx_pa_gc +0x2950 006264 call txon_common +0x2951 006265 jam 0xdf ,rf_tx_pa_ib +0x2952 006266 rtn +: 006268 set_tx_power_5db: +0x2953 006269 jam 0xff ,rf_tx_pa_gc +0x2954 006270 call txon_common +0x2955 006271 jam 0xdf ,rf_tx_pa_ib +0x2956 006272 rtn +: 006273 set_tx_power_f3db: +0x2957 006274 jam 0xce ,rf_tx_pa_gc +0x2958 006275 call txon_common +0x2959 006276 jam 0xd8 ,rf_tx_pa_ib +0x295a 006277 rtn +: 006279 set_tx_power_f5db: +0x295b 006280 jam 0xcb ,rf_tx_pa_gc +0x295c 006281 call txon_common +0x295d 006282 jam 0xd8 ,rf_tx_pa_ib +0x295e 006283 rtn +: 006285 set_tx_power_pair: +0x295f 006286 jam 0xd0 ,rf_tx_pa_ib +0x2960 006287 jam 0xc0 ,rf_tx_pa_gc +0x2961 006288 jam 0x4c ,0x8957 +0x2962 006289 jam 0x6c ,0x8958 +0x2963 006290 jam 0x50 ,0x8959 +0x2964 006291 rtn +: 006293 txon_common: +0x2965 006294 nop 4 +0x2966 006295 jam 0xd1 ,rf_tx_pa_ib +0x2967 006296 nop 4 +0x2968 006297 jam 0xd2 ,rf_tx_pa_ib +0x2969 006298 nop 4 +0x296a 006299 jam 0xd4 ,rf_tx_pa_ib +0x296b 006300 rtn +: 006303 initialize_radio: +0x296c 006304 jam clksel_rc ,core_clksel +: 006305 initialize_radio_wait: +0x296d 006306 fetch 2 ,mem_rf_init_ptr +0x296e 006307 bbit0 14 ,initialize_radio_wait +0x296f 006308 iforce contr +0x2970 006309 arg 0x8900 ,temp +: 006310 initialize_radio_loop: +0x2971 006311 ifetch 1 ,contr +0x2972 006312 beq 0xff ,initialize_radio_cont +0x2973 006313 ior temp ,contw +0x2974 006314 ifetch 1 ,contr +0x2975 006315 istore 1 ,contw +0x2976 006316 branch initialize_radio_loop +: 006317 initialize_radio_cont: +0x2977 006318 bpatch patch11_2 ,mem_patch11 +0x2978 006319 call lpm_cal_xtal_startup +0x2979 006320 call switchto_dpllclk +0x297a 006322 setarg param_dpll_start_delay +0x297b 006323 iadd clkn_bt ,pdata +0x297c 006324 store 4 ,mem_dpll_clkn +0x297d 006325 set1 reset ,radio_ctrl +0x297e 006326 force 0 ,radio_ctrl +0x297f 006327 ncall do_rccal ,wake +0x2980 006328 branch set_rccal +: 006331 rf_write_freq: +0x2981 006332 bpatch patch11_3 ,mem_patch11 +0x2982 006333 setarg 2400 +0x2983 006334 iadd rega ,temp +0x2984 006335 fetch 1 ,mem_fcomp_mul +0x2985 006336 jam 0x04 ,rf_pll_rstn +0x2986 006337 imul32 temp ,pdata +0x2987 006338 fetcht 1 ,mem_fcomp_div +0x2988 006339 idiv temp +0x2989 006340 call wait_div_end +0x298a 006341 quotient rega +0x298b 006342 remainder pdata +0x298c 006343 lshift16 pdata ,pdata +0x298d 006344 lshift4 pdata ,pdata +0x298e 006345 idiv temp +0x298f 006346 call wait_div_end +0x2990 006347 quotient pdata +0x2991 006348 lshift8 pdata ,pdata +0x2992 006349 lshift pdata ,pdata +0x2993 006350 ior rega ,pdata +0x2994 006351 hstore 4 ,rf_pll_intg +0x2995 006352 jam 0x44 ,rf_pll_rstn +0x2996 006353 jam 0xc4 ,rf_pll_rstn +0x2997 006354 rtn +: 006357 do_rccal: +0x2998 006358 bpatch patch11_4 ,mem_patch11 +0x2999 006359 jam 0x02 ,rfen_adc +0x299a 006360 setarg 250000 +0x299b 006361 call sleep +0x299c 006362 jam 0x7f ,rfen_rx +0x299d 006363 nop 130 +0x299e 006364 jam 0x30 ,rf_rccal_ctrl +0x299f 006365 jam 0xd0 ,rfen_tx +0x29a0 006366 jam 0x70 ,rf_rccal_ctrl +0x29a1 006367 jam 0xf0 ,rf_rccal_ctrl +0x29a2 006368 force 50 ,loopcnt +: 006369 do_rccal_loop: +0x29a3 006370 hfetch 1 ,rf_rccal_result +0x29a4 006371 bbit1 5 ,do_rccal_end +0x29a5 006372 loop do_rccal_loop +: 006373 do_rccal_end: +0x29a6 006374 store 1 ,mem_rf_rccal +0x29a7 006375 jam 0 ,rfen_tx +0x29a8 006376 jam 0 ,rfen_rx +0x29a9 006377 jam 0x00 ,rfen_adc +0x29aa 006378 rtn +: 006380 set_rccal: +0x29ab 006381 bpatch patch11_5 ,mem_patch11 +0x29ac 006382 fetch 1 ,mem_rf_rccal +0x29ad 006383 set1 5 ,pdata +0x29ae 006384 hstore 1 ,rf_rccal_ctrl +0x29af 006385 hfetcht 1 ,rf_bpf_ctrim +0x29b0 006386 and_into 7 ,temp +0x29b1 006387 lshift3 pdata ,pdata +0x29b2 006388 ior temp ,pdata +0x29b3 006389 hstore 1 ,rf_bpf_ctrim +0x29b4 006390 hfetch 1 ,rf_bpf_ib +0x29b5 006391 set0 bpf_rccal ,pdata +0x29b6 006392 hstore 1 ,rf_bpf_ib +0x29b7 006393 hfetch 1 ,rf_adc_rccal +0x29b8 006394 set0 adc_rccal ,pdata +0x29b9 006395 hstore 1 ,rf_adc_rccal +0x29ba 006396 rtn +: 006398 save_rssi: +0x29bb 006399 bpatch patch11_6 ,mem_patch11 +0x29bc 006400 hfetch 2 ,rf_afc_d2a +0x29bd 006401 rshift4 pdata ,pdata +0x29be 006402 rshift3 pdata ,pdata +0x29bf 006403 sub pdata ,0 ,pdata +: 006404 bcd: +0x29c0 006405 and_into 0xff ,pdata +0x29c1 006406 div pdata ,10 +0x29c2 006407 call wait_div_end +0x29c3 006408 quotient pdata +0x29c4 006409 lshift4 pdata ,pdata +0x29c5 006410 remainder temp +0x29c6 006411 ior temp ,pdata +0x29c7 006412 store 1 ,mem_rssi +0x29c8 006413 rtn +: 006416 switchto_dpllclk: +0x29c9 006417 jam clksel_rc ,core_clksel +0x29ca 006418 hfetch 1 ,rf_clkpll_frac + 2 +0x29cb 006419 set0 4 ,pdata +0x29cc 006420 set0 5 ,pdata +0x29cd 006421 hstore 1 ,rf_clkpll_frac + 2 +0x29ce 006422 jam 0x00 ,rfen_ck +0x29cf 006423 jam 0x00 ,rfen_msc +0x29d0 006424 jam 0x70 ,rfen_msc +0x29d1 006425 jam 0xff ,rfen_ck +0x29d2 006426 hfetch 1 ,rf_clkpll_frac + 2 +0x29d3 006427 set1 4 ,pdata +0x29d4 006428 set1 5 ,pdata +0x29d5 006429 hstore 1 ,rf_clkpll_frac + 2 +0x29d6 006430 call init_lpm_ctrl +0x29d7 006431 hfetch 1 ,rf_clkpll_int +0x29d8 006432 set1 7 ,pdata +0x29d9 006433 hstore 1 ,rf_clkpll_int +0x29da 006434 set0 7 ,pdata +0x29db 006435 hstore 1 ,rf_clkpll_int +0x29dc 006436 set1 7 ,pdata +0x29dd 006437 hstore 1 ,rf_clkpll_int +0x29de 006438 jam clksel_dpll ,core_clksel +0x29df 006439 nop 1 +0x29e0 006440 jam clksel_xtal ,core_clksel +0x29e1 006441 hfetch 1 ,rf_clkpll_frac + 2 +0x29e2 006442 and_into 0xcf ,pdata +0x29e3 006443 hstore 1 ,rf_clkpll_frac + 2 +0x29e4 006444 or_into 0x30 ,pdata +0x29e5 006445 hstore 1 ,rf_clkpll_frac + 2 +0x29e6 006446 rtn +: 006449 xtal_fast_wake: +0x29e7 006450 setarg 0xf0f +0x29e8 006451 branch lpm_write_config +: 006453 init_lpm_ctrl: +0x29e9 006454 setarg 0x80f +0x29ea 006455 branch lpm_write_config +: 006459 start_receiver: +0x29eb 006460 bpatch patch11_7 ,mem_patch11 +0x29ec 006461 call rf_rx_enable +0x29ed 006462 disable is_tx +0x29ee 006463 enable is_rx +0x29ef 006464 pulse init_encrypt +0x29f0 006465 rtn +: 006467 prep_crypt: +0x29f1 006468 bpatch patch12_0 ,mem_patch12 +0x29f2 006469 fetch 1 ,mem_state_map +0x29f3 006470 isolate1 smap_encryption ,pdata +0x29f4 006471 setflag true ,0 ,pdata +0x29f5 006472 hstore 1 ,core_encrypt +0x29f6 006473 arg mem_kc ,contr +0x29f7 006474 ifetch 9 ,contr +0x29f8 006475 iforce kc_ls +0x29f9 006476 ifetch 7 ,contr +0x29fa 006477 iforce kc_ms +0x29fb 006478 fetch 1 ,mem_key_size +0x29fc 006479 add pdata ,-1 ,g1l +0x29fd 006480 pulse kc_p_activate +0x29fe 006481 rtn +: 006483 wait_access_end: +0x29ff 006484 deposit clke +0x2a00 006485 store 6 ,mem_sync_clke +0x2a01 006486 disable decode_fec0 +0x2a02 006487 nbranch shutdown_radio ,sync +0x2a03 006488 arg param_clke_cal ,clke_rt +0x2a04 006489 increase 1 ,clke_bt +0x2a05 006490 and_into 0x1fc ,clke_bt +0x2a06 006491 rtn +: 006495 wait_access_mhalfbnd: +0x2a07 006496 enable decode_fec0 +: 006497 wait_access_mhalfbnd_correlate: +0x2a08 006498 correlate null ,mhalfbnd +0x2a09 006499 branch wait_access_end ,sync +0x2a0a 006500 compare 0x02 ,clke_bt ,0x02 +0x2a0b 006501 nbranch wait_access_mhalfbnd_correlate ,true +0x2a0c 006502 branch wait_access_end +: 006504 wait_access_clkn_rt: +0x2a0d 006505 bpatch patch12_1 ,mem_patch12 +0x2a0e 006506 arg param_conn_access ,timeup +0x2a0f 006507 enable decode_fec0 +0x2a10 006508 correlate clkn_rt ,meet +0x2a11 006509 disable decode_fec0 +0x2a12 006510 nbranch shutdown_radio ,sync +0x2a13 006511 rtn +: 006513 wait_access_forever: +0x2a14 006514 bpatch patch12_2 ,mem_patch12 +0x2a15 006515 enable decode_fec0 +0x2a16 006516 correlate null ,timeout +0x2a17 006517 disable decode_fec0 +0x2a18 006518 nbranch shutdown_radio ,sync +0x2a19 006519 arg param_clke_cal ,clke_rt +0x2a1a 006520 and_into 0x1fc ,clke_bt +0x2a1b 006521 rtn +: 006524 reserve_slot: +0x2a1c 006525 bpatch patch12_3 ,mem_patch12 +0x2a1d 006526 iforce rega +0x2a1e 006527 deposit bt_clk +0x2a1f 006528 iadd temp ,timeup +0x2a20 006529 copy timeup ,pdata +0x2a21 006530 store 4 ,mem_next_btclk +0x2a22 006531 deposit rega +0x2a23 006532 rtn +: 006535 ahead_window: +0x2a24 006536 copy pdata ,temp +0x2a25 006537 bpatch patch12_4 ,mem_patch12 +0x2a26 006538 copy temp ,pdata +0x2a27 006539 call clk2bt +0x2a28 006540 lshift16 bt_clk ,pdata +0x2a29 006541 set1 44 ,pdata +0x2a2a 006542 call clk_diff +0x2a2b 006543 set0 44 ,pdata +0x2a2c 006544 call get_clk +0x2a2d 006545 call clk_diff +0x2a2e 006546 rtn user +0x2a2f 006547 call clk2rt +0x2a30 006548 iforce stop_watch +0x2a31 006549 until null ,timeout +0x2a32 006550 rtn +: 006553 setup_clk: +0x2a33 006554 bpatch patch12_5 ,mem_patch12 +0x2a34 006555 branch setup_clkn ,clknt +0x2a35 006556 until clke_rt ,meet +: 006557 skip_setup_clke: +0x2a36 006558 copy clke_bt ,temp +0x2a37 006559 branch setup_clknbt +: 006560 setup_clkn: +0x2a38 006561 branch skip_setup_clkn ,attempt +0x2a39 006562 until clkn_rt ,meet +: 006563 skip_setup_clkn: +0x2a3a 006564 copy clkn_bt ,temp +: 006565 setup_clknbt: +0x2a3b 006566 branch setup_clk11 ,user +0x2a3c 006567 compare 1 ,temp ,3 +0x2a3d 006568 nbranch setup_clk ,true +: 006569 setup_complete: +0x2a3e 006570 bpatch patch12_6 ,mem_patch12 +0x2a3f 006571 fetch 1 ,mem_state +0x2a40 006572 rtnbit0 state_inconn +0x2a41 006573 fetch 4 ,mem_next_btclk +0x2a42 006574 isub temp ,pdata +0x2a43 006575 nrtn positive +0x2a44 006576 sub pdata ,0xff ,null +0x2a45 006577 branch setup_clk ,positive +0x2a46 006578 rtn +: 006579 setup_clk11: +0x2a47 006580 compare 3 ,temp ,3 +0x2a48 006581 nbranch setup_clk ,true +0x2a49 006582 branch setup_complete +: 006584 rf_setup_time: +0x2a4a 006585 bpatch patch12_7 ,mem_patch12 +0x2a4b 006586 arg param_rf_setup ,timeup +0x2a4c 006587 branch setup_clk +: 006589 rf_setup_time_slave_slot: +0x2a4d 006590 disable user +0x2a4e 006591 branch rf_setup_time +: 006593 rf_setup_time_master_slot: +0x2a4f 006594 enable user +0x2a50 006595 branch rf_setup_time +: 006597 start_transmitter: +0x2a51 006598 bpatch patch13_0 ,mem_patch13 +0x2a52 006599 call prep_crypt +0x2a53 006600 disable is_rx +0x2a54 006601 enable is_tx +0x2a55 006602 rtn +: 006606 start_tx_native: +0x2a56 006607 bpatch patch13_1 ,mem_patch13 +0x2a57 006608 arg param_tx_setup ,timeup +0x2a58 006609 until clkn_rt ,meet +0x2a59 006610 pulse init_encrypt +0x2a5a 006611 rtn +: 006613 start_rx_native: +0x2a5b 006614 bpatch patch13_2 ,mem_patch13 +0x2a5c 006615 arg param_rx_setup ,timeup +0x2a5d 006616 until clkn_rt ,meet +0x2a5e 006617 rtn +: 006620 start_tx_external: +0x2a5f 006621 bpatch patch13_3 ,mem_patch13 +0x2a60 006622 arg param_tx_setup ,timeup +0x2a61 006623 until clke_rt ,meet +0x2a62 006624 pulse init_encrypt +0x2a63 006625 rtn +: 006627 send_access_word: +0x2a64 006628 bpatch patch13_4 ,mem_patch13 +0x2a65 006629 preload access +0x2a66 006630 enable encode_fec0 +0x2a67 006631 set1 txgfsk ,radio_ctrl +0x2a68 006632 inject mod ,72 +0x2a69 006633 disable encode_fec0 +0x2a6a 006634 rtn +: 006637 scan_mode_whiten: +0x2a6b 006638 copy xin ,temp +0x2a6c 006639 or_into 0x60 ,temp +0x2a6d 006640 copy temp ,white_init +0x2a6e 006641 rtn +: 006646 get_free_amaddr: +0x2a6f 006647 bpatch patch13_5 ,mem_patch13 +0x2a70 006648 fetch 1 ,mem_current_amaddr +0x2a71 006649 increase 1 ,pdata +0x2a72 006650 bne param_esco_addr ,get_free_amaddr_cont +0x2a73 006651 force 1 ,pdata +: 006652 get_free_amaddr_cont: +0x2a74 006653 store 1 ,mem_current_amaddr +0x2a75 006654 iforce am_addr +0x2a76 006655 rtn +: 006657 get_clk: +0x2a77 006658 copy clkn ,temp +0x2a78 006659 rtn master +0x2a79 006660 copy clke ,temp +0x2a7a 006661 rtn +: 006663 get_clkbt: +0x2a7b 006664 deposit clkn_bt +0x2a7c 006665 rtn master +0x2a7d 006666 deposit clke_bt +0x2a7e 006667 rtn +: 006670 supervision_update: +0x2a7f 006671 bpatch patch13_6 ,mem_patch13 +0x2a80 006672 fetcht 4 ,mem_supervision_timer +0x2a81 006673 call get_clkbt +0x2a82 006674 isub temp ,timeup +0x2a83 006675 deposit timeup +0x2a84 006676 fetcht 2 ,mem_supervision_to +0x2a85 006677 lshift temp ,temp +0x2a86 006678 isub temp ,pdata +0x2a87 006679 rtn +: 006681 supervision_flush: +0x2a88 006682 bpatch patch13_7 ,mem_patch13 +0x2a89 006683 call get_clkbt +0x2a8a 006684 store 4 ,mem_supervision_timer +0x2a8b 006685 rtn +: 006687 assert: +0x2a8c 006688 bpatch patch14_0 ,mem_patch14 +0x2a8d 006689 branch assert +: 006691 loop: +0x2a8e 006692 branch loop +: 006694 sleep: +0x2a8f 006695 rtn blank +0x2a90 006697 rshift pdata ,pdata +0x2a91 006698 increase -3 ,pdata +: 006699 sleep_loop: +0x2a92 006700 increase -1 ,pdata +0x2a93 006701 nbranch sleep_loop ,zero +0x2a94 006702 force 0 ,pdata +0x2a95 006703 rtn +: 006707 init_param: +0x2a96 006709 arg 0x10 ,loopcnt +0x2a97 006710 arg 0 ,contw +0x2a98 006711 call memset0 +0x2a99 006712 arg mem_le_state ,contw +0x2a9a 006713 arg 10 ,loopcnt +0x2a9b 006714 call memset0 +0x2a9c 006715 jam 0 ,mem_sp_calc +0x2a9d 006716 jam 0 ,mem_fifo_temp +0x2a9e 006717 jam 0 ,mem_le_testtype +0x2a9f 006718 jam 0 ,mem_debug_config +0x2aa0 006719 jam 0 ,mem_lmp_conn_state +0x2aa1 006720 bpatch patch14_1 ,mem_patch14 +0x2aa2 006721 jam 0 ,mem_connection_options +0x2aa3 006722 jam 0 ,mem_tester_emulate +0x2aa4 006723 jam 0 ,mem_tester_cnt +0x2aa5 006724 setarg param_glap +0x2aa6 006725 store 3 ,mem_glap +0x2aa7 006726 setarg param_acl_pktlen +0x2aa8 006727 store 2 ,mem_acl_pktlen +0x2aa9 006728 jam param_sco_pktlen ,mem_sco_pktlen +0x2aaa 006729 jam param_acl_pktcnt ,mem_acl_pktcnt +0x2aab 006730 jam param_sco_pktcnt ,mem_sco_pktcnt +0x2aac 006731 setarg param_hci_version +0x2aad 006732 store 3 ,mem_hci_version +0x2aae 006737 jam 0x60 ,mem_fhs_misc +0x2aaf 006738 jam param_max_slot ,mem_max_slot +0x2ab0 006739 jam 0x02 ,mem_fw_ver +0x2ab1 006740 fetch 1 ,mem_ssp_enable +0x2ab2 006741 ncall init_memp ,blank +0x2ab3 006742 fetch 1 ,mem_le_secure_connect_enable +0x2ab4 006743 ncall init_memp_256 ,blank +0x2ab5 006744 bpatch patch14_2 ,mem_patch14 +0x2ab6 006745 rtn wake +0x2ab7 006746 setarg 0 +0x2ab8 006747 store 2 ,mem_tx_len +0x2ab9 006748 rshift clkn_bt ,pdata +0x2aba 006749 store 4 ,mem_last_clkn +0x2abb 006750 rtn +: 006757 lpmstate: +0x2abc 006758 setarg 0xee21 +0x2abd 006759 hstore 2 ,core_clkoff +0x2abe 006760 hfetch 4 ,core_gpio_in +0x2abf 006761 store 4 ,mem_saved_gpio_in +0x2ac0 006762 hfetch 1 ,core_lpm_ldocnt +0x2ac1 006763 store 1 ,mem_wakup_from_power_flag +0x2ac2 006764 bbit0 gpio_latch ,loadcode +0x2ac3 006765 enable wake +0x2ac4 006766 bbit0 cold_wake ,lpmwake +0x2ac5 006767 disable wake +0x2ac6 006768 deposit auxcnt +0x2ac7 006769 nbranch lpmwake ,blank +0x2ac8 006770 hfetch 1 ,core_lpm_ctrl + 3 +0x2ac9 006771 bbit1 reload_code ,lpmwake +0x2aca 006772 arg param_hibernate_clks ,temp +0x2acb 006773 branch lpm_enter_sleep +: 006774 lpmwake: +0x2acc 006775 hfetch 3 ,core_lpm_xtalcnt +0x2acd 006776 hstore 3 ,core_lpm_reg +0x2ace 006777 ifetch 1 ,contr +0x2acf 006778 or_into isogate_mask ,pdata +0x2ad0 006779 istore 1 ,contw +0x2ad1 006780 call lpm_write_ctrl2 +0x2ad2 006781 hfetch 1 ,core_lpm_isogate +0x2ad3 006782 set1 enable_retmem ,pdata +0x2ad4 006783 hstore 1 ,core_lpm_isogate +0x2ad5 006784 call lpm_write_ctrl2 +0x2ad6 006785 call lpm_load_context ,wake +0x2ad7 006786 hfetch 1 ,core_lpm_reg + 2 +0x2ad8 006787 set0 gpio_latch ,pdata +0x2ad9 006788 hstore 1 ,core_lpm_reg + 2 +0x2ada 006789 call lpm_write_ctrl2 +0x2adb 006790 nbranch loadcode ,wake +0x2adc 006791 rtnmark0 mark_otp_encrypt +0x2add 006792 jam lock_otp ,core_misc_ctrl +0x2ade 006793 rtn +: 006795 lpm_load_context: +0x2adf 006796 fetch 1 ,mem_saved_spidctrl +0x2ae0 006797 hstore 1 ,core_spid_ctrl +0x2ae1 006798 fetch 3 ,mem_saved_gsel +0x2ae2 006799 hstore 3 ,core_gpio_sel +0x2ae3 006800 fetch 4 ,mem_saved_gpio + 4 +0x2ae4 006801 hstore 4 ,core_gpio_out0 +0x2ae5 006802 fetch 4 ,mem_saved_gpio +0x2ae6 006803 hstore 4 ,core_gpio_oe0 +0x2ae7 006804 fetch 8 ,mem_saved_gpio + 8 +0x2ae8 006805 hstore 8 ,core_gpio_pu0 +0x2ae9 006806 fetch 8 ,mem_saved_mark +0x2aea 006807 iforce mark +0x2aeb 006808 hfetch 8 ,core_gpio_wakeup_low +0x2aec 006809 store 8 ,mem_gpio_wakeup_low +0x2aed 006810 call load_ucode +0x2aee 006811 rtn +: 006813 lpm_save_context: +0x2aef 006814 deposit mark +0x2af0 006815 store 8 ,mem_saved_mark +0x2af1 006816 hfetch 8 ,core_gpio_oe0 +0x2af2 006817 store 8 ,mem_saved_gpio +0x2af3 006818 ifetch 8 ,contr +0x2af4 006819 istore 8 ,contw +0x2af5 006820 hfetch 3 ,core_gpio_sel +0x2af6 006821 store 3 ,mem_saved_gsel +0x2af7 006822 hfetch 1 ,core_spid_ctrl +0x2af8 006823 store 1 ,mem_saved_spidctrl +0x2af9 006824 branch lpm_write_gpio_wakeup +: 006826 lpo_calibration: +0x2afa 006827 hfetch 1 ,core_bist_ctrl +0x2afb 006828 nbranch lpo_cal_inited ,blank +0x2afc 006829 fetch 3 ,mem_clks_per_lpo +0x2afd 006830 nrtn blank +0x2afe 006831 jam 0xc0 ,core_bist_ctrl +0x2aff 006832 jam ccnt_start ,core_misc_ctrl +: 006833 lpo_cal_inited: +0x2b00 006834 hfetch 1 ,core_perf_status +0x2b01 006835 rtnbit0 1 +0x2b02 006836 hfetch 3 ,core_clk_counter +0x2b03 006837 store 3 ,mem_clks_per_lpo +0x2b04 006838 rtn +: 006842 lpm_adjust_clk: +0x2b05 006843 bpatch patch14_3 ,mem_patch14 +0x2b06 006844 deposit clke +0x2b07 006845 call clk_diff_rt +0x2b08 006846 fetcht 4 ,mem_sleep_counter_all +0x2b09 006847 sub temp ,0xff ,null +0x2b0a 006848 rtn positive +0x2b0b 006849 lshift8 pdata ,pdata +0x2b0c 006850 lshift4 pdata ,pdata +0x2b0d 006851 idiv temp +0x2b0e 006852 call wait_div_end +0x2b0f 006853 quotient pdata +0x2b10 006854 arg param_lpm_adjmax ,temp +0x2b11 006855 call ceiling +0x2b12 006856 store 1 ,mem_lpm_adjust +0x2b13 006857 nbranch lpm_adjust_positive ,user +0x2b14 006858 sub pdata ,0 ,pdata +: 006859 lpm_adjust_positive: +0x2b15 006860 fetcht 3 ,mem_clks_per_lpo +0x2b16 006861 iadd temp ,pdata +0x2b17 006862 store 3 ,mem_clks_per_lpo +: 006863 lpm_clear_counter: +0x2b18 006864 setarg 0 +0x2b19 006865 store 4 ,mem_sleep_counter_all +0x2b1a 006866 rtn +: 006870 lpm_doze: +0x2b1b 006871 fetch 1 ,mem_lpm_config + 2 +0x2b1c 006872 set1 reload_code ,pdata +0x2b1d 006873 store 1 ,mem_lpm_config + 2 +0x2b1e 006874 branch lpm_hibernate_normal +: 006878 lpm_hibernate: +0x2b1f 006879 arg param_hibernate_clks ,temp +0x2b20 006880 fetch 1 ,mem_lpm_config + 1 +0x2b21 006881 set0 7 ,pdata +0x2b22 006882 store 1 ,mem_lpm_config + 1 +: 006883 lpm_hibernate_normal: +0x2b23 006884 bpatch patch14_4 ,mem_patch14 +0x2b24 006885 call lpm_write_gpio_wakeup +0x2b25 006886 fetch 1 ,mem_lpm_hibernate_switch +0x2b26 006887 store 1 ,mem_lpm_xtalcnt + 4 +0x2b27 006888 fetch 1 ,mem_lpm_xtalcnt + 2 +0x2b28 006889 set1 cold_wake ,pdata +0x2b29 006890 store 1 ,mem_lpm_xtalcnt + 2 +: 006893 lpm_sleep: +0x2b2a 006894 bpatch patch14_5 ,mem_patch14 +0x2b2b 006895 call xtal_fast_wake +0x2b2c 006896 fetch 4 ,mem_sleep_counter_all +0x2b2d 006897 iadd temp ,pdata +0x2b2e 006898 store 4 ,mem_sleep_counter_all +0x2b2f 006899 call lpm_save_context +0x2b30 006900 fetch 5 ,mem_lpm_xtalcnt +0x2b31 006901 hstore 4 ,core_lpm_reg +0x2b32 006902 rshift32 pdata ,rega +0x2b33 006903 until null ,lpo_edge +0x2b34 006904 deposit clkn +0x2b35 006905 store 6 ,mem_sleep_clkn +0x2b36 006906 jam lpmreg_sel_ctrl2 ,core_lpm_wr +0x2b37 006907 until null ,lpo_edge +0x2b38 006908 until null ,lpo_edge +0x2b39 006909 deposit rega +0x2b3a 006910 hstore 1 ,core_lpm_isogate +0x2b3b 006911 jam lpmreg_sel_ctrl2 ,core_lpm_wr +: 006912 lpm_enter_sleep: +0x2b3c 006913 until null ,lpo_edge +0x2b3d 006914 until null ,lpo_edge +0x2b3e 006915 hstoret 4 ,core_lpm_reg +0x2b3f 006916 jam lpmreg_sel_counter ,core_lpm_wr +0x2b40 006917 until null ,never +: 006922 lpm_recover_clk: +0x2b41 006923 bpatch patch14_6 ,mem_patch14 +0x2b42 006924 setarg 0 +0x2b43 006925 copy auxcnt ,null +0x2b44 006926 branch lpm_recover_timeout ,zero +0x2b45 006927 hfetch 1 ,core_lpm_xtalcnt +0x2b46 006928 hfetcht 1 ,core_lpm_buckcnt +0x2b47 006929 isub temp ,null +0x2b48 006930 branch lpm_recover_xtal ,positive +0x2b49 006931 deposit temp +: 006932 lpm_recover_xtal: +0x2b4a 006933 isub auxcnt ,pdata +0x2b4b 006934 increase 1 ,pdata +: 006935 lpm_recover_timeout: +0x2b4c 006936 increase 8 ,pdata +0x2b4d 006937 until null ,lpo_edge +0x2b4e 006938 iadd lpo_time ,pdata +0x2b4f 006939 fetcht 4 ,mem_sleep_counter +0x2b50 006940 iadd temp ,pdata +0x2b51 006941 fetcht 3 ,mem_clks_per_lpo +0x2b52 006942 imul32 temp ,pdata +0x2b53 006943 rshift8 pdata ,pdata +0x2b54 006944 rshift4 pdata ,pdata +0x2b55 006945 increase param_lpm_fix ,pdata +0x2b56 006946 arg 3750 ,temp +0x2b57 006947 idiv temp +0x2b58 006948 call wait_div_end +0x2b59 006949 quotient pdata +0x2b5a 006950 lshift16 pdata ,pdata +0x2b5b 006951 remainder temp +0x2b5c 006952 ior temp ,pdata +0x2b5d 006953 fetcht 6 ,mem_sleep_clkn +0x2b5e 006954 call clk_add +0x2b5f 006955 copy temp ,clkn +0x2b60 006956 fetch 6 ,mem_context + coffset_clk_offset +0x2b61 006957 call calc_clke2 +0x2b62 006958 deposit clke +0x2b63 006959 store 6 ,mem_pdatatemp +0x2b64 006960 deposit auxcnt +0x2b65 006961 istore 1 ,contw +0x2b66 006962 hfetch 1 ,core_gpio_in1 +0x2b67 006963 or_into 0xf0 ,pdata +0x2b68 006964 istore 1 ,contw +0x2b69 006965 rtn +: 006967 lpm_dispatch: +0x2b6a 006968 bpatch patch14_7 ,mem_patch14 +0x2b6b 006969 call lpo_calibration +0x2b6c 006970 fetch 3 ,mem_clks_per_lpo +0x2b6d 006971 rtn blank +0x2b6e 006972 fetch 1 ,mem_lpm_mode +0x2b6f 006973 rtn blank +0x2b70 006974 fetch 1 ,mem_ssp_enable +0x2b71 006975 branch lpm_dispatch_next ,blank +0x2b72 006976 fetch 1 ,mem_sp_local_key_invalid +0x2b73 006977 rtn blank +: 006978 lpm_dispatch_next: +0x2b74 006979 fetch 1 ,mem_le_sc_calc +0x2b75 006980 nrtn blank +0x2b76 006981 call lpm_check_wake_lock +0x2b77 006982 nrtn blank +0x2b78 006983 fetch 1 ,mem_context +0x2b79 006984 compare 3 ,pdata ,0x7 +0x2b7a 006985 nbranch lpm_dispatch_unconn ,true +0x2b7b 006986 fetch 2 ,mem_context + coffset_tsniff +0x2b7c 006987 rtn blank +0x2b7d 006988 rtn wake +0x2b7e 006989 bpatch patch15_0 ,mem_patch15 +: 006990 lpm_dispatch_next2: +0x2b7f 006991 fetcht 1 ,mem_lpm_current_mult +0x2b80 006992 fetch 2 ,mem_context + coffset_tsniff +0x2b81 006993 imul32 temp ,pdata +0x2b82 006994 rshift4 temp ,temp +0x2b83 006995 rshift2 temp ,temp +0x2b84 006996 isub temp ,pdata +0x2b85 006997 fetcht 4 ,mem_context + coffset_sniff_anchor +0x2b86 006998 iadd temp ,pdata +0x2b87 006999 fetcht 1 ,mem_lpm_overhead +0x2b88 007000 isub temp ,pdata +0x2b89 007001 lshift16 pdata ,alarm +0x2b8a 007002 bpatch patch15_1 ,mem_patch15 +0x2b8b 007003 fetch 2 ,mem_context + coffset_rx_window +0x2b8c 007004 rshift pdata ,pdata +0x2b8d 007005 call clk2bt +0x2b8e 007006 deposit alarm +0x2b8f 007007 call clk_diff +0x2b90 007008 copy clke ,temp +0x2b91 007009 call clk_diff_rt +0x2b92 007010 rtn user +: 007011 lpm_dispatch_sleep: +0x2b93 007012 call clk2lpo +: 007013 lpm_dispatch_lpo: +0x2b94 007014 bpatch patch15_2 ,mem_patch15 +0x2b95 007015 fetch 1 ,mem_lpm_xtalcnt +0x2b96 007016 isub temp ,null +0x2b97 007017 branch lpm_clear_counter ,positive +0x2b98 007018 storet 4 ,mem_sleep_counter +0x2b99 007019 call app_will_enter_lpm +0x2b9a 007020 call l2cap_lpm_save_txbuf +0x2b9b 007021 fetcht 4 ,mem_sleep_counter +0x2b9c 007022 branch lpm_sleep +: 007024 lpm_dispatch_unconn: +0x2b9d 007025 bpatch patch15_3 ,mem_patch15 +0x2b9e 007026 fetch 1 ,mem_context +0x2b9f 007027 rtnbit1 state_inconn +0x2ba0 007028 rtnbit1 state_inpage +0x2ba1 007029 fetch 1 ,mem_ssp_enable +0x2ba2 007030 branch lpm_unconn_nossp ,blank +0x2ba3 007031 fetch 1 ,mem_sp_local_key_invalid +0x2ba4 007032 rtn blank +: 007033 lpm_unconn_nossp: +0x2ba5 007034 bpatch patch15_4 ,mem_patch15 +0x2ba6 007035 fetch 1 ,mem_le_adv_enable +0x2ba7 007036 nbranch lpm_unconn_cont ,blank +0x2ba8 007037 fetch 1 ,mem_scan_mode +0x2ba9 007038 rtn blank +: 007039 lpm_unconn_cont: +0x2baa 007040 fetch 2 ,mem_lpm_interval +0x2bab 007041 rtn blank +: 007042 lpm_sleep_btclk: +0x2bac 007043 fetcht 1 ,mem_lpm_overhead +0x2bad 007044 isub temp ,pdata +0x2bae 007045 arg 7500 ,temp +0x2baf 007046 imul32 temp ,pdata +0x2bb0 007047 branch lpm_dispatch_sleep +: 007049 lpm_set_mult: +0x2bb1 007050 bpatch patch15_5 ,mem_patch15 +0x2bb2 007051 disable wake +0x2bb3 007052 fetch 1 ,mem_state +0x2bb4 007053 rtnbit0 state_insniff +0x2bb5 007054 nbranch lpm_not_match ,match +0x2bb6 007055 call lpm_match +0x2bb7 007056 fetch 2 ,mem_rx_window_sniff +0x2bb8 007057 store 2 ,mem_rx_window +0x2bb9 007058 fetch 1 ,mem_arq +0x2bba 007059 bbit1 wack ,lpm_mult_short +0x2bbb 007060 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bbc 007061 call l2cap_malloc_is_fifo_empty +0x2bbd 007062 nbranch lpm_mult_short ,blank +0x2bbe 007063 fetch 1 ,mem_classic_bt_flag +0x2bbf 007064 bbit1 short_mult_flag ,lpm_mult_short +: 007065 lpm_mult_wait_timeout: +0x2bc0 007066 jam 0 ,mem_lpm_current_mult +0x2bc1 007067 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bc2 007068 fetch 1 ,mem_lpm_mult_cnt +0x2bc3 007069 branch lpm_mult_long ,blank +0x2bc4 007070 increase -1 ,pdata +0x2bc5 007071 store 1 ,mem_lpm_mult_cnt +0x2bc6 007072 rtn +: 007075 classic_bt_set_mult_short_flag: +0x2bc7 007076 arg short_mult_flag ,queue +0x2bc8 007077 branch classic_bluetooth_set_flag +: 007079 classic_bt_clr_mult_short_flag: +0x2bc9 007080 arg short_mult_flag ,queue +0x2bca 007081 branch classic_bluetooth_clr_flag +: 007085 lpm_match: +0x2bcb 007086 jam 0 ,mem_sniff_unint_lost +0x2bcc 007087 fetch 3 ,mem_sniff_rcv +0x2bcd 007088 increase 1 ,pdata +0x2bce 007089 store 3 ,mem_sniff_rcv +0x2bcf 007090 rtn +: 007092 lpm_not_match: +0x2bd0 007093 bpatch patch15_6 ,mem_patch15 +0x2bd1 007094 fetcht 2 ,mem_rx_window_sniff +0x2bd2 007095 rshift temp ,temp +0x2bd3 007096 fetch 2 ,mem_rx_window +0x2bd4 007097 iadd temp ,pdata +0x2bd5 007098 store 2 ,mem_rx_window +: 007099 lpm_lost: +0x2bd6 007100 jam 0 ,mem_lpm_current_mult +0x2bd7 007101 fetch 3 ,mem_sniff_lost +0x2bd8 007102 increase 1 ,pdata +0x2bd9 007103 store 3 ,mem_sniff_lost +0x2bda 007104 fetch 1 ,mem_sniff_unint_lost +0x2bdb 007105 increase 1 ,pdata +0x2bdc 007106 store 1 ,mem_sniff_unint_lost +0x2bdd 007107 rtn +: 007109 lpm_mult_short: +0x2bde 007110 jam 0 ,mem_lpm_current_mult +0x2bdf 007111 fetch 1 ,mem_lpm_mult_timeout +0x2be0 007112 store 1 ,mem_lpm_mult_cnt +0x2be1 007113 rtn +: 007115 lpm_mult_long: +0x2be2 007116 fetcht 1 ,mem_lpm_mult +0x2be3 007117 storet 1 ,mem_lpm_current_mult +0x2be4 007118 rtn +: 007120 lpm_cal_xtal_startup: +0x2be5 007121 bpatch patch15_7 ,mem_patch15 +0x2be6 007122 fetch 1 ,mem_lpm_xtalcnt +0x2be7 007123 nrtn blank +0x2be8 007124 jam clksel_rc ,core_clksel +0x2be9 007125 setarg 0xf0c +0x2bea 007126 call lpm_write_config +0x2beb 007127 setarg 200000 +0x2bec 007128 call sleep +0x2bed 007129 until null ,lpo_edge +0x2bee 007130 copy lpo_time ,alarm +0x2bef 007131 call xtal_fast_wake +0x2bf0 007132 jam clksel_xtal ,core_clksel +0x2bf1 007133 nop 10 +0x2bf2 007134 until null ,lpo_edge +0x2bf3 007135 deposit lpo_time +0x2bf4 007136 isub alarm ,pdata +0x2bf5 007137 increase 0x30 ,pdata +0x2bf6 007138 arg 0xff ,temp +0x2bf7 007139 call ceiling +0x2bf8 007140 store 1 ,mem_lpm_xtalcnt +0x2bf9 007141 nop 30000 +0x2bfa 007142 nop 30000 +0x2bfb 007143 nop 30000 +0x2bfc 007144 rtn +: 007146 lpm_cal_xtal_startup_by_snooze: +0x2bfd 007147 fetch 1 ,mem_lpm_xtalcnt +0x2bfe 007148 nrtn blank +0x2bff 007149 jam 0xff ,core_xtal_stable_time +0x2c00 007150 jam clksel_rc ,core_clksel +0x2c01 007151 call xtal_fast_wake +0x2c02 007152 setarg 1000 +0x2c03 007153 iadd lpo_time ,alarm +0x2c04 007154 snooze +0x2c05 007155 deposit lpo_time +0x2c06 007156 nop 12000 +0x2c07 007157 nop 12000 +0x2c08 007158 nop 12000 +0x2c09 007159 nop 12000 +0x2c0a 007160 nop 12000 +0x2c0b 007161 nop 12000 +0x2c0c 007162 nop 12000 +0x2c0d 007163 nop 12000 +0x2c0e 007164 nop 12000 +0x2c0f 007165 isub alarm ,pdata +0x2c10 007166 add pdata ,0x30 ,pdata +0x2c11 007167 arg 0xff ,temp +0x2c12 007168 call ceiling +0x2c13 007169 store 1 ,mem_lpm_xtalcnt +0x2c14 007170 nop 30000 +0x2c15 007171 nop 30000 +0x2c16 007172 nop 30000 +0x2c17 007173 rtn +: 007178 lpm_write_config: +0x2c18 007179 arg 0xfff ,contw +0x2c19 007180 iand contw ,contw +0x2c1a 007181 fetch 1 ,mem_lpm_config +0x2c1b 007182 and_into 0xf0 ,pdata +0x2c1c 007183 lshift8 pdata ,pdata +0x2c1d 007184 ior contw ,pdata +0x2c1e 007185 hstore 2 ,core_lpm_reg +0x2c1f 007186 ifetch 2 ,contr +0x2c20 007187 istore 2 ,contw +: 007189 lpm_write_ctrl: +0x2c21 007190 setarg lpmreg_sel_ctrl +0x2c22 007191 branch lpm_write +: 007193 lpm_write_ctrl2: +0x2c23 007194 setarg lpmreg_sel_ctrl2 +: 007195 lpm_write: +0x2c24 007196 until null ,lpo_edge +0x2c25 007197 hstore 1 ,core_lpm_wr +0x2c26 007198 until null ,lpo_edge +0x2c27 007199 until null ,lpo_edge +0x2c28 007200 rtn +: 007203 lpm_write_gpio_wakeup: +0x2c29 007204 bpatch patch16_0 ,mem_patch16 +0x2c2a 007205 fetch 4 ,mem_gpio_wakeup_low +0x2c2b 007206 hstore 4 ,core_lpm_reg +0x2c2c 007207 setarg lpmreg_sel_gpiolow +0x2c2d 007208 call lpm_write +0x2c2e 007209 fetch 4 ,mem_gpio_wakeup_high +0x2c2f 007210 hstore 4 ,core_lpm_reg +0x2c30 007211 setarg lpmreg_sel_gpiohigh +0x2c31 007212 branch lpm_write +: 007214 lpm_get_wake_lock: +0x2c32 007215 fetch 2 ,mem_lpm_wake_lock +0x2c33 007216 qset1 pdata +0x2c34 007217 store 2 ,mem_lpm_wake_lock +0x2c35 007218 rtn +: 007220 lpm_put_wake_lock: +0x2c36 007221 fetch 2 ,mem_lpm_wake_lock +0x2c37 007222 qset0 pdata +0x2c38 007223 store 2 ,mem_lpm_wake_lock +0x2c39 007224 rtn +: 007228 lpm_check_wake_lock: +0x2c3a 007229 bpatch patch16_1 ,mem_patch16 +0x2c3b 007230 call app_check_wake_lock +0x2c3c 007231 fetch 2 ,mem_lpm_wake_lock +0x2c3d 007232 copy pdata ,rega +0x2c3e 007233 fetch 1 ,mem_state_map +0x2c3f 007234 isolate1 smap_rxlmp ,pdata +0x2c40 007235 setflag true ,wake_lock_lmp_rx ,rega +0x2c41 007236 fetch 1 ,mem_lmo_opcode1 +0x2c42 007237 fetcht 1 ,mem_lmo_opcode2 +0x2c43 007238 iadd temp ,pdata +0x2c44 007239 fetcht 1 ,mem_lmp_to_send +0x2c45 007240 iadd temp ,pdata +0x2c46 007241 nsetflag blank ,wake_lock_lmp_tx ,rega +0x2c47 007242 fetch 1 ,mem_le_tx_buff_used +0x2c48 007243 nsetflag blank ,wake_lock_ble_tx ,rega +0x2c49 007244 fetch 2 ,mem_l2cap_rxbuff1_len +0x2c4a 007245 fetcht 2 ,mem_l2cap_rxbuff2_len +0x2c4b 007246 iadd temp ,pdata +0x2c4c 007247 nsetflag blank ,wake_lock_l2cap_rx ,rega +0x2c4d 007248 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +0x2c4e 007249 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +0x2c4f 007250 fetch util_fifo_len ,mem_ipc_fifo_c512bt +0x2c50 007251 nsetflag blank ,wake_lock_ipc_c512bt ,rega +0x2c51 007252 fetch 1 ,mem_hci_cmd +0x2c52 007253 nsetflag blank ,wake_lock_cmd ,rega +0x2c53 007254 fetch 1 ,mem_device_option +0x2c54 007255 compare dvc_op_module ,pdata ,0xff +0x2c55 007256 call lpm_uart_wake_lock ,true +0x2c56 007257 setarg -8 +0x2c57 007258 iand rega ,rega +0x2c58 007259 copy rega ,pdata +0x2c59 007260 store 2 ,mem_lpm_wake_lock +0x2c5a 007261 rtn +: 007263 lpm_uart_wake_lock: +0x2c5b 007264 hfetch 2 ,core_uart_rxitems +0x2c5c 007265 nsetflag blank ,wake_lock_uart_rx ,rega +0x2c5d 007266 hfetch 2 ,core_uart_txitems +0x2c5e 007267 nsetflag blank ,wake_lock_uart_tx ,rega +0x2c5f 007268 rtn +: 007270 lpm_shut_down: +0x2c60 007271 hfetch 4 ,core_lpm_ctrl +0x2c61 007272 set0 27 ,pdata +0x2c62 007273 hstore 4 ,core_lpm_reg +0x2c63 007274 call lpm_write_ctrl +0x2c64 007275 branch assert +: 007277 lpm_disable_exen_output: +0x2c65 007278 hfetch 4 ,core_lpm_xtalcnt +0x2c66 007279 set0 20 ,pdata +0x2c67 007280 hstore 4 ,core_lpm_reg +0x2c68 007281 branch lpm_write_ctrl2 +: 007283 check_bt_disabled: +0x2c69 007284 fetch 2 ,mem_chip_functions +0x2c6a 007285 bbit1 bt_disabled ,assert +0x2c6b 007286 rtn +: 007287 check_ble_disabled: +0x2c6c 007288 fetch 2 ,mem_chip_functions +0x2c6d 007289 bbit1 ble_disabled ,assert +0x2c6e 007290 rtn +: 007291 check_module_disabled: +0x2c6f 007292 fetch 2 ,mem_chip_functions +0x2c70 007293 bbit1 module_disable ,assert +0x2c71 007294 rtn +: 007355 g24_dispatch: +0x2c72 007356 bpatch patch16_2 ,mem_patch16 +0x2c73 007357 call g24_head_ptr2regc +0x2c74 007358 add regc ,offset_24g_mode ,regb +0x2c75 007359 ifetch 1 ,regb +0x2c76 007361 rtneq disable_24g +0x2c77 007362 beq tx_24g ,g24_transmit_process +0x2c78 007363 beq rx_24g ,g24_receive_process +0x2c79 007364 rtn +: 007366 g24_head_ptr2regc: +0x2c7a 007367 fetcht 2 ,mem_24g_head_ptr +0x2c7b 007368 copy temp ,regc +0x2c7c 007369 rtn +: 007371 g24_receive_process_init: +0x2c7d 007372 call g24_receive_init +0x2c7e 007373 branch g24_mode_switch_init +: 007375 g24_receive_process: +0x2c7f 007376 call g24_mode_switch +0x2c80 007377 call g24_dongle_work_mode_auto +0x2c81 007378 call g24_dongle_bind_mode_auto +0x2c82 007379 branch g24_dongle_search_mode_auto +: 007382 g24_pair_init: +0x2c83 007385 call g24_set0_mem_pid +0x2c84 007386 setarg g24_pair_ch +0x2c85 007387 call g24_store_mem_ch +0x2c86 007388 call g24_store_mem_pair_txpower +0x2c87 007391 add regc ,offset_24g_paring_addr ,rega +0x2c88 007392 ifetch 4 ,rega +0x2c89 007393 branch g24_store_mem_addr +: 007395 g24_ch: +0x2c8a 007396 call g24_head_ptr2regc +0x2c8b 007397 add regc ,offset_24g_current_ch_number ,regb +0x2c8c 007398 ifetcht 1 ,regb +0x2c8d 007400 call g24_ch_temp_incre_size4 +0x2c8e 007401 add regc ,offset_24g_current_ch_number ,contw +0x2c8f 007403 branch g24_contw_istoret_1byte +: 007405 g24_ch_temp_incre_size4: +0x2c90 007406 call g24_ch_calc +0x2c91 007407 increase 1 ,temp +0x2c92 007408 and_into 3 ,temp +0x2c93 007409 rtn +: 007411 g24_ch_calc: +0x2c94 007412 add regc ,offset_24g_addr ,regb +0x2c95 007413 ifetch 1 ,regb +0x2c96 007415 and_into 0x03 ,pdata +0x2c97 007416 mul32 pdata ,4 ,rega +0x2c98 007417 add regc ,offset_24g_ch_map1 ,pdata +0x2c99 007419 iadd rega ,pdata +0x2c9a 007420 iadd temp ,contr +0x2c9b 007421 ifetch 1 ,contr +0x2c9c 007423 branch g24_store_mem_ch +: 007425 g24_set_device_addr: +0x2c9d 007426 call g24_store_mem_tx_power_temp +0x2c9e 007427 call otp_enable_chgpump +0x2c9f 007428 setarg 0x7e2 +0x2ca0 007429 arg mem_temp ,rega +0x2ca1 007430 arg 4 ,temp +0x2ca2 007431 call otpd_read_data +0x2ca3 007432 call otp_disable_chgpump +0x2ca4 007433 fetch 4 ,mem_temp +0x2ca5 007434 call g24_store_mem_device_addr +0x2ca6 007436 nrtn blank +0x2ca7 007437 fetch 4 ,mem_lap +0x2ca8 007439 branch g24_store_mem_device_addr +: 007441 g24_transmit_rf_sta_init: +0x2ca9 007442 call g24_set1_mem_rf_last_sta +0x2caa 007444 setarg 0 +0x2cab 007445 call g24_store_mem_sync_cnt +: 007447 g24_transmit_rf_ctrl_clear: +0x2cac 007448 call g24_fetch_mem_data_type +0x2cad 007450 and_into bits_data ,pdata +0x2cae 007452 branch g24_store_mem_data_type +: 007454 g24_hop_ch_enable: +0x2caf 007455 call g24_fetch_mem_data_type +0x2cb0 007457 set1 bit_hop ,pdata +0x2cb1 007458 call g24_store_mem_data_type +0x2cb2 007461 branch g24_store_mem_txpayload +: 007463 g24_transmit_hop_pac_fail: +0x2cb3 007464 call g24_fetch_mem_rf_work_stage +0x2cb4 007466 beq 1 ,g24_transmit_hop_pac_fail_wo_hop +0x2cb5 007467 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 +0x2cb6 007468 rtn +: 007470 g24_transmit_hop_pac_fail_wo_hop: +0x2cb7 007471 call g24_set2_mem_sync_cnt +: 007473 g24_transmit_hop_pac_fail_stage1: +0x2cb8 007474 add regc ,offset_24g_hop_pac_retry ,contw +0x2cb9 007475 call g24_mem_set0 +0x2cba 007477 call g24_store_mem_rf_last_sta +0x2cbb 007479 branch g24_transmit_rf_ctrl_clear +: 007481 g24_transmit_hop_pac_fail_hop_stage2: +0x2cbc 007482 call g24_set0_mem_rf_hop_ch +0x2cbd 007484 branch g24_transmit_hop_pac_fail_stage1 +: 007486 g24_transmit_pac_fail_hop_stage3: +0x2cbe 007487 add regc ,offset_24g_txfail_cnt ,rega +0x2cbf 007488 ifetch 1 ,rega +0x2cc0 007490 increase 1 ,pdata +0x2cc1 007491 add regc ,offset_24g_txfail_cnt ,contw +0x2cc2 007492 istore 1 ,contw +0x2cc3 007494 beq 0x20 ,g24_tx_attempt_fail +0x2cc4 007495 call g24_fetch_mem_rf_hop_ch +0x2cc5 007497 beq 1 ,g24_rf_hop_fastly +0x2cc6 007498 setarg 1 +0x2cc7 007499 call g24_store_mem_rf_hop_ch +: 007501 g24_rf_hop_attemp_again: +0x2cc8 007502 call g24_fetch_mem_rf_hop_ch +0x2cc9 007504 bne 1 ,g24_transmit_rf_ctrl_clear +: 007505 g24_rf_hop_fastly: +0x2cca 007506 add regc ,offset_24g_hop_fastly_cnt ,rega +0x2ccb 007507 ifetch 1 ,rega +0x2ccc 007509 increase 1 ,pdata +0x2ccd 007510 call g24_store_mem_hop_fastly_cnt +0x2cce 007512 beq 4 ,g24_rf_hop_fastly_exit +0x2ccf 007513 call g24_ch +0x2cd0 007514 call g24_set2_mem_max_retry +0x2cd1 007516 branch g24_transmit_packet +: 007518 g24_rf_hop_fastly_exit: +0x2cd2 007519 call g24_set0_mem_hop_fastly_cnt +0x2cd3 007521 branch g24_transmit_rf_ctrl_clear +: 007523 g24_set0_mem_hop_fastly_cnt: +0x2cd4 007524 setarg 0 +: 007525 g24_store_mem_hop_fastly_cnt: +0x2cd5 007526 add regc ,offset_24g_hop_fastly_cnt ,contw +0x2cd6 007527 branch g24_contw_istore_1byte +: 007529 g24_transmit_hop_pac_succ_wo_hop: +0x2cd7 007530 call g24_set2_mem_sync_cnt +: 007532 g24_transmit_hop_pac_succ: +0x2cd8 007533 call g24_set0_mem_rf_hop_ch +0x2cd9 007535 call g24_set1_mem_rf_last_sta +0x2cda 007537 branch g24_transmit_rf_ctrl_clear +: 007539 g24_transmit_succ_rf_config: +0x2cdb 007540 call g24_fetch_mem_rf_work_stage +0x2cdc 007542 beq 3 ,g24_transmit_hop_pac_succ +0x2cdd 007543 call g24_fetch_mem_data_type +0x2cde 007545 isolate0 bit_hop ,pdata +0x2cdf 007546 branch g24_transmit_rf_sta_init ,true +0x2ce0 007547 call g24_fetch_mem_rf_work_stage +0x2ce1 007549 beq 1 ,g24_transmit_hop_pac_succ_wo_hop +0x2ce2 007550 beq 2 ,g24_transmit_hop_pac_succ +0x2ce3 007551 rtn +: 007553 g24_rf_sta_check: +0x2ce4 007554 call g24_fetch_mem_pairing_sm +0x2ce5 007556 rtnne state_24g_pairing_success +0x2ce6 007557 call g24_rf_laststa_synccnt_check +0x2ce7 007558 ncall g24_rf_sync_cnt_check ,user2 +0x2ce8 007559 rtn +: 007561 g24_rf_laststa_synccnt_check: +0x2ce9 007562 disable user2 +0x2cea 007563 add regc ,offset_24g_rf_last_sta ,rega +0x2ceb 007564 ifetch 1 ,rega +0x2cec 007566 rtnne 1 +0x2ced 007567 add regc ,offset_24g_sync_cnt ,rega +0x2cee 007568 ifetch 1 ,rega +0x2cef 007570 rtnne 0 +0x2cf0 007571 setarg 1 +0x2cf1 007572 call g24_store_mem_rf_work_stage +0x2cf2 007574 call g24_set4_mem_max_retry +0x2cf3 007576 branch enable_user2 +: 007578 g24_rf_sync_cnt_check: +0x2cf4 007579 add regc ,offset_24g_sync_cnt ,rega +0x2cf5 007580 ifetch 1 ,rega +0x2cf6 007582 branch g24_rf_hop_attemp ,blank +0x2cf7 007583 increase -1 ,pdata +0x2cf8 007584 call g24_store_mem_sync_cnt +0x2cf9 007586 setarg 2 +0x2cfa 007587 call g24_store_mem_rf_work_stage +0x2cfb 007589 call g24_ch +0x2cfc 007591 branch g24_set4_mem_max_retry +: 007593 g24_store_mem_rf_work_stage: +0x2cfd 007594 add regc ,offset_24g_rf_work_stage ,contw +0x2cfe 007595 branch g24_contw_istore_1byte +: 007598 g24_rf_hop_attemp: +0x2cff 007599 setarg 3 +0x2d00 007600 call g24_store_mem_rf_work_stage +0x2d01 007602 call g24_fetch_mem_rf_hop_ch +0x2d02 007604 nbranch g24_rf_hop_attemp_again ,blank +0x2d03 007605 call g24_ch +: 007607 g24_set2_mem_max_retry: +0x2d04 007608 setarg 2 +0x2d05 007609 branch g24_store_mem_max_retry +: 007611 g24_transmit_process: +0x2d06 007612 rtnmark0 mark_24g +0x2d07 007613 set1 mark_24g_conext ,mark +0x2d08 007614 bpatch patch16_3 ,mem_patch16 +0x2d09 007615 add regc ,offset_24g_tx_without_int ,rega +0x2d0a 007616 ifetch 1 ,rega +0x2d0b 007618 beq 1 ,g24_transmit_without_int +0x2d0c 007619 call g24_timer_check +0x2d0d 007620 nbranch g24_transmit_exit ,user +0x2d0e 007621 call g24_interval_calibrate +: 007622 g24_transmit_without_int: +0x2d0f 007623 add regc ,offset_24g_tx_without_int ,contw +0x2d10 007624 call g24_mem_set0 +0x2d11 007626 call g24_txdata_prep +0x2d12 007627 nbranch g24_enter_lpm ,user +0x2d13 007628 call g24_rf_sta_check +: 007629 g24_transmit_start: +0x2d14 007630 call g24_transmit_packet +0x2d15 007631 call g24_power_ctrl +: 007632 g24_transmit_exit: +0x2d16 007633 set0 mark_24g_conext ,mark +0x2d17 007634 rtn +: 007636 g24_timer_timeout: +0x2d18 007637 rtn zero +0x2d19 007638 set1 28 ,pdata +0x2d1a 007639 rtn +: 007641 g24_interval_calibrate: +0x2d1b 007642 add regc ,offset_24g_pac_index ,rega +0x2d1c 007643 ifetch 1 ,rega +0x2d1d 007645 increase 1 ,pdata +0x2d1e 007646 add regc ,offset_24g_pac_index ,contw +0x2d1f 007647 istore 1 ,contw +0x2d20 007649 beq 4 ,g24_interval_max +0x2d21 007650 beq 5 ,g24_interval_min +0x2d22 007651 rtn +: 007652 g24_interval_max: +0x2d23 007653 add regc ,offset_24g_interval_max ,rega +0x2d24 007654 ifetch 1 ,rega +: 007656 g24_interval_update: +0x2d25 007658 add regc ,offset_24g_interval ,contw +0x2d26 007659 branch g24_contw_istore_1byte +: 007661 g24_interval_min: +0x2d27 007662 add regc ,offset_24g_pac_index ,contw +0x2d28 007663 call g24_mem_set0 +0x2d29 007665 add regc ,offset_24g_interval_min ,rega +0x2d2a 007666 ifetch 1 ,rega +0x2d2b 007668 branch g24_interval_update +: 007670 g24_txdata_prep: +0x2d2c 007671 call g24_fetch_mem_pairing_sm +0x2d2d 007673 bne state_24g_pairing_success ,g24_pairing_sm +0x2d2e 007674 bpatch patch16_4 ,mem_patch16 +0x2d2f 007675 call g24_package_data +0x2d30 007676 nbranch g24_txdata_last_pac ,user +0x2d31 007677 call g24_transmit_prep +0x2d32 007678 call g24_power_ctrl_pac_incrs +: 007679 g24_txdata_enable_tx: +0x2d33 007681 setarg ensure_on_24g +: 007682 g24_store_mem_ensure: +0x2d34 007683 add regc ,offset_24g_ensure ,contw +0x2d35 007684 branch g24_contw_istore_1byte +: 007686 g24_txdata_last_pac: +0x2d36 007687 add regc ,offset_24g_ensure ,rega +0x2d37 007688 ifetch 1 ,rega +0x2d38 007690 beq ensure_on_24g ,enable_user +0x2d39 007691 rtn +: 007693 g24_package_data: +0x2d3a 007695 add regc ,offset_24g_cb_data ,temp +0x2d3b 007696 ifetch 2 ,temp +0x2d3c 007698 call callback_func +0x2d3d 007699 nrtn user +0x2d3e 007700 copy rega ,pdata +0x2d3f 007701 store 1 ,mem_rega +0x2d40 007702 add regc ,offset_24g_abort_pac ,contw +0x2d41 007703 call g24_mem_set0 +0x2d42 007705 call g24_transmit_rf_ctrl_clear +0x2d43 007706 store 1 ,mem_24g_common_temp +0x2d44 007707 fetch 1 ,mem_rega +0x2d45 007708 copy pdata ,rega +0x2d46 007709 add rega ,1 ,temp +0x2d47 007710 arg mem_24g_common_temp + 1 ,contw +0x2d48 007711 copy rega ,loopcnt +0x2d49 007712 copy regb ,contr +0x2d4a 007713 call memcpy +0x2d4b 007714 arg mem_24g_common_temp ,rega +: 007715 g24_put_data_in_buff: +0x2d4c 007716 rtnmark0 mark_24g_conext +0x2d4d 007717 add regc ,offset_24g_datalen ,contw +0x2d4e 007718 istoret 1 ,contw +0x2d4f 007720 copy temp ,loopcnt +0x2d50 007721 add regc ,offset_24g_txbuf ,contw +0x2d51 007723 copy rega ,contr +0x2d52 007724 branch memcpy +: 007726 g24_transmit_prep: +0x2d53 007728 add regc ,offset_24g_datalen ,rega +0x2d54 007729 ifetch 1 ,rega +0x2d55 007731 increase 2 ,pdata +0x2d56 007732 add regc ,offset_24g_txlen ,contw +0x2d57 007733 istore 1 ,contw +0x2d58 007736 call g24_fetch_mem_data_type +0x2d59 007738 call g24_store_mem_txpayload +0x2d5a 007741 add regc ,offset_24g_datalen ,rega +0x2d5b 007742 ifetch 1 ,rega +0x2d5c 007744 lshift3 pdata ,pdata +0x2d5d 007745 add regc ,offset_24g_pid ,rega +0x2d5e 007746 ifetcht 1 ,rega +0x2d5f 007748 and temp ,0x03 ,temp +0x2d60 007749 lshift temp ,temp +0x2d61 007750 ior temp ,pdata +0x2d62 007751 add regc ,offset_24g_no_ack ,rega +0x2d63 007752 ifetcht 1 ,rega +0x2d64 007754 iadd temp ,pdata +0x2d65 007755 istore 1 ,contw +0x2d66 007757 add regc ,offset_24g_datalen ,rega +0x2d67 007758 ifetch 1 ,rega +0x2d68 007760 iforce loopcnt +0x2d69 007761 add regc ,offset_24g_txbuf ,contr +0x2d6a 007763 branch memcpy +: 007765 g24_send_abort_packet: +0x2d6b 007766 call g24_set1_mem_abort_pac +0x2d6c 007768 call g24_set0_mem_rf_hop_ch +0x2d6d 007770 call g24_power_ctrl_reinit +0x2d6e 007771 call g24_transmit_rf_ctrl_clear +0x2d6f 007772 store 1 ,mem_24g_common_temp +0x2d70 007773 call g24_put_data_in_buff_pre +0x2d71 007774 call g24_fetch_mem_data_type +0x2d72 007776 set1 bit_abort ,pdata +0x2d73 007777 call g24_store_mem_data_type +0x2d74 007779 call g24_transmit_prep +0x2d75 007780 call g24_txdata_enable_tx +0x2d76 007781 branch g24_transmit_start +: 007783 g24_put_data_in_buff_pre: +0x2d77 007784 store 1 ,mem_24g_common_temp + 1 +0x2d78 007785 call g24_fetch_mem_device_addr +0x2d79 007787 store 4 ,mem_24g_common_temp + 2 +0x2d7a 007788 arg 6 ,temp +0x2d7b 007789 arg mem_24g_common_temp ,rega +0x2d7c 007790 branch g24_put_data_in_buff +: 007792 g24_enter_lpm: +0x2d7d 007793 add regc ,offset_24g_abort_pac ,rega +0x2d7e 007794 ifetch 1 ,rega +0x2d7f 007796 branch g24_send_abort_packet ,blank +: 007797 g24_enter_lpm_prepare: +0x2d80 007799 add regc ,offset_24g_cb_lpm_prepare ,rega +0x2d81 007800 ifetch 2 ,rega +0x2d82 007802 branch callback_func +: 007804 g24_lpm_long_sleep: +0x2d83 007805 call g24_head_ptr2regc +0x2d84 007807 call lpo_calibration +0x2d85 007808 fetch 3 ,mem_clks_per_lpo +0x2d86 007809 rtn blank +0x2d87 007810 add regc ,offset_24g_cb_lpm_before ,temp +0x2d88 007811 ifetch 2 ,temp +0x2d89 007813 call callback_func +0x2d8a 007814 add regc ,offset_24g_enter_hibernate ,temp +0x2d8b 007815 ifetch 8 ,temp +: 007816 g24_lpm_long_sleep2: +0x2d8c 007817 call clk2lpo +0x2d8d 007818 storet 4 ,mem_sleep_counter +0x2d8e 007819 branch lpm_sleep +: 007821 g24_transmit_packet: +0x2d8f 007822 call g24_head_ptr2regc +0x2d90 007823 add regc ,offset_24g_retry ,contw +0x2d91 007824 call g24_mem_set0 +: 007826 g24_transmit_loop: +0x2d92 007827 call g24_transmit_receive_ack +0x2d93 007828 nbranch g24_retransmit ,sync +0x2d94 007829 nbranch g24_retransmit ,user3 +0x2d95 007830 call g24_ackpayload_parse +0x2d96 007831 call g24_power_ctrl_ack_incrs +: 007832 g24_transmit_next_packet: +0x2d97 007833 call g24_head_ptr2regc +0x2d98 007834 add regc ,offset_24g_pid ,rega +0x2d99 007835 ifetch 1 ,rega +0x2d9a 007837 increase 1 ,pdata +0x2d9b 007838 call g24_store_mem_pid +0x2d9c 007840 call g24_fetch_mem_pairing_sm +0x2d9d 007842 bne state_24g_pairing_success ,g24_paring_mode +0x2d9e 007843 call g24_transmit_succ_rf_config +: 007844 g24_transmit_abandon: +0x2d9f 007845 setarg 0 +0x2da0 007846 add regc ,offset_24g_txfail_cnt ,contw +0x2da1 007847 istore 2 ,contw +0x2da2 007851 setarg ensure_off_24g +0x2da3 007852 branch g24_store_mem_ensure +: 007855 g24_transmit_receive_ack: +0x2da4 007856 disable user3 +0x2da5 007857 call g24_transmit +0x2da6 007858 call g24_head_ptr2regc +0x2da7 007859 add regc ,offset_24g_no_ack ,rega +0x2da8 007860 ifetch 1 ,rega +0x2da9 007862 beq no_ack_24g ,g24_transmit_no_ack +0x2daa 007863 call g24_receive_packet +0x2dab 007864 branch g24_end_of_packet +: 007865 g24_transmit_no_ack: +0x2dac 007866 call g24_end_of_packet +0x2dad 007867 branch g24_transmit_next_packet +: 007870 g24_retransmit: +0x2dae 007871 bpatch patch16_5 ,mem_patch16 +0x2daf 007872 add regc ,offset_24g_get_ack_fail ,rega +0x2db0 007873 ifetch 1 ,rega +0x2db1 007875 increase 1 ,pdata +0x2db2 007876 add regc ,offset_24g_get_ack_fail ,contw +0x2db3 007877 istore 1 ,contw +0x2db4 007879 call g24_fetch_mem_pairing_sm +0x2db5 007881 bne state_24g_pairing_success ,g24_tx_paring_retry +0x2db6 007882 add regc ,offset_24g_retry ,rega +0x2db7 007883 ifetcht 1 ,rega +0x2db8 007885 increase 1 ,temp +0x2db9 007886 add regc ,offset_24g_retry ,contw +0x2dba 007887 istoret 1 ,contw +0x2dbb 007889 add regc ,offset_24g_max_retry ,rega +0x2dbc 007890 ifetch 1 ,rega +0x2dbd 007892 isub temp ,pdata +0x2dbe 007893 nbranch g24_transmit_loop ,blank +0x2dbf 007894 bpatch patch16_6 ,mem_patch16 +0x2dc0 007895 call g24_fetch_mem_rf_work_stage +0x2dc1 007897 beq 3 ,g24_transmit_pac_fail_hop_stage3 +0x2dc2 007898 add regc ,offset_24g_hop_pac_retry ,rega +0x2dc3 007899 ifetch 1 ,rega +0x2dc4 007901 increase 1 ,pdata +0x2dc5 007902 add regc ,offset_24g_hop_pac_retry ,contw +0x2dc6 007903 istore 1 ,contw +0x2dc7 007905 beq 2 ,g24_transmit_hop_pac_fail +0x2dc8 007906 call g24_hop_ch_enable +0x2dc9 007907 setarg 1 +0x2dca 007908 call g24_store_mem_max_retry +0x2dcb 007910 branch g24_transmit_packet +: 007912 g24_tx_paring_retry: +0x2dcc 007913 add regc ,offset_24g_get_ack_fail ,rega +0x2dcd 007914 ifetch 1 ,rega +0x2dce 007916 rtnne 0xff +0x2dcf 007917 add regc ,offset_24g_get_ack_fail ,contw +0x2dd0 007918 call g24_mem_set0 +0x2dd1 007920 branch g24_stop_24g_mode +: 007922 g24_tx_attempt_fail: +0x2dd2 007923 add regc ,offset_24g_txfail_cnt ,contw +0x2dd3 007924 call g24_mem_set0 +: 007926 g24_stop_24g_mode: +0x2dd4 007927 jam bt_evt_24g_attempt_fail ,mem_fifo_temp +0x2dd5 007928 branch ui_ipc_send_event +: 007930 g24_ackpayload_parse: +0x2dd6 007931 call g24_read_len_pid_crc +0x2dd7 007932 add regc ,offset_24g_rxdata_length ,rega +0x2dd8 007933 ifetch 1 ,rega +0x2dd9 007935 rtn blank +0x2dda 007936 iforce loopcnt +0x2ddb 007937 add regc ,offset_24g_rxbuf_add2 ,contr +0x2ddc 007939 add regc ,offset_24g_rxpayload ,contw +0x2ddd 007941 branch memcpy +: 007944 g24_read_len_pid_crc: +0x2dde 007946 call g24_fetch_mem_rxbuf_add1 +0x2ddf 007948 rshift3 pdata ,pdata +0x2de0 007949 add regc ,offset_24g_rxdata_length ,contw +0x2de1 007950 istore 1 ,contw +0x2de2 007953 increase 1 ,pdata +0x2de3 007954 add regc ,offset_24g_rxbuf_add1 ,contr +0x2de4 007956 iadd contr ,contr +0x2de5 007957 ifetch 3 ,contr +0x2de6 007958 add regc ,offset_24g_sta_crc ,contw +0x2de7 007959 istore 3 ,contw +0x2de8 007962 call g24_fetch_mem_rxbuf_add1 +0x2de9 007964 rshift pdata ,pdata +0x2dea 007965 and pdata ,0x03 ,pdata +0x2deb 007966 add regc ,offset_24g_sta_pid ,contw +0x2dec 007967 istore 1 ,contw +0x2ded 007969 rtn +: 007971 g24_prep: +0x2dee 007972 disable enable_crc +0x2def 007973 disable enable_white +0x2df0 007974 setarg 0x555555 +0x2df1 007975 iforce crc24_init +0x2df2 007976 rtn +: 007978 g24_set_freq_tx: +0x2df3 007979 call set_sync_on +0x2df4 007980 add regc ,offset_24g_ch ,rega +0x2df5 007981 ifetcht 1 ,rega +0x2df6 007983 branch set_freq_tx +: 007985 g24_transmit: +0x2df7 007986 call g24_prep +0x2df8 007987 call g24_set_freq_tx +0x2df9 007988 set1 txgfsk ,radio_ctrl +0x2dfa 007989 enable encode_fec0 +0x2dfb 007990 enable is_tx +0x2dfc 007991 disable is_rx +0x2dfd 007992 call le_enable +0x2dfe 007993 call g24_fetch_mem_addr +0x2dff 007995 iforce access +0x2e00 007996 inject mod ,32 +0x2e01 007997 enable enable_crc +0x2e02 007998 add regc ,offset_24g_txlen ,rega +0x2e03 007999 ifetch 1 ,rega +0x2e04 008001 iforce loopcnt +0x2e05 008002 add regc ,offset_24g_txpayload ,contr +: 008004 g24tr_loop: +0x2e06 008005 ifetch 1 ,contr +0x2e07 008006 inject mod ,8 +0x2e08 008007 loop g24tr_loop +0x2e09 008008 enable enable_parity +0x2e0a 008009 inject mod ,24 +0x2e0b 008010 disable enable_parity +0x2e0c 008011 until null ,tx_clear +0x2e0d 008012 bpatch patch16_7 ,mem_patch16 +0x2e0e 008013 nop 100 +0x2e0f 008014 disable encode_fec0 +0x2e10 008015 rtn +: 008017 g24_receive_packet: +0x2e11 008018 disable user3 +0x2e12 008019 force 0 ,radio_ctrl +0x2e13 008020 add regc ,offset_24g_ch ,rega +0x2e14 008021 ifetcht 1 ,rega +0x2e15 008023 call set_freq_rx +0x2e16 008024 call rf_rx_enable +: 008025 g24_receive_rxon: +0x2e17 008026 call g24_prep +0x2e18 008027 enable decode_fec0 +0x2e19 008028 enable is_rx +0x2e1a 008029 disable is_tx +0x2e1b 008030 call le_enable +0x2e1c 008031 call g24_fetch_mem_addr +0x2e1d 008033 iforce access +0x2e1e 008034 enable swfine +0x2e1f 008035 add regc ,offset_24g_rx_window ,rega +0x2e20 008036 ifetch 2 ,rega +0x2e21 008038 iforce stop_watch +0x2e22 008039 correlate null ,timeout +0x2e23 008040 nbranch g24_sync_timeout ,sync +0x2e24 008041 enable enable_crc +0x2e25 008042 parse demod ,bucket ,8 +0x2e26 008043 rshift3 pwindow ,pdata +0x2e27 008044 add regc ,offset_24g_rxbuf ,contw +0x2e28 008045 istore 1 ,contw +0x2e29 008047 add regc ,offset_24g_mode ,rega +0x2e2a 008048 ifetch 1 ,rega +0x2e2b 008050 beq rx_24g ,g24_receive_skip +0x2e2c 008051 bpatch patch17_0 ,mem_patch17 +0x2e2d 008052 add regc ,offset_24g_rxbuf ,rega +0x2e2e 008053 ifetch 1 ,rega +0x2e2f 008055 add regc ,offset_24g_data_type ,rega +0x2e30 008056 ifetcht 1 ,rega +0x2e31 008058 icompare bits_data ,temp +0x2e32 008059 nbranch g24_end_of_packet ,true +: 008060 g24_receive_skip: +0x2e33 008061 parse demod ,bucket ,8 +0x2e34 008062 rshift3 pwindow ,pdata +0x2e35 008063 istore 1 ,contw +0x2e36 008064 rshift3 pdata ,pdata +0x2e37 008065 and pdata ,0x1f ,loopcnt +0x2e38 008066 branch g24rx_nopayload ,zero +: 008067 g24rx_loop: +0x2e39 008068 parse demod ,bucket ,8 +0x2e3a 008069 rshift3 pwindow ,pdata +0x2e3b 008070 istore 1 ,contw +0x2e3c 008071 loop g24rx_loop +: 008072 g24rx_nopayload: +0x2e3d 008073 parse demod ,bucket ,24 +0x2e3e 008074 rshift32 pdata ,pdata +0x2e3f 008075 rshift16 pdata ,pdata +0x2e40 008076 istore 3 ,contw +0x2e41 008077 branch g24_end_of_packet ,crc_failed +0x2e42 008078 enable user3 +0x2e43 008079 disable decode_fec0 +0x2e44 008080 rtn +: 008083 g24_end_of_packet: +0x2e45 008084 disable encode_fec0 +0x2e46 008085 disable decode_fec0 +0x2e47 008086 disable enable_crc +0x2e48 008087 disable enable_white +0x2e49 008088 branch shutdown_radio ,is_rx +0x2e4a 008089 until null ,tx_clear +0x2e4b 008090 nop 100 +0x2e4c 008091 branch shutdown_radio +: 008093 g24_sync_timeout: +0x2e4d 008094 call rssi_noise +0x2e4e 008095 branch g24_end_of_packet +: 008097 rssi_noise: +0x2e4f 008098 call save_rssi +0x2e50 008099 rtn blank +0x2e51 008100 add regc ,offset_rssi_noise_index ,rega +0x2e52 008101 ifetcht 1 ,rega +0x2e53 008103 arg mem_rssi_noise_buffer ,rega +0x2e54 008105 call rssi_noise_store +0x2e55 008106 add regc ,offset_rssi_noise_index ,contw +: 008108 g24_contw_istoret_1byte: +0x2e56 008109 istoret 1 ,contw +0x2e57 008110 rtn +: 008112 rssi_noise_store: +0x2e58 008113 arg rssi_buf_len_noise ,regb +0x2e59 008114 branch rssi_store +: 008132 rssi_store: +0x2e5a 008133 copy rega ,pdata +0x2e5b 008134 iadd temp ,contw +0x2e5c 008135 fetch 1 ,mem_rssi +0x2e5d 008136 istore 1 ,contw +0x2e5e 008137 increase 1 ,temp +0x2e5f 008138 copy regb ,pdata +0x2e60 008139 iand_into temp +0x2e61 008140 rtn +: 008142 rssi_average: +0x2e62 008143 arg 0 ,temp +0x2e63 008144 copy rega ,contr +: 008145 rssi_average_loop: +0x2e64 008146 ifetch 1 ,contr +0x2e65 008147 iadd temp ,temp +0x2e66 008148 loop rssi_average_loop +0x2e67 008149 rshift8 temp ,temp +0x2e68 008150 rtn +: 008152 g24_power_ctrl_init: +0x2e69 008153 call g24_head_ptr2regc +0x2e6a 008154 call g24_power_ctrl_incrs_level1 +0x2e6b 008155 setarg 1 +0x2e6c 008156 call g24_store_mem_power_ctrl_level +: 008158 g24_power_ctrl_reinit: +0x2e6d 008159 setarg 0 +0x2e6e 008160 call g24_store_mem_power_ctrl_pac +0x2e6f 008162 istore 1 ,contw +0x2e70 008164 rtn +: 008166 g24_power_ctrl_pac_incrs: +0x2e71 008167 call g24_fetch_mem_power_ctrl_pac +0x2e72 008169 increase 1 ,pdata +: 008170 g24_store_mem_power_ctrl_pac: +0x2e73 008172 add regc ,offset_power_ctrl_packet_cnt ,contw +0x2e74 008173 branch g24_contw_istore_1byte +: 008175 g24_power_ctrl_ack_incrs: +0x2e75 008178 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e76 008179 ifetch 1 ,rega +0x2e77 008180 increase 1 ,pdata +0x2e78 008181 add regc ,offset_power_ctrl_ack_cnt ,contw +0x2e79 008182 branch g24_contw_istore_1byte +: 008184 g24_power_ctrl: +0x2e7a 008185 bpatch patch17_1 ,mem_patch17 +0x2e7b 008186 call g24_fetch_mem_power_ctrl_pac +0x2e7c 008188 sub pdata ,power_ctrl_max_packet_cnt ,null +0x2e7d 008189 rtn positive +0x2e7e 008190 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e7f 008191 ifetcht 1 ,rega +0x2e80 008193 isub temp ,temp +0x2e81 008194 call g24_power_ctrl_reinit +0x2e82 008195 setarg offset_power_ctrl_threshold_up +0x2e83 008196 iadd regc ,rega +0x2e84 008197 ifetch 1 ,rega +0x2e85 008199 isub temp ,null +0x2e86 008200 nbranch g24_power_ctrl_incrs ,positive +0x2e87 008201 setarg offset_power_ctrl_threshold_down +0x2e88 008202 iadd regc ,rega +0x2e89 008203 ifetch 1 ,rega +0x2e8a 008205 isub temp ,null +0x2e8b 008206 branch g24_power_ctrl_decrs ,positive +0x2e8c 008207 rtn +: 008209 g24_power_ctrl_incrs: +0x2e8d 008210 add regc ,offset_power_ctrl_level ,rega +0x2e8e 008211 ifetch 1 ,rega +0x2e8f 008213 beq 2 ,g24_power_ctrl_incrs_level2 +0x2e90 008214 increase 1 ,pdata +0x2e91 008215 call g24_store_mem_power_ctrl_level +0x2e92 008217 beq 1 ,g24_power_ctrl_incrs_level1 +: 008218 g24_power_ctrl_incrs_level2: +0x2e93 008219 setarg power_ctrl_losspac_thresh_up2 +0x2e94 008220 call g24_store_mem_power_ctrl_threshold_up +0x2e95 008222 setarg power_ctrl_losspac_thresh_down2 +0x2e96 008223 call g24_store_mem_power_ctrl_threshold_down +0x2e97 008226 add regc ,offset_power_ctrl_txpwr_level2 ,rega +0x2e98 008228 branch g24_ifetch_rega_store_mem_txpower +: 008230 g24_power_ctrl_decrs: +0x2e99 008231 add regc ,offset_power_ctrl_level ,rega +0x2e9a 008232 ifetch 1 ,rega +0x2e9b 008234 beq 0 ,g24_power_ctrl_decrs_level0 +0x2e9c 008235 increase -1 ,pdata +0x2e9d 008236 call g24_store_mem_power_ctrl_level +0x2e9e 008238 beq 0 ,g24_power_ctrl_decrs_level0 +: 008239 g24_power_ctrl_decrs_level1: +: 008242 g24_power_ctrl_incrs_level1: +0x2e9f 008243 setarg power_ctrl_losspac_thresh_up1 +0x2ea0 008244 call g24_store_mem_power_ctrl_threshold_up +0x2ea1 008246 setarg power_ctrl_losspac_thresh_down1 +0x2ea2 008247 call g24_store_mem_power_ctrl_threshold_down +0x2ea3 008250 setarg offset_power_ctrl_txpwr_level1 +: 008251 g24_iadd_offset_mem_txpower: +0x2ea4 008252 iadd regc ,rega +: 008253 g24_ifetch_rega_store_mem_txpower: +0x2ea5 008254 ifetch 1 ,rega +0x2ea6 008256 branch g24_store_mem_txpower +: 008258 g24_power_ctrl_decrs_level0: +0x2ea7 008261 setarg power_ctrl_losspac_thresh_up0 +0x2ea8 008262 call g24_store_mem_power_ctrl_threshold_up +0x2ea9 008264 setarg power_ctrl_losspac_thresh_down0 +0x2eaa 008265 call g24_store_mem_power_ctrl_threshold_down +0x2eab 008268 setarg offset_power_ctrl_txpwr_level0 +0x2eac 008270 branch g24_iadd_offset_mem_txpower +: 008284 g24_start_pairing_sm1: +0x2ead 008285 set1 mark_24g ,mark +0x2eae 008286 call g24_pair_init +: 008287 g24_set_pairing_sm_1: +0x2eaf 008289 setarg state_24g_pairing_1 +0x2eb0 008290 branch g24_store_mem_pairing_sm +: 008292 g24_pairing_sm: +0x2eb1 008293 add regc ,offset_24g_ensure ,rega +0x2eb2 008294 ifetch 1 ,rega +0x2eb3 008296 beq ensure_on_24g ,enable_user +0x2eb4 008297 call g24_fetch_mem_pairing_sm +0x2eb5 008299 beq state_24g_pairing_1 ,g24_pairing_sm_1 +0x2eb6 008300 beq state_24g_pairing_2 ,g24_pairing_sm_2 +0x2eb7 008301 beq state_24g_pairing_3 ,g24_pairing_sm_3 +0x2eb8 008302 branch assert +: 008304 g24_pairing_sm_1: +0x2eb9 008305 setarg state_24g_pairing_1_waiting_ack +0x2eba 008306 call g24_store_mem_pairing_sm +0x2ebb 008308 jam 0xaa ,mem_24g_common_temp +0x2ebc 008309 branch g24_pairing_sm_common +: 008310 g24_pairing_sm_2: +0x2ebd 008311 setarg state_24g_pairing_2_waiting_ack +0x2ebe 008312 call g24_store_mem_pairing_sm +0x2ebf 008314 jam 0x55 ,mem_24g_common_temp +0x2ec0 008315 branch g24_pairing_sm_common +: 008316 g24_pairing_sm_3: +0x2ec1 008317 setarg state_24g_pairing_3_waiting_ack +0x2ec2 008318 call g24_store_mem_pairing_sm +0x2ec3 008320 jam 0x22 ,mem_24g_common_temp +: 008321 g24_pairing_sm_common: +0x2ec4 008322 call g24_fetch_mem_data_type +0x2ec5 008324 and_into bits_data ,pdata +0x2ec6 008325 store 1 ,mem_24g_common_temp + 1 +0x2ec7 008326 call g24_fetch_mem_device_addr +0x2ec8 008328 store 4 ,mem_24g_common_temp + 2 +: 008329 g24_put_pairing_data_in_buff: +0x2ec9 008330 jam 0 ,mem_24g_common_temp + 6 +0x2eca 008331 arg mem_24g_common_temp ,rega +0x2ecb 008332 arg 7 ,temp +0x2ecc 008333 call g24_put_data_in_buff +0x2ecd 008334 call g24_transmit_prep +0x2ece 008335 call g24_txdata_enable_tx +0x2ecf 008336 branch enable_user +: 008338 g24_paring_mode: +0x2ed0 008339 call g24_fetch_mem_pairing_sm +0x2ed1 008341 rtneq state_24g_pairing_success +0x2ed2 008342 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack +0x2ed3 008343 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack +0x2ed4 008344 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack +0x2ed5 008345 rtn +: 008347 g24_pairing_sm_1_waiting_ack: +0x2ed6 008348 setarg state_24g_pairing_2 +0x2ed7 008349 call g24_store_mem_pairing_sm +0x2ed8 008351 branch g24_transmit_abandon +: 008352 g24_pairing_sm_2_waiting_ack: +0x2ed9 008353 setarg state_24g_pairing_3 +0x2eda 008354 call g24_store_mem_pairing_sm +0x2edb 008356 branch g24_transmit_abandon +: 008357 g24_pairing_sm_3_waiting_ack: +0x2edc 008358 setarg state_24g_pairing_success +0x2edd 008359 call g24_store_mem_pairing_sm +0x2ede 008361 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0x2edf 008362 call ui_ipc_send_event +0x2ee0 008363 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ee1 008364 ifetch 4 ,rega +0x2ee2 008366 call g24_store_mem_addr +0x2ee3 008368 branch g24_transmit_abandon +: 008370 g24_auto_pair_start: +0x2ee4 008371 set0 mark_24g ,mark +0x2ee5 008372 call g24_auto_pair_set_device_info +0x2ee6 008373 call g24_tx_attemp_data_prep +: 008374 g24_auto_pair_restart: +0x2ee7 008375 call g24_set0_mem_check_dongle_times +: 008376 g24_auto_pair_start_loop: +0x2ee8 008377 nop 2000 +0x2ee9 008378 call g24_fetch_mem_check_dongle_times +0x2eea 008379 beq 0xff ,g24_stop_24g_mode +0x2eeb 008380 call g24_transmit_receive_ack +0x2eec 008381 nbranch g24_auto_pair_retry ,sync +0x2eed 008382 nbranch g24_auto_pair_retry ,user3 +0x2eee 008383 call g24_ackpayload_parse +0x2eef 008384 call g24_head_ptr2regc +0x2ef0 008385 add regc ,offset_24g_paring_addr ,rega +0x2ef1 008386 ifetcht 4 ,rega +0x2ef2 008387 call g24_fetch_mem_addr_isub_temp +0x2ef3 008388 branch g24_start_pairing_sm1 ,zero +0x2ef4 008389 call g24_head_ptr2regc +0x2ef5 008390 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ef6 008391 ifetch 4 ,rega +0x2ef7 008392 beq 0 ,g24_auto_pair_restart +0x2ef8 008393 call g24_store_mem_addr +0x2ef9 008394 branch g24_tx_attemp_dongle_succ +: 008396 g24_auto_pair_retry: +0x2efa 008397 call g24_fetch_mem_check_dongle_times +0x2efb 008398 increase 1 ,pdata +0x2efc 008399 call g24_store_mem_check_dongle_times +0x2efd 008401 call g24_fetch_mem_auto_paring_switch +0x2efe 008402 increase 1 ,pdata +0x2eff 008403 and_into 1 ,pdata +0x2f00 008404 call g24_store_mem_auto_paring_switch +0x2f01 008405 beq 0 ,g24_auto_pair_device_attemp +0x2f02 008406 beq 1 ,g24_auto_pair_pair_attemp +0x2f03 008407 rtn +: 008409 g24_fetch_mem_auto_paring_switch: +0x2f04 008410 setarg offset_24g_auto_pair_switch +0x2f05 008411 branch g24_set_rega_ifetch_1byte +: 008412 g24_store_mem_auto_paring_switch: +0x2f06 008413 arg offset_24g_auto_pair_switch ,rega +0x2f07 008414 branch g24_set_contw_with_regb_store_1byte +: 008416 g24_auto_pair_set_device_info: +0x2f08 008417 call g24_store_mem_tx_power +0x2f09 008418 call g24_fetch_mem_device_addr +0x2f0a 008419 call g24_store_mem_addr +0x2f0b 008420 branch g24_ch +: 008422 g24_auto_pair_device_attemp: +0x2f0c 008423 call g24_auto_pair_set_device_info +0x2f0d 008424 branch g24_auto_pair_start_loop +: 008426 g24_auto_pair_pair_attemp: +0x2f0e 008427 call g24_pair_init +0x2f0f 008428 branch g24_auto_pair_start_loop +: 008431 g24_start_24g_mode: +0x2f10 008432 set0 mark_24g ,mark +0x2f11 008433 call g24_ch +0x2f12 008434 call g24_fetch_mem_pairing_sm +0x2f13 008436 rtnne state_24g_pairing_success +0x2f14 008437 call g24_tx_attemp_data_prep +0x2f15 008438 call g24_set0_mem_check_dongle_times +: 008440 g24_tx_attemp_dongle_loop: +0x2f16 008441 nop 2000 +0x2f17 008442 call g24_fetch_mem_check_dongle_times +0x2f18 008444 beq 0xff ,g24_stop_24g_mode +0x2f19 008445 call g24_transmit_receive_ack +0x2f1a 008446 nbranch g24_attemp_txdata_retry ,sync +0x2f1b 008447 nbranch g24_attemp_txdata_retry ,user3 +: 008448 g24_tx_attemp_dongle_succ: +0x2f1c 008449 set1 mark_24g ,mark +0x2f1d 008450 call g24_set0_mem_check_dongle_times +0x2f1e 008451 setarg state_24g_pairing_success +0x2f1f 008452 call g24_store_mem_pairing_sm +: 008454 g24_app_tx_attempt_success: +0x2f20 008455 jam bt_evt_24g_attempt_success ,mem_fifo_temp +0x2f21 008456 branch ui_ipc_send_event +: 008458 g24_tx_attemp_data_prep: +0x2f22 008459 set1 mark_24g_conext ,mark +0x2f23 008460 jam 0xff ,mem_24g_common_temp +0x2f24 008461 call g24_fetch_mem_data_type +0x2f25 008463 call g24_put_data_in_buff_pre +0x2f26 008464 branch g24_transmit_prep +: 008466 g24_attemp_txdata_retry: +0x2f27 008467 call g24_fetch_mem_check_dongle_times +0x2f28 008469 increase 1 ,pdata +0x2f29 008470 call g24_store_mem_check_dongle_times +0x2f2a 008472 call g24_ch +0x2f2b 008473 branch g24_tx_attemp_dongle_loop +: 008475 g24_check_51cmd_start_24g: +0x2f2c 008476 call g24_store_mem_tx_power +0x2f2d 008479 setarg state_24g_pairing_success +0x2f2e 008480 call g24_store_mem_pairing_sm +0x2f2f 008482 branch g24_start_24g_mode +: 008491 dongle_init: +0x2f30 008492 bpatch patch17_2 ,mem_patch17 +0x2f31 008493 call g24_head_ptr2regc +0x2f32 008494 setarg dongle_rxdata_type1 +0x2f33 008495 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x2f34 008496 istore 2 ,contw +0x2f35 008498 call g24_receive_init +0x2f36 008499 call usb_init +0x2f37 008500 call g24_fetch_mem_pair_mode +0x2f38 008502 bpatch patch17_3 ,mem_patch17 +0x2f39 008503 beq 0x00 ,dongle_auto_bind +0x2f3a 008504 beq 0x01 ,dongle_pc_bind +0x2f3b 008505 beq 0x0f ,dongle_all_powerful +0x2f3c 008506 branch assert +: 008508 g24_receive_init: +0x2f3d 008509 call g24_store_mem_tx_power_temp +0x2f3e 008510 arg 0x80 ,loopcnt +0x2f3f 008511 arg mem_rssi_noise_buffer ,contw +0x2f40 008512 branch memset0 +: 008514 dongle_all_powerful: +0x2f41 008515 call dongle_check_mode +: 008516 dongle_all_powerful_loop: +0x2f42 008517 call g24_dongle_work_mode +0x2f43 008518 call usb_isr +0x2f44 008519 branch dongle_all_powerful_loop +: 008521 dongle_pc_bind: +0x2f45 008522 bpatch patch17_4 ,mem_patch17 +0x2f46 008523 call dongle_check_mode +: 008524 dongle_pc_bind_loop: +0x2f47 008525 call g24_dongle_work_mode +0x2f48 008526 call g24_dongle_bind_mode +0x2f49 008527 call usb_isr +0x2f4a 008528 call dongle_usb_dispatch +0x2f4b 008529 branch dongle_pc_bind_loop +: 008531 dongle_check_mode: +0x2f4c 008535 call g24_set_work_mem_dongle_work_mode +0x2f4d 008536 call g24_set0_mem_dongle_mode_init +0x2f4e 008537 branch g24_set0_mem_ackpayload_enable +: 008539 g24_dongle_work_mode: +0x2f4f 008540 call g24_fetch_mem_dongle_work_mode +0x2f50 008542 rtnne dongle_work +: 008543 g24_dongle_work_mode_start: +0x2f51 008544 call g24_dongle_work_init +0x2f52 008545 call g24_ch_process +0x2f53 008546 call g24_receive_packet_start +0x2f54 008547 branch g24_blank_data_process +: 008549 g24_dongle_work_init: +0x2f55 008550 call g24_fetch_mem_dongle_mode_init +0x2f56 008552 rtnbit1 dongle_work +0x2f57 008553 set1 dongle_work ,pdata +0x2f58 008554 call g24_store_mem_dongle_mode_init +0x2f59 008556 call g24_store_mem_tx_power +0x2f5a 008559 call g24_set0_mem_ackpayload_enable +0x2f5b 008561 jam 0 ,mem_usb_tx_enable +0x2f5c 008562 call g24_set1_mem_abort_pac +0x2f5d 008564 call g24_dongle_init +: 008565 g24_rx_interrupt_clear: +0x2f5e 008566 add regc ,offset_24g_rxbuf ,contw +0x2f5f 008568 arg 66 ,loopcnt +0x2f60 008569 branch clear_mem +: 008571 g24_dongle_init: +0x2f61 008572 call g24_set0_mem_pid +0x2f62 008574 call g24_fetch_mem_rx_addr +0x2f63 008576 call g24_store_mem_addr +0x2f64 008578 branch g24_ch +: 008580 g24_ch_process: +0x2f65 008581 bpatch patch17_5 ,mem_patch17 +0x2f66 008582 call g24_fetch_mem_abort_pac +0x2f67 008584 beq 1 ,g24_noise_rssi +0x2f68 008585 call g24_fetch_mem_hop_pac +0x2f69 008587 beq 1 ,g24_ch +0x2f6a 008588 setarg offset_24g_hop_btclk +0x2f6b 008589 iadd regc ,rega +0x2f6c 008590 ifetcht 4 ,rega +0x2f6d 008592 copy clkn_bt ,pdata +0x2f6e 008593 isub temp ,null +0x2f6f 008594 ncall g24_timer_timeout ,positive +0x2f70 008595 copy pdata ,regb +0x2f71 008596 setarg offset_24g_hop_btclk +0x2f72 008597 iadd regc ,rega +0x2f73 008598 ifetch 4 ,rega +0x2f74 008599 copy pdata ,temp +0x2f75 008601 setarg offset_24g_hop_interval +0x2f76 008602 iadd regc ,rega +0x2f77 008603 copy temp ,pdata +0x2f78 008604 ifetcht 1 ,rega +0x2f79 008606 iadd temp ,temp +0x2f7a 008607 copy regb ,pdata +0x2f7b 008608 isub temp ,null +0x2f7c 008609 nrtn positive +0x2f7d 008610 set0 28 ,pdata +0x2f7e 008611 setarg offset_24g_hop_btclk +0x2f7f 008612 iadd regc ,contw +0x2f80 008613 istore 4 ,contw +: 008615 g24_ch_update: +0x2f81 008616 call g24_ch +0x2f82 008617 call g24_fetch_mem_rf_laststa +0x2f83 008619 increase 1 ,pdata +0x2f84 008620 call g24_store_mem_rf_laststa +0x2f85 008622 rtnne 2 +0x2f86 008623 call g24_set0_mem_rf_laststa +0x2f87 008627 branch g24_set1_mem_abort_pac +: 008629 g24_ch_timer_reinit: +0x2f88 008630 copy clkn_bt ,pdata +0x2f89 008631 arg offset_24g_hop_btclk ,rega +0x2f8a 008632 call g24_set_contw_with_temp +0x2f8b 008633 istore 4 ,contw +0x2f8c 008637 branch g24_set0_mem_rf_laststa +: 008639 g24_noise_rssi: +0x2f8d 008640 arg mem_rssi_noise_buffer ,rega +0x2f8e 008641 call g24_noise_rssi_average +0x2f8f 008642 add regc ,offset_rssi_noise_avg ,contw +0x2f90 008643 istoret 1 ,contw +0x2f91 008645 sub temp ,rssi_thresh_noise ,null +0x2f92 008646 nrtn positive +0x2f93 008647 branch g24_ch +: 008649 g24_noise_rssi_average: +0x2f94 008650 arg rssi_buf_len_noise + 1 ,loopcnt +0x2f95 008651 branch rssi_average +: 008653 g24_blank_data_process: +0x2f96 008654 call g24_ms_blank_data +0x2f97 008655 call g24_kb_blank_data +0x2f98 008656 branch g24_kb_mul_blank_data +: 008658 g24_ms_blank_data: +0x2f99 008659 setarg offset_24g_ms_blank_data_enable +0x2f9a 008660 call g24_set_rega_ifetch_1byte +0x2f9b 008662 rtn blank +0x2f9c 008663 arg timer_ms_blank ,queue +0x2f9d 008664 call timer_check +0x2f9e 008665 nrtn blank +0x2f9f 008666 call g24_set0_mem_ms_blank_data_enable +: 008668 g24_ms_blank_data_2usb: +0x2fa0 008669 setarg ms_report_id +0x2fa1 008670 store 1 ,mem_usb_mouse_data +0x2fa2 008671 setarg 0 +0x2fa3 008672 istore 7 ,contw +0x2fa4 008673 branch g24_data_type1_usbtx_enable +: 008675 g24_kb_blank_data: +0x2fa5 008676 setarg offset_24g_kb_blank_data_enable +0x2fa6 008677 call g24_set_rega_ifetch_1byte +0x2fa7 008679 rtn blank +0x2fa8 008680 arg timer_kb_blank ,queue +0x2fa9 008681 call timer_check +0x2faa 008682 nrtn blank +0x2fab 008683 call g24_set0_mem_kb_blank_data_enable +: 008685 g24_kb_blank_data_2usb: +0x2fac 008686 arg mem_usb_kb_data ,contw +0x2fad 008687 arg 2 ,loopcnt +0x2fae 008688 call memset0 +0x2faf 008689 jam kb_normal_report_id ,mem_usb_kb_data +0x2fb0 008690 branch g24_kb_data_into_ep1_fifo +: 008692 g24_kb_mul_blank_data: +0x2fb1 008693 setarg offset_24g_kb_mul_blank_data_enable +0x2fb2 008694 call g24_set_rega_ifetch_1byte +0x2fb3 008696 rtn blank +0x2fb4 008697 arg timer_kb_mul_blank ,queue +0x2fb5 008698 call timer_check +0x2fb6 008699 nrtn blank +0x2fb7 008700 call g24_set0_mem_kb_mul_blank_data_enable +: 008702 g24_kb_mul_blank_data_2usb: +0x2fb8 008703 arg mem_usb_kb_multikey ,contw +0x2fb9 008704 arg 2 ,loopcnt +0x2fba 008705 call memset0 +0x2fbb 008706 jam kb_multikey_report_id ,mem_usb_kb_multikey +0x2fbc 008707 branch g24_kb_mul_data_into_ep2_fifo +: 008709 g24_dongle_bind_mode: +0x2fbd 008710 call g24_fetch_mem_dongle_work_mode +0x2fbe 008712 rtnne dongle_bind +0x2fbf 008713 call g24_dongle_bind_init +0x2fc0 008714 branch g24_dongle_bind_data_process +: 008716 g24_dongle_bind_init: +0x2fc1 008717 call g24_fetch_mem_dongle_mode_init +0x2fc2 008719 rtnbit1 dongle_bind +0x2fc3 008720 set1 dongle_bind ,pdata +0x2fc4 008721 call g24_store_mem_dongle_mode_init +0x2fc5 008723 call g24_set1_mem_ackpayload_enable +0x2fc6 008725 call g24_pair_init +0x2fc7 008726 setarg 0 +0x2fc8 008727 arg offset_dongle_ms_bind_step ,rega +0x2fc9 008728 call g24_set_contw_with_temp +0x2fca 008730 branch g24_contw_istore_3byte +: 008732 g24_dongle_bind_data_process: +0x2fcb 008733 call g24_receive_transmit_ack +0x2fcc 008734 nbranch g24_rx_interrupt_clear ,user3 +0x2fcd 008735 add regc ,offset_24g_rxbuf ,contr +0x2fce 008736 setarg offset_24g_rxdata_temp +0x2fcf 008737 iadd regc ,contw +0x2fd0 008738 arg 8 ,loopcnt +0x2fd1 008739 call memcpy +0x2fd2 008740 setarg offset_24g_rxdata_temp_add2 +0x2fd3 008741 call g24_set_rega_ifetch_1byte +0x2fd4 008742 beq datatype_bind ,g24_dongle_bind_first_step +0x2fd5 008743 beq datatype_config ,g24_dongle_bind_second_step +0x2fd6 008744 beq datatype_ok ,g24_dongle_bind_third_step +0x2fd7 008745 beq 0xff ,g24_data_attemp +0x2fd8 008746 branch g24_rx_interrupt_clear +: 008748 g24_dongle_bind_first_step: +0x2fd9 008749 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fda 008750 beq bind_mouse ,g24_dongle_bind_first_step_mouse +0x2fdb 008751 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard +0x2fdc 008752 rtn +: 008753 g24_dongle_bind_first_step_mouse: +0x2fdd 008754 setarg 1 +0x2fde 008755 call g24_store_mem_ms_bind_step +: 008757 g24_dongle_bind_ms_payload_cfg: +0x2fdf 008758 setarg datatype_mouse +0x2fe0 008759 call g24_store_mem_bind_payload +: 008761 g24_dongle_bind_payload_cfg: +0x2fe1 008762 setarg 0x80 +0x2fe2 008763 arg offset_24g_bind_payload_add1 ,rega +0x2fe3 008764 call g24_set_contw_with_regb_store_1byte +0x2fe4 008766 call g24_fetch_mem_rx_addr +0x2fe5 008768 arg offset_24g_bind_payload_add2 ,rega +0x2fe6 008769 call g24_set_contw_with_temp +0x2fe7 008771 branch g24_contw_istore_4byte +: 008773 g24_dongle_bind_first_step_keyboard: +0x2fe8 008774 setarg 1 +0x2fe9 008775 call g24_store_mem_kb_bind_step +: 008777 g24_dongle_bind_kb_payload_cfg: +0x2fea 008778 setarg datatype_keyboard +0x2feb 008779 call g24_store_mem_bind_payload +0x2fec 008781 branch g24_dongle_bind_payload_cfg +: 008783 g24_dongle_bind_second_step: +0x2fed 008784 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fee 008785 beq bind_mouse ,g24_dongle_bind_second_step_mouse +0x2fef 008786 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard +0x2ff0 008787 rtn +: 008788 g24_dongle_bind_second_step_mouse: +0x2ff1 008789 call g24_dongle_bind_ms_payload_cfg +0x2ff2 008790 setarg offset_dongle_ms_bind_step +0x2ff3 008791 call g24_set_rega_ifetch_1byte +0x2ff4 008793 beq 1 ,g24_dongle_ms_bind_step_set2 +0x2ff5 008794 rtn +: 008795 g24_dongle_ms_bind_step_set2: +0x2ff6 008796 setarg 2 +: 008798 g24_store_mem_ms_bind_step: +0x2ff7 008799 arg offset_dongle_ms_bind_step ,rega +0x2ff8 008800 branch g24_set_contw_with_regb_store_1byte +: 008802 g24_dongle_bind_second_step_keyboard: +0x2ff9 008803 call g24_dongle_bind_kb_payload_cfg +0x2ffa 008804 setarg offset_dongle_kb_bind_step +0x2ffb 008805 call g24_set_rega_ifetch_1byte +0x2ffc 008807 beq 1 ,g24_dongle_kb_bind_step_set2 +0x2ffd 008808 rtn +: 008809 g24_dongle_kb_bind_step_set2: +0x2ffe 008810 setarg 2 +: 008812 g24_store_mem_kb_bind_step: +0x2fff 008813 arg offset_dongle_kb_bind_step ,rega +0x3000 008814 branch g24_set_contw_with_regb_store_1byte +: 008816 g24_dongle_bind_third_step: +0x3001 008817 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3002 008818 beq bind_mouse ,g24_dongle_bind_third_step_mouse +0x3003 008819 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard +0x3004 008820 rtn +: 008821 g24_dongle_bind_third_step_mouse: +0x3005 008822 setarg offset_dongle_ms_bind_step +0x3006 008823 call g24_set_rega_ifetch_1byte +0x3007 008825 beq 2 ,g24_dongle_ms_bind_step_success +0x3008 008826 rtn +: 008827 g24_dongle_ms_bind_step_success: +0x3009 008828 call g24_fetch_mem_bind_device_status +0x300a 008830 or_into 0x01 ,pdata +0x300b 008831 call g24_store_mem_bind_device_status +: 008833 g24_dongle_bind_exit: +0x300c 008834 setarg 0 +0x300d 008835 setarg offset_dongle_ms_bind_step +0x300e 008836 iadd regc ,contw +0x300f 008837 istore 2 ,contw +0x3010 008838 branch g24_rx_interrupt_clear +: 008840 g24_dongle_bind_third_step_keyboard: +0x3011 008841 setarg offset_dongle_kb_bind_step +0x3012 008842 call g24_set_rega_ifetch_1byte +0x3013 008844 bne 0 ,g24_dongle_kb_bind_step_success +0x3014 008845 rtn +: 008846 g24_dongle_kb_bind_step_success: +0x3015 008847 call g24_fetch_mem_bind_device_status +0x3016 008849 or_into 0x02 ,pdata +0x3017 008850 call g24_store_mem_bind_device_status +0x3018 008852 branch g24_dongle_bind_exit +: 008855 dongle_usb_dispatch: +0x3019 008856 fetch 1 ,mem_usb0_get_set_report +0x301a 008857 rtn blank +0x301b 008858 jam 0 ,mem_usb0_get_set_report +0x301c 008859 fetch 2 ,mem_usb_setup_bvalue_temp +0x301d 008860 arg pc_set_report ,temp +0x301e 008861 isub temp ,null +0x301f 008862 nrtn zero +0x3020 008864 fetch 1 ,mem_usb0_set_report_data +0x3021 008865 rtnne pc_report_id +0x3022 008866 fetch 1 ,mem_usb0_set_report_data + 1 +0x3023 008867 bpatch patch17_6 ,mem_patch17 +0x3024 008868 beq command_mode ,dongle_dispose_cmd_mode +0x3025 008869 beq command_bind ,dongle_dispose_cmd_bind +0x3026 008870 beq command_current_project ,dongle_dispose_cmd_current_project +0x3027 008871 beq command_current_mode ,dongle_dispose_cmd_current_mode +0x3028 008872 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version +0x3029 008873 beq command_user_defined ,dongle_dispose_cmd_user_defined +: 008874 usb0_data_ready_report_set0: +0x302a 008875 jam 0 ,mem_usb0_data_ready_report +0x302b 008876 rtn +: 008877 dongle_dispose_cmd_bind: +0x302c 008878 fetch 1 ,mem_usb0_set_report_data + 2 +0x302d 008879 beq com_bind_get ,dongle_dispose_cmd_get_bind +0x302e 008880 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +0x302f 008881 beq com_read_mode ,dongle_dispose_cmd_read_mode +0x3030 008882 branch usb0_data_ready_report_set0 +: 008883 dongle_dispose_cmd_get_bind: +0x3031 008884 call g24_fetch_mem_bind_device_status +0x3032 008886 store 1 ,mem_usb0_get_report_data + 1 +0x3033 008887 branch usb0_data_ready_report_set1 +: 008888 dongle_dispose_cmd_exit_bind: +0x3034 008889 call g24_set_work_mem_dongle_work_mode +0x3035 008891 call g24_set0_mem_dongle_mode_init +0x3036 008893 call g24_fetch_mem_bind_device_status +0x3037 008895 store 1 ,mem_usb0_get_report_data + 1 +0x3038 008896 branch usb0_data_ready_report_set1 +: 008898 dongle_dispose_cmd_read_mode: +: 008899 dongle_dispose_in_bind_mode: +0x3039 008900 jam command_bind ,mem_usb0_get_report_data + 1 +0x303a 008901 branch usb0_data_ready_report_set1 +: 008903 dongle_dispose_cmd_mode: +0x303b 008904 fetch 1 ,mem_usb0_set_report_data + 2 +0x303c 008905 beq com_mode_bind ,dongle_enter_bind_mode +0x303d 008907 branch usb0_data_ready_report_set0 +: 008908 dongle_enter_bind_mode: +0x303e 008911 call g24_bind_mode_enable +: 008912 usb0_data_ready_report_set1: +0x303f 008913 jam 1 ,mem_usb0_data_ready_report +0x3040 008914 rtn +: 008919 dongle_dispose_cmd_current_project: +0x3041 008920 jam product_id ,mem_usb0_get_report_data + 1 +0x3042 008921 branch usb0_data_ready_report_set1 +: 008923 dongle_dispose_cmd_current_mode: +0x3043 008924 call g24_fetch_mem_dongle_work_mode +0x3044 008926 beq dongle_work ,dongle_dispose_in_work_mode +0x3045 008927 beq dongle_bind ,dongle_dispose_in_bind_mode +0x3046 008929 rtn +: 008930 dongle_dispose_in_work_mode: +0x3047 008931 jam command_mode ,mem_usb0_get_report_data + 1 +0x3048 008932 branch usb0_data_ready_report_set1 +: 008937 dongle_dispose_cmd_current_fw_version: +0x3049 008938 jam fw_version0 ,mem_usb0_get_report_data + 1 +0x304a 008939 jam fw_version1 ,mem_usb0_get_report_data + 2 +0x304b 008940 jam fw_version2 ,mem_usb0_get_report_data + 3 +0x304c 008941 branch usb0_data_ready_report_set1 +: 008943 dongle_dispose_cmd_user_defined: +0x304d 008945 call g24_set1_mem_ackpayload_enable +0x304e 008946 fetch 1 ,mem_usb0_set_report_data + 2 +0x304f 008947 increase 2 ,pdata +0x3050 008948 copy pdata ,loopcnt +0x3051 008949 arg mem_usb0_set_report_data ,contr +0x3052 008950 setarg offset_24g_ackpayload +0x3053 008951 iadd regc ,contw +0x3054 008952 branch memcpy +: 008955 dongle_auto_bind: +0x3055 008956 bpatch patch17_7 ,mem_patch17 +0x3056 008957 call g24_mode_switch_init +: 008958 dongle_auto_bind_loop: +0x3057 008959 call g24_receive_process +0x3058 008960 call usb_isr +0x3059 008961 branch dongle_auto_bind_loop +: 008963 g24_dongle_work_mode_auto: +0x305a 008964 call g24_fetch_mem_dongle_work_mode +0x305b 008966 rtnne dongle_work +0x305c 008967 call g24_dongle_work_mode_start +0x305d 008968 branch g24_rx_nodata_process +: 008970 g24_dongle_bind_mode_auto: +0x305e 008971 call g24_fetch_mem_dongle_work_mode +0x305f 008973 rtnne dongle_bind +0x3060 008974 call g24_dongle_bind_init +0x3061 008975 call g24_dongle_bind_data_process +0x3062 008976 call g24_fetch_mem_bind_device_status +0x3063 008978 rtn blank +0x3064 008979 call g24_set0_mem_mode_switch +0x3065 008981 call dongle_check_mode +0x3066 008982 call g24_enable_nodata_timer +: 008983 g24_timer_init: +0x3067 008984 setarg 0 +0x3068 008985 add regc ,offset_24g_tx_btclk ,contw +0x3069 008987 branch g24_contw_istore_4byte +: 008989 g24_timer_check: +0x306a 008990 call disable_user +0x306b 008991 add regc ,offset_24g_tx_btclk ,rega +0x306c 008992 ifetcht 4 ,rega +0x306d 008994 copy clkn_bt ,pdata +0x306e 008995 isub temp ,null +0x306f 008996 ncall g24_timer_timeout ,positive +0x3070 008997 copy pdata ,regb +0x3071 008998 add regc ,offset_24g_tx_btclk ,rega +0x3072 008999 ifetch 4 ,rega +0x3073 009001 add regc ,offset_24g_interval ,rega +0x3074 009002 ifetcht 1 ,rega +0x3075 009004 iadd temp ,temp +0x3076 009005 copy regb ,pdata +0x3077 009006 isub temp ,null +0x3078 009007 nrtn positive +0x3079 009008 set0 28 ,pdata +0x307a 009009 add regc ,offset_24g_tx_btclk ,contw +0x307b 009010 istore 4 ,contw +0x307c 009012 branch enable_user +: 009014 g24_mode_switch_init: +0x307d 009015 setarg 1 +0x307e 009016 call g24_store_mem_mode_switch +0x307f 009018 call g24_set0_mem_time_slice +0x3080 009020 setarg 0xff +0x3081 009021 add regc ,offset_24g_interval ,contw +0x3082 009022 istore 1 ,contw +0x3083 009024 branch g24_timer_init +: 009026 g24_mode_switch: +0x3084 009027 setarg offset_24g_mode_switch +0x3085 009028 call g24_set_rega_ifetch_1byte +0x3086 009030 rtn blank +0x3087 009031 call g24_timer_check +0x3088 009032 nrtn user +0x3089 009033 call g24_fetch_mem_time_slice +0x308a 009035 increase 1 ,pdata +0x308b 009036 and_into 1 ,pdata +0x308c 009037 call g24_store_mem_time_slice +0x308d 009039 beq 0 ,dongle_check_mode +0x308e 009040 beq 1 ,g24_bind_mode_enable +0x308f 009041 rtn +: 009043 g24_bind_mode_enable: +0x3090 009047 setarg dongle_bind +0x3091 009048 call g24_store_mem_dongle_work_mode +0x3092 009049 branch g24_set0_mem_dongle_mode_init +: 009051 g24_enable_nodata_timer: +0x3093 009052 setarg 1 +0x3094 009053 call g24_store_mem_nodata_timer_enable +: 009055 g24_enable_nodata_timer_init: +0x3095 009056 setarg timer_nodata_delay +0x3096 009057 arg timer_nodata ,queue +0x3097 009058 branch timer_init +: 009060 g24_rx_nodata_process: +0x3098 009061 call g24_fetch_mem_nodata_timer_enable +0x3099 009063 rtn blank +0x309a 009064 arg timer_nodata ,queue +0x309b 009065 call timer_check +0x309c 009066 nrtn blank +0x309d 009067 call g24_set0_mem_nodata_timer_enable +0x309e 009070 setarg dongle_search +0x309f 009071 call g24_store_mem_dongle_work_mode +0x30a0 009073 call g24_set0_mem_dongle_mode_init +0x30a1 009075 branch g24_rx_interrupt_clear +: 009077 g24_dongle_search_mode_auto: +0x30a2 009078 bpatch patch18_0 ,mem_patch18 +0x30a3 009079 call g24_fetch_mem_dongle_work_mode +0x30a4 009081 rtnne dongle_search +0x30a5 009082 call g24_dongle_search_mode_init +0x30a6 009083 call g24_rx_auto_addr_ch_search +0x30a7 009084 call g24_receive_transmit_ack +0x30a8 009085 nbranch g24_rx_interrupt_clear ,user3 +0x30a9 009087 call g24_dongle_search_addr_check +0x30aa 009088 call g24_receive_packet_parse ,zero +0x30ab 009092 call dongle_check_mode +0x30ac 009093 call g24_fetch_mem_dongle_mode_init +0x30ad 009095 set1 dongle_work ,pdata +0x30ae 009096 call g24_store_mem_dongle_mode_init +0x30af 009098 call g24_rx_interrupt_clear +0x30b0 009099 call g24_enable_nodata_timer +0x30b1 009100 call g24_dongle_search_addr_check +0x30b2 009101 branch g24_dg_ch_num_reinit ,zero +0x30b3 009102 setarg offset_24g_kb_addr +0x30b4 009103 call g24_set_rega_ifetcht_4byte +0x30b5 009105 call g24_fetch_mem_addr_isub_temp +0x30b6 009106 branch g24_kb_ch_num_reinit ,zero +0x30b7 009107 setarg offset_24g_mouse_addr +0x30b8 009108 call g24_set_rega_ifetcht_4byte +0x30b9 009110 call g24_fetch_mem_addr_isub_temp +0x30ba 009111 branch g24_ms_ch_num_reinit ,zero +0x30bb 009112 rtn +: 009114 g24_dongle_search_addr_check: +0x30bc 009115 setarg offset_24g_rx_addr +0x30bd 009116 call g24_set_rega_ifetcht_4byte +: 009118 g24_fetch_mem_addr_isub_temp: +0x30be 009119 call g24_fetch_mem_addr +0x30bf 009121 isub temp ,null +0x30c0 009122 rtn +: 009124 g24_dg_ch_num_reinit: +0x30c1 009125 setarg offset_24g_dg_ch_number +0x30c2 009126 call g24_set_rega_ifetch_1byte +: 009128 g24_current_ch_num_reinit: +0x30c3 009130 add regc ,offset_24g_current_ch_number ,contw +0x30c4 009131 branch g24_contw_istore_1byte +: 009133 g24_kb_ch_num_reinit: +0x30c5 009134 setarg offset_24g_kb_ch_number +0x30c6 009135 call g24_set_rega_ifetch_1byte +0x30c7 009137 branch g24_current_ch_num_reinit +: 009138 g24_ms_ch_num_reinit: +0x30c8 009139 setarg offset_24g_ms_ch_number +0x30c9 009140 call g24_set_rega_ifetch_1byte +0x30ca 009142 branch g24_current_ch_num_reinit +: 009144 g24_dongle_search_mode_init: +0x30cb 009145 call g24_fetch_mem_dongle_mode_init +0x30cc 009147 rtnbit1 dongle_search +0x30cd 009148 set1 dongle_search ,pdata +0x30ce 009149 call g24_store_mem_dongle_mode_init +0x30cf 009151 call g24_set0_mem_time_slice +0x30d0 009153 call g24_set1_mem_ackpayload_enable +0x30d1 009155 setarg 0 +0x30d2 009156 add regc ,offset_rssi_noise_dg_index ,contw +0x30d3 009157 istore 3 ,contw +0x30d4 009159 arg offset_24g_dg_config_ch_once ,rega +0x30d5 009160 call g24_set_contw_with_temp +0x30d6 009161 istore 7 ,contw +0x30d7 009164 call g24_dongle_search_addr_check +0x30d8 009165 nrtn zero +0x30d9 009166 add regc ,offset_24g_current_ch_number ,rega +0x30da 009167 ifetch 1 ,rega +0x30db 009169 arg offset_24g_dg_ch_number ,rega +0x30dc 009170 call g24_set_contw_with_regb_store_1byte +0x30dd 009172 add regc ,offset_24g_ch ,rega +0x30de 009173 ifetch 1 ,rega +0x30df 009176 branch g24_store_mem_dg_last_ch +: 009178 g24_rx_auto_addr_ch_search: +0x30e0 009179 bpatch patch18_1 ,mem_patch18 +0x30e1 009180 call g24_fetch_mem_time_slice +0x30e2 009182 increase 1 ,pdata +0x30e3 009183 and_into 3 ,pdata +0x30e4 009184 call g24_store_mem_time_slice +0x30e5 009187 beq 0 ,g24_rx_auto_bind_config_kb +0x30e6 009188 beq 1 ,g24_rx_auto_bind_config_dongle +0x30e7 009189 beq 2 ,g24_rx_auto_bind_config_mouse +0x30e8 009190 beq 3 ,g24_rx_auto_bind_config_dongle +0x30e9 009191 rtn +: 009193 g24_rx_auto_bind_config_mouse: +0x30ea 009194 call g24_dongle_bind_ms_payload_cfg +0x30eb 009195 setarg offset_24g_mouse_addr +0x30ec 009196 call g24_set_rega_ifetch_4byte +0x30ed 009198 branch g24_rx_auto_addr_ch_search ,blank +0x30ee 009199 call g24_store_mem_addr +0x30ef 009201 setarg offset_24g_ms_config_ch_once +0x30f0 009202 call g24_set_rega_ifetch_1byte +0x30f1 009204 call g24_ms_config_ch_once ,blank +0x30f2 009205 setarg offset_24g_ms_last_ch +0x30f3 009206 call g24_set_rega_ifetch_1byte +0x30f4 009208 call g24_store_mem_ch +0x30f5 009210 add regc ,offset_rssi_noise_ms_index ,rega +0x30f6 009211 ifetcht 1 ,rega +0x30f7 009213 arg mem_rssi_noise_ms_buffer ,rega +0x30f8 009214 call rssi_noise_store +0x30f9 009215 add regc ,offset_rssi_noise_ms_index ,contw +0x30fa 009216 istoret 1 ,contw +0x30fb 009218 call g24_noise_rssi_average +0x30fc 009219 add regc ,offset_rssi_noise_ms_avg ,contw +0x30fd 009220 istoret 1 ,contw +0x30fe 009222 sub temp ,rssi_thresh_noise ,null +0x30ff 009223 nrtn positive +0x3100 009224 setarg offset_24g_ms_ch_number +0x3101 009225 call g24_set_rega_ifetcht_1byte +0x3102 009227 call g24_ch_temp_incre_size4 +0x3103 009228 arg offset_24g_ms_ch_number ,rega +0x3104 009229 call g24_set_contw_with_regb2 +0x3105 009230 istoret 1 ,contw +: 009232 g24_store_mem_ms_last_ch: +0x3106 009234 arg offset_24g_ms_last_ch ,rega +0x3107 009235 branch g24_set_contw_with_regb_store_1byte +: 009237 g24_ms_config_ch_once: +0x3108 009238 setarg 1 +0x3109 009239 arg offset_24g_ms_config_ch_once ,rega +0x310a 009240 call g24_set_contw_with_regb_store_1byte +0x310b 009242 arg 0 ,temp +0x310c 009243 call g24_ch_calc +0x310d 009246 branch g24_store_mem_ms_last_ch +: 009248 g24_rx_auto_bind_config_kb: +0x310e 009249 call g24_dongle_bind_kb_payload_cfg +0x310f 009250 setarg offset_24g_kb_addr +0x3110 009251 call g24_set_rega_ifetch_4byte +0x3111 009253 branch g24_rx_auto_addr_ch_search ,blank +0x3112 009254 call g24_store_mem_addr +0x3113 009256 setarg offset_24g_kb_config_ch_once +0x3114 009257 call g24_set_rega_ifetch_1byte +0x3115 009259 call g24_kb_config_ch_once ,blank +0x3116 009260 setarg offset_24g_kb_last_ch +0x3117 009261 call g24_set_rega_ifetch_1byte +0x3118 009263 call g24_store_mem_ch +0x3119 009265 add regc ,offset_rssi_noise_kb_index ,rega +0x311a 009266 ifetcht 1 ,rega +0x311b 009268 arg mem_rssi_noise_kb_buffer ,rega +0x311c 009269 call rssi_noise_store +0x311d 009270 add regc ,offset_rssi_noise_kb_index ,contw +0x311e 009271 istoret 1 ,contw +0x311f 009273 call g24_noise_rssi_average +0x3120 009274 add regc ,offset_rssi_noise_kb_avg ,contw +0x3121 009275 istoret 1 ,contw +0x3122 009277 sub temp ,rssi_thresh_noise ,null +0x3123 009278 nrtn positive +0x3124 009279 setarg offset_24g_kb_ch_number +0x3125 009280 call g24_set_rega_ifetcht_1byte +0x3126 009282 call g24_ch_temp_incre_size4 +0x3127 009283 arg offset_24g_kb_ch_number ,rega +0x3128 009284 call g24_set_contw_with_regb2 +0x3129 009285 istoret 1 ,contw +: 009287 g24_store_mem_kb_last_ch: +0x312a 009289 arg offset_24g_kb_last_ch ,rega +0x312b 009290 branch g24_set_contw_with_regb_store_1byte +: 009292 g24_kb_config_ch_once: +0x312c 009293 setarg 1 +0x312d 009294 arg offset_24g_kb_config_ch_once ,rega +0x312e 009295 call g24_set_contw_with_regb_store_1byte +0x312f 009297 arg 0 ,temp +0x3130 009298 call g24_ch_calc +0x3131 009301 branch g24_store_mem_kb_last_ch +: 009303 g24_rx_auto_bind_config_dongle: +0x3132 009304 call g24_dongle_bind_ms_payload_cfg +0x3133 009305 call g24_fetch_mem_rx_addr +0x3134 009307 call g24_store_mem_addr +0x3135 009309 setarg offset_24g_dg_config_ch_once +0x3136 009310 call g24_set_rega_ifetch_1byte +0x3137 009312 call g24_dg_config_ch_once ,blank +0x3138 009313 call g24_dg_store_config_ch +0x3139 009314 add regc ,offset_rssi_noise_dg_index ,rega +0x313a 009315 ifetcht 1 ,rega +0x313b 009317 arg mem_rssi_noise_dg_buffer ,rega +0x313c 009318 call rssi_noise_store +0x313d 009319 add regc ,offset_rssi_noise_dg_index ,contw +0x313e 009320 istoret 1 ,contw +0x313f 009322 call g24_noise_rssi_average +0x3140 009323 add regc ,offset_rssi_noise_dg_avg ,contw +0x3141 009324 istoret 1 ,contw +0x3142 009326 sub temp ,rssi_thresh_noise ,null +0x3143 009327 nrtn positive +0x3144 009328 setarg offset_24g_dg_ch_number +0x3145 009329 call g24_set_rega_ifetcht_1byte +0x3146 009331 call g24_ch_temp_incre_size4 +0x3147 009332 arg offset_24g_dg_ch_number ,rega +0x3148 009333 call g24_set_contw_with_regb2 +0x3149 009334 istoret 1 ,contw +: 009336 g24_store_mem_dg_last_ch: +0x314a 009339 arg offset_24g_dg_last_ch ,rega +0x314b 009340 branch g24_set_contw_with_regb_store_1byte +: 009343 g24_dg_config_ch_once: +0x314c 009348 setarg 1 +0x314d 009349 arg offset_24g_dg_config_ch_once ,rega +0x314e 009350 call g24_set_contw_with_regb_store_1byte +: 009351 g24_dg_store_config_ch: +0x314f 009352 setarg offset_24g_dg_last_ch +0x3150 009353 call g24_set_rega_ifetch_1byte +0x3151 009354 branch g24_store_mem_ch +: 009357 g24_transmit_ack: +0x3152 009359 add regc ,offset_24g_rxbuf ,rega +0x3153 009360 ifetch 1 ,rega +0x3154 009362 call g24_store_mem_data_type +0x3155 009365 call g24_read_len_pid_crc +0x3156 009367 call g24_fetch_mem_rxbuf_add1 +0x3157 009369 isolate1 bit_ack_24g ,pdata +0x3158 009370 branch g24tx_no_ack ,true +: 009371 g24tx_with_ack: +0x3159 009372 call g24_ackpayload_prep +0x315a 009373 call g24_transmit_prep +0x315b 009374 call g24_transmit +: 009375 g24tx_no_ack: +0x315c 009376 branch g24_end_of_packet +: 009378 g24_ackpayload_prep: +0x315d 009379 bpatch patch18_2 ,mem_patch18 +0x315e 009380 add regc ,offset_24g_datalen ,contw +0x315f 009381 call g24_mem_set0 +0x3160 009383 setarg offset_24g_ackpayload_enable +0x3161 009384 call g24_set_rega_ifetch_1byte +0x3162 009386 rtn blank +0x3163 009387 setarg 0x06 +0x3164 009388 add regc ,offset_24g_datalen ,contw +0x3165 009389 istore 1 ,contw +0x3166 009391 arg 0x06 ,loopcnt +0x3167 009392 setarg offset_24g_bind_payload +0x3168 009393 iadd regc ,contr +0x3169 009395 add regc ,offset_24g_txbuf ,contw +0x316a 009397 branch memcpy +: 009400 g24_receive_packet_start: +0x316b 009401 call g24_receive_transmit_ack +0x316c 009402 nbranch g24_rx_interrupt_clear ,user3 +0x316d 009403 branch g24_receive_packet_parse +: 009405 g24_receive_transmit_ack: +0x316e 009406 call g24_rx_interrupt_clear +0x316f 009407 call g24_receive_packet +0x3170 009408 nrtn user3 +0x3171 009409 branch g24_transmit_ack +: 009411 g24_receive_packet_parse: +0x3172 009412 bpatch patch18_3 ,mem_patch18 +0x3173 009413 call g24_receive_packet_parse_pid_crc +0x3174 009414 nbranch g24_rx_interrupt_clear ,user +0x3175 009415 add regc ,offset_24g_rxdata_length ,rega +0x3176 009416 ifetch 1 ,rega +0x3177 009418 branch g24_rx_interrupt_clear ,blank +0x3178 009419 increase 2 ,pdata +0x3179 009420 iforce loopcnt +0x317a 009421 add regc ,offset_24g_rxbuf ,contr +0x317b 009423 setarg offset_24g_rxdata_temp +0x317c 009424 iadd regc ,contw +0x317d 009426 call memcpy +0x317e 009427 call g24_set0_mem_mode_switch +0x317f 009429 call g24_fetch_mem_pair_mode +0x3180 009431 call g24_enable_nodata_timer ,blank +0x3181 009432 setarg offset_24g_rxdata_temp_add2 +0x3182 009433 call g24_set_rega_ifetch_1byte +0x3183 009435 beq 0x01 ,g24_data_type1 +0x3184 009436 beq 0x02 ,g24_data_type2 +0x3185 009437 beq 0x03 ,g24_data_type3 +0x3186 009438 beq 0xff ,g24_data_attemp +0x3187 009439 branch g24_rx_interrupt_clear +: 009441 g24_receive_packet_parse_pid_crc: +0x3188 009442 call g24_head_ptr2regc +0x3189 009443 call disable_user +0x318a 009444 add regc ,offset_24g_sta_pid ,rega +0x318b 009445 ifetch 1 ,rega +0x318c 009447 add regc ,offset_24g_last_pid ,rega +0x318d 009448 ifetcht 1 ,rega +0x318e 009450 isub temp ,null +0x318f 009451 ncall enable_user ,zero +0x3190 009452 add regc ,offset_24g_sta_pid ,rega +0x3191 009453 ifetch 1 ,rega +0x3192 009455 add regc ,offset_24g_last_pid ,contw +0x3193 009456 istore 1 ,contw +0x3194 009458 add regc ,offset_24g_sta_crc ,rega +0x3195 009459 ifetch 3 ,rega +0x3196 009461 add regc ,offset_24g_last_crc ,rega +0x3197 009462 ifetcht 3 ,rega +0x3198 009464 isub temp ,null +0x3199 009465 ncall enable_user ,zero +0x319a 009466 add regc ,offset_24g_sta_crc ,rega +0x319b 009467 ifetch 3 ,rega +0x319c 009469 add regc ,offset_24g_last_crc ,contw +0x319d 009471 branch g24_contw_istore_3byte +: 009473 g24_data_type1: +0x319e 009474 call g24_ch_timer_reinit +0x319f 009475 call g24_fetch_mem_abort_pac +0x31a0 009476 store 1 ,mem_temp +0x31a1 009478 call g24_fetcht_mem_rxdata_temp +0x31a2 009479 fetch 1 ,mem_temp +0x31a3 009481 isolate1 bit_abort ,temp +0x31a4 009482 setflag true ,0 ,pdata +0x31a5 009483 add regc ,offset_24g_abort_pac ,contw +0x31a6 009484 istore 1 ,contw +0x31a7 009486 beq 1 ,g24_data_attemp_mouse +0x31a8 009487 call g24_fetch_mem_hop_pac +0x31a9 009489 call g24_fetcht_mem_rxdata_temp +0x31aa 009491 isolate1 bit_hop ,temp +0x31ab 009492 setflag true ,0 ,pdata +0x31ac 009493 call g24_store_mem_hop_pac +0x31ad 009495 add regc ,offset_24g_cb_rxdata_type1 ,rega +0x31ae 009496 ifetch 2 ,rega +0x31af 009498 branch callback_func +: 009500 dongle_rxdata_type1: +0x31b0 009501 setarg ms_report_id +0x31b1 009502 store 1 ,mem_usb_mouse_data +0x31b2 009503 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b3 009505 istore 7 ,contw +0x31b4 009506 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b5 009508 ncall g24_ms_enable_blank_data_forcibly ,blank +0x31b6 009509 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b7 009511 call g24_ms_disable_blank_data_forcibly ,blank +: 009512 g24_data_type1_usbtx_enable: +0x31b8 009513 jam usb_ep2_ms ,mem_usb_ep2_data +: 009514 g24_data_type1_usbtx_enable_ep2: +0x31b9 009515 fetch 1 ,mem_usb_tx_enable +0x31ba 009516 set1 2 ,pdata +0x31bb 009517 store 1 ,mem_usb_tx_enable +0x31bc 009518 rtn +: 009520 g24_ms_enable_blank_data_forcibly: +0x31bd 009521 setarg 1 +0x31be 009522 call g24_store_mem_ms_blank_data_enable +: 009524 g24_ms_enable_blank_data_timer: +0x31bf 009525 setarg timer_ms_blank_delay +0x31c0 009526 arg timer_ms_blank ,queue +0x31c1 009527 branch timer_init +: 009528 g24_ms_disable_blank_data_forcibly: +0x31c2 009529 call g24_set0_mem_ms_blank_data_enable +: 009531 g24_ms_disable_blank_data_timer: +0x31c3 009532 setarg 0 +0x31c4 009533 arg timer_ms_blank ,queue +0x31c5 009534 branch timer_init +: 009536 g24_data_type2: +0x31c6 009537 call g24_fetcht_mem_rxdata_temp +0x31c7 009539 isolate1 bit_abort ,temp +0x31c8 009540 branch g24_data_attemp_kbd ,true +0x31c9 009541 arg mem_usb_kb_data ,contw +0x31ca 009542 call g24_data_type2_reverse_data +0x31cb 009543 fetch 8 ,mem_usb_kb_data +0x31cc 009544 ncall g24_kb_enable_blank_data_forcibly ,blank +0x31cd 009545 fetch 8 ,mem_usb_kb_data +0x31ce 009546 call g24_kb_disable_blank_data_forcibly ,blank +0x31cf 009547 call g24_head_ptr2regc +0x31d0 009548 fetch 8 ,mem_usb_kb_data +0x31d1 009549 arg offset_24g_kb_data_sta_data ,rega +0x31d2 009550 call g24_set_contw_with_temp +0x31d3 009551 istore 8 ,contw +0x31d4 009553 setarg offset_24g_kb_data_last_data +0x31d5 009554 iadd regc ,rega +0x31d6 009555 ifetcht 8 ,rega +0x31d7 009557 isub temp ,null +0x31d8 009558 ncall g24_kb_data_dispose ,zero +0x31d9 009559 setarg offset_24g_kb_data_sta_data +0x31da 009560 iadd regc ,rega +0x31db 009561 ifetch 8 ,rega +0x31dc 009563 arg offset_24g_kb_data_last_data ,rega +0x31dd 009564 call g24_set_contw_with_temp +0x31de 009565 istore 8 ,contw +0x31df 009567 branch g24_rx_interrupt_clear +: 009569 g24_data_type2_reverse_data: +0x31e0 009570 setarg offset_24g_rxdata_temp_add2 +0x31e1 009571 iadd regc ,contr +0x31e2 009573 arg 9 ,loopcnt +0x31e3 009574 branch reverse_byte +: 009576 g24_kb_enable_blank_data_forcibly: +0x31e4 009577 setarg 1 +0x31e5 009578 call g24_store_mem_kb_blank_data_enable +: 009580 g24_kb_enable_blank_data_timer: +0x31e6 009581 setarg timer_kb_blank_delay +0x31e7 009582 arg timer_kb_blank ,queue +0x31e8 009583 branch timer_init +: 009585 g24_kb_disable_blank_data_forcibly: +0x31e9 009586 call g24_set0_mem_kb_blank_data_enable +: 009588 g24_kb_disable_blank_data_timer: +0x31ea 009589 setarg 0 +0x31eb 009590 arg timer_kb_blank ,queue +0x31ec 009591 branch timer_init +: 009593 g24_kb_data_dispose: +: 009594 g24_kb_data_into_ep1_fifo: +0x31ed 009595 jam usb_ep1_kb ,mem_usb_ep1_data +0x31ee 009596 fetch 1 ,mem_usb_tx_enable +0x31ef 009597 set1 1 ,pdata +0x31f0 009598 store 1 ,mem_usb_tx_enable +0x31f1 009599 rtn +: 009601 g24_data_type3: +0x31f2 009602 arg mem_usb_kb_multikey ,contw +0x31f3 009603 call g24_data_type2_reverse_data +0x31f4 009604 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f5 009605 ncall g24_kb_mul_enable_blank_data_forcibly ,blank +0x31f6 009606 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f7 009607 call g24_kb_mul_disable_blank_data_forcibly ,blank +0x31f8 009608 call g24_head_ptr2regc +0x31f9 009609 fetch 3 ,mem_usb_kb_multikey +0x31fa 009610 arg offset_24g_kb_multikey_sta_data ,rega +0x31fb 009611 call g24_set_contw_with_temp_store_3byte +0x31fc 009613 setarg offset_24g_kb_multikey_last_data +0x31fd 009614 iadd regc ,rega +0x31fe 009615 ifetcht 3 ,rega +0x31ff 009617 isub temp ,null +0x3200 009618 ncall g24_kb_mul_data_into_ep2_fifo ,zero +0x3201 009619 setarg offset_24g_kb_multikey_sta_data +0x3202 009620 iadd regc ,rega +0x3203 009621 ifetch 3 ,rega +0x3204 009623 arg offset_24g_kb_multikey_last_data ,rega +0x3205 009624 call g24_set_contw_with_temp_store_3byte +0x3206 009626 branch g24_rx_interrupt_clear +: 009628 g24_kb_mul_data_into_ep2_fifo: +0x3207 009629 jam usb_ep2_multikey ,mem_usb_ep2_data +0x3208 009630 branch g24_data_type1_usbtx_enable_ep2 +: 009632 g24_kb_mul_enable_blank_data_forcibly: +0x3209 009633 setarg 1 +0x320a 009634 call g24_store_mem_kb_mul_blank_data_enable +: 009636 g24_kb_mul_enable_blank_data_timer: +0x320b 009637 setarg timer_kb_mul_blank_delay +0x320c 009638 arg timer_kb_mul_blank ,queue +0x320d 009639 branch timer_init +: 009641 g24_kb_mul_disable_blank_data_forcibly: +0x320e 009642 call g24_set0_mem_kb_mul_blank_data_enable +: 009644 g24_kb_mul_disable_blank_data_timer: +0x320f 009645 setarg 0 +0x3210 009646 arg timer_kb_mul_blank ,queue +0x3211 009647 branch timer_init +: 009649 g24_data_attemp: +0x3212 009650 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3213 009652 beq datatype_mouse ,g24_data_attemp_mouse +0x3214 009653 beq datatype_keyboard ,g24_data_attemp_kbd +0x3215 009654 rtn +: 009655 g24_data_attemp_mouse: +0x3216 009656 setarg offset_24g_rxdata_temp_add4 +0x3217 009657 call g24_set_rega_ifetch_4byte +0x3218 009658 arg offset_24g_mouse_addr ,rega +0x3219 009659 call g24_set_contw_with_temp +0x321a 009662 branch g24_contw_istore_4byte +: 009664 g24_data_attemp_kbd: +0x321b 009665 setarg offset_24g_rxdata_temp_add4 +0x321c 009666 call g24_set_rega_ifetch_4byte +0x321d 009667 arg offset_24g_kb_addr ,rega +0x321e 009668 call g24_set_contw_with_temp +0x321f 009671 branch g24_contw_istore_4byte +: 009673 g24_store_mem_24g_mode: +0x3220 009674 call g24_head_ptr2regc +0x3221 009675 add regc ,offset_24g_mode ,contw +0x3222 009676 istore 1 ,contw +0x3223 009677 rtn +: 009679 g24_fetch_mem_device_addr: +0x3224 009680 call g24_head_ptr2regc +0x3225 009681 add regc ,offset_24g_device_addr ,rega +0x3226 009682 branch g24_rega_ifetch_4byte +: 009683 g24_store_mem_device_addr: +0x3227 009684 call g24_head_ptr2regc +0x3228 009685 add regc ,offset_24g_device_addr ,contw +0x3229 009686 branch g24_contw_istore_4byte +: 009688 g24_fetch_mem_addr: +0x322a 009689 add regc ,offset_24g_addr ,rega +0x322b 009690 branch g24_rega_ifetch_4byte +: 009691 g24_store_mem_addr: +0x322c 009692 add regc ,offset_24g_addr ,contw +: 009693 g24_contw_istore_4byte: +0x322d 009694 istore 4 ,contw +0x322e 009695 rtn +: 009697 g24_store_mem_ch: +0x322f 009698 add regc ,offset_24g_ch ,contw +0x3230 009699 branch g24_contw_istore_1byte +: 009701 g24_set0_mem_pid: +0x3231 009702 setarg 0 +: 009703 g24_store_mem_pid: +0x3232 009704 call g24_head_ptr2regc +0x3233 009705 add regc ,offset_24g_pid ,contw +0x3234 009706 branch g24_contw_istore_1byte +: 009708 g24_store_mem_txpayload: +0x3235 009709 add regc ,offset_24g_txpayload ,contw +0x3236 009710 branch g24_contw_istore_1byte +: 009712 g24_set4_mem_max_retry: +0x3237 009713 setarg 4 +: 009714 g24_store_mem_max_retry: +0x3238 009715 add regc ,offset_24g_max_retry ,contw +0x3239 009716 branch g24_contw_istore_1byte +: 009718 g24_fetch_mem_data_type: +0x323a 009719 add regc ,offset_24g_data_type ,rega +0x323b 009720 branch g24_rega_ifetch_1byte +: 009721 g24_store_mem_data_type: +0x323c 009722 add regc ,offset_24g_data_type ,contw +0x323d 009723 branch g24_contw_istore_1byte +: 009725 g24_set2_mem_sync_cnt: +0x323e 009726 setarg 2 +: 009727 g24_store_mem_sync_cnt: +0x323f 009728 add regc ,offset_24g_sync_cnt ,contw +0x3240 009729 branch g24_contw_istore_1byte +: 009731 g24_set1_mem_rf_last_sta: +0x3241 009732 setarg 1 +: 009733 g24_store_mem_rf_last_sta: +0x3242 009734 call g24_head_ptr2regc +0x3243 009735 add regc ,offset_24g_rf_last_sta ,contw +0x3244 009736 branch g24_contw_istore_1byte +: 009738 g24_fetch_mem_hop_pac: +0x3245 009739 call g24_head_ptr2regc +0x3246 009740 add regc ,offset_24g_hop_pac ,rega +0x3247 009741 branch g24_rega_ifetch_1byte +: 009742 g24_set1_mem_hop_pac: +0x3248 009743 setarg 1 +: 009744 g24_store_mem_hop_pac: +0x3249 009745 call g24_head_ptr2regc +0x324a 009746 add regc ,offset_24g_hop_pac ,contw +0x324b 009747 branch g24_contw_istore_1byte +: 009749 g24_fetch_mem_abort_pac: +0x324c 009750 call g24_head_ptr2regc +0x324d 009751 add regc ,offset_24g_abort_pac ,rega +0x324e 009752 branch g24_rega_ifetch_1byte +: 009753 g24_set1_mem_abort_pac: +0x324f 009754 setarg 1 +: 009755 g24_store_mem_abort_pac: +0x3250 009756 call g24_head_ptr2regc +0x3251 009757 add regc ,offset_24g_abort_pac ,contw +0x3252 009758 branch g24_contw_istore_1byte +: 009760 g24_fetch_mem_pairing_sm: +0x3253 009761 call g24_head_ptr2regc +0x3254 009762 add regc ,offset_24g_pairing_sm ,rega +0x3255 009763 branch g24_rega_ifetch_1byte +: 009764 g24_store_mem_pairing_sm: +0x3256 009765 add regc ,offset_24g_pairing_sm ,contw +0x3257 009766 branch g24_contw_istore_1byte +: 009768 g24_fetch_mem_rf_hop_ch: +0x3258 009769 add regc ,offset_24g_rf_hop_ch ,rega +0x3259 009770 branch g24_rega_ifetch_1byte +: 009771 g24_set0_mem_rf_hop_ch: +0x325a 009772 setarg 0 +: 009773 g24_store_mem_rf_hop_ch: +0x325b 009774 add regc ,offset_24g_rf_hop_ch ,contw +0x325c 009775 branch g24_contw_istore_1byte +: 009777 g24_fetch_mem_rf_work_stage: +0x325d 009778 add regc ,offset_24g_rf_work_stage ,rega +0x325e 009779 branch g24_rega_ifetch_1byte +: 009781 g24_fetch_mem_rxbuf_add1: +0x325f 009782 add regc ,offset_24g_rxbuf_add1 ,rega +0x3260 009783 branch g24_rega_ifetch_1byte +: 009785 g24_fetch_mem_check_dongle_times: +0x3261 009786 add regc ,offset_24g_check_dongle_times ,rega +0x3262 009787 branch g24_rega_ifetch_1byte +: 009788 g24_set0_mem_check_dongle_times: +0x3263 009789 setarg 0 +: 009790 g24_store_mem_check_dongle_times: +0x3264 009791 call g24_head_ptr2regc +0x3265 009792 add regc ,offset_24g_check_dongle_times ,contw +0x3266 009793 branch g24_contw_istore_1byte +: 009795 g24_store_mem_tx_power: +0x3267 009796 call g24_head_ptr2regc +0x3268 009797 add regc ,offset_tx_power_temp ,rega +0x3269 009798 ifetch 1 ,rega +: 009799 g24_store_mem_txpower: +0x326a 009800 store 1 ,mem_tx_power +0x326b 009801 rtn +: 009803 g24_store_mem_tx_power_temp: +0x326c 009804 call g24_head_ptr2regc +0x326d 009805 fetch 1 ,mem_tx_power +0x326e 009807 add regc ,offset_tx_power_temp ,contw +0x326f 009808 branch g24_contw_istore_1byte +: 009810 g24_fetch_mem_power_ctrl_pac: +0x3270 009811 add regc ,offset_power_ctrl_packet_cnt ,rega +0x3271 009812 branch g24_rega_ifetch_1byte +: 009814 g24_store_mem_power_ctrl_level: +0x3272 009815 add regc ,offset_power_ctrl_level ,contw +0x3273 009816 branch g24_contw_istore_1byte +: 009818 g24_fetcht_mem_rxdata_temp: +0x3274 009819 setarg offset_24g_rxdata_temp +: 009820 g24_set_rega_ifetcht_1byte: +0x3275 009821 iadd regc ,rega +0x3276 009822 ifetcht 1 ,rega +0x3277 009823 rtn +: 009825 g24_fetch_mem_rf_laststa: +0x3278 009826 setarg offset_24g_rf_laststa +0x3279 009827 branch g24_set_rega_ifetch_1byte +: 009828 g24_set0_mem_rf_laststa: +0x327a 009829 setarg 0 +: 009830 g24_store_mem_rf_laststa: +0x327b 009831 arg offset_24g_rf_laststa ,rega +0x327c 009832 branch g24_set_contw_with_regb_store_1byte +: 009834 g24_fetch_mem_rx_addr: +0x327d 009835 setarg offset_24g_rx_addr +: 009836 g24_set_rega_ifetch_4byte: +0x327e 009837 call g24_set_rega +: 009838 g24_rega_ifetch_4byte: +0x327f 009839 ifetch 4 ,rega +0x3280 009840 rtn +: 009842 g24_fetch_mem_time_slice: +0x3281 009843 setarg offset_24g_time_slice +0x3282 009844 branch g24_set_rega_ifetch_1byte +: 009845 g24_set0_mem_time_slice: +0x3283 009846 setarg 0 +: 009847 g24_store_mem_time_slice: +0x3284 009848 arg offset_24g_time_slice ,rega +0x3285 009849 branch g24_set_contw_with_regb_store_1byte +: 009851 g24_set0_mem_mode_switch: +0x3286 009852 setarg 0 +: 009853 g24_store_mem_mode_switch: +0x3287 009854 arg offset_24g_mode_switch ,rega +0x3288 009855 branch g24_set_contw_with_regb_store_1byte +: 009857 g24_store_mem_bind_payload: +0x3289 009858 arg offset_24g_bind_payload ,rega +0x328a 009859 branch g24_set_contw_with_regb_store_1byte +: 009861 g24_fetch_mem_bind_device_status: +0x328b 009862 setarg offset_dongle_bind_device_status +0x328c 009863 branch g24_set_rega_ifetch_1byte +: 009864 g24_store_mem_bind_device_status: +0x328d 009865 arg offset_dongle_bind_device_status ,rega +0x328e 009866 branch g24_set_contw_with_regb_store_1byte +: 009868 g24_fetch_mem_dongle_work_mode: +0x328f 009869 setarg offset_dongle_work_mode +0x3290 009870 branch g24_set_rega_ifetch_1byte +: 009871 g24_set_work_mem_dongle_work_mode: +0x3291 009872 setarg dongle_work +: 009873 g24_store_mem_dongle_work_mode: +0x3292 009874 arg offset_dongle_work_mode ,rega +0x3293 009875 branch g24_set_contw_with_regb_store_1byte +: 009877 g24_fetch_mem_dongle_mode_init: +0x3294 009878 setarg offset_dongle_mode_init +0x3295 009879 branch g24_set_rega_ifetch_1byte +: 009880 g24_set0_mem_dongle_mode_init: +0x3296 009881 setarg clear_init +: 009882 g24_store_mem_dongle_mode_init: +0x3297 009883 arg offset_dongle_mode_init ,rega +0x3298 009884 branch g24_set_contw_with_regb_store_1byte +: 009886 g24_set0_mem_ackpayload_enable: +0x3299 009887 setarg 0 +: 009888 g24_store_mem_ackpayload_enable: +0x329a 009889 arg offset_24g_ackpayload_enable ,rega +0x329b 009890 branch g24_set_contw_with_regb_store_1byte +: 009891 g24_set1_mem_ackpayload_enable: +0x329c 009892 setarg 1 +0x329d 009893 branch g24_store_mem_ackpayload_enable +: 009895 g24_fetch_mem_rxdata_temp_add3_7byte: +0x329e 009896 setarg offset_24g_rxdata_temp_add3 +0x329f 009897 call g24_set_rega +0x32a0 009898 ifetch 7 ,rega +0x32a1 009899 rtn +: 009901 g24_fetch_mem_nodata_timer_enable: +0x32a2 009902 setarg offset_24g_nodata_timer_enable +0x32a3 009903 branch g24_set_rega_ifetch_1byte +: 009904 g24_set0_mem_nodata_timer_enable: +0x32a4 009905 setarg 0 +: 009906 g24_store_mem_nodata_timer_enable: +0x32a5 009907 arg offset_24g_nodata_timer_enable ,rega +0x32a6 009908 branch g24_set_contw_with_regb_store_1byte +: 009910 g24_set0_mem_ms_blank_data_enable: +0x32a7 009911 setarg 0 +: 009912 g24_store_mem_ms_blank_data_enable: +0x32a8 009913 arg offset_24g_ms_blank_data_enable ,rega +0x32a9 009914 branch g24_set_contw_with_regb_store_1byte +: 009916 g24_set0_mem_kb_blank_data_enable: +0x32aa 009917 setarg 0 +: 009918 g24_store_mem_kb_blank_data_enable: +0x32ab 009919 arg offset_24g_kb_blank_data_enable ,rega +0x32ac 009920 branch g24_set_contw_with_regb_store_1byte +: 009922 g24_set0_mem_kb_mul_blank_data_enable: +0x32ad 009923 setarg 0 +: 009924 g24_store_mem_kb_mul_blank_data_enable: +0x32ae 009925 arg offset_24g_kb_mul_blank_data_enable ,rega +0x32af 009926 branch g24_set_contw_with_regb_store_1byte +: 009928 g24_store_mem_power_ctrl_threshold_up: +0x32b0 009929 arg offset_power_ctrl_threshold_up ,rega +0x32b1 009930 branch g24_set_contw_with_regb_store_1byte +: 009932 g24_store_mem_power_ctrl_threshold_down: +0x32b2 009933 arg offset_power_ctrl_threshold_down ,rega +: 009934 g24_set_contw_with_regb_store_1byte: +0x32b3 009935 call g24_set_contw_with_regb +: 009936 g24_contw_istore_1byte: +0x32b4 009937 istore 1 ,contw +0x32b5 009938 rtn +: 009940 g24_fetch_mem_pair_mode: +0x32b6 009941 setarg offset_24g_pair_mode +0x32b7 009942 branch g24_set_rega_ifetch_1byte +: 009944 g24_store_mem_pair_mode: +0x32b8 009945 arg offset_24g_pair_mode ,rega +0x32b9 009946 branch g24_set_contw_with_regb_store_1byte +: 009948 g24_store_mem_pair_txpower: +0x32ba 009949 setarg offset_24g_pair_txpower +0x32bb 009950 call g24_set_rega_ifetch_1byte +0x32bc 009951 branch g24_store_mem_txpower +: 009953 g24_fetch_mem_rxdata_temp_add3_1byte: +0x32bd 009954 setarg offset_24g_rxdata_temp_add3 +0x32be 009955 branch g24_set_rega_ifetch_1byte +: 009957 g24_set_contw_with_temp: +0x32bf 009958 copy pdata ,temp +0x32c0 009959 copy rega ,pdata +0x32c1 009960 iadd regc ,contw +0x32c2 009961 copy temp ,pdata +0x32c3 009962 rtn +: 009964 g24_set_contw_with_temp_store_3byte: +0x32c4 009965 call g24_set_contw_with_temp +: 009966 g24_contw_istore_3byte: +0x32c5 009967 istore 3 ,contw +0x32c6 009968 rtn +: 009970 g24_set_contw_with_regb: +0x32c7 009971 call g24_head_ptr2regc +: 009972 g24_set_contw_with_regb2: +0x32c8 009973 copy pdata ,regb +0x32c9 009974 copy rega ,pdata +0x32ca 009975 iadd regc ,contw +0x32cb 009976 copy regb ,pdata +0x32cc 009977 rtn +: 009979 g24_set_rega: +0x32cd 009980 call g24_head_ptr2regc +0x32ce 009981 iadd regc ,rega +0x32cf 009982 rtn +: 009984 g24_set_rega_ifetch_1byte: +0x32d0 009985 call g24_set_rega +: 009986 g24_rega_ifetch_1byte: +0x32d1 009987 ifetch 1 ,rega +0x32d2 009988 rtn +: 009990 g24_set_rega_ifetcht_4byte: +0x32d3 009991 call g24_set_rega +0x32d4 009992 ifetcht 4 ,rega +0x32d5 009993 rtn +: 009995 g24_mem_set0: +0x32d6 009996 setarg 0 +0x32d7 009997 branch g24_contw_istore_1byte +: 010001 app_init: +0x32d8 010002 bpatch patch18_4 ,mem_patch18 +0x32d9 010003 fetch 1 ,mem_device_option +0x32da 010004 branch app_init ,blank +0x32db 010006 beq dvc_op_dongle ,dongle_init +0x32dc 010007 beq dvc_op_antilost ,antilost_init +0x32dd 010008 beq dvc_op_shutter ,shutter_init +0x32de 010009 beq dvc_op_module ,module_init +0x32df 010010 beq dvc_op_car ,car_init +0x32e0 010011 beq dvc_op_remote_car ,remote_car_init +0x32e1 010012 bbit1 dvc_op_mouse ,mouse_init +0x32e2 010013 rtn +: 010015 app_lpm_init: +0x32e3 010016 bpatch patch18_5 ,mem_patch18 +0x32e4 010017 jam 0 ,mem_tester_emulate +0x32e5 010018 jam 0 ,mem_debug_config +0x32e6 010019 jam 0 ,mem_lch_code +0x32e7 010020 setarg 0 +0x32e8 010021 store 5 ,mem_sp_state_start +0x32e9 010022 fetch 1 ,mem_device_option +0x32ea 010023 branch app_lpm_init ,blank +0x32eb 010024 beq dvc_op_module ,module_lpm_init +: 010025 app_lpm_init0: +0x32ec 010026 rtn +: 010029 app_process_idle: +0x32ed 010030 call ui_dispatch +0x32ee 010031 call check_51cmd +0x32ef 010032 call app_process_bb_event +0x32f0 010033 fetch 2 ,mem_cb_idle_process +0x32f1 010034 branch callback_func +: 010036 app_process_bt: +0x32f2 010037 fetch 2 ,mem_cb_bt_process +0x32f3 010038 branch callback_func +: 010040 app_process_ble: +0x32f4 010041 fetch 2 ,mem_cb_le_process +0x32f5 010042 branch callback_func +: 010044 app_process_bb_event: +0x32f6 010045 bpatch patch18_6 ,mem_patch18 +0x32f7 010047 arg mem_ipc_fifo_bt2c51 ,rega +0x32f8 010048 call fifo_out +0x32f9 010049 rtn blank +0x32fa 010051 copy pdata ,regc +0x32fb 010052 call app_event_normal_process +0x32fc 010053 branch app_process_bb_event_priority +: 010055 app_discard_event: +0x32fd 010056 arg 0 ,regc +0x32fe 010057 rtn +: 010062 app_event_normal_process: +0x32ff 010063 beq bt_evt_bb_connected ,app_evt_bt_conn +0x3300 010064 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +0x3301 010065 beq bt_evt_setup_complete ,app_evt_setup_complete +0x3302 010066 beq bt_evt_hid_handshake ,app_evt_hid_handshake +0x3303 010067 beq bt_evt_hid_connected ,app_bb_event_hid_connected +0x3304 010068 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +0x3305 010069 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +0x3306 010070 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +0x3307 010071 beq bt_evt_le_connected ,app_le_event_bb_connected +0x3308 010072 beq bt_evt_le_disconnected ,app_le_event_bb_disconn +0x3309 010073 beq bt_evt_reconn_started ,app_event_reconn_start +0x330a 010074 beq bt_evt_enter_sniff ,app_event_enter_sniff +0x330b 010075 beq bt_evt_exit_sniff ,app_event_exit_sniff +0x330c 010077 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +0x330d 010078 beq bt_evt_linkkey_generate ,app_event_linkkey_generate +0x330e 010079 beq bt_evt_switch_fail_master ,app_event_switch_fail_master +0x330f 010080 beq bt_evt_switch_success_master ,app_event_switch_success +0x3310 010081 rtn +: 010084 app_evt_bt_conn: +0x3311 010085 fetch 2 ,mem_ui_state_map +0x3312 010086 set1 ui_state_bt_connected ,pdata +0x3313 010087 store 2 ,mem_ui_state_map +0x3314 010088 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3315 010089 set0 app_disc_by_button ,pdata +0x3316 010090 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3317 010091 rtn +: 010093 app_event_switch_success: +0x3318 010094 jam 0 ,mem_switch_fail_master_count +0x3319 010095 rtn +: 010097 app_event_switch_fail_master: +0x331a 010098 fetch 1 ,mem_switch_fail_master_count +0x331b 010099 increase 1 ,pdata +0x331c 010100 store 1 ,mem_switch_fail_master_count +0x331d 010101 sub pdata ,1 ,null +0x331e 010102 branch app_bt_role_switch ,positive +0x331f 010103 jam 0 ,mem_switch_fail_master_count +0x3320 010104 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3321 010105 set1 app_disc_switch_fail ,pdata +0x3322 010106 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3323 010107 branch app_bt_disconnect +: 010109 app_process_bb_event_priority: +0x3324 010110 fetch 2 ,mem_cb_bb_event_process +0x3325 010111 branch callback_func +: 010113 app_check_wake_lock: +0x3326 010114 fetch 2 ,mem_cb_check_wakelock +0x3327 010115 branch callback_func +: 010117 app_will_enter_lpm: +0x3328 010118 fetch 2 ,mem_cb_before_lpm +0x3329 010119 branch callback_func +: 010121 app_event_linkkey_generate: +0x332a 010122 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332b 010123 set1 app_disc_after_pairing ,pdata +0x332c 010124 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332d 010125 branch app_bt_store_reconn_info +: 010127 app_event_reconn_start: +0x332e 010128 fetch 2 ,mem_ui_state_map +0x332f 010129 set1 ui_state_bt_reconnect ,pdata +0x3330 010130 store 2 ,mem_ui_state_map +0x3331 010131 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3332 010132 set1 app_disc_after_reconn ,pdata +0x3333 010133 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3334 010134 rtn +: 010136 app_evt_setup_complete: +0x3335 010137 fetch 2 ,mem_ui_state_map +0x3336 010138 set1 ui_state_bt_setup_complete ,pdata +0x3337 010139 store 2 ,mem_ui_state_map +0x3338 010140 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3339 010141 set1 app_disc_after_setup_done ,pdata +0x333a 010142 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x333b 010143 rtn +: 010145 app_evt_hid_handshake: +0x333c 010146 fetch 2 ,mem_ui_state_map +0x333d 010147 set1 ui_state_bt_hid_handshake ,pdata +0x333e 010148 store 2 ,mem_ui_state_map +0x333f 010149 rtn +: 010151 app_event_enter_sniff: +0x3340 010152 fetch 2 ,mem_ui_state_map +0x3341 010153 set1 ui_state_bt_sniff ,pdata +0x3342 010154 store 2 ,mem_ui_state_map +0x3343 010155 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3344 010156 set1 app_disc_after_sniff ,pdata +0x3345 010157 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3346 010158 rtn +: 010160 app_event_exit_sniff: +0x3347 010161 fetch 2 ,mem_ui_state_map +0x3348 010162 set0 ui_state_bt_sniff ,pdata +0x3349 010163 store 2 ,mem_ui_state_map +0x334a 010164 rtn +: 010166 app_le_event_bb_connected: +0x334b 010167 fetch 2 ,mem_ui_state_map +0x334c 010168 set1 ui_state_ble_connected ,pdata +0x334d 010169 store 2 ,mem_ui_state_map +0x334e 010170 rtn +: 010172 app_le_event_bb_disconn: +0x334f 010173 fetch 2 ,mem_ui_state_map +0x3350 010174 set0 ui_state_ble_connected ,pdata +0x3351 010175 store 2 ,mem_ui_state_map +0x3352 010176 branch app_lpm_mult_disable +: 010178 app_bb_event_hid_connected: +0x3353 010179 fetch 2 ,mem_ui_state_map +0x3354 010180 set1 ui_state_bt_hid_conn ,pdata +0x3355 010181 store 2 ,mem_ui_state_map +0x3356 010182 rtn +: 010184 app_evt_button_long_pressed: +0x3357 010185 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3358 010186 set1 app_disc_by_button ,pdata +0x3359 010187 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335a 010188 rtn +: 010190 app_event_ml2cap_conn_refused: +0x335b 010191 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335c 010192 set1 app_disc_l2cap_refused ,pdata +0x335d 010193 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335e 010194 branch app_bt_disconnect +: 010197 app_evt_timer: +0x335f 010198 bpatch patch18_7 ,mem_patch18 +0x3360 010199 store 1 ,mem_app_evt_timer_count +: 010200 app_evt_100ms_loop: +0x3361 010201 fetch 1 ,mem_app_evt_timer_count +0x3362 010202 rtn blank +0x3363 010203 increase -1 ,pdata +0x3364 010204 store 1 ,mem_app_evt_timer_count +0x3365 010205 call ui_button_polling +0x3366 010206 call app_lpm_wake_auto_lock_timer +0x3367 010207 call app_unsniff_delay_timer +0x3368 010208 call app_discovery_timer +0x3369 010209 call flash_write_spi_sm_timer +0x336a 010210 fetch 2 ,mem_cb_event_timer +0x336b 010211 call callback_func +0x336c 010212 branch app_evt_100ms_loop +: 010217 timer_single_step: +0x336d 010218 ifetch 1 ,regc +0x336e 010219 rtn blank +0x336f 010220 pincrease -1 +0x3370 010221 istore 1 ,regc +0x3371 010222 nrtn blank +0x3372 010223 copy regb ,pdata +0x3373 010224 branch callback_func +: 010228 timer_single_step_2b: +0x3374 010229 ifetch 2 ,regc +0x3375 010230 rtn blank +0x3376 010231 pincrease -1 +0x3377 010232 istore 2 ,regc +0x3378 010233 nrtn blank +0x3379 010234 copy regb ,pdata +0x337a 010235 branch callback_func +: 010237 app_power_timer: +0x337b 010238 fetcht 2 ,mem_power_param_ptr +0x337c 010239 add temp ,power_timer_offset ,regc +0x337d 010240 arg app_power_timer_timeout ,regb +0x337e 010241 branch timer_single_step +: 010243 app_power_timer_timeout: +0x337f 010244 call app_got_power_state_common +0x3380 010245 beq power_starting ,app_enter_power_stanby_state +: 010246 app_enter_power_off_state: +0x3381 010247 branch app_enter_hibernate +: 010248 app_enter_power_stanby_state: +0x3382 010249 setarg power_standby +0x3383 010250 istore 1 ,regc +0x3384 010251 add temp ,power_standby_cb_offset ,regb +: 010252 app_power_cb_common: +0x3385 010253 ifetch 2 ,regb +0x3386 010254 branch callback_func +: 010256 app_unsniff_delay_timer: +0x3387 010257 arg mem_unsniff2sniff_timer_count ,regc +0x3388 010258 arg app_unsniff_delay_timeout ,regb +0x3389 010259 branch timer_single_step +: 010261 app_unsniff_delay_timeout: +0x338a 010262 call context_check_idle +0x338b 010263 branch app_bt_enter_sniff ,zero +0x338c 010264 rtn +: 010267 app_discovery_timer: +0x338d 010268 arg mem_discovery_timeout_timer_count ,regc +0x338e 010269 arg app_discovery_timeout ,regb +0x338f 010270 branch timer_single_step_2b +: 010272 app_discovery_timeout: +0x3390 010273 call app_bt_stop_discovery +0x3391 010274 call app_led_off +0x3392 010275 fetch 2 ,mem_cb_discovry_timeout +0x3393 010276 branch callback_func +: 010279 app_bb_event_reconn_failed: +0x3394 010280 call app_disconn_reason_flag_clear +: 010281 app_clear_reconnect_flag: +0x3395 010282 fetch 2 ,mem_ui_state_map +0x3396 010283 set0 ui_state_bt_reconnect ,pdata +0x3397 010284 store 2 ,mem_ui_state_map +0x3398 010285 rtn +: 010287 app_bb_event_bb_disconn: +0x3399 010288 jam 0 ,mem_unsniff2sniff_timer_count +0x339a 010289 fetch 2 ,mem_ui_state_map +0x339b 010290 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +0x339c 010291 isolate0 ui_state_bt_setup_complete ,pdata +0x339d 010292 call app_discard_event ,true +: 010293 app_bb_event_bb_reconn_disconn: +0x339e 010294 bpatch patch19_0 ,mem_patch19 +0x339f 010295 fetch 2 ,mem_ui_state_map +0x33a0 010296 set0 ui_state_bt_connected ,pdata +0x33a1 010297 set0 ui_state_bt_setup_complete ,pdata +0x33a2 010298 set0 ui_state_bt_hid_conn ,pdata +0x33a3 010299 set0 ui_state_bt_hid_handshake ,pdata +0x33a4 010300 set0 ui_state_bt_reconnect ,pdata +0x33a5 010301 store 2 ,mem_ui_state_map +0x33a6 010302 branch app_lpm_mult_disable +: 010304 app_bb_hibernate: +0x33a7 010305 call app_disconn_reason_clear +0x33a8 010306 branch app_enter_hibernate +: 010309 app_disconn_reason_clear: +0x33a9 010310 setarg 0 +0x33aa 010311 store app_disc_rsn_size ,mem_app_disconn_reason +0x33ab 010312 rtn +: 010313 app_disconn_reason_flag_clear: +0x33ac 010314 setarg 0 +0x33ad 010315 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33ae 010316 rtn +: 010318 app_disconn_reason_collect_bt: +0x33af 010319 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b0 010320 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b1 010321 setarg 0 +0x33b2 010322 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b3 010323 rtn +: 010325 app_disconn_reason_collect_ble: +0x33b4 010326 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b5 010327 set1 app_disc_ble ,pdata +0x33b6 010328 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b7 010329 setarg 0 +0x33b8 010330 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b9 010331 rtn +: 010339 app_check_sniff: +0x33ba 010340 fetch 1 ,mem_ui_state_map +0x33bb 010341 isolate1 ui_state_bt_sniff ,pdata +0x33bc 010342 rtn +: 010350 app_initflag_store: +0x33bd 010351 setarg eeprom_init_flag +: 010352 app_flag_store: +0x33be 010353 store 2 ,mem_timeup +0x33bf 010354 bpatch patch19_1 ,mem_patch19 +0x33c0 010355 arg 2 ,temp +0x33c1 010356 arg mem_timeup ,rega +0x33c2 010357 arg eeprom_module_init_flag ,regb +0x33c3 010358 branch iicd_write_eep_data +: 010361 app_initflag_check: +0x33c4 010362 bpatch patch19_2 ,mem_patch19 +0x33c5 010363 arg 2 ,temp +0x33c6 010364 arg mem_pdatatemp ,rega +0x33c7 010365 arg eeprom_module_init_flag ,regb +0x33c8 010366 call iicd_read_eep_data +0x33c9 010367 fetch 2 ,mem_pdatatemp +0x33ca 010368 arg eeprom_init_flag ,temp +0x33cb 010369 isub temp ,null +0x33cc 010370 rtn +: 010373 app_start_auto_sniff: +0x33cd 010374 fetch 1 ,mem_unsniff2sniff_timer +0x33ce 010375 store 1 ,mem_unsniff2sniff_timer_count +0x33cf 010376 rtn +: 010378 app_get_lpm_wake_lock: +0x33d0 010379 arg wake_lock_app ,queue +0x33d1 010380 branch lpm_get_wake_lock +: 010382 app_put_lpm_wake_lock: +0x33d2 010383 arg wake_lock_app ,queue +0x33d3 010384 branch lpm_put_wake_lock +: 010386 app_lpm_wake_auto_lock: +0x33d4 010387 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +0x33d5 010388 branch app_get_lpm_wake_lock +: 010390 app_lpm_wake_auto_lock_timer: +0x33d6 010391 arg mem_wake_up_delay_timer ,regc +0x33d7 010392 arg app_put_lpm_wake_lock ,regb +0x33d8 010393 branch timer_single_step +: 010395 app_l2cap_flow_control_enable: +0x33d9 010396 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +0x33da 010397 rtn +: 010399 app_l2cap_flow_control_disable: +0x33db 010400 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +0x33dc 010401 rtn +: 010403 app_bt_set_pincode: +0x33dd 010404 jam bt_cmd_set_pin_code ,mem_fifo_temp +0x33de 010405 branch ui_ipc_send_cmd +: 010407 app_bt_role_switch: +0x33df 010408 jam bt_cmd_role_switch ,mem_fifo_temp +0x33e0 010409 branch ui_ipc_send_cmd +: 010411 app_bt_start_reconnect: +0x33e1 010412 bpatch patch19_3 ,mem_patch19 +0x33e2 010413 fetch 1 ,mem_app_connection_options +0x33e3 010414 store 1 ,mem_connection_options +0x33e4 010415 jam app_flag_reconnect ,mem_reconnect_flag +0x33e5 010416 jam bt_cmd_reconnect ,mem_fifo_temp +0x33e6 010417 branch ui_ipc_send_cmd +: 010419 app_bt_reconnect_cancel: +0x33e7 010420 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +0x33e8 010421 branch ui_ipc_send_cmd +: 010423 app_bt_disconnect: +0x33e9 010424 jam bt_cmd_disconnect ,mem_fifo_temp +0x33ea 010425 branch ui_ipc_send_cmd +: 010427 app_bt_start_discovery_short: +0x33eb 010428 fetch 2 ,mem_discovery_timeout +0x33ec 010429 store 2 ,mem_discovery_timeout_timer_count +: 010430 app_bt_start_discovery_led_blink: +0x33ed 010431 call app_led_start_blink +: 010432 app_bt_start_discovery: +0x33ee 010433 jam bt_cmd_start_discovery ,mem_fifo_temp +0x33ef 010434 branch ui_ipc_send_cmd +: 010436 app_bt_stop_discovery: +0x33f0 010437 setarg 0 +0x33f1 010438 store 2 ,mem_discovery_timeout_timer_count +0x33f2 010439 jam bt_cmd_stop_discovery ,mem_fifo_temp +0x33f3 010440 branch ui_ipc_send_cmd +: 010442 app_ble_start_direct_adv: +0x33f4 010443 jam bt_cmd_start_direct_adv ,mem_fifo_temp +0x33f5 010444 branch ui_ipc_send_cmd +: 010446 app_ble_stop_direct_adv: +0x33f6 010447 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +0x33f7 010448 branch ui_ipc_send_cmd +: 010450 app_ble_stop_adv: +0x33f8 010451 jam bt_cmd_stop_adv ,mem_fifo_temp +0x33f9 010452 branch ui_ipc_send_cmd +: 010454 app_ble_start_adv: +0x33fa 010455 jam bt_cmd_start_adv ,mem_fifo_temp +0x33fb 010456 branch ui_ipc_send_cmd +: 010458 app_ble_start_scan: +0x33fc 010459 jam bt_cmd_le_start_scan ,mem_fifo_temp +0x33fd 010460 branch ui_ipc_send_cmd +: 010462 app_ble_stop_scan: +0x33fe 010463 jam bt_cmd_le_stop_scan ,mem_fifo_temp +0x33ff 010464 branch ui_ipc_send_cmd +: 010466 app_ble_start_conn: +0x3400 010467 jam bt_cmd_le_start_conn ,mem_fifo_temp +0x3401 010468 branch ui_ipc_send_cmd +: 010470 app_ble_disconnect: +0x3402 010471 jam bt_cmd_le_disconnect ,mem_fifo_temp +0x3403 010472 branch ui_ipc_send_cmd +: 010474 app_led_start_blink: +0x3404 010475 jam bt_cmd_led_blink ,mem_fifo_temp +0x3405 010476 branch ui_ipc_send_cmd +: 010478 app_led_on: +0x3406 010479 jam bt_cmd_led_on ,mem_fifo_temp +0x3407 010480 branch ui_ipc_send_cmd +: 010482 app_led_stop_blink: +: 010483 app_led_off: +0x3408 010484 jam bt_cmd_led_off ,mem_fifo_temp +0x3409 010485 branch ui_ipc_send_cmd +: 010487 app_enter_hibernate: +0x340a 010488 jam bt_cmd_enter_hibernate ,mem_fifo_temp +0x340b 010489 branch ui_ipc_send_cmd +: 010491 app_bt_sniff_exit: +0x340c 010492 jam bt_cmd_exit_sniff ,mem_fifo_temp +0x340d 010493 branch ui_ipc_send_cmd +: 010495 app_bt_enter_sniff: +0x340e 010496 jam bt_cmd_enter_sniff ,mem_fifo_temp +0x340f 010497 branch ui_ipc_send_cmd +: 010499 app_ble_store_reconn_info: +0x3410 010500 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +0x3411 010501 branch ui_ipc_send_cmd +: 010503 app_bt_store_reconn_info: +0x3412 010504 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +0x3413 010505 branch ui_ipc_send_cmd +: 010507 app_store_reconn_info: +0x3414 010508 jam bt_cmd_store_reconn_info ,mem_fifo_temp +0x3415 010509 branch ui_ipc_send_cmd +: 010511 app_lpm_mult_enable: +0x3416 010512 set1 mark_lpm_mult_enable ,mark +0x3417 010513 rtn +: 010515 app_lpm_mult_disable: +0x3418 010516 set0 mark_lpm_mult_enable ,mark +0x3419 010517 rtn +: 010537 app_button_long_pressed: +0x341a 010538 call app_got_power_state_common +0x341b 010539 beq power_standby ,app_power_shutting_down +: 010540 app_power_starting: +0x341c 010541 setarg power_starting +0x341d 010542 istore 1 ,regc +0x341e 010543 add temp ,power_starting_timeout_offset ,rega +0x341f 010544 add temp ,power_starting_cb_offset ,regb +: 010545 app_power_common: +0x3420 010546 ifetcht 1 ,rega +0x3421 010547 increase 1 ,regc +0x3422 010548 istoret 1 ,regc +0x3423 010549 branch app_power_cb_common +: 010551 app_power_shutting_down: +0x3424 010552 setarg power_off +0x3425 010553 istore 1 ,regc +0x3426 010554 fetch 2 ,mem_ui_state_map +0x3427 010555 bbit0 ui_state_ble_connected ,app_power_off_end +0x3428 010556 call app_ble_disconnect +: 010557 app_power_off_end: +0x3429 010558 fetcht 2 ,mem_power_param_ptr +0x342a 010559 add temp ,power_off_timeout_offset ,rega +0x342b 010560 add temp ,power_off_cb_offset ,regb +0x342c 010561 branch app_power_common +: 010563 app_got_power_state_common: +0x342d 010564 fetcht 2 ,mem_power_param_ptr +0x342e 010565 add temp ,power_state_offset ,regc +0x342f 010566 ifetch 1 ,regc +0x3430 010567 rtn +: 010569 app_event_button_up: +0x3431 010570 call app_got_power_state_common +0x3432 010571 bne power_off ,app_power_release +0x3433 010572 branch app_enter_hibernate +: 010573 app_power_release: +0x3434 010574 add temp ,ui_butten_up_cb_offset ,regb +0x3435 010575 branch app_power_cb_common +: 010577 antilost_init: +0x3436 010578 rtn wake +0x3437 010579 jam 0x00 ,core_gpio_sel1 +0x3438 010580 setarg antilost_le_before_hibernate +0x3439 010581 store 2 ,mem_cb_before_hibernate +0x343a 010582 setarg keyscan_process_lpm_before +0x343b 010583 store 2 ,mem_cb_before_lpm +0x343c 010584 setarg antilost_idle_process +0x343d 010585 store 2 ,mem_cb_idle_process +0x343e 010586 setarg antilost_le_conn_process +0x343f 010587 store 2 ,mem_cb_le_process +0x3440 010588 setarg antilost_bb_event_process +0x3441 010589 store 2 ,mem_cb_bb_event_process +0x3442 010590 setarg antilost_le_bb_event_timer +0x3443 010591 store 2 ,mem_cb_event_timer +0x3444 010592 setarg antilost_le_notification +0x3445 010593 store 2 ,mem_cb_ble_transmit +0x3446 010594 setarg antilost_lpm_lock_process +0x3447 010595 store 2 ,mem_cb_check_wakelock +0x3448 010596 setarg antilost_le_receive_data_process +0x3449 010597 store 2 ,mem_cb_att_write +0x344a 010598 bpatch patch19_4 ,mem_patch19 +0x344b 010599 call antilost_buzzer_pwm_init +0x344c 010600 call keyscan_key_init +0x344d 010601 call antilost_adc_init +0x344e 010602 call ui_led_init_global +0x344f 010603 call ui_button_init +0x3450 010604 setarg antilost_key_up_down +0x3451 010605 store 2 ,mem_cb_antl_key +0x3452 010606 setarg antilost_power_off_cb +0x3453 010607 store 2 ,mem_antl_power_off_cb +0x3454 010608 setarg antilost_power_starting_cb +0x3455 010609 store 2 ,mem_antl_power_starting_cb +0x3456 010610 setarg antilost_power_standby_cb +0x3457 010611 store 2 ,mem_antl_power_standby_cb +0x3458 010612 setarg antilost_led_on_cb +0x3459 010613 store 2 ,mem_antl_led_cb_on +0x345a 010614 setarg antilost_led_off_cb +0x345b 010615 store 2 ,mem_antl_led_cb_off +0x345c 010616 setarg antilost_buzzer_on +0x345d 010617 store 2 ,mem_antl_buzzer_cb_on +0x345e 010618 setarg antilost_buzzer_off +0x345f 010619 store 2 ,mem_antl_buzzer_cb_off +0x3460 010620 fetch 2 ,mem_ui_state_map +0x3461 010621 rtnbit1 ui_state_btn_down +0x3462 010622 branch app_enter_hibernate +: 010624 antilost_le_before_hibernate: +0x3463 010625 call antilost_led_buzzer_stop_blink +0x3464 010626 branch app_enter_hibernate +: 010628 antilost_le_notification: +0x3465 010629 call le_fifo_check_nearly_full +0x3466 010630 nrtn blank +0x3467 010631 arg mem_temp_block5 ,rega +0x3468 010632 call queue_pop +0x3469 010633 nrtn user +0x346a 010634 arg mem_temp_block5 ,contr +0x346b 010635 branch le_send_notify_from_list +: 010637 antilost_power_standby_cb: +0x346c 010638 fetch 2 ,mem_antl_le_sleep_timeout +0x346d 010639 store 2 ,mem_antl_le_sleep_timer +0x346e 010640 jam 1 ,mem_antl_key_scan_enable +0x346f 010641 branch antilost_fast_adv_start +: 010643 antilost_lpm_lock_process: +0x3470 010644 fetch 1 ,mem_antl_key_state +0x3471 010645 beq 1 ,antilost_lpm_ctrl_for_led_buzzer +0x3472 010646 fetch 2 ,mem_ui_state_map +0x3473 010647 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +0x3474 010648 fetch 1 ,mem_antl_lost_mode +0x3475 010649 beq 1 ,app_get_lpm_wake_lock +0x3476 010650 fetch 1 ,mem_antl_queue_curr_num +0x3477 010651 nbranch app_get_lpm_wake_lock ,blank +0x3478 010652 branch app_put_lpm_wake_lock +: 010654 antilost_lpm_ctrl_for_led_buzzer: +0x3479 010655 fetch 1 ,mem_antl_led_state +0x347a 010656 fetcht 1 ,mem_antl_buzzer_state +0x347b 010657 ior temp ,pdata +0x347c 010658 beq 1 ,app_get_lpm_wake_lock +0x347d 010659 branch app_put_lpm_wake_lock +: 010661 antilost_bb_event_process: +0x347e 010662 copy regc ,pdata +0x347f 010663 beq bt_evt_button_up ,app_event_button_up +0x3480 010664 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x3481 010665 beq bt_evt_le_connected ,antilost_le_process_conn +0x3482 010666 beq bt_evt_le_disconnected ,antilost_le_process_discon +0x3483 010667 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +0x3484 010668 rtn +: 010669 antilost_le_conn_param_update_rsp_recieved: +0x3485 010670 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x3486 010671 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected +: 010672 antilost_le_conn_param_accepted: +0x3487 010673 fetch 2 ,mem_le_new_connslavelatency +0x3488 010674 branch antilost_master_nonsupport_latency ,blank +: 010675 antilost_le_conn_param_updata_procedure_sucsess: +0x3489 010676 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +0x348a 010677 jam 60 ,mem_antl_conn_update_timer +0x348b 010678 rtn +: 010680 antilost_le_conn_param_rejected: +0x348c 010681 fetch 2 ,mem_le_latency +0x348d 010682 branch antilost_conn_param_updata_procedure_faild ,blank +: 010683 antilost_conn_param_retransimiting: +0x348e 010684 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x348f 010685 fetcht 2 ,mem_interval_increment +0x3490 010686 fetch 2 ,mem_le_interval_min +0x3491 010687 iadd temp ,pdata +0x3492 010688 store 2 ,mem_le_interval_min +0x3493 010689 copy pdata ,rega +0x3494 010690 fetch 2 ,mem_le_interval_max +0x3495 010691 iadd temp ,pdata +0x3496 010692 store 2 ,mem_le_interval_max +0x3497 010693 iadd rega ,pdata +0x3498 010694 rshift pdata ,temp +0x3499 010695 fetch 2 ,mem_antl_le_unnormal_interval_max +0x349a 010696 idiv temp +0x349b 010697 call wait_div_end +0x349c 010698 quotient pdata +0x349d 010699 store 2 ,mem_le_latency +0x349e 010700 jam 1 ,mem_antl_send_updata_le_param_timer +0x349f 010701 rtn +: 010702 antilost_conn_param_updata_procedure_faild: +0x34a0 010703 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +0x34a1 010704 rtn +: 010706 antilost_master_nonsupport_latency: +0x34a2 010707 jam 0 ,mem_lpm_mult +0x34a3 010708 jam 0 ,mem_antl_send_updata_le_param_timer +0x34a4 010709 fetch 2 ,mem_le_new_conninterval +0x34a5 010710 fetcht 2 ,mem_antl_le_unnormal_interval_min +0x34a6 010711 isub temp ,null +0x34a7 010712 setflag positive ,0 ,rega +0x34a8 010713 fetch 2 ,mem_antl_le_unnormal_interval_max +0x34a9 010714 fetcht 2 ,mem_le_new_conninterval +0x34aa 010715 isub temp ,pdata +0x34ab 010716 setflag positive ,1 ,rega +0x34ac 010717 compare 0x03 ,rega ,0x03 +0x34ad 010718 rtn true +0x34ae 010719 fetch 8 ,mem_antl_le_unnormal_interval_min +0x34af 010720 store 8 ,mem_le_interval_min +0x34b0 010721 jam 1 ,mem_antl_send_updata_le_param_timer +0x34b1 010722 rtn +: 010725 antilost_le_bb_event_timer: +0x34b2 010727 call app_power_timer +0x34b3 010728 call antilost_double_click_timer +0x34b4 010729 call antilost_le_fast_adv_timer +0x34b5 010730 call antilost_le_sleep_timer +0x34b6 010731 call antilost_app_updata_le_param_timer +0x34b7 010732 call antilost_conn_update_timer +0x34b8 010733 branch antilost_adc_check_timer +: 010736 antilost_double_click_timer: +0x34b9 010737 arg mem_double_click_timer ,regc +0x34ba 010738 arg antilost_double_click_timeout ,regb +0x34bb 010739 branch timer_single_step +: 010740 antilost_double_click_timeout: +0x34bc 010741 jam 0 ,mem_butten_click_cnt +0x34bd 010742 rtn +: 010743 antilost_le_fast_adv_timer: +0x34be 010744 arg mem_antl_fast_adv_timer ,regc +0x34bf 010745 arg antilost_le_fast_adv_timeout ,regb +0x34c0 010746 branch timer_single_step_2b +: 010747 antilost_le_fast_adv_timeout: +0x34c1 010748 arg mem_antl_slow_adv_led_style ,regc +0x34c2 010749 arg mem_antl_slow_adv_lpm_interval ,regb +0x34c3 010750 branch antilost_adv_start_common +: 010753 antilost_conn_update_timer: +0x34c4 010754 arg mem_antl_conn_update_timer ,regc +0x34c5 010755 arg antilost_conn_update_timer_time_out ,regb +0x34c6 010756 branch timer_single_step +: 010758 antilost_conn_update_timer_time_out: +0x34c7 010759 fetch 2 ,mem_le_latency +0x34c8 010760 store 1 ,mem_lpm_mult +0x34c9 010761 rtn +: 010762 antilost_app_updata_le_param_timer: +0x34ca 010763 arg mem_antl_send_updata_le_param_timer ,regc +0x34cb 010764 arg antilost_app_updata_le_param_timeout ,regb +0x34cc 010765 branch timer_single_step +: 010766 antilost_app_updata_le_param_timeout: +0x34cd 010767 fetch 1 ,mem_le_state +0x34ce 010768 compare 0 ,pdata ,0x60 +0x34cf 010769 nbranch antilost_wait_for_updata_param_instant_expire ,true +0x34d0 010770 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x34d1 010771 call app_lpm_mult_enable +0x34d2 010772 branch le_l2cap_tx_update_req +: 010773 antilost_wait_for_updata_param_instant_expire: +0x34d3 010774 jam 1 ,mem_antl_send_updata_le_param_timer +0x34d4 010775 rtn +: 010777 antilost_le_sleep_timer: +0x34d5 010778 arg mem_antl_le_sleep_timer ,regc +0x34d6 010779 arg antilost_le_sleep_timer_timeout ,regb +0x34d7 010780 branch timer_single_step_2b +: 010783 antilost_le_sleep_timer_timeout: +0x34d8 010784 branch app_button_long_pressed +: 010786 antilost_adc_check_timer: +0x34d9 010789 arg mem_adc_timer ,regc +0x34da 010790 arg antilost_adc_check_timer_timeout ,regb +0x34db 010791 branch timer_single_step_2b +: 010792 antilost_adc_check_timer_timeout: +0x34dc 010793 fetch 2 ,mem_adc_timeout +0x34dd 010794 store 2 ,mem_adc_timer +0x34de 010795 branch antilost_battery_process +: 010798 antilost_le_process_conn: +0x34df 010799 fetch 2 ,mem_adc_timeout +0x34e0 010800 store 2 ,mem_adc_timer +0x34e1 010801 setarg 0 +0x34e2 010802 store 2 ,mem_antl_fast_adv_timer +0x34e3 010803 store 2 ,mem_antl_le_sleep_timer +0x34e4 010804 call antilost_alert_off +0x34e5 010805 call antilost_led_buzzer_stop_blink +0x34e6 010806 jam 0 ,mem_lpm_mult +0x34e7 010807 branch app_ble_stop_adv +: 010810 antilost_le_process_discon: +0x34e8 010813 setarg 0 +0x34e9 010814 store 4 ,mem_adc_timer +0x34ea 010815 store 3 ,mem_antl_conn_updata_procedure_state +0x34eb 010816 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x34ec 010818 jam 1 ,mem_alarm_config_notfy_cnt +0x34ed 010819 fetch 2 ,mem_antl_le_sleep_timeout +0x34ee 010820 store 2 ,mem_antl_le_sleep_timer +0x34ef 010821 call queue_init +0x34f0 010822 fetch 1 ,mem_antl_power_state +0x34f1 010823 rtneq power_off +0x34f2 010824 call antilost_fast_adv_start +0x34f3 010825 branch antilost_on_off_alarm_after_disconn +: 010828 antilost_le_conn_process: +0x34f4 010830 branch antilost_key_process +: 010832 antilost_idle_process: +0x34f5 010834 fetch 1 ,mem_antl_power_state +0x34f6 010835 rtnne power_standby +0x34f7 010836 branch antilost_key_process +: 010841 antilost_power_starting_cb: +0x34f8 010842 arg mem_antl_power_starting_buzzer_style ,regc +0x34f9 010843 call antilost_buzzer_configuration +0x34fa 010844 arg mem_antl_power_starting_led_style ,regc +: 010845 antilost_power_common: +0x34fb 010846 branch antilost_led_configuration +: 010848 antilost_power_off_cb: +0x34fc 010849 jam off ,mem_le_adv_enable +0x34fd 010850 arg mem_antl_power_off_buzzer_style ,regc +0x34fe 010851 call antilost_buzzer_configuration +0x34ff 010852 arg mem_antl_power_off_led_style ,regc +0x3500 010853 branch antilost_power_common +: 010855 antilost_le_receive_data_process: +0x3501 010856 fetch 1 ,mem_le_att_opcode +0x3502 010857 beq attop_write_request ,antilost_le_parse_att_write_request +0x3503 010858 rtn +: 010859 antilost_le_parse_att_write_request: +0x3504 010860 fetch 2 ,mem_le_att_handle +0x3505 010862 beq new_spec_write_handle ,antilost_cmd_parse_for_application +0x3506 010863 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +0x3507 010864 rtn +: 010869 antilost_key_process: +0x3508 010870 fetch 1 ,mem_antl_key_scan_enable +0x3509 010871 rtn blank +0x350a 010872 branch keyscan_key_process +: 010876 antilost_key_up_down: +0x350b 010877 copy rega ,pdata +0x350c 010878 branch antilost_key_is_up ,blank +: 010879 antilost_key_is_down: +0x350d 010880 copy queue ,pdata +0x350e 010881 beq 0 ,antilost_key0_down +0x350f 010882 rtn +: 010883 antilost_key_is_up: +0x3510 010884 copy queue ,pdata +0x3511 010885 beq 0 ,antilost_key0_up +0x3512 010886 rtn +: 010888 antilost_key0_down: +0x3513 010889 jam 1 ,mem_antl_key_state +0x3514 010890 arg mem_antl_key_buzzer_style ,regc +0x3515 010891 call antilost_buzzer_configuration +0x3516 010892 arg mem_antl_key_led_style ,regc +0x3517 010893 call antilost_led_configuration +0x3518 010894 fetch 2 ,mem_ui_state_map +0x3519 010895 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +0x351a 010896 branch antilost_butten_down_after_conn +: 010898 antilost_key0_up: +0x351b 010899 jam 0 ,mem_antl_key_state +0x351c 010900 branch antilost_double_click_timer_init +: 010904 antilost_double_click_timer_init: +0x351d 010905 fetch 1 ,mem_butten_click_cnt +0x351e 010906 rtnne 1 +0x351f 010907 jam 5 ,mem_double_click_timer +0x3520 010908 rtn +: 010910 antilost_butten_down_after_conn: +0x3521 010911 fetch 1 ,mem_butten_click_cnt +0x3522 010912 pincrease 1 +0x3523 010913 store 1 ,mem_butten_click_cnt +0x3524 010914 beq 1 ,antilost_click_once +0x3525 010915 beq 2 ,antilost_click_twice +0x3526 010916 rtn +: 010917 antilost_click_once: +0x3527 010918 call antilost_alert_off +0x3528 010919 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +0x3529 010920 arg mem_antl_key0_press ,regc +0x352a 010921 branch antilost_prepare_data_and_send +: 010922 antilost_click_twice: +0x352b 010923 jam 0 ,mem_butten_click_cnt +0x352c 010924 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +0x352d 010925 arg mem_antl_key0_press ,regc +0x352e 010926 call antilost_prepare_data_and_send +0x352f 010927 fetch 1 ,mem_antl_lost_mode +0x3530 010928 beq 1 ,antilost_alert_on +0x3531 010929 rtn +: 010931 antilost_butten_down_while_disconn: +0x3532 010932 fetch 2 ,mem_antl_le_sleep_timeout +0x3533 010933 store 2 ,mem_antl_le_sleep_timer +0x3534 010934 call antilost_alert_off +0x3535 010935 branch antilost_fast_adv_start +: 010938 antilost_cmd_parse_for_application: +0x3536 010939 bpatch patch19_5 ,mem_patch19 +0x3537 010940 call le_app_receive_data +0x3538 010941 ifetch 1 ,rega +0x3539 010942 beq opcode3_antl_start_alram ,antilost_on_of_alram +0x353a 010943 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +0x353b 010944 rtn +: 010946 antilost_on_of_alram: +0x353c 010947 fetch 1 ,mem_antl_lost_mode +0x353d 010948 beq anti_le_alarm_off ,antilost_alert_on +0x353e 010949 beq anti_le_alarm_on ,antilost_alert_off +0x353f 010950 rtn +: 010952 antilost_configuration_for_alram: +0x3540 010953 ifetch 1 ,regb +0x3541 010954 beq 1 ,antilost_set_start_alarm_after_disconn +0x3542 010955 beq 0 ,antilost_set_no_alarm_after_disconn +0x3543 010956 rtn +: 010963 antilost_prepare_data_and_send: +0x3544 010964 bpatch patch19_6 ,mem_patch19 +0x3545 010965 fetch 1 ,mem_client_characteristic_configuration_descriptor +0x3546 010966 isolate1 notification_enable_bit ,pdata +0x3547 010967 nrtn true +0x3548 010968 add regc ,6 ,contr +0x3549 010969 ifetch 2 ,contr +0x354a 010970 byteswap pdata ,pdata +0x354b 010971 add pdata ,5 ,loopcnt +0x354c 010972 add regc ,3 ,contr +0x354d 010973 call calc_check_sum_start +0x354e 010974 istore 1 ,contr +0x354f 010975 copy regc ,rega +0x3550 010976 branch queue_push +: 010982 antilost_alert_on: +0x3551 010983 fetch 1 ,mem_antl_power_state +0x3552 010984 rtn blank +0x3553 010985 jam 1 ,mem_antl_lost_mode +0x3554 010986 arg mem_antl_alert_buzzer_stlye ,regc +0x3555 010987 call antilost_buzzer_configuration +0x3556 010988 arg mem_antl_alert_led_stlye ,regc +0x3557 010989 call antilost_led_configuration +0x3558 010990 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3559 010991 jam 1 ,mem_antl_key0_release + 8 +0x355a 010992 arg mem_antl_key0_release ,regc +0x355b 010993 branch antilost_prepare_data_and_send +: 010994 antilost_alert_off: +0x355c 010995 fetch 1 ,mem_antl_lost_mode +0x355d 010996 rtn blank +0x355e 010997 jam 0 ,mem_antl_lost_mode +0x355f 010998 call antilost_led_buzzer_stop_blink +0x3560 010999 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3561 011000 jam 0 ,mem_antl_key0_release + 8 +0x3562 011001 arg mem_antl_key0_release ,regc +0x3563 011002 branch antilost_prepare_data_and_send +: 011004 antilost_set_start_alarm_after_disconn: +0x3564 011005 jam 1 ,mem_alarm_config +0x3565 011006 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x3566 011007 jam 1 ,mem_antl_key0_release + 8 +0x3567 011008 arg mem_antl_key0_release ,regc +0x3568 011009 branch antilost_prepare_data_and_send +: 011010 antilost_set_no_alarm_after_disconn: +0x3569 011011 jam 0 ,mem_alarm_config +0x356a 011012 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x356b 011013 jam 0 ,mem_antl_key0_release + 8 +0x356c 011014 arg mem_antl_key0_release ,regc +0x356d 011015 branch antilost_prepare_data_and_send +: 011016 antilost_on_off_alarm_after_disconn: +0x356e 011017 fetch 1 ,mem_alarm_config +0x356f 011018 rtn blank +0x3570 011019 branch antilost_alert_on +: 011021 antilost_notify_alarm_config_first_time: +0x3571 011022 ifetch 2 ,rega +0x3572 011023 store 2 ,mem_client_characteristic_configuration_descriptor +0x3573 011024 isolate1 notification_enable_bit ,pdata +0x3574 011025 nrtn true +0x3575 011026 fetch 1 ,mem_alarm_config_notfy_cnt +0x3576 011027 rtn blank +0x3577 011028 jam 0 ,mem_alarm_config_notfy_cnt +0x3578 011029 fetch 8 ,mem_antl_le_interval_min +0x3579 011030 store 8 ,mem_le_interval_min +0x357a 011031 jam 2 ,mem_antl_send_updata_le_param_timer +0x357b 011032 call antilost_battery_process +0x357c 011033 call antilost_battery_calculate_end +0x357d 011034 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x357e 011035 fetch 1 ,mem_alarm_config +0x357f 011036 store 1 ,mem_antl_key0_release + 8 +0x3580 011037 arg mem_antl_key0_release ,regc +0x3581 011038 branch antilost_prepare_data_and_send +: 011042 antilost_buzzer_configuration: +0x3582 011043 arg 1 ,rega +0x3583 011044 branch antilost_configuration_common +: 011045 antilost_led_configuration: +0x3584 011046 arg 0 ,rega +: 011047 antilost_configuration_common: +0x3585 011048 branch antilost_led_buzzer_style_configuration +: 011050 antilost_led_buzzer_stop_blink: +0x3586 011051 arg 0 ,rega +0x3587 011052 call ui_led_blink_stop_global +0x3588 011053 arg 1 ,rega +0x3589 011054 call ui_led_blink_stop_global +0x358a 011055 fetch 1 ,mem_buzzer_pwm_conf +0x358b 011056 branch pwm_disable +: 011058 antilost_led_buzzer_style_configuration: +0x358c 011059 call calc_curr_struct_prt +0x358d 011060 arg 7 ,loopcnt +0x358e 011061 branch ui_led_set_style_global + 2 +: 011065 antilost_fast_adv_start: +0x358f 011066 arg mem_antl_fast_adv_led_style ,regc +0x3590 011067 arg mem_antl_lpm_interval ,regb +: 011068 antilost_adv_start_common: +0x3591 011069 call antilost_adv_interval_lpm_interval_set +0x3592 011070 call antilost_led_configuration +0x3593 011071 fetch 2 ,mem_antl_fast_adv_timeout +0x3594 011072 store 2 ,mem_antl_fast_adv_timer +0x3595 011073 branch app_ble_start_adv +: 011075 antilost_adv_interval_lpm_interval_set: +0x3596 011076 ifetch 2 ,regb +0x3597 011077 store 2 ,mem_lpm_interval +0x3598 011078 ifetch 2 ,contr +0x3599 011079 store 2 ,mem_le_adv_interval +0x359a 011080 rtn +: 011082 antilost_buzzer_pwm_init: +0x359b 011083 arg 0 ,rega +0x359c 011084 call pwm_init +0x359d 011085 fetch 6 ,mem_buzzer_pwm_conf +0x359e 011086 store 6 ,mem_pdatatemp +0x359f 011087 call pwm_out_set +0x35a0 011088 fetch 1 ,mem_buzzer_pwm_conf +0x35a1 011089 branch pwm_disable +: 011091 antilost_led_on_cb: +0x35a2 011092 jam 1 ,mem_antl_led_state +0x35a3 011093 rtn +: 011094 antilost_led_off_cb: +0x35a4 011095 jam 0 ,mem_antl_led_state +0x35a5 011096 rtn +: 011100 antilost_buzzer_off: +0x35a6 011101 jam 0 ,mem_antl_buzzer_state +0x35a7 011102 fetch 1 ,mem_buzzer_pwm_conf +0x35a8 011103 branch pwm_disable +: 011105 antilost_buzzer_on: +0x35a9 011106 jam 1 ,mem_antl_buzzer_state +0x35aa 011107 fetch 6 ,mem_buzzer_pwm_conf +0x35ab 011108 store 6 ,mem_pdatatemp +0x35ac 011109 branch pwm_out_set +: 011113 antilost_adc_init: +0x35ad 011114 jam 0 ,mem_adc_config_flag +0x35ae 011115 branch adc_init_data +: 011117 antilost_battery_process: +0x35af 011118 call adc_set_mode +0x35b0 011119 call vdd_calculate_by_mode +0x35b1 011120 store 2 ,mem_battery_current_voltage +0x35b2 011121 arg mem_battery_calculate_set ,rega +0x35b3 011122 call adc_bat_percent_lowpower_out +0x35b4 011123 store 1 ,mem_voltage_remain_percent +0x35b5 011124 beq 0 ,antilost_low_battery +0x35b6 011125 sub pdata ,0x64 ,null +0x35b7 011126 nbranch antilost_full_battery ,positive +0x35b8 011127 store 1 ,mem_antl_key0_release + 8 +: 011128 antilost_battery_calculate_end: +0x35b9 011129 jam opcode5_batter_information ,mem_antl_key0_release + 5 +0x35ba 011130 arg mem_antl_key0_release ,regc +0x35bb 011131 branch antilost_prepare_data_and_send +: 011132 antilost_full_battery: +0x35bc 011133 jam 100 ,mem_antl_key0_release + 8 +0x35bd 011134 branch antilost_battery_calculate_end +: 011136 antilost_low_battery: +0x35be 011137 branch app_button_long_pressed +: 011141 car_init: +0x35bf 011142 rtn wake +0x35c0 011143 hfetch 1 ,core_gpio_sel1 +0x35c1 011144 and_into 0xf0 ,pdata +0x35c2 011145 hstore 1 ,core_gpio_sel1 +0x35c3 011146 setarg car_le_before_hibernate +0x35c4 011147 store 2 ,mem_cb_before_hibernate +0x35c5 011149 setarg car_le_process_lpm_before +0x35c6 011150 store 2 ,mem_cb_before_lpm +0x35c7 011152 setarg app_enter_hibernate +0x35c8 011153 store 2 ,mem_cb_discovry_timeout +0x35c9 011155 setarg car_scale_process_idle +0x35ca 011156 store 2 ,mem_cb_idle_process +0x35cb 011158 setarg car_scale_process_bb_event +0x35cc 011159 store 2 ,mem_cb_bb_event_process +0x35cd 011161 setarg app_get_lpm_wake_lock +0x35ce 011162 store 2 ,mem_cb_check_wakelock +0x35cf 011164 setarg car_le_receive_data +0x35d0 011165 store 2 ,mem_cb_att_write +0x35d1 011167 setarg car_le_bb_event_timer +0x35d2 011168 store 2 ,mem_cb_event_timer +0x35d3 011170 call g24_head_ptr2regc +0x35d4 011171 setarg car_24g_receive_data +0x35d5 011172 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x35d6 011173 istore 2 ,contw +0x35d7 011175 setarg car_power_off_signal +0x35d8 011176 store 2 ,mem_remote_car_power_off_cb +0x35d9 011178 setarg car_soft_switch_power_on_signal +0x35da 011179 store 2 ,mem_remote_car_power_standby_cb +0x35db 011181 bpatch patch19_7 ,mem_patch19 +0x35dc 011182 call car_init_environment +0x35dd 011183 call queue_init +0x35de 011184 jam 2 ,mem_lpm_mult +0x35df 011185 jam power_on ,mem_car_24g_received_pac +0x35e0 011186 fetch 1 ,mem_car_config_soft_switch_enable +0x35e1 011187 store 1 ,mem_car_hard_soft_switch +0x35e2 011188 beq hard_switch ,car_hard_switch_power_on_signal +0x35e3 011189 fetch 1 ,mem_car_config_soft_switch_gpio +0x35e4 011190 store 1 ,mem_ui_button_gpio +0x35e5 011191 jam off ,mem_le_adv_enable +: 011192 car_soft_switch_power_on_init: +0x35e6 011193 call car_ui_led_init +0x35e7 011194 call ui_button_init +0x35e8 011195 call ui_button_polling +0x35e9 011196 jam power_starting ,mem_car_power_state +0x35ea 011197 fetch 2 ,mem_ui_state_map +0x35eb 011198 rtnbit1 ui_state_btn_down +0x35ec 011199 branch app_enter_hibernate +: 011201 car_power_off_signal: +0x35ed 011202 branch car_ui_led_init +: 011204 car_hard_switch_power_on_signal: +0x35ee 011205 jam power_standby ,mem_car_power_state +: 011206 car_soft_switch_power_on_signal: +0x35ef 011207 jam on ,mem_le_adv_enable +0x35f0 011208 call car_ui_led_init +0x35f1 011209 arg 0 ,rega +0x35f2 011210 call ui_led_blink_start_global +0x35f3 011212 setarg fast_adv_interval_value_car +0x35f4 011213 call shutter_ble_adv_interval_set +: 011214 car_le_modified_name_adv: +0x35f5 011215 arg mem_le_name + 7 ,contw +0x35f6 011216 fetch 1 ,mem_le_lap +: 011217 car_name_loop: +0x35f7 011218 and pdata ,0xF0 ,temp +0x35f8 011219 rshift4 temp ,temp +0x35f9 011220 call car_hex_to_ascii +0x35fa 011221 istoret 1 ,contw +0x35fb 011222 and pdata ,0x0F ,temp +0x35fc 011223 call car_hex_to_ascii +0x35fd 011224 istoret 1 ,contw +0x35fe 011225 call le_modified_name_att_list +0x35ff 011226 fetcht 1 ,mem_le_name_len +0x3600 011227 copy temp ,loopcnt +0x3601 011228 arg mem_le_adv_data + 2 ,contw +0x3602 011229 arg mem_le_name ,contr +0x3603 011230 call memcpy +: 011231 car_le_modified_name_scan: +0x3604 011232 fetcht 1 ,mem_le_name_len +0x3605 011233 copy temp ,loopcnt +0x3606 011234 arg mem_le_scan_data + 2 ,contw +0x3607 011235 arg mem_le_name ,contr +0x3608 011236 branch memcpy +: 011237 car_hex_to_ascii: +0x3609 011238 sub temp ,9 ,null +0x360a 011239 branch car_hex_num ,positive +0x360b 011240 add temp ,55 ,temp +0x360c 011241 rtn +: 011242 car_hex_num: +0x360d 011243 add temp ,48 ,temp +0x360e 011244 rtn +: 011246 car_ui_led_init: +0x360f 011247 fetch 1 ,mem_car_config_blood_led1_gpio +0x3610 011248 bne invalid_pin_num ,car_blood_led_gpio_set +: 011249 car_ui_led_init_1: +0x3611 011250 fetch 1 ,mem_car_config_pairing_led_gpio +0x3612 011251 bne invalid_pin_num ,car_pairing_led_gpio_set +: 011252 car_ui_led_init_2: +0x3613 011253 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x3614 011254 bne invalid_pin_num ,car_low_voltage_led_gpio_set +: 011255 car_ui_led_init_3: +0x3615 011256 fetch 1 ,mem_car_led_num +0x3616 011257 copy pdata ,loopcnt +0x3617 011258 setarg mem_car_led_map +0x3618 011259 copy pdata ,rega +: 011260 car_in_lp1: +0x3619 011261 copy rega ,contr +0x361a 011262 ifetch 1 ,contr +0x361b 011263 copy contr ,rega +0x361c 011264 beq invalid_pin_num ,car_in_lp1_end +0x361d 011265 copy pdata ,temp +0x361e 011266 call gpio_config_output +: 011267 car_in_lp1_end: +0x361f 011268 loop car_in_lp1 +: 011269 car_ui_led_init_end: +0x3620 011270 rtn +: 011271 car_blood_led_gpio_set: +0x3621 011272 fetch 8 ,mem_car_config_blood_led1_gpio +0x3622 011273 store 8 ,mem_car_led_map + 2 +0x3623 011274 branch car_ui_led_init_1 +: 011275 car_pairing_led_gpio_set: +0x3624 011276 store 1 ,mem_car_led_map +0x3625 011277 branch car_ui_led_init_2 +: 011278 car_low_voltage_led_gpio_set: +0x3626 011279 store 1 ,mem_car_led_map + 1 +0x3627 011280 branch car_ui_led_init_3 +: 011283 car_init_environment: +0x3628 011284 arg 0 ,rega +0x3629 011285 call pwm_init +0x362a 011286 call car_ir_rx_init +0x362b 011287 call g24_receive_process_init +0x362c 011288 branch car_init_adc_hvin +: 011290 car_init_adc_hvin: +0x362d 011291 jam 100 ,mem_car_notify_vdd_value_last +0x362e 011292 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x362f 011293 store 1 ,mem_car_style2_struct_led_gpio +0x3630 011294 branch adc_init_data +: 011296 car_le_before_hibernate: +0x3631 011297 call gpio_set_before_lpm_common +0x3632 011298 branch keyscan_process_lpm_before +: 011300 car_le_process_lpm_before: +0x3633 011301 branch keyscan_process_lpm_before +: 011303 car_key_scan_process: +0x3634 011306 branch keyscan_key_process +: 011308 car_scale_process_idle: +0x3635 011309 call car_le_send_packet +0x3636 011310 call car_ir_receive_process +0x3637 011311 call car_g24_status_process +0x3638 011312 branch car_key_scan_process +: 011314 car_g24_status_process: +0x3639 011315 fetch 2 ,mem_ui_state_map +0x363a 011316 rtnbit1 ui_state_ble_connected +0x363b 011317 fetch 1 ,mem_car_24g_received_pac +0x363c 011318 beq work_paired ,car_g24_connected_event +0x363d 011319 rtn +: 011320 car_g24_connected_event: +0x363e 011321 fetch 1 ,mem_car_24g_status +0x363f 011322 rtneq work_paired +0x3640 011323 jam work_paired ,mem_car_24g_status +0x3641 011324 branch car_g24_connected +: 011326 car_le_send_packet: +0x3642 011327 fetch 2 ,mem_ui_state_map +0x3643 011328 rtnbit0 ui_state_ble_connected +0x3644 011329 call le_fifo_check_nearly_full +0x3645 011330 nrtn blank +0x3646 011331 arg mem_car_pop_queue_buff ,rega +0x3647 011332 call queue_pop +0x3648 011333 nrtn user +0x3649 011334 arg mem_car_pop_queue_buff ,contr +0x364a 011335 branch le_send_notify_from_list +: 011337 car_scale_process_bb_event: +0x364b 011338 copy regc ,pdata +0x364c 011339 beq bt_evt_button_up ,app_event_button_up +0x364d 011340 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x364e 011341 beq bt_evt_le_connected ,car_scale_event_le_conn +0x364f 011342 beq bt_evt_le_disconnected ,car_scale_event_le_discon +0x3650 011343 rtn +: 011345 car_scale_event_le_conn: +0x3651 011346 setarg disable_24g +0x3652 011347 call g24_store_mem_24g_mode +0x3653 011348 branch car_scale_process_conn +: 011349 car_g24_connected: +0x3654 011350 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3655 011351 store 2 ,mem_car_24g_no_data_timeout_timer +: 011352 car_scale_process_conn: +0x3656 011353 jam 0x14 ,mem_car_notify_vdd_timer +0x3657 011354 jam 0 ,mem_lpm_mode +0x3658 011355 call app_ble_stop_adv +0x3659 011356 call app_lpm_mult_enable +0x365a 011357 fetch 1 ,mem_car_config_pairing_led_conn_status +0x365b 011358 beq 0x01 ,car_pairing_led_conn_status_setting +: 011359 car_scale_process_conn_next: +0x365c 011360 arg 0 ,rega +0x365d 011361 branch ui_led_on_global +: 011362 car_pairing_led_conn_status_setting: +0x365e 011363 arg 0 ,rega +0x365f 011364 branch ui_led_blink_stop_global +: 011366 car_scale_event_le_discon: +0x3660 011367 setarg rx_24g +0x3661 011368 call g24_store_mem_24g_mode +: 011369 car_g24_disconnect: +0x3662 011370 setarg 0 +0x3663 011371 store 5 ,mem_car_led_control +0x3664 011372 setarg 4 +0x3665 011373 call pwm_disable +0x3666 011374 setarg 5 +0x3667 011375 call pwm_disable +0x3668 011376 setarg 20 +0x3669 011377 call pwm_disable +0x366a 011378 setarg 21 +0x366b 011379 call pwm_disable +0x366c 011380 setarg 22 +0x366d 011381 call pwm_disable +0x366e 011382 setarg 7 +0x366f 011383 call pwm_disable +0x3670 011384 call queue_init +0x3671 011385 jam 10 ,mem_motor1_speed +0x3672 011386 jam 10 ,mem_motor2_speed +0x3673 011387 jam 10 ,mem_motor3_speed +0x3674 011389 jam 2 ,mem_lpm_mult +0x3675 011390 arg 0 ,rega +0x3676 011391 call ui_led_blink_start_global +0x3677 011393 setarg fast_adv_interval_value_car +0x3678 011394 call shutter_ble_adv_interval_set +0x3679 011395 branch app_ble_start_adv +: 011397 car_le_bb_event_timer: +0x367a 011399 call car_moto1_blank_data_timer +0x367b 011400 call car_moto2_blank_data_timer +0x367c 011401 call car_moto3_blank_data_timer +0x367d 011402 call app_power_timer +0x367e 011403 call car_led_control_timer +0x367f 011404 call car_notify_vdd_timer +0x3680 011405 call car_24g_no_data_timeout_timer +0x3681 011406 call car_ir_breakdown_timer +0x3682 011407 branch car_attack_shake_timer +: 011409 car_ir_breakdown_timer: +0x3683 011410 arg mem_car_ir_breakdown_check_timer ,regc +0x3684 011411 arg car_ir_breakdown_timeout ,regb +0x3685 011412 branch timer_single_step +: 011413 car_ir_breakdown_timeout: +0x3686 011414 call car_ir_gpio_get_status +0x3687 011415 nrtn true +0x3688 011416 jam 1 ,mem_car_ir_breakdown_flag +0x3689 011417 rtn +: 011419 car_24g_no_data_timeout_timer: +0x368a 011420 arg mem_car_24g_no_data_timeout_timer ,regc +0x368b 011421 arg car_24g_no_data_timer_timeout ,regb +0x368c 011422 branch timer_single_step_2b +: 011423 car_24g_no_data_timer_timeout: +0x368d 011424 jam work_search ,mem_car_24g_status +0x368e 011425 branch car_g24_disconnect +: 011427 car_attack_shake_timer: +0x368f 011428 arg mem_car_attack_shake_timer ,regc +0x3690 011429 arg car_attack_shake ,regb +0x3691 011430 branch timer_single_step +: 011431 car_attack_shake: +0x3692 011432 fetch 1 ,mem_car_attack_shake_flag +0x3693 011433 branch car_attack_shake_stop ,blank +0x3694 011434 jam 2 ,mem_car_attack_shake_timer +0x3695 011435 jam 0 ,mem_car_attack_shake_flag +0x3696 011436 setarg 0x0a02 +0x3697 011437 store 2 ,mem_le_receive_payload +0x3698 011438 fetch 1 ,mem_car_config_device_select +0x3699 011439 beq device_battle_tank ,car_attack_shake_front_battle_tank +: 011440 car_attack_shake_front_battle_car: +0x369a 011441 branch car_motor_control +: 011442 car_attack_shake_front_battle_tank: +0x369b 011443 setarg 0x0a02 +0x369c 011444 store 2 ,mem_le_receive_payload + 2 +0x369d 011445 branch car_motor_control +: 011446 car_attack_shake_stop: +0x369e 011447 setarg 0 +0x369f 011448 store 4 ,mem_le_receive_payload +0x36a0 011449 branch car_motor_control +: 011451 car_notify_vdd_timer: +0x36a1 011452 fetch 1 ,mem_car_config_bat_notify_enable +0x36a2 011453 rtn blank +0x36a3 011454 fetch 2 ,mem_ui_state_map +0x36a4 011455 bbit0 ui_state_ble_connected ,car_low_bat_led_off +0x36a5 011456 arg mem_car_notify_vdd_timer ,regc +0x36a6 011457 arg car_notify_vdd ,regb +0x36a7 011458 branch timer_single_step +: 011459 car_notify_vdd: +0x36a8 011460 fetch 1 ,mem_car_notify_vdd_count +0x36a9 011461 store 1 ,mem_car_notify_vdd_timer +0x36aa 011462 fetch 1 ,mem_car_working_flag +0x36ab 011463 nrtn blank +: 011464 car_read_hvin: +0x36ac 011465 call adc_set_mode +0x36ad 011466 call vdd_calculate_by_mode +0x36ae 011467 store 2 ,mem_vdd_now_vol +0x36af 011468 arg mem_vdd_calculate_set ,rega +0x36b0 011469 call adc_bat_percent_lowpower_out +0x36b1 011470 fetcht 1 ,mem_car_notify_vdd_value_last +0x36b2 011471 isub temp ,null +0x36b3 011472 branch car_notify_vdd_next2 ,positive +0x36b4 011473 store 1 ,mem_car_notify_vdd_value_last +0x36b5 011474 copy pdata ,temp +: 011475 car_notify_vdd_next2: +0x36b6 011476 storet 1 ,mem_car_notify_vdd_percent +0x36b7 011477 fetch 1 ,mem_car_config_low_voltage_percent +0x36b8 011478 isub temp ,null +0x36b9 011479 call car_enter_low_bat ,positive +0x36ba 011480 storet 1 ,mem_notify_bat_payload +0x36bb 011481 arg 6 ,loopcnt +0x36bc 011482 arg mem_notify_bat_head ,contr +0x36bd 011483 call calc_check_sum_start +0x36be 011484 store 1 ,mem_notify_bat_check_sum +0x36bf 011485 arg mem_notify_bat_packet ,rega +0x36c0 011486 branch queue_push +: 011487 car_enter_low_bat: +0x36c1 011488 fetch 1 ,mem_low_bat_flag +0x36c2 011489 nrtn blank +0x36c3 011490 jam 1 ,mem_low_bat_flag +0x36c4 011491 arg 1 ,rega +0x36c5 011492 branch ui_led_blink_start_global +: 011493 car_low_bat_led_off: +0x36c6 011494 arg 1 ,rega +0x36c7 011495 branch ui_led_blink_stop_global +: 011497 car_led_control_timer: +0x36c8 011498 arg mem_car_led_control_timer ,regc +0x36c9 011499 arg car_led_control ,regb +0x36ca 011500 branch timer_single_step +: 011501 car_led_control: +0x36cb 011502 jam 5 ,mem_car_led_control_timer +0x36cc 011503 jam 0 ,mem_car_led_no +0x36cd 011504 fetch 1 ,mem_car_led_blink_status +0x36ce 011505 beq led_on ,car_led_control_blink_off +0x36cf 011506 beq led_off ,car_led_control_blink_on +: 011507 car_led_control_set: +0x36d0 011508 arg mem_car_led_control ,contr +0x36d1 011509 copy contr ,rega +0x36d2 011510 arg 8 ,loopcnt +: 011511 car_led_control_timer_next: +0x36d3 011512 copy rega ,contr +0x36d4 011513 ifetch 1 ,contr +0x36d5 011514 copy contr ,rega +0x36d6 011515 beq led_off ,car_led_control_off +0x36d7 011516 beq led_on ,car_led_control_on +0x36d8 011517 beq led_blink ,car_led_control_blink +: 011518 car_led_control_timer_next_2: +0x36d9 011519 fetch 1 ,mem_car_led_no +0x36da 011520 increase 1 ,pdata +0x36db 011521 store 1 ,mem_car_led_no +0x36dc 011522 loop car_led_control_timer_next +0x36dd 011523 rtn +: 011524 car_led_switch: +0x36de 011525 fetch 1 ,mem_car_led_no +0x36df 011526 arg mem_car_config_blood_led_gpio ,regb +0x36e0 011527 iadd regb ,regb +0x36e1 011528 ifetcht 1 ,regb +0x36e2 011529 rtn +: 011530 car_led_control_off: +0x36e3 011531 call car_led_switch +0x36e4 011532 call gpio_out_inactive +0x36e5 011533 branch car_led_control_timer_next_2 +: 011534 car_led_control_on: +0x36e6 011535 call car_led_switch +0x36e7 011536 call gpio_out_active +0x36e8 011537 branch car_led_control_timer_next_2 +: 011538 car_led_control_blink: +0x36e9 011539 fetch 1 ,mem_car_led_blink_status +0x36ea 011540 beq led_on ,car_led_control_off +0x36eb 011541 branch car_led_control_on +: 011542 car_led_control_blink_on: +0x36ec 011543 jam led_on ,mem_car_led_blink_status +0x36ed 011544 branch car_led_control_set +: 011545 car_led_control_blink_off: +0x36ee 011546 jam led_off ,mem_car_led_blink_status +0x36ef 011547 branch car_led_control_set +: 011551 calc_check_sum_start: +0x36f0 011552 arg 0 ,rega +: 011553 calc_check_sum_loop: +0x36f1 011554 ifetch 1 ,contr +0x36f2 011555 iadd rega ,rega +0x36f3 011556 loop calc_check_sum_loop +: 011557 calc_check_sum_and: +0x36f4 011558 and rega ,0xff ,pdata +0x36f5 011559 rtn +: 011561 car_le_receive_data: +0x36f6 011562 fetch 1 ,mem_le_att_opcode +0x36f7 011563 beq attop_write_request ,car_le_parse_att_write_request +0x36f8 011564 rtn +: 011565 car_le_parse_att_write_request: +0x36f9 011566 fetch 2 ,mem_le_att_handle +0x36fa 011567 beq att_car_control_handle ,car_control_le_receive +0x36fb 011568 rtn +: 011580 le_app_receive_data: +0x36fc 011581 bpatch patch1a_0 ,mem_patch1a +0x36fd 011582 ifetch 5 ,rega +0x36fe 011583 store 5 ,mem_app_receive_temp +0x36ff 011584 fetch 2 ,mem_app_receive_temp +0x3700 011585 arg le_receive_packet_head ,temp +0x3701 011586 isub temp ,null +0x3702 011587 nrtn zero +0x3703 011588 fetch 2 ,mem_app_receive_temp + 3 +0x3704 011589 byteswap pdata ,pdata +0x3705 011590 store 2 ,mem_app_receive_temp + 3 +0x3706 011591 copy pdata ,loopcnt +0x3707 011592 increase 5 ,rega +0x3708 011593 copy rega ,contr +0x3709 011594 arg mem_app_receive_temp + 5 ,contw +0x370a 011595 call memcpy +0x370b 011596 ifetch 1 ,contr +0x370c 011597 store 1 ,mem_app_receive_temp + 15 +0x370d 011598 arg mem_app_receive_temp + 2 ,rega +0x370e 011599 arg mem_app_receive_temp + 5 ,regb +0x370f 011600 rtn +: 011602 car_control_le_receive: +0x3710 011603 setarg 0 +0x3711 011604 store 5 ,mem_le_receive_payload +0x3712 011605 store 5 ,mem_le_receive_payload + 5 +0x3713 011606 call le_app_receive_data +0x3714 011607 copy regb ,contr +0x3715 011608 arg mem_le_receive_payload ,contw +0x3716 011609 arg 10 ,loopcnt +0x3717 011610 call memcpy +: 011611 car_receive_cmd_select: +0x3718 011612 bpatch patch1a_1 ,mem_patch1a +0x3719 011613 ifetch 1 ,rega +0x371a 011614 beq car_cmd_old_car_control ,car_drive_old +0x371b 011615 beq car_cmd_old_speed_control ,car_speed_set_old +0x371c 011616 beq car_cmd_l_r_motor_control ,car_motor_control +0x371d 011617 beq car_cmd_f_b_motor_control ,car_motor_control +0x371e 011618 beq car_cmd_ir_control ,car_ir_data_rx_from_app +0x371f 011619 beq car_cmd_led_control ,car_led_control_receive +0x3720 011620 beq car_cmd_device_info ,car_info_request +0x3721 011621 rtn +: 011623 car_24g_receive_data: +0x3722 011624 fetch 2 ,mem_ui_state_map +0x3723 011625 rtnbit1 ui_state_ble_connected +0x3724 011627 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3725 011628 store 2 ,mem_car_24g_no_data_timeout_timer +0x3726 011630 jam work_paired ,mem_car_24g_received_pac +0x3727 011632 setarg offset_24g_rxdata_temp_add3 +0x3728 011633 call g24_set_rega +0x3729 011634 call car_control_le_receive +0x372a 011636 fetch 1 ,mem_app_receive_temp + 2 +0x372b 011637 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +0x372c 011638 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +0x372d 011639 rtn +: 011640 car_24g_receive_data_next: +0x372e 011641 fetch 1 ,mem_le_receive_payload +0x372f 011642 ncall car_moto1_enable_blank_data_timer ,blank +0x3730 011643 fetch 1 ,mem_le_receive_payload + 2 +0x3731 011644 ncall car_moto2_enable_blank_data_timer ,blank +0x3732 011645 fetch 1 ,mem_le_receive_payload + 4 +0x3733 011646 ncall car_moto3_enable_blank_data_timer ,blank +0x3734 011647 rtn +: 011649 car_moto1_enable_blank_data_timer: +0x3735 011650 jam 5 ,mem_car_moto1_blank_timer +0x3736 011651 rtn +: 011652 car_moto2_enable_blank_data_timer: +0x3737 011653 jam 5 ,mem_car_moto2_blank_timer +0x3738 011654 rtn +: 011655 car_moto3_enable_blank_data_timer: +0x3739 011656 jam 5 ,mem_car_moto3_blank_timer +0x373a 011657 rtn +: 011659 car_moto1_blank_data_timer: +0x373b 011660 arg mem_car_moto1_blank_timer ,regc +0x373c 011661 arg car_moto1_blank_data ,regb +0x373d 011662 branch timer_single_step +: 011663 car_moto2_blank_data_timer: +0x373e 011664 arg mem_car_moto2_blank_timer ,regc +0x373f 011665 arg car_moto2_blank_data ,regb +0x3740 011666 branch timer_single_step +: 011667 car_moto3_blank_data_timer: +0x3741 011668 arg mem_car_moto3_blank_timer ,regc +0x3742 011669 arg car_moto3_blank_data ,regb +0x3743 011670 branch timer_single_step +: 011672 car_moto1_blank_data: +0x3744 011673 jam 0 ,mem_le_receive_payload +0x3745 011674 branch car_motor_control +: 011675 car_moto2_blank_data: +0x3746 011676 jam 0 ,mem_le_receive_payload + 2 +0x3747 011677 branch car_motor_control +: 011678 car_moto3_blank_data: +0x3748 011679 jam 0 ,mem_le_receive_payload + 4 +0x3749 011680 branch car_motor_control +: 011685 car_drive_old: +0x374a 011686 call car_left_right_control_old +0x374b 011687 branch car_front_back_control_old +: 011688 car_left_right_control_old: +0x374c 011689 fetch 1 ,mem_le_receive_payload +0x374d 011690 store 1 ,mem_motor2_status +0x374e 011691 branch car_motor2_control +: 011692 car_front_back_control_old: +0x374f 011693 fetch 1 ,mem_motor1_speed +0x3750 011694 call car_reset_old_speed +0x3751 011695 fetch 1 ,mem_le_receive_payload + 1 +0x3752 011696 store 1 ,mem_motor1_status +0x3753 011697 branch car_motor1_control +: 011698 car_reset_old_speed: +0x3754 011699 beq speed_level_2 ,car_reset_old_speed2 +0x3755 011700 beq speed_level_3 ,car_reset_old_speed3 +0x3756 011701 store 1 ,mem_motor1_speed +0x3757 011702 rtn +: 011703 car_reset_old_speed2: +0x3758 011704 jam speed_level_5 ,mem_motor1_speed +0x3759 011705 rtn +: 011706 car_reset_old_speed3: +0x375a 011707 jam speed_level_10 ,mem_motor1_speed +0x375b 011708 rtn +: 011709 car_speed_set_old: +0x375c 011710 fetch 1 ,mem_le_receive_payload +0x375d 011711 call car_reset_old_speed +0x375e 011712 fetch 1 ,mem_motor1_speed +0x375f 011713 call car_motor_speed_duty_setting +0x3760 011714 call car_motor_speed_duty_transform +0x3761 011715 branch pwm_pwm0_duty_set +: 011717 car_motor_control: +0x3762 011718 fetch 1 ,mem_car_24g_go_die_flag +0x3763 011719 nrtn blank +0x3764 011720 fetch 6 ,mem_le_receive_payload +0x3765 011721 store 6 ,mem_motor1_status +0x3766 011722 fetch 1 ,mem_motor1_speed +0x3767 011723 fetcht 1 ,mem_motor2_speed +0x3768 011724 iand temp ,pdata +0x3769 011725 fetcht 1 ,mem_motor3_speed +0x376a 011726 iand temp ,pdata +0x376b 011727 call car_motor_working_flag ,blank +0x376c 011728 bpatch patch1a_2 ,mem_patch1a +0x376d 011729 call car_motor1_control +0x376e 011730 call car_motor2_control +0x376f 011731 branch car_motor3_control +: 011732 car_motor1_control: +0x3770 011733 arg mem_motor1_pwm_set ,regb +0x3771 011734 arg mem_motor1_status ,contr +0x3772 011735 branch car_motor_status_select +: 011736 car_motor2_control: +0x3773 011737 arg mem_motor2_pwm_set ,regb +0x3774 011738 arg mem_motor2_status ,contr +0x3775 011739 branch car_motor_status_select +: 011740 car_motor3_control: +0x3776 011741 arg mem_motor3_pwm_set ,regb +0x3777 011742 arg mem_motor3_status ,contr +0x3778 011743 branch car_motor_status_select +: 011744 car_motor_working_flag: +0x3779 011745 jam 0 ,mem_car_working_flag +0x377a 011746 rtn +: 011748 car_motor_status_select: +0x377b 011749 ifetch 1 ,contr +0x377c 011750 beq motor_stop ,car_motor_stop +0x377d 011751 beq go_front ,car_motor_positive +0x377e 011752 beq go_back ,car_motor_negative +0x377f 011753 rtn +: 011754 car_motor_positive: +0x3780 011755 jam 0 ,mem_motor_select_p_n +0x3781 011756 branch car_motor_negative + 1 +: 011757 car_motor_negative: +0x3782 011758 jam 1 ,mem_motor_select_p_n +0x3783 011759 ifetch 1 ,contr +0x3784 011760 store 1 ,mem_car_motor_speed +0x3785 011761 ifetch 8 ,regb +0x3786 011762 branch car_motor_work +: 011764 car_motor_stop: +0x3787 011765 ifetch 1 ,regb +0x3788 011766 call pwm_disable +0x3789 011767 increase 1 ,regb +0x378a 011768 ifetch 1 ,regb +0x378b 011769 branch pwm_disable +: 011770 car_motor_work: +0x378c 011771 store 8 ,mem_motor_pwm_pin1_set +0x378d 011772 jam 1 ,mem_car_working_flag +0x378e 011773 fetch 1 ,mem_motor_select_p_n +0x378f 011774 beq 0 ,car_motor_select_positive +: 011775 car_motor_select_negative: +0x3790 011776 fetch 1 ,mem_motor_pwm_pin2_set +0x3791 011777 store 1 ,mem_motor_pwm_pin_set +0x3792 011778 fetch 1 ,mem_motor_pwm_pin1_set +: 011779 car_motor_work_next: +0x3793 011780 call pwm_disable +0x3794 011781 fetch 1 ,mem_car_motor_speed +0x3795 011782 call car_motor_speed_duty_setting +0x3796 011783 store 1 ,mem_motor_pwm_dute_set +0x3797 011784 fetch 6 ,mem_motor_pwm_pin_set +0x3798 011785 store 6 ,mem_pdatatemp +0x3799 011786 branch pwm_out_set +: 011787 car_motor_select_positive: +0x379a 011788 fetch 1 ,mem_motor_pwm_pin1_set +0x379b 011789 store 1 ,mem_motor_pwm_pin_set +0x379c 011790 fetch 1 ,mem_motor_pwm_pin2_set +0x379d 011791 branch car_motor_work_next +: 011793 car_motor_speed_duty_setting: +0x379e 011794 mul32 pdata ,5 ,pdata +0x379f 011795 add pdata ,50 ,pdata +0x37a0 011796 rtn +: 011797 car_motor_speed_duty_transform: +0x37a1 011798 arg 12000 ,temp +0x37a2 011799 imul32 temp ,pdata +0x37a3 011800 div pdata ,100 +0x37a4 011801 call wait_div_end +0x37a5 011802 quotient temp +0x37a6 011803 copy temp ,rega +0x37a7 011804 setarg 12000 +0x37a8 011805 isub temp ,regb +0x37a9 011806 rtn +: 011809 car_ir_init: +0x37aa 011810 hfetch 1 ,core_gpio_sel2 +0x37ab 011811 set1 2 ,pdata +0x37ac 011812 hstore 1 ,core_gpio_sel2 +0x37ad 011813 setarg 158 +0x37ae 011814 hstore 2 ,core_pwm_pcnt4 +0x37af 011815 hstore 2 ,core_pwm_ncnt4 +0x37b0 011816 rtn +: 011818 car_ir_data_rx_from_app: +0x37b1 011819 fetch 1 ,mem_car_24g_go_die_flag +0x37b2 011820 nrtn blank +0x37b3 011821 fetch 2 ,mem_le_receive_payload +0x37b4 011822 store 2 ,mem_ir_data +0x37b5 011823 fetch 1 ,mem_car_24g_status +0x37b6 011824 bne work_paired ,car_ir_data_tx +0x37b7 011825 fetch 2 ,mem_le_lap +0x37b8 011826 store 2 ,mem_ir_data +: 011827 car_ir_data_tx: +0x37b9 011828 bpatch patch1a_3 ,mem_patch1a +0x37ba 011829 call car_ir_init +0x37bb 011830 call car_ir_enable +0x37bc 011831 setarg 48000 +0x37bd 011832 call sleep +0x37be 011833 call car_ir_disable +0x37bf 011834 setarg 7200 +0x37c0 011835 call sleep +0x37c1 011836 arg 16 ,loopcnt +: 011837 car_ir_send_loop: +0x37c2 011838 call car_ir_enable +0x37c3 011839 fetch 2 ,mem_ir_data +0x37c4 011840 bbit1 0 ,car_ir_is_bit1 +0x37c5 011841 setarg 7200 +0x37c6 011842 call sleep +0x37c7 011843 call car_ir_disable +0x37c8 011844 branch car_ir_wait_finish +: 011846 car_ir_is_bit1: +0x37c9 011847 setarg 14400 +0x37ca 011848 call sleep +0x37cb 011849 call car_ir_disable +: 011850 car_ir_wait_finish: +0x37cc 011851 setarg 7200 +0x37cd 011852 call sleep +0x37ce 011853 fetch 2 ,mem_ir_data +0x37cf 011854 rshift pdata ,pdata +0x37d0 011855 store 2 ,mem_ir_data +0x37d1 011856 loop car_ir_send_loop +0x37d2 011858 jam 2 ,mem_car_attack_shake_timer +0x37d3 011859 jam 1 ,mem_car_attack_shake_flag +0x37d4 011860 setarg 0x0a01 +0x37d5 011861 store 2 ,mem_le_receive_payload +0x37d6 011862 fetch 1 ,mem_car_config_device_select +0x37d7 011863 beq device_battle_tank ,car_attack_shake_back_battle_tank +: 011864 car_attack_shake_back_battle_car: +0x37d8 011865 branch car_motor_control +: 011866 car_attack_shake_back_battle_tank: +0x37d9 011867 setarg 0x0a01 +0x37da 011868 store 2 ,mem_le_receive_payload + 2 +0x37db 011869 branch car_motor_control +: 011871 car_ir_enable: +0x37dc 011872 hfetch 1 ,core_gpio_key2 +0x37dd 011873 or_into 0x40 ,pdata +0x37de 011874 hstore 1 ,core_gpio_key2 +0x37df 011875 rtn +: 011876 car_ir_disable: +0x37e0 011877 hfetch 1 ,core_gpio_key2 +0x37e1 011878 and_into 0xbf ,pdata +0x37e2 011879 hstore 1 ,core_gpio_key2 +0x37e3 011880 rtn +: 011882 car_ir_rx_init: +0x37e4 011883 fetch 1 ,mem_car_config_ir_enable +0x37e5 011884 rtneq 0x00 +0x37e6 011885 call lpm_disable_exen_output +0x37e7 011886 fetcht 1 ,mem_car_config_ir_rx_gpio +0x37e8 011887 storet 1 ,mem_ir_rx_gpio +0x37e9 011888 call gpio_config_input +0x37ea 011889 call car_ir_gpio_get_status +0x37eb 011890 nrtn true +0x37ec 011891 jam 1 ,mem_car_ir_breakdown_check_timer +0x37ed 011892 rtn +: 011894 car_ir_receive_process: +0x37ee 011895 fetch 1 ,mem_car_config_ir_enable +0x37ef 011896 rtneq flag_ir_disable +0x37f0 011897 fetch 1 ,mem_car_ir_breakdown_flag +0x37f1 011898 nrtn blank +0x37f2 011899 fetch 2 ,mem_ui_state_map +0x37f3 011900 bbit1 ui_state_ble_connected ,car_ir_receive_process_next +0x37f4 011901 fetch 1 ,mem_car_24g_status +0x37f5 011902 rtnne work_paired +: 011903 car_ir_receive_process_next: +0x37f6 011904 bpatch patch1a_4 ,mem_patch1a +0x37f7 011905 call car_ir_gpio_get_status +0x37f8 011906 nrtn true +0x37f9 011907 setarg 36000 +0x37fa 011908 call sleep +0x37fb 011909 call car_ir_gpio_get_status +0x37fc 011910 nrtn true +0x37fd 011911 call car_ir_clk_get +: 011912 car_ir_packet_head_wait_end: +0x37fe 011913 call car_ir_clk_check +0x37ff 011914 nrtn positive +0x3800 011915 call car_ir_gpio_get_status +0x3801 011916 branch car_ir_packet_head_wait_end ,true +0x3802 011917 arg 0 ,rega +0x3803 011918 arg 16 ,loopcnt +0x3804 011919 call car_ir_clk_get +: 011920 car_ir_receive_process_loop: +0x3805 011921 call car_ir_clk_check +0x3806 011922 nrtn positive +0x3807 011923 call car_ir_gpio_get_status +0x3808 011924 nbranch car_ir_receive_process_loop ,true +0x3809 011925 setarg 10800 +0x380a 011926 call sleep +0x380b 011927 call car_ir_gpio_get_status +0x380c 011928 branch car_ir_get_bit1 ,true +: 011929 car_ir_get_bit0: +0x380d 011930 setarg 0 +0x380e 011931 rshift rega ,rega +0x380f 011932 ior rega ,rega +0x3810 011933 loop car_ir_receive_process_loop +0x3811 011934 branch car_ir_receive_process_end +: 011935 car_ir_get_bit1: +0x3812 011936 setarg 0x8000 +0x3813 011937 rshift rega ,rega +0x3814 011938 ior rega ,rega +0x3815 011939 call car_ir_clk_get +: 011940 car_ir_get_bit1_wait_low_end: +0x3816 011941 call car_ir_clk_check +0x3817 011942 nrtn positive +0x3818 011943 call car_ir_gpio_get_status +0x3819 011944 branch car_ir_get_bit1_wait_low_end ,true +0x381a 011945 loop car_ir_receive_process_loop +: 011946 car_ir_receive_process_end: +0x381b 011947 bpatch patch1a_5 ,mem_patch1a +0x381c 011948 copy rega ,pdata +0x381d 011949 store 2 ,mem_ir_rx_buf +0x381e 011950 store 2 ,mem_ir_notify_data + 8 +0x381f 011951 fetch 1 ,mem_car_24g_status +0x3820 011952 beq work_paired ,car_ir_24g_receive_attack +: 011953 car_ir_data_notify: +0x3821 011954 arg 0x07 ,loopcnt +0x3822 011955 arg mem_ir_notify_data_head ,contr +0x3823 011956 call calc_check_sum_start +0x3824 011957 store 1 ,mem_ir_notify_data_check_sum +0x3825 011958 arg mem_ir_notify_data ,rega +0x3826 011959 branch queue_push +: 011961 car_ir_24g_receive_attack: +0x3827 011962 fetch 1 ,mem_car_24g_ir_receive_attack_count +0x3828 011963 increase 1 ,pdata +0x3829 011964 store 1 ,mem_car_24g_ir_receive_attack_count +0x382a 011965 div pdata ,2 +0x382b 011966 call wait_div_end +0x382c 011967 quotient temp +0x382d 011968 remainder pdata +0x382e 011969 nbranch car_ir_24g_receive_attack_blink ,blank +: 011970 car_ir_24g_receive_attack_off: +0x382f 011971 fetch 1 ,mem_car_config_led_num +0x3830 011972 isub temp ,null +0x3831 011973 call car_ir_24g_go_die ,zero +0x3832 011974 arg mem_car_led_control ,pdata +0x3833 011975 increase -1 ,temp +0x3834 011976 iadd temp ,rega +0x3835 011977 arg 0 ,pdata +0x3836 011978 istore 1 ,rega +0x3837 011979 rtn +: 011980 car_ir_24g_receive_attack_blink: +0x3838 011981 arg mem_car_led_control ,pdata +0x3839 011982 iadd temp ,rega +0x383a 011983 arg 2 ,pdata +0x383b 011984 istore 1 ,rega +0x383c 011985 rtn +: 011986 car_ir_24g_go_die: +0x383d 011987 jam 1 ,mem_car_24g_go_die_flag +0x383e 011988 rtn +: 011989 car_ir_clk_get: +0x383f 011990 copy clkn_bt ,pdata +0x3840 011991 store 4 ,mem_ir_receive_clkn +0x3841 011992 rtn +: 011993 car_ir_clk_check: +0x3842 011994 copy clkn_bt ,pdata +0x3843 011995 fetcht 4 ,mem_ir_receive_clkn +0x3844 011996 isub temp ,pdata +0x3845 011997 sub pdata ,200 ,null +0x3846 011998 rtn +: 012000 car_ir_gpio_get_status: +0x3847 012001 fetcht 1 ,mem_ir_rx_gpio +0x3848 012002 branch gpio_get_bit +: 012004 car_led_control_receive: +0x3849 012005 fetch 8 ,mem_le_receive_payload +0x384a 012006 store 8 ,mem_car_led_control +0x384b 012007 rtn +: 012009 car_info_request: +0x384c 012010 fetch 1 ,mem_car_config_device_select +0x384d 012011 store 1 ,mem_car_info_request_payload +0x384e 012012 fetch 1 ,mem_car_config_motor_layout +0x384f 012013 store 1 ,mem_car_info_request_payload + 1 +0x3850 012014 fetch 1 ,mem_car_config_ir_enable +0x3851 012015 store 1 ,mem_car_info_request_payload + 2 +0x3852 012016 arg 13 ,loopcnt +0x3853 012017 arg mem_car_info_request_head ,contr +0x3854 012018 call calc_check_sum_start +0x3855 012019 store 1 ,mem_car_info_request_checksum +0x3856 012020 arg mem_car_info_request ,rega +0x3857 012021 branch queue_push +: 012027 light_init: +0x3858 012028 call clear_eeprom_size_2k +0x3859 012029 jam 0x7a ,mem_curr_packet_num +0x385a 012030 call light_load_controler_list +0x385b 012031 call light_init_crr_cmd_count +0x385c 012032 setarg light_pairing_timer +0x385d 012033 store 2 ,mem_cb_event_timer +0x385e 012034 arg 0 ,rega +0x385f 012035 branch pwm_init +: 012037 light_pairing_timer: +0x3860 012038 fetch 2 ,mem_light_pairing_timer +0x3861 012039 rtn blank +0x3862 012040 increase -1 ,pdata +0x3863 012041 store 2 ,mem_light_pairing_timer +0x3864 012042 rtnne 0 +0x3865 012043 jam 0 ,mem_light_pairing_enable +0x3866 012044 rtn +: 012046 light_init_crr_cmd_count: +0x3867 012047 bpatch patch1a_6 ,mem_patch1a +0x3868 012048 fetch 1 ,mem_light_next_record +0x3869 012049 sub pdata ,40 ,null +0x386a 012050 rtn positive +0x386b 012051 jam 0 ,mem_light_next_record +0x386c 012052 rtn +: 012054 light_load_controler_list: +0x386d 012055 arg mem_light_next_record ,rega +0x386e 012056 arg 0 ,regb +0x386f 012057 arg 81 ,temp +0x3870 012058 branch iicd_read_eep_data +: 012061 light_find_controler_pairing: +0x3871 012062 disable user +0x3872 012063 fetch 1 ,mem_light_cnum +0x3873 012064 copy pdata ,loopcnt +0x3874 012066 arg mem_light_clist ,rega +0x3875 012067 copy regc ,regb +: 012068 light_find_controler_pairing_loop: +0x3876 012069 bpatch patch1a_7 ,mem_patch1a +0x3877 012070 call light_compare_addr_record +0x3878 012071 branch enable_user ,zero +: 012072 light_find_single_pairing_diff: +0x3879 012073 increase 4 ,rega +0x387a 012074 loop light_find_controler_pairing_loop +0x387b 012075 rtn +: 012078 light_compare_addr_record: +0x387c 012079 bpatch patch1b_0 ,mem_patch1b +0x387d 012080 ifetch 3 ,rega +0x387e 012081 ifetcht 3 ,regb +0x387f 012082 isub temp ,null +0x3880 012083 rtn +: 012085 light_compare_single_record: +0x3881 012086 bpatch patch1b_1 ,mem_patch1b +0x3882 012087 ifetch 3 ,rega +0x3883 012088 ifetcht 3 ,regb +0x3884 012089 isub temp ,null +0x3885 012090 nrtn zero +0x3886 012091 ifetch 1 ,contr +0x3887 012092 sub pdata ,0 ,null +0x3888 012093 rtn zero +0x3889 012094 add rega ,3 ,contr +0x388a 012095 ifetcht 1 ,contr +0x388b 012096 isub temp ,null +0x388c 012097 rtn +: 012100 light_find_controler_cmd: +0x388d 012101 bpatch patch1b_2 ,mem_patch1b +0x388e 012102 disable user +0x388f 012103 fetch 1 ,mem_light_cnum +0x3890 012104 copy pdata ,loopcnt +0x3891 012106 arg mem_light_clist ,rega +0x3892 012107 copy regc ,regb +: 012108 light_find_controler_cmd_loop: +0x3893 012109 call light_compare_single_record +0x3894 012110 branch enable_user ,zero +0x3895 012111 increase 4 ,rega +0x3896 012112 loop light_find_controler_cmd_loop +0x3897 012113 rtn +: 012116 light_recv_adv: +0x3898 012117 fetch 1 ,mem_le_scanrsp_rcv +0x3899 012118 increase 1 ,pdata +0x389a 012119 store 1 ,mem_le_scanrsp_rcv +0x389b 012120 arg mem_le_rxbuf + 12 ,regc +: 012122 light_anylize_command: +0x389c 012123 ifetch 2 ,regc +0x389d 012124 arg 0x55aa ,temp +0x389e 012125 isub temp ,null +0x389f 012126 nrtn zero +0x38a0 012127 copy contr ,regc +0x38a1 012128 ifetcht 3 ,regc +0x38a2 012129 setarg 0xffffff +0x38a3 012130 isub temp ,null +0x38a4 012131 branch light_parse_cmd ,zero +0x38a5 012132 call light_find_controler_cmd +0x38a6 012133 branch light_parse_cmd ,user +0x38a7 012134 rtn +: 012136 light_parse_cmd: +0x38a8 012137 bpatch patch1b_3 ,mem_patch1b +0x38a9 012138 increase 4 ,regc +0x38aa 012139 ifetch 1 ,regc +0x38ab 012140 fetcht 1 ,mem_curr_packet_num +0x38ac 012141 isub temp ,null +0x38ad 012142 rtn zero +0x38ae 012143 store 1 ,mem_curr_packet_num +0x38af 012144 fetch 1 ,mem_le_req_rcv +0x38b0 012145 increase 1 ,pdata +0x38b1 012146 store 1 ,mem_le_req_rcv +0x38b2 012148 increase 1 ,regc +0x38b3 012149 ifetch 1 ,regc +0x38b4 012150 store 1 ,mem_light_crr_cmd_count +0x38b5 012151 copy pdata ,loopcnt +0x38b6 012152 rtn blank +: 012153 light_parse_cmd_loop: +0x38b7 012154 ifetch 1 ,contr +0x38b8 012155 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 +0x38b9 012156 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 +0x38ba 012157 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 +0x38bb 012158 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 +0x38bc 012159 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 +0x38bd 012160 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 +0x38be 012161 beq light_cmd_auto_mode ,light_parse_auto_mode +0x38bf 012162 beq light_cmd_pairing ,light_parse_pairing +0x38c0 012163 loop light_parse_cmd_loop +0x38c1 012164 rtn +: 012166 light_parse_cmd_pwm0: +0x38c2 012167 copy contr ,regc +0x38c3 012168 fetch 1 ,mem_light_pwm0 +0x38c4 012169 store 1 ,mem_pdatatemp +0x38c5 012170 arg 0 ,temp +: 012171 light_parse_cmd_pwm_common: +0x38c6 012172 storet 1 ,mem_pdatatemp + 1 +0x38c7 012173 setarg 10000 +0x38c8 012174 store 3 ,mem_pdatatemp + 2 +0x38c9 012175 ifetch 1 ,regc +0x38ca 012176 store 1 ,mem_pdatatemp + 5 +0x38cb 012177 call pwm_out_set +0x38cc 012178 and regc ,1 ,contr +0x38cd 012179 loop light_parse_cmd_loop +0x38ce 012180 rtn +: 012181 light_parse_cmd_pwm1: +0x38cf 012182 copy regc ,contr +0x38d0 012183 fetch 1 ,mem_light_pwm1 +0x38d1 012184 store 1 ,mem_pdatatemp +0x38d2 012185 arg 1 ,temp +0x38d3 012186 branch light_parse_cmd_pwm_common +: 012187 light_parse_cmd_pwm2: +0x38d4 012188 copy regc ,contr +0x38d5 012189 fetch 1 ,mem_light_pwm2 +0x38d6 012190 store 1 ,mem_pdatatemp +0x38d7 012191 arg 2 ,temp +0x38d8 012192 branch light_parse_cmd_pwm_common +: 012193 light_parse_cmd_pwm3: +0x38d9 012194 copy regc ,contr +0x38da 012195 fetch 1 ,mem_light_pwm3 +0x38db 012196 store 1 ,mem_pdatatemp +0x38dc 012197 arg 3 ,temp +0x38dd 012198 branch light_parse_cmd_pwm_common +: 012199 light_parse_cmd_pwm4: +0x38de 012200 copy regc ,contr +0x38df 012201 fetch 1 ,mem_light_pwm4 +0x38e0 012202 store 1 ,mem_pdatatemp +0x38e1 012203 arg 4 ,temp +0x38e2 012204 branch light_parse_cmd_pwm_common +: 012205 light_parse_cmd_pwm5: +0x38e3 012206 copy regc ,contr +0x38e4 012207 fetch 1 ,mem_light_pwm5 +0x38e5 012208 store 1 ,mem_pdatatemp +0x38e6 012209 arg 5 ,temp +0x38e7 012210 branch light_parse_cmd_pwm_common +: 012212 light_parse_auto_mode: +0x38e8 012213 ifetch 1 ,contr +0x38e9 012214 rtn +: 012216 light_parse_pairing: +0x38ea 012217 copy contr ,regc +0x38eb 012218 fetch 1 ,mem_light_pairing_enable +0x38ec 012219 bne 1 ,light_parse_pairing_abandon +0x38ed 012220 call update_controler_list +: 012221 light_parse_pairing_abandon: +0x38ee 012222 and regc ,4 ,contr +0x38ef 012223 rtn +: 012224 update_controler_list: +0x38f0 012225 bpatch patch1b_4 ,mem_patch1b +0x38f1 012226 call light_find_controler_pairing +0x38f2 012227 branch update_conrtoler_list_found ,user +0x38f3 012228 fetch 1 ,mem_light_next_record +0x38f4 012229 copy pdata ,temp +0x38f5 012230 increase 1 ,pdata +0x38f6 012231 store 1 ,mem_light_next_record +0x38f7 012232 call light_init_crr_cmd_count +0x38f8 012233 lshift2 temp ,temp +0x38f9 012234 setarg mem_light_clist +0x38fa 012235 iadd temp ,contw +0x38fb 012236 ifetch 4 ,regc +0x38fc 012237 istore 4 ,contw +0x38fd 012238 branch update_conrtoler_store_list +: 012239 update_conrtoler_list_found: +0x38fe 012240 add regc ,3 ,contr +0x38ff 012241 ifetch 1 ,contr +0x3900 012242 rtn blank +0x3901 012243 ifetch 4 ,regc +0x3902 012244 istore 4 ,rega +: 012245 update_conrtoler_store_list: +0x3903 012246 arg mem_light_next_record ,rega +0x3904 012247 arg 0 ,regb +0x3905 012248 arg 81 ,temp +0x3906 012249 branch iicd_write_eep_data +: 012253 lightc_init: +0x3907 012257 fetcht 1 ,mem_lightc_led_gpio +0x3908 012258 call gpio_out_inactive +0x3909 012259 rtn +: 012262 lightc_dispatch: +0x390a 012265 fetcht 1 ,mem_lightc_led_gpio +0x390b 012266 call gpio_out_active +0x390c 012269 fetcht 1 ,mem_lightc_led_gpio +0x390d 012270 call gpio_out_inactive +0x390e 012273 call lightc_start_adv +0x390f 012275 fetch 1 ,mem_adv_time +0x3910 012276 nrtn blank +0x3911 012278 call lpm_write_gpio_wakeup +0x3912 012279 hfetch 4 ,core_lpm_ctrl +0x3913 012280 set0 15 ,pdata +0x3914 012281 hstore 4 ,core_lpm_reg +0x3915 012282 call lpm_write_ctrl +0x3916 012283 arg param_hibernate_clks ,temp +0x3917 012284 branch lpm_sleep +: 012286 lightc_adv: +0x3918 012287 fetch 1 ,mem_adv_time +0x3919 012288 branch le_adv_loop_tx ,blank +0x391a 012289 increase -1 ,pdata +0x391b 012290 store 1 ,mem_adv_time +0x391c 012291 branch le_adv_loop_tx +: 012293 lightc_start_adv: +0x391d 012294 mul32 pdata ,20 ,pdata +0x391e 012295 arg mem_cmd0_string ,contr +0x391f 012296 iadd contr ,contr +0x3920 012297 ifetch 1 ,contr +0x3921 012298 rtn blank +0x3922 012299 copy pdata ,rega +0x3923 012300 copy rega ,loopcnt +0x3924 012301 arg mem_le_adv_data + 2 ,contw +0x3925 012302 call memcpy +0x3926 012303 copy rega ,pdata +0x3927 012304 increase 2 ,pdata +0x3928 012305 store 1 ,mem_le_adv_data_len +0x3929 012306 rtn +: 012313 module_init: +0x392a 012315 rtn wake +0x392b 012316 call le_modified_name +0x392c 012317 call adc_init_data +0x392d 012318 setarg module_process_idle +0x392e 012319 store 2 ,mem_cb_idle_process +0x392f 012320 setarg module_bt_conn_process +0x3930 012321 store 2 ,mem_cb_bt_process +0x3931 012322 setarg module_process_bb_event +0x3932 012323 store 2 ,mem_cb_bb_event_process +0x3933 012324 setarg module_le_conn_process +0x3934 012325 store 2 ,mem_cb_le_process +0x3935 012326 setarg module_lpm_lock +0x3936 012327 store 2 ,mem_cb_check_wakelock +0x3937 012328 setarg module_hci_cmd_transmit_le_notify +0x3938 012329 store 2 ,mem_cb_ble_transmit +0x3939 012330 setarg module_hci_event_receive_spp_data +0x393a 012331 store 2 ,mem_cb_receive_spp_data +0x393b 012332 setarg module_le_receive_data +0x393c 012333 store 2 ,mem_cb_att_write +0x393d 012334 setarg module_bb_event_timer +0x393e 012335 store 2 ,mem_cb_event_timer +0x393f 012337 call module_spp_clear_last_transmite_clock +0x3940 012338 bpatch patch1b_5 ,mem_patch1b +0x3941 012339 call module_lpm_uart_init +0x3942 012340 call module_gpio_init +0x3943 012341 call check_module_disabled +0x3944 012342 branch module_hci_event_enter_standby_mode +: 012345 module_lpm_uart_init: +0x3945 012346 fetch 4 ,mem_module_uart_rx_buffer +0x3946 012347 hstore 4 ,core_uart_rsaddr +0x3947 012349 fetch 4 ,mem_module_uart_tx_buffer +0x3948 012350 hstore 4 ,core_uart_tsaddr +0x3949 012352 hfetch 1 ,core_gpio_sel1 +0x394a 012353 or_into 0x04 ,pdata +0x394b 012354 and_into 0xfc ,pdata +0x394c 012355 hstore 1 ,core_gpio_sel1 +0x394d 012356 jam 0x00 ,core_uart_ctrl +0x394e 012358 fetch 2 ,mem_module_uart_rx_buffer +0x394f 012359 hstore 2 ,core_uart_rrptr +0x3950 012360 fetch 2 ,mem_module_uart_tx_buffer +0x3951 012361 hstore 2 ,core_uart_twptr +0x3952 012362 hstore 2 ,core_uart_trptrp +0x3953 012364 hfetch 4 ,core_gpio_pu0 +0x3954 012365 set1 7 ,pdata +0x3955 012366 hstore 4 ,core_gpio_pu0 +0x3956 012368 hfetch 2 ,core_clkoff +0x3957 012369 set0 clock_off_uart ,pdata +0x3958 012370 hstore 2 ,core_clkoff +0x3959 012371 call uart_set_baud_by_mem +0x395a 012372 jam uartclk_crystal ,core_uart_clksel +0x395b 012373 jam uart_ctrl_h4 ,core_uart_ctrl +0x395c 012375 fetch 1 ,mem_module_flag +0x395d 012376 isolate1 module_flag_uart_flow_control ,pdata +0x395e 012377 hfetcht 1 ,core_uart_ctrl +0x395f 012378 setflag true ,4 ,temp +0x3960 012379 hstoret 1 ,core_uart_ctrl +0x3961 012380 rtn +: 012384 module_lpm_init: +0x3962 012385 call module_spp_clear_last_transmite_clock +0x3963 012386 branch module_lpm_uart_init +: 012389 module_gpio_init: +0x3964 012394 fetcht 1 ,mem_module_connect_state_gpio +0x3965 012395 call gpio_config_output +0x3966 012396 call module_set_conn_pin_low +0x3967 012398 fetcht 1 ,mem_module_wake_up_gpio +0x3968 012399 branch gpio_config_input +: 012401 module_lpm_lock: +0x3969 012402 fetcht 1 ,mem_module_wake_up_gpio +0x396a 012403 call gpio_get_bit +0x396b 012404 nbranch app_put_lpm_wake_lock ,true +0x396c 012405 branch app_get_lpm_wake_lock +: 012408 module_le_conn_process: +0x396d 012409 rtn +: 012411 module_bt_conn_process: +0x396e 012412 call module_spp_enter_sniff +0x396f 012413 branch module_control_air_flow +: 012415 module_spp_enter_sniff: +0x3970 012416 fetch 1 ,mem_ui_state_map +0x3971 012417 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +0x3972 012418 bpatch patch1b_6 ,mem_patch1b +0x3973 012419 setarg 0x3eff +0x3974 012420 fetcht 4 ,mem_last_transmite_clock +0x3975 012421 iadd temp ,temp +0x3976 012422 copy clkn_bt ,pdata +0x3977 012423 isub temp ,null +0x3978 012424 nrtn positive +0x3979 012425 fetch 2 ,mem_ui_state_map +0x397a 012426 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +0x397b 012427 fetch 1 ,mem_module_flag +0x397c 012428 rtnbit1 moudle_task_sniff +0x397d 012429 call module_set_sniff_task_flag +0x397e 012430 call app_bt_enter_sniff +: 012431 module_spp_clear_last_transmite_clock: +0x397f 012432 copy clkn_bt ,pdata +0x3980 012433 store 4 ,mem_last_transmite_clock +0x3981 012434 rtn +: 012437 module_process_idle: +0x3982 012438 call module_control_air_flow +0x3983 012439 call l2cap_malloc_is_fifo_full +0x3984 012440 nrtn blank +0x3985 012441 branch module_process +: 012444 module_process_bb_event: +0x3986 012445 copy regc ,pdata +0x3987 012446 beq bt_evt_bb_connected ,module_process_bb_conn +0x3988 012447 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +0x3989 012448 beq bt_evt_reconn_failed ,module_process_reconn_fail +0x398a 012449 beq bt_evt_setup_complete ,module_process_setup_complete +0x398b 012450 beq bt_evt_spp_connected ,module_process_spp_connected +0x398c 012451 beq bt_evt_spp_disconnected ,module_process_spp_disconnected +0x398d 012452 beq bt_evt_pincode_req ,module_process_evt_pincode_req +0x398e 012453 beq bt_evt_enter_sniff ,module_process_enter_sniff +0x398f 012454 beq bt_evt_exit_sniff ,module_process_exit_sniff +0x3990 012455 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +0x3991 012456 beq bt_evt_le_connected ,module_process_le_conn +0x3992 012457 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +0x3993 012458 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +0x3994 012459 beq bt_evt_unsniff_accept ,module_process_unsniff_accept +0x3995 012460 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +0x3996 012461 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +0x3997 012462 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +0x3998 012463 beq bt_evt_le_start_enc ,module_hci_event_start_enc +0x3999 012464 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +0x399a 012465 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +0x399b 012466 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +0x399c 012467 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +0x399d 012468 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +0x399e 012469 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +0x399f 012470 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey +0x39a0 012471 beq bt_evt_store_nvram ,module_hci_event_store_device +0x39a1 012472 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +0x39a2 012473 rtn +: 012476 module_process_bb_event_disconned: +0x39a3 012477 call module_spp_clear_last_transmite_clock +0x39a4 012478 fetch 1 ,mem_flag_pairing_state +0x39a5 012479 ncall module_hci_event_bt_pairing_fail ,blank +0x39a6 012480 call module_disconn_start +0x39a7 012481 fetch 2 ,mem_ui_state_map +0x39a8 012482 rtnbit0 ui_state_bt_spp_conn +0x39a9 012483 branch module_spp_disconnected +: 012485 module_process_spp_connected: +0x39aa 012486 fetch 2 ,mem_ui_state_map +0x39ab 012487 set1 ui_state_bt_spp_conn ,pdata +0x39ac 012488 store 2 ,mem_ui_state_map +0x39ad 012489 fetch 1 ,mem_module_spp_lpm_mult +0x39ae 012490 store 1 ,mem_lpm_mult +0x39af 012491 call module_set_conn_pin_low +0x39b0 012492 branch module_hci_event_spp_connect +: 012494 module_process_spp_disconnected: +: 012496 module_spp_disconnected: +0x39b1 012497 fetch 2 ,mem_ui_state_map +0x39b2 012498 rtnbit0 ui_state_bt_spp_conn +0x39b3 012499 set0 ui_state_bt_spp_conn ,pdata +0x39b4 012500 store 2 ,mem_ui_state_map +0x39b5 012501 branch module_hci_event_spp_disconnect +: 012504 module_process_enter_sniff: +: 012506 module_sniff_param_check: +0x39b6 012507 call module_spp_clear_last_transmite_clock +0x39b7 012510 fetch 2 ,mem_context + coffset_tsniff +0x39b8 012511 rshift pdata ,pdata +0x39b9 012512 fetcht 2 ,mem_sniff_param_interval +0x39ba 012513 isub temp ,null +0x39bb 012514 nbranch module_sniff_param_check_unsniff ,zero +0x39bc 012515 branch app_lpm_mult_enable +: 012516 module_sniff_param_check_unsniff: +0x39bd 012517 fetch 1 ,mem_module_flag +0x39be 012518 rtnbit1 moudle_task_unsniff +0x39bf 012519 hfetch 2 ,core_uart_rxitems +0x39c0 012520 ncall module_set_unsniff_task_flag ,blank +0x39c1 012521 branch app_bt_sniff_exit +: 012523 module_process_exit_sniff: +0x39c2 012524 call module_clear_sniff_task_flag +0x39c3 012525 branch app_lpm_mult_disable +: 012527 module_process_setup_complete: +0x39c4 012528 call module_spp_clear_last_transmite_clock +0x39c5 012529 branch module_conn_start +: 012531 module_process_bb_even_le_disconn: +0x39c6 012532 call le_clr_config_more_data +0x39c7 012533 call module_disconn_start +0x39c8 012534 branch module_hci_event_le_disconnect +: 012536 module_process_evt_pincode_req: +0x39c9 012537 branch app_bt_set_pincode +: 012540 module_process_sniff_not_accept: +0x39ca 012541 branch module_clear_sniff_task_flag +: 012544 module_process_unsniff_accept: +0x39cb 012545 fetch 1 ,mem_module_flag +0x39cc 012546 bbit0 moudle_task_unsniff ,app_bt_enter_sniff +0x39cd 012547 branch module_clear_unsniff_task_flag +: 012550 module_process_unsniff_not_accept: +0x39ce 012551 branch module_clear_unsniff_task_flag +: 012554 module_process_le_conn: +0x39cf 012555 call le_send_att_exchange_mtu_requset +0x39d0 012556 call module_conn_start +0x39d1 012557 fetch 1 ,mem_module_le_lpm_mult +0x39d2 012558 store 1 ,mem_lpm_mult +0x39d3 012559 branch module_hci_event_le_connect +: 012562 module_process_bb_conn: +0x39d4 012563 jam 0 ,mem_flag_mode_ssp_pin +0x39d5 012564 call module_clear_sniff_task_flag +0x39d6 012565 branch module_clear_unsniff_task_flag +: 012567 module_process_page_time_out: +: 012568 module_process_reconn_fail: +: 012569 module_disconn_start: +0x39d7 012570 call module_start_adv_discovery_by_command +0x39d8 012571 branch module_set_conn_pin_high +: 012574 module_process_ble_ltk_lost: +0x39d9 012575 call le_send_reject_ind +0x39da 012576 branch le_send_smp_security_request +: 012579 module_set_conn_pin_high: +0x39db 012580 fetcht 1 ,mem_module_connect_state_gpio +0x39dc 012581 branch gpio_out_active +: 012583 module_conn_start: +0x39dd 012584 call module_stop_adv_discovery +0x39de 012585 branch module_set_conn_pin_low +: 012587 module_stop_adv_discovery: +0x39df 012588 fetch 1 ,mem_module_state +0x39e0 012589 isolate1 moudle_state_bt_bit ,pdata +0x39e1 012590 call app_bt_stop_discovery ,true +0x39e2 012591 fetch 1 ,mem_module_state +0x39e3 012592 isolate1 moudle_state_ble_bit ,pdata +0x39e4 012593 call app_ble_stop_adv ,true +0x39e5 012594 rtn +: 012595 module_set_conn_pin_low: +0x39e6 012596 fetcht 1 ,mem_module_connect_state_gpio +0x39e7 012597 branch gpio_out_inactive +: 012599 module_process_with_credit: +0x39e8 012600 fetch 1 ,mem_credit_flag +0x39e9 012601 rtneq credit_disable +0x39ea 012602 branch rfcomm_send_uih_without_payload +: 012604 module_process: +0x39eb 012605 hfetch 1 ,core_uart_status +0x39ec 012606 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +0x39ed 012607 call uartd_prepare_rx +0x39ee 012608 ifetch 1 ,contru +0x39ef 012609 bne 0x01 ,module_hci_in_excp +0x39f0 012610 hfetch 2 ,core_uart_rxitems +0x39f1 012611 sub pdata ,2 ,null +0x39f2 012612 rtn positive +0x39f3 012613 ifetch 1 ,contru +0x39f4 012614 store 1 ,mem_module_uart_opcode +0x39f5 012615 ifetcht 1 ,contru +0x39f6 012616 copy contru ,rega +0x39f7 012617 storet 1 ,mem_module_uart_len +0x39f8 012618 add temp ,3 ,temp +0x39f9 012619 hfetch 2 ,core_uart_rxitems +0x39fa 012620 isub temp ,temp +0x39fb 012621 nrtn positive +0x39fc 012622 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x39fd 012623 call module_hci_cmd_control +0x39fe 012624 fetch 1 ,mem_module_temp_nl_discard_packet +0x39ff 012625 rtneq hci_not_discard_packet +0x3a00 012626 branch module_hci_dicard_packet +: 012628 module_hci_in_excp: +0x3a01 012629 call delay_10ms +0x3a02 012630 call module_hci_event_invalid_packet +0x3a03 012631 branch module_hci_release_except +: 012634 module_hci_release_except: +0x3a04 012635 bpatch patch1b_7 ,mem_patch1b +0x3a05 012636 hfetch 2 ,core_uart_rxitems +0x3a06 012637 rtn blank +0x3a07 012638 call uartd_prepare_rx +0x3a08 012639 ifetch 1 ,contru +0x3a09 012640 sub pdata ,0x01 ,null +0x3a0a 012641 ncall module_hci_dicard_bytes ,zero +0x3a0b 012642 nbranch module_hci_release_except ,zero +0x3a0c 012643 ifetch 1 ,contru +0x3a0d 012644 rtneq hci_cmd_spp_data_req +0x3a0e 012645 rtneq hci_cmd_set_credit_given +0x3a0f 012646 increase -1 ,contru +0x3a10 012647 call module_hci_dicard_bytes +0x3a11 012648 branch module_hci_release_except +: 012650 module_hci_dicard_packet: +0x3a12 012651 call uartd_prepare_rx +0x3a13 012652 increase 2 ,contru +0x3a14 012653 ifetch 1 ,contru +0x3a15 012654 iadd contru ,contru +: 012655 module_hci_dicard_bytes: +0x3a16 012656 branch uartd_rxdone +: 012659 module_hci_cmd_control: +0x3a17 012660 bpatch patch1c_0 ,mem_patch1c +0x3a18 012661 fetch 1 ,mem_module_uart_opcode +0x3a19 012662 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +0x3a1a 012663 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +0x3a1b 012664 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +0x3a1c 012665 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +0x3a1d 012666 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +0x3a1e 012667 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +0x3a1f 012668 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +0x3a20 012669 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +0x3a21 012670 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +0x3a22 012671 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +0x3a23 012672 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +0x3a24 012673 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +0x3a25 012674 beq hci_cmd_version_req ,module_hci_cmd_version_request +0x3a26 012675 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +0x3a27 012676 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +0x3a28 012677 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +0x3a29 012678 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +0x3a2a 012679 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +0x3a2b 012680 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +0x3a2c 012681 beq hci_cmd_power_req ,module_hci_cmd_power_request +0x3a2d 012682 beq hci_cmd_power_set ,module_hci_cmd_power_set +0x3a2e 012683 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +0x3a2f 012684 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +0x3a30 012685 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +0x3a31 012686 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +0x3a32 012687 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +0x3a33 012688 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +0x3a34 012689 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +0x3a35 012690 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +0x3a36 012691 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +0x3a37 012692 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +0x3a38 012693 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +0x3a39 012694 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +0x3a3a 012695 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +0x3a3b 012696 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +0x3a3c 012697 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +0x3a3d 012698 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm +0x3a3e 012699 branch module_hci_event_receive_invalid_cmd +: 012704 module_hci_cmd_set_bt_addr: +0x3a3f 012705 fetch 1 ,mem_module_uart_len +0x3a40 012706 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a41 012707 ifetch 6 ,contru +0x3a42 012708 store 6 ,mem_lap +0x3a43 012709 branch module_hci_event_receive_valid_cmd +: 012712 module_hci_cmd_set_le_addr: +0x3a44 012713 fetch 1 ,mem_module_uart_len +0x3a45 012714 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a46 012715 ifetch 6 ,contru +0x3a47 012716 store 6 ,mem_le_lap +0x3a48 012717 branch module_hci_event_receive_valid_cmd +: 012721 module_hci_cmd_set_visibility: +0x3a49 012722 fetch 1 ,mem_module_uart_len +0x3a4a 012723 bne 1 ,module_hci_event_receive_invalid_cmd +0x3a4b 012724 copy rega ,contru +0x3a4c 012725 call module_hci_event_receive_valid_cmd +0x3a4d 012726 ifetcht 1 ,contru +0x3a4e 012727 storet 1 ,mem_module_bluetooth_stauts_by_command +0x3a4f 012728 fetch 2 ,mem_ui_state_map +0x3a50 012729 rtnbit1 ui_state_ble_connected +0x3a51 012730 rtnbit1 ui_state_bt_connected +: 012731 module_start_adv_discovery_by_command: +0x3a52 012732 fetch 1 ,mem_module_state +0x3a53 012733 isolate1 moudle_state_bt_bit ,pdata +0x3a54 012734 nbranch moudle_start_adv_by_command ,true +0x3a55 012735 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a56 012736 and temp ,0x03 ,pdata +0x3a57 012737 store 1 ,mem_scan_mode +: 012738 moudle_start_adv_by_command: +0x3a58 012739 fetch 1 ,mem_module_state +0x3a59 012740 isolate1 moudle_state_ble_bit ,pdata +0x3a5a 012741 nrtn true +0x3a5b 012742 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a5c 012743 isolate1 2 ,temp +0x3a5d 012744 branch app_ble_start_adv ,true +0x3a5e 012745 branch app_ble_stop_adv +: 012749 module_hci_cmd_set_bt_name: +0x3a5f 012750 fetch 1 ,mem_module_uart_len +0x3a60 012751 sub pdata ,67 ,null +0x3a61 012752 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a62 012753 store 1 ,mem_local_name_length +0x3a63 012754 arg 8 ,loopcnt +0x3a64 012755 call memset0 +0x3a65 012756 fetch 1 ,mem_module_uart_len +0x3a66 012757 copy pdata ,loopcnt +0x3a67 012758 copy rega ,contru +0x3a68 012759 arg mem_local_name ,contw +0x3a69 012760 call uart_copy_rx_bytes_fast +0x3a6a 012761 branch module_hci_event_receive_valid_cmd +: 012765 module_hci_cmd_set_le_name: +0x3a6b 012766 fetch 1 ,mem_module_uart_len +0x3a6c 012767 sub pdata ,29 ,null +0x3a6d 012768 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a6e 012769 store 1 ,mem_le_name_len +0x3a6f 012770 copy pdata ,loopcnt +0x3a70 012771 copy rega ,contru +0x3a71 012772 arg mem_le_name ,contw +0x3a72 012773 call uart_copy_rx_bytes_fast +0x3a73 012774 call le_modified_name +0x3a74 012775 branch module_hci_event_receive_valid_cmd +: 012779 module_hci_cmd_receive_spp_data: +0x3a75 012780 fetch 1 ,mem_ui_state_map +0x3a76 012781 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +0x3a77 012782 call app_check_sniff +0x3a78 012783 branch module_hci_cmd_spp_exit_sniff ,true +0x3a79 012784 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a7a 012786 call module_spp_clear_last_transmite_clock +0x3a7b 012787 fetch 1 ,mem_remote_credits +0x3a7c 012788 rtn blank +0x3a7d 012789 fetch 2 ,mem_nl_rx_len_all +0x3a7e 012790 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all +0x3a7f 012791 fetch 1 ,mem_module_uart_len +0x3a80 012792 store 2 ,mem_nl_rx_len_all +0x3a81 012794 copy rega ,contru +0x3a82 012797 copy contru ,pdata +0x3a83 012798 store 2 ,mem_nl_rx_data_src +: 012799 module_hci_cmd_pass_init_ng_rx_len_all: +0x3a84 012800 call module_hci_cmd_get_current_packet_len_and_remain_len +0x3a85 012801 branch spp_tx_rfcomm_packet +: 012803 module_hci_cmd_spp_exit_sniff: +0x3a86 012804 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a87 012805 branch module_exit_sniff +: 012807 module_hci_cmd_get_current_packet_len_and_remain_len: +0x3a88 012808 call module_hci_cmd_get_current_patcket_len +0x3a89 012809 fetch 2 ,mem_nl_rx_len_all +0x3a8a 012810 fetcht 2 ,mem_current_packet_length +0x3a8b 012811 isub temp ,pdata +0x3a8c 012812 store 2 ,mem_nl_rx_len_all +0x3a8d 012813 rtn +: 012815 module_hci_cmd_get_current_patcket_len: +0x3a8e 012816 fetch 2 ,mem_nl_rx_len_all +0x3a8f 012817 arg dm_refcom_buff_len ,temp +0x3a90 012818 call not_greater_than +0x3a91 012819 fetcht 2 ,mem_rfcomm_max_frame_size +0x3a92 012820 call not_greater_than +0x3a93 012821 fetcht 2 ,mem_pn_max_frame_size +0x3a94 012822 call not_greater_than +0x3a95 012823 store 2 ,mem_current_packet_length +0x3a96 012824 rtn +: 012826 module_hci_command_tx_spp_tx_complete: +0x3a97 012827 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3a98 012828 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +0x3a99 012829 branch module_hci_event_receive_valid_cmd +: 012833 module_hci_cmd_receive_le_data: +0x3a9a 012834 fetch 2 ,mem_ui_state_map +0x3a9b 012835 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3a9c 012836 call module_check_ble_encrypt_state +0x3a9d 012837 branch module_hci_event_receive_invalid_cmd ,user +0x3a9e 012838 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a9f 012839 fetch 1 ,mem_module_flag +0x3aa0 012840 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +0x3aa1 012841 fetch 1 ,mem_module_hci_notify_len +0x3aa2 012842 nrtn blank +0x3aa3 012843 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3aa4 012844 ifetch 2 ,contru +0x3aa5 012845 store 2 ,mem_module_hci_notify_handle +0x3aa6 012846 copy contru ,pdata +0x3aa7 012847 store 2 ,mem_module_hci_nofiy_addr +0x3aa8 012848 fetch 1 ,mem_module_uart_len +0x3aa9 012849 pincrease -2 +0x3aaa 012850 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aab 012851 branch module_hci_event_receive_invalid_cmd ,zero +0x3aac 012852 store 1 ,mem_module_hci_notify_len +0x3aad 012853 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3aae 012854 call le_set_config_more_data +0x3aaf 012855 call module_hci_cmd_transmit_le_notify +0x3ab0 012856 call module_hci_cmd_transmit_le_notify +0x3ab1 012857 call module_hci_cmd_transmit_le_notify +0x3ab2 012858 fetch 1 ,mem_module_flag +0x3ab3 012859 rtnbit0 module_flag_ble_data_finish +: 012860 module_hci_cmd_receive_le_data_finish: +0x3ab4 012861 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3ab5 012862 call module_clear_le_tx_data_flag +0x3ab6 012863 branch module_hci_event_receive_valid_cmd +: 012865 module_hci_cmd_transmit_le_notify: +0x3ab7 012866 fetch 1 ,mem_module_hci_notify_len +0x3ab8 012867 rtn blank +0x3ab9 012868 call le_fifo_check_nearly_full +0x3aba 012869 nrtn blank +0x3abb 012870 call module_get_le_remote_mtu +0x3abc 012871 bpatch patch1c_1 ,mem_patch1c +0x3abd 012872 add temp ,-3 ,pdata +0x3abe 012873 fetcht 1 ,mem_module_hci_notify_len +0x3abf 012874 call not_greater_than +0x3ac0 012875 copy pdata ,rega +0x3ac1 012876 copy temp ,pdata +0x3ac2 012877 isub rega ,pdata +0x3ac3 012878 store 1 ,mem_module_hci_notify_len +0x3ac4 012879 fetcht 2 ,mem_module_hci_notify_handle +0x3ac5 012880 call le_att_malloc_tx_notify +0x3ac6 012881 fetch 2 ,mem_module_hci_nofiy_addr +0x3ac7 012882 copy pdata ,contru +0x3ac8 012883 copy rega ,loopcnt +0x3ac9 012884 call uart_copy_rx_bytes_fast +0x3aca 012885 copy contru ,pdata +0x3acb 012886 store 2 ,mem_module_hci_nofiy_addr +0x3acc 012887 fetch 1 ,mem_module_hci_notify_len +0x3acd 012888 nrtn blank +0x3ace 012889 branch module_set_le_tx_data_flag +: 012893 module_get_le_remote_mtu: +0x3acf 012894 arg 0x17 ,temp +0x3ad0 012895 fetch 1 ,mem_module_flag +0x3ad1 012896 rtnbit1 module_flag_ble_send_mtu23 +0x3ad2 012897 fetcht 2 ,mem_le_remote_mtu +0x3ad3 012898 rtn +: 012900 module_check_ble_encrypt_state: +0x3ad4 012901 fetch 1 ,mem_module_flag +0x3ad5 012902 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +0x3ad6 012903 branch disable_user +: 012907 module_hci_cmd_inquire_status: +0x3ad7 012908 branch module_hci_event_status_res +: 012912 module_hci_cmd_set_pairing_mode: +0x3ad8 012913 copy rega ,contru +0x3ad9 012914 ifetch 1 ,contru +0x3ada 012915 beq pairing_pincode ,module_hci_pairing_pincode_mode +0x3adb 012916 beq pairing_justwork ,module_hci_pairing_just_work_mode +0x3adc 012917 beq pairing_passkey ,module_hci_pairing_passkey +0x3add 012918 beq pairing_confirm ,module_hci_pairing_numeric_comparison +0x3ade 012919 branch module_hci_event_receive_invalid_cmd +: 012920 module_hci_pairing_pincode_mode: +0x3adf 012921 call ssp_disable +0x3ae0 012922 jam 0 ,mem_ssp_enable +0x3ae1 012923 branch module_hci_event_receive_valid_cmd +: 012924 module_hci_pairing_just_work_mode: +0x3ae2 012925 setarg ssp_mode_just_work_io_cap_data +: 012926 module_hci_sspairing_mode: +0x3ae3 012927 store 3 ,mem_sp_iocap_local +0x3ae4 012928 store 1 ,mem_ssp_mode_flag +0x3ae5 012929 call ssp_enable +0x3ae6 012930 jam 1 ,mem_ssp_enable +0x3ae7 012931 branch module_hci_event_receive_valid_cmd +: 012932 module_hci_pairing_passkey: +0x3ae8 012933 setarg ssp_mode_passkey_io_cap_data +0x3ae9 012934 branch module_hci_sspairing_mode +: 012936 module_hci_pairing_numeric_comparison: +0x3aea 012937 setarg ssp_mode_ssp_pin_io_cap_data +0x3aeb 012938 branch module_hci_sspairing_mode +: 012941 module_hci_cmd_set_pincode: +0x3aec 012942 fetch 1 ,mem_module_uart_len +0x3aed 012943 sub pdata ,16 ,null +0x3aee 012944 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aef 012945 store 1 ,mem_pin_length +0x3af0 012946 copy pdata ,loopcnt +0x3af1 012947 arg mem_pin ,contw +0x3af2 012948 call uart_copy_rx_bytes +0x3af3 012949 branch module_hci_event_receive_valid_cmd +: 012953 module_hci_cmd_set_uart_control_mode: +0x3af4 012954 copy rega ,contru +0x3af5 012955 ifetch 1 ,contru +0x3af6 012956 hfetcht 1 ,core_uart_ctrl +0x3af7 012957 nsetflag blank ,4 ,temp +0x3af8 012958 hstoret 1 ,core_uart_ctrl +0x3af9 012959 branch module_hci_event_receive_valid_cmd +: 012963 module_hci_cmd_set_uart_baud: +0x3afa 012964 fetch 1 ,mem_module_uart_len +0x3afb 012965 copy pdata ,loopcnt +0x3afc 012966 copy rega ,contru +0x3afd 012967 call string2dec_from_uart +0x3afe 012968 setarg uart_clk_24 +0x3aff 012969 idiv temp +0x3b00 012970 call wait_div_end +0x3b01 012971 quotient pdata +: 012972 module_hci_cmd_set_uart_baud_ok: +0x3b02 012973 store uart_baud_len ,mem_baud +0x3b03 012974 call module_hci_event_receive_valid_cmd +0x3b04 012975 call wait_uarttx +0x3b05 012976 branch uart_set_baud_by_mem +: 012980 module_hci_cmd_version_request: +0x3b06 012981 arg 2 ,rega +0x3b07 012982 arg mem_soft_version_num ,regb +0x3b08 012983 arg 0 ,temp +0x3b09 012984 branch module_hci_event_set_cmd +: 012985 module_hci_event_set_cmd_send_response: +0x3b0a 012986 store 2 ,mem_event_cmd_response_content +0x3b0b 012987 arg mem_event_cmd_response_content ,regb +0x3b0c 012988 arg 0 ,temp +0x3b0d 012989 branch module_hci_event_set_cmd +: 012993 module_hci_cmd_bt_disconnect: +0x3b0e 012994 fetch 2 ,mem_ui_state_map +0x3b0f 012995 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +: 012996 module_hci_cmd_bt_disconnect_doing: +0x3b10 012997 call module_hci_event_receive_valid_cmd +0x3b11 012998 branch app_bt_disconnect +: 013002 module_hci_cmd_ble_disconnect: +0x3b12 013003 fetch 2 ,mem_ui_state_map +0x3b13 013004 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +: 013005 module_hci_cmd_ble_disconnect_doing: +0x3b14 013006 call module_hci_event_receive_valid_cmd +0x3b15 013007 branch app_ble_disconnect +: 013013 module_hci_cmd_set_nvram: +0x3b16 013014 fetch 1 ,mem_module_uart_len +0x3b17 013015 copy pdata ,loopcnt +0x3b18 013016 copy rega ,contru +0x3b19 013017 fetch 2 ,mem_nv_data_ptr +0x3b1a 013018 icopy contw +0x3b1b 013019 call uart_copy_rx_bytes_fast +0x3b1c 013020 branch module_hci_event_receive_valid_cmd +: 013024 module_hci_cmd_confirm_gkey: +0x3b1d 013025 fetch 1 ,mem_ui_state_map +0x3b1e 013026 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +0x3b1f 013027 ifetch 1 ,contru +0x3b20 013028 fetcht 1 ,mem_flag_mode_ssp_pin +0x3b21 013029 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +0x3b22 013030 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +0x3b23 013031 storet 1 ,mem_flag_mode_ssp_pin +0x3b24 013033 call module_hci_event_receive_valid_cmd +0x3b25 013035 fetch 1 ,mem_flag_mode_ssp_pin +0x3b26 013036 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +0x3b27 013037 rtn +: 013039 dhkey_not_accept: +0x3b28 013040 jam 0 ,mem_flag_mode_ssp_pin +0x3b29 013041 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +0x3b2a 013042 branch ui_ipc_send_cmd +: 013045 module_hci_cmd_spp_number_comparison_result_is1: +0x3b2b 013046 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x3b2c 013047 branch dhkey_not_accept +: 013051 module_hci_cmd_set_credit_given: +0x3b2d 013052 fetch 1 ,mem_ui_state_map +0x3b2e 013053 rtnbit0 ui_state_bt_spp_conn +0x3b2f 013054 fetch 1 ,mem_credit_flag +0x3b30 013055 rtneq credit_disable +0x3b31 013056 ifetch 1 ,contru +0x3b32 013057 fetcht 1 ,mem_credit_given +0x3b33 013058 iadd temp ,temp +0x3b34 013059 storet 1 ,mem_credit_given +0x3b35 013060 rtn +: 013064 module_hci_cmd_auto_adv: +0x3b36 013065 arg 0x40 ,loopcnt +0x3b37 013066 arg mem_le_adv_data_len ,contw +0x3b38 013067 call clear_mem +0x3b39 013068 setarg 0 +0x3b3a 013069 store 1 ,mem_regb +0x3b3b 013070 copy rega ,contru +: 013071 module_hci_cmd_auto_adv_loop: +0x3b3c 013072 copy contru ,pdata +0x3b3d 013073 store 2 ,mem_regc +0x3b3e 013074 call module_hci_cmd_auto_adv_adv_analys +0x3b3f 013076 fetch 1 ,mem_regb +0x3b40 013077 fetcht 1 ,mem_temp +0x3b41 013078 increase 1 ,temp +0x3b42 013079 iadd temp ,pdata +0x3b43 013080 store 1 ,mem_regb +0x3b44 013082 sub pdata ,31 ,null +0x3b45 013083 nbranch module_hci_cmd_auto_adv_store_scan ,positive +: 013084 module_hci_cmd_auto_adv_store_adv: +0x3b46 013085 fetcht 1 ,mem_le_adv_data_len +0x3b47 013086 setarg mem_le_adv_data +0x3b48 013087 iadd temp ,pdata +0x3b49 013088 store 2 ,mem_contw +0x3b4a 013089 fetcht 1 ,mem_temp +0x3b4b 013090 increase 1 ,temp +0x3b4c 013091 fetch 1 ,mem_le_adv_data_len +0x3b4d 013092 iadd temp ,pdata +0x3b4e 013093 store 1 ,mem_le_adv_data_len +0x3b4f 013094 branch module_hci_cmd_auto_adv_store_common +: 013095 module_hci_cmd_auto_adv_store_scan: +0x3b50 013096 fetcht 1 ,mem_le_scan_data_len +0x3b51 013097 setarg mem_le_scan_data +0x3b52 013098 iadd temp ,pdata +0x3b53 013099 store 2 ,mem_contw +0x3b54 013100 fetcht 1 ,mem_temp +0x3b55 013101 increase 1 ,temp +0x3b56 013102 fetch 1 ,mem_le_scan_data_len +0x3b57 013103 iadd temp ,pdata +0x3b58 013104 store 1 ,mem_le_scan_data_len +: 013105 module_hci_cmd_auto_adv_store_common: +0x3b59 013106 fetch 2 ,mem_contw +0x3b5a 013107 copy pdata ,contw +0x3b5b 013108 fetch 2 ,mem_regc +0x3b5c 013109 copy pdata ,contru +0x3b5d 013111 copy temp ,loopcnt +0x3b5e 013112 call uart_copy_rx_bytes_fast +0x3b5f 013114 fetch 1 ,mem_module_uart_len +0x3b60 013115 fetcht 1 ,mem_regb +0x3b61 013116 isub temp ,null +0x3b62 013117 nbranch module_hci_cmd_auto_adv_loop ,zero +0x3b63 013118 branch module_hci_event_receive_valid_cmd +: 013121 module_hci_cmd_auto_adv_adv_analys: +0x3b64 013122 ifetch 1 ,contru +0x3b65 013123 store 1 ,mem_temp +0x3b66 013124 ifetch 1 ,contru +0x3b67 013125 store 1 ,mem_rega +0x3b68 013126 rtn +: 013130 module_hci_cmd_power_request: +0x3b69 013131 arg 0 ,temp +0x3b6a 013132 arg 2 ,rega +0x3b6b 013133 fetch 2 ,mem_module_vdd_quotient +0x3b6c 013134 store 2 ,mem_event_cmd_response_content +0x3b6d 013135 arg mem_event_cmd_response_content ,regb +0x3b6e 013136 branch module_hci_event_set_cmd +: 013140 module_hci_cmd_power_set: +0x3b6f 013141 fetch 1 ,mem_module_uart_len +0x3b70 013142 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b71 013143 ifetch 1 ,contru +0x3b72 013144 store 1 ,mem_module_read_vdd_flag +0x3b73 013145 setarg 0x00 +0x3b74 013146 store 2 ,mem_module_vdd_quotient +0x3b75 013147 branch module_hci_event_receive_valid_cmd +: 013151 module_hci_cmd_passkey_entry: +0x3b76 013152 ifetch 4 ,contru +0x3b77 013153 store 4 ,mem_pin +0x3b78 013154 jam 4 ,mem_pin_length +0x3b79 013155 jam 0 ,mem_authentication_passkey_times +0x3b7a 013156 call module_hci_event_receive_valid_cmd +0x3b7b 013157 branch authentication_passkey +: 013161 module_hci_cmd_set_gpio: +0x3b7c 013162 fetch 1 ,mem_module_uart_len +0x3b7d 013163 bne 3 ,module_hci_event_receive_invalid_cmd +0x3b7e 013164 ifetch 1 ,contru +0x3b7f 013165 beq hci_cmd_config_gpio_input ,module_set_gpio_input +0x3b80 013166 beq hci_cmd_config_gpio_output ,module_set_gpio_output +0x3b81 013167 branch module_hci_event_receive_invalid_cmd +: 013169 module_set_gpio_input: +0x3b82 013170 ifetcht 1 ,contru +0x3b83 013171 ifetch 1 ,contru +0x3b84 013172 beq gpio_input_high_impedance ,module_set_gpio_high_impedance +0x3b85 013173 nsetflag blank ,7 ,temp +0x3b86 013174 call gpio_config_input +0x3b87 013175 branch module_hci_event_receive_valid_cmd +: 013177 module_set_gpio_high_impedance: +0x3b88 013178 call gpio_set_high_impedance +0x3b89 013179 branch module_hci_event_receive_valid_cmd +: 013181 module_set_gpio_output: +0x3b8a 013182 ifetcht 1 ,contru +0x3b8b 013183 call gpio_config_output0 +0x3b8c 013184 ifetch 1 ,contru +0x3b8d 013185 isolate1 0 ,pdata +0x3b8e 013186 call gpio_out_flag +0x3b8f 013187 branch module_hci_event_receive_valid_cmd +: 013191 module_hci_cmd_read_gpio: +0x3b90 013192 fetch 1 ,mem_module_uart_len +0x3b91 013193 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b92 013194 ifetcht 1 ,contru +0x3b93 013195 call gpio_get_bit +0x3b94 013196 setarg 0x0 +0x3b95 013197 nsetflag true ,0 ,pdata +0x3b96 013198 arg 1 ,rega +0x3b97 013199 branch module_hci_event_set_cmd_send_response +: 013203 module_hci_cmd_le_set_pairing_mode: +0x3b98 013204 copy rega ,contru +0x3b99 013205 ifetch 1 ,contru +0x3b9a 013206 copy pdata ,temp +0x3b9b 013207 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +0x3b9c 013208 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +0x3b9d 013209 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +0x3b9e 013210 store 1 ,mem_le_pairing_mode +0x3b9f 013211 beq le_pairing_mode_none ,module_le_set_no_pairing +0x3ba0 013212 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +0x3ba1 013213 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +0x3ba2 013214 branch module_hci_event_receive_invalid_cmd +: 013216 module_le_set_pairing_mode_secure_justwork: +0x3ba3 013217 fetch 1 ,mem_le_secure_connect_enable +0x3ba4 013218 branch module_hci_event_receive_invalid_cmd ,blank +0x3ba5 013219 storet 1 ,mem_le_pairing_mode +0x3ba6 013220 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3ba7 013221 branch module_le_set_noinputnooutput +: 013222 module_le_set_pairing_mode_secure_numeric: +0x3ba8 013223 fetch 1 ,mem_le_secure_connect_enable +0x3ba9 013224 branch module_hci_event_receive_invalid_cmd ,blank +0x3baa 013225 storet 1 ,mem_le_pairing_mode +0x3bab 013226 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bac 013227 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x3bad 013228 branch module_hci_event_receive_valid_cmd +: 013229 module_le_set_pairing_mode_secure_passkey: +0x3bae 013230 fetch 1 ,mem_le_secure_connect_enable +0x3baf 013231 branch module_hci_event_receive_invalid_cmd ,blank +0x3bb0 013232 storet 1 ,mem_le_pairing_mode +0x3bb1 013233 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bb2 013234 branch module_le_set_displayonly +: 013235 module_le_set_no_pairing: +0x3bb3 013236 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 013237 module_le_set_noinputnooutput: +0x3bb4 013238 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x3bb5 013239 branch module_hci_event_receive_valid_cmd +: 013240 module_le_set_pairing_mode_lagacy_just_work: +0x3bb6 013241 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x3bb7 013242 branch module_le_set_noinputnooutput +: 013243 module_le_set_pairing_mode_lagacy_passkey: +0x3bb8 013244 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 013245 module_le_set_displayonly: +0x3bb9 013246 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x3bba 013247 branch module_hci_event_receive_valid_cmd +: 013251 module_hci_cmd_le_set_adv_data: +0x3bbb 013252 fetch 1 ,mem_module_uart_len +0x3bbc 013253 sub pdata ,31 ,null +0x3bbd 013254 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bbe 013255 store 1 ,mem_le_adv_data_len +0x3bbf 013256 copy pdata ,loopcnt +0x3bc0 013257 copy rega ,contru +0x3bc1 013258 arg mem_le_adv_data ,contw +0x3bc2 013259 call uart_copy_rx_bytes_fast +0x3bc3 013260 branch module_hci_event_receive_valid_cmd +: 013264 module_hci_cmd_le_set_scan_data: +0x3bc4 013265 fetch 1 ,mem_module_uart_len +0x3bc5 013266 sub pdata ,31 ,null +0x3bc6 013267 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bc7 013268 store 1 ,mem_le_scan_data_len +0x3bc8 013269 copy pdata ,loopcnt +0x3bc9 013270 copy rega ,contru +0x3bca 013271 arg mem_le_scan_data ,contw +0x3bcb 013272 call uart_copy_rx_bytes_fast +0x3bcc 013273 branch module_hci_event_receive_valid_cmd +: 013277 module_hci_cmd_le_send_conn_update_req: +0x3bcd 013278 fetch 2 ,mem_ui_state_map +0x3bce 013279 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3bcf 013280 fetch 1 ,mem_module_uart_len +0x3bd0 013281 bne 0x08 ,module_hci_event_receive_invalid_cmd +0x3bd1 013282 copy rega ,contru +0x3bd2 013283 ifetch 8 ,contru +0x3bd3 013284 store 8 ,mem_le_interval_min +0x3bd4 013285 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3bd5 013286 call ui_ipc_send_cmd +0x3bd6 013287 branch module_hci_event_receive_valid_cmd +: 013291 module_hci_cmd_set_le_adv_parameter: +0x3bd7 013292 ifetch 2 ,contru +0x3bd8 013293 store 2 ,mem_le_adv_interval +0x3bd9 013294 branch module_hci_event_receive_valid_cmd +: 013298 module_hci_cmd_le_start_pairing: +0x3bda 013299 fetch 1 ,mem_le_pairing_mode +0x3bdb 013300 branch module_hci_event_receive_invalid_cmd ,blank +0x3bdc 013301 fetch 1 ,mem_le_pairing_state +0x3bdd 013302 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +0x3bde 013303 fetch 1 ,mem_le_enc_state +0x3bdf 013304 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +0x3be0 013305 call check_51cmd_le_smp_sec_req +0x3be1 013306 branch module_hci_event_receive_valid_cmd +: 013310 module_hci_cmd_set_wake_gpio: +0x3be2 013311 fetch 1 ,mem_module_uart_len +0x3be3 013312 bne 5 ,module_hci_event_receive_invalid_cmd +0x3be4 013313 ifetch 1 ,contru +0x3be5 013314 store 1 ,mem_module_mcu_wake_pin +0x3be6 013315 ifetch 4 ,contru +0x3be7 013316 store 4 ,mem_module_mcu_wake_delay_us +0x3be8 013317 fetcht 1 ,mem_module_mcu_wake_pin +0x3be9 013318 call gpio_config_output +0x3bea 013319 call module_set_mcu_wake_pin_low +0x3beb 013320 branch module_hci_event_receive_valid_cmd +: 013324 module_hci_cmd_set_tx_power: +0x3bec 013325 fetch 1 ,mem_module_uart_len +0x3bed 013326 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bee 013327 ifetch 1 ,contru +0x3bef 013328 store 1 ,mem_tx_power +0x3bf0 013329 branch module_hci_event_receive_valid_cmd +: 013333 module_hci_cmd_le_confirm_gkey: +0x3bf1 013334 ifetch 1 ,contru +0x3bf2 013335 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +0x3bf3 013336 fetch 1 ,mem_le_secure_connect_state +0x3bf4 013337 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +0x3bf5 013338 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf6 013339 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf7 013340 branch module_hci_event_receive_invalid_cmd +: 013341 module_hci_cmd_le_confirm_gkey_ok: +0x3bf8 013342 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +0x3bf9 013343 branch module_hci_event_receive_valid_cmd +: 013345 module_hci_cmd_le_confirm_gkey_fail: +0x3bfa 013346 call le_send_pairing_confirm_value_failed +0x3bfb 013347 branch module_hci_event_receive_valid_cmd +: 013351 module_hci_cmd_set_reject_justwork_flag: +0x3bfc 013352 fetch 1 ,mem_module_uart_len +0x3bfd 013353 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bfe 013354 call module_hci_event_receive_valid_cmd +0x3bff 013355 ifetch 1 ,contru +0x3c00 013356 branch classic_bt_clr_reject_justwork_flag ,blank +0x3c01 013357 branch classic_bt_set_reject_justwork_flag +: 013361 module_hci_cmd_reset_chip: +0x3c02 013362 call module_hci_event_receive_valid_cmd +0x3c03 013363 call wait_uarttx +0x3c04 013364 jam 0x01 ,core_reset +0x3c05 013365 branch loop +: 013369 module_hci_cmd_le_set_fixed_passkey: +0x3c06 013370 fetch 1 ,mem_module_uart_len +0x3c07 013371 beq 0 ,module_hci_event_receive_invalid_cmd +0x3c08 013372 ifetch 1 ,contru +0x3c09 013373 branch module_hci_cmd_le_set_random_passkey ,blank +0x3c0a 013374 fetch 1 ,mem_module_uart_len +0x3c0b 013375 bne 5 ,module_hci_event_receive_invalid_cmd +0x3c0c 013376 ifetch 4 ,contru +0x3c0d 013377 arg 1000000 ,temp +0x3c0e 013378 isub temp ,null +0x3c0f 013379 branch module_hci_event_receive_invalid_cmd ,positive +0x3c10 013380 store 4 ,mem_le_tk +0x3c11 013381 call le_set_config_fixed_tk +0x3c12 013382 branch module_hci_event_receive_valid_cmd +: 013384 module_hci_cmd_le_set_random_passkey: +0x3c13 013385 call le_clr_config_fixed_tk +0x3c14 013386 branch module_hci_event_receive_valid_cmd +: 013390 module_hci_test_cmde_close_lpm: +0x3c15 013391 jam 0 ,mem_lpm_mode +0x3c16 013392 branch module_hci_event_receive_valid_cmd +: 013397 module_hci_event_receive_invalid_cmd: +0x3c17 013398 arg 1 ,temp +0x3c18 013399 arg 0 ,rega +0x3c19 013400 branch module_hci_event_set_cmd +: 013403 module_hci_event_receive_valid_cmd: +0x3c1a 013404 arg 0 ,temp +0x3c1b 013405 arg 0 ,rega +0x3c1c 013406 branch module_hci_event_set_cmd +: 013410 module_hci_event_spp_connect: +0x3c1d 013411 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +0x3c1e 013412 branch module_hci_event_enter_standby_mode_len0 +: 013416 module_hci_event_le_connect: +0x3c1f 013417 jam hci_event_le_conn_rep ,mem_module_uart_opcode +0x3c20 013418 branch module_hci_event_enter_standby_mode_len0 +: 013422 module_hci_event_spp_disconnect: +0x3c21 013423 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +0x3c22 013424 branch module_hci_event_enter_standby_mode_len0 +: 013428 module_hci_event_le_disconnect: +0x3c23 013429 jam hci_event_le_dis_rep ,mem_module_uart_opcode +0x3c24 013430 branch module_hci_event_enter_standby_mode_len0 +: 013438 module_hci_event_set_cmd: +0x3c25 013439 fetch 1 ,mem_module_uart_opcode +0x3c26 013440 copy pdata ,regc +0x3c27 013441 jam hci_event_cmd_res ,mem_module_uart_opcode +0x3c28 013442 setarg 2 +0x3c29 013443 iadd rega ,pdata +0x3c2a 013444 call module_hci_prepare_tx +0x3c2b 013445 copy regc ,pdata +0x3c2c 013446 istore 1 ,contwu +0x3c2d 013447 istoret 1 ,contwu +0x3c2e 013448 copy rega ,loopcnt +0x3c2f 013449 copy regb ,contr +0x3c30 013450 call uart_copy_tx_bytes +0x3c31 013451 branch uartd_send +: 013455 module_hci_event_receive_spp_data: +0x3c32 013457 call module_spp_clear_last_transmite_clock +0x3c33 013458 jam hci_event_spp_data_rep ,mem_module_uart_opcode +0x3c34 013459 fetch 1 ,mem_current_length +0x3c35 013460 rtn blank +0x3c36 013461 call module_hci_prepare_tx +0x3c37 013462 fetch 1 ,mem_current_length +0x3c38 013463 copy pdata ,loopcnt +0x3c39 013464 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x3c3a 013465 copy pdata ,contr +0x3c3b 013466 call uart_copy_tx_bytes_fast +0x3c3c 013467 branch uartd_send +: 013471 module_hci_event_receive_le_data: +0x3c3d 013472 jam hci_event_le_data_rep ,mem_module_uart_opcode +0x3c3e 013473 fetch 1 ,mem_module_le_rx_data_len +0x3c3f 013474 icopy loopcnt +0x3c40 013475 increase 2 ,pdata +0x3c41 013476 call module_hci_prepare_tx +0x3c42 013477 fetch 2 ,mem_module_le_rx_data_handle +0x3c43 013478 istore 2 ,contwu +0x3c44 013479 fetch 2 ,mem_module_le_rx_data_address +0x3c45 013480 icopy contr +0x3c46 013481 call uart_copy_tx_bytes_fast +0x3c47 013482 branch uartd_send +: 013486 module_hci_event_enter_standby_mode: +0x3c48 013487 jam hci_event_standby_rep ,mem_module_uart_opcode +: 013488 module_hci_event_enter_standby_mode_len0: +0x3c49 013489 setarg 0 +0x3c4a 013490 call module_hci_prepare_tx +0x3c4b 013491 branch uartd_send +: 013495 module_hci_event_status_res: +0x3c4c 013496 jam hci_event_status_res ,mem_module_uart_opcode +0x3c4d 013497 setarg 1 +0x3c4e 013498 call module_hci_prepare_tx +0x3c4f 013500 call module_hci_read_bt_status +0x3c50 013502 fetch 2 ,mem_ui_state_map +0x3c51 013503 arg ui_state_bt_hid_conn ,queue +0x3c52 013504 qisolate1 pdata +0x3c53 013505 setflag true ,3 ,temp +0x3c54 013507 arg ui_state_ble_connected ,queue +0x3c55 013508 qisolate1 pdata +0x3c56 013509 setflag true ,5 ,temp +0x3c57 013511 fetch 1 ,mem_ui_state_map +0x3c58 013512 arg ui_state_bt_spp_conn ,queue +0x3c59 013513 qisolate1 pdata +0x3c5a 013514 setflag true ,4 ,temp +0x3c5b 013516 istoret 1 ,contwu +0x3c5c 013517 branch uartd_send +: 013521 module_hci_read_bt_status: +0x3c5d 013522 arg 0 ,temp +0x3c5e 013523 fetch 1 ,mem_scan_mode +0x3c5f 013524 arg inq_scan_mode ,queue +0x3c60 013525 qisolate1 pdata +0x3c61 013526 setflag true ,0 ,temp +0x3c62 013527 arg page_scan_mode ,queue +0x3c63 013528 qisolate1 pdata +0x3c64 013529 setflag true ,1 ,temp +0x3c65 013531 fetch 1 ,mem_le_adv_enable +0x3c66 013532 arg 0 ,queue +0x3c67 013533 qisolate1 pdata +0x3c68 013534 setflag true ,2 ,temp +0x3c69 013535 rtn +: 013539 module_hci_event_store_device: +0x3c6a 013540 jam hci_event_nvram_rep ,mem_module_uart_opcode +0x3c6b 013541 fetch 1 ,mem_nv_data_number +0x3c6c 013542 mul32 pdata ,34 ,pdata +0x3c6d 013543 icopy loopcnt +0x3c6e 013544 call module_hci_prepare_tx +0x3c6f 013545 fetch 2 ,mem_nv_data_ptr +0x3c70 013546 icopy contr +0x3c71 013547 call uart_copy_tx_bytes_fast +0x3c72 013548 branch uartd_send +: 013552 module_hci_event_gkey_generate: +0x3c73 013553 jam hci_event_gkey ,mem_module_uart_opcode +0x3c74 013554 setarg 4 +0x3c75 013555 call module_hci_prepare_tx +0x3c76 013556 fetch 4 ,mem_gkey +0x3c77 013557 istore 4 ,contwu +0x3c78 013558 branch uartd_send +: 013562 module_hci_event_invalid_packet: +0x3c79 013563 jam hci_event_invalid_packet ,mem_module_uart_opcode +0x3c7a 013564 hfetch 2 ,core_uart_rxitems +0x3c7b 013565 arg 0xff ,temp +0x3c7c 013566 call not_greater_than +0x3c7d 013567 copy pdata ,loopcnt +0x3c7e 013568 call module_hci_prepare_tx +0x3c7f 013569 call uartd_prepare_rx +0x3c80 013570 call uart_copy_rx2tx +0x3c81 013571 branch uartd_send +: 013575 module_hci_event_passkey_entry_mode: +0x3c82 013576 jam hci_event_get_passkey ,mem_module_uart_opcode +0x3c83 013577 branch module_hci_event_enter_standby_mode_len0 +: 013581 module_hci_event_le_tk: +0x3c84 013582 jam hci_event_le_tk ,mem_module_uart_opcode +0x3c85 013583 setarg 4 +0x3c86 013584 call module_hci_prepare_tx +0x3c87 013585 fetch 4 ,mem_le_tk +0x3c88 013586 istore 4 ,contwu +0x3c89 013587 branch uartd_send +: 013591 module_hci_event_le_pairing_fail: +0x3c8a 013592 arg flag_ble_pairing_fail ,rega +0x3c8b 013593 branch module_hci_event_pairing_completed +: 013595 module_hci_event_le_pairing_success: +0x3c8c 013596 arg flag_ble_pairing_success ,rega +0x3c8d 013597 branch module_hci_event_pairing_completed +: 013599 module_hci_event_bt_pairing_fail: +0x3c8e 013600 arg flag_bt_pairing_fail ,rega +0x3c8f 013601 branch module_hci_event_pairing_completed +: 013603 module_hci_event_bt_pairing_success: +0x3c90 013604 arg flag_bt_pairing_success ,rega +: 013606 module_hci_event_pairing_completed: +0x3c91 013607 jam 0 ,mem_flag_mode_ssp_pin +0x3c92 013608 jam hci_event_le_pairing_state ,mem_module_uart_opcode +0x3c93 013609 setarg 2 +0x3c94 013610 call module_hci_prepare_tx +0x3c95 013611 copy rega ,pdata +0x3c96 013612 istore 2 ,contwu +0x3c97 013613 branch uartd_send +: 013617 module_hci_event_pause_enc: +0x3c98 013618 arg flag_event_pause_enc ,regc +0x3c99 013619 branch module_hci_event_enc +: 013621 module_hci_event_start_enc: +0x3c9a 013622 arg flag_event_start_enc ,regc +: 013624 module_hci_event_enc: +0x3c9b 013625 jam hci_event_le_encryption_state ,mem_module_uart_opcode +0x3c9c 013626 setarg 1 +0x3c9d 013627 call module_hci_prepare_tx +0x3c9e 013628 copy regc ,pdata +0x3c9f 013629 istore 1 ,contwu +0x3ca0 013630 branch uartd_send +: 013634 module_hci_event_le_gkey: +0x3ca1 013635 jam hci_event_le_gkey ,mem_module_uart_opcode +0x3ca2 013636 setarg 4 +0x3ca3 013637 call module_hci_prepare_tx +0x3ca4 013638 fetch 4 ,mem_gkey +0x3ca5 013639 istore 4 ,contwu +0x3ca6 013640 branch uartd_send +: 013651 module_hci_prepare_tx: +0x3ca7 013652 jam 0x02 ,mem_module_uart_cmd +0x3ca8 013653 store 1 ,mem_module_uart_len +0x3ca9 013654 storet 8 ,mem_temp +0x3caa 013655 bpatch patch1c_2 ,mem_patch1c +0x3cab 013656 call module_set_mcu_wake_pin_high_delay +0x3cac 013657 fetcht 8 ,mem_temp +0x3cad 013658 call uartd_prepare_tx +0x3cae 013659 fetch 3 ,mem_module_uart_cmd +0x3caf 013660 istore 3 ,contwu +0x3cb0 013661 rtn +: 013664 module_set_mcu_wake_pin_high_delay: +0x3cb1 013665 call module_check_mcu_wake_pin_high +0x3cb2 013666 rtn true +: 013667 module_set_mcu_wake_pin_h_delay: +0x3cb3 013668 call module_set_mcu_wake_pin_high +0x3cb4 013669 fetch 4 ,mem_module_mcu_wake_delay_us +0x3cb5 013670 rshift2 pdata ,pdata +0x3cb6 013671 rtn blank +0x3cb7 013672 branch delay +: 013674 module_set_mcu_wake_pin_high: +0x3cb8 013676 fetcht 1 ,mem_module_mcu_wake_pin +0x3cb9 013677 branch gpio_out_active +: 013679 module_check_mcu_wake_pin_high: +0x3cba 013680 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbb 013681 branch gpio_check_active +: 013683 module_set_mcu_wake_pin_low: +0x3cbc 013684 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbd 013685 branch gpio_out_inactive +: 013688 delay: +0x3cbe 013689 increase -1 ,pdata +0x3cbf 013690 nop 38 +0x3cc0 013691 nbranch delay ,blank +0x3cc1 013692 rtn +: 013701 module_le_receive_data: +0x3cc2 013702 call module_check_ble_encrypt_state +0x3cc3 013703 rtn user +0x3cc4 013704 copy rega ,pdata +0x3cc5 013705 store 2 ,mem_module_le_rx_data_address +0x3cc6 013706 copy regb ,pdata +0x3cc7 013707 store 1 ,mem_module_le_rx_data_len +0x3cc8 013708 fetch 2 ,mem_le_att_handle +0x3cc9 013709 fetcht 2 ,mem_module_data_write_handle +0x3cca 013710 isub temp ,null +0x3ccb 013711 branch module_le_receive_data_ok ,zero +0x3ccc 013712 fetcht 2 ,mem_module_data_write_handle2 +0x3ccd 013713 isub temp ,null +0x3cce 013714 nrtn zero +: 013715 module_le_receive_data_ok: +0x3ccf 013716 store 2 ,mem_module_le_rx_data_handle +0x3cd0 013717 branch module_hci_event_receive_le_data +: 013722 module_exit_sniff: +0x3cd1 013723 fetch 1 ,mem_module_flag +0x3cd2 013724 rtnbit1 moudle_task_unsniff +0x3cd3 013725 call module_set_unsniff_task_flag +0x3cd4 013726 branch app_bt_sniff_exit +: 013729 module_set_lpm_mult_2: +0x3cd5 013730 jam 2 ,mem_lpm_mult +0x3cd6 013731 rtn +: 013735 module_bb_event_timer: +0x3cd7 013736 branch module_read_vdd_timer +: 013738 module_read_vdd_timer: +0x3cd8 013739 fetch 1 ,mem_module_read_vdd_flag +0x3cd9 013740 rtn blank +0x3cda 013741 fetch 1 ,mem_module_read_vdd_count +0x3cdb 013742 rtn blank +0x3cdc 013743 increase -1 ,pdata +0x3cdd 013744 store 1 ,mem_module_read_vdd_count +0x3cde 013745 nrtn blank +0x3cdf 013746 jam flag_module_read_vdd_count ,mem_module_read_vdd_count +0x3ce0 013747 call adc_set_mode +0x3ce1 013748 call vdd_calculate_by_mode +0x3ce2 013749 div pdata ,0x64 +0x3ce3 013750 call wait_div_end +0x3ce4 013751 quotient pdata +0x3ce5 013752 remainder temp +0x3ce6 013753 store 1 ,mem_module_vdd_quotient +0x3ce7 013754 storet 1 ,mem_module_vdd_remainder +0x3ce8 013755 rtn +: 013758 module_control_air_flow: +0x3ce9 013759 call check_uart_tx_buff +0x3cea 013760 branch app_l2cap_flow_control_enable ,positive +0x3ceb 013761 branch app_l2cap_flow_control_disable +: 013765 module_set_sniff_task_flag: +0x3cec 013766 arg moudle_task_sniff ,queue +0x3ced 013767 branch module_set_state +: 013769 module_clear_sniff_task_flag: +0x3cee 013770 arg moudle_task_sniff ,queue +0x3cef 013771 branch module_clr_state +: 013773 module_set_unsniff_task_flag: +0x3cf0 013774 arg moudle_task_unsniff ,queue +0x3cf1 013775 branch module_set_state +: 013777 module_clear_unsniff_task_flag: +0x3cf2 013778 arg moudle_task_unsniff ,queue +0x3cf3 013779 branch module_clr_state +: 013781 module_set_le_tx_data_flag: +0x3cf4 013782 arg module_flag_ble_data_finish ,queue +0x3cf5 013783 branch module_set_state +: 013785 module_clear_le_tx_data_flag: +0x3cf6 013786 arg module_flag_ble_data_finish ,queue +0x3cf7 013787 branch module_clr_state +: 013789 module_clr_state: +0x3cf8 013790 fetch 1 ,mem_module_flag +0x3cf9 013791 qset0 pdata +0x3cfa 013792 store 1 ,mem_module_flag +0x3cfb 013793 rtn +: 013795 module_set_state: +0x3cfc 013796 fetch 1 ,mem_module_flag +0x3cfd 013797 qset1 pdata +0x3cfe 013798 store 1 ,mem_module_flag +0x3cff 013799 rtn +: 013809 mouse_init: +0x3d00 013810 call mouse_setting_config +0x3d01 013811 call spi_ncs_enable +0x3d02 013812 call mouse_init_sunt +0x3d03 013813 call mouse_dpi_config +0x3d04 013814 call spi_ncs_disable +0x3d05 013815 rtn wake +0x3d06 013816 call mouse_cheak_enable_usb +0x3d07 013817 call mouse_cb_fuction +0x3d08 013820 fetch mouse_flag_len ,mem_mouse_flag +0x3d09 013821 rtnbit1 mouse_enable_usb +0x3d0a 013822 call mouse_wakeup_from_power +0x3d0b 013823 rtnmark1 mark_24g +0x3d0c 013824 fetch 2 ,mem_ui_state_map +0x3d0d 013825 bbit1 ui_state_btn_down ,mouse_start_discovery +0x3d0e 013826 branch mouse_check_reconn_target +: 013829 mouse_delay_4s: +0x3d0f 013830 fetch mouse_flag_len ,mem_mouse_flag +0x3d10 013831 rtnbit0 mouse_enable_init_delay +0x3d11 013832 arg 20 ,loopcnt +: 013833 mouse_delay_20ms: +0x3d12 013834 setarg 200000 +0x3d13 013835 call sleep +0x3d14 013836 loop delay_10ms +0x3d15 013837 rtn +: 013840 mouse_cheak_enable_usb: +0x3d16 013841 fetch mouse_flag_len ,mem_mouse_flag +0x3d17 013842 rtnbit0 mouse_enable_usb +0x3d18 013843 branch usb_init +: 013846 mouse_cb_fuction: +0x3d19 013847 setarg mouse_le +0x3d1a 013848 store 2 ,mem_cb_le_process +0x3d1b 013849 setarg mouse_send_process +0x3d1c 013850 store 2 ,mem_cb_bt_process +0x3d1d 013851 setarg mouse_process_lpm_before +0x3d1e 013852 store 2 ,mem_cb_before_lpm +0x3d1f 013853 setarg mouse_priority_bb_event +0x3d20 013854 store 2 ,mem_cb_bb_event_process +0x3d21 013855 setarg mouse_idle +0x3d22 013856 store 2 ,mem_cb_idle_process +0x3d23 013857 setarg mouse_before_hibernate +0x3d24 013858 store 2 ,mem_cb_before_hibernate +0x3d25 013859 setarg le_mouse_bb_event_connect_complete +0x3d26 013860 store 2 ,mem_cb_att_write +0x3d27 013862 call g24_head_ptr2regc +0x3d28 013863 setarg mouse_g24_package_data +0x3d29 013864 add regc ,offset_24g_cb_data ,contw +0x3d2a 013865 istore 2 ,contw +0x3d2b 013866 setarg mouse_g24_enter_lpm +0x3d2c 013867 add regc ,offset_24g_cb_lpm_prepare ,contw +0x3d2d 013868 istore 2 ,contw +0x3d2e 013869 setarg mouse_lpm_before_common +0x3d2f 013870 add regc ,offset_24g_cb_lpm_before ,contw +0x3d30 013871 istore 2 ,contw +0x3d31 013873 setarg mouse_bb_event_timer +0x3d32 013874 store 2 ,mem_cb_event_timer +0x3d33 013875 setarg mouse_spi_write_flash_cb +0x3d34 013876 store 2 ,mem_cb_spi_flash_write_complate +0x3d35 013877 rtn +: 013878 mouse_spi_write_flash_cb: +: 013879 mouse_spi_init: +0x3d36 013880 fetch mouse_flag_len ,mem_mouse_flag +0x3d37 013881 bbit0 mouse_enable_spi2 ,spid_init +0x3d38 013882 branch spid_init2 +: 013884 mouse_setting_config: +0x3d39 013885 rtn wake +0x3d3a 013886 call g24_set_device_addr +0x3d3b 013887 call mouse_gpio_init +0x3d3c 013888 call mouse_param_init +0x3d3d 013889 call mouse_adc_init +0x3d3e 013890 call le_set_config_fixed_ltk +0x3d3f 013891 call le_set_justwork +0x3d40 013892 call le_set_fixed_ltk +0x3d41 013893 call le_set_config_read_authentication +0x3d42 013894 fetch mouse_flag_len ,mem_mouse_flag +0x3d43 013895 bbit1 mouse_enable_eeprom ,mouse_init_iic +0x3d44 013896 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak +0x3d45 013897 rtn +: 013899 mouse_init_iic: +0x3d46 013900 call iic_init_390k +0x3d47 013901 fetch mouse_flag_len ,mem_mouse_flag +0x3d48 013902 isolate1 mouse_enable_2k_eeprom ,pdata +0x3d49 013903 ncall clear_eeprom_size_2k ,true +0x3d4a 013904 call mouse_load_eeprom_dpi +0x3d4b 013905 call mouse_init_environment +0x3d4c 013906 call mouse_set_24g_addr_eeprom +0x3d4d 013907 branch iicd_read_eep_data +: 013909 mouse_wakeup_from_power: +0x3d4e 013910 fetch mouse_flag_len ,mem_mouse_flag +0x3d4f 013911 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power +0x3d50 013912 fetch 1 ,mem_wakup_from_power_flag +0x3d51 013913 isolate0 gpio_latch ,pdata +0x3d52 013914 nrtn true +: 013915 mouse_wakeup_no_from_power: +0x3d53 013916 fetch 1 ,mem_reconn_times_init +0x3d54 013917 store 1 ,mem_reconn_times +0x3d55 013918 fetch 1 ,mem_config_function_enable +0x3d56 013919 rtnbit1 enable_select_device_by_switch +: 013920 mouse_start_24g_mode: +0x3d57 013921 fetch mouse_flag_len ,mem_mouse_flag +0x3d58 013922 rtnbit0 mouse_enable_24g +0x3d59 013923 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start +0x3d5a 013924 branch g24_check_51cmd_start_24g +: 013925 le_mouse_bb_event_connect_complete: +0x3d5b 013926 fetch 1 ,mem_le_att_handle +0x3d5c 013927 sub pdata ,26 ,pdata +0x3d5d 013928 nrtn zero +0x3d5e 013929 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3d5f 013930 call ui_ipc_send_cmd +: 013931 mouse_le_write_enable: +0x3d60 013932 arg write_req_enable_flag ,queue +0x3d61 013933 branch mouse_le_enable_connect_flag +: 013935 mouse_dpi_up: +0x3d62 013936 fetch 1 ,mem_mouse_dpi_button_state +0x3d63 013937 rtneq dpi_button_state_up +0x3d64 013938 jam dpi_button_state_up ,mem_mouse_dpi_button_state +0x3d65 013939 rtn +: 013940 mouse_dpi_config: +0x3d66 013941 fetch 1 ,mem_config_sensor_motion +0x3d67 013942 and pdata ,0x0f ,pdata +0x3d68 013943 store 1 ,mem_mouse_dpi +0x3d69 013944 branch mouse_seting_dpi + 2 +: 013947 mouse_dpi_cheak: +0x3d6a 013948 fetcht 1 ,mem_dpi_button_gpio +0x3d6b 013949 call gpio_get_bit +0x3d6c 013950 nbranch mouse_dpi_up ,true +: 013951 mouse_dpi_down: +0x3d6d 013952 fetch 1 ,mem_mouse_dpi_button_state +0x3d6e 013953 rtneq dpi_button_state_down +0x3d6f 013954 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x3d70 013955 fetch 1 ,mem_mouse_dpi +0x3d71 013956 increase 1 ,pdata +0x3d72 013957 and pdata ,0x03 ,pdata +0x3d73 013958 store 1 ,mem_mouse_dpi +0x3d74 013959 call mouse_seting_dpi +0x3d75 013960 fetch mouse_flag_len ,mem_mouse_flag +0x3d76 013961 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi +0x3d77 013962 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi +0x3d78 013963 rtn +: 013964 mouse_before_store_flash_cpi: +0x3d79 013965 arg mouse_spi2_clk_gpio ,temp +0x3d7a 013966 call gpio_config_output +0x3d7b 013967 arg mouse_spi2_sdio_gpio ,temp +0x3d7c 013968 call gpio_config_output +0x3d7d 013969 branch mouse_store_flash_device_info +: 013971 mouse_seting_dpi: +0x3d7e 013972 bpatch patch1c_3 ,mem_patch1c +0x3d7f 013973 call mosue_dpi_led_blink_init +0x3d80 013974 fetch 1 ,mem_config_sensor_type +0x3d81 013975 beq p3610 ,mouse_seting_3610_dpi +0x3d82 013976 beq p3212 ,mouse_seting_3212_dpi +0x3d83 013977 fetch 1 ,mem_mouse_dpi +0x3d84 013978 beq mouse_dpi_level1 ,mouse_set_cpi1 +0x3d85 013979 beq mouse_dpi_level2 ,mouse_set_cpi2 +0x3d86 013980 beq mouse_dpi_level3 ,mouse_set_cpi3 +0x3d87 013981 beq mouse_dpi_level4 ,mouse_set_cpi4 +: 013982 mouse_set_cpi2: +0x3d88 013983 fetch 1 ,mem_320x_dpi_2 +0x3d89 013984 branch mouse_p3205_dpi +: 013985 mouse_set_cpi1: +0x3d8a 013986 fetch 1 ,mem_320x_dpi_1 +0x3d8b 013987 branch mouse_p3205_dpi +: 013988 mouse_set_cpi3: +0x3d8c 013989 fetch 1 ,mem_320x_dpi_3 +0x3d8d 013990 branch mouse_p3205_dpi +: 013991 mouse_set_cpi4: +0x3d8e 013992 fetch 1 ,mem_320x_dpi_4 +0x3d8f 013993 branch mouse_p3205_dpi +: 013994 moue_seting_cpi_count: +0x3d90 013995 fetch 1 ,mem_config_sensor_type +0x3d91 013996 rtneq p3065_xy +0x3d92 013997 fetch 1 ,mem_mouse_cpi_count +0x3d93 013998 increase 1 ,pdata +0x3d94 013999 store 1 ,mem_mouse_cpi_count +0x3d95 014000 rtn +: 014002 mouse_seting_3212_dpi: +0x3d96 014003 fetch 1 ,mem_mouse_dpi +0x3d97 014004 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0x3d98 014005 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0x3d99 014006 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0x3d9a 014007 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +: 014008 mouse_set_p3212_cpi2: +0x3d9b 014009 fetch 1 ,mem_3212_dpi_2 +0x3d9c 014010 branch mouse_p3212_dpi +: 014011 mouse_set_p3212_cpi1: +0x3d9d 014012 fetch 1 ,mem_3212_dpi_1 +0x3d9e 014013 branch mouse_p3212_dpi +: 014014 mouse_set_p3212_cpi3: +0x3d9f 014015 fetch 1 ,mem_3212_dpi_3 +0x3da0 014016 branch mouse_p3212_dpi +: 014017 mouse_set_p3212_cpi4: +0x3da1 014018 fetch 1 ,mem_3212_dpi_4 +: 014019 mouse_p3212_dpi: +0x3da2 014020 store 1 ,mem_mouse_cpi_count +0x3da3 014021 lshift8 pdata ,pdata +0x3da4 014022 copy pdata ,rega +0x3da5 014023 add pdata ,mouse_p3212_dpi_xaddress ,pdata +0x3da6 014024 call twspi_write +0x3da7 014025 copy rega ,pdata +0x3da8 014026 add pdata ,mouse_p3212_dpi_yaddress ,pdata +0x3da9 014027 branch twspi_write +: 014029 mouse_seting_3610_dpi: +0x3daa 014030 fetch 1 ,mem_mouse_dpi +0x3dab 014031 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 +0x3dac 014032 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 +0x3dad 014033 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 +0x3dae 014034 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 +: 014035 mouse_set_p3610_cpi2: +0x3daf 014036 fetch 1 ,mem_3610_dpi_2 +0x3db0 014037 branch mouse_p3610_dpi +: 014038 mouse_set_p3610_cpi1: +0x3db1 014039 fetch 1 ,mem_3610_dpi_1 +0x3db2 014040 branch mouse_p3610_dpi +: 014041 mouse_set_p3610_cpi3: +0x3db3 014042 fetch 1 ,mem_3610_dpi_3 +0x3db4 014043 branch mouse_p3610_dpi +: 014044 mouse_set_p3610_cpi4: +0x3db5 014045 fetch 1 ,mem_3610_dpi_4 +: 014046 mouse_p3610_dpi: +0x3db6 014047 store 1 ,mem_mouse_cpi_count +0x3db7 014048 call mouse_spi_sdio_gpio_pollup +0x3db8 014049 fetch 1 ,mem_mouse_cpi_count +: 014050 mouse_reset_p3610_dpi: +0x3db9 014051 add pdata ,0x80 ,pdata +0x3dba 014052 lshift8 pdata ,pdata +0x3dbb 014053 add pdata ,mouse_p3610_dpi_address ,pdata +0x3dbc 014054 copy pdata ,rega +0x3dbd 014055 branch mouse_set_sensor_reg +: 014057 mouse_p3205_dpi: +0x3dbe 014058 store 1 ,mem_mouse_cpi_count +0x3dbf 014059 call moue_seting_cpi_count +0x3dc0 014060 fetch 1 ,mem_mouse_cpi_count +0x3dc1 014061 setarg mouse_dpi_address +0x3dc2 014062 call twspi_read +0x3dc3 014063 and pdata ,0xf8 ,temp +0x3dc4 014064 fetch 1 ,mem_mouse_cpi_count +0x3dc5 014065 iadd temp ,pdata +0x3dc6 014066 lshift8 pdata ,pdata +0x3dc7 014067 add pdata ,mouse_dpi_address ,pdata +0x3dc8 014068 branch twspi_write +: 014071 mouse_init_environment: +0x3dc9 014072 call app_initflag_check +0x3dca 014073 branch mouse_eeprom_load_recon_info ,zero +0x3dcb 014074 call mouse_ble_init_address +0x3dcc 014075 call mouse_store_eeprom_device_info +0x3dcd 014076 branch app_initflag_store +: 014079 mouse_24g_pairing_button: +0x3dce 014080 fetch 2 ,mem_24g_pairing_timer_count +0x3dcf 014081 rtn blank +0x3dd0 014082 fetch mouse_flag_len ,mem_mouse_flag +0x3dd1 014083 rtnbit0 mouse_enable_24g +0x3dd2 014084 rtnbit1 mosue_24g_pairing_flag +0x3dd3 014085 rtnmark1 mark_24g +0x3dd4 014086 call mouse_check_key_gpio +0x3dd5 014087 rtnne mouse_lmr_button +0x3dd6 014088 call mouse_devce_led_off +0x3dd7 014089 arg mosue_24g_pairing_flag ,queue +0x3dd8 014090 call mouse_enable_function_flag +0x3dd9 014091 setarg 0 +0x3dda 014092 store 2 ,mem_mouse_direct_timer +0x3ddb 014093 store 1 ,mem_mouse_send_blank_timer +0x3ddc 014094 call g24_set0_mem_check_dongle_times +0x3ddd 014096 fetch 2 ,mem_ui_state_map +0x3dde 014097 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x3ddf 014098 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x3de0 014099 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x3de1 014100 call mouse_stop_discovery +0x3de2 014101 branch g24_start_pairing_sm1 +: 014104 mouse_idle: +0x3de3 014105 call mouse_24g_pairing_button +0x3de4 014106 call ui_check_paring_button +0x3de5 014107 call mouse_dpi_cheak +0x3de6 014108 call mouse_usb_isr +0x3de7 014109 call mouse_wheel_check +0x3de8 014110 branch mouse_usb_mode +: 014111 mouse_usb_isr: +0x3de9 014112 fetch mouse_flag_len ,mem_mouse_flag +0x3dea 014113 rtnbit0 mouse_enable_usb +0x3deb 014114 call usb_isr +0x3dec 014115 branch usb_offline_state +: 014117 mouse_cheak_usb: +0x3ded 014118 hfetch 1 ,core_usb_addr +0x3dee 014119 bbit0 7 ,mouse_usb_no_exsit +0x3def 014120 bbit1 7 ,mouse_usb_exsit +0x3df0 014121 rtn +: 014122 mouse_usb_no_exsit: +0x3df1 014123 fetch 1 ,mem_usb_addr +0x3df2 014124 rtnbit0 7 +0x3df3 014125 branch soft_reset_chip +: 014126 mouse_usb_exsit: +0x3df4 014127 fetch 1 ,mem_usb_addr +0x3df5 014128 rtnbit1 7 +0x3df6 014129 branch mouse_stop_bluetooth_mode +: 014131 mouse_usb_mode: +0x3df7 014132 call mouse_cheak_usb +0x3df8 014133 hfetch 1 ,core_usb_addr +0x3df9 014134 store 1 ,mem_usb_addr +0x3dfa 014135 rtnbit0 7 +0x3dfb 014136 call mouse_clkn_check +0x3dfc 014137 fetch 4 ,mem_btclk_sensor +0x3dfd 014138 fetcht 1 ,mem_wire_usb_interval +0x3dfe 014139 iadd temp ,temp +0x3dff 014140 copy clkn_bt ,pdata +0x3e00 014141 isub temp ,null +0x3e01 014142 nrtn positive +0x3e02 014143 store 4 ,mem_btclk_sensor +0x3e03 014144 call mouse_motion +0x3e04 014145 nrtn user +0x3e05 014146 jam 4 ,mem_usb_tx_enable +0x3e06 014147 branch mouse_wired_to_usb +: 014149 mouse_clkn_check: +0x3e07 014150 fetcht 4 ,mem_btclk_sensor +0x3e08 014151 copy clkn_bt ,pdata +0x3e09 014152 isub temp ,null +0x3e0a 014153 ncall mouse_clkn_timeout ,positive +0x3e0b 014154 rtn +: 014155 mouse_clkn_timeout: +0x3e0c 014156 setarg 0 +0x3e0d 014157 store 4 ,mem_btclk_sensor +0x3e0e 014158 rtn +: 014162 mouse_wired_to_usb: +0x3e0f 014163 fetch 1 ,mem_usb_tx_enable +0x3e10 014164 rtnbit0 2 +0x3e11 014165 branch mouse_data_push +: 014166 mouse_data_push: +0x3e12 014167 hfetch 1 ,core_usb_addr +0x3e13 014168 rtnbit0 7 +0x3e14 014169 jam usb_ep2_ms ,mem_usb_ep2_data +0x3e15 014170 setarg ms_report_id +0x3e16 014171 store 1 ,mem_usb_mouse_data +0x3e17 014172 fetch 7 ,mem_mouse_key +0x3e18 014173 istore 7 ,contw +0x3e19 014174 rtn +: 014177 mouse_enable_clock_qdecoder: +0x3e1a 014178 hfetch 2 ,core_clkoff +0x3e1b 014179 set0 clock_off_qdecoder ,pdata +0x3e1c 014180 hstore 2 ,core_clkoff +0x3e1d 014181 rtn +: 014183 mouse_param_init: +0x3e1e 014184 setarg 0x8c00 +0x3e1f 014185 store 2 ,mem_ui_uuid_table +0x3e20 014186 setarg 0x8e7a +0x3e21 014187 store 2 ,mem_ui_le_uuid_table +0x3e22 014188 setarg 0x2402 +0x3e23 014189 store 2 ,mem_fcomp_mul +0x3e24 014190 setarg 0x2580 +0x3e25 014191 store 3 ,mem_class +0x3e26 014192 jam 3 ,mem_lpm_mult_timeout +0x3e27 014193 jam 8 ,mem_lpm_overhead +0x3e28 014194 jam dpi_button_state_up ,mem_select_device_button_statue +0x3e29 014195 setarg 0x0200 +0x3e2a 014196 store 2 ,mem_lpm_interval +0x3e2b 014197 jam 0x17 ,mem_le_local_mtu +0x3e2c 014198 jam 0x17 ,mem_le_remote_mtu +0x3e2d 014200 setarg 0x0a77 +0x3e2e 014201 store 2 ,mem_spi_init_clk +0x3e2f 014217 setsect 0 ,0x306 +0x3e30 014218 setsect 1 ,0x4440 +0x3e31 014219 setsect 2 ,0x10000 +0x3e32 014220 setsect 3 ,0x4408 +0x3e33 014221 store 9 ,mem_all_uuid_16bits +0x3e34 014222 setsect 0 ,0x1224 +0x3e35 014223 setsect 1 ,0x4000 +0x3e36 014224 setsect 2 ,0x0 +0x3e37 014225 istore 5 ,contw +0x3e38 014227 setsect 0 ,0x3ffff +0x3e39 014228 setsect 1 ,0x2fe23 +0x3e3a 014229 setsect 2 ,0x199d9 +0x3e3b 014230 setsect 3 ,0x20d +0x3e3c 014231 store 8 ,mem_features +0x3e3d 014233 setarg 0x012c +0x3e3e 014234 store 2 ,mem_24g_pairing_timer_count +0x3e3f 014235 call le_modified_name +0x3e40 014236 fetch mouse_flag_len ,mem_mouse_flag +0x3e41 014237 rtnbit0 mouse_enable_gpio_control_adc_sensor +0x3e42 014238 call mouse_sensor_set_angle +0x3e43 014239 branch mouse_select_adc +: 014241 mouse_sensor_set_angle: +0x3e44 014242 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e45 014243 call gpio_config_input +0x3e46 014244 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e47 014245 call gpio_get_bit +0x3e48 014246 jam mouse_3clk_angle ,mem_config_sensor_angle +0x3e49 014247 rtn true +0x3e4a 014248 jam mouse_12clk_angle ,mem_config_sensor_angle +0x3e4b 014249 rtn +: 014251 mouse_select_adc: +0x3e4c 014252 fetcht 1 ,mem_select_adc_gpio +0x3e4d 014253 call gpio_config_input +0x3e4e 014254 fetcht 1 ,mem_select_adc_gpio +0x3e4f 014255 call gpio_get_bit +0x3e50 014256 jam adc_config_vinlpm ,mem_adc_config_flag +0x3e51 014257 rtn true +0x3e52 014258 jam adc_config_gpio ,mem_adc_config_flag +0x3e53 014259 rtn +: 014262 mouse_adc_init: +0x3e54 014263 fetch 1 ,mem_adc_config_flag +0x3e55 014264 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm +0x3e56 014265 beq adc_config_hvin ,mouse_adc_init_data_hvin +0x3e57 014266 beq adc_config_gpio ,mouse_adc_init_data_io +0x3e58 014267 branch mouse_adc_init_data_vinlpm +: 014269 mouse_adc_init_data_vinlpm: +0x3e59 014270 fetcht 2 ,mem_2v_adc_vinlpm_data +0x3e5a 014271 fetch 2 ,mem_3v_adc_vinlpm_data +0x3e5b 014272 isub temp ,pdata +0x3e5c 014273 mul32 pdata ,20 ,pdata +0x3e5d 014274 div pdata ,100 +0x3e5e 014275 call wait_div_end +0x3e5f 014276 quotient pdata +0x3e60 014277 store 2 ,mem_adc_reference_voltage +0x3e61 014278 rtn +: 014279 mouse_adc_init_data_hvin: +0x3e62 014280 fetcht 2 ,mem_1v_adc_hvin_data +0x3e63 014281 fetch 2 ,mem_5v_adc_hvin_data +0x3e64 014282 isub temp ,pdata +0x3e65 014283 mul32 pdata ,230 ,pdata +0x3e66 014284 div pdata ,400 +0x3e67 014285 call wait_div_end +0x3e68 014286 quotient pdata +0x3e69 014287 store 2 ,mem_adc_reference_voltage +0x3e6a 014288 rtn +: 014289 mouse_adc_init_data_io: +0x3e6b 014290 fetch 2 ,mem_1v_adc_io_data +0x3e6c 014291 store 2 ,mem_adc_reference_voltage +0x3e6d 014292 rtn +: 014293 mouse_gpio_init: +0x3e6e 014294 fetcht 1 ,mem_eeprom_wp_gpio +0x3e6f 014295 call gpio_config_output +0x3e70 014296 call usb_offline_check_init +0x3e71 014297 fetcht 1 ,mem_lbutton_gpio +0x3e72 014298 call gpio_config_input +0x3e73 014299 fetcht 1 ,mem_rbutton_gpio +0x3e74 014300 call gpio_config_input +0x3e75 014301 fetcht 1 ,mem_mbutton_gpio +0x3e76 014302 call gpio_config_input +0x3e77 014303 fetcht 1 ,mem_sensor_data_gpio +0x3e78 014304 call gpio_config_input +0x3e79 014306 fetcht 1 ,mem_sensor_reset_gpio +0x3e7a 014307 call gpio_config_output +0x3e7b 014309 fetcht 1 ,mem_whee_a_data_gpio +0x3e7c 014310 call gpio_config_input +0x3e7d 014312 fetcht 1 ,mem_whee_b_data_gpio +0x3e7e 014313 call gpio_config_input +0x3e7f 014315 fetcht 1 ,mem_whee_ta_data_gpio +0x3e80 014316 call gpio_config_input +0x3e81 014317 fetcht 1 ,mem_whee_tb_data_gpio +0x3e82 014318 call gpio_config_input +0x3e83 014320 fetcht 1 ,mem_bk_button_gpio +0x3e84 014321 call gpio_config_input +0x3e85 014322 fetcht 1 ,mem_fw_button_gpio +0x3e86 014323 call gpio_config_input +0x3e87 014325 fetcht 1 ,mem_config_low_voltage_alarm_gpio +0x3e88 014326 call gpio_config_output +0x3e89 014328 fetcht 1 ,mem_config_device1_led_gpio +0x3e8a 014329 call gpio_config_output +0x3e8b 014331 fetcht 1 ,mem_config_device2_led_gpio +0x3e8c 014332 call gpio_config_output +0x3e8d 014334 fetcht 1 ,mem_config_device3_led_gpio +0x3e8e 014335 call gpio_config_output +0x3e8f 014337 fetcht 1 ,mem_dpi_led_gpio +0x3e90 014338 call gpio_config_output +0x3e91 014340 fetcht 1 ,mem_config_select_device_button_gpio +0x3e92 014341 call gpio_config_input +0x3e93 014343 fetcht 1 ,mem_config_bt_button_gpio +0x3e94 014344 call gpio_config_input +0x3e95 014346 fetcht 1 ,mem_dpi_button_gpio +0x3e96 014347 branch gpio_config_input +: 014349 mouse_wheel_gpio_set_wake: +0x3e97 014350 fetcht 1 ,mem_whee_a_data_gpio +0x3e98 014351 call gpio_set_wake_by_current_state +0x3e99 014352 fetcht 1 ,mem_whee_b_data_gpio +0x3e9a 014353 call gpio_set_wake_by_current_state +0x3e9b 014354 fetcht 1 ,mem_whee_ta_data_gpio +0x3e9c 014355 call gpio_set_wake_by_current_state +0x3e9d 014356 fetcht 1 ,mem_whee_tb_data_gpio +0x3e9e 014357 branch gpio_set_wake_by_current_state +: 014359 mouse_before_hibernate_wheel_gpio_set: +0x3e9f 014360 fetcht 1 ,mem_whee_a_data_gpio +0x3ea0 014361 call mouse_gpio_set_pupd_by_input +0x3ea1 014362 fetcht 1 ,mem_whee_b_data_gpio +0x3ea2 014363 call mouse_gpio_set_pupd_by_input +0x3ea3 014364 fetcht 1 ,mem_whee_ta_data_gpio +0x3ea4 014365 call mouse_gpio_set_pupd_by_input +0x3ea5 014366 fetcht 1 ,mem_whee_tb_data_gpio +0x3ea6 014367 branch mouse_gpio_set_pupd_by_input +: 014369 mouse_gpio_set_pupd_by_input: +0x3ea7 014370 sub temp ,ui_button_gpio_disable ,null +0x3ea8 014371 rtn zero +0x3ea9 014372 and temp ,0x7f ,queue +0x3eaa 014373 hfetch 4 ,core_gpio_in +0x3eab 014374 qisolate1 pdata +0x3eac 014375 hfetch 4 ,core_gpio_pu0 +0x3ead 014376 qsetflag true ,pdata +0x3eae 014377 hstore 4 ,core_gpio_pu0 +0x3eaf 014378 hfetch 4 ,core_gpio_pd0 +0x3eb0 014379 nqsetflag true ,pdata +0x3eb1 014380 hstore 4 ,core_gpio_pd0 +0x3eb2 014381 rtn +: 014383 mouse_before_hibernate: +0x3eb3 014384 enable user +0x3eb4 014385 hfetch 4 ,0x8138 +0x3eb5 014386 setflag user ,26 ,pdata +0x3eb6 014387 hstore 4 ,core_lpm_reg +0x3eb7 014388 call lpm_write_ctrl +0x3eb8 014389 call mouse_devce_led_off +0x3eb9 014390 call mouse_before_hibernate_wheel_gpio_set +0x3eba 014392 branch mouse_lpm_before_common +: 014396 mouse_process_lpm_before: +0x3ebb 014397 call mouse_lpm_before_common +0x3ebc 014398 fetch 1 ,mem_lpm_current_mult +0x3ebd 014399 nrtn blank +0x3ebe 014400 branch gpio_clr_wake +: 014402 mouse_lpm_before_common: +0x3ebf 014403 call mouse_wheel_check +0x3ec0 014404 arg mouse_spi1_clk_gpio ,temp +0x3ec1 014405 fetch mouse_flag_len ,mem_mouse_flag +0x3ec2 014406 isolate1 mouse_enable_spi2 ,pdata +0x3ec3 014407 call mouse_spi_clk_gpio ,true +0x3ec4 014408 call gpio_config_output +0x3ec5 014409 call twspi_disable +0x3ec6 014413 fetcht 1 ,mem_lbutton_gpio +0x3ec7 014414 call gpio_set_wake_by_current_state +0x3ec8 014415 fetcht 1 ,mem_rbutton_gpio +0x3ec9 014416 call gpio_set_wake_by_current_state +0x3eca 014417 fetcht 1 ,mem_mbutton_gpio +0x3ecb 014418 call gpio_set_wake_by_current_state +0x3ecc 014420 fetcht 1 ,mem_bk_button_gpio +0x3ecd 014421 call gpio_set_wake_by_current_state +0x3ece 014422 fetcht 1 ,mem_fw_button_gpio +0x3ecf 014423 call gpio_set_wake_by_current_state +0x3ed0 014424 fetcht 1 ,mem_dpi_button_gpio +0x3ed1 014425 call gpio_set_wake_by_current_state +0x3ed2 014426 fetcht 1 ,mem_config_select_device_button_gpio +0x3ed3 014427 call gpio_set_wake_by_current_state +0x3ed4 014428 fetcht 1 ,mem_whee_a_data_gpio +0x3ed5 014429 call gpio_set_wake_by_current_state +0x3ed6 014430 fetcht 1 ,mem_whee_b_data_gpio +0x3ed7 014431 call gpio_set_wake_by_current_state +0x3ed8 014432 fetcht 1 ,mem_whee_ta_data_gpio +0x3ed9 014433 call gpio_set_wake_by_current_state +0x3eda 014434 fetcht 1 ,mem_whee_tb_data_gpio +0x3edb 014435 call gpio_set_wake_by_current_state +0x3edc 014436 fetcht 1 ,mem_sensor_data_gpio +0x3edd 014437 branch gpio_set_wake +: 014441 mouse_spi_clk_gpio: +0x3ede 014442 arg mouse_spi2_clk_gpio ,temp +0x3edf 014443 rtn +: 014445 mouse_wheel_check: +0x3ee0 014446 bpatch patch1c_4 ,mem_patch1c +0x3ee1 014447 call mouse_t_wheel_scan +0x3ee2 014448 call mouse_wheel_scan +0x3ee3 014449 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3ee4 014450 fetcht 1 ,mem_wheel_tb_old_pinlevel +0x3ee5 014451 store 1 ,mem_wheel_tb_old_pinlevel +0x3ee6 014452 isub temp ,null +0x3ee7 014453 nbranch app_lpm_wake_auto_lock ,zero +0x3ee8 014454 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3ee9 014455 fetcht 1 ,mem_mwheel_b_old_pinlevel +0x3eea 014456 store 1 ,mem_mwheel_b_old_pinlevel +0x3eeb 014457 isub temp ,null +0x3eec 014458 nbranch app_lpm_wake_auto_lock ,zero +0x3eed 014459 rtn +: 014460 mouse_t_wheel_scan: +0x3eee 014461 fetch 1 ,mem_whee_ta_data_gpio +0x3eef 014462 rtneq gpio_disable +0x3ef0 014463 arg 0 ,rega +0x3ef1 014464 fetcht 1 ,mem_whee_ta_data_gpio +0x3ef2 014465 call gpio_get_bit +0x3ef3 014466 setflag true ,0 ,rega +0x3ef4 014467 fetcht 1 ,mem_whee_tb_data_gpio +0x3ef5 014468 call gpio_get_bit +0x3ef6 014469 setflag true ,1 ,rega +0x3ef7 014470 copy rega ,pdata +0x3ef8 014471 store 1 ,mem_wheel_tb_new_pinlevel +0x3ef9 014472 beq 0x01 ,mouse_t_wheel_scan_judge1 +0x3efa 014473 beq 0x02 ,mouse_t_wheel_scan_judge2 +0x3efb 014474 fetch 1 ,mem_wheel_tog +0x3efc 014475 bbit1 7 ,mouse_t_wheel_scan_judge3 +0x3efd 014476 rtn +: 014478 mouse_t_wheel_scan_judge1: +0x3efe 014479 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3eff 014480 beq 0 ,mouse_t_wheel_scan_judge11 +0x3f00 014481 beq 3 ,mouse_t_wheel_scan_judge12 +0x3f01 014482 rtn +: 014483 mouse_t_wheel_scan_judge2: +0x3f02 014484 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3f03 014485 beq 0 ,mouse_t_wheel_scan_judge21 +0x3f04 014486 beq 3 ,mouse_t_wheel_scan_judge22 +0x3f05 014487 rtn +: 014488 mouse_t_wheel_scan_judge11: +0x3f06 014489 jam 0x82 ,mem_wheel_tog +0x3f07 014490 rtn +: 014491 mouse_t_wheel_scan_judge12: +0x3f08 014492 jam 0x81 ,mem_wheel_tog +0x3f09 014493 rtn +: 014494 mouse_t_wheel_scan_judge21: +0x3f0a 014495 jam 0x80 ,mem_wheel_tog +0x3f0b 014496 rtn +: 014497 mouse_t_wheel_scan_judge22: +0x3f0c 014498 jam 0x83 ,mem_wheel_tog +0x3f0d 014499 rtn +: 014500 mouse_t_wheel_scan_judge3: +0x3f0e 014501 fetch 1 ,mem_wheel_tog +0x3f0f 014502 set0 7 ,pdata +0x3f10 014503 store 1 ,mem_wheel_tog +0x3f11 014504 beq 0 ,mouse_t_wheel_scan_judge30 +0x3f12 014505 beq 1 ,mouse_t_wheel_scan_judge31 +0x3f13 014506 beq 2 ,mouse_t_wheel_scan_judge32 +0x3f14 014507 beq 3 ,mouse_t_wheel_scan_judge33 +0x3f15 014508 rtn +: 014509 mouse_t_wheel_scan_judge30: +0x3f16 014510 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f17 014511 beq 3 ,mouse_wheel_t_forward +0x3f18 014512 rtn +: 014513 mouse_t_wheel_scan_judge31: +0x3f19 014514 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1a 014515 beq 0 ,mouse_wheel_t_forward +0x3f1b 014516 rtn +: 014517 mouse_t_wheel_scan_judge32: +0x3f1c 014518 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1d 014519 beq 3 ,mouse_wheel_t_back +0x3f1e 014520 rtn +: 014521 mouse_t_wheel_scan_judge33: +0x3f1f 014522 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f20 014523 beq 0 ,mouse_wheel_t_back +0x3f21 014524 rtn +: 014525 mouse_wheel_t_forward: +0x3f22 014526 fetch 1 ,mem_mouse_tz_data_count1 +0x3f23 014527 increase 1 ,pdata +0x3f24 014528 store 1 ,mem_mouse_tz_data_count1 +0x3f25 014529 sub pdata ,1 ,null +0x3f26 014530 rtn positive +0x3f27 014531 jam 0 ,mem_mouse_tz_data_count1 +0x3f28 014532 fetch 1 ,mem_mouse_tz_data +0x3f29 014533 increase 1 ,pdata +0x3f2a 014534 store 1 ,mem_mouse_tz_data +0x3f2b 014535 rtn +: 014536 mouse_wheel_t_back: +0x3f2c 014537 fetch 1 ,mem_mouse_tz_data_count +0x3f2d 014538 increase 1 ,pdata +0x3f2e 014539 store 1 ,mem_mouse_tz_data_count +0x3f2f 014540 sub pdata ,1 ,null +0x3f30 014541 rtn positive +0x3f31 014542 jam 0 ,mem_mouse_tz_data_count +0x3f32 014543 fetch 1 ,mem_mouse_tz_data +0x3f33 014544 increase -1 ,pdata +0x3f34 014545 store 1 ,mem_mouse_tz_data +0x3f35 014546 rtn +: 014549 mouse_wheel_scan: +0x3f36 014550 fetch 1 ,mem_whee_a_data_gpio +0x3f37 014551 rtneq gpio_disable +0x3f38 014552 arg 0 ,rega +0x3f39 014553 fetcht 1 ,mem_whee_a_data_gpio +0x3f3a 014554 call gpio_get_bit +0x3f3b 014555 setflag true ,0 ,rega +0x3f3c 014556 fetcht 1 ,mem_whee_b_data_gpio +0x3f3d 014557 call gpio_get_bit +0x3f3e 014558 setflag true ,1 ,rega +0x3f3f 014559 copy rega ,pdata +0x3f40 014560 store 1 ,mem_mwheel_b_new_pinlevel +0x3f41 014561 beq 0x01 ,mouse_wheel_scan_judge1 +0x3f42 014562 beq 0x02 ,mouse_wheel_scan_judge2 +0x3f43 014563 fetch 1 ,mem_mwheel_tog +0x3f44 014564 bbit1 7 ,mouse_wheel_scan_judge3 +0x3f45 014565 rtn +: 014567 mouse_wheel_scan_judge1: +0x3f46 014568 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f47 014569 beq 0 ,mouse_wheel_scan_judge11 +0x3f48 014570 beq 3 ,mouse_wheel_scan_judge12 +0x3f49 014571 rtn +: 014572 mouse_wheel_scan_judge2: +0x3f4a 014573 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f4b 014574 beq 0 ,mouse_wheel_scan_judge21 +0x3f4c 014575 beq 3 ,mouse_wheel_scan_judge22 +0x3f4d 014576 rtn +: 014577 mouse_wheel_scan_judge11: +0x3f4e 014578 jam 0x82 ,mem_mwheel_tog +0x3f4f 014579 rtn +: 014580 mouse_wheel_scan_judge12: +0x3f50 014581 jam 0x81 ,mem_mwheel_tog +0x3f51 014582 rtn +: 014583 mouse_wheel_scan_judge21: +0x3f52 014584 jam 0x80 ,mem_mwheel_tog +0x3f53 014585 rtn +: 014586 mouse_wheel_scan_judge22: +0x3f54 014587 jam 0x83 ,mem_mwheel_tog +0x3f55 014588 rtn +: 014589 mouse_wheel_scan_judge3: +0x3f56 014590 fetch 1 ,mem_mwheel_tog +0x3f57 014591 set0 7 ,pdata +0x3f58 014592 store 1 ,mem_mwheel_tog +0x3f59 014593 beq 0 ,mouse_wheel_scan_judge30 +0x3f5a 014594 beq 1 ,mouse_wheel_scan_judge31 +0x3f5b 014595 beq 2 ,mouse_wheel_scan_judge32 +0x3f5c 014596 beq 3 ,mouse_wheel_scan_judge33 +0x3f5d 014597 rtn +: 014598 mouse_wheel_scan_judge30: +0x3f5e 014599 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f5f 014600 beq 3 ,mouse_wheel_forward +0x3f60 014601 rtn +: 014602 mouse_wheel_scan_judge31: +0x3f61 014603 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f62 014604 beq 0 ,mouse_wheel_forward +0x3f63 014605 rtn +: 014606 mouse_wheel_scan_judge32: +0x3f64 014607 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f65 014608 beq 3 ,mouse_wheel_back +0x3f66 014609 rtn +: 014610 mouse_wheel_scan_judge33: +0x3f67 014611 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f68 014612 beq 0 ,mouse_wheel_back +0x3f69 014613 rtn +: 014614 mouse_wheel_forward: +0x3f6a 014615 jam 0 ,mem_mouse_z_data_count1 +0x3f6b 014616 fetch 1 ,mem_mouse_z_data +0x3f6c 014617 increase 1 ,pdata +0x3f6d 014618 store 1 ,mem_mouse_z_data +0x3f6e 014619 rtn +: 014620 mouse_wheel_back: +0x3f6f 014621 jam 0 ,mem_mouse_z_data_count +0x3f70 014622 fetch 1 ,mem_mouse_z_data +0x3f71 014623 increase -1 ,pdata +0x3f72 014624 store 1 ,mem_mouse_z_data +0x3f73 014625 rtn +: 014628 mouse_hid_connected: +0x3f74 014629 setarg hid_handshake_timeout +0x3f75 014630 store 1 ,mem_hid_handshake_timer_count +0x3f76 014631 rtn +: 014633 mouse_send_process: +0x3f77 014634 fetch 1 ,mem_app_handshake_flag +0x3f78 014635 rtn blank +0x3f79 014636 call l2cap_malloc_is_fifo_nearly_full +0x3f7a 014637 nrtn blank +0x3f7b 014638 fetch mouse_flag_len ,mem_mouse_flag +0x3f7c 014639 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data +0x3f7d 014640 bbit1 mouse_select_device_flag ,mouse_send_empty_data +0x3f7e 014641 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3f7f 014642 call mouse_motion +0x3f80 014643 nrtn user +: 014644 mouse_send_data: +0x3f81 014645 arg 9 ,rega +0x3f82 014646 call hid_malloc_tx_buff +0x3f83 014647 fetch 2 ,mem_hid_int_remote_cid +0x3f84 014648 istore 2 ,contw +0x3f85 014649 setarg 0x02a1 +0x3f86 014650 istore 2 ,contw +0x3f87 014651 fetch 7 ,mem_mouse_key +0x3f88 014652 istore 7 ,contw +0x3f89 014653 rtn +: 014656 mouse_send_empty_data: +0x3f8a 014657 setarg 0 +0x3f8b 014658 store 7 ,mem_mouse_key +0x3f8c 014659 branch mouse_send_data +: 014662 mouse_no_data_timer_init: +0x3f8d 014663 fetch 2 ,mem_mouse_no_data_timeout +0x3f8e 014664 store 2 ,mem_mouse_no_data_timer +0x3f8f 014665 rtn +: 014668 mouse_fill_data_le: +0x3f90 014669 bpatch patch1c_5 ,mem_patch1c +0x3f91 014670 arg 7 ,rega +0x3f92 014671 fetcht 2 ,mem_le_notify_handle +0x3f93 014672 call le_att_malloc_tx_notify +0x3f94 014673 fetch 7 ,mem_mouse_key +0x3f95 014674 istore 7 ,contw +0x3f96 014675 rtn +: 014677 mouse_motion: +0x3f97 014678 bpatch patch1c_6 ,mem_patch1c +0x3f98 014679 disable user +0x3f99 014680 setarg 0 +0x3f9a 014681 store 6 ,mem_mouse_x +0x3f9b 014682 call mouse_cheak_sensor_data +0x3f9c 014683 call mouse_zwheel +0x3f9d 014684 call mouse_t_zwheel +0x3f9e 014685 call mouse_key +0x3f9f 014686 nrtn user +0x3fa0 014687 call mouse_no_data_timer_init +0x3fa1 014688 arg mouse_statue_up_flag ,queue +0x3fa2 014689 branch mouse_enable_function_flag +: 014691 motion_6clk_direction_dispose: +0x3fa3 014692 fetch 2 ,mem_mouse_x +0x3fa4 014693 sub pdata ,0 ,pdata +0x3fa5 014694 store 2 ,mem_mouse_x +0x3fa6 014695 branch enable_user +: 014696 motion_12clk_direction_dispose: +0x3fa7 014697 fetch 2 ,mem_mouse_y +0x3fa8 014698 sub pdata ,0 ,pdata +0x3fa9 014699 store 2 ,mem_mouse_y +0x3faa 014700 branch enable_user +: 014701 motion_9clk_direction_dispose: +0x3fab 014702 fetch 2 ,mem_mouse_y +0x3fac 014703 sub pdata ,0 ,pdata +0x3fad 014704 store 2 ,mem_mouse_y +0x3fae 014705 fetch 2 ,mem_mouse_x +0x3faf 014706 sub pdata ,0 ,pdata +0x3fb0 014707 store 2 ,mem_mouse_x +0x3fb1 014708 call mouse_sensor_data_swap_places +0x3fb2 014709 branch enable_user +: 014710 motion_3clk_direction_dispose: +0x3fb3 014711 call mouse_sensor_data_swap_places +0x3fb4 014712 branch enable_user +: 014713 mouse_cheak_sensor_data: +0x3fb5 014714 fetch 1 ,mem_spi_write_flash_sm +0x3fb6 014715 rtnne flash_sm_no_buys +0x3fb7 014716 fetch 1 ,mem_config_sensor_type +0x3fb8 014717 beq p3205 ,mouse_p32xx_sensor_motion +0x3fb9 014718 beq p3065 ,mouse_p32xx_sensor_motion +0x3fba 014719 beq ka8 ,mouse_p32xx_sensor_motion +0x3fbb 014720 beq p3204 ,mouse_p32xx_sensor_motion +0x3fbc 014721 beq p3212 ,mouse_p3212_sensor_motion +0x3fbd 014722 beq p3610 ,mouse_p3610_sensor_motion +0x3fbe 014723 beq p3065_xy ,mouse_p32xx_sensor_motion +0x3fbf 014724 branch mouse_p32xx_sensor_motion +: 014726 mouse_clear_sensor_data: +0x3fc0 014727 fetch 1 ,mem_mouse_move_flag +0x3fc1 014728 call mouse_read_sensor_common ,blank +0x3fc2 014729 jam 1 ,mem_mouse_move_flag +0x3fc3 014730 rtn +: 014733 mouse_p3212_sensor_motion: +0x3fc4 014734 call mouse_clear_sensor_data +0x3fc5 014735 fetcht 1 ,mem_sensor_data_gpio +0x3fc6 014736 call gpio_get_bit +0x3fc7 014737 nrtn true +: 014738 mouse_p3212_sensor_motion_next: +0x3fc8 014739 setarg pan_reg_pid_l +0x3fc9 014740 call twspi_read +0x3fca 014741 bne p32xx_id1 ,mouse_twspi_reset +0x3fcb 014742 setarg pan_reg_motion_staus +0x3fcc 014743 call twspi_read +0x3fcd 014744 rtnbit0 7 +0x3fce 014745 call mouse_read_sensor_common +0x3fcf 014746 call mouse_read_3212sensor_xy_high +0x3fd0 014747 store 1 ,mem_mouse_xy_h +0x3fd1 014748 rshift4 pdata ,pdata +0x3fd2 014749 call extsign_bit3 +0x3fd3 014750 store 1 ,mem_mouse_x + 1 +0x3fd4 014751 fetch 1 ,mem_mouse_xy_h +0x3fd5 014752 and pdata ,0x0f ,pdata +0x3fd6 014753 call extsign_bit3 +0x3fd7 014754 store 1 ,mem_mouse_y + 1 +0x3fd8 014755 fetch 1 ,mem_config_sensor_angle +0x3fd9 014756 beq mouse_6clk_angle ,motion_6clk_direction_dispose +0x3fda 014757 beq mouse_9clk_angle ,motion_9clk_direction_dispose +0x3fdb 014758 beq mouse_12clk_angle ,motion_12clk_direction_dispose +0x3fdc 014759 beq mouse_3clk_angle ,motion_3clk_direction_dispose +0x3fdd 014760 rtn +: 014762 mouse_read_3212sensor_xy_high: +0x3fde 014763 setarg 0x12 +0x3fdf 014764 branch twspi_read +: 014766 mouse_p3065_judge: +0x3fe0 014767 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +0x3fe1 014768 branch mouse_twspi_reset +: 014770 mouse_p32xx_sensor_motion: +0x3fe2 014771 call mouse_clear_sensor_data +0x3fe3 014772 disable user +0x3fe4 014773 fetcht 1 ,mem_sensor_data_gpio +0x3fe5 014774 call gpio_get_bit +0x3fe6 014775 nrtn true +: 014776 mouse_p32xx_sensor_motion_2: +0x3fe7 014777 setarg pan_reg_pid_l +0x3fe8 014778 call twspi_read +0x3fe9 014779 bne p32xx_id1 ,mouse_p3065_judge +: 014780 mouse_p32xx_sensor_motion_1: +0x3fea 014781 setarg pan_reg_motion_staus +0x3feb 014782 call twspi_read +0x3fec 014783 rtnbit0 7 +0x3fed 014784 call mouse_read_sensor_common +0x3fee 014785 fetch 1 ,mem_mouse_x +0x3fef 014786 call extsign +0x3ff0 014787 store 2 ,mem_mouse_x +0x3ff1 014788 fetch 1 ,mem_mouse_y +0x3ff2 014789 call extsign +0x3ff3 014790 store 2 ,mem_mouse_y +0x3ff4 014791 fetch 1 ,mem_config_sensor_angle +0x3ff5 014792 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection +0x3ff6 014793 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection +0x3ff7 014794 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection +0x3ff8 014795 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection +0x3ff9 014796 rtn +: 014798 motion32xx_6clk_direction_selection: +0x3ffa 014799 call motion_6clk_direction_dispose +0x3ffb 014800 branch mouse_sensor_sdio_low +: 014801 motion32xx_9clk_direction_selection: +0x3ffc 014802 call motion_9clk_direction_dispose +0x3ffd 014803 branch mouse_sensor_sdio_low +: 014804 motion32xx_12clk_direction_selection: +0x3ffe 014805 call motion_12clk_direction_dispose +0x3fff 014806 branch mouse_sensor_sdio_low +: 014807 motion32xx_3clk_direction_selection: +0x4000 014808 call motion_3clk_direction_dispose +0x4001 014809 branch mouse_sensor_sdio_low +: 014811 mouse_sensor_data_swap_places: +0x4002 014812 fetch 2 ,mem_mouse_y +0x4003 014813 fetcht 2 ,mem_mouse_x +0x4004 014814 store 2 ,mem_mouse_x +0x4005 014815 storet 2 ,mem_mouse_y +0x4006 014816 rtn +: 014818 mouse_p3610sensor_read: +0x4007 014819 call spi_ncs_enable +0x4008 014820 nop 100 +0x4009 014821 copy regb ,pdata +0x400a 014822 call twspi_read +0x400b 014823 copy pdata ,regb +0x400c 014824 call spi_ncs_disable +0x400d 014825 nop 100 +0x400e 014826 copy regb ,pdata +0x400f 014827 rtn +: 014828 mouse_p3610_sensor_motion: +0x4010 014829 disable user +0x4011 014830 fetcht 1 ,mem_sensor_data_gpio +0x4012 014831 call gpio_get_bit +0x4013 014832 nrtn true +0x4014 014833 arg pan_reg_motion_staus ,regb +0x4015 014834 call mouse_p3610sensor_read +0x4016 014835 rtnbit0 7 +0x4017 014836 arg pan_reg_pid_l ,regb +0x4018 014837 call mouse_p3610sensor_read +0x4019 014838 store 1 ,mem_sensor_id1 +0x401a 014839 bne p3610_id1 ,mouse_init_3610sensor_reset +0x401b 014840 fetch 1 ,mem_mouse_move_flag +0x401c 014841 call mouse_read_sensor3610_data ,blank +0x401d 014842 jam 1 ,mem_mouse_move_flag +0x401e 014843 call mouse_read_sensor3610_data +0x401f 014844 fetch 1 ,mem_mouse_xy_h +0x4020 014845 rshift4 pdata ,pdata +0x4021 014846 call extsign_bit3 +0x4022 014847 store 1 ,mem_mouse_x + 1 +0x4023 014848 fetch 1 ,mem_mouse_xy_h +0x4024 014849 and pdata ,0x0f ,pdata +0x4025 014850 call extsign_bit3 +0x4026 014851 store 1 ,mem_mouse_y + 1 +0x4027 014852 fetch 1 ,mem_config_sensor_angle +0x4028 014853 beq 0 ,motion3610_6clk_direction_selection +0x4029 014854 beq 1 ,motion3610_9clk_direction_selection +0x402a 014855 beq 2 ,motion3610_12clk_direction_selection +0x402b 014856 beq 3 ,motion3610_3clk_direction_selection +0x402c 014857 rtn +: 014859 mouse_3610_smart_select: +0x402d 014860 fetch 1 ,mem_sensor_smart_flag +0x402e 014861 beq p3610_smart_enable ,mouse_3610_smart_disable +0x402f 014862 beq p3610_smart_disable ,mouse_3610_smart_enable +0x4030 014863 rtn +: 014866 motion3610_6clk_direction_selection: +0x4031 014867 call motion_6clk_direction_dispose +0x4032 014868 branch mouse_3610_smart_select +: 014870 motion3610_12clk_direction_selection: +0x4033 014871 call motion_12clk_direction_dispose +0x4034 014872 branch mouse_3610_smart_select +: 014874 motion3610_9clk_direction_selection: +0x4035 014875 call motion_9clk_direction_dispose +0x4036 014876 branch mouse_3610_smart_select +: 014878 motion3610_3clk_direction_selection: +0x4037 014879 call motion_3clk_direction_dispose +0x4038 014880 branch mouse_3610_smart_select +: 014882 mouse_read_sensor3610_data: +0x4039 014883 call spi_ncs_enable +0x403a 014884 call mouse_read_sensor_common +0x403b 014885 arg 5 ,pdata +0x403c 014886 call twspi_read +0x403d 014887 store 1 ,mem_mouse_xy_h +0x403e 014888 arg 7 ,pdata +0x403f 014889 call twspi_read +0x4040 014890 store 1 ,mem_sensor_shutter_hi +0x4041 014891 arg 8 ,pdata +0x4042 014892 call twspi_read +0x4043 014893 store 1 ,mem_sensor_shutter_lo +0x4044 014894 branch spi_ncs_disable +: 014897 mouse_3610_smart_enable: +0x4045 014898 fetch 1 ,mem_sensor_shutter_hi +0x4046 014899 rtnne 0 +0x4047 014900 fetch 1 ,mem_sensor_shutter_lo +0x4048 014901 sub pdata ,45 ,null +0x4049 014902 rtn positive +0x404a 014903 jam p3610_smart_enable ,mem_sensor_smart_flag +0x404b 014904 setarg 0xba41 +0x404c 014905 call sensor_write +0x404d 014906 setarg 0x0032 +0x404e 014907 call sensor_write +0x404f 014908 setarg 0xb541 +0x4050 014909 branch sensor_write +: 014910 mouse_3610_smart_disable: +0x4051 014911 fetch 1 ,mem_sensor_shutter_hi +0x4052 014912 rtnne 0 +0x4053 014913 fetch 1 ,mem_sensor_shutter_lo +0x4054 014914 sub pdata ,45 ,null +0x4055 014915 nrtn positive +0x4056 014916 jam p3610_smart_disable ,mem_sensor_smart_flag +0x4057 014917 setarg 0xba41 +0x4058 014918 call sensor_write +0x4059 014919 setarg 0x8032 +0x405a 014920 call sensor_write +0x405b 014921 setarg 0xb541 +0x405c 014922 branch sensor_write +: 014926 mouse_read_sensor_common: +0x405d 014927 arg pan_reg_delta_x ,pdata +0x405e 014928 call twspi_read +0x405f 014929 store 2 ,mem_mouse_x +0x4060 014930 arg pan_reg_delta_y ,pdata +0x4061 014931 call twspi_read +0x4062 014932 store 2 ,mem_mouse_y +0x4063 014933 rtn +: 014935 mouse_set_qdecoder_x: +0x4064 014936 arg mouse_default_xa_gpio ,temp +0x4065 014937 call gpio_config_input +0x4066 014938 arg mouse_default_xa_gpio ,temp +0x4067 014939 call gpio_get_bit +0x4068 014940 rtn true +0x4069 014941 hfetch 1 ,core_qdec_cntx +0x406a 014942 set1 4 ,pdata +0x406b 014943 hstore 1 ,core_qdec_cntx +0x406c 014944 rtn +: 014946 mouse_hardware_zwheel: +0x406d 014947 fetcht 1 ,mem_mouse_z_data +0x406e 014948 hfetch 1 ,core_qdec_cntx +0x406f 014949 iadd temp ,pdata +0x4070 014950 rtn blank +0x4071 014951 store 1 ,mem_mouse_z +0x4072 014952 jam 0 ,mem_mouse_z_data +0x4073 014953 branch enable_user +: 014954 mouse_hardware_zwheel_beforelpm: +0x4074 014955 fetcht 1 ,mem_mouse_z_data +0x4075 014956 hfetch 1 ,core_qdec_cntx +0x4076 014957 iadd temp ,pdata +0x4077 014958 store 1 ,mem_mouse_z_data +0x4078 014959 rtn +: 014960 mouse_zwheel: +0x4079 014961 fetch 1 ,mem_mouse_z_data +0x407a 014962 rtn blank +0x407b 014963 store 1 ,mem_mouse_z +0x407c 014964 jam 0 ,mem_mouse_z_data +0x407d 014965 branch enable_user +: 014967 mouse_t_zwheel: +0x407e 014968 fetch 1 ,mem_mouse_tz_data +0x407f 014969 rtn blank +0x4080 014970 store 1 ,mem_mouse_tz +0x4081 014971 jam 0 ,mem_mouse_tz_data +0x4082 014972 branch enable_user +: 014974 mouse_check_key_gpio: +0x4083 014975 arg 0 ,rega +0x4084 014976 fetcht 1 ,mem_lbutton_gpio +0x4085 014977 call gpio_get_bit +0x4086 014978 setflag true ,0 ,rega +0x4087 014979 fetcht 1 ,mem_rbutton_gpio +0x4088 014980 call gpio_get_bit +0x4089 014981 setflag true ,1 ,rega +0x408a 014982 fetcht 1 ,mem_mbutton_gpio +0x408b 014983 call gpio_get_bit +0x408c 014984 setflag true ,2 ,rega +0x408d 014985 call mouse_check_s_key_gpio +: 014986 mouse_check_key_gpio_output: +0x408e 014987 copy rega ,pdata +0x408f 014988 rtn +: 014989 mouse_check_s_key_gpio: +0x4090 014990 fetch 1 ,mem_bk_button_gpio +0x4091 014991 rtneq gpio_disable +0x4092 014992 fetcht 1 ,mem_bk_button_gpio +0x4093 014993 call gpio_get_bit +0x4094 014994 setflag true ,3 ,rega +0x4095 014995 fetcht 1 ,mem_fw_button_gpio +0x4096 014996 call gpio_get_bit +0x4097 014997 setflag true ,4 ,rega +0x4098 014998 rtn +: 015000 mouse_key: +0x4099 015001 call mouse_check_key_gpio +0x409a 015002 call mouse_set_mult +0x409b 015003 call mouse_24g_key +0x409c 015004 copy rega ,pdata +0x409d 015005 fetcht 1 ,mem_mouse_key +0x409e 015006 store 1 ,mem_mouse_key +0x409f 015007 ixor temp ,pdata +0x40a0 015008 sub pdata ,0 ,null +0x40a1 015009 rtn zero +0x40a2 015010 branch enable_user +: 015012 mouse_24g_key: +0x40a3 015013 rtnmark0 mark_24g +0x40a4 015014 copy rega ,pdata +0x40a5 015015 rtn blank +0x40a6 015016 store 1 ,mem_mouse_key +0x40a7 015017 branch enable_user +: 015020 mouse_set_mult: +0x40a8 015021 fetch 2 ,mem_ui_state_map +0x40a9 015022 bbit1 ui_state_ble_connected ,mouse_set_ble_mult +0x40aa 015023 fetch 2 ,mem_ui_state_map +0x40ab 015024 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +0x40ac 015025 rtn +: 015026 mouse_set_ble_mult: +0x40ad 015027 copy rega ,pdata +0x40ae 015028 nbranch le_set_config_short_mult ,blank +0x40af 015029 branch le_clr_config_short_mult +: 015030 mouse_set_bt_mult: +0x40b0 015031 copy rega ,pdata +0x40b1 015032 nbranch classic_bt_set_mult_short_flag ,blank +0x40b2 015033 branch classic_bt_clr_mult_short_flag +: 015036 mouse_sensor_sdio_low: +0x40b3 015037 bpatch patch1c_7 ,mem_patch1c +0x40b4 015038 arg mouse_spi1_sdio_gpio ,temp +0x40b5 015039 fetch mouse_flag_len ,mem_mouse_flag +0x40b6 015040 isolate1 mouse_enable_spi2 ,pdata +0x40b7 015041 call mouse_sensor_sdio_low2 ,true +0x40b8 015042 call gpio_get_bit +0x40b9 015043 rtn true +0x40ba 015044 setarg 0x0a +0x40bb 015045 call twspi_read +0x40bc 015046 nop 1000 +0x40bd 015047 branch mouse_sensor_sdio_low +: 015048 mouse_sensor_sdio_low2: +0x40be 015049 arg mouse_spi2_sdio_gpio ,temp +0x40bf 015050 rtn +: 015052 mouse_spi_sdio_gpio_pollup: +0x40c0 015053 fetch mouse_flag_len ,mem_mouse_flag +0x40c1 015054 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup +: 015055 mouse_spi1_sdio_gpio_pollup: +0x40c2 015056 arg mouse_spi1_sdio_gpio ,temp +0x40c3 015057 branch gpio_config_input_without_wake +: 015058 mouse_spi2_sdio_gpio_pollup: +0x40c4 015059 arg mouse_spi2_sdio_gpio ,temp +0x40c5 015060 branch gpio_config_input_without_wake +: 015063 mouse_init_sunt: +0x40c6 015064 call mouse_spi_init +0x40c7 015065 rtn wake +0x40c8 015066 call mouse_spi_sdio_gpio_pollup +0x40c9 015067 fetch 1 ,mem_config_sensor_type +0x40ca 015068 beq p3610 ,mouse_init_3610sensor +: 015069 mouse_init_sensor: +0x40cb 015070 call mouse_read_sensor_id +0x40cc 015071 beq p32xx_id1 ,mouse_init_p32xx_id2_judge +0x40cd 015072 beq p3065_id1 ,mouse_p3065_init_param +0x40ce 015073 call mouse_twspi_reset +0x40cf 015074 nop 1000 +0x40d0 015075 branch mouse_init_sensor +: 015076 mouse_twspi_reset: +0x40d1 015077 bpatch patch1d_0 ,mem_patch1d +0x40d2 015078 fetch mouse_flag_len ,mem_mouse_flag +0x40d3 015079 bbit1 mouse_enable_spi2 ,twspi_reset2 +0x40d4 015080 branch twspi_reset +: 015082 mouse_init_3610sensor: +0x40d5 015083 call mouse_read_sensor_id +0x40d6 015084 beq p3610_id1 ,mouse_init_p3610 +0x40d7 015085 call mouse_init_3610sensor_reset +0x40d8 015086 branch mouse_init_3610sensor +: 015088 mouse_read_sensor_id: +0x40d9 015089 setarg pan_reg_pid_h +0x40da 015090 call twspi_read +0x40db 015091 store 1 ,mem_sensor_id2 +0x40dc 015092 setarg pan_reg_pid_l +0x40dd 015093 call twspi_read +0x40de 015094 store 1 ,mem_sensor_id1 +0x40df 015095 rtn +: 015096 mouse_init_p32xx_id2_judge: +0x40e0 015097 fetch 1 ,mem_sensor_id2 +0x40e1 015098 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +0x40e2 015099 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +0x40e3 015100 beq p3212_id2 ,mouse_3212_init_param +0x40e4 015101 beq pka8_id2 ,mouse_ka8_init_param +0x40e5 015102 rtn +: 015103 mouse_ka8_init_param: +0x40e6 015104 jam ka8 ,mem_config_sensor_type +0x40e7 015105 rtn +: 015106 mouse_p3065xy_init_param: +0x40e8 015107 jam p3065_xy ,mem_config_sensor_type +0x40e9 015108 rtn +: 015109 mouse_p3065_init_param: +0x40ea 015110 fetch 1 ,mem_sensor_id2 +0x40eb 015111 beq p3065_xy_id2 ,mouse_p3065xy_init_param +0x40ec 015112 jam p3065 ,mem_config_sensor_type +0x40ed 015113 rtn +: 015114 mouse_3212_init_param: +0x40ee 015115 jam p3212 ,mem_config_sensor_type +0x40ef 015116 call mouse_sensor_disable_wp +0x40f0 015117 setarg 0x3426 +0x40f1 015118 call twspi_write +0x40f2 015119 setarg 0x0419 +0x40f3 015120 call twspi_write +: 015121 mouse_sensor_enable_wp: +0x40f4 015122 setarg 0x0009 +0x40f5 015123 branch twspi_write +: 015124 mouse_sensor_disable_wp: +0x40f6 015125 setarg 0x5a09 +0x40f7 015126 branch twspi_write +: 015128 mouse_3204_3l_init_param: +0x40f8 015129 jam p3204 ,mem_config_sensor_type +0x40f9 015130 call mouse_sensor_disable_wp +0x40fa 015131 setarg 0x0f0d +0x40fb 015132 call twspi_write +0x40fc 015133 setarg 0xe31d +0x40fd 015134 call twspi_write +0x40fe 015135 setarg 0xd27d +0x40ff 015136 call twspi_write +0x4100 015137 call mouse_32xx_init_param +0x4101 015138 branch mouse_32xx_init_param_1 +: 015140 mouse_32xx_init_param: +0x4102 015141 setarg 0x351b +0x4103 015142 call twspi_write +0x4104 015143 setarg 0xb428 +0x4105 015144 call twspi_write +0x4106 015145 setarg 0x4629 +0x4107 015146 call twspi_write +0x4108 015147 setarg 0x962a +0x4109 015148 call twspi_write +0x410a 015149 setarg 0x8c2b +0x410b 015150 call twspi_write +0x410c 015151 setarg 0x6e2c +0x410d 015152 call twspi_write +0x410e 015153 setarg 0x642d +0x410f 015154 call twspi_write +0x4110 015155 setarg 0x5f38 +0x4111 015156 call twspi_write +0x4112 015157 setarg 0x0f39 +0x4113 015158 call twspi_write +0x4114 015159 setarg 0x323a +0x4115 015160 call twspi_write +0x4116 015161 setarg 0x473b +0x4117 015162 call twspi_write +0x4118 015163 setarg 0x1042 +0x4119 015164 branch twspi_write +: 015165 mouse_32xx_init_param_1: +0x411a 015166 setarg 0x2e54 +0x411b 015167 call twspi_write +0x411c 015168 setarg 0xf255 +0x411d 015169 call twspi_write +0x411e 015170 setarg 0xf461 +0x411f 015171 call twspi_write +0x4120 015172 setarg 0x7063 +0x4121 015173 call twspi_write +0x4122 015174 setarg 0x5275 +0x4123 015175 call twspi_write +0x4124 015176 setarg 0x4176 +0x4125 015177 call twspi_write +0x4126 015178 setarg 0xed77 +0x4127 015179 call twspi_write +0x4128 015180 setarg 0x2378 +0x4129 015181 call twspi_write +0x412a 015182 setarg 0x4679 +0x412b 015183 call twspi_write +0x412c 015184 setarg 0xe57a +0x412d 015185 call twspi_write +0x412e 015186 setarg 0x487c +0x412f 015187 call twspi_write +0x4130 015188 setarg 0x777e +0x4131 015189 call twspi_write +0x4132 015190 setarg 0x017f +0x4133 015191 call twspi_write +0x4134 015192 setarg 0x000b +0x4135 015193 call twspi_write +0x4136 015194 setarg 0x007f +0x4137 015195 call twspi_write +0x4138 015196 branch mouse_sensor_enable_wp +: 015199 mouse_3205_3t_init_param: +0x4139 015200 jam p3205 ,mem_config_sensor_type +0x413a 015201 call mouse_sensor_disable_wp +0x413b 015202 setarg 0x100d +0x413c 015203 call twspi_write +0x413d 015204 setarg 0xed1d +0x413e 015205 call twspi_write +0x413f 015206 setarg 0x807d +0x4140 015207 call twspi_write +0x4141 015208 call mouse_32xx_init_param +0x4142 015209 setarg 0x0943 +0x4143 015210 call twspi_write +0x4144 015211 branch mouse_32xx_init_param_1 +: 015214 mouse_init_3610sensor_reset: +0x4145 015215 fetcht 1 ,mem_sensor_reset_gpio +0x4146 015216 call gpio_out_active +0x4147 015217 call delay_10ms +0x4148 015218 fetcht 1 ,mem_sensor_reset_gpio +0x4149 015219 call gpio_out_inactive +0x414a 015220 branch delay_10ms +: 015222 mouse_init_p3610: +0x414b 015223 jam p3610 ,mem_config_sensor_type +0x414c 015224 setarg 0xba41 +0x414d 015225 call sensor_write +0x414e 015226 setarg 0x0d11 +0x414f 015227 call sensor_write +0x4150 015228 setarg 0x041b +0x4151 015229 call sensor_write +0x4152 015230 setarg 0x041c +0x4153 015231 call sensor_write +0x4154 015232 setarg 0x0f1d +0x4155 015233 call sensor_write +0x4156 015234 setarg 0x0032 +0x4157 015235 call sensor_write +0x4158 015236 setarg 0xb541 +0x4159 015237 branch sensor_write +: 015241 mouse_set_sensor_reg: +0x415a 015242 setarg 0xba41 +0x415b 015243 call sensor_write +0x415c 015244 nop 4000 +0x415d 015245 setarg 0xff7f +0x415e 015246 call sensor_write +0x415f 015247 copy rega ,pdata +0x4160 015248 call sensor_write +0x4161 015249 setarg 0x007f +0x4162 015250 call sensor_write +0x4163 015251 setarg 0xb541 +0x4164 015252 branch sensor_write +: 015254 extsign: +0x4165 015255 rtnbit0 7 +0x4166 015256 arg 0xff00 ,temp +0x4167 015257 ior temp ,pdata +0x4168 015258 rtn +: 015260 extsign_bit3: +0x4169 015261 rtnbit0 3 +0x416a 015262 arg 0xf0 ,temp +0x416b 015263 ior temp ,pdata +0x416c 015264 rtn +: 015267 mouse_le: +0x416d 015268 call le_fifo_check_nearly_full +0x416e 015269 nrtn blank +0x416f 015270 fetch 1 ,mem_le_connect_status_flag +0x4170 015271 and pdata ,0x03 ,pdata +0x4171 015272 rtnne 0x03 +0x4172 015273 fetch mouse_flag_len ,mem_mouse_flag +0x4173 015274 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet +0x4174 015275 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +0x4175 015276 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x4176 015277 call mouse_motion +0x4177 015278 nrtn user +0x4178 015279 branch mouse_fill_data_le +: 015281 mouse_le_send_empty_packet: +0x4179 015282 setarg 0 +0x417a 015283 store 7 ,mem_mouse_key +0x417b 015284 branch mouse_fill_data_le +: 015286 mouse_priority_bb_event: +0x417c 015287 copy regc ,pdata +0x417d 015288 beq bt_evt_le_connected ,mouse_le_bb_event_connected +0x417e 015289 beq bt_evt_bb_connected ,mouse_stop_discovery +0x417f 015290 beq bt_evt_le_disconnected ,mouse_bb_disconnected +0x4180 015291 beq bt_evt_bb_disconnected ,mouse_bb_disconnected +0x4181 015292 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +0x4182 015293 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +0x4183 015294 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +0x4184 015295 beq bt_evt_hid_connected ,mouse_bt_hid_connected +0x4185 015296 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +0x4186 015297 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +0x4187 015298 beq bt_evt_pincode_req ,mouse_bb_event_pincode +0x4188 015299 beq bt_evt_remote_unsniff ,app_start_auto_sniff +0x4189 015300 beq bt_evt_le_pairing_success ,mouse_le_pairing_success +0x418a 015301 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +0x418b 015302 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +0x418c 015303 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +0x418d 015304 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +0x418e 015305 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +0x418f 015306 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +0x4190 015307 rtn +: 015310 mouse_le_pairing_complete: +0x4191 015311 branch app_ble_store_reconn_info +: 015313 mouse_24g_attempt_fail: +0x4192 015314 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x4193 015315 fetch 1 ,mem_reconn_times +0x4194 015316 nbranch mouse_polling_device ,blank +0x4195 015317 fetch 1 ,mem_device_flag +0x4196 015318 fetcht 1 ,mem_24g_device_number +0x4197 015319 isub temp ,null +0x4198 015320 branch app_enter_hibernate ,zero +0x4199 015321 rtn +: 015322 mouse_24g_attempt_success: +0x419a 015323 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419b 015324 rtn +: 015325 mouse_24g_pairing_complete: +0x419c 015326 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419d 015327 arg mosue_24g_pairing_flag ,queue +0x419e 015328 call mouse_disable_function_flag +0x419f 015329 setarg 0 +0x41a0 015330 store 2 ,mem_24g_pairing_timer_count +0x41a1 015331 jam 0 ,mem_mouse_move_flag +0x41a2 015333 fetch 1 ,mem_config_sensor_type +0x41a3 015334 sub pdata ,p3610 ,null +0x41a4 015335 call mouse_read_sensor3610_data ,zero +0x41a5 015336 ncall mouse_read_sensor_common ,zero +0x41a6 015338 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x41a7 015339 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address +0x41a8 015340 call mouse_set_24g_addr_eeprom +0x41a9 015341 branch iicd_write_protect_eep_data +: 015343 mouse_set_24g_addr_eeprom: +0x41aa 015344 call g24_head_ptr2regc +0x41ab 015345 add regc ,offset_24g_addr ,rega +0x41ac 015346 arg mouse_g24_addr_eeprom_offect ,regb +0x41ad 015347 arg 4 ,temp +0x41ae 015348 rtn +: 015350 mouse_store_flash_24g_address: +0x41af 015351 call g24_head_ptr2regc +0x41b0 015352 add regc ,offset_24g_addr ,regb +0x41b1 015353 ifetch 1 ,regb +0x41b2 015354 store 1 ,mem_mouse_24g_addr +0x41b3 015355 branch mouse_store_flash_device_info +: 015358 mouse_le_pairing_success: +0x41b4 015359 arg ll_pairing_success_flag ,queue +0x41b5 015360 branch mouse_le_enable_connect_flag +: 015361 mouse_le_ll_start_encryt: +0x41b6 015362 jam 2 ,mem_le_start_encrypt_timer +0x41b7 015363 arg ll_start_enc_flag ,queue +0x41b8 015364 branch mouse_le_enable_connect_flag +: 015367 mouse_le_enable_connect_flag: +0x41b9 015368 fetch 1 ,mem_le_connect_status_flag +0x41ba 015369 qset1 pdata +0x41bb 015370 store 1 ,mem_le_connect_status_flag +0x41bc 015371 rtn +: 015373 mouse_le_disable_connect_flag: +0x41bd 015374 fetch 1 ,mem_le_connect_status_flag +0x41be 015375 qset0 pdata +0x41bf 015376 store 1 ,mem_le_connect_status_flag +0x41c0 015377 rtn +: 015378 mouse_le_clean_connect_flag: +0x41c1 015379 jam 0 ,mem_le_connect_status_flag +0x41c2 015380 rtn +: 015382 mouse_le_bb_event_connected: +0x41c3 015383 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c4 015384 set0 app_disc_by_button ,pdata +0x41c5 015385 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c6 015386 setarg 0 +0x41c7 015387 store 2 ,mem_mouse_direct_timer +0x41c8 015388 call mouse_no_data_timer_init +0x41c9 015389 branch mouse_stop_discovery +: 015391 mouse_bb_event_pincode: +0x41ca 015392 call pincode_reinit +0x41cb 015393 branch app_bt_set_pincode +: 015394 mouse_bb_event_reconn_timeout: +: 015395 mouse_bb_event_reconn_failed: +0x41cc 015396 fetch 1 ,mem_reconn_times +0x41cd 015397 nbranch mouse_polling_device ,blank +0x41ce 015398 fetch 2 ,mem_ui_state_map +0x41cf 015399 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41d0 015400 fetch mouse_flag_len ,mem_mouse_flag +0x41d1 015401 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41d2 015402 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery +0x41d3 015403 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41d4 015404 branch app_bb_hibernate +: 015407 mouse_bt_hid_connected: +0x41d5 015408 branch mouse_hid_connected +: 015410 mouse_bt_event_setup_complete: +0x41d6 015411 rtn +: 015413 mouse_soft_reset: +0x41d7 015414 call mouse_select_device_enable +0x41d8 015415 branch soft_reset_chip +: 015417 mouse_bb_disconnected: +0x41d9 015418 bpatch patch1d_1 ,mem_patch1d +0x41da 015419 call mouse_bb_discon_clear_stack +0x41db 015420 fetch mouse_flag_len ,mem_mouse_flag +0x41dc 015421 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41dd 015422 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41de 015423 fetch 1 ,mem_reconn_times +0x41df 015424 nbranch mouse_polling_device ,blank +0x41e0 015425 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41e1 015426 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +0x41e2 015427 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41e3 015428 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +0x41e4 015429 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +0x41e5 015430 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41e6 015431 branch mouse_start_discovery +: 015432 mouse_bb_discon_clear_stack: +0x41e7 015433 setarg 0 +0x41e8 015434 store 8 ,mem_wheel_tb_old_pinlevel +0x41e9 015435 istore 4 ,contw +0x41ea 015436 jam 0 ,mem_mouse_send_blank_timer +0x41eb 015437 jam 0 ,mem_mouse_move_flag +0x41ec 015438 jam app_handshake_null ,mem_app_handshake_flag +0x41ed 015439 jam 0 ,mem_ltk_exists +0x41ee 015440 rtn +: 015442 mouse_event_light_state_pairing: +0x41ef 015443 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +0x41f0 015444 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41f1 015445 branch mouse_start_discovery +: 015446 mouse_event_light_state_hibernate: +0x41f2 015447 fetch 2 ,mem_ui_state_map +0x41f3 015448 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41f4 015449 branch app_bb_hibernate +: 015451 mouse4_0_event_bb_disconn: +0x41f5 015452 call mouse_le_clean_connect_flag +0x41f6 015453 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41f7 015454 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41f8 015455 branch app_bb_hibernate +: 015457 mouse_bb_event_timer: +0x41f9 015458 call mouse_adc_read +0x41fa 015459 call mouse_24g_delay_timer +0x41fb 015460 call mouse_ban_24g_pairing_timer +0x41fc 015461 call mouse_dpi_led_blink_delay_timer +0x41fd 015462 call mouse_statue_up_timer +0x41fe 015464 call mouse_statue_cheak_timer +0x41ff 015465 call mouse_select_device +0x4200 015466 call mouse_bt_discovery_cheak +0x4201 015467 call mouse_low_voltage_led_timer +0x4202 015468 call mouse_sensor_led_contrl_timer +0x4203 015469 call mouse_check_hid_handshake_timer +0x4204 015470 call mouse_check_discovery_timeout_timer +0x4205 015471 call mouse_check_direct_timeout_timer +0x4206 015472 call mouse_check_no_data_timeout_timer +0x4207 015473 call mouse_check_mouse_state_timer +0x4208 015474 branch mouse_le_enable_att_list_timer +: 015478 mouse_sensor_led_contrl_timer: +0x4209 015479 fetch 1 ,mem_mouse_sensor_timer_count +0x420a 015480 rtn blank +0x420b 015481 increase -1 ,pdata +0x420c 015482 store 1 ,mem_mouse_sensor_timer_count +0x420d 015483 nrtn blank +0x420e 015484 branch mouse_sensor_led_contrl +: 015485 mouse_sensor_led_contrl: +0x420f 015486 fetch 1 ,mem_sensor_led_style +0x4210 015487 rtneq ui_led_state_blink_stop +0x4211 015488 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking +: 015489 mouse_sensor_led_blink_state_lighting: +0x4212 015490 call mouse_sensor_led_on +0x4213 015491 jam ui_led_state_blink_darking ,mem_sensor_led_style +0x4214 015492 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4215 015493 rtn +: 015494 mouse_sensor_led_blink_state_darking: +0x4216 015495 call mouse_sensor_led_off +0x4217 015496 jam ui_led_state_blink_lighting ,mem_sensor_led_style +0x4218 015497 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4219 015498 rtn +: 015500 mouse_sensor_led_blink_stop: +: 015501 mouse_sensor_reset: +0x421a 015502 setarg 0x8006 +0x421b 015503 call twspi_write +0x421c 015504 nop 1000 +0x421d 015505 jam 0x00 ,mem_mouse_sensor_timer_count +0x421e 015506 jam ui_led_state_blink_stop ,mem_sensor_led_style +0x421f 015507 branch mouse_init_p32xx_id2_judge +: 015509 mouse_p3212sensor_led_on: +0x4220 015510 setarg 0xa006 +0x4221 015511 call twspi_write +0x4222 015512 setarg 0xa005 +0x4223 015513 branch twspi_write +: 015514 mouse_sensor_led_on_global: +0x4224 015515 jam 0 ,mem_mouse_sensor_timer_count +: 015516 mouse_sensor_led_on: +0x4225 015517 fetch 1 ,mem_config_sensor_type +0x4226 015518 beq p3212 ,mouse_p3212sensor_led_on +0x4227 015519 setarg 0x0106 +0x4228 015520 call twspi_write +0x4229 015521 setarg 0xa105 +0x422a 015522 branch twspi_write +: 015524 mouse_sensor_led_off_global: +0x422b 015525 jam 0 ,mem_mouse_sensor_timer_count +: 015526 mouse_sensor_led_off: +0x422c 015527 setarg 0x0906 +0x422d 015528 branch twspi_write +: 015529 mouse_sensor_start_blink: +0x422e 015530 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x422f 015531 jam ui_led_state_blink_start ,mem_sensor_led_style +0x4230 015532 rtn +: 015534 mouse_check_hid_handshake_timer: +0x4231 015535 arg mem_hid_handshake_timer_count ,regc +0x4232 015536 arg mouse_bt_hid_handshake ,regb +0x4233 015537 branch timer_single_step +: 015539 mouse_check_discovery_timeout_timer: +0x4234 015540 arg mem_mouse_discovery_timer ,regc +0x4235 015541 arg mouse_check_discovery_timeout ,regb +0x4236 015542 branch timer_single_step_2b +: 015544 mouse_check_direct_timeout_timer: +0x4237 015545 arg mem_mouse_direct_timer ,regc +0x4238 015546 arg mouse_check_direct_timeout ,regb +0x4239 015547 branch timer_single_step_2b +: 015549 mouse_check_no_data_timeout_timer: +0x423a 015550 arg mem_mouse_no_data_timer ,regc +0x423b 015551 arg mouse_check_no_data_timeout ,regb +0x423c 015552 branch timer_single_step_2b +: 015554 mouse_check_mouse_state_timer: +0x423d 015555 arg mem_mouse_statue_led_timer ,regc +0x423e 015556 arg mouse_statue_led_off ,regb +0x423f 015557 branch timer_single_step +: 015561 mouse_le_enable_att_list_timer: +0x4240 015562 arg mem_le_start_encrypt_timer ,regc +0x4241 015563 arg mouse_le_enable_att_list ,regb +0x4242 015564 branch timer_single_step +: 015566 mouse_24g_delay_timer: +0x4243 015567 arg mem_24g_enter_lpm_timer ,regc +0x4244 015568 arg mouse_24g_delay ,regb +0x4245 015569 branch timer_single_step +: 015571 mouse_ban_24g_pairing_timer: +0x4246 015572 arg mem_24g_pairing_timer_count ,regc +0x4247 015573 arg mouse_ban_24g_pairing ,regb +0x4248 015574 branch timer_single_step_2b +: 015575 mouse_ban_24g_pairing: +: 015576 mouse_24g_delay: +0x4249 015577 rtn +: 015580 mosue_dpi_led_blink_init: +0x424a 015581 fetch mouse_flag_len ,mem_mouse_flag +0x424b 015582 rtnbit0 mouse_enable_dpi_led_blink +0x424c 015583 jam 10 ,mem_mouse_dpi_led_delay_count +0x424d 015584 fetch 1 ,mem_dpi_led_gpio +0x424e 015585 store 1 ,mem_mouse_struct_led_gpio +0x424f 015586 rtn +: 015589 mouse_dpi_led_blink_delay_timer: +0x4250 015590 arg mem_mouse_dpi_led_delay_count ,regc +0x4251 015591 arg mouse_dpi_led_setting ,regb +0x4252 015592 branch timer_single_step +: 015593 mouse_dpi_led_setting: +0x4253 015594 fetch 1 ,mem_dpi_led_gpio +0x4254 015595 store 1 ,mem_mouse_struct_led_gpio +0x4255 015596 setarg led_dpi_blink +0x4256 015597 store 2 ,mem_mouse_on_time +0x4257 015598 store 2 ,mem_mouse_off_time +0x4258 015599 arg 0 ,rega +0x4259 015600 fetcht 1 ,mem_mouse_dpi +0x425a 015601 increase 1 ,temp +0x425b 015602 storet 1 ,mem_mouse_blink_count +0x425c 015603 jam ui_led_state_blink_start ,mem_mouse_led_type +0x425d 015604 rtn +: 015606 mouse_le_enable_att_list: +0x425e 015607 fetch 1 ,mem_le_connect_status_flag +0x425f 015608 rtnbit1 ll_pairing_success_flag +0x4260 015609 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x4261 015610 call ui_ipc_send_cmd +0x4262 015611 arg write_req_enable_flag ,queue +0x4263 015612 branch mouse_le_enable_connect_flag +: 015615 mouse_check_discovery_timeout: +0x4264 015616 call mouse_stop_discovery +0x4265 015617 branch app_enter_hibernate +: 015619 mouse_check_direct_timeout: +0x4266 015620 call app_ble_stop_direct_adv +0x4267 015621 fetch 1 ,mem_reconn_times +0x4268 015622 nbranch mouse_polling_device ,blank +0x4269 015623 branch app_enter_hibernate +: 015625 mouse_check_no_data_timeout: +0x426a 015626 bmark1 mark_24g ,check_51cmd_hibernate +0x426b 015627 branch mouse_disconnect +: 015631 mouse_bb_event_discovery_btn: +0x426c 015632 bpatch patch1d_2 ,mem_patch1d +0x426d 015633 jam 0 ,mem_mouse_send_blank_timer +0x426e 015634 call mouse_disconnect +0x426f 015635 call mouse_le_clean_connect_flag +0x4270 015636 branch mouse_start_discovery +: 015640 mouse3_0_check_reconn_target: +0x4271 015641 fetch 6 ,mem_hci_plap +0x4272 015642 branch app_bt_start_discovery_short ,blank +0x4273 015643 call mouse_reconn_setting_led_gpio +0x4274 015644 jam 0x17 ,mem_connection_options +0x4275 015645 fetch 1 ,mem_ssp_enable +0x4276 015646 nbranch app_bt_start_reconnect ,blank +0x4277 015647 jam 0x04 ,mem_connection_options +0x4278 015648 branch app_bt_start_reconnect +: 015650 mouse4_0_check_reconn_target: +0x4279 015651 fetch 2 ,mem_mouse_direct_timeout +0x427a 015652 store 2 ,mem_mouse_direct_timer +0x427b 015653 call mouse_reconn_setting_led_gpio +0x427c 015654 call app_lpm_mult_disable +0x427d 015655 branch check_51cmd_adv +: 015657 mouse_reconn_setting_led_gpio: +0x427e 015658 setarg led_reconnect_blink +0x427f 015659 store 2 ,mem_mouse_on_time +0x4280 015660 store 2 ,mem_mouse_off_time +0x4281 015661 branch mouse_setting_led_gpio_comman +: 015663 mouse_discover_setting_led_gpio: +0x4282 015664 setarg led_discovery_blink +0x4283 015665 store 2 ,mem_mouse_on_time +0x4284 015666 store 2 ,mem_mouse_off_time +: 015667 mouse_setting_led_gpio_comman: +0x4285 015668 fetch 1 ,mem_device_flag +0x4286 015669 beq mode_bt_device1 ,mouse_device_led1 +0x4287 015670 beq mode_bt_device2 ,mouse_device_led2 +0x4288 015671 beq mode_bt_device3 ,mouse_device_led3 +0x4289 015672 rtn +: 015673 mouse_device_led1: +0x428a 015674 fetch 1 ,mem_config_device1_led_gpio +0x428b 015675 branch mouse_led_blink +: 015676 mouse_device_led2: +0x428c 015677 fetch 1 ,mem_config_device2_led_gpio +0x428d 015678 branch mouse_led_blink +: 015679 mouse_device_led3: +0x428e 015680 fetch 1 ,mem_config_device3_led_gpio +: 015681 mouse_led_blink: +0x428f 015682 store 1 ,mem_temp +0x4290 015683 call mouse_devce_led_off +0x4291 015684 fetch 1 ,mem_temp +0x4292 015685 store 1 ,mem_mouse_struct_led_gpio +0x4293 015686 arg 0 ,rega +0x4294 015687 jam ui_led_state_blink_start ,mem_mouse_led_type +0x4295 015688 branch ui_led_blink_start_global +: 015690 mouse_led_off: +0x4296 015691 arg 0 ,rega +0x4297 015692 branch ui_led_off_global +: 015693 mouse_led_on: +0x4298 015694 arg 0 ,rega +0x4299 015695 branch ui_led_on_global +: 015697 mouse4_0_bb_event_discovery_btn: +0x429a 015698 branch mouse_le_clean_connect_flag +: 015700 mouse_bt_hid_handshake: +0x429b 015701 jam app_handshake_done ,mem_app_handshake_flag +0x429c 015702 call app_lpm_mult_enable +0x429d 015703 call app_bt_store_reconn_info +0x429e 015704 setarg 0 +0x429f 015705 store 2 ,mem_discovery_timeout_timer_count +0x42a0 015706 store 1 ,mem_hid_handshake_timer_count +0x42a1 015707 branch app_bt_enter_sniff +: 015709 mouse_check_reconn_target: +0x42a2 015710 call mouse_cheak_select_device_by_switch +0x42a3 015711 fetch 1 ,mem_device_flag +0x42a4 015712 fetcht 1 ,mem_24g_device_number +0x42a5 015713 isub temp ,null +0x42a6 015714 branch mouse_connect_24g_mode ,zero +0x42a7 015715 fetch 1 ,mem_xrecord_mode +0x42a8 015716 beq rec_3_mode ,mouse3_0_check_reconn_target +0x42a9 015717 beq rec_4_mode ,mouse4_0_check_reconn_target +0x42aa 015718 branch mouse_start_discovery +: 015719 mouse_connect_24g_mode: +0x42ab 015720 call mouse_start_24g_mode +0x42ac 015721 rtnmark1 mark_24g +0x42ad 015722 fetch 1 ,mem_reconn_times +0x42ae 015723 nbranch mouse_polling_device ,blank +0x42af 015724 rtn +: 015726 mouse_start_discovery: +0x42b0 015727 bpatch patch1d_3 ,mem_patch1d +0x42b1 015728 fetch 2 ,mem_ui_state_map +0x42b2 015729 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +0x42b3 015730 fetch mouse_flag_len ,mem_mouse_flag +0x42b4 015731 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +0x42b5 015732 random pdata +0x42b6 015733 store 1 ,mem_le_lap + 1 +: 015734 mouse_start_discovery_norandom: +0x42b7 015735 call app_lpm_mult_disable +0x42b8 015736 fetch 2 ,mem_discovery_timeout +0x42b9 015737 store 2 ,mem_mouse_discovery_timer +0x42ba 015738 jam 6 ,mem_connection_options +0x42bb 015739 setarg 0 +0x42bc 015740 store 2 ,mem_mouse_no_data_timer +0x42bd 015741 store 2 ,mem_mouse_direct_timer +0x42be 015742 arg mouse_store_eeprom_flag ,queue +0x42bf 015743 call mouse_enable_function_flag +0x42c0 015744 call mouse_bt_discovery_button_down_disable +0x42c1 015745 fetch 1 ,mem_device_option +0x42c2 015746 isolate1 mode_4_mouse ,pdata +0x42c3 015747 call check_51cmd_adv ,true +0x42c4 015748 fetch 1 ,mem_device_option +0x42c5 015749 isolate1 mode_3_mouse ,pdata +0x42c6 015750 call check_51cmd_start_discovery ,true +0x42c7 015751 fetch mouse_flag_len ,mem_mouse_flag +0x42c8 015752 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink +0x42c9 015753 branch mouse_discover_setting_led_gpio +: 015755 mouse_stop_discovery: +0x42ca 015756 bpatch patch1d_4 ,mem_patch1d +0x42cb 015757 fetch 1 ,mem_device_option +0x42cc 015758 isolate1 mode_4_mouse ,pdata +0x42cd 015759 call mouse_stop_le_adv ,true +0x42ce 015760 fetch 1 ,mem_device_option +0x42cf 015761 isolate1 mode_3_mouse ,pdata +0x42d0 015762 call mouse_stop_bt3_discovery ,true +0x42d1 015763 fetch mouse_flag_len ,mem_mouse_flag +0x42d2 015764 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop +0x42d3 015765 branch mouse_devce_led_off +: 015766 mouse_stop_le_adv: +0x42d4 015767 setarg 0 +0x42d5 015768 store 2 ,mem_mouse_direct_timer +0x42d6 015769 branch check_51cmd_stop_adv +: 015770 mouse_stop_bt3_discovery: +0x42d7 015771 setarg 0 +0x42d8 015772 store 2 ,mem_mouse_discovery_timer +0x42d9 015773 branch check_51cmd_stop_discovery +: 015779 mouse_store_remote_bdaddr: +0x42da 015780 fetch mouse_flag_len ,mem_mouse_flag +0x42db 015781 rtnbit0 mouse_store_eeprom_flag +0x42dc 015782 arg mouse_store_eeprom_flag ,queue +0x42dd 015783 call mouse_disable_function_flag +0x42de 015784 call mouse_check_device_addr +: 015785 mouse_unplug_clean_bdaddr: +0x42df 015786 call mouse_before_store_reconn_info +0x42e0 015787 fetch mouse_flag_len ,mem_mouse_flag +0x42e1 015788 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +0x42e2 015789 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +0x42e3 015790 rtn +: 015791 mouse_store_eeprom_device_info: +0x42e4 015792 arg 88 ,temp +0x42e5 015793 arg mem_device_flag ,rega +0x42e6 015794 arg mouse_info_eeprom_offect ,regb +0x42e7 015795 branch iicd_write_protect_eep_data +: 015797 mouse_check_device_addr: +0x42e8 015798 fetch 1 ,mem_record_bt_mode +0x42e9 015799 beq rec_4_mode ,mouse_check_le_device_addr +0x42ea 015800 beq rec_3_mode ,mouse_check_bt_device_addr +0x42eb 015801 rtn +: 015802 mouse_check_le_device_addr: +0x42ec 015803 store 1 ,mem_device_addr_temp +0x42ed 015804 fetch 6 ,mem_le_plap +0x42ee 015805 branch mouse_check_bt_device_addr_common +: 015806 mouse_check_bt_device_addr: +0x42ef 015807 store 1 ,mem_device_addr_temp +0x42f0 015808 fetch 6 ,mem_plap +: 015809 mouse_check_bt_device_addr_common: +0x42f1 015810 store 6 ,mem_device_addr_temp + 1 +0x42f2 015811 fetch 7 ,mem_device_addr_temp +0x42f3 015812 arg mem_device1_type ,contr +0x42f4 015813 arg 3 ,loopcnt +: 015814 mouse_check_device_addr_end: +0x42f5 015815 ifetcht 7 ,contr +0x42f6 015816 isub temp ,null +0x42f7 015817 branch mouse_clean_addr ,zero +0x42f8 015818 increase 22 ,contr +0x42f9 015819 loop mouse_check_device_addr_end +0x42fa 015820 rtn +: 015821 mouse_before_store_reconn_info: +0x42fb 015822 arg mem_device1_type ,rega +0x42fc 015823 fetch 1 ,mem_device_flag +0x42fd 015824 increase -1 ,pdata +0x42fe 015825 mul32 pdata ,29 ,pdata +0x42ff 015826 iadd rega ,rega +0x4300 015827 fetch 1 ,mem_record_bt_mode +0x4301 015828 istore 1 ,rega +0x4302 015829 beq rec_4_mode ,mouse_store_le_device +0x4303 015830 beq rec_3_mode ,mouse_store_bt_device +0x4304 015831 rtn +: 015833 mouse_store_le_device: +0x4305 015834 fetch 6 ,mem_le_plap +0x4306 015835 istore 6 ,contw +0x4307 015836 arg mem_le_ltk ,contr +0x4308 015837 call memcpy16 +0x4309 015838 fetch 6 ,mem_le_lap +0x430a 015839 istore 6 ,contw +0x430b 015840 rtn +: 015841 mouse_store_bt_device: +0x430c 015842 fetch 6 ,mem_plap +0x430d 015843 istore 6 ,contw +0x430e 015844 arg mem_link_key ,contr +0x430f 015845 branch memcpy16 +: 015847 mouse_clean_addr: +0x4310 015848 increase -6 ,contr +0x4311 015849 copy contr ,contw +0x4312 015850 fetcht 6 ,mem_device_addr_temp + 1 +0x4313 015851 increase 3 ,temp +0x4314 015852 istoret 6 ,contw +0x4315 015853 rtn +: 015857 mouse_eeprom_load_recon_info: +0x4316 015858 arg 88 ,temp +0x4317 015859 arg mem_device_flag ,rega +0x4318 015860 arg mouse_info_eeprom_offect ,regb +0x4319 015861 call iicd_read_eep_data +: 015862 mouse_select_reconn_device: +0x431a 015863 arg mem_device1_type ,rega +0x431b 015864 fetch 1 ,mem_device_flag +0x431c 015865 fetcht 1 ,mem_24g_device_number +0x431d 015866 isub temp ,null +0x431e 015867 rtn zero +0x431f 015868 increase -1 ,pdata +0x4320 015869 mul32 pdata ,29 ,pdata +0x4321 015870 iadd rega ,rega +0x4322 015871 ifetch 1 ,rega +0x4323 015872 store 1 ,mem_xrecord_mode +0x4324 015873 beq rec_3_mode ,mouse_load_bt_device +0x4325 015874 beq rec_4_mode ,mouse_load_le_device +0x4326 015875 rtn +: 015877 mouse_load_bt_device: +0x4327 015878 ifetch 6 ,contr +: 015879 mouse_load_bt_device_end: +0x4328 015880 store 6 ,mem_hci_plap +0x4329 015881 arg mem_link_key ,contw +0x432a 015882 call memcpy16 +0x432b 015883 branch check_link_key_load +: 015885 mouse_load_le_device: +0x432c 015886 ifetch 6 ,contr +: 015887 mouse_load_le_device_end: +0x432d 015888 store 6 ,mem_hci_plap +0x432e 015889 arg mem_le_ltk ,contw +0x432f 015890 call memcpy16 +0x4330 015891 ifetch 6 ,contr +0x4331 015892 store 6 ,mem_le_lap +0x4332 015893 rtn +: 015896 mouse_select_device: +0x4333 015897 fetch 1 ,mem_config_function_enable +0x4334 015898 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button +0x4335 015899 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch +0x4336 015900 branch mouse_select_device_by_combination_key +: 015902 mouse_select_device_by_combination_key: +0x4337 015903 call mouse_check_key_gpio +0x4338 015904 beq mouse_rm_button ,mouse_select_device_commbination_key_down +: 015905 mouse_select_device_commbination_key_up: +0x4339 015906 jam 30 ,mem_combination_select_device_count +0x433a 015907 fetch 1 ,mem_select_device_button_statue +0x433b 015908 rtneq dpi_button_state_up +0x433c 015909 jam dpi_button_state_up ,mem_select_device_button_statue +0x433d 015910 rtn +: 015912 mouse_select_device_commbination_key_down: +0x433e 015913 call mouse_combination_select_device_timer +0x433f 015914 fetch 1 ,mem_select_device_button_statue +0x4340 015915 rtneq dpi_button_state_down +0x4341 015916 jam dpi_button_state_down ,mem_select_device_button_statue +0x4342 015917 branch mouse_select_device_enable +: 015919 mouse_combination_select_device_timer: +0x4343 015920 fetch 1 ,mem_combination_select_device_count +0x4344 015921 rtn blank +0x4345 015922 pincrease -1 +0x4346 015923 store 1 ,mem_combination_select_device_count +0x4347 015924 nrtn blank +0x4348 015925 branch mouse_ready_reconnection_by_button +: 015927 mouse_select_device_by_button: +0x4349 015928 fetch 1 ,mem_config_select_device_button_gpio +0x434a 015929 rtneq gpio_disable +0x434b 015930 fetcht 1 ,mem_config_select_device_button_gpio +0x434c 015931 call gpio_get_bit +0x434d 015932 branch mouse_select_device_button_down ,true +: 015933 mouse_select_device_button_up: +0x434e 015934 fetch 1 ,mem_select_device_button_statue +0x434f 015935 rtneq dpi_button_state_up +0x4350 015936 jam dpi_button_state_up ,mem_select_device_button_statue +0x4351 015937 fetch mouse_flag_len ,mem_mouse_flag +0x4352 015938 rtnbit1 mouse_long_bt_button_flag +0x4353 015939 branch mouse_ready_reconnection_by_button +: 015941 mouse_select_device_button_down: +0x4354 015942 fetch 1 ,mem_select_device_button_statue +0x4355 015943 rtneq dpi_button_state_down +0x4356 015944 jam dpi_button_state_down ,mem_select_device_button_statue +0x4357 015945 arg mouse_long_bt_button_flag ,queue +0x4358 015946 branch mouse_disable_function_flag +: 015950 mouse_select_device_by_switch: +0x4359 015951 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x435a 015952 rtnbit0 enable_select_device_by_switch +0x435b 015953 fetch 1 ,mem_device_flag +0x435c 015954 beq mode_bt_device1 ,mouse_select1_device +0x435d 015955 beq mode_24g_device ,mouse_select2_device +0x435e 015956 rtn +: 015957 mouse_cheak_select_device_by_switch: +0x435f 015958 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x4360 015959 rtnbit0 enable_select_device_by_switch +0x4361 015960 fetcht 1 ,mem_config_select_device_button_gpio +0x4362 015961 call gpio_get_bit +0x4363 015962 branch mouse_cheak_select_24gdevice ,true +: 015963 mouse_select_btdevice: +0x4364 015964 jam mode_bt_device1 ,mem_device_flag +0x4365 015965 rtn +: 015966 mouse_cheak_select_24gdevice: +0x4366 015967 fetch 1 ,mem_24g_device_number +0x4367 015968 store 1 ,mem_device_flag +0x4368 015969 rtn +: 015970 mouse_select1_device: +0x4369 015971 fetcht 1 ,mem_config_select_device_button_gpio +0x436a 015972 nbranch mouse_ready_reconnection_by_button ,true +0x436b 015973 rtn +: 015974 mouse_select2_device: +0x436c 015975 fetcht 1 ,mem_config_select_device_button_gpio +0x436d 015976 call gpio_get_bit +0x436e 015977 branch mouse_select_device_button_down ,true +0x436f 015978 rtn +: 015983 mouse_ready_reconnection_by_button: +0x4370 015984 fetcht 1 ,mem_device_flag +0x4371 015985 increase 1 ,temp +0x4372 015986 fetch 1 ,mem_device_number +0x4373 015987 isub temp ,null +0x4374 015988 ncall mouse_select_device_count_clean ,positive +0x4375 015989 storet 1 ,mem_device_flag +0x4376 015990 jam 0 ,mem_link_key_exists +0x4377 015991 call mouse_store_device_number2eeprom +0x4378 015992 call mouse_select_device_enable +0x4379 015994 branch mouse_set_reconnection +: 015996 mouse_store_device_number2eeprom: +0x437a 015997 arg 1 ,temp +0x437b 015998 arg mem_device_flag ,rega +0x437c 015999 arg 0 ,regb +0x437d 016000 branch iicd_write_eep_data +: 016002 mouse_set_reconnection: +0x437e 016003 call mouse_stop_bluetooth_mode +0x437f 016004 call mouse_select_device_disable +0x4380 016005 branch mouse_soft_reset +: 016006 mouse_stop_bluetooth_mode: +0x4381 016007 fetch 2 ,mem_ui_state_map +0x4382 016008 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x4383 016009 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x4384 016010 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x4385 016011 branch mouse_stop_discovery +: 016013 mouse_disconnect: +0x4386 016014 bpatch patch1d_5 ,mem_patch1d +0x4387 016015 setarg 0 +0x4388 016016 store 2 ,mem_mouse_no_data_timer +0x4389 016017 fetch 2 ,mem_ui_state_map +0x438a 016018 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x438b 016019 fetch 2 ,mem_ui_state_map +0x438c 016020 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x438d 016021 rtn +: 016023 mouse_irtual_cable_unplug: +0x438e 016024 setarg 0x01 +0x438f 016025 store 6 ,mem_plap +0x4390 016026 jam rec_3_mode ,mem_record_bt_mode +0x4391 016027 branch mouse_unplug_clean_bdaddr +: 016030 mouse_cancel_reconnect: +0x4392 016031 call mouse_bt_cannel_reconn_enable +0x4393 016032 branch check_51cmd_bb_reconn_cancel +: 016034 mouse_bt_discovery_by_button: +0x4394 016035 fetch 1 ,mem_config_bt_button_gpio +0x4395 016036 rtneq gpio_disable +0x4396 016037 fetcht 1 ,mem_config_bt_button_gpio +0x4397 016038 call gpio_get_bit +0x4398 016039 branch mouse_bt_discovery_button_down ,true +: 016040 mouse_bt_discovery_button_up: +0x4399 016041 fetch 1 ,mem_ui_button_timeout +0x439a 016042 store 1 ,mem_combination_ui_button_count +0x439b 016043 fetch 1 ,mem_bt_discovey_button_statue +0x439c 016044 rtneq dpi_button_state_up +0x439d 016045 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x439e 016046 branch mouse_bt_discovery_button_down_disable +: 016047 mouse_bt_discovery_button_down: +0x439f 016048 call mouse_bt_discovry_timer +0x43a0 016049 fetch 1 ,mem_bt_discovey_button_statue +0x43a1 016050 rtneq dpi_button_state_down +0x43a2 016051 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43a3 016052 call check_51cmd_bb_reconn_cancel +0x43a4 016053 branch mouse_bt_discovery_button_down_enable +: 016056 mouse_bt_discovery_cheak: +0x43a5 016057 fetch 1 ,mem_config_function_enable +0x43a6 016058 bbit1 enable_bt_button ,mouse_bt_discovery_by_button +: 016059 mouse_bt_discovery_commbination_key: +0x43a7 016060 call mouse_check_key_gpio +0x43a8 016061 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down +: 016062 mouse_bt_discovery_commbination_key_up: +0x43a9 016063 fetch 1 ,mem_ui_button_timeout +0x43aa 016064 store 1 ,mem_combination_ui_button_count +0x43ab 016065 fetch 1 ,mem_bt_discovey_button_statue +0x43ac 016066 rtneq dpi_button_state_up +0x43ad 016067 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x43ae 016068 branch mouse_bt_discovery_button_down_disable +: 016071 mouse_bt_discovery_commbination_key_down: +0x43af 016072 call mouse_bt_discovry_timer +0x43b0 016073 fetch 1 ,mem_bt_discovey_button_statue +0x43b1 016074 rtneq dpi_button_state_down +0x43b2 016075 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43b3 016076 call check_51cmd_bb_reconn_cancel +0x43b4 016077 branch mouse_bt_discovery_button_down_enable +: 016079 mouse_bt_discovry_timer: +0x43b5 016080 arg mem_combination_ui_button_count ,regc +0x43b6 016081 arg mouse_long_button_bt_discovry ,regb +0x43b7 016082 branch timer_single_step +: 016084 mouse_long_button_bt_discovry: +0x43b8 016085 arg mouse_long_bt_button_flag ,queue +0x43b9 016086 call mouse_enable_function_flag +0x43ba 016087 call app_evt_button_long_pressed +0x43bb 016088 branch mouse_bb_event_discovery_btn +: 016091 mouse_cpi_enable: +0x43bc 016092 arg mouse_cpi_flag ,queue +0x43bd 016093 branch mouse_enable_function_flag +: 016094 mouse_cpi_disable: +0x43be 016095 arg mouse_cpi_flag ,queue +0x43bf 016096 branch mouse_disable_function_flag +: 016097 mouse_select_device_enable: +0x43c0 016098 arg mouse_select_device_flag ,queue +0x43c1 016099 branch mouse_enable_function_flag +: 016100 mouse_select_device_disable: +0x43c2 016101 arg mouse_select_device_flag ,queue +0x43c3 016102 branch mouse_disable_function_flag +: 016103 mouse_bt_cannel_reconn_enable: +0x43c4 016104 arg mouse_bt_cannel_reconn_flag ,queue +0x43c5 016105 branch mouse_enable_function_flag +: 016106 mouse_bt_cannel_reconn_disable: +0x43c6 016107 arg mouse_bt_cannel_reconn_flag ,queue +0x43c7 016108 branch mouse_disable_function_flag +: 016109 mouse_bt_discovery_button_down_enable: +0x43c8 016110 arg mouse_bt_discovery_button_down_flag ,queue +0x43c9 016111 branch mouse_enable_function_flag +: 016112 mouse_bt_discovery_button_down_disable: +0x43ca 016113 arg mouse_bt_discovery_button_down_flag ,queue +0x43cb 016114 branch mouse_disable_function_flag +: 016118 mouse_select_device_count_clean: +0x43cc 016119 arg 1 ,temp +0x43cd 016120 rtn +: 016122 mouse_enable_function_flag: +0x43ce 016123 fetch mouse_flag_len ,mem_mouse_flag +0x43cf 016124 qset1 pdata +0x43d0 016125 store mouse_flag_len ,mem_mouse_flag +0x43d1 016126 rtn +: 016128 mouse_disable_function_flag: +0x43d2 016129 fetch mouse_flag_len ,mem_mouse_flag +0x43d3 016130 qset0 pdata +0x43d4 016131 store mouse_flag_len ,mem_mouse_flag +0x43d5 016132 rtn +: 016134 mouse_adc_read: +0x43d6 016135 fetch mouse_flag_len ,mem_mouse_flag +0x43d7 016136 rtnbit0 mouse_enable_adc +0x43d8 016137 fetch 1 ,mem_adc_read_timer +0x43d9 016138 increase 1 ,pdata +0x43da 016139 store 1 ,mem_adc_read_timer +0x43db 016140 sub pdata ,10 ,null +0x43dc 016141 rtn positive +0x43dd 016142 jam 0 ,mem_adc_read_timer +0x43de 016143 call adc_set_mode +0x43df 016144 call vdd_calculate_by_mode +0x43e0 016145 store 2 ,mem_mouse_vdd_now_vol +0x43e1 016146 arg mem_mouse_vdd_calculate_set ,rega +0x43e2 016147 call adc_bat_percent_lowpower_out +0x43e3 016148 fetch 1 ,mem_adc_power_flag +0x43e4 016149 bbit1 1 ,mouse_power_down +0x43e5 016150 bbit0 0 ,mouse_adc_no_low_voltage +0x43e6 016151 branch mouse_adc_low_voltage +: 016152 mouse_adc_low_voltage: +0x43e7 016153 arg mouse_low_voltage_flag ,queue +0x43e8 016154 branch mouse_enable_function_flag +: 016155 mouse_adc_no_low_voltage: +0x43e9 016156 arg mouse_low_voltage_flag ,queue +0x43ea 016157 branch mouse_disable_function_flag +: 016159 mouse_low_voltage_led_timer: +0x43eb 016160 fetch mouse_flag_len ,mem_mouse_flag +0x43ec 016161 rtnbit0 mouse_low_voltage_flag +0x43ed 016162 fetch 1 ,mem_config_low_voltage_alarm_gpio +0x43ee 016163 store 1 ,mem_mouse_struct_led_gpio +0x43ef 016164 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x43f0 016165 pincrease 1 +0x43f1 016166 store 1 ,mem_adc_low_volatage_led_timer_count +0x43f2 016167 sub pdata ,20 ,null +0x43f3 016168 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +0x43f4 016169 beq 2 ,mouse_low_voltage_led_on +0x43f5 016170 beq 4 ,mouse_low_voltage_led_off +0x43f6 016171 beq 6 ,mouse_low_voltage_led_on +0x43f7 016172 beq 8 ,mouse_low_voltage_led_off +0x43f8 016173 rtn +: 016174 mouse_adc_low_volatage_led_timer_count_clean: +0x43f9 016175 jam 1 ,mem_adc_low_volatage_led_timer_count +0x43fa 016176 branch mouse_low_voltage_led_off +: 016177 mouse_low_voltage_led_on: +0x43fb 016178 arg 0 ,rega +0x43fc 016179 jam ui_led_state_lighting ,mem_mouse_led_type +0x43fd 016180 branch ui_led_on_global +: 016181 mouse_low_voltage_led_off: +0x43fe 016182 arg 0 ,rega +0x43ff 016183 jam ui_led_state_lighting ,mem_mouse_led_type +0x4400 016184 branch ui_led_off_global +: 016186 mouse_g24_package_data: +0x4401 016187 call mouse_motion +0x4402 016188 nrtn user +0x4403 016189 arg 7 ,rega +0x4404 016190 arg mem_mouse_key ,regb +0x4405 016191 rtn +: 016193 mouse_g24_enter_lpm: +0x4406 016194 fetch 1 ,mem_mouse_24g_enter_lpm_enable +0x4407 016195 rtn blank +0x4408 016197 fetcht 1 ,mem_dpi_button_gpio +0x4409 016198 call gpio_get_bit +0x440a 016199 call mouse_24g_dpi_delay_init ,true +0x440b 016200 fetch 1 ,mem_24g_enter_lpm_timer +0x440c 016201 nrtn blank +0x440d 016202 call mouse_check_key_gpio +0x440e 016203 nrtn blank +0x440f 016204 branch g24_lpm_long_sleep +: 016206 mouse_24g_dpi_delay_init: +0x4410 016207 fetch 1 ,mem_dpi_button_gpio +0x4411 016208 rtneq ui_button_gpio_disable +0x4412 016209 jam 10 ,mem_24g_enter_lpm_timer +0x4413 016210 rtn +: 016213 mouse_load_flash_info_cheak: +0x4414 016214 call mouse_load_flash_flag +0x4415 016215 fetch 2 ,mem_store_flag +0x4416 016216 arg eeprom_init_flag ,temp +0x4417 016217 isub temp ,null +0x4418 016218 branch mouse_load_flash_device_info ,zero +0x4419 016219 storet 2 ,mem_store_flag +0x441a 016220 call mouse_ble_init_address +0x441b 016221 branch mouse_store_flash_device_info +: 016222 mouse_ble_init_address: +0x441c 016223 fetch 6 ,mem_le_lap +0x441d 016224 store 6 ,mem_device1_locall_addr +0x441e 016225 add pdata ,0x0100 ,pdata +0x441f 016226 store 6 ,mem_device2_locall_addr +0x4420 016227 add pdata ,0x0100 ,pdata +0x4421 016228 store 6 ,mem_device3_locall_addr +0x4422 016229 rtn +: 016232 mouse_load_flash_flag: +0x4423 016233 setarg mem_store_flag +0x4424 016234 arg mem_mouse_information_start ,temp +0x4425 016235 isub temp ,temp +0x4426 016236 fetch 3 ,mem_flash_base +0x4427 016237 iadd temp ,pdata +0x4428 016238 arg 2 ,temp +0x4429 016239 arg mem_store_flag ,rega +0x442a 016240 branch spid_read_flash +: 016243 mouse_load_flash_device_info: +0x442b 016244 setarg mem_mouse_information_end +0x442c 016245 arg mem_mouse_information_start ,temp +0x442d 016246 isub temp ,temp +0x442e 016247 fetch 3 ,mem_flash_base +0x442f 016248 arg mem_mouse_information_start ,rega +0x4430 016249 call spid_read_flash +0x4431 016250 call mouse_select_reconn_device +0x4432 016251 fetch 4 ,mem_mouse_24g_addr +0x4433 016252 call g24_head_ptr2regc +0x4434 016253 branch g24_store_mem_addr +: 016255 mouse_store_flash_device_info: +0x4435 016256 setarg mem_mouse_information_end +0x4436 016257 arg mem_mouse_information_start ,temp +0x4437 016258 isub temp ,temp +0x4438 016259 arg mem_mouse_information_start ,rega +0x4439 016260 fetch 3 ,mem_flash_base +0x443a 016261 branch flash_write +: 016263 mouse_store_eerpom_dpi: +0x443b 016264 arg 1 ,temp +0x443c 016265 arg mem_mouse_dpi ,rega +0x443d 016266 arg mouse_dpi_eeprom_offect ,regb +0x443e 016267 branch iicd_write_protect_eep_data +: 016269 mouse_load_eeprom_dpi: +0x443f 016270 arg 1 ,temp +0x4440 016271 arg mem_mouse_dpi ,rega +0x4441 016272 arg mouse_dpi_eeprom_offect ,regb +0x4442 016273 branch iicd_read_eep_data +: 016275 mouse_statue_cheak_timer: +0x4443 016276 rtnmark1 mark_24g +0x4444 016277 fetch mouse_flag_len ,mem_mouse_flag +0x4445 016278 rtnbit0 mouse_enable_statue_up +0x4446 016279 fetch 1 ,mem_mouse_1step_up_count +0x4447 016280 pincrease 1 +0x4448 016281 and pdata ,0x07 ,pdata +0x4449 016282 store 1 ,mem_mouse_1step_up_count +0x444a 016283 rtnne 0x07 +0x444b 016284 fetch 2 ,mem_ui_state_map +0x444c 016285 bbit1 ui_state_bt_connected ,mouse_check_statue_up +0x444d 016286 bbit1 ui_state_ble_connected ,mouse_check_statue_up +0x444e 016287 rtn +: 016292 mouse_check_statue_up: +0x444f 016293 bpatch patch1d_6 ,mem_patch1d +0x4450 016294 fetch 1 ,mem_mouse_2step_up_count +0x4451 016295 nrtn blank +0x4452 016296 fetch mouse_flag_len ,mem_mouse_flag +0x4453 016297 rtnbit0 mouse_statue_up_flag +0x4454 016298 fetch 1 ,mem_sensor_squal_reg +0x4455 016299 call sensor_read +0x4456 016300 store 1 ,mem_sensor_iqc +0x4457 016301 sub pdata ,0x10 ,null +0x4458 016302 branch mouse_statue_up_timer_init ,positive +0x4459 016303 jam 0 ,mem_mouse_2step_up_count +0x445a 016304 rtn +: 016306 mouse_statue_up_timer_init: +0x445b 016307 jam 30 ,mem_mouse_2step_up_count +0x445c 016308 rtn +: 016309 mouse_statue_up_timer: +0x445d 016310 arg mem_mouse_2step_up_count ,regc +0x445e 016311 arg mouse_statue_up ,regb +0x445f 016312 branch timer_single_step +: 016314 mouse_statue_up: +0x4460 016315 fetch 1 ,mem_sensor_squal_reg +0x4461 016316 call twspi_read +0x4462 016317 sub pdata ,0x10 ,null +0x4463 016318 nrtn positive +0x4464 016319 fetch mouse_flag_len ,mem_mouse_flag +0x4465 016320 rtnbit0 mouse_statue_up_flag +0x4466 016321 arg mouse_statue_up_flag ,queue +0x4467 016322 call mouse_disable_function_flag +0x4468 016323 jam 0 ,mem_lpm_mult +0x4469 016324 jam 30 ,mem_mouse_statue_led_timer +0x446a 016325 call mouse_devce_led_off +0x446b 016326 fetch mouse_flag_len ,mem_mouse_flag +0x446c 016327 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up +: 016328 mouse_two_device_statue_up: +0x446d 016329 fetch 1 ,mem_device_flag +0x446e 016330 beq mode_bt_device1 ,mouse_device1_led_on +0x446f 016331 beq mode_bt_device2 ,mouse_device_blink_led_init +0x4470 016332 rtn +: 016333 mouse_three_device_statue_up: +0x4471 016334 fetch 1 ,mem_device_flag +0x4472 016335 beq mode_bt_device1 ,mouse_device1_led_on +0x4473 016336 beq mode_bt_device2 ,mouse_device2_led_on +0x4474 016337 beq mode_bt_device3 ,mouse_device3_led_on +0x4475 016338 rtn +: 016340 mouse_device_blink_led_init: +0x4476 016341 fetch 1 ,mem_config_device1_led_gpio +0x4477 016342 branch mouse_led_blink +: 016346 mouse_statue_led_off: +0x4478 016347 jam 0x20 ,mem_lpm_mult +0x4479 016348 branch mouse_devce_led_off +: 016352 mouse_devce1_led_off: +0x447a 016353 fetch 1 ,mem_config_device1_led_gpio +0x447b 016354 rtneq gpio_disable +0x447c 016355 store 1 ,mem_mouse_struct_led_gpio +0x447d 016356 branch mouse_led_off +: 016358 mouse_devce2_led_off: +0x447e 016359 fetch 1 ,mem_config_device2_led_gpio +0x447f 016360 rtneq gpio_disable +0x4480 016361 store 1 ,mem_mouse_struct_led_gpio +0x4481 016362 branch mouse_led_off +: 016364 mouse_devce_led_off: +0x4482 016365 call mouse_led_off +0x4483 016366 call mouse_devce1_led_off +0x4484 016367 call mouse_devce2_led_off +: 016368 mouse_devce3_led_off: +0x4485 016369 fetch 1 ,mem_config_device3_led_gpio +0x4486 016370 rtneq gpio_disable +0x4487 016371 store 1 ,mem_mouse_struct_led_gpio +0x4488 016372 branch mouse_led_off +: 016374 mouse_device1_led_on: +0x4489 016375 fetch 1 ,mem_config_device1_led_gpio +0x448a 016376 store 1 ,mem_mouse_struct_led_gpio +0x448b 016377 branch mouse_led_on +: 016378 mouse_device2_led_on: +0x448c 016379 fetch 1 ,mem_config_device2_led_gpio +0x448d 016380 store 1 ,mem_mouse_struct_led_gpio +0x448e 016381 branch mouse_led_on +: 016382 mouse_device3_led_on: +0x448f 016383 fetch 1 ,mem_config_device3_led_gpio +0x4490 016384 store 1 ,mem_mouse_struct_led_gpio +0x4491 016385 branch mouse_led_on +: 016389 mouse_polling_device: +0x4492 016390 bpatch patch1d_7 ,mem_patch1d +0x4493 016391 fetch 1 ,mem_reconn_times +0x4494 016392 increase -1 ,pdata +0x4495 016393 store 1 ,mem_reconn_times +0x4496 016394 fetcht 1 ,mem_device_flag +0x4497 016395 increase 1 ,temp +0x4498 016396 fetch 1 ,mem_device_number +0x4499 016397 isub temp ,null +0x449a 016398 ncall mouse_select_device_count_clean ,positive +0x449b 016399 storet 1 ,mem_device_flag +0x449c 016400 jam 0 ,mem_link_key_exists +0x449d 016401 call mouse_store_device_number2eeprom +0x449e 016402 call mouse_before_store_reconn_info +0x449f 016403 branch mouse_check_reconn_target +: 016405 mouse_power_down: +0x44a0 016406 call mouse_devce_led_off +0x44a1 016407 setarg 0 +0x44a2 016408 store 8 ,mem_gpio_wakeup_low +0x44a3 016409 branch lpm_hibernate +: 016420 remote_car_init: +0x44a4 016421 rtn wake +0x44a5 016422 hfetch 1 ,core_gpio_sel1 +0x44a6 016423 and_into 0xf0 ,pdata +0x44a7 016424 hstore 1 ,core_gpio_sel1 +0x44a8 016425 call keyscan_key_init +0x44a9 016426 setarg remote_car_le_before_hibernate +0x44aa 016427 store 2 ,mem_cb_before_hibernate +0x44ab 016429 setarg remote_car_process_lpm_before +0x44ac 016430 store 2 ,mem_cb_before_lpm +0x44ad 016432 setarg remote_car_scale_process_idle +0x44ae 016433 store 2 ,mem_cb_idle_process +0x44af 016435 setarg remote_car_scale_process_bb_event +0x44b0 016436 store 2 ,mem_cb_bb_event_process +0x44b1 016438 setarg app_get_lpm_wake_lock +0x44b2 016439 store 2 ,mem_cb_check_wakelock +0x44b3 016441 call g24_head_ptr2regc +0x44b4 016442 setarg remote_car_g24_package_data +0x44b5 016443 add regc ,offset_24g_cb_data ,contw +0x44b6 016444 istore 2 ,contw +0x44b7 016446 setarg remote_car_g24_enter_lpm +0x44b8 016447 add regc ,offset_24g_cb_lpm_prepare ,contw +0x44b9 016448 istore 2 ,contw +0x44ba 016450 setarg remote_car_process_lpm_before +0x44bb 016451 add regc ,offset_24g_cb_lpm_before ,contw +0x44bc 016452 istore 2 ,contw +0x44bd 016454 setarg remote_car_event_timer +0x44be 016455 store 2 ,mem_cb_event_timer +0x44bf 016457 setarg remote_car_power_off_signal +0x44c0 016458 store 2 ,mem_remote_car_power_off_cb +0x44c1 016460 setarg remote_car_soft_switch_power_on_signal +0x44c2 016461 store 2 ,mem_remote_car_power_standby_cb +0x44c3 016463 setarg remote_car_send_key_data +0x44c4 016464 store 2 ,mem_cb_remote_car_keyscan +0x44c5 016466 bpatch patch1e_0 ,mem_patch1e +0x44c6 016467 call remote_car_init_environment +0x44c7 016468 call queue_init +0x44c8 016469 jam 2 ,mem_lpm_mult +0x44c9 016470 fetch 1 ,mem_remote_car_config_soft_switch_enable +0x44ca 016471 store 1 ,mem_remote_car_hard_soft_switch +0x44cb 016472 beq hard_switch ,remote_car_hard_switch_power_on_signal +0x44cc 016473 fetch 1 ,mem_remote_car_config_soft_switch_gpio +0x44cd 016474 store 1 ,mem_ui_button_gpio +: 016475 remote_car_soft_switch_power_on_init: +0x44ce 016476 call remote_car_ui_led_init +0x44cf 016477 call ui_button_init +0x44d0 016478 call ui_button_polling +0x44d1 016479 jam power_starting ,mem_remote_car_power_state +0x44d2 016480 fetch 2 ,mem_ui_state_map +0x44d3 016481 rtnbit1 ui_state_btn_down +0x44d4 016482 branch app_enter_hibernate +: 016486 remote_car_hard_switch_power_on_signal: +0x44d5 016487 jam power_standby ,mem_remote_car_power_state +: 016488 remote_car_soft_switch_power_on_signal: +0x44d6 016489 call remote_car_ui_led_init +0x44d7 016491 arg 0 ,rega +0x44d8 016492 call ui_led_blink_start_global +: 016493 remote_car_connect_24g_mode: +0x44d9 016494 branch g24_auto_pair_start +: 016496 remote_car_power_off_signal: +0x44da 016497 branch remote_car_ui_led_init +: 016499 remote_car_ui_led_init: +0x44db 016500 bpatch patch1e_1 ,mem_patch1e +0x44dc 016501 fetch 1 ,mem_remote_car_config_connect_led_gpio +0x44dd 016502 bne invalid_pin_num ,remote_car_pairing_led_gpio_set +: 016503 remote_car_ui_led_init_1: +0x44de 016504 fetcht 1 ,mem_remote_car_led_map +0x44df 016505 branch gpio_config_output +: 016506 remote_car_pairing_led_gpio_set: +0x44e0 016507 store 1 ,mem_remote_car_led_map +0x44e1 016508 branch remote_car_ui_led_init_1 +: 016511 remote_car_init_environment: +0x44e2 016512 call g24_set_device_addr +0x44e3 016513 fetch 2 ,mem_remote_car_no_data_timeout +0x44e4 016514 store 2 ,mem_remote_car_no_data_timer +0x44e5 016515 branch remote_car_get_adc_default_data +: 016517 remote_car_le_before_hibernate: +: 016522 remote_car_in_enter_hibernate: +0x44e6 016523 call gpio_set_before_lpm_common +0x44e7 016524 call remote_car_process_lpm_before +0x44e8 016525 branch app_enter_hibernate +: 016527 remote_car_process_lpm_before: +0x44e9 016528 branch keyscan_process_lpm_before +: 016530 remote_car_g24_enter_lpm: +0x44ea 016531 fetch 1 ,mem_remote_car_24g_enter_lpm_enable +0x44eb 016532 rtn blank +0x44ec 016534 branch g24_lpm_long_sleep +: 016536 remote_car_process_auto_pair_exit: +0x44ed 016537 rtn +: 016539 remote_car_key_scan_process: +0x44ee 016540 branch keyscan_key_process +: 016542 remote_car_scale_process_idle: +0x44ef 016543 call remote_car_rocker_process +0x44f0 016544 call remote_car_24g_status_process +0x44f1 016545 branch remote_car_key_scan_process +: 016547 remote_car_scale_process_bb_event: +0x44f2 016548 copy regc ,pdata +0x44f3 016549 beq bt_evt_button_up ,app_event_button_up +0x44f4 016550 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x44f5 016551 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +0x44f6 016552 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +0x44f7 016553 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +0x44f8 016554 rtn +: 016556 remote_car_24g_attempt_fail: +0x44f9 016557 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fa 016558 rtn +: 016560 remote_car_24g_pairing_complete: +0x44fb 016561 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fc 016562 jam work_paired ,mem_remote_car_24g_auto_work_step +0x44fd 016563 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x44fe 016564 rtn +: 016566 remote_car_24g_attempt_success: +0x44ff 016567 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x4500 016568 jam work_paired ,mem_remote_car_24g_auto_work_step +0x4501 016569 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x4502 016570 rtn +: 016572 remote_car_24g_status_process: +0x4503 016573 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4504 016574 rtneq power_on +0x4505 016575 fetch 1 ,mem_remote_car_24g_status +0x4506 016576 rtneq work_paired +0x4507 016577 jam work_paired ,mem_remote_car_24g_status +: 016578 remote_car_scale_process_paired: +0x4508 016579 arg 0 ,rega +0x4509 016580 branch ui_led_off_global +: 016581 remote_car_scale_process_shutdown: +0x450a 016582 arg 0 ,rega +0x450b 016583 call ui_led_off_global +0x450c 016584 call remote_car_ui_led_init +0x450d 016585 branch app_enter_hibernate +: 016587 remote_car_event_timer: +0x450e 016588 call app_power_timer +0x450f 016589 branch remote_car_no_data_timer +: 016591 remote_car_no_data_timer: +0x4510 016592 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +0x4511 016593 rtn blank +0x4512 016594 arg mem_remote_car_no_data_timer ,regc +0x4513 016595 arg remote_car_scale_process_shutdown ,regb +0x4514 016596 branch timer_single_step_2b +: 016599 remote_car_get_adc_default_data: +0x4515 016600 call remote_car_rocker_get_x +0x4516 016601 storet 2 ,mem_current_vdd_value_default_mid_x +0x4517 016602 call remote_car_rocker_get_y +0x4518 016603 storet 2 ,mem_current_vdd_value_default_mid_y +0x4519 016604 rtn +: 016605 remote_car_rocker_data_get: +: 016606 remote_car_rocker_get_x: +0x451a 016607 fetch 2 ,mem_current_vdd_value_default_mid_x +0x451b 016608 store 2 ,mem_current_vdd_value_default_mid_temp +0x451c 016609 call remote_car_get_adc_from_gpio6 +0x451d 016610 call remote_car_rocker_get_value +0x451e 016611 store 1 ,mem_rocker_status +: 016612 remote_car_rocker_get_y: +0x451f 016613 fetch 2 ,mem_current_vdd_value_default_mid_y +0x4520 016614 store 2 ,mem_current_vdd_value_default_mid_temp +0x4521 016615 call remote_car_get_adc_from_gpio7 +0x4522 016616 call remote_car_rocker_get_value +0x4523 016617 store 1 ,mem_rocker_status + 1 +0x4524 016618 rtn +: 016619 remote_car_rocker_get_value: +0x4525 016620 fetch 2 ,mem_current_vdd_default_range +0x4526 016621 copy pdata ,rega +0x4527 016622 fetch 2 ,mem_current_vdd_value_default_mid_temp +0x4528 016623 call remote_car_rocker_mid_value_adjust +0x4529 016624 fetch 1 ,mem_rocker_work_status +0x452a 016625 nbranch remote_car_rocker_translate_key ,blank +0x452b 016626 nrtn positive +0x452c 016627 fetcht 2 ,mem_current_vdd_value_default_mid_temp +0x452d 016628 rtn +: 016629 remote_car_rocker_mid_value_adjust: +0x452e 016630 isub temp ,pdata +0x452f 016631 branch remote_car_rocker_mid_adjust_positive ,positive +0x4530 016632 sub pdata ,0 ,pdata +0x4531 016633 jam 1 ,mem_rocker_negative_flag +0x4532 016634 isub rega ,null +0x4533 016635 rtn +: 016636 remote_car_rocker_mid_adjust_positive: +0x4534 016637 jam 0 ,mem_rocker_negative_flag +0x4535 016638 isub rega ,null +0x4536 016639 rtn +: 016640 remote_car_rocker_translate_key: +0x4537 016641 nbranch remote_car_rocker_middle_key ,positive +0x4538 016642 fetch 1 ,mem_rocker_negative_flag +0x4539 016643 nbranch remote_car_rocker_negative_key ,blank +: 016644 remote_car_rocker_positive_key: +0x453a 016645 setarg rocker_positive_key +0x453b 016646 rtn +: 016647 remote_car_rocker_negative_key: +0x453c 016648 setarg rocker_negative_key +0x453d 016649 rtn +: 016650 remote_car_rocker_middle_key: +0x453e 016651 setarg rocker_middle_key +0x453f 016652 rtn +: 016653 remote_car_get_adc_from_gpio6: +0x4540 016654 jam 0x33 ,mem_adc_channel +0x4541 016655 branch adc_set_mode +: 016656 remote_car_get_adc_from_gpio7: +0x4542 016657 jam 0x34 ,mem_adc_channel +0x4543 016658 branch adc_set_mode +: 016661 remote_car_rocker_process: +0x4544 016662 fetch 1 ,mem_remote_car_config_check_way +0x4545 016663 rtnne car_remote_check_rocker +: 016664 remote_car_read_rocker_check_start: +0x4546 016665 bpatch patch1e_2 ,mem_patch1e +0x4547 016666 jam 1 ,mem_rocker_work_status +0x4548 016667 call remote_car_rocker_data_get +0x4549 016668 fetch 2 ,mem_rocker_status +0x454a 016669 fetcht 2 ,mem_rocker_last_status +0x454b 016670 isub temp ,null +0x454c 016671 rtn zero +0x454d 016672 store 2 ,mem_rocker_last_status +0x454e 016673 call remote_car_rocker_x_to_key +0x454f 016674 branch remote_car_rocker_y_to_key +: 016676 remote_car_rocker_x_to_key: +0x4550 016677 fetch 1 ,mem_rocker_x_status +0x4551 016678 branch rocker_to_queue_set_0 ,blank +0x4552 016679 increase -1 ,pdata +0x4553 016680 branch remote_car_rocker_to_key +: 016681 remote_car_rocker_y_to_key: +0x4554 016682 fetch 1 ,mem_rocker_y_status +0x4555 016683 branch rocker_to_queue_set_2 ,blank +0x4556 016684 increase 1 ,pdata +: 016685 remote_car_rocker_to_key: +0x4557 016686 copy pdata ,queue +0x4558 016687 arg 1 ,rega +0x4559 016688 branch remote_car_send_key_data +: 016690 rocker_to_queue_set_0: +0x455a 016691 arg 0 ,queue +0x455b 016692 arg 0 ,rega +0x455c 016693 branch remote_car_send_key_data +: 016694 rocker_to_queue_set_2: +0x455d 016695 arg 2 ,queue +0x455e 016696 arg 0 ,rega +0x455f 016697 branch remote_car_send_key_data +: 016699 remote_car_send_key_data: +0x4560 016700 copy rega ,pdata +0x4561 016701 store 1 ,mem_remote_key_status +0x4562 016702 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4563 016703 beq power_on ,g24_auto_pair_start +0x4564 016704 fetch 2 ,mem_remote_car_no_data_timeout +0x4565 016705 store 2 ,mem_remote_car_no_data_timer +0x4566 016706 fetch 1 ,mem_remote_key_status +0x4567 016707 branch remote_car_key_is_release ,blank +: 016708 remote_car_key_is_press: +0x4568 016709 bpatch patch1e_3 ,mem_patch1e +0x4569 016710 arg 0 ,rega +0x456a 016711 call ui_led_on_global +: 016712 remote_car_attack_key_press: +0x456b 016713 copy queue ,pdata +0x456c 016714 beq 4 ,remote_car_send_attack_key4_press +0x456d 016715 beq 5 ,remote_car_send_attack_key5_press +0x456e 016716 beq 6 ,remote_car_send_fire_key6_press +: 016719 remote_car_motor_key_press: +0x456f 016720 call remote_car_device_layout_select +0x4570 016721 beq control_f_b_ten ,remote_car_single_motor_key_is_press +0x4571 016722 beq control_l_r_ten ,remote_car_double_motor_key_press +0x4572 016723 beq control_l_r_lr ,remote_car_single_motor_key_is_press +0x4573 016724 rtn +: 016726 remote_car_single_motor_key_is_press: +0x4574 016727 copy queue ,pdata +0x4575 016728 beq 0 ,remote_car_send_motor1_key0_press +0x4576 016729 beq 1 ,remote_car_send_motor1_key1_press +0x4577 016730 beq 2 ,remote_car_send_motor2_key2_press +0x4578 016731 beq 3 ,remote_car_send_motor2_key3_press +0x4579 016732 rtn +: 016734 remote_car_double_motor_key_press: +0x457a 016735 copy queue ,pdata +0x457b 016736 beq 0 ,remote_car_send_double_motor_key0_press +0x457c 016737 beq 1 ,remote_car_send_double_motor_key1_press +0x457d 016738 beq 2 ,remote_car_send_double_motor_key2_press +0x457e 016739 beq 3 ,remote_car_send_double_motor_key3_press +0x457f 016740 rtn +: 016742 remote_car_key_is_release: +0x4580 016743 bpatch patch1e_4 ,mem_patch1e +0x4581 016744 arg 0 ,rega +0x4582 016745 call ui_led_off_global +: 016746 remote_car_attack_key_release: +0x4583 016747 copy queue ,pdata +0x4584 016748 beq 4 ,remote_car_send_attack_key4_rel +0x4585 016749 beq 5 ,remote_car_send_attack_key5_rel +: 016752 remote_car_motor_key_release: +0x4586 016753 call remote_car_device_layout_select +0x4587 016754 beq control_f_b_ten ,remote_car_single_motor_key_rel +0x4588 016755 beq control_l_r_ten ,remote_car_double_motor_key_rel +0x4589 016756 beq control_l_r_lr ,remote_car_single_motor_key_rel +0x458a 016757 rtn +: 016759 remote_car_device_layout_select: +0x458b 016760 fetch 1 ,mem_remote_car_config_layout +0x458c 016761 fetcht 1 ,mem_remote_car_config_key_map +0x458d 016762 ior temp ,pdata +0x458e 016763 rtn +: 016766 remote_car_send_motor1_key0_press: +0x458f 016767 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4590 016768 branch remote_car_send_key +: 016769 remote_car_send_motor1_key1_press: +0x4591 016770 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x4592 016771 branch remote_car_send_key +: 016772 remote_car_send_motor2_key2_press: +0x4593 016773 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4594 016774 branch remote_car_send_key +: 016775 remote_car_send_motor2_key3_press: +0x4595 016776 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x4596 016777 branch remote_car_send_key +: 016780 remote_car_send_double_motor_key0_press: +0x4597 016781 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4598 016782 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4599 016783 branch remote_car_send_key +: 016784 remote_car_send_double_motor_key1_press: +0x459a 016785 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459b 016786 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x459c 016787 branch remote_car_send_key +: 016788 remote_car_send_double_motor_key2_press: +0x459d 016789 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459e 016790 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x459f 016791 branch remote_car_send_key +: 016792 remote_car_send_double_motor_key3_press: +0x45a0 016793 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x45a1 016794 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x45a2 016795 branch remote_car_send_key +: 016798 remote_car_send_attack_key4_press: +0x45a3 016799 jam motor_positive ,mem_remote_car_24g_motor3_payload +0x45a4 016800 branch remote_car_send_key +: 016801 remote_car_send_attack_key5_press: +0x45a5 016802 jam motor_negative ,mem_remote_car_24g_motor3_payload +0x45a6 016803 branch remote_car_send_key +: 016805 remote_car_send_fire_key6_press: +0x45a7 016806 jam 0x01 ,mem_remote_car_24g_fire_send_payload +0x45a8 016807 branch remote_car_send_attack +: 016809 remote_car_single_motor_key_rel: +0x45a9 016810 copy queue ,pdata +0x45aa 016811 beq 0 ,remote_car_send_motor1_key0_rel +0x45ab 016812 beq 1 ,remote_car_send_motor1_key1_rel +0x45ac 016813 beq 2 ,remote_car_send_motor2_key2_rel +0x45ad 016814 beq 3 ,remote_car_send_motor2_key3_rel +0x45ae 016815 rtn +: 016817 remote_car_double_motor_key_rel: +0x45af 016818 copy queue ,pdata +0x45b0 016819 beq 0 ,remote_car_send_double_motor_key0_rel +0x45b1 016820 beq 1 ,remote_car_send_double_motor_key1_rel +0x45b2 016821 beq 2 ,remote_car_send_double_motor_key2_rel +0x45b3 016822 beq 3 ,remote_car_send_double_motor_key3_rel +0x45b4 016823 rtn +: 016825 remote_car_send_motor1_key0_rel: +: 016826 remote_car_send_motor1_key1_rel: +0x45b5 016827 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45b6 016828 branch remote_car_send_key +: 016829 remote_car_send_motor2_key2_rel: +: 016830 remote_car_send_motor2_key3_rel: +0x45b7 016831 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45b8 016832 branch remote_car_send_key +: 016834 remote_car_send_double_motor_key0_rel: +: 016835 remote_car_send_double_motor_key1_rel: +: 016836 remote_car_send_double_motor_key2_rel: +: 016837 remote_car_send_double_motor_key3_rel: +0x45b9 016838 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45ba 016839 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45bb 016840 branch remote_car_send_key +: 016842 remote_car_send_attack_key4_rel: +: 016843 remote_car_send_attack_key5_rel: +0x45bc 016844 jam motor_stop ,mem_remote_car_24g_motor3_payload +0x45bd 016845 branch remote_car_send_key +: 016847 remote_car_send_key: +0x45be 016848 arg mem_remote_car_24g_motor_packet ,rega +0x45bf 016849 branch queue_push +: 016850 remote_car_send_attack: +0x45c0 016851 arg mem_remote_car_24g_fire_packet ,rega +0x45c1 016852 branch queue_push +: 016854 remote_car_g24_package_data: +0x45c2 016855 fetch 1 ,mem_remote_car_24g_pair_success_flag +0x45c3 016856 beq work_paired ,remote_car_g24_send_empty +0x45c4 016857 arg mem_remote_car_24g_tx_temp ,rega +0x45c5 016858 call queue_pop +0x45c6 016859 nbranch remote_car_moto_data ,user +: 016860 remote_car_g24_package_data_continue: +0x45c7 016861 arg mem_remote_car_24g_tx_temp ,contr +0x45c8 016862 ifetch 1 ,contr +0x45c9 016863 copy pdata ,rega +0x45ca 016864 arg mem_remote_car_24g_tx_temp + 1 ,regb +0x45cb 016867 rtn +: 016869 remote_car_g24_send_empty: +0x45cc 016870 jam 0 ,mem_remote_car_24g_pair_success_flag +0x45cd 016871 enable user +0x45ce 016872 arg 1 ,rega +0x45cf 016873 arg mem_remote_car_empty_packet ,regb +0x45d0 016874 rtn +: 016876 remote_car_moto_data: +0x45d1 016877 fetch 1 ,mem_remote_car_24g_tx_temp + 3 +0x45d2 016878 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +0x45d3 016879 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +0x45d4 016880 rtn +: 016881 remote_car_moto_data_next: +0x45d5 016882 fetch 1 ,mem_remote_car_24g_tx_temp + 6 +0x45d6 016883 nbranch remote_car_moto_data_enable_user ,blank +0x45d7 016884 fetch 1 ,mem_remote_car_24g_tx_temp + 8 +0x45d8 016885 nbranch remote_car_moto_data_enable_user ,blank +0x45d9 016886 fetch 1 ,mem_remote_car_24g_tx_temp + 10 +0x45da 016887 nbranch remote_car_moto_data_enable_user ,blank +0x45db 016888 rtn +: 016889 remote_car_moto_data_enable_user: +0x45dc 016890 enable user +0x45dd 016891 branch remote_car_g24_package_data_continue +: 016899 shutter_init: +0x45de 016900 rtn wake +0x45df 016901 hfetch 1 ,core_gpio_sel1 +0x45e0 016902 and_into 0xfc ,pdata +0x45e1 016903 hstore 1 ,core_gpio_sel1 +0x45e2 016904 setarg shutter_le_before_hibernate +0x45e3 016905 store 2 ,mem_cb_before_hibernate +0x45e4 016907 setarg shutter_process_lpm_before +0x45e5 016908 store 2 ,mem_cb_before_lpm +0x45e6 016910 setarg app_enter_hibernate +0x45e7 016911 store 2 ,mem_cb_discovry_timeout +0x45e8 016913 setarg shutter_process_idle +0x45e9 016914 store 2 ,mem_cb_idle_process +0x45ea 016916 setarg shutter_process_bb_event +0x45eb 016917 store 2 ,mem_cb_bb_event_process +0x45ec 016919 setarg shutter_le_scale_lpm_lock +0x45ed 016920 store 2 ,mem_cb_check_wakelock +0x45ee 016922 setarg ble_shutter_receive_data +0x45ef 016923 store 2 ,mem_cb_att_write +0x45f0 016925 setarg shutter_le_bb_event_timer +0x45f1 016926 store 2 ,mem_cb_event_timer +0x45f2 016928 setarg shutter_key_change +0x45f3 016929 store 2 ,mem_cb_shutter_keycan +0x45f4 016931 setarg shutter_soft_swtich_power_on +0x45f5 016932 store 2 ,mem_shutter_soft_switch_poweron_callback_function +0x45f6 016933 setarg shutter_soft_swtich_power_off +0x45f7 016934 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +0x45f8 016936 call le_modified_name +0x45f9 016937 call shutter_load_bluetooth_config_by_user_config +0x45fa 016938 call shutter_init_bluetooth_config +0x45fb 016939 call shutter_init_param +0x45fc 016940 call keyscan_key_init +0x45fd 016941 call shutter_load_buffer_config_form_datarom +0x45fe 016942 call queue_init +0x45ff 016943 call ui_led_init_global +0x4600 016944 call shutter_load_bluetooth_config +0x4601 016945 call shutter_load_bluetooth_config_by_eeprom +0x4602 016947 bpatch patch1e_5 ,mem_patch1e +0x4603 016948 call classic_shutter_load_reconn_info +0x4604 016949 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4605 016950 beq hard_switch ,shutter_hart_swtich_power_on +0x4606 016951 fetch 1 ,mem_shutter_soft_switch_button_gpio +0x4607 016952 store 1 ,mem_ui_button_gpio +0x4608 016953 branch ui_soft_swtich_init +: 016956 shutter_hart_swtich_power_on: +0x4609 016957 jam ui_button_gpio_disable ,mem_ui_button_gpio +0x460a 016958 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +0x460b 016959 branch shutter_start_reconnect +: 016963 shutter_le_scale_lpm_lock: +0x460c 016964 fetch 1 ,mem_shutter_soft_switch_power_state +0x460d 016965 beq ss_state_power_off ,app_get_lpm_wake_lock +0x460e 016966 call l2cap_malloc_get_full_map +0x460f 016967 fetch 1 ,mem_used_map +0x4610 016968 nbranch app_get_lpm_wake_lock ,blank +0x4611 016969 branch app_put_lpm_wake_lock +: 016973 shutter_process_bb_event: +0x4612 016974 copy regc ,pdata +0x4613 016976 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect +0x4614 016977 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect +0x4615 016978 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed +0x4616 016979 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete +0x4617 016980 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect +0x4618 016981 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect +0x4619 016982 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake +0x461a 016983 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout +0x461b 016984 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug +0x461c 016985 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff +0x461d 016986 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information +0x461e 016988 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +0x461f 016989 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +0x4620 016990 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +0x4621 016991 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +0x4622 016993 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +0x4623 016994 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +0x4624 016995 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +0x4625 016996 rtn +: 017001 classic_shutter_process_baseband_connect: +0x4626 017002 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4627 017003 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4628 017004 rtn +: 017007 classic_shutter_process_baseband_disconnect: +0x4629 017008 call classic_shutter_disconnect_clear_flag +0x462a 017009 branch classic_shutter_process_reconnect_failed +: 017011 classic_shutter_disconnect_clear_flag: +0x462b 017012 jam app_handshake_null ,mem_app_handshake_flag +0x462c 017013 jam 0 ,mem_hid_handshake_timer_count +0x462d 017014 jam 0 ,mem_unsniff2sniff_timer_count +0x462e 017015 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x462f 017016 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4630 017017 branch queue_init +: 017020 classic_shutter_process_reconnect_failed: +0x4631 017021 call app_disconn_reason_clear +0x4632 017022 branch shutter_start_bluetooth_discovery +: 017025 classic_shutter_process_setup_complete: +0x4633 017026 call shutter_stop_bluetooth_discovery +0x4634 017027 branch app_led_stop_blink +: 017030 classic_shutter_process_hid_connect: +0x4635 017031 setarg hid_handshake_timeout +0x4636 017032 store 1 ,mem_hid_handshake_timer_count +0x4637 017033 rtn +: 017036 classic_shutter_process_hid_disconnect: +0x4638 017037 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4639 017038 setarg flag_shutter_hid_disconn_timeout +0x463a 017039 store 1 ,mem_classic_shutter_hid_disconn_count +0x463b 017040 rtn +: 017043 classic_shutter_process_hid_handshake: +0x463c 017044 fetch 1 ,mem_app_handshake_flag +0x463d 017045 rtneq app_handshake_done +0x463e 017046 jam app_handshake_done ,mem_app_handshake_flag +0x463f 017047 call app_lpm_mult_enable +0x4640 017048 call app_store_reconn_info +0x4641 017049 call shutter_stop_bluetooth_discovery +0x4642 017050 call app_led_off +0x4643 017051 branch app_bt_enter_sniff +: 017054 classic_shutter_process_reconnect_page_timeout: +0x4644 017055 branch classic_shutter_process_reconnect_failed +: 017058 classic_shutter_process_virtual_cable_unplug: +0x4645 017059 setarg flag_shutter_cable_unplug_timeout +0x4646 017060 store 1 ,mem_classic_shutter_cable_unplug_conut +0x4647 017061 rtn +: 017064 classic_shutter_process_remote_unsniff: +0x4648 017065 branch app_start_auto_sniff +: 017069 classic_shutter_process_store_reconnect_information: +0x4649 017070 arg nvram_eeprom_offset ,regb +0x464a 017071 fetch 1 ,mem_nv_data_number +0x464b 017072 mul32 pdata ,34 ,temp +0x464c 017073 fetch 2 ,mem_nv_data_ptr +0x464d 017074 copy pdata ,rega +0x464e 017075 branch iicd_write_eep_data +: 017077 classic_shutter_load_reconn_info: +0x464f 017078 arg nvram_eeprom_offset ,regb +0x4650 017079 fetch 1 ,mem_shutter_bluetooth_type +0x4651 017080 rtnbit0 classic_shutter +0x4652 017081 fetch 1 ,mem_nv_data_number +0x4653 017082 rtn blank +0x4654 017083 mul32 pdata ,34 ,temp +0x4655 017084 fetch 2 ,mem_nv_data_ptr +0x4656 017085 copy pdata ,rega +0x4657 017086 branch iicd_read_eep_data +: 017090 ble_shutter_process_baseband_connect: +0x4658 017091 call shutter_stop_bluetooth_discovery +0x4659 017092 setarg 0 +0x465a 017093 store 2 ,mem_ble_shutter_reconn_timer +0x465b 017094 branch app_led_off +: 017097 ble_shutter_process_baseband_disconnect: +0x465c 017098 call queue_init +0x465d 017099 jam 0 ,mem_ble_shutter_enable_notify +0x465e 017100 branch shutter_start_reconnect +: 017103 ble_shutter_process_reconnect_complete: +0x465f 017104 call queue_init +0x4660 017105 jam 1 ,mem_ble_shutter_enable_notify +0x4661 017106 fetch 8 ,mem_ble_shutter_interval_min +0x4662 017107 store 8 ,mem_le_interval_min +0x4663 017108 call app_lpm_mult_enable +0x4664 017109 branch le_l2cap_tx_update_req +: 017112 ble_shutter_process_parse_connect_parameter_update_response: +0x4665 017113 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x4666 017114 rtneq ble_signaling_connect_parameter_update_accepted +0x4667 017115 fetch 8 ,mem_ble_shutter_interval_min_new +0x4668 017116 rtn blank +0x4669 017117 store 8 ,mem_le_interval_min +0x466a 017118 branch le_l2cap_tx_update_req +: 017122 shutter_process_soft_swtich_button_long_press: +0x466b 017123 branch ui_soft_switch_botton_long_press +: 017125 shutter_process_soft_swtich_button_down: +0x466c 017126 fetch 1 ,mem_shutter_hard_soft_switch_case +0x466d 017127 rtneq hard_switch +0x466e 017128 fetch 1 ,mem_shutter_soft_switch_power_state +0x466f 017129 rtnne ss_state_power_on +0x4670 017130 call shutter_store_currenct_led_state +0x4671 017131 branch app_led_on +: 017133 shutter_store_currenct_led_state: +0x4672 017134 jam 1 ,mem_shutter_soft_swtich_botton_down +0x4673 017135 arg 11 ,loopcnt +0x4674 017136 arg mem_shutter_soft_swtich_led_struct_temp ,contw +0x4675 017137 arg mem_shutter_led_struct_app_led ,contr +0x4676 017138 branch memcpy +: 017140 shutter_process_soft_swtich_button_up: +0x4677 017141 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4678 017142 rtneq hard_switch +0x4679 017143 fetch 1 ,mem_shutter_soft_switch_power_state +0x467a 017144 beq ss_state_power_on ,shutter_load_currenct_led_state +0x467b 017145 branch ui_soft_switch_botton_up +: 017147 shutter_load_currenct_led_state: +0x467c 017148 fetch 1 ,mem_shutter_soft_swtich_botton_down +0x467d 017149 rtnne 1 +0x467e 017150 jam 0 ,mem_shutter_soft_swtich_botton_down +0x467f 017151 fetch 2 ,mem_ui_state_map +0x4680 017152 bbit1 ui_state_bt_connected ,app_led_off +0x4681 017153 bbit1 ui_state_ble_connected ,app_led_off +0x4682 017154 arg 11 ,loopcnt +0x4683 017155 arg mem_shutter_soft_swtich_led_struct_temp ,contr +0x4684 017156 arg mem_shutter_led_struct_app_led ,contw +0x4685 017157 branch memcpy +: 017162 shutter_le_bb_event_timer: +0x4686 017164 call shutter_check_sleep_timer +0x4687 017167 call shutter_check_power_off_timer +0x4688 017170 call classic_shutter_check_unplug_timer +0x4689 017171 call classic_shutter_hid_handshake_timer +0x468a 017172 call classic_shutter_hid_disconn_timer +0x468b 017175 branch ble_shutter_reconn_timer +: 017179 shutter_check_sleep_timer: +0x468c 017180 arg mem_shutter_sleep_timer ,regc +0x468d 017181 arg shutter_sleep_timeout ,regb +0x468e 017182 branch timer_single_step_2b +: 017183 shutter_sleep_timeout: +0x468f 017184 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +0x4690 017185 call app_led_off +0x4691 017186 call shutter_disconnect_current_connection +0x4692 017187 branch shutter_wait_power_off +: 017190 shutter_check_power_off_timer: +0x4693 017191 arg mem_shutter_power_off_timer ,regc +0x4694 017192 arg shutter_check_power_off_timeout ,regb +0x4695 017193 branch timer_single_step +: 017195 shutter_check_power_off_timeout: +0x4696 017196 fetch 2 ,mem_ui_state_map +0x4697 017197 bbit1 ui_state_ble_connected ,shutter_wait_power_off +0x4698 017198 bbit1 ui_state_bt_connected ,shutter_wait_power_off +0x4699 017199 fetch 1 ,mem_shutter_led_struct_app_led_type +0x469a 017200 beq ui_led_state_blink_start ,shutter_wait_power_off +0x469b 017201 beq ui_led_state_blink_lighting ,shutter_wait_power_off +0x469c 017202 beq ui_led_state_blink_darking ,shutter_wait_power_off +0x469d 017203 branch app_enter_hibernate +: 017207 classic_shutter_check_unplug_timer: +0x469e 017208 arg mem_classic_shutter_cable_unplug_conut ,regc +0x469f 017209 arg classic_shutter_unplug_timeout ,regb +0x46a0 017210 branch timer_single_step +: 017212 classic_shutter_unplug_timeout: +0x46a1 017213 fetch 1 ,mem_control_tasks +0x46a2 017214 set1 l2cap_disconnect_interrupt ,pdata +0x46a3 017215 set1 l2cap_disconnect_control ,pdata +0x46a4 017216 store 1 ,mem_control_tasks +0x46a5 017217 rtn +: 017219 classic_shutter_hid_handshake_timer: +0x46a6 017220 arg mem_hid_handshake_timer_count ,regc +0x46a7 017221 arg classic_shutter_process_hid_handshake ,regb +0x46a8 017222 branch timer_single_step +: 017224 classic_shutter_hid_disconn_timer: +0x46a9 017225 arg mem_classic_shutter_hid_disconn_count ,regc +0x46aa 017226 arg app_bt_disconnect ,regb +0x46ab 017227 branch timer_single_step +: 017232 ble_shutter_reconn_timer: +0x46ac 017233 fetch 1 ,mem_shutter_soft_switch_power_state +0x46ad 017234 rtnne ss_state_power_on +0x46ae 017235 arg mem_ble_shutter_reconn_timer ,regc +0x46af 017236 arg shutter_start_bluetooth_discovery ,regb +0x46b0 017237 branch timer_single_step_2b +: 017240 shutter_process_idle: +0x46b1 017241 call shutter_send_data_to_master +0x46b2 017242 branch keyscan_key_process +: 017245 shutter_process_lpm_before: +0x46b3 017246 branch keyscan_process_lpm_before +: 017248 shutter_le_before_hibernate: +0x46b4 017249 call gpio_set_before_lpm_common +0x46b5 017250 branch shutter_process_lpm_before +: 017256 shutter_stop_bluetooth_discovery: +0x46b6 017257 fetch 1 ,mem_shutter_bluetooth_type +0x46b7 017258 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery +0x46b8 017259 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +0x46b9 017260 rtn +: 017262 ble_shutter_stop_bluetooth_discovery: +0x46ba 017263 fetch 2 ,mem_ble_shutter_connect_timeout +0x46bb 017264 store 2 ,mem_shutter_sleep_timeout +0x46bc 017265 store 2 ,mem_shutter_sleep_timer +0x46bd 017266 branch app_ble_stop_adv +: 017268 classic_shutter_stop_bluetooth_discovery: +0x46be 017269 fetch 2 ,mem_classic_shutter_connect_timeout +0x46bf 017270 store 2 ,mem_shutter_sleep_timeout +0x46c0 017271 store 2 ,mem_shutter_sleep_timer +0x46c1 017272 branch app_bt_stop_discovery +: 017274 shutter_start_bluetooth_discovery: +0x46c2 017275 fetch 1 ,mem_shutter_soft_switch_power_state +0x46c3 017276 rtnne ss_state_power_on +0x46c4 017277 fetch 1 ,mem_shutter_bluetooth_type +0x46c5 017278 bbit1 classic_shutter ,classic_shutter_start_discovery +0x46c6 017279 bbit1 ble_shutter ,ble_shutter_start_discovery +0x46c7 017280 rtn +: 017282 classic_shutter_start_discovery: +0x46c8 017283 fetch 2 ,mem_classic_shutter_discovery_timeout , +0x46c9 017284 store 2 ,mem_shutter_sleep_timeout +0x46ca 017285 store 2 ,mem_shutter_sleep_timer +0x46cb 017286 branch app_bt_start_discovery_short +: 017288 ble_shutter_start_discovery: +0x46cc 017289 fetch 2 ,mem_ui_state_map +0x46cd 017290 rtnbit1 ui_state_ble_connected +0x46ce 017291 fetch 2 ,mem_ble_shutter_discovery_timeout +0x46cf 017292 store 2 ,mem_shutter_sleep_timeout +0x46d0 017293 store 2 ,mem_shutter_sleep_timer +0x46d1 017294 fetch 2 ,mem_ble_shutter_discovery_adv_interval +0x46d2 017295 call shutter_ble_adv_interval_set +0x46d3 017296 call app_led_start_blink +0x46d4 017297 fetch 4 ,mem_ble_shutter_discovery_blink_on_time +0x46d5 017298 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46d6 017299 fetch 2 ,mem_ui_state_map +0x46d7 017300 rtnbit1 ui_state_ble_adv +0x46d8 017301 branch app_ble_start_adv +: 017304 shutter_start_reconnect: +0x46d9 017305 fetch 1 ,mem_shutter_soft_switch_power_state +0x46da 017306 rtnne ss_state_power_on +0x46db 017307 fetch 1 ,mem_shutter_bluetooth_type +0x46dc 017308 bbit1 classic_shutter ,classic_shutter_start_reconnect +0x46dd 017309 bbit1 ble_shutter ,ble_shutter_start_reconnect +0x46de 017310 rtn +: 017312 classic_shutter_start_reconnect: +0x46df 017313 call app_check_reconn_target +0x46e0 017314 branch shutter_start_bluetooth_discovery ,blank +0x46e1 017315 call app_led_on +0x46e2 017316 call app_bt_stop_discovery +0x46e3 017317 branch app_bt_start_reconnect +: 017319 ble_shutter_start_reconnect: +0x46e4 017320 fetch 2 ,mem_ble_shutter_reconn_timer +0x46e5 017321 fetcht 2 ,mem_ble_shutter_reconn_timeout +0x46e6 017322 storet 2 ,mem_ble_shutter_reconn_timer +0x46e7 017323 nrtn blank +0x46e8 017324 fetch 2 ,mem_ble_shutter_reconn_dav_interval +0x46e9 017325 call shutter_ble_adv_interval_set +0x46ea 017326 call app_led_start_blink +0x46eb 017327 fetch 4 ,mem_ble_shutter_reconn_blink_on_time +0x46ec 017328 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46ed 017329 fetch 2 ,mem_ui_state_map +0x46ee 017330 rtnbit1 ui_state_ble_adv +0x46ef 017331 branch app_ble_start_adv +: 017334 shutter_ble_adv_interval_set: +0x46f0 017335 store 2 ,mem_lpm_interval +0x46f1 017336 increase -4 ,pdata +0x46f2 017337 store 2 ,mem_le_adv_interval +0x46f3 017338 rtn +: 017341 shutter_disconnect_current_connection: +0x46f4 017342 fetch 2 ,mem_ui_state_map +0x46f5 017343 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x46f6 017344 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x46f7 017345 branch shutter_stop_bluetooth_discovery +: 017349 app_check_reconn_target: +0x46f8 017350 fetch 1 ,mem_nv_data_number +0x46f9 017351 copy pdata ,loopcnt +0x46fa 017352 fetch 2 ,mem_nv_data_ptr +0x46fb 017353 copy pdata ,rega +: 017354 app_check_reconn_target_loop: +0x46fc 017355 ifetch 2 ,rega +0x46fd 017356 beq 0 ,found_reconn_device +0x46fe 017357 increase nv_data_len ,rega +0x46ff 017358 loop app_check_reconn_target_loop +0x4700 017359 branch enable_blank +: 017361 found_reconn_device: +0x4701 017362 ifetch 6 ,contr +0x4702 017363 store 6 ,mem_hci_plap +0x4703 017364 increase 10 ,contr +0x4704 017365 arg mem_link_key ,contw +0x4705 017366 call memcpy16 +0x4706 017367 call check_link_key_load +0x4707 017368 branch disable_blank +: 017374 shutter_check_data_enable: +0x4708 017375 call disable_user +0x4709 017376 fetch 2 ,mem_ui_state_map +0x470a 017377 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable +0x470b 017378 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +0x470c 017379 rtn +: 017381 shutter_check_bt_data_enable: +0x470d 017382 fetch 1 ,mem_hid_interrupt_state +0x470e 017383 rtnne 0x3f +0x470f 017384 branch enable_user +: 017386 shutter_check_ble_data_enable: +0x4710 017387 fetch 1 ,mem_ble_shutter_enable_notify +0x4711 017388 rtn blank +0x4712 017389 branch enable_user +: 017394 shutter_check_bluetooth_conn: +0x4713 017395 call disable_user +0x4714 017396 fetch 2 ,mem_ui_state_map +0x4715 017397 rtnbit1 ui_state_bt_connected +0x4716 017398 rtnbit1 ui_state_ble_connected +0x4717 017399 branch enable_user +: 017403 shutter_change_bluetooth_status_bt_disconn: +0x4718 017404 fetch 1 ,mem_shutter_bluetooth_type +0x4719 017405 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn +0x471a 017406 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +0x471b 017407 rtn +: 017409 classic_shutter_change_bluetooth_status_bt_disconn: +0x471c 017410 fetch 1 ,mem_scan_mode +0x471d 017411 rtnne 0x03 +0x471e 017412 branch shutter_start_reconnect +: 017414 ble_shutter_change_bluetooth_status_bt_disconn: +0x471f 017415 branch shutter_start_reconnect +: 017418 shutter_check_send_data: +0x4720 017419 disable user2 +0x4721 017420 fetch 2 ,mem_shutter_sleep_timeout +0x4722 017421 store 2 ,mem_shutter_sleep_timer +0x4723 017423 call shutter_check_bluetooth_conn +0x4724 017424 branch shutter_change_bluetooth_status_bt_disconn ,user +0x4725 017426 call shutter_check_data_enable +0x4726 017427 nrtn user +0x4727 017428 enable user2 +0x4728 017429 rtn +: 017433 shutter_key_change: +0x4729 017434 call shutter_check_send_data +0x472a 017435 nrtn user2 +0x472b 017436 deposit rega +0x472c 017437 branch shutter_key_release ,blank +: 017438 shutter_key_press: +0x472d 017439 call app_led_on +0x472e 017440 arg mem_key0_press ,regc +0x472f 017441 branch push_queue_press_or_release +: 017443 shutter_key_release: +0x4730 017444 call app_led_off +0x4731 017445 arg mem_key0_release ,regc +: 017447 push_queue_press_or_release: +0x4732 017448 arg max_queue_num ,pdata +0x4733 017449 imul32 queue ,pdata +0x4734 017450 iadd regc ,regc +: 017453 push_buffer_in_queue: +0x4735 017454 ifetch 1 ,regc +0x4736 017455 rtn blank +0x4737 017456 call queue_push_one_byte +0x4738 017457 increase 1 ,regc +0x4739 017458 branch push_buffer_in_queue +: 017461 shutter_send_data_to_master: +0x473a 017462 fetch 2 ,mem_ui_state_map +0x473b 017463 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +0x473c 017464 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data +0x473d 017465 rtn +: 017467 pop_queue_to_ble_data: +0x473e 017468 call le_fifo_check_nearly_full +0x473f 017469 nrtn blank +0x4740 017470 call queue_pop_one_byte +0x4741 017471 nrtn user +0x4742 017472 pincrease -1 +0x4743 017473 mul32 pdata ,shutter_ble_data_buffer ,pdata +0x4744 017474 arg mem_ble_data_buffer1 ,temp +0x4745 017475 iadd temp ,contr +: 017476 le_send_notify_from_list: +0x4746 017477 ifetch 1 ,contr +0x4747 017478 copy pdata ,rega +0x4748 017479 ifetcht 2 ,contr +0x4749 017480 call store_contr +0x474a 017481 call le_att_malloc_tx_notify +0x474b 017482 copy rega ,loopcnt +0x474c 017483 call get_contr +0x474d 017484 branch memcpy +: 017487 pop_queue_to_classic_data: +0x474e 017488 call l2cap_malloc_is_fifo_nearly_full +0x474f 017489 nrtn blank +0x4750 017490 call queue_pop_one_byte +0x4751 017491 nrtn user +0x4752 017492 pincrease -1 +0x4753 017493 mul32 pdata ,shutter_classic_data_buffer ,pdata +0x4754 017494 arg mem_classic_data_buffer1 ,temp +0x4755 017495 iadd temp ,contr +0x4756 017496 ifetch 5 ,contr +0x4757 017497 store 5 ,mem_classic_data_buffer +: 017498 classic_send_hid_data: +0x4758 017499 fetch 1 ,mem_classic_data_buffer +0x4759 017500 copy pdata ,rega +0x475a 017501 call hid_malloc_tx_buff +0x475b 017502 fetch 2 ,mem_hid_int_remote_cid +0x475c 017503 istore 2 ,contw +0x475d 017504 setarg 0xa1 +0x475e 017505 istore 1 ,contw +0x475f 017506 fetch 4 ,mem_classic_data_buffer + 1 +0x4760 017507 istore 9 ,contw +0x4761 017508 rtn +: 017512 queue_push_one_byte: +0x4762 017513 store 1 ,mem_pdatatemp +0x4763 017514 arg mem_pdatatemp ,rega +0x4764 017515 branch queue_push +: 017517 queue_pop_one_byte: +0x4765 017518 arg mem_pdatatemp ,rega +0x4766 017519 call queue_pop +0x4767 017520 nrtn user +0x4768 017521 fetch 1 ,mem_pdatatemp +0x4769 017522 rtn +: 017525 ble_shutter_receive_data: +0x476a 017526 fetch 2 ,mem_le_att_handle +0x476b 017527 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +0x476c 017528 rtn +: 017530 shutter_init_param: +0x476d 017531 setarg 0x02 +0x476e 017532 store 1 ,mem_shutter_power_off_timeout +0x476f 017534 setarg 0x00200008 +0x4770 017535 store 4 ,mem_ble_shutter_interval_min +0x4771 017536 setarg 0x012c0005 +0x4772 017537 istore 4 ,contw +0x4773 017540 jam 0x17 ,mem_le_local_mtu +0x4774 017543 setarg 0x1b +0x4775 017544 store 2 ,mem_le_pairing_handle +0x4776 017545 call le_set_config_fixed_ltk +0x4777 017546 call le_set_fixed_ltk +0x4778 017547 call le_set_justwork +0x4779 017548 branch le_set_config_read_authentication +: 017551 shutter_load_buffer_config_form_datarom: +0x477a 017553 arg ble_key_value_list_size ,loopcnt +0x477b 017554 arg mem_ble_data_buffer1 ,contw +0x477c 017555 arg ble_shutter_key_value_list ,contr +0x477d 017556 call memcpy_fast +0x477e 017557 arg bt_key_value_list_size ,loopcnt +0x477f 017558 arg mem_classic_data_buffer1 ,contw +0x4780 017559 arg classic_shutter_key_value_list ,contr +0x4781 017560 branch memcpy_fast +: 017563 shutter_load_ble_gatt_form_datarom: +0x4782 017564 arg ble_gatt_list_size ,loopcnt +0x4783 017565 arg ble_shutter_gatt_list ,contr +0x4784 017566 branch memcpy_fast +: 017569 shutter_load_bt_sdp_form_datarom: +0x4785 017570 arg bt_sdp_list_size ,loopcnt +0x4786 017571 arg classic_shutter_sdp_list ,contr +0x4787 017572 branch memcpy_fast +: 017576 shutter_init_bluetooth_config: +0x4788 017577 call shutter_check_load_config_flag +0x4789 017578 nrtn user +0x478a 017579 fetch 1 ,mem_shutter_config_select_gpio1 +0x478b 017580 call shutter_init_bluetooth_config_gpio_input +0x478c 017581 fetch 1 ,mem_shutter_config_select_gpio2 +0x478d 017582 call shutter_init_bluetooth_config_gpio_input +0x478e 017583 fetch 1 ,mem_shutter_config_select_gpio3 +0x478f 017584 branch shutter_init_bluetooth_config_gpio_input +: 017586 shutter_init_bluetooth_config_gpio_input: +0x4790 017587 rtn blank +0x4791 017588 or pdata ,0x80 ,temp +0x4792 017589 branch gpio_config_input_nowake +: 017592 shutter_load_bluetooth_config: +0x4793 017593 call shutter_check_load_config_flag +0x4794 017594 nrtn user +0x4795 017595 call shutter_load_bluetooth_config_label +0x4796 017596 branch shutter_load_bluetooth_config_by_otp +: 017598 shutter_load_bluetooth_config_label: +0x4797 017599 arg 0 ,rega +0x4798 017600 fetch 1 ,mem_shutter_config_select_gpio1 +0x4799 017601 call shutter_load_bluetooth_config_read_gpio_input +0x479a 017602 nsetflag blank ,0 ,rega +0x479b 017603 fetch 1 ,mem_shutter_config_select_gpio2 +0x479c 017604 call shutter_load_bluetooth_config_read_gpio_input +0x479d 017605 nsetflag blank ,1 ,rega +0x479e 017606 fetch 1 ,mem_shutter_config_select_gpio3 +0x479f 017607 call shutter_load_bluetooth_config_read_gpio_input +0x47a0 017608 nsetflag blank ,2 ,rega +0x47a1 017609 copy rega ,pdata +0x47a2 017610 store 1 ,mem_shutter_config_label +0x47a3 017611 fetch 1 ,mem_shutter_config_size +0x47a4 017612 imul32 rega ,pdata +0x47a5 017613 fetcht 2 ,mem_shutter_config_otp_base_address +0x47a6 017614 iadd temp ,pdata +0x47a7 017615 store 2 ,mem_shutter_config_otp_addr +0x47a8 017616 rtn +: 017618 shutter_load_bluetooth_config_read_gpio_input: +0x47a9 017619 rtn blank +0x47aa 017620 or pdata ,0x80 ,temp +0x47ab 017621 call gpio_get_bit +0x47ac 017622 nbranch enable_blank ,true +0x47ad 017623 branch disable_blank +: 017626 shutter_check_load_config_flag: +0x47ae 017627 call disable_user +0x47af 017628 fetch 1 ,mem_shutter_config_user_size +0x47b0 017629 nrtn blank +0x47b1 017630 fetch 1 ,mem_shutter_config_enable +0x47b2 017631 rtn blank +0x47b3 017632 branch enable_user +: 017635 shutter_load_bluetooth_config_by_otp: +0x47b4 017636 call otp_enable_chgpump +0x47b5 017637 fetch 2 ,mem_shutter_config_otp_addr +0x47b6 017638 arg mem_shutter_config_data_temp ,rega +0x47b7 017639 fetcht 1 ,mem_shutter_config_size +0x47b8 017640 call otpd_read_data +0x47b9 017641 call otp_disable_chgpump +: 017642 shutter_load_bluetooth_config_store_name: +0x47ba 017643 fetch 1 ,mem_shutter_config_data_temp +0x47bb 017644 copy pdata ,loopcnt +0x47bc 017645 store 1 ,mem_le_name_len +0x47bd 017646 call memcpy_fast +0x47be 017647 fetch 1 ,mem_shutter_config_data_temp +0x47bf 017648 copy pdata ,loopcnt +0x47c0 017649 store 1 ,mem_local_name_length +0x47c1 017650 call memcpy_fast +0x47c2 017651 ifetch 1 ,contr +0x47c3 017652 store 1 ,mem_shutter_key_num +0x47c4 017653 ifetch 1 ,contr +0x47c5 017654 store 1 ,mem_shutter_hard_soft_switch_case +0x47c6 017655 rtn +: 017658 shutter_load_bluetooth_config_by_eeprom: +0x47c7 017659 fetch 1 ,mem_shutter_bluetooth_type +0x47c8 017660 rtnbit0 classic_shutter +0x47c9 017661 arg 3 ,temp +0x47ca 017662 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47cb 017663 copy pdata ,regb +0x47cc 017664 arg mem_shutter_config_eeprom_start_flag ,rega +0x47cd 017665 call iicd_read_eep_data +0x47ce 017666 fetcht 2 ,mem_shutter_config_eeprom_start_flag +0x47cf 017667 setarg shutter_eeprom_config_crc +0x47d0 017668 isub temp ,null +0x47d1 017669 nrtn zero +0x47d2 017670 fetch 1 ,mem_shutter_config_user_size +0x47d3 017671 rtn blank +0x47d4 017672 copy pdata ,temp +0x47d5 017673 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47d6 017674 add pdata ,3 ,regb +0x47d7 017675 arg mem_shutter_config_data_temp ,rega +0x47d8 017676 call iicd_read_eep_data +0x47d9 017677 branch shutter_store_config +: 017679 shutter_load_bluetooth_config_by_user_config: +0x47da 017680 fetch 2 ,mem_shutter_config_user_otp_address +0x47db 017681 rtn blank +0x47dc 017682 call otp_enable_chgpump +0x47dd 017683 arg 1 ,temp +0x47de 017684 arg mem_shutter_config_user_size ,rega +0x47df 017685 call otpd_read_data +0x47e0 017687 fetch 1 ,mem_shutter_config_user_size +0x47e1 017688 rtn blank +0x47e2 017690 fetch 2 ,mem_shutter_config_user_otp_address +0x47e3 017691 pincrease 1 +0x47e4 017692 arg mem_shutter_config_data_temp ,rega +0x47e5 017693 fetcht 1 ,mem_shutter_config_user_size +0x47e6 017694 call otpd_read_data +0x47e7 017695 call otp_disable_chgpump +: 017696 shutter_store_config: +0x47e8 017697 call shutter_load_bluetooth_config_store_name +: 017698 shutter_load_bluetooth_config_custom: +0x47e9 017699 ifetch 2 ,contr +0x47ea 017700 rtn blank +0x47eb 017701 copy pdata ,contw +0x47ec 017702 ifetcht 1 ,contr +0x47ed 017703 copy temp ,loopcnt +0x47ee 017704 call memcpy +0x47ef 017705 branch shutter_load_bluetooth_config_custom +: 017709 shutter_random_mac_addr: +0x47f0 017710 fetch 1 ,mem_shutter_bluetooth_type +0x47f1 017711 rtnbit0 classic_shutter +0x47f2 017712 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47f3 017713 copy pdata ,regb +0x47f4 017714 arg 4 ,temp +0x47f5 017715 arg mem_shutter_random_mac_data_temp ,rega +0x47f6 017716 call iicd_read_eep_data +0x47f7 017717 fetch 1 ,mem_shutter_random_mac_data_temp +0x47f8 017718 bne 1 ,shutter_write_random_mac_addr_to_eeprom +: 017719 shutter_write_random_mac_addr_to_eeprom: +0x47f9 017720 setarg 1 +0x47fa 017721 store 1 ,mem_shutter_random_mac_data_temp +0x47fb 017722 force 3 ,loopcnt +0x47fc 017723 call generate_random_loop +0x47fd 017724 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47fe 017725 copy pdata ,regb +0x47ff 017726 arg 4 ,temp +0x4800 017727 arg mem_shutter_random_mac_data_temp ,rega +0x4801 017728 call iicd_write_eep_data +: 017729 shutter_write_random_mac_addr: +0x4802 017730 fetch 3 ,mem_shutter_random_mac_data_temp + 1 +0x4803 017731 store 3 ,mem_lap +0x4804 017732 store 3 ,mem_le_lap +0x4805 017733 rtn +: 017736 shutter_soft_swtich_power_on: +0x4806 017737 branch shutter_start_reconnect +: 017740 shutter_soft_swtich_power_off: +0x4807 017741 arg 0 ,rega +0x4808 017742 arg mem_shutter_power_off_led_style ,regc +0x4809 017743 call ui_led_set_style_global +0x480a 017744 call shutter_disconnect_current_connection +: 017745 shutter_wait_power_off: +0x480b 017746 fetch 1 ,mem_shutter_power_off_timeout +0x480c 017747 store 1 ,mem_shutter_power_off_timer +0x480d 017748 rtn +: 017752 ui_soft_swtich_init: +0x480e 017753 setarg ss_state_power_up +0x480f 017754 call ui_soft_swtich_init_power_on_time +0x4810 017755 jam ui_button_state_up ,mem_ui_button_last_state +0x4811 017756 call ui_button_init +0x4812 017757 call ui_button_polling +0x4813 017758 fetch 2 ,mem_ui_state_map +0x4814 017759 rtnbit1 ui_state_btn_down +0x4815 017760 branch app_enter_hibernate +: 017762 ui_soft_swtich_init_power_on_time: +0x4816 017763 fetcht 2 ,mem_power_param_ptr +0x4817 017764 istore 1 ,temp +0x4818 017765 ifetch 1 ,contw +0x4819 017766 store 1 ,mem_ui_button_timeout +0x481a 017767 rtn +: 017770 ui_soft_switch_botton_up: +0x481b 017771 fetch 2 ,mem_power_param_ptr +0x481c 017772 ifetch 1 ,pdata +0x481d 017773 rtnne ss_state_power_up +0x481e 017774 branch app_enter_hibernate +: 017777 ui_soft_switch_botton_long_press: +0x481f 017778 fetcht 2 ,mem_power_param_ptr +0x4820 017779 ifetch 1 ,temp +0x4821 017780 beq ss_state_power_on ,ui_soft_switch_power_off +: 017781 ui_soft_switch_power_on: +0x4822 017782 setarg ss_state_power_on +0x4823 017783 fetcht 2 ,mem_power_param_ptr +0x4824 017784 istore 1 ,temp +0x4825 017785 add temp ,ss_power_off_time ,contr +0x4826 017786 ifetch 1 ,contr +0x4827 017787 istore 1 ,mem_ui_button_timeout +0x4828 017788 ifetch 2 ,contr +0x4829 017789 branch callback_func +: 017791 ui_soft_switch_power_off: +0x482a 017792 setarg ss_state_power_off +0x482b 017793 call ui_soft_swtich_init_power_on_time +0x482c 017794 add temp ,ss_power_off_cb ,contr +0x482d 017795 ifetch 2 ,contr +0x482e 017796 branch app_enter_hibernate ,blank +0x482f 017797 branch callback_func +: 017803 shutter_byteswap: +0x4830 017804 store 6 ,mem_tmp_buffer +0x4831 017805 fetch 1 ,mem_tmp_buffer +0x4832 017806 store 1 ,mem_tmp_buffer + 11 +0x4833 017807 ifetch 1 ,contr +0x4834 017808 store 1 ,mem_tmp_buffer + 10 +0x4835 017809 ifetch 1 ,contr +0x4836 017810 store 1 ,mem_tmp_buffer + 9 +0x4837 017811 ifetch 1 ,contr +0x4838 017812 store 1 ,mem_tmp_buffer + 8 +0x4839 017813 ifetch 1 ,contr +0x483a 017814 store 1 ,mem_tmp_buffer + 7 +0x483b 017815 ifetch 1 ,contr +0x483c 017816 store 1 ,mem_tmp_buffer + 6 +0x483d 017817 fetch 6 ,mem_tmp_buffer + 6 +0x483e 017818 rtn +: 017820 shutter_random_addr_by_otp: +0x483f 017821 call load_adc_init +0x4840 017822 fetch 1 ,mem_1v_adc_io_data +0x4841 017823 store 1 ,mem_le_lap +0x4842 017824 fetch 1 ,mem_5v_adc_hvin_data +0x4843 017825 istore 1 ,contw +0x4844 017826 fetch 1 ,mem_3v_adc_vinlpm_data +0x4845 017827 istore 1 ,contw +0x4846 017828 fetch 3 ,mem_le_lap +0x4847 017829 store 3 ,mem_lap +0x4848 017830 rtn +: 017842 sim_iic_read_eep_data: +0x4849 017843 fetch 2 ,mem_eeprom_base +0x484a 017844 iadd regb ,pdata +0x484b 017845 byteswap pdata ,pdata +0x484c 017846 store 2 ,mem_addr_mi +0x484d 017847 copy temp ,regb +0x484e 017849 call sim_iic_start +0x484f 017850 setarg 0xa0 +0x4850 017851 call sim_iic_send_byte +0x4851 017852 fetch 1 ,mem_addr_mi +0x4852 017853 call sim_iic_send_byte +0x4853 017854 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k +0x4854 017855 fetch 1 ,mem_addr_mi + 1 +0x4855 017856 call sim_iic_send_byte +: 017857 sim_iic_read_eep_data_2k: +0x4856 017858 call sim_iic_stop +0x4857 017860 call sim_iic_start +0x4858 017861 setarg 0xa1 +0x4859 017862 call sim_iic_send_byte +: 017864 sim_iic_read_eep_data_loop: +0x485a 017865 call sim_iic_read_byte +0x485b 017866 istore 1 ,rega +0x485c 017867 increase 1 ,rega +0x485d 017868 increase -1 ,regb +0x485e 017869 nbranch sim_iic_read_eep_data_loop ,zero +0x485f 017870 branch sim_iic_stop +: 017881 sim_iic_write_eep_data: +0x4860 017882 byteswap regb ,pdata +0x4861 017883 store 2 ,mem_addr_mi +0x4862 017884 copy temp ,regb +0x4863 017886 call sim_iic_start +0x4864 017887 setarg 0xa0 +0x4865 017888 call sim_iic_send_byte +0x4866 017890 fetch 1 ,mem_addr_mi +0x4867 017891 call sim_iic_send_byte +0x4868 017892 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop +0x4869 017893 fetch 1 ,mem_addr_mi + 1 +0x486a 017894 call sim_iic_send_byte +: 017895 sim_iic_write_eep_data_loop: +0x486b 017896 ifetch 1 ,rega +0x486c 017897 call sim_iic_send_byte +0x486d 017898 increase 1 ,rega +0x486e 017899 increase -1 ,regb +0x486f 017900 nbranch sim_iic_write_eep_data_loop ,zero +0x4870 017901 branch sim_iic_stop +: 017905 sim_iic_wait_ack: +0x4871 017906 arg 10 ,loopcnt +0x4872 017907 call sim_iic_release_sda +0x4873 017908 call sim_iic_scl_output_high +0x4874 017909 call sim_iic_delay +: 017910 sim_iic_wait_ack_loop: +0x4875 017911 call sim_iic_read_sda_level +0x4876 017912 branch sim_iic_scl_output_low ,blank +0x4877 017913 loop sim_iic_wait_ack_loop +0x4878 017914 branch sim_iic_scl_output_low +: 017918 sim_iic_ack_slave: +0x4879 017919 call sim_iic_scl_output_low +0x487a 017920 call sim_iic_sda_output_low +0x487b 017921 call sim_iic_delay +0x487c 017922 call sim_iic_scl_output_high +0x487d 017923 call sim_iic_delay +0x487e 017924 branch sim_iic_scl_output_low +: 017929 sim_iic_read_byte: +0x487f 017930 arg 8 ,loopcnt +0x4880 017931 arg 0 ,regc +0x4881 017932 call sim_iic_release_sda +: 017933 sim_iic_read_byte_loop: +0x4882 017934 call sim_iic_scl_output_high +0x4883 017935 call sim_iic_delay +0x4884 017936 lshift regc ,regc +0x4885 017937 call sim_iic_read_sda_level +0x4886 017938 iadd regc ,regc +0x4887 017939 call sim_iic_delay +0x4888 017940 call sim_iic_scl_output_low +0x4889 017941 loop sim_iic_read_byte_loop +0x488a 017942 call sim_iic_ack_slave +0x488b 017943 copy regc ,pdata +0x488c 017944 rtn +: 017948 sim_iic_send_byte: +0x488d 017949 arg 8 ,loopcnt +0x488e 017950 copy pdata ,regc +0x488f 017951 call sim_iic_scl_output_low +: 017952 sim_iic_send_byte_loop: +0x4890 017953 isolate1 7 ,regc +0x4891 017954 call sim_iic_sda_output_high ,true +0x4892 017955 ncall sim_iic_sda_output_low ,true +0x4893 017956 lshift regc ,regc +0x4894 017957 call sim_iic_delay +0x4895 017958 call sim_iic_scl_output_high +0x4896 017959 call sim_iic_delay +0x4897 017960 call sim_iic_scl_output_low +0x4898 017961 call sim_iic_delay +0x4899 017962 loop sim_iic_send_byte_loop +0x489a 017963 branch sim_iic_wait_ack +: 017967 sim_iic_start: +0x489b 017968 call sim_iic_sda_output_high +0x489c 017969 call sim_iic_scl_output_high +0x489d 017970 call sim_iic_delay +0x489e 017971 call sim_iic_sda_output_low +0x489f 017972 call sim_iic_delay +0x48a0 017973 branch sim_iic_scl_output_low +: 017977 sim_iic_stop: +0x48a1 017978 call sim_iic_sda_output_low +0x48a2 017979 call sim_iic_scl_output_high +0x48a3 017980 call sim_iic_delay +0x48a4 017981 call sim_iic_sda_output_high +0x48a5 017982 branch sim_iic_delay +: 017986 sim_iic_scl_output_high: +0x48a6 017987 enable user +0x48a7 017988 fetch 1 ,sim_iic_scl_gpio_num +0x48a8 017989 branch sim_iic_config_gpio +: 017992 sim_iic_scl_output_low: +0x48a9 017993 disable user +0x48aa 017994 fetch 1 ,sim_iic_scl_gpio_num +0x48ab 017995 branch sim_iic_config_gpio +: 017998 sim_iic_sda_output_high: +0x48ac 017999 enable user +0x48ad 018000 fetch 1 ,sim_iic_sda_gpio_num +0x48ae 018001 branch sim_iic_config_gpio +: 018004 sim_iic_sda_output_low: +0x48af 018005 disable user +0x48b0 018006 fetch 1 ,sim_iic_sda_gpio_num +0x48b1 018007 branch sim_iic_config_gpio +: 018012 sim_iic_config_gpio: +0x48b2 018013 and pdata ,0x07 ,queue +0x48b3 018014 rshift3 pdata ,pdata +0x48b4 018015 arg core_gpio_oe0 ,temp +0x48b5 018016 iadd temp ,temp +0x48b6 018017 ifetch 1 ,temp +0x48b7 018018 qset1 pdata +0x48b8 018019 istore 1 ,temp +0x48b9 018020 increase 4 ,temp +0x48ba 018021 ifetch 1 ,temp +0x48bb 018022 qsetflag user ,pdata +0x48bc 018023 istore 1 ,temp +0x48bd 018024 rtn +: 018027 sim_iic_release_sda: +0x48be 018028 fetch 1 ,sim_iic_sda_gpio_num +0x48bf 018029 and pdata ,0x07 ,queue +0x48c0 018030 rshift3 pdata ,pdata +0x48c1 018031 arg core_gpio_oe0 ,temp +0x48c2 018032 iadd temp ,temp +0x48c3 018033 ifetch 1 ,temp +0x48c4 018034 qset0 pdata +0x48c5 018035 istore 1 ,temp +0x48c6 018036 rtn +: 018041 sim_iic_read_sda_level: +0x48c7 018042 nop 4 +0x48c8 018043 fetch 1 ,sim_iic_sda_gpio_num +0x48c9 018044 and pdata ,0x07 ,queue +0x48ca 018045 rshift3 pdata ,pdata +0x48cb 018046 arg core_gpio_in ,temp +0x48cc 018047 iadd temp ,temp +0x48cd 018048 setarg 0 +0x48ce 018049 ifetcht 1 ,temp +0x48cf 018050 qisolate1 temp +0x48d0 018051 setflag true ,0 ,pdata +0x48d1 018052 rtn +: 018055 sim_iic_delay: +0x48d2 018057 rtn +: 018063 usb_isr: +0x48d3 018064 bpatch patch1e_6 ,mem_patch1e +0x48d4 018065 hfetch 1 ,core_usb_status +0x48d5 018066 isolate1 7 ,pdata +0x48d6 018067 call usb_init ,true +0x48d7 018068 call usb_nak_state_judge +0x48d8 018069 hfetch 1 ,core_usb_status +0x48d9 018070 store 1 ,mem_usb_status +0x48da 018071 hfetch 1 ,core_usb_fifo_empty +0x48db 018072 store 1 ,mem_usb_fifo_empty +0x48dc 018073 hstore 1 ,core_usb_fifo_empty +0x48dd 018074 pinvert +0x48de 018075 fetcht 1 ,mem_usb_tx_wait +0x48df 018076 iand temp ,pdata +0x48e0 018077 store 1 ,mem_usb_tx_wait +0x48e1 018078 jam 0xe0 ,core_usb_status +0x48e2 018079 fetch 1 ,mem_usb_fifo_empty +0x48e3 018080 compare 0x1 ,pdata ,0x1 +0x48e4 018081 call usb0_fifo_empty ,true +0x48e5 018082 fetch 1 ,mem_usb_status +0x48e6 018083 compare 0x1 ,pdata ,0x1 +0x48e7 018084 call usb_status1 ,true +0x48e8 018085 call usb_tx +0x48e9 018086 branch usb_nak_state +: 018088 usb_init: +0x48ea 018089 bpatch patch1e_7 ,mem_patch1e +0x48eb 018090 call usb_init_param +0x48ec 018091 jam 0x00 ,core_usb_config +0x48ed 018092 nop 10000 +0x48ee 018093 jam 0xc0 ,core_usb_trig +0x48ef 018094 hfetch 2 ,core_clkoff +0x48f0 018095 set0 clock_off_usb ,pdata +0x48f1 018096 hstore 2 ,core_clkoff +0x48f2 018097 jam 0x3c ,core_usb_config +0x48f3 018098 jam 0xff ,core_usb_status +0x48f4 018099 jam 0xff ,core_usb_fifo_empty +0x48f5 018100 jam 0 ,core_usb_addr +0x48f6 018101 jam dev_default ,mem_usb0_state +0x48f7 018102 setarg mem_usb_clear_mem_end +0x48f8 018103 arg mem_usb_clear_mem_start ,contw +0x48f9 018104 isub contw ,loopcnt +0x48fa 018105 branch clear_mem +: 018107 usb_offline_check_init: +0x48fb 018108 fetcht 1 ,mem_usb_offline_check_gpio +0x48fc 018109 branch gpio_config_input +: 018110 usb_offline_state: +0x48fd 018111 fetch 1 ,mem_usb_device_enumeration_endflag +0x48fe 018112 rtn blank +0x48ff 018113 fetcht 1 ,mem_usb_offline_check_gpio +0x4900 018114 call gpio_get_bit +0x4901 018115 branch usb_init ,true +0x4902 018116 rtn +: 018119 usb_nak_state: +0x4903 018120 arg timer_nak ,queue +0x4904 018121 call timer_check +0x4905 018122 nrtn blank +0x4906 018123 fetch 1 ,mem_usb_wakestate_onetime_flag +0x4907 018124 nrtn blank +0x4908 018125 fetch 1 ,mem_usb_device_enumeration_endflag +0x4909 018126 ncall usb_mac_wakeup_judge ,blank +0x490a 018127 rtn +: 018129 usb_mem_devicedesc_init: +0x490b 018130 arg mem_devicedesc ,contw +0x490c 018131 setsect 0 ,0x11212 +0x490d 018132 setsect 1 ,0x8000 +0x490e 018133 setsect 2 ,0x0 +0x490f 018134 setsect 3 ,0x10000 +0x4910 018135 istore 9 ,contw +0x4911 018136 setsect 0 ,0x22412 +0x4912 018137 setsect 1 ,0x8604 +0x4913 018138 setsect 2 ,0x1000 +0x4914 018139 setsect 3 ,0x8 +0x4915 018140 istore 9 ,contw +0x4916 018141 setsect 0 ,0x1 +0x4917 018142 istore 1 ,contw +0x4918 018143 rtn +: 018145 usb_init_param: +0x4919 018146 jam 2 ,mem_usb0_state +0x491a 018147 setarg 0x0 +0x491b 018148 store 1 ,mem_remain +0x491c 018149 store 2 ,mem_usb_zero_packet +0x491d 018150 pincrease 1 +0x491e 018151 store 2 ,mem_usb_ones_packet +0x491f 018152 pincrease 1 +0x4920 018153 store 2 ,mem_usb_two_packet +0x4921 018154 setarg hid_kbdata_addr +0x4922 018155 store 2 ,mem_hidreportdesc_kb +0x4923 018156 setarg hid_msdata_addr +0x4924 018157 store 2 ,mem_hidreportdesc_m +0x4925 018158 arg mem_confdesc ,contw +0x4926 018159 arg hid_confdata_addr ,contr +0x4927 018160 call memcpy64 +0x4928 018161 fetch 1 ,mem_usb_tx_interval +0x4929 018162 ncall usb_tx_interval_config ,blank +0x492a 018163 branch usb_mem_devicedesc_init +: 018165 usb_tx_interval_config: +0x492b 018166 store 1 ,mem_confdesc + 34 +0x492c 018167 store 1 ,mem_confdesc + 59 +0x492d 018168 rtn +: 018169 usb_nak_state_judge: +0x492e 018170 hfetch 1 ,core_usb_status +0x492f 018171 bbit1 usb_status_nak ,usb_nak_state_timer_init +0x4930 018172 rtn +: 018174 usb_nak_state_timer_init: +0x4931 018175 call usb0_attached_state_judge +0x4932 018176 call timer_reinit +0x4933 018177 setarg timer_nak_delay +0x4934 018178 arg timer_nak ,queue +0x4935 018179 branch timer_init +: 018181 usb0_attached_state_judge: +0x4936 018182 fetch 1 ,mem_usb_state +0x4937 018183 bne usb_connected ,usb_clear_halt_dispose +0x4938 018184 jam 0 ,mem_usb_wakestate_onetime_flag +0x4939 018185 jam 0 ,mem_usb_mac_wakeup_trig +0x493a 018186 rtn +: 018187 usb_clear_halt_dispose: +0x493b 018188 fetch 1 ,mem_usb_clear_halt +0x493c 018189 rtn blank +0x493d 018190 jam 0 ,mem_usb_clear_halt +0x493e 018191 jam usb_connected ,mem_usb_state +0x493f 018192 jam 1 ,mem_usb_device_enumeration_endflag +0x4940 018193 rtn +: 018195 usb0_fifo_empty: +0x4941 018196 jam 0x1 ,core_usb_fifo_empty +0x4942 018197 branch usb0_tx +: 018199 usb_rx_no_data: +0x4943 018200 fetch 1 ,mem_usb_status +0x4944 018201 bbit1 usb_status_setup ,usb_class_type +0x4945 018202 rtn +: 018204 usb_rx_read: +0x4946 018205 hfetch 1 ,core_usb_ep +0x4947 018206 istore 1 ,contw +0x4948 018207 loop usb_rx_read +0x4949 018208 rtn +: 018210 usb_status1: +0x494a 018211 bpatch patch1f_0 ,mem_patch1f +0x494b 018212 jam 0x11 ,core_usb_status +0x494c 018213 hfetch 1 ,core_usb_ep_len +0x494d 018214 store 1 ,mem_usb_read_len +0x494e 018215 copy pdata ,loopcnt +0x494f 018216 branch usb_rx_no_data ,blank +0x4950 018217 arg mem_usb_setup ,contw +0x4951 018218 call usb_rx_read +0x4952 018219 fetch 1 ,mem_usb_read_len +0x4953 018220 sub pdata ,7 ,null +0x4954 018221 rtn positive +: 018222 usb_class_type: +0x4955 018223 fetch 1 ,mem_usb_setup_bmrequesttype +0x4956 018224 and_into 0x80 ,pdata +0x4957 018225 beq in_device ,usb_in_device +0x4958 018226 beq out_device ,usb_out_device +0x4959 018227 branch assert +: 018229 usb_in_device: +0x495a 018230 fetch 1 ,mem_usb_setup_bmrequesttype +0x495b 018231 rshift4 pdata ,pdata +0x495c 018232 rshift pdata ,pdata +0x495d 018233 and_into 0x03 ,pdata +0x495e 018234 beq standard_req ,usb_in_standard_req +0x495f 018235 beq class_req ,usb_in_class_req +0x4960 018236 beq manufacturer_req ,usb_in_manufacturer_req +0x4961 018237 branch assert +: 018239 usb_out_device: +0x4962 018240 fetch 1 ,mem_usb_setup_bmrequesttype +0x4963 018241 rshift4 pdata ,pdata +0x4964 018242 rshift pdata ,pdata +0x4965 018243 and_into 0x03 ,pdata +0x4966 018244 beq standard_req ,usb_out_standard_req +0x4967 018245 beq class_req ,usb_out_class_req +0x4968 018246 beq manufacturer_req ,usb_out_manufacturer_req +0x4969 018247 branch assert +: 018249 usb_in_standard_req: +0x496a 018250 fetch 1 ,mem_usb_setup_brequest +0x496b 018251 beq get_configuration ,usb0_request_get_configuration +0x496c 018252 beq get_descriptor ,usb0_request_get_descriptor +0x496d 018253 beq get_interface ,usb0_request_get_interface +0x496e 018254 beq get_status ,usb0_request_get_status +0x496f 018255 branch usb0_force_stall +: 018257 usb_in_class_req: +0x4970 018258 fetch 1 ,mem_usb_setup_brequest +0x4971 018259 beq get_idle ,usb_get_idle +0x4972 018260 beq get_report ,usb_get_report +0x4973 018261 beq get_protocol ,usb_get_protocol_req +0x4974 018262 branch usb0_force_stall +: 018264 usb_in_manufacturer_req: +0x4975 018265 branch usb0_force_stall +: 018267 usb_out_standard_req: +0x4976 018268 fetch 1 ,mem_usb_setup_brequest +0x4977 018269 beq clear_feature ,usb0_request_clear_feature +0x4978 018270 beq set_feature ,usb0_request_set_feature +0x4979 018271 beq set_address ,usb0_request_set_address +0x497a 018272 beq set_configuration ,usb0_request_set_configuration +0x497b 018273 beq set_interface ,usb0_request_set_interface +0x497c 018274 beq set_descriptor ,usb0_force_stall +0x497d 018275 branch usb0_force_stall +: 018277 usb_out_class_req: +0x497e 018278 fetch 1 ,mem_usb_setup_brequest +0x497f 018279 beq set_idle ,usb_set_idle +0x4980 018280 beq set_report ,usb_set_report +0x4981 018281 beq set_protocol ,usb_set_protocol_req +0x4982 018282 branch usb0_force_stall +: 018284 usb_out_manufacturer_req: +0x4983 018285 branch usb0_force_stall +: 018287 usb0_force_stall: +0x4984 018288 hfetch 1 ,core_usb_stall +0x4985 018289 set1 0 ,pdata +0x4986 018290 hstore 1 ,core_usb_stall +0x4987 018291 branch usb0_reply_zerolen +: 018293 usb0_reply_zerolen: +0x4988 018294 jam 0x40 ,core_usb_clear +0x4989 018295 rtn +: 018297 usb0_request_get_configuration: +0x498a 018298 fetch 1 ,mem_usb_setup_bmrequesttype +0x498b 018299 bne in_device ,usb0_force_stall +0x498c 018300 fetch 1 ,mem_usb_setup_windex +0x498d 018301 bne 0 ,usb0_force_stall +0x498e 018302 fetch 1 ,mem_usb_setup_windex + 1 +0x498f 018303 bne 0 ,usb0_force_stall +0x4990 018304 fetch 1 ,mem_usb_setup_blength +0x4991 018305 bne 1 ,usb0_force_stall +0x4992 018306 fetch 1 ,mem_usb_setup_blengthh +0x4993 018307 bne 0 ,usb0_force_stall +0x4994 018308 fetch 1 ,mem_usb_setup_bvalue +0x4995 018309 bne 0 ,usb0_force_stall +0x4996 018310 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4997 018311 bne 0 ,usb0_force_stall +0x4998 018312 fetch 1 ,mem_usb0_state +0x4999 018313 beq dev_configured ,usb0_request_get_cfg_dev_cfg +0x499a 018314 beq dev_address ,usb0_request_get_cfg_dev_addr +0x499b 018315 branch usb0_force_stall +: 018317 usb0_request_get_cfg_dev_cfg: +0x499c 018318 arg 1 ,regb +0x499d 018319 branch usb_send_ones_packet +: 018321 usb0_request_get_cfg_dev_addr: +0x499e 018322 arg 1 ,regb +0x499f 018323 branch usb_send_zero_packet +: 018325 usb0_request_get_descriptor: +0x49a0 018326 bpatch patch1f_1 ,mem_patch1f +0x49a1 018327 set0 mark_isstr ,mark +0x49a2 018328 fetch 1 ,mem_usb_setup_bvalueh +0x49a3 018329 beq dsc_device ,dsc_device_info +0x49a4 018330 beq dsc_config ,dsc_config_info +0x49a5 018331 beq dsc_string ,dsc_string_info +0x49a6 018332 beq dsc_hid ,dsc_hid_info +0x49a7 018333 beq dsc_hid_report ,dsc_hid_report_info +0x49a8 018334 branch usb0_force_stall +: 018336 dsc_hid_info: +0x49a9 018337 jam 0 ,mem_usb_get_protocol_flag +0x49aa 018338 fetch 1 ,mem_usb_setup_windex +0x49ab 018339 beq 0 ,dsc_hid_info_interface0 +0x49ac 018340 beq 1 ,dsc_hid_info_interface1 +0x49ad 018341 branch usb0_force_stall +: 018343 dsc_hid_info_interface0: +0x49ae 018344 arg mem_confdesc + 19 ,rega +0x49af 018345 ifetch 1 ,rega +0x49b0 018346 iforce regb +0x49b1 018347 branch usb0_respond +: 018349 dsc_hid_info_interface1: +0x49b2 018350 arg mem_confdesc + 44 ,rega +0x49b3 018351 ifetch 1 ,rega +0x49b4 018352 iforce regb +0x49b5 018353 branch usb0_respond +: 018355 dsc_device_info: +0x49b6 018359 fetch 1 ,mem_usb_set_high_addr_flag +0x49b7 018360 ncall usb_set_high_addr ,blank +0x49b8 018361 setarg mem_devicedesc +0x49b9 018362 fetcht 1 ,mem_devicedesc +: 018363 dsc_info_set_data_len: +0x49ba 018364 store 2 ,mem_dsc_info_data_pointer +0x49bb 018365 storet 1 ,mem_dsc_info_len +0x49bc 018366 fetch 1 ,mem_usb_setup_blength +0x49bd 018367 isub temp ,null +0x49be 018368 nbranch dsc_info_set_current_data_len ,positive +: 018369 dsc_info_set_initial_data_len: +0x49bf 018370 fetch 1 ,mem_dsc_info_len +: 018371 dsc_info_set_data_size_completed: +0x49c0 018372 iforce regb +0x49c1 018373 fetch 2 ,mem_dsc_info_data_pointer +0x49c2 018374 add pdata ,1 ,pdata +0x49c3 018375 iforce rega +0x49c4 018376 branch usb0_respond +: 018377 dsc_info_set_current_data_len: +0x49c5 018378 fetch 1 ,mem_usb_setup_blength +0x49c6 018379 branch dsc_info_set_data_size_completed +: 018381 usb_set_high_addr: +0x49c7 018382 hfetch 1 ,core_usb_addr +0x49c8 018383 ncall usb0_set_addr ,blank +0x49c9 018384 jam 0 ,mem_usb_set_high_addr_flag +0x49ca 018385 rtn +: 018386 usb0_set_addr: +0x49cb 018387 hfetch 1 ,core_usb_addr +0x49cc 018388 set1 7 ,pdata +0x49cd 018389 hstore 1 ,core_usb_addr +0x49ce 018390 rtn +: 018392 dsc_config_info: +0x49cf 018393 setarg mem_confdesc +0x49d0 018394 fetcht 1 ,mem_confdesc +0x49d1 018395 branch dsc_info_set_data_len +: 018397 dsc_string_info: +0x49d2 018398 fetch 1 ,mem_usb_setup_bvalue +0x49d3 018399 sub pdata ,3 ,null +0x49d4 018400 nbranch usb0_force_stall ,positive +0x49d5 018401 fetch 1 ,mem_usb_setup_bvalue +0x49d6 018402 arg mem_string0 ,rega +0x49d7 018403 beq 0 ,usb0_respond_length +0x49d8 018404 set1 mark_isstr ,mark +0x49d9 018405 arg mem_string1 ,rega +0x49da 018406 beq 1 ,usb0_respond_length +0x49db 018407 arg mem_string2 ,rega +0x49dc 018408 beq 2 ,usb0_respond_length +0x49dd 018409 arg mem_string3 ,rega +0x49de 018410 beq 3 ,usb0_respond_length +0x49df 018411 rtn +: 018413 dsc_hid_report_info: +0x49e0 018414 fetch 2 ,mem_usb_setup_windex +0x49e1 018415 beq 1 ,dsc_hid_report_info0 +0x49e2 018416 fetch 2 ,mem_hidreportdesc_kb +0x49e3 018417 copy pdata ,rega +0x49e4 018419 branch usb0_respond_length +: 018420 dsc_hid_report_info0: +0x49e5 018421 jam 1 ,mem_usb_device_enumeration_endflag +0x49e6 018422 jam usb_got_report_req ,mem_usb_state +0x49e7 018423 fetch 2 ,mem_hidreportdesc_m +0x49e8 018424 copy pdata ,rega +0x49e9 018426 branch usb0_respond_length +: 018429 usb0_request_get_interface: +0x49ea 018430 fetch 1 ,mem_usb0_state +0x49eb 018431 bne dev_configured ,usb0_force_stall +0x49ec 018432 fetch 1 ,mem_usb_setup_bmrequesttype +0x49ed 018433 bne in_interface ,usb0_force_stall +0x49ee 018434 fetch 1 ,mem_usb_setup_bvalue +0x49ef 018435 bne 0 ,usb0_force_stall +0x49f0 018436 fetch 1 ,mem_usb_setup_bvalueh +0x49f1 018437 bne 0 ,usb0_force_stall +0x49f2 018438 fetch 1 ,mem_usb_setup_blength +0x49f3 018439 bne 1 ,usb0_force_stall +0x49f4 018440 fetch 1 ,mem_usb_setup_blengthh +0x49f5 018441 bne 0 ,usb0_force_stall +0x49f6 018442 fetch 1 ,mem_usb_setup_windex +0x49f7 018443 bne 0 ,usb0_force_stall +0x49f8 018444 fetch 1 ,mem_usb_setup_windex + 1 +0x49f9 018445 bne 0 ,usb0_force_stall +0x49fa 018446 arg 1 ,regb +0x49fb 018447 branch usb_send_zero_packet +: 018450 usb0_request_get_status: +0x49fc 018451 fetch 1 ,mem_usb0_state +0x49fd 018452 beq dev_default ,usb0_force_stall +0x49fe 018453 fetch 1 ,mem_usb_setup_bvalue +0x49ff 018454 bne 0 ,usb0_force_stall +0x4a00 018455 fetch 1 ,mem_usb_setup_bvalueh +0x4a01 018456 bne 0 ,usb0_force_stall +0x4a02 018457 fetch 1 ,mem_usb_setup_blength +0x4a03 018458 bne 2 ,usb0_force_stall +0x4a04 018459 fetch 1 ,mem_usb_setup_blengthh +0x4a05 018460 bne 0 ,usb0_force_stall +0x4a06 018461 fetch 1 ,mem_usb_setup_windex + 1 +0x4a07 018462 bne 0 ,usb0_force_stall +0x4a08 018463 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a09 018464 beq in_device ,usb0_get_status_in_device +0x4a0a 018465 beq in_interface ,usb0_get_status_in_interface +0x4a0b 018466 beq in_endpoint ,usb0_get_status_in_endpoint +0x4a0c 018467 branch usb0_force_stall +: 018469 usb0_get_status_in_device: +0x4a0d 018470 fetch 1 ,mem_usb_setup_windex +0x4a0e 018471 bne 0 ,usb0_force_stall +0x4a0f 018472 arg 2 ,regb +0x4a10 018473 fetch 1 ,mem_usb_remote_wakeup +0x4a11 018474 beq 0x01 ,usb_send_two_packet +: 018476 usb_send_zero_packet: +0x4a12 018477 arg mem_usb_zero_packet ,rega +0x4a13 018478 branch usb0_respond +: 018479 usb_send_ones_packet: +0x4a14 018480 arg mem_usb_ones_packet ,rega +0x4a15 018481 branch usb0_respond +: 018482 usb_send_two_packet: +0x4a16 018483 arg mem_usb_two_packet ,rega +0x4a17 018484 branch usb0_respond +: 018486 usb0_get_status_in_interface: +0x4a18 018487 fetch 1 ,mem_usb0_state +0x4a19 018488 bne dev_configured ,usb0_force_stall +0x4a1a 018489 arg 2 ,regb +0x4a1b 018490 branch usb_send_zero_packet +: 018492 usb0_get_status_in_endpoint: +0x4a1c 018493 fetch 1 ,mem_usb0_state +0x4a1d 018494 bne dev_configured ,usb0_force_stall +0x4a1e 018495 fetch 1 ,mem_usb_setup_windex +0x4a1f 018496 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +0x4a20 018497 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +0x4a21 018498 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +0x4a22 018499 and_into 0x7f ,pdata +0x4a23 018500 beq 0x00 ,usb0_get_status_in_ep_in_ep0 +0x4a24 018501 branch usb0_force_stall +: 018503 usb0_get_status_in_ep_in_ep0: +0x4a25 018504 fetch 1 ,mem_usb_ep0_stall_status +: 018505 usb0_get_status_in_ep_in_ack: +0x4a26 018506 arg 2 ,regb +0x4a27 018507 beq 1 ,usb_send_ones_packet +0x4a28 018508 branch usb_send_zero_packet +: 018509 usb0_get_status_in_ep_in_ep1: +0x4a29 018510 fetch 1 ,mem_usb_ep1_stall_status +0x4a2a 018511 branch usb0_get_status_in_ep_in_ack +: 018512 usb0_get_status_in_ep_in_ep2: +0x4a2b 018513 fetch 1 ,mem_usb_ep2_stall_status +0x4a2c 018514 branch usb0_get_status_in_ep_in_ack +: 018515 usb0_get_status_in_ep_in_ep3: +0x4a2d 018516 fetch 1 ,mem_usb_ep3_stall_status +0x4a2e 018517 branch usb0_get_status_in_ep_in_ack +: 018519 usb_get_idle: +0x4a2f 018520 jam 1 ,mem_usb_idle_flag +0x4a30 018521 arg mem_usb_idle_rate ,rega +0x4a31 018522 arg 1 ,regb +0x4a32 018523 branch usb0_respond +: 018525 usb_get_report: +0x4a33 018526 fetch 2 ,mem_usb_setup_bvalue +0x4a34 018527 arg pc_get_report ,temp +0x4a35 018528 isub temp ,null +0x4a36 018529 nbranch usb0_force_stall ,zero +0x4a37 018530 set0 mark_isstr ,mark +: 018531 usb_get_report_dispose: +0x4a38 018532 fetch 1 ,mem_usb0_data_ready_report +0x4a39 018533 nbranch usb_get_report_data_success ,blank +0x4a3a 018534 jam pc_get_nondata ,mem_usb0_get_report_data +: 018535 usb_get_report_send_data: +0x4a3b 018536 fetch 1 ,mem_usb_setup_blength +0x4a3c 018537 iforce regb +0x4a3d 018538 arg mem_usb0_get_report_data ,rega +0x4a3e 018539 call usb0_respond +: 018540 usb_get_report_data_release: +0x4a3f 018541 arg mem_usb0_get_report_data ,contw +0x4a40 018542 arg 8 ,loopcnt +0x4a41 018543 branch memset0 +: 018544 usb_get_report_data_success: +0x4a42 018545 jam 0 ,mem_usb0_data_ready_report +0x4a43 018546 jam pc_get_data ,mem_usb0_get_report_data +0x4a44 018547 branch usb_get_report_send_data +: 018549 usb_get_protocol_req: +0x4a45 018550 fetch 1 ,mem_usb_setup_blength +0x4a46 018551 bne 1 ,usb0_force_stall +0x4a47 018552 jam 1 ,mem_usb_get_protocol_flag +0x4a48 018553 arg 1 ,regb +0x4a49 018554 fetch 1 ,mem_usb_set_protocol_value +0x4a4a 018555 beq 0 ,usb_get_report_protocol +0x4a4b 018556 beq 1 ,usb_get_boot_protocol +0x4a4c 018557 branch usb_send_zero_packet +: 018558 usb_get_report_protocol: +0x4a4d 018559 branch usb_send_ones_packet +: 018560 usb_get_boot_protocol: +0x4a4e 018561 branch usb_send_zero_packet +: 018566 usb0_request_clear_feature: +0x4a4f 018567 fetch 1 ,mem_usb0_state +0x4a50 018568 bne dev_configured ,usb0_force_stall +0x4a51 018569 fetch 1 ,mem_usb_setup_blength +0x4a52 018570 bne 0 ,usb0_force_stall +0x4a53 018571 fetch 1 ,mem_usb_setup_blengthh +0x4a54 018572 bne 0 ,usb0_force_stall +0x4a55 018573 fetch 1 ,mem_usb_setup_bvalueh +0x4a56 018574 bne 0 ,usb0_force_stall +0x4a57 018575 fetch 1 ,mem_usb_setup_windex + 1 +0x4a58 018576 bne 0 ,usb0_force_stall +0x4a59 018577 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a5a 018578 beq out_device ,usb0_request_clear_feature_out_device +0x4a5b 018579 beq out_interface ,usb0_request_clear_feature_out_interface +0x4a5c 018580 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +0x4a5d 018581 branch usb0_force_stall +: 018583 usb0_request_clear_feature_out_device: +0x4a5e 018584 fetch 1 ,mem_usb_setup_bvalue +0x4a5f 018585 bne device_remote_wakeup ,usb0_force_stall +0x4a60 018586 hfetch 1 ,core_usb_config +0x4a61 018587 set0 7 ,pdata +0x4a62 018588 hstore 1 ,core_usb_config +0x4a63 018589 jam 0 ,mem_usb_remote_wakeup +0x4a64 018590 jam 1 ,mem_usb_clear_remote_wakeup +0x4a65 018591 branch usb0_reply_zerolen +: 018593 usb0_request_clear_feature_out_interface: +0x4a66 018594 branch usb0_force_stall +: 018596 usb0_request_clear_feature_out_endpoint: +0x4a67 018597 fetch 1 ,mem_usb_setup_bvalue +0x4a68 018598 bne endpoint_halt ,usb0_force_stall +0x4a69 018599 fetch 1 ,mem_usb_setup_windex +0x4a6a 018600 beq in_ep1 ,usb0_force_stall_ep1_in_off +0x4a6b 018601 beq in_ep2 ,usb0_force_stall_ep2_in_off +0x4a6c 018602 beq in_ep3 ,usb0_force_stall_ep3_in_off +0x4a6d 018603 and_into 0x7f ,pdata +0x4a6e 018604 beq 0x00 ,usb0_force_stall_ep0_in_off +0x4a6f 018605 branch usb0_force_stall +: 018607 usb0_force_stall_ep0_in_off: +0x4a70 018608 jam 0 ,mem_usb_ep0_stall_status +0x4a71 018609 branch usb0_reply_zerolen +: 018610 usb0_force_stall_ep1_in_off: +0x4a72 018611 jam 0 ,mem_usb_ep1_stall_status +: 018612 usb0_force_stall_ep1_in_off_reply: +0x4a73 018613 jam 1 ,mem_usb_clear_halt +0x4a74 018614 branch usb0_reply_zerolen +: 018615 usb0_force_stall_ep2_in_off: +0x4a75 018616 jam 0 ,mem_usb_ep2_stall_status +0x4a76 018617 branch usb0_force_stall_ep1_in_off_reply +: 018618 usb0_force_stall_ep3_in_off: +0x4a77 018619 jam 0 ,mem_usb_ep3_stall_status +0x4a78 018620 branch usb0_force_stall_ep1_in_off_reply +: 018623 usb0_request_set_feature: +0x4a79 018624 fetch 1 ,mem_usb_setup_blength +0x4a7a 018625 bne 0 ,usb0_force_stall +0x4a7b 018626 fetch 1 ,mem_usb_setup_blengthh +0x4a7c 018627 bne 0 ,usb0_force_stall +0x4a7d 018628 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a7e 018629 beq out_device ,usb0_request_set_feature_out_device +0x4a7f 018630 beq out_interface ,usb0_request_set_feature_out_interface +0x4a80 018631 beq out_endpoint ,usb0_request_set_feature_out_endpoint +0x4a81 018632 branch usb0_force_stall +: 018634 usb0_request_set_feature_out_device: +0x4a82 018635 fetch 1 ,mem_usb_setup_bvalue +0x4a83 018636 bne device_remote_wakeup ,usb0_force_stall +0x4a84 018637 hfetch 1 ,core_usb_config +0x4a85 018638 set1 7 ,pdata +0x4a86 018639 hstore 1 ,core_usb_config +0x4a87 018640 jam 1 ,mem_usb_remote_wakeup +0x4a88 018641 jam usb_sleep ,mem_usb_state +0x4a89 018642 jam 0 ,mem_usb_tx_win_enable +0x4a8a 018643 call usb0_reply_zerolen +: 018644 usb_wakeup_timer_reinit: +0x4a8b 018645 call timer_reinit +0x4a8c 018646 setarg timer_wakeup_delay +0x4a8d 018647 arg timer_wakeup ,queue +0x4a8e 018648 branch timer_init +: 018650 usb0_request_set_feature_out_interface: +0x4a8f 018651 branch usb0_force_stall +: 018653 usb0_request_set_feature_out_endpoint: +0x4a90 018654 fetch 1 ,mem_usb_setup_bvalue +0x4a91 018655 bne endpoint_halt ,usb0_force_stall +0x4a92 018656 fetch 1 ,mem_usb_setup_bvalueh +0x4a93 018657 bne 0 ,usb0_force_stall +0x4a94 018658 fetch 1 ,mem_usb_setup_windex +0x4a95 018659 beq in_ep1 ,usb0_force_stall_ep1_in_on +0x4a96 018660 beq in_ep2 ,usb0_force_stall_ep2_in_on +0x4a97 018661 beq in_ep3 ,usb0_force_stall_ep3_in_on +0x4a98 018662 and_into 0x7f ,pdata +0x4a99 018663 beq 0x00 ,usb0_force_stall_ep0_in_on +0x4a9a 018664 branch usb0_force_stall +: 018666 usb0_force_stall_ep0_in_on: +0x4a9b 018667 jam 1 ,mem_usb_ep0_stall_status +0x4a9c 018668 branch usb0_reply_zerolen +: 018669 usb0_force_stall_ep1_in_on: +0x4a9d 018670 jam 1 ,mem_usb_ep1_stall_status +0x4a9e 018671 branch usb0_reply_zerolen +: 018672 usb0_force_stall_ep2_in_on: +0x4a9f 018673 jam 1 ,mem_usb_ep2_stall_status +0x4aa0 018674 branch usb0_reply_zerolen +: 018675 usb0_force_stall_ep3_in_on: +0x4aa1 018676 jam 1 ,mem_usb_ep3_stall_status +0x4aa2 018677 branch usb0_reply_zerolen +: 018680 usb0_request_set_address: +0x4aa3 018681 fetch 1 ,mem_usb_setup_bmrequesttype +0x4aa4 018682 bne out_device ,usb0_force_stall +0x4aa5 018683 fetch 1 ,mem_usb_setup_windex +0x4aa6 018684 bne 0 ,usb0_force_stall +0x4aa7 018685 fetch 1 ,mem_usb_setup_windex + 1 +0x4aa8 018686 bne 0 ,usb0_force_stall +0x4aa9 018687 fetch 1 ,mem_usb_setup_blength +0x4aaa 018688 bne 0 ,usb0_force_stall +0x4aab 018689 fetch 1 ,mem_usb_setup_blengthh +0x4aac 018690 bne 0 ,usb0_force_stall +0x4aad 018691 fetch 1 ,mem_usb_setup_bvalueh +0x4aae 018692 bne 0 ,usb0_force_stall +0x4aaf 018693 fetch 1 ,mem_usb_setup_bvalue +0x4ab0 018694 and_into 0x80 ,pdata +0x4ab1 018695 bne 0 ,usb0_force_stall +0x4ab2 018696 fetch 1 ,mem_usb_setup_bvalue +0x4ab3 018697 bne 0 ,usb_usb0_state_set_dev_addr +: 018698 usb_usb0_state_set_dev_default: +0x4ab4 018699 jam dev_default ,mem_usb0_state +: 018700 usb0_request_set_wait_address: +0x4ab5 018701 fetch 1 ,mem_usb_setup_bvalue +0x4ab6 018702 hstore 1 ,core_usb_addr +0x4ab7 018703 call usb0_reply_zerolen +0x4ab8 018704 jam 1 ,mem_usb_set_high_addr_flag +0x4ab9 018705 rtn +: 018706 usb_usb0_state_set_dev_addr: +0x4aba 018707 jam dev_address ,mem_usb0_state +0x4abb 018708 branch usb0_request_set_wait_address +: 018711 usb0_request_set_configuration: +0x4abc 018712 fetch 1 ,mem_usb0_state +0x4abd 018713 beq dev_default ,usb0_force_stall +0x4abe 018714 fetch 1 ,mem_usb_setup_bmrequesttype +0x4abf 018715 bne out_device ,usb0_force_stall +0x4ac0 018716 fetch 1 ,mem_usb_setup_windex +0x4ac1 018717 bne 0 ,usb0_force_stall +0x4ac2 018718 fetch 1 ,mem_usb_setup_windex + 1 +0x4ac3 018719 bne 0 ,usb0_force_stall +0x4ac4 018720 fetch 1 ,mem_usb_setup_blength +0x4ac5 018721 bne 0 ,usb0_force_stall +0x4ac6 018722 fetch 1 ,mem_usb_setup_blengthh +0x4ac7 018723 bne 0 ,usb0_force_stall +0x4ac8 018724 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4ac9 018725 bne 0 ,usb0_force_stall +0x4aca 018726 fetch 1 ,mem_usb_setup_bvalue +0x4acb 018727 sub pdata ,usb_max_num_cfg ,null +0x4acc 018728 nbranch usb0_force_stall ,positive +0x4acd 018729 fetch 1 ,mem_usb0_state +0x4ace 018730 beq dev_address ,usb0_request_set_cfg_addr_state +0x4acf 018731 beq dev_configured ,usb0_request_set_cfg_cfg_state +0x4ad0 018732 branch usb0_force_stall +: 018734 usb0_request_set_cfg_addr_state: +: 018735 usb0_request_set_cfg_cfg_state: +0x4ad1 018736 fetch 1 ,mem_usb_setup_bvalue +0x4ad2 018737 beq 0 ,usb0_request_set_cfg_stay_addr_state +0x4ad3 018738 jam dev_configured ,mem_usb0_state +0x4ad4 018739 branch usb0_reply_zerolen +: 018740 usb0_request_set_cfg_stay_addr_state: +0x4ad5 018741 jam dev_address ,mem_usb0_state +0x4ad6 018742 branch usb0_reply_zerolen +: 018745 usb0_request_set_interface: +0x4ad7 018746 fetch 1 ,mem_usb0_state +0x4ad8 018747 bne dev_configured ,usb0_force_stall +0x4ad9 018748 fetch 1 ,mem_usb_setup_bmrequesttype +0x4ada 018749 bne out_interface ,usb0_force_stall +0x4adb 018750 fetch 1 ,mem_usb_setup_bvalue +0x4adc 018751 bne 0 ,usb0_force_stall +0x4add 018752 fetch 1 ,mem_usb_setup_bvalueh +0x4ade 018753 bne 0 ,usb0_force_stall +0x4adf 018754 fetch 1 ,mem_usb_setup_blength +0x4ae0 018755 bne 0 ,usb0_force_stall +0x4ae1 018756 fetch 1 ,mem_usb_setup_blengthh +0x4ae2 018757 bne 0 ,usb0_force_stall +0x4ae3 018758 fetch 1 ,mem_usb_setup_windex +0x4ae4 018759 bne 0 ,usb0_force_stall +0x4ae5 018760 fetch 1 ,mem_usb_setup_windex + 1 +0x4ae6 018761 bne 0 ,usb0_force_stall +0x4ae7 018762 branch usb0_reply_zerolen +: 018765 usb_set_idle: +0x4ae8 018766 jam 1 ,mem_usb_idle_flag +0x4ae9 018767 fetch 1 ,mem_usb_setup_bvalueh +0x4aea 018768 store 1 ,mem_usb_idle_rate +0x4aeb 018769 fetch 1 ,mem_usb_setup_windex +0x4aec 018770 sub pdata ,1 ,null +0x4aed 018771 call usb_clear_remote_wakeup_set0 ,zero +0x4aee 018772 fetch 1 ,mem_usb_state +0x4aef 018773 bne usb_resume ,usb0_reply_zerolen +0x4af0 018774 jam usb_connected ,mem_usb_state +0x4af1 018775 call usb0_reply_zerolen +0x4af2 018776 nop 30000 +0x4af3 018777 nop 30000 +0x4af4 018778 rtn +: 018779 usb_clear_remote_wakeup_set0: +0x4af5 018780 jam 1 ,mem_usb_device_enumeration_endflag +0x4af6 018781 jam 0 ,mem_usb_clear_remote_wakeup +0x4af7 018782 jam usb_resume ,mem_usb_state +0x4af8 018783 rtn +: 018786 usb_set_report: +0x4af9 018787 jam 1 ,mem_usb0_get_set_report +0x4afa 018788 call usb_set_report_resume_judge +0x4afb 018789 fetch 2 ,mem_usb_setup_bvalue +0x4afc 018790 store 2 ,mem_usb_setup_bvalue_temp +0x4afd 018791 fetch 1 ,mem_usb_setup_blength +0x4afe 018792 iforce loopcnt +0x4aff 018793 arg mem_usb0_setup ,contr +0x4b00 018794 arg mem_usb0_set_report_data ,contw +0x4b01 018795 call memcpy +0x4b02 018796 branch usb0_reply_zerolen +: 018798 usb_set_report_resume_judge: +0x4b03 018799 fetch 2 ,mem_usb_setup_bvalue +0x4b04 018800 arg pc_set_report_bvalue ,temp +0x4b05 018801 isub temp ,null +0x4b06 018802 nrtn zero +0x4b07 018803 fetch 2 ,mem_usb_setup_windex +0x4b08 018804 arg pc_set_report_windex ,temp +0x4b09 018805 isub temp ,null +0x4b0a 018806 nrtn zero +0x4b0b 018807 fetch 2 ,mem_usb_setup_blength +0x4b0c 018808 arg pc_set_report_blength ,temp +0x4b0d 018809 isub temp ,null +0x4b0e 018810 nrtn zero +0x4b0f 018811 jam 1 ,mem_usb_tx_win_enable +0x4b10 018812 rtn +: 018815 usb_set_protocol_req: +0x4b11 018816 fetch 1 ,mem_usb_setup_blength +0x4b12 018817 bne 0 ,usb0_force_stall +0x4b13 018818 fetch 1 ,mem_usb_setup_bvalue +0x4b14 018819 beq boot_protocol ,usb_set_boot_protocol +0x4b15 018820 beq report_protocol ,usb_set_report_protocol +0x4b16 018821 branch usb0_force_stall +: 018822 usb_set_boot_protocol: +0x4b17 018823 jam 0 ,mem_usb_set_protocol_status +0x4b18 018824 jam 1 ,mem_usb_set_protocol_value +0x4b19 018825 branch usb0_reply_zerolen +: 018826 usb_set_report_protocol: +0x4b1a 018827 jam 1 ,mem_usb_tx_mac_enable +0x4b1b 018828 jam 1 ,mem_usb_set_protocol_status +0x4b1c 018829 jam 0 ,mem_usb_set_protocol_value +0x4b1d 018830 branch usb0_reply_zerolen +: 018833 usb0_respond_length: +0x4b1e 018834 ifetch 1 ,rega +0x4b1f 018835 iforce regb +0x4b20 018836 increase 1 ,rega +: 018838 usb0_respond: +0x4b21 018839 bpatch patch1f_2 ,mem_patch1f +0x4b22 018840 bmark0 mark_isstr ,usb0_respond0 +0x4b23 018841 add regb ,1 ,pdata +0x4b24 018842 lshift pdata ,pdata +0x4b25 018843 hstore 1 ,core_usb_dfifo0 +0x4b26 018844 jam 3 ,core_usb_dfifo0 +0x4b27 018845 fetch 1 ,mem_usb_setup_blength +0x4b28 018846 increase -2 ,pdata +0x4b29 018847 rshift pdata ,pdata +0x4b2a 018848 store 1 ,mem_usb_setup_blength +0x4b2b 018849 beq 0 ,usb_no_respond_data +: 018850 usb0_respond0: +0x4b2c 018851 fetch 2 ,mem_usb_setup_blength +0x4b2d 018852 isub regb ,null +0x4b2e 018853 branch usb0_respond1 ,positive +0x4b2f 018854 copy pdata ,regb +: 018855 usb0_respond1: +0x4b30 018856 deposit rega +0x4b31 018857 store 2 ,mem_bufptr +0x4b32 018858 deposit regb +0x4b33 018859 store 1 ,mem_remain +0x4b34 018860 branch usb0_tx +: 018862 usb_no_respond_data: +0x4b35 018863 arg 0 ,queue +0x4b36 018864 branch usb_trig +: 018867 usb0_tx: +0x4b37 018868 bpatch patch1f_3 ,mem_patch1f +0x4b38 018869 fetch 1 ,mem_remain +0x4b39 018870 rtn blank +0x4b3a 018871 copy pdata ,loopcnt +0x4b3b 018872 sub pdata ,ep0_packet_size ,null +0x4b3c 018873 branch usb0_tx_info ,positive +0x4b3d 018874 arg ep0_packet_size ,loopcnt +: 018875 usb0_tx_info: +0x4b3e 018876 fetch 1 ,mem_remain +0x4b3f 018877 isub loopcnt ,pdata +0x4b40 018878 store 1 ,mem_remain +0x4b41 018879 fetch 2 ,mem_bufptr +0x4b42 018880 copy pdata ,contr +: 018881 usb0_tx0: +0x4b43 018882 ifetch 1 ,contr +0x4b44 018883 hstore 1 ,core_usb_dfifo0 +0x4b45 018884 bmark0 mark_isstr ,usb0_tx1 +0x4b46 018885 jam 0 ,core_usb_dfifo0 +: 018886 usb0_tx1: +0x4b47 018887 loop usb0_tx0 +0x4b48 018888 copy contr ,pdata +0x4b49 018889 store 2 ,mem_bufptr +0x4b4a 018890 arg 0 ,queue +0x4b4b 018891 call usb_trig +0x4b4c 018892 fetch 1 ,mem_remain +0x4b4d 018893 nrtn blank +0x4b4e 018894 fetch 1 ,mem_usb_state +0x4b4f 018895 rtnne usb_got_report_req +0x4b50 018896 jam usb_connected ,mem_usb_state +0x4b51 018897 rtn +: 018900 usb_tx_ep1: +0x4b52 018901 arg core_usb_dfifo1 ,rega +0x4b53 018902 arg 1 ,queue +: 018903 usb_tx_loop: +0x4b54 018904 ifetch 1 ,contr +0x4b55 018905 istore 1 ,rega +0x4b56 018906 loop usb_tx_loop +: 018907 usb_trig: +0x4b57 018908 setarg 0 +0x4b58 018909 qset1 pdata +0x4b59 018910 hstore 1 ,core_usb_trig +0x4b5a 018911 fetcht 1 ,mem_usb_tx_wait +0x4b5b 018912 ior temp ,pdata +0x4b5c 018913 store 1 ,mem_usb_tx_wait +0x4b5d 018914 rtn +: 018916 usb_tx_ep2: +0x4b5e 018917 arg 2 ,queue +0x4b5f 018918 arg core_usb_dfifo2 ,rega +0x4b60 018919 branch usb_tx_loop +: 018921 usb_tx: +0x4b61 018922 bpatch patch1f_4 ,mem_patch1f +0x4b62 018923 fetch 1 ,mem_usb_tx_enable +0x4b63 018924 rtn blank +0x4b64 018925 fetch 1 ,mem_usb_tx_wait +0x4b65 018926 nbranch usb_inwake_state_tx_dispose ,blank +0x4b66 018927 fetch 1 ,mem_usb_device_enumeration_endflag +0x4b67 018928 branch usb_tx_fifo_release ,blank +0x4b68 018929 fetch 1 ,mem_usb_state +0x4b69 018930 beq usb_sleep ,usb_windows_wakeup +0x4b6a 018931 bne usb_connected ,usb_tx_fifo_release +0x4b6b 018932 fetch 1 ,mem_usb_clear_remote_wakeup +0x4b6c 018933 nbranch usb_tx_fifo_release ,blank +0x4b6d 018934 call usb_tx_data_ep1 +0x4b6e 018935 branch usb_tx_data_ep2 +: 018937 usb_tx_data_ep1: +0x4b6f 018938 fetch 1 ,mem_usb_tx_enable +0x4b70 018939 rtnbit0 1 +0x4b71 018940 fetch 1 ,mem_usb_tx_wait +0x4b72 018941 rtnbit1 1 +0x4b73 018942 fetch 1 ,mem_usb_tx_enable +0x4b74 018943 set0 1 ,pdata +0x4b75 018944 store 1 ,mem_usb_tx_enable +0x4b76 018945 fetch 1 ,mem_usb_ep1_data +0x4b77 018946 rtn blank +0x4b78 018947 beq usb_ep1_kb ,usb_tx_kb_normal_data +0x4b79 018948 branch assert +: 018950 usb_tx_data_ep2: +0x4b7a 018951 fetch 1 ,mem_usb_tx_enable +0x4b7b 018952 rtnbit0 2 +0x4b7c 018953 fetch 1 ,mem_usb_tx_wait +0x4b7d 018954 rtnbit1 2 +0x4b7e 018955 fetch 1 ,mem_usb_tx_enable +0x4b7f 018956 set0 2 ,pdata +0x4b80 018957 store 1 ,mem_usb_tx_enable +0x4b81 018958 fetch 1 ,mem_usb_ep2_data +0x4b82 018959 rtn blank +0x4b83 018960 beq usb_ep2_ms ,usb_tx_ms_data +0x4b84 018961 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +0x4b85 018962 branch assert +: 018964 usb_tx_fifo_release: +0x4b86 018966 arg mem_usb_mouse_data ,contw +0x4b87 018967 arg 6 ,loopcnt +0x4b88 018968 branch memset0 +: 018970 usb_tx_ms_data: +0x4b89 018971 fetch 1 ,mem_usb_idle_flag +0x4b8a 018972 fetcht 1 ,mem_usb_get_protocol_flag +0x4b8b 018973 iand temp ,pdata +0x4b8c 018974 branch usb_tx_ms_data_normal_mode ,blank +0x4b8d 018975 fetcht 1 ,mem_usb_set_protocol_status +0x4b8e 018976 iadd temp ,pdata +0x4b8f 018977 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +0x4b90 018978 branch usb_tx_ms_data_normal_mode +: 018980 usb_tx_ms_data_mac_boot_mode: +0x4b91 018981 jam 0 ,mem_usb_ep2_data +: 018982 usb_tx_ms_data_mac_boot_regroup: +0x4b92 018983 fetch 1 ,mem_usb_mouse_data + 1 +0x4b93 018984 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b94 018985 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b95 018986 fetch 1 ,mem_usb_mouse_data + 1 +0x4b96 018987 store 1 ,mem_usb_mouse_data +0x4b97 018988 fetch 1 ,mem_usb_mouse_data + 2 +0x4b98 018989 istore 1 ,contw +0x4b99 018990 fetch 1 ,mem_usb_mouse_data + 4 +0x4b9a 018991 istore 1 ,contw +0x4b9b 018992 fetch 1 ,mem_usb_mouse_data + 6 +0x4b9c 018993 istore 1 ,contw +0x4b9d 018994 arg 4 ,loopcnt +0x4b9e 018995 arg mem_usb_mouse_data ,contr +0x4b9f 018996 branch usb_tx_ep2 +: 018998 usb_tx_ms_data_normal_mode: +0x4ba0 018999 jam 0 ,mem_usb_ep2_data +: 019000 usb_tx_mac_boot_ms_regroup_r_or_lrkey: +0x4ba1 019001 arg 8 ,loopcnt +0x4ba2 019002 arg mem_usb_mouse_data ,contr +0x4ba3 019003 branch usb_tx_ep2 +: 019005 usb_tx_kb_multikey_data: +0x4ba4 019006 jam 0 ,mem_usb_ep2_data +0x4ba5 019007 arg 3 ,loopcnt +0x4ba6 019008 arg mem_usb_kb_multikey ,contr +0x4ba7 019009 branch usb_tx_ep2 +: 019011 usb_tx_kb_normal_data: +0x4ba8 019012 jam 0 ,mem_usb_ep1_data +0x4ba9 019013 arg 8 ,loopcnt +0x4baa 019014 arg mem_usb_kb_data ,contr +0x4bab 019015 branch usb_tx_ep1 +: 019017 usb_inwake_state_tx_dispose: +0x4bac 019018 fetch 1 ,mem_usb_state +0x4bad 019019 beq usb_sleep ,usb_clear_tx_wait +0x4bae 019020 beq usb_connected ,usb_mac_wakeup_trig +0x4baf 019021 rtn +: 019022 usb_clear_tx_wait: +0x4bb0 019023 jam 0 ,mem_usb_tx_wait +0x4bb1 019024 rtn +: 019025 usb_mac_wakeup_trig: +0x4bb2 019026 hfetch 1 ,core_usb_config +0x4bb3 019027 set1 7 ,pdata +0x4bb4 019028 hstore 1 ,core_usb_config +0x4bb5 019029 jam 1 ,mem_usb_mac_wakeup_trig +0x4bb6 019030 rtn +: 019032 usb_mac_wakeup_judge: +0x4bb7 019033 fetch 1 ,mem_usb_state +0x4bb8 019034 rtneq usb_sleep +0x4bb9 019035 beq usb_connected ,usb_mac_wakeup +0x4bba 019036 rtn +: 019037 usb_mac_wakeup: +0x4bbb 019038 fetch 1 ,mem_usb_mac_wakeup_trig +0x4bbc 019039 rtn blank +0x4bbd 019040 jam 1 ,mem_usb_wakestate_onetime_flag +0x4bbe 019041 branch usb_wakeup +: 019043 usb_windows_wakeup: +0x4bbf 019044 arg timer_wakeup ,queue +0x4bc0 019045 call timer_check +0x4bc1 019046 nrtn blank +: 019047 usb_wakeup: +0x4bc2 019048 hfetch 1 ,core_usb_config +0x4bc3 019049 rtnbit0 7 +0x4bc4 019050 jam 0xfc ,core_usb_config +0x4bc5 019051 nop 30000 +0x4bc6 019052 jam 0x3c ,core_usb_config +0x4bc7 019053 rtn +: 019060 hci_rx_h4: +0x4bc8 019061 bpatch patch1f_5 ,mem_patch1f +0x4bc9 019062 fetch 1 ,mem_hci_cmd +0x4bca 019063 nrtn blank +: 019064 hci_rx_h4_1: +0x4bcb 019065 call hci_h4_parse_packet +0x4bcc 019066 ncall h4_rx_discard_packet ,user +0x4bcd 019067 rtn +: 019069 hci_h4_parse_packet: +0x4bce 019070 bpatch patch1f_6 ,mem_patch1f +0x4bcf 019071 copy contru ,rega +0x4bd0 019072 arg 4 ,temp +0x4bd1 019073 ifetch 1 ,contru +0x4bd2 019074 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len +0x4bd3 019075 increase 1 ,temp +0x4bd4 019076 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len +0x4bd5 019077 copy contru ,pdata +0x4bd6 019078 hstore 2 ,core_uart_rrptr +0x4bd7 019079 rtn +: 019080 hci_h4_parse_packet_wait_len: +0x4bd8 019081 hfetch 2 ,core_uart_rxitems +0x4bd9 019082 isub temp ,null +0x4bda 019083 nbranch hci_h4_parse_packet_wait_len ,positive +0x4bdb 019085 disable user +0x4bdc 019086 copy rega ,contru +0x4bdd 019087 call h4_get_rx_payload_len +0x4bde 019088 iadd temp ,temp +: 019089 hci_h4_parse_packet_wait: +0x4bdf 019090 hfetch 2 ,core_uart_rxitems +0x4be0 019091 isub temp ,null +0x4be1 019092 nbranch hci_h4_parse_packet_wait ,positive +0x4be2 019093 copy rega ,contru +0x4be3 019094 ifetch 1 ,contru +0x4be4 019095 beq hci_h4_type_cmd ,process_hci_cmd +0x4be5 019096 branch assert +: 019098 h4_rx_discard_packet: +0x4be6 019099 bpatch patch1f_7 ,mem_patch1f +0x4be7 019100 hfetch 2 ,core_uart_rrptr +0x4be8 019101 iforce contru +0x4be9 019102 call h4_get_rx_payload_len +0x4bea 019103 iadd contru ,contru +0x4beb 019104 deposit contru +0x4bec 019105 hstore 2 ,core_uart_rrptr +0x4bed 019106 rtn +: 019111 h4_get_rx_payload_len: +0x4bee 019112 ifetch 1 ,contru +0x4bef 019113 increase 2 ,contru +0x4bf0 019114 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl +0x4bf1 019115 ifetch 1 ,contru +0x4bf2 019116 rtn +: 019117 h4_get_rx_payload_len_acl: +0x4bf3 019118 ifetch 2 ,contru +0x4bf4 019119 rtn +: 019121 h4_get_tx_ptr: +0x4bf5 019122 hfetch 2 ,core_uart_twptr +0x4bf6 019123 increase -5 ,contwu +0x4bf7 019124 iadd contwu ,contwu +0x4bf8 019125 rtn +: 019127 h4_send_packet_event: +0x4bf9 019128 arg hci_h4_type_event ,temp +0x4bfa 019129 branch h4_send_packet +: 019130 h4_send_packet_acl: +0x4bfb 019131 arg hci_h4_type_acl ,temp +: 019132 h4_send_packet: +0x4bfc 019133 bpatchx patch20_0 ,mem_patch20 +0x4bfd 019134 increase 1 ,loopcnt +0x4bfe 019135 hfetch 2 ,core_uart_twptr +0x4bff 019136 copy pdata ,contwu +0x4c00 019137 copy loopcnt ,pdata +0x4c01 019138 istoret 1 ,contwu +0x4c02 019139 increase -1 ,pdata +0x4c03 019140 iadd contwu ,contwu +0x4c04 019141 copy contwu ,pdata +0x4c05 019142 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c06 019143 copy temp ,pdata +0x4c07 019144 rtneq hci_h4_type_acl +0x4c08 019145 fetch 2 ,mem_hci_acl_tx_trigger_wptr +0x4c09 019146 hstore 2 ,core_uart_twptr +0x4c0a 019147 branch h4_send_acl_trigger_clear +: 019150 h4_send_acl_trigger_clear: +0x4c0b 019151 setarg 0 +0x4c0c 019152 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c0d 019153 rtn +: 019160 hci_init: +0x4c0e 019161 rtn wake +0x4c0f 019162 setarg hci_idle_dispatch +0x4c10 019163 store 2 ,mem_cb_idle_process +0x4c11 019165 setarg uart_baud_115200 +0x4c12 019166 store uart_baud_len ,mem_baud +: 019167 hci_lpm_init: +0x4c13 019168 setarg mem_h5rx_buf +0x4c14 019169 hstore 2 ,core_uart_rsaddr +0x4c15 019170 setarg mem_h5rx_buf_end +0x4c16 019171 hstore 2 ,core_uart_readdr +0x4c17 019172 setarg mem_h5tx_buf +0x4c18 019173 hstore 2 ,core_uart_tsaddr +0x4c19 019174 call hci_sel_init +: 019175 hci_reinit: +0x4c1a 019176 jam 0x0 ,core_uart_ctrl +0x4c1b 019177 setarg mem_h5tx_buf +0x4c1c 019178 hstore 2 ,core_uart_twptr +0x4c1d 019179 hstore 2 ,core_uart_trptrp +0x4c1e 019180 setarg mem_h5rx_buf +0x4c1f 019181 hstore 2 ,core_uart_rrptr +0x4c20 019182 store 2 ,mem_h5rx_rptr +: 019183 hci_init_common: +0x4c21 019184 hfetch 2 ,core_clkoff +0x4c22 019185 set0 clock_off_uart ,pdata +0x4c23 019186 hstore 2 ,core_clkoff +0x4c24 019187 call uart_set_baud_by_mem +0x4c25 019188 jam uartclk_dpll ,core_uart_clksel +0x4c26 019189 jam uart_ctrl_h4 ,core_uart_ctrl +0x4c27 019190 rtn +: 019192 hci_sel_init: +0x4c28 019193 setarg mem_h5tx_buf_end +0x4c29 019194 hstore 2 ,core_uart_teaddr +0x4c2a 019195 hfetch 1 ,core_gpio_sel1 +0x4c2b 019196 or_into 0x07 ,pdata +0x4c2c 019197 hstore 1 ,core_gpio_sel1 +0x4c2d 019198 rtn +: 019201 hci_rx_packet: +0x4c2e 019202 bpatchx patch20_1 ,mem_patch20 +0x4c2f 019203 hfetch 1 ,core_uart_status +0x4c30 019204 iforce regb +0x4c31 019205 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont +0x4c32 019206 hfetch 2 ,core_uart_rxitems +0x4c33 019207 iforce regc +0x4c34 019208 arg 0x44f ,temp +0x4c35 019209 isub temp ,null +0x4c36 019210 nrtn zero +: 019211 hci_rx_packet_cont: +0x4c37 019212 hfetch 2 ,core_uart_rrptr +0x4c38 019213 iforce contru +0x4c39 019214 branch hci_rx_h4 +: 019216 uart_send_byte: +0x4c3a 019217 hfetcht 1 ,core_uart_status +0x4c3b 019218 isolate1 6 ,temp +0x4c3c 019219 branch uart_send_byte ,true +0x4c3d 019220 hstore 1 ,core_uart_txd +0x4c3e 019221 rtn +: 019223 process_hci_cmd: +0x4c3f 019224 bpatchx patch20_2 ,mem_patch20 +0x4c40 019225 fetch 1 ,mem_hci_cmd +0x4c41 019226 branch process_hci_cmd_cont ,blank +0x4c42 019227 enable user +0x4c43 019228 rtn +: 019229 process_hci_cmd_cont: +0x4c44 019230 ifetch 2 ,contru +0x4c45 019231 iforce alarm +0x4c46 019232 iforce queue +0x4c47 019233 ifetch 1 ,contru +0x4c48 019234 iforce temp +0x4c49 019235 rshift2 alarm ,pdata +0x4c4a 019236 rshift8 pdata ,pdata +0x4c4b 019237 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific +0x4c4c 019238 rtn +: 019241 phci_grp_vendor_specific: +0x4c4d 019242 bpatchx patch20_3 ,mem_patch20 +0x4c4e 019243 deposit queue +0x4c4f 019244 beq hci_vendor_cmd_reset ,hci_normal_reply +0x4c50 019245 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +0x4c51 019246 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +0x4c52 019247 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +0x4c53 019248 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +0x4c54 019249 beq hci_vendor_cmd_echo ,hci_normal_reply +0x4c55 019250 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr +0x4c56 019251 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm +0x4c57 019253 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +0x4c58 019254 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep +0x4c59 019255 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init +0x4c5a 019256 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec +0x4c5b 019257 branch hci_normal_reply +: 019259 phci_grp_vendor_enter_lpm: +0x4c5c 019260 call hci_normal_reply +0x4c5d 019261 call wait_uarttx +0x4c5e 019262 call gpio_pu_uart_tx +: 019263 hci_enter_lpm: +0x4c5f 019264 call app_put_lpm_wake_lock +0x4c60 019265 call app_l2cap_flow_control_enable +0x4c61 019266 branch gpio_rx_config_input_with_pu +: 019268 hci_exit_lpm: +0x4c62 019269 jam hci_rx_ready ,mem_hci_lt_rx_state +0x4c63 019270 call app_get_lpm_wake_lock +0x4c64 019271 call hci_lpm_init +0x4c65 019272 branch app_l2cap_flow_control_disable +: 019274 phci_grp_vendor_chipid: +0x4c66 019275 call hci_get_cmd_complete_ptr +0x4c67 019276 hfetch 2 ,core_chipid +0x4c68 019277 istore 2 ,contwu +0x4c69 019278 force 6 ,loopcnt +0x4c6a 019279 branch hci_command_complete +: 019281 phci_grp_vendor_baud: +0x4c6b 019282 ifetch 2 ,contru +0x4c6c 019283 store 2 ,mem_baud +0x4c6d 019284 hstore 2 ,core_uart_baud +0x4c6e 019285 rtn +: 019288 phci_grp_vendor_patch_common: +0x4c6f 019290 ifetch 1 ,contru +0x4c70 019291 copy pdata ,temp +0x4c71 019292 hstore 1 ,core_ucode_low +0x4c72 019293 ifetch 1 ,contru +0x4c73 019294 iadd temp ,temp +0x4c74 019295 set1 7 ,pdata +0x4c75 019296 hstore 1 ,core_ucode_ctrl +0x4c76 019297 ifetch 1 ,contru +0x4c77 019298 iadd temp ,temp +0x4c78 019299 copy pdata ,loopcnt +0x4c79 019300 rtn +: 019302 phci_grp_vendor_patch: +0x4c7a 019303 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c7b 019304 call phci_grp_vendor_patch_common +: 019305 phci_grp_vendor_patch_loop: +0x4c7c 019306 ifetch 1 ,contru +0x4c7d 019307 hstore 1 ,core_ucode_data +0x4c7e 019308 iadd temp ,temp +0x4c7f 019309 loop phci_grp_vendor_patch_loop +: 019310 phci_grp_vendor_patch_check_sum: +0x4c80 019311 and temp ,0xff ,temp +0x4c81 019312 ifetch 1 ,contru +0x4c82 019313 isub temp ,null +0x4c83 019314 nbranch phci_grp_vendor_patch_bad ,zero +0x4c84 019315 branch hci_normal_reply +: 019318 phci_grp_vendor_patch_sec: +0x4c85 019319 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c86 019320 call phci_grp_vendor_patch_common +0x4c87 019321 store 8 ,mem_pdatatemp +: 019322 phci_grp_vendor_patch_sec_loop: +0x4c88 019323 call do_aes_cbc +0x4c89 019324 arg 16 ,loopcnt +0x4c8a 019325 arg mem_temp_block0 ,contw +0x4c8b 019326 call load_uart_sum_loop +0x4c8c 019327 storet 8 ,mem_temp +0x4c8d 019328 arg mem_temp_block2 ,contw +0x4c8e 019329 call store_aes_result +0x4c8f 019330 arg mem_temp_block2 ,rega +0x4c90 019331 arg mem_temp_block0 ,regb +0x4c91 019332 arg mem_temp_block3 ,contw +0x4c92 019333 call xor16 +0x4c93 019334 arg 16 ,loopcnt +0x4c94 019335 arg mem_temp_block3 ,contr +0x4c95 019336 call load_ucode_only_loop +0x4c96 019337 fetcht 8 ,mem_temp +0x4c97 019338 fetch 8 ,mem_pdatatemp +0x4c98 019339 increase -16 ,pdata +0x4c99 019340 store 8 ,mem_pdatatemp +0x4c9a 019341 nbranch phci_grp_vendor_patch_sec_loop ,blank +0x4c9b 019342 branch phci_grp_vendor_patch_check_sum +: 019344 load_ucode_only_loop: +0x4c9c 019345 ifetch 1 ,contr +0x4c9d 019346 hstore 1 ,core_ucode_data +0x4c9e 019347 loop load_ucode_only_loop +0x4c9f 019348 rtn +: 019350 load_uart_sum_loop: +0x4ca0 019351 ifetch 1 ,contru +0x4ca1 019352 istore 1 ,contw +0x4ca2 019353 iadd temp ,temp +0x4ca3 019354 loop load_uart_sum_loop +0x4ca4 019355 rtn +: 019357 phci_grp_vendor_patch_sec_init: +0x4ca5 019358 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4ca6 019359 arg 0 ,temp +0x4ca7 019360 arg 16 ,loopcnt +0x4ca8 019361 arg mem_temp_block0 ,contw +0x4ca9 019362 call load_uart_sum_loop +0x4caa 019363 hfetch 1 ,core_gpio_key2 +0x4cab 019364 and_into 0xfd ,pdata +0x4cac 019365 hstore 1 ,core_gpio_key2 +0x4cad 019366 arg mem_temp_block0 ,contr +0x4cae 019367 arg 16 ,loopcnt +0x4caf 019368 call aes_load_data +0x4cb0 019369 call aes_init +0x4cb1 019370 call aes_clear_data +0x4cb2 019371 branch phci_grp_vendor_patch_check_sum +: 019374 phci_grp_vendor_done: +0x4cb3 019375 arg 0x20 ,loopcnt +0x4cb4 019376 arg mem_patch00 ,contw +0x4cb5 019377 arg 0 ,temp +: 019378 phci_grp_vendor_done_loop: +0x4cb6 019379 ifetch 1 ,contru +0x4cb7 019380 istore 1 ,contw +0x4cb8 019381 iadd temp ,temp +0x4cb9 019382 loop phci_grp_vendor_done_loop +0x4cba 019383 and temp ,0xff ,temp +0x4cbb 019384 ifetch 1 ,contru +0x4cbc 019385 isub temp ,null +0x4cbd 019386 nbranch phci_grp_vendor_patch_bad ,zero +0x4cbe 019387 jam 0 ,core_ucode_ctrl +0x4cbf 019388 call hci_normal_reply +0x4cc0 019389 call h4_rx_discard_packet +0x4cc1 019390 call clear_key_buf +0x4cc2 019391 call wait_uarttx +0x4cc3 019392 branch soft_reset +: 019394 phci_grp_vendor_patch_bad: +0x4cc4 019395 jam 0 ,core_ucode_ctrl +0x4cc5 019396 branch start +: 019398 phci_grp_vendor_bdaddr: +0x4cc6 019399 ifetch 6 ,contru +0x4cc7 019400 store 6 ,mem_lap +0x4cc8 019401 branch hci_normal_reply +: 019404 phci_grp_vendor_mem: +0x4cc9 019405 ifetch 1 ,contru +0x4cca 019406 store 1 ,mem_hci_curr_len +0x4ccb 019407 copy pdata ,loopcnt +0x4ccc 019408 ifetch 2 ,contru +0x4ccd 019409 store 2 ,mem_hci_curr_target +0x4cce 019410 copy pdata ,contw +0x4ccf 019411 call uart_copy_rx_bytes +0x4cd0 019412 branch hci_normal_reply +: 019415 phci_grp_vendor_eep: +0x4cd1 019416 ifetch 1 ,contru +0x4cd2 019417 store 1 ,mem_hci_curr_len +0x4cd3 019418 copy pdata ,loopcnt +0x4cd4 019419 ifetch 2 ,contru +0x4cd5 019420 store 2 ,mem_hci_curr_target +0x4cd6 019421 arg mem_l2cap_rxbuff1 ,contw +0x4cd7 019422 call uart_copy_rx_bytes +0x4cd8 019423 fetcht 1 ,mem_hci_curr_len +0x4cd9 019424 arg mem_l2cap_rxbuff1 ,rega +0x4cda 019425 fetch 2 ,mem_hci_curr_target +0x4cdb 019426 branch iicd_write_ota_data +: 019431 hci_normal_reply: +0x4cdc 019432 force 4 ,loopcnt +: 019433 hci_command_complete: +0x4cdd 019434 call hci_get_payload_ptr +0x4cde 019435 force 0x1 ,pdata +0x4cdf 019436 istore 1 ,contwu +0x4ce0 019437 deposit alarm +0x4ce1 019438 istore 3 ,contwu +0x4ce2 019439 force hci_event_command_complete ,queue +: 019440 hci_send_event: +0x4ce3 019441 bpatchx patch20_4 ,mem_patch20 +0x4ce4 019442 call hci_get_packet_ptr +0x4ce5 019443 deposit queue +0x4ce6 019444 istore 1 ,contwu +0x4ce7 019445 deposit loopcnt +0x4ce8 019446 istore 1 ,contwu +: 019447 hci_send_event_raw: +0x4ce9 019448 force 5 ,queue +0x4cea 019449 increase 2 ,loopcnt +: 019450 hci_send_packet: +0x4ceb 019451 branch h4_send_packet_event +: 019453 hci_send_commu_ready_event: +0x4cec 019454 force hci_event_vendor_specific ,queue +0x4ced 019455 call hci_get_payload_ptr +0x4cee 019456 setarg hci_vendor_event_commu_ready +0x4cef 019457 istore 1 ,contwu +0x4cf0 019458 force 1 ,loopcnt +0x4cf1 019459 branch hci_send_event +: 019461 hci_get_cmd_complete_ptr: +0x4cf2 019462 force 12 ,contwu +0x4cf3 019463 branch hci_get_tx_ptr +: 019465 hci_get_payload_ptr: +0x4cf4 019466 force 8 ,contwu +0x4cf5 019467 branch hci_get_tx_ptr +: 019469 hci_get_packet_ptr: +0x4cf6 019470 force 6 ,contwu +: 019471 hci_get_tx_ptr: +0x4cf7 019472 branch h4_get_tx_ptr +: 019476 calc_tx_crc16: +0x4cf8 019477 pulse crc16 +0x4cf9 019478 enable enable_crc +: 019479 crcloop: +0x4cfa 019480 ifetch 1 ,contwu +0x4cfb 019481 inject bucket ,8 +0x4cfc 019482 loop crcloop +0x4cfd 019483 enable enable_parity +0x4cfe 019484 inject bucket ,16 +0x4cff 019485 disable enable_parity +0x4d00 019486 disable enable_crc +0x4d01 019487 disable crc16 +0x4d02 019488 byteswap pdata ,pdata +0x4d03 019489 rtn +: 019493 cmd_exit: +0x4d04 019494 jam 0 ,mem_hci_cmd +0x4d05 019495 rtn +: 019496 cmd_check_plap: +0x4d06 019497 fetch 6 ,mem_hci_plap +0x4d07 019498 fetcht 6 ,mem_plap +0x4d08 019499 isub temp ,null +0x4d09 019500 rtn +: 019505 cmd_pair: +0x4d0a 019506 fetch 1 ,mem_op +0x4d0b 019507 bbit1 op_inrand_req ,cmd_pair_passive +0x4d0c 019508 call tid_initiate +0x4d0d 019509 jam lmp_in_rand ,mem_lmo_opcode2 +0x4d0e 019510 branch cmd_exit +: 019511 cmd_pair_passive: +0x4d0f 019512 set0 op_inrand_req ,pdata +0x4d10 019513 store 1 ,mem_op +0x4d11 019514 call lmp_accept_inrand +0x4d12 019515 setarg 0 +0x4d13 019516 setflag master ,smap_lmptid ,pdata +0x4d14 019517 store 1 ,mem_lmo_tid2 +0x4d15 019518 branch cmd_exit +0x4d16 019519 rtn +: 019520 cmd_in_sniff: +0x4d17 019521 jam lmp_sniff_req ,mem_lmo_opcode2 +0x4d18 019522 arg mem_sniff_payload ,contw +0x4d19 019523 setarg 0 +0x4d1a 019524 isolate1 27 ,clke_bt +0x4d1b 019525 setflag true ,1 ,pdata +0x4d1c 019526 istore 1 ,contw +0x4d1d 019527 setarg 0 +0x4d1e 019528 istore 2 ,contw +0x4d1f 019529 fetch 2 ,mem_sniff_param_interval +0x4d20 019530 istore 2 ,contw +0x4d21 019531 fetch 1 ,mem_sniff_param_attempt +0x4d22 019532 istore 2 ,contw +0x4d23 019533 fetch 1 ,mem_sniff_param_timeout +0x4d24 019534 istore 2 ,contw +0x4d25 019535 branch cmd_exit +: 019537 cmd_exit_sniff: +0x4d26 019538 jam lmp_unsniff_req ,mem_lmo_opcode2 +0x4d27 019539 branch cmd_exit +: 019541 hci_idle_dispatch: +0x4d28 019542 call gpio_check_uart_state +0x4d29 019543 rtn true +0x4d2a 019544 arg uart_wakeup_rx ,temp +0x4d2b 019545 call gpio_get_bit +0x4d2c 019546 nbranch uart_wake_up ,true +0x4d2d 019547 jam hci_rx_wake ,mem_hci_lt_rx_state +0x4d2e 019548 rtn +: 019549 uart_wake_up: +0x4d2f 019550 fetch 1 ,mem_hci_lt_rx_state +0x4d30 019551 rtnne hci_rx_wake +0x4d31 019552 call hci_exit_lpm +0x4d32 019553 branch hci_send_commu_ready_event +: 019567 hid_rx_process: +0x4d33 019568 bpatchx patch20_5 ,mem_patch20 +0x4d34 019569 fetch 2 ,mem_l2cap_payload_ptr +0x4d35 019570 copy pdata ,contr +0x4d36 019571 ifetch 1 ,contr +0x4d37 019572 and pdata ,0x0f ,temp +0x4d38 019573 rshift4 pdata ,pdata +0x4d39 019574 beq hid_type_set_idle ,hid_rx_process_handshake +0x4d3a 019575 beq hid_type_set_protocol ,hid_rx_process_handshake +0x4d3b 019576 beq hid_type_data ,hid_rx_process_data +0x4d3c 019577 beq hid_type_set_report ,hid_rx_process_set_report +0x4d3d 019578 beq hid_type_control ,hid_rx_process_hid_control +0x4d3e 019579 rtn +: 019581 hid_rx_process_hid_control: +0x4d3f 019582 copy temp ,pdata +0x4d40 019583 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +0x4d41 019584 beq hid_control_p_suspend ,hid_rx_process_suspend +0x4d42 019585 rtn +: 019587 hid_rx_process_virtual_cable_unplug: +0x4d43 019588 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +0x4d44 019589 call ui_ipc_send_event +0x4d45 019590 fetch 1 ,mem_device_option +0x4d46 019591 rtnbit0 dvc_op_mouse +0x4d47 019592 copy temp ,pdata +0x4d48 019593 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +0x4d49 019594 rtn +: 019595 hid_rx_process_suspend: +0x4d4a 019596 rtn +: 019598 hid_rx_process_set_report: +0x4d4b 019599 call hid_rx_process_data +0x4d4c 019600 arg 0x01 ,rega +0x4d4d 019601 call hid_malloc_tx_buff +0x4d4e 019602 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d4f 019603 istore 2 ,contw +0x4d50 019604 setarg 0x00 +0x4d51 019605 istore 1 ,contw +0x4d52 019606 rtn +: 019608 hid_rx_process_handshake: +0x4d53 019609 arg 1 ,rega +0x4d54 019610 call hid_malloc_tx_buff +0x4d55 019611 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d56 019612 istore 2 ,contw +0x4d57 019613 setarg 0 +0x4d58 019614 istore 1 ,contw +0x4d59 019615 jam 1 ,mem_ui_data_txbuff_length +0x4d5a 019616 fetch 1 ,mem_hid_control_state +0x4d5b 019617 set1 l2cap_channel_hid_handshake_done +0x4d5c 019618 store 1 ,mem_hid_control_state +0x4d5d 019619 jam bt_evt_hid_handshake ,mem_fifo_temp +0x4d5e 019620 branch ui_ipc_send_event +: 019622 hid_rx_process_data: +0x4d5f 019623 ifetch 1 ,contr +0x4d60 019624 beq hid_report_id_kb ,hid_rx_process_data_hid_kb +0x4d61 019625 rtn +: 019627 hid_rx_process_data_hid_kb: +0x4d62 019628 rtn +: 019631 hid_malloc_tx_buff: +0x4d63 019632 call l2cap_malloc +0x4d64 019633 copy rega ,temp +0x4d65 019634 storet 1 ,mem_ui_data_txbuff_length +0x4d66 019635 copy pdata ,contw +0x4d67 019636 copy rega ,pdata +0x4d68 019637 istore 2 ,contw +0x4d69 019638 rtn +: 019655 l2cap_init: +0x4d6a 019656 branch l2cap_init_wake ,wake +: 019657 l2cap_init_work: +0x4d6b 019658 setarg mem_l2cap_xmem_end +0x4d6c 019659 arg mem_l2cap_xmem_start ,contw +0x4d6d 019660 isub contw ,loopcnt +0x4d6e 019661 call clear_mem +: 019662 l2cap_init_wake: +0x4d6f 019663 bpatchx patch20_6 ,mem_patch20 +0x4d70 019664 setarg mem_sdp_mem_end +0x4d71 019665 arg mem_sdp_mem_start ,contw +0x4d72 019666 isub contw ,loopcnt +0x4d73 019667 call clear_mem +0x4d74 019668 setarg mem_l2cap_mem_end +0x4d75 019669 arg mem_l2cap_mem_start ,contw +0x4d76 019670 isub contw ,loopcnt +0x4d77 019671 call clear_mem +0x4d78 019672 branch l2cap_lpm_load_txbuf +: 019674 process_rx_l2cap_pkt: +0x4d79 019675 bpatchx patch20_7 ,mem_patch20 +0x4d7a 019676 copy contr ,temp +0x4d7b 019679 copy temp ,contr +0x4d7c 019680 ifetch 2 ,contr +0x4d7d 019681 store 2 ,mem_l2cap_rx_pkt_length +0x4d7e 019682 ifetch 2 ,contr +0x4d7f 019683 store 2 ,mem_l2cap_rx_cid +0x4d80 019684 deposit contr +0x4d81 019685 store 2 ,mem_l2cap_payload_ptr +0x4d82 019686 fetch 1 ,memui_reconnect_mode +0x4d83 019687 beq no_reconnection ,l2cap_rx_multiplexing +0x4d84 019688 branch ml2cap_rx_multiplexing +: 019690 l2cap_rx_multiplexing: +0x4d85 019691 fetch 2 ,mem_l2cap_rx_pkt_length +0x4d86 019692 branch l2cap_rx_reset_state ,blank +0x4d87 019693 bpatchx patch21_0 ,mem_patch21 +0x4d88 019694 fetch 1 ,mem_l2cap_rx_cid +0x4d89 019695 beq l2cap_signal_channel ,l2cap_call_proc_signal +: 019696 l2cap_rx_multiplexing0: +0x4d8a 019697 beq l2cap_sdp_channel ,l2cap_call_proc_sdp +0x4d8b 019698 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x4d8c 019699 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x4d8d 019700 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x4d8e 019701 branch l2cap_rx_reset_state +: 019703 l2cap_check_map: +0x4d8f 019706 bpatchx patch21_1 ,mem_patch21 +0x4d90 019707 call l2cap_malloc_get_full_map +0x4d91 019708 fetch 1 ,mem_used_map +0x4d92 019709 beq 0 ,set_pdata_0 +0x4d93 019710 beq 1 ,set_pdata_0 +0x4d94 019711 beq 2 ,set_pdata_0 +0x4d95 019712 beq 3 ,set_pdata_0 +0x4d96 019713 beq 0x81 ,set_pdata_0 +0x4d97 019714 beq 0xc0 ,set_pdata_0 +0x4d98 019715 beq 0x80 ,set_pdata_0 +0x4d99 019716 beq 0x40 ,set_pdata_0 +0x4d9a 019717 rtn +: 019719 set_pdata_0: +0x4d9b 019720 setarg 0 +0x4d9c 019721 rtn +: 019724 l2cap_call_proc_signal: +0x4d9d 019725 call l2cap_check_map +0x4d9e 019726 nrtn blank +: 019727 l2cap_call_proc_signal0: +0x4d9f 019728 call l2cap_malloc_signal_channel +0x4da0 019729 call l2cap_process_signal_pkt +0x4da1 019730 fetcht 2 ,mem_l2cap_signal_tx_length +0x4da2 019731 branch l2cap_call_proc_no_reply ,blank +0x4da3 019732 call l2cap_get_signal_tx_buff +0x4da4 019733 fetch 2 ,mem_l2cap_signal_tx_length +0x4da5 019734 istore 2 ,contw +0x4da6 019735 force l2cap_signal_channel ,pdata +0x4da7 019736 istore 2 ,contw +0x4da8 019737 branch l2cap_rx_reset_state +: 019739 l2cap_call_proc_sigal_pending: +0x4da9 019740 fetch 1 ,mem_l2cap_pending_item +0x4daa 019741 rtn blank +0x4dab 019742 copy pdata ,rega +0x4dac 019743 bpatchx patch21_2 ,mem_patch21 +0x4dad 019744 fetch 4 ,mem_l2cap_sdpres_delay_time +0x4dae 019745 arg 0x100 ,temp +0x4daf 019746 iadd temp ,temp +0x4db0 019747 copy clkn_bt ,pdata +0x4db1 019748 isub temp ,null +0x4db2 019749 nrtn positive +0x4db3 019750 jam 0 ,mem_l2cap_pending_item +0x4db4 019751 copy rega ,pdata +0x4db5 019752 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +0x4db6 019753 branch assert +: 019754 l2cap_sdp_conn_succ: +0x4db7 019755 arg 0 ,debug +0x4db8 019756 call l2cap_malloc_signal_channel +0x4db9 019757 call restore_l2cap_req_param +0x4dba 019758 call l2cap_get_signal_tx_payload +0x4dbb 019759 call save_cont_pointers +0x4dbc 019760 call send_connection_sdp_res +0x4dbd 019761 call l2cap_get_signal_tx_buff +0x4dbe 019763 setarg 0x000c +0x4dbf 019764 istore 2 ,contw +0x4dc0 019765 force l2cap_signal_channel ,pdata +0x4dc1 019766 istore 2 ,contw +0x4dc2 019767 branch l2cap_rx_reset_state +: 019771 l2cap_reset_sdp_map: +0x4dc3 019772 bpatchx patch21_3 ,mem_patch21 +0x4dc4 019773 fetch 2 ,mem_sdp_tx_pkt_length +0x4dc5 019774 increase 4 ,pdata +0x4dc6 019775 rshift4 pdata ,pdata +0x4dc7 019776 rshift3 pdata ,pdata +0x4dc8 019777 add pdata ,1 ,temp +0x4dc9 019778 arg mem_tx_fifo3 ,contr +0x4dca 019779 ifetch 3 ,contr +0x4dcb 019780 rtn blank +0x4dcc 019781 store 3 ,mem_tx_fifo_map_temp +0x4dcd 019782 fetch 1 ,mem_tx_fifo_map_temp +0x4dce 019783 copy pdata ,rega +0x4dcf 019784 call check_l2cap_map +0x4dd0 019785 copy regb ,pdata +0x4dd1 019786 store 1 ,mem_tx_fifo3 +0x4dd2 019787 rtn +: 019789 check_l2cap_map: +0x4dd3 019790 arg 0 ,queue +0x4dd4 019791 arg 0 ,regb +: 019793 check_l2cap_map_loop: +0x4dd5 019794 sub queue ,7 ,null +0x4dd6 019795 nrtn positive +0x4dd7 019796 qisolate1 rega +0x4dd8 019797 branch check_l2cap_map_used ,true +0x4dd9 019798 branch check_l2cap_map_used2 +: 019800 check_l2cap_map_used: +0x4dda 019801 copy temp ,pdata +0x4ddb 019802 branch check_l2cap_map_used2 ,blank +0x4ddc 019803 qset1 regb +0x4ddd 019804 increase -1 ,temp +: 019806 check_l2cap_map_used2: +0x4dde 019807 increase 1 ,queue +0x4ddf 019808 branch check_l2cap_map_loop +: 019810 l2cap_call_proc_sdp: +0x4de0 019811 call l2cap_malloc_is_fifo_empty +0x4de1 019812 nrtn blank +0x4de2 019813 call l2cap_check_map +0x4de3 019814 nrtn blank +0x4de4 019815 call l2cap_malloc_sdp_channel +0x4de5 019816 call sdp_process +0x4de6 019817 call l2cap_reset_sdp_map +0x4de7 019818 branch l2cap_call_proc_sdp_common +: 019821 ml2cap_call_proc_sdp: +0x4de8 019822 call l2cap_malloc_is_fifo_empty +0x4de9 019823 nrtn blank +0x4dea 019824 call l2cap_malloc_sdp_channel +0x4deb 019825 call sdp_process +: 019826 l2cap_call_proc_sdp_common: +0x4dec 019827 call l2cap_get_sdp_tx_buff +0x4ded 019828 fetch 2 ,mem_sdp_tx_pkt_length +0x4dee 019829 branch l2cap_call_proc_no_reply ,blank +0x4def 019830 istore 2 ,contw +0x4df0 019831 fetch 2 ,mem_sdp_remote_cid +0x4df1 019832 istore 2 ,contw +0x4df2 019833 branch l2cap_rx_reset_state +: 019835 l2cap_call_proc_hid: +0x4df3 019836 call hid_rx_process +0x4df4 019837 branch l2cap_rx_reset_state +: 019839 l2cap_call_proc_rfcomm: +0x4df5 019840 bpatchx patch21_4 ,mem_patch21 +0x4df6 019841 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x4df7 019842 call rfcomm_rx_process +0x4df8 019843 fetch 1 ,mem_rfcomm_malloc_fail_flag +0x4df9 019844 rtneq rfcomm_malloc_fail +0x4dfa 019845 branch l2cap_rx_reset_state +: 019846 l2cap_call_proc_no_reply: +0x4dfb 019847 call l2cap_malloc_discard +: 019849 l2cap_rx_reset_state: +0x4dfc 019850 setarg 0 +0x4dfd 019851 store 2 ,mem_l2cap_rx_pkt_length +0x4dfe 019852 store 2 ,mem_l2cap_rx_cid +0x4dff 019853 jam l2cap_rx_done ,mem_l2cap_rx_done +0x4e00 019854 rtn +: 019856 l2cap_process_signal_pkt: +0x4e01 019857 bpatchx patch21_5 ,mem_patch21 +0x4e02 019858 call l2cap_get_signal_tx_payload +0x4e03 019859 force 0 ,regb +0x4e04 019860 fetch 2 ,mem_l2cap_rx_pkt_length +0x4e05 019861 copy pdata ,regc +0x4e06 019862 fetch 2 ,mem_l2cap_payload_ptr +0x4e07 019863 iforce contr +: 019864 l2cap_process_signal_pkt_loop: +0x4e08 019865 call l2cap_process_one_signal +0x4e09 019866 deposit regc +0x4e0a 019867 increase -4 ,regc +0x4e0b 019868 increase -4 ,pdata +0x4e0c 019869 nbranch l2cap_process_signal_pkt_loop ,blank +0x4e0d 019870 copy regb ,pdata +0x4e0e 019871 store 2 ,mem_l2cap_signal_tx_length +0x4e0f 019872 rtn +: 019874 l2cap_process_one_signal: +0x4e10 019875 bpatchx patch21_6 ,mem_patch21 +0x4e11 019876 ifetch 1 ,contr +0x4e12 019877 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +0x4e13 019878 beq signal_connect_req ,l2cap_proc_signal_connect_req +0x4e14 019879 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +0x4e15 019880 beq signal_config_req ,l2cap_proc_signal_config_req +0x4e16 019881 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +0x4e17 019882 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +0x4e18 019883 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +0x4e19 019884 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x4e1a 019885 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +0x4e1b 019886 beq signal_info_req ,l2cap_proc_signal_info_req +0x4e1c 019887 beq signal_info_rsp ,l2cap_proc_signal_info_rsp +0x4e1d 019888 call l2cap_reject_command +: 019889 l2cap_process_one_signal_rtn: +0x4e1e 019890 rtn +: 019892 l2cap_proc_signal_info_req: +0x4e1f 019893 ifetch 1 ,contr +0x4e20 019894 copy pdata ,queue +0x4e21 019895 ifetch 2 ,contr +0x4e22 019896 copy pdata ,rega +0x4e23 019897 copy regc ,pdata +0x4e24 019898 isub rega ,regc +0x4e25 019899 setarg signal_info_rsp +0x4e26 019900 istore 1 ,contw +0x4e27 019901 copy queue ,pdata +0x4e28 019902 istore 1 ,contw +0x4e29 019903 ifetch 2 ,contr +: 019904 l2cap_proc_signal_info_req_reply: +0x4e2a 019905 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +0x4e2b 019906 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +0x4e2c 019907 rtn +: 019908 l2cap_proc_signal_info_req_ext: +0x4e2d 019909 setarg 0x020008 +0x4e2e 019910 istore 6 ,contw +0x4e2f 019911 setarg 0x0280 +0x4e30 019912 istore 4 ,contw +0x4e31 019913 force 12 ,pdata +0x4e32 019914 branch l2cap_proc_signal_info_req_common +: 019915 l2cap_proc_signal_info_req_fix: +0x4e33 019916 setarg 0x3000c +0x4e34 019917 istore 6 ,contw +0x4e35 019918 setarg 0x0006 +0x4e36 019919 istore 8 ,contw +0x4e37 019920 force 16 ,pdata +: 019921 l2cap_proc_signal_info_req_common: +0x4e38 019922 iadd regb ,regb +0x4e39 019923 branch l2cap_process_one_signal_rtn +: 019925 ml2cap_proc_signal_info_req: +0x4e3a 019926 ifetch 1 ,contr +0x4e3b 019927 copy pdata ,queue +0x4e3c 019928 ifetch 2 ,contr +0x4e3d 019929 copy pdata ,rega +0x4e3e 019930 ifetch 2 ,contr +0x4e3f 019931 store 2 ,mem_temp +0x4e40 019932 copy regc ,pdata +0x4e41 019933 isub rega ,regc +0x4e42 019934 call l2cap_get_signal_tx_payload +0x4e43 019935 setarg signal_info_rsp +0x4e44 019936 istore 1 ,contw +0x4e45 019937 copy queue ,pdata +0x4e46 019938 istore 1 ,contw +0x4e47 019939 fetch 2 ,mem_temp +0x4e48 019940 branch l2cap_proc_signal_info_req_reply +: 019944 l2cap_proc_signal_cmd_reject: +0x4e49 019945 ifetch 1 ,contr +0x4e4a 019946 copy pdata ,queue +0x4e4b 019947 ifetch 2 ,contr +0x4e4c 019948 copy pdata ,rega +0x4e4d 019949 iadd contr ,contr +0x4e4e 019950 copy regc ,pdata +0x4e4f 019951 isub rega ,regc +: 019952 l2cap_proc_signal_cmd_reject_rtn: +0x4e50 019953 branch l2cap_process_one_signal_rtn +: 019955 l2cap_proc_signal_connect_req: +0x4e51 019956 call save_cont_pointers +0x4e52 019959 call load_cont_pointers +0x4e53 019960 arg 0 ,debug +0x4e54 019961 ifetch 1 ,contr +0x4e55 019962 copy pdata ,queue +0x4e56 019963 ifetch 2 ,contr +0x4e57 019964 copy pdata ,rega +0x4e58 019965 ifetch 2 ,contr +0x4e59 019966 copy pdata ,temp +0x4e5a 019967 ifetch 2 ,contr +0x4e5b 019968 copy pdata ,timeup +0x4e5c 019969 bpatchx patch21_7 ,mem_patch21 +0x4e5d 019970 copy temp ,pdata +0x4e5e 019971 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +0x4e5f 019972 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +0x4e60 019973 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +0x4e61 019974 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +0x4e62 019975 call l2cap_reject_command +0x4e63 019976 branch l2cap_proc_signal_connect_req_rtn +: 019978 l2cap_proc_signal_connect_req_sdp: +0x4e64 019979 call save_cont_pointers +0x4e65 019980 arg l2cap_sdp_channel ,temp +0x4e66 019981 fetch 2 ,mem_sdp_remote_cid +0x4e67 019982 nbranch already_connected ,blank +0x4e68 019983 copy timeup ,pdata +0x4e69 019984 store 2 ,mem_sdp_remote_cid +0x4e6a 019985 copy clkn_bt ,pdata +0x4e6b 019986 store 4 ,mem_l2cap_sdpres_delay_time +0x4e6c 019987 call store_l2cap_req_param +0x4e6d 019988 branch send_connection_pending +: 019990 store_l2cap_req_param: +0x4e6e 019991 storet 2 ,mem_psm +0x4e6f 019992 deposit timeup +0x4e70 019993 store 2 ,mem_scid +0x4e71 019994 deposit rega +0x4e72 019995 store 2 ,mem_cmd_length +0x4e73 019996 deposit regb +0x4e74 019997 store 2 ,mem_tt2 +0x4e75 019998 deposit regc +0x4e76 019999 store 2 ,mem_tt3 +0x4e77 020000 deposit queue +0x4e78 020001 store 2 ,mem_id +0x4e79 020002 rtn +: 020004 restore_l2cap_req_param: +0x4e7a 020005 fetcht 2 ,mem_psm +0x4e7b 020006 fetch 2 ,mem_scid +0x4e7c 020007 copy pdata ,timeup +0x4e7d 020008 fetch 2 ,mem_cmd_length +0x4e7e 020009 copy pdata ,rega +0x4e7f 020010 fetch 2 ,mem_tt2 +0x4e80 020011 copy pdata ,regb +0x4e81 020012 fetch 2 ,mem_tt3 +0x4e82 020013 copy pdata ,regc +0x4e83 020014 fetch 2 ,mem_id +0x4e84 020015 copy pdata ,queue +0x4e85 020016 rtn +: 020018 l2cap_proc_signal_connect_req_rfcomm: +0x4e86 020019 call save_cont_pointers +0x4e87 020020 setarg l2cap_rfcomm_channel +0x4e88 020021 arg l2cap_rfcomm_channel ,temp +0x4e89 020022 fetch 2 ,mem_rfcomm_remote_cid +0x4e8a 020023 nbranch already_connected ,blank +0x4e8b 020024 copy timeup ,pdata +0x4e8c 020025 store 2 ,mem_rfcomm_remote_cid +0x4e8d 020026 fetch 1 ,mem_rfcomm_state +0x4e8e 020027 set1 l2cap_channel_state_conn_req ,pdata +0x4e8f 020028 set1 l2cap_channel_state_conn_res ,pdata +0x4e90 020029 store 1 ,mem_rfcomm_state +0x4e91 020030 branch send_connection_res +: 020031 l2cap_proc_signal_connect_req_hid_ctrl: +0x4e92 020032 call save_cont_pointers +0x4e93 020033 arg l2cap_hid_control_channel ,temp +0x4e94 020034 fetch 2 ,mem_hid_ctrl_remote_cid +0x4e95 020035 nbranch already_connected ,blank +0x4e96 020036 copy timeup ,pdata +0x4e97 020037 store 2 ,mem_hid_ctrl_remote_cid +0x4e98 020038 fetch 1 ,mem_hid_control_state +0x4e99 020039 set1 l2cap_channel_state_conn_req ,pdata +0x4e9a 020040 set1 l2cap_channel_state_conn_res ,pdata +0x4e9b 020041 store 1 ,mem_hid_control_state +0x4e9c 020042 branch send_connection_res +: 020043 l2cap_proc_signal_connect_req_hid_int: +0x4e9d 020044 call save_cont_pointers +0x4e9e 020045 deposit clke +0x4e9f 020046 arg l2cap_hid_interrupt_channel ,temp +0x4ea0 020047 fetch 2 ,mem_hid_int_remote_cid +0x4ea1 020048 nbranch already_connected ,blank +0x4ea2 020049 copy timeup ,pdata +0x4ea3 020050 store 2 ,mem_hid_int_remote_cid +0x4ea4 020051 fetch 1 ,mem_hid_interrupt_state +0x4ea5 020052 set1 l2cap_channel_state_conn_req ,pdata +0x4ea6 020053 set1 l2cap_channel_state_conn_res ,pdata +0x4ea7 020054 store 1 ,mem_hid_interrupt_state +0x4ea8 020055 branch send_connection_res +: 020057 send_connection_pending: +0x4ea9 020058 setarg l2cap_connect_pending +0x4eaa 020059 store 2 ,meml2cap_t1 +0x4eab 020060 jam l2cap_sdp_channel ,mem_l2cap_pending_item +0x4eac 020061 branch send_connection_res0 +: 020062 send_connection_sdp_res: +0x4ead 020063 fetch 1 ,mem_sdp_state +0x4eae 020064 set1 l2cap_channel_state_conn_req ,pdata +0x4eaf 020065 set1 l2cap_channel_state_conn_res ,pdata +0x4eb0 020066 store 1 ,mem_sdp_state +: 020067 send_connection_res: +0x4eb1 020068 setarg l2cap_connect_successful +0x4eb2 020069 store 2 ,meml2cap_t1 +: 020070 send_connection_res0: +0x4eb3 020071 bpatchx patch22_0 ,mem_patch22 +0x4eb4 020072 call load_cont_pointers +0x4eb5 020073 setarg signal_connect_rsp +0x4eb6 020074 istore 1 ,contw +0x4eb7 020075 copy queue ,pdata +0x4eb8 020076 istore 1 ,contw +0x4eb9 020077 setarg 0x0008 +0x4eba 020078 istore 2 ,contw +0x4ebb 020079 copy temp ,pdata +0x4ebc 020080 istore 2 ,contw +0x4ebd 020081 copy timeup ,pdata +0x4ebe 020082 istore 2 ,contw +0x4ebf 020083 fetch 2 ,meml2cap_t1 +0x4ec0 020084 beq l2cap_connect_pending ,connect_pending +0x4ec1 020085 isolate0 0 ,debug +0x4ec2 020086 branch connect_suc ,true +0x4ec3 020087 setarg l2cap_connect_refused_no_resources +: 020088 connect_suc: +0x4ec4 020089 istore 2 ,contw +0x4ec5 020090 force 0x0000 ,pdata +0x4ec6 020091 istore 2 ,contw +0x4ec7 020092 setarg 12 +0x4ec8 020093 branch connect_req_update_byte_counts +: 020094 connect_pending: +0x4ec9 020095 istore 2 ,contw +0x4eca 020096 force 0x0002 ,pdata +0x4ecb 020097 istore 2 ,contw +0x4ecc 020098 setarg 12 +0x4ecd 020099 branch connect_req_update_byte_counts +: 020101 already_connected: +0x4ece 020102 set1 0 ,debug +0x4ecf 020103 branch send_connection_res +: 020104 connect_req_update_byte_counts: +0x4ed0 020105 iadd regb ,regb +0x4ed1 020106 copy regc ,pdata +0x4ed2 020107 isub rega ,regc +0x4ed3 020108 branch l2cap_proc_signal_connect_req_rtn +: 020109 l2cap_proc_signal_connect_req_rtn: +0x4ed4 020110 branch l2cap_process_one_signal_rtn +: 020112 l2cap_proc_signal_connect_rsp: +0x4ed5 020113 ifetch 1 ,contr +0x4ed6 020114 copy pdata ,queue +0x4ed7 020115 ifetch 2 ,contr +0x4ed8 020116 copy pdata ,rega +0x4ed9 020117 copy regc ,pdata +0x4eda 020118 isub rega ,regc +0x4edb 020119 ifetch 2 ,contr +0x4edc 020120 copy pdata ,timeup +0x4edd 020121 ifetch 2 ,contr +0x4ede 020122 copy pdata ,temp +0x4edf 020123 bpatchx patch22_1 ,mem_patch22 +0x4ee0 020124 setarg l2cap_sdp_channel +0x4ee1 020125 isub temp ,null +0x4ee2 020126 branch l2cap_proc_signal_connect_rsp_sdp ,zero +0x4ee3 020127 setarg l2cap_rfcomm_channel +0x4ee4 020128 isub temp ,null +0x4ee5 020129 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +0x4ee6 020130 setarg l2cap_hid_control_channel +0x4ee7 020131 isub temp ,null +0x4ee8 020132 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x4ee9 020133 setarg l2cap_hid_interrupt_channel +0x4eea 020134 isub temp ,null +0x4eeb 020135 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +0x4eec 020136 rtn +: 020138 l2cap_proc_signal_connect_rsp_sdp: +0x4eed 020139 copy timeup ,pdata +0x4eee 020140 store 2 ,mem_sdp_remote_cid +0x4eef 020141 fetch 1 ,mem_sdp_state +0x4ef0 020142 set1 l2cap_channel_state_conn_res ,pdata +0x4ef1 020143 store 1 ,mem_sdp_state +0x4ef2 020144 branch l2cap_process_one_signal_rtn +: 020145 l2cap_proc_signal_connect_rsp_rfcomm: +0x4ef3 020146 copy timeup ,pdata +0x4ef4 020147 store 2 ,mem_rfcomm_remote_cid +0x4ef5 020148 fetch 1 ,mem_rfcomm_state +0x4ef6 020149 set1 l2cap_channel_state_conn_res ,pdata +0x4ef7 020150 store 1 ,mem_rfcomm_state +0x4ef8 020151 rtn +: 020152 l2cap_proc_signal_connect_rsp_hid_int: +0x4ef9 020153 copy timeup ,pdata +0x4efa 020154 store 2 ,mem_hid_ctrl_remote_cid +0x4efb 020155 fetch 1 ,mem_hid_interrupt_state +0x4efc 020156 set1 l2cap_channel_state_conn_res ,pdata +0x4efd 020157 store 1 ,mem_hid_interrupt_state +0x4efe 020158 rtn +: 020159 l2cap_proc_signal_connect_rsp_hid_ctrl: +0x4eff 020160 copy timeup ,pdata +0x4f00 020161 store 2 ,mem_hid_int_remote_cid +0x4f01 020162 fetch 1 ,mem_hid_control_state +0x4f02 020163 set1 l2cap_channel_state_conn_res ,pdata +0x4f03 020164 store 1 ,mem_hid_control_state +0x4f04 020165 rtn +: 020167 l2cap_proc_signal_config_req: +0x4f05 020168 ifetch 1 ,contr +0x4f06 020169 copy pdata ,queue +0x4f07 020170 ifetch 2 ,contr +0x4f08 020171 copy pdata ,rega +0x4f09 020172 copy regc ,pdata +0x4f0a 020173 isub rega ,regc +0x4f0b 020174 ifetch 2 ,contr +0x4f0c 020175 copy pdata ,temp +0x4f0d 020176 copy temp ,rega +0x4f0e 020177 bpatchx patch22_2 ,mem_patch22 +0x4f0f 020178 setarg l2cap_sdp_channel +0x4f10 020179 isub temp ,null +0x4f11 020180 branch l2cap_proc_signal_config_req_sdp ,zero +0x4f12 020181 setarg l2cap_rfcomm_channel +0x4f13 020182 isub temp ,null +0x4f14 020183 branch l2cap_proc_signal_config_req_rfcomm ,zero +0x4f15 020184 setarg l2cap_hid_control_channel +0x4f16 020185 isub temp ,null +0x4f17 020186 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +0x4f18 020187 setarg l2cap_hid_interrupt_channel +0x4f19 020188 isub temp ,null +0x4f1a 020189 branch l2cap_proc_signal_config_req_hid_int ,zero +0x4f1b 020190 branch l2cap_reject_command +: 020192 l2cap_proc_signal_config_req_sdp: +0x4f1c 020193 copy contw ,timeup +0x4f1d 020194 fetch 1 ,mem_sdp_state +0x4f1e 020195 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f1f 020196 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f20 020198 store 1 ,mem_sdp_state +0x4f21 020199 copy timeup ,contw +0x4f22 020200 arg l2cap_sdp_channel ,timeup +0x4f23 020201 fetch 2 ,mem_sdp_remote_cid +0x4f24 020202 copy pdata ,temp +0x4f25 020203 branch l2cap_send_config_rsp +: 020204 l2cap_proc_signal_config_req_hid_ctrl: +0x4f26 020205 copy contw ,timeup +0x4f27 020206 fetch 1 ,mem_hid_control_state +0x4f28 020207 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f29 020208 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f2a 020210 store 1 ,mem_hid_control_state +0x4f2b 020211 copy timeup ,contw +0x4f2c 020212 arg l2cap_hid_control_channel ,timeup +0x4f2d 020213 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f2e 020214 copy pdata ,temp +0x4f2f 020215 branch l2cap_send_config_rsp +: 020216 l2cap_proc_signal_config_req_hid_int: +0x4f30 020217 copy contw ,timeup +0x4f31 020218 fetch 1 ,mem_hid_interrupt_state +0x4f32 020219 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f33 020220 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f34 020222 store 1 ,mem_hid_interrupt_state +0x4f35 020223 copy timeup ,contw +0x4f36 020224 arg l2cap_hid_interrupt_channel ,timeup +0x4f37 020225 fetch 2 ,mem_hid_int_remote_cid +0x4f38 020226 copy pdata ,temp +0x4f39 020227 branch l2cap_send_config_rsp +: 020228 l2cap_proc_signal_config_req_rfcomm: +0x4f3a 020229 copy contw ,timeup +0x4f3b 020230 fetch 1 ,mem_rfcomm_state +0x4f3c 020231 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f3d 020232 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f3e 020234 store 1 ,mem_rfcomm_state +0x4f3f 020236 copy timeup ,contw +0x4f40 020237 arg l2cap_rfcomm_channel ,timeup +0x4f41 020238 fetch 2 ,mem_rfcomm_remote_cid +0x4f42 020239 copy pdata ,temp +: 020240 l2cap_send_config_rsp: +0x4f43 020241 bpatchx patch22_3 ,mem_patch22 +0x4f44 020242 setarg signal_config_rsp +0x4f45 020243 istore 1 ,contw +0x4f46 020244 copy queue ,pdata +0x4f47 020245 istore 1 ,contw +0x4f48 020246 setarg 0x0006 +0x4f49 020247 istore 2 ,contw +0x4f4a 020248 copy temp ,pdata +0x4f4b 020249 istore 2 ,contw +0x4f4c 020250 force 0x00 ,pdata +0x4f4d 020251 istore 2 ,contw +0x4f4e 020252 force l2cap_config_success ,pdata +0x4f4f 020253 istore 2 ,contw +0x4f50 020254 force 10 ,pdata +0x4f51 020255 iadd regb ,regb +0x4f52 020257 storet 2 ,mem_config_req_dest_cid +0x4f53 020258 copy queue ,pdata +0x4f54 020259 store 1 ,mem_config_identifier +0x4f55 020260 force l2cap_sdp_channel ,pdata +0x4f56 020261 icompare 0xff ,timeup +0x4f57 020262 branch l2cap_send_config_rsp_is_sdp ,true +0x4f58 020263 increase 1 ,pdata +: 020264 l2cap_send_config_rsp_is_sdp: +0x4f59 020266 rtn +: 020267 l2cap_check_channel_state: +0x4f5a 020268 disable user +0x4f5b 020269 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5c 020270 rtnbit0 l2cap_channel_state_conn_req ,pdata +0x4f5d 020271 rtnbit0 l2cap_channel_state_conn_res ,pdata +0x4f5e 020272 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5f 020273 copy contr ,contw +0x4f60 020274 increase -1 ,contw +0x4f61 020275 istore 1 ,contw +0x4f62 020276 enable user +0x4f63 020277 rtn +: 020278 l2cap_send_config_req: +: 020279 l2cap_send_config_req_sdp: +0x4f64 020280 fetch 1 ,mem_sdp_state +0x4f65 020281 call l2cap_check_channel_state +0x4f66 020282 nbranch l2cap_send_config_req_rfcomm ,user +0x4f67 020283 jam l2cap_sdp_channel ,mem_send_config_req +0x4f68 020284 fetch 2 ,mem_sdp_remote_cid +0x4f69 020285 store 2 ,mem_config_req_dest_cid +0x4f6a 020286 branch l2cap_generate_config_req +: 020287 l2cap_send_config_req_rfcomm: +0x4f6b 020288 fetch 1 ,mem_rfcomm_state +0x4f6c 020289 call l2cap_check_channel_state +0x4f6d 020290 nbranch l2cap_send_config_req_hid_ctrl ,user +0x4f6e 020291 jam l2cap_rfcomm_channel ,mem_send_config_req +0x4f6f 020292 fetch 2 ,mem_rfcomm_remote_cid +0x4f70 020293 store 2 ,mem_config_req_dest_cid +0x4f71 020294 branch l2cap_generate_config_req +: 020295 l2cap_send_config_req_hid_ctrl: +0x4f72 020296 fetch 1 ,mem_hid_control_state +0x4f73 020297 call l2cap_check_channel_state +0x4f74 020298 nbranch l2cap_send_config_req_hid_int ,user +0x4f75 020299 jam l2cap_hid_control_channel ,mem_send_config_req +0x4f76 020300 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f77 020301 store 2 ,mem_config_req_dest_cid +0x4f78 020302 branch l2cap_generate_config_req +: 020303 l2cap_send_config_req_hid_int: +0x4f79 020304 fetch 1 ,mem_hid_interrupt_state +0x4f7a 020305 call l2cap_check_channel_state +0x4f7b 020306 nrtn user +0x4f7c 020307 jam l2cap_hid_interrupt_channel ,mem_send_config_req +0x4f7d 020308 fetch 2 ,mem_hid_int_remote_cid +0x4f7e 020309 store 2 ,mem_config_req_dest_cid +: 020312 l2cap_generate_config_req: +0x4f7f 020313 bpatchx patch22_4 ,mem_patch22 +0x4f80 020314 call l2cap_get_req_id +0x4f81 020315 call l2cap_malloc_signal_channel +0x4f82 020316 force 0 ,regb +0x4f83 020317 call l2cap_get_signal_tx_payload +0x4f84 020318 force signal_config_req ,pdata +0x4f85 020319 istore 1 ,contw +0x4f86 020320 fetch 1 ,mem_ml2cap_comm_id +0x4f87 020321 istore 1 ,contw +0x4f88 020322 setarg 0x0008 +0x4f89 020323 istore 2 ,contw +0x4f8a 020324 fetch 2 ,mem_config_req_dest_cid +0x4f8b 020325 istore 2 ,contw +0x4f8c 020326 setarg 0x0000 +0x4f8d 020327 istore 2 ,contw +0x4f8e 020328 force 1 ,pdata +0x4f8f 020329 istore 1 ,contw +0x4f90 020330 force 2 ,pdata +0x4f91 020331 istore 1 ,contw +0x4f92 020332 fetch 1 ,mem_send_config_req +0x4f93 020333 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +0x4f94 020334 setarg l2cap_config_mtu_sdp +0x4f95 020335 istore 2 ,contw +0x4f96 020336 branch l2cap_generate_config_req_done +: 020337 l2cap_generate_config_req_rfcomm: +0x4f97 020338 setarg l2cap_config_mtu_rfcomm +0x4f98 020339 istore 2 ,contw +: 020340 l2cap_generate_config_req_done: +0x4f99 020341 arg 0x0c ,temp +0x4f9a 020342 storet 2 ,mem_l2cap_signal_tx_length +0x4f9b 020343 call l2cap_get_signal_tx_buff +0x4f9c 020344 fetch 2 ,mem_l2cap_signal_tx_length +0x4f9d 020345 istore 2 ,contw +0x4f9e 020346 force l2cap_signal_channel ,pdata +0x4f9f 020347 istore 2 ,contw +0x4fa0 020348 jam 0 ,mem_send_config_req +: 020349 l2cap_proc_signal_config_req_rtn: +0x4fa1 020350 branch l2cap_process_one_signal_rtn +: 020352 l2cap_proc_signal_config_rsp: +0x4fa2 020353 increase 1 ,contr +0x4fa3 020354 ifetch 2 ,contr +0x4fa4 020355 copy pdata ,rega +0x4fa5 020356 copy regc ,pdata +0x4fa6 020357 isub rega ,regc +0x4fa7 020358 ifetch 2 ,contr +0x4fa8 020359 copy pdata ,rega +0x4fa9 020360 bpatchx patch22_5 ,mem_patch22 +0x4faa 020361 setarg l2cap_sdp_channel +0x4fab 020362 isub rega ,null +0x4fac 020363 branch l2cap_proc_signal_config_rsp_sdp ,zero +0x4fad 020364 setarg l2cap_rfcomm_channel +0x4fae 020365 isub rega ,null +0x4faf 020366 branch l2cap_proc_signal_config_rsp_rfcomm ,zero +0x4fb0 020367 setarg l2cap_hid_control_channel +0x4fb1 020368 isub rega ,null +0x4fb2 020369 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x4fb3 020370 setarg l2cap_hid_interrupt_channel +0x4fb4 020371 isub rega ,null +0x4fb5 020372 branch l2cap_proc_signal_config_rsp_hid_int ,zero +0x4fb6 020373 increase 2 ,contr +0x4fb7 020374 ifetch 2 ,contr +0x4fb8 020375 iforce null +0x4fb9 020376 branch l2cap_process_one_signal_rtn +: 020377 l2cap_proc_signal_config_rsp_sdp: +0x4fba 020378 fetch 1 ,mem_sdp_state +0x4fbb 020379 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fbc 020380 store 1 ,mem_sdp_state +0x4fbd 020381 branch l2cap_process_one_signal_rtn +: 020382 l2cap_proc_signal_config_rsp_rfcomm: +0x4fbe 020383 fetch 1 ,mem_rfcomm_state +0x4fbf 020384 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc0 020385 store 1 ,mem_rfcomm_state +0x4fc1 020386 branch l2cap_process_one_signal_rtn +: 020387 l2cap_proc_signal_config_rsp_hid_ctrl: +0x4fc2 020388 fetch 1 ,mem_hid_control_state +0x4fc3 020389 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc4 020390 store 1 ,mem_hid_control_state +0x4fc5 020391 branch l2cap_process_one_signal_rtn +: 020392 l2cap_proc_signal_config_rsp_hid_int: +0x4fc6 020393 fetch 1 ,mem_hid_interrupt_state +0x4fc7 020394 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc8 020395 store 1 ,mem_hid_interrupt_state +0x4fc9 020396 jam bt_evt_hid_connected ,mem_fifo_temp +0x4fca 020397 branch ui_ipc_send_event +: 020401 l2cap_proc_signal_disconnect_req: +0x4fcb 020402 ifetch 1 ,contr +0x4fcc 020403 copy pdata ,queue +0x4fcd 020404 ifetch 2 ,contr +0x4fce 020405 copy pdata ,rega +0x4fcf 020406 copy regc ,pdata +0x4fd0 020407 isub rega ,regc +0x4fd1 020408 ifetch 2 ,contr +0x4fd2 020409 copy pdata ,rega +0x4fd3 020410 ifetch 2 ,contr +0x4fd4 020411 copy pdata ,timeup +0x4fd5 020412 copy rega ,temp +0x4fd6 020413 call save_cont_pointers +0x4fd7 020414 bpatchx patch22_6 ,mem_patch22 +0x4fd8 020415 setarg l2cap_sdp_channel +0x4fd9 020416 isub temp ,null +0x4fda 020417 branch l2cap_proc_signal_disconnect_req_sdp ,zero +0x4fdb 020418 setarg l2cap_rfcomm_channel +0x4fdc 020419 isub temp ,null +0x4fdd 020420 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +0x4fde 020421 setarg l2cap_hid_control_channel +0x4fdf 020422 isub temp ,null +0x4fe0 020423 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +0x4fe1 020424 setarg l2cap_hid_interrupt_channel +0x4fe2 020425 isub temp ,null +0x4fe3 020426 branch l2cap_proc_signal_disconnect_req_hid_int ,zero +0x4fe4 020427 call l2cap_reject_command +0x4fe5 020428 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020429 l2cap_proc_signal_disconnect_req_hid_ctrl: +0x4fe6 020430 copy timeup ,temp +0x4fe7 020431 fetch 2 ,mem_hid_ctrl_remote_cid +0x4fe8 020432 isub temp ,null +0x4fe9 020433 branch l2cap_disconnect_hid_control_now ,zero +0x4fea 020434 call l2cap_reject_command +0x4feb 020435 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020436 l2cap_proc_signal_disconnect_req_hid_int: +0x4fec 020437 copy timeup ,temp +0x4fed 020438 fetch 2 ,mem_hid_int_remote_cid +0x4fee 020439 isub temp ,null +0x4fef 020440 branch l2cap_disconnect_hid_interrupt_now ,zero +0x4ff0 020441 call l2cap_reject_command +0x4ff1 020442 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020444 l2cap_proc_signal_disconnect_req_sdp: +0x4ff2 020445 copy timeup ,temp +0x4ff3 020446 fetch 2 ,mem_sdp_remote_cid +0x4ff4 020447 isub temp ,null +0x4ff5 020448 branch l2cap_disconnect_sdp_now ,zero +0x4ff6 020449 call l2cap_reject_command +0x4ff7 020450 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020451 l2cap_disconnect_hid_control_now: +0x4ff8 020452 call l2cap_reset_hid_ctrl_state +0x4ff9 020453 branch l2cap_send_disconnect_rsp_pkt +: 020454 l2cap_disconnect_hid_interrupt_now: +0x4ffa 020455 call l2cap_reset_hid_int_state +0x4ffb 020456 fetch 2 ,mem_hid_ctrl_remote_cid +0x4ffc 020457 branch l2cap_send_disconnect_rsp_pkt ,blank +0x4ffd 020465 branch l2cap_send_disconnect_rsp_pkt +: 020467 l2cap_disconnect_sdp_now: +0x4ffe 020468 call l2cap_reset_sdp_channel_state +0x4fff 020469 fetch 1 ,mem_upper_sm_ss +0x5000 020470 nbranch l2cap_send_disconnect_rsp_pkt ,blank +0x5001 020473 branch l2cap_send_disconnect_rsp_pkt +: 020474 l2cap_proc_signal_disconnect_req_rfcomm: +0x5002 020475 copy timeup ,temp +0x5003 020476 fetch 2 ,mem_rfcomm_remote_cid +0x5004 020477 isub temp ,null +0x5005 020478 branch l2cap_disconnect_rfcomm_now ,zero +0x5006 020479 call l2cap_reject_command +0x5007 020480 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020481 l2cap_disconnect_rfcomm_now: +0x5008 020482 call l2cap_reset_rfcomm_channel_state +0x5009 020483 branch l2cap_send_disconnect_rsp_pkt +: 020484 l2cap_send_disconnect_rsp_pkt: +0x500a 020485 call load_cont_pointers +0x500b 020486 setarg signal_disconnect_rsp +0x500c 020487 istore 1 ,contw +0x500d 020488 copy queue ,pdata +0x500e 020489 istore 1 ,contw +0x500f 020490 setarg 0x0004 +0x5010 020491 istore 2 ,contw +0x5011 020492 copy rega ,pdata +0x5012 020493 istore 2 ,contw +0x5013 020494 copy timeup ,pdata +0x5014 020495 istore 2 ,contw +0x5015 020496 force 8 ,pdata +0x5016 020497 branch l2cap_proc_signal_disconnect_req_rtn +: 020498 l2cap_proc_signal_disconnect_req_err_rtn: +0x5017 020499 call load_cont_pointers +0x5018 020500 branch l2cap_proc_signal_disconnect_req_rtn +: 020501 l2cap_proc_signal_disconnect_req_rtn: +0x5019 020502 iadd regb ,regb +0x501a 020503 branch l2cap_process_one_signal_rtn +: 020504 l2cap_proc_signal_disconnect_rsp: +0x501b 020505 ifetch 1 ,contr +0x501c 020506 copy pdata ,queue +0x501d 020507 ifetch 2 ,contr +0x501e 020508 copy pdata ,rega +0x501f 020509 copy regc ,pdata +0x5020 020510 isub rega ,regc +0x5021 020511 ifetch 2 ,contr +0x5022 020512 copy pdata ,timeup +0x5023 020513 ifetch 2 ,contr +0x5024 020514 copy pdata ,temp +0x5025 020515 call save_cont_pointers +0x5026 020516 bpatchx patch22_7 ,mem_patch22 +0x5027 020517 setarg l2cap_sdp_channel +0x5028 020518 isub temp ,null +0x5029 020519 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +0x502a 020520 setarg l2cap_rfcomm_channel +0x502b 020521 isub temp ,null +0x502c 020522 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +0x502d 020523 setarg l2cap_hid_control_channel +0x502e 020524 isub temp ,null +0x502f 020525 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +0x5030 020526 setarg l2cap_hid_interrupt_channel +0x5031 020527 isub temp ,null +0x5032 020528 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +0x5033 020529 call l2cap_reject_command +0x5034 020530 branch l2cap_proc_signal_disconnect_rsp_err_rtn +: 020531 l2cap_proc_signal_disconnect_rsp_sdp: +0x5035 020532 copy temp ,rega +0x5036 020533 copy timeup ,temp +0x5037 020534 fetch 2 ,mem_sdp_remote_cid +0x5038 020535 isub temp ,null +0x5039 020536 call l2cap_reset_sdp_channel_state ,zero +0x503a 020537 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020538 l2cap_proc_signal_disconnect_rsp_rfcomm: +0x503b 020539 copy temp ,rega +0x503c 020540 copy timeup ,temp +0x503d 020541 fetch 2 ,mem_rfcomm_remote_cid +0x503e 020542 isub temp ,null +0x503f 020543 call l2cap_reset_rfcomm_channel_state ,zero +0x5040 020544 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020545 l2cap_proc_signal_disconnect_rsp_hid_ctrl: +0x5041 020546 copy temp ,rega +0x5042 020547 copy timeup ,temp +0x5043 020548 fetch 2 ,mem_hid_ctrl_remote_cid +0x5044 020549 isub temp ,null +0x5045 020550 call l2cap_reset_hid_ctrl_state ,zero +0x5046 020551 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020552 l2cap_proc_signal_disconnect_rsp_hid_int: +0x5047 020553 copy temp ,rega +0x5048 020554 copy timeup ,temp +0x5049 020555 fetch 2 ,mem_hid_int_remote_cid +0x504a 020556 isub temp ,null +0x504b 020557 call l2cap_reset_hid_int_state ,zero +0x504c 020558 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020559 l2cap_proc_signal_disconnect_rsp_rtn: +0x504d 020560 call load_cont_pointers +0x504e 020561 branch l2cap_process_one_signal_rtn +: 020562 l2cap_proc_signal_disconnect_rsp_err_rtn: +0x504f 020563 branch l2cap_process_one_signal_rtn +: 020566 l2cap_proc_signal_echo_req: +0x5050 020567 ifetch 1 ,contr +0x5051 020568 copy pdata ,queue +0x5052 020569 ifetch 2 ,contr +0x5053 020570 copy pdata ,rega +0x5054 020571 iadd contr ,contr +0x5055 020572 setarg 9 +0x5056 020573 istore 1 ,contw +0x5057 020574 copy queue ,pdata +0x5058 020575 istore 1 ,contw +0x5059 020576 force 0x0000 ,pdata +0x505a 020577 istore 2 ,contw +0x505b 020578 force 4 ,pdata +0x505c 020579 iadd regb ,regb +0x505d 020580 copy regc ,pdata +0x505e 020581 isub rega ,regc +0x505f 020582 branch l2cap_process_one_signal_rtn +: 020583 l2cap_proc_signal_echo_rsp: +0x5060 020584 branch l2cap_process_one_signal_rtn +: 020586 l2cap_proc_signal_info_rsp: +0x5061 020587 branch l2cap_process_one_signal_rtn +: 020588 l2cap_reject_command: +0x5062 020589 force 0 ,regb +0x5063 020590 call l2cap_get_signal_tx_payload +0x5064 020591 setarg signal_cmd_reject +0x5065 020592 istore 1 ,contw +0x5066 020593 copy queue ,pdata +0x5067 020594 istore 1 ,contw +0x5068 020595 setarg 2 +0x5069 020596 istore 2 ,contw +0x506a 020597 setarg cmd_not_understood +0x506b 020598 istore 2 ,contw +0x506c 020599 increase 6 ,regb +0x506d 020600 arg 4 ,regc +0x506e 020601 branch l2cap_process_one_signal_rtn +: 020605 l2cap_reset_rfcomm_channel_state: +0x506f 020606 setarg 0 +0x5070 020607 store 2 ,mem_rfcomm_tx_pkt_length +0x5071 020608 store 2 ,mem_rfcomm_remote_cid +0x5072 020609 jam 0 ,mem_rfcomm_state +0x5073 020610 rtn +: 020611 l2cap_reset_sdp_channel_state: +0x5074 020612 setarg 0 +0x5075 020613 store 2 ,mem_sdp_tx_pkt_length +0x5076 020614 store 2 ,mem_sdp_remote_cid +0x5077 020615 jam 0 ,mem_sdp_state +0x5078 020616 rtn +: 020617 l2cap_reset_hid_ctrl_state: +0x5079 020618 setarg 0 +0x507a 020619 store 2 ,mem_hid_ctrl_remote_cid +0x507b 020620 jam 0 ,mem_hid_control_state +0x507c 020621 fetch 1 ,mem_hid_interrupt_state +0x507d 020622 beq 0 ,l2cap_reset_hid_disconnected +0x507e 020623 rtn +: 020625 l2cap_reset_hid_int_state: +0x507f 020626 setarg 0 +0x5080 020627 store 2 ,mem_hid_int_remote_cid +0x5081 020628 jam 0 ,mem_hid_interrupt_state +0x5082 020629 fetch 1 ,mem_hid_control_state +0x5083 020630 beq 0 ,l2cap_reset_hid_disconnected +0x5084 020631 rtn +: 020633 l2cap_reset_hid_disconnected: +0x5085 020634 jam bt_evt_hid_disconnected ,mem_fifo_temp +0x5086 020635 branch ui_ipc_send_event +: 020637 l2cap_disconnect_interrupt_req: +0x5087 020638 fetch 1 ,mem_control_tasks +0x5088 020639 set0 l2cap_disconnect_interrupt ,pdata +0x5089 020640 store 1 ,mem_control_tasks +0x508a 020641 fetch 2 ,mem_hid_int_remote_cid +0x508b 020642 rtn blank +0x508c 020643 call l2cap_malloc_signal_channel +0x508d 020644 fetch 2 ,mem_hid_int_remote_cid +0x508e 020645 copy pdata ,rega +0x508f 020646 force l2cap_hid_interrupt_channel ,regb +0x5090 020647 branch l2cap_generate_disconnect_req +: 020648 l2cap_disconnect_control_req: +0x5091 020649 fetch 1 ,mem_control_tasks +0x5092 020650 set0 l2cap_disconnect_control ,pdata +0x5093 020651 store 1 ,mem_control_tasks +0x5094 020652 fetch 2 ,mem_hid_ctrl_remote_cid +0x5095 020653 rtn blank +0x5096 020654 call l2cap_malloc_signal_channel +0x5097 020655 fetch 2 ,mem_hid_ctrl_remote_cid +0x5098 020656 copy pdata ,rega +0x5099 020657 force l2cap_hid_control_channel ,regb +: 020658 l2cap_generate_disconnect_req: +0x509a 020659 call l2cap_get_req_id +0x509b 020660 call l2cap_get_signal_tx_payload +0x509c 020661 force signal_disconnect_req ,pdata +0x509d 020662 istore 1 ,contw +0x509e 020663 fetch 1 ,mem_ml2cap_comm_id +0x509f 020664 istore 1 ,contw +0x50a0 020665 setarg 0x0004 +0x50a1 020666 istore 2 ,contw +0x50a2 020667 copy rega ,pdata +0x50a3 020668 istore 2 ,contw +0x50a4 020669 copy regb ,pdata +0x50a5 020670 istore 2 ,contw +0x50a6 020671 force 0x08 ,temp +0x50a7 020672 branch ml2cap_send_signal +: 020674 ml2cap_send_signal_connect_req: +0x50a8 020675 bpatchx patch23_0 ,mem_patch23 +0x50a9 020676 call l2cap_get_req_id +0x50aa 020677 call l2cap_get_signal_tx_payload +0x50ab 020678 setarg signal_connect_req +0x50ac 020679 istore 1 ,contw +0x50ad 020680 fetch 1 ,mem_ml2cap_comm_id +0x50ae 020681 istore 1 ,contw +0x50af 020682 setarg 0x0004 +0x50b0 020683 istore 2 ,contw +0x50b1 020684 copy temp ,pdata +0x50b2 020685 istore 2 ,contw +0x50b3 020686 copy timeup ,pdata +0x50b4 020687 istore 2 ,contw +0x50b5 020688 arg 8 ,temp +0x50b6 020689 branch ml2cap_send_signal +: 020690 ml2cap_send_signal_config_req: +0x50b7 020691 bpatchx patch23_1 ,mem_patch23 +0x50b8 020692 call l2cap_get_req_id +0x50b9 020693 call l2cap_get_signal_tx_payload +0x50ba 020694 setarg signal_config_req +0x50bb 020695 istore 1 ,contw +0x50bc 020696 fetch 1 ,mem_ml2cap_comm_id +0x50bd 020697 istore 1 ,contw +0x50be 020698 setarg 0x0008 +0x50bf 020699 istore 2 ,contw +0x50c0 020701 copy temp ,pdata +0x50c1 020703 istore 2 ,contw +0x50c2 020704 setarg 0x0000 +0x50c3 020705 istore 2 ,contw +0x50c4 020706 setarg 0x01 +0x50c5 020707 istore 1 ,contw +0x50c6 020708 setarg 0x02 +0x50c7 020709 istore 1 ,contw +0x50c8 020710 setarg l2cap_config_mtu_rfcomm +0x50c9 020711 istore 2 ,contw +0x50ca 020712 arg 0xc ,temp +0x50cb 020713 branch ml2cap_send_signal +: 020714 ml2cap_send_signal_disconn_req: +0x50cc 020715 bpatchx patch23_2 ,mem_patch23 +0x50cd 020716 call l2cap_get_req_id +0x50ce 020717 call l2cap_get_signal_tx_payload +0x50cf 020718 setarg signal_disconnect_req +0x50d0 020719 istore 1 ,contw +0x50d1 020720 fetch 1 ,mem_ml2cap_comm_id +0x50d2 020721 increase 1 ,pdata +0x50d3 020722 copy contw ,rega +0x50d4 020723 store 1 ,mem_ml2cap_comm_id +0x50d5 020724 copy rega ,contw +0x50d6 020725 istore 1 ,contw +0x50d7 020726 setarg 0x0004 +0x50d8 020727 istore 2 ,contw +0x50d9 020728 copy temp ,pdata +0x50da 020729 istore 2 ,contw +0x50db 020730 copy timeup ,pdata +0x50dc 020731 istore 2 ,contw +0x50dd 020732 arg 0x8 ,temp +: 020735 ml2cap_send_signal: +0x50de 020736 storet 2 ,mem_l2cap_signal_tx_length +0x50df 020737 copy temp ,pdata +0x50e0 020738 branch l2cap_malloc_discard ,blank +0x50e1 020739 call l2cap_get_signal_tx_buff +0x50e2 020740 fetch 2 ,mem_l2cap_signal_tx_length +0x50e3 020741 istore 2 ,contw +0x50e4 020742 force l2cap_signal_channel ,pdata +0x50e5 020743 istore 2 ,contw +0x50e6 020744 rtn +: 020746 msdp_send_req_done: +0x50e7 020747 fetch 2 ,mem_sdp_tx_pkt_length +0x50e8 020748 branch assert ,blank +0x50e9 020749 call l2cap_get_sdp_tx_buff +0x50ea 020750 fetch 2 ,mem_sdp_tx_pkt_length +0x50eb 020751 istore 2 ,contw +0x50ec 020752 fetch 2 ,mem_sdp_remote_cid +0x50ed 020753 istore 2 ,contw +0x50ee 020754 rtn +: 020755 ml2cap_rx_multiplexing: +0x50ef 020756 fetch 2 ,mem_l2cap_rx_pkt_length +0x50f0 020757 branch l2cap_rx_reset_state ,blank +0x50f1 020758 bpatchx patch23_3 ,mem_patch23 +0x50f2 020759 fetch 1 ,mem_l2cap_rx_cid +0x50f3 020760 beq l2cap_signal_channel ,ml2cap_call_proc_signal +0x50f4 020761 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +0x50f5 020762 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x50f6 020763 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x50f7 020764 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x50f8 020765 branch l2cap_rx_reset_state +: 020767 ml2cap_call_proc_signal: +0x50f9 020768 bpatchx patch23_4 ,mem_patch23 +0x50fa 020769 call l2cap_malloc_signal_channel +0x50fb 020770 force 0 ,regb +0x50fc 020771 call l2cap_get_signal_tx_payload +0x50fd 020772 copy pdata ,contw +0x50fe 020773 fetch 2 ,mem_l2cap_rx_pkt_length +0x50ff 020774 copy pdata ,regc +0x5100 020775 fetch 2 ,mem_l2cap_payload_ptr +0x5101 020776 iforce contr +: 020777 ml2cap_proc_one_comm_loop: +0x5102 020778 call ml2cap_proc_one_comm +0x5103 020779 increase -4 ,regc +0x5104 020780 nbranch ml2cap_proc_one_comm_loop ,zero +0x5105 020781 copy regb ,temp +0x5106 020782 call ml2cap_send_signal +0x5107 020783 branch l2cap_rx_reset_state +: 020785 ml2cap_proc_one_comm: +0x5108 020786 ifetch 1 ,contr +0x5109 020787 beq signal_connect_req ,ml2cap_proc_signal_connect_req +0x510a 020788 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +0x510b 020789 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +0x510c 020790 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +0x510d 020791 beq signal_config_req ,ml2cap_proc_signal_config_req +0x510e 020792 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +0x510f 020793 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +0x5110 020794 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x5111 020795 beq signal_info_req ,ml2cap_proc_signal_info_req +0x5112 020796 branch ml2cap_proc_send_reject +: 020798 ml2cap_proc_signal_connect_req: +0x5113 020799 call save_cont_pointers +0x5114 020801 call load_cont_pointers +0x5115 020802 branch l2cap_proc_signal_connect_req +: 020803 ml2cap_proc_signal_cmd_reject: +0x5116 020804 ifetch 1 ,contr +0x5117 020805 copy pdata ,queue +0x5118 020806 ifetch 2 ,contr +0x5119 020807 copy pdata ,rega +0x511a 020808 copy regc ,pdata +0x511b 020809 isub rega ,regc +: 020810 mvptr: +0x511c 020811 ifetch 1 ,contr +0x511d 020812 increase -1 ,rega +0x511e 020813 nbranch mvptr ,zero +0x511f 020814 rtn +: 020815 ml2cap_proc_signal_connect_rsp: +0x5120 020816 ifetch 1 ,contr +0x5121 020817 copy pdata ,queue +0x5122 020818 ifetch 2 ,contr +0x5123 020819 copy pdata ,rega +0x5124 020820 ifetch 2 ,contr +0x5125 020821 copy pdata ,timeup +0x5126 020822 ifetch 2 ,contr +0x5127 020823 copy pdata ,temp +0x5128 020824 ifetch 2 ,contr +0x5129 020825 sub pdata ,0 ,null +0x512a 020826 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +0x512b 020827 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +0x512c 020828 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +0x512d 020829 branch ml2cap_proc_signal_connect_rsp_mnosucc +: 020830 ml2cap_proc_signal_connect_refused_result: +0x512e 020831 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +0x512f 020832 call ui_ipc_send_event +: 020833 ml2cap_proc_signal_connect_rsp_mnosucc: +0x5130 020834 ifetch 2 ,contr +0x5131 020835 branch mnosucc +: 020836 ml2cap_proc_signal_connect_rsp_sucessful: +0x5132 020837 call save_cont_pointers +0x5133 020841 bpatchx patch23_5 ,mem_patch23 +0x5134 020842 setarg l2cap_sdp_channel +0x5135 020843 isub temp ,null +0x5136 020844 branch ml2cap_proc_signal_connect_rsp_sdp ,zero +0x5137 020845 setarg l2cap_rfcomm_channel +0x5138 020846 isub temp ,null +0x5139 020847 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +0x513a 020848 setarg l2cap_hid_interrupt_channel +0x513b 020849 isub temp ,null +0x513c 020850 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +0x513d 020851 setarg l2cap_hid_control_channel +0x513e 020852 isub temp ,null +0x513f 020853 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x5140 020854 branch mnosucc +: 020855 ml2cap_proc_signal_connect_rsp_sdp: +0x5141 020856 copy timeup ,pdata +0x5142 020857 store 2 ,mem_sdp_remote_cid +0x5143 020858 fetch 1 ,mem_sdp_state +0x5144 020859 set1 l2cap_channel_state_conn_res +0x5145 020860 store 1 ,mem_sdp_state +0x5146 020861 branch mnosucc1 +: 020862 ml2cap_proc_signal_connect_rsp_rfcomm: +0x5147 020863 copy timeup ,pdata +0x5148 020864 store 2 ,mem_rfcomm_remote_cid +0x5149 020865 fetch 1 ,mem_rfcomm_state +0x514a 020866 set1 l2cap_channel_state_conn_res +0x514b 020867 store 1 ,mem_rfcomm_state +0x514c 020868 branch mnosucc1 +: 020869 ml2cap_proc_signal_connect_rsp_hid_ctrl: +0x514d 020870 copy timeup ,pdata +0x514e 020871 store 2 ,mem_hid_ctrl_remote_cid +0x514f 020872 fetch 1 ,mem_hid_control_state +0x5150 020873 set1 l2cap_channel_state_conn_res +0x5151 020874 store 1 ,mem_hid_control_state +0x5152 020875 branch mnosucc1 +: 020876 ml2cap_proc_signal_connect_rsp_hid_int: +0x5153 020877 copy timeup ,pdata +0x5154 020878 store 2 ,mem_hid_int_remote_cid +0x5155 020879 fetch 1 ,mem_hid_interrupt_state +0x5156 020880 set1 l2cap_channel_state_conn_res +0x5157 020881 store 1 ,mem_hid_interrupt_state +: 020884 mnosucc1: +0x5158 020885 call load_cont_pointers +: 020886 mnosucc: +0x5159 020887 copy regc ,pdata +0x515a 020888 isub rega ,regc +0x515b 020889 rtn +: 020891 ml2cap_proc_signal_config_rsp: +0x515c 020892 ifetch 1 ,contr +0x515d 020893 copy pdata ,queue +0x515e 020894 ifetch 2 ,contr +0x515f 020895 copy pdata ,rega +0x5160 020896 copy regc ,pdata +0x5161 020897 isub rega ,regc +0x5162 020898 ifetch 2 ,contr +0x5163 020899 copy pdata ,timeup +0x5164 020900 ifetch 2 ,contr +0x5165 020901 ifetch 2 ,contr +0x5166 020902 nbranch mcrsdone1 ,blank +0x5167 020903 call save_cont_pointers +0x5168 020907 copy timeup ,temp +0x5169 020908 bpatchx patch23_6 ,mem_patch23 +0x516a 020909 setarg l2cap_sdp_channel +0x516b 020910 isub temp ,null +0x516c 020911 branch ml2cap_proc_signal_config_rsp_sdp ,zero +0x516d 020912 setarg l2cap_rfcomm_channel +0x516e 020913 isub temp ,null +0x516f 020914 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +0x5170 020915 setarg l2cap_hid_control_channel +0x5171 020916 isub temp ,null +0x5172 020917 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x5173 020918 setarg l2cap_hid_interrupt_channel +0x5174 020919 isub temp ,null +0x5175 020920 branch ml2cap_proc_signal_config_rsp_hid_int ,zero +: 020921 ml2cap_proc_signal_config_rsp_sdp: +0x5176 020922 fetch 1 ,mem_sdp_state +0x5177 020923 set1 l2cap_channel_state_rcv_cfg_res +0x5178 020924 store 1 ,mem_sdp_state +0x5179 020925 rtn +: 020926 ml2cap_proc_signal_config_rsp_rfcomm: +0x517a 020927 fetch 1 ,mem_rfcomm_state +0x517b 020928 set1 l2cap_channel_state_rcv_cfg_res +0x517c 020929 store 1 ,mem_rfcomm_state +0x517d 020930 rtn +: 020931 ml2cap_proc_signal_config_rsp_hid_ctrl: +0x517e 020932 fetch 1 ,mem_hid_control_state +0x517f 020933 set1 l2cap_channel_state_rcv_cfg_res +0x5180 020934 store 1 ,mem_hid_control_state +0x5181 020935 rtn +: 020936 ml2cap_proc_signal_config_rsp_hid_int: +0x5182 020937 fetch 1 ,mem_hid_interrupt_state +0x5183 020938 set1 l2cap_channel_state_rcv_cfg_res +0x5184 020939 store 1 ,mem_hid_interrupt_state +0x5185 020940 jam bt_evt_hid_connected ,mem_fifo_temp +0x5186 020941 branch ui_ipc_send_event +: 020944 mcfrsdone: +0x5187 020945 call load_cont_pointers +: 020946 mcrsdone1: +0x5188 020947 increase -6 ,rega +: 020948 mloop2: +0x5189 020949 branch mcrsdone ,zero +0x518a 020950 increase 1 ,contr +0x518b 020951 increase -1 ,rega +0x518c 020952 branch mloop2 +: 020953 mcrsdone: +0x518d 020954 rtn +: 020955 ml2cap_proc_signal_config_req: +0x518e 020956 ifetch 1 ,contr +0x518f 020957 copy pdata ,queue +0x5190 020958 ifetch 2 ,contr +0x5191 020959 copy pdata ,rega +0x5192 020960 copy regc ,pdata +0x5193 020961 isub rega ,regc +0x5194 020962 ifetch 2 ,contr +0x5195 020963 increase 2 ,contr +0x5196 020964 copy pdata ,temp +0x5197 020965 setarg signal_config_rsp +0x5198 020966 istore 1 ,contw +0x5199 020967 copy queue ,pdata +0x519a 020968 istore 1 ,contw +0x519b 020969 increase 2 ,rega +0x519c 020970 copy rega ,pdata +0x519d 020971 istore 2 ,contw +0x519e 020972 call save_cont_pointers +0x519f 020973 bpatchx patch23_7 ,mem_patch23 +0x51a0 020974 setarg l2cap_sdp_channel +0x51a1 020975 isub temp ,null +0x51a2 020976 branch ml2cap_proc_signal_config_req_sdp ,zero +0x51a3 020977 setarg l2cap_rfcomm_channel +0x51a4 020978 isub temp ,null +0x51a5 020979 branch ml2cap_proc_signal_config_req_rfcomm ,zero +0x51a6 020980 setarg l2cap_hid_control_channel +0x51a7 020981 isub temp ,null +0x51a8 020982 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +0x51a9 020983 setarg l2cap_hid_interrupt_channel +0x51aa 020984 isub temp ,null +0x51ab 020985 branch ml2cap_proc_signal_config_req_hid_int ,zero +0x51ac 020986 branch mcfgrq_done +: 020987 ml2cap_proc_signal_config_req_sdp: +0x51ad 020988 fetch 1 ,mem_sdp_state +0x51ae 020989 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51af 020990 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51b0 020991 store 1 ,mem_sdp_state +0x51b1 020992 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +0x51b2 020993 fetcht 1 ,mem_control_tasks +0x51b3 020994 set1 l2cap_init_config_req ,temp +0x51b4 020995 storet 1 ,mem_control_tasks +0x51b5 020996 copy queue ,pdata +0x51b6 020997 increase 1 ,pdata +0x51b7 020998 store 1 ,mem_config_identifier +0x51b8 020999 fetch 1 ,mem_sdp_state +0x51b9 021000 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x51ba 021001 store 1 ,mem_sdp_state +: 021002 ml2cap_proc_signal_config_req_sdp_nsndreq: +0x51bb 021003 fetch 2 ,mem_sdp_remote_cid +0x51bc 021004 store 2 ,mem_config_req_dest_cid +0x51bd 021005 branch mcfgrq_done +: 021006 ml2cap_proc_signal_config_req_rfcomm: +0x51be 021007 fetch 1 ,mem_rfcomm_state +0x51bf 021008 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c0 021009 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c1 021010 store 1 ,mem_rfcomm_state +0x51c2 021011 fetch 2 ,mem_rfcomm_remote_cid +0x51c3 021012 branch mcfgrq_done +: 021013 ml2cap_proc_signal_config_req_hid_ctrl: +0x51c4 021014 fetch 1 ,mem_hid_control_state +0x51c5 021015 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c6 021016 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c7 021017 store 1 ,mem_hid_control_state +0x51c8 021018 fetch 2 ,mem_hid_ctrl_remote_cid +0x51c9 021019 branch mcfgrq_done +: 021020 ml2cap_proc_signal_config_req_hid_int: +0x51ca 021021 fetch 1 ,mem_hid_interrupt_state +0x51cb 021022 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51cc 021023 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51cd 021024 store 1 ,mem_hid_interrupt_state +0x51ce 021025 fetch 2 ,mem_hid_int_remote_cid +: 021028 mcfgrq_done: +0x51cf 021029 copy pdata ,timeup +0x51d0 021030 call load_cont_pointers +0x51d1 021032 copy timeup ,pdata +0x51d2 021034 istore 2 ,contw +0x51d3 021035 force 0x0000 ,pdata +0x51d4 021036 istore 2 ,contw +0x51d5 021037 force 0x0000 ,pdata +0x51d6 021038 istore 2 ,contw +0x51d7 021039 force 10 ,pdata +0x51d8 021040 iadd regb ,regb +0x51d9 021041 increase -6 ,rega +: 021042 mloop1: +0x51da 021043 branch mcrqdone ,zero +0x51db 021044 ifetch 1 ,contr +0x51dc 021045 istore 1 ,contw +0x51dd 021046 increase 1 ,regb +0x51de 021047 increase -1 ,rega +0x51df 021048 branch mloop1 +: 021049 mcrqdone: +0x51e0 021050 rtn +: 021051 ml2cap_proc_signal_disconn_req: +0x51e1 021052 ifetch 1 ,contr +0x51e2 021053 copy pdata ,queue +0x51e3 021054 ifetch 2 ,contr +0x51e4 021055 copy pdata ,rega +0x51e5 021056 copy regc ,pdata +0x51e6 021057 isub rega ,regc +0x51e7 021059 ifetch 2 ,contr +0x51e8 021060 copy pdata ,rega +0x51e9 021061 ifetch 2 ,contr +0x51ea 021062 copy pdata ,timeup +0x51eb 021063 call save_cont_pointers +0x51ec 021064 bpatchx patch24_0 ,mem_patch24 +0x51ed 021065 setarg l2cap_sdp_channel +0x51ee 021066 copy rega ,temp +0x51ef 021067 isub temp ,null +0x51f0 021068 branch ml2cap_proc_signal_disconn_sdp ,zero +0x51f1 021069 setarg l2cap_hid_control_channel +0x51f2 021070 copy rega ,temp +0x51f3 021071 isub temp ,null +0x51f4 021072 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +0x51f5 021073 setarg l2cap_hid_interrupt_channel +0x51f6 021074 copy rega ,temp +0x51f7 021075 isub temp ,null +0x51f8 021076 branch ml2cap_proc_signal_disconn_hid_int ,zero +0x51f9 021077 branch mclsrfc +: 021078 ml2cap_proc_signal_disconn_sdp: +0x51fa 021079 setarg 0x0000 +0x51fb 021080 store 2 ,mem_sdp_tx_pkt_length +0x51fc 021081 store 2 ,mem_sdp_remote_cid +0x51fd 021082 store 1 ,mem_sdp_state +0x51fe 021083 branch mclssdp +: 021084 ml2cap_proc_signal_disconn_hid_ctrl: +0x51ff 021085 call l2cap_reset_hid_ctrl_state +0x5200 021086 branch mclssdp +: 021087 ml2cap_proc_signal_disconn_hid_int: +0x5201 021088 call l2cap_reset_hid_int_state +0x5202 021094 branch mclssdp +: 021095 mclsrfc: +0x5203 021096 setarg 0x0000 +0x5204 021097 store 2 ,mem_rfcomm_tx_pkt_length +: 021098 mclssdp: +0x5205 021099 call load_cont_pointers +0x5206 021100 setarg signal_disconnect_rsp +0x5207 021101 istore 1 ,contw +0x5208 021102 copy queue ,pdata +0x5209 021103 istore 1 ,contw +0x520a 021104 setarg 0x0004 +0x520b 021105 istore 2 ,contw +0x520c 021106 copy rega ,pdata +0x520d 021107 istore 2 ,contw +0x520e 021108 copy timeup ,pdata +0x520f 021109 istore 2 ,contw +0x5210 021110 force 8 ,pdata +0x5211 021111 iadd regb ,regb +0x5212 021112 rtn +: 021114 ml2cap_proc_signal_disconn_rsp: +0x5213 021115 ifetch 1 ,contr +0x5214 021116 copy pdata ,queue +0x5215 021117 ifetch 2 ,contr +0x5216 021118 copy pdata ,rega +0x5217 021119 ifetch 2 ,contr +0x5218 021120 copy pdata ,timeup +0x5219 021121 ifetch 2 ,contr +0x521a 021122 copy pdata ,temp +0x521b 021123 call save_cont_pointers +0x521c 021124 bpatchx patch24_1 ,mem_patch24 +0x521d 021125 fetch 1 ,mem_ml2cap_comm_id +0x521e 021126 icompare 0xff ,queue +0x521f 021127 nbranch mdisdone ,true +0x5220 021128 setarg l2cap_sdp_channel +0x5221 021129 isub temp ,null +0x5222 021130 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +0x5223 021131 setarg l2cap_rfcomm_channel +0x5224 021132 isub temp ,null +0x5225 021133 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +0x5226 021134 branch mdisdone +: 021135 ml2cap_proc_signal_disconn_rsp_sdp: +0x5227 021136 jam 0 ,mem_sdp_remote_cid +0x5228 021137 jam 0 ,mem_sdp_state +0x5229 021138 branch mdisdone +: 021139 ml2cap_proc_signal_disconn_rsp_rfcomm: +: 021142 mdisdone: +0x522a 021143 call load_cont_pointers +0x522b 021144 copy regc ,pdata +0x522c 021145 isub rega ,regc +0x522d 021146 rtn +: 021148 ml2cap_proc_send_reject: +0x522e 021149 setarg signal_cmd_reject +0x522f 021150 istore 1 ,contw +0x5230 021151 ifetch 1 ,contr +0x5231 021152 istore 1 ,contw +0x5232 021153 setarg 0x0002 +0x5233 021154 istore 2 ,contw +0x5234 021155 setarg 0x0000 +0x5235 021156 istore 2 ,contw +0x5236 021157 setarg 0x0006 +0x5237 021158 iadd regb ,regb +0x5238 021159 force 4 ,regc +0x5239 021160 rtn +: 021163 l2cap_get_req_id: +0x523a 021164 fetch 1 ,mem_ml2cap_comm_id +0x523b 021165 increase 1 ,pdata +0x523c 021166 bne 0 ,l2cap_get_req_id_ok +0x523d 021167 increase 1 ,pdata +: 021168 l2cap_get_req_id_ok: +0x523e 021169 store 1 ,mem_ml2cap_comm_id +0x523f 021170 rtn +: 021180 l2cap_malloc: +0x5240 021181 bpatchx patch24_2 ,mem_patch24 +0x5241 021182 arg 0 ,regb +0x5242 021183 call l2cap_malloc_is_fifo_full +0x5243 021184 nbranch assert ,blank +0x5244 021185 call l2cap_malloc_get_full_map +0x5245 021186 arg mem_tx_buff0 ,regb +0x5246 021187 arg 0 ,queue +: 021188 l2cap_malloc_loop: +0x5247 021189 fetcht 1 ,mem_used_map +0x5248 021190 qisolate1 temp +0x5249 021191 branch l2cap_malloc_next ,true +0x524a 021192 call l2cap_malloc_enough +0x524b 021193 sub timeup ,0 ,null +0x524c 021194 branch l2cap_malloc_next ,positive +0x524d 021195 call l2cap_malloc_into_fifo +0x524e 021196 branch l2cap_malloc_rtn +: 021197 l2cap_malloc_next: +0x524f 021198 increase 128 ,regb +0x5250 021199 increase 1 ,queue +0x5251 021200 setarg 8 +0x5252 021201 isub queue ,null +0x5253 021202 branch l2cap_malloc_loop ,positive +0x5254 021203 arg 0 ,regb +: 021204 l2cap_malloc_rtn: +0x5255 021205 copy regb ,pdata +0x5256 021206 branch assert ,blank +0x5257 021207 rtn +: 021215 l2cap_malloc_fifo_out: +0x5258 021216 bpatchx patch24_3 ,mem_patch24 +0x5259 021217 call l2cap_malloc_fifo_get_first_ptr +0x525a 021218 increase 1 ,contr +0x525b 021219 ifetch 2 ,contr +0x525c 021220 rtn +: 021226 l2cap_malloc_free: +0x525d 021227 bpatchx patch24_4 ,mem_patch24 +0x525e 021228 call l2cap_malloc_fifo_get_first_ptr +0x525f 021229 copy contr ,contw +0x5260 021230 copy contr ,temp +0x5261 021231 setarg 0 +0x5262 021232 istore 3 ,contw +0x5263 021233 rtn +: 021238 l2cap_malloc_discard: +0x5264 021239 bpatchx patch24_5 ,mem_patch24 +0x5265 021240 call l2cap_malloc_is_fifo_empty +0x5266 021241 branch assert ,blank +0x5267 021242 fetch 3 ,mem_tx_fifo2 +0x5268 021243 store 3 ,mem_tx_fifo3 +0x5269 021244 fetch 3 ,mem_tx_fifo1 +0x526a 021245 store 3 ,mem_tx_fifo2 +0x526b 021246 fetch 3 ,mem_tx_fifo0 +0x526c 021247 store 3 ,mem_tx_fifo1 +0x526d 021248 rtn +: 021254 l2cap_malloc_is_fifo_full: +0x526e 021255 bpatchx patch24_6 ,mem_patch24 +0x526f 021256 fetch 3 ,mem_tx_fifo0 +0x5270 021257 rtn +: 021263 l2cap_malloc_is_fifo_nearly_full: +0x5271 021264 bpatchx patch24_7 ,mem_patch24 +0x5272 021265 fetch 3 ,mem_tx_fifo1 +0x5273 021266 rtn +: 021272 l2cap_malloc_is_fifo_empty: +0x5274 021273 bpatchx patch25_0 ,mem_patch25 +0x5275 021274 fetch 3 ,mem_tx_fifo3 +0x5276 021275 rtn +: 021280 l2cap_malloc_fifo_get_first_ptr: +0x5277 021281 call l2cap_malloc_is_fifo_empty +0x5278 021282 branch assert ,blank +0x5279 021283 arg mem_tx_fifo0 ,contr +: 021284 l2cap_malloc_free_loop: +0x527a 021285 ifetch 3 ,contr +0x527b 021286 branch l2cap_malloc_free_loop ,blank +0x527c 021287 increase -3 ,contr +0x527d 021288 rtn +: 021295 l2cap_malloc_get_full_map: +0x527e 021296 bpatchx patch25_1 ,mem_patch25 +0x527f 021297 arg 4 ,loopcnt +0x5280 021298 arg mem_tx_fifo0_map ,contr +0x5281 021299 arg 0 ,temp +: 021300 l2cap_malloc_get_full_map_loop: +0x5282 021301 ifetch 3 ,contr +0x5283 021302 and pdata ,0xff ,pdata +0x5284 021303 ior temp ,temp +0x5285 021304 loop l2cap_malloc_get_full_map_loop +0x5286 021305 storet 1 ,mem_used_map +0x5287 021306 rtn +: 021314 l2cap_malloc_into_fifo: +0x5288 021315 bpatchx patch25_2 ,mem_patch25 +0x5289 021316 call l2cap_malloc_is_fifo_full +0x528a 021317 nbranch assert ,blank +0x528b 021318 call l2cap_malloc_is_fifo_empty +0x528c 021319 branch l2cap_malloc_into_fifo_no_push ,blank +0x528d 021320 fetch 3 ,mem_tx_fifo1 +0x528e 021321 store 3 ,mem_tx_fifo0 +0x528f 021322 ifetch 3 ,contr +0x5290 021323 istore 3 ,contw +0x5291 021324 ifetch 3 ,contr +0x5292 021325 istore 3 ,contw +0x5293 021326 setarg 0 +0x5294 021327 istore 3 ,contw +: 021328 l2cap_malloc_into_fifo_no_push: +0x5295 021329 arg 0 ,temp +0x5296 021330 copy timeup ,pdata +0x5297 021331 iadd queue ,pdata +: 021332 l2cap_malloc_into_fifo_loop: +0x5298 021333 qset1 temp +0x5299 021334 increase 1 ,queue +0x529a 021335 isub queue ,null +0x529b 021336 nbranch l2cap_malloc_into_fifo_loop ,zero +0x529c 021338 lshift8 regb ,pdata +0x529d 021339 ior temp ,pdata +0x529e 021340 store 3 ,mem_tx_fifo3 +0x529f 021341 rtn +: 021351 l2cap_malloc_enough: +0x52a0 021352 bpatchx patch25_3 ,mem_patch25 +0x52a1 021353 call l2cap_malloc_get_full_map +0x52a2 021354 copy queue ,regc +0x52a3 021355 arg 0 ,temp +0x52a4 021356 arg 0 ,timeup +: 021358 l2cap_malloc_enough_loop: +0x52a5 021359 copy queue ,pdata +0x52a6 021360 beq 8 ,l2cap_malloc_enough_end +0x52a7 021361 fetch 1 ,mem_used_map +0x52a8 021362 qisolate1 pdata +0x52a9 021363 branch l2cap_malloc_enough_end ,true +0x52aa 021364 increase 128 ,temp +0x52ab 021365 increase 1 ,queue +0x52ac 021366 copy rega ,pdata +0x52ad 021367 isub temp ,null +0x52ae 021368 branch l2cap_malloc_enough_end ,zero +0x52af 021369 branch l2cap_malloc_enough_loop ,positive +: 021370 l2cap_malloc_enough_end: +0x52b0 021371 copy temp ,pdata +0x52b1 021372 isub rega ,null +0x52b2 021373 nbranch l2cap_malloc_enough_rtn ,positive +0x52b3 021374 copy queue ,pdata +0x52b4 021375 copy regc ,temp +0x52b5 021376 isub temp ,timeup +: 021377 l2cap_malloc_enough_rtn: +0x52b6 021378 copy regc ,queue +0x52b7 021379 rtn +: 021382 l2cap_malloc_signal_channel: +0x52b8 021383 bpatchx patch25_4 ,mem_patch25 +0x52b9 021384 arg l2cap_signal_malloc_size ,rega +0x52ba 021385 call l2cap_malloc +0x52bb 021386 store 2 ,mem_l2cap_signal_tx_buff_ptr +0x52bc 021387 increase 4 ,pdata +0x52bd 021388 store 2 ,mem_l2cap_signal_tx_payload_ptr +0x52be 021389 setarg 0 +0x52bf 021390 store 2 ,mem_l2cap_signal_tx_length +0x52c0 021391 rtn +: 021393 l2cap_get_signal_tx_buff: +0x52c1 021394 fetch 2 ,mem_l2cap_signal_tx_buff_ptr +0x52c2 021395 branch l2cap_util_pdata_to_contw +: 021397 l2cap_get_signal_tx_payload: +0x52c3 021398 fetch 2 ,mem_l2cap_signal_tx_payload_ptr +0x52c4 021399 branch l2cap_util_pdata_to_contw +: 021402 l2cap_malloc_sdp_channel: +0x52c5 021403 bpatchx patch25_5 ,mem_patch25 +0x52c6 021404 arg sdp_malloc_size ,rega +0x52c7 021405 call l2cap_malloc +0x52c8 021406 store 2 ,mem_sdp_tx_buff_ptr +0x52c9 021407 increase 4 ,pdata +0x52ca 021408 store 2 ,mem_sdp_tx_payload_ptr +0x52cb 021409 setarg 0 +0x52cc 021410 store 2 ,mem_sdp_tx_pkt_length +0x52cd 021411 rtn +: 021413 l2cap_get_sdp_tx_buff: +0x52ce 021414 fetch 2 ,mem_sdp_tx_buff_ptr +0x52cf 021415 branch l2cap_util_pdata_to_contw +: 021417 l2cap_get_sdp_tx_payload: +0x52d0 021418 fetch 2 ,mem_sdp_tx_payload_ptr +0x52d1 021419 branch l2cap_util_pdata_to_contw +: 021422 l2cap_malloc_rfcomm_channel: +0x52d2 021423 bpatchx patch25_6 ,mem_patch25 +0x52d3 021424 call push_stack +0x52d4 021425 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +0x52d5 021426 call l2cap_malloc_is_fifo_full +0x52d6 021427 nrtn blank +0x52d7 021428 arg rfcomm_malloc_size ,rega +0x52d8 021429 call l2cap_malloc +0x52d9 021430 store 2 ,mem_rfcomm_tx_buff_ptr +0x52da 021431 increase 4 ,pdata +0x52db 021432 store 2 ,mem_rfcomm_tx_payload_ptr +0x52dc 021433 setarg 0 +0x52dd 021434 store 2 ,mem_rfcomm_tx_pkt_length +0x52de 021435 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x52df 021436 branch pop_stack +: 021438 l2cap_get_rfcomm_tx_buff: +0x52e0 021439 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x52e1 021440 branch l2cap_util_pdata_to_contw +: 021442 l2cap_util_pdata_to_contw: +0x52e2 021443 branch assert ,blank +0x52e3 021444 copy pdata ,contw +0x52e4 021445 rtn +: 021448 l2cap_lpm_save_calc_len: +0x52e5 021449 bpatchx patch25_7 ,mem_patch25 +0x52e6 021450 arg 0 ,regb +0x52e7 021451 arg mem_tx_fifo0_map ,rega +0x52e8 021452 increase -2 ,rega +: 021453 l2cap_lpm_save_calc_len_loop: +0x52e9 021454 increase 2 ,rega +0x52ea 021455 setarg mem_tx_fifo_end +0x52eb 021456 isub rega ,null +0x52ec 021457 branch l2cap_lpm_save_calc_len_end ,zero +0x52ed 021458 ifetch 1 ,rega +0x52ee 021459 increase 1 ,rega +0x52ef 021460 branch l2cap_lpm_save_calc_len_loop ,blank +0x52f0 021461 ifetcht 2 ,rega +0x52f1 021462 ifetch 2 ,temp +0x52f2 021463 iadd regb ,regb +0x52f3 021464 increase 4 ,regb +0x52f4 021465 branch l2cap_lpm_save_calc_len_loop +: 021466 l2cap_lpm_save_calc_len_end: +0x52f5 021467 copy regb ,pdata +0x52f6 021468 rtn +: 021471 l2cap_lpm_get_wake_lock: +0x52f7 021472 arg wake_lock_l2cap_tx ,queue +0x52f8 021473 branch lpm_get_wake_lock +: 021475 l2cap_lpm_put_wake_lock: +0x52f9 021476 arg wake_lock_l2cap_tx ,queue +0x52fa 021477 branch lpm_put_wake_lock +: 021479 l2cap_lpm_save_txbuf: +0x52fb 021480 bpatchx patch26_0 ,mem_patch26 +0x52fc 021481 call l2cap_malloc_get_full_map +0x52fd 021482 fetch 1 ,mem_used_map +0x52fe 021483 rtn blank +0x52ff 021484 call l2cap_lpm_save_calc_len +0x5300 021485 arg l2cap_lpm_txbuf_len ,temp +0x5301 021486 isub temp ,null +0x5302 021487 branch l2cap_lpm_get_wake_lock ,positive +0x5303 021488 call l2cap_lpm_put_wake_lock +0x5304 021489 arg mem_l2cap_lpm_txbuf ,contw +0x5305 021490 arg mem_tx_fifo0 ,rega +: 021491 l2cap_lpm_save_txbuf_loop: +0x5306 021492 setarg mem_tx_fifo_end +0x5307 021493 isub rega ,null +0x5308 021494 rtn zero +0x5309 021495 ifetch 1 ,rega +0x530a 021496 increase 1 ,rega +0x530b 021497 nbranch l2cap_lpm_save_txbuf_nempty ,blank +0x530c 021498 istore 2 ,contw +0x530d 021499 increase 2 ,rega +0x530e 021500 branch l2cap_lpm_save_txbuf_loop +: 021501 l2cap_lpm_save_txbuf_nempty: +0x530f 021502 ifetch 2 ,rega +0x5310 021503 increase 2 ,rega +0x5311 021504 copy pdata ,contr +0x5312 021505 ifetch 2 ,contr +0x5313 021506 istore 2 ,contw +0x5314 021507 copy pdata ,loopcnt +0x5315 021508 increase 2 ,loopcnt +0x5316 021509 call memcpy +0x5317 021510 branch l2cap_lpm_save_txbuf_loop +: 021512 l2cap_lpm_load_txbuf: +0x5318 021513 bpatchx patch26_1 ,mem_patch26 +0x5319 021514 call l2cap_malloc_get_full_map +0x531a 021515 fetch 1 ,mem_used_map +0x531b 021516 rtn blank +0x531c 021517 arg mem_tx_fifo0_ptr ,rega +0x531d 021518 increase -3 ,rega +0x531e 021519 arg mem_l2cap_lpm_txbuf ,contr +: 021520 l2cap_lpm_load_txbuf_loop: +0x531f 021521 increase 3 ,rega +0x5320 021522 setarg mem_tx_fifo_end + 1 +0x5321 021523 isub rega ,null +0x5322 021524 rtn zero +0x5323 021525 ifetch 2 ,contr +0x5324 021526 branch l2cap_lpm_load_txbuf_loop ,blank +0x5325 021527 increase 4 ,pdata +0x5326 021528 copy pdata ,loopcnt +0x5327 021529 copy contr ,regb +0x5328 021530 ifetch 2 ,rega +0x5329 021531 copy pdata ,contw +0x532a 021532 copy regb ,contr +0x532b 021533 increase -2 ,contr +0x532c 021534 call memcpy +0x532d 021535 branch l2cap_lpm_load_txbuf_loop +: 021545 le_init_conn: +0x532e 021546 bpatchx patch26_2 ,mem_patch26 +0x532f 021547 disable wake +0x5330 021548 jam 1 ,mem_le_conn_handle +0x5331 021549 jam 3 ,mem_le_state +0x5332 021550 jam 1 ,mem_le_arq +0x5333 021551 setarg -1 +0x5334 021552 store 2 ,mem_le_event_count +0x5335 021553 force 0 ,pdata +0x5336 021554 store 1 ,mem_le_ch +0x5337 021555 store 1 ,mem_le_op +0x5338 021556 store 3 ,mem_sniff_rcv +0x5339 021557 store 3 ,mem_sniff_lost +0x533a 021558 store 5 ,mem_le_pcnt_tx +0x533b 021559 set1 39 ,pdata +0x533c 021560 store 5 ,mem_le_pcnt_rx +0x533d 021561 jam 1 ,mem_le_txheader +0x533e 021562 jam 0 ,mem_le_txlen +0x533f 021563 branch le_supervision_flush +: 021565 le_init_master: +0x5340 021566 bpatchx patch26_3 ,mem_patch26 +0x5341 021567 enable master +0x5342 021568 jam lemode_master ,mem_le_mode +0x5343 021569 jam 1 ,mem_le_att_handle +0x5344 021570 jam 1 ,mem_le_search_handle_start +0x5345 021571 setarg 0xffff +0x5346 021572 store 2 ,mem_le_search_handle_end +0x5347 021573 force 0 ,pdata +0x5348 021574 store 5 ,mem_le_pcnt_rx +0x5349 021575 set1 39 ,pdata +0x534a 021576 store 5 ,mem_le_pcnt_tx +0x534b 021577 branch le_init_conn +: 021580 le_init_slave: +0x534c 021581 bpatchx patch26_4 ,mem_patch26 +0x534d 021582 disable master +0x534e 021583 setarg 0x17 +0x534f 021584 store 2 ,mem_le_remote_mtu +0x5350 021585 jam lemode_slave ,mem_le_mode +0x5351 021586 jam 0 ,mem_le_adv_enable +0x5352 021587 jam 0 ,mem_lpm_current_mult +0x5353 021588 jam flag_le_pairing_null ,mem_le_pairing_state +0x5354 021589 jam flag_le_enc_null ,mem_le_enc_state +0x5355 021590 fetch 2 ,mem_le_superto +0x5356 021591 store 2 ,mem_le_init_superto +0x5357 021592 fetch 2 ,mem_le_tsniff +0x5358 021593 mul32 pdata ,5 ,pdata +0x5359 021594 rshift4 pdata ,pdata +0x535a 021595 store 2 ,mem_le_superto +0x535b 021596 branch le_init_conn +: 021602 le_dispatch: +0x535c 021603 call le_enable +0x535d 021604 call le_scan +0x535e 021605 call le_adv +0x535f 021606 branch le_disable +: 021608 le_conn_dispatch: +0x5360 021609 bpatchx patch26_5 ,mem_patch26 +0x5361 021610 call le_enable +0x5362 021611 call app_process_ble +0x5363 021612 fetch 1 ,mem_le_mode +0x5364 021613 beq lemode_master ,le_master_dispatch +0x5365 021614 branch le_slave_dispatch +: 021620 le_master_dispatch: +0x5366 021621 bpatchx patch26_6 ,mem_patch26 +0x5367 021622 enable master +0x5368 021623 call le_supervision_update +0x5369 021624 branch le_master_disconn ,positive +0x536a 021625 call check_ble_disabled +0x536b 021626 call le_setup +0x536c 021627 call le_prepare_tx +0x536d 021628 disable match +0x536e 021629 call le_transmit_receive_sifs +0x536f 021630 nrtn match +0x5370 021631 bpatchx patch26_7 ,mem_patch26 +0x5371 021632 fetch 1 ,mem_le_conn_rcv +0x5372 021633 increase 1 ,pdata +0x5373 021634 store 1 ,mem_le_conn_rcv +0x5374 021635 call le_acknowledge +0x5375 021636 disable master +0x5376 021637 rtn +: 021639 le_master_disconn: +0x5377 021640 call le_disconnect +0x5378 021641 disable master +0x5379 021642 rtn +: 021647 le_slave_dispatch: +0x537a 021648 bpatchx patch27_0 ,mem_patch27 +0x537b 021649 jam 0 ,mem_le_md_count +0x537c 021650 call sp_calc_sequence_256 +0x537d 021651 call le_secure_connect_sm +0x537e 021652 disable attempt +0x537f 021653 call le_supervision_update +0x5380 021654 branch le_slave_disconn ,positive +0x5381 021655 call check_ble_disabled +0x5382 021656 call le_setup +0x5383 021657 call le_receive_slave +0x5384 021658 nbranch le_slave_unsync ,sync +0x5385 021659 call le_got_first_packet +0x5386 021660 branch le_slave_match ,match +0x5387 021661 branch le_slave_cont +: 021664 le_slave_match: +0x5388 021665 bpatchx patch27_1 ,mem_patch27 +0x5389 021666 fetch 1 ,mem_le_md_count +0x538a 021667 pincrease 1 +0x538b 021668 store 1 ,mem_le_md_count +0x538c 021669 beq le_md_max_count ,le_slave_cont +0x538d 021670 call le_acknowledge +0x538e 021671 call le_prepare_tx +0x538f 021672 call le_transmit_norx +0x5390 021673 call le_parse +0x5391 021674 fetch 2 ,mem_cb_ble_transmit +0x5392 021675 call callback_func +0x5393 021676 call le_check_md +0x5394 021677 branch le_slave_more_data ,user +: 021678 le_slave_cont: +0x5395 021679 bpatchx patch27_2 ,mem_patch27 +0x5396 021680 call le_pairing_sm +0x5397 021681 call le_check_paring_time +0x5398 021682 call check_51cmd +0x5399 021683 fetch 1 ,mem_le_op +0x539a 021684 bbit1 op_disconn ,le_slave_disconn +: 021685 le_slave_unsync: +0x539b 021686 bpatchx patch27_3 ,mem_patch27 +0x539c 021687 call le_lpm_set_mult +0x539d 021688 call le_update_channel_map +0x539e 021689 call le_update_param +0x539f 021690 branch calc_clke_offset +: 021693 le_check_md: +0x53a0 021694 disable user +0x53a1 021695 bmark1 mark_ble_rx_md ,enable_user +0x53a2 021696 bmark1 mark_ble_tx_md ,enable_user +0x53a3 021697 rtn +: 021700 le_slave_more_data: +0x53a4 021701 bpatchx patch27_4 ,mem_patch27 +0x53a5 021702 enable attempt +0x53a6 021703 call le_transmit_receive_sifs_notx +0x53a7 021704 branch le_slave_match ,match +0x53a8 021705 branch le_slave_cont +: 021707 le_slave_disconn: +: 021710 le_disconnect: +0x53a9 021711 bpatchx patch27_5 ,mem_patch27 +0x53aa 021712 call le_clear_connection_info +0x53ab 021713 call app_disconn_reason_collect_ble +0x53ac 021714 call sp_initialize_256 +0x53ad 021715 jam bt_evt_le_disconnected ,mem_fifo_temp +0x53ae 021716 branch ui_ipc_send_event +: 021718 le_clear_connection_info: +0x53af 021719 setarg 0 +0x53b0 021720 store 9 ,mem_le_tx_buff_used +0x53b1 021721 jam 0 ,mem_le_conn_handle +0x53b2 021722 jam lemode_idle ,mem_le_mode +0x53b3 021723 jam 0 ,mem_le_state +0x53b4 021724 jam flag_le_enc_null ,mem_le_enc_state +0x53b5 021725 jam flag_le_pairing_null ,mem_le_pairing_state +0x53b6 021726 rtn +: 021728 le_got_first_packet: +0x53b7 021729 bpatchx patch27_6 ,mem_patch27 +0x53b8 021730 fetch 1 ,mem_le_conn_rcv +0x53b9 021731 increase 1 ,pdata +0x53ba 021732 store 1 ,mem_le_conn_rcv +0x53bb 021733 fetch 1 ,mem_le_state +0x53bc 021734 rtnbit1 lestate_got_first_packet +0x53bd 021735 set1 lestate_got_first_packet +0x53be 021736 store 1 ,mem_le_state +0x53bf 021737 fetch 2 ,mem_le_init_superto +0x53c0 021738 store 2 ,mem_le_superto +0x53c1 021739 setarg 0 +0x53c2 021740 store 4 ,mem_le_transmit_window +0x53c3 021741 rtn +: 021744 le_enable: +0x53c4 021745 bpatchx patch27_7 ,mem_patch27 +0x53c5 021746 jam 0x36 ,rf_adc_goff +0x53c6 021747 jam 0x5f ,rf_agc_nsat +0x53c7 021748 enable le +0x53c8 021749 jam 7 ,rfen_ulp +0x53c9 021750 call check_ble_disabled +0x53ca 021751 fetch 1 ,mem_250k_freq_enable +0x53cb 021752 rtn blank +0x53cc 021753 jam 0xb8 ,rf_iq_gain +0x53cd 021754 rtn +: 021756 le_disable: +0x53ce 021757 bpatchx patch28_0 ,mem_patch28 +0x53cf 021758 jam 0x2e ,rf_adc_goff +0x53d0 021759 jam 0xff ,rf_agc_nsat +0x53d1 021760 disable le +0x53d2 021761 jam 3 ,rfen_ulp +0x53d3 021762 arg 0 ,stop_watch +0x53d4 021763 rtn +: 021765 le_prep: +0x53d5 021766 disable enable_crc +0x53d6 021767 disable enable_white +0x53d7 021768 fetch 3 ,mem_le_crcinit +0x53d8 021769 iforce crc24_init +0x53d9 021770 fetch 1 ,mem_le_ch_mapped +: 021771 le_prep2: +0x53da 021772 reverse pdata ,temp +0x53db 021773 set1 1 ,temp +0x53dc 021774 rshift temp ,white_init +0x53dd 021775 rtn +: 021778 lerx_setfreq: +0x53de 021779 call le_setfreq +0x53df 021780 call set_freq_rx +0x53e0 021781 setarg param_pll_setup +0x53e1 021782 call sleep +0x53e2 021783 branch rf_rx_enable +: 021785 letx_setfreq: +0x53e3 021786 branch txon ,match +: 021787 letx_setfreq0: +0x53e4 021788 call le_setfreq +0x53e5 021789 branch set_freq_tx +: 021790 le_setfreq: +0x53e6 021791 bpatchx patch28_1 ,mem_patch28 +0x53e7 021792 call set_sync_on +0x53e8 021793 fetch 1 ,mem_le_testtype +0x53e9 021794 nbranch le_ctf_test ,blank +0x53ea 021795 fetch 1 ,mem_le_ch_mapped +0x53eb 021796 sub pdata ,36 ,null +0x53ec 021797 branch le_ctf_normal ,positive +0x53ed 021798 force 0 ,temp +0x53ee 021799 rtneq 37 +0x53ef 021800 force 24 ,temp +0x53f0 021801 rtneq 38 +0x53f1 021802 force 78 ,temp +0x53f2 021803 rtn +: 021805 le_ctf_normal: +0x53f3 021806 sub pdata ,10 ,null +0x53f4 021807 branch le_ctf_low ,positive +0x53f5 021808 increase 1 ,pdata +: 021810 le_ctf_low: +0x53f6 021811 lshift pdata ,pdata +0x53f7 021812 add pdata ,2 ,temp +0x53f8 021813 rtn +: 021815 le_ctf_test: +0x53f9 021816 fetch 1 ,mem_le_ch_mapped +0x53fa 021817 lshift pdata ,temp +0x53fb 021818 rtn +: 021820 le_sca_map: +0x53fc 021821 arg 500 ,temp +0x53fd 021822 rtn blank +0x53fe 021823 arg 250 ,temp +0x53ff 021824 rtneq 1 +0x5400 021825 arg 150 ,temp +0x5401 021826 rtneq 2 +0x5402 021827 arg 100 ,temp +0x5403 021828 rtneq 3 +0x5404 021829 arg 75 ,temp +0x5405 021830 rtneq 4 +0x5406 021831 arg 50 ,temp +0x5407 021832 rtneq 5 +0x5408 021833 arg 40 ,temp +0x5409 021834 rtneq 6 +0x540a 021835 arg 20 ,temp +0x540b 021836 rtn +: 021840 le_adv_access: +0x540c 021841 setarg 0x8e89be +0x540d 021842 lshift8 pdata ,pdata +0x540e 021843 or_into 0xd6 ,pdata +0x540f 021844 iforce access +0x5410 021845 setarg 0x555555 +0x5411 021846 store 3 ,mem_le_crcinit +0x5412 021847 rtn +: 021849 le_setup: +0x5413 021850 bpatchx patch28_2 ,mem_patch28 +0x5414 021851 enable swfine +0x5415 021852 fetch 4 ,mem_le_access +0x5416 021853 iforce access +0x5417 021854 call le_map_channel +0x5418 021855 setarg 0x200 +0x5419 021856 branch le_setup_master ,master +0x541a 021857 fetch 2 ,mem_le_receive_window +0x541b 021858 rshift pdata ,pdata +: 021859 le_setup_master: +0x541c 021860 arg param_pll_setup ,temp +0x541d 021861 iadd temp ,pdata +0x541e 021862 call ahead_window +0x541f 021863 deposit clke +0x5420 021864 store 6 ,mem_le_rxon_ts +0x5421 021865 rtn +: 021867 le_next_adv_channel: +0x5422 021868 bpatchx patch28_3 ,mem_patch28 +0x5423 021869 fetch 1 ,mem_le_ch_mapped +0x5424 021870 beq 37 ,le_next_adv_channel_curr_channel_37 +0x5425 021871 beq 38 ,le_next_adv_channel_curr_channel_38 +0x5426 021872 beq 39 ,le_next_adv_channel_curr_channel_39 +0x5427 021873 branch le_next_adv_channel_curr_channel_39 +: 021875 le_next_adv_channel_curr_channel_37: +0x5428 021876 fetcht 1 ,mem_le_adv_channel_map +0x5429 021877 isolate1 bit_adv_channel_map_38 ,temp +0x542a 021878 branch set_le_next_adv_channel_38 ,true +0x542b 021879 isolate1 bit_adv_channel_map_39 ,temp +0x542c 021880 branch set_le_next_adv_channel_39 ,true +0x542d 021881 branch set_le_next_adv_channel_37 +: 021884 le_next_adv_channel_curr_channel_38: +0x542e 021885 fetcht 1 ,mem_le_adv_channel_map +0x542f 021886 isolate1 bit_adv_channel_map_39 ,temp +0x5430 021887 branch set_le_next_adv_channel_39 ,true +0x5431 021888 isolate1 bit_adv_channel_map_37 ,temp +0x5432 021889 branch set_le_next_adv_channel_37 ,true +0x5433 021890 branch set_le_next_adv_channel_38 +: 021893 le_next_adv_channel_curr_channel_39: +0x5434 021894 fetcht 1 ,mem_le_adv_channel_map +0x5435 021895 isolate1 bit_adv_channel_map_37 ,temp +0x5436 021896 branch set_le_next_adv_channel_37 ,true +0x5437 021897 isolate1 bit_adv_channel_map_38 ,temp +0x5438 021898 branch set_le_next_adv_channel_38 ,true +0x5439 021899 branch set_le_next_adv_channel_39 +: 021903 set_le_next_adv_channel_37: +0x543a 021904 jam 37 ,mem_le_ch_mapped +0x543b 021905 fetch 1 ,mem_le_adv_channel_map_temp +0x543c 021906 set1 bit_adv_channel_map_37 ,pdata +0x543d 021907 store 1 ,mem_le_adv_channel_map_temp +0x543e 021908 rtn +: 021910 set_le_next_adv_channel_38: +0x543f 021911 jam 38 ,mem_le_ch_mapped +0x5440 021912 fetch 1 ,mem_le_adv_channel_map_temp +0x5441 021913 set1 bit_adv_channel_map_38 ,pdata +0x5442 021914 store 1 ,mem_le_adv_channel_map_temp +0x5443 021915 rtn +: 021917 set_le_next_adv_channel_39: +0x5444 021918 jam 39 ,mem_le_ch_mapped +0x5445 021919 fetch 1 ,mem_le_adv_channel_map_temp +0x5446 021920 set1 bit_adv_channel_map_39 ,pdata +0x5447 021921 store 1 ,mem_le_adv_channel_map_temp +0x5448 021922 rtn +: 021926 le_context_nexthop: +0x5449 021927 bpatchx patch28_4 ,mem_patch28 +0x544a 021928 add rega ,coffset_mode ,contr +0x544b 021929 ifetch 1 ,contr +0x544c 021930 rtnbit0 mode_le +0x544d 021931 add rega ,coffset_le_event_cnt ,contw +0x544e 021932 ifetch 2 ,contw +0x544f 021933 increase 1 ,pdata +0x5450 021934 istore 2 ,contw +0x5451 021935 add rega ,coffset_le_hop ,contr +0x5452 021936 ifetch 1 ,contr +0x5453 021937 add rega ,coffset_le_ch ,contw +0x5454 021938 ifetcht 1 ,contw +0x5455 021939 iadd temp ,pdata +0x5456 021940 sub pdata ,36 ,null +0x5457 021941 branch le_nexthop_nowrap ,positive +0x5458 021942 increase -37 ,pdata +: 021943 le_nexthop_nowrap: +0x5459 021944 istore 1 ,contw +0x545a 021945 rtn +: 021948 le_calc_channel_map: +0x545b 021949 bpatchx patch28_5 ,mem_patch28 +0x545c 021950 fetch 5 ,mem_le_channel_map +0x545d 021951 force 0 ,temp +0x545e 021952 force 37 ,loopcnt +: 021953 le_count_channels_loop: +0x545f 021954 bbit0 0 ,le_count_channels_notused +0x5460 021955 increase 1 ,temp +: 021956 le_count_channels_notused: +0x5461 021957 rshift pdata ,pdata +0x5462 021958 loop le_count_channels_loop +0x5463 021959 add temp ,-1 ,pdata +0x5464 021960 store 1 ,mem_le_channels +0x5465 021961 rtn +: 021963 le_map_channel: +0x5466 021964 bpatchx patch28_6 ,mem_patch28 +0x5467 021965 fetch 1 ,mem_le_ch +0x5468 021966 iforce queue +0x5469 021967 fetcht 5 ,mem_le_channel_map +0x546a 021968 qisolate1 temp +0x546b 021969 branch le_map_channel_end ,true +: 021970 le_map_channel_next: +0x546c 021971 bpatchx patch28_7 ,mem_patch28 +0x546d 021972 fetch 1 ,mem_le_channels +0x546e 021973 isub queue ,pdata +0x546f 021974 branch le_map_channel_cont ,positive +0x5470 021975 sub pdata ,-1 ,queue +0x5471 021976 branch le_map_channel_next +: 021977 le_map_channel_cont: +0x5472 021978 copy queue ,loopcnt +0x5473 021979 force 0 ,queue +: 021980 le_map_channel_loop: +0x5474 021981 qisolate1 temp +0x5475 021982 branch le_map_channel_skip ,true +0x5476 021983 increase 1 ,loopcnt +: 021984 le_map_channel_skip: +0x5477 021985 deposit loopcnt +0x5478 021986 branch le_map_channel_end ,blank +0x5479 021987 increase 1 ,queue +0x547a 021988 increase -1 ,loopcnt +0x547b 021989 branch le_map_channel_loop +: 021990 le_map_channel_end: +0x547c 021991 deposit queue +0x547d 021992 store 1 ,mem_le_ch_mapped +0x547e 021993 rtn +: 021996 le_wait_tx: +0x547f 021997 branch le_wait_master ,master +0x5480 021998 until null ,timeout +0x5481 021999 rtn +: 022001 le_wait_master: +0x5482 022002 arg 0xea0 ,timeup +0x5483 022003 until clkn_rt ,meet +0x5484 022004 rtn +: 022006 le_receive_adv: +0x5485 022007 disable swfine +0x5486 022008 fetch 2 ,mem_le_scan_window +0x5487 022009 copy pdata ,timeup +0x5488 022010 branch le_receive_packet +: 022013 le_receive_slave: +0x5489 022014 bpatchx patch29_0 ,mem_patch29 +0x548a 022015 enable swfine +0x548b 022016 fetch 2 ,mem_le_receive_window +0x548c 022017 fetcht 4 ,mem_le_transmit_window +0x548d 022018 iadd temp ,timeup +: 022019 le_receive_packet: +0x548e 022020 call lerx_setfreq +: 022021 le_receive_rxon: +0x548f 022022 bpatchx patch29_1 ,mem_patch29 +0x5490 022023 call le_prep +0x5491 022024 disable match +0x5492 022025 enable decode_fec0 +0x5493 022026 enable is_rx +0x5494 022027 disable is_tx +0x5495 022028 copy timeup ,stop_watch +0x5496 022029 correlate null ,timeout +0x5497 022030 branch le_receive_on_attempt ,attempt +0x5498 022031 copy clke ,temp +0x5499 022032 storet 6 ,mem_sync_clke +: 022033 le_receive_on_attempt: +0x549a 022034 nbranch end_of_packet ,sync +0x549b 022035 branch le_receive_skip ,attempt +0x549c 022036 arg param_clke_cal_le ,clke_rt +0x549d 022037 copy bt_clk ,clke_bt +0x549e 022038 fetch 1 ,mem_le_state +0x549f 022039 bbit0 lestate_got_first_packet ,le_receive_skip +0x54a0 022040 call lpm_adjust_clk ,wake +: 022041 le_receive_skip: +0x54a1 022042 bpatchx patch29_2 ,mem_patch29 +0x54a2 022043 call save_rssi +0x54a3 022044 enable enable_white +0x54a4 022045 enable enable_crc +0x54a5 022046 parse demod ,bucket ,8 +0x54a6 022047 rshift3 pwindow ,pdata +0x54a7 022048 store 1 ,mem_le_rxbuf +0x54a8 022049 parse demod ,bucket ,8 +0x54a9 022050 rshift3 pwindow ,pdata +0x54aa 022051 istore 1 ,contw +0x54ab 022052 and pdata ,0x3f ,loopcnt +0x54ac 022053 branch lerx_nopayload ,zero +: 022055 lerx_loop: +0x54ad 022056 parse demod ,bucket ,8 +0x54ae 022057 rshift3 pwindow ,pdata +0x54af 022058 istore 1 ,contw +0x54b0 022059 loop lerx_loop +: 022061 lerx_nopayload: +0x54b1 022062 bpatchx patch29_3 ,mem_patch29 +0x54b2 022063 parse demod ,bucket ,24 +0x54b3 022064 enable swfine +0x54b4 022065 arg param_sifs ,stop_watch +0x54b5 022066 rshift32 pdata ,pdata +0x54b6 022067 rshift16 pdata ,pdata +0x54b7 022068 istore 3 ,contw +0x54b8 022069 branch end_of_packet ,crc_failed +0x54b9 022070 enable match +0x54ba 022071 fetch 1 ,mem_last_freq +0x54bb 022072 add pdata ,0 ,rega +0x54bc 022073 call rf_write_freq +0x54bd 022074 disable decode_fec0 +0x54be 022075 branch set_sync_on +: 022077 le_transmit_receive_sifs: +0x54bf 022078 bpatchx patch29_4 ,mem_patch29 +0x54c0 022079 call le_transmit +: 022080 le_transmit_receive_sifs_notx: +0x54c1 022081 fetcht 1 ,mem_last_freq +0x54c2 022082 call set_freq_rx +0x54c3 022083 call rf_rx_enable +0x54c4 022084 enable swfine +0x54c5 022085 arg 5500 ,timeup +0x54c6 022086 branch le_receive_rxon +: 022088 le_transmit_norx: +0x54c7 022089 call le_transmit +0x54c8 022090 branch end_of_packet +: 022092 le_transmit: +0x54c9 022093 bpatchx patch29_5 ,mem_patch29 +0x54ca 022094 call le_prep +0x54cb 022095 call letx_setfreq +0x54cc 022096 branch le_transmit0 +: 022098 le_transmit0: +0x54cd 022099 set1 txgfsk ,radio_ctrl +0x54ce 022100 enable encode_fec0 +0x54cf 022101 enable is_tx +0x54d0 022102 disable is_rx +0x54d1 022103 call le_wait_tx +0x54d2 022104 rshift16 access ,pdata +0x54d3 022105 rshift8 pdata ,pdata +0x54d4 022106 rshift4 pdata ,pdata +0x54d5 022107 inject mod ,40 +0x54d6 022108 enable enable_white +0x54d7 022109 enable enable_crc +0x54d8 022110 bpatchx patch29_6 ,mem_patch29 +0x54d9 022111 fetch 1 ,mem_le_txheader +0x54da 022112 inject mod ,8 +0x54db 022113 ifetch 1 ,contr +0x54dc 022114 and pdata ,0x3f ,loopcnt +0x54dd 022115 inject mod ,8 +0x54de 022116 branch letr_nopayload ,zero +: 022117 letr_loop: +0x54df 022118 ifetch 1 ,contr +0x54e0 022119 inject mod ,8 +0x54e1 022120 loop letr_loop +: 022122 letr_nopayload: +0x54e2 022123 enable enable_parity +0x54e3 022124 inject mod ,24 +0x54e4 022125 disable enable_parity +0x54e5 022126 until null ,tx_clear +0x54e6 022127 nop 100 +0x54e7 022128 disable encode_fec0 +0x54e8 022129 rtn +: 022131 le_send_adv_ind: +0x54e9 022132 bpatchx patch29_7 ,mem_patch29 +0x54ea 022133 fetch 1 ,mem_le_adv_type +0x54eb 022134 beq adv_direct_ind ,le_send_adv_direct_ind +0x54ec 022135 fetch 1 ,mem_le_adv_own_addr_type +0x54ed 022136 lshift4 pdata ,pdata +0x54ee 022137 lshift2 pdata ,pdata +0x54ef 022138 store 1 ,mem_le_txheader +0x54f0 022139 fetcht 1 ,mem_le_adv_data_len +0x54f1 022140 add temp ,6 ,pdata +0x54f2 022141 store 1 ,mem_le_txlen +0x54f3 022142 fetch 6 ,mem_le_lap +0x54f4 022143 store 6 ,mem_le_txpayload +0x54f5 022144 copy temp ,loopcnt +0x54f6 022145 arg mem_le_adv_data ,contr +0x54f7 022146 call memcpy_fast +0x54f8 022147 branch le_send_adv_transmit +: 022148 le_send_adv_direct_ind: +0x54f9 022149 fetch 1 ,mem_le_adv_direct_addr_type +0x54fa 022150 lshift4 pdata ,pdata +0x54fb 022151 lshift2 pdata ,pdata +0x54fc 022152 increase 1 ,pdata +0x54fd 022153 store 1 ,mem_le_txheader +0x54fe 022154 setarg 12 +0x54ff 022155 store 1 ,mem_le_txlen +0x5500 022156 fetch 6 ,mem_le_lap +0x5501 022157 store 6 ,mem_le_txpayload +0x5502 022158 fetch 6 ,mem_hci_plap +0x5503 022159 istore 6 ,contw +: 022160 le_send_adv_transmit: +0x5504 022161 bpatchx patch2a_0 ,mem_patch2a +0x5505 022162 fetch 1 ,mem_le_adv_transmit +0x5506 022163 increase 1 ,pdata +0x5507 022164 store 1 ,mem_le_adv_transmit +0x5508 022165 arg 1800 ,stop_watch +0x5509 022166 disable match +0x550a 022167 branch le_transmit_receive_sifs +: 022169 le_send_scan_request: +0x550b 022170 bpatchx patch2a_1 ,mem_patch2a +0x550c 022171 fetch 1 ,mem_le_scan_type +0x550d 022172 rtnne le_scan_type_active +0x550e 022173 fetch 1 ,mem_le_adv_transmit +0x550f 022174 increase 1 ,pdata +0x5510 022175 store 1 ,mem_le_adv_transmit +0x5511 022176 arg 0x0c03 ,temp +0x5512 022177 fetch 1 ,mem_le_scan_own_addr_type +0x5513 022178 nsetflag blank ,le_sender_addr_bit ,temp +0x5514 022179 copy rega ,pdata +0x5515 022180 nsetflag blank ,le_receiver_addr_bit ,temp +0x5516 022181 storet 2 ,mem_le_txheader +0x5517 022182 fetch 6 ,mem_le_lap +0x5518 022183 istore 6 ,contw +0x5519 022184 fetch 6 ,mem_le_plap +0x551a 022185 istore 6 ,contw +0x551b 022186 branch le_transmit_receive_sifs +: 022189 le_send_scan_response: +0x551c 022190 bpatchx patch2a_2 ,mem_patch2a +0x551d 022191 arg scan_rsp ,temp +0x551e 022192 fetch 1 ,mem_le_adv_own_addr_type +0x551f 022193 nsetflag blank ,le_sender_addr_bit ,temp +0x5520 022194 storet 1 ,mem_le_txheader +0x5521 022195 fetcht 1 ,mem_le_scan_data_len +0x5522 022196 add temp ,6 ,pdata +0x5523 022197 store 1 ,mem_le_txlen +0x5524 022198 fetch 6 ,mem_le_lap +0x5525 022199 store 6 ,mem_le_txpayload +0x5526 022200 arg mem_le_scan_data ,contr +0x5527 022201 copy temp ,loopcnt +0x5528 022202 call memcpy_fast +0x5529 022203 call le_transmit_norx +0x552a 022204 branch le_adv_not_match +: 022206 le_connect_request: +0x552b 022207 bpatchx patch2a_3 ,mem_patch2a +0x552c 022208 force -1 ,pdata +0x552d 022209 setsect 2 ,1 +0x552e 022210 store 5 ,mem_le_channel_map +0x552f 022211 call le_calc_channel_map +0x5530 022212 force 4 ,loopcnt +0x5531 022213 arg mem_le_access ,contw +0x5532 022214 call generate_random_loop +0x5533 022215 fetch 2 ,mem_le_timeout +0x5534 022216 store 2 ,mem_le_superto +: 022217 le_con_req_hop_retry: +0x5535 022218 random pdata +0x5536 022219 and_into 0xf ,pdata +0x5537 022220 sub pdata ,4 ,null +0x5538 022221 branch le_con_req_hop_retry ,positive +0x5539 022222 store 1 ,mem_le_hop +0x553a 022223 store 1 ,mem_tmp1 +0x553b 022224 bpatchx patch2a_4 ,mem_patch2a +0x553c 022225 fetcht 2 ,mem_le_conn_interval +0x553d 022226 storet 2 ,mem_le_tsniff +0x553e 022227 copy temp ,regc +0x553f 022228 add clkn_bt ,7 ,pdata +0x5540 022229 idiv regc +0x5541 022230 call wait_div_end +0x5542 022231 remainder rega +0x5543 022232 isub rega ,pdata +0x5544 022233 iadd regc ,pdata +0x5545 022234 fetcht 2 ,mem_le_dsniff +0x5546 022235 iadd temp ,pdata +0x5547 022236 store 4 ,mem_le_anchor +0x5548 022237 isub clkn_bt ,rega +0x5549 022238 increase -6 ,rega +0x554a 022239 arg 0x2205 ,regb +0x554b 022240 fetch 1 ,mem_le_conn_own_addr_type +0x554c 022241 nsetflag blank ,le_sender_addr_bit ,regb +0x554d 022242 fetch 1 ,mem_le_conn_peer_addr_type +0x554e 022243 nsetflag blank ,le_receiver_addr_bit ,regb +0x554f 022244 copy regb ,pdata +0x5550 022245 store 2 ,mem_le_txheader +0x5551 022246 fetch 6 ,mem_le_lap +0x5552 022247 istore 6 ,contw +0x5553 022248 fetch 6 ,mem_le_plap +0x5554 022249 istore 6 ,contw +0x5555 022250 fetch 4 ,mem_le_access +0x5556 022251 istore 4 ,contw +0x5557 022252 random pdata +0x5558 022253 istore 2 ,contw +0x5559 022254 random pdata +0x555a 022255 istore 1 ,contw +0x555b 022256 force 2 ,pdata +0x555c 022257 istore 1 ,contw +0x555d 022258 rshift2 rega ,pdata +0x555e 022259 istore 2 ,contw +0x555f 022260 rshift2 regc ,pdata +0x5560 022261 istore 2 ,contw +0x5561 022262 bpatchx patch2a_5 ,mem_patch2a +0x5562 022263 setarg 0 +0x5563 022264 istore 2 ,contw +0x5564 022265 fetch 2 ,mem_le_timeout +0x5565 022266 istore 2 ,contw +0x5566 022267 fetch 5 ,mem_le_channel_map +0x5567 022268 istore 5 ,contw +0x5568 022269 fetch 1 ,mem_le_hop +0x5569 022270 arg param_le_sca ,temp +0x556a 022271 ior temp ,pdata +0x556b 022272 istore 1 ,contw +0x556c 022273 call le_transmit_norx +0x556d 022274 setarg mem_le_txheader +0x556e 022275 add pdata ,18 ,contr +0x556f 022276 ifetch 3 ,contr +0x5570 022277 store 3 ,mem_le_crcinit +0x5571 022278 rtn +: 022280 le_init_adv: +0x5572 022281 bpatchx patch2a_6 ,mem_patch2a +0x5573 022282 disable master +0x5574 022283 branch le_adv_access +: 022287 le_update_param: +0x5575 022288 fetch 1 ,mem_le_state +0x5576 022289 rtnbit0 lestate_update_param +0x5577 022290 fetch 2 ,mem_le_event_count +0x5578 022291 fetcht 2 ,mem_le_instant +0x5579 022292 isub temp ,pdata +0x557a 022293 nrtn positive +0x557b 022294 store 2 ,mem_pdatatemp +0x557c 022295 bpatchx patch2a_7 ,mem_patch2a +0x557d 022296 fetch 1 ,mem_le_state +0x557e 022297 set0 lestate_update_param ,pdata +0x557f 022298 set0 lestate_got_first_packet ,pdata +0x5580 022299 store 1 ,mem_le_state +0x5581 022300 fetch 4 ,mem_le_anchor +0x5582 022301 fetcht 2 ,mem_le_tsniff +0x5583 022302 storet 2 ,mem_temp +0x5584 022303 isub temp ,rega +0x5585 022304 bpatchx patch2b_0 ,mem_patch2b +0x5586 022305 fetch 1 ,mem_le_new_param +0x5587 022306 store 1 ,mem_le_window_size +0x5588 022307 ifetcht 2 ,contr +0x5589 022308 ifetch 2 ,contr +0x558a 022309 lshift2 pdata ,pdata +0x558b 022310 store 2 ,mem_le_tsniff +0x558c 022311 lshift2 temp ,temp +0x558d 022312 iadd temp ,pdata +0x558e 022313 ifetcht 4 ,contr +0x558f 022314 storet 4 ,mem_le_slave_latency +0x5590 022315 iadd rega ,pdata +0x5591 022316 copy pdata ,regab +0x5592 022317 fetch 2 ,mem_le_tsniff +0x5593 022318 fetcht 2 ,mem_temp +0x5594 022319 isub temp ,pdata +0x5595 022320 fetcht 2 ,mem_pdatatemp +0x5596 022321 imul32 temp ,pdata +0x5597 022322 iadd regab ,pdata +0x5598 022323 store 4 ,mem_le_anchor +0x5599 022324 call le_receive_window_size +0x559a 022325 fetch 2 ,mem_le_superto +0x559b 022326 store 2 ,mem_le_init_superto +0x559c 022327 rtn +: 022330 le_update_channel_map: +0x559d 022331 bpatchx patch2b_1 ,mem_patch2b +0x559e 022332 fetch 1 ,mem_le_state +0x559f 022333 rtnbit0 lestate_update_map +0x55a0 022334 fetch 2 ,mem_le_event_count +0x55a1 022335 fetcht 2 ,mem_le_instant +0x55a2 022336 isub temp ,pdata +0x55a3 022337 nrtn positive +0x55a4 022338 fetch 1 ,mem_le_state +0x55a5 022339 set0 lestate_update_map ,pdata +0x55a6 022340 store 1 ,mem_le_state +0x55a7 022341 fetch 5 ,mem_le_new_map +0x55a8 022342 store 5 ,mem_le_channel_map +0x55a9 022343 branch le_calc_channel_map +: 022346 le_acknowledge: +0x55aa 022347 bpatchx patch2b_2 ,mem_patch2b +0x55ab 022348 call le_supervision_flush +0x55ac 022349 call le_check_wak +0x55ad 022350 fetch 1 ,mem_le_rxbuf +0x55ae 022351 isolate1 md ,pdata +0x55af 022352 setflag true ,mark_ble_rx_md ,mark +0x55b0 022353 rshift pdata ,pdata +0x55b1 022354 ixor temp ,pdata +0x55b2 022355 isolate1 nesn ,pdata +0x55b3 022356 setflag true ,mark_old_packet ,mark +0x55b4 022357 rtnmark1 mark_old_packet +0x55b5 022358 fetch 1 ,mem_le_rxbuf + 1 +0x55b6 022359 branch le_ack_unenc ,blank +0x55b7 022360 fetch 1 ,mem_le_state +0x55b8 022361 bbit0 lestate_encryption ,le_ack_unenc +0x55b9 022362 call load_sk +0x55ba 022363 call le_decrypt +0x55bb 022364 nrtn blank +: 022365 le_ack_unenc: +0x55bc 022366 fetcht 1 ,mem_le_arq +0x55bd 022367 setflip nesn ,temp +0x55be 022368 storet 1 ,mem_le_arq +0x55bf 022369 rtn +: 022372 le_check_wak: +0x55c0 022373 bpatchx patch2b_3 ,mem_patch2b +0x55c1 022374 fetcht 1 ,mem_le_arq +0x55c2 022375 isolate0 wak ,temp +0x55c3 022376 rtn true +0x55c4 022377 fetch 1 ,mem_le_rxbuf +0x55c5 022378 lshift pdata ,pdata +0x55c6 022379 ixor temp ,pdata +0x55c7 022380 rtnbit0 sn +0x55c8 022381 set0 wak ,temp +0x55c9 022382 setflip sn ,temp +0x55ca 022383 storet 1 ,mem_le_arq +0x55cb 022384 compare 3 ,temp ,3 +0x55cc 022385 nrtn true +0x55cd 022386 fetch 1 ,mem_le_txpayload +0x55ce 022387 beq ll_start_enc_req ,le_set_enc +0x55cf 022388 fetch 1 ,mem_le_enc_state +0x55d0 022389 beq flag_le_enc_pause ,le_clear_enc +0x55d1 022390 rtn +: 022393 le_set_enc: +0x55d2 022394 fetch 1 ,mem_le_state +0x55d3 022395 set1 lestate_encryption ,pdata +0x55d4 022396 store 1 ,mem_le_state +0x55d5 022397 rtn +: 022399 le_clear_enc: +0x55d6 022400 bpatchx patch2b_4 ,mem_patch2b +0x55d7 022401 jam flag_le_enc_null ,mem_le_enc_state +0x55d8 022402 arg 0 ,pdata +0x55d9 022403 store 4 ,mem_le_last_mic +0x55da 022404 store 5 ,mem_le_pcnt_tx +0x55db 022405 set1 39 ,pdata +0x55dc 022406 store 5 ,mem_le_pcnt_rx +0x55dd 022407 fetch 1 ,mem_le_state +0x55de 022408 set0 lestate_encryption ,pdata +0x55df 022409 store 1 ,mem_le_state +0x55e0 022410 rtn +: 022413 le_wait_adv: +0x55e1 022414 bpatchx patch2b_5 ,mem_patch2b +0x55e2 022415 call le_next_adv_channel +0x55e3 022416 call le_receive_adv +0x55e4 022417 fetch 1 ,mem_le_adv_waitcnt +0x55e5 022418 increase 1 ,pdata +0x55e6 022419 store 1 ,mem_le_adv_waitcnt +0x55e7 022420 rtn +: 022423 le_scan: +0x55e8 022424 bpatchx patch2b_6 ,mem_patch2b +0x55e9 022425 fetch 1 ,mem_le_scan_enable +0x55ea 022426 rtnne le_scan_enable +0x55eb 022427 arg le_scan_interval_timer ,queue +0x55ec 022428 call timer_check +0x55ed 022429 nrtn blank +0x55ee 022430 fetch 2 ,mem_le_scan_interval +0x55ef 022431 fetcht 2 ,mem_le_scan_window +0x55f0 022432 isub temp ,pdata +0x55f1 022433 arg le_scan_interval_timer ,queue +0x55f2 022434 call timer_init +0x55f3 022435 disable master +0x55f4 022436 call le_init_adv +0x55f5 022437 call le_wait_adv +0x55f6 022438 nrtn match +0x55f7 022439 bpatchx patch2b_7 ,mem_patch2b +0x55f8 022440 fetch 6 ,mem_le_rxbuf + 2 +0x55f9 022441 store 6 ,mem_le_plap +0x55fa 022444 fetch 1 ,mem_le_adv_rcv +0x55fb 022445 increase 1 ,pdata +0x55fc 022446 store 1 ,mem_le_adv_rcv +0x55fd 022447 call le_create_conn +0x55fe 022448 rtn master +0x55ff 022449 call le_send_scan_request +0x5600 022450 nrtn match +0x5601 022451 bpatchx patch2c_0 ,mem_patch2c +0x5602 022452 fetch 1 ,mem_le_scanrsp_rcv +0x5603 022453 increase 1 ,pdata +0x5604 022454 store 1 ,mem_le_scanrsp_rcv +0x5605 022455 fetch 9 ,mem_le_rxbuf + 8 +0x5606 022456 store 9 ,mem_tmp_buffer +0x5607 022457 rtn +: 022459 le_create_conn: +0x5608 022460 bpatchx patch2c_1 ,mem_patch2c +0x5609 022461 fetch 1 ,mem_cmd_le_create_conn +0x560a 022462 rtnne hci_cmd_le_create_conn +0x560b 022463 fetch 6 ,mem_le_plap +0x560c 022464 fetcht 6 ,mem_le_conn_peer_addr +0x560d 022465 isub temp ,null +0x560e 022466 nrtn zero +0x560f 022467 call context_new +0x5610 022468 nrtn zero +0x5611 022469 call le_connect_request +0x5612 022470 call le_init_master +0x5613 022471 bpatchx patch2c_2 ,mem_patch2c +0x5614 022472 jam 0 ,mem_hci_cmd +0x5615 022473 jam 0 ,mem_le_peer_sca +0x5616 022474 jam 0 ,mem_le_scan_enable +0x5617 022475 jam 0 ,mem_cmd_le_create_conn +0x5618 022476 branch context_save +: 022478 le_scan_check_sender_addr_type: +0x5619 022479 arg 1 ,rega +0x561a 022480 fetch 1 ,mem_le_rxbuf +0x561b 022481 rtnbit1 le_sender_addr_bit +0x561c 022482 arg 0 ,rega +0x561d 022483 rtn +: 022487 le_prepare_tx: +0x561e 022488 bpatchx patch2c_3 ,mem_patch2c +0x561f 022489 fetch 1 ,mem_le_arq +0x5620 022490 rtnbit1 wak +0x5621 022491 call le_check_tx_md +0x5622 022492 call le_fifo_get_first_tx_ptr +0x5623 022493 branch le_send_empty ,blank +0x5624 022494 ifetch 1 ,contr +0x5625 022495 ifetcht 1 ,contr +0x5626 022496 copy temp ,rega +0x5627 022497 isub rega ,pdata +0x5628 022498 arg le_max_paket_len ,temp +0x5629 022499 call not_greater_than +0x562a 022500 copy pdata ,temp +0x562b 022501 ifetch 1 ,contr +0x562c 022502 copy pdata ,type +0x562d 022503 copy rega ,pdata +0x562e 022504 iadd contr ,contr +0x562f 022505 arg mem_le_txpayload ,contw +0x5630 022506 copy temp ,loopcnt +0x5631 022507 call memcpy +0x5632 022508 call le_update_tx_type +0x5633 022509 call le_send_packet +0x5634 022511 call le_fifo_get_first_tx_ptr +0x5635 022512 ifetch 1 ,contr +0x5636 022513 copy pdata ,rega +0x5637 022514 copy contr ,regc +0x5638 022515 ifetcht 1 ,contr +0x5639 022516 copy temp ,regb +0x563a 022517 isub regb ,pdata +0x563b 022518 arg le_max_paket_len ,temp +0x563c 022519 call not_greater_than +0x563d 022520 iadd regb ,pdata +0x563e 022521 istore 1 ,regc +0x563f 022522 isub rega ,null +0x5640 022523 nrtn zero +0x5641 022524 branch le_fifo_release_first_node +: 022527 le_check_tx_md: +0x5642 022528 call le_check_continue +0x5643 022529 rtnmark1 mark_ble_tx_md +0x5644 022530 fetch 1 ,mem_le_configuration +0x5645 022531 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +0x5646 022532 call le_fifo_get_second_tx_ptr +0x5647 022533 branch le_clear_md ,blank +0x5648 022534 branch le_set_md +: 022537 le_check_continue: +0x5649 022538 call le_fifo_get_first_tx_ptr +0x564a 022539 branch le_clear_md ,blank +0x564b 022540 ifetch 1 ,contr +0x564c 022541 ifetcht 1 ,contr +0x564d 022542 isub temp ,pdata +0x564e 022543 sub pdata ,le_max_paket_len ,null +0x564f 022544 branch le_clear_md ,positive +: 022545 le_set_md: +0x5650 022546 set1 mark_ble_tx_md ,mark +0x5651 022547 rtn +: 022549 le_clear_md: +0x5652 022550 set0 mark_ble_tx_md ,mark +0x5653 022551 rtn +: 022553 le_update_tx_type: +0x5654 022554 copy rega ,pdata +0x5655 022555 rtn blank +0x5656 022556 arg llid_continue ,type +0x5657 022557 rtn +: 022560 le_att_check_notification_enable: +0x5658 022561 bpatchx patch2c_4 ,mem_patch2c +0x5659 022562 increase 1 ,temp +0x565a 022563 call le_att_get_handle_ptr +0x565b 022564 increase -2 ,contr +0x565c 022565 ifetch 2 ,contr +0x565d 022566 arg client_charactertic_configuration ,temp +0x565e 022567 isub temp ,null +0x565f 022568 nrtn zero +0x5660 022569 increase 1 ,contr +0x5661 022570 copy contr ,rega +0x5662 022571 ifetch 1 ,contr +0x5663 022572 rtn +: 022575 le_send_empty: +0x5664 022576 force 0 ,temp +0x5665 022577 force 1 ,type +: 022579 le_send_packet: +0x5666 022580 bpatchx patch2c_5 ,mem_patch2c +0x5667 022581 storet 1 ,mem_le_txlen +0x5668 022582 fetcht 1 ,mem_le_arq +0x5669 022583 set1 wak ,temp +0x566a 022584 and temp ,0xfc ,pdata +0x566b 022585 ior type ,pdata +0x566c 022586 store 1 ,mem_le_arq +0x566d 022587 and_into 0x1f ,pdata +0x566e 022588 isolate1 mark_ble_tx_md ,mark +0x566f 022589 setflag true ,md ,pdata +0x5670 022590 store 1 ,mem_le_txheader +0x5671 022592 fetch 1 ,mem_le_txheader +0x5672 022593 compare 1 ,type ,3 +0x5673 022594 nbranch le_send_no_txlen ,true +0x5674 022595 fetch 1 ,mem_le_txlen +0x5675 022596 rtn blank +: 022597 le_send_no_txlen: +0x5676 022598 fetch 1 ,mem_le_state +0x5677 022599 rtnbit0 lestate_encryption +0x5678 022600 call load_sk +0x5679 022601 branch le_encrypt +: 022604 get_lpm_wake_ble_rx_lock: +0x567a 022605 arg wake_lock_ble_rx ,queue +0x567b 022606 branch lpm_get_wake_lock +: 022608 put_lpm_wake_ble_rx_lock: +0x567c 022609 arg wake_lock_ble_rx ,queue +0x567d 022610 branch lpm_put_wake_lock +: 022613 le_parse: +0x567e 022614 bpatchx patch2c_6 ,mem_patch2c +0x567f 022615 rtnmark1 mark_old_packet +0x5680 022616 call le_fifo_check_full +0x5681 022617 nrtn blank +0x5682 022618 fetch 1 ,mem_le_rxbuf +0x5683 022619 and pdata ,0x3 ,pdata +0x5684 022620 store 1 ,mem_le_packet_llid +0x5685 022621 ifetch 1 ,contr +0x5686 022622 and pdata ,0x1f ,pdata +0x5687 022623 store 1 ,mem_le_packet_size +0x5688 022624 rtn blank +0x5689 022625 copy contr ,pdata +0x568a 022626 store 2 ,mem_le_payload_ptr +0x568b 022627 fetch 1 ,mem_le_packet_llid +0x568c 022628 beq llid_le_ll ,le_parse_ll +: 022629 le_parse_l2cap: +0x568d 022630 call le_check_l2cap_complete +0x568e 022631 nbranch get_lpm_wake_ble_rx_lock ,user +0x568f 022632 call put_lpm_wake_ble_rx_lock +0x5690 022633 fetch 2 ,mem_le_payload_ptr +0x5691 022634 copy pdata ,contr +0x5692 022635 ifetch 2 ,contr +0x5693 022636 store 2 ,mem_le_l2cap_size +0x5694 022637 bpatchx patch2c_7 ,mem_patch2c +0x5695 022638 ifetch 2 ,contr +0x5696 022639 beq le_l2cap_cid_att ,le_parse_att +0x5697 022640 beq le_l2cap_cid_smp ,le_parse_smp +0x5698 022641 beq le_l2cap_cid_signal ,le_parse_signaling +0x5699 022642 rtn +: 022645 le_check_l2cap_complete: +0x569a 022646 fetch 1 ,mem_le_packet_llid +0x569b 022647 beq llid_start ,le_check_l2cap_llid_start +0x569c 022648 beq llid_continue ,le_check_l2cap_llid_continue +0x569d 022649 rtn +: 022654 le_check_l2cap_cid_legal: +0x569e 022655 call enable_user +0x569f 022656 arg le_l2cap_cid_att ,temp +0x56a0 022657 isub pdata ,null +0x56a1 022658 rtn zero +0x56a2 022659 arg le_l2cap_cid_signal ,temp +0x56a3 022660 isub pdata ,null +0x56a4 022661 rtn zero +0x56a5 022662 arg le_l2cap_cid_smp ,temp +0x56a6 022663 isub pdata ,null +0x56a7 022664 rtn zero +0x56a8 022665 branch disable_user +: 022668 le_check_l2cap_llid_start: +0x56a9 022669 fetch 2 ,mem_le_payload_ptr +0x56aa 022670 copy pdata ,contr +0x56ab 022671 ifetch 2 ,contr +0x56ac 022672 store 2 ,mem_le_l2cap_size +0x56ad 022673 ifetch 2 ,contr +0x56ae 022674 call le_check_l2cap_cid_legal +0x56af 022675 nrtn user +0x56b0 022676 fetcht 1 ,mem_le_packet_size +0x56b1 022677 storet 1 ,mem_le_packet_len_recved +0x56b2 022678 fetch 2 ,mem_le_l2cap_size +0x56b3 022679 increase 4 ,pdata +0x56b4 022680 isub temp ,null +0x56b5 022681 branch enable_user ,zero +0x56b6 022682 fetch 1 ,mem_le_packet_size +0x56b7 022683 copy pdata ,loopcnt +0x56b8 022684 arg mem_le_l2capbuf ,contw +0x56b9 022685 fetch 2 ,mem_le_payload_ptr +0x56ba 022686 copy pdata ,contr +0x56bb 022687 call memcpy +0x56bc 022688 branch disable_user +: 022693 le_check_l2cap_continue_legal: +0x56bd 022694 call enable_user +0x56be 022695 fetch 1 ,mem_le_packet_len_recved +0x56bf 022696 nrtn blank +0x56c0 022697 branch disable_user +: 022699 le_check_l2cap_llid_continue: +0x56c1 022700 call le_check_l2cap_continue_legal +0x56c2 022701 nrtn user +0x56c3 022702 fetch 1 ,mem_le_packet_len_recved +0x56c4 022703 arg mem_le_l2capbuf ,contw +0x56c5 022704 iadd contw ,rega +0x56c6 022705 fetcht 1 ,mem_le_packet_size +0x56c7 022706 iadd temp ,pdata +0x56c8 022707 store 1 ,mem_le_packet_len_recved +0x56c9 022708 fetch 1 ,mem_le_packet_size +0x56ca 022709 copy pdata ,loopcnt +0x56cb 022710 copy rega ,contw +0x56cc 022711 fetch 2 ,mem_le_payload_ptr +0x56cd 022712 copy pdata ,contr +0x56ce 022713 call memcpy_fast +0x56cf 022714 setarg mem_le_l2capbuf +0x56d0 022715 store 2 ,mem_le_payload_ptr +0x56d1 022716 fetch 2 ,mem_le_l2cap_size +0x56d2 022717 increase 4 ,pdata +0x56d3 022718 fetcht 1 ,mem_le_packet_len_recved +0x56d4 022719 isub temp ,null +0x56d5 022720 branch enable_user ,zero +0x56d6 022721 branch disable_user +: 022727 le_get_search_att_type: +0x56d7 022728 call store_contr +0x56d8 022729 arg mem_le_search_att_type_length ,contw +: 022730 le_get_search_common: +0x56d9 022731 fetch 2 ,mem_le_l2cap_size +0x56da 022732 increase -5 ,pdata +: 022733 le_get_search_common2: +0x56db 022734 istore 1 ,contw +0x56dc 022735 copy pdata ,loopcnt +0x56dd 022736 call get_contr +0x56de 022737 branch memcpy_fast +: 022739 le_get_search_att_uuid: +0x56df 022740 call store_contr +0x56e0 022741 arg mem_le_search_uuid_length ,contw +0x56e1 022742 branch le_get_search_common +: 022746 le_writeatt_cb: +0x56e2 022747 fetch 2 ,mem_cb_att_write +0x56e3 022748 branch callback_func +: 022750 le_supervision_update: +0x56e4 022751 fetcht 4 ,mem_le_supervision_timer +0x56e5 022752 call get_clkbt +0x56e6 022753 isub temp ,timeup +0x56e7 022754 deposit timeup +0x56e8 022755 fetcht 2 ,mem_le_superto +0x56e9 022756 lshift4 temp ,temp +0x56ea 022757 lshift temp ,temp +0x56eb 022758 isub temp ,pdata +0x56ec 022759 rtn +: 022761 le_supervision_flush: +0x56ed 022762 call get_clkbt +0x56ee 022763 store 4 ,mem_le_supervision_timer +0x56ef 022764 rtn +: 022767 le_adv: +0x56f0 022768 jam 36 ,mem_le_ch_mapped +0x56f1 022769 jam 0 ,mem_le_adv_channel_map_temp +: 022770 le_adv_loop: +0x56f2 022771 bpatchx patch2d_0 ,mem_patch2d +0x56f3 022772 fetch 1 ,mem_le_adv_enable +0x56f4 022773 rtn blank +0x56f5 022774 arg le_adv_interval_timer ,queue +0x56f6 022775 call timer_check +0x56f7 022776 nrtn blank +0x56f8 022777 bpatchx patch2d_1 ,mem_patch2d +: 022778 le_adv_loop_tx: +0x56f9 022779 disable master +0x56fa 022780 enable swfine +0x56fb 022781 call le_init_adv +0x56fc 022782 call le_next_adv_channel +0x56fd 022783 call le_send_adv_ind +0x56fe 022784 nbranch le_adv_not_match ,match +0x56ff 022785 fetch 1 ,mem_le_req_rcv +0x5700 022786 increase 1 ,pdata +0x5701 022787 store 1 ,mem_le_req_rcv +0x5702 022788 fetch 1 ,mem_le_rxbuf +0x5703 022789 and pdata ,0x0f ,pdata +0x5704 022790 beq scan_req ,le_send_scan_response +0x5705 022791 beq connect_req ,le_parse_connect_req +: 022792 le_adv_not_match: +0x5706 022793 bpatchx patch2d_2 ,mem_patch2d +0x5707 022794 random pdata +0x5708 022795 arg 0x1ff ,temp +0x5709 022796 iand temp ,pdata +0x570a 022797 add pdata ,250 ,pdata +0x570b 022798 call delay +0x570c 022799 fetch 1 ,mem_le_adv_channel_map_temp +0x570d 022800 fetcht 1 ,mem_le_adv_channel_map +0x570e 022801 isub temp ,null +0x570f 022802 nbranch le_adv_loop ,zero +0x5710 022803 arg le_adv_interval_timer ,queue +0x5711 022804 fetch 2 ,mem_le_adv_interval +0x5712 022805 branch timer_init +: 022808 le_receive_window_size: +0x5713 022809 bpatchx patch2d_3 ,mem_patch2d +0x5714 022810 fetch 1 ,mem_le_peer_sca +0x5715 022811 call le_sca_map +0x5716 022812 fetch 2 ,mem_le_tsniff +0x5717 022813 imul32 temp ,pdata +0x5718 022814 arg 375 ,temp +0x5719 022815 imul32 temp ,pdata +0x571a 022816 arg 100000 ,temp +0x571b 022817 idiv temp +0x571c 022818 fetch 1 ,mem_le_window_size +0x571d 022819 arg 20000 ,temp +0x571e 022820 imul32 temp ,pdata +0x571f 022821 iadd temp ,pdata +0x5720 022822 store 4 ,mem_le_transmit_window +0x5721 022823 bpatchx patch2d_4 ,mem_patch2d +0x5722 022824 fetch 2 ,mem_rx_window_sniff +0x5723 022825 call wait_div_end +0x5724 022826 quotient temp +0x5725 022827 iadd temp ,pdata +0x5726 022828 store 2 ,mem_le_receive_window +0x5727 022829 rtn +: 022831 le_parse_connect_req: +0x5728 022832 bpatchx patch2d_5 ,mem_patch2d +0x5729 022833 fetch 6 ,mem_le_rxbuf + 8 +0x572a 022834 fetcht 6 ,mem_le_lap +0x572b 022835 isub temp ,null +0x572c 022836 nrtn zero +0x572d 022837 call le_scan_check_sender_addr_type +0x572e 022838 copy rega ,pdata +0x572f 022839 store 1 ,mem_le_conn_peer_addr_type +0x5730 022840 fetch 7 ,mem_le_rxbuf + 21 +0x5731 022841 store 7 ,mem_tmp_buffer +0x5732 022842 ifetch 8 ,contr +0x5733 022843 istore 8 ,contw +0x5734 022844 fetch 6 ,mem_le_rxbuf + 2 +0x5735 022845 store 6 ,mem_le_plap +0x5736 022846 increase 6 ,contr +0x5737 022847 ifetch 8 ,contr +0x5738 022848 store 8 ,mem_le_access +0x5739 022849 ifetcht 2 ,contr +0x573a 022850 bpatchx patch2d_6 ,mem_patch2d +0x573b 022851 lshift2 temp ,temp +0x573c 022852 ifetch 2 ,contr +0x573d 022853 lshift2 pdata ,pdata +0x573e 022854 store 2 ,mem_le_tsniff +0x573f 022855 store 4 ,mem_le_anchor +0x5740 022856 isub temp ,pdata +0x5741 022857 add pdata ,-2 ,clke_bt +0x5742 022858 ifetch 9 ,contr +0x5743 022859 store 9 ,mem_le_slave_latency +0x5744 022860 bpatchx patch2d_7 ,mem_patch2d +0x5745 022861 ifetch 1 ,contr +0x5746 022862 rshift4 pdata ,temp +0x5747 022863 rshift temp ,temp +0x5748 022864 storet 1 ,mem_le_peer_sca +0x5749 022865 and_into 0x1f ,pdata +0x574a 022866 store 1 ,mem_le_hop +0x574b 022867 call le_receive_window_size +0x574c 022868 call le_calc_channel_map +0x574d 022869 call le_init_slave +0x574e 022870 call context_new +0x574f 022871 nrtn zero +0x5750 022872 bpatchx patch2e_0 ,mem_patch2e +0x5751 022873 call calc_clke_offset +0x5752 022874 call le_l2cap_reset_signaling_identifier +0x5753 022875 jam bt_evt_le_connected ,mem_fifo_temp +0x5754 022876 call ui_ipc_send_event +0x5755 022877 branch context_save +: 022880 le_init_attlist_search: +0x5756 022881 bpatchx patch2e_1 ,mem_patch2e +0x5757 022882 fetch 2 ,mem_le_search_handle_start +0x5758 022883 iforce regb +0x5759 022884 fetch 2 ,mem_le_search_handle_end +0x575a 022885 iforce regc +0x575b 022886 fetch 2 ,mem_ui_le_uuid_table +0x575c 022887 iforce contr +0x575d 022888 enable user +0x575e 022889 rtn +: 022892 le_att_handle_inrange: +0x575f 022893 ifetch 2 ,contr +0x5760 022894 rtn blank +0x5761 022895 isub regb ,null +0x5762 022896 nrtn positive +0x5763 022897 isub regc ,null +0x5764 022898 rtn zero +0x5765 022899 branch le_att_handle_blank ,positive +0x5766 022900 force 1 ,null +0x5767 022901 rtn +: 022902 le_att_handle_blank: +0x5768 022903 force 0 ,pdata +0x5769 022904 rtn +: 022908 le_att_get_handle_ptr: +0x576a 022909 call le_att_get_handle_ptr2 +0x576b 022910 branch le_att_get_handle_ptr_found ,zero +0x576c 022911 rtn +: 022913 le_att_get_handle_ptr2: +0x576d 022914 bpatchx patch2e_2 ,mem_patch2e +0x576e 022915 fetch 2 ,mem_ui_le_uuid_table +0x576f 022916 iforce contr +: 022917 le_att_get_handle_loop1: +0x5770 022918 ifetch 2 ,contr +0x5771 022919 rtn blank +0x5772 022920 isub temp ,null +0x5773 022921 rtn zero +0x5774 022922 ifetch 1 ,contr +0x5775 022923 iadd contr ,contr +0x5776 022924 ifetch 1 ,contr +0x5777 022925 iadd contr ,contr +0x5778 022926 branch le_att_get_handle_loop1 +: 022927 le_att_get_handle_ptr_found: +0x5779 022928 ifetch 1 ,contr +0x577a 022929 iadd contr ,contr +0x577b 022930 rtn +: 022934 le_att_get_short_uuid_ptr: +0x577c 022935 bpatchx patch2e_3 ,mem_patch2e +0x577d 022936 fetch 2 ,mem_ui_le_uuid_table +0x577e 022937 iforce contr +: 022938 le_att_get_short_uuid_loop: +0x577f 022939 ifetch 2 ,contr +0x5780 022940 rtn blank +0x5781 022941 ifetch 1 ,contr +0x5782 022942 iadd contr ,contr +0x5783 022943 increase -2 ,contr +0x5784 022944 ifetch 2 ,contr +0x5785 022945 isub temp ,null +0x5786 022946 rtn zero +0x5787 022947 ifetch 1 ,contr +0x5788 022948 iadd contr ,contr +0x5789 022949 branch le_att_get_short_uuid_loop +: 022953 le_att_get_handle_info_from_ptr: +0x578a 022954 fetch 2 ,mem_le_cur_attlist_start_ptr +0x578b 022955 branch le_att_get_handle_info_fast +: 022957 le_att_get_handle_info: +0x578c 022958 bpatchx patch2e_4 ,mem_patch2e +0x578d 022959 fetch 2 ,mem_ui_le_uuid_table +: 022960 le_att_get_handle_info_fast: +0x578e 022961 iforce contr +0x578f 022962 copy temp ,rega +: 022963 le_att_get_handle_loop: +0x5790 022964 ifetch 2 ,contr +0x5791 022965 branch le_att_unfind_handle ,blank +0x5792 022966 isub rega ,null +0x5793 022967 branch le_att_finded_handle ,zero +0x5794 022968 ifetch 1 ,contr +0x5795 022969 iadd contr ,contr +0x5796 022970 ifetch 1 ,contr +0x5797 022971 iadd contr ,contr +0x5798 022972 branch le_att_get_handle_loop +: 022973 le_att_unfind_handle: +0x5799 022974 branch disable_blank +: 022976 le_att_finded_handle: +0x579a 022977 ifetch 1 ,contr +0x579b 022978 store 1 ,mem_le_cur_uuid_length +0x579c 022979 copy pdata ,loopcnt +0x579d 022980 arg mem_le_cur_uuid ,contw +0x579e 022981 call memcpy_fast +0x579f 022982 ifetch 1 ,contr +0x57a0 022983 store 1 ,mem_le_curr_att_len +0x57a1 022984 call store_contr +0x57a2 022985 branch enable_blank +: 022988 le_modified_name: +0x57a3 022989 bpatchx patch2e_5 ,mem_patch2e +0x57a4 022990 call le_modified_name_att_list +0x57a5 022991 branch le_modified_name_adv +: 022993 le_modified_name_att_list: +0x57a6 022994 arg uuid_chrctr_device_name ,temp +0x57a7 022995 call le_att_get_short_uuid_ptr +0x57a8 022996 rtn blank +0x57a9 022997 ifetch 1 ,contr +0x57aa 022998 copy contr ,contw +0x57ab 022999 fetcht 1 ,mem_le_name_len +0x57ac 023000 copy temp ,loopcnt +0x57ad 023001 isub temp ,null +0x57ae 023002 nbranch le_name_length_longer_than_att ,positive +0x57af 023003 isub temp ,temp +0x57b0 023004 arg mem_le_name ,contr +0x57b1 023005 call memcpy +0x57b2 023006 copy temp ,loopcnt +0x57b3 023007 ncall memcpy_empty ,zero +0x57b4 023008 rtn +: 023009 le_name_length_longer_than_att: +0x57b5 023010 copy pdata ,loopcnt +0x57b6 023011 arg mem_le_name ,contr +0x57b7 023012 branch memcpy_fast +: 023015 le_modified_name_adv: +0x57b8 023016 arg mem_le_adv_data_len + 32 ,regc +0x57b9 023017 arg mem_le_adv_data ,rega +0x57ba 023018 call le_modified_name_adv_and_scan +0x57bb 023019 setarg 0 +0x57bc 023020 setflag user ,0 ,pdata +0x57bd 023021 store 1 ,mem_pdatatemp +0x57be 023022 arg mem_le_scan_data_len + 32 ,regc +0x57bf 023023 arg mem_le_scan_data ,rega +0x57c0 023024 call le_modified_name_adv_and_scan +0x57c1 023025 rtn user +0x57c2 023026 fetch 1 ,mem_pdatatemp +0x57c3 023027 branch assert ,blank +0x57c4 023028 rtn +: 023031 le_modified_name_adv_and_scan: +0x57c5 023032 bpatchx patch2e_6 ,mem_patch2e +0x57c6 023033 call enable_user +0x57c7 023034 call clear_temp_block +0x57c8 023035 arg 0 ,regb +0x57c9 023036 arg mem_le_data_temp ,contw +0x57ca 023037 call le_modified_name_adv_loop +0x57cb 023038 fetch 1 ,mem_le_name_len +0x57cc 023039 add pdata ,1 ,temp +0x57cd 023040 iadd regb ,rega +0x57ce 023041 increase 2 ,rega +0x57cf 023042 sub rega ,0x1f ,null +0x57d0 023043 nbranch le_modified_name_adv_and_scan_name_overflow ,positive +0x57d1 023044 istoret 1 ,contw +0x57d2 023045 arg gap_adtype_local_name_complete ,temp +0x57d3 023046 istoret 1 ,contw +0x57d4 023047 iforce loopcnt +0x57d5 023048 call memcpy_fast +0x57d6 023049 copy rega ,regb +: 023050 le_modified_name_adv_and_scan_store_data: +0x57d7 023051 deposit regb +0x57d8 023052 store 1 ,mem_le_data_len_temp +0x57d9 023053 arg mem_le_data_len_temp ,contr +0x57da 023054 setarg -32 +0x57db 023055 iadd regc ,contw +0x57dc 023056 branch memcpy32 +: 023058 le_modified_name_adv_and_scan_name_overflow: +0x57dd 023059 call disable_user +0x57de 023060 branch le_modified_name_adv_and_scan_store_data +: 023062 le_modified_name_adv_loop: +0x57df 023063 ifetch 1 ,rega +0x57e0 023064 rtn blank +0x57e1 023065 pincrease 1 +0x57e2 023066 ifetcht 1 ,contr +0x57e3 023067 sub temp ,gap_adtype_local_name_complete ,null +0x57e4 023068 branch le_modified_name_adv_found_name ,zero +0x57e5 023069 iadd regb ,regb +0x57e6 023070 copy rega ,contr +0x57e7 023071 iforce loopcnt +0x57e8 023072 call memcpy_fast +0x57e9 023073 copy contr ,rega +: 023074 le_modified_name_adv_loop2: +0x57ea 023075 deposit rega +0x57eb 023076 isub regc ,null +0x57ec 023077 rtn positive +0x57ed 023078 branch le_modified_name_adv_loop +: 023080 le_modified_name_adv_found_name: +0x57ee 023081 iadd rega ,rega +0x57ef 023082 branch le_modified_name_adv_loop2 +: 023085 memcpy_empty: +0x57f0 023086 setarg space +0x57f1 023087 istore 1 ,contw +0x57f2 023088 loop memcpy_empty +0x57f3 023089 rtn +: 023092 le_lpm_set_mult: +0x57f4 023093 bpatchx patch2e_7 ,mem_patch2e +0x57f5 023094 disable wake +0x57f6 023095 branch le_lpm_set_mult_attempt ,attempt +0x57f7 023096 nbranch le_lpm_lost ,match +: 023097 le_lpm_set_mult_attempt: +0x57f8 023098 call lpm_match +0x57f9 023099 fetch 2 ,mem_rx_window_sniff +0x57fa 023100 store 2 ,mem_le_receive_window +0x57fb 023102 nbranch lpm_mult_short ,match +0x57fc 023103 bmark1 mark_old_packet ,lpm_mult_short +0x57fd 023105 fetch 1 ,mem_le_packet_size +0x57fe 023106 nbranch lpm_mult_short ,blank +0x57ff 023107 fetch 1 ,mem_le_txlen +0x5800 023108 nbranch lpm_mult_short ,blank +0x5801 023110 fetch 1 ,mem_le_configuration +0x5802 023111 bbit1 bit_ble_short_mult ,lpm_mult_short +0x5803 023113 fetch 1 ,mem_le_state +0x5804 023114 bbit1 lestate_update_param ,lpm_mult_short +0x5805 023115 branch lpm_mult_wait_timeout +: 023117 le_lpm_lost: +0x5806 023118 fetcht 2 ,mem_rx_window_sniff +0x5807 023119 rshift temp ,temp +0x5808 023120 fetch 2 ,mem_le_receive_window +0x5809 023121 iadd temp ,pdata +0x580a 023122 store 2 ,mem_le_receive_window +0x580b 023123 branch lpm_lost +: 023126 le_set_config_fixed_tk: +0x580c 023127 arg bit_ble_passkey_fixed_key ,queue +0x580d 023128 branch le_set_config +: 023130 le_clr_config_fixed_tk: +0x580e 023131 arg bit_ble_passkey_fixed_key ,queue +0x580f 023132 branch le_clr_config +: 023134 le_set_config_fixed_ltk: +0x5810 023135 arg bit_ble_pairing_fixed_ltk ,queue +0x5811 023136 branch le_set_config +: 023138 le_clr_config_fixed_ltk: +0x5812 023139 arg bit_ble_pairing_fixed_ltk ,queue +0x5813 023140 branch le_clr_config +: 023142 le_set_config_more_data: +0x5814 023143 arg bit_ble_transmit_packet_by_md ,queue +0x5815 023144 branch le_set_config +: 023146 le_clr_config_more_data: +0x5816 023147 arg bit_ble_transmit_packet_by_md ,queue +0x5817 023148 branch le_clr_config +: 023150 le_set_config_read_authentication: +0x5818 023151 arg bit_ble_read_auth ,queue +0x5819 023152 branch le_set_config +: 023154 le_clr_config_read_authentication: +0x581a 023155 arg bit_ble_read_auth ,queue +0x581b 023156 branch le_clr_config +: 023158 le_set_config_write_authentication: +0x581c 023159 arg bit_ble_write_auth ,queue +0x581d 023160 branch le_set_config +: 023162 le_clr_config_write_authentication: +0x581e 023163 arg bit_ble_write_auth ,queue +0x581f 023164 branch le_clr_config +: 023166 le_set_config_short_mult: +0x5820 023167 arg bit_ble_short_mult ,queue +0x5821 023168 branch le_set_config +: 023170 le_clr_config_short_mult: +0x5822 023171 arg bit_ble_short_mult ,queue +0x5823 023172 branch le_clr_config +: 023175 le_set_config: +0x5824 023176 fetch 1 ,mem_le_configuration +0x5825 023177 qset1 pdata +0x5826 023178 store 1 ,mem_le_configuration +0x5827 023179 rtn +: 023181 le_clr_config: +0x5828 023182 fetch 1 ,mem_le_configuration +0x5829 023183 qset0 pdata +0x582a 023184 store 1 ,mem_le_configuration +0x582b 023185 rtn +: 023187 le_set_fixed_ltk: +0x582c 023188 setarg 0x112233 +0x582d 023189 store 3 ,mem_le_fixed_ltk +0x582e 023190 setarg 0x445566 +0x582f 023191 istore 3 ,contw +0x5830 023192 setarg 0x778899 +0x5831 023193 istore 3 ,contw +0x5832 023194 setarg 0x001122 +0x5833 023195 istore 3 ,contw +0x5834 023196 setarg 0x334455 +0x5835 023197 istore 3 ,contw +0x5836 023198 setarg 0x66 +0x5837 023199 istore 1 ,contw +0x5838 023200 rtn +: 023203 le_set_justwork: +0x5839 023204 setarg 0x01000302 +0x583a 023205 store 4 ,mem_le_pres +0x583b 023206 setarg 0x010010 +0x583c 023207 store 3 ,mem_le_pres_max_keysize +0x583d 023208 jam 1 ,mem_le_pairing_mode +0x583e 023209 rtn +: 023213 le_fifo_malloc_tx_empty: +0x583f 023214 arg 0 ,rega +0x5840 023215 arg llid_empty ,type +0x5841 023216 branch le_fifo_malloc_tx +: 023220 le_fifo_malloc_tx_ll: +0x5842 023221 arg llid_le_ll ,type +0x5843 023222 call le_fifo_malloc_tx +0x5844 023223 copy regb ,pdata +0x5845 023224 istore 1 ,contw +0x5846 023225 rtn +: 023229 le_fifo_malloc_tx_l2cap: +0x5847 023230 force llid_l2cap_start ,type +0x5848 023231 increase 4 ,rega +0x5849 023232 call le_fifo_malloc_tx +0x584a 023233 increase -4 ,rega +0x584b 023234 copy rega ,pdata +0x584c 023235 istore 2 ,contw +0x584d 023236 copy regb ,pdata +0x584e 023237 istore 2 ,contw +0x584f 023238 rtn +: 023242 le_fifo_malloc_tx: +0x5850 023243 sub rega ,240 ,null +0x5851 023244 nbranch assert ,positive +0x5852 023245 fetch 1 ,mem_le_tx_buff_used +0x5853 023246 arg 1 ,temp +0x5854 023247 arg le_tx_buff_count ,loopcnt +: 023248 le_fifo_malloc_tx_loop: +0x5855 023249 iand temp ,null +0x5856 023250 branch le_fifo_malloc_tx_got_empty ,zero +0x5857 023251 lshift temp ,temp +0x5858 023252 loop le_fifo_malloc_tx_loop +0x5859 023253 branch assert +: 023254 le_fifo_malloc_tx_got_empty: +0x585a 023255 ixor temp ,pdata +0x585b 023256 store 1 ,mem_le_tx_buff_used +0x585c 023257 sub loopcnt ,le_tx_buff_count ,pdata +0x585d 023258 lshift4 pdata ,pdata +0x585e 023259 lshift4 pdata ,pdata +0x585f 023260 arg mem_le_tx_buffer0 ,temp +0x5860 023261 iadd temp ,temp +: 023262 le_fifo_tx_find_empty_ptr: +0x5861 023263 arg 0 ,loopcnt +0x5862 023264 arg mem_le_tx_ptr0 ,contr +: 023265 le_fifo_tx_find_empty_ptr_loop: +0x5863 023266 ifetch 2 ,contr +0x5864 023267 branch le_fifo_tx_found_empty_ptr ,blank +0x5865 023268 copy loopcnt ,pdata +0x5866 023269 increase 1 ,loopcnt +0x5867 023270 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop +0x5868 023271 branch assert +: 023274 le_fifo_tx_found_empty_ptr: +0x5869 023275 increase -2 ,contr +0x586a 023276 istoret 2 ,contr +0x586b 023277 copy temp ,contw +0x586c 023278 copy rega ,pdata +0x586d 023279 istore 1 ,contw +0x586e 023280 setarg 0 +0x586f 023281 istore 1 ,contw +0x5870 023282 copy type ,pdata +0x5871 023283 istore 1 ,contw +0x5872 023284 rtn +: 023288 le_fifo_get_first_tx_ptr: +0x5873 023289 fetch 2 ,mem_le_tx_ptr0 +0x5874 023290 copy pdata ,contr +0x5875 023291 rtn +: 023293 le_fifo_get_second_tx_ptr: +0x5876 023294 fetch 2 ,mem_le_tx_ptr1 +0x5877 023295 copy pdata ,contr +0x5878 023296 rtn +: 023298 le_fifo_get_last_tx_ptr: +0x5879 023299 call le_fifo_get_last_tx_ptr0 +0x587a 023300 copy pdata ,contr +0x587b 023301 rtn +: 023302 le_fifo_get_last_tx_ptr0: +0x587c 023303 fetch 2 ,mem_le_tx_ptr3 +0x587d 023304 nrtn blank +0x587e 023305 fetch 2 ,mem_le_tx_ptr2 +0x587f 023306 nrtn blank +0x5880 023307 fetch 2 ,mem_le_tx_ptr1 +0x5881 023308 nrtn blank +0x5882 023309 fetch 2 ,mem_le_tx_ptr0 +0x5883 023310 rtn +: 023312 le_fifo_get_first_l2cap_ptr: +0x5884 023313 call le_fifo_get_first_tx_ptr +0x5885 023314 increase 3 ,contr +0x5886 023315 rtn +: 023317 le_fifo_get_first_att_ptr: +0x5887 023318 call le_fifo_get_first_tx_ptr +0x5888 023319 increase 7 ,contr +0x5889 023320 rtn +: 023322 le_fifo_get_last_att_ptr: +0x588a 023323 call le_fifo_get_last_tx_ptr +0x588b 023324 increase 7 ,contr +0x588c 023325 rtn +: 023327 le_fifo_get_last_l2cap_ptr: +0x588d 023328 call le_fifo_get_last_tx_ptr +0x588e 023329 increase 3 ,contr +0x588f 023330 rtn +: 023334 le_fifo_check_full: +0x5890 023335 fetch 2 ,mem_le_tx_ptr3 +0x5891 023336 rtn +: 023339 le_fifo_check_nearly_full: +0x5892 023340 fetch 2 ,mem_le_tx_ptr2 +0x5893 023341 rtn +: 023344 le_fifo_check_empty: +0x5894 023345 fetch 2 ,mem_le_tx_ptr0 +0x5895 023346 rtn +: 023349 le_fifo_release_first_node: +0x5896 023350 fetch 2 ,mem_le_tx_ptr0 +0x5897 023351 arg mem_le_tx_buffer0 ,temp +0x5898 023352 isub temp ,pdata +0x5899 023353 rshift4 pdata ,pdata +0x589a 023354 rshift4 pdata ,queue +0x589b 023355 fetch 1 ,mem_le_tx_buff_used +0x589c 023356 qset0 pdata +0x589d 023357 store 1 ,mem_le_tx_buff_used +0x589e 023358 arg 0 ,loopcnt +: 023359 le_fifo_release_first_node_loop: +0x589f 023360 lshift loopcnt ,pdata +0x58a0 023361 arg mem_le_tx_ptr1 ,temp +0x58a1 023362 iadd temp ,temp +0x58a2 023363 ifetch 2 ,temp +0x58a3 023364 increase -2 ,temp +0x58a4 023365 istore 2 ,temp +0x58a5 023366 copy loopcnt ,pdata +0x58a6 023367 increase 1 ,loopcnt +0x58a7 023368 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop +0x58a8 023369 setarg 0 +0x58a9 023370 istore 2 ,temp +0x58aa 023371 rtn +: 023377 le_parse_att: +0x58ab 023378 ifetch 3 ,contr +0x58ac 023379 store 3 ,mem_le_att_opcode +0x58ad 023380 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +0x58ae 023381 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +0x58af 023382 beq attop_find_information_request ,le_parse_att_find_information_request +0x58b0 023383 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +0x58b1 023384 beq attop_read_by_type_request ,le_parse_att_read_by_type_request +0x58b2 023385 beq attop_read_request ,le_parse_att_read_request +0x58b3 023386 beq attop_read_blob_request ,le_parse_att_read_blob_request +0x58b4 023387 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +0x58b5 023388 beq attop_write_request ,le_parse_att_write_request +0x58b6 023389 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +0x58b7 023390 beq attop_execute_write_request ,le_parse_att_execute_write_request +0x58b8 023391 beq attop_write_command ,le_parse_att_write_command +0x58b9 023392 rtn +: 023395 le_send_att_exchange_mtu_requset: +0x58ba 023396 force 3 ,rega +0x58bb 023397 call le_fifo_malloc_tx_l2cap_gatt +0x58bc 023398 setarg attop_exchange_mtu_request +0x58bd 023399 istore 1 ,contw +0x58be 023400 fetch 2 ,mem_le_local_mtu +0x58bf 023401 istore 2 ,contw +0x58c0 023402 rtn +: 023405 le_parse_att_exchange_mtu_request: +0x58c1 023406 call le_parse_att_exchange_mtu_response +: 023407 le_send_att_exchange_mtu_response: +0x58c2 023408 force 3 ,rega +0x58c3 023409 call le_fifo_malloc_tx_l2cap_gatt +0x58c4 023410 setarg attop_exchange_mtu_response +0x58c5 023411 istore 1 ,contw +0x58c6 023412 fetch 2 ,mem_le_local_mtu +0x58c7 023413 istore 2 ,contw +0x58c8 023414 rtn +: 023416 le_parse_att_exchange_mtu_response: +0x58c9 023417 rshift8 pdata ,pdata +0x58ca 023418 store 2 ,mem_le_remote_mtu +0x58cb 023419 rtn +: 023421 le_parse_att_find_information_request: +0x58cc 023422 call le_get_search_handle_start_end_common +0x58cd 023423 call enable_user +0x58ce 023424 branch le_send_att_find_information_response +: 023426 le_send_att_find_information_response: +0x58cf 023427 arg 3 ,timeup +0x58d0 023428 call le_init_attlist_search +: 023429 le_send_att_find_information_res_loop: +0x58d1 023430 call le_att_handle_inrange +0x58d2 023431 branch le_send_att_find_information_res_end ,blank +0x58d3 023432 nbranch le_send_att_find_information_res_next ,positive +0x58d4 023433 increase -2 ,contr +0x58d5 023434 call store_contr +0x58d6 023435 call get_contw +0x58d7 023436 nbranch le_send_att_find_information_res_store_info ,user +0x58d8 023437 call push_stack_rega_b_c +0x58d9 023438 call disable_user +0x58da 023439 force 20 ,rega +0x58db 023440 call le_fifo_malloc_tx_l2cap_gatt +0x58dc 023441 call pop_stack_rega_b_c +0x58dd 023442 setarg attop_find_information_response +0x58de 023443 istore 1 ,contw +0x58df 023444 setarg uuid_size_16bit +0x58e0 023445 istore 1 ,contw +: 023446 le_send_att_find_information_res_store_info: +0x58e1 023447 call get_contr +0x58e2 023448 ifetch 2 ,contr +0x58e3 023449 istore 2 ,contw +0x58e4 023450 ifetch 1 ,contr +0x58e5 023451 copy pdata ,loopcnt +0x58e6 023452 call memcpy +0x58e7 023453 call store_contw +0x58e8 023454 increase -1 ,timeup +0x58e9 023455 branch le_send_att_find_information_res_end ,zero +: 023456 le_send_att_find_information_res_cont: +0x58ea 023457 ifetch 1 ,contr +0x58eb 023458 iadd contr ,contr +0x58ec 023459 branch le_send_att_find_information_res_loop +: 023460 le_send_att_find_information_res_next: +0x58ed 023461 ifetch 1 ,contr +0x58ee 023462 iadd contr ,contr +0x58ef 023463 branch le_send_att_find_information_res_cont +: 023464 le_send_att_find_information_res_end: +0x58f0 023465 branch le_send_att_error_response_notfound ,user +0x58f1 023466 branch le_send_auto_len_by_mem +: 023469 le_parse_att_find_by_type_value_request: +0x58f2 023470 call le_get_search_handle_start_end_common +0x58f3 023471 ifetch 2 ,contr +0x58f4 023472 store 2 ,mem_le_search_uuid +0x58f5 023473 call store_contr +0x58f6 023474 arg mem_le_search_att_type_length ,contw +0x58f7 023475 fetch 2 ,mem_le_l2cap_size +0x58f8 023476 increase -7 ,pdata +0x58f9 023477 call le_get_search_common2 +0x58fa 023478 branch le_send_att_find_by_type_value_response +: 023481 le_start_end_handle_check_1: +0x58fb 023482 disable user +0x58fc 023483 fetcht 2 ,mem_le_search_handle_start +0x58fd 023484 fetch 2 ,mem_le_search_handle_end +0x58fe 023485 isub temp ,null +0x58ff 023486 nbranch le_start_end_handle_check_1_fail ,positive +0x5900 023487 deposit temp +0x5901 023488 rtnne 0 +: 023489 le_start_end_handle_check_1_fail: +0x5902 023490 enable user +0x5903 023491 jam att_err_invalid_handle ,mem_le_err_code +0x5904 023492 branch le_send_att_error_response +: 023495 le_send_att_find_by_type_value_response: +0x5905 023496 call le_start_end_handle_check_1 +0x5906 023497 rtn user +0x5907 023498 fetcht 2 ,mem_le_search_uuid +0x5908 023499 setarg uuid_gatt_primary_service +0x5909 023500 isub temp ,null +0x590a 023501 branch le_send_att_find_by_type_value_res_primary ,zero +0x590b 023502 branch le_send_att_error_response_notfound +: 023505 le_send_att_find_by_type_value_res_primary: +0x590c 023506 jam le_find_by_type_val_res_not_found ,mem_le_search_res +0x590d 023507 fetcht 2 ,mem_le_search_handle_start +0x590e 023508 storet 2 ,mem_temp +0x590f 023509 call le_att_get_handle_info +0x5910 023510 nbranch le_send_att_error_response_notfound ,blank +: 023511 le_send_att_find_primary_search_loop: +0x5911 023512 fetcht 2 ,mem_temp +0x5912 023513 call le_att_get_handle_info +0x5913 023514 nbranch le_send_att_error_response_notfound2 ,blank +0x5914 023515 copy contr ,rega +0x5915 023516 fetch 1 ,mem_le_curr_att_len +0x5916 023517 copy pdata ,loopcnt +0x5917 023518 fetcht 1 ,mem_le_search_att_type_length +0x5918 023519 isub temp ,null +0x5919 023520 nbranch le_send_att_find_primary_search_loop1 ,zero +0x591a 023521 arg mem_le_search_att_type ,regb +0x591b 023522 call string_compare +0x591c 023524 branch le_send_att_find_primary_search_end_start_handle_found ,zero +0x591d 023526 fetch 2 ,mem_le_cur_uuid +0x591e 023527 fetcht 2 ,mem_le_search_uuid +0x591f 023528 isub temp ,null +0x5920 023529 branch le_send_att_find_primary_search_end_ending_handle_found ,zero +: 023530 le_send_att_find_primary_search_loop1: +0x5921 023531 fetch 2 ,mem_temp +0x5922 023532 increase 1 ,pdata +0x5923 023533 store 2 ,mem_temp +0x5924 023534 branch le_send_att_find_primary_search_loop +: 023536 le_send_att_error_response_notfound2: +0x5925 023537 fetch 1 ,mem_le_search_res +0x5926 023538 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +0x5927 023539 branch le_send_att_error_response_notfound +: 023542 le_send_att_find_primary_search_end_start_handle_found: +0x5928 023543 fetch 2 ,mem_le_cur_uuid +0x5929 023544 fetcht 2 ,mem_le_search_uuid +0x592a 023545 isub temp ,null +0x592b 023546 nbranch le_send_att_find_primary_search_loop1 ,zero +0x592c 023547 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +0x592d 023549 fetcht 2 ,mem_temp +0x592e 023550 storet 2 ,mem_le_cur_handle_start +0x592f 023551 branch le_send_att_find_primary_search_loop1 +: 023553 le_send_att_find_primary_search_end_ending_handle_found: +0x5930 023554 fetch 1 ,mem_le_search_res +0x5931 023555 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +0x5932 023556 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +0x5933 023557 fetcht 2 ,mem_temp +0x5934 023558 increase -1 ,temp +0x5935 023559 storet 2 ,mem_le_cur_handle_end +: 023561 le_send_att_find_primary_search_end: +0x5936 023562 arg 5 ,rega +0x5937 023563 call le_fifo_malloc_tx_l2cap_gatt +0x5938 023564 setarg attop_find_by_type_value_response +0x5939 023565 istore 1 ,contw +0x593a 023566 fetch 2 ,mem_le_cur_handle_start +0x593b 023567 istore 2 ,contw +0x593c 023568 fetch 2 ,mem_le_cur_handle_end +0x593d 023569 istore 2 ,contw +0x593e 023570 rtn +: 023574 le_parse_att_read_by_type_request: +0x593f 023575 call le_get_search_handle_start_end_common +0x5940 023576 call le_get_search_att_uuid +0x5941 023577 branch le_send_att_read_by_type_response +: 023579 le_send_att_read_by_type_response: +0x5942 023580 fetcht 2 ,mem_le_search_handle_start +0x5943 023581 storet 2 ,mem_temp +0x5944 023582 call le_init_attlist_search +0x5945 023583 call le_att_get_handle_ptr2 +0x5946 023584 increase -2 ,contr +0x5947 023585 copy contr ,pdata +0x5948 023586 store 2 ,mem_le_cur_attlist_start_ptr +0x5949 023588 fetcht 2 ,mem_le_search_uuid +0x594a 023589 setarg uuid_chrctr_device_name +0x594b 023590 isub temp ,null +0x594c 023591 branch le_send_att_read_by_type_res_device_name ,zero +0x594d 023592 setarg uuid_gatt_characteristic +0x594e 023593 isub temp ,null +0x594f 023594 nbranch le_send_att_read_by_type_res_not_characteristic ,zero +0x5950 023595 arg 2 ,timeup +: 023596 le_send_att_read_by_type_response_loop: +0x5951 023597 call le_att_check_handle_end +0x5952 023598 nbranch le_send_att_read_by_type_response_end ,positive +0x5953 023599 fetcht 2 ,mem_temp +0x5954 023600 call le_att_get_handle_info_from_ptr +0x5955 023601 beq 1 ,le_send_att_read_by_type_response_end +0x5956 023602 call le_att_same_uuid +0x5957 023603 nbranch le_send_att_read_by_type_response_next_handle ,zero +0x5958 023604 nbranch le_send_att_read_by_type_res_found_next ,user +0x5959 023605 disable user +0x595a 023606 arg 20 ,rega +0x595b 023607 call le_fifo_malloc_tx_l2cap_gatt +0x595c 023608 setarg attop_read_by_type_response +0x595d 023609 istore 1 ,contw +0x595e 023610 copy contw ,alarm +0x595f 023611 increase 1 ,contw +0x5960 023613 call le_send_att_read_by_type_write_properties +0x5961 023614 call le_att_next_handle +0x5962 023615 call le_att_get_handle_info_from_ptr +0x5963 023616 call le_send_att_read_by_type_write_uuid +0x5964 023617 fetch 1 ,mem_le_cur_uuid_length +0x5965 023618 increase 5 ,pdata +0x5966 023619 istore 1 ,alarm +0x5967 023620 fetch 1 ,mem_le_cur_uuid_length +0x5968 023621 beq 16 ,le_send_att_read_by_type_response_end +0x5969 023622 increase -1 ,timeup +0x596a 023623 branch le_send_att_read_by_type_response_end ,zero +: 023624 le_send_att_read_by_type_response_next_handle: +0x596b 023625 call le_att_next_handle +0x596c 023626 branch le_send_att_read_by_type_response_loop +: 023627 le_send_att_read_by_type_response_end: +0x596d 023628 branch le_send_att_error_response_notfound ,user +0x596e 023629 branch le_send_auto_len_by_mem +: 023631 le_send_att_read_by_type_res_found_next: +0x596f 023632 call le_store_att_record +0x5970 023633 call le_att_next_handle +0x5971 023634 call le_att_get_handle_info_from_ptr +0x5972 023635 fetch 1 ,mem_le_cur_uuid_length +0x5973 023636 beq 16 ,le_send_att_read_by_type_response_end +0x5974 023638 call get_contw +0x5975 023639 fetch 2 ,mem_temp +0x5976 023640 increase -1 ,pdata +0x5977 023641 istore 2 ,contw +0x5978 023642 call le_write_att_record_common +0x5979 023643 call le_send_att_read_by_type_write_uuid +0x597a 023644 increase -1 ,timeup +0x597b 023645 branch le_send_att_read_by_type_response_end ,zero +0x597c 023646 branch le_send_att_read_by_type_response_next_handle +: 023649 le_send_att_read_by_type_write_properties: +0x597d 023650 fetch 2 ,mem_temp +0x597e 023651 istore 2 ,contw +0x597f 023653 fetch 1 ,mem_le_curr_att_len +0x5980 023654 copy pdata ,loopcnt +0x5981 023655 call get_contr +0x5982 023656 call memcpy_fast +0x5983 023657 branch store_contw +: 023658 le_send_att_read_by_type_write_uuid: +0x5984 023659 call get_contw +0x5985 023660 fetch 2 ,mem_temp +0x5986 023661 istore 2 ,contw +0x5987 023662 call store_contw +0x5988 023663 fetch 1 ,mem_le_cur_uuid_length +0x5989 023664 copy pdata ,loopcnt +0x598a 023665 call get_contw +0x598b 023666 call get_contr +0x598c 023667 isub loopcnt ,contr +0x598d 023668 increase -1 ,contr +0x598e 023669 call memcpy_fast +0x598f 023670 branch store_contw +: 023674 le_send_att_read_by_type_res_not_characteristic: +0x5990 023675 fetcht 2 ,mem_le_search_handle_start +0x5991 023676 storet 2 ,mem_temp +: 023677 le_send_att_read_by_type_res_not_char_loop: +0x5992 023678 call le_att_check_handle_end +0x5993 023679 nbranch le_send_att_error_response_notfound ,positive +0x5994 023680 call le_att_get_handle_info_from_ptr +0x5995 023681 beq 1 ,le_send_att_error_response_notfound +0x5996 023682 call le_att_same_uuid +0x5997 023683 nbranch le_send_att_read_by_type_res_not_char_next ,zero +: 023685 le_send_att_read_by_type_res_not_char_common: +0x5998 023686 arg 20 ,rega +0x5999 023687 call le_fifo_malloc_tx_l2cap_gatt +0x599a 023688 setarg attop_read_by_type_response +0x599b 023689 istore 1 ,contw +0x599c 023690 fetch 1 ,mem_le_curr_att_len +0x599d 023691 copy pdata ,loopcnt +0x599e 023692 increase 2 ,pdata +0x599f 023693 istore 1 ,contw +0x59a0 023694 fetch 2 ,mem_temp +0x59a1 023695 istore 2 ,contw +0x59a2 023696 call get_contr +0x59a3 023697 call memcpy_fast +0x59a4 023698 call store_contw +0x59a5 023699 branch le_send_auto_len_by_mem +: 023701 le_send_att_read_by_type_res_not_char_next: +0x59a6 023702 call le_att_next_handle +0x59a7 023703 branch le_send_att_read_by_type_res_not_char_loop +: 023706 le_send_att_read_by_type_res_device_name: +0x59a8 023707 arg uuid_chrctr_device_name ,temp +0x59a9 023708 call le_att_get_short_uuid_ptr +0x59aa 023709 rtn blank +0x59ab 023710 increase -5 ,contr +0x59ac 023711 ifetch 2 ,contr +0x59ad 023712 store 2 ,mem_temp +0x59ae 023713 arg 20 ,rega +0x59af 023714 call le_fifo_malloc_tx_l2cap_gatt +0x59b0 023715 setarg attop_read_by_type_response +0x59b1 023716 istore 1 ,contw +0x59b2 023717 fetch 1 ,mem_le_name_len +0x59b3 023718 copy pdata ,loopcnt +0x59b4 023719 increase 2 ,pdata +0x59b5 023720 istore 1 ,contw +0x59b6 023721 fetch 2 ,mem_temp +0x59b7 023722 istore 2 ,contw +0x59b8 023723 arg mem_le_name ,contr +0x59b9 023724 call memcpy_fast +0x59ba 023725 call store_contw +0x59bb 023726 branch le_send_auto_len_by_mem +: 023730 le_parse_att_read_request: +0x59bc 023731 fetcht 2 ,mem_le_att_handle +0x59bd 023732 fetch 1 ,mem_le_configuration +0x59be 023733 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth +: 023735 le_send_att_read_response: +0x59bf 023736 call le_att_get_handle_ptr +0x59c0 023737 branch le_send_att_error_response_notfound ,blank +0x59c1 023738 increase -2 ,contr +0x59c2 023739 ifetch 2 ,contr +0x59c3 023740 arg uuid_chrctr_device_name ,temp +0x59c4 023741 isub temp ,null +0x59c5 023742 branch le_send_device_name ,zero +0x59c6 023743 ifetch 1 ,contr +0x59c7 023744 sub pdata ,22 ,null +0x59c8 023745 branch le_send_att_read_response_less ,positive +0x59c9 023746 force 22 ,pdata +: 023747 le_send_att_read_response_less: +0x59ca 023748 copy pdata ,regc +0x59cb 023749 call store_contr +0x59cc 023750 add regc ,1 ,rega +0x59cd 023751 call le_fifo_malloc_tx_l2cap_gatt +0x59ce 023752 setarg attop_read_response +0x59cf 023753 istore 1 ,contw +0x59d0 023754 copy regc ,loopcnt +0x59d1 023755 call get_contr +0x59d2 023756 branch memcpy +: 023758 le_send_device_name: +0x59d3 023759 call store_contr +0x59d4 023760 fetch 1 ,mem_le_name_len +0x59d5 023761 add pdata ,1 ,rega +0x59d6 023762 call le_fifo_malloc_tx_l2cap_gatt +0x59d7 023763 setarg attop_read_response +0x59d8 023764 istore 1 ,contw +0x59d9 023765 fetch 1 ,mem_le_name_len +0x59da 023766 copy pdata ,loopcnt +0x59db 023767 arg mem_le_name ,contr +0x59dc 023768 branch memcpy +: 023771 le_send_att_read_response_check_auth: +0x59dd 023772 fetch 2 ,mem_le_pairing_handle +0x59de 023773 isub temp ,null +0x59df 023774 nbranch le_send_att_read_response ,zero +0x59e0 023776 call le_check_encrypt_state +0x59e1 023777 nbranch le_send_att_read_response ,user +0x59e2 023778 jam att_err_insufficient_authentication ,mem_le_err_code +0x59e3 023779 branch le_send_att_error_response +: 023782 le_parse_att_read_blob_request: +0x59e4 023783 ifetch 2 ,contr +0x59e5 023784 store 2 ,mem_le_att_offset +: 023785 le_send_att_read_blob_response: +0x59e6 023786 arg 20 ,rega +0x59e7 023787 call le_fifo_malloc_tx_l2cap_gatt +0x59e8 023788 setarg attop_read_blob_response +0x59e9 023789 istore 1 ,contw +0x59ea 023790 fetch 2 ,mem_le_att_offset +0x59eb 023791 iforce rega +0x59ec 023792 fetcht 2 ,mem_le_att_handle +0x59ed 023793 call le_att_get_handle_ptr +0x59ee 023794 branch le_send_att_error_response_notfound ,blank +0x59ef 023795 ifetch 1 ,contr +0x59f0 023796 isub rega ,loopcnt +0x59f1 023797 nbranch le_send_att_error_response_notfound ,positive +0x59f2 023798 sub loopcnt ,22 ,null +0x59f3 023799 branch le_send_att_read_blob_response_less ,positive +0x59f4 023800 force 22 ,loopcnt +: 023801 le_send_att_read_blob_response_less: +0x59f5 023802 deposit rega +0x59f6 023803 iadd contr ,contr +0x59f7 023804 call memcpy_fast +0x59f8 023805 call store_contw +0x59f9 023806 branch le_send_auto_len_by_mem +: 023809 le_parse_att_read_by_group_type_request: +0x59fa 023810 call le_get_search_handle_start_end_common +0x59fb 023811 call le_get_search_att_type +0x59fc 023812 branch le_send_att_read_by_group_type_response +: 023817 le_send_att_read_by_group_type_response: +0x59fd 023818 arg 2 ,timeup +0x59fe 023819 fetcht 2 ,mem_le_search_handle_start +0x59ff 023823 storet 2 ,mem_temp +0x5a00 023824 call le_init_attlist_search +0x5a01 023825 call le_att_get_handle_ptr2 +0x5a02 023826 increase -2 ,contr +0x5a03 023827 copy contr ,pdata +0x5a04 023828 store 2 ,mem_le_cur_attlist_start_ptr +: 023829 le_send_att_read_by_group_type_response_loop: +0x5a05 023830 call le_att_check_handle_end +0x5a06 023831 nbranch le_send_att_read_by_group_type_end0 ,positive +0x5a07 023832 fetcht 2 ,mem_temp +0x5a08 023833 call le_att_get_handle_info_from_ptr +0x5a09 023834 beq 1 ,le_send_att_read_by_group_type_end1 +0x5a0a 023836 call le_att_same_type +0x5a0b 023837 nbranch le_send_att_read_by_group_type_next_handle ,zero +0x5a0c 023838 copy timeup ,pdata +0x5a0d 023839 beq 0 ,le_send_att_read_by_group_type_end1 +0x5a0e 023840 nbranch le_send_att_read_by_group_type_store_write_record ,user +0x5a0f 023841 disable user +0x5a10 023843 arg 20 ,rega +0x5a11 023844 call le_fifo_malloc_tx_l2cap_gatt +0x5a12 023845 setarg attop_read_by_group_type_response +0x5a13 023846 istore 1 ,contw +0x5a14 023847 fetch 1 ,mem_le_curr_att_len +0x5a15 023848 increase 4 ,pdata +0x5a16 023849 istore 1 ,contw +0x5a17 023850 call store_contw +0x5a18 023851 branch le_send_att_read_by_group_type_store_record +: 023852 le_send_att_read_by_group_type_store_write_record: +0x5a19 023853 fetch 1 ,mem_le_curr_att_len +0x5a1a 023854 beq 16 ,le_send_att_read_by_group_type_end1 +0x5a1b 023855 fetch 2 ,mem_temp +0x5a1c 023856 increase -1 ,pdata +0x5a1d 023857 store 2 ,mem_le_cur_handle_end +0x5a1e 023858 call le_write_att_record +: 023859 le_send_att_read_by_group_type_store_record: +0x5a1f 023860 fetch 2 ,mem_temp +0x5a20 023861 store 2 ,mem_le_cur_handle_start +0x5a21 023862 call le_store_att_record +0x5a22 023863 increase -1 ,timeup +: 023865 le_send_att_read_by_group_type_next_handle: +0x5a23 023866 call le_att_next_handle +0x5a24 023867 branch le_send_att_read_by_group_type_response_loop +: 023869 le_send_att_read_by_group_type_end0: +0x5a25 023870 fetch 2 ,mem_temp +0x5a26 023871 store 2 ,mem_le_cur_handle_end +0x5a27 023872 branch le_send_att_read_by_group_type_end_common +: 023873 le_send_att_read_by_group_type_end1: +0x5a28 023874 fetch 2 ,mem_temp +0x5a29 023875 increase -1 ,pdata +0x5a2a 023876 store 2 ,mem_le_cur_handle_end +0x5a2b 023877 branch le_send_att_read_by_group_type_end_common +: 023878 le_send_att_read_by_group_type_end_common: +0x5a2c 023879 branch le_send_att_error_response_notfound ,user +0x5a2d 023880 call le_write_att_record +0x5a2e 023881 branch le_send_auto_len_by_mem +: 023886 le_parse_att_write_request: +0x5a2f 023887 copy contr ,rega +0x5a30 023888 fetch 2 ,mem_le_l2cap_size +0x5a31 023889 add pdata ,-3 ,regb +0x5a32 023890 call le_writeatt_cb +: 023891 le_send_att_write_response_check_auth: +0x5a33 023892 fetch 1 ,mem_le_configuration +0x5a34 023893 bbit0 bit_ble_write_auth ,le_send_att_write_response +0x5a35 023895 fetcht 2 ,mem_le_att_handle +0x5a36 023896 fetch 2 ,mem_le_pairing_handle +0x5a37 023897 isub temp ,null +0x5a38 023898 nbranch le_send_att_write_response ,zero +0x5a39 023899 call le_check_encrypt_state +0x5a3a 023900 nbranch le_send_att_write_response ,user +0x5a3b 023901 jam att_err_insufficient_authentication ,mem_le_err_code +0x5a3c 023902 branch le_send_att_error_response +: 023904 le_send_att_write_response: +0x5a3d 023905 force 1 ,rega +0x5a3e 023906 call le_fifo_malloc_tx_l2cap_gatt +0x5a3f 023907 setarg attop_write_response +0x5a40 023908 istore 1 ,contw +0x5a41 023909 rtn +: 023911 le_check_encrypt_state: +0x5a42 023912 call disable_user +0x5a43 023913 fetch 1 ,mem_le_pairing_mode +0x5a44 023914 rtneq le_pairing_mode_none +0x5a45 023915 fetch 1 ,mem_context +0x5a46 023916 rtnbit1 lestate_encryption +0x5a47 023917 branch enable_user +: 023920 le_parse_att_prepare_write_request: +0x5a48 023921 add contr ,2 ,rega +0x5a49 023922 fetch 2 ,mem_le_l2cap_size +0x5a4a 023923 add pdata ,-5 ,regb +0x5a4b 023924 call le_writeatt_cb +0x5a4c 023925 branch le_send_att_prepare_write_response +: 023928 le_send_att_prepare_write_response: +0x5a4d 023929 fetch 2 ,mem_le_l2cap_size +0x5a4e 023930 copy pdata ,rega +0x5a4f 023931 call le_fifo_malloc_tx_l2cap_gatt +0x5a50 023932 setarg attop_prepare_write_response +0x5a51 023933 istore 1 ,contw +0x5a52 023934 fetch 2 ,mem_le_att_handle +0x5a53 023935 istore 2 ,contw +0x5a54 023936 fetch 2 ,mem_le_l2cap_size +0x5a55 023937 add pdata ,-5 ,loopcnt +0x5a56 023938 fetch 2 ,mem_le_payload_ptr +0x5a57 023939 add pdata ,7 ,contr +0x5a58 023940 ifetch 2 ,contr +0x5a59 023941 istore 2 ,contw +0x5a5a 023942 branch memcpy_fast +: 023946 le_parse_att_execute_write_request: +: 023948 le_send_att_execute_write_response: +0x5a5b 023949 force 1 ,rega +0x5a5c 023950 call le_fifo_malloc_tx_l2cap_gatt +0x5a5d 023951 setarg attop_execute_write_response +0x5a5e 023952 istore 1 ,contw +0x5a5f 023953 rtn +: 023957 le_parse_att_write_command: +0x5a60 023958 copy contr ,rega +0x5a61 023959 fetch 2 ,mem_le_l2cap_size +0x5a62 023960 add pdata ,-3 ,regb +0x5a63 023961 branch le_writeatt_cb +: 023966 le_att_malloc_tx_notify: +0x5a64 023967 copy temp ,regc +0x5a65 023968 increase 3 ,rega +0x5a66 023969 call le_fifo_malloc_tx_l2cap_gatt +0x5a67 023970 increase -3 ,rega +0x5a68 023971 setarg attop_handle_value_notification +0x5a69 023972 istore 1 ,contw +0x5a6a 023973 copy regc ,temp +0x5a6b 023974 istoret 2 ,contw +0x5a6c 023975 rtn +: 023978 le_att_malloc_tx_indication: +0x5a6d 023979 copy temp ,regc +0x5a6e 023980 increase 3 ,rega +0x5a6f 023981 call le_fifo_malloc_tx_l2cap_gatt +0x5a70 023982 increase -3 ,rega +0x5a71 023983 setarg attop_handle_value_indication +0x5a72 023984 istore 1 ,contw +0x5a73 023985 copy regc ,temp +0x5a74 023986 istoret 2 ,contw +0x5a75 023987 rtn +: 023992 le_send_att_error_response_notfound: +0x5a76 023993 jam att_err_attribute_not_found ,mem_le_err_code +: 023994 le_send_att_error_response: +0x5a77 023995 force 5 ,rega +0x5a78 023996 call le_fifo_malloc_tx_l2cap_gatt +0x5a79 023997 setarg attop_error_response +0x5a7a 023998 istore 1 ,contw +0x5a7b 023999 fetch 1 ,mem_le_att_opcode +0x5a7c 024000 istore 1 ,contw +0x5a7d 024001 fetch 2 ,mem_le_att_handle +0x5a7e 024002 istore 2 ,contw +0x5a7f 024003 fetch 1 ,mem_le_err_code +0x5a80 024004 istore 1 ,contw +0x5a81 024005 rtn +: 024008 le_fifo_malloc_tx_l2cap_gatt: +0x5a82 024009 force le_l2cap_cid_att ,regb +0x5a83 024010 branch le_fifo_malloc_tx_l2cap +: 024013 le_att_next_handle: +0x5a84 024014 fetcht 2 ,mem_temp +0x5a85 024015 increase 1 ,temp +0x5a86 024016 storet 2 ,mem_temp +0x5a87 024017 rtn +: 024019 le_att_check_handle_end: +0x5a88 024020 fetcht 2 ,mem_temp +0x5a89 024021 fetch 2 ,mem_le_search_handle_end +0x5a8a 024022 isub temp ,null +0x5a8b 024023 rtn +: 024026 le_att_same_type: +0x5a8c 024027 fetcht 1 ,mem_le_search_att_type_length +0x5a8d 024028 arg mem_le_search_att_type ,rega +: 024029 le_att_check_same_common: +0x5a8e 024030 fetch 1 ,mem_le_cur_uuid_length +0x5a8f 024031 copy pdata ,loopcnt +0x5a90 024032 isub temp ,null +0x5a91 024033 nrtn zero +0x5a92 024034 arg mem_le_cur_uuid ,regb +0x5a93 024035 branch string_compare +: 024037 le_att_same_uuid: +0x5a94 024038 fetcht 1 ,mem_le_search_uuid_length +0x5a95 024039 arg mem_le_search_uuid ,rega +0x5a96 024040 branch le_att_check_same_common +: 024043 le_store_att_record: +0x5a97 024044 fetch 1 ,mem_le_curr_att_len +0x5a98 024045 store 1 ,mem_tmp_buffer +0x5a99 024046 copy pdata ,loopcnt +0x5a9a 024047 call get_contr +0x5a9b 024048 branch memcpy_fast +: 024051 le_write_att_record: +0x5a9c 024052 call get_contw +0x5a9d 024053 fetch 2 ,mem_le_cur_handle_start +0x5a9e 024054 istore 2 ,contw +0x5a9f 024055 fetch 2 ,mem_le_cur_handle_end +0x5aa0 024056 istore 2 ,contw +: 024057 le_write_att_record_common: +0x5aa1 024058 fetch 1 ,mem_tmp_buffer +0x5aa2 024059 copy pdata ,loopcnt +0x5aa3 024060 call memcpy_fast +0x5aa4 024061 branch store_contw +: 024065 le_send_auto_len_by_mem: +0x5aa5 024066 call get_contw +0x5aa6 024067 call le_fifo_get_last_att_ptr +0x5aa7 024068 copy contw ,pdata +0x5aa8 024069 isub contr ,rega +0x5aa9 024070 call le_fifo_get_last_l2cap_ptr +0x5aaa 024071 copy rega ,pdata +0x5aab 024072 istore 2 ,contr +0x5aac 024073 increase 4 ,rega +0x5aad 024074 call le_fifo_get_last_tx_ptr +0x5aae 024075 copy rega ,pdata +0x5aaf 024076 istore 1 ,contr +0x5ab0 024077 rtn +: 024080 le_get_search_handle_start_end_common: +0x5ab1 024081 rshift8 pdata ,pdata +0x5ab2 024082 store 2 ,mem_le_search_handle_start +0x5ab3 024083 ifetch 2 ,contr +0x5ab4 024084 store 2 ,mem_le_search_handle_end +0x5ab5 024085 rtn +: 024090 le_parse_signaling: +0x5ab6 024091 ifetch 1 ,contr +0x5ab7 024092 ifetcht 1 ,contr +0x5ab8 024093 ifetcht 2 ,contr +0x5ab9 024094 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +0x5aba 024095 rtn +: 024096 le_l2cap_parse_conn_parameter_update_rsp: +0x5abb 024097 ifetch 2 ,contr +0x5abc 024098 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x5abd 024099 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +0x5abe 024100 branch ui_ipc_send_event +: 024106 le_l2cap_tx_update_req: +0x5abf 024107 arg 0x0c ,rega +0x5ac0 024108 arg l2cap_connection_parameter_update_request ,regc +0x5ac1 024109 call le_fifo_malloc_tx_l2cap_signaling +0x5ac2 024110 setarg 0x08 +0x5ac3 024111 istore 2 ,contw +0x5ac4 024112 fetch 8 ,mem_le_interval_min +0x5ac5 024113 istore 8 ,contw +0x5ac6 024114 rtn +: 024118 le_fifo_malloc_tx_l2cap_signaling: +0x5ac7 024119 call le_l2cap_update_signaling_identifier +0x5ac8 024120 arg le_l2cap_cid_signal ,regb +0x5ac9 024121 call le_fifo_malloc_tx_l2cap +0x5aca 024122 copy regc ,pdata +0x5acb 024123 istore 1 ,contw +0x5acc 024124 fetch 1 ,mem_le_signaling_identifier +0x5acd 024125 istore 1 ,contw +0x5ace 024126 rtn +: 024129 le_l2cap_update_signaling_identifier: +0x5acf 024130 fetch 1 ,mem_le_signaling_identifier +0x5ad0 024132 pincrease 1 +0x5ad1 024133 store 1 ,mem_le_signaling_identifier +0x5ad2 024134 rtnne 0 +: 024136 le_l2cap_reset_signaling_identifier: +0x5ad3 024137 jam 1 ,mem_le_signaling_identifier +0x5ad4 024138 rtn +: 024143 le_pairing_mode_init: +0x5ad5 024144 fetch 1 ,mem_le_pairing_mode +0x5ad6 024145 beq le_pairing_mode_none ,le_set_no_pairing +0x5ad7 024146 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +0x5ad8 024147 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +0x5ad9 024148 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +0x5ada 024149 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +0x5adb 024150 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +0x5adc 024151 rtn +: 024153 le_set_pairing_mode_secure_justwork: +0x5add 024154 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ade 024155 branch le_set_noinputnooutput +: 024156 le_set_pairing_mode_secure_numeric: +0x5adf 024157 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae0 024158 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x5ae1 024159 rtn +: 024160 le_set_pairing_mode_secure_passkey: +0x5ae2 024161 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae3 024162 branch le_set_displayonly +: 024163 le_set_no_pairing: +0x5ae4 024164 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 024165 le_set_noinputnooutput: +0x5ae5 024166 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x5ae6 024167 rtn +: 024168 le_set_pairing_mode_lagacy_just_work: +0x5ae7 024169 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x5ae8 024170 branch le_set_noinputnooutput +: 024171 le_set_pairing_mode_lagacy_passkey: +0x5ae9 024172 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 024173 le_set_displayonly: +0x5aea 024174 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x5aeb 024175 rtn +: 024178 le_secure_connection_enable: +0x5aec 024179 fetch 1 ,mem_le_pres_auth +0x5aed 024180 set1 le_auth_secure_connection_pairing_bit ,pdata +0x5aee 024181 store 1 ,mem_le_pres_auth +0x5aef 024182 rtn +: 024183 le_secure_connection_disable: +0x5af0 024184 fetch 1 ,mem_le_pres_auth +0x5af1 024185 set0 le_auth_secure_connection_pairing_bit ,pdata +0x5af2 024186 store 1 ,mem_le_pres_auth +0x5af3 024187 rtn +: 024189 le_parse_smp: +0x5af4 024190 ifetch 1 ,contr +0x5af5 024191 beq smp_pairing_request ,le_parse_smp_pairing_request +0x5af6 024193 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +0x5af7 024194 beq smp_pairing_random ,le_parse_smp_pairing_random +0x5af8 024195 beq smp_pairing_failed ,le_parse_smp_pairing_failed +0x5af9 024196 beq smp_encryption_information ,le_parse_smp_encryption_information +0x5afa 024197 beq smp_master_identification ,le_parse_smp_master_identification +0x5afb 024198 beq smp_identity_information ,le_parse_smp_identity_information +0x5afc 024199 beq smp_identity_address_information ,le_parse_smp_identity_address_information +0x5afd 024200 beq smp_signing_information ,le_parse_smp_signing_information +0x5afe 024201 beq smp_security_request ,le_parse_smp_security_request +0x5aff 024202 beq smp_pairing_public_key ,le_parse_smp_public_key +0x5b00 024203 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +0x5b01 024204 rtn +: 024208 le_send_smp_security_request: +0x5b02 024209 force 2 ,rega +0x5b03 024210 call le_fifo_malloc_tx_l2cap_smp +0x5b04 024211 setarg smp_security_request +0x5b05 024212 istore 1 ,contw +0x5b06 024213 fetch 1 ,mem_le_pres_auth +0x5b07 024214 istore 1 ,contw +0x5b08 024215 rtn +: 024217 le_parse_smp_pairing_request: +0x5b09 024218 store 1 ,mem_le_preq +0x5b0a 024219 ifetch 6 ,contr +0x5b0b 024220 istore 6 ,contw +0x5b0c 024221 fetch 1 ,mem_le_pairing_mode +0x5b0d 024222 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +0x5b0e 024223 call le_send_smp_pairing_response +0x5b0f 024224 call le_check_master_support_secure_connect +0x5b10 024225 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +0x5b11 024226 fetch 1 ,mem_le_preq_iocap +0x5b12 024227 beq flag_iocap_displayonly ,le_set_tk_0 +0x5b13 024228 beq flag_iocap_displayyesno ,le_set_tk_0 +0x5b14 024229 beq flag_iocap_noinputnooutput ,le_set_tk_0 +0x5b15 024230 fetch 1 ,mem_le_pairing_mode +0x5b16 024231 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +0x5b17 024232 rtneq le_pairing_mode_secure_connect_passkey +: 024233 le_set_tk_0: +0x5b18 024234 arg 0 ,pdata +0x5b19 024235 store 4 ,mem_le_tk +0x5b1a 024236 rtn +: 024238 le_parse_smp_pairing_req_passkey: +0x5b1b 024239 fetch 1 ,mem_le_configuration +0x5b1c 024240 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey +: 024241 le_genernate_tk: +0x5b1d 024242 arg mem_le_tk ,rega +0x5b1e 024243 copy rega ,contw +0x5b1f 024244 arg 3 ,loopcnt +0x5b20 024245 call generate_random_loop +0x5b21 024246 fetch 2 ,mem_le_tk + 2 +0x5b22 024247 and_into 0x7 ,pdata +0x5b23 024248 store 2 ,mem_le_tk + 2 +: 024249 le_parse_smp_pairing_req_fixed_passkey: +0x5b24 024250 jam bt_evt_le_tk_generate ,mem_fifo_temp +0x5b25 024251 branch ui_ipc_send_event +: 024253 le_check_master_support_secure_connect: +0x5b26 024254 fetch 1 ,mem_le_preq_auth +0x5b27 024255 rtnbit1 le_auth_secure_connection_pairing_bit +0x5b28 024256 fetch 1 ,mem_le_pairing_mode +0x5b29 024257 rtnbit0 le_pairing_mode_secure_connect_bit +0x5b2a 024258 branch app_ble_disconnect +: 024260 le_send_smp_pairing_response: +0x5b2b 024261 force 7 ,rega +0x5b2c 024262 call le_fifo_malloc_tx_l2cap_smp +0x5b2d 024263 fetch 7 ,mem_le_pres +0x5b2e 024264 istore 7 ,contw +0x5b2f 024265 rtn +: 024268 le_parse_smp_pairing_confirm: +0x5b30 024269 copy contr ,rega +0x5b31 024270 fetch 1 ,mem_le_pairing_mode +0x5b32 024271 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +0x5b33 024272 copy rega ,contr +0x5b34 024273 arg mem_le_rconfirm ,contw +0x5b35 024274 call memcpy16 +0x5b36 024275 branch le_send_smp_pairing_confirm +: 024276 le_parse_smp_pairing_confirm_secure_passkey: +0x5b37 024277 copy rega ,contr +0x5b38 024278 arg mem_le_rconfirm ,contw +0x5b39 024279 call memcpy16 +0x5b3a 024280 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5b3b 024281 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +0x5b3c 024282 rtn +: 024285 le_send_smp_pairing_confirm: +0x5b3d 024286 fetch 1 ,mem_le_pairing_mode +0x5b3e 024287 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +0x5b3f 024288 call generate_confirm +0x5b40 024289 force 17 ,rega +0x5b41 024290 call le_fifo_malloc_tx_l2cap_smp +0x5b42 024291 setarg smp_pairing_confirm +0x5b43 024292 istore 1 ,contw +0x5b44 024293 branch store_aes_result +: 024296 le_send_smp_pairing_confirm_sc: +0x5b45 024297 arg mem_le_srand ,contw +0x5b46 024298 call generate_random +0x5b47 024299 call function_f4_cb +0x5b48 024300 force 17 ,rega +0x5b49 024301 call le_fifo_malloc_tx_l2cap_smp +0x5b4a 024302 setarg smp_pairing_confirm +0x5b4b 024303 istore 1 ,contw +0x5b4c 024304 branch load_inverse_result +: 024308 le_parse_smp_pairing_random: +0x5b4d 024309 copy contr ,rega +0x5b4e 024310 fetch 1 ,mem_le_pairing_mode +0x5b4f 024311 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +0x5b50 024312 copy rega ,contr +0x5b51 024313 call authenticate_rconfirm +0x5b52 024314 branch le_parse_smp_pairing_random_success ,zero +: 024315 le_send_pairing_confirm_value_failed: +0x5b53 024316 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason +: 024317 le_send_pairing_failed: +0x5b54 024318 force 2 ,rega +0x5b55 024319 call le_fifo_malloc_tx_l2cap_smp +0x5b56 024320 setarg smp_pairing_failed +0x5b57 024321 istore 1 ,contw +0x5b58 024322 fetch 1 ,mem_le_ll_pairing_fail_reason +0x5b59 024323 istore 1 ,contw +: 024324 le_parse_smp_pairing_failed: +0x5b5a 024325 force smp_pairing_timer ,queue +0x5b5b 024326 call timer_stop +0x5b5c 024327 jam flag_le_pairing_null ,mem_le_pairing_state +0x5b5d 024328 jam bt_evt_le_pairing_fail ,mem_fifo_temp +0x5b5e 024329 branch ui_ipc_send_event +: 024331 le_smp_pairing_fail_reason_not_support_pairing: +0x5b5f 024332 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +0x5b60 024333 branch le_send_pairing_failed +: 024336 le_parse_smp_pairing_random_sc: +0x5b61 024337 arg mem_le_mrand ,contw +0x5b62 024338 copy rega ,contr +0x5b63 024339 call memcpy16 +0x5b64 024340 fetch 1 ,mem_le_pairing_mode +0x5b65 024341 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +0x5b66 024342 call function_g2 +0x5b67 024345 call le_send_smp_pairing_random +0x5b68 024346 fetch 1 ,mem_le_pairing_mode +0x5b69 024347 rtnne le_pairing_mode_secure_connect_numeric +0x5b6a 024348 jam bt_evt_le_gkey_generate ,mem_fifo_temp +0x5b6b 024349 branch ui_ipc_send_event +: 024351 le_parse_smp_pairing_random_sc_passkey: +0x5b6c 024352 call function_f4_ca +0x5b6d 024353 arg mem_aes_cmac_temp ,contw +0x5b6e 024354 call load_inverse_result +0x5b6f 024355 arg mem_aes_cmac_temp ,rega +0x5b70 024356 arg mem_le_rconfirm ,regb +0x5b71 024357 arg 16 ,loopcnt +0x5b72 024358 call string_compare +0x5b73 024359 nbranch le_send_pairing_confirm_value_failed ,zero +0x5b74 024360 branch le_send_smp_pairing_random +: 024362 le_parse_smp_pairing_random_success: +0x5b75 024363 call generate_stk +0x5b76 024364 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5b77 024365 call ui_ipc_send_event +0x5b78 024366 jam 1 ,mem_ltk_exists +0x5b79 024367 jam flag_le_pairing_after_auth ,mem_le_pairing_state +: 024369 le_send_smp_pairing_random: +0x5b7a 024370 force 17 ,rega +0x5b7b 024371 call le_fifo_malloc_tx_l2cap_smp +0x5b7c 024372 setarg smp_pairing_random +0x5b7d 024373 istore 1 ,contw +0x5b7e 024374 arg mem_le_srand ,contr +0x5b7f 024375 branch memcpy16 +: 024377 le_parse_smp_encryption_information: +0x5b80 024378 arg mem_le_peer_ltk ,contw +0x5b81 024379 branch memcpy16 +: 024381 le_send_smp_encryption_information: +0x5b82 024382 force 17 ,rega +0x5b83 024383 call le_fifo_malloc_tx_l2cap_smp +0x5b84 024384 setarg smp_encryption_information +0x5b85 024385 istore 1 ,contw +0x5b86 024386 fetch 1 ,mem_le_configuration +0x5b87 024387 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +0x5b88 024388 arg mem_le_ltk ,contr +0x5b89 024389 branch memcpy16 +: 024391 le_send_fixed_ltk: +0x5b8a 024392 arg mem_le_fixed_ltk ,contr +0x5b8b 024393 branch memcpy16 +: 024396 le_send_smp_master_identification: +0x5b8c 024397 arg mem_le_ediv ,contw +0x5b8d 024398 force 10 ,loopcnt +0x5b8e 024399 call generate_random_loop +0x5b8f 024400 force 11 ,rega +0x5b90 024401 call le_fifo_malloc_tx_l2cap_smp +0x5b91 024402 setarg smp_master_identification +0x5b92 024403 istore 1 ,contw +0x5b93 024404 fetch 2 ,mem_le_ediv +0x5b94 024405 istore 2 ,contw +0x5b95 024406 fetch 8 ,mem_le_rand +0x5b96 024407 istore 8 ,contw +0x5b97 024408 rtn +: 024410 le_send_smp_identity_information: +0x5b98 024411 force 17 ,rega +0x5b99 024412 call le_fifo_malloc_tx_l2cap_smp +0x5b9a 024413 setarg smp_identity_information +0x5b9b 024414 istore 1 ,contw +0x5b9c 024415 setarg 0 +0x5b9d 024416 istore 8 ,contw +0x5b9e 024417 istore 8 ,contw +0x5b9f 024418 rtn +: 024421 le_send_smp_identity_address_information: +0x5ba0 024422 force 8 ,rega +0x5ba1 024423 call le_fifo_malloc_tx_l2cap_smp +0x5ba2 024424 setarg smp_identity_address_information +0x5ba3 024425 istore 1 ,contw +0x5ba4 024426 fetch 1 ,mem_le_conn_own_addr_type +0x5ba5 024427 istore 1 ,contw +0x5ba6 024428 fetch 6 ,mem_le_lap +0x5ba7 024429 istore 6 ,contw +0x5ba8 024430 rtn +: 024433 le_send_pairing_fail_unspecified_reason: +0x5ba9 024434 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +0x5baa 024435 branch le_send_pairing_failed +: 024437 le_check_init_key_distribution: +0x5bab 024438 fetch 1 ,mem_le_pres_init_key_distribution +0x5bac 024439 fetcht 1 ,mem_le_pres_init_key_distribution +0x5bad 024440 iand temp ,pdata +0x5bae 024441 rtn +: 024443 le_parse_smp_identity_information: +0x5baf 024444 arg mem_le_irk ,contw +0x5bb0 024445 call memcpy16 +0x5bb1 024446 call le_check_init_key_distribution +0x5bb2 024447 isolate0 le_initator_irk_bit ,pdata +0x5bb3 024448 branch le_send_pairing_fail_unspecified_reason ,true +0x5bb4 024449 fetch 1 ,mem_device_option +0x5bb5 024450 rtnne dvc_op_module +0x5bb6 024451 call le_check_master_addr_type +0x5bb7 024452 nrtn user +0x5bb8 024453 branch app_ble_store_reconn_info +: 024456 le_check_master_addr_type: +0x5bb9 024457 call disable_user +0x5bba 024458 fetch 1 ,mem_le_conn_peer_addr_type +0x5bbb 024459 rtneq master_public_addr +0x5bbc 024460 fetch 1 ,mem_le_plap + 5 +0x5bbd 024461 compare 0xc0 ,pdata ,0xc0 +0x5bbe 024462 rtn true +0x5bbf 024463 branch enable_user +: 024465 le_parse_smp_identity_address_information: +0x5bc0 024466 call le_check_init_key_distribution +0x5bc1 024467 isolate0 le_initator_irk_bit ,pdata +0x5bc2 024468 branch le_send_pairing_fail_unspecified_reason ,true +0x5bc3 024469 rtn +: 024471 le_parse_smp_master_identification: +: 024472 le_parse_smp_signing_information: +: 024473 le_parse_smp_security_request: +0x5bc4 024474 rtn +: 024476 le_parse_smp_public_key: +0x5bc5 024477 arg mem_le_pubkey_remote_x_256 ,contw +0x5bc6 024478 call memcpy64 +0x5bc7 024479 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bc8 024480 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +0x5bc9 024481 rtn +: 024483 le_parse_smp_dhkey_check: +0x5bca 024484 arg mem_sp_confirm_remote ,contw +0x5bcb 024485 call memcpy16 +0x5bcc 024486 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +0x5bcd 024487 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bce 024488 rtn +: 024490 le_send_smp_pairing_public_key: +0x5bcf 024491 force 65 ,rega +0x5bd0 024492 call le_fifo_malloc_tx_l2cap_smp +0x5bd1 024493 setarg smp_pairing_public_key +0x5bd2 024494 istore 1 ,contw +0x5bd3 024495 arg mem_le_pubkey_local_x_256 ,contr +0x5bd4 024496 branch memcpy64 +: 024498 le_send_smp_pairing_dhkey_check: +0x5bd5 024499 call function_f6_eb +0x5bd6 024500 force 17 ,rega +0x5bd7 024501 call le_fifo_malloc_tx_l2cap_smp +0x5bd8 024502 setarg smp_pairing_dhkey_check +0x5bd9 024503 istore 1 ,contw +0x5bda 024504 branch load_inverse_result +: 024507 le_check_paring_time: +0x5bdb 024508 fetch 1 ,mem_le_pairing_state +0x5bdc 024509 rtneq flag_le_pairing_end +0x5bdd 024510 arg flag_le_pairing_rcv_pairing_req ,temp +0x5bde 024511 isub temp ,null +0x5bdf 024512 nrtn positive +0x5be0 024513 arg smp_pairing_timer ,queue +0x5be1 024514 call timer_check +0x5be2 024515 nrtn blank +0x5be3 024516 branch le_send_pairing_fail_unspecified_reason +: 024518 le_pairing_sm: +0x5be4 024519 bpatchx patch2f_0 ,mem_patch2f +0x5be5 024520 fetch 1 ,mem_le_pairing_state +0x5be6 024521 beq flag_le_pairing_null ,le_pairing_sm_null +0x5be7 024522 beq flag_le_pairing_start ,le_pairing_sm_start +0x5be8 024523 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +0x5be9 024524 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +0x5bea 024525 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +0x5beb 024526 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +0x5bec 024527 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +0x5bed 024528 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +0x5bee 024529 rtn +: 024531 le_pairing_sm_null: +: 024532 le_pairing_sm_send_sec_req: +0x5bef 024533 fetch 1 ,mem_le_enc_state +0x5bf0 024534 rtnne flag_le_send_start_enc_rsp +0x5bf1 024535 jam flag_le_enc_end ,mem_le_enc_state +0x5bf2 024536 jam flag_le_pairing_end ,mem_le_pairing_state +0x5bf3 024537 jam bt_evt_le_reconnect_complete ,mem_fifo_temp +0x5bf4 024538 branch ui_ipc_send_event +: 024541 le_pairing_sm_start: +0x5bf5 024542 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +0x5bf6 024543 branch le_send_smp_security_request +: 024545 le_pairing_sm_rcv_pairing_req: +0x5bf7 024546 jam flag_le_pairing_auth ,mem_le_pairing_state +0x5bf8 024547 setarg timer_smp_pairing_timeout +0x5bf9 024548 arg smp_pairing_timer ,queue +0x5bfa 024549 branch timer_init +: 024551 le_pairing_sm_after_auth: +0x5bfb 024552 fetch 1 ,mem_le_enc_state +0x5bfc 024553 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +0x5bfd 024554 rtn +: 024556 le_pairing_sm_after_auth_start_enc: +0x5bfe 024557 jam flag_le_paring_send_enc_information ,mem_le_pairing_state +0x5bff 024558 jam bt_evt_le_enc_info ,mem_fifo_temp +0x5c00 024559 call ui_ipc_send_event +0x5c01 024560 call le_send_smp_encryption_information +0x5c02 024561 fetch 1 ,mem_device_option +0x5c03 024562 rtnne dvc_op_module +0x5c04 024563 call le_check_master_addr_type +0x5c05 024564 rtn user +0x5c06 024565 branch app_ble_store_reconn_info +: 024568 le_pairng_sm_send_enc_information: +0x5c07 024569 jam flag_le_paring_send_master_identification ,mem_le_pairing_state +0x5c08 024570 branch le_send_smp_master_identification +: 024572 le_pairng_sm_send_master_indentification: +0x5c09 024573 fetch 1 ,mem_le_preq_resp_key_distribution +0x5c0a 024574 fetcht 1 ,mem_le_pres_resp_key_distribution +0x5c0b 024575 iand temp ,pdata +0x5c0c 024576 isolate0 le_initator_irk_bit ,pdata +0x5c0d 024577 branch le_parse_start_enc_rsp_after_auth_end ,true +0x5c0e 024578 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +0x5c0f 024579 branch le_send_smp_identity_information +: 024581 le_pairng_sm_send_indentity_information: +0x5c10 024582 call le_send_smp_identity_address_information +0x5c11 024583 branch le_parse_start_enc_rsp_after_auth_end +: 024586 le_parse_start_enc_rsp_after_auth_end: +0x5c12 024587 force smp_pairing_timer ,queue +0x5c13 024588 call timer_stop +0x5c14 024589 jam flag_le_enc_end ,mem_le_enc_state +0x5c15 024590 jam flag_le_pairing_end ,mem_le_pairing_state +0x5c16 024591 jam bt_evt_le_pairing_complete ,mem_fifo_temp +0x5c17 024592 branch ui_ipc_send_event +: 024596 le_secure_connect_sm: +0x5c18 024597 bpatchx patch2f_1 ,mem_patch2f +0x5c19 024598 fetch 1 ,mem_le_pairing_mode +0x5c1a 024599 rtnbit0 le_pairing_mode_secure_connect_bit +0x5c1b 024600 fetch 1 ,mem_le_secure_connect_flag +0x5c1c 024601 rtnne le_sp_flag_commit_256 +0x5c1d 024602 jam sp_flag_standby ,mem_le_secure_connect_flag +0x5c1e 024603 fetch 1 ,mem_le_secure_connect_state +0x5c1f 024604 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +0x5c20 024605 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +0x5c21 024606 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +0x5c22 024607 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +0x5c23 024608 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +0x5c24 024609 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +0x5c25 024610 rtn +: 024613 le_sc_sm_passkey_wait_confirm: +0x5c26 024614 fetch 1 ,mem_authentication_passkey_times +0x5c27 024615 copy pdata ,queue +0x5c28 024616 increase 1 ,pdata +0x5c29 024617 store 1 ,mem_authentication_passkey_times +0x5c2a 024618 fetch 4 ,mem_le_tk +0x5c2b 024619 qisolate1 pdata +0x5c2c 024620 setarg 0x80 +0x5c2d 024621 setflag true ,0 ,pdata +0x5c2e 024622 store 1 ,mem_passkey_1bit +0x5c2f 024623 branch le_sc_sm_ready_send_pairing_confirm +: 024625 le_sc_sm_wait_confirm_gkey: +0x5c30 024626 fetch 1 ,mem_le_sc_confirm_gkey_flag +0x5c31 024627 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +0x5c32 024628 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +0x5c33 024629 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c34 024630 rtn +: 024632 le_sc_confirm_gkey_ok: +0x5c35 024633 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5c36 024634 call ui_ipc_send_event +0x5c37 024635 jam flag_le_pairing_after_auth ,mem_le_pairing_state +0x5c38 024636 branch le_send_smp_pairing_dhkey_check +: 024638 le_sc_sm_receive_dhkey: +0x5c39 024639 fetch 1 ,mem_sp_dhkey_invalid +0x5c3a 024640 beq sp_key_valid_256 ,le_dhkey_ready +0x5c3b 024641 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c3c 024642 rtn +: 024644 le_dhkey_ready: +0x5c3d 024645 call function_f5 +0x5c3e 024649 fetch 1 ,mem_le_pairing_mode +0x5c3f 024650 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +0x5c40 024651 call le_set_tk_0 +: 024652 le_dhkey_ready_common: +0x5c41 024653 call function_f6_ea +0x5c42 024654 arg mem_aes_cmac_temp ,rega +0x5c43 024655 arg mem_sp_confirm_remote ,regb +0x5c44 024656 arg 16 ,loopcnt +0x5c45 024657 call string_compare +0x5c46 024658 branch le_dhkey_check_ok ,zero +: 024659 le_dhkey_check_fail: +0x5c47 024660 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +0x5c48 024661 branch le_send_pairing_failed +: 024664 le_dhkey_check_ok: +0x5c49 024665 call sp_calc_check_publickey_256 +0x5c4a 024666 nbranch le_dhkey_check_fail ,zero +0x5c4b 024667 jam 1 ,mem_ltk_exists +0x5c4c 024668 fetch 1 ,mem_le_pairing_mode +0x5c4d 024669 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +0x5c4e 024670 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +0x5c4f 024671 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c50 024672 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +0x5c51 024673 rtn +: 024675 le_sc_sm_send_public_key: +0x5c52 024676 fetch 1 ,mem_le_pairing_mode +0x5c53 024677 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +0x5c54 024678 jam 0 ,mem_passkey_1bit +: 024679 le_sc_sm_ready_send_pairing_confirm: +0x5c55 024680 branch le_send_smp_pairing_confirm +: 024682 le_sc_sm_send_public_key_passkey: +0x5c56 024686 jam 0 ,mem_authentication_passkey_times +0x5c57 024687 branch le_parse_smp_pairing_req_passkey +: 024690 le_sc_sm_receive_public_key: +0x5c58 024691 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c59 024692 fetch 1 ,mem_le_sc_local_key_invalid +0x5c5a 024693 beq sp_key_valid_256 ,le_public_key_ready +0x5c5b 024695 rtn +: 024697 le_public_key_ready: +0x5c5c 024698 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +0x5c5d 024699 jam sp_key_invalid ,mem_sp_dhkey_invalid +0x5c5e 024700 branch sp_dhkey_calc_256 +: 024702 le_sc_sm_wait_send_public_key: +0x5c5f 024703 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c60 024704 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +0x5c61 024705 branch le_send_smp_pairing_public_key +: 024709 le_fifo_malloc_tx_l2cap_smp: +0x5c62 024710 force le_l2cap_cid_smp ,regb +0x5c63 024711 branch le_fifo_malloc_tx_l2cap +: 024715 le_parse_ll: +0x5c64 024716 fetch 1 ,mem_le_rxbuf + 2 +0x5c65 024717 beq ll_connection_update_req ,le_parse_connection_update_req +0x5c66 024718 beq ll_channel_map_req ,le_parse_channel_map_req +0x5c67 024719 beq ll_terminate_ind ,le_parse_terminate_ind +0x5c68 024720 beq ll_enc_req ,le_parse_enc_req +0x5c69 024721 beq ll_enc_rsp ,le_parse_enc_rsp +0x5c6a 024722 beq ll_start_enc_req ,le_parse_start_enc_req +0x5c6b 024723 beq ll_start_enc_rsp ,le_parse_start_enc_rsp +0x5c6c 024724 beq ll_unknown_rsp ,le_parse_unknown_rsp +0x5c6d 024725 beq ll_feature_req ,le_parse_feature_req +0x5c6e 024726 beq ll_feature_rsp ,le_parse_feature_rsp +0x5c6f 024727 beq ll_pause_enc_req ,le_parse_pause_enc_req +0x5c70 024728 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +0x5c71 024729 beq ll_version_ind ,le_parse_version_ind +0x5c72 024730 beq ll_reject_ind ,le_parse_reject_ind +0x5c73 024731 beq ll_ping_req ,le_parse_ping_req +0x5c74 024732 beq ll_ping_rsp ,le_parse_ping_rsp +0x5c75 024733 arg 2 ,rega +0x5c76 024734 arg ll_unknown_rsp ,regb +0x5c77 024735 call le_fifo_malloc_tx_ll +0x5c78 024736 fetch 1 ,mem_le_rxbuf + 2 +0x5c79 024737 istore 1 ,contw +0x5c7a 024738 rtn +: 024741 le_parse_connection_update_req: +0x5c7b 024742 ifetch 9 ,contr +0x5c7c 024743 store 9 ,mem_le_new_param +0x5c7d 024744 ifetch 2 ,contr +0x5c7e 024745 store 2 ,mem_le_instant +0x5c7f 024746 fetch 1 ,mem_le_state +0x5c80 024747 set1 lestate_update_param ,pdata +0x5c81 024748 store 1 ,mem_le_state +0x5c82 024749 rtn +: 024751 le_parse_channel_map_req: +0x5c83 024752 ifetch 5 ,contr +0x5c84 024753 store 5 ,mem_le_new_map +0x5c85 024754 ifetch 2 ,contr +0x5c86 024755 store 2 ,mem_le_instant +0x5c87 024756 fetcht 2 ,mem_le_event_count +0x5c88 024757 isub temp ,null +0x5c89 024758 nbranch le_parse_terminate_ind ,positive +0x5c8a 024759 fetch 1 ,mem_le_state +0x5c8b 024760 set1 lestate_update_map ,pdata +0x5c8c 024761 store 1 ,mem_le_state +0x5c8d 024762 rtn +: 024765 le_parse_terminate_ind: +0x5c8e 024766 setarg 20 +0x5c8f 024767 store 2 ,mem_le_superto +0x5c90 024768 store 2 ,mem_le_init_superto +0x5c91 024769 rtn +: 024771 le_send_terminate_ind_user_terminated: +0x5c92 024772 arg error_remote_user_terminated_connection ,regc +: 024775 le_send_terminate_ind: +0x5c93 024776 arg 2 ,rega +0x5c94 024777 arg ll_terminate_ind ,regb +0x5c95 024778 call le_fifo_malloc_tx_ll +0x5c96 024779 copy regc ,pdata +0x5c97 024780 istore 1 ,contw +0x5c98 024781 rtn +: 024783 le_parse_feature_req: +: 024785 le_send_feature_rsp: +0x5c99 024786 arg 9 ,rega +0x5c9a 024787 arg ll_feature_rsp ,regb +0x5c9b 024788 call le_fifo_malloc_tx_ll +0x5c9c 024789 setarg param_le_features +0x5c9d 024790 istore 8 ,contw +0x5c9e 024791 rtn +: 024794 le_parse_version_ind: +0x5c9f 024795 rtn master +: 024796 le_send_version_ind: +0x5ca0 024797 arg 6 ,rega +0x5ca1 024798 arg ll_version_ind ,regb +0x5ca2 024799 call le_fifo_malloc_tx_ll +0x5ca3 024800 fetch 5 ,mem_lmp_version +0x5ca4 024801 istore 5 ,contw +0x5ca5 024802 rtn +: 024805 le_parse_ping_req: +0x5ca6 024806 arg ll_ping_rsp ,regb +0x5ca7 024807 branch le_send_ll_one_lenth +: 024810 le_send_ll_one_lenth: +0x5ca8 024811 arg 1 ,rega +0x5ca9 024812 branch le_fifo_malloc_tx_ll +: 024815 le_parse_enc_req: +0x5caa 024816 ifetch 8 ,contr +0x5cab 024817 store 8 ,mem_le_rand +0x5cac 024818 ifetch 2 ,contr +0x5cad 024819 store 2 ,mem_le_ediv +0x5cae 024820 ifetch 8 ,contr +0x5caf 024821 store 8 ,mem_le_skdm +0x5cb0 024822 ifetch 4 ,contr +0x5cb1 024823 store 4 ,mem_le_ivm +0x5cb2 024824 call le_send_enc_rsp +0x5cb3 024825 bpatchx patch2f_2 ,mem_patch2f +0x5cb4 024826 fetch 1 ,mem_le_pairing_state +0x5cb5 024827 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +0x5cb6 024828 fetch 1 ,mem_le_configuration +0x5cb7 024829 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +0x5cb8 024830 fetch 1 ,mem_nv_data_number +0x5cb9 024831 ncall load_device_list_mode_4 ,blank +0x5cba 024832 fetch 1 ,mem_ltk_exists +0x5cbb 024833 beq 0 ,le_ltk_lost +: 024834 le_parse_enc_req_after_auth: +0x5cbc 024835 jam flag_le_rcv_enc_start ,mem_le_enc_state +0x5cbd 024836 call le_send_start_enc_req +0x5cbe 024837 branch generate_sk +: 024839 le_parse_enc_req_fixed_ltk: +0x5cbf 024840 jam 1 ,mem_ltk_exists +0x5cc0 024841 arg mem_le_fixed_ltk ,contr +0x5cc1 024842 arg mem_le_ltk ,contw +0x5cc2 024843 call memcpy16 +0x5cc3 024844 branch le_parse_enc_req_after_auth +: 024847 le_ltk_lost: +0x5cc4 024848 bpatchx patch2f_3 ,mem_patch2f +0x5cc5 024849 jam flag_le_enc_null ,mem_le_enc_state +0x5cc6 024850 jam flag_le_enc_null ,mem_le_pairing_state +0x5cc7 024851 jam bt_evt_le_ltk_lost ,mem_fifo_temp +0x5cc8 024852 branch ui_ipc_send_event +: 024854 le_send_reject_ind: +0x5cc9 024855 arg 2 ,rega +0x5cca 024856 arg ll_reject_ind ,regb +0x5ccb 024857 call le_fifo_malloc_tx_ll +0x5ccc 024858 setarg le_err_pin_or_key_missing +0x5ccd 024859 istore 1 ,contw +0x5cce 024860 rtn +: 024862 le_send_enc_rsp: +0x5ccf 024863 arg mem_le_skds ,contw +0x5cd0 024864 force 8 ,loopcnt +0x5cd1 024865 call generate_random_loop +0x5cd2 024866 arg mem_le_ivs ,contw +0x5cd3 024867 force 4 ,loopcnt +0x5cd4 024868 call generate_random_loop +0x5cd5 024869 arg 13 ,rega +0x5cd6 024870 arg ll_enc_rsp ,regb +0x5cd7 024871 call le_fifo_malloc_tx_ll +0x5cd8 024872 fetch 8 ,mem_le_skds +0x5cd9 024873 istore 8 ,contw +0x5cda 024874 fetch 4 ,mem_le_ivs +0x5cdb 024875 istore 4 ,contw +0x5cdc 024876 rtn +: 024878 le_send_start_enc_req: +0x5cdd 024879 arg ll_start_enc_req ,regb +0x5cde 024880 branch le_send_ll_one_lenth +: 024882 le_send_start_enc_rsp: +0x5cdf 024883 arg ll_start_enc_rsp ,regb +0x5ce0 024884 branch le_send_ll_one_lenth +: 024887 le_parse_enc_rsp: +0x5ce1 024888 ifetch 8 ,contr +0x5ce2 024889 store 8 ,mem_le_skds +0x5ce3 024890 ifetch 4 ,contr +0x5ce4 024891 store 4 ,mem_le_ivs +0x5ce5 024892 branch generate_sk +: 024894 le_parse_start_enc_req: +0x5ce6 024895 fetch 1 ,mem_le_state +0x5ce7 024896 set1 lestate_encryption ,pdata +0x5ce8 024897 store 1 ,mem_le_state +0x5ce9 024898 rtn +: 024900 le_parse_start_enc_rsp: +0x5cea 024901 rtn master +0x5ceb 024902 jam bt_evt_le_start_enc ,mem_fifo_temp +0x5cec 024903 call ui_ipc_send_event +0x5ced 024904 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +0x5cee 024905 branch le_send_start_enc_rsp +: 024907 le_parse_pause_enc_req: +0x5cef 024908 jam flag_le_enc_pause ,mem_le_enc_state +0x5cf0 024909 call le_send_pause_enc_rsp +0x5cf1 024910 jam bt_evt_le_pause_enc ,mem_fifo_temp +0x5cf2 024911 branch ui_ipc_send_event +: 024913 le_send_pause_enc_rsp: +0x5cf3 024914 arg ll_pause_enc_rsp ,regb +0x5cf4 024915 branch le_send_ll_one_lenth +: 024918 le_parse_feature_rsp: +: 024919 le_parse_unknown_rsp: +: 024920 le_parse_pause_enc_rsp: +: 024921 le_parse_reject_ind: +: 024922 le_parse_ping_rsp: +0x5cf5 024923 rtn +: 024930 init_lmp: +0x5cf6 024931 rtn wake +: 024932 init_lmp_work: +0x5cf7 024933 bpatchx patch2f_4 ,mem_patch2f +0x5cf8 024934 setarg 0 +0x5cf9 024935 store 1 ,mem_lmp_to_send +0x5cfa 024936 store 1 ,mem_conn_sm +0x5cfb 024937 store 1 ,mem_lmo_opcode1 +0x5cfc 024938 store 1 ,mem_lmo_opcode2 +0x5cfd 024939 store 1 ,mem_esco_addr +0x5cfe 024940 store 1 ,mem_auth_enable +0x5cff 024941 store 1 ,mem_connection_options +0x5d00 024942 store 1 ,mem_pairing_auth +0x5d01 024943 jam switch_flag_init ,mem_switch_flag +0x5d02 024944 jam 0 ,mem_switch_fail_master_count +0x5d03 024945 jam null_encryp ,mem_wait_encryption +: 024946 init_lmp_reinit: +0x5d04 024947 jam 0 ,mem_pairing_auth +0x5d05 024948 jam 0 ,mem_sp_localsm +0x5d06 024949 jam 0 ,mem_lmp_conn_state +: 024951 parse_rx_done: +0x5d07 024952 rtn +: 024954 parse_lmp: +0x5d08 024955 bpatchx patch2f_5 ,mem_patch2f +0x5d09 024956 call setlocalsm_master ,master +0x5d0a 024957 ncall setlocalsm_slave ,master +0x5d0b 024958 call lmo_fifo_check +0x5d0c 024959 nrtn blank +0x5d0d 024960 fetch 1 ,mem_state_map +0x5d0e 024961 rtnbit0 smap_rxlmp +0x5d0f 024962 set0 smap_rxlmp ,pdata +0x5d10 024963 set0 mark_rxbuf_inuse ,mark +0x5d11 024964 store 1 ,mem_state_map +0x5d12 024965 fetch 1 ,mem_rxbuf +0x5d13 024966 fetcht 1 ,mem_state_map +0x5d14 024967 isolate1 smap_lmptidinit ,pdata +0x5d15 024968 setflag true ,smap_lmptid ,temp +0x5d16 024969 storet 1 ,mem_state_map +0x5d17 024970 and_into 0x2 ,temp +0x5d18 024971 storet 1 ,mem_lmo_tid2 +0x5d19 024972 fetcht 1 ,mem_state_map +0x5d1a 024973 rshift pdata ,pdata +0x5d1b 024974 store 1 ,mem_lmi_opcode2 +0x5d1c 024975 bpatchx patch2f_6 ,mem_patch2f +0x5d1d 024976 fetch 1 ,mem_lmi_opcode2 +0x5d1e 024977 beq lmp_escape ,parse_lmp_escape +0x5d1f 024978 beq lmp_accepted ,parse_lmp_accepted +0x5d20 024979 beq lmp_not_accepted ,parse_lmp_not_accepted +0x5d21 024980 beq lmp_set_afh ,parse_lmp_set_afh +0x5d22 024981 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +0x5d23 024982 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +0x5d24 024983 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +0x5d25 024984 beq lmp_auto_rate ,parse_lmp_auto_rate +0x5d26 024985 beq lmp_test_control ,parse_lmp_test_control +0x5d27 024986 beq lmp_test_activate ,parse_lmp_test_activate +0x5d28 024987 beq lmp_setup_complete ,parse_lmp_setup_complete +0x5d29 024988 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +0x5d2a 024989 beq lmp_features_req ,parse_lmp_features_req +0x5d2b 024990 beq lmp_host_connection_req ,parse_lmp_conn_req +0x5d2c 024991 beq lmp_version_req ,parse_lmp_version_req +0x5d2d 024992 beq lmp_version_res ,parse_lmp_version_res +0x5d2e 024993 beq lmp_detach ,parse_lmp_detach +0x5d2f 024994 beq lmp_max_slot ,parse_lmp_max_slot +0x5d30 024995 beq lmp_max_slot_req ,parse_lmp_max_slot_req +0x5d31 024996 beq lmp_name_req ,parse_lmp_name_req +0x5d32 024997 beq lmp_name_res ,parse_lmp_name_res +0x5d33 024998 beq lmp_features_res ,parse_lmp_features_res +0x5d34 024999 beq lmp_comb_key ,parse_lmp_comb_key +0x5d35 025000 beq lmp_au_rand ,parse_lmp_au_rand +0x5d36 025001 beq lmp_in_rand ,parse_lmp_in_rand +0x5d37 025002 beq lmp_sres ,parse_lmp_sres +0x5d38 025003 beq lmp_incr_power_req ,parse_lmp_incr_power +0x5d39 025004 beq lmp_decr_power_req ,parse_lmp_decr_power +0x5d3a 025005 beq lmp_max_power ,parse_lmp_max_power +0x5d3b 025006 beq lmp_min_power ,parse_lmp_min_power +0x5d3c 025007 beq lmp_page_mode_req ,parse_lmp_page_mode_req +0x5d3d 025008 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +0x5d3e 025009 beq lmp_preferred_rate ,parse_lmp_preferred_rate +0x5d3f 025010 beq lmp_slot_offset ,parse_lmp_slot_offset +0x5d40 025011 beq lmp_sniff_req ,parse_lmp_sniff_req +0x5d41 025012 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +0x5d42 025013 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +0x5d43 025014 beq lmp_switch_req ,parse_lmp_switch_req +0x5d44 025015 beq lmp_temp_rand ,parse_lmp_temp_rand +0x5d45 025016 beq lmp_temp_key ,parse_lmp_temp_key +0x5d46 025017 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +0x5d47 025018 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +0x5d48 025019 beq lmp_unit_key ,parse_lmp_unit_key +0x5d49 025020 beq lmp_unsniff_req ,parse_lmp_unsniff_req +0x5d4a 025021 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +0x5d4b 025022 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +0x5d4c 025023 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +0x5d4d 025024 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +0x5d4e 025025 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +0x5d4f 025026 beq lmp_dhkey_check ,parse_dhkey_check +0x5d50 025027 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +0x5d51 025028 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req +: 025031 reject_unknown_packet: +0x5d52 025032 jam unknown_lmp_pdu ,mem_lmo_reason2 +: 025033 reject_lmp_packet: +0x5d53 025034 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5d54 025035 rtn +: 025037 parse_lmp_clkoffset_req: +0x5d55 025038 jam lmp_clkoffset_res ,mem_lmo_opcode2 +0x5d56 025039 rtn +: 025041 parse_enc_key_size_mask_req: +0x5d57 025042 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +0x5d58 025043 rtn +: 025045 parse_lmp_set_afh: +0x5d59 025046 fetch 4 ,mem_rxbuf + 1 +0x5d5a 025047 lshift pdata ,pdata +0x5d5b 025048 store 4 ,mem_afh_instant +0x5d5c 025049 fetch 1 ,mem_rxbuf + 5 +0x5d5d 025050 store 1 ,mem_afh_new_mod +0x5d5e 025051 fetch 5 ,mem_rxbuf + 6 +0x5d5f 025052 store 5 ,mem_afh_map_new +0x5d60 025053 fetch 5 ,mem_rxbuf + 11 +0x5d61 025054 istore 5 ,contw +0x5d62 025055 fetch 1 ,mem_mode +0x5d63 025056 set1 afh_change ,pdata +0x5d64 025057 store 1 ,mem_mode +0x5d65 025058 rtn +: 025059 parse_lmp_escape: +0x5d66 025060 bpatchx patch2f_7 ,mem_patch2f +0x5d67 025061 fetch 1 ,mem_rxbuf + 1 +0x5d68 025062 set1 7 ,pdata +0x5d69 025063 store 1 ,mem_lmi_opcode2 +0x5d6a 025064 beq lmp_ext_accepted ,parse_lmpext_accepted +0x5d6b 025065 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +0x5d6c 025066 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +0x5d6d 025067 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +0x5d6e 025068 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +0x5d6f 025069 beq lmp_ext_features_req ,parse_lmpext_features_req +0x5d70 025070 beq lmp_ext_features_res ,parse_lmpext_features_res +0x5d71 025071 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +0x5d72 025072 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +0x5d73 025073 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +0x5d74 025074 beq lmp_io_cap_req ,parse_lmpext_iocap_req +0x5d75 025075 beq lmp_io_cap_res ,parse_lmpext_iocap_res +0x5d76 025076 rtneq lmp_ext_features_res +: 025079 reject_unknown_ext_packet: +0x5d77 025080 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d78 025081 jam unknown_lmp_pdu ,mem_lmo_reason2 +0x5d79 025083 rtn +: 025084 parse_lmpext_chn_classification_req: +0x5d7a 025085 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d7b 025086 jam not_support_chn_classification ,mem_lmo_reason2 +0x5d7c 025087 rtn +: 025089 parse_lmpext_iocap_req: +0x5d7d 025090 call iocap_lmpext_load +0x5d7e 025091 jam lmp_io_cap_res ,mem_lmo_opcode2 +0x5d7f 025092 rtn +: 025094 parse_lmpext_iocap_res: +0x5d80 025095 call iocap_lmpext_load +0x5d81 025096 branch iocap_lmpext_common +: 025098 iocap_lmpext_load: +0x5d82 025099 arg mem_sp_iocap_remote ,contw +0x5d83 025100 fetch 3 ,mem_rxbuf + 2 +0x5d84 025101 istore 3 ,contw +0x5d85 025102 rtn +: 025104 iocap_lmpext_common: +0x5d86 025105 branch master_set_mem_master_sp_flag ,true +0x5d87 025106 rtn +: 025107 parse_lmpext_accepted: +0x5d88 025108 fetch 1 ,mem_rxbuf + 3 +0x5d89 025109 set1 7 ,pdata +0x5d8a 025110 store 1 ,mem_lmi_accepted_opcode +0x5d8b 025111 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +0x5d8c 025112 rtn +: 025115 parse_lmpext_not_accepted: +0x5d8d 025116 fetch 1 ,mem_rxbuf + 3 +0x5d8e 025117 set1 7 ,pdata +0x5d8f 025118 store 1 ,mem_lmi_accepted_opcode +0x5d90 025119 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +0x5d91 025120 rtn +: 025122 parse_lmpext_accepted_ptt: +0x5d92 025123 fetch 1 ,mem_ptt +0x5d93 025124 fetcht 1 ,mem_state_map +0x5d94 025125 nsetflag blank ,smap_edr ,temp +0x5d95 025126 storet 1 ,mem_state_map +: 025127 parse_lmpext_not_accepted_ptt: +0x5d96 025128 fetch 1 ,mem_state +0x5d97 025129 rtnbit0 state_init_seq +0x5d98 025130 set0 state_init_seq ,pdata +0x5d99 025131 store 1 ,mem_state +0x5d9a 025132 fetch 1 ,mem_auth_enable +0x5d9b 025133 nrtn blank +0x5d9c 025134 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5d9d 025135 rtn +: 025137 parse_lmpext_pause_encrypt: +0x5d9e 025138 nbranch parse_lmpext_pause_encrypt_slave ,master +0x5d9f 025139 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5da0 025140 branch tid_reply +: 025142 parse_lmpext_pause_encrypt_slave: +0x5da1 025143 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +0x5da2 025144 rtn +: 025146 parse_lmpext_resume_encrypt: +0x5da3 025149 call tid_reply +0x5da4 025150 branch lmp_start_encryption +: 025152 parse_lmpext_features_req: +0x5da5 025153 jam lmp_ext_features_res ,mem_lmo_opcode2 +0x5da6 025154 rtn +: 025156 parse_lmpext_features_res: +0x5da7 025157 fetcht 1 ,mem_rxbuf + 4 +0x5da8 025158 and temp ,0x1 ,temp +0x5da9 025159 storet 1 ,mem_remote_sppcap +0x5daa 025160 fetch 1 ,mem_hci_cmd +0x5dab 025161 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +0x5dac 025162 jam 0 ,mem_hci_cmd +: 025163 parse_lmpext_features_res_not_hci: +0x5dad 025164 fetch 1 ,mem_conn_sm +0x5dae 025165 rtnne conn_sm_wait_features_ext +0x5daf 025166 jam conn_sm_send_conn_req ,mem_conn_sm +0x5db0 025167 branch process_conn_sm +: 025169 parse_lmp_accepted: +0x5db1 025170 bpatchx patch30_0 ,mem_patch30 +0x5db2 025171 fetch 1 ,mem_rxbuf + 1 +0x5db3 025172 store 1 ,mem_lmi_accepted_opcode +0x5db4 025173 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +0x5db5 025174 beq lmp_in_rand ,parse_lmp_accepted_inrand +0x5db6 025175 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +0x5db7 025176 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +0x5db8 025177 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +0x5db9 025178 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +0x5dba 025179 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +0x5dbb 025180 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +0x5dbc 025181 beq lmp_switch_req ,parse_lmp_accepted_switch +0x5dbd 025183 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +0x5dbe 025184 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +0x5dbf 025185 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +0x5dc0 025186 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +0x5dc1 025187 rtn +: 025189 parse_lmp_not_accepted: +0x5dc2 025190 bpatchx patch30_1 ,mem_patch30 +0x5dc3 025191 fetch 1 ,mem_rxbuf + 1 +0x5dc4 025192 store 1 ,mem_lmi_accepted_opcode +0x5dc5 025193 beq lmp_name_req ,parse_lmp_not_accepted_name_req +0x5dc6 025194 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +0x5dc7 025195 beq lmp_au_rand ,parse_lmp_not_accepted_aurand +0x5dc8 025196 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +0x5dc9 025197 beq lmp_switch_req ,parse_lmp_not_accepted_switch +0x5dca 025199 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +0x5dcb 025200 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +0x5dcc 025201 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +0x5dcd 025202 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +0x5dce 025203 rtn +: 025205 parse_lmp_accepted_switch: +0x5dcf 025206 jam bt_evt_switch_accept ,mem_fifo_temp +0x5dd0 025207 call ui_ipc_send_event +0x5dd1 025208 branch role_switch_prepare0 +: 025209 parse_lmp_not_accepted_switch: +0x5dd2 025210 jam bt_evt_switch_not_accept ,mem_fifo_temp +0x5dd3 025211 call ui_ipc_send_event +0x5dd4 025212 jam switch_flag_not_accept ,mem_switch_flag +0x5dd5 025213 setarg timer_switch_waite +0x5dd6 025214 arg switch_wait_timer ,queue +0x5dd7 025215 branch timer_init +: 025218 parse_lmp_accepted_hostconn: +0x5dd8 025221 fetch 1 ,mem_lmp_conn_state +0x5dd9 025222 set1 received_conn_req ,pdata +0x5dda 025223 store 1 ,mem_lmp_conn_state +0x5ddb 025224 jam bt_evt_bb_connected ,mem_fifo_temp +0x5ddc 025225 call ui_ipc_send_event +0x5ddd 025226 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +: 025228 parse_lmp_accepted_hostconn_ctn: +0x5dde 025230 fetch 1 ,mem_conn_sm +0x5ddf 025231 bne conn_sm_wait_conn_accept ,parse_rx_done +0x5de0 025234 jam conn_sm_auth_pair ,mem_conn_sm +0x5de1 025235 rtn +: 025243 parse_lmp_not_accepted_hostconn: +0x5de2 025244 jam acl_connection_already_exists ,mem_disconn_reason_send +0x5de3 025245 jam lmp_detach ,mem_lmo_opcode2 +0x5de4 025247 jam conn_sm_standby ,mem_conn_sm +0x5de5 025249 branch parse_rx_done ,true +0x5de6 025250 rtn +: 025252 parse_lmp_accepted_inrand: +0x5de7 025253 fetch 1 ,mem_link_key_exists +0x5de8 025254 nrtn blank +0x5de9 025255 call clear_linkkey +0x5dea 025256 call lmp_generate_key +0x5deb 025257 rtn master +0x5dec 025258 set1 mark_slave_in_rand_accepted ,mark +0x5ded 025259 rtn +: 025261 parse_lmp_accepted_enc_mode: +0x5dee 025262 nrtn master +0x5def 025263 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x5df0 025264 fetch 1 ,mem_state_map +0x5df1 025265 rtnbit0 smap_encryption +0x5df2 025266 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5df3 025267 rtn +: 025269 parse_lmp_accepted_enc_keysize: +0x5df4 025270 branch lmp_start_encryption +: 025272 parse_lmp_accepted_start_enc: +0x5df5 025273 call send_create_conn_start_l2cap_timer_sm +0x5df6 025274 fetch 1 ,mem_state +0x5df7 025275 rtnbit1 state_conn_comp +0x5df8 025276 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5df9 025277 fetch 1 ,mem_conn_sm +0x5dfa 025278 rtnne conn_sm_encrypt_wait +0x5dfb 025279 jam conn_sm_encrypt_wait_clear ,mem_conn_sm +0x5dfc 025280 rtn +: 025282 parse_lmp_accepted_stop_enc: +0x5dfd 025290 rtn +: 025292 parse_lmp_not_accepted_aurand: +: 025293 parse_lmp_not_accepted_aurand_send_detach: +0x5dfe 025294 jam lmp_detach ,mem_lmo_opcode2 +0x5dff 025295 jam other_end_terminated ,mem_disconn_reason_send +0x5e00 025296 rtn +: 025298 parse_lmp_not_accepted_inrand: +0x5e01 025299 fetch 1 ,mem_rxbuf + 2 +0x5e02 025300 beq key_missing ,parse_lmp_inrand_key_missing +0x5e03 025301 rtnne pairing_not_allowed +0x5e04 025302 jam pairing_not_allowed ,mem_disconn_reason_send +0x5e05 025303 jam lmp_detach ,mem_lmo_opcode2 +0x5e06 025304 rtn +: 025305 parse_lmp_inrand_key_missing: +0x5e07 025306 jam key_missing ,mem_disconn_reason_send +0x5e08 025307 jam lmp_detach ,mem_lmo_opcode2 +0x5e09 025308 rtn +: 025310 parse_lmp_not_accepted_name_req: +0x5e0a 025311 rtn +: 025313 parse_lmp_not_accepted_simple_pairing_number: +0x5e0b 025314 jam sp_stat_null ,mem_sp_state +0x5e0c 025315 jam lmp_detach ,mem_lmo_opcode2 +0x5e0d 025316 branch parse_rx_done +: 025318 parse_lmp_not_accepted_dhkey_check: +0x5e0e 025319 jam sp_stat_null ,mem_sp_state +0x5e0f 025320 jam lmp_detach ,mem_lmo_opcode2 +0x5e10 025321 branch parse_rx_done +: 025322 parse_lmp_not_accepted_unsniff_req: +0x5e11 025323 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +0x5e12 025324 branch ui_ipc_send_event +: 025326 parse_lmp_accepted_unsniff_req: +0x5e13 025327 jam bt_evt_unsniff_accept ,mem_fifo_temp +0x5e14 025328 call ui_ipc_send_event +0x5e15 025329 branch sniff_exit +: 025331 parse_lmp_accepted_sniff_req: +0x5e16 025332 jam bt_evt_sniff_accept ,mem_fifo_temp +0x5e17 025333 call ui_ipc_send_event +0x5e18 025334 setarg 0 +0x5e19 025335 store 2 ,mem_dsniff +0x5e1a 025336 fetch 2 ,mem_sniff_param_interval +0x5e1b 025337 lshift pdata ,pdata +0x5e1c 025338 store 2 ,mem_tsniff +0x5e1d 025339 fetch 1 ,mem_sniff_param_attempt +0x5e1e 025340 store 1 ,mem_sniff_attempt +0x5e1f 025341 fetch 1 ,mem_sniff_param_timeout +0x5e20 025342 store 1 ,mem_sniff_timeout +0x5e21 025343 branch sniff_init +: 025345 parse_lmp_not_acdcept_sniff_req: +0x5e22 025346 jam bt_evt_sniff_not_accept ,mem_fifo_temp +0x5e23 025347 branch ui_ipc_send_event +: 025349 parse_lmp_crypt_key: +0x5e24 025350 fetcht 1 ,mem_rxbuf + 1 +0x5e25 025351 storet 1 ,mem_key_size +0x5e26 025352 branch accept_lmp_msg +: 025354 parse_lmp_setup_complete: +0x5e27 025355 fetch 1 ,mem_lmp_conn_state +0x5e28 025356 set1 received_setup_complete ,pdata +0x5e29 025357 store 1 ,mem_lmp_conn_state +0x5e2a 025358 rtnbit1 sent_setup_complete +0x5e2b 025359 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5e2c 025360 branch parse_rx_done +: 025362 parse_lmp_max_slot: +0x5e2d 025365 rtn +: 025367 parse_lmp_max_slot_req: +0x5e2e 025368 fetch 1 ,mem_max_slot +0x5e2f 025369 fetcht 1 ,mem_rxbuf + 1 +0x5e30 025370 isub temp ,null +0x5e31 025372 branch accept_lmp_msg ,positive +0x5e32 025373 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e33 025374 jam unspecified_error ,mem_lmo_reason2 +0x5e34 025375 jam lmp_max_slot_req ,mem_lmi_opcode2 +0x5e35 025376 rtn +: 025378 parse_lmp_detach: +0x5e36 025379 call prepare_disconnect +0x5e37 025380 branch accept_lmp_msg +: 025382 accept_lmp_msg: +0x5e38 025383 jam lmp_accepted ,mem_lmo_opcode2 +0x5e39 025384 rtn +: 025386 parse_lmp_incr_power: +0x5e3a 025387 jam lmp_max_power ,mem_lmo_opcode2 +0x5e3b 025388 rtn +: 025390 parse_lmp_decr_power: +0x5e3c 025391 jam lmp_min_power ,mem_lmo_opcode2 +0x5e3d 025392 rtn +: 025394 parse_lmp_version_res: +0x5e3e 025395 fetch 1 ,mem_conn_sm +0x5e3f 025396 rtneq conn_sm_wait_version +0x5e40 025398 jam conn_sm_send_features ,mem_conn_sm +0x5e41 025400 rtn +: 025403 parse_lmp_auto_rate: +0x5e42 025404 rtn +: 025406 parse_lmp_in_rand: +0x5e43 025407 call lmp_copy_rand +0x5e44 025408 jam pincode_state_wait_pincode ,mem_pincode_state +0x5e45 025409 jam bt_evt_pincode_req ,mem_fifo_temp +0x5e46 025410 call ui_ipc_send_event +0x5e47 025412 call tid_check +0x5e48 025413 nbranch lmp_accept_inrand ,true +0x5e49 025415 nbranch parse_lmp_inrand_res ,master +0x5e4a 025416 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e4b 025417 jam lmp_in_rand ,mem_lmi_opcode2 +0x5e4c 025418 jam transaction_collision ,mem_lmo_reason2 +0x5e4d 025419 rtn +: 025420 parse_lmp_inrand_res: +0x5e4e 025421 fetch 1 ,mem_op +0x5e4f 025422 set1 op_inrand_req ,pdata +0x5e50 025423 store 1 ,mem_op +0x5e51 025424 rtn +: 025427 pop_tid_follow: +0x5e52 025428 fetcht 1 ,mem_state_map +0x5e53 025429 nsetflag blank ,smap_lmptid ,temp +0x5e54 025430 storet 1 ,mem_state_map +0x5e55 025431 rtn +: 025434 push_tid_follow: +0x5e56 025435 fetch 1 ,mem_lmo_tid2 +0x5e57 025436 rshift pdata ,pdata +0x5e58 025437 and_into 1 ,pdata +0x5e59 025438 rtn +: 025440 parse_lmp_au_rand_moudle: +0x5e5a 025441 fetch 1 ,mem_nv_data_number +0x5e5b 025442 rtn blank +0x5e5c 025443 fetch 1 ,mem_pairing_auth +0x5e5d 025444 call load_device_list ,blank +0x5e5e 025445 rtn +: 025447 parse_lmp_au_rand: +0x5e5f 025448 call parse_lmp_au_rand_moudle +0x5e60 025449 call push_tid_follow +0x5e61 025450 store 1 ,mem_sres_tid +0x5e62 025451 call lmp_copy_rand +0x5e63 025452 jam lmp_sres ,mem_lmo_opcode2 +0x5e64 025453 fetch 1 ,mem_link_key_exists +0x5e65 025454 nrtn blank +0x5e66 025455 fetch 1 ,mem_state +0x5e67 025456 rtnbit1 state_combkey +0x5e68 025457 jam key_missing ,mem_lmo_reason2 +0x5e69 025458 branch reject_lmp_packet +: 025460 parse_lmp_sres: +0x5e6a 025461 arg mem_plap ,rega +0x5e6b 025462 call function_e1 +0x5e6c 025463 fetch 4 ,mem_rxbuf + 1 +0x5e6d 025464 fetcht 4 ,mem_input_store +0x5e6e 025465 isub temp ,null +0x5e6f 025466 branch authentication_ok ,zero +0x5e70 025467 jam lmp_detach ,mem_lmo_opcode2 +0x5e71 025468 jam authentication_failure_error ,mem_disconn_reason_send +0x5e72 025469 rtn +: 025470 authentication_ok: +0x5e73 025471 call authentication_ok_common +0x5e74 025472 fetch 1 ,mem_ssp_enable +0x5e75 025473 branch pairing_success ,blank +0x5e76 025474 rtn +: 025477 authentication_ok_common: +0x5e77 025478 call copy_aco +0x5e78 025479 call linkkey_ready +0x5e79 025480 fetch 1 ,mem_op +0x5e7a 025481 isolate1 op_auth_req ,pdata +0x5e7b 025482 set0 op_auth_req ,pdata +0x5e7c 025483 store 1 ,mem_op +0x5e7d 025484 fetch 1 ,mem_conn_sm +0x5e7e 025485 beq conn_sm_auth_wait ,authentication_ok_conn_sm +0x5e7f 025486 beq conn_sm_pairing_wait ,authentication_ok_conn_sm +0x5e80 025487 rtn +: 025488 authentication_ok_conn_sm: +0x5e81 025489 fetch 1 ,mem_pairing_auth +0x5e82 025490 rtnne defalt_pairing_auth +0x5e83 025491 fetch 1 ,mem_state_map +0x5e84 025492 rtnbit1 smap_encryption +0x5e85 025493 branch host_create_conn_encrypt +: 025495 parse_lmp_comb_key: +0x5e86 025496 arg mem_rxbuf + 1 ,rega +0x5e87 025497 arg mem_kinit ,regb +0x5e88 025498 arg mem_random_number ,contw +0x5e89 025499 call xor16 +0x5e8a 025500 arg mem_plap ,rega +0x5e8b 025501 call generate_linkkey +0x5e8c 025502 jam lmp_au_rand ,mem_lmo_opcode2 +0x5e8d 025503 fetch 1 ,mem_state +0x5e8e 025504 bbit0 state_combkey ,lmp_generate_key +0x5e8f 025505 rtn +: 025507 parse_lmp_name_res: +0x5e90 025508 fetch 2 ,mem_len +0x5e91 025509 add pdata ,-3 ,loopcnt +0x5e92 025510 fetcht 1 ,mem_rxbuf + 1 +0x5e93 025511 setarg mem_tmp_buffer +0x5e94 025512 iadd temp ,contw +0x5e95 025513 arg mem_rxbuf + 3 ,contr +0x5e96 025514 call memcpy +0x5e97 025515 fetcht 1 ,mem_name_offset +0x5e98 025516 fetch 1 ,mem_rxbuf + 2 +0x5e99 025517 isub temp ,pdata +0x5e9a 025518 sub pdata ,14 ,null +0x5e9b 025519 branch parse_lmp_name_res_end ,positive +0x5e9c 025520 add temp ,14 ,pdata +0x5e9d 025521 store 1 ,mem_name_offset +0x5e9e 025522 jam lmp_name_req ,mem_lmo_opcode2 +0x5e9f 025523 rtn +: 025524 parse_lmp_name_res_end: +0x5ea0 025525 fetch 1 ,mem_state_map +0x5ea1 025526 set1 smap_name_res ,pdata +0x5ea2 025527 store 1 ,mem_state_map +0x5ea3 025528 bbit1 smap_name_req ,lmp_disconnect +0x5ea4 025529 rtn +: 025530 parse_lmp_name_req: +0x5ea5 025531 fetch 1 ,mem_rxbuf + 1 +0x5ea6 025532 store 1 ,mem_lmi_opcode2 +0x5ea7 025533 jam lmp_name_res ,mem_lmo_opcode2 +0x5ea8 025534 rtn +: 025536 parse_lmp_conn_req: +0x5ea9 025537 branch accept_lmp_msg +: 025539 parse_lmp_timing_accuracy_req: +0x5eaa 025540 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +0x5eab 025541 rtn +: 025543 parse_lmp_features_req: +0x5eac 025544 jam lmp_features_res ,mem_lmo_opcode2 +0x5ead 025545 rtn +: 025547 parse_lmp_version_req: +0x5eae 025548 jam lmp_version_res ,mem_lmo_opcode2 +0x5eaf 025549 rtn +: 025551 parse_lmp_supervision_timeout: +0x5eb0 025554 rtn +: 025558 parse_lmp_sniff_subrating_req: +0x5eb1 025559 fetch 2 ,mem_tsniff +0x5eb2 025560 iforce temp +0x5eb3 025561 fetch 1 ,mem_rxbuf + 2 +0x5eb4 025562 store 1 ,mem_subsniff_rate +0x5eb5 025563 imul32 temp ,temp +0x5eb6 025564 fetch 2 ,mem_rxbuf + 3 +0x5eb7 025565 lshift pdata ,pdata +0x5eb8 025566 store 2 ,mem_subsniff_tcmax +0x5eb9 025567 fetch 4 ,mem_rxbuf + 5 +0x5eba 025568 lshift pdata ,pdata +0x5ebb 025569 store 4 ,mem_subsniff_instant +0x5ebc 025571 deposit temp +0x5ebd 025572 store 2 ,mem_subsniff_tsniff +0x5ebe 025573 rtn +: 025574 parse_lmpext_packet_type_table_req: +0x5ebf 025575 fetcht 1 ,mem_ptt +0x5ec0 025576 fetch 1 ,mem_rxbuf + 2 +0x5ec1 025577 ixor temp ,null +0x5ec2 025578 nbranch reject_unknown_ext_packet ,zero +0x5ec3 025579 isolate1 0 ,pdata +0x5ec4 025580 fetch 1 ,mem_state_map +0x5ec5 025581 setflag true ,smap_edr ,pdata +0x5ec6 025582 store 1 ,mem_state_map +0x5ec7 025583 jam lmp_ext_accepted ,mem_lmo_opcode2 +0x5ec8 025584 jam lmp_packet_type_table_req ,mem_lmi_opcode2 +0x5ec9 025585 rtn +: 025588 parse_lmp_sniff_subrating_res: +: 025589 parse_lmp_preferred_rate: +: 025590 parse_lmp_max_power: +: 025591 parse_lmp_min_power: +0x5eca 025592 rtn +: 025593 parse_lmp_page_mode_req: +0x5ecb 025595 branch accept_lmp_msg +: 025596 parse_lmp_page_scan_mode_req: +0x5ecc 025599 branch accept_lmp_msg +: 025603 parse_lmp_slot_offset: +0x5ecd 025604 fetch 2 ,mem_rxbuf + 1 +0x5ece 025605 store 2 ,mem_slot_offset +0x5ecf 025606 rtn +: 025608 parse_lmp_sniff_req_check_sniff_para: +0x5ed0 025609 fetch 2 ,mem_rxbuf + 4 +0x5ed1 025610 fetcht 1 ,mem_lpm_mult +0x5ed2 025611 imul32 temp ,pdata +0x5ed3 025612 arg 0x640 ,temp +0x5ed4 025613 isub temp ,null +0x5ed5 025615 rtn +: 025617 parse_lmp_sniff_req: +0x5ed6 025618 fetch 2 ,mem_rxbuf + 6 +0x5ed7 025619 branch lmp_reject_sniff ,blank +0x5ed8 025620 call parse_lmp_sniff_req_check_sniff_para +0x5ed9 025621 branch lmp_reject_sniff ,positive +0x5eda 025622 fetch 1 ,mem_device_option +0x5edb 025623 sub pdata ,dvc_op_module ,null +0x5edc 025624 call module_set_lpm_mult_2 ,zero +0x5edd 025625 fetch 1 ,mem_state +0x5ede 025626 bbit1 state_insniff ,lmp_reject_sniff +0x5edf 025627 fetch 2 ,mem_rxbuf + 2 +0x5ee0 025628 lshift pdata ,pdata +0x5ee1 025629 store 2 ,mem_dsniff +0x5ee2 025630 fetch 2 ,mem_rxbuf + 4 +0x5ee3 025631 lshift pdata ,pdata +0x5ee4 025632 store 2 ,mem_tsniff +0x5ee5 025633 fetch 2 ,mem_rxbuf + 6 +0x5ee6 025634 store 1 ,mem_sniff_attempt +0x5ee7 025635 iforce temp +0x5ee8 025636 fetch 2 ,mem_rxbuf + 8 +0x5ee9 025637 store 1 ,mem_sniff_timeout +0x5eea 025638 isub temp ,null +0x5eeb 025639 nbranch set_big_value_to_attempt ,positive +0x5eec 025640 store 1 ,mem_sniff_attempt +: 025641 set_big_value_to_attempt: +0x5eed 025643 jam lmp_accepted ,mem_lmo_opcode2 +0x5eee 025644 jam lmp_sniff_req ,mem_lmi_opcode2 +0x5eef 025645 rtn +: 025647 lmp_reject_sniff: +0x5ef0 025648 jam pdu_not_allowed ,mem_lmo_reason2 +0x5ef1 025649 branch reject_lmp_packet +: 025651 parse_lmp_start_encryption_req: +0x5ef2 025652 call accept_lmp_msg +0x5ef3 025653 call lmp_copy_rand +0x5ef4 025654 call function_e3 +0x5ef5 025655 branch start_encryption +: 025657 parse_lmp_stop_encryption_req: +0x5ef6 025658 call accept_lmp_msg +0x5ef7 025659 branch stop_encryption +: 025662 parse_lmp_switch_req: +0x5ef8 025663 fetch 4 ,mem_rxbuf + 1 +0x5ef9 025664 lshift pdata ,pdata +0x5efa 025666 branch parse_lmp_switch_accept ,master +0x5efb 025667 fetcht 1 ,mem_link_key_exists +0x5efc 025668 nbranch parse_lmp_switch_req_clear_mark ,blank +: 025669 parse_lmp_switch_req_not_accept: +0x5efd 025670 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5efe 025671 jam lmp_switch_req ,mem_lmi_opcode2 +0x5eff 025672 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f00 025673 rtn +: 025674 parse_lmp_switch_req_clear_mark: +0x5f01 025675 jam lmp_slot_offset ,mem_lmo_opcode2 +0x5f02 025676 jam 0 ,mem_conn_sm +0x5f03 025677 branch role_switch_prepare +: 025679 parse_lmp_switch_accept: +0x5f04 025680 call role_switch_prepare +0x5f05 025681 set1 mark_reconn_recieve_switch ,mark +0x5f06 025682 fetch 1 ,mem_connection_options +0x5f07 025683 set0 connection_switch ,pdata +0x5f08 025684 store 1 ,mem_connection_options +0x5f09 025685 branch accept_lmp_msg +: 025689 parse_lmp_temp_rand: +: 025690 parse_lmp_temp_key: +: 025691 parse_lmp_timing_accuracy_res: +: 025692 parse_lmp_unit_key: +: 025693 parse_lmp_use_semi_permanend_key: +0x5f0a 025694 rtn +: 025697 parse_lmp_unsniff_req: +0x5f0b 025698 jam lmp_accepted ,mem_lmo_opcode2 +0x5f0c 025699 jam lmp_unsniff_req ,mem_lmi_opcode2 +0x5f0d 025700 jam bt_evt_remote_unsniff ,mem_fifo_temp +0x5f0e 025701 call ui_ipc_send_event +0x5f0f 025702 branch sniff_exit +: 025704 parse_lmp_encapsulated_header: +0x5f10 025705 fetch 1 ,mem_rxbuf + 1 +0x5f11 025706 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f12 025707 fetch 1 ,mem_rxbuf + 2 +0x5f13 025708 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f14 025709 fetch 1 ,mem_rxbuf + 3 +0x5f15 025710 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject +0x5f16 025711 call check_localsm +0x5f17 025712 branch parse_lmp_encapsulated_header_master ,true +0x5f18 025713 jam sp_stat_key_recv ,mem_sp_state +: 025714 parse_lmp_encapsulated_header_master: +0x5f19 025715 jam lmp_accepted ,mem_lmo_opcode2 +0x5f1a 025716 jam lmp_encapsulated_header ,mem_lmi_opcode2 +0x5f1b 025717 branch parse_rx_done +: 025719 parse_lmp_encapsulated_header_reject: +0x5f1c 025720 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f1d 025721 branch reject_lmp_packet +: 025723 parse_lmp_accepted_encapsulated_header: +0x5f1e 025726 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f1f 025728 rtn +: 025729 parse_lmp_accepted_simple_pairing_number: +0x5f20 025730 fetch 1 ,mem_ssp_mode_flag +0x5f21 025731 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +0x5f22 025732 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey +: 025733 parse_lmp_accepted_simple_pairing_number_common: +0x5f23 025734 call check_localsm +0x5f24 025735 rtn true +0x5f25 025736 jam sp_stat_confirm_recv ,mem_sp_state +0x5f26 025737 rtn +: 025739 parse_lmp_accepted_simple_pairing_number_ssp_pin: +0x5f27 025740 call g_noninit_number_confirm +0x5f28 025741 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +0x5f29 025742 call ui_ipc_send_event +0x5f2a 025743 branch parse_lmp_accepted_simple_pairing_number_common +: 025746 parse_lmp_accepted_simple_pairing_number_passkey: +0x5f2b 025747 call check_localsm +0x5f2c 025748 rtn true +0x5f2d 025749 fetch 1 ,mem_authentication_passkey_times +0x5f2e 025750 beq 19 ,authentication_passkey_end +0x5f2f 025751 increase 1 ,pdata +0x5f30 025752 store 1 ,mem_authentication_passkey_times +: 025755 authentication_passkey: +0x5f31 025756 jam sp_flag_commit ,mem_sp_flag +0x5f32 025757 jam sp_stat_commit_calc ,mem_sp_state +0x5f33 025758 fetch 1 ,mem_authentication_passkey_times +0x5f34 025759 copy pdata ,queue +0x5f35 025760 fetch 6 ,mem_pin +0x5f36 025761 qisolate1 pdata +0x5f37 025762 setarg 0x80 +0x5f38 025763 setflag true ,0 ,pdata +0x5f39 025764 store 1 ,mem_passkey_1bit +0x5f3a 025765 rtn +: 025767 authentication_passkey_end: +0x5f3b 025768 jam sp_stat_confirm_recv ,mem_sp_state +0x5f3c 025769 rtn +: 025771 parse_lmp_accepted_dhkey_check: +0x5f3d 025772 call parse_lmp_accepted_dhkey_check_common +: 025773 pairing_success: +0x5f3e 025774 fetch 1 ,mem_flag_pairing_state +0x5f3f 025775 rtn blank +0x5f40 025776 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +0x5f41 025777 jam bt_evt_bt_pairing_success ,mem_fifo_temp +0x5f42 025778 branch ui_ipc_send_event +: 025781 parse_lmp_accepted_dhkey_check_common: +0x5f43 025783 call check_localsm +0x5f44 025784 ncall g_noninit ,true +0x5f45 025785 call g_init ,true +0x5f46 025786 call check_localsm +0x5f47 025787 rtn true +0x5f48 025788 jam sp_stat_link_key_calc ,mem_sp_state +0x5f49 025789 jam sp_flag_commit ,mem_sp_flag +0x5f4a 025790 rtn +: 025792 parse_simple_pairing_confirm: +0x5f4b 025793 arg mem_sp_confirm_remote ,contw +0x5f4c 025794 arg mem_rxbuf + 1 ,contr +0x5f4d 025795 call memcpy16 +0x5f4e 025796 fetch 1 ,mem_ssp_mode_flag +0x5f4f 025797 rtneq ssp_mode_passkey_entry_flag +0x5f50 025798 branch master_set_mem_master_sp_flag +: 025800 parse_lmp_encapsulated_payload: +0x5f51 025801 fetch 1 ,mem_master_sp_state +0x5f52 025802 beq sp_stat_random_send ,parse_encapsulated_payload_master +0x5f53 025803 fetch 1 ,mem_sp_state +0x5f54 025804 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject +: 025805 parse_encapsulated_payload_master: +0x5f55 025806 fetch 1 ,mem_sp_remote_key_recv_count +0x5f56 025807 sub pdata ,0x20 ,contw +0x5f57 025808 nbranch parse_lmp_encapsulated_payload_reject ,positive +0x5f58 025809 arg mem_sp_pubkey_remote ,contw +0x5f59 025810 iadd contw ,contw +0x5f5a 025811 fetch 8 ,mem_rxbuf + 1 +0x5f5b 025812 istore 8 ,contw +0x5f5c 025813 fetch 8 ,mem_rxbuf + 9 +0x5f5d 025814 istore 8 ,contw +0x5f5e 025815 fetch 1 ,mem_sp_remote_key_recv_count +0x5f5f 025816 increase 16 ,pdata +0x5f60 025817 store 1 ,mem_sp_remote_key_recv_count +0x5f61 025818 bne encapsulated_len_p192 ,accept_lmp_msg +: 025819 parse_lmp_encapsulated_payload_completed: +0x5f62 025820 call check_localsm +0x5f63 025821 branch accept_lmp_msg ,true +0x5f64 025822 jam sp_key_valid ,mem_sp_remote_key_invalid +0x5f65 025823 jam sp_stat_key_generate ,mem_sp_state +0x5f66 025824 jam sp_flag_commit ,mem_sp_flag +0x5f67 025825 branch accept_lmp_msg +: 025826 parse_lmp_encapsulated_payload_reject: +0x5f68 025827 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f69 025828 branch reject_lmp_packet +: 025829 parse_lmp_accepted_encapsulated_payload: +0x5f6a 025830 fetch 1 ,mem_sp_local_key_send_count +0x5f6b 025831 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +0x5f6c 025832 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f6d 025833 branch parse_rx_done +: 025835 parse_lmp_encapsulated_payload_all_accepted: +0x5f6e 025836 call check_localsm +0x5f6f 025837 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +0x5f70 025838 fetch 1 ,mem_ssp_mode_flag +0x5f71 025839 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +0x5f72 025840 jam sp_flag_commit ,mem_sp_flag +0x5f73 025841 jam sp_stat_commit_calc ,mem_sp_state +0x5f74 025842 branch parse_rx_done +: 025844 parse_lmp_encapsulated_payload_all_accepted_get_passkey: +0x5f75 025845 jam bt_evt_bt_get_passkey ,mem_fifo_temp +0x5f76 025846 branch ui_ipc_send_event +: 025849 parse_lmp_encapsulated_payload_all_accepted_master: +0x5f77 025851 branch parse_rx_done +: 025853 parse_lmp_simple_pairing_number: +0x5f78 025854 fetch 1 ,mem_master_sp_state +0x5f79 025855 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +0x5f7a 025856 fetch 1 ,mem_sp_state +0x5f7b 025857 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject +: 025858 parse_lmp_simple_pairing_number_master: +0x5f7c 025859 arg mem_sp_random_remote ,contw +0x5f7d 025860 fetch 8 ,mem_rxbuf + 1 +0x5f7e 025861 istore 8 ,contw +0x5f7f 025862 fetch 8 ,mem_rxbuf + 9 +0x5f80 025863 istore 8 ,contw +0x5f81 025864 call check_localsm +0x5f82 025865 branch parse_lmp_simple_pairing_number_master0 ,true +0x5f83 025866 jam sp_stat_random_send ,mem_sp_state +0x5f84 025867 jam sp_flag_commit ,mem_sp_flag +0x5f85 025868 branch accept_lmp_msg +: 025869 parse_lmp_simple_pairing_number_master0: +0x5f86 025870 jam sp_stat_commit_calc ,mem_master_sp_state +0x5f87 025871 branch master_set_mem_master_sp_flag +: 025874 parse_lmp_simple_pairing_number_reject: +0x5f88 025875 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f89 025876 branch reject_lmp_packet +: 025878 parse_dhkey_check: +0x5f8a 025879 fetch 1 ,mem_master_sp_state +0x5f8b 025880 beq sp_stat_confirm_send ,parse_dhkey_check_master +0x5f8c 025881 fetch 1 ,mem_sp_state +0x5f8d 025882 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject +: 025883 parse_dhkey_check_master: +0x5f8e 025884 arg mem_sp_check_result ,contw +0x5f8f 025885 arg mem_rxbuf + 1 ,contr +0x5f90 025886 call memcpy16 +0x5f91 025887 call check_localsm +0x5f92 025888 branch parse_dhkey_check_master0 ,true +0x5f93 025889 fetch 1 ,mem_ssp_mode_flag +0x5f94 025890 beq ssp_mode_ssp_pin_flag ,number_comparison_mode +: 025891 number_comparison_successed: +0x5f95 025892 jam 0 ,mem_flag_mode_ssp_pin +0x5f96 025893 jam sp_stat_confirm_check ,mem_sp_state +0x5f97 025894 jam sp_flag_commit ,mem_sp_flag +0x5f98 025895 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x5f99 025896 branch parse_rx_done +: 025898 parse_dhkey_check_master0: +0x5f9a 025899 jam sp_stat_confirm_check ,mem_master_sp_state +0x5f9b 025900 jam sp_flag_commit ,mem_master_sp_flag +0x5f9c 025901 branch parse_rx_done +: 025902 parse_lmp_dhkey_check_reject: +0x5f9d 025903 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f9e 025904 branch reject_lmp_packet +: 025906 number_comparison_mode: +0x5f9f 025907 fetch 1 ,mem_flag_mode_ssp_pin +0x5fa0 025908 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +0x5fa1 025909 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +0x5fa2 025910 store 1 ,mem_flag_mode_ssp_pin +0x5fa3 025911 rtn +: 025913 comparison_result: +0x5fa4 025914 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x5fa5 025915 jam 0 ,mem_flag_mode_ssp_pin +0x5fa6 025916 branch parse_lmp_dhkey_check_reject +: 025919 parse_lmp_clkoffset_res: +0x5fa7 025920 branch parse_rx_done +: 025922 parse_lmp_encryption_mode_req: +0x5fa8 025923 fetch 1 ,mem_connection_options +0x5fa9 025924 set0 connection_encrypt +0x5faa 025925 store 1 ,mem_connection_options +0x5fab 025926 call accept_lmp_msg +0x5fac 025927 nrtn master +0x5fad 025928 fetch 1 ,mem_rxbuf + 1 +0x5fae 025929 fetcht 1 ,mem_op +0x5faf 025930 setflag blank ,op_stop_enc ,temp +0x5fb0 025931 nsetflag blank ,op_start_enc ,temp +0x5fb1 025932 storet 1 ,mem_op +0x5fb2 025933 rtn +: 025935 parse_lmp_features_res: +0x5fb3 025936 fetcht 8 ,mem_rxbuf + 1 +: 025937 parse_lmp_features_res_not_hci: +0x5fb4 025938 fetch 1 ,mem_conn_sm +0x5fb5 025939 rtnne conn_sm_wait_features_res +0x5fb6 025941 fetch 1 ,mem_connection_options +0x5fb7 025942 bbit0 connection_feature_ext ,parse_lmp_send_conn +0x5fb8 025944 jam conn_sm_send_features_ext ,mem_conn_sm +0x5fb9 025945 rtn +: 025946 parse_lmp_send_conn: +0x5fba 025947 jam conn_sm_send_conn_req ,mem_conn_sm +0x5fbb 025948 rtn +: 025949 parse_lmp_test_activate: +0x5fbc 025950 fetch 1 ,mem_debug_config +0x5fbd 025951 store 1 ,mem_test_mode_old_debug_config +0x5fbe 025952 jam lmp_accepted ,mem_lmo_opcode2 +0x5fbf 025953 jam lmp_test_activate ,mem_lmi_opcode2 +0x5fc0 025954 rtn +: 025955 parse_lmp_test_control: +0x5fc1 025958 jam lmp_accepted ,mem_lmo_opcode2 +0x5fc2 025959 jam lmp_test_control ,mem_lmi_opcode2 +0x5fc3 025960 force 9 ,loopcnt +0x5fc4 025961 arg mem_rxbuf + 1 ,contr +0x5fc5 025962 arg mem_temp_payload ,contw +: 025963 parse_lmp_test_xor: +0x5fc6 025964 ifetch 1 ,contr +0x5fc7 025965 xor_into 0x55 ,pdata +0x5fc8 025966 istore 1 ,contw +0x5fc9 025967 loop parse_lmp_test_xor +0x5fca 025968 fetch 1 ,test_mode_scenario +0x5fcb 025969 fetcht 1 ,mem_tester_emulate +0x5fcc 025970 set0 tester_no_whitening ,temp +0x5fcd 025971 set0 tester_pattern_test ,temp +0x5fce 025972 beq exit_test_mode ,parse_lmp_test_control_exit +0x5fcf 025973 beq pause_test_mode ,parse_lmp_test_control_pause +0x5fd0 025974 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +0x5fd1 025975 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd2 025976 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +0x5fd3 025977 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd4 025978 beq zero_pattern ,parse_lmp_test_control_pattern +0x5fd5 025979 beq one_pattern ,parse_lmp_test_control_pattern +0x5fd6 025980 beq alt_pattern ,parse_lmp_test_control_pattern +0x5fd7 025981 beq alt2_pattern ,parse_lmp_test_control_pattern +0x5fd8 025982 beq pseudorandom ,parse_lmp_test_control_pattern +0x5fd9 025983 rtn +: 025984 parse_lmp_test_control_exit: +0x5fda 025986 fetch 1 ,mem_tester_emulate +0x5fdb 025987 set1 tester_exit ,pdata +0x5fdc 025988 set1 tester_change ,pdata +0x5fdd 025989 store 1 ,mem_tester_emulate +0x5fde 025990 rtn +: 025991 parse_lmp_test_control_pattern: +0x5fdf 025992 set1 tester_pattern_test ,temp +0x5fe0 025993 jam 5 ,mem_lch_code +0x5fe1 025994 fetch 2 ,test_mode_data_length +0x5fe2 025995 iforce loopcnt +0x5fe3 025996 store 2 ,mem_len +0x5fe4 025997 arg mem_rxbuf ,contw +0x5fe5 025998 call pn9 +: 025999 parse_lmp_test_control_loopback_nowhite: +0x5fe6 026000 set1 tester_no_whitening ,temp +: 026001 parse_lmp_test_control_loopback: +0x5fe7 026002 set1 tester_change ,temp +0x5fe8 026003 force 0 ,pdata +0x5fe9 026004 store 1 ,mem_slave_rcvcnt +0x5fea 026005 store 2 ,mem_tst_pktcnt_crc +0x5feb 026006 store 2 ,mem_tst_pktcnt_dmh +0x5fec 026007 store 2 ,mem_tst_pktcnt_hec +0x5fed 026008 store 2 ,mem_tst_pktcnt_sync +0x5fee 026009 fetch 1 ,test_mode_hopping_mode +0x5fef 026010 compare fixed_freq ,pdata ,0xff +0x5ff0 026011 setflag true ,tester_fixed_freq ,temp +0x5ff1 026012 storet 1 ,mem_tester_emulate +0x5ff2 026013 rtn +: 026015 parse_lmp_test_control_pause: +0x5ff3 026016 set0 mark_testmode ,mark +0x5ff4 026017 jam 0 ,mem_tester_emulate +0x5ff5 026018 fetch 1 ,mem_debug_config +0x5ff6 026019 set0 debug_tx_pattern ,pdata +0x5ff7 026020 store 1 ,mem_debug_config +0x5ff8 026021 rtn +: 026027 lmp_copy_rand: +0x5ff9 026028 arg mem_rxbuf + 1 ,contr +0x5ffa 026029 arg mem_random_number ,contw +0x5ffb 026030 branch memcpy16 +: 026032 lmp_generate_key: +0x5ffc 026033 jam lmp_comb_key ,mem_lmo_opcode2 +0x5ffd 026034 rtn +: 026036 lmp_start_encryption: +0x5ffe 026037 nrtn master +0x5fff 026038 jam lmp_start_encryption_req ,mem_lmo_opcode2 +0x6000 026039 rtn +: 026041 lmp_accept_inrand: +0x6001 026042 arg mem_lap ,rega +0x6002 026043 call generate_kinit +0x6003 026044 jam lmp_accepted ,mem_lmo_opcode2 +0x6004 026045 jam lmp_in_rand ,mem_lmi_opcode2 +0x6005 026046 rtn +: 026048 lmp_disconnect: +0x6006 026049 jam 10 ,mem_conn_timer +0x6007 026050 jam lmp_detach ,mem_lmo_opcode2 +0x6008 026051 jam local_host ,mem_disconn_reason_send +0x6009 026052 rtn +: 026058 send_lmp: +0x600a 026059 bpatchx patch30_2 ,mem_patch30 +0x600b 026060 disable user +0x600c 026061 call lmo_fifo_process +0x600d 026062 fetch 1 ,mem_lmp_to_send +0x600e 026063 rtn blank +0x600f 026068 bbit1 7 ,send_lmp_escape +: 026069 send_lmp0: +0x6010 026070 beq lmp_name_req ,send_lmp_name_req +0x6011 026071 beq lmp_name_res ,send_lmp_name_res +0x6012 026072 beq lmp_accepted ,send_lmp_accepted +0x6013 026073 beq lmp_not_accepted ,send_lmp_not_accepted +0x6014 026074 beq lmp_features_req ,send_lmp_features_req +0x6015 026075 beq lmp_features_res ,send_lmp_features_res +0x6016 026076 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +0x6017 026077 beq lmp_version_req ,send_lmp_version_req +0x6018 026078 beq lmp_version_res ,send_lmp_version_res +0x6019 026079 beq lmp_setup_complete ,send_lmp_setup_complete +0x601a 026080 beq lmp_supervision_timeout ,send_lmp_superto +0x601b 026081 beq lmp_host_connection_req ,send_lmp_no_payload +0x601c 026082 beq lmp_in_rand ,send_lmp_inrand +0x601d 026083 beq lmp_comb_key ,send_lmp_comb_key +0x601e 026084 beq lmp_au_rand ,send_lmp_aurand +0x601f 026085 beq lmp_sres ,send_lmp_sres +0x6020 026086 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +0x6021 026087 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +0x6022 026088 beq lmp_start_encryption_req ,send_lmp_start_encryption +0x6023 026089 beq lmp_detach ,send_lmp_detach +0x6024 026090 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +0x6025 026091 beq lmp_unit_key ,send_lmp_unit_key +0x6026 026093 beq lmp_incr_power_req ,send_lmp_inc_power +0x6027 026094 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +0x6028 026095 beq lmp_max_power ,send_lmp_nopayload_reply +0x6029 026096 beq lmp_max_slot ,send_lmp_max_slot +0x602a 026097 beq lmp_max_slot_req ,send_lmp_max_slot_req +0x602b 026098 beq lmp_min_power ,send_lmp_nopayload_reply +0x602c 026099 beq lmp_slot_offset ,send_lmp_slot_offset +0x602d 026100 beq lmp_switch_req ,send_lmp_switch_req +0x602e 026101 beq lmp_sniff_req ,send_lmp_sniff_req +0x602f 026102 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +0x6030 026103 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +0x6031 026104 beq lmp_unsniff_req ,send_lmp_unsniff_req +0x6032 026105 beq lmp_encapsulated_header ,send_lmp_encapsulated_header +0x6033 026106 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +0x6034 026107 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +0x6035 026108 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +0x6036 026109 beq lmp_dhkey_check ,send_lmp_dhkey_check +0x6037 026110 beq lmp_auto_rate ,send_lmp_auto_rate +0x6038 026111 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +0x6039 026113 beq lmp_clkoffset_req ,send_lmp_clkoffset_req +0x603a 026114 beq lmp_quality_of_service ,send_lmp_quality_of_service +0x603b 026115 beq lmp_test_activate ,send_lmp_test_activate +0x603c 026116 beq lmp_test_control ,send_lmp_test_control +: 026117 send_lmp_error: +0x603d 026118 branch assert +0x603e 026119 rtn +: 026120 send_lmp_escape: +0x603f 026121 beq lmp_ext_accepted ,send_lmpext_accepted +0x6040 026122 beq lmp_ext_features_res ,send_lmpext_features_res +0x6041 026123 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +0x6042 026124 beq lmp_ext_features_req ,send_lmpext_features_req +0x6043 026125 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +0x6044 026126 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +0x6045 026127 beq lmp_io_cap_req ,send_lmp_io_cap_req +0x6046 026128 beq lmp_io_cap_res ,send_lmpext_io_cap_res +0x6047 026129 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +0x6048 026130 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +0x6049 026131 branch assert +: 026137 send_lmp_accepted: +0x604a 026138 force 2 ,pdata +0x604b 026139 call msg_send_lmp +0x604c 026140 fetch 1 ,mem_lmi_opcode +0x604d 026141 istore 1 ,contw +0x604e 026142 call send_lmp_follow +0x604f 026143 bpatchx patch30_3 ,mem_patch30 +0x6050 026144 fetch 1 ,mem_lmi_opcode +0x6051 026145 beq lmp_in_rand ,send_lmp_accepted_inrand +0x6052 026146 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +0x6053 026147 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +0x6054 026148 beq lmp_sniff_req ,send_lmp_accept_sniff_req +0x6055 026149 beq lmp_host_connection_req ,send_lmp_accepted_connection +0x6056 026150 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +0x6057 026151 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +0x6058 026152 rtn +: 026154 send_create_conn_start_l2cap_timer_sm: +0x6059 026155 fetch 1 ,mem_conn_sm +0x605a 026156 rtn blank +0x605b 026157 jam conn_sm_wait_done ,mem_conn_sm +0x605c 026158 setarg timer_enpt_waite +0x605d 026159 arg enpt_delay_timer ,queue +0x605e 026160 branch timer_init +: 026162 send_lmp_accept_sniff_req: +0x605f 026163 branch sniff_init +: 026164 send_lmp_not_accepted: +0x6060 026165 force 3 ,pdata +0x6061 026166 call msg_send_lmp +0x6062 026167 fetch 1 ,mem_lmi_opcode +0x6063 026168 beq lmp_au_rand ,send_not_accept_aurand +0x6064 026169 istore 1 ,contw +0x6065 026170 fetch 1 ,mem_lmo_reason +0x6066 026171 istore 1 ,contw +0x6067 026172 branch send_lmp_follow +: 026174 send_not_accept_aurand: +0x6068 026175 istore 1 ,contw +0x6069 026176 fetch 1 ,mem_lmo_reason +0x606a 026177 istore 1 ,contw +0x606b 026178 arg mem_sres_tid ,temp +0x606c 026179 branch special_tid_store +: 026181 send_lmpext_accepted: +0x606d 026182 force 4 ,queue +0x606e 026183 call send_lmpext +0x606f 026184 setarg lmp_escape +0x6070 026185 istore 1 ,contw +0x6071 026186 fetch 1 ,mem_lmi_opcode +0x6072 026187 set0 7 ,pdata +0x6073 026188 istore 1 ,contw +0x6074 026189 fetch 1 ,mem_lmi_opcode +0x6075 026190 branch send_lmp_follow +: 026192 send_lmpext_not_accepted: +0x6076 026193 force 5 ,queue +0x6077 026194 call send_lmpext +0x6078 026195 setarg lmp_escape +0x6079 026196 istore 1 ,contw +0x607a 026197 fetch 1 ,mem_lmi_opcode +0x607b 026198 set0 7 ,pdata +0x607c 026199 istore 1 ,contw +0x607d 026200 fetch 1 ,mem_lmo_reason +0x607e 026201 istore 1 ,contw +0x607f 026202 branch send_lmp_follow +: 026205 send_lmp_accepted_inrand: +0x6080 026206 call clear_linkkey +0x6081 026207 call tid_check +0x6082 026208 rtn true +0x6083 026209 branch lmp_generate_key +: 026211 send_lmp_accepted_enc_mode: +0x6084 026212 fetch 1 ,mem_op +0x6085 026213 bbit1 op_start_enc ,send_lmp_accepted_enc_start +0x6086 026214 rtnbit0 op_stop_enc +0x6087 026215 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x6088 026216 set0 op_stop_enc ,pdata +0x6089 026217 call tid_reply +0x608a 026218 branch send_lmp_accepted_enc_exit +: 026219 send_lmp_accepted_enc_start: +0x608b 026220 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x608c 026221 set0 op_start_enc ,pdata +: 026222 send_lmp_accepted_enc_exit: +0x608d 026223 store 1 ,mem_op +0x608e 026224 rtn +: 026226 send_lmp_accepted_enc_key: +0x608f 026227 call check_localsm +0x6090 026228 branch lmp_start_encryption ,true +0x6091 026229 rtn +: 026231 send_lmp_accepted_connection: +0x6092 026232 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +0x6093 026234 fetch 1 ,mem_lmp_conn_state +0x6094 026235 set1 received_conn_req ,pdata +0x6095 026236 store 1 ,mem_lmp_conn_state +0x6096 026237 jam bt_evt_bb_connected ,mem_fifo_temp +0x6097 026238 branch ui_ipc_send_event +: 026241 send_lmp_accept_dhkey_check: +0x6098 026242 rtn +: 026246 send_lmpext_features_res: +0x6099 026247 force 12 ,queue +0x609a 026248 call send_lmpext +0x609b 026249 setarg 0x01 +0x609c 026250 istore 1 ,contw +0x609d 026251 fetch 2 ,mem_lmpext_ssp_enable +0x609e 026252 istore 2 ,contw +0x609f 026253 setarg 0 +0x60a0 026254 istore 3 ,contw +0x60a1 026255 setarg 0x00 +0x60a2 026256 istore 4 ,contw +0x60a3 026257 branch send_lmp_reply +: 026258 send_lmpext_io_cap_res: +0x60a4 026259 force 5 ,queue +0x60a5 026260 call send_lmpext +0x60a6 026261 fetch 3 ,mem_sp_iocap_local +0x60a7 026262 istore 3 ,contw +0x60a8 026263 call send_lmp_reply +0x60a9 026264 jam flag_pairing_state_pairing ,mem_flag_pairing_state +0x60aa 026265 fetch 1 ,mem_sp_iocap_local +0x60ab 026266 beq display_yesno ,responder_iocap_display_yesno +0x60ac 026267 beq keyboard_only ,responder_iocap_keyboard_only +0x60ad 026268 beq no_input_no_output ,responder_iocap_no_input_no_output +0x60ae 026269 rtn +: 026271 responder_iocap_keyboard_only: +0x60af 026272 fetch 1 ,mem_sp_iocap_remote +0x60b0 026273 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +0x60b1 026274 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +0x60b2 026275 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +0x60b3 026276 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +0x60b4 026277 rtn +: 026280 responder_iocap_display_yesno: +0x60b5 026281 fetch 1 ,mem_sp_iocap_remote +0x60b6 026282 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +0x60b7 026283 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +0x60b8 026284 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +0x60b9 026285 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +0x60ba 026286 rtn +: 026289 responder_iocap_no_input_no_output: +0x60bb 026290 fetch 1 ,mem_sp_iocap_remote +0x60bc 026291 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +0x60bd 026292 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +0x60be 026293 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +0x60bf 026294 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +0x60c0 026295 rtn +: 026297 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: +: 026298 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: +: 026299 responder_iocap_display_yesno_initiator_iocap_display_only: +: 026300 responder_iocap_no_input_no_output_initiator_iocap_display_only: +: 026301 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: +: 026302 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: +: 026303 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: +: 026304 set_ssp_mode_justwork: +0x60c1 026305 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +0x60c2 026306 fetch 1 ,mem_classic_bt_flag +0x60c3 026307 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +0x60c4 026308 rtn +: 026310 responder_iocap_display_yesno_initiator_iocap_display_yesno: +: 026311 set_ssp_mode_numeric_comparison: +0x60c5 026312 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +0x60c6 026313 rtn +: 026315 responder_iocap_keyboard_only_initiator_iocap_display_yesno: +: 026316 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: +: 026317 responder_iocap_keyboard_only_initiator_iocap_display_only: +: 026318 responder_iocap_display_yesno_initiator_iocap_keyboard_only: +: 026319 set_ssp_mode_passkey: +0x60c7 026320 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +0x60c8 026321 rtn +: 026324 classic_bt_set_reject_justwork_flag: +0x60c9 026325 arg flag_ssp_reject_justwork ,queue +0x60ca 026326 branch classic_bluetooth_set_flag +: 026328 classic_bt_clr_reject_justwork_flag: +0x60cb 026329 arg flag_ssp_reject_justwork ,queue +0x60cc 026330 branch classic_bluetooth_clr_flag +: 026332 classic_bluetooth_set_flag: +0x60cd 026333 fetch 1 ,mem_classic_bt_flag +0x60ce 026334 qset1 pdata +0x60cf 026335 store 1 ,mem_classic_bt_flag +0x60d0 026336 rtn +: 026338 classic_bluetooth_clr_flag: +0x60d1 026339 fetch 1 ,mem_classic_bt_flag +0x60d2 026340 qset0 pdata +0x60d3 026341 store 1 ,mem_classic_bt_flag +0x60d4 026342 rtn +: 026345 send_lmp_io_cap_req: +0x60d5 026346 force 5 ,queue +0x60d6 026347 call send_lmpext +0x60d7 026348 fetch 3 ,mem_sp_iocap_local +0x60d8 026349 istore 3 ,contw +0x60d9 026350 branch send_lmp_request +: 026353 send_lmpext_sniff_subrating_req: +0x60da 026355 rtn +: 026356 send_lmpext_sniff_subrating_res: +0x60db 026357 force 9 ,queue +0x60dc 026358 call send_lmpext +0x60dd 026359 fetch 1 ,mem_subsniff_rate +0x60de 026360 istore 1 ,contw +0x60df 026361 fetch 2 ,mem_subsniff_tcmax +0x60e0 026362 istore 2 ,contw +0x60e1 026363 fetch 4 ,mem_subsniff_instant +0x60e2 026364 istore 4 ,contw +0x60e3 026365 branch send_lmp_reply +: 026367 send_lmp_name_res: +0x60e4 026368 force 17 ,pdata +0x60e5 026369 call msg_send_lmp +0x60e6 026370 fetch 1 ,mem_lmi_opcode +0x60e7 026371 copy pdata ,temp +0x60e8 026372 beq 0x00 ,send_lmp_name_res_offset_ok +0x60e9 026373 beq 0x0e ,send_lmp_name_res_offset_ok +0x60ea 026374 beq 0x1c ,send_lmp_name_res_offset_ok +0x60eb 026375 rtn +: 026376 send_lmp_name_res_offset_ok: +0x60ec 026377 istore 1 ,contw +0x60ed 026378 fetch 1 ,mem_local_name_length +0x60ee 026379 istore 1 ,contw +0x60ef 026380 arg 14 ,loopcnt +0x60f0 026381 setarg mem_local_name +0x60f1 026382 iadd temp ,contr +0x60f2 026383 call memcpy +0x60f3 026384 branch send_lmp_reply +: 026387 send_lmp_timing_accuracy_res: +0x60f4 026388 force 3 ,pdata +0x60f5 026389 call msg_send_lmp +0x60f6 026390 setarg 0x0114 +0x60f7 026391 istore 2 ,contw +0x60f8 026392 branch send_lmp_reply +: 026394 send_lmp_clkoffset_res: +0x60f9 026396 force 3 ,pdata +0x60fa 026397 call msg_send_lmp +0x60fb 026398 fetch 4 ,mem_clke_bt +0x60fc 026399 isub clkn_bt ,pdata +0x60fd 026400 branch send_lmp_clkoffset_res_master ,master +0x60fe 026401 sub pdata ,0 ,pdata +: 026402 send_lmp_clkoffset_res_master: +0x60ff 026404 rshift2 pdata ,pdata +0x6100 026405 set0 15 ,pdata +0x6101 026406 istore 2 ,contw +0x6102 026407 branch send_lmp_reply +: 026409 send_lmp_version_res: +0x6103 026410 force 6 ,pdata +0x6104 026411 call msg_send_lmp +0x6105 026412 fetch 5 ,mem_lmp_version +0x6106 026413 istore 5 ,contw +0x6107 026414 branch send_lmp_reply +: 026416 send_lmp_features_res: +0x6108 026417 force 9 ,pdata +0x6109 026418 call msg_send_lmp +0x610a 026419 fetch 8 ,mem_features +0x610b 026420 istore 8 ,contw +0x610c 026421 branch send_lmp_reply +: 026428 send_lmpext_features_req: +0x610d 026429 force 12 ,queue +0x610e 026430 call send_lmpext +0x610f 026431 setarg 0x01 +0x6110 026432 istore 1 ,contw +0x6111 026433 fetch 2 ,mem_lmpext_ssp_enable +0x6112 026434 istore 2 ,contw +0x6113 026435 setarg 0 +0x6114 026436 istore 3 ,contw +0x6115 026437 setarg 0x00 +0x6116 026438 istore 4 ,contw +0x6117 026439 branch send_lmp_request +: 026441 send_lmpext_packet_type_table_req: +0x6118 026442 force 3 ,queue +0x6119 026443 call send_lmpext +0x611a 026444 fetch 1 ,mem_ptt +0x611b 026445 istore 1 ,contw +0x611c 026446 disable user +0x611d 026447 call send_lmp_request +0x611e 026448 nrtn user +0x611f 026449 nrtn master +0x6120 026450 fetch 1 ,mem_afh_cfg +0x6121 026451 rtnbit0 afh_cfg_on +0x6122 026452 call afh_init +0x6123 026453 branch afh_open_all_channels +: 026456 ssp_enable: +0x6124 026457 bpatchx patch30_4 ,mem_patch30 +0x6125 026458 fetch 1 ,mem_features + 6 +0x6126 026459 set1 param_featrue_ssp ,pdata +0x6127 026460 store 1 ,mem_features + 6 +0x6128 026461 setarg param_lmpext_ssp_enable +0x6129 026462 store 2 ,mem_lmpext_ssp_enable +0x612a 026463 rtn +: 026465 ssp_disable: +0x612b 026466 bpatchx patch30_5 ,mem_patch30 +0x612c 026467 fetch 1 ,mem_features + 6 +0x612d 026468 set0 param_featrue_ssp ,pdata +0x612e 026469 store 1 ,mem_features + 6 +0x612f 026470 setarg 0 +0x6130 026471 store 2 ,mem_lmpext_ssp_enable +0x6131 026472 rtn +: 026474 afh_init: +0x6132 026475 jam 0x3 ,mem_afh_cfg +0x6133 026476 setarg 0 +0x6134 026477 store 4 ,mem_afh_timer +0x6135 026478 arg mem_afh_map_lo ,contw +0x6136 026479 call afh_reset_map +0x6137 026480 arg mem_afh_map_new ,contw +0x6138 026481 call afh_reset_map +0x6139 026482 arg mem_afh_classify_channel_map ,contw +0x613a 026483 call afh_reset_map +0x613b 026484 branch afh_clear_error_counter +: 026485 afh_open_all_channels: +0x613c 026486 arg mem_afh_map_new ,contw +0x613d 026487 call afh_reset_map +0x613e 026488 call afh_clear_error_counter +0x613f 026489 branch afh_set_send_flag +: 026492 afh_reset_map: +0x6140 026493 setarg 0xffffff +0x6141 026494 istore 3 ,contw +0x6142 026495 istore 3 ,contw +0x6143 026496 istore 3 ,contw +0x6144 026497 setarg 0x7f +0x6145 026498 istore 1 ,contw +0x6146 026499 rtn +: 026500 afh_clear_error_counter: +0x6147 026501 setarg 0 +0x6148 026502 store 2 ,mem_afh_error_total +0x6149 026503 rtn +: 026504 afh_set_send_flag: +0x614a 026505 fetch 1 ,mem_afh_cfg +0x614b 026506 set1 send_lmp_set_afh ,pdata +0x614c 026507 store 1 ,mem_afh_cfg +0x614d 026508 rtn +: 026511 send_lmpext_pause_encryption_req: +0x614e 026512 force 2 ,queue +0x614f 026513 call send_lmpext +0x6150 026514 nbranch send_lmp_reply ,master +0x6151 026516 branch send_lmp_request +: 026520 send_lmp_detach: +0x6152 026521 force 2 ,pdata +0x6153 026522 call msg_send_lmp +0x6154 026523 fetch 1 ,mem_disconn_reason_send +0x6155 026524 istore 1 ,contw +0x6156 026525 call send_lmp_request +: 026526 prepare_disconnect: +0x6157 026527 fetch 1 ,mem_op +0x6158 026528 set1 op_disconn ,pdata +0x6159 026529 store 1 ,mem_op +0x615a 026530 jam 50 ,mem_conn_timer +0x615b 026531 rtn +: 026534 send_lmp_no_payload: +0x615c 026535 force 1 ,pdata +0x615d 026536 call msg_send_lmp +0x615e 026537 branch send_lmp_request +: 026538 send_lmp_nopayload_reply: +0x615f 026539 force 1 ,pdata +0x6160 026540 call msg_send_lmp +0x6161 026541 branch send_lmp_reply +: 026544 send_lmp_encryption_mode_req: +0x6162 026545 force 2 ,pdata +0x6163 026546 call msg_send_lmp +0x6164 026547 fetch 1 ,mem_state_map +0x6165 026548 isolate0 smap_encryption ,pdata +0x6166 026549 setflag true ,0 ,pdata +0x6167 026550 and_into 1 ,pdata +0x6168 026551 istore 1 ,contw +0x6169 026552 branch send_lmp_request +: 026555 send_lmp_superto: +0x616a 026556 force 3 ,pdata +0x616b 026557 call msg_send_lmp +0x616c 026558 fetch 2 ,mem_supervision_to +0x616d 026559 istore 2 ,contw +0x616e 026560 branch send_lmp_request +: 026562 send_lmp_name_req: +0x616f 026563 jam 250 ,mem_conn_timer +0x6170 026564 force 2 ,pdata +0x6171 026565 call msg_send_lmp +0x6172 026566 fetch 1 ,mem_name_offset +0x6173 026567 istore 1 ,contw +0x6174 026568 branch send_lmp_request +: 026570 send_lmp_test_control: +0x6175 026571 force 10 ,pdata +0x6176 026572 call msg_send_lmp +0x6177 026573 arg mem_temp_payload ,contr +0x6178 026574 force 9 ,loopcnt +: 026575 send_lmp_test_control_loop: +0x6179 026576 ifetch 1 ,contr +0x617a 026577 xor_into 0x55 ,pdata +0x617b 026578 istore 1 ,contw +0x617c 026579 loop send_lmp_test_control_loop +0x617d 026580 branch send_lmp_request +: 026582 send_lmp_quality_of_service_req: +0x617e 026583 branch send_lmp_request +: 026584 send_lmp_unit_key: +0x617f 026585 branch send_lmp_request +: 026587 send_lmp_slot_offset: +0x6180 026588 rtn master +0x6181 026589 call calc_slot_offset +0x6182 026590 force 9 ,pdata +0x6183 026591 call msg_send_lmp +0x6184 026592 fetch 2 ,mem_slot_offset +0x6185 026593 istore 2 ,contw +0x6186 026594 fetch 3 ,mem_lap +0x6187 026595 istore 3 ,contw +0x6188 026596 fetch 1 ,mem_uap +0x6189 026597 istore 1 ,contw +0x618a 026598 fetch 2 ,mem_nap +0x618b 026599 istore 2 ,contw +0x618c 026600 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +0x618d 026601 set0 mark_switch_initiated ,mark +0x618e 026602 call send_lmp_request +0x618f 026603 jam lmp_switch_req ,mem_lmo_opcode2 +0x6190 026604 rtn +: 026605 send_lmp_slot_offset_reply: +0x6191 026606 call send_lmp_reply +0x6192 026607 jam lmp_accepted ,mem_lmo_opcode2 +0x6193 026608 jam lmp_switch_req ,mem_lmi_opcode2 +0x6194 026609 rtn +: 026611 send_lmp_switch_req: +0x6195 026612 arg 0x200 ,temp +0x6196 026613 branch switch_on_native ,master +0x6197 026614 deposit clke_bt +0x6198 026615 branch switch_slack +: 026616 switch_on_native: +0x6199 026617 deposit clkn_bt +: 026618 switch_slack: +0x619a 026619 deposit bt_clk +0x619b 026620 iadd temp ,pdata +0x619c 026621 and_into 0x1fc ,pdata +0x619d 026622 store 4 ,mem_sniff_anchor +0x619e 026623 force 5 ,pdata +0x619f 026624 call msg_send_lmp +0x61a0 026625 fetch 4 ,mem_sniff_anchor +0x61a1 026626 rshift pdata ,pdata +0x61a2 026627 istore 4 ,contw +0x61a3 026628 branch send_lmp_request +: 026630 send_lmp_sniff_req: +0x61a4 026631 force 10 ,pdata +0x61a5 026632 call msg_send_lmp +0x61a6 026633 arg mem_sniff_payload ,contr +0x61a7 026634 ifetch 9 ,contr +0x61a8 026635 istore 9 ,contw +0x61a9 026636 branch send_lmp_request +: 026639 send_lmp_timing_accuracy_req: +0x61aa 026641 force 3 ,pdata +0x61ab 026642 call msg_send_lmp +0x61ac 026643 setarg 0x0114 +0x61ad 026644 istore 2 ,contw +0x61ae 026645 branch send_lmp_request +: 026647 send_lmp_unsniff_req: +0x61af 026649 force 1 ,pdata +0x61b0 026650 call msg_send_lmp +0x61b1 026659 branch send_lmp_request +: 026662 send_lmp_max_slot: +0x61b2 026663 force 2 ,pdata +0x61b3 026664 call msg_send_lmp +0x61b4 026665 fetch 1 ,mem_max_slot +0x61b5 026666 istore 1 ,contw +0x61b6 026667 branch send_lmp_request +: 026670 send_lmp_max_slot_req: +0x61b7 026671 force 2 ,pdata +0x61b8 026672 call msg_send_lmp +0x61b9 026673 setarg 0x05 +0x61ba 026674 istore 1 ,contw +0x61bb 026675 branch send_lmp_request +: 026678 send_lmp_inc_power: +0x61bc 026679 force 2 ,pdata +0x61bd 026680 call msg_send_lmp +0x61be 026681 setarg 0x00 +0x61bf 026682 istore 1 ,contw +0x61c0 026683 branch send_lmp_request +: 026686 send_lmp_setup_complete_by_module: +0x61c1 026687 jam lmp_max_slot_req ,mem_lmo_opcode2 +0x61c2 026688 rtn +: 026689 send_lmp_setup_complete: +0x61c3 026690 fetch 1 ,mem_device_option +0x61c4 026691 sub pdata ,dvc_op_module ,null +0x61c5 026692 call send_lmp_setup_complete_by_module ,zero +0x61c6 026693 fetch 1 ,mem_state +0x61c7 026694 set1 state_conn_comp ,pdata +0x61c8 026695 store 1 ,mem_state +0x61c9 026696 copy clkn_bt ,pdata +0x61ca 026697 store 4 ,mem_aurand_send_delay_time +0x61cb 026698 fetch 1 ,mem_lmp_conn_state +0x61cc 026699 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +0x61cd 026700 set1 sent_setup_complete ,pdata +0x61ce 026701 store 1 ,mem_lmp_conn_state +0x61cf 026702 jam bt_evt_setup_complete ,mem_fifo_temp +0x61d0 026703 call ui_ipc_send_event +0x61d1 026704 force 1 ,pdata +0x61d2 026705 call msg_send_lmp +0x61d3 026706 branch send_lmp_request +: 026707 send_lmp_setup_complete_has_sent: +0x61d4 026708 jam 0 ,mem_lmp_to_send +0x61d5 026709 rtn +: 026711 send_lmp_version_req: +0x61d6 026712 force 6 ,pdata +0x61d7 026713 call msg_send_lmp +0x61d8 026714 fetch 5 ,mem_lmp_version +0x61d9 026715 istore 5 ,contw +0x61da 026716 branch send_lmp_request +: 026718 send_lmp_features_req: +0x61db 026719 force 9 ,pdata +0x61dc 026720 call msg_send_lmp +0x61dd 026721 fetch 8 ,mem_features +0x61de 026722 istore 8 ,contw +0x61df 026723 branch send_lmp_request +: 026725 sp_master_send_io_cap_get: +0x61e0 026726 jam sp_flag_commit ,mem_master_sp_flag +0x61e1 026727 fetch 1 ,mem_sp_local_key_invalid +0x61e2 026728 rtnne sp_key_valid +0x61e3 026729 jam sp_master_stat_start_done ,mem_master_sp_state +0x61e4 026730 rtn +: 026732 sp_master_send_io_cap_send: +0x61e5 026733 call tid_initiate +0x61e6 026734 jam lmp_io_cap_req ,mem_lmo_opcode2 +0x61e7 026735 jam sp_stat_key_send ,mem_master_sp_state +0x61e8 026736 rtn +: 026739 sp_master_send_lmp_encapsulated_header: +0x61e9 026740 call tid_initiate +0x61ea 026741 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61eb 026742 jam sp_stat_random_send ,mem_master_sp_state +0x61ec 026743 rtn +: 026745 sp_master_commitment_compare: +0x61ed 026746 arg mem_sp_calc_result_high ,rega +0x61ee 026747 arg mem_sp_confirm_remote ,regb +0x61ef 026748 arg 16 ,loopcnt +0x61f0 026749 call string_compare +0x61f1 026750 branch sp_master_commitment_compare_success ,zero +0x61f2 026751 jam sp_stat_null ,mem_master_sp_state +0x61f3 026752 call master_clear_mem_master_sp_flag +0x61f4 026753 jam pdu_not_allowed ,mem_lmo_reason2 +0x61f5 026754 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61f6 026755 branch reject_lmp_packet +: 026756 sp_master_commitment_compare_success: +0x61f7 026757 jam sp_stat_confirm_calc ,mem_master_sp_state +0x61f8 026758 call master_set_mem_master_sp_flag +0x61f9 026759 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61fa 026760 branch accept_lmp_msg +: 026764 sp_master_send_lmp_simple_pairing_number: +0x61fb 026765 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x61fc 026766 rtn +: 026770 sp_send_lmp_encapsulated_header: +0x61fd 026773 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61fe 026775 rtn +: 026781 send_lmp_encapsulated_header: +0x61ff 026782 jam 0 ,mem_sp_local_key_send_count +0x6200 026783 force 4 ,pdata +0x6201 026784 call msg_send_lmp +0x6202 026785 force encapsulated_major_type_p192 ,pdata +0x6203 026786 istore 1 ,contw +0x6204 026787 force encapsulated_minor_type_p192 ,pdata +0x6205 026788 istore 1 ,contw +0x6206 026789 force encapsulated_len_p192 ,pdata +0x6207 026790 istore 1 ,contw +0x6208 026791 call check_localsm +0x6209 026792 branch send_lmp_request ,true +0x620a 026793 branch send_lmp_reply +: 026795 send_lmp_encapsulated_payload: +0x620b 026797 force 17 ,pdata +0x620c 026798 call msg_send_lmp +0x620d 026799 fetch 1 ,mem_sp_local_key_send_count +0x620e 026800 arg mem_sp_pubkey_local ,contr +0x620f 026801 iadd contr ,contr +0x6210 026802 ifetch 8 ,contr +0x6211 026803 istore 8 ,contw +0x6212 026804 ifetch 8 ,contr +0x6213 026805 istore 8 ,contw +0x6214 026806 fetch 1 ,mem_sp_local_key_send_count +0x6215 026807 increase 16 ,pdata +0x6216 026808 store 1 ,mem_sp_local_key_send_count +0x6217 026809 call check_localsm +0x6218 026810 branch send_lmp_request ,true +0x6219 026811 branch send_lmp_reply +: 026814 sp_send_lmp_simple_pairing_comfirm: +0x621a 026815 jam sp_stat_random_recv ,mem_sp_state +0x621b 026816 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +0x621c 026817 rtn +: 026818 send_lmp_simple_pairing_comfirm: +0x621d 026821 force 17 ,pdata +0x621e 026822 call msg_send_lmp +0x621f 026823 arg mem_sp_calc_result_high ,contr +0x6220 026824 ifetch 8 ,contr +0x6221 026825 istore 8 ,contw +0x6222 026826 ifetch 8 ,contr +0x6223 026827 istore 8 ,contw +0x6224 026828 branch send_lmp_reply +: 026830 sp_send_lmp_simple_pairing_number: +0x6225 026831 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x6226 026832 rtn +: 026834 send_lmp_simple_pairing_number: +0x6227 026836 call check_localsm +0x6228 026837 call sp_local_random_key_generator ,true +0x6229 026838 force 17 ,pdata +0x622a 026839 call msg_send_lmp +0x622b 026840 arg mem_sp_random_local ,contr +0x622c 026841 ifetch 8 ,contr +0x622d 026842 istore 8 ,contw +0x622e 026843 ifetch 8 ,contr +0x622f 026844 istore 8 ,contw +0x6230 026845 call check_localsm +0x6231 026846 nbranch send_lmp_reply ,true +0x6232 026847 branch send_lmp_request ,true +: 026849 master_sp_sm_end: +0x6233 026851 jam sp_stat_done ,mem_master_sp_state +: 026852 sp_aurand_send: +0x6234 026853 call tid_initiate +0x6235 026854 jam lmp_au_rand ,mem_lmo_opcode2 +0x6236 026855 call check_localsm_master +0x6237 026856 branch sp_master_key_prarm_push ,true +0x6238 026857 branch sp_link_key_prarm_push +: 026858 master_sp_send_lmp_dhkey_check: +0x6239 026859 call tid_reply +: 026860 sp_send_lmp_dhkey_check: +0x623a 026861 jam lmp_dhkey_check ,mem_lmo_opcode2 +0x623b 026862 rtn +: 026863 send_lmp_dhkey_check: +0x623c 026865 force 17 ,pdata +0x623d 026866 call msg_send_lmp +0x623e 026867 arg mem_sp_calc_result_high ,contr +0x623f 026868 ifetch 8 ,contr +0x6240 026869 istore 8 ,contw +0x6241 026870 ifetch 8 ,contr +0x6242 026871 istore 8 ,contw +0x6243 026872 call check_localsm +0x6244 026873 nbranch send_lmp_reply ,true +0x6245 026874 branch send_lmp_request ,true +: 026876 send_lmp_enc_key_size_mask_res: +0x6246 026877 force 3 ,pdata +0x6247 026878 call msg_send_lmp +0x6248 026879 setarg 0xfffe +0x6249 026880 istore 2 ,contw +0x624a 026881 branch send_lmp_reply +: 026883 send_lmp_auto_rate: +0x624b 026884 branch send_lmp_request +: 026885 send_lmp_clkoffset_req: +0x624c 026886 branch send_lmp_request +: 026887 send_lmp_quality_of_service: +0x624d 026888 branch send_lmp_request +: 026889 send_lmp_test_activate: +0x624e 026890 branch send_lmp_request +: 026895 send_lmp_comb_key: +0x624f 026896 call generate_random_number +0x6250 026897 arg mem_lap ,rega +0x6251 026898 call generate_linkkey +0x6252 026899 force 17 ,pdata +0x6253 026900 call msg_send_lmp +0x6254 026901 arg mem_kinit ,rega +0x6255 026902 arg mem_random_number ,regb +0x6256 026903 call xor16 +0x6257 026904 nbranch send_lmp_follow ,master +0x6258 026905 branch send_lmp_tid +: 026907 send_lmp_inrand: +0x6259 026908 call generate_random_number +0x625a 026909 arg mem_plap ,rega +0x625b 026910 call generate_kinit +: 026911 send_lmp_rand: +0x625c 026912 force 17 ,pdata +0x625d 026913 call msg_send_lmp +0x625e 026914 arg mem_random_number ,contr +0x625f 026915 call memcpy16 +0x6260 026916 fetch 1 ,mem_conn_sm +0x6261 026917 beq conn_sm_auth_wait ,send_lmp_request +0x6262 026918 beq conn_sm_pairing_wait ,send_lmp_request +0x6263 026919 branch send_lmp_tid +: 026921 send_lmp_aurand: +0x6264 026922 fetch 1 ,mem_pairing_auth +0x6265 026923 branch send_lmp_aurand_notpairing ,blank +0x6266 026924 call check_localsm +0x6267 026925 call tid_initiate ,true +0x6268 026926 ncall tid_reply ,true +0x6269 026927 branch send_lmp_aurand_common +: 026928 send_lmp_aurand_notpairing: +0x626a 026929 call tid_initiate +: 026930 send_lmp_aurand_common: +0x626b 026931 call generate_random_number +0x626c 026932 branch send_lmp_rand +: 026934 send_lmp_sres: +0x626d 026935 arg mem_lap ,rega +0x626e 026936 call function_e1 +0x626f 026937 force 5 ,pdata +0x6270 026938 call msg_send_lmp +0x6271 026939 fetch 4 ,mem_input_store +0x6272 026940 istore 4 ,contw +0x6273 026941 arg mem_sres_tid ,temp +0x6274 026942 call special_tid_store +0x6275 026943 call copy_aco +0x6276 026944 call check_localsm +0x6277 026945 branch send_lmp_sres_master ,true +0x6278 026946 jam done_encryp ,mem_wait_encryption +0x6279 026947 fetch 1 ,mem_pairing_auth +0x627a 026948 rtn blank +0x627b 026949 jam lmp_au_rand ,mem_lmo_opcode2 +: 026950 send_lmp_sres_master: +0x627c 026951 fetch 1 ,mem_link_key_exists +0x627d 026952 rtn blank +: 026953 send_lmp_sres_startenc: +0x627e 026954 call check_localsm +0x627f 026955 nbranch send_lmp_sres_startenc_slave ,true +0x6280 026956 fetch 1 ,mem_auth_enable +0x6281 026957 rtn blank +0x6282 026958 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6283 026959 rtn +: 026960 send_lmp_sres_startenc_slave: +0x6284 026961 rtnmark0 mark_slave_in_rand_accepted +0x6285 026962 set0 mark_slave_in_rand_accepted ,mark +0x6286 026963 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6287 026964 rtn +: 026968 send_lmp_start_encryption: +0x6288 026969 call generate_random_number +0x6289 026970 call function_e3 +0x628a 026971 force 17 ,pdata +0x628b 026972 call msg_send_lmp +0x628c 026973 arg mem_random_number ,contr +0x628d 026974 call memcpy16 +0x628e 026975 branch send_lmp_tid +: 026977 send_lmp_stop_encryption_req: +0x628f 026978 force 1 ,pdata +0x6290 026979 call msg_send_lmp +0x6291 026980 branch send_lmp_tid +: 026982 send_lmp_encryption_key_size_req: +0x6292 026983 force 2 ,pdata +0x6293 026984 call msg_send_lmp +0x6294 026985 force 16 ,pdata +0x6295 026986 istore 1 ,contw +0x6296 026987 store 1 ,mem_key_size +0x6297 026988 branch send_lmp_tid +: 026990 msg_send_lmp: +0x6298 026992 lshift3 pdata ,pdata +0x6299 026993 or_into 0x07 ,pdata +0x629a 026994 store 1 ,mem_lmo_header_length +0x629b 026995 arg 17 ,loopcnt +0x629c 026996 arg mem_lmo_payload ,contw +0x629d 026997 call clear_mem +0x629e 026998 arg mem_lmo_payload ,contw +0x629f 026999 rtn +: 027001 send_lmpext: +0x62a0 027002 and pdata ,0x7f ,rega +0x62a1 027003 jam lmp_escape ,mem_lmp_to_send +0x62a2 027004 deposit queue +0x62a3 027005 call msg_send_lmp +0x62a4 027006 deposit rega +0x62a5 027007 istore 1 ,contw +0x62a6 027008 rtn +: 027010 send_lmp_follow: +0x62a7 027011 fetch 1 ,mem_lmp_to_send +0x62a8 027012 lshift pdata ,pdata +0x62a9 027013 fetcht 1 ,mem_state_map +0x62aa 027014 isolate1 smap_lmptid ,temp +0x62ab 027015 setflag true ,0 ,pdata +0x62ac 027016 branch send_lmp_exit +: 027019 send_lmp_tid: +0x62ad 027020 fetcht 1 ,mem_state_map +0x62ae 027021 and_into 1 ,temp +0x62af 027022 branch send_lmp_end +: 027024 send_lmp_reply: +0x62b0 027025 force 0 ,temp +0x62b1 027026 branch send_lmp_end +: 027028 send_lmp_request: +0x62b2 027029 force 1 ,temp +: 027030 send_lmp_end: +0x62b3 027031 fetch 1 ,mem_lmp_to_send +0x62b4 027032 lshift pdata ,pdata +0x62b5 027033 setflag master ,0 ,pdata +0x62b6 027034 ixor temp ,pdata +: 027035 send_lmp_exit: +0x62b7 027036 store 1 ,mem_lmo_header_opcode +0x62b8 027037 jam 0 ,mem_lmp_to_send +0x62b9 027038 call lmo_fifo_process_lmo0empty +0x62ba 027039 enable user +0x62bb 027040 rtn +: 027043 lmo_fifo_check: +0x62bc 027044 fetch 1 ,mem_lmo_opcode2 +0x62bd 027045 rtn blank +0x62be 027046 call lmo_fifo_process +0x62bf 027047 fetch 1 ,mem_lmo_opcode2 +0x62c0 027048 rtn +: 027050 lmo_fifo_process: +0x62c1 027051 bpatchx patch30_6 ,mem_patch30 +0x62c2 027052 fetch 1 ,mem_lmp_to_send +0x62c3 027053 branch lmo_fifo_process_lmo0empty ,blank +0x62c4 027054 fetch 1 ,mem_lmo_opcode1 +0x62c5 027055 nrtn blank +0x62c6 027056 branch lmo_fifo_process_lmo2to1 +: 027057 lmo_fifo_process_lmo0empty: +0x62c7 027058 fetch 1 ,mem_lmo_opcode1 +0x62c8 027059 branch lmo_fifo_process_lmo1_empty ,blank +0x62c9 027060 fetch 3 ,mem_lmo_opcode1 +0x62ca 027061 store 3 ,mem_lmp_to_send +0x62cb 027062 fetcht 1 ,mem_lmo_tid1 +0x62cc 027063 fetch 1 ,mem_state_map +0x62cd 027064 set0 smap_lmptid ,pdata +0x62ce 027065 ior temp ,pdata +0x62cf 027066 store 1 ,mem_state_map +0x62d0 027067 jam 0 ,mem_lmo_opcode1 +: 027068 lmo_fifo_process_lmo2to1: +0x62d1 027069 fetch 1 ,mem_lmo_opcode2 +0x62d2 027070 rtn blank +0x62d3 027071 fetch 4 ,mem_lmo_opcode2 +0x62d4 027072 store 4 ,mem_lmo_opcode1 +0x62d5 027073 jam 0 ,mem_lmo_opcode2 +0x62d6 027074 rtn +: 027075 lmo_fifo_process_lmo1_empty: +0x62d7 027076 fetch 1 ,mem_lmo_opcode2 +0x62d8 027077 rtn blank +0x62d9 027078 fetch 3 ,mem_lmo_opcode2 +0x62da 027079 store 3 ,mem_lmp_to_send +0x62db 027080 fetcht 1 ,mem_lmo_tid2 +0x62dc 027081 fetch 1 ,mem_state_map +0x62dd 027082 set0 smap_lmptid ,pdata +0x62de 027083 ior temp ,pdata +0x62df 027084 store 1 ,mem_state_map +0x62e0 027085 jam 0 ,mem_lmo_opcode2 +0x62e1 027086 rtn +: 027089 special_tid_store: +0x62e2 027090 bpatchx patch30_7 ,mem_patch30 +0x62e3 027091 fetch 1 ,mem_state_map +0x62e4 027092 copy pdata ,regc +0x62e5 027093 ifetch 1 ,temp +0x62e6 027094 call pop_tid_follow +0x62e7 027095 call send_lmp_follow +0x62e8 027096 copy regc ,pdata +0x62e9 027097 store 1 ,mem_state_map +0x62ea 027098 rtn +: 027100 tid_reply: +0x62eb 027101 fetcht 1 ,mem_state_map +0x62ec 027102 set0 smap_lmptidinit ,temp +0x62ed 027103 storet 1 ,mem_state_map +0x62ee 027104 rtn +: 027106 tid_initiate: +0x62ef 027107 fetcht 1 ,mem_state_map +0x62f0 027108 set1 smap_lmptidinit ,temp +0x62f1 027109 storet 1 ,mem_state_map +0x62f2 027110 rtn +: 027113 tid_check: +0x62f3 027114 nsetflag master ,smap_lmptid ,pdata +0x62f4 027115 fetcht 1 ,mem_state_map +0x62f5 027116 ixor temp ,pdata +0x62f6 027117 isolate1 smap_lmptid ,pdata +0x62f7 027118 rtn +: 027121 tid_set_reply: +0x62f8 027122 fetch 1 ,mem_state_map +0x62f9 027123 setflag master ,smap_lmptid ,pdata +0x62fa 027124 store 1 ,mem_state_map +0x62fb 027125 rtn +: 027128 check_localsm: +0x62fc 027129 fetch 1 ,mem_sp_localsm +0x62fd 027130 compare local_statemachine ,pdata ,0x7f +0x62fe 027131 rtn +: 027132 setlocalsm_master: +0x62ff 027133 fetch 1 ,mem_sp_localsm +0x6300 027134 set1 7 ,pdata +0x6301 027135 store 1 ,mem_sp_localsm +0x6302 027136 rtn +: 027137 setlocalsm_slave: +0x6303 027138 fetch 1 ,mem_sp_localsm +0x6304 027139 set0 7 ,pdata +0x6305 027140 store 1 ,mem_sp_localsm +0x6306 027141 rtn +: 027142 check_localsm_master: +0x6307 027143 fetch 1 ,mem_sp_localsm +0x6308 027144 isolate1 7 ,pdata +0x6309 027145 store 1 ,mem_sp_localsm +0x630a 027146 rtn +: 027148 generate_random_number: +0x630b 027150 arg mem_random_number ,contw +: 027151 generate_random: +0x630c 027152 force 16 ,loopcnt +: 027153 generate_random_another: +: 027154 generate_random_loop: +0x630d 027155 random pdata +0x630e 027156 istore 1 ,contw +0x630f 027157 loop generate_random_another +0x6310 027158 rtn +: 027160 generate_linkkey: +0x6311 027161 call function_e21 +0x6312 027162 arg mem_link_key ,rega +0x6313 027163 arg mem_input_store ,regb +0x6314 027164 ifetch 8 ,rega +0x6315 027165 fetcht 1 ,mem_state +0x6316 027166 nsetflag blank ,state_combkey ,temp +0x6317 027167 storet 1 ,mem_state +0x6318 027168 copy rega ,contw +0x6319 027169 call xor16 +0x631a 027170 branch generate_linkkey_continue +: 027176 process_conn_sm: +0x631b 027178 bpatchx patch31_0 ,mem_patch31 +0x631c 027180 call lmo_fifo_check +0x631d 027181 nrtn blank +: 027182 process_conn_sm_continue: +0x631e 027183 fetch 1 ,mem_conn_sm +0x631f 027184 rtn blank +0x6320 027188 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +0x6321 027189 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +0x6322 027190 beq conn_sm_send_features ,host_create_conn_send_features +0x6323 027191 beq conn_sm_wait_features_res ,host_create_conn_waiting +0x6324 027192 beq conn_sm_send_switch ,host_create_conn_send_switch +0x6325 027193 beq conn_sm_auth_pair ,host_create_conn_auth_pair +0x6326 027194 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +0x6327 027195 beq conn_sm_encrypt ,host_create_conn_encrypt +0x6328 027196 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +0x6329 027197 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +0x632a 027198 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +0x632b 027199 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +0x632c 027200 beq conn_sm_detach_delay ,host_create_conn_master_detach +0x632d 027201 beq conn_sm_send_version ,host_create_conn_send_version +0x632e 027202 beq conn_sm_wait_version ,host_create_conn_waiting +0x632f 027203 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +0x6330 027204 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +0x6331 027205 beq conn_sm_wait_features_ext ,host_create_conn_waiting +0x6332 027206 beq conn_sm_pairing ,host_create_conn_pairing +0x6333 027207 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +0x6334 027208 beq conn_sm_auth ,host_create_conn_auth +0x6335 027209 beq conn_sm_auth_wait ,host_create_conn_auth_wait +0x6336 027210 beq conn_sm_done ,host_create_conn_done +0x6337 027211 beq conn_sm_wait_done ,host_create_conn_done_wait +0x6338 027212 jam conn_sm_standby ,mem_conn_sm +0x6339 027214 rtn +: 027215 host_create_conn_done: +0x633a 027216 fetch 1 ,mem_lmp_conn_state +0x633b 027217 rtnbit0 received_setup_complete +0x633c 027218 rtnbit0 sent_setup_complete +0x633d 027219 jam conn_sm_standby ,mem_conn_sm +0x633e 027220 call host_conn_judge_encrypt +0x633f 027221 branch scheduler_start_upper_sm +: 027223 host_conn_judge_encrypt: +0x6340 027224 fetch 1 ,mem_connection_options +0x6341 027225 rtnbit0 connection_encrypt +0x6342 027226 jam conn_sm_encrypt_wait ,mem_conn_sm +0x6343 027227 rtn +: 027229 host_create_conn_done_wait: +0x6344 027230 arg enpt_delay_timer ,queue +0x6345 027231 call timer_check +0x6346 027232 nrtn blank +0x6347 027233 jam conn_sm_done ,mem_conn_sm +0x6348 027234 rtn +: 027236 host_create_conn_auth: +0x6349 027237 fetch 1 ,mem_connection_options +0x634a 027238 set0 connection_auth ,pdata +0x634b 027239 store 1 ,mem_connection_options +0x634c 027240 jam conn_sm_auth_wait ,mem_conn_sm +0x634d 027241 jam lmp_au_rand ,mem_lmo_opcode2 +0x634e 027242 rtn +: 027243 host_create_conn_auth_wait: +0x634f 027244 rtn +: 027245 host_create_conn_pairing: +0x6350 027246 fetch 1 ,mem_pincode_state +0x6351 027247 rtnne pincode_state_pincode_ready +0x6352 027248 call host_auth +0x6353 027249 jam conn_sm_pairing_wait ,mem_conn_sm +0x6354 027250 rtn +: 027252 host_create_conn_pairing_wait: +0x6355 027253 rtn +: 027254 host_creat_conn_send_feat_ext: +0x6356 027255 jam conn_sm_wait_features_ext ,mem_conn_sm +0x6357 027256 jam lmp_ext_features_req ,mem_lmo_opcode2 +0x6358 027257 rtn +: 027258 host_create_conn_send_version: +0x6359 027259 jam conn_sm_wait_version ,mem_conn_sm +0x635a 027260 jam lmp_version_req ,mem_lmo_opcode2 +0x635b 027261 rtn +: 027263 host_creat_conn_wait_switch: +0x635c 027264 fetch 1 ,mem_switch_flag +0x635d 027265 rtneq switch_flag_init +0x635e 027266 beq switch_flag_accept ,host_create_conn_switch_accept +0x635f 027267 arg switch_wait_timer ,queue +0x6360 027268 call timer_check +0x6361 027269 nrtn blank +0x6362 027270 jam switch_flag_init ,mem_switch_flag +0x6363 027271 branch host_create_conn_switch +: 027272 host_create_conn_switch_accept: +0x6364 027273 rtn master +0x6365 027274 branch host_create_conn_auth_pair +: 027276 host_create_conn_send_features: +0x6366 027277 jam conn_sm_wait_features_res ,mem_conn_sm +0x6367 027278 jam lmp_features_req ,mem_lmo_opcode2 +0x6368 027279 rtn +: 027280 host_create_conn_send_switch: +0x6369 027281 jam lmp_switch_req ,mem_lmo_opcode2 +0x636a 027282 set1 mark_switch_initiated ,mark +0x636b 027283 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x636c 027284 setarg 0x1ff +0x636d 027285 store 2 ,mem_soft_timer +0x636e 027286 rtn +: 027287 host_create_conn_send_conn_req: +0x636f 027288 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x6370 027289 jam 0xff ,mem_soft_timer +0x6371 027290 set0 mark_reconn_recieve_switch ,mark +0x6372 027291 jam lmp_host_connection_req ,mem_lmo_opcode2 +0x6373 027292 branch init_lmp_reinit +: 027293 host_create_conn_wait_accept: +0x6374 027294 rtnmark1 mark_reconn_recieve_switch +0x6375 027295 fetch 2 ,mem_soft_timer +0x6376 027296 sub pdata ,1 ,pdata +0x6377 027297 branch host_create_conn_resend ,zero +0x6378 027298 store 2 ,mem_soft_timer +0x6379 027299 rtn +: 027300 host_create_conn_resend: +0x637a 027301 jam conn_sm_send_switch ,mem_conn_sm +0x637b 027302 rtn +: 027303 host_create_conn_waiting: +0x637c 027305 rtn +: 027307 host_create_conn_switch: +0x637d 027308 fetch 1 ,mem_lmp_conn_state +0x637e 027309 rtnbit0 sent_setup_complete +0x637f 027310 rtnbit0 received_setup_complete +0x6380 027311 fetch 1 ,mem_connection_options +0x6381 027312 set0 connection_switch ,pdata +0x6382 027313 store 1 ,mem_connection_options +0x6383 027314 jam lmp_switch_req ,mem_lmo_opcode2 +0x6384 027315 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +0x6385 027316 rtn +: 027318 host_create_conn_send_setup_complete: +0x6386 027319 jam conn_sm_wait_setup_complete ,mem_conn_sm +0x6387 027320 jam lmp_setup_complete ,mem_lmo_opcode2 +0x6388 027321 rtn +: 027323 host_create_conn_wait_setup_complete: +0x6389 027324 fetch 1 ,mem_lmp_conn_state +0x638a 027325 rtnbit0 received_setup_complete +0x638b 027326 jam conn_sm_standby ,mem_conn_sm +0x638c 027328 rtn +: 027329 host_create_conn_wait_setup_complete_rtn: +0x638d 027330 jam conn_sm_auth_pair ,mem_conn_sm +0x638e 027331 rtn +: 027333 host_create_conn_master_detach: +0x638f 027334 fetch 1 ,mem_soft_timer +0x6390 027335 increase -1 ,pdata +0x6391 027336 branch host_create_conn_send_detach ,blank +0x6392 027337 store 1 ,mem_soft_timer +0x6393 027338 rtn +: 027339 host_create_conn_send_detach: +0x6394 027340 jam lmp_detach ,mem_lmo_opcode2 +0x6395 027341 jam local_host ,mem_disconn_reason_send +0x6396 027342 jam 0 ,mem_conn_sm +0x6397 027343 rtn +: 027344 host_create_conn_auth_pair: +0x6398 027346 fetch 1 ,mem_connection_options +0x6399 027347 bbit1 connection_switch ,host_create_conn_switch +0x639a 027348 bbit1 connection_auth ,host_create_conn_auth_pair_true +: 027349 host_create_conn_sm_done: +0x639b 027350 jam conn_sm_done ,mem_conn_sm +0x639c 027351 rtn +: 027352 host_create_conn_auth_pair_true: +0x639d 027353 fetch 1 ,mem_link_key_exists +0x639e 027354 branch host_create_conn_auth_pair_nokey ,blank +0x639f 027355 fetch 1 ,mem_lmp_conn_state +0x63a0 027356 rtnbit0 sent_setup_complete +0x63a1 027357 rtnbit0 received_setup_complete +0x63a2 027358 fetch 4 ,mem_aurand_send_delay_time +0x63a3 027359 arg 100 ,temp +0x63a4 027360 iadd temp ,temp +0x63a5 027361 copy clkn_bt ,pdata +0x63a6 027362 isub temp ,null +0x63a7 027363 nrtn positive +0x63a8 027364 branch host_create_conn_auth +: 027368 host_create_conn_auth_pair_nokey: +0x63a9 027369 jam conn_sm_pairing ,mem_conn_sm +0x63aa 027370 jam 4 ,mem_pin_length +0x63ab 027371 setarg 0x3030 +0x63ac 027372 store 2 ,mem_pin +0x63ad 027373 istore 2 ,contw +0x63ae 027374 jam pincode_state_pincode_ready ,mem_pincode_state +0x63af 027375 branch host_create_conn_pairing +: 027377 host_create_conn_auth_pair_wait: +0x63b0 027378 rtn +: 027379 host_create_conn_encrypt: +0x63b1 027380 fetch 1 ,mem_connection_options +0x63b2 027381 bbit1 connection_encrypt ,host_create_conn_encrypt_start +0x63b3 027382 jam conn_sm_done ,mem_conn_sm +0x63b4 027383 rtn +: 027385 host_create_conn_encrypt_start: +0x63b5 027386 fetch 1 ,mem_connection_options +0x63b6 027387 set0 connection_encrypt ,pdata +0x63b7 027388 store 1 ,mem_connection_options +0x63b8 027389 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x63b9 027390 rtn +: 027392 host_create_conn_encrypt_wait: +0x63ba 027393 fetch 1 ,mem_wait_encryption +0x63bb 027394 rtn blank +0x63bc 027395 jam conn_sm_standby ,mem_conn_sm +0x63bd 027396 branch host_create_conn_encrypt_start +: 027398 host_create_conn_encrypt_wait_clear: +0x63be 027399 jam conn_sm_send_setup_complete ,mem_conn_sm +0x63bf 027400 rtn +: 027402 host_auth: +0x63c0 027403 fetch 1 ,mem_op +0x63c1 027404 bbit1 op_inrand_req ,remote_auth +0x63c2 027405 call tid_initiate +0x63c3 027406 jam lmp_in_rand ,mem_lmo_opcode2 +0x63c4 027407 branch cmd_exit +: 027408 remote_auth: +0x63c5 027409 fetch 1 ,mem_op +0x63c6 027410 set0 op_inrand_req ,pdata +0x63c7 027411 store 1 ,mem_op +0x63c8 027412 call lmp_accept_inrand +0x63c9 027413 call tid_set_reply +0x63ca 027414 branch cmd_exit +: 027416 pincode_reinit: +0x63cb 027417 setarg 4 +0x63cc 027418 store 1 ,mem_pin_length +0x63cd 027419 setarg 0x3030 +0x63ce 027420 istore 2 ,contw +0x63cf 027421 istore 2 ,contw +0x63d0 027422 rtn +: 027428 twspi_reset: +0x63d1 027429 bpatchx patch31_4 ,mem_patch31 +0x63d2 027430 hfetch 1 ,core_gpio_oe3 +0x63d3 027431 arg 0x06 ,temp +0x63d4 027432 ior temp ,pdata +0x63d5 027433 hstore 1 ,core_gpio_oe3 +0x63d6 027434 hfetch 1 ,core_gpio_out3 +0x63d7 027435 ior temp ,pdata +0x63d8 027436 hstore 1 ,core_gpio_out3 +0x63d9 027437 call twspi_disable +0x63da 027438 hfetch 1 ,core_gpio_out3 +0x63db 027439 set0 1 ,pdata +0x63dc 027440 set0 2 ,pdata +0x63dd 027441 hstore 1 ,core_gpio_out3 +0x63de 027442 nop 30 +0x63df 027443 branch twspi_enable +: 027445 twspi_reset2: +0x63e0 027446 hfetch 1 ,core_gpio_oe3 +0x63e1 027447 arg 0xc0 ,temp +0x63e2 027448 ior temp ,pdata +0x63e3 027449 hstore 1 ,core_gpio_oe3 +0x63e4 027450 hfetch 1 ,core_gpio_out3 +0x63e5 027451 ior temp ,pdata +0x63e6 027452 hstore 1 ,core_gpio_out3 +0x63e7 027453 call twspi_disable +0x63e8 027454 hfetch 1 ,core_gpio_out3 +0x63e9 027455 set0 6 ,pdata +0x63ea 027456 set0 7 ,pdata +0x63eb 027457 hstore 1 ,core_gpio_out3 +0x63ec 027458 nop 30 +0x63ed 027459 branch twspi_enable2 +: 027461 twspi_disable: +0x63ee 027462 hfetch 1 ,core_gpio_sel1 +0x63ef 027463 and pdata ,0xfc ,pdata +0x63f0 027464 hstore 1 ,core_gpio_sel1 +0x63f1 027465 rtn +: 027466 twspi_enable: +0x63f2 027467 hfetch 1 ,core_gpio_sel1 +0x63f3 027468 or pdata ,0x01 ,pdata +0x63f4 027469 hstore 1 ,core_gpio_sel1 +0x63f5 027470 rtn +: 027471 twspi_enable2: +0x63f6 027472 hfetch 1 ,core_gpio_sel1 +0x63f7 027473 or pdata ,0x03 ,pdata +0x63f8 027474 set0 4 ,pdata +0x63f9 027475 hstore 1 ,core_gpio_sel1 +0x63fa 027476 rtn +: 027480 sensor_read: +0x63fb 027481 copy pdata ,regb +0x63fc 027482 call spi_ncs_enable +0x63fd 027483 nop 100 +0x63fe 027484 copy regb ,pdata +0x63ff 027485 call twspi_read +0x6400 027486 copy pdata ,regb +0x6401 027487 call spi_ncs_disable +0x6402 027488 nop 100 +0x6403 027489 copy regb ,pdata +0x6404 027490 rtn +: 027492 sensor_write: +0x6405 027493 copy pdata ,regb +0x6406 027494 call spi_ncs_enable +0x6407 027495 nop 100 +0x6408 027496 copy regb ,pdata +0x6409 027497 call twspi_write +0x640a 027498 call spi_ncs_disable +0x640b 027499 nop 100 +0x640c 027500 rtn +: 027503 spi_ncs_gpio_init: +0x640d 027504 fetcht 1 ,mem_spi_ncs_gpio +0x640e 027505 branch gpio_config_output +: 027508 spi_ncs_enable: +0x640f 027509 fetcht 1 ,mem_spi_ncs_gpio +0x6410 027510 branch gpio_out_active +: 027513 spi_ncs_disable: +0x6411 027514 fetcht 1 ,mem_spi_ncs_gpio +0x6412 027515 branch gpio_out_inactive +: 027518 twspi_write: +0x6413 027519 branch spid_write_reg +: 027521 twspi_read: +0x6414 027522 branch spid_read_reg +: 027529 read_function_aes: +0x6415 027530 nbranch read_function ,user +0x6416 027531 hfetch 1 ,core_gpio_key2 +0x6417 027532 or_into 0x2 ,pdata +0x6418 027533 hstore 1 ,core_gpio_key2 +: 027534 read_function: +0x6419 027535 copy temp ,null +0x641a 027536 branch read_fuction_zero ,zero +0x641b 027537 copy regc ,pc +: 027538 read_fuction_zero: +0x641c 027539 isolate0 0 ,null +0x641d 027540 branch set_ucode_status +: 027543 get_block_header: +0x641e 027544 force 4 ,temp +: 027545 get_block_header0: +0x641f 027546 arg mem_ucode_buf ,rega +0x6420 027547 hfetch 1 ,core_gpio_key2 +0x6421 027548 and_into 0xfd ,pdata +0x6422 027549 hstore 1 ,core_gpio_key2 +0x6423 027550 call read_function +0x6424 027551 arg 0x55aa ,rega +0x6425 027552 fetch 2 ,mem_ucode_buf +0x6426 027553 ifetcht 2 ,contr +0x6427 027554 isub rega ,null +0x6428 027555 rtn +: 027557 read_first_block: +0x6429 027558 arg 2 ,temp +0x642a 027559 arg mem_ucode_ptr ,rega +0x642b 027560 call read_function +0x642c 027561 fetch 2 ,mem_ucode_ptr +0x642d 027562 store 2 ,mem_addr_mi +0x642e 027563 call get_iv ,user +0x642f 027564 rtn +: 027566 get_iv: +0x6430 027567 arg 16 ,temp +0x6431 027568 arg mem_ucode_keybuf ,rega +0x6432 027569 hfetch 1 ,core_gpio_key2 +0x6433 027570 and_into 0xfd ,pdata +0x6434 027571 hstore 1 ,core_gpio_key2 +0x6435 027572 call read_function +0x6436 027573 arg mem_ucode_keybuf ,contr +0x6437 027574 arg 16 ,loopcnt +0x6438 027575 call aes_load_data +0x6439 027576 call aes_init +0x643a 027577 call aes_clear_data +0x643b 027578 branch do_aes_cbc +: 027580 load_storage: +0x643c 027581 disable match +0x643d 027582 call get_block_header +0x643e 027583 nrtn zero +0x643f 027584 enable match +0x6440 027585 jam 0x80 ,core_ucode_ctrl +0x6441 027586 jam 0 ,core_ucode_hi +0x6442 027587 jam 0 ,core_ucode_low +0x6443 027588 arg core_ucode_data ,rega +0x6444 027589 call read_function_aes +0x6445 027590 jam 0x0 ,core_ucode_ctrl +: 027591 load_storage_loop: +0x6446 027592 arg 6 ,temp +0x6447 027593 call get_block_header0 +0x6448 027594 nrtn zero +0x6449 027595 ifetch 2 ,contr +0x644a 027596 iforce rega +0x644b 027597 call read_function +0x644c 027598 branch load_storage_loop +: 027602 reload_eeprom: +0x644d 027603 call clean_mem +0x644e 027604 setarg 0x1000 +0x644f 027605 store 2 ,mem_addr_mi +0x6450 027606 arg iicd_read_eep ,regc +0x6451 027607 arg 2 ,loopcnt +: 027608 reload_eeprom_loop: +0x6452 027609 call get_block_header +0x6453 027610 nrtn zero +0x6454 027611 fetch 2 ,mem_addr_mi +0x6455 027612 byteswap pdata ,pdata +0x6456 027613 iadd temp ,pdata +0x6457 027614 byteswap pdata ,pdata +0x6458 027615 store 2 ,mem_addr_mi +0x6459 027616 loop reload_eeprom_loop +0x645a 027617 branch load_storage_loop +: 027619 loadcode: +0x645b 027620 call clean_mem +0x645c 027621 disable user +0x645d 027622 call otp_enable_chgpump +0x645e 027623 setarg otp_ucode_flag +0x645f 027624 arg mem_otp_ucode_flag ,rega +0x6460 027625 arg 2 ,temp +0x6461 027626 call otpd_read_data +0x6462 027627 fetch 2 ,mem_otp_ucode_flag +0x6463 027628 bbit0 otp_uflag_aes ,loadcode_otp +0x6464 027629 jam 0x25 ,core_clkoff +0x6465 027630 setarg otp_ucode_aeskey +0x6466 027631 arg mem_ucode_keybuf ,rega +0x6467 027632 arg 16 ,temp +0x6468 027633 call otpd_read_data +0x6469 027634 jam lock_otp ,core_misc_ctrl +0x646a 027635 set1 mark_otp_encrypt ,mark +0x646b 027636 arg mem_ucode_keybuf ,contr +0x646c 027637 call load_key +0x646d 027638 enable user +: 027639 loadcode_otp: +0x646e 027640 jam 0 ,mem_loadcode_times +: 027641 loadcode_otp_2: +0x646f 027642 call loadcode_check_times +0x6470 027643 fetch 2 ,mem_otp_ucode_flag +0x6471 027644 byteswap pdata ,pdata +0x6472 027645 arg 0x7ff ,temp +0x6473 027646 iand temp ,pdata +0x6474 027647 branch loadcode_iic ,zero +0x6475 027648 call otp_set_addr +0x6476 027649 arg otpd_read_code ,regc +0x6477 027650 call get_iv ,user +0x6478 027651 call load_storage +0x6479 027652 fetch 1 ,mem_ucode_status +0x647a 027653 bbit0 0 ,loadcode_otp_2 +: 027655 loadcode_iic: +0x647b 027656 call otp_disable_chgpump +0x647c 027657 jam 0 ,mem_loadcode_times +: 027658 loadcode_iic_2: +0x647d 027659 call loadcode_check_times +0x647e 027660 call clear_eeprom_size_2k +0x647f 027661 fetch 1 ,mem_otp_ucode_flag +0x6480 027662 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6481 027663 call loadcode_iic_by_eeprom +0x6482 027664 nbranch loadcode_iic_eeprom_2k ,match +0x6483 027665 fetch 1 ,mem_ucode_status +0x6484 027666 bbit0 0 ,loadcode_iic_2 +0x6485 027667 branch loadcode_hci +: 027668 loadcode_iic_eeprom_2k: +0x6486 027669 call set_eeprom_size_2k +0x6487 027670 fetch 1 ,mem_otp_ucode_flag +0x6488 027671 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6489 027672 call loadcode_iic_by_eeprom +0x648a 027673 nbranch loadcode_spi ,match +0x648b 027674 fetch 1 ,mem_ucode_status +0x648c 027675 bbit0 0 ,loadcode_iic_2 +0x648d 027676 branch loadcode_hci +: 027678 loadcode_spi: +0x648e 027679 jam 0 ,mem_loadcode_times +: 027680 loadcode_spi_2: +0x648f 027681 call loadcode_check_times +0x6490 027682 fetch 1 ,mem_otp_ucode_flag +0x6491 027683 bbit1 otp_uflag_skip_flash ,loadcode_hci +0x6492 027684 setarg 0x0 +0x6493 027685 store 3 ,mem_addr_hi +0x6494 027686 call spid_init_flash +0x6495 027687 arg spid_load_flash ,regc +0x6496 027688 call read_first_block +0x6497 027689 call load_storage +0x6498 027690 nbranch loadcode_hci ,match +0x6499 027691 fetch 1 ,mem_ucode_status +0x649a 027692 bbit0 0 ,loadcode_spi_2 +: 027694 loadcode_hci: +0x649b 027695 bmark1 mark_otp_encrypt ,loadcode_hci_enc +0x649c 027696 call clear_key_buf +: 027697 loadcode_hci_enc: +0x649d 027698 fetch 1 ,mem_otp_ucode_flag +0x649e 027699 bbit0 otp_uflag_hci ,clear_key_buf +0x649f 027700 jam 0x21 ,core_clkoff +0x64a0 027701 call hci_init +: 027702 loadcode_hci_loop: +0x64a1 027703 call hci_rx_packet +0x64a2 027704 branch loadcode_hci_loop +: 027706 clear_key_buf: +0x64a3 027707 setarg 0 +0x64a4 027708 store 8 ,mem_ucode_keybuf +0x64a5 027709 store 8 ,mem_ucode_keybuf + 8 +0x64a6 027710 force regidx_key ,regext_index +0x64a7 027711 call aes_clear +0x64a8 027712 jam 0x21 ,core_clkoff +0x64a9 027713 rtn +: 027716 loadcode_iic_by_eeprom: +0x64aa 027717 setarg 0x0 +0x64ab 027718 store 2 ,mem_addr_mi +0x64ac 027719 arg iicd_read_eep ,regc +0x64ad 027720 call iicd_init_12m +0x64ae 027721 call read_first_block +0x64af 027722 branch load_storage +: 027725 loadcode_check_times: +0x64b0 027726 fetch 1 ,mem_loadcode_times +0x64b1 027727 increase 1 ,pdata +0x64b2 027728 sub pdata ,3 ,null +0x64b3 027729 nbranch loadcode_error ,positive +0x64b4 027730 store 1 ,mem_loadcode_times +0x64b5 027731 rtn +: 027733 loadcode_error: +0x64b6 027734 call clear_key_buf +0x64b7 027735 call ice_break +0x64b8 027736 rtn +: 027740 set_ucode_status: +0x64b9 027741 fetch 1 ,mem_ucode_status +0x64ba 027742 lshift pdata ,pdata +0x64bb 027743 setflag true ,0 ,pdata +0x64bc 027744 isolate0 15 ,rega +0x64bd 027745 rtn true +0x64be 027746 store 1 ,mem_ucode_status +0x64bf 027747 rtn +: 027750 decrypt_code: +0x64c0 027751 hfetch 1 ,core_gpio_key2 +0x64c1 027752 rtnbit0 1 +0x64c2 027753 branch decrypt_code_skip +: 027754 decrypt_code_loop: +0x64c3 027755 hfetch 1 ,core_dma_status +0x64c4 027756 qisolate1 pdata +0x64c5 027757 rtn true +: 027758 decrypt_code_skip: +0x64c6 027759 hfetch 1 ,core_misc_status +0x64c7 027760 bbit0 1 ,decrypt_code_loop +0x64c8 027761 call do_aes_cbc +0x64c9 027762 branch decrypt_code_loop +: 027766 load_ucode: +0x64ca 027767 fetch 2 ,mem_patch_ptr +0x64cb 027768 rtn blank +0x64cc 027769 jam 0x80 ,core_ucode_ctrl +0x64cd 027770 jam 0 ,core_ucode_hi +0x64ce 027771 jam 0 ,core_ucode_low +0x64cf 027772 fetcht 2 ,mem_patch_len +0x64d0 027773 lshift2 temp ,loopcnt +0x64d1 027774 iforce contr +: 027775 load_ucode_loop: +0x64d2 027776 ifetch 1 ,contr +0x64d3 027777 hstore 1 ,core_ucode_data +0x64d4 027778 loop load_ucode_loop +0x64d5 027779 jam 0x0 ,core_ucode_ctrl +0x64d6 027780 rtn +: 027785 spid_init: +0x64d7 027786 bpatchx patch31_5 ,mem_patch31 +0x64d8 027787 call spid_init_common +0x64d9 027788 branch twspi_enable +: 027790 spid_init2: +0x64da 027791 call spid_init_common +0x64db 027792 call twspi_disable +0x64dc 027793 branch twspi_enable2 +: 027795 spid_init_common: +0x64dd 027796 fetch 1 ,mem_spi_init_clk +0x64de 027797 hstore 1 ,core_spid_ctrl +0x64df 027798 fetch 1 ,mem_spi_init_delay_time +0x64e0 027799 hstore 1 ,core_spid_delay +0x64e1 027800 setarg mem_spid_tbuf +0x64e2 027801 hstore 2 ,core_spid_txaddr +0x64e3 027802 setarg mem_spid_rbuf +0x64e4 027803 hstore 2 ,core_spid_rxaddr +0x64e5 027804 branch twspi_disable +: 027806 spid_reset: +0x64e6 027807 hfetch 1 ,core_spid_ctrl +0x64e7 027808 set1 7 ,pdata +0x64e8 027809 hstore 1 ,core_spid_ctrl +0x64e9 027810 set0 7 ,pdata +0x64ea 027811 hstore 1 ,core_spid_ctrl +0x64eb 027812 rtn +: 027816 spid_write_reg: +0x64ec 027817 set1 7 ,pdata +0x64ed 027818 store 2 ,mem_spid_tbuf +0x64ee 027819 bpatchx patch31_6 ,mem_patch31 +0x64ef 027820 jam 2 ,core_spid_txlen +0x64f0 027821 jam 0 ,core_spid_rxlen +0x64f1 027822 jam spid_start ,core_misc_ctrl +0x64f2 027823 branch wait_spid_done +: 027826 spid_read_reg: +0x64f3 027827 force 1 ,temp +: 027829 spid_read_regs: +0x64f4 027831 store 1 ,mem_spid_tbuf +0x64f5 027832 bpatchx patch31_7 ,mem_patch31 +0x64f6 027833 jam 1 ,core_spid_txlen +0x64f7 027834 hstoret 2 ,core_spid_rxlen +0x64f8 027835 jam spid_start ,core_misc_ctrl +0x64f9 027836 call wait_spid_done +0x64fa 027837 fetch 1 ,mem_spid_rbuf +0x64fb 027838 rtn +: 027840 wait_spid_done: +0x64fc 027841 fetch 2 ,mem_afh_error_total +0x64fd 027842 increase 1 ,pdata +0x64fe 027843 store 2 ,mem_afh_error_total +0x64ff 027844 hfetch 1 ,core_dma_status +0x6500 027845 bbit0 spid_done ,wait_spid_done +0x6501 027846 rtn +: 027848 spid_init_flash: +0x6502 027849 jam 0x40 ,core_spid_ctrl +0x6503 027850 jam 0x0 ,core_spid_delay +0x6504 027851 hfetch 1 ,core_gpio_sel1 +0x6505 027852 set0 0 ,pdata +0x6506 027853 set1 1 ,pdata +0x6507 027854 hstore 1 ,core_gpio_sel1 +0x6508 027855 setarg 0 +0x6509 027856 store 4 ,mem_spid_tbuf +0x650a 027857 rtn +: 027860 spid_unlock_flash: +0x650b 027861 setarg 0 +0x650c 027862 hstore 2 ,core_spid_rxlen +0x650d 027863 setarg 1 +0x650e 027864 hstore 2 ,core_spid_txlen +0x650f 027865 setarg mem_spid_tbuf +0x6510 027866 hstore 2 ,core_spid_txaddr +0x6511 027867 jam 6 ,mem_spid_tbuf +0x6512 027868 jam spid_start ,core_misc_ctrl +0x6513 027869 branch wait_spid_done +: 027884 flash_write: +0x6514 027885 disable user +0x6515 027886 copy pdata ,regb +0x6516 027887 fetch 1 ,mem_spi_write_flash_sm +0x6517 027888 rtnne flash_sm_no_buys +0x6518 027889 enable user +0x6519 027890 copy regb ,pdata +0x651a 027891 branch flash_write_start +: 027894 flash_write_spi_sm_timer: +0x651b 027895 fetch 1 ,mem_spi_write_flash_sm +0x651c 027896 beq flash_sm_start ,flash_write_start +0x651d 027897 beq flash_sm_erase_sector ,flash_erase_sector +0x651e 027898 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector +0x651f 027899 beq flash_sm_write_data ,flash_write_data +0x6520 027900 beq flash_sm_wait_write_data ,flash_wait_write_data +0x6521 027901 rtn +: 027903 flash_write_start: +0x6522 027904 store 3 ,mem_spi_write_addr +0x6523 027905 copy rega ,pdata +0x6524 027906 store 2 ,mem_spi_write_ptr +0x6525 027907 storet 2 ,mem_spi_write_len +0x6526 027908 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +0x6527 027909 branch spid_init_flash +: 027910 flash_erase_sector: +0x6528 027911 call spid_init_flash +0x6529 027912 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +0x652a 027913 call spid_unlock_flash +0x652b 027914 arg mem_spid_tbuf ,rega +0x652c 027915 fetch 3 ,mem_spi_write_addr +0x652d 027916 jam 4 ,core_spid_txlen +0x652e 027917 arg flash_command_sector_erase ,temp +0x652f 027918 branch spid_write_flash_common +: 027920 flash_wait_erase_sector: +0x6530 027921 call spid_init_flash +0x6531 027922 call spid_unlock_flash +0x6532 027923 setarg flash_read_satus +0x6533 027924 call spid_read_reg +0x6534 027925 rtnbit1 flash_status_wip +0x6535 027926 jam flash_sm_write_data ,mem_spi_write_flash_sm +0x6536 027927 rtn +: 027928 flash_write_data: +0x6537 027929 call spid_init_flash +0x6538 027930 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +0x6539 027931 call spid_unlock_flash +0x653a 027932 call flash_data_preserve +0x653b 027933 call spid_write_flash +0x653c 027934 branch flash_data_recover +: 027935 flash_wait_write_data: +0x653d 027936 call spid_init_flash +0x653e 027937 call spid_unlock_flash +0x653f 027938 setarg flash_read_satus +0x6540 027939 call spid_read_reg +0x6541 027940 rtnbit1 flash_status_wip +0x6542 027941 jam flash_sm_no_buys ,mem_spi_write_flash_sm +0x6543 027942 fetch 2 ,mem_cb_spi_flash_write_complate +0x6544 027943 branch callback_func +: 027944 flash_data_recover: +0x6545 027945 fetch 4 ,mem_temp +0x6546 027946 fetcht 2 ,mem_spi_write_ptr +0x6547 027947 increase -4 ,temp +0x6548 027948 istore 4 ,temp +0x6549 027949 rtn +: 027950 flash_data_preserve: +0x654a 027951 fetcht 2 ,mem_spi_write_ptr +0x654b 027952 copy temp ,rega +0x654c 027953 increase -4 ,temp +0x654d 027954 ifetch 4 ,temp +0x654e 027955 store 4 ,mem_temp +0x654f 027956 fetcht 2 ,mem_spi_write_len +0x6550 027957 fetch 3 ,mem_spi_write_addr +0x6551 027958 rtn +: 027962 spid_write_flash: +0x6552 027963 increase 4 ,temp +0x6553 027964 hstoret 2 ,core_spid_txlen +0x6554 027965 arg flash_command_write_data ,temp +0x6555 027966 increase -4 ,rega +: 027967 spid_write_flash_common: +0x6556 027969 istoret 1 ,rega +0x6557 027970 rshift16 pdata ,temp +0x6558 027971 istoret 1 ,contw +0x6559 027972 rshift8 pdata ,temp +0x655a 027973 istoret 1 ,contw +0x655b 027974 istore 1 ,contw +0x655c 027975 deposit rega +0x655d 027976 hstore 2 ,core_spid_txaddr +0x655e 027977 setarg 0 +0x655f 027978 hstore 2 ,core_spid_rxlen +0x6560 027979 jam spid_start ,core_misc_ctrl +0x6561 027980 branch wait_spid_done +: 027984 spid_read_flash: +0x6562 027985 hstoret 2 ,core_spid_rxlen +0x6563 027986 rshift16 pdata ,temp +0x6564 027987 storet 1 ,mem_addr_hi +0x6565 027988 rshift8 pdata ,temp +0x6566 027989 storet 1 ,mem_addr_mi +0x6567 027990 store 1 ,mem_addr_lo +0x6568 027991 setarg 4 +0x6569 027992 hstore 2 ,core_spid_txlen +0x656a 027993 jam flash_command_read_data ,mem_spid_tbuf +0x656b 027994 setarg mem_spid_tbuf +0x656c 027995 hstore 2 ,core_spid_txaddr +0x656d 027996 deposit rega +0x656e 027997 hstore 2 ,core_spid_rxaddr +0x656f 027998 hfetch 1 ,core_spid_ctrl +0x6570 027999 isolate0 15 ,rega +0x6571 028000 setflag true ,6 ,pdata +0x6572 028001 hstore 1 ,core_spid_ctrl +0x6573 028002 jam spid_start ,core_misc_ctrl +: 028003 spi_read_flash_wait: +0x6574 028004 hfetch 1 ,core_dma_status +0x6575 028005 bbit1 7 ,spi_read_flash_wait +0x6576 028006 arg spid_done ,queue +0x6577 028007 branch wait_spid_done +: 028011 spid_load_flash: +0x6578 028012 hstoret 2 ,core_spid_rxlen +0x6579 028013 setarg 4 +0x657a 028014 hstore 2 ,core_spid_txlen +0x657b 028015 jam 3 ,mem_spid_tbuf +0x657c 028016 setarg mem_spid_tbuf +0x657d 028017 hstore 2 ,core_spid_txaddr +0x657e 028018 deposit rega +0x657f 028019 hstore 2 ,core_spid_rxaddr +0x6580 028020 hfetch 1 ,core_spid_ctrl +0x6581 028021 isolate0 15 ,rega +0x6582 028022 setflag true ,6 ,pdata +0x6583 028023 hstore 1 ,core_spid_ctrl +0x6584 028024 jam spid_start ,core_misc_ctrl +: 028025 spi_load_flash_wait: +0x6585 028026 hfetch 1 ,core_dma_status +0x6586 028027 bbit1 7 ,spi_load_flash_wait +0x6587 028028 arg spid_done ,queue +0x6588 028029 call decrypt_code +0x6589 028030 call wait_spid_done +0x658a 028031 isolate1 spid_crcok ,pdata +0x658b 028032 call set_ucode_status +0x658c 028033 fetch 1 ,mem_addr_hi +0x658d 028034 lshift16 pdata ,regb +0x658e 028035 fetch 1 ,mem_addr_mi +0x658f 028036 lshift8 pdata ,pdata +0x6590 028037 ior regb ,regb +0x6591 028038 fetch 1 ,mem_addr_lo +0x6592 028039 ior regb ,pdata +0x6593 028040 iadd temp ,pdata +0x6594 028041 store 1 ,mem_addr_lo +0x6595 028042 rshift8 pdata ,pdata +0x6596 028043 store 1 ,mem_addr_mi +0x6597 028044 rshift8 pdata ,pdata +0x6598 028045 store 1 ,mem_addr_hi +0x6599 028046 rtn +: 028051 soft_reset_chip: +0x659a 028052 jam 1 ,core_reset +0x659b 028053 rtn +: 028059 iic_init_390k: +0x659c 028060 jam 12 ,core_iicd_scl_low +0x659d 028061 jam 13 ,core_iicd_scl_high +0x659e 028062 jam 13 ,core_iicd_start_setup +0x659f 028063 jam 13 ,core_iicd_start_hold +0x65a0 028064 jam 13 ,core_iicd_stop_setup +0x65a1 028065 jam 12 ,core_iicd_data_setup +0x65a2 028066 branch iicd_init_gpio +: 028069 iicd_init_12m: +0x65a3 028070 jam 5 ,core_iicd_scl_low +0x65a4 028071 jam 7 ,core_iicd_scl_high +0x65a5 028072 jam 7 ,core_iicd_start_setup +0x65a6 028073 jam 7 ,core_iicd_start_hold +0x65a7 028074 jam 7 ,core_iicd_stop_setup +0x65a8 028075 jam 5 ,core_iicd_data_setup +: 028076 iicd_init_gpio: +0x65a9 028077 hfetch 1 ,core_gpio_pu3 +0x65aa 028078 or_into 0xc0 ,pdata +0x65ab 028079 hstore 1 ,core_gpio_pu3 +0x65ac 028080 hfetch 1 ,core_gpio_sel1 +0x65ad 028081 or_into 0x10 ,pdata +0x65ae 028082 hstore 1 ,core_gpio_sel1 +0x65af 028083 rtn +: 028087 wait_iicd_done: +0x65b0 028088 hfetch 1 ,core_dma_status +0x65b1 028089 bbit0 iicd_done ,wait_iicd_done +0x65b2 028090 rtn +: 028098 iicd_read_data: +0x65b3 028099 hstore 2 ,core_iicd_txlen +0x65b4 028100 deposit rega +0x65b5 028101 hstore 2 ,core_iicd_txaddr +0x65b6 028102 deposit regb +0x65b7 028103 hstore 2 ,core_iicd_rxaddr +0x65b8 028104 deposit temp +0x65b9 028105 hstore 2 ,core_iicd_rxlen +0x65ba 028106 arg 1 ,temp +0x65bb 028107 nsetflag blank ,1 ,temp +0x65bc 028108 hstore 1 ,core_iicd_ctrl +0x65bd 028109 jam iicd_start ,core_misc_ctrl +0x65be 028110 branch wait_iicd_done +: 028113 set_eeprom_size_2k: +0x65bf 028114 set1 mark_eeprom_size ,mark +0x65c0 028115 jam 0x08 ,mem_eeprom_block_size +0x65c1 028116 rtn +: 028118 clear_eeprom_size_2k: +0x65c2 028119 set0 mark_eeprom_size ,mark +0x65c3 028120 jam 0x20 ,mem_eeprom_block_size +0x65c4 028121 rtn +: 028124 iicd_read_eep_data_size_2k: +0x65c5 028125 fetch 1 ,mem_eeprom_base +0x65c6 028126 iadd regb ,pdata +0x65c7 028127 store 1 ,mem_addr_mi +0x65c8 028128 branch iicd_read_eep_size_2k +: 028130 iicd_read_eep_size_2k_lcadcode: +0x65c9 028131 fetch 2 ,mem_addr_mi +0x65ca 028132 byteswap pdata ,pdata +0x65cb 028133 store 1 ,mem_addr_mi +: 028138 iicd_read_eep_size_2k: +0x65cc 028139 setarg 3 +0x65cd 028140 hstore 2 ,core_iicd_txlen +0x65ce 028141 jam 0xa0 ,mem_iicd_tbuf +0x65cf 028142 jam 0xa1 ,mem_iicd_tbuf + 2 +0x65d0 028143 branch iicd_read_eep_common +: 028149 iicd_write_protect_eep_data: +0x65d1 028150 storet 2 ,mem_temp +0x65d2 028151 call iicd_eeprom_write_enable +0x65d3 028152 fetcht 2 ,mem_temp +0x65d4 028153 call iicd_write_eep_data +0x65d5 028154 branch iicd_eeprom_write_disable +: 028156 iicd_eeprom_write_enable: +0x65d6 028157 fetch 1 ,mem_eeprom_wp_gpio +0x65d7 028158 rtneq gpio_disable +0x65d8 028159 bbit0 6 ,iicd_wp_gpio_output_low +0x65d9 028160 setarg 150000 +0x65da 028161 call sleep +: 028162 iicd_wp_gpio_output_low: +0x65db 028163 fetcht 1 ,mem_eeprom_wp_gpio +0x65dc 028164 branch gpio_out_active +: 028166 iicd_eeprom_write_disable: +0x65dd 028167 fetcht 1 ,mem_eeprom_wp_gpio +0x65de 028168 branch gpio_out_inactive +: 028173 iicd_read_eep_data: +0x65df 028174 bpatchx patch32_0 ,mem_patch32 +0x65e0 028175 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +0x65e1 028176 fetch 2 ,mem_eeprom_base +0x65e2 028177 iadd regb ,pdata +0x65e3 028178 byteswap pdata ,pdata +0x65e4 028179 store 2 ,mem_addr_mi +: 028182 iicd_read_eep: +0x65e5 028183 bpatchx patch32_1 ,mem_patch32 +0x65e6 028184 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +0x65e7 028185 setarg 4 +0x65e8 028186 hstore 2 ,core_iicd_txlen +0x65e9 028187 jam 0xa0 ,mem_iicd_tbuf +0x65ea 028188 jam 0xa1 ,mem_iicd_tbuf + 3 +: 028189 iicd_read_eep_common: +0x65eb 028190 setarg mem_iicd_tbuf +0x65ec 028191 hstore 2 ,core_iicd_txaddr +0x65ed 028192 hstoret 2 ,core_iicd_rxlen +0x65ee 028193 deposit rega +0x65ef 028194 hstore 2 ,core_iicd_rxaddr +0x65f0 028195 setarg 2 +0x65f1 028196 isolate0 15 ,rega +0x65f2 028197 setflag true ,0 ,pdata +0x65f3 028198 hstore 1 ,core_iicd_ctrl +0x65f4 028199 jam iicd_start ,core_misc_ctrl +0x65f5 028200 arg iicd_done ,queue +0x65f6 028201 call decrypt_code +0x65f7 028202 call wait_iicd_done +0x65f8 028203 isolate1 iicd_crcok ,pdata +0x65f9 028204 call set_ucode_status +0x65fa 028205 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +0x65fb 028206 fetch 2 ,mem_addr_mi +0x65fc 028207 byteswap pdata ,pdata +0x65fd 028208 iadd temp ,pdata +0x65fe 028209 byteswap pdata ,pdata +0x65ff 028210 store 2 ,mem_addr_mi +0x6600 028211 rtn +: 028213 iicd_read_eep_load_code_size_2k: +0x6601 028214 fetch 1 ,mem_addr_mi +0x6602 028215 iadd temp ,pdata +0x6603 028216 byteswap pdata ,pdata +0x6604 028217 store 2 ,mem_addr_mi +0x6605 028218 rtn +: 028224 iicd_write_eep_data: +0x6606 028225 fetch 2 ,mem_eeprom_base +0x6607 028226 iadd regb ,pdata +: 028229 iicd_write_ota_data: +0x6608 028230 store 2 ,mem_pdatatemp +0x6609 028231 bpatchx patch32_2 ,mem_patch32 +0x660a 028232 storet 2 ,mem_temp +0x660b 028233 copy rega ,pdata +0x660c 028234 store 2 ,mem_contr +: 028235 iicd_write_eep_loop: +0x660d 028236 call iicd_eep_transparency +0x660e 028238 fetcht 2 ,mem_regb +0x660f 028239 fetch 2 ,mem_contr +0x6610 028240 copy pdata ,rega +0x6611 028241 fetch 2 ,mem_pdatatemp +0x6612 028243 call iicd_write_eep +0x6613 028245 fetch 2 ,mem_regb +0x6614 028246 fetcht 2 ,mem_contr +0x6615 028247 iadd temp ,temp +0x6616 028248 storet 2 ,mem_contr +0x6617 028249 fetcht 2 ,mem_pdatatemp +0x6618 028250 iadd temp ,temp +0x6619 028251 storet 2 ,mem_pdatatemp +0x661a 028252 fetch 2 ,mem_temp +0x661b 028253 nbranch iicd_write_eep_loop ,blank +0x661c 028254 rtn +: 028262 iicd_eep_transparency: +0x661d 028263 bpatchx patch32_3 ,mem_patch32 +0x661e 028264 fetch 1 ,mem_eeprom_block_size +0x661f 028265 increase -1 ,pdata +0x6620 028266 fetcht 2 ,mem_pdatatemp +0x6621 028267 ior temp ,pdata +0x6622 028268 increase 1 ,pdata +0x6623 028269 store 3 ,mem_regc +0x6624 028271 fetch 2 ,mem_temp +0x6625 028272 iadd temp ,pdata +0x6626 028274 fetcht 3 ,mem_regc +0x6627 028275 isub temp ,pdata +0x6628 028276 nbranch iicd_eep_deal_short_packet ,positive +0x6629 028277 store 2 ,mem_temp +0x662a 028278 fetch 3 ,mem_regc +0x662b 028279 fetcht 2 ,mem_pdatatemp +0x662c 028280 isub temp ,pdata +0x662d 028281 store 2 ,mem_regb +0x662e 028282 rtn +: 028283 iicd_eep_deal_short_packet: +0x662f 028284 fetch 2 ,mem_temp +0x6630 028285 store 2 ,mem_regb +0x6631 028286 setarg 0 +0x6632 028287 store 2 ,mem_temp +0x6633 028288 rtn +: 028290 iicd_write_eep_size_2k: +0x6634 028291 increase 2 ,temp +0x6635 028292 hstoret 2 ,core_iicd_txlen +0x6636 028293 increase -2 ,rega +0x6637 028294 ifetcht 3 ,rega +0x6638 028295 copy temp ,regb +0x6639 028296 arg 0xa0 ,temp +0x663a 028297 istoret 1 ,rega +0x663b 028299 istore 1 ,contw +0x663c 028300 branch iicd_write_eep_common +: 028303 iicd_write_eep: +0x663d 028304 copy pdata ,regb +0x663e 028305 bpatchx patch32_4 ,mem_patch32 +0x663f 028306 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +0x6640 028307 copy regb ,pdata +0x6641 028308 increase 3 ,temp +0x6642 028309 hstoret 2 ,core_iicd_txlen +0x6643 028310 increase -3 ,rega +0x6644 028311 ifetcht 3 ,rega +0x6645 028312 copy temp ,regb +0x6646 028313 arg 0xa0 ,temp +0x6647 028314 istoret 1 ,rega +0x6648 028315 byteswap pdata ,pdata +0x6649 028316 istore 2 ,contw +: 028317 iicd_write_eep_common: +0x664a 028318 deposit rega +0x664b 028319 hstore 2 ,core_iicd_txaddr +0x664c 028320 setarg 0 +0x664d 028321 hstore 2 ,core_iicd_rxlen +0x664e 028322 jam 1 ,core_iicd_ctrl +0x664f 028323 jam iicd_start ,core_misc_ctrl +0x6650 028324 call wait_iicd_done +0x6651 028325 copy regb ,pdata +0x6652 028326 istore 3 ,rega +: 028328 iic_check_eeprom_standby: +0x6653 028329 bpatchx patch32_5 ,mem_patch32 +0x6654 028330 jam 0 ,mem_iicd_tbuf + 3 +: 028331 iic_check_eeprom_standby_wait: +0x6655 028332 setarg 1 +0x6656 028333 hstore 2 ,core_iicd_txlen +0x6657 028334 jam 0xa0 ,mem_iicd_tbuf +0x6658 028335 setarg mem_iicd_tbuf +0x6659 028336 hstore 2 ,core_iicd_txaddr +0x665a 028337 setarg 0 +0x665b 028338 hstore 2 ,core_iicd_rxlen +0x665c 028339 hstore 2 ,core_iicd_rxaddr +0x665d 028340 setarg 3 +0x665e 028341 hstore 1 ,core_iicd_ctrl +0x665f 028342 jam iicd_start ,core_misc_ctrl +0x6660 028343 call wait_iicd_done +0x6661 028344 hfetch 1 ,core_dma_status +0x6662 028345 rtnbit0 iicd_ack +0x6663 028346 nop 1500 +0x6664 028347 fetch 1 ,mem_iicd_tbuf + 3 +0x6665 028348 increase 1 ,pdata +0x6666 028349 store 1 ,mem_iicd_tbuf + 3 +0x6667 028350 sub pdata ,40 ,null +0x6668 028351 nrtn positive +0x6669 028352 branch iic_check_eeprom_standby_wait +: 028356 otp_enable_chgpump: +0x666a 028357 jam 0x70 ,rfen_chgpump +0x666b 028358 nop param_chgpump_delay +0x666c 028359 rtn +: 028361 otp_disable_chgpump: +0x666d 028362 jam 0x30 ,rfen_chgpump +0x666e 028363 rtn +: 028365 otp_set_addr: +0x666f 028366 lshift3 pdata ,pdata +0x6670 028367 hstore 2 ,core_otp_addr +0x6671 028368 jam 0 ,core_otpd_ctrl +0x6672 028369 rtn +: 028372 otp_write: +0x6673 028373 call otp_set_addr +0x6674 028374 call otp_ce +: 028375 otp_program: +0x6675 028376 ifetcht 1 ,rega +0x6676 028377 increase 1 ,rega +0x6677 028378 force 0 ,queue +: 028379 otp_program_bit: +0x6678 028380 qisolate0 temp +0x6679 028381 branch otp_skip_0 ,true +0x667a 028382 hfetch 1 ,core_otp_din +0x667b 028383 set1 6 ,pdata +0x667c 028384 set1 7 ,pdata +0x667d 028385 hstore 1 ,core_otp_din +0x667e 028386 jam 0x02 ,core_otp_ctrl +0x667f 028387 jam 0x82 ,core_otp_ctrl +0x6680 028388 set0 7 ,pdata +0x6681 028389 hstore 1 ,core_otp_din +0x6682 028390 jam 0x8a ,core_otp_ctrl +0x6683 028391 nop 11 +0x6684 028392 jam 0xca ,core_otp_ctrl +0x6685 028393 nop 33 +0x6686 028394 jam 0x4a ,core_otp_ctrl +0x6687 028395 nop 44 +0x6688 028396 jam 0xca ,core_otp_ctrl +0x6689 028397 nop 22 +0x668a 028398 jam 0x8a ,core_otp_ctrl +0x668b 028399 nop 33 +0x668c 028400 jam 0x82 ,core_otp_ctrl +0x668d 028401 nop 1 +0x668e 028402 jam 0x92 ,core_otp_ctrl +0x668f 028403 nop 10 +0x6690 028404 jam 0xb2 ,core_otp_ctrl +0x6691 028405 hfetch 1 ,core_otp_rdata +0x6692 028406 jam 0x92 ,core_otp_ctrl +0x6693 028407 nop 1 +0x6694 028408 jam 0x82 ,core_otp_ctrl +0x6695 028409 qisolate0 pdata +0x6696 028410 branch otp_program_bit ,true +: 028411 otp_skip_0: +0x6697 028412 hfetch 2 ,core_otp_addr +0x6698 028413 increase 1 ,pdata +0x6699 028414 hstore 2 ,core_otp_addr +0x669a 028415 increase 1 ,queue +0x669b 028416 compare 8 ,queue ,0xf +0x669c 028417 nbranch otp_program_bit ,true +0x669d 028418 loop otp_program +0x669e 028419 jam 0x83 ,core_otp_ctrl +0x669f 028420 rtn +: 028422 otp_ce: +0x66a0 028423 jam 0x82 ,core_otp_ctrl +0x66a1 028424 nop 12 +0x66a2 028425 jam 0x80 ,core_otp_ctrl +0x66a3 028426 jam 0x82 ,core_otp_ctrl +0x66a4 028427 nop 150 +0x66a5 028428 rtn +: 028431 otpd_read_init: +0x66a6 028432 call otp_ce +0x66a7 028433 jam 0xa2 ,core_otp_ctrl +0x66a8 028434 deposit rega +0x66a9 028435 hstore 2 ,core_otpd_addr +0x66aa 028436 set1 11 ,temp +0x66ab 028437 isolate0 15 ,pdata +0x66ac 028438 setflag true ,15 ,temp +0x66ad 028439 hstoret 2 ,core_otpd_len +0x66ae 028440 jam otpd_start ,core_misc_ctrl +0x66af 028441 rtn +: 028443 otpd_wait_end: +0x66b0 028444 hfetch 1 ,core_dma_status +0x66b1 028445 bbit0 otpd_done ,otpd_wait_end +0x66b2 028446 rtn +: 028449 otpd_read_data: +0x66b3 028450 call otp_set_addr +0x66b4 028451 call otpd_read_init +0x66b5 028452 call otpd_wait_end +0x66b6 028453 jam 0x83 ,core_otp_ctrl +0x66b7 028454 rtn +: 028459 otpd_read_code: +0x66b8 028460 hfetch 2 ,core_current_otp_addr +0x66b9 028461 hstore 2 ,core_otp_addr +0x66ba 028462 call otpd_read_init +0x66bb 028463 arg otpd_done ,queue +0x66bc 028464 call decrypt_code +0x66bd 028465 call otpd_wait_end +0x66be 028466 isolate1 otpd_crcok ,pdata +0x66bf 028467 call set_ucode_status +0x66c0 028468 jam 0x83 ,core_otp_ctrl +0x66c1 028469 rtn +: 028472 uartd_prepare_tx: +0x66c2 028473 hfetch 2 ,core_uart_twptr +0x66c3 028474 iforce contwu +0x66c4 028475 rtn +: 028477 uartd_send: +0x66c5 028478 deposit contwu +0x66c6 028479 hstore 2 ,core_uart_twptr +0x66c7 028480 rtn +: 028482 uartd_rxdone: +0x66c8 028483 deposit contru +0x66c9 028484 hstore 2 ,core_uart_rrptr +0x66ca 028485 rtn +: 028487 uartd_prepare_rx: +0x66cb 028488 hfetch 2 ,core_uart_rrptr +0x66cc 028489 copy pdata ,contru +0x66cd 028490 rtn +: 028492 uart_set_baud_by_mem: +0x66ce 028493 fetch uart_baud_len ,mem_baud +0x66cf 028494 hstore uart_baud_len ,core_uart_baud +0x66d0 028495 rtn +: 028497 uart_copy_tx_bytes_fast: +0x66d1 028498 deposit loopcnt +0x66d2 028499 rtn blank +: 028500 uart_copy_tx_bytes_fast_loop: +0x66d3 028501 increase -8 ,loopcnt +0x66d4 028502 call uart_tx_8_bytes ,positive +0x66d5 028503 rtn zero +0x66d6 028504 branch uart_copy_tx_bytes_fast_loop ,positive +0x66d7 028505 increase 8 ,loopcnt +: 028506 uart_copy_tx_bytes_fast_loop_four: +0x66d8 028507 increase -4 ,loopcnt +0x66d9 028508 call uart_tx_4_bytes ,positive +0x66da 028509 rtn zero +0x66db 028510 branch uart_copy_tx_bytes_fast_loop_four ,positive +0x66dc 028511 increase 4 ,loopcnt +0x66dd 028512 branch uart_copy_tx_bytes +: 028514 uart_tx_8_bytes: +0x66de 028515 ifetch 8 ,contr +0x66df 028516 istore 8 ,contwu +0x66e0 028517 rtn +: 028519 uart_tx_4_bytes: +0x66e1 028520 ifetch 4 ,contr +0x66e2 028521 istore 4 ,contwu +0x66e3 028522 rtn +: 028524 uart_copy_tx_bytes: +0x66e4 028525 deposit loopcnt +0x66e5 028526 rtn blank +: 028527 uart_copy_tx_bytes_loop: +0x66e6 028528 ifetch 1 ,contr +0x66e7 028529 istore 1 ,contwu +0x66e8 028530 loop uart_copy_tx_bytes_loop +0x66e9 028531 rtn +: 028533 uart_copy_rx_bytes_fast: +0x66ea 028534 deposit loopcnt +0x66eb 028535 rtn blank +: 028536 uart_copy_rx_bytes_fast_loop: +0x66ec 028537 increase -8 ,loopcnt +0x66ed 028538 call uart_rx_8_bytes ,positive +0x66ee 028539 rtn zero +0x66ef 028540 branch uart_copy_rx_bytes_fast_loop ,positive +0x66f0 028541 increase 8 ,loopcnt +: 028542 uart_copy_rx_bytes_fast_loop_four: +0x66f1 028543 increase -4 ,loopcnt +0x66f2 028544 call uart_rx_4_bytes ,positive +0x66f3 028545 rtn zero +0x66f4 028546 branch uart_copy_rx_bytes_fast_loop_four ,positive +0x66f5 028547 increase 4 ,loopcnt +0x66f6 028548 branch uart_copy_rx_bytes +: 028550 uart_rx_8_bytes: +0x66f7 028551 ifetch 8 ,contru +0x66f8 028552 istore 8 ,contw +0x66f9 028553 rtn +: 028555 uart_rx_4_bytes: +0x66fa 028556 ifetch 4 ,contru +0x66fb 028557 istore 4 ,contw +0x66fc 028558 rtn +: 028561 uart_copy_rx_bytes: +0x66fd 028562 deposit loopcnt +0x66fe 028563 rtn blank +: 028564 uart_copy_rx_bytes_loop: +0x66ff 028565 ifetch 1 ,contru +0x6700 028566 istore 1 ,contw +0x6701 028567 loop uart_copy_rx_bytes_loop +0x6702 028568 rtn +: 028571 uart_copy_rx2tx: +0x6703 028572 deposit loopcnt +0x6704 028573 rtn blank +: 028574 uart_copy_rx2tx_loop: +0x6705 028575 ifetch 1 ,contru +0x6706 028576 istore 1 ,contwu +0x6707 028577 loop uart_copy_rx2tx_loop +0x6708 028578 rtn +: 028583 app_store_nvram_event: +0x6709 028584 jam bt_evt_store_nvram ,mem_fifo_temp +0x670a 028585 branch ui_ipc_send_event +: 028587 check_51cmd_store_reconn_info: +: 028588 check_51cmd_update_device_record: +0x670b 028589 bpatchx patch32_6 ,mem_patch32 +0x670c 028590 fetch 1 ,mem_nv_data_number +0x670d 028591 rtn blank +0x670e 028592 call check_nvram +0x670f 028593 call init_device_list ,zero +0x6710 028594 call nvram_find_addr_from_bd_list +: 028595 write_device_record: +0x6711 028596 fetch 1 ,mem_nv_data_number +0x6712 028597 icopy regc +0x6713 028598 fetcht 2 ,mem_nv_data_ptr +0x6714 028599 storet 2 ,mem_list_item_ptr +: 028600 write_device_loop_find: +0x6715 028601 copy regc ,pdata +0x6716 028602 branch app_store_nvram_event ,blank +0x6717 028603 increase -1 ,regc +0x6718 028604 copy temp ,rega +0x6719 028605 ifetch 1 ,rega +0x671a 028606 fetcht 1 ,mem_select_list_item +0x671b 028607 isub temp ,null +0x671c 028608 call set_index_finded_device ,zero +0x671d 028609 branch write_device_loop_find0 ,positive +0x671e 028610 ifetch 1 ,rega +0x671f 028611 increase 1 ,pdata +0x6720 028612 istore 1 ,rega +: 028613 write_device_loop_find0: +0x6721 028614 fetcht 2 ,mem_list_item_ptr +0x6722 028615 increase nv_data_len ,temp +0x6723 028616 storet 2 ,mem_list_item_ptr +0x6724 028617 branch write_device_loop_find +: 028619 set_index_finded_device: +0x6725 028620 setarg 0 +0x6726 028621 istore 1 ,rega +0x6727 028622 fetch 1 ,mem_temp_reconn_record +0x6728 028623 istore 1 ,contw +0x6729 028624 bne rec_3_mode ,set_index_finded_device_ble_mode +0x672a 028625 arg mem_link_key ,regb +: 028626 set_index_find_device_master_addr: +0x672b 028627 ifetch 6 ,contr +0x672c 028628 istore 8 ,contw +0x672d 028629 setarg 0 +0x672e 028630 istore 8 ,contw +0x672f 028631 copy regb ,contr +: 028632 store_rec_data_common: +0x6730 028633 call memcpy16 +0x6731 028634 force 1 ,null +0x6732 028635 rtn +: 028637 set_index_finded_device_ble_mode: +0x6733 028638 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +0x6734 028639 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +0x6735 028640 arg mem_le_ltk ,regb +0x6736 028641 branch set_index_find_device_master_addr +: 028643 set_index_finded_device_irk: +0x6737 028644 arg mem_le_irk ,contr +0x6738 028645 call memcpy16 +: 028646 store_ble_rec_data_common: +0x6739 028647 arg mem_le_ltk ,contr +0x673a 028648 branch store_rec_data_common +: 028650 set_index_finded_device_ediv: +0x673b 028651 arg mem_le_rand ,contr +0x673c 028652 call memcpy16 +0x673d 028653 branch store_ble_rec_data_common +: 028656 nvram_find_addr_from_bd_list: +0x673e 028657 call disable_user +0x673f 028658 fetch 1 ,mem_nv_data_number +0x6740 028659 rtn blank +0x6741 028660 fetch 2 ,mem_ui_state_map +0x6742 028661 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode +: 028662 find_addr_from_bd_list_ble_mode: +0x6743 028663 bpatchx patch32_7 ,mem_patch32 +0x6744 028664 fetch 1 ,mem_le_conn_peer_addr_type +0x6745 028665 beq master_public_addr ,find_addr_from_bd_list_static_addr +0x6746 028666 fetch 1 ,mem_le_plap + 5 +0x6747 028667 compare 0xc0 ,pdata ,0xc0 +0x6748 028668 branch find_addr_from_bd_list_static_addr ,true +0x6749 028669 compare 0x40 ,pdata ,0xc0 +0x674a 028670 branch find_addr_from_bd_list_random_addr ,true +0x674b 028671 compare 0x00 ,pdata ,0xc0 +0x674c 028672 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true +: 028673 find_addr_from_bd_list_static_addr: +0x674d 028674 jam rec_4_mode_static_address ,mem_temp_reconn_record +0x674e 028675 fetch 6 ,mem_le_plap +0x674f 028676 branch find_addr_from_bd_list_common +: 028678 find_addr_from_bd_list_random_non_resolvable_private_address: +0x6750 028679 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +0x6751 028680 branch find_addr_from_bd_list_common +: 028683 find_addr_from_bd_list_random_addr: +0x6752 028684 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +0x6753 028685 branch find_addr_from_bd_list_common +: 028688 find_addr_from_bd_list_spp_mode: +0x6754 028689 bpatchx patch33_0 ,mem_patch33 +0x6755 028690 jam rec_3_mode ,mem_temp_reconn_record +0x6756 028691 fetch 6 ,mem_plap +: 028692 find_addr_from_bd_list_common: +0x6757 028693 store 6 ,mem_temp_reconn_record + 1 +0x6758 028694 fetch 2 ,mem_nv_data_ptr +0x6759 028695 ifetcht 1 ,pdata +0x675a 028696 pincrease 1 +0x675b 028697 store 2 ,mem_list_item_ptr +0x675c 028698 storet 1 ,mem_select_list_item +0x675d 028699 fetch 1 ,mem_nv_data_number +0x675e 028700 icopy regc +: 028701 nvram_find_addr_from_list: +0x675f 028702 fetch 2 ,mem_list_item_ptr +0x6760 028703 copy pdata ,rega +0x6761 028704 call nvram_find_addr_from_list_compare +0x6762 028705 rtn user +0x6763 028706 fetcht 2 ,mem_list_item_ptr +0x6764 028707 increase nv_data_len ,temp +0x6765 028708 storet 2 ,mem_list_item_ptr +0x6766 028709 increase -1 ,temp +0x6767 028710 ifetch 1 ,temp +0x6768 028711 store 1 ,mem_select_list_item +0x6769 028712 increase -1 ,regc +0x676a 028713 nbranch nvram_find_addr_from_list ,zero +0x676b 028714 fetch 1 ,mem_nv_data_number +0x676c 028715 pincrease decreased_one +0x676d 028716 store 1 ,mem_select_list_item +0x676e 028717 rtn +: 028718 nvram_find_addr_from_list_compare: +0x676f 028719 fetch 1 ,mem_temp_reconn_record +0x6770 028720 bne rec_3_mode ,find_addr_from_list_compare_ble_mode +: 028721 find_master_addr_from_list_compare: +0x6771 028722 arg mem_temp_reconn_record ,regb +0x6772 028723 arg 7 ,loopcnt +0x6773 028724 call string_compare +0x6774 028725 branch enable_user ,zero +0x6775 028726 rtn +: 028728 find_addr_from_list_compare_ble_mode: +0x6776 028729 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +0x6777 028730 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +0x6778 028731 branch find_master_addr_from_list_compare +: 028733 find_irk_form_list_compare: +0x6779 028734 ifetcht 1 ,rega +0x677a 028735 isub temp ,null +0x677b 028736 nrtn zero +0x677c 028737 arg mem_le_prand ,contw +0x677d 028738 arg 16 ,loopcnt +0x677e 028739 call clear_mem +0x677f 028740 fetch 3 ,mem_le_plap + 3 +0x6780 028741 store 3 ,mem_le_prand +0x6781 028742 call genernate_master_macaddress +0x6782 028743 fetch 2 ,mem_le_aes_128 + 13 +0x6783 028744 byteswap pdata ,pdata +0x6784 028745 lshift8 pdata ,temp +0x6785 028746 ifetch 1 ,contr +0x6786 028747 iadd temp ,pdata +0x6787 028748 fetcht 3 ,mem_le_plap +0x6788 028749 isub temp ,null +0x6789 028750 branch enable_user ,zero +0x678a 028751 rtn +: 028754 genernate_master_macaddress: +0x678b 028755 arg mem_le_prand ,contr +0x678c 028756 call load_data128 +0x678d 028758 ifetch 1 ,rega +0x678e 028759 call load_regext +0x678f 028760 force 0x38 ,aes_ctrl +0x6790 028761 force 0x0 ,aes_ctrl +0x6791 028762 call wait_aes +0x6792 028763 arg mem_le_aes_128 ,contw +0x6793 028764 branch store_aes_result +: 028766 find_ediv_form_list_compare: +0x6794 028767 ifetcht 1 ,rega +0x6795 028768 isub temp ,null +0x6796 028769 nrtn zero +0x6797 028770 copy contr ,rega +0x6798 028771 add contr ,8 ,regc +0x6799 028772 arg mem_le_rand ,regb +0x679a 028773 arg 8 ,loopcnt +0x679b 028774 call string_compare +0x679c 028775 branch enable_user ,zero +0x679d 028776 copy regc ,rega +0x679e 028777 arg mem_le_irk ,regb +0x679f 028778 arg 8 ,loopcnt +0x67a0 028779 call string_compare +0x67a1 028780 branch enable_user ,zero +0x67a2 028781 rtn +: 028783 check_nvram: +0x67a3 028784 fetch 2 ,mem_nv_data_ptr +0x67a4 028785 ifetcht 1 ,pdata +0x67a5 028786 pincrease nv_data_len +0x67a6 028787 ifetch 1 ,pdata +0x67a7 028788 isub temp ,null +0x67a8 028789 rtn +: 028791 init_device_list: +0x67a9 028792 fetch 1 ,mem_nv_data_number +0x67aa 028793 icopy loopcnt +0x67ab 028794 fetcht 2 ,mem_nv_data_ptr +0x67ac 028795 setarg 0 +: 028796 init_device_list_loop: +0x67ad 028797 istore 1 ,temp +0x67ae 028798 increase nv_data_len ,temp +0x67af 028799 pincrease 1 +0x67b0 028800 loop init_device_list_loop +0x67b1 028801 rtn +: 028803 load_device_list: +0x67b2 028804 bpatchx patch33_1 ,mem_patch33 +0x67b3 028805 call nvram_find_addr_from_bd_list +0x67b4 028806 fetch 1 ,mem_state +0x67b5 028807 setflag user ,state_combkey ,pdata +0x67b6 028808 store 1 ,mem_state +0x67b7 028809 nbranch clear_key_exists ,user +0x67b8 028810 add rega ,10 ,contr +0x67b9 028812 arg mem_link_key ,contw +0x67ba 028813 call memcpy16 +0x67bb 028814 branch check_link_key_load +: 028815 clear_key_exists: +0x67bc 028816 jam 0 ,mem_link_key_exists +0x67bd 028817 rtn +: 028819 load_device_list_mode_4: +0x67be 028820 fetch 9 ,mem_le_ediv +0x67bf 028821 branch clear_ltk_exists ,blank +0x67c0 028822 call nvram_find_addr_from_bd_list +0x67c1 028823 nbranch clear_ltk_exists ,user +0x67c2 028824 fetch 2 ,mem_list_item_ptr +0x67c3 028825 add pdata ,1 ,contr +0x67c4 028826 arg mem_le_irk ,contw +0x67c5 028827 call memcpy16 +0x67c6 028828 arg mem_le_ltk ,contw +0x67c7 028829 call memcpy16 +0x67c8 028830 jam 1 ,mem_ltk_exists +0x67c9 028831 rtn +: 028833 clear_ltk_exists: +0x67ca 028834 jam 0 ,mem_ltk_exists +0x67cb 028835 rtn +: 028838 eeprom_store_le_reconn_info: +0x67cc 028839 fetch 6 ,mem_le_plap +0x67cd 028840 store 6 ,mem_temp_lap +0x67ce 028841 jam rec_4_mode ,mem_record_bt_mode +0x67cf 028842 branch eeprom_store_reconn_info +: 028843 eeprom_store_bd_reconn_info: +0x67d0 028844 fetch 6 ,mem_plap +0x67d1 028845 store 6 ,mem_temp_lap +0x67d2 028846 jam rec_3_mode ,mem_record_bt_mode +: 028847 eeprom_store_reconn_info: +0x67d3 028848 fetch 1 ,mem_device_option +0x67d4 028849 beq dvc_op_module ,check_51cmd_update_device_record +0x67d5 028850 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr +0x67d6 028851 rtn +: 028854 check_link_key_load: +0x67d7 028855 fetch 8 ,mem_link_key +0x67d8 028856 fetcht 8 ,mem_link_key + 8 +0x67d9 028857 ior temp ,pdata +0x67da 028858 rtn blank +0x67db 028859 jam 1 ,mem_link_key_exists +0x67dc 028860 rtn +: 028867 gpio_set_wake_by_current_state: +0x67dd 028868 bpatchx patch33_2 ,mem_patch33 +0x67de 028869 set1 7 ,temp +0x67df 028870 call gpio_get_bit +0x67e0 028871 nsetflag true ,7 ,temp +: 028876 gpio_set_wake: +0x67e1 028877 bpatchx patch33_3 ,mem_patch33 +0x67e2 028878 sub temp ,ui_button_gpio_disable ,null +0x67e3 028879 rtn zero +0x67e4 028880 isolate0 7 ,temp +0x67e5 028881 and temp ,0x1f ,queue +0x67e6 028882 fetch 4 ,mem_gpio_wakeup_low +0x67e7 028883 qsetflag true ,pdata +0x67e8 028884 store 4 ,mem_gpio_wakeup_low +0x67e9 028885 fetch 4 ,mem_gpio_wakeup_high +0x67ea 028886 nqsetflag true ,pdata +0x67eb 028887 store 4 ,mem_gpio_wakeup_high +0x67ec 028888 rtn +: 028891 gpio_clr_wake: +0x67ed 028892 bpatchx patch33_4 ,mem_patch33 +0x67ee 028893 sub temp ,ui_button_gpio_disable ,null +0x67ef 028894 rtn zero +0x67f0 028895 isolate0 7 ,temp +0x67f1 028896 and temp ,0x1f ,queue +0x67f2 028897 fetch 4 ,mem_gpio_wakeup_low +0x67f3 028898 qset0 pdata +0x67f4 028899 store 4 ,mem_gpio_wakeup_low +0x67f5 028900 fetch 4 ,mem_gpio_wakeup_high +0x67f6 028901 qset0 pdata +0x67f7 028902 store 4 ,mem_gpio_wakeup_high +0x67f8 028903 rtn +: 028906 gpio_config_input_nowake: +0x67f9 028907 call gpio_clr_wake +0x67fa 028908 branch gpio_config_input_without_wake +: 028911 gpio_config_input: +0x67fb 028912 sub temp ,ui_button_gpio_disable ,null +0x67fc 028913 rtn zero +0x67fd 028914 ncall gpio_set_wake ,wake +: 028916 gpio_config_input_without_wake: +0x67fe 028917 arg core_gpio_pd0 ,contw +0x67ff 028918 call gpio_set_bit +0x6800 028919 setflip gpio_active_bit ,temp +0x6801 028920 arg core_gpio_pu0 ,contw +0x6802 028921 call gpio_set_bit +0x6803 028922 set0 gpio_active_bit ,temp +0x6804 028923 arg core_gpio_oe0 ,contw +0x6805 028924 branch gpio_set_bit +: 028927 gpio_set_high_impedance: +0x6806 028928 arg core_gpio_pd0 ,contw +0x6807 028929 call gpio_set_bit +0x6808 028930 set0 gpio_active_bit ,temp +0x6809 028931 arg core_gpio_pu0 ,contw +0x680a 028932 call gpio_set_bit +0x680b 028933 set0 gpio_active_bit ,temp +0x680c 028934 arg core_gpio_oe0 ,contw +0x680d 028935 branch gpio_set_bit +: 028939 gpio_config_output: +0x680e 028940 sub temp ,ui_button_gpio_disable ,null +0x680f 028941 rtn zero +0x6810 028942 setflip gpio_active_bit ,temp +0x6811 028943 call gpio_out +: 028944 gpio_config_output0: +0x6812 028945 set1 gpio_active_bit ,temp +0x6813 028946 arg core_gpio_oe0 ,contw +0x6814 028947 branch gpio_set_bit +: 028949 gpio_common: +0x6815 028950 and temp ,0x07 ,queue +0x6816 028951 rshift3 temp ,pdata +0x6817 028952 and_into 3 ,pdata +0x6818 028953 iadd contw ,contw +0x6819 028954 ifetch 1 ,contw +0x681a 028955 rtn +: 028957 gpio_check_active: +0x681b 028958 arg core_gpio_out0 ,contw +0x681c 028959 branch get_bit_common +: 028963 gpio_get_bit: +0x681d 028964 arg core_gpio_in ,contw +: 028965 get_bit_common: +0x681e 028966 call gpio_common +0x681f 028967 isolate1 gpio_active_bit ,temp +0x6820 028968 branch gpio_get_bit_reverse ,true +0x6821 028969 qisolate0 pdata +0x6822 028970 rtn +: 028971 gpio_get_bit_reverse: +0x6823 028972 qisolate1 pdata +0x6824 028973 rtn +: 028975 gpio_out_inactive: +0x6825 028976 sub temp ,ui_button_gpio_disable ,null +0x6826 028977 rtn zero +0x6827 028978 isolate1 7 ,null +0x6828 028979 branch gpio_out_flag +: 028981 gpio_out_active: +0x6829 028982 sub temp ,ui_button_gpio_disable ,null +0x682a 028983 rtn zero +0x682b 028984 isolate0 7 ,null +: 028987 gpio_out_flag: +0x682c 028988 setarg 0 +0x682d 028989 nsetflag true ,gpio_active_bit ,pdata +0x682e 028990 ixor temp ,temp +: 028993 gpio_out: +0x682f 028994 arg core_gpio_out0 ,contw +: 028997 gpio_set_bit: +0x6830 028998 call gpio_common +0x6831 028999 isolate1 gpio_active_bit ,temp +0x6832 029000 qsetflag true ,pdata +0x6833 029001 istore 1 ,contw +0x6834 029002 rtn +: 029004 gpio_set_before_lpm_common: +0x6835 029005 arg -1 ,rega +0x6836 029006 hfetch 1 ,core_gpio_sel1 +0x6837 029007 compare 0x02 ,pdata ,0x03 +0x6838 029008 call neglact4_from_23_pin ,true +0x6839 029010 compare 0x01 ,pdata ,0x03 +0x683a 029011 call neglact2_form_25_pin ,true +0x683b 029013 compare 0x03 ,pdata ,0x03 +0x683c 029014 call neglact2_form_25_pin ,true +0x683d 029016 isolate1 2 ,pdata +0x683e 029017 call neglect2_from_6_pin ,true +0x683f 029019 isolate1 3 ,pdata +0x6840 029020 call neglect4_from_9_pin ,true +0x6841 029022 isolate1 4 ,pdata +0x6842 029023 call neglact2_form_30_pin ,true +0x6843 029025 isolate1 6 ,pdata +0x6844 029026 nsetflag true ,04 ,rega +0x6845 029028 isolate1 7 ,pdata +0x6846 029029 nsetflag true ,05 ,rega +0x6847 029031 hfetch 1 ,core_gpio_sel2 +0x6848 029032 isolate1 0 ,pdata +0x6849 029033 nsetflag true ,27 ,rega +0x684a 029034 isolate1 1 ,pdata +0x684b 029035 nsetflag true ,28 ,rega +0x684c 029036 isolate1 2 ,pdata +0x684d 029037 nsetflag true ,03 ,rega +0x684e 029038 isolate1 3 ,pdata +0x684f 029039 nsetflag true ,08 ,rega +0x6850 029040 isolate1 4 ,pdata +0x6851 029041 nsetflag true ,20 ,rega +0x6852 029042 isolate1 5 ,pdata +0x6853 029043 nsetflag true ,21 ,rega +0x6854 029044 isolate1 6 ,pdata +0x6855 029045 nsetflag true ,22 ,rega +0x6856 029046 isolate1 7 ,pdata +0x6857 029047 nsetflag true ,23 ,rega +0x6858 029049 hfetch 1 ,core_gpio_sel +0x6859 029050 isolate1 0 ,pdata +0x685a 029051 nsetflag true ,05 ,rega +0x685b 029052 isolate1 1 ,pdata +0x685c 029053 nsetflag true ,06 ,rega +0x685d 029054 isolate1 2 ,pdata +0x685e 029055 nsetflag true ,07 ,rega +0x685f 029056 isolate1 3 ,pdata +0x6860 029057 nsetflag true ,18 ,rega +0x6861 029058 isolate1 4 ,pdata +0x6862 029059 nsetflag true ,19 ,rega +0x6863 029060 isolate1 5 ,pdata +0x6864 029061 nsetflag true ,20 ,rega +0x6865 029062 isolate1 6 ,pdata +0x6866 029063 nsetflag true ,21 ,rega +0x6867 029064 isolate1 7 ,pdata +0x6868 029065 nsetflag true ,22 ,rega +0x6869 029067 hfetch 1 ,core_uart_ctrl +0x686a 029068 isolate1 4 ,pdata +0x686b 029069 call neglact2_form_2_pin ,true +0x686c 029070 bpatchx patch33_5 ,mem_patch33 +0x686d 029072 hfetch 4 ,core_gpio_pu0 +0x686e 029073 hfetcht 4 ,core_gpio_pd0 +0x686f 029074 ior temp ,pdata +0x6870 029075 invert pdata ,pdata +0x6871 029076 iand rega ,pdata +0x6872 029078 hstore 4 ,core_gpio_oe0 +0x6873 029079 rtn +: 029082 neglect2_from_6_pin: +0x6874 029083 arg 6 ,queue +0x6875 029084 branch neglect_2_pin +: 029085 neglect4_from_9_pin: +0x6876 029086 arg 9 ,queue +0x6877 029087 branch neglact_4_pin +: 029088 neglact4_from_23_pin: +0x6878 029089 arg 23 ,queue +0x6879 029090 branch neglact_4_pin +: 029091 neglact2_form_25_pin: +0x687a 029092 arg 25 ,queue +0x687b 029093 branch neglect_2_pin +: 029094 neglact2_form_30_pin: +0x687c 029095 arg 30 ,queue +0x687d 029096 branch neglect_2_pin +: 029097 neglact2_form_2_pin: +0x687e 029098 arg 2 ,queue +0x687f 029099 branch neglect_2_pin +: 029100 neglact_1_pin: +0x6880 029101 arg 1 ,loopcnt +0x6881 029102 branch neglect_pin_loop +: 029103 neglact_4_pin: +0x6882 029104 arg 4 ,loopcnt +0x6883 029105 branch neglect_pin_loop +: 029106 neglect_2_pin: +0x6884 029107 arg 2 ,loopcnt +: 029108 neglect_pin_loop: +0x6885 029109 qset0 rega +0x6886 029110 increase 1 ,queue +0x6887 029111 loop neglect_pin_loop +0x6888 029112 rtn +: 029120 gpio_cfg_uart_tx_output: +0x6889 029121 call gpio_uart2gpio +0x688a 029122 arg uart_wakeup_tx ,temp +0x688b 029123 branch gpio_config_output +: 029125 gpio_pu_uart_tx: +0x688c 029126 call gpio_cfg_uart_tx_output +0x688d 029127 arg uart_wakeup_tx ,temp +0x688e 029128 branch gpio_out_inactive +: 029132 gpio_rx_config_input_with_pu: +0x688f 029133 call gpio_uart2gpio +0x6890 029134 hfetch 1 ,core_gpio_pu0 +0x6891 029135 set1 uart_wakeup_rx ,pdata +0x6892 029136 hstore 1 ,core_gpio_pu0 +0x6893 029137 arg uart_wakeup_rx ,temp +0x6894 029138 branch gpio_config_input +: 029140 gpio_uart2gpio: +0x6895 029141 hfetch 1 ,core_gpio_sel1 +0x6896 029142 and_into 0xfb ,pdata +0x6897 029143 hstore 1 ,core_gpio_sel1 +0x6898 029144 rtn +: 029146 gpio_check_uart_state: +0x6899 029147 hfetch 1 ,core_gpio_sel1 +0x689a 029148 isolate1 2 ,pdata +0x689b 029149 rtn +: 029151 load_chip_option: +0x689c 029152 call otp_enable_chgpump +0x689d 029153 setarg otp_chip_functions +0x689e 029154 arg mem_chip_functions ,rega +0x689f 029155 arg 0x02 ,temp +0x68a0 029156 call otpd_read_data +0x68a1 029157 branch otp_disable_chgpump +: 029160 load_adc_init: +0x68a2 029161 call otp_enable_chgpump +0x68a3 029162 setarg otp_adc_io_0_5v_addr +0x68a4 029163 arg mem_0_5_adc_io_data ,rega +0x68a5 029164 arg 14 ,temp +0x68a6 029165 call otpd_read_data +0x68a7 029166 branch otp_disable_chgpump +: 029170 adc_init_data: +0x68a8 029171 bpatchx patch33_6 ,mem_patch33 +0x68a9 029173 call load_adc_init +0x68aa 029175 fetch 1 ,mem_adc_config_flag +0x68ab 029176 beq adc_config_vinlpm ,adc_init_data_vinlpm +0x68ac 029177 beq adc_config_hvin ,adc_init_data_hvin +0x68ad 029178 beq adc_config_gpio ,adc_init_data_io +0x68ae 029179 rtn +: 029181 adc_init_data_vinlpm: +0x68af 029182 fetcht 2 ,mem_otp_adc_flag +0x68b0 029183 setarg otp_adc_flag +0x68b1 029184 isub temp ,null +0x68b2 029185 branch adc_check_data_vinlpm ,zero +0x68b3 029186 setarg 0x4dfa +0x68b4 029187 store 2 ,mem_3v_adc_vinlpm_data +0x68b5 029188 setarg 0x4894 +0x68b6 029189 store 2 ,mem_2v_adc_vinlpm_data +0x68b7 029190 branch set_vdd_reference_voltage_1v +: 029192 adc_check_data_vinlpm: +0x68b8 029193 fetch 2 ,mem_3v_adc_vinlpm_data +0x68b9 029194 nbranch adc_check_2v_vinlpm ,blank +0x68ba 029195 setarg 0x4dfa +0x68bb 029196 store 2 ,mem_3v_adc_vinlpm_data +: 029197 adc_check_2v_vinlpm: +0x68bc 029198 fetch 2 ,mem_2v_adc_vinlpm_data +0x68bd 029199 nbranch set_vdd_reference_voltage_1v ,blank +0x68be 029200 setarg 0x4894 +0x68bf 029201 store 2 ,mem_2v_adc_vinlpm_data +: 029202 set_vdd_reference_voltage_1v: +0x68c0 029203 setarg 100 +0x68c1 029204 store 2 ,mem_reference_voltage +0x68c2 029205 rtn +: 029207 adc_init_data_hvin: +0x68c3 029208 fetcht 2 ,mem_otp_adc_flag +0x68c4 029209 setarg otp_adc_flag +0x68c5 029210 isub temp ,null +0x68c6 029211 branch adc_check_data_hvin ,zero +0x68c7 029212 setarg 0x5932 +0x68c8 029213 store 2 ,mem_5v_adc_hvin_data +0x68c9 029214 setarg 0x4323 +0x68ca 029215 store 2 ,mem_1v_adc_hvin_data +0x68cb 029216 branch set_vdd_reference_voltage_4v +: 029218 adc_check_data_hvin: +0x68cc 029219 fetch 2 ,mem_5v_adc_hvin_data +0x68cd 029220 nbranch adc_check_1v_hvin ,blank +0x68ce 029221 setarg 0x5932 +0x68cf 029222 store 2 ,mem_5v_adc_hvin_data +: 029223 adc_check_1v_hvin: +0x68d0 029224 fetch 2 ,mem_1v_adc_hvin_data +0x68d1 029225 nbranch set_vdd_reference_voltage_4v ,blank +0x68d2 029226 setarg 0x4323 +0x68d3 029227 store 2 ,mem_1v_adc_hvin_data +: 029228 set_vdd_reference_voltage_4v: +0x68d4 029229 setarg 400 +0x68d5 029230 store 2 ,mem_reference_voltage +0x68d6 029231 rtn +: 029233 adc_init_data_io: +0x68d7 029234 fetcht 2 ,mem_otp_adc_flag +0x68d8 029235 setarg otp_adc_flag +0x68d9 029236 isub temp ,null +0x68da 029237 branch adc_check_data_io ,zero +0x68db 029238 setarg 0x6946 +0x68dc 029239 store 2 ,mem_1v_adc_io_data +0x68dd 029240 setarg 0x5377 +0x68de 029241 store 2 ,mem_0_5_adc_io_data +0x68df 029242 branch set_vdd_reference_voltage_0_5v +: 029244 adc_check_data_io: +0x68e0 029245 fetch 2 ,mem_1v_adc_io_data +0x68e1 029246 nbranch adc_check_0_5v_io ,blank +0x68e2 029247 setarg 0x6946 +0x68e3 029248 store 2 ,mem_1v_adc_io_data +: 029249 adc_check_0_5v_io: +0x68e4 029250 fetch 2 ,mem_0_5_adc_io_data +0x68e5 029251 nbranch set_vdd_reference_voltage_0_5v ,blank +0x68e6 029252 setarg 0x5377 +0x68e7 029253 store 2 ,mem_0_5_adc_io_data +: 029254 set_vdd_reference_voltage_0_5v: +0x68e8 029255 setarg 50 +0x68e9 029256 store 2 ,mem_reference_voltage +0x68ea 029257 rtn +: 029260 adc_set_mode: +0x68eb 029261 fetch 1 ,mem_adc_config_flag +0x68ec 029262 beq adc_config_vinlpm ,adc_check_vinlpm +0x68ed 029263 beq adc_config_hvin ,adc_check_hvin +0x68ee 029264 beq adc_config_gpio ,adc_check_gpio +0x68ef 029265 rtn +: 029266 adc_check_vinlpm: +0x68f0 029267 jam 0xbf ,rf_adc_mode +0x68f1 029268 branch read_adc +: 029269 adc_check_hvin: +0x68f2 029270 jam 0xaf ,rf_adc_mode +0x68f3 029271 branch read_adc +: 029272 adc_check_gpio: +0x68f4 029273 jam 0x8f ,rf_adc_mode +0x68f5 029274 fetch 1 ,mem_adc_channel +0x68f6 029275 hstore 1 ,rf_adc_ch +0x68f7 029276 branch read_adc +: 029277 read_adc: +0x68f8 029278 bpatchx patch33_7 ,mem_patch33 +0x68f9 029279 hfetch 1 ,core_uart_baud + 1 +0x68fa 029280 set1 7 ,pdata +0x68fb 029281 hstore 1 ,core_uart_baud + 1 +0x68fc 029282 hfetch 1 ,rf_adc_ch +0x68fd 029283 or_into 0x30 ,pdata +0x68fe 029284 hstore 1 ,rf_adc_ch +0x68ff 029285 jam 0x7c ,rfen_adc +0x6900 029286 jam 0xaa ,rf_adc_gc +0x6901 029287 nop 5000 +0x6902 029288 hfetcht 2 ,core_adc_sum +0x6903 029289 hfetch 1 ,core_uart_baud + 1 +0x6904 029290 set0 7 ,pdata +0x6905 029291 hstore 1 ,core_uart_baud + 1 +0x6906 029292 storet 2 ,mem_adc_current_value +0x6907 029293 rtn +: 029295 vdd_calculate_by_mode: +0x6908 029296 bpatchx patch34_0 ,mem_patch34 +0x6909 029297 fetch 1 ,mem_adc_config_flag +0x690a 029298 beq adc_config_vinlpm ,vdd_calculate_vinlpm +0x690b 029299 beq adc_config_hvin ,vdd_calculate_hvin +0x690c 029300 beq adc_config_gpio ,vdd_calculate_io +0x690d 029301 rtn +: 029303 vdd_calculate_vinlpm: +0x690e 029304 fetch 2 ,mem_3v_adc_vinlpm_data +0x690f 029305 fetcht 2 ,mem_2v_adc_vinlpm_data +0x6910 029306 arg 200 ,regc +0x6911 029307 branch vdd_calculate +: 029309 vdd_calculate_hvin: +0x6912 029310 fetch 2 ,mem_5v_adc_hvin_data +0x6913 029311 fetcht 2 ,mem_1v_adc_hvin_data +0x6914 029312 arg 100 ,regc +0x6915 029313 branch vdd_calculate +: 029315 vdd_calculate_io: +0x6916 029316 fetch 2 ,mem_1v_adc_io_data +0x6917 029317 fetcht 2 ,mem_0_5_adc_io_data +0x6918 029318 arg 50 ,regc +0x6919 029319 branch vdd_calculate +: 029321 vdd_calculate: +0x691a 029322 isub temp ,rega +0x691b 029323 fetch 2 ,mem_adc_current_value +0x691c 029324 isub temp ,pdata +0x691d 029325 nbranch vdd_calculate1 ,positive +0x691e 029326 fetcht 2 ,mem_reference_voltage +0x691f 029327 imul32 temp ,regb +0x6920 029328 copy regc ,pdata +0x6921 029329 imul32 rega ,pdata +0x6922 029330 iadd regb ,pdata +: 029331 vdd_calculate2: +0x6923 029332 idiv rega +0x6924 029333 call wait_div_end +0x6925 029334 quotient pdata +0x6926 029335 rtn +: 029337 vdd_calculate1: +0x6927 029338 copy temp ,pdata +0x6928 029339 fetcht 2 ,mem_adc_current_value +0x6929 029340 isub temp ,pdata +0x692a 029341 fetcht 2 ,mem_reference_voltage +0x692b 029342 imul32 temp ,regb +0x692c 029343 copy regc ,pdata +0x692d 029344 imul32 rega ,pdata +0x692e 029345 isub regb ,pdata +0x692f 029346 branch vdd_calculate2 +: 029357 adc_bat_percent_lowpower_out: +0x6930 029358 ifetch 8 ,rega +0x6931 029359 store 8 ,mem_pdatatemp +0x6932 029360 fetch 2 ,mem_pdatatemp +0x6933 029361 fetcht 2 ,mem_pdatatemp + 2 +0x6934 029362 isub temp ,rega +0x6935 029363 fetch 2 ,mem_pdatatemp + 6 +0x6936 029364 isub temp ,regb +0x6937 029365 fetcht 2 ,mem_pdatatemp + 4 +0x6938 029366 isub temp ,null +0x6939 029367 ncall adc_set_low_power_flag ,positive +0x693a 029368 mul32 regb ,100 ,pdata +0x693b 029369 idiv rega +0x693c 029370 call wait_div_end +0x693d 029371 quotient pdata +0x693e 029372 call adc_set_no_power_flag ,blank +0x693f 029373 rtn +: 029374 adc_set_low_power_flag: +0x6940 029375 fetch 1 ,mem_adc_power_flag +0x6941 029376 set1 0 ,pdata +0x6942 029377 store 1 ,mem_adc_power_flag +0x6943 029378 rtn +: 029379 adc_set_no_power_flag: +0x6944 029380 fetcht 1 ,mem_adc_power_flag +0x6945 029381 set1 1 ,temp +0x6946 029382 storet 1 ,mem_adc_power_flag +0x6947 029383 rtn +: 029388 keyscan_key_init: +0x6948 029389 fetch 2 ,mem_key_num_ptr +0x6949 029390 ifetch 1 ,pdata +: 029391 keyscan_key_init_next: +0x694a 029392 rtn blank +0x694b 029393 copy pdata ,loopcnt +0x694c 029395 fetch 2 ,mem_keyscan_ptr +0x694d 029396 increase 3 ,pdata +0x694e 029397 copy pdata ,rega +: 029398 keyscan_key_init_lp1: +0x694f 029399 ifetcht 1 ,rega +0x6950 029400 call gpio_config_input +0x6951 029401 increase key_conf_struct_len ,rega +0x6952 029402 loop keyscan_key_init_lp1 +: 029403 keyscan_key_init_end: +0x6953 029404 rtn +: 029406 keyscan_scan_key: +0x6954 029407 fetch 2 ,mem_keyscan_ptr +0x6955 029408 increase 3 ,pdata +0x6956 029409 copy pdata ,rega +0x6957 029411 force 0 ,regb +0x6958 029412 jam 0 ,mem_key_value_temp +: 029413 keyscan_scan_key_lp1: +0x6959 029414 ifetcht 1 ,rega +0x695a 029415 call gpio_get_bit +0x695b 029416 bpatchx patch34_1 ,mem_patch34 +0x695c 029417 fetch 2 ,mem_key_value_temp +0x695d 029418 copy regb ,queue +0x695e 029419 qsetflag true ,pdata +0x695f 029420 store 2 ,mem_key_value_temp +0x6960 029421 increase key_conf_struct_len ,rega +0x6961 029422 increase 1 ,regb +0x6962 029423 fetch 2 ,mem_key_num_ptr +0x6963 029424 ifetch 1 ,pdata +: 029425 keyscan_scan_key_lp1_next: +0x6964 029426 ixor regb ,null +0x6965 029427 nbranch keyscan_scan_key_lp1 ,zero +0x6966 029428 fetch 2 ,mem_key_value_temp +0x6967 029429 fetcht 2 ,mem_key_value +0x6968 029430 ixor temp ,null +0x6969 029431 rtn zero +0x696a 029432 enable user +0x696b 029433 rtn +: 029435 keyscan_process_lpm_before: +0x696c 029436 fetch 2 ,mem_key_num_ptr +0x696d 029437 ifetch 1 ,pdata +: 029438 keyscan_process_lpm_before_next: +0x696e 029439 rtn blank +0x696f 029440 copy pdata ,loopcnt +0x6970 029441 fetch 2 ,mem_keyscan_ptr +0x6971 029442 increase 3 ,pdata +0x6972 029443 copy pdata ,rega +: 029444 keyscan_process_lpm_before_lp1: +0x6973 029445 ifetcht 1 ,rega +0x6974 029446 call gpio_set_wake_by_current_state +0x6975 029447 increase key_conf_struct_len ,rega +0x6976 029448 loop keyscan_process_lpm_before_lp1 +: 029449 keyscan_process_lpm_before_end: +0x6977 029450 rtn +: 029452 keyscan_key_process: +0x6978 029453 arg key_scan_timer ,queue +0x6979 029454 call timer_check +0x697a 029455 nrtn blank +0x697b 029456 setarg 0x20 +0x697c 029457 arg key_scan_timer ,queue +0x697d 029458 call timer_init +0x697e 029459 disable user +0x697f 029460 call keyscan_process_lpm_before +0x6980 029461 bpatchx patch34_2 ,mem_patch34 +0x6981 029462 fetch 2 ,mem_key_num_ptr +0x6982 029463 ifetch 1 ,pdata +: 029464 keyscan_key_process_next: +0x6983 029465 rtn blank +0x6984 029466 call keyscan_scan_key +0x6985 029467 nbranch lpm_button_clean_wake_lock ,user +0x6986 029468 call lpm_button_get_wake_lock +0x6987 029469 disable user +0x6988 029470 fetch 2 ,mem_key_value_temp +0x6989 029471 store 2 ,mem_key_value_temp4 +0x698a 029472 jam 0 ,mem_key_value_temp6 +0x698b 029473 force 0 ,queue +: 029474 keyscan_key_lp1: +0x698c 029475 fetch 2 ,mem_key_value +0x698d 029476 rshift pdata ,temp +0x698e 029477 storet 2 ,mem_key_value +0x698f 029478 and pdata ,0x01 ,pdata +0x6990 029479 fetcht 2 ,mem_key_value_temp4 +0x6991 029480 and temp ,0x01 ,rega +0x6992 029481 rshift temp ,temp +0x6993 029482 storet 2 ,mem_key_value_temp4 +0x6994 029483 ixor rega ,null +0x6995 029484 ncall keyscan_send_key_data ,zero +0x6996 029485 fetch 2 ,mem_key_num_ptr +0x6997 029486 ifetch 1 ,pdata +: 029487 keyscan_key_lp1_next: +0x6998 029488 fetcht 1 ,mem_key_value_temp6 +0x6999 029489 increase 1 ,temp +0x699a 029490 storet 1 ,mem_key_value_temp6 +0x699b 029491 copy temp ,queue +0x699c 029492 ixor queue ,null +0x699d 029493 nbranch keyscan_key_lp1 ,zero +0x699e 029494 fetch 2 ,mem_key_value_temp +0x699f 029495 store 2 ,mem_key_value +0x69a0 029496 rtn +: 029497 keyscan_send_key_data: +0x69a1 029498 bpatchx patch34_3 ,mem_patch34 +0x69a2 029499 fetch 2 ,mem_keyscan_ptr +0x69a3 029500 increase 1 ,pdata +0x69a4 029501 ifetch 2 ,pdata +0x69a5 029502 branch callback_func +: 029513 pwm_init: +0x69a6 029514 hfetch 1 ,core_clksel +0x69a7 029515 ior rega ,pdata +0x69a8 029516 hstore 1 ,core_clksel +0x69a9 029517 hfetch 2 ,core_clkoff +0x69aa 029518 set0 clock_off_pwm ,pdata +0x69ab 029519 hstore 2 ,core_clkoff +: 029520 delay_nop100: +0x69ac 029521 nop 100 +0x69ad 029522 rtn +: 029533 pwm_out_set: +0x69ae 029534 fetcht 3 ,mem_pdatatemp + 2 +0x69af 029535 setarg pwm_12mhz +0x69b0 029536 idiv temp +0x69b1 029537 call wait_div_end +0x69b2 029538 quotient temp +0x69b3 029539 fetch 1 ,mem_pdatatemp + 5 +0x69b4 029540 imul32 temp ,pdata +0x69b5 029541 div pdata ,100 +0x69b6 029542 call wait_div_end +0x69b7 029543 quotient rega +0x69b8 029544 copy temp ,pdata +0x69b9 029545 isub rega ,regb +0x69ba 029546 fetch 1 ,mem_pdatatemp + 1 +0x69bb 029547 call pwm_duty_cycle_set +0x69bc 029548 fetch 1 ,mem_pdatatemp +0x69bd 029549 branch pwm_enable +: 029552 pwm_duty_cycle_set: +0x69be 029553 beq 0 ,pwm_pwm0_duty_set +0x69bf 029554 beq 1 ,pwm_pwm1_duty_set +0x69c0 029555 beq 2 ,pwm_pwm2_duty_set +0x69c1 029556 beq 3 ,pwm_pwm3_duty_set +0x69c2 029557 beq 4 ,pwm_pwm4_duty_set +0x69c3 029558 beq 5 ,pwm_pwm5_duty_set +: 029559 pwm_pwm0_duty_set: +0x69c4 029560 arg core_pwm_pcnt0 ,contw +0x69c5 029561 branch pwm_set_pncnt +: 029562 pwm_pwm1_duty_set: +0x69c6 029563 arg core_pwm_pcnt1 ,contw +0x69c7 029564 branch pwm_set_pncnt +: 029565 pwm_pwm2_duty_set: +0x69c8 029566 arg core_pwm_pcnt2 ,contw +0x69c9 029567 branch pwm_set_pncnt +: 029568 pwm_pwm3_duty_set: +0x69ca 029569 arg core_pwm_pcnt3 ,contw +0x69cb 029570 branch pwm_set_pncnt +: 029571 pwm_pwm4_duty_set: +0x69cc 029572 arg core_pwm_pcnt4 ,contw +0x69cd 029573 branch pwm_set_pncnt +: 029574 pwm_pwm5_duty_set: +0x69ce 029575 arg core_pwm_pcnt5 ,contw +0x69cf 029576 branch pwm_set_pncnt +: 029577 pwm_set_pncnt: +0x69d0 029578 copy rega ,pdata +0x69d1 029579 istore 2 ,contw +0x69d2 029580 copy regb ,pdata +0x69d3 029581 istore 2 ,contw +0x69d4 029582 rtn +: 029586 pwm_enable: +0x69d5 029587 enable user +0x69d6 029588 branch pwm_gpio_set +: 029589 pwm_disable: +0x69d7 029590 disable user +: 029591 pwm_gpio_set: +0x69d8 029592 beq 4 ,pwm_gpio4_set +0x69d9 029593 beq 5 ,pwm_gpio5_set +0x69da 029594 beq 27 ,pwm_gpio27_set +0x69db 029595 beq 28 ,pwm_gpio28_set +0x69dc 029596 beq 3 ,pwm_gpio3_set +0x69dd 029597 beq 8 ,pwm_gpio8_set +0x69de 029598 beq 20 ,pwm_gpio20_set +0x69df 029599 beq 21 ,pwm_gpio21_set +0x69e0 029600 beq 22 ,pwm_gpio22_set +0x69e1 029601 beq 23 ,pwm_gpio23_set +0x69e2 029602 rtn +: 029605 pwm_gpio4_set: +0x69e3 029606 arg 6 ,queue +0x69e4 029607 branch pwm_one_set_select +: 029608 pwm_gpio5_set: +0x69e5 029609 arg 7 ,queue +0x69e6 029610 branch pwm_one_set_select +: 029611 pwm_gpio27_set: +0x69e7 029612 arg 8 ,queue +0x69e8 029613 branch pwm_one_set_select +: 029614 pwm_gpio28_set: +0x69e9 029615 arg 9 ,queue +0x69ea 029616 branch pwm_one_set_select +: 029617 pwm_gpio3_set: +0x69eb 029618 arg 10 ,queue +0x69ec 029619 branch pwm_one_set_select +: 029620 pwm_gpio8_set: +0x69ed 029621 arg 11 ,queue +0x69ee 029622 branch pwm_one_set_select +: 029623 pwm_gpio20_set: +0x69ef 029624 arg 12 ,queue +0x69f0 029625 branch pwm_tw0_set_select +: 029626 pwm_gpio21_set: +0x69f1 029627 arg 13 ,queue +0x69f2 029628 branch pwm_tw0_set_select +: 029629 pwm_gpio22_set: +0x69f3 029630 arg 14 ,queue +0x69f4 029631 branch pwm_tw0_set_select +: 029632 pwm_gpio23_set: +0x69f5 029633 arg 15 ,queue +0x69f6 029634 branch pwm_tw0_set_select +: 029636 pwm_set_select: +0x69f7 029637 hfetch 2 ,core_gpio_sel1 +0x69f8 029638 qsetflag user ,pdata +0x69f9 029639 hstore 2 ,core_gpio_sel1 +0x69fa 029640 copy rega ,queue +0x69fb 029641 hfetch 1 ,core_gpio_key2 +0x69fc 029642 qsetflag user ,pdata +0x69fd 029643 hstore 1 ,core_gpio_key2 +0x69fe 029644 rtn +: 029646 pwm_one_set_select: +0x69ff 029647 add queue ,-4 ,rega +0x6a00 029648 branch pwm_set_select +: 029650 pwm_tw0_set_select: +0x6a01 029651 add queue ,-10 ,rega +0x6a02 029652 branch pwm_set_select +: 029657 rfcomm_init: +0x6a03 029658 rtn wake +0x6a04 029659 jam 0 ,mem_rfcomm_send_more_pkt +0x6a05 029660 jam bits9600 ,memremoterpnbitrate +0x6a06 029661 jam databits8 ,memremoteprndatabits +0x6a07 029662 jam 0x11 ,memremoteprnxon +0x6a08 029663 jam 0x13 ,memremoteprnxoff +0x6a09 029664 setarg 0 +0x6a0a 029665 store 3 ,memremoteprnstopbit +0x6a0b 029666 store 1 ,mem_spp_state +0x6a0c 029667 jam 0 ,memui_reconnect_mode +: 029669 rfcomm_init_spp: +0x6a0d 029670 bpatchx patch34_4 ,mem_patch34 +0x6a0e 029671 setarg 0 +0x6a0f 029672 store 1 ,mem_spp_state +0x6a10 029673 store 1 ,mem_remote_spp_channel +0x6a11 029674 store 1 ,mem_pn_dlci +0x6a12 029675 fetch 1 ,mem_credit_flag +0x6a13 029676 beq credit_enable ,rfcomm_init_spp_with_credit +0x6a14 029677 jam 0x50 ,mem_credit_given +0x6a15 029678 rtn +: 029680 rfcomm_init_spp_with_credit: +0x6a16 029681 jam 0x00 ,mem_credit_given +0x6a17 029682 rtn +: 029684 set_cr_bit: +0x6a18 029685 or_into 0x02 ,temp +0x6a19 029686 rtn +: 029698 rfcomm_calculate_fcs_sabm: +0x6a1a 029699 copy temp ,pdata +0x6a1b 029700 reverse pdata ,pdata +0x6a1c 029701 store 1 ,memfcstemp3 +0x6a1d 029702 force ini_tx_sabm ,pdata +0x6a1e 029703 reverse pdata ,pdata +0x6a1f 029704 store 1 ,memfcstemp2 +0x6a20 029705 force 0x01 ,pdata +0x6a21 029706 reverse pdata ,pdata +0x6a22 029707 store 1 ,memfcstemp1 +0x6a23 029708 call caculate_fcs +0x6a24 029709 copy temp ,pdata +0x6a25 029710 rtn +: 029711 rfcomm_calculate_fcs_ua: +0x6a26 029712 reverse pdata ,pdata +0x6a27 029713 store 1 ,memfcstemp3 +0x6a28 029714 force rsp_tx_ua ,pdata +0x6a29 029715 reverse pdata ,pdata +0x6a2a 029716 store 1 ,memfcstemp2 +0x6a2b 029717 force 0x01 ,pdata +0x6a2c 029718 reverse pdata ,pdata +0x6a2d 029719 store 1 ,memfcstemp1 +0x6a2e 029720 branch caculate_fcs +: 029722 rfcomm_calculate_fcs_dlci0: +0x6a2f 029723 fetch 1 ,mem_rfcomm_initiator +0x6a30 029724 branch rfcomm_calculate_fcs_dlci0_res ,blank +0x6a31 029725 setarg 0x70 +0x6a32 029726 rtn +: 029727 rfcomm_calculate_fcs_dlci0_res: +0x6a33 029728 setarg 0xaa +0x6a34 029729 rtn +: 029731 rfcomm_save_fcs_uih: +0x6a35 029732 reverse pdata ,pdata +0x6a36 029733 store 1 ,memfcstemp3 +0x6a37 029734 force rsp_rx_uih ,pdata +0x6a38 029735 call caculate_uihdata_fcs +0x6a39 029736 fetcht 2 ,mem_contw_temp +0x6a3a 029737 copy temp ,contw +0x6a3b 029738 istore 1 ,contw +0x6a3c 029739 copy contw ,temp +0x6a3d 029740 storet 2 ,mem_contw_temp +0x6a3e 029741 force rsp_rx_uih_wdata ,pdata +0x6a3f 029742 call caculate_uihdata_fcs +0x6a40 029743 fetcht 2 ,mem_contw_temp +0x6a41 029744 copy temp ,contw +0x6a42 029745 istore 1 ,contw +0x6a43 029746 rtn +: 029755 caculate_uihdata_fcs: +0x6a44 029756 reverse pdata ,pdata +0x6a45 029757 store 1 ,memfcstemp2 +0x6a46 029758 fetch 2 ,memfcstemp2 +0x6a47 029759 lshift8 pdata ,pdata +0x6a48 029760 store 3 ,mem_mod2div_temp +0x6a49 029761 arg 0x107 ,rega +0x6a4a 029762 arg 0xf ,regb +0x6a4b 029763 call mod2div +0x6a4c 029764 xor_into 0xd7 ,pdata +0x6a4d 029765 invert pdata ,pdata +0x6a4e 029766 reverse pdata ,pdata +0x6a4f 029767 rtn +: 029777 caculate_fcs: +0x6a50 029778 fetch 3 ,memfcstemp1 +0x6a51 029779 store 3 ,mem_mod2div_temp +0x6a52 029780 arg 0x107 ,rega +0x6a53 029781 arg 0xf ,regb +0x6a54 029782 call mod2div +0x6a55 029783 lshift8 pdata ,pdata +0x6a56 029784 arg 0x7 ,regb +0x6a57 029785 call mod2div +0x6a58 029786 xor_into 0x2b ,pdata +0x6a59 029787 invert pdata ,pdata +0x6a5a 029788 reverse pdata ,pdata +0x6a5b 029789 copy pdata ,temp +0x6a5c 029790 rtn +: 029792 mod2div: +0x6a5d 029793 arg 0 ,regc +0x6a5e 029794 copy regb ,loopcnt +0x6a5f 029795 call right_shift_n +0x6a60 029796 icopy temp +: 029797 mod2div_loop: +0x6a61 029802 copy temp ,pdata +0x6a62 029803 lshift regc ,regc +0x6a63 029804 bbit0 8 ,mod2div_not_enough_reduction +0x6a64 029805 ixor rega ,temp +0x6a65 029806 increase 1 ,regc +: 029807 mod2div_not_enough_reduction: +0x6a66 029808 lshift temp ,temp +0x6a67 029809 fetch 3 ,mem_mod2div_temp +0x6a68 029810 increase -1 ,regb +0x6a69 029811 compare 0xff ,regb ,0xff +0x6a6a 029812 branch mod2div_end ,true +0x6a6b 029813 copy regb ,loopcnt +0x6a6c 029814 call right_shift_n +0x6a6d 029815 isolate1 0 ,pdata +0x6a6e 029816 setflag true ,0 ,temp +0x6a6f 029817 branch mod2div_loop +: 029818 mod2div_end: +0x6a70 029820 rshift temp ,pdata +0x6a71 029821 rtn +: 029823 get_rfcomm_snd_adss: +0x6a72 029824 fetcht 1 ,mem_pn_dlci +: 029825 dlci_to_address_cmd: +0x6a73 029827 lshift2 temp ,temp +0x6a74 029828 set1 rfcomm_address_ext_len ,temp +0x6a75 029829 fetch 1 ,mem_rfcomm_initiator +0x6a76 029830 ncall set_cr_bit ,blank +0x6a77 029831 storet 1 ,mem_rfcomm_send_adss +0x6a78 029832 rtn +: 029834 channel_to_dlci: +0x6a79 029836 lshift temp ,temp +0x6a7a 029837 fetch 1 ,mem_rfcomm_initiator +0x6a7b 029838 setflag blank ,0 ,temp +0x6a7c 029840 rtn +: 029841 rfcomm_rx_process_dlci0_sabm: +0x6a7d 029842 fetcht 1 ,mem_current_channel +0x6a7e 029843 jam 0xd7 ,mem_current_fcs +0x6a7f 029844 call rfcomm_send_ua +0x6a80 029845 fetch 1 ,mem_rfcomm_state +0x6a81 029846 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6a82 029847 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a83 029848 store 1 ,mem_rfcomm_state +0x6a84 029849 jam 0 ,mem_rfcomm_initiator +0x6a85 029850 branch rfcomm_rx_process_end +: 029851 rfcomm_rx_process_dlci0_ua: +0x6a86 029852 fetch 1 ,mem_rfcomm_state +0x6a87 029853 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a88 029854 store 1 ,mem_rfcomm_state +0x6a89 029855 branch rfcomm_rx_process_end +: 029858 rfcomm_rx_process: +0x6a8a 029859 bpatchx patch34_5 ,mem_patch34 +0x6a8b 029860 fetch 1 ,memui_reconnect_mode +0x6a8c 029861 beq no_reconnection ,rfcomm_rx_process_remote_page +0x6a8d 029862 branch rfcomm_rx_process_reconn +: 029864 rfcomm_rx_process_remote_page: +0x6a8e 029865 fetch 2 ,mem_l2cap_payload_ptr +0x6a8f 029866 copy pdata ,contr +0x6a90 029867 call get_rfcomm_head_struct +0x6a91 029868 fetch 1 ,mem_current_channel +0x6a92 029869 beq 0 ,parse_dlci0_rp +0x6a93 029870 branch parse_uih_rp +: 029871 parse_dlci0_rp: +0x6a94 029872 bpatchx patch34_6 ,mem_patch34 +0x6a95 029873 fetch 1 ,mem_current_frame_type +0x6a96 029874 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6a97 029875 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6a98 029876 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +0x6a99 029877 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +0x6a9a 029878 rtn +: 029881 parse_dlci0_rp_uih: +0x6a9b 029882 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6a9c 029883 copy pdata ,contr +0x6a9d 029884 call get_rfcomm_uih_head_struct +0x6a9e 029885 fetch 1 ,mem_uih_cmd_type +0x6a9f 029886 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +0x6aa0 029887 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +0x6aa1 029888 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +0x6aa2 029889 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +0x6aa3 029890 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +0x6aa4 029891 branch rfcomm_rx_process_end +: 029893 parse_dlci0_rp_uih_pn_cmd: +0x6aa5 029894 call parse_dlci0_rp_uih_pn_res_common +0x6aa6 029896 branch parse_dlci0_rp_uih_pn_cmd_spp +: 029898 parse_dlci0_rp_uih_pn_cmd_spp: +0x6aa7 029899 fetch 1 ,mem_spp_state +0x6aa8 029900 set1 rfcomm_channel_state_pn_cmd ,pdata +0x6aa9 029901 set1 rfcomm_channel_state_pn_res ,pdata +0x6aaa 029902 store 1 ,mem_spp_state +0x6aab 029903 call rfcomm_send_param_neg_res +0x6aac 029904 branch rfcomm_rx_process_end +: 029906 parse_dlci0_rp_uih_pn_res: +0x6aad 029907 call parse_dlci0_rp_uih_pn_res_common +0x6aae 029908 branch rfcomm_rx_process_end +: 029910 parse_dlci0_rp_uih_pn_res_common: +0x6aaf 029911 call get_param_payload_ptr +0x6ab0 029912 branch get_rfcomm_prarmer_negotiation +: 029914 get_rfcomm_param_modem_status: +0x6ab1 029915 call get_param_payload_ptr +0x6ab2 029916 ifetch 1 ,contr +0x6ab3 029917 rshift3 pdata ,pdata +0x6ab4 029918 store 1 ,mem_ms_channel +0x6ab5 029919 ifetch 1 ,contr +0x6ab6 029920 store 1 ,mem_ms_param +0x6ab7 029921 rtn +: 029924 get_rfcomm_head_struct: +0x6ab8 029925 ifetch 1 ,contr +0x6ab9 029926 store 1 ,mem_current_adss +0x6aba 029927 rshift3 pdata ,pdata +0x6abb 029928 store 1 ,mem_current_channel +0x6abc 029929 ifetch 1 ,contr +0x6abd 029930 store 1 ,mem_current_frame_type +: 029931 get_rfcomm_current_length: +0x6abe 029932 call get_rfcomm_length_common +0x6abf 029933 storet 2 ,mem_current_length +0x6ac0 029934 copy contr ,pdata +0x6ac1 029935 store 2 ,mem_rfcomm_uih_payload_ptr +0x6ac2 029936 rtn +: 029938 get_rfcomm_uih_head_struct: +0x6ac3 029939 ifetch 1 ,contr +0x6ac4 029940 rshift pdata ,pdata +0x6ac5 029941 store 1 ,mem_uih_cmd_type +0x6ac6 029942 call get_rfcomm_length_common +0x6ac7 029943 storet 2 ,mem_uih_length +0x6ac8 029944 copy contr ,pdata +0x6ac9 029945 store 2 ,mem_param_payload_ptr +0x6aca 029946 rtn +: 029949 get_param_payload_ptr: +0x6acb 029950 fetch 2 ,mem_param_payload_ptr +0x6acc 029951 copy pdata ,contr +0x6acd 029952 rtn +: 029954 get_rfcomm_length_common: +0x6ace 029955 ifetch 1 ,contr +0x6acf 029956 copy pdata ,temp +0x6ad0 029957 rshift temp ,temp +0x6ad1 029958 rtnbit1 0 +0x6ad2 029959 ifetch 1 ,contr +0x6ad3 029960 lshift3 pdata ,pdata +0x6ad4 029961 lshift4 pdata ,pdata +0x6ad5 029962 iadd temp ,temp +0x6ad6 029963 rtn +: 029965 get_rfcomm_prarmer_negotiation: +0x6ad7 029966 ifetch 1 ,contr +0x6ad8 029967 store 1 ,mem_pn_dlci +0x6ad9 029968 ifetch 1 ,contr +0x6ada 029969 store 1 ,mem_pn_credit_flow_type_info +0x6adb 029970 ifetch 1 ,contr +0x6adc 029971 store 1 ,mem_pn_priority +0x6add 029972 ifetch 1 ,contr +0x6ade 029973 store 1 ,mem_pn_acknowledg_timer +0x6adf 029974 ifetch 2 ,contr +0x6ae0 029975 store 2 ,mem_pn_max_frame_size +0x6ae1 029976 ifetch 1 ,contr +0x6ae2 029977 store 1 ,mem_pn_max_retrans +0x6ae3 029978 ifetch 1 ,contr +0x6ae4 029979 store 1 ,mem_remote_credits +0x6ae5 029980 rtn +: 029983 parse_dlci0_rp_uih_ms_cmd: +0x6ae6 029984 call get_rfcomm_param_modem_status +0x6ae7 029986 branch parse_dlci0_rp_uih_ms_cmd_spp +: 029988 parse_dlci0_rp_uih_ms_cmd_spp: +0x6ae8 029989 fetch 1 ,mem_spp_state +0x6ae9 029990 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6aea 029991 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6aeb 029992 store 1 ,mem_spp_state +0x6aec 029993 fetcht 1 ,mem_pn_dlci +0x6aed 029994 lshift2 temp ,temp +0x6aee 029995 or_into 3 ,temp +0x6aef 029996 call rfcomm_send_modem_status_res +0x6af0 029997 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +0x6af1 029998 branch rfcomm_rx_process_end +: 030000 parse_dlci0_rp_uih_ms_res: +0x6af2 030001 jam bt_evt_spp_connected ,mem_fifo_temp +0x6af3 030002 call ui_ipc_send_event +0x6af4 030003 call get_rfcomm_param_modem_status +0x6af5 030004 fetch 1 ,mem_ms_channel +0x6af6 030005 sub pdata ,1 ,null +0x6af7 030006 branch parse_dlci0_rp_uih_ms_res_spp ,zero +0x6af8 030007 branch assert +: 030008 parse_dlci0_rp_uih_ms_res_spp: +0x6af9 030009 fetch 1 ,mem_spp_state +0x6afa 030010 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6afb 030011 store 1 ,mem_spp_state +0x6afc 030012 branch rfcomm_rx_process_end +: 030014 parse_dlci0_rp_uih_cmd_port: +0x6afd 030015 call get_param_payload_ptr +0x6afe 030016 ifetch 1 ,contr +0x6aff 030017 store 1 ,mem_rpn_dlci +0x6b00 030018 call l2cap_malloc_rfcomm_channel +0x6b01 030019 call l2cap_get_rfcomm_tx_buff +0x6b02 030020 setarg 0x000e +0x6b03 030021 istore 2 ,contw +0x6b04 030022 fetch 2 ,mem_rfcomm_remote_cid +0x6b05 030023 istore 2 ,contw +0x6b06 030024 fetch 1 ,mem_rfcomm_initiator +0x6b07 030026 lshift pdata ,pdata +0x6b08 030027 set1 0 ,pdata +0x6b09 030028 istore 1 ,contw +0x6b0a 030029 bpatchx patch34_7 ,mem_patch34 +0x6b0b 030030 setarg 0x15ef +0x6b0c 030031 istore 2 ,contw +0x6b0d 030032 setarg 0x1191 +0x6b0e 030033 istore 2 ,contw +0x6b0f 030036 fetch 1 ,mem_rpn_dlci +0x6b10 030037 istore 1 ,contw +0x6b11 030038 setarg 0x000007 +0x6b12 030039 istore 5 ,contw +0x6b13 030042 setarg 0x01 +0x6b14 030043 istore 2 ,contw +0x6b15 030046 call rfcomm_calculate_fcs_dlci0 +0x6b16 030047 istore 1 ,contw +0x6b17 030048 rtn +: 030052 parse_uih_rp: +0x6b18 030053 branch parse_uih_rp_spp +: 030055 parse_uih_rp_spp: +0x6b19 030056 bpatchx patch35_0 ,mem_patch35 +0x6b1a 030057 fetch 1 ,mem_current_frame_type +0x6b1b 030058 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +0x6b1c 030059 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +0x6b1d 030060 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b1e 030061 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b1f 030062 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +0x6b20 030063 rtn +: 030064 parse_uih_rp_spp_ua: +0x6b21 030065 fetch 1 ,mem_spp_state +0x6b22 030066 set1 rfcomm_channel_state_ua ,pdata +0x6b23 030067 store 1 ,mem_spp_state +0x6b24 030068 branch rfcomm_rx_process_end +: 030069 parse_uih_rp_spp_sabm: +0x6b25 030070 fetch 1 ,mem_spp_state +0x6b26 030071 set1 rfcomm_channel_state_ua ,pdata +0x6b27 030072 set1 rfcomm_channel_state_sabm ,pdata +0x6b28 030073 store 1 ,mem_spp_state +0x6b29 030074 fetch 1 ,mem_current_adss +0x6b2a 030075 call rfcomm_calculate_fcs_ua +0x6b2b 030076 store 1 ,mem_current_fcs +0x6b2c 030077 call rfcomm_send_ua +0x6b2d 030078 fetch 1 ,mem_current_adss +0x6b2e 030079 rshift2 pdata ,pdata +0x6b2f 030080 store 1 ,mem_pn_dlci +0x6b30 030081 lshift2 pdata ,pdata +0x6b31 030082 set0 rfcomm_address_cr ,pdata +0x6b32 030083 set1 rfcomm_address_ext_len ,pdata +0x6b33 030084 arg mem_hiufcs_spp ,temp +0x6b34 030085 storet 2 ,mem_contw_temp +0x6b35 030086 call rfcomm_save_fcs_uih +0x6b36 030087 branch rfcomm_rx_process_end +: 030089 parse_uih_spp_uih_credits: +0x6b37 030090 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b38 030091 copy pdata ,contr +0x6b39 030092 increase 1 ,pdata +0x6b3a 030093 store 2 ,mem_rfcomm_uih_payload_ptr +0x6b3b 030094 ifetch 1 ,contr +0x6b3c 030095 fetcht 1 ,mem_remote_credits +0x6b3d 030096 iadd temp ,pdata +0x6b3e 030097 store 1 ,mem_remote_credits +: 030098 parse_uih_spp_uih: +0x6b3f 030099 call rfcomm_increase_credit_given +: 030100 parse_uih_spp_uih_cont: +0x6b40 030101 call get_rfcomm_snd_adss +0x6b41 030102 call rfcomm_send_uih_without_payload +0x6b42 030103 call spp_process_rx_data +0x6b43 030104 branch rfcomm_rx_process_end +: 030106 parse_uih_rp_spp_disconn_send_event: +0x6b44 030107 jam bt_evt_spp_disconnected ,mem_fifo_temp +0x6b45 030108 call ui_ipc_send_event +: 030109 parse_uih_rp_spp_disconn: +0x6b46 030110 call rfcomm_init_spp +0x6b47 030111 fetch 1 ,mem_current_adss +0x6b48 030112 call rfcomm_calculate_fcs_ua +0x6b49 030113 store 1 ,mem_current_fcs +0x6b4a 030114 call rfcomm_send_ua +0x6b4b 030115 branch rfcomm_rx_process_end +: 030120 rfcomm_rx_process_reconn: +0x6b4c 030121 fetch 2 ,mem_l2cap_payload_ptr +0x6b4d 030122 copy pdata ,contr +0x6b4e 030123 call get_rfcomm_head_struct +0x6b4f 030124 fetch 1 ,mem_current_channel +0x6b50 030125 beq 0 ,parse_dlci0_reconn +0x6b51 030126 branch parse_uih_reconn +: 030128 parse_dlci0_reconn: +0x6b52 030129 bpatchx patch35_1 ,mem_patch35 +0x6b53 030130 fetch 1 ,mem_current_frame_type +0x6b54 030131 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6b55 030132 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6b56 030133 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +0x6b57 030134 branch rfcomm_rx_process_end +: 030135 parse_dlci0_reconn_uih: +0x6b58 030136 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b59 030137 copy pdata ,contr +0x6b5a 030138 call get_rfcomm_uih_head_struct +0x6b5b 030139 fetch 1 ,mem_uih_cmd_type +0x6b5c 030140 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +0x6b5d 030141 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +0x6b5e 030142 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +0x6b5f 030143 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +0x6b60 030144 branch rfcomm_rx_process_end +: 030146 parse_dlci0_reconn_uih_pn_cmd: +0x6b61 030147 call parse_dlci0_rp_uih_pn_res_common +0x6b62 030148 fetch 1 ,mem_pn_dlci +0x6b63 030149 rshift pdata ,pdata +0x6b64 030150 fetcht 1 ,mem_remote_spp_channel +0x6b65 030151 isub temp ,null +0x6b66 030152 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +0x6b67 030153 branch assert +: 030154 parse_dlci0_reconn_uih_pn_cmd_spp: +0x6b68 030155 fetch 1 ,mem_spp_state +0x6b69 030156 set1 rfcomm_channel_state_pn_res ,pdata +0x6b6a 030157 store 1 ,mem_spp_state +0x6b6b 030158 branch rfcomm_rx_process_end +: 030160 parse_dlci0_reconn_uih_ms_cmd: +0x6b6c 030161 call get_rfcomm_param_modem_status +0x6b6d 030162 fetch 1 ,mem_ms_channel +0x6b6e 030163 fetcht 1 ,mem_remote_spp_channel +0x6b6f 030164 isub temp ,null +0x6b70 030165 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +0x6b71 030166 branch assert +0x6b72 030167 branch rfcomm_rx_process_end +: 030168 parse_dlci0_reconn_uih_ms_cmd_spp: +0x6b73 030169 fetch 1 ,mem_spp_state +0x6b74 030170 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6b75 030171 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6b76 030172 store 1 ,mem_spp_state +0x6b77 030173 fetcht 1 ,mem_pn_dlci +0x6b78 030174 lshift2 temp ,temp +0x6b79 030175 or_into 3 ,temp +0x6b7a 030176 call rfcomm_send_modem_status_res +0x6b7b 030177 branch rfcomm_rx_process_end +: 030179 parse_dlci0_reconn_uih_ms_res: +0x6b7c 030180 call get_rfcomm_param_modem_status +0x6b7d 030181 fetch 1 ,mem_ms_channel +0x6b7e 030182 fetcht 1 ,mem_remote_spp_channel +0x6b7f 030183 isub temp ,null +0x6b80 030184 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +0x6b81 030185 branch assert +: 030186 parse_dlci0_reconn_uih_ms_res_spp: +0x6b82 030187 fetch 1 ,mem_spp_state +0x6b83 030188 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6b84 030189 store 1 ,mem_spp_state +0x6b85 030190 branch rfcomm_rx_process_end +: 030192 parse_uih_reconn: +0x6b86 030193 fetch 1 ,mem_current_channel +0x6b87 030194 fetcht 1 ,mem_remote_spp_channel +0x6b88 030195 isub temp ,null +0x6b89 030196 branch parse_uih_reconn_spp ,zero +0x6b8a 030197 branch assert +0x6b8b 030198 branch rfcomm_rx_process_end +: 030200 parse_uih_reconn_spp: +0x6b8c 030201 fetch 1 ,mem_current_frame_type +0x6b8d 030202 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +0x6b8e 030203 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b8f 030204 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b90 030205 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn +: 030206 parse_uih_reconn_spp_ua: +0x6b91 030207 fetch 1 ,mem_spp_state +0x6b92 030208 set1 rfcomm_channel_state_ua ,pdata +0x6b93 030209 store 1 ,mem_spp_state +0x6b94 030210 branch rfcomm_rx_process_end +: 030211 parse_uih_reconn_spp_sabm: +0x6b95 030212 branch parse_uih_reconn_spp_sabm +: 030213 parse_uih_reconn_spp_disconn: +0x6b96 030214 branch parse_uih_rp_spp_disconn +: 030215 rfcomm_rx_process_end: +0x6b97 030216 rtn +: 030218 rfcomm_send_more_pkt: +0x6b98 030219 fetch 1 ,mem_rfcomm_send_more_pkt +0x6b99 030220 rtn blank +0x6b9a 030221 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +0x6b9b 030222 branch assert +: 030224 rfcomm_send_more_pkt_msc_cmd_spp: +0x6b9c 030225 jam 0 ,mem_rfcomm_send_more_pkt +0x6b9d 030226 call l2cap_malloc_rfcomm_channel +0x6b9e 030227 arg spp_slave_channel ,temp +0x6b9f 030228 fetcht 1 ,mem_pn_dlci +0x6ba0 030229 lshift2 temp ,temp +: 030230 rfcomm_send_more_pkt_msc_cmd_spp0: +0x6ba1 030231 or_into 0x03 ,temp +0x6ba2 030232 arg 0xaa ,rega +0x6ba3 030233 call rfcomm_send_modem_status_cmd +0x6ba4 030234 call l2cap_get_rfcomm_tx_buff +0x6ba5 030235 copy contw ,contr +0x6ba6 030236 ifetch 2 ,contr +0x6ba7 030237 branch assert ,blank +0x6ba8 030238 rtn +: 030240 rfcomm_send_sabm: +0x6ba9 030241 call l2cap_get_rfcomm_tx_buff +0x6baa 030242 setarg 0x0004 +0x6bab 030243 istore 2 ,contw +0x6bac 030244 fetch 2 ,mem_rfcomm_remote_cid +0x6bad 030245 istore 2 ,contw +0x6bae 030246 fetch 1 ,mem_current_adss +0x6baf 030247 istore 1 ,contw +0x6bb0 030248 bpatchx patch35_2 ,mem_patch35 +0x6bb1 030249 setarg 0x013f +0x6bb2 030250 istore 2 ,contw +0x6bb3 030251 fetch 1 ,mem_current_fcs +0x6bb4 030252 istore 1 ,contw +0x6bb5 030253 rtn +: 030254 rfcomm_send_ua: +0x6bb6 030255 call l2cap_malloc_rfcomm_channel +0x6bb7 030256 call l2cap_get_rfcomm_tx_buff +0x6bb8 030257 setarg 0x0004 +0x6bb9 030258 istore 2 ,contw +0x6bba 030259 fetch 2 ,mem_rfcomm_remote_cid +0x6bbb 030260 istore 2 ,contw +0x6bbc 030261 fetch 1 ,mem_current_adss +0x6bbd 030262 istore 1 ,contw +0x6bbe 030263 bpatchx patch35_3 ,mem_patch35 +0x6bbf 030264 setarg 0x0173 +0x6bc0 030265 istore 2 ,contw +0x6bc1 030266 fetch 1 ,mem_current_fcs +0x6bc2 030267 istore 1 ,contw +0x6bc3 030268 rtn +: 030269 rfcomm_send_param_neg_cmd: +0x6bc4 030270 call l2cap_get_rfcomm_tx_buff +0x6bc5 030271 setarg 0x000e +0x6bc6 030272 istore 2 ,contw +0x6bc7 030273 fetch 2 ,mem_rfcomm_remote_cid +0x6bc8 030274 istore 2 ,contw +0x6bc9 030275 fetch 1 ,mem_rfcomm_initiator +0x6bca 030276 lshift pdata ,pdata +0x6bcb 030277 set1 0 ,pdata +0x6bcc 030278 istore 1 ,contw +0x6bcd 030279 bpatchx patch35_4 ,mem_patch35 +0x6bce 030280 setarg 0x15ef +0x6bcf 030281 istore 2 ,contw +0x6bd0 030282 setarg 0x1183 +0x6bd1 030283 istore 2 ,contw +0x6bd2 030284 copy temp ,pdata +0x6bd3 030285 istore 1 ,contw +0x6bd4 030286 setarg 0x0000f0 +0x6bd5 030287 istore 3 ,contw +0x6bd6 030288 setarg rfcomm_max_frame_size +0x6bd7 030289 istore 2 ,contw +0x6bd8 030290 setarg 0 +0x6bd9 030291 istore 1 ,contw +0x6bda 030292 setarg 0x01 +0x6bdb 030293 istore 1 ,contw +0x6bdc 030294 call rfcomm_calculate_fcs_dlci0 +0x6bdd 030295 istore 1 ,contw +0x6bde 030296 jam 0x10 ,mem_credit_given +0x6bdf 030297 rtn +: 030298 rfcomm_send_param_neg_res: +0x6be0 030299 call l2cap_malloc_rfcomm_channel +0x6be1 030300 call l2cap_get_rfcomm_tx_buff +0x6be2 030301 setarg 0x000e +0x6be3 030302 istore 2 ,contw +0x6be4 030303 fetch 2 ,mem_rfcomm_remote_cid +0x6be5 030304 istore 2 ,contw +0x6be6 030305 fetch 1 ,mem_rfcomm_initiator +0x6be7 030306 lshift pdata ,pdata +0x6be8 030307 set1 0 ,pdata +0x6be9 030308 istore 1 ,contw +0x6bea 030309 bpatchx patch35_5 ,mem_patch35 +0x6beb 030310 setarg 0x15ef +0x6bec 030311 istore 2 ,contw +0x6bed 030312 setarg 0x1181 +0x6bee 030313 istore 2 ,contw +0x6bef 030314 fetch 1 ,mem_pn_dlci +0x6bf0 030315 istore 1 ,contw +0x6bf1 030316 setarg 0x0000e0 +0x6bf2 030317 istore 3 ,contw +0x6bf3 030318 fetch 2 ,mem_rfcomm_max_frame_size +0x6bf4 030319 istore 2 ,contw +0x6bf5 030320 setarg 0x00 +0x6bf6 030321 istore 1 ,contw +0x6bf7 030322 fetch 1 ,mem_rfcomm_credit_init_data +0x6bf8 030323 istore 1 ,contw +0x6bf9 030324 call rfcomm_calculate_fcs_dlci0 +0x6bfa 030325 istore 1 ,contw +0x6bfb 030326 rtn +: 030327 rfcomm_send_modem_status_cmd: +0x6bfc 030328 call l2cap_get_rfcomm_tx_buff +0x6bfd 030329 setarg 0x0008 +0x6bfe 030330 istore 2 ,contw +0x6bff 030331 fetch 2 ,mem_rfcomm_remote_cid +0x6c00 030332 istore 2 ,contw +0x6c01 030333 fetch 1 ,mem_rfcomm_initiator +0x6c02 030334 lshift pdata ,pdata +0x6c03 030335 set1 0 ,pdata +0x6c04 030336 istore 1 ,contw +0x6c05 030337 bpatchx patch35_6 ,mem_patch35 +0x6c06 030338 setarg 0x09ef +0x6c07 030339 istore 2 ,contw +0x6c08 030340 setarg 0x05e3 +0x6c09 030341 istore 2 ,contw +0x6c0a 030342 copy temp ,pdata +0x6c0b 030343 istore 1 ,contw +0x6c0c 030344 setarg 0x8d +0x6c0d 030345 istore 1 ,contw +0x6c0e 030346 call rfcomm_calculate_fcs_dlci0 +0x6c0f 030347 istore 1 ,contw +0x6c10 030348 rtn +: 030350 rfcomm_send_modem_status_res: +0x6c11 030351 call l2cap_malloc_rfcomm_channel +0x6c12 030352 call l2cap_get_rfcomm_tx_buff +0x6c13 030353 setarg 0x0008 +0x6c14 030354 istore 2 ,contw +0x6c15 030355 fetch 2 ,mem_rfcomm_remote_cid +0x6c16 030356 istore 2 ,contw +0x6c17 030357 copy temp ,timeup +0x6c18 030358 fetch 1 ,mem_rfcomm_initiator +0x6c19 030359 lshift pdata ,pdata +0x6c1a 030360 set1 0 ,pdata +0x6c1b 030361 istore 1 ,contw +0x6c1c 030362 bpatchx patch35_7 ,mem_patch35 +0x6c1d 030363 setarg 0x09ef +0x6c1e 030364 istore 2 ,contw +0x6c1f 030365 setarg 0x05e1 +0x6c20 030366 istore 2 ,contw +0x6c21 030367 copy timeup ,pdata +0x6c22 030368 istore 1 ,contw +0x6c23 030369 setarg 0x8d +0x6c24 030370 istore 1 ,contw +0x6c25 030371 call rfcomm_calculate_fcs_dlci0 +0x6c26 030372 istore 1 ,contw +0x6c27 030373 rtn +: 030375 rfcomm_send_uih_without_payload: +0x6c28 030376 bpatchx patch36_0 ,mem_patch36 +0x6c29 030377 fetch 1 ,mem_credit_given +0x6c2a 030378 rtn blank +0x6c2b 030379 hfetch 2 ,core_uart_rxitems +0x6c2c 030380 nrtn blank +0x6c2d 030381 copy rega ,pdata +0x6c2e 030382 store 1 ,mem_pdatatemp + 1 +0x6c2f 030383 storet 1 ,mem_pdatatemp +0x6c30 030384 call l2cap_malloc_is_fifo_full +0x6c31 030385 nrtn blank +0x6c32 030386 call l2cap_malloc_rfcomm_channel +0x6c33 030387 call l2cap_get_rfcomm_tx_buff +0x6c34 030388 setarg 0x05 +0x6c35 030389 istore 2 ,contw +0x6c36 030390 fetch 2 ,mem_rfcomm_remote_cid +0x6c37 030391 istore 2 ,contw +0x6c38 030392 fetch 1 ,mem_rfcomm_send_adss +0x6c39 030393 istore 1 ,contw +0x6c3a 030394 setarg 0x01ff +0x6c3b 030395 istore 2 ,contw +0x6c3c 030396 fetch 1 ,mem_credit_given +0x6c3d 030397 istore 1 ,contw +0x6c3e 030398 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c3f 030399 istore 1 ,contw +0x6c40 030400 jam 0 ,mem_credit_given +0x6c41 030401 rtn +: 030403 rfcomm_increase_credit_given: +0x6c42 030404 bpatchx patch36_1 ,mem_patch36 +0x6c43 030405 fetch 1 ,mem_credit_flag +0x6c44 030406 rtneq credit_enable +0x6c45 030407 fetch 2 ,mem_current_length +0x6c46 030408 rtn blank +0x6c47 030409 fetch 1 ,mem_credit_given +0x6c48 030410 increase 1 ,pdata +0x6c49 030411 store 1 ,mem_credit_given +0x6c4a 030412 rtn +: 030414 spp_process_rx_data: +0x6c4b 030415 fetch 2 ,mem_cb_receive_spp_data +0x6c4c 030416 branch callback_func +: 030418 spp_tx_rfcomm_packet: +0x6c4d 030419 bpatchx patch36_2 ,mem_patch36 +0x6c4e 030421 fetch 1 ,mem_remote_credits +0x6c4f 030422 rtn blank +0x6c50 030423 increase -1 ,pdata +0x6c51 030424 store 1 ,mem_remote_credits +0x6c52 030425 fetch 2 ,mem_pn_max_frame_size +0x6c53 030426 fetcht 2 ,mem_current_packet_length +0x6c54 030427 isub temp ,null +0x6c55 030428 branch ssp_tx_rfcomm_from_uart ,positive +0x6c56 030429 store 2 ,mem_current_packet_length +: 030430 ssp_tx_rfcomm_from_uart: +0x6c57 030431 fetch 1 ,mem_credit_given +0x6c58 030432 branch ssp_tx_rfcomm_from_uart_without_credit ,blank +0x6c59 030433 jam 1 ,mem_rfcomm_send_offset +0x6c5a 030434 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c5b 030435 store 1 ,mem_rfcomm_send_fcs +0x6c5c 030436 setarg rsp_rx_uih_wdata +0x6c5d 030437 store 1 ,mem_rfcomm_send_frame_type +0x6c5e 030438 branch ssp_tx_rfcomm_from_uart_common +: 030439 ssp_tx_rfcomm_from_uart_without_credit: +0x6c5f 030440 jam 0 ,mem_rfcomm_send_offset +0x6c60 030441 fetch 1 ,mem_hiufcs_spp +0x6c61 030442 store 1 ,mem_rfcomm_send_fcs +0x6c62 030443 setarg rsp_tx_uih +0x6c63 030444 store 1 ,mem_rfcomm_send_frame_type +: 030445 ssp_tx_rfcomm_from_uart_common: +0x6c64 030446 bpatchx patch36_3 ,mem_patch36 +0x6c65 030447 fetch 2 ,mem_current_packet_length +0x6c66 030448 sub pdata ,127 ,null +0x6c67 030449 branch ssp_tx_rfcomm_from_uart_common0 ,positive +0x6c68 030450 fetch 1 ,mem_rfcomm_send_offset +0x6c69 030451 increase 1 ,pdata +0x6c6a 030452 store 1 ,mem_rfcomm_send_offset +: 030453 ssp_tx_rfcomm_from_uart_common0: +0x6c6b 030454 call get_rfcomm_snd_adss +0x6c6c 030455 fetch 2 ,mem_current_packet_length +0x6c6d 030456 increase 8 ,pdata +0x6c6e 030457 fetcht 1 ,mem_rfcomm_send_offset +0x6c6f 030458 iadd temp ,rega +0x6c70 030460 call l2cap_malloc +0x6c71 030461 store 2 ,mem_rfcomm_tx_buff_ptr +0x6c72 030462 increase 4 ,pdata +0x6c73 030463 store 2 ,mem_rfcomm_tx_payload_ptr +0x6c74 030464 copy pdata ,contw +0x6c75 030465 fetch 1 ,mem_rfcomm_send_adss +0x6c76 030466 istore 1 ,contw +0x6c77 030467 fetch 1 ,mem_rfcomm_send_frame_type +0x6c78 030468 istore 1 ,contw +0x6c79 030469 call ssp_tx_write_length +0x6c7a 030470 call ssp_tx_write_given_credit +0x6c7b 030471 bpatchx patch36_4 ,mem_patch36 +0x6c7c 030472 fetch 2 ,mem_nl_rx_data_src +0x6c7d 030473 copy pdata ,contru +0x6c7e 030474 fetch 2 ,mem_current_packet_length +0x6c7f 030475 copy pdata ,loopcnt +0x6c80 030476 call uart_copy_rx_bytes_fast +0x6c81 030477 copy contw ,temp +0x6c82 030478 copy contru ,pdata +0x6c83 030479 store 2 ,mem_nl_rx_data_src +0x6c84 030480 copy temp ,contw +0x6c85 030481 fetch 1 ,mem_rfcomm_send_fcs +0x6c86 030482 istore 1 ,contw +0x6c87 030483 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x6c88 030484 copy pdata ,contw +0x6c89 030485 fetch 2 ,mem_current_packet_length +0x6c8a 030486 fetcht 1 ,mem_rfcomm_send_offset +0x6c8b 030487 iadd temp ,pdata +0x6c8c 030488 increase 4 ,pdata +0x6c8d 030489 istore 2 ,contw +0x6c8e 030490 fetch 2 ,mem_rfcomm_remote_cid +0x6c8f 030491 istore 2 ,contw +0x6c90 030492 jam 0 ,mem_credit_given +0x6c91 030493 fetch 2 ,mem_nl_rx_len_all +0x6c92 030494 beq 0 ,module_hci_command_tx_spp_tx_complete +0x6c93 030495 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x6c94 030496 rtn +: 030498 ssp_tx_write_length: +0x6c95 030499 bpatchx patch36_5 ,mem_patch36 +0x6c96 030500 fetch 2 ,mem_current_packet_length +0x6c97 030501 sub pdata ,0x7f ,null +0x6c98 030502 nbranch ssp_tx_write_long_packet ,positive +0x6c99 030503 lshift pdata ,pdata +0x6c9a 030504 set1 0 ,pdata +0x6c9b 030505 istore 1 ,contw +0x6c9c 030506 rtn +: 030507 ssp_tx_write_long_packet: +0x6c9d 030508 fetch 2 ,mem_current_packet_length +0x6c9e 030509 rshift3 pdata ,pdata +0x6c9f 030510 rshift4 pdata ,temp +0x6ca0 030511 and_into 0x7f ,pdata +0x6ca1 030512 lshift pdata ,pdata +0x6ca2 030513 set0 0 ,pdata +0x6ca3 030514 istore 1 ,contw +0x6ca4 030515 istoret 1 ,contw +0x6ca5 030516 rtn +: 030517 ssp_tx_write_given_credit: +0x6ca6 030518 fetch 1 ,mem_credit_given +0x6ca7 030519 rtn blank +0x6ca8 030520 istore 1 ,contw +0x6ca9 030521 rtn +: 030526 scheduler_process: +0x6caa 030527 bpatchx patch36_6 ,mem_patch36 +0x6cab 030528 call check_51cmd +0x6cac 030529 call app_process_bb_event +0x6cad 030530 call process_conn_sm +0x6cae 030532 bpatchx patch36_7 ,mem_patch36 +0x6caf 030533 call sp_calc_sequence +0x6cb0 030534 call simple_pairing_sequence +0x6cb1 030535 call master_simple_paring_sequence +0x6cb2 030538 call l2cap_malloc_is_fifo_full +0x6cb3 030539 nrtn blank +0x6cb4 030541 call l2cap_call_proc_sigal_pending +0x6cb5 030542 call l2cap_malloc_is_fifo_full +0x6cb6 030543 nrtn blank +0x6cb7 030544 bpatchx patch37_0 ,mem_patch37 +0x6cb8 030546 call process_upper_sm +0x6cb9 030547 call l2cap_send_config_req +0x6cba 030548 call rfcomm_send_more_pkt +: 030549 scheduler_process0: +0x6cbb 030550 call scheduler_tx_disconnect_hid +0x6cbc 030551 bpatchx patch37_1 ,mem_patch37 +0x6cbd 030554 branch app_process_bt +: 030556 scheduler_tx_disconnect_hid: +0x6cbe 030557 fetch 1 ,mem_control_tasks +0x6cbf 030558 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +0x6cc0 030559 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +0x6cc1 030560 rtn +: 030562 scheduler_tx_l2cap_pkt: +0x6cc2 030563 bpatchx patch37_2 ,mem_patch37 +0x6cc3 030564 call l2cap_malloc_is_fifo_empty +0x6cc4 030565 rtn blank +0x6cc5 030566 fetch 1 ,mem_op +0x6cc6 030567 rtnbit1 op_txl2cap +0x6cc7 030568 call l2cap_malloc_fifo_out +0x6cc8 030569 store 2 ,mem_txptr +0x6cc9 030570 copy pdata ,contr +0x6cca 030571 ifetch 2 ,contr +0x6ccb 030572 increase 4 ,pdata +0x6ccc 030573 store 2 ,mem_tx_len +0x6ccd 030574 jam 6 ,mem_tx_lch +0x6cce 030575 bpatchx patch37_3 ,mem_patch37 +0x6ccf 030576 fetch 2 ,mem_l2cap_tx_multi_offset +0x6cd0 030577 branch scheduler_tx_l2cap_start_pkt ,blank +0x6cd1 030578 fetch 1 ,mem_op +0x6cd2 030579 rtnbit0 op_pkt_comp +0x6cd3 030580 set0 op_pkt_comp ,pdata +0x6cd4 030581 store 1 ,mem_op +0x6cd5 030582 jam 5 ,mem_tx_lch +0x6cd6 030583 fetcht 2 ,mem_l2cap_tx_multi_offset +0x6cd7 030584 fetch 2 ,mem_txptr +0x6cd8 030585 iadd temp ,pdata +0x6cd9 030586 store 2 ,mem_txptr +0x6cda 030587 fetch 2 ,mem_tx_len +0x6cdb 030588 isub temp ,pdata +0x6cdc 030589 store 2 ,mem_tx_len +: 030590 scheduler_tx_l2cap_start_pkt: +0x6cdd 030591 bpatchx patch37_4 ,mem_patch37 +0x6cde 030592 fetch 2 ,mem_tx_len +0x6cdf 030593 branch assert ,blank +0x6ce0 030594 arg l2cap_max_pkt_len ,temp +0x6ce1 030595 isub temp ,pdata +0x6ce2 030596 nbranch scheduler_tx_l2cap_last_pkt ,positive +0x6ce3 030597 bpatchx patch37_5 ,mem_patch37 +0x6ce4 030598 storet 2 ,mem_tx_len +0x6ce5 030599 fetch 2 ,mem_l2cap_tx_multi_offset +0x6ce6 030600 iadd temp ,pdata +0x6ce7 030601 store 2 ,mem_l2cap_tx_multi_offset +0x6ce8 030602 branch scheduler_tx_l2cap_pkt_end +: 030603 scheduler_tx_l2cap_last_pkt: +0x6ce9 030604 setarg 0 +0x6cea 030605 store 2 ,mem_l2cap_tx_multi_offset +: 030606 scheduler_tx_l2cap_pkt_end: +0x6ceb 030607 fetch 1 ,mem_op +0x6cec 030608 set1 op_txl2cap ,pdata +0x6ced 030609 store 1 ,mem_op +0x6cee 030610 rtn +: 030612 scheduler_start_upper_sm: +0x6cef 030613 fetch 1 ,mem_ui_profile_supported +0x6cf0 030614 bbit1 support_hid ,scheduler_start_upper_sm_hid +0x6cf1 030615 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +0x6cf2 030616 rtn +: 030617 scheduler_start_upper_sm_hid: +0x6cf3 030618 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6cf4 030619 rtn +: 030621 process_upper_sm: +0x6cf5 030622 fetch 1 ,memui_reconnect_mode +0x6cf6 030623 nbranch process_upper_sm_reconn ,blank +: 030624 process_upper_sm_remote_page: +0x6cf7 030625 fetch 1 ,mem_upper_sm_remote_page +0x6cf8 030627 rtn blank +0x6cf9 030629 jam 0 ,mem_upper_sm_remote_page +: 030630 process_upper_sm_rp_wait: +0x6cfa 030631 rtn +: 030634 process_upper_sm_reconn: +0x6cfb 030635 bpatchx patch37_6 ,mem_patch37 +0x6cfc 030636 fetch 1 ,mem_upper_sm_reconn +0x6cfd 030637 rtn blank +0x6cfe 030638 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +0x6cff 030639 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +0x6d00 030640 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +0x6d01 030641 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +0x6d02 030642 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +0x6d03 030643 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +0x6d04 030644 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +0x6d05 030645 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +0x6d06 030646 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +0x6d07 030647 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +0x6d08 030648 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +0x6d09 030649 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +0x6d0a 030650 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +0x6d0b 030651 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +0x6d0c 030652 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +0x6d0d 030653 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +0x6d0e 030654 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +0x6d0f 030655 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +0x6d10 030656 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +0x6d11 030657 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +0x6d12 030658 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +0x6d13 030659 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +0x6d14 030660 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +0x6d15 030661 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +0x6d16 030662 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +0x6d17 030663 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +0x6d18 030664 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +0x6d19 030665 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait +: 030666 process_upper_sm_reconn_wait: +0x6d1a 030667 rtn +: 030668 process_upper_sm_reconn_sdp_conn: +0x6d1b 030669 call upper_sm_send_sdp_conn +0x6d1c 030670 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +0x6d1d 030671 fetch 1 ,mem_sdp_state +0x6d1e 030672 set1 l2cap_channel_state_conn_req ,pdata +0x6d1f 030673 store 1 ,mem_sdp_state +0x6d20 030674 rtn +: 030675 process_upper_sm_reconn_sdp_cfg: +0x6d21 030676 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d22 030677 fetch 1 ,mem_sdp_state +0x6d23 030678 rtnbit1 l2cap_channel_state_snd_cfg_req +0x6d24 030679 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d25 030680 call upper_sm_send_sdp_cfg +0x6d26 030681 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d27 030682 fetch 1 ,mem_sdp_state +0x6d28 030683 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d29 030684 store 1 ,mem_sdp_state +0x6d2a 030685 rtn +: 030686 process_upper_sm_reconn_ss_spp: +0x6d2b 030687 call l2cap_malloc_is_fifo_empty +0x6d2c 030688 nrtn blank +0x6d2d 030689 call upper_sm_send_ss_spp +0x6d2e 030690 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +0x6d2f 030691 rtn +: 030692 process_upper_sm_reconn_sdp_disconn: +0x6d30 030693 call upper_sm_send_sdp_disconn +0x6d31 030694 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +0x6d32 030695 rtn +: 030696 process_upper_sm_reconn_hid_ctrl_conn: +0x6d33 030697 call upper_sm_send_hid_ctrl_conn +0x6d34 030698 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +0x6d35 030699 fetch 1 ,mem_hid_control_state +0x6d36 030700 set1 l2cap_channel_state_conn_req ,pdata +0x6d37 030701 store 1 ,mem_hid_control_state +0x6d38 030702 rtn +: 030703 process_upper_sm_reconn_hid_ctrl_cfg: +0x6d39 030704 call upper_sm_send_hid_ctrl_cfg +0x6d3a 030705 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +0x6d3b 030706 fetch 1 ,mem_hid_control_state +0x6d3c 030707 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d3d 030708 store 1 ,mem_hid_control_state +0x6d3e 030709 rtn +: 030710 process_upper_sm_reconn_hid_int_conn: +0x6d3f 030711 call upper_sm_send_hid_int_conn +0x6d40 030712 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +0x6d41 030713 fetch 1 ,mem_hid_interrupt_state +0x6d42 030714 set1 l2cap_channel_state_conn_req ,pdata +0x6d43 030715 store 1 ,mem_hid_interrupt_state +0x6d44 030716 rtn +: 030717 process_upper_sm_reconn_hid_int_cfg: +0x6d45 030718 call upper_sm_send_hid_int_cfg +0x6d46 030719 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +0x6d47 030720 fetch 1 ,mem_hid_interrupt_state +0x6d48 030721 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d49 030722 store 1 ,mem_hid_interrupt_state +0x6d4a 030723 rtn +: 030724 process_upper_sm_reconn_rfcomm_conn: +0x6d4b 030725 call upper_sm_send_rfcomm_conn +0x6d4c 030726 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +0x6d4d 030727 fetch 1 ,mem_rfcomm_state +0x6d4e 030728 set1 l2cap_channel_state_conn_req ,pdata +0x6d4f 030729 store 1 ,mem_rfcomm_state +0x6d50 030730 rtn +: 030731 process_upper_sm_reconn_rfcomm_cfg: +0x6d51 030732 call upper_sm_send_rfcomm_cfg +0x6d52 030733 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +0x6d53 030734 fetch 1 ,mem_rfcomm_state +0x6d54 030735 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d55 030736 store 1 ,mem_rfcomm_state +0x6d56 030737 rtn +: 030738 process_upper_sm_reconn_rfcomm_sabm: +0x6d57 030739 call upper_sm_send_rfcomm_sabm +0x6d58 030740 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +0x6d59 030741 fetch 1 ,mem_rfcomm_state +0x6d5a 030742 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6d5b 030743 store 1 ,mem_rfcomm_state +0x6d5c 030744 rtn +: 030745 process_upper_sm_reconn_spp_cmd_pn: +0x6d5d 030746 call upper_sm_send_spp_cmd_pn +0x6d5e 030747 fetch 1 ,mem_spp_state +0x6d5f 030748 set1 rfcomm_channel_state_pn_cmd +0x6d60 030749 store 1 ,mem_spp_state +0x6d61 030750 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +0x6d62 030751 rtn +: 030752 process_upper_sm_reconn_spp_sabm: +0x6d63 030753 call upper_sm_send_spp_sabm +0x6d64 030754 fetch 1 ,mem_spp_state +0x6d65 030755 set1 rfcomm_channel_state_sabm +0x6d66 030756 store 1 ,mem_spp_state +0x6d67 030757 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +0x6d68 030758 fetch 1 ,mem_remote_spp_channel +0x6d69 030759 lshift3 pdata ,pdata +0x6d6a 030760 or_into 3 ,pdata +0x6d6b 030761 arg mem_hiufcs_spp ,temp +0x6d6c 030762 storet 2 ,mem_contw_temp +0x6d6d 030763 branch rfcomm_save_fcs_uih +: 030764 process_upper_sm_reconn_spp_cmd_ms: +0x6d6e 030765 call upper_sm_send_spp_cmd_ms +0x6d6f 030766 fetch 1 ,mem_spp_state +0x6d70 030767 set1 rfcomm_channel_state_snd_ms_cmd +0x6d71 030768 store 1 ,mem_spp_state +0x6d72 030769 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +0x6d73 030770 rtn +: 030772 process_upper_sm_reconn_sdp_conn_wait: +0x6d74 030773 fetch 1 ,mem_sdp_state +0x6d75 030774 rtnbit0 l2cap_channel_state_conn_res +0x6d76 030775 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d77 030776 branch process_upper_sm_reconn +: 030777 process_upper_sm_reconn_sdp_cfg_wait: +0x6d78 030778 fetch 1 ,mem_sdp_state +0x6d79 030779 rtnne l2cap_channel_setup_complete +0x6d7a 030780 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn +: 030781 process_upper_sm_reconn_ss_spp_wait: +0x6d7b 030782 fetch 1 ,mem_message_to_uppersm +0x6d7c 030783 rtnne recieve_ss_reasult_hf +0x6d7d 030784 jam 0 ,mem_message_to_uppersm +0x6d7e 030785 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +0x6d7f 030786 branch process_upper_sm_reconn +: 030787 process_upper_sm_reconn_sdp_disconn_wait: +0x6d80 030788 fetch 1 ,mem_sdp_state +0x6d81 030789 nrtn blank +0x6d82 030790 fetch 1 ,mem_ui_profile_supported +0x6d83 030791 bbit1 support_hid ,process_upper_sm_reconn_setup_hid +0x6d84 030792 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d85 030793 branch process_upper_sm_reconn_termination +: 030794 process_upper_sm_reconn_hid_ctrl_conn_wait: +0x6d86 030795 fetch 1 ,mem_hid_control_state +0x6d87 030796 rtnbit0 l2cap_channel_state_conn_res +0x6d88 030797 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +0x6d89 030798 branch process_upper_sm_reconn +: 030799 process_upper_sm_reconn_hid_ctrl_cfg_wait: +0x6d8a 030800 fetch 1 ,mem_hid_control_state +0x6d8b 030801 rtnne l2cap_channel_setup_complete +0x6d8c 030802 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +0x6d8d 030803 branch process_upper_sm_reconn +: 030804 process_upper_sm_reconn_hid_int_conn_wait: +0x6d8e 030805 fetch 1 ,mem_hid_interrupt_state +0x6d8f 030806 rtnbit0 l2cap_channel_state_conn_res +0x6d90 030807 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +0x6d91 030808 branch process_upper_sm_reconn +: 030809 process_upper_sm_reconn_hid_int_cfg_wait: +0x6d92 030810 fetch 1 ,mem_hid_interrupt_state +0x6d93 030811 rtnne l2cap_channel_setup_complete +0x6d94 030812 fetch 1 ,mem_ui_profile_supported +0x6d95 030813 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d96 030814 branch process_upper_sm_reconn_termination +: 030815 process_upper_sm_reconn_rfcomm_conn_wait: +0x6d97 030816 fetch 1 ,mem_rfcomm_state +0x6d98 030817 rtnbit0 l2cap_channel_state_conn_res +0x6d99 030818 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +0x6d9a 030819 branch process_upper_sm_reconn +: 030820 process_upper_sm_reconn_rfcomm_cfg_wait: +0x6d9b 030821 fetch 1 ,mem_rfcomm_state +0x6d9c 030822 rtnne l2cap_channel_setup_complete +0x6d9d 030823 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +0x6d9e 030824 branch process_upper_sm_reconn +: 030825 process_upper_sm_reconn_rfcomm_sabm_wait: +0x6d9f 030826 fetch 1 ,mem_rfcomm_state +0x6da0 030827 rtnne l2cap_channel_rfcomm_dlci0_opened +0x6da1 030828 fetch 1 ,mem_ui_profile_supported +0x6da2 030829 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +0x6da3 030830 branch process_upper_sm_reconn_termination +: 030831 process_upper_sm_reconn_spp_cmd_pn_wait: +0x6da4 030832 fetch 1 ,mem_spp_state +0x6da5 030833 rtnbit0 rfcomm_channel_state_pn_res +0x6da6 030834 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +0x6da7 030835 branch process_upper_sm_reconn +: 030836 process_upper_sm_reconn_spp_sabm_wait: +0x6da8 030837 fetch 1 ,mem_spp_state +0x6da9 030838 rtnbit0 rfcomm_channel_state_ua +0x6daa 030839 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +0x6dab 030840 branch process_upper_sm_reconn +: 030841 process_upper_sm_reconn_spp_cmd_ms_wait: +0x6dac 030842 fetch 1 ,mem_spp_state +0x6dad 030843 rtnne rfcomm_channel_setup_complete +0x6dae 030844 branch process_upper_sm_reconn_termination +: 030846 process_upper_sm_reconn_setup_hid: +0x6daf 030847 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6db0 030848 branch process_upper_sm_reconn +: 030850 process_upper_sm_reconn_setup_rfcomm: +0x6db1 030851 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +0x6db2 030852 branch process_upper_sm_reconn +: 030853 process_upper_sm_reconn_setup_spp: +0x6db3 030854 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +0x6db4 030855 branch process_upper_sm_reconn +: 030859 process_upper_sm_reconn_termination: +0x6db5 030860 jam 0 ,mem_upper_sm_reconn +0x6db6 030861 rtn +: 030862 upper_sm_send_sdp_conn: +0x6db7 030863 bpatchx patch37_7 ,mem_patch37 +0x6db8 030864 call l2cap_malloc_signal_channel +0x6db9 030865 setarg psm_sdp +0x6dba 030866 copy pdata ,temp +0x6dbb 030867 setarg l2cap_sdp_channel +0x6dbc 030868 copy pdata ,timeup +0x6dbd 030869 branch ml2cap_send_signal_connect_req +: 030871 upper_sm_send_sdp_cfg: +0x6dbe 030872 bpatchx patch38_0 ,mem_patch38 +0x6dbf 030873 call l2cap_malloc_signal_channel +0x6dc0 030874 fetch 2 ,mem_sdp_remote_cid +0x6dc1 030875 copy pdata ,temp +0x6dc2 030876 branch ml2cap_send_signal_config_req +: 030878 upper_sm_send_sdp_disconn: +0x6dc3 030879 bpatchx patch38_1 ,mem_patch38 +0x6dc4 030880 call l2cap_malloc_signal_channel +0x6dc5 030881 fetch 2 ,mem_sdp_remote_cid +0x6dc6 030882 copy pdata ,temp +0x6dc7 030883 arg l2cap_sdp_channel ,timeup +0x6dc8 030884 call ml2cap_send_signal_disconn_req +0x6dc9 030885 fetch 1 ,mem_sdp_state +0x6dca 030886 set0 l2cap_channel_state_rcv_cfg_res ,pdata +0x6dcb 030887 store 1 ,mem_sdp_state +0x6dcc 030888 rtn +: 030890 upper_sm_send_ss_spp: +0x6dcd 030891 bpatchx patch38_2 ,mem_patch38 +0x6dce 030892 call l2cap_malloc_sdp_channel +0x6dcf 030893 call sdp_send_spp_request +0x6dd0 030894 branch msdp_send_req_done +: 030896 upper_sm_send_rfcomm_conn: +0x6dd1 030897 bpatchx patch38_3 ,mem_patch38 +0x6dd2 030898 call l2cap_malloc_signal_channel +0x6dd3 030899 setarg psm_rfcomm +0x6dd4 030900 copy pdata ,temp +0x6dd5 030901 setarg l2cap_rfcomm_channel +0x6dd6 030902 copy pdata ,timeup +0x6dd7 030903 branch ml2cap_send_signal_connect_req +: 030905 upper_sm_send_rfcomm_cfg: +0x6dd8 030906 bpatchx patch38_4 ,mem_patch38 +0x6dd9 030907 call l2cap_malloc_signal_channel +0x6dda 030908 fetch 2 ,mem_rfcomm_remote_cid +0x6ddb 030909 copy pdata ,temp +0x6ddc 030910 branch ml2cap_send_signal_config_req +: 030912 upper_sm_send_hid_ctrl_conn: +0x6ddd 030913 bpatchx patch38_5 ,mem_patch38 +0x6dde 030914 call l2cap_malloc_signal_channel +0x6ddf 030915 setarg psm_hid_control +0x6de0 030916 copy pdata ,temp +0x6de1 030917 setarg l2cap_hid_control_channel +0x6de2 030918 copy pdata ,timeup +0x6de3 030919 branch ml2cap_send_signal_connect_req +: 030921 upper_sm_send_hid_ctrl_cfg: +0x6de4 030922 bpatchx patch38_6 ,mem_patch38 +0x6de5 030923 call l2cap_malloc_signal_channel +0x6de6 030924 fetch 2 ,mem_hid_ctrl_remote_cid +0x6de7 030925 copy pdata ,temp +0x6de8 030926 branch ml2cap_send_signal_config_req +: 030928 upper_sm_send_hid_int_conn: +0x6de9 030929 bpatchx patch38_7 ,mem_patch38 +0x6dea 030930 call l2cap_malloc_signal_channel +0x6deb 030931 setarg psm_hid_interrupt +0x6dec 030932 copy pdata ,temp +0x6ded 030933 setarg l2cap_hid_interrupt_channel +0x6dee 030934 copy pdata ,timeup +0x6def 030935 branch ml2cap_send_signal_connect_req +: 030937 upper_sm_send_hid_int_cfg: +0x6df0 030938 bpatchx patch39_0 ,mem_patch39 +0x6df1 030939 call l2cap_malloc_signal_channel +0x6df2 030940 fetch 2 ,mem_hid_int_remote_cid +0x6df3 030941 copy pdata ,temp +0x6df4 030942 branch ml2cap_send_signal_config_req +: 030944 upper_sm_send_rfcomm_sabm: +0x6df5 030945 bpatchx patch39_1 ,mem_patch39 +0x6df6 030946 call l2cap_malloc_rfcomm_channel +0x6df7 030948 jam 3 ,mem_current_adss +0x6df8 030949 jam 0x1c ,mem_current_fcs +0x6df9 030950 call rfcomm_send_sabm +0x6dfa 030951 jam 1 ,mem_rfcomm_initiator +0x6dfb 030952 rtn +: 030954 upper_sm_send_spp_cmd_pn: +0x6dfc 030955 bpatchx patch39_2 ,mem_patch39 +0x6dfd 030956 call l2cap_malloc_rfcomm_channel +0x6dfe 030957 fetcht 1 ,mem_remote_spp_channel +0x6dff 030958 call channel_to_dlci +0x6e00 030959 storet 1 ,mem_pn_dlci +0x6e01 030960 branch rfcomm_send_param_neg_cmd +: 030962 upper_sm_send_spp_sabm: +0x6e02 030963 bpatchx patch39_3 ,mem_patch39 +0x6e03 030964 call l2cap_malloc_rfcomm_channel +0x6e04 030965 fetcht 1 ,mem_pn_dlci +0x6e05 030966 call dlci_to_address_cmd +0x6e06 030967 call rfcomm_calculate_fcs_sabm +0x6e07 030968 store 1 ,mem_current_fcs +0x6e08 030969 fetcht 1 ,mem_pn_dlci +0x6e09 030970 call dlci_to_address_cmd +0x6e0a 030971 storet 1 ,mem_current_adss +0x6e0b 030972 branch rfcomm_send_sabm +: 030974 upper_sm_send_spp_cmd_ms: +0x6e0c 030975 bpatchx patch39_4 ,mem_patch39 +0x6e0d 030976 call l2cap_malloc_rfcomm_channel +0x6e0e 030977 fetcht 1 ,mem_pn_dlci +0x6e0f 030978 call dlci_to_address_cmd +0x6e10 030979 branch rfcomm_send_modem_status_cmd +: 030992 sdp_process: +0x6e11 030993 bpatchx patch39_5 ,mem_patch39 +0x6e12 030994 fetch 2 ,mem_l2cap_payload_ptr +0x6e13 030995 iforce contr +0x6e14 030998 ifetch 1 ,contr +0x6e15 030999 copy pdata ,regb +0x6e16 031000 store 1 ,mem_sdp_pduid +0x6e17 031001 ifetch 2 ,contr +0x6e18 031002 store 2 ,mem_sdp_transactionid +0x6e19 031003 ifetch 1 ,contr +0x6e1a 031004 lshift8 pdata ,timeup +0x6e1b 031005 ifetch 1 ,contr +0x6e1c 031006 iadd timeup ,timeup +0x6e1d 031007 bpatchx patch39_6 ,mem_patch39 +0x6e1e 031008 copy contr ,temp +0x6e1f 031009 arg 4 ,loopcnt +0x6e20 031010 arg mem_sdp_handle_list ,contw +0x6e21 031011 call memset0 +0x6e22 031012 copy temp ,contr +0x6e23 031013 deposit regb +0x6e24 031014 beq sdp_error_res ,sdp_process_error_res +0x6e25 031015 beq sdp_search_req ,sdp_process_ss_req +0x6e26 031016 beq sdp_search_res ,sdp_process_ss_res +0x6e27 031017 beq sdp_attribute_req ,sdp_process_sa_req +0x6e28 031018 beq sdp_attribute_res ,sdp_process_sa_res +0x6e29 031019 beq sdp_searchattrib_req ,sdp_process_ssa_req +0x6e2a 031020 beq sdp_searchattrib_res ,sdp_process_ssa_res +0x6e2b 031021 branch sdp_insufficient_resource +: 031032 sdp_process_ss_req: +0x6e2c 031033 bpatchx patch39_7 ,mem_patch39 +0x6e2d 031034 call ask_serviceclassid +0x6e2e 031035 compare 1 ,temp ,0xff +0x6e2f 031036 branch ss_empty_rsp ,true +0x6e30 031037 compare 0xff ,temp ,0xff +0x6e31 031038 branch sdp_invalid_request_syntax ,true +0x6e32 031040 ifetch 2 ,contr +0x6e33 031041 store 2 ,mem_sdp_record_maxcnt +0x6e34 031042 increase -2 ,timeup +0x6e35 031044 increase -1 ,timeup +0x6e36 031045 nbranch sdp_invalid_pdu_size ,zero +0x6e37 031046 arg mem_sdp_uuid_search_ptr ,timeup +0x6e38 031047 ifetch 2 ,timeup +0x6e39 031048 rtn blank +0x6e3a 031049 call search_all_uuid +0x6e3b 031050 call l2cap_get_sdp_tx_payload +0x6e3c 031051 force 3 ,pdata +0x6e3d 031052 istore 1 ,contw +0x6e3e 031053 fetch 2 ,mem_sdp_transactionid +0x6e3f 031054 istore 2 ,contw +0x6e40 031055 lshift2 queue ,pdata +0x6e41 031056 add pdata ,5 ,pdata +0x6e42 031057 add pdata ,5 ,regc +0x6e43 031058 byteswap pdata ,pdata +0x6e44 031059 istore 2 ,contw +0x6e45 031060 deposit queue +0x6e46 031061 byteswap pdata ,pdata +0x6e47 031062 istore 2 ,contw +0x6e48 031063 istore 2 ,contw +0x6e49 031064 arg mem_sdp_handle_list ,contr +0x6e4a 031065 copy queue ,loopcnt +0x6e4b 031066 branch ss_req_blank ,zero +: 031067 ss_req_loop: +0x6e4c 031068 ifetch 4 ,contr +0x6e4d 031069 istore 4 ,contw +0x6e4e 031070 loop ss_req_loop +: 031071 ss_req_blank: +0x6e4f 031072 force 0 ,pdata +0x6e50 031073 istore 1 ,contw +0x6e51 031074 deposit regc +0x6e52 031075 store 2 ,mem_sdp_tx_pkt_length +0x6e53 031077 rtn +: 031088 sdp_process_sa_req: +0x6e54 031089 bpatchx patch3a_0 ,mem_patch3a +0x6e55 031090 ifetch 4 ,contr +0x6e56 031091 store 4 ,mem_sdp_record_handle +0x6e57 031092 increase -4 ,timeup +0x6e58 031093 call sdp_store_maxbyte +0x6e59 031094 store 2 ,mem_sdp_attribute_maxbyte +0x6e5a 031095 increase -2 ,timeup +0x6e5b 031096 call dataelementtype6 +0x6e5c 031097 branch sdp_invalid_request_syntax ,zero +0x6e5d 031098 compare 5 ,rega ,0xff +0x6e5e 031100 branch sa_judge_wholerange ,true +: 031101 sa_isnot_wholerange: +0x6e5f 031102 arg mem_sdp_attrib_list ,contw +0x6e60 031103 force 0 ,queue +0x6e61 031104 branch sa_req_loop +: 031105 sa_judge_wholerange: +0x6e62 031106 ifetch 1 ,contr +0x6e63 031107 bne sdp_attribute_range ,sdp_invalid_request_syntax +0x6e64 031108 ifetch 2 ,contr +0x6e65 031109 nbranch sa_judge_wholerange_false1 ,blank +0x6e66 031110 ifetch 1 ,contr +0x6e67 031111 bne 0xff ,sa_judge_wholerange_false2 +0x6e68 031112 ifetch 1 ,contr +0x6e69 031113 bne 0xff ,sa_judge_wholerange_false3 +0x6e6a 031114 branch sa_req_all +: 031115 sa_judge_wholerange_false3: +0x6e6b 031116 increase -5 ,contr +0x6e6c 031117 branch sa_isnot_wholerange +: 031118 sa_judge_wholerange_false2: +0x6e6d 031119 increase -4 ,contr +0x6e6e 031120 branch sa_isnot_wholerange +: 031121 sa_judge_wholerange_false1: +0x6e6f 031122 increase -3 ,contr +0x6e70 031123 branch sa_isnot_wholerange +: 031124 sa_req_loop: +0x6e71 031125 ifetch 1 ,contr +0x6e72 031126 beq sdp_attribute_id ,sa_req_one_id +0x6e73 031127 beq sdp_attribute_range ,sa_req_range +: 031128 sa_req_range: +0x6e74 031129 ifetch 2 ,contr +0x6e75 031130 istore 2 ,contw +0x6e76 031131 increase 1 ,queue +0x6e77 031132 byteswap pdata ,regb +0x6e78 031133 ifetch 2 ,contr +0x6e79 031134 byteswap pdata ,pdata +: 031135 sa_req_range_id_increase: +0x6e7a 031136 increase 1 ,regb +0x6e7b 031137 isub regb ,null +0x6e7c 031138 nbranch sa_req_range_id_finish ,positive +0x6e7d 031139 copy pdata ,regc +0x6e7e 031140 byteswap regb ,pdata +0x6e7f 031141 istore 2 ,contw +0x6e80 031142 increase 1 ,queue +0x6e81 031143 copy regc ,pdata +0x6e82 031144 branch sa_req_range_id_increase +: 031145 sa_req_range_id_finish: +0x6e83 031146 increase -5 ,timeup +0x6e84 031147 increase -5 ,rega +0x6e85 031148 branch sa_req_check_next_id +: 031149 sa_req_one_id: +0x6e86 031150 ifetch 2 ,contr +0x6e87 031151 istore 2 ,contw +0x6e88 031152 increase 1 ,queue +0x6e89 031153 increase -3 ,timeup +0x6e8a 031154 increase -3 ,rega +: 031155 sa_req_check_next_id: +0x6e8b 031156 nbranch sdp_invalid_request_syntax ,positive +0x6e8c 031157 nbranch sa_req_loop ,zero +0x6e8d 031158 increase -1 ,timeup +0x6e8e 031159 nbranch sdp_invalid_request_syntax ,zero +0x6e8f 031161 call l2cap_get_sdp_tx_payload +0x6e90 031162 increase 10 ,contw +0x6e91 031163 arg mem_sdp_attrib_list ,rega +: 031164 sa_req_handle_attributelist_next: +0x6e92 031165 copy queue ,pdata +0x6e93 031166 branch sa_req_handle_attributelist_end ,blank +0x6e94 031167 ifetch 2 ,rega +0x6e95 031168 branch sa_req_handle_attributelist_end ,blank +0x6e96 031169 iforce regb +0x6e97 031170 fetch 4 ,mem_sdp_record_handle +0x6e98 031171 iforce temp +0x6e99 031172 call search_handle_attrib +0x6e9a 031173 copy contr ,pdata +0x6e9b 031174 branch sa_req_handle_attributelist_notfound ,blank +0x6e9c 031175 increase -3 ,contr +0x6e9d 031176 ifetch 3 ,contr +0x6e9e 031177 istore 3 ,contw +0x6e9f 031178 call sdp_data_len +0x6ea0 031179 iforce loopcnt +0x6ea1 031180 call memcpy +: 031181 sa_req_handle_attributelist_notfound: +0x6ea2 031182 increase 2 ,rega +0x6ea3 031183 increase -1 ,queue +0x6ea4 031184 branch sa_req_handle_attributelist_next +: 031186 sa_req_handle_attributelist_end: +0x6ea5 031187 arg sdp_attribute_res ,rega +0x6ea6 031188 call ssa_req_range_lastfreg_common +0x6ea7 031189 fetch 2 ,mem_sdp_tx_pkt_length +0x6ea8 031190 beq 11 ,sa_empty_rsp +0x6ea9 031191 branch ssa_req_range_attrbutes_length_no_continue +: 031194 sdp_store_continue_common: +0x6eaa 031195 ifetch 1 ,contr +0x6eab 031196 beq 0 ,sdp_store_continue_0byte +0x6eac 031197 beq 1 ,sdp_store_continue_1byte +0x6ead 031198 beq 2 ,sdp_store_continue_2byte +: 031199 sdp_store_continue_0byte: +0x6eae 031200 increase -1 ,timeup +0x6eaf 031201 branch sdp_store_continue_end +: 031202 sdp_store_continue_1byte: +0x6eb0 031203 ifetch 1 ,contr +0x6eb1 031204 increase -2 ,timeup +0x6eb2 031205 branch sdp_store_continue_end +: 031206 sdp_store_continue_2byte: +0x6eb3 031207 ifetch 2 ,contr +0x6eb4 031208 byteswap pdata ,pdata +0x6eb5 031209 increase -3 ,timeup +: 031210 sdp_store_continue_end: +0x6eb6 031211 store 2 ,mem_sdp_continue_byte +0x6eb7 031212 rtn +: 031214 sa_req_all: +0x6eb8 031215 increase -5 ,timeup +0x6eb9 031216 call sdp_store_continue_common +0x6eba 031217 nbranch sdp_invalid_pdu_size ,zero +0x6ebb 031218 fetcht 4 ,mem_sdp_record_handle +0x6ebc 031219 call search_handle +0x6ebd 031220 nbranch sdp_invalid_service_record_handle ,zero +0x6ebe 031221 copy contr ,rega +0x6ebf 031222 call l2cap_get_sdp_tx_payload +0x6ec0 031223 copy rega ,contr +0x6ec1 031224 increase 3 ,contw +0x6ec2 031225 copy contr ,timeup +0x6ec3 031226 call sdp_get_data +0x6ec4 031227 copy pdata ,rega +0x6ec5 031229 fetch 2 ,mem_sdp_continue_byte +0x6ec6 031230 copy pdata ,regb +0x6ec7 031231 copy rega ,pdata +0x6ec8 031232 isub regb ,regb +0x6ec9 031233 fetch 2 ,mem_sdp_attribute_maxbyte +0x6eca 031234 isub regb ,null +0x6ecb 031235 nbranch sa_req_all_fragment_sdp ,positive +0x6ecc 031237 disable user +0x6ecd 031238 fetch 2 ,mem_sdp_continue_byte +0x6ece 031239 branch sa_req_all_fisrt_fragment ,blank +0x6ecf 031240 iadd timeup ,contr +0x6ed0 031241 increase 3 ,regb +0x6ed1 031242 copy regb ,loopcnt +0x6ed2 031243 copy loopcnt ,pdata +0x6ed3 031244 increase 3 ,pdata +0x6ed4 031245 byteswap pdata ,pdata +0x6ed5 031246 istore 2 ,contw +0x6ed6 031247 copy loopcnt ,pdata +0x6ed7 031248 byteswap pdata ,pdata +0x6ed8 031249 istore 2 ,contw +0x6ed9 031250 branch sa_req_all_answer_attributelist_full_loop +: 031251 sa_req_all_fisrt_fragment: +0x6eda 031252 add rega ,6 ,loopcnt +0x6edb 031253 branch sa_req_all_parlength_continue_byte ,user +0x6edc 031254 byteswap loopcnt ,pdata +0x6edd 031255 branch sa_req_all_parlength_continue_byte_end +: 031256 sa_req_all_parlength_continue_byte: +0x6ede 031257 copy loopcnt ,pdata +0x6edf 031258 increase 2 ,pdata +0x6ee0 031259 byteswap pdata ,pdata +: 031260 sa_req_all_parlength_continue_byte_end: +0x6ee1 031261 istore 2 ,contw +0x6ee2 031262 increase -3 ,loopcnt +0x6ee3 031263 byteswap loopcnt ,pdata +0x6ee4 031264 istore 2 ,contw +0x6ee5 031265 copy timeup ,contr +0x6ee6 031266 branch sa_req_all_answer_attributelist_full_loop +: 031267 sa_req_all_fragment_sdp: +0x6ee7 031268 enable user +0x6ee8 031270 fetch 2 ,mem_sdp_attribute_maxbyte +0x6ee9 031271 copy pdata ,rega +0x6eea 031272 copy rega ,loopcnt +0x6eeb 031273 fetch 2 ,mem_sdp_continue_byte +0x6eec 031274 branch sa_req_all_fisrt_fragment ,blank +0x6eed 031275 iadd timeup ,contr +0x6eee 031276 copy rega ,pdata +0x6eef 031277 increase 5 ,pdata +0x6ef0 031278 byteswap pdata ,pdata +0x6ef1 031279 istore 2 ,contw +0x6ef2 031280 copy rega ,pdata +0x6ef3 031281 byteswap pdata ,pdata +0x6ef4 031282 istore 2 ,contw +: 031283 sa_req_all_answer_attributelist_full_loop: +0x6ef5 031284 call memcpy +0x6ef6 031285 nbranch sa_req_all_last_frag_continue ,user +0x6ef7 031286 force 2 ,pdata +0x6ef8 031287 istore 1 ,contw +0x6ef9 031288 copy contr ,pdata +0x6efa 031289 isub timeup ,pdata +0x6efb 031290 byteswap pdata ,pdata +0x6efc 031291 istore 2 ,contw +0x6efd 031292 branch sa_req_all_frag_end +: 031293 sa_req_all_last_frag_continue: +0x6efe 031294 force 0 ,pdata +0x6eff 031295 istore 1 ,contw +: 031296 sa_req_all_frag_end: +0x6f00 031297 arg sdp_attribute_res ,rega +0x6f01 031298 branch ssa_req_range_common +: 031309 sdp_process_ssa_req: +0x6f02 031310 bpatchx patch3a_1 ,mem_patch3a +0x6f03 031311 call ask_serviceclassid +0x6f04 031312 compare 0xff ,temp ,0xff +0x6f05 031313 branch sdp_invalid_request_syntax ,true +0x6f06 031314 call sdp_store_maxbyte +0x6f07 031315 store 2 ,mem_sdp_attribute_maxbyte +0x6f08 031316 increase -2 ,timeup +0x6f09 031317 call dataelementtype6 +0x6f0a 031318 arg mem_sdp_attrib_list ,contw +0x6f0b 031319 force 0 ,queue +: 031320 ssa_req_loop: +0x6f0c 031321 ifetch 1 ,contr +0x6f0d 031322 beq sdp_attribute_range ,ssa_req_range +0x6f0e 031323 ifetch 2 ,contr +0x6f0f 031324 istore 2 ,contw +0x6f10 031325 increase 1 ,queue +0x6f11 031326 increase -3 ,timeup +0x6f12 031327 increase -3 ,rega +0x6f13 031328 nbranch sdp_invalid_request_syntax ,positive +0x6f14 031329 nbranch ssa_req_loop ,zero +0x6f15 031330 increase -1 ,timeup +0x6f16 031331 nbranch sdp_invalid_request_syntax ,zero +0x6f17 031332 call l2cap_get_sdp_tx_payload +0x6f18 031333 increase 13 ,contw +0x6f19 031334 fetch 2 ,mem_sdp_uuid_search_ptr +0x6f1a 031335 iforce regc +0x6f1b 031336 arg mem_sdp_attrib_list ,rega +: 031337 ssa_req_attributelist_next: +0x6f1c 031338 ifetch 2 ,rega +0x6f1d 031339 branch ssa_req_attributelist_end ,blank +0x6f1e 031340 iforce regb +0x6f1f 031341 call search_attrib +0x6f20 031342 branch ssa_req_attributelist_notfound ,blank +0x6f21 031343 increase -3 ,contr +0x6f22 031344 ifetch 3 ,contr +0x6f23 031345 istore 3 ,contw +0x6f24 031346 call sdp_data_len +0x6f25 031347 iforce loopcnt +0x6f26 031348 call memcpy +: 031349 ssa_req_attributelist_notfound: +0x6f27 031350 increase 2 ,rega +0x6f28 031351 branch ssa_req_attributelist_next +: 031353 ssa_req_attributelist_end: +0x6f29 031354 call ssa_req_range_lastfreg +0x6f2a 031355 fetch 2 ,mem_sdp_tx_pkt_length +0x6f2b 031356 beq 14 ,ssa_empty_rsp +0x6f2c 031357 call ssa_req_range_attrbutes_length_no_continue +0x6f2d 031358 branch ssa_req_range_attrbutes_length_no_continue +: 031361 sdp_store_maxbyte: +0x6f2e 031362 ifetch 2 ,contr +0x6f2f 031363 byteswap pdata ,pdata +0x6f30 031364 increase -3 ,pdata +0x6f31 031365 arg 200 ,temp +0x6f32 031366 isub temp ,null +0x6f33 031367 nrtn positive +0x6f34 031368 setarg 200 +0x6f35 031369 rtn +: 031372 ssa_req_range: +0x6f36 031373 increase 4 ,contr +0x6f37 031374 increase -5 ,timeup +0x6f38 031375 increase -5 ,rega +0x6f39 031376 nbranch sdp_invalid_request_syntax ,zero +0x6f3a 031377 call sdp_store_continue_common +0x6f3b 031378 nbranch sdp_invalid_pdu_size ,zero +0x6f3c 031379 arg mem_sdp_uuid_search_ptr ,timeup +0x6f3d 031380 call search_all_uuid +0x6f3e 031381 deposit queue +0x6f3f 031382 branch ssa_empty_rsp ,blank +0x6f40 031383 store 1 ,mem_handle_humber +0x6f41 031385 copy regb ,pdata +0x6f42 031386 store 2 ,mem_sdp_all_length +0x6f43 031387 arg 0 ,queue +0x6f44 031388 arg 0 ,rega +0x6f45 031389 call l2cap_get_sdp_tx_payload +0x6f46 031390 increase 10 ,contw +: 031391 ssa_req_range_find_handle: +0x6f47 031392 call ssa_req_range_get_length +0x6f48 031393 nbranch assert ,user +0x6f49 031394 copy contr ,timeup +0x6f4a 031395 copy pdata ,regc +0x6f4b 031396 iadd rega ,rega +0x6f4c 031399 fetch 2 ,mem_sdp_continue_byte +0x6f4d 031400 copy pdata ,regb +0x6f4e 031401 branch ssa_req_range_first_freg ,blank +: 031402 ssa_req_range_later_freg_with_continue: +0x6f4f 031403 copy rega ,pdata +0x6f50 031404 isub regb ,regb +0x6f51 031405 branch ssa_req_range_next_handle ,zero +0x6f52 031406 nbranch ssa_req_range_next_handle ,positive +0x6f53 031407 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f54 031408 isub regb ,null +0x6f55 031409 branch ssa_req_range_maxbyte_with_continue ,zero +0x6f56 031410 nbranch ssa_req_range_maxbyte_with_continue ,positive +: 031413 ssa_req_range_send_not_maxbyte: +0x6f57 031414 copy regb ,loopcnt +0x6f58 031415 call ssa_req_range_maxbyte_with_continue_cpy +0x6f59 031416 fetch 1 ,mem_handle_humber +0x6f5a 031417 increase 1 ,queue +0x6f5b 031418 isub queue ,null +0x6f5c 031419 branch ssa_req_range_lastfreg ,zero +0x6f5d 031420 branch ssa_req_range_freg_with_continue +: 031422 ssa_req_range_maxbyte_with_continue: +0x6f5e 031423 copy pdata ,loopcnt +0x6f5f 031424 call ssa_req_range_maxbyte_with_continue_cpy +0x6f60 031425 branch ssa_req_range_freg_with_continue +: 031427 ssa_req_range_maxbyte_with_continue_cpy: +0x6f61 031428 increase -3 ,contw +0x6f62 031429 copy loopcnt ,temp +0x6f63 031430 copy regc ,pdata +0x6f64 031431 isub regb ,pdata +0x6f65 031432 iadd timeup ,contr +0x6f66 031433 branch memcpy +: 031435 ssa_req_range_next_handle: +0x6f67 031436 fetch 1 ,mem_handle_humber +0x6f68 031437 increase 1 ,queue +0x6f69 031438 isub queue ,null +0x6f6a 031439 rtn zero +0x6f6b 031440 branch ssa_req_range_find_handle +: 031442 ssa_req_range_get_length: +0x6f6c 031443 call disable_user +0x6f6d 031444 arg mem_sdp_handle_list ,contr +0x6f6e 031445 lshift2 queue ,pdata +0x6f6f 031446 iadd contr ,contr +0x6f70 031447 ifetcht 4 ,contr +0x6f71 031448 call search_handle +0x6f72 031449 nrtn zero +0x6f73 031450 call sdp_data_len +0x6f74 031451 branch enable_user +: 031453 ssa_req_range_first_freg: +0x6f75 031454 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f76 031455 isub rega ,null +0x6f77 031456 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +0x6f78 031457 copy rega ,loopcnt +0x6f79 031458 copy loopcnt ,temp +0x6f7a 031459 copy timeup ,contr +0x6f7b 031460 call memcpy +0x6f7c 031461 fetch 2 ,mem_sdp_all_length +0x6f7d 031462 isub rega ,null +0x6f7e 031463 branch ssa_req_range_freg_no_continue ,zero +: 031464 ssa_req_range_firstfreg_not_maxbyte_with_continue: +0x6f7f 031465 call ssa_req_range_freg_with_continue +0x6f80 031466 branch ssa_req_range_attrbutes_length +: 031468 ssa_req_range_freg_no_continue: +0x6f81 031469 call ssa_req_range_lastfreg +0x6f82 031470 branch ssa_req_range_attrbutes_length +: 031472 ssa_req_range_lastfreg: +0x6f83 031473 arg sdp_searchattrib_res ,rega +: 031474 ssa_req_range_lastfreg_common: +0x6f84 031475 force 0 ,pdata +0x6f85 031476 istore 1 ,contw +0x6f86 031477 call ssa_req_range_common +0x6f87 031478 fetcht 2 ,mem_sdp_tx_pkt_length +0x6f88 031479 increase -5 ,temp +0x6f89 031480 byteswap temp ,pdata +0x6f8a 031481 istore 2 ,contw +0x6f8b 031482 increase -3 ,temp +0x6f8c 031483 byteswap temp ,pdata +0x6f8d 031484 istore 2 ,contw +0x6f8e 031485 rtn +: 031487 ssa_req_range_firstfreg_maxbyte_with_continue: +0x6f8f 031488 copy pdata ,loopcnt +0x6f90 031489 copy loopcnt ,temp +0x6f91 031490 copy timeup ,contr +0x6f92 031491 call memcpy +0x6f93 031492 call ssa_req_range_freg_with_continue +: 031493 ssa_req_range_attrbutes_length: +0x6f94 031494 setarg 0x36 +0x6f95 031495 istore 1 ,contw +0x6f96 031496 fetch 2 ,mem_sdp_all_length +0x6f97 031497 byteswap pdata ,pdata +0x6f98 031498 istore 2 ,contw +0x6f99 031499 rtn +: 031501 ssa_req_range_attrbutes_length_no_continue: +0x6f9a 031502 setarg 0x36 +0x6f9b 031503 istore 1 ,contw +0x6f9c 031504 increase -3 ,temp +0x6f9d 031505 byteswap temp ,pdata +0x6f9e 031506 istore 2 ,contw +0x6f9f 031507 rtn +: 031509 ssa_req_range_freg_with_continue: +0x6fa0 031510 arg sdp_searchattrib_res ,rega +0x6fa1 031511 setarg 2 +0x6fa2 031512 istore 1 ,contw +0x6fa3 031513 fetch 2 ,mem_sdp_continue_byte +0x6fa4 031514 iadd temp ,temp +0x6fa5 031515 byteswap temp ,pdata +0x6fa6 031516 istore 2 ,contw +0x6fa7 031517 call ssa_req_range_common +0x6fa8 031518 fetcht 2 ,mem_sdp_tx_pkt_length +0x6fa9 031519 increase -5 ,temp +0x6faa 031520 byteswap temp ,pdata +0x6fab 031521 istore 2 ,contw +0x6fac 031522 increase -5 ,temp +0x6fad 031523 byteswap temp ,pdata +0x6fae 031524 istore 2 ,contw +0x6faf 031525 rtn +: 031527 ssa_req_range_common: +0x6fb0 031528 fetch 2 ,mem_sdp_tx_payload_ptr +0x6fb1 031529 isub contw ,pdata +0x6fb2 031530 sub pdata ,0 ,pdata +0x6fb3 031531 store 2 ,mem_sdp_tx_pkt_length +0x6fb4 031532 call l2cap_get_sdp_tx_payload +0x6fb5 031533 copy rega ,pdata +0x6fb6 031534 istore 1 ,contw +0x6fb7 031535 fetch 2 ,mem_sdp_transactionid +0x6fb8 031536 istore 2 ,contw +0x6fb9 031537 rtn +: 031550 sdp_process_ssa_res: +: 031551 sdp_process_ss_res: +: 031552 sdp_process_sa_res: +: 031553 sdp_process_error_res: +0x6fba 031554 rtn +: 031587 sdp_invalid_service_record_handle: +0x6fbb 031588 setarg 0x0200 +0x6fbc 031589 store 2 ,mem_sdp_error_code +0x6fbd 031590 branch sdp_error_response +: 031591 sdp_invalid_pdu_size: +0x6fbe 031592 setarg 0x0400 +0x6fbf 031593 store 2 ,mem_sdp_error_code +0x6fc0 031594 branch sdp_error_response +: 031595 sdp_insufficient_resource: +0x6fc1 031596 setarg 0x0600 +0x6fc2 031597 store 2 ,mem_sdp_error_code +0x6fc3 031598 branch sdp_error_response +: 031599 sdp_invalid_request_syntax: +0x6fc4 031600 setarg 0x0300 +0x6fc5 031601 store 2 ,mem_sdp_error_code +: 031602 sdp_error_response: +0x6fc6 031603 call l2cap_get_sdp_tx_payload +0x6fc7 031604 istore 1 ,contw +0x6fc8 031605 fetch 2 ,mem_sdp_transactionid +0x6fc9 031606 istore 2 ,contw +0x6fca 031607 setarg 0x0200 +0x6fcb 031608 istore 2 ,contw +0x6fcc 031609 fetch 2 ,mem_sdp_error_code +0x6fcd 031610 istore 2 ,contw +0x6fce 031611 jam 7 ,mem_sdp_tx_pkt_length +0x6fcf 031612 rtn +: 031617 ask_serviceclassid: +0x6fd0 031618 arg 0 ,regb +0x6fd1 031619 force 0 ,temp +0x6fd2 031620 arg mem_sdp_uuid_search_ptr ,contw +0x6fd3 031621 call dataelementtype6 +0x6fd4 031622 branch asksrv_error ,zero +: 031623 classidloop: +0x6fd5 031624 increase 1 ,regb +0x6fd6 031625 ifetch 1 ,contr +0x6fd7 031626 increase -1 ,rega +0x6fd8 031627 increase -1 ,timeup +0x6fd9 031628 compare 0x18 ,pdata ,0xf8 +0x6fda 031629 nbranch asksrv_error ,true +0x6fdb 031630 compare 0x04 ,pdata ,0x07 +0x6fdc 031631 nbranch cmp032 ,true +0x6fdd 031632 force 1 ,temp +: 031633 skip2bytes: +0x6fde 031634 ifetch 1 ,contr +0x6fdf 031635 increase -1 ,rega +0x6fe0 031636 increase -1 ,timeup +0x6fe1 031637 bne 0x00 ,frstbwrong +0x6fe2 031638 ifetch 1 ,contr +0x6fe3 031639 increase -1 ,rega +0x6fe4 031640 increase -1 ,timeup +0x6fe5 031641 beq 0x00 ,cmpuuid +0x6fe6 031642 branch scndbwrong +: 031643 frstbwrong: +0x6fe7 031644 increase 1 ,contr +0x6fe8 031645 increase -1 ,rega +0x6fe9 031646 increase -1 ,timeup +: 031647 scndbwrong: +0x6fea 031648 increase 2 ,contr +0x6feb 031649 increase -2 ,rega +0x6fec 031650 increase -2 ,timeup +0x6fed 031651 compare 0x00 ,temp ,0xff +0x6fee 031652 branch loopornot ,true +0x6fef 031653 increase 12 ,contr +0x6ff0 031654 increase -12 ,rega +0x6ff1 031655 increase -12 ,timeup +0x6ff2 031656 branch loopornot +: 031657 cmp032: +0x6ff3 031658 compare 0x02 ,pdata ,0x07 +0x6ff4 031659 nbranch cmp016 ,true +0x6ff5 031660 branch skip2bytes +: 031661 cmp016: +0x6ff6 031662 compare 0x01 ,pdata ,0x07 +0x6ff7 031663 nbranch asksrv_error ,true +: 031664 cmpuuid: +0x6ff8 031665 increase -2 ,rega +0x6ff9 031666 increase -2 ,timeup +0x6ffa 031667 ifetch 2 ,contr +0x6ffb 031668 sub regb ,4 ,null +0x6ffc 031669 branch uuidsize ,zero +0x6ffd 031670 istore 2 ,contw +: 031671 uuidsize: +0x6ffe 031672 compare 0x00 ,temp ,0xff +0x6fff 031673 branch loopornot ,true +0x7000 031674 copy contr ,temp +0x7001 031675 ifetch 1 ,contr +0x7002 031676 bne 0x00 ,wrong12b +0x7003 031677 ifetch 1 ,contr +0x7004 031678 bne 0x00 ,wrong12b +0x7005 031679 ifetch 1 ,contr +0x7006 031680 bne 0x10 ,wrong12b +0x7007 031681 ifetch 1 ,contr +0x7008 031682 bne 0x00 ,wrong12b +0x7009 031683 ifetch 1 ,contr +0x700a 031684 bne 0x80 ,wrong12b +0x700b 031685 ifetch 1 ,contr +0x700c 031686 bne 0x00 ,wrong12b +0x700d 031687 ifetch 1 ,contr +0x700e 031688 bne 0x00 ,wrong12b +0x700f 031689 ifetch 1 ,contr +0x7010 031690 bne 0x80 ,wrong12b +0x7011 031691 ifetch 1 ,contr +0x7012 031692 bne 0x5f ,wrong12b +0x7013 031693 ifetch 1 ,contr +0x7014 031694 bne 0x9b ,wrong12b +0x7015 031695 ifetch 1 ,contr +0x7016 031696 bne 0x34 ,wrong12b +0x7017 031697 ifetch 1 ,contr +0x7018 031698 beq 0xfb ,chck12dn +: 031699 wrong12b: +0x7019 031700 copy temp ,contr +: 031701 wrong12b1: +0x701a 031702 increase 12 ,contr +0x701b 031703 force 0x00 ,queue +0x701c 031704 force 0x00 ,temp +0x701d 031705 branch chck12dn +: 031707 chck12dn: +0x701e 031708 increase -12 ,timeup +0x701f 031709 increase -12 ,rega +: 031710 loopornot: +0x7020 031711 force 0x00 ,temp +0x7021 031712 compare 0x00 ,rega ,0xff +0x7022 031713 nbranch classidloop ,true +0x7023 031714 force 0 ,pdata +0x7024 031715 istore 2 ,contw +0x7025 031716 rtn +: 031717 asksrv_error: +0x7026 031718 arg 0xff ,temp +0x7027 031719 rtn +: 031729 dataelementtype6: +0x7028 031730 bpatchx patch3a_4 ,mem_patch3a +0x7029 031731 ifetch 1 ,contr +0x702a 031732 increase -1 ,timeup +0x702b 031733 compare 0x30 ,pdata ,0xf8 +0x702c 031734 nbranch dsize_error ,true +0x702d 031735 compare 0x07 ,pdata ,0x07 +0x702e 031736 branch dsize32 ,true +0x702f 031737 compare 0x06 ,pdata ,0x07 +0x7030 031738 branch dsize16 ,true +0x7031 031739 compare 0x05 ,pdata ,0x07 +0x7032 031740 nbranch dsize_error ,true +0x7033 031742 ifetch 1 ,contr +0x7034 031743 copy pdata ,rega +0x7035 031744 increase -1 ,timeup +0x7036 031745 branch dsize +: 031746 dsize32: +0x7037 031747 increase 2 ,contr +0x7038 031748 increase -2 ,timeup +: 031749 dsize16: +0x7039 031750 ifetch 2 ,contr +0x703a 031751 byteswap pdata ,rega +0x703b 031752 increase -2 ,timeup +: 031753 dsize: +0x703c 031754 force 0x01 ,pdata +0x703d 031755 rtn +: 031756 dsize_error: +0x703e 031757 force 0x00 ,pdata +0x703f 031758 rtn +: 031768 ss_empty_rsp: +0x7040 031769 setarg sdp_search_res +0x7041 031770 store 1 ,mem_sdp_pduid +0x7042 031771 branch empty_response +: 031772 sa_empty_rsp: +0x7043 031773 setarg sdp_attribute_res +0x7044 031774 store 1 ,mem_sdp_pduid +0x7045 031775 branch empty_response +: 031776 ssa_empty_rsp: +0x7046 031777 setarg sdp_searchattrib_res +0x7047 031778 store 1 ,mem_sdp_pduid +: 031779 empty_response: +0x7048 031780 call l2cap_get_sdp_tx_payload +0x7049 031783 fetch 1 ,mem_sdp_pduid +0x704a 031784 copy pdata ,regb +0x704b 031785 istore 1 ,contw +0x704c 031786 fetch 2 ,mem_sdp_transactionid +0x704d 031787 istore 2 ,contw +0x704e 031788 setarg 0x0500 +0x704f 031789 istore 2 ,contw +0x7050 031790 compare sdp_attribute_res ,regb ,0xff +0x7051 031791 branch fullsearch ,true +0x7052 031792 compare sdp_searchattrib_res ,regb ,0xff +0x7053 031793 branch fullsearch ,true +0x7054 031794 setarg 0x000000 +0x7055 031795 istore 5 ,contw +0x7056 031796 branch outempty +: 031798 fullsearch: +0x7057 031799 setarg 0x350200 +0x7058 031800 istore 5 ,contw +: 031801 outempty: +0x7059 031802 jam 10 ,mem_sdp_tx_pkt_length +0x705a 031803 rtn +: 031806 sdp_data_len: +0x705b 031807 call store_contw +0x705c 031808 call store_contr +0x705d 031809 call sdp_get_data +0x705e 031810 call get_contw +0x705f 031811 call get_contr +0x7060 031812 copy temp ,pdata +0x7061 031813 rtn +: 031816 sdp_get_data: +0x7062 031817 ifetch 1 ,contr +0x7063 031818 and pdata ,0x7 ,loopcnt +0x7064 031819 rshift3 pdata ,pdata +0x7065 031820 bne 0 ,sdp_get_data_type_not0 +: 031821 sdp_get_data_type0: +0x7066 031822 force 1 ,pdata +0x7067 031823 force 1 ,temp +0x7068 031824 rtn +: 031826 sdp_get_data_type_not0_sizeindex01234: +0x7069 031827 call left_shift_n +0x706a 031828 add pdata ,1 ,temp +0x706b 031829 rtn +: 031830 sdp_get_data_type_not0: +0x706c 031831 deposit loopcnt +0x706d 031832 sub pdata ,4 ,null +0x706e 031833 branch sdp_get_data_type_not0_sizeindex01234 ,positive +0x706f 031834 beq 5 ,sdp_get_data_type_not0_sizeindex5 +0x7070 031835 beq 6 ,sdp_get_data_type_not0_sizeindex6 +0x7071 031836 beq 7 ,sdp_get_data_type_not0_sizeindex7 +0x7072 031837 rtn +: 031839 sdp_get_data_type_not0_sizeindex5: +0x7073 031840 ifetch 1 ,contr +0x7074 031841 add pdata ,2 ,temp +0x7075 031842 rtn +: 031843 sdp_get_data_type_not0_sizeindex6: +0x7076 031844 ifetch 2 ,contr +0x7077 031845 byteswap pdata ,pdata +0x7078 031846 add pdata ,3 ,temp +0x7079 031847 rtn +: 031848 sdp_get_data_type_not0_sizeindex7: +0x707a 031849 ifetch 2 ,contr +0x707b 031850 byteswap pdata ,pdata +0x707c 031851 ifetcht 2 ,contr +0x707d 031852 byteswap temp ,temp +0x707e 031853 lshift16 temp ,temp +0x707f 031854 iadd temp ,pdata +0x7080 031855 add pdata ,5 ,temp +0x7081 031856 rtn +: 031862 search_all_uuid: +0x7082 031863 bpatchx patch3a_5 ,mem_patch3a +0x7083 031864 force 0 ,queue +0x7084 031865 arg 0 ,regb +0x7085 031866 arg mem_sdp_handle_list ,contw +: 031867 search_all_uuid_llop: +0x7086 031868 ifetch 2 ,timeup +0x7087 031869 rtn blank +0x7088 031870 call search_uuid +0x7089 031871 copy queue ,pdata +0x708a 031872 rtneq sdp_max_handle_number +0x708b 031873 increase 2 ,timeup +0x708c 031874 branch search_all_uuid_llop +: 031876 search_uuid: +0x708d 031878 iforce regc +0x708e 031880 fetch 2 ,mem_ui_uuid_table +0x708f 031881 iforce contr +: 031882 search_uuid_next: +0x7090 031883 copy queue ,pdata +0x7091 031884 rtneq sdp_max_handle_number +0x7092 031885 disable user +0x7093 031886 ifetch 1 ,contr +0x7094 031887 rtn blank +0x7095 031888 iforce loopcnt +: 031889 search_uuid_loop: +0x7096 031890 ifetch 2 ,contr +0x7097 031891 isub regc ,null +0x7098 031892 nbranch search_uuid_not_found ,zero +0x7099 031893 enable user +: 031894 search_uuid_not_found: +0x709a 031895 loop search_uuid_loop +0x709b 031896 ifetcht 4 ,contr +0x709c 031897 copy contr ,rega +0x709d 031898 nbranch search_uuid_nomatch ,user +0x709e 031899 arg mem_sdp_handle_list ,contr +0x709f 031900 arg sdp_max_handle_number ,loopcnt +: 031901 search_uuid_check_same_handle: +0x70a0 031902 ifetch 4 ,contr +0x70a1 031903 branch search_uuid_store_handle ,blank +0x70a2 031904 isub temp ,null +0x70a3 031905 branch search_uuid_nomatch ,zero +0x70a4 031906 loop search_uuid_check_same_handle +0x70a5 031907 rtn +: 031908 search_uuid_store_handle: +0x70a6 031909 istoret 4 ,contw +0x70a7 031910 increase 1 ,queue +0x70a8 031911 copy rega ,contr +0x70a9 031912 call sdp_data_len +0x70aa 031913 iadd regb ,regb +0x70ab 031914 iadd contr ,contr +0x70ac 031915 branch search_uuid_next +: 031916 search_uuid_nomatch: +0x70ad 031917 copy rega ,contr +0x70ae 031918 call sdp_get_data +0x70af 031919 iadd contr ,contr +0x70b0 031920 branch search_uuid_next +: 031926 search_handle: +0x70b1 031927 bpatchx patch3a_6 ,mem_patch3a +0x70b2 031928 fetch 2 ,mem_ui_uuid_table +0x70b3 031929 iforce contr +: 031930 search_handle_loop: +0x70b4 031931 ifetch 1 ,contr +0x70b5 031932 branch disable_zero ,blank +0x70b6 031933 lshift pdata ,pdata +0x70b7 031934 iadd contr ,contr +0x70b8 031935 ifetch 4 ,contr +0x70b9 031936 isub temp ,null +0x70ba 031937 rtn zero +0x70bb 031938 deposit contw +0x70bc 031939 store 2 ,mem_contw +0x70bd 031940 storet 8 ,mem_temp +0x70be 031941 call sdp_get_data +0x70bf 031942 iadd contr ,contr +0x70c0 031943 copy contr ,pdata +0x70c1 031944 fetcht 2 ,mem_contw +0x70c2 031945 copy temp ,contw +0x70c3 031946 fetcht 8 ,mem_temp +0x70c4 031947 copy pdata ,contr +0x70c5 031948 branch search_handle_loop +: 031954 search_attrib: +0x70c6 031955 bpatchx patch3a_7 ,mem_patch3a +0x70c7 031956 fetch 2 ,mem_ui_uuid_table +0x70c8 031957 iforce contr +: 031958 search_attrib_next: +0x70c9 031959 ifetch 1 ,contr +0x70ca 031960 branch search_attrib_end ,blank +0x70cb 031961 iforce loopcnt +: 031962 search_attrib_loop: +0x70cc 031963 ifetch 2 ,contr +0x70cd 031964 isub regc ,null +0x70ce 031965 branch search_attrib_found_uuid ,zero +0x70cf 031966 loop search_attrib_loop +0x70d0 031967 increase 4 ,contr +0x70d1 031968 call sdp_get_data +0x70d2 031969 iadd contr ,contr +0x70d3 031970 branch search_attrib_next +: 031971 search_attrib_found_uuid: +0x70d4 031972 increase -1 ,loopcnt +0x70d5 031973 lshift loopcnt ,pdata +0x70d6 031974 iadd contr ,contr +0x70d7 031975 increase 4 ,contr +0x70d8 031976 call sdp_get_data +0x70d9 031977 iadd contr ,timeup +: 031978 search_attrib_loop_attribs: +0x70da 031979 increase 1 ,contr +0x70db 031980 ifetch 2 ,contr +0x70dc 031981 isub regb ,null +0x70dd 031985 branch disable_blank ,zero +0x70de 031986 call sdp_data_len +0x70df 031987 iadd contr ,contr +0x70e0 031988 deposit timeup +0x70e1 031989 isub contr ,null +0x70e2 031990 branch search_attrib_end ,zero +0x70e3 031991 branch search_attrib_loop_attribs +: 031992 search_attrib_end: +0x70e4 031993 force 0 ,contr +0x70e5 031994 force 0 ,pdata +0x70e6 031995 rtn +: 032001 search_handle_attrib: +0x70e7 032002 bpatchx patch3b_0 ,mem_patch3b +0x70e8 032003 fetch 2 ,mem_ui_uuid_table +0x70e9 032004 iforce contr +: 032005 search_handle_attrib_next: +0x70ea 032006 ifetch 1 ,contr +0x70eb 032007 branch search_handle_attrib_end ,blank +0x70ec 032008 lshift pdata ,pdata +0x70ed 032009 iadd contr ,contr +0x70ee 032010 ifetch 4 ,contr +0x70ef 032011 isub temp ,null +0x70f0 032012 branch search_handl_attrib_found_handle ,zero +0x70f1 032013 call sdp_get_data +0x70f2 032014 iadd contr ,contr +0x70f3 032015 branch search_handle_attrib_next +: 032016 search_handl_attrib_found_handle: +0x70f4 032017 call sdp_get_data +0x70f5 032018 iadd contr ,timeup +: 032019 search_handle_attrib_loop_attribs: +0x70f6 032020 increase 1 ,contr +0x70f7 032021 ifetch 2 ,contr +0x70f8 032022 isub regb ,null +0x70f9 032023 rtn zero +0x70fa 032024 call sdp_data_len +0x70fb 032025 iadd contr ,contr +0x70fc 032026 deposit timeup +0x70fd 032027 isub contr ,null +0x70fe 032028 branch search_handle_attrib_end ,zero +0x70ff 032029 branch search_handle_attrib_loop_attribs +: 032030 search_handle_attrib_end: +0x7100 032031 force 0 ,contr +0x7101 032032 rtn +: 032036 search_rfcomm_cn: +0x7102 032037 arg 0x0400 ,regb +0x7103 032038 call search_handl_attrib_found_handle +0x7104 032039 arg 0x0300 ,regb +0x7105 032040 call search_uuid_in_data +0x7106 032041 nrtn user +0x7107 032042 sub rega ,3 ,null +0x7108 032043 branch disable_user ,positive +0x7109 032044 ifetch 1 ,contr +0x710a 032045 bne 0x08 ,disable_user +0x710b 032046 ifetch 1 ,contr +0x710c 032047 rtn +: 032052 search_uuid_in_data: +0x710d 032053 bpatchx patch3b_1 ,mem_patch3b +0x710e 032054 call sdp_get_data +0x710f 032055 copy pdata ,rega +: 032056 search_uuid_in_data_loop: +0x7110 032057 ifetch 1 ,contr +0x7111 032058 and pdata ,0x7 ,loopcnt +0x7112 032059 rshift3 pdata ,pdata +0x7113 032060 sub pdata ,3 ,null +0x7114 032061 branch search_uuid_in_data_found_uuid ,zero +0x7115 032062 copy loopcnt ,pdata +0x7116 032063 beq 5 ,search_uuid_in_data_found_element_index5 +0x7117 032064 beq 6 ,search_uuid_in_data_found_element_index6 +0x7118 032065 beq 7 ,search_uuid_in_data_found_element_index7 +0x7119 032066 increase -1 ,contr +0x711a 032067 call sdp_get_data +0x711b 032068 iadd contr ,contr +0x711c 032069 copy rega ,pdata +0x711d 032070 isub temp ,rega +0x711e 032071 branch disable_user ,zero +0x711f 032072 branch search_uuid_in_data_loop +: 032074 search_uuid_in_data_found_element_index5: +0x7120 032075 increase -2 ,rega +0x7121 032076 increase 1 ,contr +0x7122 032077 branch search_uuid_in_data_loop +: 032078 search_uuid_in_data_found_element_index6: +0x7123 032079 increase -3 ,rega +0x7124 032080 increase 2 ,contr +0x7125 032081 branch search_uuid_in_data_loop +: 032082 search_uuid_in_data_found_element_index7: +0x7126 032083 increase -5 ,rega +0x7127 032084 increase 4 ,contr +0x7128 032085 branch search_uuid_in_data_loop +: 032087 search_uuid_in_data_found_uuid: +0x7129 032088 increase -1 ,rega +0x712a 032089 copy loopcnt ,pdata +0x712b 032090 beq 1 ,search_uuid_in_data_type_uuid_16 +0x712c 032091 beq 2 ,search_uuid_in_data_type_uuid_32 +0x712d 032092 beq 4 ,search_uuid_in_data_type_uuid_128 +0x712e 032093 branch disable_user +: 032094 search_uuid_in_data_type_uuid_128: +0x712f 032095 increase -12 ,rega +: 032096 search_uuid_in_data_type_uuid_32: +0x7130 032097 ifetch 2 ,contr +0x7131 032098 increase -2 ,rega +: 032099 search_uuid_in_data_type_uuid_16: +0x7132 032100 ifetch 2 ,contr +0x7133 032101 isub regb ,null +0x7134 032102 branch enable_user ,zero +0x7135 032103 increase -2 ,rega +0x7136 032104 branch disable_user ,zero +0x7137 032105 branch search_uuid_in_data_loop +: 032164 sdp_send_spp_request: +0x7138 032165 call l2cap_get_sdp_tx_payload +0x7139 032166 copy pdata ,contw +0x713a 032167 setarg 6 +0x713b 032168 istore 1 ,contw +0x713c 032169 setarg sdp_tid_spp +0x713d 032170 istore 2 ,contw +0x713e 032171 setarg 0x0f00 +0x713f 032172 istore 2 ,contw +0x7140 032173 setarg 0x1a0535 +0x7141 032174 istore 3 ,contw +0x7142 032175 setarg 0x0111 +0x7143 032176 lshift16 pdata ,pdata +0x7144 032177 istore 4 ,contw +0x7145 032178 setarg 0x2600 +0x7146 032179 istore 2 ,contw +0x7147 032180 setarg 0x0335 +0x7148 032181 istore 2 ,contw +0x7149 032182 setarg 0x0009 +0x714a 032183 istore 2 ,contw +0x714b 032184 setarg 0x0004 +0x714c 032185 istore 2 ,contw +0x714d 032186 jam 0x14 ,mem_sdp_tx_pkt_length +0x714e 032187 rtn +: 032191 function_g2: +0x714f 032192 bpatchx patch3b_2 ,mem_patch3b +0x7150 032193 jam 80 ,mem_aes_cmac_data_length +0x7151 032194 arg memdat ,contw +0x7152 032195 arg mem_le_srand ,contr +0x7153 032196 call memcpy16 +0x7154 032197 arg mem_le_pubkey_local_x_256 ,contr +0x7155 032198 call memcpy32 +0x7156 032199 arg mem_le_pubkey_remote_x_256 ,contr +0x7157 032200 call memcpy32 +0x7158 032201 call inverse_memdat +0x7159 032202 arg mem_le_mrand ,contr +0x715a 032203 call store_inverse_k +0x715b 032204 call function_aes_cmac +0x715c 032206 arg mem_aes_cmac_temp ,contw +0x715d 032207 call load_inverse_result +0x715e 032208 setarg 1000000 +0x715f 032209 copy pdata ,rega +0x7160 032210 fetch 4 ,mem_aes_cmac_temp +0x7161 032211 idiv rega +0x7162 032212 call wait_div_end +0x7163 032213 remainder pdata +0x7164 032214 store 4 ,mem_gkey +0x7165 032216 rtn +: 032218 function_f6_eb: +0x7166 032219 jam 65 ,mem_aes_cmac_data_length +0x7167 032220 arg memdat ,contw +0x7168 032221 call store_addr_common_a +0x7169 032222 call store_addr_common_b +0x716a 032223 fetch 3 ,mem_le_pres + 1 +0x716b 032224 istore 3 ,contw +0x716c 032227 call get_r +0x716d 032229 arg mem_le_mrand ,contr +0x716e 032230 call memcpy16 +0x716f 032231 arg mem_le_srand ,contr +0x7170 032232 call memcpy16 +0x7171 032233 call inverse_memdat +0x7172 032234 arg mem_le_mackey ,contr +0x7173 032235 arg mem_aes_cmac_k ,contw +0x7174 032236 call memcpy16 +0x7175 032238 branch function_aes_cmac +: 032242 get_r: +0x7176 032243 fetch 4 ,mem_le_tk +0x7177 032244 istore 4 ,contw +0x7178 032245 call memset0_4 +0x7179 032246 branch memset0_8 +: 032248 function_f6_ea: +0x717a 032249 bpatchx patch3b_3 ,mem_patch3b +0x717b 032250 jam 65 ,mem_aes_cmac_data_length +0x717c 032251 arg memdat ,contw +0x717d 032252 call store_addr_common_b +0x717e 032253 call store_addr_common_a +0x717f 032254 fetch 3 ,mem_le_preq + 1 +0x7180 032255 istore 3 ,contw +0x7181 032258 call get_r +0x7182 032259 arg mem_le_srand ,contr +0x7183 032260 call memcpy16 +0x7184 032261 arg mem_le_mrand ,contr +0x7185 032262 call memcpy16 +0x7186 032263 call inverse_memdat +0x7187 032264 arg mem_le_mackey ,contr +0x7188 032265 arg mem_aes_cmac_k ,contw +0x7189 032266 call memcpy16 +0x718a 032268 call function_aes_cmac +0x718b 032269 arg mem_aes_cmac_temp ,contw +0x718c 032270 branch load_inverse_result +: 032272 function_f5: +0x718d 032273 jam 32 ,mem_aes_cmac_data_length +0x718e 032274 arg mem_le_dhkey_256 ,contr +0x718f 032275 arg memdat ,contw +0x7190 032276 call memcpy32 +0x7191 032277 call inverse_memdat +0x7192 032278 arg mem_le_slat ,contr +0x7193 032279 call store_inverse_k +0x7194 032280 call function_aes_cmac +0x7195 032281 arg mem_aes_cmac_k ,contw +0x7196 032282 call store_aes_result +0x7197 032283 arg 1 ,temp +0x7198 032284 call function_f5_common +0x7199 032285 arg mem_le_ltk ,contw +0x719a 032286 call load_inverse_result +0x719b 032287 arg 0 ,temp +0x719c 032288 call function_f5_common +0x719d 032289 arg mem_le_mackey ,contw +0x719e 032291 branch store_aes_result +: 032294 function_f5_common: +0x719f 032295 bpatchx patch3b_4 ,mem_patch3b +0x71a0 032296 jam 53 ,mem_aes_cmac_data_length +0x71a1 032297 setarg 0x100 +0x71a2 032298 store 2 ,memdat +0x71a3 032299 call store_addr_common_b +0x71a4 032300 call store_addr_common_a +0x71a5 032301 arg mem_le_srand ,contr +0x71a6 032302 call memcpy16 +0x71a7 032303 arg mem_le_mrand ,contr +0x71a8 032304 call memcpy16 +0x71a9 032306 setarg 0x6c65 +0x71aa 032307 istore 2 ,contw +0x71ab 032308 setarg 0x6274 +0x71ac 032309 istore 2 ,contw +0x71ad 032310 istoret 1 ,contw +0x71ae 032311 call inverse_memdat +0x71af 032312 branch function_aes_cmac +: 032314 store_addr_common_b: +0x71b0 032315 fetch 6 ,mem_le_lap +0x71b1 032316 istore 6 ,contw +0x71b2 032317 fetch 1 ,mem_le_conn_own_addr_type +0x71b3 032318 istore 1 ,contw +0x71b4 032319 rtn +: 032321 store_addr_common_a: +0x71b5 032322 fetch 6 ,mem_le_plap +0x71b6 032323 istore 6 ,contw +0x71b7 032328 fetch 1 ,mem_le_conn_peer_addr_type +0x71b8 032329 istore 1 ,contw +0x71b9 032330 rtn +: 032332 function_f4_ca: +0x71ba 032333 jam 65 ,mem_aes_cmac_data_length +0x71bb 032334 fetch 1 ,mem_passkey_1bit +0x71bc 032335 store 1 ,memdat +0x71bd 032336 arg mem_le_pubkey_local_x_256 ,contr +0x71be 032337 call memcpy32 +0x71bf 032338 arg mem_le_pubkey_remote_x_256 ,contr +0x71c0 032339 call memcpy32 +0x71c1 032340 call inverse_memdat +0x71c2 032341 arg mem_le_mrand ,contr +0x71c3 032342 call store_inverse_k +0x71c4 032343 branch function_aes_cmac +: 032346 function_f4_cb: +0x71c5 032347 jam 65 ,mem_aes_cmac_data_length +0x71c6 032348 fetch 1 ,mem_passkey_1bit +0x71c7 032349 store 1 ,memdat +0x71c8 032350 arg mem_le_pubkey_remote_x_256 ,contr +0x71c9 032351 call memcpy32 +0x71ca 032352 arg mem_le_pubkey_local_x_256 ,contr +0x71cb 032353 call memcpy32 +0x71cc 032354 call inverse_memdat +0x71cd 032355 arg mem_le_srand ,contr +0x71ce 032356 call store_inverse_k +0x71cf 032357 branch function_aes_cmac +: 032359 function_aes_cmac: +0x71d0 032360 bpatchx patch3b_5 ,mem_patch3b +0x71d1 032361 call function_aes_cmac_generate_subkey +0x71d2 032365 fetch 1 ,mem_aes_cmac_data_length +0x71d3 032366 copy pdata ,temp +: 032367 function_ceil16: +0x71d4 032368 increase 15 ,pdata +0x71d5 032369 rshift4 pdata ,pdata +0x71d6 032370 copy pdata ,regb +0x71d7 032371 branch function_aes_cmac_set_flag_0_balnk ,blank +0x71d8 032372 and temp ,0x0f ,pdata +0x71d9 032373 nbranch function_aes_cmac_set_flag_0 ,blank +0x71da 032375 arg mem_aes_cmac_k1 ,regc +0x71db 032376 arg memdat ,pdata +0x71dc 032377 increase -16 ,pdata +0x71dd 032380 iadd temp ,rega +0x71de 032381 arg mem_aes_cmac_m_last ,contw +0x71df 032382 arg 4 ,loopcnt +0x71e0 032383 call xor_loop +0x71e1 032387 branch function_aes_cmac_aes +: 032389 function_aes_cmac_set_flag_0_balnk: +0x71e2 032390 arg 1 ,regb +0x71e3 032391 arg 0 ,rega +0x71e4 032393 branch function_aes_cmac_set_flag_0_common +: 032396 function_aes_cmac_set_flag_0: +0x71e5 032398 and temp ,0x0f ,rega +: 032399 function_aes_cmac_set_flag_0_common: +0x71e6 032400 arg memdat ,pdata +0x71e7 032401 iadd temp ,pdata +0x71e8 032402 isub rega ,contr +0x71e9 032404 arg mem_aes_cmac_temp ,contw +0x71ea 032405 call function_aes_cmac_padding +0x71eb 032407 arg mem_aes_cmac_k2 ,regc +0x71ec 032408 arg mem_aes_cmac_temp ,rega +0x71ed 032409 arg mem_aes_cmac_m_last ,contw +0x71ee 032410 arg 4 ,loopcnt +0x71ef 032411 call xor_loop +: 032418 function_aes_cmac_aes: +0x71f0 032423 call aes_clear_data +0x71f1 032424 call aes_init +0x71f2 032427 arg memdat ,contr +: 032428 function_aes_cmac_aes_loop: +0x71f3 032430 increase -1 ,regb +0x71f4 032431 deposit regb +0x71f5 032432 branch function_aes_cmac_aes_loop_end ,blank +0x71f6 032433 call load_data128 +0x71f7 032434 call do_aes_cbc +0x71f8 032435 branch function_aes_cmac_aes_loop +: 032437 function_aes_cmac_aes_loop_end: +0x71f9 032438 arg mem_aes_cmac_temp ,contw +0x71fa 032439 call store_aes_result +0x71fb 032440 arg mem_aes_cmac_m_last ,contr +0x71fc 032441 call load_data128 +0x71fd 032442 call aes_init +0x71fe 032443 arg mem_aes_cmac_temp ,contr +0x71ff 032444 call load_data128 +0x7200 032445 branch do_aes_cbc +: 032449 load_inverse_result: +0x7201 032451 copy contw ,rega +0x7202 032452 call store_aes_result +0x7203 032454 arg 16 ,loopcnt +0x7204 032455 branch inverse_data +: 032457 store_inverse_k: +0x7205 032458 arg mem_aes_cmac_k ,contw +0x7206 032459 call memcpy16 +: 032460 inverse_k: +0x7207 032461 arg 16 ,loopcnt +0x7208 032462 arg mem_aes_cmac_k ,rega +0x7209 032463 branch inverse_data +: 032465 inverse_memdat: +0x720a 032466 fetch 1 ,mem_aes_cmac_data_length +0x720b 032467 copy pdata ,loopcnt +0x720c 032468 arg memdat ,rega +0x720d 032469 branch inverse_data +: 032471 bn_lshift_0_inverse: +0x720e 032472 ifetch 1 ,rega +0x720f 032473 lshift pdata ,pdata +0x7210 032474 isolate1 0 ,regc +0x7211 032475 setflag true ,0 ,pdata +0x7212 032476 isolate1 8 ,pdata +0x7213 032477 setflag true ,0 ,regc +0x7214 032478 istore 1 ,rega +0x7215 032479 increase -1 ,rega +0x7216 032480 loop bn_lshift_0_inverse +0x7217 032481 rtn +: 032483 function_aes_cmac_k1_inverse: +0x7218 032484 arg mem_aes_cmac_k1 ,rega +: 032485 function_aes_cmac_inverse_common: +0x7219 032486 increase 15 ,rega +0x721a 032487 force 16 ,loopcnt +0x721b 032488 force 0 ,regc +0x721c 032489 branch bn_lshift_0_inverse +: 032491 function_aes_cmac_k2_inverse: +0x721d 032492 arg mem_aes_cmac_k2 ,rega +0x721e 032493 branch function_aes_cmac_inverse_common +: 032496 function_aes_cmac_generate_subkey: +0x721f 032497 arg mem_aes_cmac_k ,contr +0x7220 032498 call load_key +0x7221 032501 force regidx_xor ,regext_index +0x7222 032502 call aes_clear +0x7223 032503 call aes_clear_data +0x7224 032504 call do_aes_ocb +0x7225 032509 arg mem_aes_cmac_k1 ,contw +0x7226 032510 call store_aes_result +: 032511 function_aes_cmac_k1: +0x7227 032512 bpatchx patch3b_6 ,mem_patch3b +0x7228 032513 fetch 1 ,mem_aes_cmac_k1 +0x7229 032514 isolate1 7 ,pdata +0x722a 032515 nbranch function_aes_cmac_k1_0 ,true +0x722b 032516 call function_aes_cmac_k1_inverse +0x722c 032519 arg mem_aes_cmac_k1 ,regc +0x722d 032521 arg mem_aes_cmac_k1 ,contw +0x722e 032524 call function_aes_cmac_xor_rb +0x722f 032525 branch function_aes_cmac_k2 +: 032526 function_aes_cmac_k1_0: +0x7230 032527 call function_aes_cmac_k1_inverse +: 032528 function_aes_cmac_k2: +0x7231 032530 arg mem_aes_cmac_k1 ,contr +0x7232 032531 arg mem_aes_cmac_k2 ,contw +0x7233 032532 call memcpy16 +0x7234 032533 fetch 1 ,mem_aes_cmac_k2 +0x7235 032534 isolate1 7 ,pdata +0x7236 032535 nbranch function_aes_cmac_k2_inverse ,true +0x7237 032536 call function_aes_cmac_k2_inverse +0x7238 032538 arg mem_aes_cmac_k2 ,regc +0x7239 032540 arg mem_aes_cmac_k2 ,contw +: 032546 function_aes_cmac_xor_rb: +0x723a 032547 arg 3 ,loopcnt +: 032548 function_aes_cmac_xor_rb_loop: +0x723b 032549 arg 0 ,temp +0x723c 032550 call function_aes_cmac_xor_loop_common +0x723d 032551 increase 4 ,regc +0x723e 032552 loop function_aes_cmac_xor_rb_loop +0x723f 032553 arg 0x8700 ,temp +0x7240 032554 lshift16 temp ,temp +: 032555 function_aes_cmac_xor_loop_common: +0x7241 032556 ifetch 4 ,regc +0x7242 032557 ixor temp ,pdata +0x7243 032558 istore 4 ,contw +0x7244 032559 rtn +: 032565 function_aes_cmac_padding: +0x7245 032566 bpatchx patch3b_7 ,mem_patch3b +0x7246 032567 arg 16 ,loopcnt +0x7247 032568 arg 0 ,pdata +: 032569 function_aes_cmac_padding_loop: +0x7248 032570 isub rega ,null +0x7249 032571 branch function_aes_cmac_padding_beq_length ,zero +0x724a 032572 branch function_aes_cmac_padding_big_length ,positive +0x724b 032573 ifetcht 1 ,contr +0x724c 032574 istoret 1 ,contw +: 032575 function_aes_cmac_padding_loop2: +0x724d 032576 increase 1 ,pdata +0x724e 032577 loop function_aes_cmac_padding_loop +0x724f 032578 rtn +: 032579 function_aes_cmac_padding_beq_length: +0x7250 032580 arg 0x80 ,temp +: 032581 function_aes_cmac_padding_common: +0x7251 032582 istoret 1 ,contw +0x7252 032583 branch function_aes_cmac_padding_loop2 +: 032585 function_aes_cmac_padding_big_length: +0x7253 032586 arg 0 ,temp +0x7254 032587 branch function_aes_cmac_padding_common +: 032590 generate_kinit: +0x7255 032591 call function_e22 +0x7256 032592 arg mem_input_store ,contr +0x7257 032593 arg mem_kinit ,contw +0x7258 032594 branch memcpy16 +: 032597 function_e21: +0x7259 032598 disable user +0x725a 032599 call function_expand +0x725b 032600 arg mem_random_number ,contr +0x725c 032601 arg mem_x ,contw +0x725d 032602 force 15 ,loopcnt +0x725e 032603 call memcpy +0x725f 032604 ifetch 1 ,contr +0x7260 032605 xor_into 6 ,pdata +0x7261 032606 istore 1 ,contw +0x7262 032607 setarg mem_y +0x7263 032608 store 2 ,memp_ar_input +0x7264 032609 setarg mem_x +0x7265 032610 store 2 ,memp_ar_key +0x7266 032611 set1 mark_ar2 ,mark +0x7267 032612 branch function_ar +: 032616 function_e22: +0x7268 032617 fetcht 1 ,mem_pin_length +0x7269 032618 force 16 ,regb +0x726a 032619 add temp ,6 ,regc +0x726b 032620 sub regc ,16 ,null +0x726c 032621 branch function_e22_pin_init ,positive +0x726d 032622 force 16 ,regc +: 032623 function_e22_pin_init: +0x726e 032624 arg mem_x ,contw +: 032625 function_e22_genx_pin: +0x726f 032626 arg mem_pin ,contr +0x7270 032627 copy temp ,loopcnt +0x7271 032628 disable user +: 032629 function_e22_genx_loop: +0x7272 032630 ifetch 1 ,contr +0x7273 032631 istore 1 ,contw +0x7274 032632 increase -1 ,regb +0x7275 032633 branch function_e22_genx_end ,zero +0x7276 032634 loop function_e22_genx_loop +0x7277 032635 branch function_e22_genx_pin ,user +0x7278 032636 enable user +0x7279 032637 force 6 ,loopcnt +0x727a 032638 copy rega ,contr +0x727b 032639 branch function_e22_genx_loop +: 032640 function_e22_genx_end: +0x727c 032641 arg mem_random_number ,contr +0x727d 032642 arg mem_y ,contw +0x727e 032643 call memcpy16 +0x727f 032644 fetch 1 ,mem_y15 +0x7280 032645 ixor regc ,pdata +0x7281 032646 store 1 ,mem_y15 +0x7282 032647 setarg mem_y +0x7283 032648 store 2 ,memp_ar_input +0x7284 032649 setarg mem_x +0x7285 032650 store 2 ,memp_ar_key +0x7286 032651 set1 mark_ar2 ,mark +0x7287 032652 branch function_ar +: 032657 function_e1: +0x7288 032658 disable user +0x7289 032659 call function_expand +0x728a 032660 branch function_hash +: 032662 function_e3: +0x728b 032663 arg mem_aco ,rega +0x728c 032664 enable user +0x728d 032665 call function_expand +0x728e 032666 call function_hash +0x728f 032667 arg mem_input_store ,contr +0x7290 032668 arg mem_kc ,contw +0x7291 032669 branch memcpy16 +: 032672 function_hash: +0x7292 032673 setarg mem_random_number +0x7293 032674 store 2 ,memp_ar_input +0x7294 032675 setarg mem_link_key +0x7295 032676 store 2 ,memp_ar_key +0x7296 032677 set0 mark_ar2 ,mark +0x7297 032678 call function_ar +0x7298 032679 arg mem_input_store ,rega +0x7299 032680 arg mem_random_number ,regb +0x729a 032681 arg mem_x ,contw +0x729b 032682 call xor16 +0x729c 032683 arg mem_x ,rega +0x729d 032684 arg mem_y ,regb +0x729e 032685 copy regb ,contw +0x729f 032686 enable user +0x72a0 032687 call add16 +0x72a1 032688 call key_offset +0x72a2 032689 setarg mem_y +0x72a3 032690 store 2 ,memp_ar_input +0x72a4 032691 setarg mem_x +0x72a5 032692 store 2 ,memp_ar_key +0x72a6 032693 set1 mark_ar2 ,mark +0x72a7 032694 branch function_ar +: 032698 function_ar: +0x72a8 032699 jam 0 ,mem_ar_hround +0x72a9 032700 fetch 2 ,memp_ar_key +0x72aa 032701 iforce contr +0x72ab 032702 arg mem_key_store ,contw +0x72ac 032703 call memcpy16 +0x72ad 032704 fetch 2 ,memp_ar_input +0x72ae 032705 iforce contr +0x72af 032706 arg mem_input_store ,contw +0x72b0 032707 call memcpy16 +: 032709 function_ar_loop: +0x72b1 032710 call key_scheduling +0x72b2 032711 disable user +0x72b3 032712 bmark0 mark_ar2 ,function_ar_original +0x72b4 032713 fetch 1 ,mem_ar_hround +0x72b5 032714 bne 4 ,function_ar_original +0x72b6 032715 fetch 2 ,memp_ar_input +0x72b7 032716 iforce regb +0x72b8 032717 call xor_mod32_ar2 +: 032718 function_ar_original: +0x72b9 032719 call xor_mod32 +0x72ba 032720 call el_boxes +0x72bb 032721 fetch 1 ,mem_ar_hround +0x72bc 032722 increase 1 ,pdata +0x72bd 032723 store 1 ,mem_ar_hround +0x72be 032725 call key_scheduling +0x72bf 032726 enable user +0x72c0 032727 call xor_mod32 +0x72c1 032728 call pht +0x72c2 032729 call permute +0x72c3 032730 call pht +0x72c4 032731 call permute +0x72c5 032732 call pht +0x72c6 032733 call permute +0x72c7 032734 call pht +0x72c8 032735 fetch 1 ,mem_ar_hround +0x72c9 032736 increase 1 ,pdata +0x72ca 032737 store 1 ,mem_ar_hround +0x72cb 032738 bne 16 ,function_ar_loop +0x72cc 032739 call key_scheduling +0x72cd 032740 disable user +0x72ce 032741 branch xor_mod32 +: 032745 key_scheduling: +0x72cf 032746 fetch 1 ,mem_ar_hround +0x72d0 032747 arg mem_key_store ,contr +0x72d1 032748 branch key_sched_zero ,blank +0x72d2 032749 iforce regb +0x72d3 032750 force 17 ,loopcnt +0x72d4 032751 copy contr ,contw +: 032752 key_rotateloop: +0x72d5 032753 ifetch 1 ,contr +0x72d6 032754 lshift3 pdata ,temp +0x72d7 032755 rshift2 pdata ,pdata +0x72d8 032756 rshift3 pdata ,pdata +0x72d9 032757 ior temp ,pdata +0x72da 032758 istore 1 ,contw +0x72db 032759 loop key_rotateloop +0x72dc 032760 setarg mem_key_store +0x72dd 032761 iadd regb ,contr +0x72de 032762 force 16 ,loopcnt +0x72df 032763 arg mem_round_key ,contw +: 032764 key_select_octet_loop: +0x72e0 032765 ifetch 1 ,contr +0x72e1 032766 istore 1 ,contw +0x72e2 032767 compare mem_key_store_end ,contr ,0xff +0x72e3 032768 nbranch key_select_octet_nwrap ,true +0x72e4 032769 increase -17 ,contr +: 032770 key_select_octet_nwrap: +0x72e5 032771 loop key_select_octet_loop +0x72e6 032772 force 0 ,rega +0x72e7 032773 add regb ,-1 ,regc +0x72e8 032774 lshift2 regc ,regc +0x72e9 032775 lshift2 regc ,regc +0x72ea 032776 call enable_authrom +0x72eb 032777 setarg mem_b_box +0x72ec 032778 iadd regc ,regc +0x72ed 032779 arg mem_round_key ,contw +0x72ee 032780 force 16 ,loopcnt +: 032781 bias_round_key_loop: +0x72ef 032782 ifetcht 1 ,regc +0x72f0 032783 ifetch 1 ,contw +0x72f1 032784 iadd temp ,pdata +0x72f2 032785 istore 1 ,contw +0x72f3 032786 increase 1 ,regc +0x72f4 032787 loop bias_round_key_loop +0x72f5 032788 branch disable_authrom +: 032790 key_sched_zero: +0x72f6 032791 force 16 ,loopcnt +0x72f7 032792 force 0 ,temp +: 032793 create_byte_16_loop: +0x72f8 032794 ifetch 1 ,contr +0x72f9 032795 ixor temp ,temp +0x72fa 032796 loop create_byte_16_loop +0x72fb 032797 deposit temp +0x72fc 032798 istore 1 ,contr +0x72fd 032799 arg mem_key_store ,contr +0x72fe 032800 arg mem_round_key ,contw +0x72ff 032801 branch memcpy16 +: 032803 xor_mod32: +0x7300 032804 arg mem_round_key ,regb +: 032805 xor_mod32_ar2: +0x7301 032806 force 16 ,loopcnt +0x7302 032807 arg mem_input_store ,rega +0x7303 032808 copy rega ,contw +: 032809 xor_mod32_loop: +0x7304 032810 ifetcht 1 ,rega +0x7305 032811 ifetch 1 ,regb +0x7306 032812 ixor temp ,alarm +0x7307 032813 and loopcnt ,3 ,regc +0x7308 032814 nbranch xor_mod32_invert ,user +0x7309 032815 xor_into 3 ,regc +: 032816 xor_mod32_invert: +0x730a 032817 sub regc ,1 ,regc +0x730b 032818 branch xor_even ,positive +0x730c 032819 iadd temp ,alarm +: 032820 xor_even: +0x730d 032821 deposit alarm +0x730e 032822 istore 1 ,contw +0x730f 032823 increase 1 ,rega +0x7310 032824 increase 1 ,regb +0x7311 032825 loop xor_mod32_loop +0x7312 032826 rtn +: 032828 el_boxes: +0x7313 032829 call enable_authrom +0x7314 032830 force 16 ,loopcnt +0x7315 032831 arg mem_input_store ,rega +: 032832 el_box_loop: +0x7316 032833 ifetch 1 ,rega +0x7317 032834 arg mem_e_box ,contr +0x7318 032835 and loopcnt ,3 ,regc +0x7319 032836 sub regc ,1 ,null +0x731a 032837 branch e_boxes ,positive +0x731b 032838 arg mem_l_box ,contr +: 032839 e_boxes: +0x731c 032840 iadd contr ,contr +0x731d 032841 ifetch 1 ,contr +0x731e 032842 istore 1 ,rega +0x731f 032843 increase 1 ,rega +0x7320 032844 loop el_box_loop +0x7321 032845 branch disable_authrom +: 032847 pht: +0x7322 032848 force 8 ,loopcnt +0x7323 032849 arg mem_input_store ,contr +0x7324 032850 copy contr ,contw +: 032851 pht_loop: +0x7325 032852 ifetch 1 ,contr +0x7326 032853 iforce rega +0x7327 032854 ifetch 1 ,contr +0x7328 032855 iforce regb +0x7329 032856 lshift rega ,pdata +0x732a 032857 iadd regb ,pdata +0x732b 032858 istore 1 ,contw +0x732c 032859 deposit rega +0x732d 032860 iadd regb ,pdata +0x732e 032861 istore 1 ,contw +0x732f 032862 loop pht_loop +0x7330 032863 rtn +: 032866 permute: +0x7331 032867 setarg 0x8ae42c +0x7332 032868 iforce temp +0x7333 032869 force 7 ,loopcnt +0x7334 032870 call permute_exchange +0x7335 032871 setarg 0xd751b +0x7336 032872 iforce temp +0x7337 032873 force 5 ,loopcnt +0x7338 032874 call permute_exchange +0x7339 032875 fetch 1 ,mem_input_store + 15 +0x733a 032876 iforce rega +0x733b 032877 fetch 1 ,mem_input_store + 3 +0x733c 032878 store 1 ,mem_input_store + 15 +0x733d 032879 deposit rega +0x733e 032880 store 1 ,mem_input_store + 3 +0x733f 032881 rtn +: 032883 permute_exchange: +0x7340 032884 and temp ,0xf ,regb +: 032885 permute_loop: +0x7341 032886 and temp ,0xf ,pdata +0x7342 032887 arg mem_input_store ,contw +0x7343 032888 iadd contw ,contw +0x7344 032889 ifetch 1 ,contw +0x7345 032890 iforce regc +0x7346 032891 deposit rega +0x7347 032892 istore 1 ,contw +0x7348 032893 copy regc ,rega +0x7349 032894 rshift4 temp ,temp +0x734a 032895 loop permute_loop +0x734b 032896 setarg mem_input_store +0x734c 032897 iadd regb ,contw +0x734d 032898 deposit rega +0x734e 032899 istore 1 ,contw +0x734f 032900 rtn +: 032902 add16: +0x7350 032903 enable user +0x7351 032904 branch xor_add16 +: 032906 xor16: +0x7352 032907 disable user +: 032908 xor_add16: +0x7353 032909 force 16 ,loopcnt +: 032910 xoradd_loop: +0x7354 032911 ifetcht 1 ,rega +0x7355 032912 ifetch 1 ,regb +0x7356 032913 branch xoradd_add ,user +0x7357 032914 ixor temp ,pdata +0x7358 032915 branch xoradd_store +: 032916 xoradd_add: +0x7359 032917 iadd temp ,pdata +: 032918 xoradd_store: +0x735a 032919 istore 1 ,contw +0x735b 032920 increase 1 ,rega +0x735c 032921 increase 1 ,regb +0x735d 032922 loop xoradd_loop +0x735e 032923 rtn +: 032926 function_expand: +0x735f 032927 arg mem_y ,contw +0x7360 032928 ifetch 6 ,rega +0x7361 032929 istore 6 ,contw +0x7362 032930 branch expand_12 ,user +0x7363 032931 ifetch 6 ,rega +0x7364 032932 branch expand_cont +: 032933 expand_12: +0x7365 032934 ifetch 6 ,contr +: 032935 expand_cont: +0x7366 032936 istore 6 ,contw +0x7367 032937 ifetch 4 ,rega +0x7368 032938 istore 4 ,contw +0x7369 032939 rtn +: 032941 key_offset: +0x736a 032942 arg mem_link_key ,contr +0x736b 032943 arg mem_x ,contw +0x736c 032944 arg 0 ,temp +0x736d 032945 setarg 0x8395a7 +0x736e 032946 call concatenate_temp24 +0x736f 032947 setarg 0xb3c1df +0x7370 032948 call concatenate_temp24 +0x7371 032949 setarg 0xe5e9 +0x7372 032950 call concatenate_temp16 +0x7373 032951 copy temp ,regab +0x7374 032952 disable user +0x7375 032953 call key_addxor +0x7376 032954 copy regab ,temp +0x7377 032955 enable user +0x7378 032956 branch key_addxor +: 032958 key_addxor: +0x7379 032959 force 8 ,loopcnt +: 032960 key_addxor_loop: +0x737a 032961 ifetch 1 ,contr +0x737b 032962 compare 1 ,loopcnt ,1 +0x737c 032963 branch key_high ,user +0x737d 032964 branch key_xor ,true +: 032965 key_add: +0x737e 032966 iadd temp ,pdata +0x737f 032967 branch key_store +: 032968 key_high: +0x7380 032969 branch key_add ,true +: 032970 key_xor: +0x7381 032971 ixor temp ,pdata +: 032972 key_store: +0x7382 032973 istore 1 ,contw +0x7383 032974 rshift8 temp ,temp +0x7384 032975 loop key_addxor_loop +0x7385 032976 rtn +: 032978 copy_aco: +0x7386 032979 fetch 6 ,mem_input_store + 4 +0x7387 032980 store 6 ,mem_aco +0x7388 032981 ifetch 6 ,contr +0x7389 032982 istore 6 ,contw +0x738a 032983 rtn +: 032985 concatenate_temp24: +0x738b 032986 lshift8 temp ,temp +: 032987 concatenate_temp16: +0x738c 032988 lshift16 temp ,temp +0x738d 032989 ior temp ,temp +0x738e 032990 rtn +: 032994 loop1: +0x738f 032995 branch loop1 +: 032999 generate_stk: +0x7390 033000 bpatchx patch3c_0 ,mem_patch3c +0x7391 033001 call function_s1 +0x7392 033002 arg mem_le_ltk ,contw +0x7393 033003 branch store_aes_result +: 033006 authenticate_rconfirm: +0x7394 033007 arg mem_le_srand ,contw +0x7395 033008 branch authenticate_mconfirm ,master +0x7396 033009 arg mem_le_mrand ,contw +: 033010 authenticate_mconfirm: +0x7397 033011 copy contr ,rega +0x7398 033012 call memcpy16 +0x7399 033013 call function_c1 +0x739a 033014 arg mem_le_rconfirm ,contr +0x739b 033015 branch compare_res +: 033017 generate_confirm: +0x739c 033018 arg mem_le_mrand ,rega +0x739d 033019 branch generate_mrand ,master +0x739e 033020 arg mem_le_srand ,rega +: 033021 generate_mrand: +0x739f 033022 copy rega ,contw +0x73a0 033023 call generate_random +0x73a1 033024 branch function_c1 +: 033026 generate_sk: +0x73a2 033027 arg mem_le_skdm ,contr +0x73a3 033028 call load_data128 +0x73a4 033029 arg mem_le_ltk ,contr +0x73a5 033030 call load_regext +0x73a6 033031 force 0x38 ,aes_ctrl +0x73a7 033032 force 0x0 ,aes_ctrl +0x73a8 033033 call wait_aes +0x73a9 033034 arg mem_le_sk ,contw +0x73aa 033035 branch store_aes_result +: 033038 first_block_counter: +0x73ab 033039 force 0x49 ,pdata +0x73ac 033040 branch first_block +: 033041 first_block_data: +0x73ad 033042 force 1 ,pdata +: 033043 first_block: +0x73ae 033044 force regidx_data ,regext_index +0x73af 033045 lshift8 temp ,regext +0x73b0 033046 ior regext ,regext +0x73b1 033047 increase 1 ,regext_index +0x73b2 033048 rshift8 temp ,regext +0x73b3 033049 rshift16 regext ,regext +0x73b4 033050 fetch 2 ,mem_le_ivm +0x73b5 033051 lshift16 ,pdata ,pdata +0x73b6 033052 ior regext ,regext +0x73b7 033053 increase 1 ,regext_index +0x73b8 033054 ifetch 4 ,contr +0x73b9 033055 iforce regext +0x73ba 033056 increase 1 ,regext_index +0x73bb 033057 ifetch 2 ,contr +0x73bc 033058 byteswap rega ,regext +0x73bd 033059 lshift16 regext ,regext +0x73be 033060 ior regext ,regext +0x73bf 033061 increase 1 ,regext_index +0x73c0 033062 rtn +: 033066 generate_mic: +0x73c1 033067 add regc ,1 ,contr +0x73c2 033068 ifetch 1 ,contr +0x73c3 033069 iforce rega +0x73c4 033070 call first_block_counter +0x73c5 033071 call do_aes_ocb +0x73c6 033073 force regidx_data ,regext_index +0x73c7 033074 ifetch 1 ,regc +0x73c8 033075 and_into 0x3 ,pdata +0x73c9 033076 lshift16 pdata ,regext +0x73ca 033077 set1 8 ,regext +0x73cb 033078 call clear_hidata +0x73cc 033079 call do_aes_cbc +0x73cd 033081 copy rega ,loopcnt +0x73ce 033082 add regc ,2 ,contr +0x73cf 033083 call padding_data +: 033084 generate_mic_loop: +0x73d0 033085 call aes_load_data +0x73d1 033086 call do_aes_cbc +0x73d2 033087 deposit loopcnt +0x73d3 033088 branch generate_mic_end ,blank +0x73d4 033089 branch generate_mic_loop +: 033090 generate_mic_end: +0x73d5 033091 force regidx_result ,regext_index +0x73d6 033092 deposit regext +0x73d7 033093 store 4 ,mem_le_mic +0x73d8 033094 rtn +: 033096 aes_crypt_data: +0x73d9 033097 increase 1 ,rega +0x73da 033098 call first_block_data +0x73db 033099 copy regc ,contr +0x73dc 033100 call aes_load_xor +0x73dd 033101 call do_aes_ctr +0x73de 033102 call store_enc_data +0x73df 033103 increase 16 ,regc +0x73e0 033104 increase -16 ,regb +0x73e1 033105 branch aes_crypt_data ,positive +0x73e2 033106 rtn +: 033108 le_encrypt: +0x73e3 033109 bpatchx patch3c_1 ,mem_patch3c +0x73e4 033110 arg mem_le_txheader ,regc +0x73e5 033111 fetcht 5 ,mem_le_pcnt_tx +0x73e6 033112 call generate_mic +0x73e7 033113 force regidx_xor ,regext_index +0x73e8 033114 iforce regext +0x73e9 033115 force 0 ,rega +0x73ea 033116 call first_block_data +0x73eb 033117 call do_aes_ctr +0x73ec 033118 arg mem_le_txpayload ,regc +0x73ed 033119 fetch 1 ,mem_le_txlen +0x73ee 033120 add pdata ,-1 ,regb +0x73ef 033121 iadd regc ,contw +0x73f0 033122 force regidx_result ,regext_index +0x73f1 033123 deposit regext +0x73f2 033124 istore 4 ,contw +0x73f3 033125 call aes_crypt_data +0x73f4 033126 fetch 1 ,mem_le_txlen +0x73f5 033127 increase 4 ,pdata +0x73f6 033128 store 1 ,mem_le_txlen +0x73f7 033129 fetcht 5 ,mem_le_pcnt_tx +0x73f8 033130 increase 1 ,temp +0x73f9 033131 storet 5 ,mem_le_pcnt_tx +0x73fa 033132 rtn +: 033134 le_decrypt: +0x73fb 033135 bpatchx patch3c_2 ,mem_patch3c +0x73fc 033136 fetch 1 ,mem_le_rxbuf + 1 +0x73fd 033137 sub pdata ,20 ,null +0x73fe 033138 branch le_dec_cont ,positive +: 033139 le_dec_cont: +0x73ff 033140 arg mem_le_rxbuf + 2 ,regc +0x7400 033141 add pdata ,-1 ,regb +0x7401 033142 increase -4 ,pdata +0x7402 033143 store 1 ,mem_le_rxbuf + 1 +0x7403 033144 iadd regc ,contr +0x7404 033145 ifetch 4 ,contr +0x7405 033146 force regidx_xor ,regext_index +0x7406 033147 iforce regext +0x7407 033148 force 0 ,rega +0x7408 033149 fetcht 5 ,mem_le_pcnt_rx +0x7409 033150 call first_block_data +0x740a 033151 call do_aes_ctr +0x740b 033152 force regidx_result ,regext_index +0x740c 033153 deposit regext +0x740d 033154 store 4 ,mem_le_peer_mic +0x740e 033155 call aes_crypt_data +0x740f 033156 arg mem_le_rxbuf ,regc +0x7410 033157 call generate_mic +0x7411 033158 fetcht 4 ,mem_le_peer_mic +0x7412 033159 isub temp ,pdata +0x7413 033160 nrtn blank +0x7414 033161 fetch 4 ,mem_le_last_mic +0x7415 033162 isub temp ,pdata +0x7416 033163 rtn blank +0x7417 033164 storet 4 ,mem_le_last_mic +0x7418 033165 fetch 5 ,mem_le_pcnt_rx +0x7419 033166 increase 1 ,pdata +0x741a 033167 store 5 ,mem_le_pcnt_rx +0x741b 033168 force 0 ,pdata +0x741c 033169 rtn +: 033171 wait_aes: +0x741d 033172 nbranch wait_aes ,aes_ready +0x741e 033173 rtn +: 033175 do_aes_ocb: +0x741f 033176 force 0x30 ,aes_ctrl +0x7420 033177 force 0x0 ,aes_ctrl +0x7421 033178 branch wait_aes +: 033180 do_aes_cbc: +0x7422 033181 force 0x32 ,aes_ctrl +0x7423 033182 force 0x2 ,aes_ctrl +0x7424 033183 branch wait_aes +: 033185 do_aes_ctr: +0x7425 033186 force 0x34 ,aes_ctrl +0x7426 033187 force 0x4 ,aes_ctrl +0x7427 033188 branch wait_aes +: 033191 aes_init: +0x7428 033192 force 1 ,aes_ctrl +0x7429 033193 force 0 ,aes_ctrl +0x742a 033194 rtn +: 033195 function_s1: +0x742b 033196 force regidx_data ,regext_index +0x742c 033197 fetch 4 ,mem_le_mrand +0x742d 033198 iforce regext +0x742e 033199 increase 1 ,regext_index +0x742f 033200 ifetch 4 ,contr +0x7430 033201 iforce regext +0x7431 033202 increase 1 ,regext_index +0x7432 033203 fetch 4 ,mem_le_srand +0x7433 033204 iforce regext +0x7434 033205 increase 1 ,regext_index +0x7435 033206 ifetch 4 ,contr +0x7436 033207 iforce regext +0x7437 033208 increase 1 ,regext_index +0x7438 033209 call aes_clear +0x7439 033210 increase -4 ,regext_index +0x743a 033211 fetch 4 ,mem_le_tk +0x743b 033212 copy pdata ,regext +0x743c 033213 increase 4 ,regext_index +0x743d 033214 force 0x38 ,aes_ctrl +0x743e 033215 force 0x8 ,aes_ctrl +0x743f 033216 branch wait_aes +: 033219 function_c1: +0x7440 033220 bpatchx patch3c_3 ,mem_patch3c +0x7441 033221 fetch 6 ,mem_le_lap +0x7442 033222 fetcht 6 ,mem_le_plap +0x7443 033223 branch function_c1_master ,master +0x7444 033224 fetch 6 ,mem_le_plap +0x7445 033225 fetcht 6 ,mem_le_lap +: 033226 function_c1_master: +0x7446 033227 force regidx_xor ,regext_index +0x7447 033228 copy temp ,regext +0x7448 033229 increase 1 ,regext_index +0x7449 033230 rshift32 temp ,regext +0x744a 033231 lshift16 pdata ,pdata +0x744b 033232 ior regext ,regext +0x744c 033233 increase 1 ,regext_index +0x744d 033234 rshift32 pdata ,regext +0x744e 033235 increase 1 ,regext_index +0x744f 033236 force 0 ,regext +0x7450 033237 force 0 ,pdata +0x7451 033238 fetch 1 ,mem_le_conn_peer_addr_type +0x7452 033239 fetcht 1 ,mem_le_adv_own_addr_type +0x7453 033240 nbranch function_c1_irat ,master +0x7454 033242 fetch 1 ,mem_le_conn_own_addr_type +0x7455 033243 fetcht 1 ,mem_le_conn_peer_addr_type +: 033244 function_c1_irat: +0x7456 033245 store 1 ,mem_le_iat +0x7457 033246 storet 1 ,mem_le_rat +0x7458 033247 force regidx_data ,regext_index +0x7459 033248 arg mem_le_iat ,regb +0x745a 033249 force 4 ,loopcnt +: 033250 function_c1_loop1: +0x745b 033251 ifetch 4 ,rega +0x745c 033252 ifetcht 4 ,regb +0x745d 033253 ixor temp ,regext +0x745e 033254 increase 1 ,regext_index +0x745f 033255 increase 4 ,rega +0x7460 033256 increase 4 ,regb +0x7461 033257 loop function_c1_loop1 +0x7462 033258 call aes_clear +0x7463 033259 increase -4 ,regext_index +0x7464 033260 fetch 4 ,mem_le_tk +0x7465 033261 copy pdata ,regext +0x7466 033262 increase 4 ,regext_index +0x7467 033263 force 0x38 ,aes_ctrl +0x7468 033264 force 0xc ,aes_ctrl +0x7469 033265 call wait_aes +0x746a 033267 call aes_clear_data +0x746b 033268 force 0x3a ,aes_ctrl +0x746c 033269 force 0x8 ,aes_ctrl +0x746d 033270 branch wait_aes +: 033272 padding_data: +0x746e 033273 compare 0 ,loopcnt ,3 +0x746f 033274 rtn true +0x7470 033275 deposit contr +0x7471 033276 iadd loopcnt ,contw +0x7472 033277 force 0 ,pdata +: 033278 padding_loop: +0x7473 033279 istore 1 ,contw +0x7474 033280 increase 1 ,loopcnt +0x7475 033281 compare 0 ,loopcnt ,3 +0x7476 033282 rtn true +0x7477 033283 branch padding_loop +: 033285 aes_load_data: +0x7478 033286 force regidx_data ,regext_index +: 033287 load_data_loop: +0x7479 033288 deposit loopcnt +0x747a 033289 branch load_data_padding ,blank +0x747b 033290 ifetch 4 ,contr +0x747c 033291 increase -4 ,loopcnt +: 033292 load_data_padding: +0x747d 033293 iforce regext +0x747e 033294 increase 1 ,regext_index +0x747f 033295 compare regidx_key ,regext_index ,0xf +0x7480 033296 rtn true +0x7481 033297 branch load_data_loop +: 033299 aes_load_xor: +0x7482 033300 force regidx_xor ,regext_index +0x7483 033301 branch load_regext +: 033302 load_key: +0x7484 033303 force regidx_key ,regext_index +0x7485 033304 branch load_regext +: 033305 load_data128: +0x7486 033306 force regidx_data ,regext_index +: 033307 load_regext: +0x7487 033308 force 4 ,loopcnt +: 033309 load_regext_loop: +0x7488 033310 ifetch 4 ,contr +0x7489 033311 iforce regext +0x748a 033312 increase 1 ,regext_index +0x748b 033313 loop load_regext_loop +0x748c 033314 rtn +: 033316 load_sk: +0x748d 033317 arg mem_le_sk ,contr +0x748e 033318 branch load_key +: 033320 clear_hidata: +0x748f 033321 force 4 ,loopcnt +0x7490 033322 branch clear_data_rest +: 033324 aes_clear_data: +0x7491 033325 force regidx_data ,regext_index +: 033326 aes_clear: +0x7492 033327 force 4 ,loopcnt +: 033328 clear_loop: +0x7493 033329 force 0 ,regext +: 033330 clear_data_rest: +0x7494 033331 increase 1 ,regext_index +0x7495 033332 loop clear_loop +0x7496 033333 rtn +: 033335 store_aes_result: +0x7497 033336 force regidx_result ,regext_index +0x7498 033337 force 4 ,loopcnt +: 033338 send_aes_result_loop: +0x7499 033339 deposit regext +0x749a 033340 istore 4 ,contw +0x749b 033341 increase 1 ,regext_index +0x749c 033342 loop send_aes_result_loop +0x749d 033343 rtn +: 033345 store_enc_data: +0x749e 033346 force regidx_result ,regext_index +0x749f 033347 copy regc ,contw +0x74a0 033348 add regb ,1 ,loopcnt +0x74a1 033349 sub loopcnt ,15 ,null +0x74a2 033350 branch store_enc_loop ,positive +0x74a3 033351 force 16 ,loopcnt +: 033352 store_enc_loop: +0x74a4 033353 deposit regext +0x74a5 033354 sub loopcnt ,3 ,null +0x74a6 033355 branch store_enc_byte ,positive +0x74a7 033356 istore 4 ,contw +0x74a8 033357 increase -4 ,loopcnt +0x74a9 033358 rtn zero +0x74aa 033359 increase 1 ,regext_index +0x74ab 033360 branch store_enc_loop +: 033361 store_enc_byte: +0x74ac 033362 istore 1 ,contw +0x74ad 033363 rshift8 pdata ,pdata +0x74ae 033364 loop store_enc_byte +0x74af 033365 rtn +: 033368 compare_res: +0x74b0 033369 force regidx_result ,regext_index +0x74b1 033370 force 4 ,loopcnt +: 033371 compare_res_loop: +0x74b2 033372 ifetch 4 ,contr +0x74b3 033373 isub regext ,null +0x74b4 033374 nrtn zero +0x74b5 033375 increase 1 ,regext_index +0x74b6 033376 loop compare_res_loop +0x74b7 033377 force 0 ,null +0x74b8 033378 rtn +: 033380 enable_authrom: +0x74b9 033381 hfetch 1 ,core_clkoff +0x74ba 033382 set0 clock_off_auth_rom ,pdata +0x74bb 033383 hstore 1 ,core_clkoff +0x74bc 033384 rtn +: 033386 disable_authrom: +0x74bd 033387 hfetch 1 ,core_clkoff +0x74be 033388 set1 clock_off_auth_rom ,pdata +0x74bf 033389 hstore 1 ,core_clkoff +0x74c0 033390 rtn +: 033392 init_memp: +0x74c1 033393 arg mem_p ,contw +0x74c2 033394 setsect 0 ,0x3ffff +0x74c3 033395 setsect 1 ,0x3ffff +0x74c4 033396 setsect 2 ,0x3ffff +0x74c5 033397 setsect 3 ,0x3fbff +0x74c6 033398 istore 9 ,contw +0x74c7 033399 setsect 0 ,0x3ffff +0x74c8 033400 setsect 1 ,0x3ffff +0x74c9 033401 setsect 2 ,0x3ffff +0x74ca 033402 setsect 3 ,0x3ffff +0x74cb 033403 istore 9 ,contw +0x74cc 033404 setsect 0 ,0x3ffff +0x74cd 033405 setsect 1 ,0x3ffff +0x74ce 033406 setsect 2 ,0x3cfff +0x74cf 033407 setsect 3 ,0x3ffff +0x74d0 033408 istore 9 ,contw +0x74d1 033409 setsect 0 ,0x3ffff +0x74d2 033410 setsect 1 ,0x3ffff +0x74d3 033411 setsect 2 ,0x3ffef +0x74d4 033412 setsect 3 ,0x3ffff +0x74d5 033413 istore 9 ,contw +0x74d6 033414 setsect 0 ,0x3ffff +0x74d7 033415 setsect 1 ,0x3ffff +0x74d8 033416 setsect 2 ,0x3ffff +0x74d9 033417 setsect 3 ,0x3ffff +0x74da 033418 istore 9 ,contw +0x74db 033419 setsect 0 ,0x3ffff +0x74dc 033420 setsect 1 ,0x26c7f +0x74dd 033421 setsect 2 ,0x146b +0x74de 033422 setsect 3 ,0x37bb3 +0x74df 033423 istore 9 ,contw +0x74e0 033424 setsect 0 ,0x1feb8 +0x74e1 033425 setsect 1 ,0x10c12 +0x74e2 033426 setsect 2 ,0x2b722 +0x74e3 033427 setsect 3 ,0x29fa6 +0x74e4 033428 istore 9 ,contw +0x74e5 033429 setsect 0 ,0xe70f +0x74e6 033430 setsect 1 ,0x16720 +0x74e7 033431 setsect 2 ,0x519e +0x74e8 033432 setsect 3 ,0x19084 +0x74e9 033433 istore 9 ,contw +0x74ea 033434 setsect 0 ,0x31012 +0x74eb 033435 setsect 1 ,0x360bf +0x74ec 033436 setsect 2 ,0x3f0af +0x74ed 033437 setsect 3 ,0x3d3 +0x74ee 033438 istore 9 ,contw +0x74ef 033439 setsect 0 ,0x3a188 +0x74f0 033440 setsect 1 ,0x3ad0 +0x74f1 033441 setsect 2 ,0x3cbf2 +0x74f2 033442 setsect 3 ,0x243d9 +0x74f3 033443 istore 9 ,contw +0x74f4 033444 setsect 0 ,0x2b030 +0x74f5 033445 setsect 1 ,0x36a03 +0x74f6 033446 setsect 2 ,0x11188 +0x74f7 033447 setsect 3 ,0x1e520 +0x74f8 033448 istore 9 ,contw +0x74f9 033449 setsect 0 ,0x3a11e +0x74fa 033450 setsect 1 ,0xfe5d +0x74fb 033451 setsect 2 ,0xdd57 +0x74fc 033452 setsect 3 ,0x1ac93 +0x74fd 033453 istore 9 ,contw +0x74fe 033454 setsect 0 ,0x11ed +0x74ff 033455 setsect 1 ,0x218c4 +0x7500 033456 setsect 2 ,0x8da7 +0x7501 033457 setsect 3 ,0x257ff +0x7502 033458 istore 9 ,contw +0x7503 033459 setsect 0 ,0x3192b +0x7504 033460 setsect 1 ,0x34641 +0x7505 033461 setsect 2 ,0x1be0c +0x7506 033462 setsect 3 ,0x366ad +0x7507 033463 istore 9 ,contw +0x7508 033464 setsect 0 ,0x1f83 +0x7509 033465 setsect 1 ,0x15a23 +0x750a 033466 setsect 2 ,0x3f9b0 +0x750b 033467 setsect 3 ,0x3949 +0x750c 033468 istore 9 ,contw +0x750d 033469 setsect 0 ,0x13a51 +0x750e 033470 setsect 1 ,0x153fd +0x750f 033471 setsect 2 ,0x3372a +0x7510 033472 setsect 3 ,0xf1bb +0x7511 033473 istore 9 ,contw +0x7512 033474 setsect 0 ,0x3ae85 +0x7513 033475 setsect 1 ,0x1eed9 +0x7514 033476 setsect 2 ,0x9e66 +0x7515 033477 setsect 3 ,0x1a8 +0x7516 033478 istore 8 ,contw +0x7517 033479 rtn +: 033483 init_memp_256: +0x7518 033484 arg mem_p_256 ,contw +0x7519 033485 setsect 0 ,0x3ffff +0x751a 033486 setsect 1 ,0x3ffff +0x751b 033487 setsect 2 ,0x3ffff +0x751c 033488 setsect 3 ,0x3ffff +0x751d 033489 istore 9 ,contw +0x751e 033490 setsect 0 ,0x3ffff +0x751f 033491 setsect 1 ,0x3f +0x7520 033492 setsect 2 ,0x0 +0x7521 033493 setsect 3 ,0x0 +0x7522 033494 istore 9 ,contw +0x7523 033495 setsect 0 ,0x0 +0x7524 033496 setsect 1 ,0x0 +0x7525 033497 setsect 2 ,0x1000 +0x7526 033498 setsect 3 ,0x0 +0x7527 033499 istore 9 ,contw +0x7528 033500 setsect 0 ,0x3ff00 +0x7529 033501 setsect 1 ,0x3ffff +0x752a 033502 setsect 2 ,0x3ffcf +0x752b 033503 setsect 3 ,0x3ffff +0x752c 033504 istore 9 ,contw +0x752d 033505 setsect 0 ,0x3ffff +0x752e 033506 setsect 1 ,0x3ffff +0x752f 033507 setsect 2 ,0x3ffff +0x7530 033508 setsect 3 ,0x3ff +0x7531 033509 istore 9 ,contw +0x7532 033510 setsect 0 ,0x0 +0x7533 033511 setsect 1 ,0x0 +0x7534 033512 setsect 2 ,0x0 +0x7535 033513 setsect 3 ,0x0 +0x7536 033514 istore 9 ,contw +0x7537 033515 setsect 0 ,0x10000 +0x7538 033516 setsect 1 ,0x0 +0x7539 033517 setsect 2 ,0x3f000 +0x753a 033518 setsect 3 ,0x3ffff +0x753b 033519 istore 9 ,contw +0x753c 033520 setsect 0 ,0x296ff +0x753d 033521 setsect 1 ,0x22630 +0x753e 033522 setsect 2 ,0x3945d +0x753f 033523 setsect 3 ,0x3d284 +0x7540 033524 istore 9 ,contw +0x7541 033525 setsect 0 ,0x333a0 +0x7542 033526 setsect 1 ,0x4b7a +0x7543 033527 setsect 2 ,0x37d8 +0x7544 033528 setsect 3 ,0x3c9dc +0x7545 033529 istore 9 ,contw +0x7546 033530 setsect 0 ,0x3a440 +0x7547 033531 setsect 1 ,0x1b958 +0x7548 033532 setsect 2 ,0x38bce +0x7549 033533 setsect 3 ,0x1091f +0x754a 033534 istore 9 ,contw +0x754b 033535 setsect 0 ,0x2e12c +0x754c 033536 setsect 1 ,0x1f47c +0x754d 033537 setsect 2 ,0x356b1 +0x754e 033538 setsect 3 ,0x2fd47 +0x754f 033539 istore 9 ,contw +0x7550 033540 setsect 0 ,0x6837 +0x7551 033541 setsect 1 ,0x2ed90 +0x7552 033542 setsect 2 ,0x1ecec +0x7553 033543 setsect 3 ,0x1acc5 +0x7554 033544 istore 9 ,contw +0x7555 033545 setsect 0 ,0x23357 +0x7556 033546 setsect 1 ,0x18af3 +0x7557 033547 setsect 2 ,0xf9e1 +0x7558 033548 setsect 3 ,0x129f0 +0x7559 033549 istore 9 ,contw +0x755a 033550 setsect 0 ,0x2e7eb +0x755b 033551 setsect 1 ,0x3e6e3 +0x755c 033552 setsect 2 ,0x3e1a7 +0x755d 033553 setsect 3 ,0x10b8b +0x755e 033554 istore 9 ,contw +0x755f 033555 setsect 0 ,0x24fe3 +0x7560 033556 setsect 1 ,0x20ef +0x7561 033557 setsect 2 ,0x1b5a6 +0x7562 033558 setsect 3 ,0xdc2f +0x7563 033559 istore 9 ,contw +0x7564 033560 setsect 0 ,0x13860 +0x7565 033561 setsect 1 ,0x2bd69 +0x7566 033562 setsect 2 ,0x391a +0x7567 033563 setsect 3 ,0x1b222 +0x7568 033564 istore 9 ,contw +0x7569 033565 rtn +: 033568 publickey_init: +0x756a 033569 fetch 1 ,mem_ssp_enable +0x756b 033570 nbranch sp_initialize ,blank +0x756c 033571 branch sp_initialize_256 +: 033573 sp_calc_sequence_256_check: +0x756d 033574 bpatchx patch3c_4 ,mem_patch3c +0x756e 033575 fetch 1 ,mem_ssp_enable +0x756f 033576 rtn blank +0x7570 033577 fetch 1 ,mem_sp_local_key_invalid +0x7571 033578 rtnne sp_key_valid +0x7572 033579 fetch 1 ,mem_le_secure_connect_enable +0x7573 033580 rtn blank +0x7574 033581 fetch 1 ,mem_le_sc_local_key_invalid +0x7575 033582 rtneq sp_key_valid_256 +0x7576 033583 fetch 2 ,mem_ui_state_map +0x7577 033584 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +0x7578 033585 fetch 1 ,mem_le_sc_calc +0x7579 033586 beq sp_calc_standby ,sp_initialize_256 +0x757a 033587 rtn +: 033588 stop_publickey_calc_256: +0x757b 033589 jam sp_calc_standby ,mem_le_sc_calc +0x757c 033590 rtn +: 033593 sp_initialize: +0x757d 033594 bpatchx patch3c_5 ,mem_patch3c +0x757e 033595 fetch 1 ,mem_ssp_enable +0x757f 033596 branch ssp_disable ,blank +0x7580 033597 call ssp_enable +0x7581 033598 call sp_clear_flags +0x7582 033599 branch sp_pubkey_calc +: 033601 sp_clear_flags: +0x7583 033602 setarg 0 +0x7584 033603 store 8 ,mem_sp_state_start +0x7585 033604 store 4 ,mem_sp_flag_start +0x7586 033605 store 7 ,mem_sp_iocap_remote +0x7587 033606 rtn +: 033608 sp_generate_local_key: +0x7588 033609 jam sp_flag_commit ,mem_sp_flag +0x7589 033610 branch sp_generate_local_key0 +: 033611 sp_master_generate_local_key: +0x758a 033612 fetch 1 ,mem_sp_local_key_invalid +0x758b 033613 beq sp_key_valid ,sp_dhkey_calc +0x758c 033614 branch assert +: 033615 sp_generate_local_key0: +0x758d 033616 fetch 1 ,mem_sp_local_key_invalid +0x758e 033617 beq sp_key_valid ,sp_start_send_pubkey +0x758f 033618 branch sp_pubkey_calc +: 033620 sp_start_send_pubkey: +0x7590 033621 call sp_dhkey_calc +0x7591 033622 fetch 1 ,mem_master_sp_state +0x7592 033623 nrtn blank +0x7593 033624 jam sp_stat_key_send ,mem_sp_state +0x7594 033625 rtn +: 033628 sp_calc_check_publickey_256: +0x7595 033629 call sp_calc_b256 +0x7596 033630 arg mem_le_pubkey_remote_y_256 ,rega +0x7597 033631 arg mem_t7_256 ,contw +0x7598 033632 call bn_sqrmod_256 +0x7599 033633 arg mem_le_pubkey_remote_x_256 ,rega +0x759a 033634 arg mem_t2_256 ,contw +0x759b 033635 call bn_sqrmod_256 +0x759c 033636 arg mem_t2_256 ,rega +0x759d 033637 arg mem_le_pubkey_remote_x_256 ,regb +0x759e 033638 arg mem_t2_256 ,contw +0x759f 033639 call bn_mulmod_256 +0x75a0 033640 arg mem_a_256 ,rega +0x75a1 033641 arg mem_le_pubkey_remote_x_256 ,regb +0x75a2 033642 arg mem_t3_256 ,contw +0x75a3 033643 call bn_mulmod_256 +0x75a4 033644 arg mem_t3_256 ,rega +0x75a5 033645 arg mem_t2_256 ,regb +0x75a6 033646 arg mem_t2_256 ,contw +0x75a7 033647 call bn_addmod_256 +0x75a8 033648 arg mem_t0_256 ,rega +0x75a9 033649 arg mem_t2_256 ,regb +0x75aa 033650 arg mem_t0_256 ,contw +0x75ab 033651 call bn_addmod_256 +0x75ac 033652 arg 32 ,loopcnt +0x75ad 033653 arg mem_t7_256 ,rega +0x75ae 033654 arg mem_t0_256 ,regb +0x75af 033655 branch string_compare +: 033657 sp_calc_b256: +0x75b0 033658 arg mem_gy_256 ,rega +0x75b1 033659 arg mem_t0_256 ,contw +0x75b2 033660 call bn_sqrmod_256 +0x75b3 033661 arg mem_gx_256 ,rega +0x75b4 033662 arg mem_t2_256 ,contw +0x75b5 033663 call bn_sqrmod_256 +0x75b6 033664 arg mem_t2_256 ,rega +0x75b7 033665 arg mem_gx_256 ,regb +0x75b8 033666 arg mem_t2_256 ,contw +0x75b9 033667 call bn_mulmod_256 +0x75ba 033668 arg mem_a_256 ,rega +0x75bb 033669 arg mem_gx_256 ,regb +0x75bc 033670 arg mem_t3_256 ,contw +0x75bd 033671 call bn_mulmod_256 +0x75be 033672 arg mem_t3_256 ,rega +0x75bf 033673 arg mem_t2_256 ,regb +0x75c0 033674 arg mem_t2_256 ,contw +0x75c1 033675 call bn_addmod_256 +0x75c2 033676 arg mem_t0_256 ,rega +0x75c3 033677 arg mem_t2_256 ,regb +0x75c4 033678 arg mem_t0_256 ,contw +0x75c5 033679 branch bn_submod_256 +: 033681 sp_calc_check_publickey: +0x75c6 033682 call sp_calc_b +0x75c7 033683 arg mem_sp_pubkey_remote_y ,rega +0x75c8 033684 arg mem_t7_256 ,contw +0x75c9 033685 call bn_sqrmod +0x75ca 033686 arg mem_sp_pubkey_remote_x ,rega +0x75cb 033687 arg mem_t2_256 ,contw +0x75cc 033688 call bn_sqrmod +0x75cd 033689 arg mem_t2_256 ,rega +0x75ce 033690 arg mem_sp_pubkey_remote_x ,regb +0x75cf 033691 arg mem_t2_256 ,contw +0x75d0 033692 call bn_mulmod +0x75d1 033693 arg mem_a ,rega +0x75d2 033694 arg mem_sp_pubkey_remote_x ,regb +0x75d3 033695 arg mem_t3_256 ,contw +0x75d4 033696 call bn_mulmod +0x75d5 033697 arg mem_t3_256 ,rega +0x75d6 033698 arg mem_t2_256 ,regb +0x75d7 033699 arg mem_t2_256 ,contw +0x75d8 033700 call bn_addmod +0x75d9 033701 arg mem_t0_256 ,rega +0x75da 033702 arg mem_t2_256 ,regb +0x75db 033703 arg mem_t0_256 ,contw +0x75dc 033704 call bn_addmod +0x75dd 033705 arg 24 ,loopcnt +0x75de 033706 arg mem_t7_256 ,rega +0x75df 033707 arg mem_t0_256 ,regb +0x75e0 033708 branch string_compare +: 033710 sp_calc_b: +0x75e1 033711 arg mem_gy ,rega +0x75e2 033712 arg mem_t0_256 ,contw +0x75e3 033713 call bn_sqrmod +0x75e4 033714 arg mem_gx ,rega +0x75e5 033715 arg mem_t2_256 ,contw +0x75e6 033716 call bn_sqrmod +0x75e7 033717 arg mem_t2_256 ,rega +0x75e8 033718 arg mem_gx ,regb +0x75e9 033719 arg mem_t2_256 ,contw +0x75ea 033720 call bn_mulmod +0x75eb 033721 arg mem_a ,rega +0x75ec 033722 arg mem_gx ,regb +0x75ed 033723 arg mem_t3_256 ,contw +0x75ee 033724 call bn_mulmod +0x75ef 033725 arg mem_t3_256 ,rega +0x75f0 033726 arg mem_t2_256 ,regb +0x75f1 033727 arg mem_t2_256 ,contw +0x75f2 033728 call bn_addmod +0x75f3 033729 arg mem_t0_256 ,rega +0x75f4 033730 arg mem_t2_256 ,regb +0x75f5 033731 arg mem_t0_256 ,contw +0x75f6 033732 branch bn_submod +: 033735 sp_calculate_commitment: +0x75f7 033736 fetch 1 ,mem_sp_calc +0x75f8 033737 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +0x75f9 033738 call sp_local_random_key_generator +0x75fa 033739 arg mem_sp_prarm_stack ,contw +0x75fb 033740 setarg mem_sp_random_local_end +0x75fc 033741 istore 2 ,contw +0x75fd 033742 setarg mem_sp_pubkey_local_x_end +0x75fe 033743 istore 2 ,contw +0x75ff 033744 setarg mem_sp_pubkey_remote_x_end +0x7600 033745 istore 2 ,contw +0x7601 033746 branch sp_calculate_commitment0 +: 033747 master_sp_calculate_commitment: +0x7602 033748 arg mem_sp_prarm_stack ,contw +0x7603 033749 setarg mem_sp_random_remote_end +0x7604 033750 istore 2 ,contw +0x7605 033751 setarg mem_sp_pubkey_remote_x_end +0x7606 033752 istore 2 ,contw +0x7607 033753 setarg mem_sp_pubkey_local_x_end +0x7608 033754 istore 2 ,contw +: 033755 sp_calculate_commitment0: +0x7609 033756 call function_f1 +0x760a 033757 fetch 1 ,mem_master_sp_state +0x760b 033758 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +0x760c 033759 jam sp_flag_commit ,mem_sp_flag +0x760d 033760 jam sp_stat_commit_send ,mem_sp_state +0x760e 033761 rtn +: 033762 master_sp_calculate_commitment0: +0x760f 033763 jam sp_stat_commitment_compare ,mem_master_sp_state +0x7610 033764 call sp_master_generate_local_key +0x7611 033765 branch master_set_mem_master_sp_flag +: 033767 sp_local_random_key_generator: +0x7612 033768 arg mem_sp_random_local ,contw +0x7613 033769 force 8 ,queue +0x7614 033770 branch random_generator +: 033772 sp_calculate_commitment_wait_dhkey_calc: +0x7615 033773 jam sp_flag_commit ,mem_sp_flag +0x7616 033774 rtn +: 033776 sp_confirm_check: +0x7617 033778 bpatchx patch3c_6 ,mem_patch3c +0x7618 033779 arg mem_addr_value ,contw +0x7619 033780 fetch 6 ,mem_lap +0x761a 033781 istore 6 ,contw +0x761b 033782 fetch 6 ,mem_plap +0x761c 033783 istore 6 ,contw +0x761d 033784 fetch 3 ,mem_sp_iocap_remote +0x761e 033785 istore 3 ,contw +0x761f 033787 call function_f3a +0x7620 033789 arg mem_sp_calc_result_high ,rega +0x7621 033790 arg mem_sp_check_result ,regb +0x7622 033791 force 4 ,queue +0x7623 033792 call compare4 +0x7624 033793 nbranch sp_confirm_check_failed ,true +0x7625 033795 call sp_confirm_check_success +0x7626 033796 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7627 033797 branch tid_set_reply +: 033799 sp_confirm_check_success: +0x7628 033800 fetch 1 ,mem_master_sp_state +0x7629 033801 beq sp_stat_confirm_check ,sp_confirm_check_success_master +0x762a 033802 jam sp_stat_confirm_calc ,mem_sp_state +0x762b 033803 jam sp_flag_commit ,mem_sp_flag +0x762c 033804 jam lmp_accepted ,mem_lmo_opcode2 +0x762d 033805 rtn +: 033806 sp_confirm_check_success_master: +0x762e 033807 jam lmp_accepted ,mem_lmo_opcode2 +0x762f 033808 jam sp_state_end ,mem_master_sp_state +0x7630 033809 branch master_set_mem_master_sp_flag +: 033812 sp_confirm_check_failed: +0x7631 033813 fetch 1 ,mem_master_sp_state +0x7632 033814 beq sp_stat_confirm_check ,sp_confirm_check_failed_master +0x7633 033815 jam sp_stat_null ,mem_sp_state +0x7634 033816 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7635 033818 jam authentication_failure_error ,mem_lmo_reason2 +0x7636 033819 rtn +: 033820 sp_confirm_check_failed_master: +0x7637 033821 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7638 033822 jam sp_stat_null ,mem_master_sp_state +0x7639 033823 rtn +: 033825 sp_confirm_calc: +0x763a 033826 fetch 1 ,mem_sp_dh_ready +0x763b 033827 beq sp_flag_commit ,sp_confirm_calc_ready +0x763c 033828 jam sp_stat_confirm_calc ,mem_master_sp_state +0x763d 033829 branch master_set_mem_master_sp_flag +: 033830 sp_confirm_calc_ready: +0x763e 033831 arg mem_addr_value ,contw +0x763f 033832 fetch 6 ,mem_plap +0x7640 033833 istore 6 ,contw +0x7641 033834 fetch 6 ,mem_lap +0x7642 033835 istore 6 ,contw +0x7643 033836 fetch 3 ,mem_sp_iocap_local +0x7644 033837 istore 3 ,contw +0x7645 033839 call function_f3b +0x7646 033840 fetch 1 ,mem_master_sp_state +0x7647 033841 beq sp_stat_confirm_calc ,sp_confirm_calc_master +0x7648 033842 jam sp_stat_confirm_send ,mem_sp_state +0x7649 033843 jam sp_flag_commit ,mem_sp_flag +0x764a 033844 rtn +: 033845 sp_confirm_calc_master: +0x764b 033846 jam sp_stat_confirm_send ,mem_master_sp_state +0x764c 033847 jam sp_flag_commit ,mem_master_sp_flag +0x764d 033848 rtn +: 033850 sp_master_key_prarm_push: +0x764e 033851 arg mem_sp_prarm_stack ,contw +0x764f 033852 fetch 6 ,mem_plap +0x7650 033853 istore 6 ,contw +0x7651 033854 fetch 6 ,mem_lap +0x7652 033855 istore 6 ,contw +0x7653 033856 setarg mem_sp_random_local_end +0x7654 033857 istore 2 ,contw +0x7655 033858 setarg mem_sp_random_remote_end +0x7656 033859 istore 2 ,contw +0x7657 033860 branch sp_link_key_calc +: 033861 sp_link_key_prarm_push: +0x7658 033862 jam sp_stat_done ,mem_sp_state +0x7659 033863 arg mem_sp_prarm_stack ,contw +0x765a 033864 fetch 6 ,mem_lap +0x765b 033865 istore 6 ,contw +0x765c 033866 fetch 6 ,mem_plap +0x765d 033867 istore 6 ,contw +0x765e 033868 setarg mem_sp_random_remote_end +0x765f 033869 istore 2 ,contw +0x7660 033870 setarg mem_sp_random_local_end +0x7661 033871 istore 2 ,contw +: 033872 sp_link_key_calc: +0x7662 033874 arg mem_addr_value ,contw +0x7663 033875 fetch 6 ,mem_sp_prarm_stack +0x7664 033876 istore 6 ,contw +0x7665 033877 fetch 6 ,mem_sp_prarm_stack + 6 +0x7666 033878 istore 6 ,contw +0x7667 033880 call function_f2 +0x7668 033883 jam 1 ,mem_link_key_exists +0x7669 033884 arg mem_link_key ,contw +0x766a 033885 arg mem_sp_calc_result_high ,contr +0x766b 033886 call memcpy16 +0x766c 033887 branch generate_linkkey_continue +: 033890 sp_pubkey_calc: +0x766d 033891 bpatchx patch3c_7 ,mem_patch3c +0x766e 033892 fetch 1 ,mem_sp_local_key_invalid +0x766f 033893 rtnne sp_key_invalid +0x7670 033894 fetch 1 ,mem_sp_calc +0x7671 033895 rtnne sp_calc_standby +0x7672 033896 arg mem_sp_private_key ,contw +0x7673 033897 force 11 ,queue +0x7674 033898 call random_generator +0x7675 033899 random pdata +0x7676 033900 rshift pdata ,pdata +0x7677 033901 istore 2 ,contw +0x7678 033903 arg mem_k ,contw +0x7679 033904 arg mem_sp_private_key ,contr +0x767a 033905 call memcpy24 +0x767b 033907 arg mem_ax ,contw +0x767c 033908 arg mem_gx ,contr +0x767d 033909 call memcpy48 +0x767e 033911 arg mem_az ,contw +0x767f 033912 call bn_zero +0x7680 033913 jam 1 ,mem_az +0x7681 033915 call eckp_calc_init +0x7682 033916 jam sp_calc_pubkey ,mem_sp_calc +0x7683 033917 rtn +: 033919 sp_pubkey_generated: +0x7684 033920 arg mem_sp_pubkey_local ,contw +0x7685 033921 arg mem_bx ,contr +0x7686 033922 call memcpy48 +0x7687 033923 jam sp_key_valid ,mem_sp_local_key_invalid +0x7688 033924 jam sp_calc_standby ,mem_sp_calc +0x7689 033925 rtn +: 033927 sp_dhkey_calc: +0x768a 033928 bpatchx patch3d_0 ,mem_patch3d +0x768b 033929 fetch 1 ,mem_sp_dhkey_invalid +0x768c 033930 rtnne sp_key_invalid +0x768d 033931 fetch 1 ,mem_sp_calc +0x768e 033932 rtnne sp_calc_standby +0x768f 033934 arg mem_k ,contw +0x7690 033935 arg mem_sp_private_key ,contr +0x7691 033936 call memcpy24 +0x7692 033938 arg mem_ax ,contw +0x7693 033939 arg mem_sp_pubkey_remote ,contr +0x7694 033940 call memcpy48 +0x7695 033942 arg mem_az ,contw +0x7696 033943 call bn_zero +0x7697 033944 jam 1 ,mem_az +0x7698 033946 call eckp_calc_init +0x7699 033947 jam sp_calc_dhkey ,mem_sp_calc +0x769a 033948 rtn +: 033950 sp_dhkey_generated: +0x769b 033951 jam sp_flag_commit ,mem_sp_dh_ready +0x769c 033952 arg mem_sp_dhkey ,contw +0x769d 033953 arg mem_bx ,contr +0x769e 033954 call memcpy24 +0x769f 033955 jam sp_key_valid ,mem_sp_dhkey_invalid +0x76a0 033956 jam sp_calc_standby ,mem_sp_calc +0x76a1 033957 rtn +: 033959 random_generator: +0x76a2 033960 increase -1 ,queue +0x76a3 033961 nrtn positive +0x76a4 033962 random pdata +0x76a5 033963 istore 2 ,contw +0x76a6 033964 branch random_generator +: 033965 compare4: +0x76a7 033966 increase -1 ,queue +0x76a8 033967 nbranch compare4_success ,positive +0x76a9 033968 ifetch 4 ,rega +0x76aa 033969 copy pdata ,temp +0x76ab 033970 ifetch 4 ,regb +0x76ac 033971 iflip temp ,pdata +0x76ad 033972 nbranch compare4_failed ,zero +0x76ae 033973 increase 4 ,rega +0x76af 033974 increase 4 ,regb +0x76b0 033975 branch compare4 +: 033976 compare4_failed: +0x76b1 033977 disable true +0x76b2 033978 rtn +: 033979 compare4_success: +0x76b3 033980 enable true +0x76b4 033981 rtn +: 033988 simple_pairing_sequence: +0x76b5 033989 bpatchx patch3d_1 ,mem_patch3d +0x76b6 033990 fetch 1 ,mem_sp_flag +0x76b7 033991 rtn blank +0x76b8 033992 call lmo_fifo_check +0x76b9 033993 nrtn blank +0x76ba 033994 jam sp_flag_standby ,mem_sp_flag +0x76bb 033995 fetch 1 ,mem_sp_state +0x76bc 033996 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +0x76bd 033997 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +0x76be 033998 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +0x76bf 033999 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +0x76c0 034000 beq sp_stat_key_generate ,sp_generate_local_key +0x76c1 034001 beq sp_stat_commit_calc ,sp_calculate_commitment +0x76c2 034002 beq sp_stat_confirm_check ,sp_confirm_check +0x76c3 034003 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76c4 034004 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +0x76c5 034006 rtn +: 034008 master_simple_paring_sequence: +0x76c6 034009 bpatchx patch3d_2 ,mem_patch3d +0x76c7 034010 fetch 1 ,mem_master_sp_flag +0x76c8 034011 rtn blank +0x76c9 034012 call lmo_fifo_check +0x76ca 034013 nrtn blank +0x76cb 034014 jam sp_flag_standby ,mem_master_sp_flag +0x76cc 034015 fetch 1 ,mem_master_sp_state +0x76cd 034016 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +0x76ce 034017 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +0x76cf 034018 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +0x76d0 034019 beq sp_stat_commit_calc ,master_sp_calculate_commitment +0x76d1 034020 beq sp_stat_commitment_compare ,sp_master_commitment_compare +0x76d2 034021 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +0x76d3 034022 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76d4 034023 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +0x76d5 034024 beq sp_stat_confirm_check ,sp_confirm_check +0x76d6 034025 beq sp_state_end ,master_sp_sm_end +0x76d7 034026 rtn +: 034028 master_set_mem_master_sp_flag: +0x76d8 034029 jam sp_flag_commit ,mem_master_sp_flag +0x76d9 034030 rtn +: 034032 master_clear_mem_master_sp_flag: +0x76da 034033 jam sp_flag_standby ,mem_master_sp_flag +0x76db 034034 rtn +: 034035 sp_calc_sequence: +0x76dc 034036 bpatchx patch3d_3 ,mem_patch3d +0x76dd 034037 fetch 1 ,mem_ssp_enable +0x76de 034038 rtn blank +0x76df 034039 fetch 1 ,mem_sp_calc +0x76e0 034040 rtn blank +0x76e1 034041 increase 0x80 ,pdata +0x76e2 034042 store 1 ,mem_sp_calc +0x76e3 034043 rtnbit1 7 +0x76e4 034044 fetch 1 ,mem_ec_loopc +0x76e5 034045 branch sp_calc_sequence_done ,blank +0x76e6 034046 branch eckp_calc +: 034048 sp_calc_sequence_done: +0x76e7 034049 call ecunmapz +0x76e8 034050 fetch 1 ,mem_sp_calc +0x76e9 034051 beq sp_calc_pubkey ,sp_pubkey_generated +0x76ea 034052 beq sp_calc_dhkey ,sp_dhkey_generated +0x76eb 034053 rtn +: 034056 bn_testbit: +0x76ec 034057 and pdata ,7 ,queue +0x76ed 034058 rshift3 pdata ,pdata +0x76ee 034059 iadd contr ,contr +0x76ef 034060 ifetch 1 ,contr +0x76f0 034061 qisolate0 pdata +0x76f1 034062 rtn +: 034065 ec_copy: +0x76f2 034066 call memcpy24 +0x76f3 034067 call memcpy24 +0x76f4 034068 branch memcpy24 +: 034071 bn_eq_zero: +0x76f5 034072 ifetch 8 ,contr +0x76f6 034073 nrtn blank +0x76f7 034074 ifetch 8 ,contr +0x76f8 034075 nrtn blank +0x76f9 034076 ifetch 8 ,contr +0x76fa 034077 rtn +: 034082 bn_eq_0: +0x76fb 034083 ifetch 4 ,rega +0x76fc 034084 iforce temp +0x76fd 034085 ifetch 4 ,regb +0x76fe 034086 isub temp ,null +0x76ff 034087 nrtn zero +0x7700 034088 increase 4 ,rega +0x7701 034089 increase 4 ,regb +0x7702 034090 loop bn_eq_0 +0x7703 034091 rtn +: 034094 bn_bigeq: +0x7704 034095 force 6 ,loopcnt +0x7705 034096 increase 20 ,rega +0x7706 034097 increase 20 ,regb +: 034098 bn_bigeq_0: +0x7707 034099 ifetch 4 ,regb +0x7708 034100 iforce temp +0x7709 034101 ifetch 4 ,rega +0x770a 034102 isub temp ,pdata +0x770b 034103 nrtn positive +0x770c 034104 nrtn blank +0x770d 034105 increase -4 ,rega +0x770e 034106 increase -4 ,regb +0x770f 034107 loop bn_bigeq_0 +0x7710 034108 rtn +: 034110 bn_add: +0x7711 034111 force 6 ,loopcnt +0x7712 034112 force 0 ,regc +: 034113 bn_add_0: +0x7713 034114 ifetch 4 ,rega +0x7714 034115 iforce temp +0x7715 034116 ifetch 4 ,regb +0x7716 034117 iadd temp ,pdata +0x7717 034118 iadd regc ,pdata +0x7718 034119 istore 4 ,contw +0x7719 034120 isolate1 32 ,pdata +0x771a 034121 setflag true ,0 ,regc +0x771b 034122 increase 4 ,rega +0x771c 034123 increase 4 ,regb +0x771d 034124 loop bn_add_0 +0x771e 034125 rtn +: 034127 bn_sub: +0x771f 034128 force 6 ,loopcnt +0x7720 034129 force 0 ,regc +: 034130 bn_sub_0: +0x7721 034131 ifetch 4 ,regb +0x7722 034132 iforce temp +0x7723 034133 ifetch 4 ,rega +0x7724 034134 isub temp ,pdata +0x7725 034135 isub regc ,pdata +0x7726 034136 istore 4 ,contw +0x7727 034137 isolate1 32 ,pdata +0x7728 034138 setflag true ,0 ,regc +0x7729 034139 increase 4 ,rega +0x772a 034140 increase 4 ,regb +0x772b 034141 loop bn_sub_0 +0x772c 034142 rtn +: 034144 bn_rshift6: +0x772d 034145 force 6 ,loopcnt +0x772e 034146 increase 20 ,rega +: 034147 bn_rshift: +0x772f 034148 force 0 ,regc +: 034149 bn_rshift_0: +0x7730 034150 ifetch 4 ,rega +0x7731 034151 isolate1 0 ,pdata +0x7732 034152 setflag true ,1 ,regc +0x7733 034153 rshift pdata ,pdata +0x7734 034154 isolate1 0 ,regc +0x7735 034155 setflag true ,31 ,pdata +0x7736 034156 istore 4 ,rega +0x7737 034157 increase -4 ,rega +0x7738 034158 rshift regc ,regc +0x7739 034159 loop bn_rshift_0 +0x773a 034160 rtn +: 034162 bn_lshift: +0x773b 034163 force 6 ,loopcnt +0x773c 034164 force 0 ,regc +: 034165 bn_lshift_0: +0x773d 034166 ifetch 4 ,rega +0x773e 034167 isolate1 31 ,pdata +0x773f 034168 setflag true ,1 ,regc +0x7740 034169 lshift pdata ,pdata +0x7741 034170 isolate1 0 ,regc +0x7742 034171 setflag true ,0 ,pdata +0x7743 034172 istore 4 ,rega +0x7744 034173 increase 4 ,rega +0x7745 034174 rshift regc ,regc +0x7746 034175 loop bn_lshift_0 +0x7747 034176 rtn +: 034178 bn_lshiftmod: +0x7748 034179 call bn_lshift +: 034180 bn_lshiftmod_ismod: +0x7749 034181 isolate1 0 ,regc +0x774a 034182 branch bn_lshiftmod_0 ,true +0x774b 034183 arg mem_p ,regb +0x774c 034184 copy rega ,regc +0x774d 034185 increase -24 ,rega +0x774e 034186 call bn_bigeq +0x774f 034187 nrtn positive +0x7750 034188 copy regc ,rega +: 034189 bn_lshiftmod_0: +0x7751 034190 increase -24 ,rega +0x7752 034191 arg mem_p ,regb +0x7753 034192 copy rega ,contw +0x7754 034193 branch bn_sub +: 034196 bn_addmod: +0x7755 034197 call bn_add +0x7756 034198 copy contw ,rega +0x7757 034199 branch bn_lshiftmod_ismod +: 034201 bn_submod: +0x7758 034202 call bn_sub +0x7759 034203 isolate0 0 ,regc +0x775a 034204 rtn true +0x775b 034205 arg mem_p ,regb +0x775c 034206 add contw ,-24 ,rega +0x775d 034207 copy rega ,contw +0x775e 034208 branch bn_add +: 034211 bn_p192mod: +0x775f 034212 copy contw ,timeup +0x7760 034213 copy rega ,alarm +0x7761 034214 arg mem_tmp2 ,regb +0x7762 034215 copy regb ,contw +0x7763 034216 add rega ,24 ,contr +0x7764 034217 ifetch 8 ,contr +0x7765 034218 istore 8 ,contw +0x7766 034219 istore 8 ,contw +0x7767 034220 force 0 ,pdata +0x7768 034221 istore 8 ,contw +0x7769 034222 copy timeup ,contw +0x776a 034223 call bn_addmod +0x776b 034224 arg mem_tmp2 ,regb +0x776c 034225 copy regb ,contw +0x776d 034226 force 0 ,pdata +0x776e 034227 istore 8 ,contw +0x776f 034228 add alarm ,32 ,contr +0x7770 034229 ifetch 8 ,contr +0x7771 034230 istore 8 ,contw +0x7772 034231 istore 8 ,contw +0x7773 034232 copy timeup ,rega +0x7774 034233 copy rega ,contw +0x7775 034234 call bn_addmod +0x7776 034235 arg mem_tmp2 ,regb +0x7777 034236 copy regb ,contw +0x7778 034237 add alarm ,40 ,contr +0x7779 034238 ifetch 8 ,contr +0x777a 034239 istore 8 ,contw +0x777b 034240 istore 8 ,contw +0x777c 034241 istore 8 ,contw +0x777d 034242 copy timeup ,rega +0x777e 034243 copy rega ,contw +0x777f 034244 branch bn_addmod +: 034247 bn_load: +0x7780 034248 force 6 ,loopcnt +: 034249 bn_load_0: +0x7781 034250 ifetch 4 ,contr +0x7782 034251 iforce regext +0x7783 034252 increase 1 ,regext_index +0x7784 034253 loop bn_load_0 +0x7785 034254 rtn +: 034258 bn_mulmod: +0x7786 034259 copy contw ,timeup +0x7787 034260 arg mem_tmp1 ,contw +0x7788 034261 call bn_zero +0x7789 034262 arg mem_tmp1 ,contw +0x778a 034263 copy rega ,contr +0x778b 034264 force 0 ,regext_index +0x778c 034265 call bn_load +0x778d 034266 copy regb ,contr +0x778e 034267 call bn_load +0x778f 034268 force 0 ,regb +: 034269 bn_mulmod_1: +0x7790 034270 force 0 ,temp +0x7791 034271 force 6 ,regc +: 034272 bn_mulmod_0: +0x7792 034273 ifetch 4 ,contw +0x7793 034274 iforce rega +0x7794 034275 copy regb ,regext_index +0x7795 034276 deposit regext +0x7796 034277 copy regc ,regext_index +0x7797 034278 imul32 regext ,pdata +0x7798 034279 iadd rega ,pdata +0x7799 034280 iadd temp ,pdata +0x779a 034281 istore 4 ,contw +0x779b 034282 rshift32 pdata ,temp +0x779c 034283 increase 1 ,regc +0x779d 034284 compare 12 ,regc ,0xff +0x779e 034285 nbranch bn_mulmod_0 ,true +0x779f 034286 deposit temp +0x77a0 034287 istore 4 ,contw +0x77a1 034288 increase -24 ,contw +0x77a2 034289 increase 1 ,regb +0x77a3 034290 compare 6 ,regb ,0xff +0x77a4 034291 nbranch bn_mulmod_1 ,true +0x77a5 034292 arg mem_tmp1 ,rega +0x77a6 034293 copy timeup ,contw +0x77a7 034294 branch bn_p192mod +: 034297 bn_sqrmod: +0x77a8 034298 copy rega ,regb +0x77a9 034299 branch bn_mulmod +: 034301 bn_rshifteven: +0x77aa 034302 copy rega ,alarm +: 034303 bn_rshifteven_1: +0x77ab 034304 copy alarm ,rega +0x77ac 034305 ifetch 1 ,rega +0x77ad 034306 isolate1 0 ,pdata +0x77ae 034307 rtn true +0x77af 034308 call bn_rshift6 +0x77b0 034309 ifetch 1 ,regb +0x77b1 034310 isolate0 0 ,pdata +0x77b2 034311 branch bn_rshifteven_0 ,true +0x77b3 034312 arg mem_p ,rega +0x77b4 034313 copy regb ,contw +0x77b5 034314 call bn_add +0x77b6 034315 ifetch 1 ,regb +0x77b7 034316 iadd regc ,pdata +0x77b8 034317 istore 1 ,regb +0x77b9 034318 increase -24 ,regb +: 034319 bn_rshifteven_0: +0x77ba 034320 add regb ,24 ,rega +0x77bb 034321 force 7 ,loopcnt +0x77bc 034322 call bn_rshift +0x77bd 034323 branch bn_rshifteven_1 +: 034326 bn_invmod: +0x77be 034327 copy contw ,timeup +0x77bf 034328 arg mem_tmp0 ,contw +0x77c0 034329 call bn_zero +0x77c1 034330 force 0 ,pdata +0x77c2 034331 store 4 ,mem_tmp5 +0x77c3 034332 store 4 ,mem_t2 +0x77c4 034333 jam 1 ,mem_tmp0 +0x77c5 034334 arg mem_tmp1 ,contw +0x77c6 034335 call bn_zero +0x77c7 034336 arg mem_p ,contr +0x77c8 034337 arg mem_tmp2 ,contw +0x77c9 034338 call memcpy24 +0x77ca 034339 copy rega ,contr +0x77cb 034340 arg mem_tmp3 ,contw +0x77cc 034341 call memcpy24 +: 034342 bn_invmod_2: +0x77cd 034343 arg mem_tmp3 ,contr +0x77ce 034344 call bn_eq_zero +0x77cf 034345 branch bn_invmod_0 ,blank +0x77d0 034346 arg mem_tmp3 ,rega +0x77d1 034347 arg mem_tmp0 ,regb +0x77d2 034348 call bn_rshifteven +0x77d3 034350 arg mem_tmp2 ,rega +0x77d4 034351 arg mem_tmp1 ,regb +0x77d5 034352 call bn_rshifteven +0x77d6 034353 arg mem_tmp3 ,rega +0x77d7 034354 arg mem_tmp2 ,regb +0x77d8 034355 call bn_bigeq +0x77d9 034356 branch bn_invmod_1 ,positive +0x77da 034357 arg mem_tmp2 ,rega +0x77db 034358 arg mem_tmp3 ,regb +0x77dc 034359 copy rega ,contw +0x77dd 034360 call bn_sub +0x77de 034361 arg mem_tmp0 ,rega +0x77df 034362 arg mem_tmp1 ,regb +0x77e0 034363 copy regb ,contw +0x77e1 034364 call bn_add +0x77e2 034365 ifetch 1 ,rega +0x77e3 034366 iadd regc ,regc +0x77e4 034367 ifetch 1 ,regb +0x77e5 034368 iadd regc ,pdata +0x77e6 034369 istore 1 ,regb +0x77e7 034370 branch bn_invmod_2 +: 034371 bn_invmod_1: +0x77e8 034372 arg mem_tmp3 ,rega +0x77e9 034373 arg mem_tmp2 ,regb +0x77ea 034374 copy rega ,contw +0x77eb 034375 call bn_sub +0x77ec 034376 arg mem_tmp1 ,rega +0x77ed 034377 arg mem_tmp0 ,regb +0x77ee 034378 copy regb ,contw +0x77ef 034379 call bn_add +0x77f0 034380 ifetch 1 ,rega +0x77f1 034381 iadd regc ,regc +0x77f2 034382 ifetch 1 ,regb +0x77f3 034383 iadd regc ,pdata +0x77f4 034384 istore 1 ,regb +0x77f5 034385 branch bn_invmod_2 +: 034386 bn_invmod_0: +0x77f6 034387 arg mem_tmp0 ,contw +0x77f7 034388 call bn_zero +0x77f8 034389 fetch 1 ,mem_tmp5 +0x77f9 034390 store 1 ,mem_tmp0 +0x77fa 034391 store 1 ,mem_tmp0a +0x77fb 034392 arg mem_tmp0 ,rega +0x77fc 034393 arg mem_tmp1 ,regb +0x77fd 034394 copy regb ,contw +0x77fe 034395 call bn_addmod +0x77ff 034396 arg mem_p ,rega +0x7800 034397 arg mem_tmp1 ,regb +0x7801 034398 copy timeup ,contw +0x7802 034399 branch bn_submod +: 034404 ecdbl: +0x7803 034405 arg mem_cz ,rega +0x7804 034406 arg mem_t2 ,contw +0x7805 034407 call bn_sqrmod +0x7806 034408 arg mem_t2 ,rega +0x7807 034409 arg mem_t3 ,contw +0x7808 034410 call bn_sqrmod +0x7809 034411 arg mem_a ,rega +0x780a 034412 arg mem_t3 ,regb +0x780b 034413 arg mem_t3 ,contw +0x780c 034414 call bn_mulmod +0x780d 034415 arg mem_cx ,rega +0x780e 034416 arg mem_t2 ,contw +0x780f 034417 call bn_sqrmod +0x7810 034418 arg mem_t2 ,contr +0x7811 034419 arg mem_t1 ,contw +0x7812 034420 call memcpy24 +0x7813 034421 arg mem_t1 ,rega +0x7814 034422 call bn_lshiftmod +0x7815 034423 arg mem_t2 ,rega +0x7816 034424 arg mem_t1 ,regb +0x7817 034425 arg mem_t2 ,contw +0x7818 034426 call bn_addmod +0x7819 034427 arg mem_t2 ,rega +0x781a 034428 arg mem_t3 ,regb +0x781b 034429 arg mem_t2 ,contw +0x781c 034430 call bn_addmod +0x781d 034431 arg mem_cx ,contr +0x781e 034432 arg mem_t1 ,contw +0x781f 034433 call memcpy24 +0x7820 034434 arg mem_cy ,rega +0x7821 034435 arg mem_t3 ,contw +0x7822 034436 call bn_sqrmod +0x7823 034437 arg mem_t1 ,rega +0x7824 034438 call bn_lshiftmod +0x7825 034439 arg mem_t1 ,rega +0x7826 034440 call bn_lshiftmod +0x7827 034441 arg mem_t1 ,rega +0x7828 034442 arg mem_t3 ,regb +0x7829 034443 arg mem_t1 ,contw +0x782a 034444 call bn_mulmod +0x782b 034445 arg mem_t3 ,rega +0x782c 034446 arg mem_t0 ,contw +0x782d 034447 call bn_sqrmod +0x782e 034448 arg mem_t0 ,rega +0x782f 034449 call bn_lshiftmod +0x7830 034450 arg mem_t0 ,rega +0x7831 034451 call bn_lshiftmod +0x7832 034452 arg mem_t0 ,rega +0x7833 034453 call bn_lshiftmod +0x7834 034454 arg mem_cy ,contr +0x7835 034455 arg mem_t3 ,contw +0x7836 034456 call memcpy24 +0x7837 034457 arg mem_t3 ,rega +0x7838 034458 call bn_lshiftmod +0x7839 034459 arg mem_t3 ,rega +0x783a 034460 arg mem_cz ,regb +0x783b 034461 arg mem_cz ,contw +0x783c 034462 call bn_mulmod +0x783d 034463 arg mem_t2 ,rega +0x783e 034464 arg mem_t3 ,contw +0x783f 034465 call bn_sqrmod +0x7840 034466 arg mem_t3 ,rega +0x7841 034467 arg mem_t1 ,regb +0x7842 034468 arg mem_t3 ,contw +0x7843 034469 call bn_submod +0x7844 034470 arg mem_t3 ,rega +0x7845 034471 arg mem_t1 ,regb +0x7846 034472 arg mem_cx ,contw +0x7847 034473 call bn_submod +0x7848 034474 arg mem_t1 ,rega +0x7849 034475 arg mem_cx ,regb +0x784a 034476 arg mem_t3 ,contw +0x784b 034477 call bn_submod +0x784c 034478 arg mem_t3 ,rega +0x784d 034479 arg mem_t2 ,regb +0x784e 034480 arg mem_t3 ,contw +0x784f 034481 call bn_mulmod +0x7850 034482 arg mem_t3 ,rega +0x7851 034483 arg mem_t0 ,regb +0x7852 034484 arg mem_cy ,contw +0x7853 034485 branch bn_submod +: 034489 ecadd: +0x7854 034490 arg mem_az ,rega +0x7855 034491 arg mem_t7 ,contw +0x7856 034492 call bn_sqrmod +0x7857 034493 arg mem_cx ,rega +0x7858 034494 arg mem_t7 ,regb +0x7859 034495 arg mem_t0 ,contw +0x785a 034496 call bn_mulmod +0x785b 034497 arg mem_az ,rega +0x785c 034498 arg mem_t7 ,regb +0x785d 034499 arg mem_t7 ,contw +0x785e 034500 call bn_mulmod +0x785f 034501 arg mem_cy ,rega +0x7860 034502 arg mem_t7 ,regb +0x7861 034503 arg mem_t1 ,contw +0x7862 034504 call bn_mulmod +0x7863 034505 arg mem_cz ,rega +0x7864 034506 arg mem_t7 ,contw +0x7865 034507 call bn_sqrmod +0x7866 034508 arg mem_ax ,rega +0x7867 034509 arg mem_t7 ,regb +0x7868 034510 arg mem_t2 ,contw +0x7869 034511 call bn_mulmod +0x786a 034512 arg mem_cz ,rega +0x786b 034513 arg mem_t7 ,regb +0x786c 034514 arg mem_t7 ,contw +0x786d 034515 call bn_mulmod +0x786e 034516 arg mem_ay ,rega +0x786f 034517 arg mem_t7 ,regb +0x7870 034518 arg mem_t3 ,contw +0x7871 034519 call bn_mulmod +0x7872 034520 arg mem_t0 ,rega +0x7873 034521 arg mem_t2 ,regb +0x7874 034522 arg mem_t7 ,contw +0x7875 034523 call bn_submod +0x7876 034524 arg mem_t0 ,rega +0x7877 034525 arg mem_t2 ,regb +0x7878 034526 arg mem_t0 ,contw +0x7879 034527 call bn_addmod +0x787a 034528 arg mem_t1 ,rega +0x787b 034529 arg mem_t3 ,regb +0x787c 034530 arg mem_t2 ,contw +0x787d 034531 call bn_submod +0x787e 034532 arg mem_t1 ,rega +0x787f 034533 arg mem_t3 ,regb +0x7880 034534 arg mem_t1 ,contw +0x7881 034535 call bn_addmod +0x7882 034536 arg mem_t1 ,rega +0x7883 034537 arg mem_t7 ,regb +0x7884 034538 arg mem_t1 ,contw +0x7885 034539 call bn_mulmod +0x7886 034540 arg mem_cz ,rega +0x7887 034541 arg mem_az ,regb +0x7888 034542 arg mem_t3 ,contw +0x7889 034543 call bn_mulmod +0x788a 034544 arg mem_t3 ,rega +0x788b 034545 arg mem_t7 ,regb +0x788c 034546 arg mem_cz ,contw +0x788d 034547 call bn_mulmod +0x788e 034548 arg mem_t7 ,rega +0x788f 034549 arg mem_t7 ,contw +0x7890 034550 call bn_sqrmod +0x7891 034551 arg mem_t7 ,rega +0x7892 034552 arg mem_t0 ,regb +0x7893 034553 arg mem_t3 ,contw +0x7894 034554 call bn_mulmod +0x7895 034555 arg mem_t7 ,rega +0x7896 034556 arg mem_t1 ,regb +0x7897 034557 arg mem_t1 ,contw +0x7898 034558 call bn_mulmod +0x7899 034559 arg mem_t2 ,rega +0x789a 034560 arg mem_cx ,contw +0x789b 034561 call bn_sqrmod +0x789c 034562 arg mem_cx ,rega +0x789d 034563 arg mem_t3 ,regb +0x789e 034564 arg mem_cx ,contw +0x789f 034565 call bn_submod +0x78a0 034566 arg mem_cx ,contr +0x78a1 034567 arg mem_t7 ,contw +0x78a2 034568 call memcpy24 +0x78a3 034569 arg mem_t7 ,rega +0x78a4 034570 call bn_lshiftmod +0x78a5 034571 arg mem_t3 ,rega +0x78a6 034572 arg mem_t7 ,regb +0x78a7 034573 arg mem_t3 ,contw +0x78a8 034574 call bn_submod +0x78a9 034575 arg mem_t3 ,rega +0x78aa 034576 arg mem_t2 ,regb +0x78ab 034577 arg mem_t2 ,contw +0x78ac 034578 call bn_mulmod +0x78ad 034579 arg mem_t2 ,rega +0x78ae 034580 arg mem_t1 ,regb +0x78af 034581 arg mem_cy ,contw +0x78b0 034582 call bn_submod +0x78b1 034583 arg mem_cy ,rega +0x78b2 034584 arg mem_p ,regb +0x78b3 034585 arg mem_cy ,contw +0x78b4 034586 force 0 ,regc +0x78b5 034587 fetch 1 ,mem_cy +0x78b6 034588 isolate1 0 ,pdata +0x78b7 034589 call bn_add ,true +0x78b8 034590 copy regc ,alarm +0x78b9 034591 arg mem_cy ,rega +0x78ba 034592 call bn_rshift6 +0x78bb 034593 fetch 1 ,mem_cy5 +0x78bc 034594 isolate1 0 ,alarm +0x78bd 034595 setflag true ,7 ,pdata +0x78be 034596 store 1 ,mem_cy5 +0x78bf 034597 rtn +: 034601 eckp_0: +0x78c0 034602 fetch 1 ,mem_ec_loopc +0x78c1 034603 increase -1 ,pdata +0x78c2 034604 nrtn positive +0x78c3 034605 store 1 ,mem_ec_loopc +0x78c4 034606 fetch 1 ,mem_ec_infinite +0x78c5 034607 call ecdbl ,blank +0x78c6 034608 fetch 1 ,mem_ec_loopc +0x78c7 034609 arg mem_k ,contr +0x78c8 034610 call bn_testbit +0x78c9 034611 branch eckp_0 ,true +0x78ca 034612 fetch 1 ,mem_ec_infinite +0x78cb 034613 nbranch eckp_1 ,blank +0x78cc 034614 call ecadd +0x78cd 034615 branch eckp_0 +: 034616 eckp_1: +0x78ce 034617 jam 0 ,mem_ec_infinite +0x78cf 034618 arg mem_ax ,contr +0x78d0 034619 arg mem_cx ,contw +0x78d1 034620 call ec_copy +0x78d2 034621 branch eckp_0 +: 034624 ecunmapz: +0x78d3 034625 arg mem_cz ,rega +0x78d4 034626 arg mem_t3 ,contw +0x78d5 034627 call bn_invmod +0x78d6 034628 arg mem_t3 ,rega +0x78d7 034629 arg mem_t1 ,contw +0x78d8 034630 call bn_sqrmod +0x78d9 034631 arg mem_cx ,rega +0x78da 034632 arg mem_t1 ,regb +0x78db 034633 arg mem_bx ,contw +0x78dc 034634 call bn_mulmod +0x78dd 034635 arg mem_t3 ,rega +0x78de 034636 arg mem_t1 ,regb +0x78df 034637 arg mem_t2 ,contw +0x78e0 034638 call bn_mulmod +0x78e1 034639 arg mem_cy ,rega +0x78e2 034640 arg mem_t2 ,regb +0x78e3 034641 arg mem_by ,contw +0x78e4 034642 branch bn_mulmod +: 034646 sha_endian_swap2: +0x78e5 034647 ifetch 4 ,contr +0x78e6 034648 force 4 ,rega +0x78e7 034649 increase 3 ,contw +: 034650 sha_endian_loop: +0x78e8 034651 istore 1 ,contw +0x78e9 034652 rshift8 pdata ,pdata +0x78ea 034653 increase -2 ,contw +0x78eb 034654 increase -1 ,rega +0x78ec 034655 nbranch sha_endian_loop ,zero +0x78ed 034656 increase 5 ,contw +0x78ee 034657 loop sha_endian_swap2 +0x78ef 034658 rtn +: 034661 sha_getw: +0x78f0 034662 lshift2 queue ,pdata +0x78f1 034663 iadd timeup ,contr +0x78f2 034664 ifetch 4 ,contr +0x78f3 034665 rtn +: 034667 sha_r: +0x78f4 034668 force 16 ,alarm +0x78f5 034669 arg memdat ,timeup +: 034670 sha_r_loop: +0x78f6 034671 add alarm ,-7 ,queue +0x78f7 034672 call sha_getw +0x78f8 034673 iforce temp +0x78f9 034674 add alarm ,-16 ,queue +0x78fa 034675 call sha_getw +0x78fb 034676 iadd temp ,temp +0x78fc 034677 add alarm ,-2 ,queue +0x78fd 034678 call sha_getw +0x78fe 034679 shasx pdata ,1 ,pdata +0x78ff 034680 iadd temp ,temp +0x7900 034681 add alarm ,-15 ,queue +0x7901 034682 call sha_getw +0x7902 034683 shasx pdata ,0 ,pdata +0x7903 034684 iadd temp ,temp +0x7904 034685 lshift2 alarm ,pdata +0x7905 034686 iadd timeup ,contw +0x7906 034687 istoret 4 ,contw +0x7907 034688 increase 1 ,alarm +0x7908 034689 compare 64 ,alarm ,0xff +0x7909 034690 nbranch sha_r_loop ,true +0x790a 034691 rtn +: 034694 sha_init: +0x790b 034695 arg memh0 ,contr +0x790c 034696 force 7 ,regext_index +: 034697 sha_init_0: +0x790d 034698 ifetch 4 ,contr +0x790e 034699 iforce regext +0x790f 034700 increase -1 ,regext_index +0x7910 034701 branch sha_init_0 ,positive +0x7911 034702 rtn +: 034704 sha: +0x7912 034705 bpatchx patch3d_4 ,mem_patch3d +0x7913 034706 call sha_r +0x7914 034707 arg memahbak ,contw +0x7915 034708 force 0 ,regext_index +: 034709 sha_0: +0x7916 034710 deposit regext +0x7917 034711 istore 4 ,contw +0x7918 034712 increase 1 ,regext_index +0x7919 034713 compare 8 ,regext_index ,0xff +0x791a 034714 nbranch sha_0 ,true +0x791b 034715 call enable_authrom +0x791c 034716 arg memk ,timeup +0x791d 034717 arg memdat ,alarm +0x791e 034718 force 64 ,loopcnt +: 034719 sha_loop: +0x791f 034720 ifetcht 4 ,alarm +0x7920 034721 ifetch 4 ,timeup +0x7921 034722 increase 4 ,timeup +0x7922 034723 increase 4 ,alarm +0x7923 034724 iadd temp ,pdata +0x7924 034725 force 7 ,regext_index +0x7925 034726 iadd regext ,temp +0x7926 034727 force 4 ,regext_index +0x7927 034728 shasx regext ,3 ,pdata +0x7928 034729 iadd temp ,temp +0x7929 034730 force 5 ,regext_index +0x792a 034731 deposit regext +0x792b 034732 force 6 ,regext_index +0x792c 034733 ixor regext ,pdata +0x792d 034734 force 4 ,regext_index +0x792e 034735 iand regext ,pdata +0x792f 034736 force 6 ,regext_index +0x7930 034737 ixor regext ,pdata +0x7931 034738 iadd temp ,temp +0x7932 034739 force 7 ,regext_index +0x7933 034740 copy temp ,regext +0x7934 034741 force 3 ,regext_index +0x7935 034742 deposit regext +0x7936 034743 iadd temp ,regext +0x7937 034744 force 0 ,regext_index +0x7938 034745 deposit regext +0x7939 034746 force 1 ,regext_index +0x793a 034747 iand regext ,temp +0x793b 034748 ior regext ,pdata +0x793c 034749 force 2 ,regext_index +0x793d 034750 iand regext ,pdata +0x793e 034751 ior temp ,temp +0x793f 034752 force 0 ,regext_index +0x7940 034753 shasx regext ,2 ,pdata +0x7941 034754 iadd temp ,pdata +0x7942 034755 force 7 ,regext_index +0x7943 034756 iadd regext ,regext +0x7944 034757 regexrot +0x7945 034758 loop sha_loop +0x7946 034759 arg memahbak ,contr +0x7947 034760 force 0 ,regext_index +: 034761 sha_1: +0x7948 034762 ifetch 4 ,contr +0x7949 034763 iadd regext ,regext +0x794a 034764 increase 1 ,regext_index +0x794b 034765 compare 8 ,regext_index ,0xff +0x794c 034766 nbranch sha_1 ,true +0x794d 034767 branch disable_authrom +: 034770 sha_result: +0x794e 034771 arg memresult ,contw +0x794f 034772 force 7 ,regext_index +: 034773 sha_regext_save: +0x7950 034774 deposit regext +0x7951 034775 istore 4 ,contw +0x7952 034776 increase -1 ,regext_index +0x7953 034777 branch sha_regext_save ,positive +0x7954 034778 rtn +: 034780 pad_xor: +0x7955 034782 arg memdat ,contw +0x7956 034783 increase -4 ,contr +0x7957 034784 sub loopcnt ,16 ,rega +: 034785 pad_xor_0: +0x7958 034786 ifetch 4 ,contr +0x7959 034787 ixor temp ,pdata +0x795a 034788 istore 4 ,contw +0x795b 034789 increase -8 ,contr +0x795c 034790 loop pad_xor_0 +0x795d 034791 copy rega ,loopcnt +0x795e 034792 deposit temp +: 034793 pad_xor_1: +0x795f 034794 istore 4 ,contw +0x7960 034795 loop pad_xor_1 +0x7961 034796 rtn +: 034798 g_noninit_number_confirm: +0x7962 034799 call g_noninit0 +0x7963 034800 call sha_result +0x7964 034801 branch g_common0 +: 034803 g_noninit: +0x7965 034804 call g_noninit0 +0x7966 034805 branch g_common0 +: 034807 g_noninit0: +0x7967 034808 arg mem_sp_pubkey_remote_x_end ,contr +0x7968 034809 arg memdat ,contw +0x7969 034810 force 6 ,loopcnt +0x796a 034811 call memcpy_dword_swap +0x796b 034812 arg mem_sp_pubkey_local_x_end ,contr +0x796c 034813 force 6 ,loopcnt +0x796d 034814 call memcpy_dword_swap +0x796e 034815 arg mem_sp_random_remote_end ,contr +0x796f 034816 call memcpy_dword_swap4 +0x7970 034817 call sha_init +0x7971 034818 call sha +0x7972 034819 arg mem_sp_random_local_end ,contr +0x7973 034820 arg memdat ,contw +0x7974 034821 branch g_common +: 034823 g_init: +0x7975 034824 arg mem_sp_pubkey_local_x_end ,contr +0x7976 034825 arg memdat ,contw +0x7977 034826 force 6 ,loopcnt +0x7978 034827 call memcpy_dword_swap +0x7979 034828 arg mem_sp_pubkey_remote_x_end ,contr +0x797a 034829 force 6 ,loopcnt +0x797b 034830 call memcpy_dword_swap +0x797c 034831 arg mem_sp_random_local_end ,contr +0x797d 034832 call memcpy_dword_swap4 +0x797e 034833 call sha_init +0x797f 034834 call sha +0x7980 034835 arg mem_sp_random_remote_end ,contr +0x7981 034836 arg memdat ,contw +0x7982 034837 call g_common +0x7983 034838 branch g_common0 +: 034840 g_common: +0x7984 034841 call memcpy_dword_swap4 +0x7985 034842 setarg 0x800000 +0x7986 034843 lshift8 pdata ,pdata +0x7987 034844 istore 4 ,contw +0x7988 034845 force 5 ,loopcnt +0x7989 034846 call memset0 +0x798a 034847 setarg 640 +0x798b 034848 istore 4 ,contw +0x798c 034849 branch sha +: 034850 g_common0: +0x798d 034851 fetch 4 ,memresult +0x798e 034853 arg 1000 ,rega +0x798f 034854 idiv rega +0x7990 034855 call wait_div_end +0x7991 034856 remainder pdata +0x7992 034857 store 4 ,mem_gkey +0x7993 034858 quotient pdata +0x7994 034859 arg 1000 ,rega +0x7995 034860 idiv rega +0x7996 034861 call wait_div_end +0x7997 034862 remainder pdata +0x7998 034863 arg 1000 ,rega +0x7999 034864 imul32 rega ,pdata +0x799a 034865 fetcht 4 ,mem_gkey +0x799b 034866 iadd temp ,pdata +0x799c 034867 store 4 ,mem_gkey +0x799d 034868 rtn +: 034870 function_f1_no_key: +0x799e 034871 jam 0 ,mem_passkey_1bit +0x799f 034872 branch function_f1_common +: 034874 function_f1: +0x79a0 034875 fetch 1 ,mem_ssp_mode_flag +0x79a1 034876 bne ssp_mode_passkey_entry_flag ,function_f1_no_key +: 034877 function_f1_common: +0x79a2 034878 bpatchx patch3d_5 ,mem_patch3d +0x79a3 034879 setarg 0x363636 +0x79a4 034880 lshift8 pdata ,temp +0x79a5 034881 or_into 0x36 ,temp +0x79a6 034882 fetch 2 ,mem_sp_prarm_stack +0x79a7 034883 copy pdata ,contr +0x79a8 034884 force 4 ,loopcnt +0x79a9 034885 call pad_xor +0x79aa 034886 call sha_init +0x79ab 034887 call sha +0x79ac 034888 fetch 2 ,mem_sp_prarm_stack + 2 +0x79ad 034889 copy pdata ,contr +0x79ae 034890 arg memdat ,contw +0x79af 034891 force 6 ,loopcnt +0x79b0 034892 call memcpy_dword_swap +0x79b1 034893 fetch 2 ,mem_sp_prarm_stack + 4 +0x79b2 034894 copy pdata ,contr +0x79b3 034895 force 6 ,loopcnt +0x79b4 034896 call memcpy_dword_swap +0x79b5 034897 setarg 0x800000 +0x79b6 034898 istore 3 ,contw +0x79b7 034900 fetch 1 ,mem_passkey_1bit +0x79b8 034902 istore 1 ,contw +0x79b9 034903 force 0 ,pdata +0x79ba 034904 istore 8 ,contw +0x79bb 034905 setarg 0x0388 +0x79bc 034906 istore 4 ,contw +0x79bd 034907 call sha +0x79be 034908 call sha_result +0x79bf 034909 arg memresult ,contr +0x79c0 034910 arg memahsave ,contw +0x79c1 034911 call memcpy32 +0x79c2 034913 setarg 0x5c5c5c +0x79c3 034914 lshift8 pdata ,temp +0x79c4 034915 or_into 0x5c ,temp +0x79c5 034916 fetch 2 ,mem_sp_prarm_stack +0x79c6 034917 copy pdata ,contr +0x79c7 034918 force 4 ,loopcnt +0x79c8 034919 call pad_xor +0x79c9 034920 call sha_init +0x79ca 034921 call sha +0x79cb 034922 arg memahsave_end ,contr +0x79cc 034923 arg memdat ,contw +0x79cd 034924 force 8 ,loopcnt +0x79ce 034925 call memcpy_dword_swap +0x79cf 034926 setarg 0x800000 +0x79d0 034927 lshift8 pdata ,pdata +0x79d1 034928 istore 4 ,contw +0x79d2 034929 call bn_zero +0x79d3 034930 setarg 0x0300 +0x79d4 034931 istore 4 ,contw +0x79d5 034932 call sha +0x79d6 034933 branch sha_result +: 034936 function_f2: +0x79d7 034937 setarg 0x363636 +0x79d8 034938 lshift8 pdata ,temp +0x79d9 034939 or_into 0x36 ,temp +0x79da 034940 arg mem_sp_dhkey_end ,contr +0x79db 034941 force 6 ,loopcnt +0x79dc 034942 call pad_xor +0x79dd 034943 call sha_init +0x79de 034944 call sha +0x79df 034945 fetch 2 ,mem_sp_prarm_stack + 12 +0x79e0 034946 copy pdata ,contr +0x79e1 034947 arg memdat ,contw +0x79e2 034948 call memcpy_dword_swap4 +0x79e3 034949 fetch 2 ,mem_sp_prarm_stack + 14 +0x79e4 034950 copy pdata ,contr +0x79e5 034951 call memcpy_dword_swap4 +0x79e6 034953 setarg 0x62746c +0x79e7 034954 lshift8 pdata ,pdata +0x79e8 034955 or_into 0x6b ,pdata +0x79e9 034956 istore 4 ,contw +0x79ea 034957 arg mem_addr_value_end ,contr +0x79eb 034958 force 3 ,loopcnt +0x79ec 034959 call memcpy_dword_swap +0x79ed 034961 setarg 0x800000 +0x79ee 034962 lshift8 pdata ,pdata +0x79ef 034963 istore 4 ,contw +0x79f0 034964 force 0 ,pdata +0x79f1 034965 istore 8 ,contw +0x79f2 034966 setarg 0x0380 +0x79f3 034967 istore 4 ,contw +0x79f4 034968 call sha +0x79f5 034970 call sha_result +0x79f6 034971 arg memresult ,contr +0x79f7 034972 arg memahsave ,contw +0x79f8 034973 call memcpy32 +0x79f9 034975 setarg 0x5c5c5c +0x79fa 034976 lshift8 pdata ,temp +0x79fb 034977 or_into 0x5c ,temp +0x79fc 034978 arg mem_sp_dhkey_end ,contr +0x79fd 034979 force 6 ,loopcnt +0x79fe 034980 call pad_xor +0x79ff 034981 call sha_init +0x7a00 034982 call sha +0x7a01 034983 arg memahsave_end ,contr +0x7a02 034984 arg memdat ,contw +0x7a03 034985 force 8 ,loopcnt +0x7a04 034986 call memcpy_dword_swap +0x7a05 034987 setarg 0x800000 +0x7a06 034988 lshift8 pdata ,pdata +0x7a07 034989 istore 4 ,contw +0x7a08 034990 call bn_zero +0x7a09 034991 setarg 0x0300 +0x7a0a 034992 istore 4 ,contw +0x7a0b 034993 call sha +0x7a0c 034994 branch sha_result +: 034997 function_f3a: +0x7a0d 034998 fetch 1 ,mem_ssp_mode_flag +0x7a0e 034999 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin +: 035000 function_f3a_common: +0x7a0f 035001 bpatchx patch3d_6 ,mem_patch3d +0x7a10 035002 setarg 0x363636 +0x7a11 035003 lshift8 pdata ,temp +0x7a12 035004 or_into 0x36 ,temp +0x7a13 035005 arg mem_sp_dhkey_end ,contr +0x7a14 035006 force 6 ,loopcnt +0x7a15 035007 call pad_xor +0x7a16 035008 call sha_init +0x7a17 035009 call sha +0x7a18 035010 arg mem_sp_random_remote_end ,contr +0x7a19 035011 arg memdat ,contw +0x7a1a 035012 call memcpy_dword_swap4 +0x7a1b 035013 arg mem_sp_random_local_end ,contr +0x7a1c 035014 call memcpy_dword_swap4 +0x7a1d 035015 branch function_f3_common +: 035017 function_f3a_no_pin: +0x7a1e 035018 setarg 0 +0x7a1f 035019 store 4 ,mem_pin +0x7a20 035020 branch function_f3a_common +: 035022 function_f3b_no_pin: +0x7a21 035023 setarg 0 +0x7a22 035024 store 4 ,mem_pin +0x7a23 035025 branch function_f3b_common +: 035028 function_f3b: +0x7a24 035029 fetch 1 ,mem_ssp_mode_flag +0x7a25 035030 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin +: 035031 function_f3b_common: +0x7a26 035032 setarg 0x363636 +0x7a27 035033 lshift8 pdata ,temp +0x7a28 035034 or_into 0x36 ,temp +0x7a29 035035 arg mem_sp_dhkey_end ,contr +0x7a2a 035036 force 6 ,loopcnt +0x7a2b 035037 call pad_xor +0x7a2c 035038 call sha_init +0x7a2d 035039 call sha +0x7a2e 035041 arg mem_sp_random_local_end ,contr +0x7a2f 035042 arg memdat ,contw +0x7a30 035043 call memcpy_dword_swap4 +0x7a31 035044 arg mem_sp_random_remote_end ,contr +0x7a32 035045 call memcpy_dword_swap4 +: 035046 function_f3_common: +0x7a33 035047 setarg 0x0 +0x7a34 035048 istore 8 ,contw +0x7a35 035049 istore 4 ,contw +0x7a36 035050 fetch 4 ,mem_pin +0x7a37 035051 istore 4 ,contw +0x7a38 035053 copy contw ,temp +0x7a39 035054 jam 0x80 ,mem_addr_padding +0x7a3a 035055 copy temp ,contw +0x7a3b 035056 arg mem_addr_iocap_end ,contr +0x7a3c 035057 call memcpy_dword_swap4 +0x7a3d 035059 call sha +0x7a3e 035061 arg memdat ,contw +0x7a3f 035062 force 7 ,loopcnt +0x7a40 035063 call memset0 +0x7a41 035064 istore 4 ,contw +0x7a42 035065 setarg 0x03F8 +0x7a43 035066 istore 4 ,contw +0x7a44 035067 call sha +0x7a45 035068 call sha_result +0x7a46 035070 arg memresult ,contr +0x7a47 035071 arg memahsave ,contw +0x7a48 035072 call memcpy32 +0x7a49 035074 setarg 0x5c5c5c +0x7a4a 035075 lshift8 pdata ,temp +0x7a4b 035076 or_into 0x5c ,temp +0x7a4c 035077 arg mem_sp_dhkey_end ,contr +0x7a4d 035078 force 6 ,loopcnt +0x7a4e 035079 call pad_xor +0x7a4f 035080 call sha_init +0x7a50 035081 call sha +0x7a51 035082 arg memahsave_end ,contr +0x7a52 035083 arg memdat ,contw +0x7a53 035084 force 8 ,loopcnt +0x7a54 035085 call memcpy_dword_swap +0x7a55 035086 setarg 0x800000 +0x7a56 035087 lshift8 pdata ,pdata +0x7a57 035088 istore 4 ,contw +0x7a58 035089 call bn_zero +0x7a59 035090 setarg 0x0300 +0x7a5a 035091 istore 4 ,contw +0x7a5b 035092 call sha +0x7a5c 035093 branch sha_result +: 035100 eckp_calc_init: +0x7a5d 035101 jam 192 ,mem_ec_loopc +: 035102 eckp_calc_init_1: +0x7a5e 035103 fetch 1 ,mem_ec_loopc +0x7a5f 035104 rtn blank +0x7a60 035105 increase -1 ,pdata +0x7a61 035106 store 1 ,mem_ec_loopc +0x7a62 035107 arg mem_k ,contr +0x7a63 035108 call bn_testbit +0x7a64 035109 branch eckp_calc_init_1 ,true +0x7a65 035110 arg mem_ax ,contr +0x7a66 035111 arg mem_cx ,contw +0x7a67 035112 branch ec_copy +: 035114 eckp_calc: +0x7a68 035115 call ecdbl +0x7a69 035116 fetch 1 ,mem_ec_loopc +0x7a6a 035117 increase -1 ,pdata +0x7a6b 035118 store 1 ,mem_ec_loopc +0x7a6c 035119 arg mem_k ,contr +0x7a6d 035120 call bn_testbit +0x7a6e 035121 rtn true +0x7a6f 035122 branch ecadd +: 035124 memcpy_dword_swap4: +0x7a70 035125 force 4 ,loopcnt +: 035126 memcpy_dword_swap: +0x7a71 035127 increase -4 ,contr +: 035128 memcpy_dword_swap_loop: +0x7a72 035129 ifetch 4 ,contr +0x7a73 035130 istore 4 ,contw +0x7a74 035131 increase -8 ,contr +0x7a75 035132 loop memcpy_dword_swap_loop +0x7a76 035133 rtn +: 035138 sp_initialize_256: +0x7a77 035139 bpatchx patch3d_7 ,mem_patch3d +0x7a78 035140 fetch 1 ,mem_le_secure_connect_enable +0x7a79 035141 branch le_secure_connection_disable ,blank +0x7a7a 035142 call le_secure_connection_enable +0x7a7b 035143 call sp_clear_flags +0x7a7c 035145 branch sp_pubkey_calc_256 +: 035150 sp_pubkey_calc_256: +0x7a7d 035151 fetch 1 ,mem_le_sc_local_key_invalid +0x7a7e 035152 rtnne sp_key_invalid +0x7a7f 035153 fetch 1 ,mem_le_sc_calc +0x7a80 035154 rtnne sp_calc_standby +0x7a81 035156 arg mem_le_private_key_256 ,contw +0x7a82 035157 force 15 ,queue +0x7a83 035158 call random_generator +0x7a84 035159 random pdata +0x7a85 035160 rshift pdata ,pdata +0x7a86 035161 istore 2 ,contw +0x7a87 035163 arg mem_k_256 ,contw +0x7a88 035164 arg mem_le_private_key_256 ,contr +0x7a89 035165 call memcpy32 +0x7a8a 035167 arg mem_ax_256 ,contw +0x7a8b 035168 arg mem_gx_256 ,contr +0x7a8c 035169 call memcpy64 +0x7a8d 035171 arg mem_az_256 ,contw +0x7a8e 035172 call clear_mem_256 +0x7a8f 035173 jam 1 ,mem_az_256 +0x7a90 035175 call eckp_calc_init_256 +0x7a91 035176 jam sp_calc_pubkey_256 ,mem_le_sc_calc +0x7a92 035177 rtn +: 035179 sp_pubkey_generated_256: +0x7a93 035180 arg mem_le_pubkey_local_x_256 ,contw +0x7a94 035181 arg mem_bx_256 ,contr +0x7a95 035182 call memcpy64 +0x7a96 035183 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid +0x7a97 035184 jam sp_calc_standby ,mem_le_sc_calc +0x7a98 035185 rtn +: 035189 sp_dhkey_calc_256: +0x7a99 035190 fetch 1 ,mem_sp_dhkey_invalid +0x7a9a 035191 rtnne sp_key_invalid +0x7a9b 035192 fetch 1 ,mem_le_sc_calc +0x7a9c 035193 rtnne sp_calc_standby +0x7a9d 035195 arg mem_k_256 ,contw +0x7a9e 035196 arg mem_le_private_key_256 ,contr +0x7a9f 035197 call memcpy32 +0x7aa0 035199 arg mem_ax_256 ,contw +0x7aa1 035200 arg mem_le_pubkey_remote_x_256 ,contr +0x7aa2 035201 call memcpy64 +0x7aa3 035203 arg mem_az_256 ,contw +0x7aa4 035204 call clear_mem_256 +0x7aa5 035205 jam 1 ,mem_az_256 +0x7aa6 035207 call eckp_calc_init_256 +0x7aa7 035208 jam sp_calc_dhkey_256 ,mem_le_sc_calc +0x7aa8 035209 rtn +: 035212 sp_dhkey_generated_256: +0x7aa9 035214 arg mem_le_dhkey_256 ,contw +0x7aaa 035215 arg mem_bx_256 ,contr +0x7aab 035216 call memcpy32 +0x7aac 035217 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +0x7aad 035218 jam sp_calc_standby ,mem_le_sc_calc +0x7aae 035219 rtn +: 035223 sp_calc_sequence_256: +0x7aaf 035224 fetch 1 ,mem_le_secure_connect_enable +0x7ab0 035225 rtn blank +0x7ab1 035226 fetch 1 ,mem_le_sc_calc +0x7ab2 035227 rtn blank +0x7ab3 035228 increase 0x80 ,pdata +0x7ab4 035229 store 1 ,mem_le_sc_calc +0x7ab5 035230 rtnbit1 7 +0x7ab6 035231 fetch 2 ,mem_ec_loopc +0x7ab7 035232 branch sp_calc_sequence_done_256 ,blank +0x7ab8 035233 branch eckp_calc_256 +: 035235 sp_calc_sequence_done_256: +0x7ab9 035236 bpatchx patch3e_0 ,mem_patch3e +0x7aba 035237 call ecunmapz_256 +0x7abb 035238 fetch 1 ,mem_le_sc_calc +0x7abc 035239 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +0x7abd 035240 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +0x7abe 035241 rtn +: 035244 eckp_calc_256: +0x7abf 035245 call ecdbl_256 +0x7ac0 035246 fetch 2 ,mem_ec_loopc +0x7ac1 035247 increase -1 ,pdata +0x7ac2 035248 store 2 ,mem_ec_loopc +0x7ac3 035249 arg mem_k_256 ,contr +0x7ac4 035250 call bn_testbit +0x7ac5 035251 rtn true +0x7ac6 035252 branch ecadd_256 +: 035254 eckp_calc_init_256: +0x7ac7 035255 bpatchx patch3e_1 ,mem_patch3e +0x7ac8 035256 setarg 256 ,pdata +0x7ac9 035257 store 2 ,mem_ec_loopc +: 035258 eckp_calc_init_256_1: +0x7aca 035259 fetch 2 ,mem_ec_loopc +0x7acb 035260 rtn blank +0x7acc 035261 increase -1 ,pdata +0x7acd 035262 store 2 ,mem_ec_loopc +0x7ace 035263 arg mem_k_256 ,contr +0x7acf 035264 call bn_testbit +0x7ad0 035265 branch eckp_calc_init_256_1 ,true +0x7ad1 035266 arg mem_ax_256 ,contr +0x7ad2 035267 arg mem_cx_256 ,contw +0x7ad3 035268 branch memcpy96 +: 035271 ecunmapz_256: +0x7ad4 035272 arg mem_cz_256 ,rega +0x7ad5 035273 arg mem_t3_256 ,contw +0x7ad6 035274 call bn_invmod_256 +0x7ad7 035275 arg mem_t3_256 ,rega +0x7ad8 035276 arg mem_t1_256 ,contw +0x7ad9 035277 call bn_sqrmod_256 +0x7ada 035278 arg mem_cx_256 ,rega +0x7adb 035279 arg mem_t1_256 ,regb +0x7adc 035280 arg mem_bx_256 ,contw +0x7add 035281 call bn_mulmod_256 +0x7ade 035282 arg mem_t3_256 ,rega +0x7adf 035283 arg mem_t1_256 ,regb +0x7ae0 035284 arg mem_t2_256 ,contw +0x7ae1 035285 call bn_mulmod_256 +0x7ae2 035286 arg mem_cy_256 ,rega +0x7ae3 035287 arg mem_t2_256 ,regb +0x7ae4 035288 arg mem_by_256 ,contw +0x7ae5 035289 branch bn_mulmod_256 +: 035291 ecdbl_256: +0x7ae6 035292 arg mem_cz_256 ,rega +0x7ae7 035293 arg mem_t2_256 ,contw +0x7ae8 035294 call bn_sqrmod_256 +0x7ae9 035295 arg mem_t2_256 ,rega +0x7aea 035296 arg mem_t3_256 ,contw +0x7aeb 035297 call bn_sqrmod_256 +0x7aec 035299 arg mem_a_256 ,rega +0x7aed 035300 arg mem_t3_256 ,regb +0x7aee 035301 arg mem_t3_256 ,contw +0x7aef 035302 call bn_mulmod_256 +0x7af0 035303 arg mem_cx_256 ,rega +0x7af1 035304 arg mem_t2_256 ,contw +0x7af2 035305 call bn_sqrmod_256 +0x7af3 035307 arg mem_t2_256 ,contr +0x7af4 035308 arg mem_t1_256 ,contw +0x7af5 035309 call memcpy32 +0x7af6 035310 arg mem_t1_256 ,rega +0x7af7 035311 call bn_lshiftmod_256 +0x7af8 035312 arg mem_t2_256 ,rega +0x7af9 035313 arg mem_t1_256 ,regb +0x7afa 035314 arg mem_t2_256 ,contw +0x7afb 035315 call bn_addmod_256 +0x7afc 035317 arg mem_t2_256 ,rega +0x7afd 035318 arg mem_t3_256 ,regb +0x7afe 035319 arg mem_t2_256 ,contw +0x7aff 035320 call bn_addmod_256 +0x7b00 035322 arg mem_cx_256 ,contr +0x7b01 035323 arg mem_t1_256 ,contw +0x7b02 035324 call memcpy32 +0x7b03 035325 arg mem_cy_256 ,rega +0x7b04 035326 arg mem_t3_256 ,contw +0x7b05 035327 call bn_sqrmod_256 +0x7b06 035328 arg mem_t1_256 ,rega +0x7b07 035329 call bn_lshiftmod_256 +0x7b08 035330 arg mem_t1_256 ,rega +0x7b09 035331 call bn_lshiftmod_256 +0x7b0a 035332 arg mem_t1_256 ,rega +0x7b0b 035333 arg mem_t3_256 ,regb +0x7b0c 035334 arg mem_t1_256 ,contw +0x7b0d 035335 call bn_mulmod_256 +0x7b0e 035336 arg mem_t3_256 ,rega +0x7b0f 035337 arg mem_t0_256 ,contw +0x7b10 035338 call bn_sqrmod_256 +0x7b11 035339 arg mem_t0_256 ,rega +0x7b12 035340 call bn_lshiftmod_256 +0x7b13 035341 arg mem_t0_256 ,rega +0x7b14 035342 call bn_lshiftmod_256 +0x7b15 035343 arg mem_t0_256 ,rega +0x7b16 035344 call bn_lshiftmod_256 +0x7b17 035345 arg mem_cy_256 ,contr +0x7b18 035346 arg mem_t3_256 ,contw +0x7b19 035347 call memcpy32 +0x7b1a 035348 arg mem_t3_256 ,rega +0x7b1b 035349 call bn_lshiftmod_256 +0x7b1c 035350 arg mem_t3_256 ,rega +0x7b1d 035351 arg mem_cz_256 ,regb +0x7b1e 035352 arg mem_cz_256 ,contw +0x7b1f 035353 call bn_mulmod_256 +0x7b20 035356 arg mem_t2_256 ,rega +0x7b21 035357 arg mem_t3_256 ,contw +0x7b22 035358 call bn_sqrmod_256 +0x7b23 035360 arg mem_t3_256 ,rega +0x7b24 035361 arg mem_t1_256 ,regb +0x7b25 035362 arg mem_t3_256 ,contw +0x7b26 035363 call bn_submod_256 +0x7b27 035364 arg mem_t3_256 ,rega +0x7b28 035365 arg mem_t1_256 ,regb +0x7b29 035366 arg mem_cx_256 ,contw +0x7b2a 035367 call bn_submod_256 +0x7b2b 035368 arg mem_t1_256 ,rega +0x7b2c 035369 arg mem_cx_256 ,regb +0x7b2d 035370 arg mem_t3_256 ,contw +0x7b2e 035371 call bn_submod_256 +0x7b2f 035372 arg mem_t3_256 ,rega +0x7b30 035373 arg mem_t2_256 ,regb +0x7b31 035374 arg mem_t3_256 ,contw +0x7b32 035375 call bn_mulmod_256 +0x7b33 035376 arg mem_t3_256 ,rega +0x7b34 035377 arg mem_t0_256 ,regb +0x7b35 035378 arg mem_cy_256 ,contw +0x7b36 035379 branch bn_submod_256 +: 035381 ecadd_256: +0x7b37 035383 arg mem_az_256 ,rega +0x7b38 035384 arg mem_t7_256 ,contw +0x7b39 035385 call bn_sqrmod_256 +0x7b3a 035386 arg mem_cx_256 ,rega +0x7b3b 035387 arg mem_t7_256 ,regb +0x7b3c 035388 arg mem_t0_256 ,contw +0x7b3d 035389 call bn_mulmod_256 +0x7b3e 035392 arg mem_az_256 ,rega +0x7b3f 035393 arg mem_t7_256 ,regb +0x7b40 035394 arg mem_t7_256 ,contw +0x7b41 035395 call bn_mulmod_256 +0x7b42 035396 arg mem_cy_256 ,rega +0x7b43 035397 arg mem_t7_256 ,regb +0x7b44 035398 arg mem_t1_256 ,contw +0x7b45 035399 call bn_mulmod_256 +0x7b46 035402 arg mem_cz_256 ,rega +0x7b47 035403 arg mem_t7_256 ,contw +0x7b48 035404 call bn_sqrmod_256 +0x7b49 035405 arg mem_ax_256 ,rega +0x7b4a 035406 arg mem_t7_256 ,regb +0x7b4b 035407 arg mem_t2_256 ,contw +0x7b4c 035408 call bn_mulmod_256 +0x7b4d 035410 arg mem_cz_256 ,rega +0x7b4e 035411 arg mem_t7_256 ,regb +0x7b4f 035412 arg mem_t7_256 ,contw +0x7b50 035413 call bn_mulmod_256 +0x7b51 035414 arg mem_ay_256 ,rega +0x7b52 035415 arg mem_t7_256 ,regb +0x7b53 035416 arg mem_t3_256 ,contw +0x7b54 035417 call bn_mulmod_256 +0x7b55 035422 arg mem_t0_256 ,regb +0x7b56 035423 arg mem_t2_256 ,rega +0x7b57 035424 arg mem_t7_256 ,contw +0x7b58 035425 call bn_submod_256 +0x7b59 035426 arg mem_t0_256 ,rega +0x7b5a 035427 arg mem_t2_256 ,regb +0x7b5b 035428 arg mem_t0_256 ,contw +0x7b5c 035429 call bn_addmod_256 +0x7b5d 035432 arg mem_t1_256 ,regb +0x7b5e 035433 arg mem_t3_256 ,rega +0x7b5f 035434 arg mem_t2_256 ,contw +0x7b60 035435 call bn_submod_256 +0x7b61 035436 arg mem_t1_256 ,rega +0x7b62 035437 arg mem_t3_256 ,regb +0x7b63 035438 arg mem_t1_256 ,contw +0x7b64 035439 call bn_addmod_256 +0x7b65 035440 arg mem_t1_256 ,rega +0x7b66 035441 arg mem_t7_256 ,regb +0x7b67 035442 arg mem_t1_256 ,contw +0x7b68 035443 call bn_mulmod_256 +0x7b69 035444 arg mem_cz_256 ,rega +0x7b6a 035445 arg mem_az_256 ,regb +0x7b6b 035446 arg mem_t3_256 ,contw +0x7b6c 035447 call bn_mulmod_256 +0x7b6d 035448 arg mem_t3_256 ,rega +0x7b6e 035449 arg mem_t7_256 ,regb +0x7b6f 035450 arg mem_cz_256 ,contw +0x7b70 035451 call bn_mulmod_256 +0x7b71 035453 arg mem_t7_256 ,rega +0x7b72 035454 arg mem_t7_256 ,contw +0x7b73 035455 call bn_sqrmod_256 +0x7b74 035456 arg mem_t7_256 ,rega +0x7b75 035457 arg mem_t0_256 ,regb +0x7b76 035458 arg mem_t3_256 ,contw +0x7b77 035459 call bn_mulmod_256 +0x7b78 035460 arg mem_t7_256 ,rega +0x7b79 035461 arg mem_t1_256 ,regb +0x7b7a 035462 arg mem_t1_256 ,contw +0x7b7b 035463 call bn_mulmod_256 +0x7b7c 035464 arg mem_t2_256 ,rega +0x7b7d 035465 arg mem_cx_256 ,contw +0x7b7e 035466 call bn_sqrmod_256 +0x7b7f 035467 arg mem_cx_256 ,rega +0x7b80 035468 arg mem_t3_256 ,regb +0x7b81 035469 arg mem_cx_256 ,contw +0x7b82 035470 call bn_submod_256 +0x7b83 035471 arg mem_cx_256 ,contr +0x7b84 035472 arg mem_t7_256 ,contw +0x7b85 035473 call memcpy32 +0x7b86 035474 arg mem_t7_256 ,rega +0x7b87 035475 call bn_lshiftmod_256 +0x7b88 035476 arg mem_t3_256 ,rega +0x7b89 035477 arg mem_t7_256 ,regb +0x7b8a 035478 arg mem_t3_256 ,contw +0x7b8b 035479 call bn_submod_256 +0x7b8c 035480 arg mem_t3_256 ,rega +0x7b8d 035481 arg mem_t2_256 ,regb +0x7b8e 035482 arg mem_t2_256 ,contw +0x7b8f 035483 call bn_mulmod_256 +0x7b90 035484 arg mem_t2_256 ,rega +0x7b91 035485 arg mem_t1_256 ,regb +0x7b92 035486 arg mem_cy_256 ,contw +0x7b93 035487 call bn_submod_256 +0x7b94 035488 arg mem_cy_256 ,rega +0x7b95 035489 arg mem_p_256 ,regb +0x7b96 035490 arg mem_cy_256 ,contw +0x7b97 035491 force 0 ,regc +0x7b98 035492 fetch 1 ,mem_cy_256 +0x7b99 035493 isolate1 0 ,pdata +0x7b9a 035494 call bn_add_256 ,true +0x7b9b 035495 copy regc ,alarm +0x7b9c 035496 arg mem_cy_256 ,rega +0x7b9d 035497 call bn_rshift_256 +0x7b9e 035498 fetch 1 ,mem_cy5_256 +0x7b9f 035499 isolate1 0 ,alarm +0x7ba0 035500 setflag true ,7 ,pdata +0x7ba1 035501 store 1 ,mem_cy5_256 +0x7ba2 035502 rtn +: 035504 bn_invmod_256: +0x7ba3 035505 copy contw ,timeup +0x7ba4 035506 arg mem_tmp0_256 ,contw +0x7ba5 035507 call clear_mem_256 +0x7ba6 035508 force 0 ,pdata +0x7ba7 035510 store 4 ,mem_t2_256 +0x7ba8 035511 jam 1 ,mem_tmp0_256 +0x7ba9 035512 arg mem_tmp1_256 ,contw +0x7baa 035513 call clear_mem_512 +0x7bab 035514 arg mem_p_256 ,contr +0x7bac 035515 arg mem_tmp2_256 ,contw +0x7bad 035516 call memcpy32 +0x7bae 035517 copy rega ,contr +0x7baf 035518 arg mem_tmp3_256 ,contw +0x7bb0 035519 call memcpy32 +: 035525 bn_invmod_256_2: +0x7bb1 035526 arg mem_tmp3_256 ,contr +0x7bb2 035527 call bn_eq_zero_256 +0x7bb3 035528 branch bn_invmod_256_0 ,blank +0x7bb4 035533 arg mem_tmp3_256 ,rega +0x7bb5 035534 arg mem_tmp0_256 ,regb +0x7bb6 035535 call bn_rshifteven_256 +0x7bb7 035536 arg mem_tmp2_256 ,rega +0x7bb8 035537 arg mem_tmp1_256 ,regb +0x7bb9 035538 call bn_rshifteven_256 +0x7bba 035540 arg mem_tmp3_256 ,rega +0x7bbb 035541 arg mem_tmp2_256 ,regb +0x7bbc 035542 call bn_bigeq_256 +0x7bbd 035543 branch bn_invmod_256_1 ,positive +0x7bbe 035544 arg mem_tmp2_256 ,rega +0x7bbf 035545 arg mem_tmp3_256 ,regb +0x7bc0 035546 copy rega ,contw +0x7bc1 035547 call bn_sub_256 +0x7bc2 035548 arg mem_tmp0_256 ,rega +0x7bc3 035549 arg mem_tmp1_256 ,regb +0x7bc4 035550 copy regb ,contw +0x7bc5 035551 call bn_add_256 +0x7bc6 035552 ifetch 1 ,rega +0x7bc7 035553 iadd regc ,regc +0x7bc8 035554 ifetch 1 ,regb +0x7bc9 035555 iadd regc ,pdata +0x7bca 035556 istore 1 ,regb +0x7bcb 035557 branch bn_invmod_256_2 +: 035558 bn_invmod_256_1: +0x7bcc 035559 arg mem_tmp3_256 ,rega +0x7bcd 035560 arg mem_tmp2_256 ,regb +0x7bce 035561 copy rega ,contw +0x7bcf 035562 call bn_sub_256 +0x7bd0 035563 arg mem_tmp1_256 ,rega +0x7bd1 035564 arg mem_tmp0_256 ,regb +0x7bd2 035565 copy regb ,contw +0x7bd3 035566 call bn_add_256 +0x7bd4 035567 ifetch 1 ,rega +0x7bd5 035568 iadd regc ,regc +0x7bd6 035569 ifetch 1 ,regb +0x7bd7 035570 iadd regc ,pdata +0x7bd8 035571 istore 1 ,regb +0x7bd9 035572 branch bn_invmod_256_2 +: 035573 bn_invmod_256_0: +0x7bda 035575 arg mem_tmp1_256 ,rega +0x7bdb 035576 copy timeup ,contw +0x7bdc 035577 call bn_p256mod +0x7bdd 035579 arg mem_p_256 ,rega +0x7bde 035580 copy timeup ,regb +0x7bdf 035581 copy timeup ,contw +0x7be0 035582 branch bn_submod_256 +: 035585 bn_mulmod_256: +0x7be1 035586 copy contw ,timeup +0x7be2 035588 force 0 ,regext_index +0x7be3 035590 arg mem_tmp1_256 ,contw +0x7be4 035591 call clear_mem_512 +0x7be5 035592 arg mem_regext ,contw +0x7be6 035593 call clear_mem_512 +0x7be7 035597 copy rega ,contr +0x7be8 035599 jam 0 ,mem_regext +0x7be9 035600 setarg 0 +0x7bea 035601 call bn_load_mem +0x7beb 035602 copy regb ,contr +0x7bec 035603 call bn_load_256 +0x7bed 035606 force 0 ,queue +0x7bee 035607 arg mem_tmp1_256 ,contw +: 035608 bn_mulmod_256_1: +0x7bef 035611 arg mem_regext ,temp +0x7bf0 035612 copy queue ,regb +0x7bf1 035613 lshift2 regb ,pdata +0x7bf2 035615 iadd temp ,regb +0x7bf3 035616 force 0 ,temp +0x7bf4 035617 force 0 ,regc +: 035618 bn_mulmod_256_0: +0x7bf5 035623 ifetch 4 ,contw +0x7bf6 035624 iforce rega +0x7bf7 035627 ifetch 4 ,regb +0x7bf8 035628 copy regc ,regext_index +0x7bf9 035629 imul32 regext ,pdata +0x7bfa 035630 iadd rega ,pdata +0x7bfb 035631 iadd temp ,pdata +0x7bfc 035632 istore 4 ,contw +0x7bfd 035633 rshift32 pdata ,temp +0x7bfe 035634 increase 1 ,regc +0x7bff 035635 compare 8 ,regc ,0xff +0x7c00 035636 nbranch bn_mulmod_256_0 ,true +0x7c01 035638 deposit temp +0x7c02 035639 istore 4 ,contw +0x7c03 035640 increase -32 ,contw +0x7c04 035643 increase 1 ,queue +0x7c05 035644 compare 8 ,queue ,0xff +0x7c06 035645 nbranch bn_mulmod_256_1 ,true +0x7c07 035646 arg mem_tmp1_256 ,rega +0x7c08 035647 copy timeup ,contw +0x7c09 035648 branch bn_p256mod +: 035650 bn_p256mod: +0x7c0a 035651 bpatchx patch3e_2 ,mem_patch3e +0x7c0b 035652 copy contw ,timeup +0x7c0c 035653 copy rega ,alarm +0x7c0d 035654 arg mem_tmp2_256 ,regb +0x7c0e 035655 copy regb ,contw +0x7c0f 035656 call memset0_4 +0x7c10 035657 istore 8 ,contw +0x7c11 035658 add rega ,44 ,contr +0x7c12 035659 call memcpy8 +0x7c13 035660 call memcpy12 +0x7c14 035661 copy regb ,rega +0x7c15 035662 call bn_lshiftmod_256 +0x7c16 035663 arg mem_tmp2_256 ,regb +0x7c17 035664 copy alarm ,rega +0x7c18 035665 copy timeup ,contw +0x7c19 035666 call bn_addmod_256 +0x7c1a 035668 arg mem_tmp2_256 ,regb +0x7c1b 035669 copy regb ,contw +0x7c1c 035670 call memset0_4 +0x7c1d 035671 istore 8 ,contw +0x7c1e 035672 add alarm ,48 ,contr +0x7c1f 035673 call memcpy16 +0x7c20 035674 call memset0_4 +0x7c21 035675 copy regb ,rega +0x7c22 035676 call bn_lshiftmod_256 +0x7c23 035680 arg mem_tmp2_256 ,regb +0x7c24 035681 copy timeup ,rega +0x7c25 035682 copy rega ,contw +0x7c26 035683 call bn_addmod_256 +0x7c27 035687 arg mem_tmp2_256 ,regb +0x7c28 035688 copy regb ,contw +0x7c29 035689 add alarm ,32 ,contr +0x7c2a 035690 call memcpy12 +0x7c2b 035691 call memset0_4 +0x7c2c 035692 istore 8 ,contw +0x7c2d 035693 add alarm ,56 ,contr +0x7c2e 035694 call memcpy8 +0x7c2f 035695 copy timeup ,rega +0x7c30 035696 copy rega ,contw +0x7c31 035697 call bn_addmod_256 +0x7c32 035701 arg mem_tmp2_256 ,regb +0x7c33 035702 copy regb ,contw +0x7c34 035703 add alarm ,36 ,contr +0x7c35 035704 call memcpy12 +0x7c36 035705 add alarm ,52 ,contr +0x7c37 035706 call memcpy12 +0x7c38 035707 add alarm ,52 ,contr +0x7c39 035708 call memcpy4 +0x7c3a 035709 add alarm ,32 ,contr +0x7c3b 035710 call memcpy4 +0x7c3c 035711 copy timeup ,rega +0x7c3d 035712 copy rega ,contw +0x7c3e 035713 call bn_addmod_256 +0x7c3f 035716 arg mem_tmp2_256 ,regb +0x7c40 035717 copy regb ,contw +0x7c41 035718 add alarm ,44 ,contr +0x7c42 035719 call memcpy12 +0x7c43 035720 call memset0_4 +0x7c44 035721 istore 8 ,contw +0x7c45 035722 add alarm ,32 ,contr +0x7c46 035723 call memcpy4 +0x7c47 035724 add alarm ,40 ,contr +0x7c48 035725 call memcpy4 +0x7c49 035726 copy timeup ,rega +0x7c4a 035727 copy rega ,contw +0x7c4b 035728 call bn_submod_256 +0x7c4c 035731 arg mem_tmp2_256 ,regb +0x7c4d 035732 copy regb ,contw +0x7c4e 035733 add alarm ,48 ,contr +0x7c4f 035734 call memcpy8 +0x7c50 035735 call memcpy8 +0x7c51 035736 force 0 ,pdata +0x7c52 035737 istore 8 ,contw +0x7c53 035738 add alarm ,36 ,contr +0x7c54 035739 call memcpy4 +0x7c55 035740 add alarm ,44 ,contr +0x7c56 035741 call memcpy4 +0x7c57 035742 copy timeup ,rega +0x7c58 035743 copy rega ,contw +0x7c59 035744 call bn_submod_256 +0x7c5a 035747 arg mem_tmp2_256 ,regb +0x7c5b 035748 copy regb ,contw +0x7c5c 035749 add alarm ,52 ,contr +0x7c5d 035750 call memcpy12 +0x7c5e 035751 add alarm ,32 ,contr +0x7c5f 035752 call memcpy12 +0x7c60 035753 call memset0_4 +0x7c61 035754 add alarm ,48 ,contr +0x7c62 035755 call memcpy4 +0x7c63 035756 copy timeup ,rega +0x7c64 035757 copy rega ,contw +0x7c65 035758 call bn_submod_256 +0x7c66 035761 arg mem_tmp2_256 ,regb +0x7c67 035762 copy regb ,contw +0x7c68 035763 add alarm ,56 ,contr +0x7c69 035764 call memcpy8 +0x7c6a 035765 call memset0_4 +0x7c6b 035766 add alarm ,36 ,contr +0x7c6c 035767 call memcpy12 +0x7c6d 035768 call memset0_4 +0x7c6e 035769 add alarm ,52 ,contr +0x7c6f 035770 call memcpy4 +0x7c70 035771 copy timeup ,rega +0x7c71 035772 copy rega ,contw +0x7c72 035773 branch bn_submod_256 +: 035776 bn_load_mem: +0x7c73 035777 force 32 ,loopcnt +0x7c74 035778 arg mem_regext ,contw +0x7c75 035779 iadd contw ,contw +0x7c76 035780 branch memcpy +: 035782 bn_load_256: +0x7c77 035783 force 8 ,loopcnt +0x7c78 035784 branch bn_load_0 +: 035786 bn_sqrmod_256: +0x7c79 035787 copy rega ,regb +0x7c7a 035788 branch bn_mulmod_256 +: 035790 bn_add_256: +0x7c7b 035791 force 8 ,loopcnt +0x7c7c 035792 branch bn_add + 1 +: 035794 bn_addmod_256: +0x7c7d 035795 call bn_add_256 +0x7c7e 035796 copy contw ,rega +0x7c7f 035797 branch bn_lshiftmod_ismod_256 +: 035799 bn_lshiftmod_256: +0x7c80 035800 call bn_lshift_256 +: 035801 bn_lshiftmod_ismod_256: +0x7c81 035802 isolate1 0 ,regc +0x7c82 035803 branch bn_lshiftmod_p_256 ,true +0x7c83 035804 arg mem_p_256 ,regb +0x7c84 035805 copy rega ,regc +0x7c85 035806 increase -32 ,rega +0x7c86 035807 call bn_bigeq_256 +0x7c87 035808 nrtn positive +0x7c88 035809 copy regc ,rega +0x7c89 035810 branch sub_p2_256 +: 035812 bn_lshiftmod_p_256: +0x7c8a 035813 call sub_p2_256 +0x7c8b 035815 copy rega ,regc +0x7c8c 035816 increase -32 ,rega +0x7c8d 035817 arg mem_p_256 ,regb +0x7c8e 035818 call bn_bigeq_256 +0x7c8f 035819 nrtn positive +0x7c90 035820 copy regc ,rega +0x7c91 035821 branch sub_p2_256 +: 035824 sub_p2_256: +0x7c92 035825 increase -32 ,rega +0x7c93 035826 arg mem_p_256 ,regb +0x7c94 035827 copy rega ,contw +0x7c95 035828 branch bn_sub_256 +: 035833 bn_submod_256: +0x7c96 035834 call bn_sub_256 +0x7c97 035836 branch bn_submod_256_np ,true +0x7c98 035839 add contw ,-32 ,rega +0x7c99 035840 arg mem_p_256 ,regb +0x7c9a 035841 call bn_bigeq_256 +0x7c9b 035842 nrtn positive +0x7c9c 035843 arg mem_p_256 ,regb +0x7c9d 035844 add contw ,-32 ,rega +0x7c9e 035846 copy rega ,contw +0x7c9f 035847 branch bn_sub_256 +: 035848 bn_submod_256_np: +0x7ca0 035849 add contw ,-32 ,rega +0x7ca1 035850 arg mem_p_256 ,regb +0x7ca2 035851 copy rega ,contw +0x7ca3 035852 call bn_add_256 +0x7ca4 035854 rtn true +0x7ca5 035855 add contw ,-32 ,rega +0x7ca6 035856 arg mem_p_256 ,regb +0x7ca7 035857 copy rega ,contw +0x7ca8 035858 branch bn_add_256 +: 035862 bn_sub_256: +0x7ca9 035863 force 8 ,loopcnt +0x7caa 035864 branch bn_sub + 1 +: 035866 bn_rshift_256: +0x7cab 035867 force 8 ,loopcnt +0x7cac 035868 increase 28 ,rega +0x7cad 035869 branch bn_rshift +: 035871 bn_lshift_256: +0x7cae 035872 force 8 ,loopcnt +0x7caf 035873 force 0 ,regc +0x7cb0 035874 branch bn_lshift_0 +: 035876 bn_bigeq_256: +0x7cb1 035877 force 8 ,loopcnt +0x7cb2 035878 increase 28 ,rega +0x7cb3 035879 increase 28 ,regb +0x7cb4 035880 branch bn_bigeq_0 +: 035883 bn_eq_zero_256: +0x7cb5 035884 ifetch 8 ,contr +0x7cb6 035885 nrtn blank +0x7cb7 035886 branch bn_eq_zero +: 035891 bn_rshifteven_256: +0x7cb8 035892 copy rega ,alarm +: 035893 bn_rshifteven_256_1: +0x7cb9 035894 copy alarm ,rega +0x7cba 035895 ifetch 1 ,rega +0x7cbb 035896 isolate1 0 ,pdata +0x7cbc 035897 rtn true +0x7cbd 035898 call bn_rshift_256 +0x7cbe 035899 ifetch 1 ,regb +0x7cbf 035900 isolate0 0 ,pdata +0x7cc0 035901 branch bn_rshifteven_256_0 ,true +0x7cc1 035902 arg mem_p_256 ,rega +0x7cc2 035903 copy regb ,contw +0x7cc3 035904 call bn_add_256 +0x7cc4 035905 ifetch 1 ,regb +0x7cc5 035906 iadd regc ,pdata +0x7cc6 035907 istore 1 ,regb +0x7cc7 035908 increase -32 ,regb +: 035909 bn_rshifteven_256_0: +0x7cc8 035910 add regb ,32 ,rega +0x7cc9 035911 force 9 ,loopcnt +0x7cca 035912 call bn_rshift +0x7ccb 035913 branch bn_rshifteven_256_1 +: 035917 ui_init: +0x7ccc 035918 call lpm_disable_exen_output +0x7ccd 035919 rtn wake +0x7cce 035920 call ui_button_init +0x7ccf 035921 call ui_timer_init +0x7cd0 035922 branch ui_led_init_global +: 035924 ui_dispatch: +0x7cd1 035925 call ui_led_dispatch +0x7cd2 035927 branch ui_timer_check +: 035929 ui_button_init: +0x7cd3 035930 fetch 1 ,mem_ui_button_gpio +0x7cd4 035931 rtneq ui_button_gpio_disable +0x7cd5 035932 iforce temp +0x7cd6 035933 call gpio_config_output +0x7cd7 035934 fetcht 1 ,mem_ui_button_gpio +0x7cd8 035935 call gpio_out_inactive +0x7cd9 035936 nop 100 +0x7cda 035937 fetcht 1 ,mem_ui_button_gpio +0x7cdb 035938 call gpio_config_input +0x7cdc 035939 branch ui_button_polling +: 035943 ui_button_polling: +0x7cdd 035944 bpatchx patch3e_3 ,mem_patch3e +0x7cde 035945 fetch 1 ,mem_ui_button_gpio +0x7cdf 035946 rtneq ui_button_gpio_disable +0x7ce0 035947 copy pdata ,temp +0x7ce1 035948 call gpio_get_bit +0x7ce2 035949 nbranch ui_button_up ,true +: 035951 ui_button_down: +0x7ce3 035952 call ui_button_check_long_press +0x7ce4 035953 fetch 2 ,mem_ui_state_map +0x7ce5 035954 set1 ui_state_btn_down +0x7ce6 035955 store 2 ,mem_ui_state_map +0x7ce7 035956 fetch 1 ,mem_ui_button_last_state +0x7ce8 035957 rtneq ui_button_state_down +0x7ce9 035958 jam ui_button_state_down ,mem_ui_button_last_state +0x7cea 035960 fetch 1 ,mem_ui_button_timeout +0x7ceb 035961 store 1 ,mem_ui_button_timer +0x7cec 035962 call lpm_button_get_wake_lock +0x7ced 035963 jam bt_evt_button_down ,mem_fifo_temp +0x7cee 035964 branch ui_ipc_send_event +: 035965 ui_button_up: +0x7cef 035966 fetch 2 ,mem_ui_state_map +0x7cf0 035967 set0 ui_state_btn_down +0x7cf1 035968 store 2 ,mem_ui_state_map +0x7cf2 035969 fetch 1 ,mem_ui_button_last_state +0x7cf3 035970 rtneq ui_button_state_up +0x7cf4 035971 jam ui_button_state_up ,mem_ui_button_last_state +0x7cf5 035973 jam 0 ,mem_ui_button_timer +0x7cf6 035974 call lpm_button_clean_wake_lock +0x7cf7 035975 jam bt_evt_button_up ,mem_fifo_temp +0x7cf8 035976 branch ui_ipc_send_event +: 035978 ui_button_check_long_press: +0x7cf9 035979 fetch 1 ,mem_ui_button_timer +0x7cfa 035980 rtn blank +0x7cfb 035981 increase -1 ,pdata +0x7cfc 035982 store 1 ,mem_ui_button_timer +0x7cfd 035983 nrtn blank +0x7cfe 035985 jam bt_evt_button_long_pressed ,mem_fifo_temp +0x7cff 035986 branch ui_ipc_send_event +: 035988 lpm_button_get_wake_lock: +0x7d00 035989 arg wake_lock_button ,queue +0x7d01 035990 branch lpm_get_wake_lock +: 035992 lpm_button_clean_wake_lock: +0x7d02 035993 arg wake_lock_button ,queue +0x7d03 035994 branch lpm_put_wake_lock +: 036016 calc_curr_struct_prt: +0x7d04 036017 fetch 2 ,mem_ui_led_struct_ptr +0x7d05 036018 mul32 rega ,led_offset_length ,regb +0x7d06 036019 iadd regb ,regb +0x7d07 036020 rtn +: 036023 ui_led_init_global: +0x7d08 036024 fetch 1 ,mem_ui_led_struct_num +0x7d09 036025 rtn blank +0x7d0a 036026 copy pdata ,loopcnt +0x7d0b 036027 fetch 2 ,mem_ui_led_struct_ptr +0x7d0c 036028 copy pdata ,regb +: 036029 ui_led_init_loop: +0x7d0d 036030 add regb ,led_offset_led_gpio ,regc +0x7d0e 036031 ifetcht 1 ,regc +0x7d0f 036032 call gpio_config_output +0x7d10 036033 call ui_led_off_static +0x7d11 036034 increase led_offset_length ,regb +0x7d12 036035 loop ui_led_init_loop +0x7d13 036036 rtn +: 036040 ui_led_on_global: +0x7d14 036041 call calc_curr_struct_prt +0x7d15 036042 setarg ui_led_state_lighting +0x7d16 036043 istore 1 ,regb +0x7d17 036044 call ui_led_stop_timer +0x7d18 036045 branch ui_led_on_static +: 036049 ui_led_blink_stop_global: +: 036050 ui_led_off_global: +0x7d19 036051 call calc_curr_struct_prt +0x7d1a 036052 setarg ui_led_state_darking +0x7d1b 036053 istore 1 ,regb +0x7d1c 036054 call ui_led_stop_timer +0x7d1d 036055 branch ui_led_off_static +: 036059 ui_led_blink_start_global: +0x7d1e 036060 call calc_curr_struct_prt +0x7d1f 036061 setarg ui_led_state_blink_start +0x7d20 036062 istore 1 ,regb +0x7d21 036063 setarg led_infinite_flash_num +0x7d22 036064 istore 1 ,contw +0x7d23 036065 branch ui_led_off_static +: 036070 ui_led_set_style_global: +0x7d24 036071 call calc_curr_struct_prt +0x7d25 036072 arg led_offset_length ,loopcnt +0x7d26 036073 copy regc ,contr +0x7d27 036074 copy regb ,contw +0x7d28 036075 branch memcpy_fast +: 036079 ui_led_dispatch: +0x7d29 036080 fetch 1 ,mem_ui_led_struct_num +0x7d2a 036081 rtn blank +0x7d2b 036082 arg 0 ,rega +: 036083 ui_led_blink_polling: +0x7d2c 036084 call ui_led_change_style_by_type +0x7d2d 036085 increase 1 ,rega +0x7d2e 036086 fetch 1 ,mem_ui_led_struct_num +0x7d2f 036087 isub rega ,null +0x7d30 036088 rtn zero +0x7d31 036089 branch ui_led_blink_polling +: 036092 ui_led_off_static: +0x7d32 036093 add regb ,led_offset_led_gpio ,regc +0x7d33 036094 ifetcht 1 ,regc +0x7d34 036095 branch gpio_out_inactive +: 036098 ui_led_on_static: +0x7d35 036099 add regb ,led_offset_led_gpio ,regc +0x7d36 036100 ifetcht 1 ,regc +0x7d37 036101 branch gpio_out_active +: 036105 ui_led_change_style_by_type: +0x7d38 036106 add rega ,ui_led_blink ,queue +0x7d39 036107 call timer_check +0x7d3a 036108 nrtn blank +0x7d3b 036110 call calc_curr_struct_prt +0x7d3c 036112 ifetch 1 ,regb +0x7d3d 036114 beq ui_led_state_lighting ,ui_led_on_static +0x7d3e 036115 beq ui_led_state_darking ,ui_led_off_static +0x7d3f 036116 beq ui_led_state_blink_stop ,ui_led_off_static +0x7d40 036117 beq ui_led_state_blink_darking ,ui_led_blink_state_darking +: 036118 ui_led_blink_state_lighting: +0x7d41 036119 call ui_led_on_static +0x7d42 036120 add regb ,led_offset_cb_ledon ,regc +0x7d43 036121 call push_stack +0x7d44 036122 ifetch 2 ,regc +0x7d45 036123 call callback_func +0x7d46 036124 call pop_stack +0x7d47 036125 setarg ui_led_state_blink_darking +0x7d48 036126 istore 1 ,regb +0x7d49 036127 add regb ,led_offset_on_time ,regc +0x7d4a 036128 ifetch 2 ,regc +0x7d4b 036129 branch ui_led_blink_timer_start +: 036132 ui_led_blink_state_darking: +0x7d4c 036133 call ui_led_off_static +0x7d4d 036134 add regb ,led_offset_cb_ledoff ,regc +0x7d4e 036135 call push_stack +0x7d4f 036136 ifetch 2 ,regc +0x7d50 036137 call callback_func +0x7d51 036138 call pop_stack +0x7d52 036140 add regb ,led_offset_blink_count ,regc +0x7d53 036141 ifetch 1 ,regc +0x7d54 036142 beq led_infinite_flash_num ,ui_led_blink_infinite +0x7d55 036143 increase -1 ,pdata +0x7d56 036144 istore 1 ,regc +0x7d57 036145 branch ui_led_blink_stop_global ,blank +: 036146 ui_led_blink_infinite: +0x7d58 036147 setarg ui_led_state_blink_lighting +0x7d59 036148 istore 1 ,regb +0x7d5a 036149 add regb ,led_offset_off_time ,regc +0x7d5b 036150 ifetch 2 ,regc +: 036151 ui_led_blink_timer_start: +0x7d5c 036152 add rega ,ui_led_blink ,queue +0x7d5d 036153 branch timer_init +: 036155 ui_led_stop_timer: +0x7d5e 036156 setarg 0 +0x7d5f 036157 branch ui_led_blink_timer_start +: 036163 ui_timer_timeout: +0x7d60 036164 setarg 0x1000 +0x7d61 036165 lshift16 pdata ,pdata +0x7d62 036166 iadd regb ,regb +0x7d63 036167 rtn +: 036169 ui_timer_check: +0x7d64 036170 bpatchx patch3e_4 ,mem_patch3e +0x7d65 036171 arg 0 ,rega +0x7d66 036172 fetcht 4 ,mem_ui_timer_last_btclk +0x7d67 036173 copy clkn_bt ,regb +0x7d68 036174 copy regb ,pdata +0x7d69 036175 isub temp ,null +0x7d6a 036176 ncall ui_timer_timeout ,positive +: 036178 ui_timer_check_loop: +0x7d6b 036179 copy regb ,pdata +0x7d6c 036180 increase 160 ,temp +0x7d6d 036181 increase 160 ,temp +0x7d6e 036182 isub temp ,null +0x7d6f 036183 nbranch ui_timer_check_end ,positive +0x7d70 036184 increase 1 ,rega +0x7d71 036185 and rega ,0x0f ,pdata +0x7d72 036186 nbranch ui_timer_check_loop ,blank +0x7d73 036187 arg 0 ,rega +0x7d74 036188 call ui_timer_check_send_evt +: 036189 ui_timer_init: +0x7d75 036190 copy clkn_bt ,pdata +0x7d76 036191 store 4 ,mem_ui_timer_last_btclk +0x7d77 036192 rtn +: 036193 ui_timer_check_end: +0x7d78 036194 bpatchx patch3e_5 ,mem_patch3e +0x7d79 036195 copy rega ,pdata +0x7d7a 036196 rtn blank +0x7d7b 036197 increase -160 ,temp +0x7d7c 036198 increase -160 ,temp +0x7d7d 036199 set0 28 ,temp +0x7d7e 036200 storet 4 ,mem_ui_timer_last_btclk +: 036201 ui_timer_check_send_evt: +0x7d7f 036202 branch app_evt_timer +: 036209 ui_ipc_get_lock: +0x7d80 036210 jam 1 ,mem_ipc_lock_bt +: 036211 ui_ipc_get_lock_wait: +0x7d81 036212 fetch 1 ,mem_ipc_lock_c51 +0x7d82 036213 nbranch ui_ipc_get_lock_wait ,blank +0x7d83 036214 rtn +: 036216 ui_ipc_put_lock: +0x7d84 036217 jam 0 ,mem_ipc_lock_bt +0x7d85 036218 rtn +: 036222 ui_ipc_send_event: +0x7d86 036223 bpatchx patch3e_6 ,mem_patch3e +0x7d87 036224 call ui_ipc_get_lock +0x7d88 036225 copy rega ,pdata +0x7d89 036226 store 4 ,mem_ipc_rega_temp +0x7d8a 036227 arg mem_ipc_fifo_bt2c51 ,rega +0x7d8b 036228 call fifo_in +0x7d8c 036229 fetch 4 ,mem_ipc_rega_temp +0x7d8d 036230 copy pdata ,rega +0x7d8e 036231 branch ui_ipc_put_lock +: 036233 ui_ipc_send_cmd: +0x7d8f 036234 bpatchx patch3e_7 ,mem_patch3e +0x7d90 036235 call ui_ipc_get_lock +0x7d91 036236 copy rega ,pdata +0x7d92 036237 store 4 ,mem_ipc_rega_temp +0x7d93 036238 arg mem_ipc_fifo_c512bt ,rega +0x7d94 036239 call fifo_in +0x7d95 036240 fetch 4 ,mem_ipc_rega_temp +0x7d96 036241 copy pdata ,rega +0x7d97 036242 branch ui_ipc_put_lock +: 036244 ui_ipc_clean_all_fifo: +0x7d98 036245 setarg 0 +0x7d99 036246 store util_fifo_len ,mem_ipc_fifo_c512bt +0x7d9a 036247 store util_fifo_len ,mem_ipc_fifo_bt2c51 +0x7d9b 036248 rtn +: 036250 check_51cmd: +0x7d9c 036251 bpatchx patch3f_0 ,mem_patch3f +0x7d9d 036252 fetch 1 ,mem_hci_cmd +0x7d9e 036253 nrtn blank +0x7d9f 036254 arg mem_ipc_fifo_c512bt ,rega +0x7da0 036255 call fifo_is_empty +0x7da1 036256 rtn blank +0x7da2 036257 jam ipc_continue_process ,mem_ipc_skip_continue_proc +0x7da3 036258 call check_51cmd_once +0x7da4 036259 fetch 1 ,mem_ipc_skip_continue_proc +0x7da5 036260 branch check_51cmd ,blank +0x7da6 036261 rtn +: 036263 check_51cmd_once: +0x7da7 036264 call ui_ipc_get_lock +0x7da8 036265 arg mem_ipc_fifo_c512bt ,rega +0x7da9 036266 call fifo_out +0x7daa 036267 copy pdata ,temp +0x7dab 036268 call ui_ipc_put_lock +0x7dac 036269 bpatchx patch3f_1 ,mem_patch3f +0x7dad 036270 copy temp ,pdata +0x7dae 036271 rtn blank +0x7daf 036272 beq bt_cmd_start_discovery ,check_51cmd_start_discovery +0x7db0 036273 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +0x7db1 036274 beq bt_cmd_reconnect ,check_51cmd_reconnect +0x7db2 036275 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating +0x7db3 036276 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating +0x7db4 036277 beq bt_cmd_sniff_test ,check_51cmd_sniff_test +0x7db5 036278 beq bt_cmd_start_inquiry ,check_51cmd_inq +0x7db6 036279 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq +0x7db7 036280 beq bt_cmd_start_adv ,check_51cmd_adv +0x7db8 036281 beq bt_cmd_stop_adv ,check_51cmd_stop_adv +0x7db9 036282 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +0x7dba 036283 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +0x7dbb 036284 beq bt_cmd_led_off ,check_51cmd_led_off +0x7dbc 036285 beq bt_cmd_led_on ,check_51cmd_led_on +0x7dbd 036286 beq bt_cmd_led_blink ,check_51cmd_led_start_blink +0x7dbe 036287 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +0x7dbf 036288 beq bt_cmd_le_start_scan ,check_51cmd_start_scan +0x7dc0 036289 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +0x7dc1 036290 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +0x7dc2 036291 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +0x7dc3 036292 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +0x7dc4 036294 store 1 ,mem_fifo_temp +0x7dc5 036295 bpatchx patch3f_2 ,mem_patch3f +0x7dc6 036296 call lmo_fifo_check +0x7dc7 036297 nbranch check_51cmd_restore ,blank +: 036298 check_51cmd_once_continue: +0x7dc8 036299 fetch 1 ,mem_fifo_temp +0x7dc9 036300 bmark0 mark_context ,check_51cmd_check_idle +0x7dca 036301 beq bt_cmd_disconnect ,check_51cmd_disconnect +0x7dcb 036302 beq bt_cmd_enter_sniff ,cmd_in_sniff +0x7dcc 036303 beq bt_cmd_exit_sniff ,cmd_exit_sniff +0x7dcd 036304 beq bt_cmd_set_pin_code ,check_51cmd_pincode +0x7dce 036305 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +0x7dcf 036306 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +0x7dd0 036307 beq bt_cmd_role_switch ,check_51cmd_role_switch +0x7dd1 036308 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +0x7dd2 036309 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +0x7dd3 036310 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +0x7dd4 036311 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +0x7dd5 036312 rtn +: 036314 check_51cmd_check_idle: +0x7dd6 036315 store 1 ,mem_fifo_temp +0x7dd7 036316 call context_check_idle +0x7dd8 036317 branch check_51cmd_restore ,zero +0x7dd9 036318 call context_search_plap +0x7dda 036319 nrtn zero +: 036320 check_51cmd_restore: +0x7ddb 036321 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +0x7ddc 036322 branch ui_ipc_send_cmd +: 036327 check_51cmd_start_discovery: +0x7ddd 036328 fetch 2 ,mem_ui_state_map +0x7dde 036329 set1 ui_state_bt_discovery +0x7ddf 036330 store 2 ,mem_ui_state_map +0x7de0 036331 jam 3 ,mem_scan_mode +0x7de1 036332 rtn +: 036336 check_51cmd_stop_discovery: +0x7de2 036337 jam 0 ,mem_hid_handshake_timer_count +0x7de3 036338 jam 0 ,mem_scan_mode +0x7de4 036339 fetch 2 ,mem_ui_state_map +0x7de5 036340 set0 ui_state_bt_discovery +0x7de6 036341 store 2 ,mem_ui_state_map +0x7de7 036342 rtn +: 036346 check_51cmd_reconnect: +0x7de8 036347 jam hci_cmd_create_conn ,mem_hci_cmd +0x7de9 036348 rtn +: 036352 check_51cmd_disconnect: +0x7dea 036353 jam lmp_detach ,mem_lmo_opcode2 +0x7deb 036354 jam other_end_terminated ,mem_disconn_reason_send +0x7dec 036355 rtn +: 036359 check_51cmd_enter_sniff_subrating: +0x7ded 036360 rtn +: 036364 check_51cmd_exit_sniff_subrating: +0x7dee 036365 rtn +: 036369 check_51cmd_sniff_test: +0x7def 036370 rtn +: 036374 check_51cmd_pincode: +0x7df0 036375 jam pincode_state_pincode_ready ,mem_pincode_state +0x7df1 036376 branch cmd_pair +: 036380 check_51cmd_inq: +0x7df2 036381 rtn +: 036385 check_51cmd_stop_inq: +0x7df3 036386 rtn +: 036390 check_51cmd_adv: +0x7df4 036391 jam on ,mem_le_adv_enable +0x7df5 036392 jam adv_ind ,mem_le_adv_type +0x7df6 036393 fetch 2 ,mem_ui_state_map +0x7df7 036394 set1 ui_state_ble_adv ,pdata +0x7df8 036395 store 2 ,mem_ui_state_map +0x7df9 036396 rtn +: 036400 check_51cmd_stop_adv: +0x7dfa 036401 fetch 2 ,mem_ui_state_map +0x7dfb 036402 set0 ui_state_ble_adv ,pdata +0x7dfc 036403 store 2 ,mem_ui_state_map +0x7dfd 036404 jam off ,mem_le_adv_enable +0x7dfe 036405 rtn +: 036409 check_51cmd_direct_adv: +0x7dff 036410 jam on ,mem_le_adv_enable +0x7e00 036411 jam adv_direct_ind ,mem_le_adv_type +0x7e01 036412 fetch 2 ,mem_ui_state_map +0x7e02 036413 set1 ui_state_ble_adv ,pdata +0x7e03 036414 store 2 ,mem_ui_state_map +0x7e04 036415 rtn +: 036419 check_51cmd_stop_direct_adv: +0x7e05 036420 fetch 2 ,mem_ui_state_map +0x7e06 036421 set0 ui_state_ble_adv ,pdata +0x7e07 036422 store 2 ,mem_ui_state_map +0x7e08 036423 jam off ,mem_le_adv_enable +0x7e09 036424 rtn +: 036428 check_51cmd_le_disconnect: +0x7e0a 036429 setarg 20 +0x7e0b 036430 store 2 ,mem_le_superto +0x7e0c 036431 store 2 ,mem_le_init_superto +0x7e0d 036432 branch le_send_terminate_ind_user_terminated +: 036436 check_51cmd_ble_update_connect_param: +0x7e0e 036437 branch le_l2cap_tx_update_req +: 036441 check_51cmd_led_off: +0x7e0f 036442 arg 0 ,rega +0x7e10 036443 branch ui_led_off_global +: 036447 check_51cmd_led_on: +0x7e11 036448 arg 0 ,rega +0x7e12 036449 branch ui_led_on_global +: 036453 check_51cmd_led_start_blink: +0x7e13 036454 arg 0 ,rega +0x7e14 036455 branch ui_led_blink_start_global +: 036459 check_51cmd_le_start_con: +0x7e15 036460 jam on ,mem_le_scan_enable +0x7e16 036461 jam hci_cmd_le_create_conn ,mem_hci_cmd +0x7e17 036464 rtn +: 036468 check_51cmd_start_scan: +0x7e18 036469 jam on ,mem_le_scan_enable +0x7e19 036470 rtn +: 036474 check_51cmd_stop_scan: +0x7e1a 036475 jam off ,mem_le_scan_enable +0x7e1b 036476 jam 0 ,mem_hci_cmd +0x7e1c 036477 rtn +: 036481 check_51cmd_hibernate: +0x7e1d 036482 fetch 2 ,mem_cb_before_hibernate +0x7e1e 036483 call callback_func +0x7e1f 036484 fetch 1 ,mem_ui_button_gpio +0x7e20 036485 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +0x7e21 036486 copy pdata ,temp +0x7e22 036487 call gpio_config_input +: 036488 check_51cmd_hibernate_btn_disabled: +0x7e23 036489 call ui_ipc_clean_all_fifo +0x7e24 036490 branch lpm_hibernate +: 036494 check_51cmd_le_smp_sec_req: +0x7e25 036495 branch le_send_smp_security_request +: 036499 check_51cmd_role_switch: +0x7e26 036500 jam lmp_slot_offset ,mem_lmo_opcode2 +0x7e27 036501 set1 mark_switch_initiated ,mark +0x7e28 036502 nrtn master +0x7e29 036503 jam switch_flag_init ,mem_switch_flag +0x7e2a 036504 jam lmp_switch_req ,mem_lmo_opcode2 +0x7e2b 036505 fetch 1 ,mem_connection_options +0x7e2c 036506 set0 connection_switch ,pdata +0x7e2d 036507 store 1 ,mem_connection_options +0x7e2e 036508 rtn +: 036512 check_51cmd_bb_reconn_cancel: +0x7e2f 036513 force page_length_timer ,queue +0x7e30 036514 branch timer_stop +: 036518 check_51cmd_dhkey_not_accept: +0x7e31 036519 call tid_set_reply +0x7e32 036520 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7e33 036521 branch parse_lmp_dhkey_check_reject +: 036524 ui_check_paring_button: +0x7e34 036525 fetch 1 ,mem_ui_state_map +0x7e35 036526 rtnbit0 ui_state_btn_down +0x7e36 036527 rtnbit0 ui_state_bt_reconnect +0x7e37 036528 branch check_51cmd_bb_reconn_cancel +: 036533 queue_init: +0x7e38 036534 fetch 2 ,mem_queue_ptr +0x7e39 036535 add pdata ,queue_offset_curr_num ,contw +0x7e3a 036536 setarg 0 +0x7e3b 036537 istore 3 ,contw +0x7e3c 036538 rtn +: 036542 queue_push: +0x7e3d 036543 call disable_user +0x7e3e 036544 call queue_full +0x7e3f 036545 rtn blank +0x7e40 036546 fetch 2 ,mem_queue_ptr +0x7e41 036547 add pdata ,queue_offset_curr_num ,regb +0x7e42 036548 ifetcht 1 ,regb +0x7e43 036549 increase 1 ,temp +0x7e44 036550 istoret 1 ,regb +0x7e45 036552 ifetcht 1 ,pdata +0x7e46 036553 copy temp ,loopcnt +0x7e47 036554 add pdata ,queue_offset_write_ptr ,regb +0x7e48 036555 ifetch 1 ,regb +0x7e49 036556 imul32 temp ,pdata +0x7e4a 036557 iadd contr ,contw +0x7e4b 036558 copy rega ,contr +: 036559 calc_queue_next_ptr: +0x7e4c 036560 call memcpy +0x7e4d 036561 call queue_get_size +0x7e4e 036562 pincrease -1 +0x7e4f 036563 ifetcht 1 ,regb +0x7e50 036564 increase 1 ,temp +0x7e51 036565 iand temp ,temp +0x7e52 036566 istoret 1 ,regb +0x7e53 036567 branch enable_user +: 036572 queue_pop: +0x7e54 036573 call disable_user +0x7e55 036574 call queue_empty +0x7e56 036575 rtn blank +0x7e57 036576 fetch 2 ,mem_queue_ptr +0x7e58 036577 add pdata ,queue_offset_curr_num ,regb +0x7e59 036578 ifetcht 1 ,regb +0x7e5a 036579 increase -1 ,temp +0x7e5b 036580 istoret 1 ,regb +0x7e5c 036581 ifetcht 1 ,pdata +0x7e5d 036582 copy temp ,loopcnt +0x7e5e 036583 add pdata ,queue_offset_read_ptr ,regb +0x7e5f 036584 ifetch 1 ,regb +0x7e60 036585 imul32 temp ,pdata +0x7e61 036586 iadd contr ,contr +0x7e62 036587 increase 1 ,contr +0x7e63 036588 copy rega ,contw +0x7e64 036589 branch calc_queue_next_ptr +: 036593 queue_empty: +0x7e65 036594 fetch 2 ,mem_queue_ptr +0x7e66 036595 add pdata ,queue_offset_curr_num ,contr +0x7e67 036596 ifetch 1 ,contr +0x7e68 036597 rtn +: 036600 queue_full: +0x7e69 036601 call queue_get_size +0x7e6a 036602 ifetcht 1 ,contr +0x7e6b 036603 isub temp ,pdata +0x7e6c 036604 rtn +: 036607 queue_get_size: +0x7e6d 036608 fetch 2 ,mem_queue_ptr +0x7e6e 036609 add pdata ,queue_offset_length ,contr +0x7e6f 036610 ifetch 1 ,contr +0x7e70 036611 rtn +: 036619 right_shift_n: +0x7e71 036620 sub loopcnt ,0 ,null +0x7e72 036621 rtn zero +: 036622 right_shift_n_loop: +0x7e73 036623 rshift pdata ,pdata +0x7e74 036624 loop right_shift_n_loop +0x7e75 036625 rtn +: 036628 left_shift_n: +0x7e76 036629 force 1 ,pdata +0x7e77 036630 sub loopcnt ,0 ,null +0x7e78 036631 rtn zero +: 036632 left_shift_n_loop: +0x7e79 036633 lshift pdata ,pdata +0x7e7a 036634 loop left_shift_n_loop +0x7e7b 036635 rtn +: 036636 push_stack: +0x7e7c 036637 deposit contw +0x7e7d 036638 store 2 ,mem_contw +0x7e7e 036639 storet 8 ,mem_temp +0x7e7f 036640 deposit timeup +0x7e80 036641 store 4 ,mem_timeup +0x7e81 036642 call push_stack_rega_b_c +0x7e82 036643 deposit contr +0x7e83 036644 store 2 ,mem_contr +0x7e84 036645 rtn +: 036647 push_stack_rega_b_c: +0x7e85 036648 deposit rega +0x7e86 036649 store 4 ,mem_rega +0x7e87 036650 deposit regb +0x7e88 036651 store 4 ,mem_regb +0x7e89 036652 deposit regc +0x7e8a 036653 store 3 ,mem_regc +0x7e8b 036654 rtn +: 036656 pop_stack: +0x7e8c 036657 fetcht 8 ,mem_temp +0x7e8d 036658 fetch 4 ,mem_timeup +0x7e8e 036659 iforce timeup +0x7e8f 036660 call pop_stack_rega_b_c +0x7e90 036661 fetch 2 ,mem_contw +0x7e91 036662 iforce contw +0x7e92 036663 fetch 2 ,mem_contr +0x7e93 036664 iforce contr +0x7e94 036665 rtn +: 036667 pop_stack_rega_b_c: +0x7e95 036668 fetch 4 ,mem_rega +0x7e96 036669 iforce rega +0x7e97 036670 fetch 4 ,mem_regb +0x7e98 036671 iforce regb +0x7e99 036672 fetch 3 ,mem_regc +0x7e9a 036673 iforce regc +0x7e9b 036674 rtn +: 036676 get_contw: +0x7e9c 036677 fetch 2 ,mem_contw +0x7e9d 036678 copy pdata ,contw +0x7e9e 036679 rtn +: 036680 get_contr: +0x7e9f 036681 fetch 2 ,mem_contr +0x7ea0 036682 copy pdata ,contr +0x7ea1 036683 rtn +: 036684 store_contw: +0x7ea2 036685 copy contw ,pdata +0x7ea3 036686 store 2 ,mem_contw +0x7ea4 036687 rtn +: 036688 store_contr: +0x7ea5 036689 copy contr ,pdata +0x7ea6 036690 store 2 ,mem_contr +0x7ea7 036691 rtn +: 036695 save_cont_pointers: +0x7ea8 036696 copy contw ,pdata +0x7ea9 036697 store 2 ,mem_hold_contw +0x7eaa 036698 copy contr ,pdata +0x7eab 036699 store 2 ,mem_hold_contr +0x7eac 036700 rtn +: 036701 load_cont_pointers: +0x7ead 036702 fetch 2 ,mem_hold_contw +0x7eae 036703 copy pdata ,contw +0x7eaf 036704 fetch 2 ,mem_hold_contr +0x7eb0 036705 copy pdata ,contr +0x7eb1 036706 rtn +: 036708 memcpy96: +0x7eb2 036709 call memcpy32 +: 036710 memcpy64: +0x7eb3 036711 call memcpy32 +0x7eb4 036712 branch memcpy32 +: 036713 memcpy12: +0x7eb5 036714 call memcpy8 +: 036715 memcpy4: +0x7eb6 036716 ifetch 4 ,contr +0x7eb7 036717 istore 4 ,contw +0x7eb8 036718 rtn +: 036719 memcpy8: +0x7eb9 036720 ifetch 8 ,contr +0x7eba 036721 istore 8 ,contw +0x7ebb 036722 rtn +: 036724 memcpy48: +0x7ebc 036725 call memcpy16 +: 036726 memcpy32: +0x7ebd 036727 call memcpy8 +: 036728 memcpy24: +0x7ebe 036729 call memcpy8 +: 036730 memcpy16: +0x7ebf 036731 call memcpy8 +0x7ec0 036732 branch memcpy8 +: 036736 delay_10ms: +0x7ec1 036737 arg 10 ,loopcnt +: 036738 delay_ms_wait: +0x7ec2 036739 nop 12000 +0x7ec3 036740 loop delay_ms_wait +0x7ec4 036741 rtn +: 036743 bn_zero: +0x7ec5 036744 force 3 ,loopcnt +: 036745 memset0: +0x7ec6 036746 force 0 ,pdata +: 036747 memset8: +0x7ec7 036748 istore 8 ,contw +0x7ec8 036749 loop memset8 +0x7ec9 036750 rtn +: 036752 memset0_8: +0x7eca 036753 force 0 ,pdata +0x7ecb 036754 istore 8 ,contw +0x7ecc 036755 rtn +: 036756 memset0_4: +0x7ecd 036757 force 0 ,pdata +0x7ece 036758 istore 4 ,contw +0x7ecf 036759 rtn +: 036761 clear_mem_256: +0x7ed0 036762 force 4 ,loopcnt +0x7ed1 036763 branch memset0 +: 036764 clear_mem_512: +0x7ed2 036765 force 8 ,loopcnt +0x7ed3 036766 branch memset0 +: 036768 clear_mem: +0x7ed4 036769 deposit loopcnt +0x7ed5 036770 rtn blank +0x7ed6 036771 setarg 0 +: 036772 clear_mem_loop: +0x7ed7 036773 istore 1 ,contw +0x7ed8 036774 loop clear_mem_loop +0x7ed9 036775 rtn +: 036778 clear_temp_block: +0x7eda 036779 arg 32 ,loopcnt +0x7edb 036780 arg mem_temp_block0 ,contw +0x7edc 036781 branch clear_mem +: 036783 xor_loop: +0x7edd 036784 ifetch 4 ,regc +0x7ede 036785 ifetcht 4 ,rega +0x7edf 036786 ixor temp ,pdata +0x7ee0 036787 istore 4 ,contw +0x7ee1 036788 increase 4 ,rega +0x7ee2 036789 increase 4 ,regc +0x7ee3 036790 loop xor_loop +0x7ee4 036791 rtn +: 036795 inverse_data: +0x7ee5 036796 bpatchx patch3f_3 ,mem_patch3f +0x7ee6 036797 copy loopcnt ,pdata +0x7ee7 036798 sub pdata ,1 ,null +0x7ee8 036799 rtn positive +0x7ee9 036800 iadd rega ,regb +0x7eea 036801 increase -1 ,regb +0x7eeb 036802 rshift loopcnt ,loopcnt +: 036803 inverse_loop: +0x7eec 036804 ifetcht 1 ,rega +0x7eed 036805 ifetch 1 ,regb +0x7eee 036806 istore 1 ,rega +0x7eef 036807 istoret 1 ,regb +0x7ef0 036808 increase -1 ,regb +0x7ef1 036809 increase 1 ,rega +0x7ef2 036810 loop inverse_loop +0x7ef3 036811 rtn +: 036814 memcpy_fast: +0x7ef4 036815 deposit loopcnt +0x7ef5 036816 rtn blank +: 036817 memcpy_fast_loop: +0x7ef6 036818 increase -8 ,loopcnt +0x7ef7 036819 call memcpy8 ,positive +0x7ef8 036820 rtn zero +0x7ef9 036821 branch memcpy_fast_loop ,positive +0x7efa 036822 increase 8 ,loopcnt +: 036823 memcpy_fast_loop_four: +0x7efb 036824 increase -4 ,loopcnt +0x7efc 036825 call memcpy4 ,positive +0x7efd 036826 rtn zero +0x7efe 036827 branch memcpy_fast_loop_four ,positive +0x7eff 036828 increase 4 ,loopcnt +0x7f00 036829 branch memcpy +: 036831 memcpy: +0x7f01 036832 deposit loopcnt +0x7f02 036833 rtn blank +: 036834 memcpy_loop: +0x7f03 036835 ifetch 1 ,contr +0x7f04 036836 istore 1 ,contw +0x7f05 036837 loop memcpy_loop +0x7f06 036838 rtn +: 036840 timer_stop: +0x7f07 036841 setarg 0 +: 036842 timer_init: +0x7f08 036843 rshift clkn_bt ,temp +0x7f09 036844 storet 4 ,mem_last_clkn +0x7f0a 036845 arg mem_timers ,contw +0x7f0b 036846 iforce temp +0x7f0c 036847 lshift queue ,pdata +0x7f0d 036848 iadd contw ,contw +0x7f0e 036849 istoret 2 ,contw +0x7f0f 036850 bpatchx patch3f_4 ,mem_patch3f +0x7f10 036851 rtn +: 036853 timer_check_timeout: +0x7f11 036854 arg 0x800 ,timeup +0x7f12 036855 lshift16 timeup ,timeup +0x7f13 036856 iadd timeup ,pdata +0x7f14 036857 rtn +: 036860 timer_reinit: +0x7f15 036861 arg 0 ,queue +: 036862 timer_check: +0x7f16 036863 bpatchx patch3f_5 ,mem_patch3f +0x7f17 036864 fetcht 4 ,mem_last_clkn +0x7f18 036865 rshift clkn_bt ,pdata +0x7f19 036866 store 4 ,mem_last_clkn +0x7f1a 036867 isub temp ,null +0x7f1b 036868 ncall timer_check_timeout ,positive +0x7f1c 036869 isub temp ,timeup +0x7f1d 036870 copy timeup ,temp +0x7f1e 036871 arg mem_timers ,contr +0x7f1f 036872 copy contr ,contw +0x7f20 036873 arg 16 ,loopcnt +: 036874 timer_loop: +0x7f21 036875 ifetch 2 ,contr +0x7f22 036876 isub temp ,pdata +0x7f23 036877 branch timer_counting ,positive +0x7f24 036878 force 0 ,pdata +: 036879 timer_counting: +0x7f25 036880 istore 2 ,contw +0x7f26 036881 loop timer_loop +0x7f27 036882 arg mem_timers ,contr +0x7f28 036883 lshift queue ,pdata +0x7f29 036884 iadd contr ,contr +0x7f2a 036885 ifetch 2 ,contr +0x7f2b 036886 rtn +: 036891 clk_add: +0x7f2c 036892 iadd temp ,temp +0x7f2d 036893 copy temp ,loopcnt +0x7f2e 036894 setarg 3750 +0x7f2f 036895 isub loopcnt ,pdata +0x7f30 036896 rtn positive +0x7f31 036897 sub pdata ,0 ,pdata +0x7f32 036898 rshift16 temp ,temp +0x7f33 036899 increase 1 ,temp +0x7f34 036900 lshift16 temp ,temp +0x7f35 036901 ior temp ,temp +0x7f36 036902 rtn +: 036904 clk_diff_rt: +0x7f37 036905 call clk_diff +0x7f38 036906 branch clk2rt +: 036909 clk_diff: +0x7f39 036910 disable user +0x7f3a 036911 isub temp ,pdata +0x7f3b 036912 branch clk_diff_pos ,positive +0x7f3c 036913 enable user +0x7f3d 036914 sub pdata ,0 ,pdata +: 036915 clk_diff_pos: +0x7f3e 036916 rtnbit0 15 +0x7f3f 036917 arg -61786 ,temp +0x7f40 036918 iadd temp ,pdata +0x7f41 036919 set0 64 ,pdata +0x7f42 036920 rtn +: 036922 clk2rt: +0x7f43 036923 iforce contr +0x7f44 036924 rshift16 pdata ,pdata +0x7f45 036925 arg 3750 ,temp +0x7f46 036926 imul32 temp ,pdata +0x7f47 036927 iadd contr ,pdata +0x7f48 036928 rtn +: 036931 clk2lpo: +0x7f49 036932 lshift8 pdata ,pdata +0x7f4a 036933 lshift4 pdata ,pdata +0x7f4b 036934 fetcht 3 ,mem_clks_per_lpo +0x7f4c 036935 idiv temp +0x7f4d 036936 call wait_div_end +0x7f4e 036937 quotient temp +0x7f4f 036938 rtn +: 036941 clk2bt: +0x7f50 036942 arg 3750 ,temp +0x7f51 036943 idiv temp +0x7f52 036944 call wait_div_end +0x7f53 036945 quotient pdata +0x7f54 036946 lshift16 pdata ,pdata +: 036947 clk2bt_next: +0x7f55 036948 remainder temp +0x7f56 036949 ior temp ,temp +0x7f57 036950 rtn +: 036957 string2dec_from_uart: +0x7f58 036958 arg 0 ,temp +: 036959 string2dec_from_uart_done: +0x7f59 036960 copy temp ,regc +0x7f5a 036961 ifetch 1 ,contru +0x7f5b 036962 call uchar2dialog +0x7f5c 036963 copy regc ,temp +0x7f5d 036964 call swap +0x7f5e 036965 arg 10 ,regb +0x7f5f 036966 imul32 regb ,pdata +0x7f60 036967 iadd temp ,pdata +0x7f61 036968 copy pdata ,temp +0x7f62 036969 loop string2dec_from_uart_done +0x7f63 036970 rtn +: 036974 uchar2dialog: +0x7f64 036975 arg 0x3a ,temp +0x7f65 036976 isub temp ,null +0x7f66 036977 nbranch uchar2dialog_number ,positive +0x7f67 036978 arg 0x61 ,temp +0x7f68 036979 isub temp ,null +0x7f69 036980 branch uchar2dialog_a2f ,positive +0x7f6a 036981 arg 0x37 ,temp +0x7f6b 036982 isub temp ,pdata +0x7f6c 036983 rtn +: 036984 uchar2dialog_number: +0x7f6d 036985 arg 0x30 ,temp +0x7f6e 036986 isub temp ,pdata +0x7f6f 036987 rtn +: 036988 uchar2dialog_a2f: +0x7f70 036989 arg 0x57 ,temp +0x7f71 036990 isub temp ,pdata +0x7f72 036991 rtn +: 036993 pn9: +0x7f73 036994 copy temp ,alarm +0x7f74 036995 setarg 0x1ff +0x7f75 036996 force 0 ,regb +: 036997 pn9_loop: +0x7f76 036998 rshift3 pdata ,rega +0x7f77 036999 rshift rega ,rega +0x7f78 037000 ixor rega ,rega +0x7f79 037001 isolate1 0 ,rega +0x7f7a 037002 setflag true ,9 ,pdata +0x7f7b 037003 rshift temp ,temp +0x7f7c 037004 isolate1 0 ,pdata +0x7f7d 037005 setflag true ,7 ,temp +0x7f7e 037006 rshift pdata ,pdata +0x7f7f 037007 increase 1 ,regb +0x7f80 037008 compare 0 ,regb ,0x7 +0x7f81 037009 nbranch pn9_loop ,true +0x7f82 037010 istoret 1 ,contw +0x7f83 037011 loop pn9_loop +0x7f84 037012 copy alarm ,temp +0x7f85 037013 rtn +: 037016 wait_div_end: +0x7f86 037017 rtn modone +0x7f87 037018 branch wait_div_end +: 037028 compare_loop: +: 037029 string_compare: +0x7f88 037030 ifetch 1 ,rega +0x7f89 037031 ifetcht 1 ,regb +0x7f8a 037032 isub temp ,null +0x7f8b 037033 nrtn zero +0x7f8c 037034 increase 1 ,rega +0x7f8d 037035 increase 1 ,regb +0x7f8e 037036 loop string_compare +0x7f8f 037037 force 0 ,null +0x7f90 037038 rtn +: 037041 ceiling: +0x7f91 037042 isub temp ,null +0x7f92 037043 nrtn positive +0x7f93 037044 deposit temp +0x7f94 037045 rtn +: 037047 swap: +0x7f95 037048 iadd temp ,pdata +0x7f96 037049 isub temp ,temp +0x7f97 037050 isub temp ,pdata +0x7f98 037051 rtn +: 037053 clean_mem: +0x7f99 037054 arg 0x200 ,loopcnt +0x7f9a 037055 arg 0x4000 ,contw +0x7f9b 037056 branch memset0 +: 037059 callback_func: +0x7f9c 037060 rtn blank +0x7f9d 037061 copy pdata ,pc +: 037064 wait_uarttx: +0x7f9e 037065 hfetch 2 ,core_uart_txitems +0x7f9f 037066 nbranch wait_uarttx ,blank +0x7fa0 037067 rtn +: 037069 ice_break: +0x7fa1 037070 jam 0x1 ,core_ice_ctrl +0x7fa2 037071 rtn +: 037073 ice_setbp: +0x7fa3 037074 hstore 2 ,core_ice_break0 +0x7fa4 037075 hfetch 1 ,core_ice_ctrl +0x7fa5 037076 set1 4 ,pdata +0x7fa6 037077 hstore 1 ,core_ice_ctrl +0x7fa7 037078 rtn +: 037079 ice_setbp2: +0x7fa8 037080 hstore 2 ,core_ice_break1 +0x7fa9 037081 hfetch 1 ,core_ice_ctrl +0x7faa 037082 set1 6 ,pdata +0x7fab 037083 hstore 1 ,core_ice_ctrl +0x7fac 037084 rtn +: 037086 ice_set_write_bp: +0x7fad 037087 hstore 2 ,core_ice_break0 +0x7fae 037088 jam 0x30 ,core_ice_ctrl +0x7faf 037089 rtn +: 037093 test_enable_white: +0x7fb0 037094 hfetch 1 ,core_config +0x7fb1 037095 set0 whiteoff_bit ,pdata +0x7fb2 037096 hstore 1 ,core_config +0x7fb3 037097 rtn +: 037099 check_uart_tx_buff: +0x7fb4 037100 hfetch 2 ,core_uart_txitems +0x7fb5 037101 arg uart_air_control_threshold ,temp +: 037102 pdata_sub_temp: +0x7fb6 037103 isub temp ,null +0x7fb7 037104 rtn +: 037110 fifo_in: +0x7fb8 037111 bpatchx patch3f_6 ,mem_patch3f +0x7fb9 037112 ifetcht util_fifo_len ,rega +0x7fba 037113 and temp ,0xff ,pdata +0x7fbb 037114 nbranch fifo_in_push ,blank +0x7fbc 037115 rshift8 temp ,pdata +0x7fbd 037116 istore util_fifo_len ,rega +: 037117 fifo_in_push: +0x7fbe 037118 increase util_fifo_len + util_fifo_offset ,rega +0x7fbf 037119 ifetch 1 ,rega +0x7fc0 037120 nbranch assert ,blank +0x7fc1 037121 fetch 1 ,mem_fifo_temp +0x7fc2 037122 istore 1 ,rega +0x7fc3 037123 rtn +: 037128 fifo_out: +0x7fc4 037129 bpatchx patch3f_7 ,mem_patch3f +0x7fc5 037130 arg util_fifo_len ,loopcnt +0x7fc6 037131 ifetch util_fifo_len ,rega +0x7fc7 037132 rtn blank +: 037133 fifo_out_loop: +0x7fc8 037134 ifetch 1 ,rega +0x7fc9 037135 nbranch fifo_out_end ,blank +0x7fca 037136 increase 1 ,rega +0x7fcb 037137 loop fifo_out_loop +0x7fcc 037138 branch assert +: 037139 fifo_out_end: +0x7fcd 037140 arg 0 ,temp +0x7fce 037141 istoret 1 ,rega +0x7fcf 037142 rtn +: 037147 fifo_is_empty: +0x7fd0 037148 ifetch util_fifo_len ,rega +0x7fd1 037149 rtn +: 037154 fifo_is_full: +0x7fd2 037155 ifetch 1 ,rega +0x7fd3 037156 rtn +: 037159 fifo_is_near_full: +0x7fd4 037160 ifetch 2 ,rega +0x7fd5 037161 rtn +: 037165 fifo_content_count: +0x7fd6 037166 arg 0 ,temp +: 037167 fifo_content_count_loop: +0x7fd7 037168 fetch 1 ,contr +0x7fd8 037169 loop fifo_content_count_loop ,blank +0x7fd9 037170 increase 1 ,temp +0x7fda 037171 loop fifo_content_count_loop +0x7fdb 037172 copy temp ,pdata +0x7fdc 037173 rtn +: 037175 not_greater_than: +0x7fdd 037176 isub temp ,null +0x7fde 037177 nrtn positive +0x7fdf 037178 copy temp ,pdata +0x7fe0 037179 rtn +: 037182 disable_positive: +0x7fe1 037183 force -1 ,null +0x7fe2 037184 rtn +: 037185 enable_positive: +: 037186 disable_zero: +0x7fe3 037187 force 1 ,null +0x7fe4 037188 rtn +: 037189 enable_zero: +0x7fe5 037190 force 0 ,null +0x7fe6 037191 rtn +: 037193 enable_user: +0x7fe7 037194 enable user +0x7fe8 037195 rtn +: 037197 disable_user: +0x7fe9 037198 disable user +0x7fea 037199 rtn +: 037201 enable_user2: +0x7feb 037202 enable user2 +0x7fec 037203 rtn +: 037205 disable_user2: +0x7fed 037206 disable user2 +0x7fee 037207 rtn +: 037209 disable_blank: +0x7fef 037210 setarg 1 +0x7ff0 037211 rtn +: 037213 enable_blank: +0x7ff1 037214 setarg 0 +0x7ff2 037215 rtn +: 037218 reverse_byte: +0x7ff3 037219 copy loopcnt ,pdata +0x7ff4 037220 rtn blank +0x7ff5 037221 copy contr ,pdata +0x7ff6 037222 iadd loopcnt ,pdata +0x7ff7 037223 increase -1 ,pdata +0x7ff8 037224 copy pdata ,contr +: 037225 reverse_loop: +0x7ff9 037226 ifetch 1 ,contr +0x7ffa 037227 increase -2 ,contr +0x7ffb 037228 istore 1 ,contw +0x7ffc 037229 loop reverse_loop +0x7ffd 037230 rtn org 0x10001 -: 037179 z_entrance0: -0x10001 037180 beq zcode_00 ,z_page_wait_fhs_reply_ok -0x10002 037181 rtn -: 037183 z_page_wait_fhs_reply_ok: -0x10003 037184 fetch 1 ,mem_page_rcv_fhs -0x10004 037185 increase 1 ,pdata -0x10005 037186 store 1 ,mem_page_rcv_fhs -0x10006 037187 call prepare_newconn -: 037188 z_master_newconn_loop: -0x10007 037189 set1 mark_first_packet ,mark -0x10008 037190 call master_newconn_once -0x10009 037191 branch z_newconn_poll_responded ,sync -0x1000a 037192 set0 mark_first_packet ,mark -0x1000b 037193 call new_conn_timeout -0x1000c 037194 nbranch z_master_newconn_loop ,blank -0x1000d 037195 branch page_restart -: 037196 z_newconn_poll_responded: -0x1000e 037197 set0 mark_first_packet ,mark -0x1000f 037198 branch newconn_poll_responded +: 037235 z_entrance0: +0x10001 037236 beq zcode_00 ,z_page_wait_fhs_reply_ok +0x10002 037237 rtn +: 037239 z_page_wait_fhs_reply_ok: +0x10003 037240 fetch 1 ,mem_page_rcv_fhs +0x10004 037241 increase 1 ,pdata +0x10005 037242 store 1 ,mem_page_rcv_fhs +0x10006 037243 call prepare_newconn +: 037244 z_master_newconn_loop: +0x10007 037245 set1 mark_first_packet ,mark +0x10008 037246 call master_newconn_once +0x10009 037247 branch z_newconn_poll_responded ,sync +0x1000a 037248 set0 mark_first_packet ,mark +0x1000b 037249 call new_conn_timeout +0x1000c 037250 nbranch z_master_newconn_loop ,blank +0x1000d 037251 branch page_restart +: 037252 z_newconn_poll_responded: +0x1000e 037253 set0 mark_first_packet ,mark +0x1000f 037254 branch newconn_poll_responded org 0x20001 -: 037205 z_entrance1: -0x20001 037206 beq zcode_10 ,z_mouse_bb_disconnected -0x20002 037207 beq zcode_11 ,z_hid_rx_process -0x20003 037208 rtn -: 037210 z_mouse_bb_disconnected: -0x20004 037211 jam 0 ,mem_mouse_enter_sniff_count -0x20005 037212 jam 0x0e ,mem_sniff_param_interval -0x20006 037213 call mouse_bb_discon_clear_stack -0x20007 037214 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x20008 037215 bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn -0x20009 037216 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x2000a 037217 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing -0x2000b 037218 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate -0x2000c 037219 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate -0x2000d 037220 branch mouse_start_discovery -: 037222 z_mouse4_0_event_bb_disconn: -0x2000e 037223 call mouse_le_clean_connect_flag -0x2000f 037224 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x20010 037225 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up -0x20011 037226 branch mouse4_0_event_bb_disconn + 2 -: 037228 z_mouse_event_light_state_pairing: -0x20012 037229 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate -0x20013 037230 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate -0x20014 037231 branch mouse_start_discovery -: 037232 z_mouse_event_light_state_hibernate: -0x20015 037233 fetch 2 ,mem_ui_state_map -0x20016 037234 bbit1 ui_state_btn_down ,mouse_start_discovery -0x20017 037235 call app_disconn_reason_clear -0x20018 037236 call p_mouse_check_key_gpio -0x20019 037237 rtn true -0x2001a 037238 branch app_bb_hibernate -: 037241 z_hid_rx_process: -0x2001b 037242 fetch 2 ,mem_l2cap_payload_ptr -0x2001c 037243 copy pdata ,contr -0x2001d 037244 ifetch 1 ,contr -0x2001e 037245 store 1 ,mem_l2cap_rcv -0x2001f 037246 and pdata ,0x0f ,temp -0x20020 037247 rshift4 pdata ,pdata -0x20021 037248 beq hid_type_set_protocol ,z_hid_rx_set_protocol -0x20022 037249 beq hid_type_control ,z_hid_rx_process_hid_control -0x20023 037250 branch hid_rx_process + 6 -: 037251 z_hid_rx_set_protocol: -0x20024 037252 call hid_rx_process_handshake -0x20025 037253 jam 0 ,mem_mouse_bt_boot_mode -0x20026 037254 fetch 1 ,mem_l2cap_rcv -0x20027 037255 isolate1 0 ,pdata -0x20028 037256 rtn true -0x20029 037257 jam 1 ,mem_mouse_bt_boot_mode -0x2002a 037258 rtn -: 037260 z_hid_rx_process_hid_control: -0x2002b 037261 copy temp ,pdata -0x2002c 037262 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug -0x2002d 037263 branch hid_rx_process_hid_control + 2 +: 037261 z_entrance1: +0x20001 037262 beq zcode_10 ,z_mouse_bb_disconnected +0x20002 037263 beq zcode_11 ,z_hid_rx_process +0x20003 037264 rtn +: 037266 z_mouse_bb_disconnected: +0x20004 037267 jam 0 ,mem_mouse_enter_sniff_count +0x20005 037268 jam 0x0e ,mem_sniff_param_interval +0x20006 037269 call mouse_bb_discon_clear_stack +0x20007 037270 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x20008 037271 bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn +0x20009 037272 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x2000a 037273 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing +0x2000b 037274 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate +0x2000c 037275 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +0x2000d 037276 branch mouse_start_discovery +: 037278 z_mouse4_0_event_bb_disconn: +0x2000e 037279 call mouse_le_clean_connect_flag +0x2000f 037280 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x20010 037281 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +0x20011 037282 branch mouse4_0_event_bb_disconn + 2 +: 037284 z_mouse_event_light_state_pairing: +0x20012 037285 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate +0x20013 037286 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +0x20014 037287 branch mouse_start_discovery +: 037288 z_mouse_event_light_state_hibernate: +0x20015 037289 fetch 2 ,mem_ui_state_map +0x20016 037290 bbit1 ui_state_btn_down ,mouse_start_discovery +0x20017 037291 call app_disconn_reason_clear +0x20018 037292 call p_mouse_check_key_gpio +0x20019 037293 rtn true +0x2001a 037294 branch app_bb_hibernate +: 037297 z_hid_rx_process: +0x2001b 037298 fetch 2 ,mem_l2cap_payload_ptr +0x2001c 037299 copy pdata ,contr +0x2001d 037300 ifetch 1 ,contr +0x2001e 037301 store 1 ,mem_l2cap_rcv +0x2001f 037302 and pdata ,0x0f ,temp +0x20020 037303 rshift4 pdata ,pdata +0x20021 037304 beq hid_type_set_protocol ,z_hid_rx_set_protocol +0x20022 037305 beq hid_type_control ,z_hid_rx_process_hid_control +0x20023 037306 branch hid_rx_process + 6 +: 037307 z_hid_rx_set_protocol: +0x20024 037308 call hid_rx_process_handshake +0x20025 037309 jam 0 ,mem_mouse_bt_boot_mode +0x20026 037310 fetch 1 ,mem_l2cap_rcv +0x20027 037311 isolate1 0 ,pdata +0x20028 037312 rtn true +0x20029 037313 jam 1 ,mem_mouse_bt_boot_mode +0x2002a 037314 rtn +: 037316 z_hid_rx_process_hid_control: +0x2002b 037317 copy temp ,pdata +0x2002c 037318 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug +0x2002d 037319 branch hid_rx_process_hid_control + 2 org 0x30001 -: 037267 z_entrance2: -0x30001 037268 beq zcode_20 ,z_send_lmp_escape -0x30002 037269 beq zcode_21 ,z_send_lmp_accepted -0x30003 037270 beq zcode_22 ,z_send_lmp_detach -0x30004 037271 beq zcode_23 ,z_mouse4_0_check_reconn_target -0x30005 037272 rtn -: 037274 z_mouse4_0_check_reconn_target: -0x30006 037275 jam 1 ,mem_le_send_security_request_flag -0x30007 037276 call p_mouse_mode_bt_device_multi_led_on -0x30008 037277 jam 1 ,mem_mouse_le_reconnect_flag -0x30009 037278 fetch 2 ,mem_mouse_direct_timeout -0x3000a 037279 fetcht 1 ,mem_mouse_fast_conn_flag -0x3000b 037280 sub temp ,0xff ,null -0x3000c 037281 nbranch z_mouse4_0_check_reconn_target_next ,zero -0x3000d 037282 setarg 0x0258 -: 037283 z_mouse4_0_check_reconn_target_next: -0x3000e 037284 store 2 ,mem_mouse_direct_timer -0x3000f 037285 call app_lpm_mult_disable -0x30010 037286 call p_le_check_adv_flag -0x30011 037287 setarg adv_flag_bredr_not_supported -0x30012 037288 istore 1 ,contr -0x30013 037289 arg mem_le_scan_data ,contr -0x30014 037290 call p_le_adv_data_update -0x30015 037291 branch check_51cmd_adv -: 037293 z_send_lmp_escape: -0x30016 037294 fetch 1 ,mem_lmp_to_send -0x30017 037295 beq lmp_ext_features_res ,z_send_lmpext_features_res -0x30018 037296 beq lmp_ext_features_req ,z_send_lmpext_features_req -0x30019 037297 branch send_lmp_escape -: 037298 z_send_lmpext_features_res: -0x3001a 037299 call z_check_ssp_enable -0x3001b 037300 fetch 1 ,mem_lmp_to_send -0x3001c 037301 branch send_lmpext_features_res -: 037302 z_send_lmpext_features_req: -0x3001d 037303 call z_check_ssp_enable -0x3001e 037304 fetch 1 ,mem_lmp_to_send -0x3001f 037305 branch send_lmpext_features_req -: 037306 z_check_ssp_enable: -0x30020 037307 fetch 1 ,mem_ssp_enable -0x30021 037308 branch ssp_disable ,blank -0x30022 037309 branch ssp_enable -: 037311 z_send_lmp_detach: -0x30023 037312 call send_lmp_detach -0x30024 037313 fetch 1 ,mem_mouse_bt_reconnect_flag -0x30025 037314 rtn blank -0x30026 037315 fetch 1 ,mem_op -0x30027 037316 set0 op_disconn ,pdata -0x30028 037317 store 1 ,mem_op -0x30029 037318 branch p_mouse_sensor_powerdown -: 037320 z_send_lmp_accepted: -0x3002a 037321 force 2 ,pdata -0x3002b 037322 call msg_send_lmp -0x3002c 037323 fetch 1 ,mem_lmi_opcode -0x3002d 037324 istore 1 ,contw -0x3002e 037325 store 1 ,mem_lmi_opcode_temp -0x3002f 037326 call send_lmp_follow -0x30030 037327 fetch 1 ,mem_lmi_opcode_temp -0x30031 037328 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req -0x30032 037329 branch send_lmp_accepted + 7 -: 037331 z_send_lmp_accepted_max_slot_req: -0x30033 037332 fetch 1 ,mem_bt_rcvd_switch_req_accept -0x30034 037333 rtn blank -0x30035 037334 jam 0 ,mem_bt_rcvd_switch_req_accept -0x30036 037335 fetch 1 ,mem_bt_send_lmp_setup_complete -0x30037 037336 rtnne 2 -0x30038 037337 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x30039 037338 copy clkn_bt ,pdata -0x3003a 037339 store 4 ,mem_aurand_send_delay_time -0x3003b 037340 rtn +: 037323 z_entrance2: +0x30001 037324 beq zcode_20 ,z_send_lmp_escape +0x30002 037325 beq zcode_21 ,z_send_lmp_accepted +0x30003 037326 beq zcode_22 ,z_send_lmp_detach +0x30004 037327 beq zcode_23 ,z_mouse4_0_check_reconn_target +0x30005 037328 rtn +: 037330 z_mouse4_0_check_reconn_target: +0x30006 037331 jam 1 ,mem_le_send_security_request_flag +0x30007 037332 call p_mouse_mode_bt_device_multi_led_on +0x30008 037333 jam 1 ,mem_mouse_le_reconnect_flag +0x30009 037334 fetch 2 ,mem_mouse_direct_timeout +0x3000a 037335 fetcht 1 ,mem_mouse_fast_conn_flag +0x3000b 037336 sub temp ,0xff ,null +0x3000c 037337 nbranch z_mouse4_0_check_reconn_target_next ,zero +0x3000d 037338 setarg 0x0258 +: 037339 z_mouse4_0_check_reconn_target_next: +0x3000e 037340 store 2 ,mem_mouse_direct_timer +0x3000f 037341 call app_lpm_mult_disable +0x30010 037342 call p_le_check_adv_flag +0x30011 037343 setarg adv_flag_bredr_not_supported +0x30012 037344 istore 1 ,contr +0x30013 037345 arg mem_le_scan_data ,contr +0x30014 037346 call p_le_adv_data_update +0x30015 037347 branch check_51cmd_adv +: 037349 z_send_lmp_escape: +0x30016 037350 fetch 1 ,mem_lmp_to_send +0x30017 037351 beq lmp_ext_features_res ,z_send_lmpext_features_res +0x30018 037352 beq lmp_ext_features_req ,z_send_lmpext_features_req +0x30019 037353 branch send_lmp_escape +: 037354 z_send_lmpext_features_res: +0x3001a 037355 call z_check_ssp_enable +0x3001b 037356 fetch 1 ,mem_lmp_to_send +0x3001c 037357 branch send_lmpext_features_res +: 037358 z_send_lmpext_features_req: +0x3001d 037359 call z_check_ssp_enable +0x3001e 037360 fetch 1 ,mem_lmp_to_send +0x3001f 037361 branch send_lmpext_features_req +: 037362 z_check_ssp_enable: +0x30020 037363 fetch 1 ,mem_ssp_enable +0x30021 037364 branch ssp_disable ,blank +0x30022 037365 branch ssp_enable +: 037367 z_send_lmp_detach: +0x30023 037368 call send_lmp_detach +0x30024 037369 fetch 1 ,mem_mouse_bt_reconnect_flag +0x30025 037370 rtn blank +0x30026 037371 fetch 1 ,mem_op +0x30027 037372 set0 op_disconn ,pdata +0x30028 037373 store 1 ,mem_op +0x30029 037374 branch p_mouse_sensor_powerdown +: 037376 z_send_lmp_accepted: +0x3002a 037377 force 2 ,pdata +0x3002b 037378 call msg_send_lmp +0x3002c 037379 fetch 1 ,mem_lmi_opcode +0x3002d 037380 istore 1 ,contw +0x3002e 037381 store 1 ,mem_lmi_opcode_temp +0x3002f 037382 call send_lmp_follow +0x30030 037383 fetch 1 ,mem_lmi_opcode_temp +0x30031 037384 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req +0x30032 037385 branch send_lmp_accepted + 7 +: 037387 z_send_lmp_accepted_max_slot_req: +0x30033 037388 fetch 1 ,mem_bt_rcvd_switch_req_accept +0x30034 037389 rtn blank +0x30035 037390 jam 0 ,mem_bt_rcvd_switch_req_accept +0x30036 037391 fetch 1 ,mem_bt_send_lmp_setup_complete +0x30037 037392 rtnne 2 +0x30038 037393 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x30039 037394 copy clkn_bt ,pdata +0x3003a 037395 store 4 ,mem_aurand_send_delay_time +0x3003b 037396 rtn org 0x40001 -: 037345 z_entrance3: -0x40001 037346 beq zcode_30 ,z_process_conn_sm -0x40002 037347 rtn -: 037349 z_process_conn_sm: -0x40003 037350 call lmo_fifo_check -0x40004 037351 nrtn blank -: 037352 z_process_conn_sm_continue: -0x40005 037353 fetch 1 ,mem_conn_sm -0x40006 037354 rtn blank -0x40007 037355 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req -0x40008 037356 beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch -0x40009 037357 branch process_conn_sm_continue + 2 -: 037360 z_host_creat_conn_wait_switch: -0x4000a 037361 fetch 1 ,mem_switch_flag -0x4000b 037362 rtneq switch_flag_init -0x4000c 037363 beq switch_flag_accept ,z_host_create_conn_switch_accept -0x4000d 037364 branch host_creat_conn_wait_switch + 3 -: 037365 z_host_create_conn_switch_accept: -0x4000e 037366 rtn master -: 037367 z_host_create_conn_auth_pair: -0x4000f 037369 fetch 1 ,mem_connection_options -0x40010 037370 bbit1 connection_auth ,z_host_create_conn_auth_pair_true -0x40011 037371 branch host_create_conn_auth_pair + 1 -: 037372 z_host_create_conn_auth_pair_true: -0x40012 037373 fetch 1 ,mem_bt_send_lmp_setup_complete -0x40013 037374 beq 1 ,host_create_conn_auth_pair_true -0x40014 037376 fetch 1 ,mem_link_key_exists -0x40015 037377 branch host_create_conn_auth_pair_nokey ,blank -0x40016 037378 fetch 1 ,mem_lmp_conn_state -0x40017 037379 rtnbit0 sent_setup_complete -0x40018 037380 rtnbit0 received_setup_complete -0x40019 037381 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x4001a 037382 rtn blank -0x4001b 037383 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch -0x4001c 037384 fetch 4 ,mem_aurand_send_delay_time -0x4001d 037385 arg 20 ,temp -0x4001e 037386 iadd temp ,temp -0x4001f 037387 copy clkn_bt ,pdata -0x40020 037388 isub temp ,null -0x40021 037389 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive -0x40022 037390 branch host_create_conn_auth -: 037392 z_bt_send_max_slot_req_accept_after_switch_wait: -0x40023 037393 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x40024 037394 rtn -: 037396 z_host_create_conn_send_conn_req: -0x40025 037397 jam 20 ,mem_mouse_send_switch_req_timer -0x40026 037398 branch host_create_conn_send_conn_req +: 037401 z_entrance3: +0x40001 037402 beq zcode_30 ,z_process_conn_sm +0x40002 037403 rtn +: 037405 z_process_conn_sm: +0x40003 037406 call lmo_fifo_check +0x40004 037407 nrtn blank +: 037408 z_process_conn_sm_continue: +0x40005 037409 fetch 1 ,mem_conn_sm +0x40006 037410 rtn blank +0x40007 037411 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req +0x40008 037412 beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch +0x40009 037413 branch process_conn_sm_continue + 2 +: 037416 z_host_creat_conn_wait_switch: +0x4000a 037417 fetch 1 ,mem_switch_flag +0x4000b 037418 rtneq switch_flag_init +0x4000c 037419 beq switch_flag_accept ,z_host_create_conn_switch_accept +0x4000d 037420 branch host_creat_conn_wait_switch + 3 +: 037421 z_host_create_conn_switch_accept: +0x4000e 037422 rtn master +: 037423 z_host_create_conn_auth_pair: +0x4000f 037425 fetch 1 ,mem_connection_options +0x40010 037426 bbit1 connection_auth ,z_host_create_conn_auth_pair_true +0x40011 037427 branch host_create_conn_auth_pair + 1 +: 037428 z_host_create_conn_auth_pair_true: +0x40012 037429 fetch 1 ,mem_bt_send_lmp_setup_complete +0x40013 037430 beq 1 ,host_create_conn_auth_pair_true +0x40014 037432 fetch 1 ,mem_link_key_exists +0x40015 037433 branch host_create_conn_auth_pair_nokey ,blank +0x40016 037434 fetch 1 ,mem_lmp_conn_state +0x40017 037435 rtnbit0 sent_setup_complete +0x40018 037436 rtnbit0 received_setup_complete +0x40019 037437 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x4001a 037438 rtn blank +0x4001b 037439 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch +0x4001c 037440 fetch 4 ,mem_aurand_send_delay_time +0x4001d 037441 arg 20 ,temp +0x4001e 037442 iadd temp ,temp +0x4001f 037443 copy clkn_bt ,pdata +0x40020 037444 isub temp ,null +0x40021 037445 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive +0x40022 037446 branch host_create_conn_auth +: 037448 z_bt_send_max_slot_req_accept_after_switch_wait: +0x40023 037449 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x40024 037450 rtn +: 037452 z_host_create_conn_send_conn_req: +0x40025 037453 jam 20 ,mem_mouse_send_switch_req_timer +0x40026 037454 branch host_create_conn_send_conn_req org 0x50001 -: 037406 z_entrance4: -0x50001 037407 beq zcode_40 ,z_le_update_param -0x50002 037408 beq zcode_41 ,z_le_update_channel_map -0x50003 037409 beq zcode_42 ,z_le_mouse_bb_event_connect_complete -0x50004 037411 rtn -: 037413 z_le_update_param: -0x50005 037414 call z_mouse_le_conn_param_check -0x50006 037415 branch le_update_param + 8 -: 037416 z_mouse_le_lpm_mult_reinit: -0x50007 037417 fetch 1 ,mem_lpm_mult_init -0x50008 037418 store 1 ,mem_lpm_mult -: 037419 z_mouse_le_conn_param_lpm_enable: -0x50009 037420 jam le_lpm_enable ,mem_mouse_le_conn_param_reject -0x5000a 037421 rtn -: 037422 z_mouse_le_conn_param_lpm_disable: -0x5000b 037423 jam le_lpm_disable ,mem_mouse_le_conn_param_reject -0x5000c 037424 rtn -: 037425 z_mouse_le_conn_param_check: -0x5000d 037426 fetch 1 ,mem_le_new_conninterval -0x5000e 037427 sub pdata ,le_interval_15ms ,null -0x5000f 037428 nbranch z_mouse_le_conn_param_lpm_disable ,positive -0x50010 037429 store 2 ,mem_le_interval_min -0x50011 037430 store 2 ,mem_le_interval_min + 2 -0x50012 037431 fetch 1 ,mem_le_new_connslavelatency -0x50013 037432 branch z_mouse_le_lpm_mult_reinit ,blank -0x50014 037433 fetcht 1 ,mem_lpm_mult_init -0x50015 037434 isub temp ,null -0x50016 037435 branch z_mouse_le_lpm_mult_reinit ,positive -0x50017 037436 fetch 1 ,mem_le_new_connslavelatency -0x50018 037437 store 1 ,mem_lpm_mult_init -0x50019 037438 branch z_mouse_le_conn_param_lpm_enable -: 037440 z_le_update_channel_map: -0x5001a 037441 fetch 1 ,mem_le_state -0x5001b 037442 rtnbit0 lestate_update_map -0x5001c 037443 call z_le_channel_map_overflow_check -0x5001d 037444 nrtn user -0x5001e 037445 branch le_update_channel_map + 3 -: 037446 z_le_channel_map_overflow_check: -0x5001f 037447 enable user -0x50020 037448 fetch 1 ,mem_le_event_count + 1 -0x50021 037449 rshift4 pdata ,pdata -0x50022 037450 rtnne 0x0f -0x50023 037451 fetch 1 ,mem_le_instant + 1 -0x50024 037452 rshift4 pdata ,pdata -0x50025 037453 rtnne 0x00 -0x50026 037454 branch disable_user -: 037456 z_le_mouse_bb_event_connect_complete: -0x50027 037457 fetch 1 ,mem_mouse_le_reconnect_flag -0x50028 037458 nrtn blank -0x50029 037459 fetch 1 ,mem_le_att_handle -0x5002a 037460 sub pdata ,26 ,pdata -0x5002b 037461 nrtn zero -0x5002c 037462 jam 0 ,mem_le_start_encrypt_timer -0x5002d 037463 branch mouse_le_write_enable -: 037465 z_quit_connection_cont: -0x5002e 037466 call app_disconn_reason_collect_bt -0x5002f 037467 call sniff_exit -0x50030 037468 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x50031 037469 call ui_ipc_send_event -0x50032 037470 call init_lmp_work -0x50033 037471 call l2cap_init_work -0x50034 037472 branch quit_connection_cont + 8 +: 037462 z_entrance4: +0x50001 037463 beq zcode_40 ,z_le_update_param +0x50002 037464 beq zcode_41 ,z_le_update_channel_map +0x50003 037465 beq zcode_42 ,z_le_mouse_bb_event_connect_complete +0x50004 037467 rtn +: 037469 z_le_update_param: +0x50005 037470 call z_mouse_le_conn_param_check +0x50006 037471 branch le_update_param + 8 +: 037472 z_mouse_le_lpm_mult_reinit: +0x50007 037473 fetch 1 ,mem_lpm_mult_init +0x50008 037474 store 1 ,mem_lpm_mult +: 037475 z_mouse_le_conn_param_lpm_enable: +0x50009 037476 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +0x5000a 037477 rtn +: 037478 z_mouse_le_conn_param_lpm_disable: +0x5000b 037479 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +0x5000c 037480 rtn +: 037481 z_mouse_le_conn_param_check: +0x5000d 037482 fetch 1 ,mem_le_new_conninterval +0x5000e 037483 sub pdata ,le_interval_15ms ,null +0x5000f 037484 nbranch z_mouse_le_conn_param_lpm_disable ,positive +0x50010 037485 store 2 ,mem_le_interval_min +0x50011 037486 store 2 ,mem_le_interval_min + 2 +0x50012 037487 fetch 1 ,mem_le_new_connslavelatency +0x50013 037488 branch z_mouse_le_lpm_mult_reinit ,blank +0x50014 037489 fetcht 1 ,mem_lpm_mult_init +0x50015 037490 isub temp ,null +0x50016 037491 branch z_mouse_le_lpm_mult_reinit ,positive +0x50017 037492 fetch 1 ,mem_le_new_connslavelatency +0x50018 037493 store 1 ,mem_lpm_mult_init +0x50019 037494 branch z_mouse_le_conn_param_lpm_enable +: 037496 z_le_update_channel_map: +0x5001a 037497 fetch 1 ,mem_le_state +0x5001b 037498 rtnbit0 lestate_update_map +0x5001c 037499 call z_le_channel_map_overflow_check +0x5001d 037500 nrtn user +0x5001e 037501 branch le_update_channel_map + 3 +: 037502 z_le_channel_map_overflow_check: +0x5001f 037503 enable user +0x50020 037504 fetch 1 ,mem_le_event_count + 1 +0x50021 037505 rshift4 pdata ,pdata +0x50022 037506 rtnne 0x0f +0x50023 037507 fetch 1 ,mem_le_instant + 1 +0x50024 037508 rshift4 pdata ,pdata +0x50025 037509 rtnne 0x00 +0x50026 037510 branch disable_user +: 037512 z_le_mouse_bb_event_connect_complete: +0x50027 037513 fetch 1 ,mem_mouse_le_reconnect_flag +0x50028 037514 nrtn blank +0x50029 037515 fetch 1 ,mem_le_att_handle +0x5002a 037516 sub pdata ,26 ,pdata +0x5002b 037517 nrtn zero +0x5002c 037518 jam 0 ,mem_le_start_encrypt_timer +0x5002d 037519 branch mouse_le_write_enable +: 037521 z_quit_connection_cont: +0x5002e 037522 call app_disconn_reason_collect_bt +0x5002f 037523 call sniff_exit +0x50030 037524 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x50031 037525 call ui_ipc_send_event +0x50032 037526 call init_lmp_work +0x50033 037527 call l2cap_init_work +0x50034 037528 branch quit_connection_cont + 8 org 0x60001 -: 037476 z_entrance5: -0x60001 037477 beq zcode_50 ,z_mouse_start_discovery -0x60002 037478 rtn -: 037481 z_mouse_start_discovery: -0x60003 037482 jam 0 ,mem_le_send_security_request_flag -0x60004 037483 call p_mouse_tx_power_init -0x60005 037484 jam 0 ,mem_mouse_clear_sensor_data_flag -0x60006 037485 fetch 2 ,mem_ui_state_map -0x60007 037486 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom -0x60008 037489 call p_mouse_load_random_addr_increase_count -0x60009 037490 fetcht 2 ,mem_random_addr_increase_count -0x6000a 037491 increase 1 ,temp -0x6000b 037492 storet 2 ,mem_random_addr_increase_count -0x6000c 037493 storet 2 ,mem_le_lap + 1 -0x6000d 037494 call p_mouse_store_random_addr_increase_count -0x6000e 037495 random pdata -0x6000f 037496 store 1 ,mem_le_lap -: 037497 z_mouse_start_discovery_norandom: -0x60010 037498 fetch 3 ,mem_le_lap_high_3b -0x60011 037499 store 3 ,mem_le_lap + 3 -0x60012 037500 call p_mouse_le_fast_conn_disable -0x60013 037501 call app_lpm_mult_disable -0x60014 037502 fetch 2 ,mem_discovery_timeout -0x60015 037503 store 2 ,mem_mouse_discovery_timer -0x60016 037504 jam 6 ,mem_connection_options -0x60017 037505 setarg 0 -0x60018 037506 store 2 ,mem_mouse_no_data_timer -0x60019 037507 store 2 ,mem_mouse_direct_timer -0x6001a 037508 arg mouse_store_eeprom_flag ,queue -0x6001b 037509 call mouse_enable_function_flag -0x6001c 037510 call mouse_bt_discovery_button_down_disable -0x6001d 037511 fetch 1 ,mem_device_option -0x6001e 037512 isolate1 mode_4_mouse ,pdata -0x6001f 037513 call z_check_51cmd_adv ,true -0x60020 037514 fetch 1 ,mem_device_option -0x60021 037515 isolate1 mode_3_mouse ,pdata -0x60022 037516 call check_51cmd_start_discovery ,true -0x60023 037519 jam 0 ,mem_mouse_bt_reconnect_flag -0x60024 037520 call mouse_start_discovery_norandom + 13 -0x60025 037521 branch p_mouse_discovery_multi_led_blink -: 037523 z_check_51cmd_adv: -0x60026 037524 jam 0 ,mem_mouse_le_reconnect_flag -0x60027 037525 call p_le_check_adv_flag -0x60028 037526 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable -0x60029 037527 istore 1 ,contr -0x6002a 037528 arg mem_le_adv_swift_pair ,contr -0x6002b 037529 call p_le_adv_data_update -0x6002c 037530 branch check_51cmd_adv +: 037532 z_entrance5: +0x60001 037533 beq zcode_50 ,z_mouse_start_discovery +0x60002 037534 rtn +: 037537 z_mouse_start_discovery: +0x60003 037538 jam 0 ,mem_le_send_security_request_flag +0x60004 037539 call p_mouse_tx_power_init +0x60005 037540 jam 0 ,mem_mouse_clear_sensor_data_flag +0x60006 037541 fetch 2 ,mem_ui_state_map +0x60007 037542 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom +0x60008 037545 call p_mouse_load_random_addr_increase_count +0x60009 037546 fetcht 2 ,mem_random_addr_increase_count +0x6000a 037547 increase 1 ,temp +0x6000b 037548 storet 2 ,mem_random_addr_increase_count +0x6000c 037549 storet 2 ,mem_le_lap + 1 +0x6000d 037550 call p_mouse_store_random_addr_increase_count +0x6000e 037551 random pdata +0x6000f 037552 store 1 ,mem_le_lap +: 037553 z_mouse_start_discovery_norandom: +0x60010 037554 fetch 3 ,mem_le_lap_high_3b +0x60011 037555 store 3 ,mem_le_lap + 3 +0x60012 037556 call p_mouse_le_fast_conn_disable +0x60013 037557 call app_lpm_mult_disable +0x60014 037558 fetch 2 ,mem_discovery_timeout +0x60015 037559 store 2 ,mem_mouse_discovery_timer +0x60016 037560 jam 6 ,mem_connection_options +0x60017 037561 setarg 0 +0x60018 037562 store 2 ,mem_mouse_no_data_timer +0x60019 037563 store 2 ,mem_mouse_direct_timer +0x6001a 037564 arg mouse_store_eeprom_flag ,queue +0x6001b 037565 call mouse_enable_function_flag +0x6001c 037566 call mouse_bt_discovery_button_down_disable +0x6001d 037567 fetch 1 ,mem_device_option +0x6001e 037568 isolate1 mode_4_mouse ,pdata +0x6001f 037569 call z_check_51cmd_adv ,true +0x60020 037570 fetch 1 ,mem_device_option +0x60021 037571 isolate1 mode_3_mouse ,pdata +0x60022 037572 call check_51cmd_start_discovery ,true +0x60023 037575 jam 0 ,mem_mouse_bt_reconnect_flag +0x60024 037576 call mouse_start_discovery_norandom + 13 +0x60025 037577 branch p_mouse_discovery_multi_led_blink +: 037579 z_check_51cmd_adv: +0x60026 037580 jam 0 ,mem_mouse_le_reconnect_flag +0x60027 037581 call p_le_check_adv_flag +0x60028 037582 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable +0x60029 037583 istore 1 ,contr +0x6002a 037584 arg mem_le_adv_swift_pair ,contr +0x6002b 037585 call p_le_adv_data_update +0x6002c 037586 branch check_51cmd_adv org 0x70001 -: 037534 z_entrance6: -0x70001 037535 beq zcode_60 ,z_g24_start_24g_mode -0x70002 037536 beq zcode_61 ,z_g24_auto_pair_start -0x70003 037537 beq zcode_62 ,z_mouse_24g_pairing_button -0x70004 037538 rtn -: 037540 z_g24_start_24g_mode: -0x70005 037541 call z_g24_factory_check -0x70006 037542 branch p_g24_auto_pair_start ,user -0x70007 037543 set1 mark_24g ,mark -0x70008 037544 fetch 1 ,mem_24g_conn_sm -0x70009 037545 set1 state_24g_reconn ,pdata -0x7000a 037546 store 1 ,mem_24g_conn_sm -0x7000b 037547 call p_g24_syncword_crc8 -0x7000c 037548 call p_g24_ch -0x7000d 037549 branch z_g24_auto_pair_timeout_init -: 037551 z_g24_factory_check: -0x7000e 037552 arg 2 ,loopcnt -0x7000f 037553 arg mem_24g_addr ,contr -0x70010 037554 call enable_user -0x70011 037555 setarg 0xffff -: 037556 z4_pdata_0xff_check_loop: -0x70012 037557 ifetcht 2 ,contr -0x70013 037558 isub temp ,null -0x70014 037559 ncall disable_user ,zero -0x70015 037560 loop z4_pdata_0xff_check_loop -0x70016 037561 rtn -: 037563 z_g24_auto_pair_start: -0x70017 037564 set1 mark_24g ,mark -0x70018 037565 fetch 1 ,mem_24g_conn_sm -0x70019 037566 set1 state_24g_pair ,pdata -0x7001a 037567 store 1 ,mem_24g_conn_sm -: 037568 z_g24_auto_pair_timeout_init: -0x7001b 037569 setarg g24_first_disconn_nodata_timer -0x7001c 037570 store 2 ,mem_24g_stop_g24_mode_timeout -0x7001d 037571 jam 0 ,mem_24g_stop_g24_mode -0x7001e 037572 rtn -: 037574 z_mouse_24g_pairing_button: -0x7001f 037575 fetch mouse_flag_len ,mem_mouse_flag -0x70020 037576 rtnbit0 mouse_enable_24g -0x70021 037577 rtnbit1 mosue_24g_pairing_flag -0x70022 037578 rtnmark1 mark_24g -0x70023 037579 call mouse_devce_led_off -0x70024 037580 arg mosue_24g_pairing_flag ,queue -0x70025 037581 call mouse_enable_function_flag -0x70026 037582 setarg 0 -0x70027 037583 store 2 ,mem_mouse_direct_timer -0x70028 037584 store 1 ,mem_mouse_send_blank_timer -0x70029 037585 store 2 ,mem_24g_check_dongle_times -0x7002a 037586 call mouse_stop_discovery -0x7002b 037587 branch p_g24_auto_pair_start +: 037590 z_entrance6: +0x70001 037591 beq zcode_60 ,z_g24_start_24g_mode +0x70002 037592 beq zcode_61 ,z_g24_auto_pair_start +0x70003 037593 beq zcode_62 ,z_mouse_24g_pairing_button +0x70004 037594 rtn +: 037596 z_g24_start_24g_mode: +0x70005 037597 call z_g24_factory_check +0x70006 037598 branch p_g24_auto_pair_start ,user +0x70007 037599 set1 mark_24g ,mark +0x70008 037600 fetch 1 ,mem_24g_conn_sm +0x70009 037601 set1 state_24g_reconn ,pdata +0x7000a 037602 store 1 ,mem_24g_conn_sm +0x7000b 037603 call p_g24_syncword_crc8 +0x7000c 037604 call p_g24_ch +0x7000d 037605 branch z_g24_auto_pair_timeout_init +: 037607 z_g24_factory_check: +0x7000e 037608 arg 2 ,loopcnt +0x7000f 037609 arg mem_24g_addr ,contr +0x70010 037610 call enable_user +0x70011 037611 setarg 0xffff +: 037612 z4_pdata_0xff_check_loop: +0x70012 037613 ifetcht 2 ,contr +0x70013 037614 isub temp ,null +0x70014 037615 ncall disable_user ,zero +0x70015 037616 loop z4_pdata_0xff_check_loop +0x70016 037617 rtn +: 037619 z_g24_auto_pair_start: +0x70017 037620 set1 mark_24g ,mark +0x70018 037621 fetch 1 ,mem_24g_conn_sm +0x70019 037622 set1 state_24g_pair ,pdata +0x7001a 037623 store 1 ,mem_24g_conn_sm +: 037624 z_g24_auto_pair_timeout_init: +0x7001b 037625 setarg g24_first_disconn_nodata_timer +0x7001c 037626 store 2 ,mem_24g_stop_g24_mode_timeout +0x7001d 037627 jam 0 ,mem_24g_stop_g24_mode +0x7001e 037628 rtn +: 037630 z_mouse_24g_pairing_button: +0x7001f 037631 fetch mouse_flag_len ,mem_mouse_flag +0x70020 037632 rtnbit0 mouse_enable_24g +0x70021 037633 rtnbit1 mosue_24g_pairing_flag +0x70022 037634 rtnmark1 mark_24g +0x70023 037635 call mouse_devce_led_off +0x70024 037636 arg mosue_24g_pairing_flag ,queue +0x70025 037637 call mouse_enable_function_flag +0x70026 037638 setarg 0 +0x70027 037639 store 2 ,mem_mouse_direct_timer +0x70028 037640 store 1 ,mem_mouse_send_blank_timer +0x70029 037641 store 2 ,mem_24g_check_dongle_times +0x7002a 037642 call mouse_stop_discovery +0x7002b 037643 branch p_g24_auto_pair_start org 0x80001 -: 037592 z_entrance7: -0x80001 037593 beq zcode_70 ,z_g24_reconn_dispatch -0x80002 037594 beq zcode_71 ,z_mouse_irtual_cable_unplug -0x80003 037595 rtn -: 037597 z_g24_reconn_dispatch: -0x80004 037598 fetch 1 ,mem_24g_stop_g24_mode -0x80005 037599 beq 1 ,g24_stop_24g_mode -0x80006 037600 call z_g24_tx_attemp_data_prep -0x80007 037601 call p_g24_transmit_receive_ack -0x80008 037602 nbranch p_g24_ch ,sync -0x80009 037603 nbranch p_g24_ch ,user3 -0x8000a 037604 fetch 1 ,mem_24g_conn_sm -0x8000b 037605 set0 state_24g_reconn ,pdata -0x8000c 037606 store 1 ,mem_24g_conn_sm -: 037607 z_g24_tx_attemp_dongle_succ: -0x8000d 037608 jam 0 ,mem_mouse_long_mult_flag -0x8000e 037609 call g24_app_tx_attempt_success -0x8000f 037610 call p_g24_txbuf_clear -0x80010 037611 branch p_g24_transmit_by_interrupt_enable -: 037613 z_g24_tx_attemp_data_prep: -0x80011 037614 jam 0xff ,mem_24g_common_temp -0x80012 037615 fetch 1 ,mem_24g_data_type -0x80013 037616 store 1 ,mem_24g_common_temp + 1 -0x80014 037617 fetch 4 ,mem_24g_device_addr -0x80015 037618 store 4 ,mem_24g_common_temp + 2 -0x80016 037619 arg 6 ,temp -0x80017 037620 arg mem_24g_common_temp ,rega -0x80018 037621 call p_g24_put_data_in_buff -0x80019 037622 branch p_g24_transmit_prep -: 037624 z_mouse_irtual_cable_unplug: -0x8001a 037625 setarg -1 -0x8001b 037626 store 6 ,mem_plap -0x8001c 037627 jam rec_3_mode ,mem_record_bt_mode -0x8001d 037628 jam 0xff ,mem_mouse_fast_conn_flag -0x8001e 037629 call mouse_before_store_reconn_info -0x8001f 037630 jam 0xff ,mem_device1_type -0x80020 037631 branch p_mouse_store_flash_device_info +: 037648 z_entrance7: +0x80001 037649 beq zcode_70 ,z_g24_reconn_dispatch +0x80002 037650 beq zcode_71 ,z_mouse_irtual_cable_unplug +0x80003 037651 rtn +: 037653 z_g24_reconn_dispatch: +0x80004 037654 fetch 1 ,mem_24g_stop_g24_mode +0x80005 037655 beq 1 ,g24_stop_24g_mode +0x80006 037656 call z_g24_tx_attemp_data_prep +0x80007 037657 call p_g24_transmit_receive_ack +0x80008 037658 nbranch p_g24_ch ,sync +0x80009 037659 nbranch p_g24_ch ,user3 +0x8000a 037660 fetch 1 ,mem_24g_conn_sm +0x8000b 037661 set0 state_24g_reconn ,pdata +0x8000c 037662 store 1 ,mem_24g_conn_sm +: 037663 z_g24_tx_attemp_dongle_succ: +0x8000d 037664 jam 0 ,mem_mouse_long_mult_flag +0x8000e 037665 call g24_app_tx_attempt_success +0x8000f 037666 call p_g24_txbuf_clear +0x80010 037667 branch p_g24_transmit_by_interrupt_enable +: 037669 z_g24_tx_attemp_data_prep: +0x80011 037670 jam 0xff ,mem_24g_common_temp +0x80012 037671 fetch 1 ,mem_24g_data_type +0x80013 037672 store 1 ,mem_24g_common_temp + 1 +0x80014 037673 fetch 4 ,mem_24g_device_addr +0x80015 037674 store 4 ,mem_24g_common_temp + 2 +0x80016 037675 arg 6 ,temp +0x80017 037676 arg mem_24g_common_temp ,rega +0x80018 037677 call p_g24_put_data_in_buff +0x80019 037678 branch p_g24_transmit_prep +: 037680 z_mouse_irtual_cable_unplug: +0x8001a 037681 setarg -1 +0x8001b 037682 store 6 ,mem_plap +0x8001c 037683 jam rec_3_mode ,mem_record_bt_mode +0x8001d 037684 jam 0xff ,mem_mouse_fast_conn_flag +0x8001e 037685 call mouse_before_store_reconn_info +0x8001f 037686 jam 0xff ,mem_device1_type +0x80020 037687 branch p_mouse_store_flash_device_info org 0x90001 -: 037636 z_entrance8: -0x90001 037637 beq zcode_80 ,z_mouse_setting_config -0x90002 037638 beq zcode_81 ,z_le_addr_random_config -0x90003 037640 rtn -: 037649 z_le_addr_random_config: -0x90004 037650 call load_adc_init -0x90005 037651 fetch 2 ,mem_0_5_adc_io_data -0x90006 037652 nbranch z_le_otp_adc_empty ,blank -0x90007 037653 setarg 0x1122 -: 037654 z_le_otp_adc_empty: -0x90008 037655 store 2 ,mem_random_addr_increase_count -0x90009 037656 rtn -: 037659 z_mouse_setting_config: -0x9000a 037660 fetch 4 ,mem_lap -0x9000b 037661 store 4 ,mem_24g_device_addr -0x9000c 037666 call mouse_gpio_init -0x9000d 037668 fetcht 1 ,mem_flash_ncs_gpio -0x9000e 037669 call gpio_config_output -0x9000f 037671 call mouse_param_init -0x90010 037676 call z_mouse_bt_sdp_update -0x90011 037677 setarg 0 -0x90012 037678 store 2 ,mem_lpm_interval -0x90013 037679 call load_adc_init -0x90014 037680 call mouse_adc_init -0x90015 037681 call le_set_config_fixed_ltk -0x90016 037682 call le_set_justwork -0x90017 037683 call le_set_fixed_ltk -0x90018 037684 call le_set_config_read_authentication -0x90019 037685 call p_le_addr_random_config -0x9001a 037686 call p_mouse_load_flash_info_check -0x9001b 037687 arg 3 ,loopcnt -0x9001c 037688 arg mem_device2_addr ,contr -0x9001d 037689 call p_pdata_0xff_check -0x9001e 037690 nbranch p_mouse_le_fast_conn_disable ,user -0x9001f 037691 arg 3 ,loopcnt -0x90020 037692 arg mem_device3_addr ,contr -0x90021 037693 call p_pdata_0xff_check -0x90022 037694 nbranch p_mouse_le_fast_conn_disable ,user -0x90023 037695 call p_mouse_fast_conn_init -0x90024 037696 rtn -: 037698 z_mouse_bt_sdp_update: -0x90025 037699 call enable_authrom -0x90026 037700 arg 0x8c00 ,contr -0x90027 037701 arg mem_mouse_uuid_list ,contw -0x90028 037702 arg 369 ,loopcnt -0x90029 037703 call memcpy -0x9002a 037705 setarg 0x0f0209 -0x9002b 037706 istore 3 ,contw -0x9002c 037707 setarg 0x120009 -0x9002d 037708 istore 3 ,contw -0x9002e 037710 setarg 0x100209 -0x9002f 037711 istore 3 ,contw -0x90030 037712 setarg 0x000009 -0x90031 037713 istore 3 ,contw -0x90032 037714 arg 0x8d71 ,contr -0x90033 037715 arg 265 ,loopcnt -0x90034 037716 call memcpy -0x90035 037718 jam 0 ,mem_mouse_uuid_list + 23 -0x90036 037719 jam 0x6d ,mem_mouse_uuid_list + 15 -0x90037 037720 setarg 0x401f -0x90038 037721 store 2 ,mem_mouse_uuid_list + 357 -0x90039 037722 setarg 0x6d04 -0x9003a 037723 store 2 ,mem_mouse_uuid_list + 462 -0x9003b 037724 setarg 0x16b0 -0x9003c 037725 store 2 ,mem_mouse_uuid_list + 468 -0x9003d 037727 setarg mem_mouse_uuid_list -0x9003e 037728 store 2 ,mem_ui_uuid_table -0x9003f 037729 rtn +: 037692 z_entrance8: +0x90001 037693 beq zcode_80 ,z_mouse_setting_config +0x90002 037694 beq zcode_81 ,z_le_addr_random_config +0x90003 037696 rtn +: 037705 z_le_addr_random_config: +0x90004 037706 call load_adc_init +0x90005 037707 fetch 2 ,mem_0_5_adc_io_data +0x90006 037708 nbranch z_le_otp_adc_empty ,blank +0x90007 037709 setarg 0x1122 +: 037710 z_le_otp_adc_empty: +0x90008 037711 store 2 ,mem_random_addr_increase_count +0x90009 037712 rtn +: 037715 z_mouse_setting_config: +0x9000a 037716 fetch 4 ,mem_lap +0x9000b 037717 store 4 ,mem_24g_device_addr +0x9000c 037722 call mouse_gpio_init +0x9000d 037724 fetcht 1 ,mem_flash_ncs_gpio +0x9000e 037725 call gpio_config_output +0x9000f 037727 call mouse_param_init +0x90010 037732 call z_mouse_bt_sdp_update +0x90011 037733 setarg 0 +0x90012 037734 store 2 ,mem_lpm_interval +0x90013 037735 call load_adc_init +0x90014 037736 call mouse_adc_init +0x90015 037737 call le_set_config_fixed_ltk +0x90016 037738 call le_set_justwork +0x90017 037739 call le_set_fixed_ltk +0x90018 037740 call le_set_config_read_authentication +0x90019 037741 call p_le_addr_random_config +0x9001a 037742 call p_mouse_load_flash_info_check +0x9001b 037743 arg 3 ,loopcnt +0x9001c 037744 arg mem_device2_addr ,contr +0x9001d 037745 call p_pdata_0xff_check +0x9001e 037746 nbranch p_mouse_le_fast_conn_disable ,user +0x9001f 037747 arg 3 ,loopcnt +0x90020 037748 arg mem_device3_addr ,contr +0x90021 037749 call p_pdata_0xff_check +0x90022 037750 nbranch p_mouse_le_fast_conn_disable ,user +0x90023 037751 call p_mouse_fast_conn_init +0x90024 037752 rtn +: 037754 z_mouse_bt_sdp_update: +0x90025 037755 call enable_authrom +0x90026 037756 arg 0x8c00 ,contr +0x90027 037757 arg mem_mouse_uuid_list ,contw +0x90028 037758 arg 369 ,loopcnt +0x90029 037759 call memcpy +0x9002a 037761 setarg 0x0f0209 +0x9002b 037762 istore 3 ,contw +0x9002c 037763 setarg 0x120009 +0x9002d 037764 istore 3 ,contw +0x9002e 037766 setarg 0x100209 +0x9002f 037767 istore 3 ,contw +0x90030 037768 setarg 0x000009 +0x90031 037769 istore 3 ,contw +0x90032 037770 arg 0x8d71 ,contr +0x90033 037771 arg 265 ,loopcnt +0x90034 037772 call memcpy +0x90035 037774 jam 0 ,mem_mouse_uuid_list + 23 +0x90036 037775 jam 0x6d ,mem_mouse_uuid_list + 15 +0x90037 037776 setarg 0x401f +0x90038 037777 store 2 ,mem_mouse_uuid_list + 357 +0x90039 037778 setarg 0x6d04 +0x9003a 037779 store 2 ,mem_mouse_uuid_list + 462 +0x9003b 037780 setarg 0x16b0 +0x9003c 037781 store 2 ,mem_mouse_uuid_list + 468 +0x9003d 037783 setarg mem_mouse_uuid_list +0x9003e 037784 store 2 ,mem_ui_uuid_table +0x9003f 037785 rtn org 0xa0001 -: 037735 z_entrance9: -0xa0001 037736 beq zcode_90 ,z_g24_pairing_sm -0xa0002 037737 beq zcode_91 ,z_g24_paring_mode -0xa0003 037738 beq zcode_92 ,z_mouse_24g_pairing_complete -0xa0004 037739 rtn -: 037741 z_g24_pairing_sm: -0xa0005 037742 fetch 1 ,mem_24g_ensure -0xa0006 037743 beq ensure_on_24g ,enable_user -0xa0007 037744 fetch 1 ,mem_24g_pairing_sm -0xa0008 037745 beq state_24g_pairing_1 ,z_g24_pairing_sm_1 -0xa0009 037746 beq state_24g_pairing_2 ,z_g24_pairing_sm_2 -0xa000a 037747 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 -0xa000b 037748 branch assert -: 037750 z_g24_pairing_sm_1: -0xa000c 037751 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm -0xa000d 037752 jam 0xaa ,mem_24g_common_temp -0xa000e 037753 branch z_g24_pairing_sm_common -: 037754 z_g24_pairing_sm_2: -0xa000f 037755 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm -0xa0010 037756 jam 0x55 ,mem_24g_common_temp -0xa0011 037757 branch z_g24_pairing_sm_common -: 037758 z_g24_pairing_sm_3: -0xa0012 037759 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm -0xa0013 037760 jam 0x22 ,mem_24g_common_temp -: 037761 z_g24_pairing_sm_common: -0xa0014 037762 fetch 1 ,mem_24g_data_type -0xa0015 037763 and_into bits_data ,pdata -0xa0016 037764 store 1 ,mem_24g_common_temp + 1 -0xa0017 037765 fetch 4 ,mem_24g_device_addr -0xa0018 037766 store 4 ,mem_24g_common_temp + 2 -: 037767 z_g24_put_pairing_data_in_buff: -0xa0019 037768 jam 0 ,mem_24g_common_temp + 6 -0xa001a 037769 arg mem_24g_common_temp ,rega -0xa001b 037770 arg 7 ,temp -0xa001c 037771 call p_g24_put_data_in_buff -0xa001d 037772 call p_g24_txdata_enable_tx -0xa001e 037773 branch enable_user -: 037775 z_g24_paring_mode: -0xa001f 037776 fetch 1 ,mem_24g_pairing_sm -0xa0020 037777 rtneq state_24g_pairing_success -0xa0021 037778 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack -0xa0022 037779 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack -0xa0023 037780 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack -0xa0024 037781 rtn -: 037783 z_g24_pairing_sm_1_waiting_ack: -0xa0025 037784 jam state_24g_pairing_2 ,mem_24g_pairing_sm -0xa0026 037785 branch p_g24_transmit_abandon -: 037786 z_g24_pairing_sm_2_waiting_ack: -0xa0027 037787 jam state_24g_pairing_3 ,mem_24g_pairing_sm -0xa0028 037788 branch p_g24_transmit_abandon -: 037789 z_g24_pairing_sm_3_waiting_ack: -0xa0029 037790 jam state_24g_pairing_success ,mem_24g_pairing_sm -0xa002a 037791 jam bt_evt_24g_pairing_complete ,mem_fifo_temp -0xa002b 037792 call ui_ipc_send_event -0xa002c 037793 fetch 4 ,mem_24g_rxpayload + 2 -0xa002d 037794 call p_g24_update_addr_and_synccrc8 -0xa002e 037795 branch p_g24_transmit_abandon -: 037798 z_mouse_24g_pairing_complete: -0xa002f 037799 call p_mouse_24g_no_data_timer_init -0xa0030 037800 jam 1 ,mem_mouse_24g_enter_lpm_enable -0xa0031 037801 arg mosue_24g_pairing_flag ,queue -0xa0032 037802 call mouse_disable_function_flag -0xa0033 037803 setarg 0 -0xa0034 037804 store 2 ,mem_24g_pairing_timer_count -0xa0035 037805 jam 0 ,mem_mouse_move_flag -0xa0036 037807 call mouse_read_sensor_common -0xa0037 037809 call p_mouse_tx_power_init -0xa0038 037811 fetch 4 ,mem_24g_addr -0xa0039 037812 store 4 ,mem_mouse_24g_addr -0xa003a 037814 branch p_mouse_store_flash_device_info +: 037791 z_entrance9: +0xa0001 037792 beq zcode_90 ,z_g24_pairing_sm +0xa0002 037793 beq zcode_91 ,z_g24_paring_mode +0xa0003 037794 beq zcode_92 ,z_mouse_24g_pairing_complete +0xa0004 037795 rtn +: 037797 z_g24_pairing_sm: +0xa0005 037798 fetch 1 ,mem_24g_ensure +0xa0006 037799 beq ensure_on_24g ,enable_user +0xa0007 037800 fetch 1 ,mem_24g_pairing_sm +0xa0008 037801 beq state_24g_pairing_1 ,z_g24_pairing_sm_1 +0xa0009 037802 beq state_24g_pairing_2 ,z_g24_pairing_sm_2 +0xa000a 037803 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 +0xa000b 037804 branch assert +: 037806 z_g24_pairing_sm_1: +0xa000c 037807 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm +0xa000d 037808 jam 0xaa ,mem_24g_common_temp +0xa000e 037809 branch z_g24_pairing_sm_common +: 037810 z_g24_pairing_sm_2: +0xa000f 037811 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm +0xa0010 037812 jam 0x55 ,mem_24g_common_temp +0xa0011 037813 branch z_g24_pairing_sm_common +: 037814 z_g24_pairing_sm_3: +0xa0012 037815 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm +0xa0013 037816 jam 0x22 ,mem_24g_common_temp +: 037817 z_g24_pairing_sm_common: +0xa0014 037818 fetch 1 ,mem_24g_data_type +0xa0015 037819 and_into bits_data ,pdata +0xa0016 037820 store 1 ,mem_24g_common_temp + 1 +0xa0017 037821 fetch 4 ,mem_24g_device_addr +0xa0018 037822 store 4 ,mem_24g_common_temp + 2 +: 037823 z_g24_put_pairing_data_in_buff: +0xa0019 037824 jam 0 ,mem_24g_common_temp + 6 +0xa001a 037825 arg mem_24g_common_temp ,rega +0xa001b 037826 arg 7 ,temp +0xa001c 037827 call p_g24_put_data_in_buff +0xa001d 037828 call p_g24_txdata_enable_tx +0xa001e 037829 branch enable_user +: 037831 z_g24_paring_mode: +0xa001f 037832 fetch 1 ,mem_24g_pairing_sm +0xa0020 037833 rtneq state_24g_pairing_success +0xa0021 037834 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack +0xa0022 037835 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack +0xa0023 037836 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack +0xa0024 037837 rtn +: 037839 z_g24_pairing_sm_1_waiting_ack: +0xa0025 037840 jam state_24g_pairing_2 ,mem_24g_pairing_sm +0xa0026 037841 branch p_g24_transmit_abandon +: 037842 z_g24_pairing_sm_2_waiting_ack: +0xa0027 037843 jam state_24g_pairing_3 ,mem_24g_pairing_sm +0xa0028 037844 branch p_g24_transmit_abandon +: 037845 z_g24_pairing_sm_3_waiting_ack: +0xa0029 037846 jam state_24g_pairing_success ,mem_24g_pairing_sm +0xa002a 037847 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0xa002b 037848 call ui_ipc_send_event +0xa002c 037849 fetch 4 ,mem_24g_rxpayload + 2 +0xa002d 037850 call p_g24_update_addr_and_synccrc8 +0xa002e 037851 branch p_g24_transmit_abandon +: 037854 z_mouse_24g_pairing_complete: +0xa002f 037855 call p_mouse_24g_no_data_timer_init +0xa0030 037856 jam 1 ,mem_mouse_24g_enter_lpm_enable +0xa0031 037857 arg mosue_24g_pairing_flag ,queue +0xa0032 037858 call mouse_disable_function_flag +0xa0033 037859 setarg 0 +0xa0034 037860 store 2 ,mem_24g_pairing_timer_count +0xa0035 037861 jam 0 ,mem_mouse_move_flag +0xa0036 037863 call mouse_read_sensor_common +0xa0037 037865 call p_mouse_tx_power_init +0xa0038 037867 fetch 4 ,mem_24g_addr +0xa0039 037868 store 4 ,mem_mouse_24g_addr +0xa003a 037870 branch p_mouse_store_flash_device_info org 0xb0001 -: 037819 z_entrancea: -0xb0001 037820 beq zcode_a0 ,z_mouse_24g_attempt_fail -0xb0002 037821 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved -0xb0003 037822 beq zcode_a2 ,z_mouse_le_bb_disconnected -0xb0004 037823 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout -0xb0005 037824 beq zcode_a4 ,z_mouse_before_hibernate -0xb0006 037825 rtn -: 037827 z_mouse_24g_attempt_fail: -0xb0007 037828 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -0xb0008 037829 call p_mouse_tx_power_init -0xb0009 037830 call p_g24_check_51cmd_stop_24g -0xb000a 037831 jam 0 ,mem_link_key_exists -0xb000b 037833 fetch 1 ,mem_mouse_multi_led_blink_count -0xb000c 037834 nrtn blank -0xb000d 037836 call p_mouse_setgpio_hibernate -0xb000e 037837 branch app_enter_hibernate -: 037839 z_mouse_le_conn_param_update_rsp_recieved: -0xb000f 037840 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0xb0010 037841 rtneq ble_signaling_connect_parameter_update_accepted -0xb0011 037842 fetch 1 ,mem_le_tsniff -0xb0012 037843 rshift2 pdata ,pdata -0xb0013 037844 sub pdata ,le_interval_15ms ,null -0xb0014 037845 rtn positive -0xb0015 037846 setarg le_interval_11_25ms -0xb0016 037847 store 2 ,mem_le_interval_min -0xb0017 037848 store 2 ,mem_le_interval_min + 2 -0xb0018 037849 call p_app_updata_le_param -0xb0019 037850 jam le_lpm_disable ,mem_mouse_le_conn_param_reject -0xb001a 037851 rtn -: 037854 z_mouse_bb_event_reconn_timeout: -: 037855 z_mouse_bb_event_reconn_failed: -0xb001b 037856 fetch 2 ,mem_ui_state_map -0xb001c 037857 rtnbit1 ui_state_btn_down -0xb001d 037858 rtnbit1 ui_state_bt_discovery -0xb001e 037859 rtnbit1 ui_state_ble_adv -0xb001f 037860 fetch mouse_flag_len ,mem_mouse_flag -0xb0020 037861 rtnbit1 mouse_bt_discovery_button_down_flag -0xb0021 037862 branch app_bb_hibernate -: 037864 z_mouse_le_bb_disconnected: -0xb0022 037865 fetch 1 ,mem_select_device_button_statue_bt_discovery -0xb0023 037866 call p_mouse_le_bb_disconnected_led_blink_set ,blank -0xb0024 037867 jam off ,mem_select_device_button_statue_bt_discovery -0xb0025 037868 jam 0 ,mem_mouse_le_bb_connected_flag -0xb0026 037869 setarg le_interval_8_75ms -0xb0027 037870 store 2 ,mem_le_interval_min -0xb0028 037871 store 2 ,mem_le_interval_min + 2 -0xb0029 037872 jam le_lpm_enable ,mem_mouse_le_conn_param_reject -0xb002a 037873 jam 0 ,mem_mouse_clear_sensor_data_flag -0xb002b 037874 call p_mouse_data_init -0xb002c 037875 call le_clr_config_more_data -0xb002d 037876 call p_mouse_store_flash_device_info -0xb002e 037877 branch mouse_bb_disconnected -: 037880 z_mouse_before_hibernate: -0xb002f 037881 hfetch 4 ,core_lpm_ctrl -0xb0030 037882 set1 26 ,pdata -0xb0031 037883 hstore 4 ,core_lpm_reg -0xb0032 037884 call lpm_write_ctrl -0xb0033 037885 call disable_authrom -0xb0034 037886 call p_mouse_multi_led_blink_off -0xb0035 037887 call p_mouse_store_flash_device_info -0xb0036 037888 call mouse_before_hibernate_wheel_gpio_set -0xb0037 037889 call p_mouse_setgpio_hibernate -0xb0038 037892 call p_flash_deep_power_down -0xb0039 037893 hfetch 1 ,core_gpio_sel1 -0xb003a 037894 and pdata ,0xf7 ,pdata -0xb003b 037895 hstore 1 ,core_gpio_sel1 -0xb003c 037899 branch p_mouse_t_wheel_clear_wake +: 037875 z_entrancea: +0xb0001 037876 beq zcode_a0 ,z_mouse_24g_attempt_fail +0xb0002 037877 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved +0xb0003 037878 beq zcode_a2 ,z_mouse_le_bb_disconnected +0xb0004 037879 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout +0xb0005 037880 beq zcode_a4 ,z_mouse_before_hibernate +0xb0006 037881 rtn +: 037883 z_mouse_24g_attempt_fail: +0xb0007 037884 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +0xb0008 037885 call p_mouse_tx_power_init +0xb0009 037886 call p_g24_check_51cmd_stop_24g +0xb000a 037887 jam 0 ,mem_link_key_exists +0xb000b 037889 fetch 1 ,mem_mouse_multi_led_blink_count +0xb000c 037890 nrtn blank +0xb000d 037892 call p_mouse_setgpio_hibernate +0xb000e 037893 branch app_enter_hibernate +: 037895 z_mouse_le_conn_param_update_rsp_recieved: +0xb000f 037896 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0xb0010 037897 rtneq ble_signaling_connect_parameter_update_accepted +0xb0011 037898 fetch 1 ,mem_le_tsniff +0xb0012 037899 rshift2 pdata ,pdata +0xb0013 037900 sub pdata ,le_interval_15ms ,null +0xb0014 037901 rtn positive +0xb0015 037902 setarg le_interval_11_25ms +0xb0016 037903 store 2 ,mem_le_interval_min +0xb0017 037904 store 2 ,mem_le_interval_min + 2 +0xb0018 037905 call p_app_updata_le_param +0xb0019 037906 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +0xb001a 037907 rtn +: 037910 z_mouse_bb_event_reconn_timeout: +: 037911 z_mouse_bb_event_reconn_failed: +0xb001b 037912 fetch 2 ,mem_ui_state_map +0xb001c 037913 rtnbit1 ui_state_btn_down +0xb001d 037914 rtnbit1 ui_state_bt_discovery +0xb001e 037915 rtnbit1 ui_state_ble_adv +0xb001f 037916 fetch mouse_flag_len ,mem_mouse_flag +0xb0020 037917 rtnbit1 mouse_bt_discovery_button_down_flag +0xb0021 037918 branch app_bb_hibernate +: 037920 z_mouse_le_bb_disconnected: +0xb0022 037921 fetch 1 ,mem_select_device_button_statue_bt_discovery +0xb0023 037922 call p_mouse_le_bb_disconnected_led_blink_set ,blank +0xb0024 037923 jam off ,mem_select_device_button_statue_bt_discovery +0xb0025 037924 jam 0 ,mem_mouse_le_bb_connected_flag +0xb0026 037925 setarg le_interval_8_75ms +0xb0027 037926 store 2 ,mem_le_interval_min +0xb0028 037927 store 2 ,mem_le_interval_min + 2 +0xb0029 037928 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +0xb002a 037929 jam 0 ,mem_mouse_clear_sensor_data_flag +0xb002b 037930 call p_mouse_data_init +0xb002c 037931 call le_clr_config_more_data +0xb002d 037932 call p_mouse_store_flash_device_info +0xb002e 037933 branch mouse_bb_disconnected +: 037936 z_mouse_before_hibernate: +0xb002f 037937 hfetch 4 ,core_lpm_ctrl +0xb0030 037938 set1 26 ,pdata +0xb0031 037939 hstore 4 ,core_lpm_reg +0xb0032 037940 call lpm_write_ctrl +0xb0033 037941 call disable_authrom +0xb0034 037942 call p_mouse_multi_led_blink_off +0xb0035 037943 call p_mouse_store_flash_device_info +0xb0036 037944 call mouse_before_hibernate_wheel_gpio_set +0xb0037 037945 call p_mouse_setgpio_hibernate +0xb0038 037948 call p_flash_deep_power_down +0xb0039 037949 hfetch 1 ,core_gpio_sel1 +0xb003a 037950 and pdata ,0xf7 ,pdata +0xb003b 037951 hstore 1 ,core_gpio_sel1 +0xb003c 037955 branch p_mouse_t_wheel_clear_wake org 0xc0001 -: 037904 z_entranceb: -0xc0001 037905 beq zcode_b1 ,z_mouse_sniff_not_accept -0xc0002 037906 beq zcode_b2 ,z_mouse_enter_sniff_check -0xc0003 037907 beq zcode_b3 ,z_mouse_le_ll_start_encryt -0xc0004 037908 beq zcode_b4 ,z_mouse_bb_event_disconnected -0xc0005 037909 rtn -: 037911 z_mouse_sniff_not_accept: -0xc0006 037912 fetch 1 ,mem_mouse_enter_sniff_count -0xc0007 037913 rtneq 2 -0xc0008 037914 increase 1 ,pdata -0xc0009 037915 store 1 ,mem_mouse_enter_sniff_count -0xc000a 037916 jam 0x12 ,mem_sniff_param_interval -0xc000b 037917 branch app_bt_enter_sniff -: 037919 z_mouse_enter_sniff_check: -0xc000c 037920 fetch 1 ,mem_mouse_enter_sniff_count -0xc000d 037921 rtnne 2 -0xc000e 037922 jam 0 ,mem_mouse_enter_sniff_count -0xc000f 037923 jam 0x0e ,mem_sniff_param_interval -0xc0010 037924 branch app_bt_enter_sniff -: 037926 z_mouse_le_ll_start_encryt: -0xc0011 037927 fetch 1 ,mem_mouse_le_reconnect_flag -0xc0012 037928 beq 1 ,z_mouse_le_ll_reconn_start_encryt -0xc0013 037929 branch z_mouse_le_ll_enable_start_enc_flag -: 037930 z_mouse_le_ll_reconn_start_encryt: -0xc0014 037931 call p_app_updata_le_param -0xc0015 037932 jam 10 ,mem_le_start_encrypt_timer -: 037933 z_mouse_le_ll_enable_start_enc_flag: -0xc0016 037934 arg ll_start_enc_flag ,queue -0xc0017 037935 branch mouse_le_enable_connect_flag -: 037937 z_mouse_bb_event_disconnected: -0xc0018 037938 jam 1 ,mem_mouse_connected_state -0xc0019 037939 jam 10 ,mem_mouse_multi_led_blink_count -0xc001a 037940 call p_mouse_dpi_multi_led_blink -0xc001b 037941 jam 0 ,mem_bt_rcvd_switch_req_accept -0xc001c 037942 jam 0 ,mem_bt_send_lmp_setup_complete -0xc001d 037943 jam 0 ,mem_mouse_bt_send_first_package_flag -0xc001e 037944 call p_mouse_store_flash_device_info -0xc001f 037945 branch mouse_bb_disconnected +: 037960 z_entranceb: +0xc0001 037961 beq zcode_b1 ,z_mouse_sniff_not_accept +0xc0002 037962 beq zcode_b2 ,z_mouse_enter_sniff_check +0xc0003 037963 beq zcode_b3 ,z_mouse_le_ll_start_encryt +0xc0004 037964 beq zcode_b4 ,z_mouse_bb_event_disconnected +0xc0005 037965 rtn +: 037967 z_mouse_sniff_not_accept: +0xc0006 037968 fetch 1 ,mem_mouse_enter_sniff_count +0xc0007 037969 rtneq 2 +0xc0008 037970 increase 1 ,pdata +0xc0009 037971 store 1 ,mem_mouse_enter_sniff_count +0xc000a 037972 jam 0x12 ,mem_sniff_param_interval +0xc000b 037973 branch app_bt_enter_sniff +: 037975 z_mouse_enter_sniff_check: +0xc000c 037976 fetch 1 ,mem_mouse_enter_sniff_count +0xc000d 037977 rtnne 2 +0xc000e 037978 jam 0 ,mem_mouse_enter_sniff_count +0xc000f 037979 jam 0x0e ,mem_sniff_param_interval +0xc0010 037980 branch app_bt_enter_sniff +: 037982 z_mouse_le_ll_start_encryt: +0xc0011 037983 fetch 1 ,mem_mouse_le_reconnect_flag +0xc0012 037984 beq 1 ,z_mouse_le_ll_reconn_start_encryt +0xc0013 037985 branch z_mouse_le_ll_enable_start_enc_flag +: 037986 z_mouse_le_ll_reconn_start_encryt: +0xc0014 037987 call p_app_updata_le_param +0xc0015 037988 jam 10 ,mem_le_start_encrypt_timer +: 037989 z_mouse_le_ll_enable_start_enc_flag: +0xc0016 037990 arg ll_start_enc_flag ,queue +0xc0017 037991 branch mouse_le_enable_connect_flag +: 037993 z_mouse_bb_event_disconnected: +0xc0018 037994 jam 1 ,mem_mouse_connected_state +0xc0019 037995 jam 10 ,mem_mouse_multi_led_blink_count +0xc001a 037996 call p_mouse_dpi_multi_led_blink +0xc001b 037997 jam 0 ,mem_bt_rcvd_switch_req_accept +0xc001c 037998 jam 0 ,mem_bt_send_lmp_setup_complete +0xc001d 037999 jam 0 ,mem_mouse_bt_send_first_package_flag +0xc001e 038000 call p_mouse_store_flash_device_info +0xc001f 038001 branch mouse_bb_disconnected org 0xd0001 -: 037949 z_entrancec: -: 037952 z_g24_pair_dispatch: -0xd0001 037953 fetch 1 ,mem_24g_stop_g24_mode -0xd0002 037954 beq 1 ,g24_stop_24g_mode -0xd0003 037955 jam 0xff ,mem_24g_common_temp -0xd0004 037956 fetch 1 ,mem_24g_data_type -0xd0005 037957 store 1 ,mem_24g_common_temp + 1 -0xd0006 037958 fetch 4 ,mem_24g_device_addr -0xd0007 037959 store 4 ,mem_24g_common_temp + 2 -0xd0008 037960 arg 6 ,temp -0xd0009 037961 arg mem_24g_common_temp ,rega -0xd000a 037962 call p_g24_put_data_in_buff -0xd000b 037963 call p_g24_transmit_prep -0xd000c 037964 call p_g24_transmit_receive_ack -0xd000d 037965 nbranch z_g24_pair_txdata_retry ,sync -0xd000e 037966 nbranch z_g24_pair_txdata_retry ,user3 -0xd000f 037967 call p_g24_ackpayload_parse -0xd0010 037968 fetch 4 ,mem_24g_addr -0xd0011 037969 fetcht 4 ,mem_24g_allpowerful_addr -0xd0012 037970 isub temp ,null -0xd0013 037971 branch z_g24_auto_pair_skip_rx_length ,zero -0xd0014 037972 fetch 1 ,mem_24g_rxdata_length -0xd0015 037973 rtnne bind_ackpayload_length -: 037974 z_g24_auto_pair_skip_rx_length: -0xd0016 037978 jam 0 ,mem_24g_conn_sm -0xd0017 037979 call p_mouse_tx_power_init -0xd0018 037980 fetch 4 ,mem_24g_addr -0xd0019 037981 fetcht 4 ,mem_24g_paring_addr -0xd001a 037982 isub temp ,null -0xd001b 037983 branch p_g24_start_pairing_sm1 ,zero -0xd001c 037984 fetch 4 ,mem_24g_addr -0xd001d 037985 fetcht 4 ,mem_24g_device_addr -0xd001e 037986 isub temp ,null -0xd001f 037987 call z7_g24_store_dongle_addr ,zero -0xd0020 037988 jam 0 ,mem_mouse_long_mult_flag -0xd0021 037989 call g24_app_tx_attempt_success -0xd0022 037990 call p_g24_txbuf_clear -0xd0023 037991 branch p_g24_transmit_by_interrupt_enable -: 037993 z7_g24_store_dongle_addr: -0xd0024 037994 fetch 4 ,mem_24g_rxpayload + 2 -0xd0025 037995 branch p_g24_update_addr_and_synccrc8 -: 037997 z_g24_pair_txdata_retry: -: 037998 z_g24_pair_txdata_switch: -0xd0026 037999 fetch 1 ,mem_24g_auto_paring_switch -0xd0027 038000 increase 1 ,pdata -0xd0028 038001 and_into 3 ,pdata -0xd0029 038002 store 1 ,mem_24g_auto_paring_switch -0xd002a 038003 beq 0 ,z_g24_auto_pair_first_attemp -0xd002b 038004 beq 2 ,z_g24_auto_pair_all_powerful -0xd002c 038005 branch p_g24_pair_init -: 038007 z_g24_auto_pair_first_attemp: -0xd002d 038008 call p_mouse_tx_power_init -0xd002e 038009 fetch 4 ,mem_24g_device_addr -0xd002f 038010 store 4 ,mem_24g_addr -0xd0030 038011 fetch 1 ,mem_24g_pair_current_ch_num -0xd0031 038012 store 1 ,mem_24g_current_ch_number -0xd0032 038013 call z_g24_ch_syncword_crc8_init -0xd0033 038014 storet 1 ,mem_24g_pair_current_ch_num -0xd0034 038015 rtn -: 038017 z_g24_ch_syncword_crc8_init: -0xd0035 038018 call p_g24_syncword_crc8 -0xd0036 038019 branch p_g24_ch -: 038021 z_g24_auto_pair_all_powerful: -0xd0037 038022 jam tx_power_pair ,mem_tx_power -0xd0038 038023 fetch 4 ,mem_24g_allpowerful_addr -0xd0039 038024 store 4 ,mem_24g_addr -0xd003a 038025 fetch 1 ,mem_24g_powerful_current_ch_num -0xd003b 038026 store 1 ,mem_24g_current_ch_number -0xd003c 038027 call z_g24_ch_syncword_crc8_init -0xd003d 038028 storet 1 ,mem_24g_powerful_current_ch_num -0xd003e 038029 rtn +: 038005 z_entrancec: +: 038008 z_g24_pair_dispatch: +0xd0001 038009 fetch 1 ,mem_24g_stop_g24_mode +0xd0002 038010 beq 1 ,g24_stop_24g_mode +0xd0003 038011 jam 0xff ,mem_24g_common_temp +0xd0004 038012 fetch 1 ,mem_24g_data_type +0xd0005 038013 store 1 ,mem_24g_common_temp + 1 +0xd0006 038014 fetch 4 ,mem_24g_device_addr +0xd0007 038015 store 4 ,mem_24g_common_temp + 2 +0xd0008 038016 arg 6 ,temp +0xd0009 038017 arg mem_24g_common_temp ,rega +0xd000a 038018 call p_g24_put_data_in_buff +0xd000b 038019 call p_g24_transmit_prep +0xd000c 038020 call p_g24_transmit_receive_ack +0xd000d 038021 nbranch z_g24_pair_txdata_retry ,sync +0xd000e 038022 nbranch z_g24_pair_txdata_retry ,user3 +0xd000f 038023 call p_g24_ackpayload_parse +0xd0010 038024 fetch 4 ,mem_24g_addr +0xd0011 038025 fetcht 4 ,mem_24g_allpowerful_addr +0xd0012 038026 isub temp ,null +0xd0013 038027 branch z_g24_auto_pair_skip_rx_length ,zero +0xd0014 038028 fetch 1 ,mem_24g_rxdata_length +0xd0015 038029 rtnne bind_ackpayload_length +: 038030 z_g24_auto_pair_skip_rx_length: +0xd0016 038034 jam 0 ,mem_24g_conn_sm +0xd0017 038035 call p_mouse_tx_power_init +0xd0018 038036 fetch 4 ,mem_24g_addr +0xd0019 038037 fetcht 4 ,mem_24g_paring_addr +0xd001a 038038 isub temp ,null +0xd001b 038039 branch p_g24_start_pairing_sm1 ,zero +0xd001c 038040 fetch 4 ,mem_24g_addr +0xd001d 038041 fetcht 4 ,mem_24g_device_addr +0xd001e 038042 isub temp ,null +0xd001f 038043 call z7_g24_store_dongle_addr ,zero +0xd0020 038044 jam 0 ,mem_mouse_long_mult_flag +0xd0021 038045 call g24_app_tx_attempt_success +0xd0022 038046 call p_g24_txbuf_clear +0xd0023 038047 branch p_g24_transmit_by_interrupt_enable +: 038049 z7_g24_store_dongle_addr: +0xd0024 038050 fetch 4 ,mem_24g_rxpayload + 2 +0xd0025 038051 branch p_g24_update_addr_and_synccrc8 +: 038053 z_g24_pair_txdata_retry: +: 038054 z_g24_pair_txdata_switch: +0xd0026 038055 fetch 1 ,mem_24g_auto_paring_switch +0xd0027 038056 increase 1 ,pdata +0xd0028 038057 and_into 3 ,pdata +0xd0029 038058 store 1 ,mem_24g_auto_paring_switch +0xd002a 038059 beq 0 ,z_g24_auto_pair_first_attemp +0xd002b 038060 beq 2 ,z_g24_auto_pair_all_powerful +0xd002c 038061 branch p_g24_pair_init +: 038063 z_g24_auto_pair_first_attemp: +0xd002d 038064 call p_mouse_tx_power_init +0xd002e 038065 fetch 4 ,mem_24g_device_addr +0xd002f 038066 store 4 ,mem_24g_addr +0xd0030 038067 fetch 1 ,mem_24g_pair_current_ch_num +0xd0031 038068 store 1 ,mem_24g_current_ch_number +0xd0032 038069 call z_g24_ch_syncword_crc8_init +0xd0033 038070 storet 1 ,mem_24g_pair_current_ch_num +0xd0034 038071 rtn +: 038073 z_g24_ch_syncword_crc8_init: +0xd0035 038074 call p_g24_syncword_crc8 +0xd0036 038075 branch p_g24_ch +: 038077 z_g24_auto_pair_all_powerful: +0xd0037 038078 jam tx_power_pair ,mem_tx_power +0xd0038 038079 fetch 4 ,mem_24g_allpowerful_addr +0xd0039 038080 store 4 ,mem_24g_addr +0xd003a 038081 fetch 1 ,mem_24g_powerful_current_ch_num +0xd003b 038082 store 1 ,mem_24g_current_ch_number +0xd003c 038083 call z_g24_ch_syncword_crc8_init +0xd003d 038084 storet 1 ,mem_24g_powerful_current_ch_num +0xd003e 038085 rtn org 0xe0001 -: 038033 z_entranced: -0xe0001 038034 beq zcode_d0 ,z_mouse_le_bb_event_connected -0xe0002 038035 rtn -: 038037 z_mouse_le_bb_event_connected: -0xe0003 038038 jam 0 ,mem_mouse_connected_state -0xe0004 038039 call p_mouse_init_sensor_reset -0xe0005 038040 call app_ble_store_reconn_info -0xe0006 038041 jam 1 ,mem_mouse_le_bb_connected_flag -0xe0007 038042 fetch 1 ,mem_mouse_le_reconnect_flag -0xe0008 038043 nbranch z_mouse_le_bb_event_connected_next ,blank -0xe0009 038044 jam 0x14 ,mem_mouse_send_secutiry_request_timer -: 038045 z_mouse_le_bb_event_connected_next: -0xe000a 038046 call p_mouse_data_init -0xe000b 038047 branch mouse_le_bb_event_connected +: 038089 z_entranced: +0xe0001 038090 beq zcode_d0 ,z_mouse_le_bb_event_connected +0xe0002 038091 rtn +: 038093 z_mouse_le_bb_event_connected: +0xe0003 038094 jam 0 ,mem_mouse_connected_state +0xe0004 038095 call p_mouse_init_sensor_reset +0xe0005 038096 call app_ble_store_reconn_info +0xe0006 038097 jam 1 ,mem_mouse_le_bb_connected_flag +0xe0007 038098 fetch 1 ,mem_mouse_le_reconnect_flag +0xe0008 038099 nbranch z_mouse_le_bb_event_connected_next ,blank +0xe0009 038100 jam 0x14 ,mem_mouse_send_secutiry_request_timer +: 038101 z_mouse_le_bb_event_connected_next: +0xe000a 038102 call p_mouse_data_init +0xe000b 038103 branch mouse_le_bb_event_connected Index: output/bt_program23.meta =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.meta (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.meta (working copy) @@ -219,6 +219,12 @@ arg 12,loopcnt call clear_mem call p_mouse_le_txbuff_load + hfetch 1,core_gpio_pu3 + and_into 0x3f,pdata + hstore 1,core_gpio_pu3 + hfetch 1,core_gpio_sel1 + set0 4,pdata + hstore 1,core_gpio_sel1 call init_memp call rfcomm_init call init_lmp @@ -963,8 +969,9 @@ hfetch 1,core_gpio_pd3 //gpio31 can not be set pulldown and pdata,0x7f,pdata hstore 1,core_gpio_pd3 - fetcht 1,mem_config_select_device_button_gpio - branch gpio_clr_wake +// fetcht 1,mem_config_select_device_button_gpio +// branch gpio_clr_wake + rtn p_mouse_t_wheel_clear_wake: fetcht 1,mem_whee_a_data_gpio @@ -976,11 +983,14 @@ fetcht 1,mem_whee_tb_data_gpio call p_gpio_set_input_pd - fetch 1,mem_gpio_wakeup_low+2 // 0x17 - and pdata,0xfd,pdata + fetch 1,mem_gpio_wakeup_low // 0x06 + and pdata,0xbf,pdata + store 1,mem_gpio_wakeup_low + fetch 1,mem_gpio_wakeup_low+2 // 0x17 + and pdata,0x7f,pdata store 1,mem_gpio_wakeup_low+2 - fetch 1,mem_gpio_wakeup_low+3 // 0x1b 0x1c 0x1e - and pdata,0xa7,pdata + fetch 1,mem_gpio_wakeup_low+3 // 0x1b 0x1c + and pdata,0xe7,pdata store 1,mem_gpio_wakeup_low+3 rtn @@ -1508,12 +1518,12 @@ branch mouse_wheel_check+3 p_mouse_t_wheel_scan: - hfetch 1,core_gpio_pu0 //wheel gpio need pull up - set1 5,pdata - hstore 1,core_gpio_pu0 - hfetch 1,core_gpio_pu3 + hfetch 1,core_gpio_pu2 //wheel gpio need pull up + set1 7,pdata + hstore 1,core_gpio_pu2 + hfetch 1,core_gpio_pu0 set1 6,pdata - hstore 1,core_gpio_pu3 + hstore 1,core_gpio_pu0 arg 0,rega fetcht 1,mem_whee_ta_data_gpio call gpio_get_bit @@ -1710,6 +1720,7 @@ p_mouse_24g_attempt_success: call p_mouse_multi_led_blink_off + call p_mouse_mode_24g_device_multi_led_on jam 0,mem_mouse_connected_state // call p_mouse_null_enter_hibernate_disable call p_mouse_init_sensor_reset @@ -1995,10 +2006,10 @@ call p_mouse_vdd_decrease,positive store 2,mem_mouse_vdd_now_vol arg mem_mouse_vdd_calculate_set,rega - fetcht 1,mem_whee_ta_data_gpio - call gpio_get_bit - nbranch p_mouse_adc_read_next,true - rtn + //fetcht 1,mem_whee_ta_data_gpio + //call gpio_get_bit + branch p_mouse_adc_read_next + //rtn // arg mem_mouse_vdd_vinvol,rega p_mouse_adc_read_next: call p_adc_bat_percent_lowpower_out @@ -2142,9 +2153,11 @@ sub pdata,MOUSE_DPI_LEVEL2,null call p_mouse_3205_dpi_recount,zero fetch 1,mem_mouse_dpi - beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi2 + beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3 beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4 - branch mouse_set_p3212_cpi3 + branch mouse_set_p3212_cpi2 p_mouse_motion: disable user @@ -2155,10 +2168,52 @@ call mouse_zwheel call mouse_t_zwheel call p_mouse_key + call p_mouse_data_zoom nrtn user branch mouse_motion+9 +p_mouse_data_zoom: + fetch 1,mem_config_sensor_type + rtnne P3212 + fetch 1,mem_mouse_dpi + rtnne MOUSE_DPI_LEVEL4 + fetch 2,mem_mouse_x + call p_mouse_1600_zoom + store 2,mem_mouse_x + fetch 2,mem_mouse_y + call p_mouse_1600_zoom + store 2,mem_mouse_y + rtn + +p_mouse_1600_zoom: + bbit1 11,p_mouse_xy_inverse + bbit0 11,p_mouse_xy_zoom_3200 + rtn + +p_mouse_xy_inverse: + sub pdata,0,pdata + call p_mouse_xy_zoom_3200 + sub pdata,0,pdata + rtn + +p_mouse_xy_zoom_3200: + iadd pdata,pdata + branch p_mouse_xy_zoom_store + +p_mouse_xy_zoom_store: + store 2,mem_mouse_temp_data + fetch 1,mem_mouse_temp_data+1 + sub pdata,0x7,null + ncall p_mouse_xy_forward_overflow,positive + fetch 2,mem_mouse_temp_data + rtn + +p_mouse_xy_forward_overflow: + setarg 0x7ff + store 2,mem_mouse_temp_data + rtn + p_mouse_key: call p_mouse_check_key_gpio branch mouse_key+1 Index: output/flash.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/flash.dat (revision 4976) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/flash.dat (working copy) @@ -2,8 +2,8 @@ 02 aa 55 -fa -1e +96 +1f 20 20 00 @@ -11,7 +11,7 @@ 20 40 03 -af +b7 68 00 c1 @@ -19,11 +19,11 @@ 60 00 cc -f8 +fa 20 40 07 -4b +72 68 00 c6 @@ -47,7 +47,7 @@ 20 40 03 -24 +2c 20 40 00 @@ -67,19 +67,19 @@ 20 20 07 -9d +c4 58 00 03 -7f +87 60 01 4d -72 +74 58 00 03 -99 +a1 60 01 41 @@ -87,7 +87,7 @@ 58 00 06 -81 +a8 60 01 41 @@ -95,7 +95,7 @@ 58 00 03 -ca +d2 60 01 41 @@ -103,7 +103,7 @@ 58 00 02 -5e +64 60 01 41 @@ -111,7 +111,7 @@ 58 00 04 -50 +58 60 01 41 @@ -119,7 +119,7 @@ 58 00 03 -f1 +f9 60 01 41 @@ -127,7 +127,7 @@ 58 00 04 -89 +93 60 01 41 @@ -135,7 +135,7 @@ 58 00 04 -92 +9c 60 01 41 @@ -151,7 +151,7 @@ 60 01 4d -84 +86 24 55 80 @@ -159,11 +159,11 @@ 20 40 02 -db +e3 20 40 04 -8f +99 68 00 c7 @@ -183,7 +183,7 @@ 20 20 05 -5b +62 58 00 01 @@ -191,7 +191,7 @@ 60 01 4d -84 +86 20 60 00 @@ -271,75 +271,75 @@ c0 01 00 -79 +7f c0 42 87 -9b +c2 c0 44 87 -6e +95 c0 28 86 -b7 +de c0 53 86 -bc +e3 c0 56 86 -d4 +fb c0 65 b3 e4 c0 74 -86 -e5 +87 +0c c0 50 80 -82 +88 c0 58 80 -87 +8d c0 59 00 -91 +97 c0 62 02 -a1 +a9 c0 71 85 -5d +64 c0 72 03 -f4 +fc c0 73 05 -81 +8a c0 75 05 -b7 +de c0 75 85 -bc +e3 c0 76 05 -c2 +e9 20 20 2a @@ -347,55 +347,55 @@ c0 1c 85 -c8 +ef c0 21 85 -d0 +f7 c0 25 05 -d6 +fd c0 2b -85 -d9 +86 +00 c0 2c -85 -db +86 +02 c0 31 -85 -dd +86 +04 c0 33 06 -0c +33 c0 33 86 -23 +4a c0 35 06 -6d +94 c0 3b 86 -77 +9e c0 46 06 -83 +aa c0 46 86 -8f +b6 c0 7d -06 -e9 +07 +10 20 20 2a @@ -407,7 +407,7 @@ 20 40 04 -d9 +e3 24 60 80 @@ -419,7 +419,7 @@ 20 40 04 -d9 +e3 24 60 80 @@ -442,12 +442,12 @@ 00 20 40 -04 -f9 +05 +03 20 20 03 -11 +19 d8 a0 09 @@ -463,7 +463,31 @@ 20 40 03 -90 +98 +68 +10 +80 +7b +1f +e1 +7e +3f +60 +10 +80 +7b +68 +10 +80 +81 +79 +3f +fe +04 +60 +10 +80 +81 20 40 74 @@ -519,7 +543,7 @@ 20 3a 00 -7c +82 20 20 20 @@ -591,43 +615,43 @@ 68 00 cd -91 +93 c2 80 80 -a5 +ab c2 81 00 -a7 +ad 68 00 cd -81 +83 c0 00 80 -a9 +af 20 40 01 -3d +43 24 34 00 -c4 +ca 20 40 01 -18 +1e 20 40 00 -f3 +f9 68 00 cc -51 +53 c1 ff 80 @@ -635,7 +659,7 @@ 20 40 06 -a5 +cc 68 00 cb @@ -643,11 +667,11 @@ c0 00 83 -82 +8a 20 40 02 -68 +6e 24 74 00 @@ -655,7 +679,7 @@ 20 40 02 -65 +6b 58 00 e2 @@ -671,7 +695,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -679,11 +703,11 @@ 20 20 07 -9d +c4 20 40 02 -41 +47 24 74 00 @@ -691,11 +715,11 @@ 20 40 00 -be +c4 68 01 4d -82 +84 1f e0 fe @@ -703,11 +727,11 @@ 60 01 4d -82 +84 68 09 4d -84 +86 98 46 7c @@ -715,14 +739,14 @@ 20 42 80 -b3 +b9 20 20 00 -97 +9d 70 4d -81 +83 00 58 00 @@ -731,7 +755,7 @@ 60 01 4d -82 +84 58 00 00 @@ -739,19 +763,19 @@ 60 01 4d -84 +86 70 4c -7c +7e 00 68 00 cc -67 +69 60 00 cc -66 +68 20 60 00 @@ -759,15 +783,15 @@ 68 00 cc -68 +6a 20 20 00 -ba +c0 68 00 cc -7c +7e 1f e0 fe @@ -775,15 +799,15 @@ 60 00 cc -7c +7e c0 02 00 -bc +c2 c0 02 80 -b8 +be 20 60 00 @@ -791,15 +815,15 @@ 68 00 cc -6d +6f 20 5a 00 -ca +d0 20 40 02 -68 +6e 24 74 00 @@ -807,27 +831,27 @@ 68 01 cc -70 +72 20 20 2d 8c 70 4c -6d +6f 01 70 4d -76 +78 00 20 40 00 -da +e0 60 00 cb -dd +df 58 00 00 @@ -835,23 +859,23 @@ 60 03 cb -de +e0 68 02 4c -78 +7a 60 02 4b -e5 +e7 70 4c -41 +43 0c 68 00 cc -42 +44 79 20 7e @@ -859,27 +883,27 @@ 60 00 cc -42 +44 20 40 01 -40 +46 20 20 00 -9a +a0 70 4d -77 +79 01 70 4d -79 +7b 00 68 00 cc -42 +44 1f e1 7e @@ -887,7 +911,7 @@ 60 00 cc -42 +44 20 60 00 @@ -895,7 +919,7 @@ 68 00 cc -42 +44 79 20 7e @@ -903,11 +927,11 @@ 60 00 cc -42 +44 60 00 cb -fd +ff 20 60 00 @@ -915,7 +939,7 @@ 68 00 cc -42 +44 c4 02 00 @@ -923,7 +947,7 @@ 68 00 cc -42 +44 79 3f fe @@ -931,31 +955,31 @@ 60 00 cc -42 +44 60 00 cb -fd +ff 20 40 -05 -fd +06 +24 20 20 01 -2b +31 68 00 cd -76 +78 c0 80 80 -da +e0 68 00 cd -74 +76 1f e0 fe @@ -963,22 +987,22 @@ 60 00 cd -74 +76 c0 02 01 -08 +0e 20 40 01 -2b +31 70 4c -86 +88 02 70 4c -4a +4c 00 d9 60 @@ -991,27 +1015,27 @@ 20 40 01 -62 +68 24 2c 01 -6d +73 24 37 81 -6d +73 20 40 01 -5f +65 20 40 01 -8a +90 20 40 07 -4e +75 70 4b 52 @@ -1019,7 +1043,7 @@ 68 00 cc -40 +42 1f e0 fe @@ -1027,23 +1051,23 @@ 60 00 cc -40 +42 20 40 00 -e3 +e9 68 00 cc -51 +53 c0 ff 81 -a8 +ae 20 40 01 -0f +15 58 00 00 @@ -1051,55 +1075,55 @@ 60 02 4c -46 +48 60 00 cd -75 +77 20 60 00 00 20 40 -05 -fd +06 +24 70 4d -74 +76 00 20 20 00 -da +e0 70 4d -79 +7b 02 70 4d -77 +79 01 70 4d -76 +78 00 20 20 00 -da +e0 68 00 cd -78 +7a c0 01 81 -0c +12 68 00 cc -42 +44 2f ec 00 @@ -1107,19 +1131,19 @@ 20 20 80 -d8 +de 68 00 cd -78 +7a c0 00 81 -0b +11 c0 01 01 -0c +12 20 60 00 @@ -1127,7 +1151,7 @@ 68 00 cc -51 +53 c1 ff 80 @@ -1135,11 +1159,11 @@ 20 40 01 -1d +23 24 56 01 -25 +2b 20 60 00 @@ -1151,7 +1175,7 @@ 68 00 cd -77 +79 c1 80 80 @@ -1159,18 +1183,18 @@ 68 00 cd -79 +7b c1 80 00 00 70 4d -78 +7a 01 70 4c -86 +88 04 20 20 @@ -1179,11 +1203,11 @@ 68 00 cd -79 +7b 20 3a 01 -38 +3e 1f e0 ff @@ -1191,23 +1215,23 @@ 60 00 cd -79 +7b 70 4d -78 +7a 02 70 4c -86 +88 04 68 08 cc -4c +4e 68 00 cc -69 +6b 1f e1 7e @@ -1219,7 +1243,7 @@ 58 00 4c -52 +54 9a 20 fe @@ -1235,7 +1259,7 @@ 60 00 cc -4b +4d 18 40 84 @@ -1247,50 +1271,50 @@ 60 08 cc -4c +4e 20 60 00 00 70 4d -78 +7a 03 68 00 cd -76 +78 24 3a 00 -eb +f1 70 4c -86 +88 02 20 20 01 -2b +31 68 00 cc -51 +53 c0 ff 81 -a6 +ac 20 40 01 -43 +49 20 40 01 -c2 +c8 70 4c -46 +48 01 20 60 @@ -1299,7 +1323,7 @@ 68 01 4d -72 +74 20 40 7f @@ -1307,11 +1331,11 @@ 20 34 01 -49 +4f 68 03 cb -de +e0 20 7a 00 @@ -1322,7 +1346,7 @@ e7 70 4c -6d +6f 00 1a 20 @@ -1331,15 +1355,15 @@ 60 00 cc -41 +43 20 40 00 -da +e0 60 00 cb -dd +df e8 a8 80 @@ -1375,7 +1399,7 @@ d8 a0 4b -e3 +e5 df 20 00 @@ -1403,7 +1427,7 @@ c2 00 01 -58 +5e 20 60 00 @@ -1415,7 +1439,7 @@ d8 a0 4b -dd +df 20 20 7e @@ -1427,7 +1451,7 @@ 20 40 02 -1e +24 18 00 2a @@ -1435,7 +1459,7 @@ 68 02 4c -69 +6b 98 00 12 @@ -1455,11 +1479,11 @@ 20 40 01 -da +e0 20 57 82 -1b +21 20 60 00 @@ -1467,7 +1491,7 @@ 68 00 cc -6d +6f 24 7a 00 @@ -1475,7 +1499,7 @@ 68 01 4c -47 +49 1f e0 fe @@ -1483,11 +1507,11 @@ 60 01 4c -47 +49 68 00 cc -48 +4a c2 82 2d @@ -1495,23 +1519,23 @@ 68 00 cc -51 +53 c0 ff 81 -78 +7e 20 40 01 -80 +86 20 20 00 -f4 +fa 68 00 cc -47 +49 c1 ff 80 @@ -1523,7 +1547,7 @@ 60 01 4c -47 +49 20 20 2d @@ -1531,19 +1555,19 @@ 20 40 07 -65 +8c 20 40 -05 -fd +06 +24 20 20 01 -2b +31 68 00 cc -4a +4c 1f e6 7c @@ -1551,7 +1575,7 @@ 24 21 01 -7d +83 1f e0 fe @@ -1559,23 +1583,23 @@ 60 00 cc -4a +4c c0 01 00 -de +e4 c0 03 00 -e5 +eb c0 04 00 -de +e4 c0 06 00 -e5 +eb 20 60 00 @@ -1583,11 +1607,11 @@ 20 40 01 -b5 +bb 68 00 cc -3f +41 20 7a 00 @@ -1599,11 +1623,11 @@ d8 c0 4b -bd +bf d8 a0 4c -1f +21 20 20 7f @@ -1614,20 +1638,20 @@ 20 70 4c -40 +42 00 70 4c -4b +4d 4e 68 02 4c -4d +4f 60 02 4c -69 +6b da 20 00 @@ -1639,7 +1663,7 @@ d8 c0 4c -69 +6b e8 c0 80 @@ -1651,7 +1675,7 @@ c2 00 01 -99 +9f 1a 22 7e @@ -1659,15 +1683,15 @@ 60 01 4c -f2 +f4 68 00 cc -f2 +f4 68 08 cc -f3 +f5 98 40 fe @@ -1675,7 +1699,7 @@ 60 00 cc -f4 +f6 20 60 00 @@ -1683,10 +1707,10 @@ 20 40 01 -91 +97 70 4c -51 +53 01 20 60 @@ -1699,11 +1723,11 @@ 20 20 07 -9d +c4 20 40 07 -4b +72 70 11 c5 @@ -1711,14 +1735,14 @@ 20 20 07 -9d +c4 79 3f 80 26 70 4d -91 +93 00 20 40 @@ -1735,7 +1759,7 @@ 60 08 cc -41 +43 18 42 72 @@ -1743,7 +1767,7 @@ d8 a0 4b -dd +df 1a 22 0c @@ -1755,7 +1779,7 @@ 68 00 cb -bc +be 1f e9 7e @@ -1763,7 +1787,7 @@ 60 00 cc -3f +41 1f e0 fe @@ -1771,7 +1795,7 @@ d8 c0 4b -bc +be 98 c0 8c @@ -1783,11 +1807,11 @@ 60 01 cc -7e +80 68 00 cb -bc +be 1f e3 7e @@ -1799,7 +1823,7 @@ 60 00 cc -84 +86 20 60 00 @@ -1807,7 +1831,7 @@ 68 00 cc -41 +43 1f e0 fe @@ -1815,19 +1839,19 @@ 60 00 cc -43 +45 68 00 cc -42 +44 60 00 cb -fd +ff 68 00 cc -41 +43 1f e9 fe @@ -1835,7 +1859,7 @@ 68 08 cc -40 +42 18 41 04 @@ -1851,7 +1875,7 @@ 68 08 cc -7d +7f 98 40 fe @@ -1863,7 +1887,7 @@ 68 00 cc -41 +43 98 00 72 @@ -1871,7 +1895,7 @@ d8 c0 4b -dd +df 20 20 7f @@ -1895,7 +1919,7 @@ 68 00 cc -4b +4d 20 20 53 @@ -1903,7 +1927,7 @@ 20 40 01 -d4 +da 78 57 fc @@ -1927,7 +1951,7 @@ 68 01 4c -44 +46 98 00 36 @@ -1939,7 +1963,7 @@ 24 2c 02 -1b +21 78 46 fc @@ -1959,15 +1983,15 @@ 20 40 02 -18 +1e 60 00 cc -f5 +f7 68 08 cc -f4 +f6 98 46 7c @@ -1975,23 +1999,23 @@ 24 22 82 -1b +21 20 40 02 -18 +1e 60 00 cb -bb +bd 68 00 cb -bb +bd 68 08 cc -42 +44 a8 40 0e @@ -1999,11 +2023,11 @@ 24 20 82 -1b +21 20 40 02 -18 +1e e0 a0 80 @@ -2018,12 +2042,12 @@ 1f 20 22 -81 -fb +82 +01 20 40 02 -18 +1e e0 a0 80 @@ -2031,7 +2055,7 @@ c2 00 01 -f8 +fe 18 a2 22 @@ -2039,11 +2063,11 @@ 20 40 02 -18 +1e 60 00 cd -7c +7e 1a 22 0a @@ -2079,7 +2103,7 @@ 20 23 02 -1b +21 78 37 fc @@ -2107,7 +2131,7 @@ 68 00 cd -7c +7e 1f e2 22 @@ -2115,11 +2139,11 @@ 68 08 cc -fc +fe 58 00 4d -03 +05 98 40 8a @@ -2143,7 +2167,7 @@ 60 08 cc -fc +fe 20 60 00 @@ -2179,7 +2203,7 @@ 68 02 4c -69 +6b 98 00 12 @@ -2187,7 +2211,7 @@ 20 40 01 -d4 +da 20 40 29 @@ -2195,7 +2219,7 @@ 68 08 cc -4b +4d 20 40 29 @@ -2251,7 +2275,7 @@ 68 00 cc -f4 +f6 08 00 86 @@ -2259,7 +2283,7 @@ 68 00 cc -43 +45 98 00 72 @@ -2267,7 +2291,7 @@ d8 c0 4b -fd +ff e8 c0 80 @@ -2279,7 +2303,7 @@ c2 00 02 -36 +3c 78 24 7c @@ -2319,7 +2343,7 @@ 68 0a 4c -62 +64 1c 42 7e @@ -2339,11 +2363,11 @@ 68 02 4c -62 +64 68 08 cc -66 +68 98 40 84 @@ -2367,7 +2391,7 @@ 60 02 4c -62 +64 20 20 7f @@ -2395,7 +2419,7 @@ c2 00 02 -53 +59 18 49 7e @@ -2435,11 +2459,11 @@ 20 40 03 -86 +8e 20 40 02 -70 +76 68 00 c0 @@ -2447,7 +2471,7 @@ c3 00 02 -65 +6b 68 00 80 @@ -2495,7 +2519,7 @@ 68 00 cd -81 +83 c0 00 ff @@ -2503,11 +2527,11 @@ 20 40 02 -9e +a6 20 40 02 -65 +6b 20 40 3e @@ -2616,14 +2640,10 @@ 10 80 7f -68 -08 -c6 -ed -20 20 -67 -ed +60 +00 +00 68 08 c6 @@ -2631,7 +2651,7 @@ 20 40 05 -b1 +d8 68 08 c6 @@ -2639,7 +2659,7 @@ 20 40 05 -b1 +d8 68 08 c6 @@ -2647,7 +2667,7 @@ 20 40 05 -b1 +d8 68 08 c6 @@ -2655,7 +2675,19 @@ 20 40 05 -b1 +d8 +68 +00 +80 +a1 +1f +e1 +7e +bf +60 +00 +80 +a1 68 00 80 @@ -2663,7 +2695,7 @@ 1f e1 7e -fd +7f 60 00 80 @@ -2675,7 +2707,7 @@ 1f e1 7e -67 +e7 60 00 80 @@ -2695,7 +2727,7 @@ 20 20 05 -5d +64 70 89 5b @@ -2719,7 +2751,7 @@ 20 35 83 -24 +2c 68 01 c4 @@ -2751,7 +2783,7 @@ 24 42 82 -c6 +ce 68 00 c7 @@ -2759,7 +2791,7 @@ c0 7f 82 -b3 +bb 1f e6 7c @@ -2767,23 +2799,23 @@ 24 22 82 -b5 +bd 20 40 05 -8d +b4 c0 02 82 -d9 +e1 20 40 02 -c3 +cb 20 40 04 -dd +e7 da 20 47 @@ -2803,7 +2835,7 @@ 20 22 83 -71 +79 1f e0 ff @@ -2827,7 +2859,7 @@ c0 1a 02 -c9 +d1 20 60 00 @@ -2835,7 +2867,7 @@ 68 00 cc -f8 +fa 60 00 c1 @@ -2863,7 +2895,7 @@ 20 20 07 -9d +c4 da 20 43 @@ -2891,7 +2923,7 @@ 20 20 02 -cc +d4 70 4b b3 @@ -2911,7 +2943,7 @@ 68 03 4d -86 +88 60 03 44 @@ -2927,11 +2959,11 @@ 20 20 07 -9d +c4 20 40 03 -24 +2c 20 40 40 @@ -2943,11 +2975,11 @@ c0 18 02 -e7 +ef c0 18 82 -f6 +fe 20 40 40 @@ -2959,7 +2991,7 @@ 20 20 02 -dd +e5 70 4b 00 @@ -2971,7 +3003,7 @@ 20 40 02 -db +e3 20 20 64 @@ -2979,7 +3011,7 @@ 20 40 05 -53 +5a 68 00 c6 @@ -2987,7 +3019,7 @@ c0 2d 02 -eb +f3 20 20 40 @@ -3003,11 +3035,11 @@ 20 40 02 -ef +f7 20 20 05 -59 +60 ea 61 00 @@ -3035,11 +3067,11 @@ 20 20 02 -ef +f7 20 40 05 -53 +5a 20 20 40 @@ -3103,7 +3135,7 @@ 20 40 03 -63 +6b 20 40 44 @@ -3123,7 +3155,7 @@ 20 22 83 -53 +5b 60 09 47 @@ -3143,11 +3175,11 @@ 60 02 4c -69 +6b 20 40 05 -10 +1a 68 01 47 @@ -3155,7 +3187,7 @@ 20 3a 03 -11 +19 68 00 c2 @@ -3167,39 +3199,39 @@ 20 40 03 -63 +6b 20 40 03 -2f +37 20 40 03 -3e +46 20 40 03 -4d +55 20 40 03 -42 +4a 20 40 03 -33 +3b 20 40 03 -26 +2e 20 40 -02 -f8 +03 +00 20 40 03 -3e +46 d8 40 00 @@ -3215,11 +3247,11 @@ 20 40 03 -2b +33 20 40 03 -5c +64 70 42 12 @@ -3230,12 +3262,12 @@ 36 20 40 -02 -f8 +03 +00 20 40 03 -3e +46 d8 40 00 @@ -3259,11 +3291,11 @@ 20 40 03 -42 +4a 20 20 03 -33 +3b 68 01 c7 @@ -3275,7 +3307,7 @@ 20 40 03 -3e +46 20 40 65 @@ -3283,11 +3315,11 @@ 20 40 03 -36 +3e c2 80 03 -33 +3b 20 60 00 @@ -3331,11 +3363,11 @@ 20 40 03 -36 +3e c3 00 83 -3f +47 20 60 00 @@ -3411,11 +3443,11 @@ 20 40 03 -63 +6b 20 40 03 -4d +55 20 40 65 @@ -3423,11 +3455,11 @@ 20 40 03 -65 +6d 20 40 03 -6c +74 20 40 43 @@ -3439,7 +3471,7 @@ 60 02 4c -69 +6b 20 60 00 @@ -3450,8 +3482,8 @@ b9 20 40 -02 -f8 +03 +00 20 40 69 @@ -3479,11 +3511,11 @@ 20 20 03 -5d +65 20 40 03 -63 +6b d8 40 00 @@ -3511,7 +3543,7 @@ 20 40 03 -63 +6b d8 40 00 @@ -3527,7 +3559,7 @@ 20 20 03 -69 +71 70 47 20 @@ -3535,7 +3567,7 @@ 20 40 07 -3e +65 70 11 c5 @@ -3543,11 +3575,11 @@ 20 20 07 -9d +c4 20 40 07 -43 +6a 70 11 c5 @@ -3555,7 +3587,7 @@ 20 20 07 -9d +c4 20 40 7f @@ -3579,7 +3611,7 @@ c2 00 03 -7a +82 20 60 00 @@ -3598,7 +3630,7 @@ 00 70 4d -81 +83 01 58 00 @@ -3607,7 +3639,7 @@ 60 01 4d -82 +84 20 60 00 @@ -3623,7 +3655,7 @@ 20 40 03 -8e +96 d8 c0 19 @@ -3631,7 +3663,7 @@ 20 40 03 -8e +96 d8 c0 1a @@ -3639,7 +3671,7 @@ 20 40 03 -8e +96 d8 c0 1b @@ -3663,7 +3695,7 @@ 20 40 03 -8e +96 d8 a0 19 @@ -3671,7 +3703,7 @@ 20 40 03 -8e +96 d8 a0 1a @@ -3679,7 +3711,7 @@ 20 40 03 -8e +96 d8 a0 1b @@ -3687,7 +3719,7 @@ 20 20 03 -8e +96 20 40 58 @@ -3703,7 +3735,7 @@ c0 7f 83 -a0 +a8 68 00 c6 @@ -3723,7 +3755,7 @@ 20 5a 03 -ee +f6 68 02 46 @@ -3743,11 +3775,11 @@ 20 40 03 -ac +b4 20 40 03 -c5 +cd da 20 46 @@ -3759,7 +3791,7 @@ 20 54 03 -b4 +bc 20 60 00 @@ -3823,7 +3855,7 @@ 20 34 03 -bc +c4 20 60 00 @@ -3911,7 +3943,7 @@ 20 5a 03 -ee +f6 68 02 46 @@ -3935,11 +3967,11 @@ 20 40 03 -ac +b4 20 40 03 -c5 +cd 68 00 cb @@ -3947,7 +3979,7 @@ c0 00 83 -dd +e5 68 00 cb @@ -4039,7 +4071,7 @@ 20 20 02 -e3 +eb 20 40 7e @@ -4047,15 +4079,15 @@ 20 40 04 -3c +44 20 20 03 -f4 +fc 20 40 03 -f7 +ff 20 40 3f @@ -4067,19 +4099,19 @@ 68 10 80 -78 +7a 79 20 7e -05 +07 60 10 80 -78 +7a 68 10 80 -7b +78 79 20 7e @@ -4087,7 +4119,7 @@ 60 10 80 -7b +78 da 20 00 @@ -4127,11 +4159,11 @@ c0 00 84 -0b +13 c0 01 04 -0f +17 68 00 c6 @@ -4139,7 +4171,7 @@ c2 83 84 -1b +23 20 60 00 @@ -4151,11 +4183,11 @@ c0 00 04 -13 +1b c0 01 84 -15 +1d 20 60 00 @@ -4167,11 +4199,11 @@ c0 00 04 -17 +1f c0 01 84 -19 +21 20 60 00 @@ -4223,19 +4255,19 @@ c0 00 04 -23 +2b c0 00 84 -26 +2e c0 01 04 -29 +31 c0 01 84 -2c +34 20 60 00 @@ -4247,7 +4279,7 @@ c0 01 84 -2f +37 20 60 00 @@ -4259,7 +4291,7 @@ c0 00 04 -2f +37 20 60 00 @@ -4271,7 +4303,7 @@ c0 01 84 -34 +3c 20 60 00 @@ -4283,7 +4315,7 @@ c0 00 04 -34 +3c 20 60 00 @@ -4339,11 +4371,11 @@ 20 20 05 -ac +d3 20 40 04 -39 +41 68 08 c6 @@ -4351,7 +4383,7 @@ 20 40 05 -b1 +d8 68 08 c6 @@ -4363,11 +4395,11 @@ 20 20 84 -4e +56 20 40 05 -ac +d3 68 00 c6 @@ -4407,7 +4439,7 @@ 20 40 07 -3b +62 20 20 3d @@ -4415,7 +4447,7 @@ 20 40 05 -ac +d3 20 20 3d @@ -4427,31 +4459,31 @@ c0 0a 04 -61 +69 c0 0a 84 -63 +6b c0 14 84 -66 +6e c0 19 04 -68 +70 c0 20 04 -6a +72 c0 02 04 -6c +74 c0 09 84 -6c +74 c0 0c b3 @@ -4459,31 +4491,31 @@ c0 10 84 -70 +78 c0 00 84 -72 +7a c0 01 04 -76 +7e c0 15 84 -79 +81 c0 1c 84 -7b +83 c0 1d 04 -80 +88 c0 1e 04 -86 +8e 20 20 41 @@ -4495,11 +4527,11 @@ 20 20 07 -9d +c4 20 40 04 -8c +96 70 11 c5 @@ -4507,7 +4539,7 @@ 20 20 07 -9d +c4 70 0a 99 @@ -4523,7 +4555,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -4531,7 +4563,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -4539,7 +4571,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -4547,7 +4579,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -4555,7 +4587,7 @@ 20 20 07 -9d +c4 70 4b b9 @@ -4567,7 +4599,7 @@ 20 40 02 -e3 +eb 20 20 42 @@ -4575,7 +4607,7 @@ 20 40 04 -8c +96 70 11 c5 @@ -4583,7 +4615,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -4591,11 +4623,11 @@ 20 20 07 -9d +c4 20 40 07 -29 +50 70 4b b9 @@ -4603,7 +4635,7 @@ 20 40 02 -e3 +eb 70 11 c5 @@ -4611,7 +4643,7 @@ 20 20 07 -9d +c4 70 4b b9 @@ -4623,11 +4655,11 @@ 20 40 07 -3b +62 20 40 04 -8c +96 70 11 c5 @@ -4635,7 +4667,15 @@ 20 20 07 -9d +c4 +20 +40 +07 +54 +20 +40 +07 +65 70 4b b9 @@ -4643,7 +4683,7 @@ 20 40 02 -e3 +eb 20 20 3f @@ -4651,7 +4691,7 @@ 20 40 04 -8c +96 70 11 c5 @@ -4659,7 +4699,7 @@ 20 20 07 -9d +c4 68 00 cb @@ -4675,7 +4715,7 @@ 20 40 02 -db +e3 58 00 08 @@ -4687,19 +4727,19 @@ 20 40 05 -07 +11 20 40 05 -42 +49 20 40 04 -c0 +ca 20 40 04 -dd +e7 20 40 42 @@ -4711,27 +4751,27 @@ 20 40 04 -c5 +cf 20 40 04 -ac +b6 20 40 04 -a9 +b3 20 40 04 -b2 +bc 20 40 04 -b8 +c2 20 40 04 -a1 +ab 20 40 42 @@ -4739,11 +4779,11 @@ 20 40 04 -a4 +ae 20 20 07 -01 +28 da 60 48 @@ -4763,7 +4803,7 @@ da 40 04 -a7 +b1 20 20 33 @@ -4795,7 +4835,7 @@ da 40 04 -af +b9 20 20 33 @@ -4819,7 +4859,7 @@ da 40 04 -b5 +bf 20 20 33 @@ -4851,7 +4891,7 @@ da 40 04 -bd +c7 20 20 33 @@ -4875,7 +4915,7 @@ da 40 04 -c3 +cd 20 20 33 @@ -4891,18 +4931,18 @@ da 60 4d -8d +8f da 40 04 -c8 +d2 20 20 33 74 70 4d -8c +8e 01 20 60 @@ -4915,7 +4955,7 @@ da 40 04 -cd +d7 20 20 33 @@ -4975,7 +5015,7 @@ 20 40 05 -ac +d3 68 08 c6 @@ -4987,15 +5027,15 @@ 20 40 04 -d9 +e3 24 20 84 -e8 +f2 20 40 04 -ca +d4 68 00 c6 @@ -5035,7 +5075,7 @@ 24 3a 05 -00 +0a 68 00 c6 @@ -5055,7 +5095,7 @@ 24 41 04 -f3 +fd 68 00 c6 @@ -5074,8 +5114,8 @@ 00 20 40 -04 -f9 +05 +03 70 41 bd @@ -5083,7 +5123,7 @@ 20 40 03 -11 +19 68 02 46 @@ -5151,7 +5191,7 @@ 20 20 07 -3b +62 68 01 4b @@ -5199,7 +5239,7 @@ 20 40 05 -2d +34 20 40 69 @@ -5223,7 +5263,7 @@ 20 41 05 -2a +31 60 01 47 @@ -5232,26 +5272,14 @@ 20 47 09 -68 -08 -c6 -ea -20 -40 -68 -1d -24 20 -85 -1f 20 -60 -00 -00 +05 +26 20 40 05 -35 +3c 68 00 c2 @@ -5263,7 +5291,7 @@ c3 00 05 -25 +2c 70 4a ff @@ -5291,7 +5319,7 @@ 20 20 07 -2f +56 d8 40 00 @@ -5435,7 +5463,7 @@ 24 41 05 -51 +58 1f e6 7c @@ -5443,11 +5471,11 @@ 20 21 07 -21 +48 20 20 07 -2f +56 70 46 cf @@ -5459,7 +5487,7 @@ 20 40 03 -24 +2c 58 00 80 @@ -5479,7 +5507,7 @@ 20 40 02 -ef +f7 68 00 c7 @@ -5487,7 +5515,7 @@ c0 ff 85 -5d +64 68 00 c6 @@ -5503,15 +5531,15 @@ c0 02 05 -7a +81 c0 03 05 -6d +74 c0 03 85 -6d +74 68 00 c7 @@ -5523,7 +5551,7 @@ 20 42 85 -68 +6f 68 00 c7 @@ -5531,7 +5559,7 @@ c0 00 05 -6a +71 c0 01 bd @@ -5571,7 +5599,7 @@ 20 42 85 -68 +6f 68 00 c7 @@ -5579,11 +5607,11 @@ c0 00 05 -76 +7d c0 01 85 -78 +7f 68 00 cb @@ -5603,7 +5631,7 @@ 20 20 05 -74 +7b 68 00 cb @@ -5611,7 +5639,7 @@ 20 20 05 -74 +7b 68 00 c7 @@ -5623,7 +5651,7 @@ 20 42 85 -68 +6f 68 00 c7 @@ -5631,15 +5659,23 @@ c0 00 3d +9d +c0 +00 +bd 9b c0 01 +3d +9f +c0 +01 bd a1 20 20 3d -9f +9b 78 54 7c @@ -5659,7 +5695,7 @@ 20 40 02 -9e +a6 20 40 40 @@ -5671,7 +5707,11 @@ 20 40 05 -8b +b2 +20 +40 +05 +95 24 74 00 @@ -5680,10 +5720,126 @@ 20 3f a0 +68 +00 +c6 +e0 +c1 +82 +00 +00 +68 +00 +c7 +7a +c1 +81 +80 +00 +68 +01 +46 +9b 20 40 05 -8d +a0 +60 +01 +46 +9b +68 +01 +46 +9d +20 +40 +05 +a0 +60 +01 +46 +9d +20 +60 +00 +00 +c2 +85 +85 +a3 +c3 +05 +85 +a7 +20 +60 +00 +00 +1f +e6 +7e +00 +20 +40 +05 +a7 +1f +e6 +7e +00 +20 +60 +00 +00 +9f +e0 +fe +00 +20 +20 +05 +a9 +60 +01 +4b +bb +68 +00 +cb +bc +1f +e6 +7c +07 +24 +41 +05 +af +68 +01 +4b +bb +20 +60 +00 +00 +58 +00 +07 +ff +60 +01 +4b +bb +20 +60 +00 +00 +20 +40 +05 +b4 20 20 40 @@ -5695,7 +5851,7 @@ 20 40 05 -90 +b7 20 20 40 @@ -5707,7 +5863,7 @@ 20 40 05 -ac +d3 68 08 c6 @@ -5727,7 +5883,7 @@ 20 40 05 -ac +d3 68 08 c6 @@ -5747,7 +5903,7 @@ 20 40 05 -ac +d3 68 08 c6 @@ -5763,7 +5919,7 @@ 20 40 04 -39 +41 68 08 c6 @@ -5771,7 +5927,7 @@ 20 40 05 -b1 +d8 68 08 c6 @@ -5787,11 +5943,11 @@ 20 40 05 -ac +d3 20 40 04 -39 +41 68 08 c6 @@ -5799,7 +5955,7 @@ 20 40 05 -b1 +d8 68 08 c6 @@ -5831,7 +5987,7 @@ 20 20 05 -b5 +dc 79 3f 84 @@ -5863,7 +6019,7 @@ 20 40 81 -ab +b1 20 20 42 @@ -5875,7 +6031,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -5883,7 +6039,7 @@ 20 20 07 -9d +c4 d8 a0 43 @@ -5903,7 +6059,7 @@ 20 40 07 -29 +50 58 00 00 @@ -5919,7 +6075,7 @@ 20 40 02 -e3 +eb 20 20 42 @@ -5951,7 +6107,7 @@ 20 40 06 -a5 +cc 20 20 53 @@ -5987,7 +6143,7 @@ 20 40 02 -0e +14 20 20 54 @@ -5999,7 +6155,7 @@ 20 20 07 -9d +c4 70 11 c5 @@ -6007,43 +6163,43 @@ 20 20 07 -9d +c4 68 00 84 56 c2 82 -85 -fc +86 +23 20 40 07 -4e +75 68 00 c7 8e 24 3a -05 -e7 +06 +0e 68 00 84 3f c3 02 -05 -eb +06 +12 68 00 82 da 20 3a -05 -eb +06 +12 20 20 56 @@ -6070,8 +6226,8 @@ c4 c0 82 -85 -ee +86 +15 70 47 8e @@ -6083,7 +6239,7 @@ 20 5a 03 -b8 +c0 20 20 56 @@ -6134,12 +6290,12 @@ 50 20 40 -05 -f1 +06 +18 68 00 cd -7a +7c 1f e6 7c @@ -6147,11 +6303,11 @@ 24 41 07 -52 +79 68 00 cd -7a +7c c1 00 00 @@ -6163,7 +6319,7 @@ 60 00 cd -7a +7c 20 60 00 @@ -6251,7 +6407,7 @@ c0 01 86 -1b +42 20 20 56 @@ -6263,7 +6419,7 @@ c0 00 86 -1e +45 20 20 5c @@ -6295,11 +6451,11 @@ c0 02 06 -27 +4e c0 03 06 -65 +8c 20 20 56 @@ -6311,7 +6467,7 @@ 20 40 06 -05 +2c 20 40 7e @@ -6327,7 +6483,7 @@ c0 08 06 -36 +5d 1f ec 84 @@ -6339,7 +6495,7 @@ 20 21 06 -44 +6b d8 40 47 @@ -6423,11 +6579,11 @@ c0 05 06 -47 +6e c0 09 06 -55 +7c 20 20 58 @@ -6443,7 +6599,7 @@ c2 81 86 -4e +75 68 01 04 @@ -6471,7 +6627,7 @@ 24 22 86 -4a +71 20 40 5a @@ -6479,7 +6635,7 @@ 24 34 06 -4a +71 70 04 7a @@ -6559,11 +6715,11 @@ c0 00 86 -69 +90 c0 02 86 -6b +92 20 20 5a @@ -6583,7 +6739,7 @@ 20 20 07 -9d +c4 68 00 80 @@ -6631,7 +6787,7 @@ 20 37 06 -7a +a1 24 36 d8 @@ -6671,7 +6827,7 @@ 20 20 07 -9d +c4 68 10 80 @@ -6711,7 +6867,7 @@ 20 40 06 -90 +b7 60 18 80 @@ -6787,7 +6943,7 @@ 20 40 86 -a1 +c8 20 20 24 @@ -6802,12 +6958,12 @@ 03 20 40 -85 -fd +86 +24 24 40 87 -4e +75 68 01 46 @@ -6827,15 +6983,15 @@ da 20 4d -03 +05 20 40 02 -50 +56 60 08 cd -7b +7d 58 00 00 @@ -6843,7 +6999,7 @@ c5 13 06 -af +d6 58 00 00 @@ -6855,11 +7011,11 @@ 24 21 07 -64 +8b 68 00 cd -7a +7c 1f e6 7c @@ -6867,15 +7023,15 @@ 24 21 07 -54 +7b 68 00 cd -7a +7c c0 00 07 -65 +8c 20 60 00 @@ -6895,7 +7051,7 @@ 20 40 02 -0e +14 20 20 25 @@ -6939,7 +7095,7 @@ 20 3a 06 -c8 +ef 68 00 c5 @@ -7046,8 +7202,8 @@ de 20 5a -06 -e2 +07 +09 20 20 2b @@ -7079,7 +7235,7 @@ 20 20 07 -9d +c4 20 40 62 @@ -7098,16 +7254,16 @@ d6 c0 0f -86 -f4 +87 +1b c0 10 -06 -f7 +07 +1e c0 09 -06 -f1 +07 +18 20 20 7d @@ -7134,8 +7290,8 @@ 4f 20 20 -06 -f9 +07 +20 70 01 85 @@ -7175,7 +7331,7 @@ 20 20 03 -11 +19 68 00 cb @@ -7191,11 +7347,11 @@ c0 00 07 -07 +2e c0 00 87 -11 +38 20 60 00 @@ -7203,7 +7359,7 @@ 20 40 07 -21 +48 68 00 cb @@ -7227,7 +7383,7 @@ 20 42 87 -0f +36 20 60 00 @@ -7239,7 +7395,7 @@ 20 20 07 -2f +56 68 00 cb @@ -7271,7 +7427,7 @@ 20 3a 07 -1d +44 68 00 cb @@ -7279,7 +7435,7 @@ 20 3a 07 -2d +54 1f e0 ff @@ -7295,11 +7451,11 @@ c0 00 87 -2f +56 c0 00 07 -21 +48 20 60 00 @@ -7315,15 +7471,15 @@ c0 00 87 -27 +4e c0 01 07 -26 +4d 20 20 07 -28 +4f 20 20 44 @@ -7367,7 +7523,7 @@ 24 3a 07 -33 +5a 70 4b 27 @@ -7419,7 +7575,7 @@ 20 20 07 -47 +6e 70 4b 31 @@ -7474,11 +7630,11 @@ 00 70 4d -7d +7f 01 70 4d -7a +7c 00 20 60 @@ -7487,7 +7643,7 @@ 68 00 cd -7a +7c 1f e0 fe @@ -7495,14 +7651,14 @@ 60 00 cd -7a +7c 20 60 00 00 70 4d -7a +7c 03 20 60 @@ -7511,19 +7667,19 @@ 68 00 cd -7a +7c c1 90 00 00 70 4d -7a +7c 00 68 08 cd -7b +7d 58 00 00 @@ -7531,7 +7687,7 @@ c5 13 07 -5b +82 58 00 00 @@ -7547,11 +7703,11 @@ 68 00 cd -7d +7f c0 00 07 -6c +93 1f e0 ff @@ -7559,11 +7715,11 @@ 60 00 cd -7d +7f c0 00 07 -6c +93 70 41 de @@ -7574,16 +7730,16 @@ 00 70 4d -7a +7c 00 68 00 cd -7d +7f c0 01 07 -6a +91 1f e0 fe @@ -7591,11 +7747,11 @@ 60 00 cd -7d +7f c0 00 87 -62 +89 70 41 de @@ -7679,19 +7835,19 @@ c0 01 07 -86 +ad c0 02 07 -8e +b5 c0 10 07 -98 +bf 20 40 07 -93 +ba 70 89 55 @@ -7743,7 +7899,7 @@ 20 40 07 -93 +ba 70 89 55 @@ -7819,7 +7975,7 @@ 20 22 87 -bc +e3 60 08 cb @@ -7863,7 +8019,7 @@ 20 40 03 -63 +6b 68 01 cb @@ -7895,11 +8051,11 @@ 24 22 87 -ad +d4 20 40 03 -24 +2c 58 00 1f @@ -7932,8 +8088,8 @@ 20 00 01 -4c -95 +7b +83 aa 55 08 @@ -8015,7 +8171,7 @@ 55 01 00 -7e +80 4d 00 aa @@ -8511,7 +8667,7 @@ e0 46 00 -02 +01 03 07 02 @@ -8521,14 +8677,14 @@ 1b 1c 17 -1f +06 ff -1e +1f ff ff 04 08 -06 +1e 18 ff b0 @@ -8573,10 +8729,10 @@ 02 03 04 -15 1a 2a 3f +2a aa 55 04 @@ -8744,35 +8900,35 @@ 55 01 00 -87 +89 4c 01 aa 55 01 00 -42 +44 4c 01 aa 55 01 00 -86 +88 4c 04 aa 55 01 00 -7d +7f 4c 00 aa 55 02 00 -44 +46 4c c0 12 @@ -8780,7 +8936,7 @@ 55 03 00 -66 +68 4c 19 19 @@ -8789,7 +8945,7 @@ 55 10 00 -52 +54 4c 00 13 @@ -8811,14 +8967,14 @@ 55 01 00 -51 +53 4c ff aa 55 04 00 -4d +4f 4c 20 15 @@ -8828,7 +8984,7 @@ 55 06 00 -86 +88 4d 0f 0f @@ -8856,7 +9012,7 @@ 55 03 00 -70 +72 4c 80 4f @@ -9010,16 +9166,10 @@ 03 00 57 -4b -44 -31 -00 -55 -aa -aa -55 -49 -1c +4b +da +31 +00 ff 20 20 @@ -9040,7 +9190,7 @@ 20 40 02 -e3 +eb 20 40 34 @@ -9064,7 +9214,7 @@ 20 40 03 -af +b7 20 20 41 @@ -9284,7 +9434,7 @@ 68 00 cd -8c +8e c0 00 ad @@ -9296,7 +9446,7 @@ 68 00 cc -42 +44 60 00 91 @@ -9304,7 +9454,7 @@ 68 02 4c -78 +7a 60 02 11 @@ -9320,15 +9470,15 @@ 20 40 01 -b0 +b6 20 40 01 -c2 +c8 20 40 01 -62 +68 24 2c 00 @@ -9340,15 +9490,15 @@ 20 40 01 -8a +90 68 02 4c -69 +6b 68 0a 4d -86 +88 98 46 7c @@ -9360,27 +9510,27 @@ 68 00 cc -3f +41 c1 84 00 00 70 4d -91 +93 00 20 40 02 -c3 +cb 68 02 4c -69 +6b 68 0a 4c -4d +4f 98 46 7c @@ -9388,15 +9538,15 @@ 20 22 81 -a3 +a9 68 02 4c -69 +6b 68 0a 4c -78 +7a 98 46 7c @@ -9416,23 +9566,23 @@ 20 40 01 -5f +65 20 20 03 -82 +8a 68 02 4c -21 +23 20 20 01 -95 +9b 68 00 cd -7f +81 1f e0 fe @@ -9444,7 +9594,7 @@ 60 00 cd -7f +81 c0 00 00 @@ -9456,27 +9606,27 @@ 20 20 01 -91 +97 20 40 02 -c3 +cb 68 02 4c -78 +7a 60 02 4c -69 +6b 68 00 cd -8f +91 60 00 cc -4c +4e 20 40 00 @@ -9484,7 +9634,7 @@ 60 08 cd -8f +91 20 60 00 @@ -9492,11 +9642,11 @@ 20 40 01 -96 +9c 20 20 01 -2b +31 70 41 de @@ -9504,19 +9654,19 @@ 68 02 4d -86 +88 60 02 4c -69 +6b 68 00 cd -90 +92 60 00 cc -4c +4e 20 40 00 @@ -9524,7 +9674,7 @@ 60 08 cd -90 +92 20 60 00 @@ -9616,7 +9766,7 @@ 20 40 04 -66 +6e 70 46 c6 @@ -9640,7 +9790,7 @@ 20 40 07 -3b +62 70 4b 01 @@ -9656,7 +9806,7 @@ 20 40 03 -11 +19 20 20 41 @@ -9819,16 +9969,16 @@ 00 70 4d -81 +83 00 20 40 02 -c3 +cb 20 40 01 -ab +b1 70 41 bd @@ -9844,7 +9994,7 @@ 20 40 02 -72 +78 20 20 34 @@ -9888,7 +10038,7 @@ 20 40 04 -66 +6e 70 47 c6 @@ -9932,7 +10082,7 @@ 20 5a 05 -04 +0e 70 4b ba @@ -9964,7 +10114,7 @@ 20 40 03 -af +b7 20 40 58 @@ -9972,7 +10122,7 @@ 20 40 03 -11 +19 20 20 41 @@ -10000,11 +10150,11 @@ 20 40 07 -2d +54 20 40 03 -11 +19 20 40 3e @@ -10012,11 +10162,11 @@ 20 40 02 -72 +78 20 40 03 -5c +64 68 10 80 @@ -10032,7 +10182,7 @@ 20 20 02 -8f +94 00 00 00 @@ -10068,7 +10218,7 @@ 68 00 cc -46 +48 c0 00 ff @@ -10076,7 +10226,7 @@ 68 00 cc -51 +53 c0 00 80 @@ -10095,7 +10245,7 @@ 8c 70 4c -51 +53 11 70 11 @@ -10107,7 +10257,7 @@ 14 70 4c -51 +53 12 70 11 @@ -10119,7 +10269,7 @@ 14 70 4c -51 +53 13 70 11 @@ -10128,7 +10278,7 @@ 68 00 cc -42 +44 1f e1 7e @@ -10140,7 +10290,7 @@ 68 02 4c -78 +7a 60 02 11 @@ -10160,11 +10310,11 @@ 20 40 01 -b0 +b6 20 40 01 -40 +46 20 20 7f @@ -10172,7 +10322,7 @@ 68 00 cc -51 +53 c1 7f 80 @@ -10195,23 +10345,23 @@ 00 70 4c -51 +53 02 20 20 01 -04 +0a 70 4c -51 +53 03 20 20 01 -04 +0a 70 4c -51 +53 ff 70 0a @@ -10224,19 +10374,19 @@ 68 02 4c -21 +23 20 40 01 -95 +9b 20 20 01 -04 +0a 20 40 04 -88 +92 70 47 8b @@ -10268,11 +10418,11 @@ 20 40 02 -c3 +cb 68 02 4c -69 +6b 60 02 47 @@ -10280,7 +10430,7 @@ 20 20 03 -11 +19 00 00 00 @@ -10348,7 +10498,7 @@ 60 02 4c -78 +7a 20 40 3e @@ -10404,11 +10554,11 @@ 20 40 05 -ba +e1 20 40 03 -06 +0e df 20 00 @@ -10420,11 +10570,11 @@ 20 40 03 -78 +80 24 34 02 -d2 +da df 20 00 @@ -10436,15 +10586,15 @@ 20 40 03 -78 +80 24 34 02 -d2 +da 20 40 02 -d4 +dc 20 60 00 @@ -10576,7 +10726,7 @@ 68 00 cd -8c +8e c0 00 ad @@ -10588,19 +10738,19 @@ 20 40 01 -62 +68 24 2c 01 -2b +31 24 37 81 -2b +31 68 00 cd -91 +93 79 3f fe @@ -10608,7 +10758,7 @@ 60 00 cd -91 +93 70 4b 67 @@ -10620,11 +10770,11 @@ 20 40 01 -5f +65 20 20 03 -82 +8a 70 11 9e @@ -10632,7 +10782,7 @@ 68 00 cc -42 +44 60 00 91 @@ -10640,7 +10790,7 @@ 68 02 4c -78 +7a 60 02 11 @@ -10656,11 +10806,11 @@ 20 40 01 -b0 +b6 20 20 01 -c2 +c8 5f ff ff @@ -10688,7 +10838,7 @@ 20 20 03 -11 +19 00 00 00 @@ -10840,7 +10990,7 @@ 20 34 03 -75 +7d 79 20 00 @@ -10848,7 +10998,7 @@ 68 00 cd -91 +93 79 20 7e @@ -10856,15 +11006,15 @@ 60 00 cd -91 +93 20 40 01 -96 +9c 20 40 01 -2b +31 20 20 00 @@ -10876,7 +11026,7 @@ d8 c0 4c -69 +6b 20 40 7f @@ -10912,7 +11062,7 @@ 68 00 cd -91 +93 79 20 7e @@ -10920,7 +11070,7 @@ 60 00 cd -91 +93 58 00 00 @@ -10928,10 +11078,10 @@ 60 01 4d -8d +8f 70 4d -8c +8e 00 20 60 @@ -10980,7 +11130,7 @@ 60 01 4c -6e +70 20 40 42 @@ -10988,7 +11138,7 @@ 20 20 03 -75 +7d 00 00 00 @@ -11088,7 +11238,7 @@ 20 40 02 -c3 +cb 70 47 9e @@ -11104,7 +11254,7 @@ 20 40 03 -65 +6d 68 09 47 @@ -11124,7 +11274,7 @@ 20 40 03 -1d +25 18 0a 7e @@ -11144,7 +11294,7 @@ 20 40 02 -d2 +da 20 40 34 @@ -11220,7 +11370,7 @@ 20 20 07 -43 +6a 70 47 a1 @@ -11228,7 +11378,7 @@ 20 40 02 -cb +d3 58 00 00 @@ -11244,7 +11394,7 @@ 20 40 05 -be +e5 20 20 7d @@ -11868,7 +12018,7 @@ 20 40 07 -3e +65 70 47 a1 @@ -11904,7 +12054,7 @@ 20 40 02 -cb +d3 58 00 00 @@ -11920,7 +12070,7 @@ 20 40 05 -be +e5 20 20 7d @@ -12004,7 +12154,7 @@ 20 20 04 -8f +99 18 00 7e @@ -12160,7 +12310,7 @@ c2 85 04 -e8 +f2 20 20 41 @@ -12192,7 +12342,7 @@ 20 40 05 -8d +b4 20 60 80 @@ -12272,7 +12422,7 @@ c0 02 84 -6e +76 20 20 4d @@ -12609,5 +12759,5 @@ 55 00 00 -8a -07 +50 +06 Index: output/program.lis =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/program.lis (revision 4976) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/program.lis (working copy) @@ -7,62 +7,62 @@ p_zcode: p_wake_from_power: -0001 204003af call p_mouse_data_init +0001 204003b7 call p_mouse_data_init 0002 6800c1de fetch 1 ,mem_tx_power -0003 6000ccf8 store 1 ,mem_tx_power_temp -0004 2040074b call power_ctrl_pac_succ_cnt_init +0003 6000ccfa store 1 ,mem_tx_power_temp +0004 20400772 call power_ctrl_pac_succ_cnt_init 0005 6800c685 fetch 1 ,mem_ui_button_timeout 0006 6000cb47 store 1 ,mem_select_ui_button_count 0007 6800cb33 fetch 1 ,mem_bt_ui_button_timeout 0008 6000cb34 store 1 ,mem_bt_ui_button_count 0009 204043ca call mouse_bt_discovery_button_down_disable -000a 20400324 call p_mouse_spi_init +000a 2040032c call p_mouse_spi_init 000b 20400010 call p_mouse_cb_fuction 000c 20400023 call p_mouse_wakeup_from_power 000d 20400063 call p_mouse_select_device_button_wakeup_check p_mouse_setting_config: 000e 7011c580 jam zcode_80 ,mem_zcode_temp_param0 -000f 2020079d branch p_zcode_entrance +000f 202007c4 branch p_zcode_entrance p_mouse_cb_fuction: -0010 5800037f setarg p_mouse_g24_package_data -0011 60014d72 store 2 ,mem_cb_24g_data -0012 58000399 setarg p_mouse_le +0010 58000387 setarg p_mouse_g24_package_data +0011 60014d74 store 2 ,mem_cb_24g_data +0012 580003a1 setarg p_mouse_le 0013 600141ef store 2 ,mem_cb_le_process -0014 58000681 setarg p_le_mouse_bb_event_connect_complete +0014 580006a8 setarg p_le_mouse_bb_event_connect_complete 0015 600141f9 store 2 ,mem_cb_att_write -0016 580003ca setarg p_mouse_bt +0016 580003d2 setarg p_mouse_bt 0017 600141f1 store 2 ,mem_cb_bt_process -0018 5800025e setarg p_mouse_before_lpm +0018 58000264 setarg p_mouse_before_lpm 0019 600141ed store 2 ,mem_cb_before_lpm -001a 58000450 setarg p_mouse_priority_bb_event +001a 58000458 setarg p_mouse_priority_bb_event 001b 600141f5 store 2 ,mem_cb_bb_event_process -001c 580003f1 setarg p_mouse_idle +001c 580003f9 setarg p_mouse_idle 001d 600141f3 store 2 ,mem_cb_idle_process -001e 58000489 setarg p_mouse_before_hibernate +001e 58000493 setarg p_mouse_before_hibernate 001f 600141eb store 2 ,mem_cb_before_hibernate -0020 58000492 setarg p_mouse_bb_event_timer +0020 5800049c setarg p_mouse_bb_event_timer 0021 600141fd store 2 ,mem_cb_event_timer 0022 20600000 rtn p_mouse_wakeup_from_power: 0023 58000019 setarg 25 -0024 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +0024 60014d86 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init 0025 2455802d ncall p_mouse_24g_transmit_by_interrupt_exit_count_max ,wake -0026 204002db call p_mouse_init_sunt -0027 2040048f call p_mouse_sensor_powerdown +0026 204002e3 call p_mouse_init_sunt +0027 20400499 call p_mouse_sensor_powerdown p_mouse_wakeup_no_from_power: 0028 6800c71f fetch 1 ,mem_reconn_times_init 0029 6000c71e store 1 ,mem_reconn_times 002a 6800c241 fetch 1 ,mem_power_on_flag 002b c3810000 rtnbit1 2 -002c 2020055b branch p_mouse_dpi_config_default +002c 20200562 branch p_mouse_dpi_config_default p_mouse_24g_transmit_by_interrupt_exit_count_max: 002d 58000177 setarg 375 -002e 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +002e 60014d86 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init 002f 20600000 rtn 0030 20000001 nop 1 0031 20000001 nop 1 @@ -84,48 +84,48 @@ p_patch_array: 0040 c2840055 bbit1 8 ,pf_patch_ext 0041 c000806f beq patch00_1 ,p_soft_reset_1 -0042 c0010079 beq patch00_2 ,p_soft_reset_2 -0043 c042879b beq patch10_5 ,p_shutdown_radio -0044 c044876e beq patch11_1 ,p_set_freq_tx -0045 c02886b7 beq patch0a_1 ,p_slave_conn_recv_packet -0046 c05386bc beq patch14_7 ,p_lpm_dispatch -0047 c05686d4 beq patch15_5 ,p_lpm_set_mult +0042 c001007f beq patch00_2 ,p_soft_reset_2 +0043 c04287c2 beq patch10_5 ,p_shutdown_radio +0044 c0448795 beq patch11_1 ,p_set_freq_tx +0045 c02886de beq patch0a_1 ,p_slave_conn_recv_packet +0046 c05386e3 beq patch14_7 ,p_lpm_dispatch +0047 c05686fb beq patch15_5 ,p_lpm_set_mult 0048 c065b3e4 beq patch19_3 ,app_bt_start_reconnect + 3 -0049 c07486e5 beq patch1d_1 ,p_mouse_bb_disconnected -004a c0508082 beq patch14_1 ,p_init_param -004b c0588087 beq patch16_1 ,p_lpm_check_wake_lock -004c c0590091 beq patch16_2 ,p_g24_dispatch -004d c06202a1 beq patch18_4 ,p_device_init -004e c071855d beq patch1c_3 ,p_mouse_seting_dpi -004f c07203f4 beq patch1c_4 ,p_mouse_wheel_check -0050 c0730581 beq patch1c_6 ,p_mouse_motion -0051 c07505b7 beq patch1d_2 ,p_mouse_bb_event_discovery_btn -0052 c07585bc beq patch1d_3 ,p_mouse_start_discovery -0053 c07605c2 beq patch1d_4 ,p_mouse_stop_discovery +0049 c074870c beq patch1d_1 ,p_mouse_bb_disconnected +004a c0508088 beq patch14_1 ,p_init_param +004b c058808d beq patch16_1 ,p_lpm_check_wake_lock +004c c0590097 beq patch16_2 ,p_g24_dispatch +004d c06202a9 beq patch18_4 ,p_device_init +004e c0718564 beq patch1c_3 ,p_mouse_seting_dpi +004f c07203fc beq patch1c_4 ,p_mouse_wheel_check +0050 c073058a beq patch1c_6 ,p_mouse_motion +0051 c07505de beq patch1d_2 ,p_mouse_bb_event_discovery_btn +0052 c07585e3 beq patch1d_3 ,p_mouse_start_discovery +0053 c07605e9 beq patch1d_4 ,p_mouse_stop_discovery 0054 20202a8e branch loop pf_patch_ext: -0055 c01c85c8 beq patch27_1 ,p_le_slave_match -0056 c02185d0 beq patch28_3 ,p_le_next_adv_channel -0057 c02505d6 beq patch29_2 ,p_le_receive_skip -0058 c02b85d9 beq patch2a_7 ,p_le_update_param -0059 c02c85db beq patch2b_1 ,p_le_update_channel_map -005a c03185dd beq patch2c_3 ,p_le_prepare_tx -005b c033060c beq patch2c_6 ,p_le_parse -005c c0338623 beq patch2c_7 ,p_le_parse_l2cap -005d c035066d beq patch2d_2 ,p_le_adv_not_match -005e c03b8677 beq patch2e_7 ,p_le_lpm_setmult -005f c0460683 beq patch31_4 ,p_twspi_reset -0060 c046868f beq patch31_5 ,p_spid_init -0061 c07d06e9 beq patch3f_2 ,p_check_51cmd_once_continue +0055 c01c85ef beq patch27_1 ,p_le_slave_match +0056 c02185f7 beq patch28_3 ,p_le_next_adv_channel +0057 c02505fd beq patch29_2 ,p_le_receive_skip +0058 c02b8600 beq patch2a_7 ,p_le_update_param +0059 c02c8602 beq patch2b_1 ,p_le_update_channel_map +005a c0318604 beq patch2c_3 ,p_le_prepare_tx +005b c0330633 beq patch2c_6 ,p_le_parse +005c c033864a beq patch2c_7 ,p_le_parse_l2cap +005d c0350694 beq patch2d_2 ,p_le_adv_not_match +005e c03b869e beq patch2e_7 ,p_le_lpm_setmult +005f c04606aa beq patch31_4 ,p_twspi_reset +0060 c04686b6 beq patch31_5 ,p_spid_init +0061 c07d0710 beq patch3f_2 ,p_check_51cmd_once_continue 0062 20202a8e branch loop p_mouse_select_device_button_wakeup_check: 0063 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0064 204004d9 call p_mouse_get_select_state +0064 204004e3 call p_mouse_get_select_state 0065 24608000 nrtn true 0066 20407ec1 call delay_10ms -0067 204004d9 call p_mouse_get_select_state +0067 204004e3 call p_mouse_get_select_state 0068 24608000 nrtn true 0069 704b6d01 jam 1 ,mem_mouse_select_device_button_wakeup_flag 006a 20600000 rtn @@ -133,2585 +133,2636 @@ p_mouse_switch_hwakeup_bypb: 006b 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag 006c 207a0000 rtn blank -006d 204004f9 call p_mouse_switch_device_flag -006e 20200311 branch p_mouse_store_flash_device_info +006d 20400503 call p_mouse_switch_device_flag +006e 20200319 branch p_mouse_store_flash_device_info p_soft_reset_1: 006f d8a009ae arg mem_sp_state ,contw 0070 df20000c arg 12 ,loopcnt 0071 20407ed4 call clear_mem -0072 20400390 call p_mouse_le_txbuff_load -0073 204074c1 call init_memp -0074 20406a03 call rfcomm_init -0075 20405cf6 call init_lmp -0076 2455ac65 ncall lpm_disable_exen_output ,wake -0077 20407ccd call ui_init + 1 -0078 2020200c branch soft_reset + 11 +0072 20400398 call p_mouse_le_txbuff_load +0073 6810807b hfetch 1 ,core_gpio_pu3 +0074 1fe17e3f and_into 0x3f ,pdata +0075 6010807b hstore 1 ,core_gpio_pu3 +0076 68108081 hfetch 1 ,core_gpio_sel1 +0077 793ffe04 set0 4 ,pdata +0078 60108081 hstore 1 ,core_gpio_sel1 +0079 204074c1 call init_memp +007a 20406a03 call rfcomm_init +007b 20405cf6 call init_lmp +007c 2455ac65 ncall lpm_disable_exen_output ,wake +007d 20407ccd call ui_init + 1 +007e 2020200c branch soft_reset + 11 p_soft_reset_2: -0079 2055b2e3 call app_lpm_init ,wake -007a 2040756a call publickey_init -007b 2055ab41 call lpm_recover_clk ,wake +007f 2055b2e3 call app_lpm_init ,wake +0080 2040756a call publickey_init +0081 2055ab41 call lpm_recover_clk ,wake p_sp_cal_loop: -007c 204076dc call sp_calc_sequence -007d 6800c65a fetch 1 ,mem_ssp_enable -007e 203a2012 branch main_loop ,blank -007f 6800c5b1 fetch 1 ,mem_sp_local_key_invalid -0080 203a007c branch p_sp_cal_loop ,blank -0081 20202012 branch main_loop +0082 204076dc call sp_calc_sequence +0083 6800c65a fetch 1 ,mem_ssp_enable +0084 203a2012 branch main_loop ,blank +0085 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +0086 203a0082 branch p_sp_cal_loop ,blank +0087 20202012 branch main_loop p_init_param: -0082 58000a06 setarg param_le_version -0083 6001c510 store 3 ,mem_lmp_version -0084 58001d87 setarg param_le_subversion -0085 60014513 store 2 ,mem_lmp_version + 3 -0086 20202aa2 branch init_param + 12 +0088 58000a06 setarg param_le_version +0089 6001c510 store 3 ,mem_lmp_version +008a 58001d87 setarg param_le_subversion +008b 60014513 store 2 ,mem_lmp_version + 3 +008c 20202aa2 branch init_param + 12 p_lpm_check_wake_lock: -0087 c6130000 rtnmark1 mark_24g -0088 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -0089 c0007fef beq 0 ,disable_blank -008a 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject -008b c000ffef beq le_lpm_disable ,disable_blank -008c 68014248 fetch 2 ,mem_sdp_remote_cid -008d 243a7fef nbranch disable_blank ,blank -008e 6800c808 fetch 1 ,mem_mouse_wheel_trigger -008f 243a7fef nbranch disable_blank ,blank -0090 20207ff1 branch enable_blank +008d c6130000 rtnmark1 mark_24g +008e 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +008f c0007fef beq 0 ,disable_blank +0090 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject +0091 c000ffef beq le_lpm_disable ,disable_blank +0092 68014248 fetch 2 ,mem_sdp_remote_cid +0093 243a7fef nbranch disable_blank ,blank +0094 6800c808 fetch 1 ,mem_mouse_wheel_trigger +0095 243a7fef nbranch disable_blank ,blank +0096 20207ff1 branch enable_blank p_g24_dispatch: -0091 c6930000 rtnmark0 mark_24g -0092 6800cd91 fetch 1 ,mem_24g_conn_sm -0093 c28080a5 bbit1 state_24g_pair ,p_g24_pair_dispatch -0094 c28100a7 bbit1 state_24g_reconn ,p_g24_reconn_dispatch -0095 6800cd81 fetch 1 ,mem_24g_transmit_by_interrupt -0096 c00080a9 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +0097 c6930000 rtnmark0 mark_24g +0098 6800cd93 fetch 1 ,mem_24g_conn_sm +0099 c28080ab bbit1 state_24g_pair ,p_g24_pair_dispatch +009a c28100ad bbit1 state_24g_reconn ,p_g24_reconn_dispatch +009b 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt +009c c00080af beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt p_g24_transmit_process: -0097 2040013d call p_g24_txdata_prep -0098 243400c4 nbranch p_g24_nodata_transmit ,user -0099 20400118 call p_g24_rf_sta_check +009d 20400143 call p_g24_txdata_prep +009e 243400ca nbranch p_g24_nodata_transmit ,user +009f 2040011e call p_g24_rf_sta_check p_g24_transmit_start: -009a 204000f3 call p_g24_transmit_packet -009b 6800cc51 fetch 1 ,mem_24g_pairing_sm -009c c1ff8000 rtnne state_24g_pairing_success -009d 204006a5 call power_ctrl_start -009e 6800cb29 fetch 1 ,mem_mouse_multi_led_state -009f c0008382 beq on ,p_g24_transmit_by_interrupt_enable +00a0 204000f9 call p_g24_transmit_packet +00a1 6800cc53 fetch 1 ,mem_24g_pairing_sm +00a2 c1ff8000 rtnne state_24g_pairing_success +00a3 204006cc call power_ctrl_start +00a4 6800cb29 fetch 1 ,mem_mouse_multi_led_state +00a5 c000838a beq on ,p_g24_transmit_by_interrupt_enable p_g24_short_sleep: -00a0 20400268 call p_g24_lpm_wait -00a1 24740000 nrtn user -00a2 20400265 call p_clear_wake -00a3 5800e290 setarg 58000 +00a6 2040026e call p_g24_lpm_wait +00a7 24740000 nrtn user +00a8 2040026b call p_clear_wake +00a9 5800e290 setarg 58000 p_g24_enter_sleep: -00a4 20202d8c branch g24_lpm_long_sleep2 +00aa 20202d8c branch g24_lpm_long_sleep2 p_g24_pair_dispatch: -00a5 7011c5c0 jam zcode_c0 ,mem_zcode_temp_param0 -00a6 2020079d branch p_zcode_entrance +00ab 7011c5c0 jam zcode_c0 ,mem_zcode_temp_param0 +00ac 202007c4 branch p_zcode_entrance p_g24_reconn_dispatch: -00a7 7011c570 jam zcode_70 ,mem_zcode_temp_param0 -00a8 2020079d branch p_zcode_entrance +00ad 7011c570 jam zcode_70 ,mem_zcode_temp_param0 +00ae 202007c4 branch p_zcode_entrance p_g24_transmit_by_interrupt: -00a9 20400241 call p_g24_timer_check -00aa 24740000 nrtn user -00ab 204000be call p_g24_interval_calibrate -00ac 68014d82 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count -00ad 1fe0fe01 increase 1 ,pdata -00ae 60014d82 store 2 ,mem_24g_transmit_by_interrupt_exit_count -00af 68094d84 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init -00b0 98467c00 isub temp ,null -00b1 204280b3 call p_g24_transmit_by_interrupt_exit ,zero -00b2 20200097 branch p_g24_transmit_process +00af 20400247 call p_g24_timer_check +00b0 24740000 nrtn user +00b1 204000c4 call p_g24_interval_calibrate +00b2 68014d84 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +00b3 1fe0fe01 increase 1 ,pdata +00b4 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count +00b5 68094d86 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init +00b6 98467c00 isub temp ,null +00b7 204280b9 call p_g24_transmit_by_interrupt_exit ,zero +00b8 2020009d branch p_g24_transmit_process p_g24_transmit_by_interrupt_exit: -00b3 704d8100 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -00b4 58000000 setarg 0 -00b5 60014d82 store 2 ,mem_24g_transmit_by_interrupt_exit_count -00b6 58000019 setarg 25 -00b7 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +00b9 704d8300 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +00ba 58000000 setarg 0 +00bb 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count +00bc 58000019 setarg 25 +00bd 60014d86 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init p_g24_interval_min: -00b8 704c7c00 jam 0 ,mem_24g_pac_index -00b9 6800cc67 fetch 1 ,mem_24g_interval_min +00be 704c7e00 jam 0 ,mem_24g_pac_index +00bf 6800cc69 fetch 1 ,mem_24g_interval_min p_g24_current_interval_store: -00ba 6000cc66 store 1 ,mem_24g_interval -00bb 20600000 rtn +00c0 6000cc68 store 1 ,mem_24g_interval +00c1 20600000 rtn p_g24_interval_max: -00bc 6800cc68 fetch 1 ,mem_24g_interval_max -00bd 202000ba branch p_g24_current_interval_store +00c2 6800cc6a fetch 1 ,mem_24g_interval_max +00c3 202000c0 branch p_g24_current_interval_store p_g24_interval_calibrate: -00be 6800cc7c fetch 1 ,mem_24g_pac_index -00bf 1fe0fe01 increase 1 ,pdata -00c0 6000cc7c store 1 ,mem_24g_pac_index -00c1 c00200bc beq 4 ,p_g24_interval_max -00c2 c00280b8 beq 5 ,p_g24_interval_min -00c3 20600000 rtn +00c4 6800cc7e fetch 1 ,mem_24g_pac_index +00c5 1fe0fe01 increase 1 ,pdata +00c6 6000cc7e store 1 ,mem_24g_pac_index +00c7 c00200c2 beq 4 ,p_g24_interval_max +00c8 c00280be beq 5 ,p_g24_interval_min +00c9 20600000 rtn p_g24_nodata_transmit: -00c4 6800cc6d fetch 1 ,mem_24g_abort_pac -00c5 205a00ca call p_g24_send_abort_packet ,blank +00ca 6800cc6f fetch 1 ,mem_24g_abort_pac +00cb 205a00d0 call p_g24_send_abort_packet ,blank p_g24_long_sleep: -00c6 20400268 call p_g24_lpm_wait -00c7 24740000 nrtn user -00c8 6801cc70 fetch 3 ,mem_24g_enter_hibernate -00c9 20202d8c branch g24_lpm_long_sleep2 +00cc 2040026e call p_g24_lpm_wait +00cd 24740000 nrtn user +00ce 6801cc72 fetch 3 ,mem_24g_enter_hibernate +00cf 20202d8c branch g24_lpm_long_sleep2 p_g24_send_abort_packet: -00ca 704c6d01 jam 1 ,mem_24g_abort_pac -00cb 704d7600 jam 0 ,mem_24g_rf_hop_ch -00cc 204000da call p_g24_transmit_rf_ctrl_clear -00cd 6000cbdd store 1 ,mem_24g_txbuf -00ce 58000000 setarg 0 -00cf 6003cbde store 7 ,mem_24g_txbuf + 1 -00d0 68024c78 fetch 4 ,mem_24g_device_addr -00d1 60024be5 store 4 ,mem_24g_txbuf + 8 -00d2 704c410c jam 12 ,mem_24g_datalen -00d3 6800cc42 fetch 1 ,mem_24g_data_type -00d4 79207e03 set1 bit_abort ,pdata -00d5 6000cc42 store 1 ,mem_24g_data_type -00d6 20400140 call p_g24_txdata_enable_tx -00d7 2020009a branch p_g24_transmit_start +00d0 704c6f01 jam 1 ,mem_24g_abort_pac +00d1 704d7800 jam 0 ,mem_24g_rf_hop_ch +00d2 204000e0 call p_g24_transmit_rf_ctrl_clear +00d3 6000cbdf store 1 ,mem_24g_txbuf +00d4 58000000 setarg 0 +00d5 6003cbe0 store 7 ,mem_24g_txbuf + 1 +00d6 68024c7a fetch 4 ,mem_24g_device_addr +00d7 60024be7 store 4 ,mem_24g_txbuf + 8 +00d8 704c430c jam 12 ,mem_24g_datalen +00d9 6800cc44 fetch 1 ,mem_24g_data_type +00da 79207e03 set1 bit_abort ,pdata +00db 6000cc44 store 1 ,mem_24g_data_type +00dc 20400146 call p_g24_txdata_enable_tx +00dd 202000a0 branch p_g24_transmit_start p_g24_transmit_rf_sta_init: -00d8 704d7701 jam 1 ,mem_24g_rf_last_sta -00d9 704d7900 jam 0 ,mem_24g_sync_cnt +00de 704d7901 jam 1 ,mem_24g_rf_last_sta +00df 704d7b00 jam 0 ,mem_24g_sync_cnt p_g24_transmit_rf_ctrl_clear: -00da 6800cc42 fetch 1 ,mem_24g_data_type -00db 1fe17e07 and_into bits_data ,pdata -00dc 6000cc42 store 1 ,mem_24g_data_type -00dd 20600000 rtn +00e0 6800cc44 fetch 1 ,mem_24g_data_type +00e1 1fe17e07 and_into bits_data ,pdata +00e2 6000cc44 store 1 ,mem_24g_data_type +00e3 20600000 rtn p_g24_hop_ch_enable: -00de 6800cc42 fetch 1 ,mem_24g_data_type -00df 79207e04 set1 bit_hop ,pdata -00e0 6000cc42 store 1 ,mem_24g_data_type -00e1 6000cbfd store 1 ,mem_24g_txpayload -00e2 20600000 rtn +00e4 6800cc44 fetch 1 ,mem_24g_data_type +00e5 79207e04 set1 bit_hop ,pdata +00e6 6000cc44 store 1 ,mem_24g_data_type +00e7 6000cbff store 1 ,mem_24g_txpayload +00e8 20600000 rtn p_g24_hop_enable_packet: -00e3 6800cc42 fetch 1 ,mem_24g_data_type -00e4 c4020000 rtnbit0 bit_hop +00e9 6800cc44 fetch 1 ,mem_24g_data_type +00ea c4020000 rtnbit0 bit_hop p_g24_hop_ch_disable: -00e5 6800cc42 fetch 1 ,mem_24g_data_type -00e6 793ffe04 set0 bit_hop ,pdata -00e7 6000cc42 store 1 ,mem_24g_data_type -00e8 6000cbfd store 1 ,mem_24g_txpayload -00e9 204005fd call power_ctrl_pac_succ_decrs -00ea 2020012b branch p_g24_ch +00eb 6800cc44 fetch 1 ,mem_24g_data_type +00ec 793ffe04 set0 bit_hop ,pdata +00ed 6000cc44 store 1 ,mem_24g_data_type +00ee 6000cbff store 1 ,mem_24g_txpayload +00ef 20400624 call power_ctrl_pac_succ_decrs +00f0 20200131 branch p_g24_ch p_g24_rf_hop_attemp_again: -00eb 6800cd76 fetch 1 ,mem_24g_rf_hop_ch -00ec c08080da bne 1 ,p_g24_transmit_rf_ctrl_clear +00f1 6800cd78 fetch 1 ,mem_24g_rf_hop_ch +00f2 c08080e0 bne 1 ,p_g24_transmit_rf_ctrl_clear p_g24_rf_hop_fastly: -00ed 6800cd74 fetch 1 ,mem_24g_hop_fastly_cnt -00ee 1fe0fe01 increase 1 ,pdata -00ef 6000cd74 store 1 ,mem_24g_hop_fastly_cnt -00f0 c0020108 beq 4 ,p_g24_rf_hop_fastly_exit -00f1 2040012b call p_g24_ch -00f2 704c8602 jam 2 ,mem_24g_max_retry +00f3 6800cd76 fetch 1 ,mem_24g_hop_fastly_cnt +00f4 1fe0fe01 increase 1 ,pdata +00f5 6000cd76 store 1 ,mem_24g_hop_fastly_cnt +00f6 c002010e beq 4 ,p_g24_rf_hop_fastly_exit +00f7 20400131 call p_g24_ch +00f8 704c8802 jam 2 ,mem_24g_max_retry p_g24_transmit_packet: -00f3 704c4a00 jam 0 ,mem_24g_retry +00f9 704c4c00 jam 0 ,mem_24g_retry p_g24_transmit_loop: -00f4 d9600d00 arg param_rx_setup ,timeup -00f5 34730200 until clkn_rt ,meet -00f6 20400162 call p_g24_transmit_receive_ack -00f7 242c016d nbranch p_g24_retransmit ,sync -00f8 2437816d nbranch p_g24_retransmit ,user3 -00f9 2040015f call p_g24_txbuf_clear -00fa 2040018a call p_g24_ackpayload_parse -00fb 2040074e call power_ctrl_pac_succ_incrs +00fa d9600d00 arg param_rx_setup ,timeup +00fb 34730200 until clkn_rt ,meet +00fc 20400168 call p_g24_transmit_receive_ack +00fd 242c0173 nbranch p_g24_retransmit ,sync +00fe 24378173 nbranch p_g24_retransmit ,user3 +00ff 20400165 call p_g24_txbuf_clear +0100 20400190 call p_g24_ackpayload_parse +0101 20400775 call power_ctrl_pac_succ_incrs p_g24_transmit_next_packet: -00fc 704b5200 jam 0 ,mem_retry_count -00fd 6800cc40 fetch 1 ,mem_24g_pid -00fe 1fe0fe01 increase 1 ,pdata -00ff 6000cc40 store 1 ,mem_24g_pid -0100 204000e3 call p_g24_hop_enable_packet -0101 6800cc51 fetch 1 ,mem_24g_pairing_sm -0102 c0ff81a8 bne state_24g_pairing_success ,p_g24_paring_mode_start -0103 2040010f call p_g24_transmit_succ_rf_config +0102 704b5200 jam 0 ,mem_retry_count +0103 6800cc42 fetch 1 ,mem_24g_pid +0104 1fe0fe01 increase 1 ,pdata +0105 6000cc42 store 1 ,mem_24g_pid +0106 204000e9 call p_g24_hop_enable_packet +0107 6800cc53 fetch 1 ,mem_24g_pairing_sm +0108 c0ff81ae bne state_24g_pairing_success ,p_g24_paring_mode_start +0109 20400115 call p_g24_transmit_succ_rf_config p_g24_transmit_abandon: -0104 58000000 setarg 0 -0105 60024c46 store 4 ,mem_24g_ensure -0106 6000cd75 store 1 ,mem_24g_hop_pac_retry -0107 20600000 rtn +010a 58000000 setarg 0 +010b 60024c48 store 4 ,mem_24g_ensure +010c 6000cd77 store 1 ,mem_24g_hop_pac_retry +010d 20600000 rtn p_g24_rf_hop_fastly_exit: -0108 204005fd call power_ctrl_pac_succ_decrs -0109 704d7400 jam 0 ,mem_24g_hop_fastly_cnt -010a 202000da branch p_g24_transmit_rf_ctrl_clear +010e 20400624 call power_ctrl_pac_succ_decrs +010f 704d7600 jam 0 ,mem_24g_hop_fastly_cnt +0110 202000e0 branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_hop_pac_succ_wo_hop: -010b 704d7902 jam 2 ,mem_24g_sync_cnt +0111 704d7b02 jam 2 ,mem_24g_sync_cnt p_g24_transmit_hop_pac_succ: -010c 704d7701 jam 1 ,mem_24g_rf_last_sta -010d 704d7600 jam 0 ,mem_24g_rf_hop_ch -010e 202000da branch p_g24_transmit_rf_ctrl_clear +0112 704d7901 jam 1 ,mem_24g_rf_last_sta +0113 704d7800 jam 0 ,mem_24g_rf_hop_ch +0114 202000e0 branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_succ_rf_config: -010f 6800cd78 fetch 1 ,mem_24g_rf_work_stage -0110 c001810c beq 3 ,p_g24_transmit_hop_pac_succ -0111 6800cc42 fetch 1 ,mem_24g_data_type -0112 2fec0004 isolate0 bit_hop ,pdata -0113 202080d8 branch p_g24_transmit_rf_sta_init ,true -0114 6800cd78 fetch 1 ,mem_24g_rf_work_stage -0115 c000810b beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop -0116 c001010c beq 2 ,p_g24_transmit_hop_pac_succ -0117 20600000 rtn +0115 6800cd7a fetch 1 ,mem_24g_rf_work_stage +0116 c0018112 beq 3 ,p_g24_transmit_hop_pac_succ +0117 6800cc44 fetch 1 ,mem_24g_data_type +0118 2fec0004 isolate0 bit_hop ,pdata +0119 202080de branch p_g24_transmit_rf_sta_init ,true +011a 6800cd7a fetch 1 ,mem_24g_rf_work_stage +011b c0008111 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +011c c0010112 beq 2 ,p_g24_transmit_hop_pac_succ +011d 20600000 rtn p_g24_rf_sta_check: -0118 6800cc51 fetch 1 ,mem_24g_pairing_sm -0119 c1ff8000 rtnne state_24g_pairing_success -011a 2040011d call p_g24_rf_laststa_synccnt_check -011b 24560125 ncall p_g24_rf_sync_cnt_check ,user2 -011c 20600000 rtn +011e 6800cc53 fetch 1 ,mem_24g_pairing_sm +011f c1ff8000 rtnne state_24g_pairing_success +0120 20400123 call p_g24_rf_laststa_synccnt_check +0121 2456012b ncall p_g24_rf_sync_cnt_check ,user2 +0122 20600000 rtn p_g24_rf_laststa_synccnt_check: -011d 78567c00 disable user2 -011e 6800cd77 fetch 1 ,mem_24g_rf_last_sta -011f c1808000 rtnne 1 -0120 6800cd79 fetch 1 ,mem_24g_sync_cnt -0121 c1800000 rtnne 0 -0122 704d7801 jam 1 ,mem_24g_rf_work_stage -0123 704c8604 jam 4 ,mem_24g_max_retry -0124 20207feb branch enable_user2 +0123 78567c00 disable user2 +0124 6800cd79 fetch 1 ,mem_24g_rf_last_sta +0125 c1808000 rtnne 1 +0126 6800cd7b fetch 1 ,mem_24g_sync_cnt +0127 c1800000 rtnne 0 +0128 704d7a01 jam 1 ,mem_24g_rf_work_stage +0129 704c8804 jam 4 ,mem_24g_max_retry +012a 20207feb branch enable_user2 p_g24_rf_sync_cnt_check: -0125 6800cd79 fetch 1 ,mem_24g_sync_cnt -0126 203a0138 branch p_g24_rf_hop_attemp ,blank -0127 1fe0ffff increase -1 ,pdata -0128 6000cd79 store 1 ,mem_24g_sync_cnt -0129 704d7802 jam 2 ,mem_24g_rf_work_stage -012a 704c8604 jam 4 ,mem_24g_max_retry +012b 6800cd7b fetch 1 ,mem_24g_sync_cnt +012c 203a013e branch p_g24_rf_hop_attemp ,blank +012d 1fe0ffff increase -1 ,pdata +012e 6000cd7b store 1 ,mem_24g_sync_cnt +012f 704d7a02 jam 2 ,mem_24g_rf_work_stage +0130 704c8804 jam 4 ,mem_24g_max_retry p_g24_ch: -012b 6808cc4c fetcht 1 ,mem_24g_current_ch_number -012c 6800cc69 fetch 1 ,mem_24g_addr -012d 1fe17e03 and_into 0x03 ,pdata -012e 1fefa204 mul32 pdata ,4 ,rega -012f 58004c52 setarg mem_24g_ch_map1 -0130 9a20fe00 iadd rega ,pdata -0131 98408c00 iadd temp ,contr -0132 e8c08000 ifetch 1 ,contr -0133 6000cc4b store 1 ,mem_24g_ch -0134 18408401 increase 1 ,temp -0135 18410403 and_into 3 ,temp -0136 6008cc4c storet 1 ,mem_24g_current_ch_number -0137 20600000 rtn +0131 6808cc4e fetcht 1 ,mem_24g_current_ch_number +0132 6800cc6b fetch 1 ,mem_24g_addr +0133 1fe17e03 and_into 0x03 ,pdata +0134 1fefa204 mul32 pdata ,4 ,rega +0135 58004c54 setarg mem_24g_ch_map1 +0136 9a20fe00 iadd rega ,pdata +0137 98408c00 iadd temp ,contr +0138 e8c08000 ifetch 1 ,contr +0139 6000cc4d store 1 ,mem_24g_ch +013a 18408401 increase 1 ,temp +013b 18410403 and_into 3 ,temp +013c 6008cc4e storet 1 ,mem_24g_current_ch_number +013d 20600000 rtn p_g24_rf_hop_attemp: -0138 704d7803 jam 3 ,mem_24g_rf_work_stage -0139 6800cd76 fetch 1 ,mem_24g_rf_hop_ch -013a 243a00eb nbranch p_g24_rf_hop_attemp_again ,blank -013b 704c8602 jam 2 ,mem_24g_max_retry -013c 2020012b branch p_g24_ch +013e 704d7a03 jam 3 ,mem_24g_rf_work_stage +013f 6800cd78 fetch 1 ,mem_24g_rf_hop_ch +0140 243a00f1 nbranch p_g24_rf_hop_attemp_again ,blank +0141 704c8802 jam 2 ,mem_24g_max_retry +0142 20200131 branch p_g24_ch p_g24_txdata_prep: -013d 6800cc51 fetch 1 ,mem_24g_pairing_sm -013e c0ff81a6 bne state_24g_pairing_success ,p_g24_pairing_sm +0143 6800cc53 fetch 1 ,mem_24g_pairing_sm +0144 c0ff81ac bne state_24g_pairing_success ,p_g24_pairing_sm p_g24_txdata_prep_packeage_data: -013f 20400143 call p_g24_package_data +0145 20400149 call p_g24_package_data p_g24_txdata_enable_tx: -0140 204001c2 call p_g24_transmit_prep -0141 704c4601 jam ensure_on_24g ,mem_24g_ensure -0142 20600000 rtn +0146 204001c8 call p_g24_transmit_prep +0147 704c4801 jam ensure_on_24g ,mem_24g_ensure +0148 20600000 rtn p_g24_package_data: -0143 68014d72 fetch 2 ,mem_cb_24g_data -0144 20407f9c call callback_func -0145 20340149 branch p_g24_accumulate_mouse_data ,user -0146 6803cbde fetch 7 ,mem_24g_txbuf + 1 -0147 207a0000 rtn blank -0148 20207fe7 branch enable_user +0149 68014d74 fetch 2 ,mem_cb_24g_data +014a 20407f9c call callback_func +014b 2034014f branch p_g24_accumulate_mouse_data ,user +014c 6803cbe0 fetch 7 ,mem_24g_txbuf + 1 +014d 207a0000 rtn blank +014e 20207fe7 branch enable_user p_g24_accumulate_mouse_data: -0149 704c6d00 jam 0 ,mem_24g_abort_pac -014a 1a20fe01 add rega ,1 ,pdata -014b 6000cc41 store 1 ,mem_24g_datalen -014c 204000da call p_g24_transmit_rf_ctrl_clear -014d 6000cbdd store 1 ,mem_24g_txbuf -014e e8a88000 ifetcht 1 ,contw -014f ea408000 ifetch 1 ,regb -0150 9841fe00 ior temp ,pdata -0151 e0a08000 istore 1 ,contw -0152 1a40a401 increase 1 ,regb -0153 ea420000 ifetch 4 ,regb -0154 e0a20000 istore 4 ,contw -0155 1a40a404 increase 4 ,regb -0156 d8a04be3 arg mem_24g_txbuf + 6 ,contw -0157 df200002 arg 2 ,loopcnt +014f 704c6f00 jam 0 ,mem_24g_abort_pac +0150 1a20fe01 add rega ,1 ,pdata +0151 6000cc43 store 1 ,mem_24g_datalen +0152 204000e0 call p_g24_transmit_rf_ctrl_clear +0153 6000cbdf store 1 ,mem_24g_txbuf +0154 e8a88000 ifetcht 1 ,contw +0155 ea408000 ifetch 1 ,regb +0156 9841fe00 ior temp ,pdata +0157 e0a08000 istore 1 ,contw +0158 1a40a401 increase 1 ,regb +0159 ea420000 ifetch 4 ,regb +015a e0a20000 istore 4 ,contw +015b 1a40a404 increase 4 ,regb +015c d8a04be5 arg mem_24g_txbuf + 6 ,contw +015d df200002 arg 2 ,loopcnt p_g24_accumulation_loop: -0158 ea408000 ifetch 1 ,regb -0159 e8a88000 ifetcht 1 ,contw -015a 9840fe00 iadd temp ,pdata -015b e0a08000 istore 1 ,contw -015c 1a40a401 increase 1 ,regb -015d c2000158 loop p_g24_accumulation_loop -015e 20600000 rtn +015e ea408000 ifetch 1 ,regb +015f e8a88000 ifetcht 1 ,contw +0160 9840fe00 iadd temp ,pdata +0161 e0a08000 istore 1 ,contw +0162 1a40a401 increase 1 ,regb +0163 c200015e loop p_g24_accumulation_loop +0164 20600000 rtn p_g24_txbuf_clear: -015f df200004 arg 4 ,loopcnt -0160 d8a04bdd arg mem_24g_txbuf ,contw -0161 20207ec6 branch memset0 +0165 df200004 arg 4 ,loopcnt +0166 d8a04bdf arg mem_24g_txbuf ,contw +0167 20207ec6 branch memset0 p_g24_transmit_receive_ack: -0162 7857fc00 disable user3 -0163 2040021e call p_g24_transmit -0164 18002a00 force 0 ,radio_ctrl -0165 68024c69 fetch 4 ,mem_24g_addr -0166 98001200 iforce access -0167 68088017 fetcht 1 ,mem_last_freq -0168 2040291f call set_freq_rx -0169 20402924 call rf_rx_enable -016a 204001da call p_g24_receive_rxon -016b 2057821b call p_g24_end_of_packet ,user3 -016c 20600000 rtn +0168 7857fc00 disable user3 +0169 20400224 call p_g24_transmit +016a 18002a00 force 0 ,radio_ctrl +016b 68024c6b fetch 4 ,mem_24g_addr +016c 98001200 iforce access +016d 68088017 fetcht 1 ,mem_last_freq +016e 2040291f call set_freq_rx +016f 20402924 call rf_rx_enable +0170 204001e0 call p_g24_receive_rxon +0171 20578221 call p_g24_end_of_packet ,user3 +0172 20600000 rtn p_g24_retransmit: -016d 6800cc6d fetch 1 ,mem_24g_abort_pac -016e 247a0000 nrtn blank -016f 68014c47 fetch 2 ,mem_24g_txfail_cnt -0170 1fe0fe01 increase 1 ,pdata -0171 60014c47 store 2 ,mem_24g_txfail_cnt -0172 6800cc48 fetch 1 ,mem_24g_txfail_cnt + 1 -0173 c2822dd4 bbit1 4 ,g24_stop_24g_mode -0174 6800cc51 fetch 1 ,mem_24g_pairing_sm -0175 c0ff8178 bne state_24g_pairing_success ,p_g24_tx_paring_retry -0176 20400180 call p_g24_tx_hop_ch_process -0177 202000f4 branch p_g24_transmit_loop +0173 6800cc6f fetch 1 ,mem_24g_abort_pac +0174 247a0000 nrtn blank +0175 68014c49 fetch 2 ,mem_24g_txfail_cnt +0176 1fe0fe01 increase 1 ,pdata +0177 60014c49 store 2 ,mem_24g_txfail_cnt +0178 6800cc4a fetch 1 ,mem_24g_txfail_cnt + 1 +0179 c2822dd4 bbit1 4 ,g24_stop_24g_mode +017a 6800cc53 fetch 1 ,mem_24g_pairing_sm +017b c0ff817e bne state_24g_pairing_success ,p_g24_tx_paring_retry +017c 20400186 call p_g24_tx_hop_ch_process +017d 202000fa branch p_g24_transmit_loop p_g24_tx_paring_retry: -0178 6800cc47 fetch 1 ,mem_24g_txfail_cnt -0179 c1ff8000 rtnne 0xff +017e 6800cc49 fetch 1 ,mem_24g_txfail_cnt +017f c1ff8000 rtnne 0xff p_g24_tx_attempt_fail: -017a 58000000 setarg 0 -017b 60014c47 store 2 ,mem_24g_txfail_cnt -017c 20202dd4 branch g24_stop_24g_mode +0180 58000000 setarg 0 +0181 60014c49 store 2 ,mem_24g_txfail_cnt +0182 20202dd4 branch g24_stop_24g_mode p_g24_tx_fast_hop: -017d 20400765 call power_ctrl_txpower_incrs -017e 204005fd call power_ctrl_pac_succ_decrs -017f 2020012b branch p_g24_ch +0183 2040078c call power_ctrl_txpower_incrs +0184 20400624 call power_ctrl_pac_succ_decrs +0185 20200131 branch p_g24_ch p_g24_tx_hop_ch_process: -0180 6800cc4a fetch 1 ,mem_24g_retry -0181 1fe67c0b sub pdata ,11 ,null -0182 2421017d nbranch p_g24_tx_fast_hop ,positive -0183 1fe0fe01 increase 1 ,pdata -0184 6000cc4a store 1 ,mem_24g_retry -0185 c00100de beq 2 ,p_g24_hop_ch_enable -0186 c00300e5 beq 6 ,p_g24_hop_ch_disable -0187 c00400de beq 8 ,p_g24_hop_ch_enable -0188 c00600e5 beq 12 ,p_g24_hop_ch_disable -0189 20600000 rtn +0186 6800cc4c fetch 1 ,mem_24g_retry +0187 1fe67c0b sub pdata ,11 ,null +0188 24210183 nbranch p_g24_tx_fast_hop ,positive +0189 1fe0fe01 increase 1 ,pdata +018a 6000cc4c store 1 ,mem_24g_retry +018b c00100e4 beq 2 ,p_g24_hop_ch_enable +018c c00300eb beq 6 ,p_g24_hop_ch_disable +018d c00400e4 beq 8 ,p_g24_hop_ch_enable +018e c00600eb beq 12 ,p_g24_hop_ch_disable +018f 20600000 rtn p_g24_ackpayload_parse: -018a 204001b5 call p_g24_read_len_pid_crc -018b 6800cc3f fetch 1 ,mem_24g_rxdata_length -018c 207a0000 rtn blank -018d 98007200 iforce loopcnt -018e d8c04bbd arg mem_24g_rxbuf + 2 ,contr -018f d8a04c1f arg mem_24g_rxpayload ,contw -0190 20207f01 branch memcpy +0190 204001bb call p_g24_read_len_pid_crc +0191 6800cc41 fetch 1 ,mem_24g_rxdata_length +0192 207a0000 rtn blank +0193 98007200 iforce loopcnt +0194 d8c04bbf arg mem_24g_rxbuf + 2 ,contr +0195 d8a04c21 arg mem_24g_rxpayload ,contw +0196 20207f01 branch memcpy p_g24_pair_init: -0191 7041de20 jam tx_power_pair ,mem_tx_power -0192 704c4000 jam 0 ,mem_24g_pid -0193 704c4b4e jam g24_pair_ch ,mem_24g_ch -0194 68024c4d fetch 4 ,mem_24g_paring_addr +0197 7041de20 jam tx_power_pair ,mem_tx_power +0198 704c4200 jam 0 ,mem_24g_pid +0199 704c4d4e jam g24_pair_ch ,mem_24g_ch +019a 68024c4f fetch 4 ,mem_24g_paring_addr p_g24_update_addr_and_synccrc8: -0195 60024c69 store 4 ,mem_24g_addr +019b 60024c6b store 4 ,mem_24g_addr p_g24_syncword_crc8: -0196 da200000 arg 0 ,rega -0197 df200004 arg 4 ,loopcnt -0198 d8c04c69 arg mem_24g_addr ,contr +019c da200000 arg 0 ,rega +019d df200004 arg 4 ,loopcnt +019e d8c04c6b arg mem_24g_addr ,contr p_g24_syncword_crc8_loop: -0199 e8c08000 ifetch 1 ,contr -019a 9a20a200 iadd rega ,rega -019b c2000199 loop p_g24_syncword_crc8_loop -019c 1a227e00 copy rega ,pdata -019d 60014cf2 store 2 ,mem_24g_syncword -019e 6800ccf2 fetch 1 ,mem_24g_syncword -019f 6808ccf3 fetcht 1 ,mem_24g_syncword + 1 -01a0 9840fe00 iadd temp ,pdata -01a1 6000ccf4 store 1 ,mem_24g_syncword_crc8 -01a2 20600000 rtn +019f e8c08000 ifetch 1 ,contr +01a0 9a20a200 iadd rega ,rega +01a1 c200019f loop p_g24_syncword_crc8_loop +01a2 1a227e00 copy rega ,pdata +01a3 60014cf4 store 2 ,mem_24g_syncword +01a4 6800ccf4 fetch 1 ,mem_24g_syncword +01a5 6808ccf5 fetcht 1 ,mem_24g_syncword + 1 +01a6 9840fe00 iadd temp ,pdata +01a7 6000ccf6 store 1 ,mem_24g_syncword_crc8 +01a8 20600000 rtn p_g24_start_pairing_sm1: -01a3 20400191 call p_g24_pair_init +01a9 20400197 call p_g24_pair_init p_g24_set_pairing_sm_1: -01a4 704c5101 jam state_24g_pairing_1 ,mem_24g_pairing_sm -01a5 20600000 rtn +01aa 704c5301 jam state_24g_pairing_1 ,mem_24g_pairing_sm +01ab 20600000 rtn p_g24_pairing_sm: -01a6 7011c590 jam zcode_90 ,mem_zcode_temp_param0 -01a7 2020079d branch p_zcode_entrance +01ac 7011c590 jam zcode_90 ,mem_zcode_temp_param0 +01ad 202007c4 branch p_zcode_entrance p_g24_paring_mode_start: -01a8 2040074b call power_ctrl_pac_succ_cnt_init +01ae 20400772 call power_ctrl_pac_succ_cnt_init p_g24_paring_mode: -01a9 7011c591 jam zcode_91 ,mem_zcode_temp_param0 -01aa 2020079d branch p_zcode_entrance +01af 7011c591 jam zcode_91 ,mem_zcode_temp_param0 +01b0 202007c4 branch p_zcode_entrance p_g24_check_51cmd_stop_24g: -01ab 793f8026 set0 mark_24g ,mark -01ac 704d9100 jam state_24g_stop ,mem_24g_conn_sm -01ad 204053ce call le_disable +01b1 793f8026 set0 mark_24g ,mark +01b2 704d9300 jam state_24g_stop ,mem_24g_conn_sm +01b3 204053ce call le_disable p_mouse_disable_g24_pairing_flag: -01ae d8e00003 arg mosue_24g_pairing_flag ,queue -01af 202043d2 branch mouse_disable_function_flag +01b4 d8e00003 arg mosue_24g_pairing_flag ,queue +01b5 202043d2 branch mouse_disable_function_flag p_g24_put_data_in_buff: -01b0 6008cc41 storet 1 ,mem_24g_datalen -01b1 18427200 copy temp ,loopcnt -01b2 d8a04bdd arg mem_24g_txbuf ,contw -01b3 1a220c00 copy rega ,contr -01b4 20207f01 branch memcpy +01b6 6008cc43 storet 1 ,mem_24g_datalen +01b7 18427200 copy temp ,loopcnt +01b8 d8a04bdf arg mem_24g_txbuf ,contw +01b9 1a220c00 copy rega ,contr +01ba 20207f01 branch memcpy p_g24_read_len_pid_crc: -01b5 6800cbbc fetch 1 ,mem_24g_rxbuf + 1 -01b6 1fe97e00 rshift3 pdata ,pdata -01b7 6000cc3f store 1 ,mem_24g_rxdata_length -01b8 1fe0fe01 increase 1 ,pdata -01b9 d8c04bbc arg mem_24g_rxbuf + 1 ,contr -01ba 98c08c00 iadd contr ,contr -01bb e8c18000 ifetch 3 ,contr -01bc 6001cc7e store 3 ,mem_24g_sta_crc -01bd 6800cbbc fetch 1 ,mem_24g_rxbuf + 1 -01be 1fe37e00 rshift pdata ,pdata -01bf 1fe17e03 and pdata ,0x03 ,pdata -01c0 6000cc84 store 1 ,mem_24g_sta_pid -01c1 20600000 rtn +01bb 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 +01bc 1fe97e00 rshift3 pdata ,pdata +01bd 6000cc41 store 1 ,mem_24g_rxdata_length +01be 1fe0fe01 increase 1 ,pdata +01bf d8c04bbe arg mem_24g_rxbuf + 1 ,contr +01c0 98c08c00 iadd contr ,contr +01c1 e8c18000 ifetch 3 ,contr +01c2 6001cc80 store 3 ,mem_24g_sta_crc +01c3 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 +01c4 1fe37e00 rshift pdata ,pdata +01c5 1fe17e03 and pdata ,0x03 ,pdata +01c6 6000cc86 store 1 ,mem_24g_sta_pid +01c7 20600000 rtn p_g24_transmit_prep: -01c2 6800cc41 fetch 1 ,mem_24g_datalen -01c3 1fe0fe02 increase 2 ,pdata -01c4 6000cc43 store 1 ,mem_24g_txlen -01c5 6800cc42 fetch 1 ,mem_24g_data_type -01c6 6000cbfd store 1 ,mem_24g_txpayload -01c7 6800cc41 fetch 1 ,mem_24g_datalen -01c8 1fe9fe00 lshift3 pdata ,pdata -01c9 6808cc40 fetcht 1 ,mem_24g_pid -01ca 18410403 and temp ,0x03 ,temp -01cb 18438400 lshift temp ,temp -01cc 9841fe00 ior temp ,pdata -01cd 6808cc7d fetcht 1 ,mem_24g_no_ack -01ce 9840fe00 iadd temp ,pdata -01cf e0a08000 istore 1 ,contw -01d0 6800cc41 fetch 1 ,mem_24g_datalen -01d1 98007200 iforce loopcnt -01d2 d8c04bdd arg mem_24g_txbuf ,contr -01d3 20207f01 branch memcpy +01c8 6800cc43 fetch 1 ,mem_24g_datalen +01c9 1fe0fe02 increase 2 ,pdata +01ca 6000cc45 store 1 ,mem_24g_txlen +01cb 6800cc44 fetch 1 ,mem_24g_data_type +01cc 6000cbff store 1 ,mem_24g_txpayload +01cd 6800cc43 fetch 1 ,mem_24g_datalen +01ce 1fe9fe00 lshift3 pdata ,pdata +01cf 6808cc42 fetcht 1 ,mem_24g_pid +01d0 18410403 and temp ,0x03 ,temp +01d1 18438400 lshift temp ,temp +01d2 9841fe00 ior temp ,pdata +01d3 6808cc7f fetcht 1 ,mem_24g_no_ack +01d4 9840fe00 iadd temp ,pdata +01d5 e0a08000 istore 1 ,contw +01d6 6800cc43 fetch 1 ,mem_24g_datalen +01d7 98007200 iforce loopcnt +01d8 d8c04bdf arg mem_24g_txbuf ,contr +01d9 20207f01 branch memcpy p_g24_prep: -01d4 7844fc00 disable enable_crc -01d5 7843fc00 disable enable_white -01d6 58555555 setarg 0x555555 -01d7 98001e00 iforce crc24_init -01d8 6800cc4b fetch 1 ,mem_24g_ch -01d9 202053da branch le_prep2 +01da 7844fc00 disable enable_crc +01db 7843fc00 disable enable_white +01dc 58555555 setarg 0x555555 +01dd 98001e00 iforce crc24_init +01de 6800cc4d fetch 1 ,mem_24g_ch +01df 202053da branch le_prep2 p_g24_receive_rxon: -01da 204001d4 call p_g24_prep -01db 7857fc00 disable user3 -01dc 7826fc00 enable decode_fec0 -01dd 7830fc00 enable is_rx -01de 78507c00 disable is_tx -01df 78287c00 enable swfine -01e0 68014c44 fetch 2 ,mem_24g_rx_window -01e1 98003600 iforce stop_watch -01e2 37c18400 correlate null ,timeout -01e3 242c021b nbranch p_g24_sync_timeout ,sync -01e4 7846fc00 disable decode_fec0 -01e5 7825fc00 enable decode_fec1 -01e6 7823fc00 enable enable_white -01e7 7824fc00 enable enable_crc -01e8 20400218 call p_g24_receive_byte -01e9 6000ccf5 store 1 ,mem_24g_get_syncword_crc8 -01ea 6808ccf4 fetcht 1 ,mem_24g_syncword_crc8 -01eb 98467c00 isub temp ,null -01ec 2422821b nbranch p_g24_end_of_packet ,zero -01ed 20400218 call p_g24_receive_byte -01ee 6000cbbb store 1 ,mem_24g_rxbuf -01ef 6800cbbb fetch 1 ,mem_24g_rxbuf -01f0 6808cc42 fetcht 1 ,mem_24g_data_type -01f1 a8400e00 icompare bits_data ,temp -01f2 2420821b nbranch p_g24_end_of_packet ,true +01e0 204001da call p_g24_prep +01e1 7857fc00 disable user3 +01e2 7826fc00 enable decode_fec0 +01e3 7830fc00 enable is_rx +01e4 78507c00 disable is_tx +01e5 78287c00 enable swfine +01e6 68014c46 fetch 2 ,mem_24g_rx_window +01e7 98003600 iforce stop_watch +01e8 37c18400 correlate null ,timeout +01e9 242c0221 nbranch p_g24_sync_timeout ,sync +01ea 7846fc00 disable decode_fec0 +01eb 7825fc00 enable decode_fec1 +01ec 7823fc00 enable enable_white +01ed 7824fc00 enable enable_crc +01ee 2040021e call p_g24_receive_byte +01ef 6000ccf7 store 1 ,mem_24g_get_syncword_crc8 +01f0 6808ccf6 fetcht 1 ,mem_24g_syncword_crc8 +01f1 98467c00 isub temp ,null +01f2 24228221 nbranch p_g24_end_of_packet ,zero +01f3 2040021e call p_g24_receive_byte +01f4 6000cbbd store 1 ,mem_24g_rxbuf +01f5 6800cbbd fetch 1 ,mem_24g_rxbuf +01f6 6808cc44 fetcht 1 ,mem_24g_data_type +01f7 a8400e00 icompare bits_data ,temp +01f8 24208221 nbranch p_g24_end_of_packet ,true p_g24_receive_skip: -01f3 20400218 call p_g24_receive_byte -01f4 e0a08000 istore 1 ,contw -01f5 1fe97e00 rshift3 pdata ,pdata -01f6 1fe1721f and pdata ,0x1f ,loopcnt -01f7 202281fb branch p_g24rx_nopayload ,zero +01f9 2040021e call p_g24_receive_byte +01fa e0a08000 istore 1 ,contw +01fb 1fe97e00 rshift3 pdata ,pdata +01fc 1fe1721f and pdata ,0x1f ,loopcnt +01fd 20228201 branch p_g24rx_nopayload ,zero p_g24rx_loop: -01f8 20400218 call p_g24_receive_byte -01f9 e0a08000 istore 1 ,contw -01fa c20001f8 loop p_g24rx_loop +01fe 2040021e call p_g24_receive_byte +01ff e0a08000 istore 1 ,contw +0200 c20001fe loop p_g24rx_loop p_g24rx_nopayload: -01fb 18a22200 copy contw ,rega -01fc 20400218 call p_g24_receive_byte -01fd 6000cd7c store 1 ,mem_rssi_hex_received -01fe 1a220a00 copy rega ,contw -01ff 09800018 parse demod ,bucket ,24 -0200 78287c00 enable swfine -0201 db600664 arg param_sifs ,stop_watch -0202 1fef7e00 rshift32 pdata ,pdata -0203 1ff17e00 rshift16 pdata ,pdata -0204 e0a18000 istore 3 ,contw -0205 7845fc00 disable decode_fec1 -0206 2023021b branch p_g24_end_of_packet ,crc_failed -0207 7837fc00 enable user3 -0208 68008017 fetch 1 ,mem_last_freq -0209 1fe0a200 add pdata ,0 ,rega -020a 20402981 call rf_write_freq -020b 7846fc00 disable decode_fec0 -020c 20402918 call set_sync_on -020d 6800cd7c fetch 1 ,mem_rssi_hex_received +0201 18a22200 copy contw ,rega +0202 2040021e call p_g24_receive_byte +0203 6000cd7e store 1 ,mem_rssi_hex_received +0204 1a220a00 copy rega ,contw +0205 09800018 parse demod ,bucket ,24 +0206 78287c00 enable swfine +0207 db600664 arg param_sifs ,stop_watch +0208 1fef7e00 rshift32 pdata ,pdata +0209 1ff17e00 rshift16 pdata ,pdata +020a e0a18000 istore 3 ,contw +020b 7845fc00 disable decode_fec1 +020c 20230221 branch p_g24_end_of_packet ,crc_failed +020d 7837fc00 enable user3 +020e 68008017 fetch 1 ,mem_last_freq +020f 1fe0a200 add pdata ,0 ,rega +0210 20402981 call rf_write_freq +0211 7846fc00 disable decode_fec0 +0212 20402918 call set_sync_on +0213 6800cd7e fetch 1 ,mem_rssi_hex_received p_rssi_signal: -020e 1fe22200 copy pdata ,rega -020f 6808ccfc fetcht 1 ,mem_rssi_signal_index -0210 58004d03 setarg mem_rssi_signal_buf -0211 98408a00 iadd temp ,contw -0212 1a227e00 copy rega ,pdata -0213 e0a08000 istore 1 ,contw -0214 18408401 increase 1 ,temp -0215 18410407 and_into rssi_buf_len_signal ,temp -0216 6008ccfc storet 1 ,mem_rssi_signal_index -0217 20600000 rtn +0214 1fe22200 copy pdata ,rega +0215 6808ccfe fetcht 1 ,mem_rssi_signal_index +0216 58004d05 setarg mem_rssi_signal_buf +0217 98408a00 iadd temp ,contw +0218 1a227e00 copy rega ,pdata +0219 e0a08000 istore 1 ,contw +021a 18408401 increase 1 ,temp +021b 18410407 and_into rssi_buf_len_signal ,temp +021c 6008ccfe storet 1 ,mem_rssi_signal_index +021d 20600000 rtn p_g24_receive_byte: -0218 09800008 parse demod ,bucket ,8 -0219 19897e00 rshift3 pwindow ,pdata -021a 20600000 rtn +021e 09800008 parse demod ,bucket ,8 +021f 19897e00 rshift3 pwindow ,pdata +0220 20600000 rtn p_g24_sync_timeout: p_g24_end_of_packet: -021b 784dfc00 disable encode_fec1 -021c 7845fc00 disable decode_fec1 -021d 2020264d branch end_of_packet +0221 784dfc00 disable encode_fec1 +0222 7845fc00 disable decode_fec1 +0223 2020264d branch end_of_packet p_g24_transmit: -021e 204053c4 call le_enable -021f 68024c69 fetch 4 ,mem_24g_addr -0220 98001200 iforce access -0221 204001d4 call p_g24_prep -0222 20402918 call set_sync_on -0223 6808cc4b fetcht 1 ,mem_24g_ch -0224 20402933 call set_freq_tx -0225 79202a00 set1 txgfsk ,radio_ctrl -0226 782efc00 enable encode_fec0 -0227 78307c00 enable is_tx -0228 7850fc00 disable is_rx -0229 19317e00 rshift16 access ,pdata -022a 1fecfe00 rshift8 pdata ,pdata -022b 1ff1fe00 rshift4 pdata ,pdata -022c 08008628 inject mod ,40 -022d 784efc00 disable encode_fec0 -022e 782dfc00 enable encode_fec1 -022f 7823fc00 enable enable_white -0230 7824fc00 enable enable_crc -0231 6800ccf4 fetch 1 ,mem_24g_syncword_crc8 -0232 08008608 inject mod ,8 -0233 6800cc43 fetch 1 ,mem_24g_txlen -0234 98007200 iforce loopcnt -0235 d8c04bfd arg mem_24g_txpayload ,contr +0224 204053c4 call le_enable +0225 68024c6b fetch 4 ,mem_24g_addr +0226 98001200 iforce access +0227 204001da call p_g24_prep +0228 20402918 call set_sync_on +0229 6808cc4d fetcht 1 ,mem_24g_ch +022a 20402933 call set_freq_tx +022b 79202a00 set1 txgfsk ,radio_ctrl +022c 782efc00 enable encode_fec0 +022d 78307c00 enable is_tx +022e 7850fc00 disable is_rx +022f 19317e00 rshift16 access ,pdata +0230 1fecfe00 rshift8 pdata ,pdata +0231 1ff1fe00 rshift4 pdata ,pdata +0232 08008628 inject mod ,40 +0233 784efc00 disable encode_fec0 +0234 782dfc00 enable encode_fec1 +0235 7823fc00 enable enable_white +0236 7824fc00 enable enable_crc +0237 6800ccf6 fetch 1 ,mem_24g_syncword_crc8 +0238 08008608 inject mod ,8 +0239 6800cc45 fetch 1 ,mem_24g_txlen +023a 98007200 iforce loopcnt +023b d8c04bff arg mem_24g_txpayload ,contr p_g24tr_loop: -0236 e8c08000 ifetch 1 ,contr -0237 08008608 inject mod ,8 -0238 c2000236 loop p_g24tr_loop -0239 78247c00 enable enable_parity -023a 08008618 inject mod ,24 -023b 78447c00 disable enable_parity -023c 37d38200 until null ,tx_clear -023d 20000064 nop 100 -023e 784efc00 disable encode_fec0 -023f 784dfc00 disable encode_fec1 -0240 20600000 rtn +023c e8c08000 ifetch 1 ,contr +023d 08008608 inject mod ,8 +023e c200023c loop p_g24tr_loop +023f 78247c00 enable enable_parity +0240 08008618 inject mod ,24 +0241 78447c00 disable enable_parity +0242 37d38200 until null ,tx_clear +0243 20000064 nop 100 +0244 784efc00 disable encode_fec0 +0245 784dfc00 disable encode_fec1 +0246 20600000 rtn p_g24_timer_check: -0241 20407fe9 call disable_user -0242 680a4c62 fetcht 4 ,mem_24g_tx_btclk -0243 1c427e00 copy clkn_bt ,pdata -0244 98467c00 isub temp ,null -0245 24412d18 ncall g24_timer_timeout ,positive -0246 1fe22400 copy pdata ,regb -0247 68024c62 fetch 4 ,mem_24g_tx_btclk -0248 6808cc66 fetcht 1 ,mem_24g_interval -0249 98408400 iadd temp ,temp -024a 1a427e00 copy regb ,pdata -024b 98467c00 isub temp ,null -024c 24610000 nrtn positive -024d 793ffe1c set0 28 ,pdata -024e 60024c62 store 4 ,mem_24g_tx_btclk -024f 20207fe7 branch enable_user +0247 20407fe9 call disable_user +0248 680a4c64 fetcht 4 ,mem_24g_tx_btclk +0249 1c427e00 copy clkn_bt ,pdata +024a 98467c00 isub temp ,null +024b 24412d18 ncall g24_timer_timeout ,positive +024c 1fe22400 copy pdata ,regb +024d 68024c64 fetch 4 ,mem_24g_tx_btclk +024e 6808cc68 fetcht 1 ,mem_24g_interval +024f 98408400 iadd temp ,temp +0250 1a427e00 copy regb ,pdata +0251 98467c00 isub temp ,null +0252 24610000 nrtn positive +0253 793ffe1c set0 28 ,pdata +0254 60024c64 store 4 ,mem_24g_tx_btclk +0255 20207fe7 branch enable_user p_rssi_average: -0250 d8400000 arg 0 ,temp -0251 df200008 arg rssi_buf_len_signal + 1 ,loopcnt -0252 1a220c00 copy rega ,contr +0256 d8400000 arg 0 ,temp +0257 df200008 arg rssi_buf_len_signal + 1 ,loopcnt +0258 1a220c00 copy rega ,contr p_rssi_average_loop: -0253 e8c08000 ifetch 1 ,contr -0254 98408400 iadd temp ,temp -0255 c2000253 loop p_rssi_average_loop -0256 18497e00 rshift3 temp ,pdata -0257 1fe20400 copy pdata ,temp -0258 c6930000 rtnmark0 mark_24g -0259 1fe6fc0a div pdata ,10 -025a 20407f86 call wait_div_end -025b 1807fe00 quotient pdata -025c 1ff27e00 lshift4 pdata ,pdata -025d 20207f55 branch clk2bt_next +0259 e8c08000 ifetch 1 ,contr +025a 98408400 iadd temp ,temp +025b c2000259 loop p_rssi_average_loop +025c 18497e00 rshift3 temp ,pdata +025d 1fe20400 copy pdata ,temp +025e c6930000 rtnmark0 mark_24g +025f 1fe6fc0a div pdata ,10 +0260 20407f86 call wait_div_end +0261 1807fe00 quotient pdata +0262 1ff27e00 lshift4 pdata ,pdata +0263 20207f55 branch clk2bt_next p_mouse_before_lpm: -025e c6130000 rtnmark1 mark_24g -025f 20400386 call p_mouse_le_txbuff_save -0260 20400270 call p_mouse_setgpio_lpm -0261 6800c040 fetch 1 ,mem_context -0262 c3000265 bbit0 state_inconn ,p_clear_wake -0263 680080a0 fetch 1 ,mem_lpm_current_mult -0264 247a0000 nrtn blank +0264 c6130000 rtnmark1 mark_24g +0265 2040038e call p_mouse_le_txbuff_save +0266 20400276 call p_mouse_setgpio_lpm +0267 6800c040 fetch 1 ,mem_context +0268 c300026b bbit0 state_inconn ,p_clear_wake +0269 680080a0 fetch 1 ,mem_lpm_current_mult +026a 247a0000 nrtn blank p_clear_wake: -0265 58000000 setarg 0 -0266 600400a1 store 8 ,mem_gpio_wakeup_low -0267 20600000 rtn +026b 58000000 setarg 0 +026c 600400a1 store 8 ,mem_gpio_wakeup_low +026d 20600000 rtn p_g24_lpm_wait: -0268 78347c00 enable user -0269 20402afa call lpo_calibration -026a 6801c16f fetch 3 ,mem_clks_per_lpo -026b 203a7fe9 branch disable_user ,blank -026c 6800c091 fetch 1 ,mem_lpm_mode -026d 203a7fe9 branch disable_user ,blank -026e 6800cd81 fetch 1 ,mem_24g_transmit_by_interrupt -026f c000ffe9 beq g24_tx_timer_int_enable ,disable_user +026e 78347c00 enable user +026f 20402afa call lpo_calibration +0270 6801c16f fetch 3 ,mem_clks_per_lpo +0271 203a7fe9 branch disable_user ,blank +0272 6800c091 fetch 1 ,mem_lpm_mode +0273 203a7fe9 branch disable_user ,blank +0274 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt +0275 c000ffe9 beq g24_tx_timer_int_enable ,disable_user p_mouse_setgpio_lpm: -0270 2040029e call p_mouse_set_sdio_high -0271 20400265 call p_clear_wake +0276 204002a6 call p_mouse_set_sdio_high +0277 2040026b call p_clear_wake p_mouse_setgpio_hibernate: -0272 20403ebf call mouse_lpm_before_common -0273 6808cb46 fetcht 1 ,mem_flash_ncs_gpio -0274 20406825 call gpio_out_inactive -0275 68120070 hfetch 4 ,core_gpio_oe0 -0276 681a0078 hfetcht 4 ,core_gpio_pu0 -0277 98418400 ior temp ,temp -0278 18440400 invert temp ,temp -0279 601a007c hstoret 4 ,core_gpio_pd0 -027a 6810807d hfetch 1 ,core_gpio_pd1 -027b 793ffe02 set0 2 ,pdata -027c 6010807d hstore 1 ,core_gpio_pd1 -027d 6810807e hfetch 1 ,core_gpio_pd2 -027e 793ffe06 set0 6 ,pdata -027f 6010807e hstore 1 ,core_gpio_pd2 -0280 6808c6f3 fetcht 1 ,mem_sensor_data_gpio -0281 793f8407 set0 gpio_active_bit ,temp -0282 d8a08078 arg core_gpio_pu0 ,contw -0283 20406830 call gpio_set_bit -0284 6810807f hfetch 1 ,core_gpio_pd3 -0285 793ffe00 set0 0 ,pdata -0286 6010807f hstore 1 ,core_gpio_pd3 -0287 6810807a hfetch 1 ,core_gpio_pu2 -0288 1fe1fec0 or pdata ,0xc0 ,pdata -0289 6010807a hstore 1 ,core_gpio_pu2 +0278 20403ebf call mouse_lpm_before_common +0279 6808cb46 fetcht 1 ,mem_flash_ncs_gpio +027a 20406825 call gpio_out_inactive +027b 68120070 hfetch 4 ,core_gpio_oe0 +027c 681a0078 hfetcht 4 ,core_gpio_pu0 +027d 98418400 ior temp ,temp +027e 18440400 invert temp ,temp +027f 601a007c hstoret 4 ,core_gpio_pd0 +0280 6810807d hfetch 1 ,core_gpio_pd1 +0281 793ffe02 set0 2 ,pdata +0282 6010807d hstore 1 ,core_gpio_pd1 +0283 6810807e hfetch 1 ,core_gpio_pd2 +0284 793ffe06 set0 6 ,pdata +0285 6010807e hstore 1 ,core_gpio_pd2 +0286 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +0287 793f8407 set0 gpio_active_bit ,temp +0288 d8a08078 arg core_gpio_pu0 ,contw +0289 20406830 call gpio_set_bit 028a 6810807f hfetch 1 ,core_gpio_pd3 -028b 1fe17e7f and pdata ,0x7f ,pdata +028b 793ffe00 set0 0 ,pdata 028c 6010807f hstore 1 ,core_gpio_pd3 -028d 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -028e 202067ed branch gpio_clr_wake +028d 6810807a hfetch 1 ,core_gpio_pu2 +028e 1fe1fec0 or pdata ,0xc0 ,pdata +028f 6010807a hstore 1 ,core_gpio_pu2 +0290 6810807f hfetch 1 ,core_gpio_pd3 +0291 1fe17e7f and pdata ,0x7f ,pdata +0292 6010807f hstore 1 ,core_gpio_pd3 +0293 20600000 rtn p_mouse_t_wheel_clear_wake: -028f 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio -0290 204005b1 call p_gpio_set_input_pd -0291 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio -0292 204005b1 call p_gpio_set_input_pd -0293 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -0294 204005b1 call p_gpio_set_input_pd -0295 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio -0296 204005b1 call p_gpio_set_input_pd -0297 680080a3 fetch 1 ,mem_gpio_wakeup_low + 2 -0298 1fe17efd and pdata ,0xfd ,pdata -0299 600080a3 store 1 ,mem_gpio_wakeup_low + 2 -029a 680080a4 fetch 1 ,mem_gpio_wakeup_low + 3 -029b 1fe17e67 and pdata ,0x67 ,pdata -029c 600080a4 store 1 ,mem_gpio_wakeup_low + 3 -029d 20600000 rtn +0294 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +0295 204005d8 call p_gpio_set_input_pd +0296 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +0297 204005d8 call p_gpio_set_input_pd +0298 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +0299 204005d8 call p_gpio_set_input_pd +029a 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +029b 204005d8 call p_gpio_set_input_pd +029c 680080a1 fetch 1 ,mem_gpio_wakeup_low +029d 1fe17ebf and pdata ,0xbf ,pdata +029e 600080a1 store 1 ,mem_gpio_wakeup_low +029f 680080a3 fetch 1 ,mem_gpio_wakeup_low + 2 +02a0 1fe17e7f and pdata ,0x7f ,pdata +02a1 600080a3 store 1 ,mem_gpio_wakeup_low + 2 +02a2 680080a4 fetch 1 ,mem_gpio_wakeup_low + 3 +02a3 1fe17ee7 and pdata ,0xe7 ,pdata +02a4 600080a4 store 1 ,mem_gpio_wakeup_low + 3 +02a5 20600000 rtn p_mouse_set_sdio_high: -029e 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag -029f 207a0000 rtn blank -02a0 2020055d branch p_mouse_seting_sensor_type +02a6 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag +02a7 207a0000 rtn blank +02a8 20200564 branch p_mouse_seting_sensor_type p_device_init: -02a1 70895b86 jam 0x86 ,0x895b -02a2 70895ca0 jam 0xa0 ,0x895c -02a3 2040296c call initialize_radio -02a4 20403416 call app_lpm_mult_enable -02a5 204074b9 call enable_authrom -02a6 20358324 branch p_mouse_spi_init ,wake +02a9 70895b86 jam 0x86 ,0x895b +02aa 70895ca0 jam 0xa0 ,0x895c +02ab 2040296c call initialize_radio +02ac 20403416 call app_lpm_mult_enable +02ad 204074b9 call enable_authrom +02ae 2035832c branch p_mouse_spi_init ,wake p_device_wake_from_power: -02a7 6801c4a3 fetch 3 ,mem_le_lap + 3 -02a8 6001cbb0 store 3 ,mem_le_lap_high_3b -02a9 20400001 call p_wake_from_power -02aa 2040006b call p_mouse_switch_hwakeup_bypb -02ab 6808c720 fetcht 1 ,mem_device_flag -02ac 6800c703 fetch 1 ,mem_24g_device_number -02ad 98467c00 isub temp ,null -02ae 244282c6 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero -02af 6800c720 fetch 1 ,mem_device_flag -02b0 c07f82b3 beq 0xff ,p_mouse_24g_pair_check -02b1 1fe67c01 sub pdata ,1 ,null -02b2 242282b5 nbranch p_mouse_check_reconn_target ,zero +02af 6801c4a3 fetch 3 ,mem_le_lap + 3 +02b0 6001cbb0 store 3 ,mem_le_lap_high_3b +02b1 20400001 call p_wake_from_power +02b2 2040006b call p_mouse_switch_hwakeup_bypb +02b3 6808c720 fetcht 1 ,mem_device_flag +02b4 6800c703 fetch 1 ,mem_24g_device_number +02b5 98467c00 isub temp ,null +02b6 244282ce ncall p_mouse_bt_deepsleep_timerout_adjust ,zero +02b7 6800c720 fetch 1 ,mem_device_flag +02b8 c07f82bb beq 0xff ,p_mouse_24g_pair_check +02b9 1fe67c01 sub pdata ,1 ,null +02ba 242282bd nbranch p_mouse_check_reconn_target ,zero p_mouse_24g_pair_check: -02b3 2040058d call p_mouse_check_key_gpio -02b4 c00282d9 beq mouse_lm_button ,p_mouse_24g_pairing_button +02bb 204005b4 call p_mouse_check_key_gpio +02bc c00282e1 beq mouse_lm_button ,p_mouse_24g_pairing_button p_mouse_check_reconn_target: -02b5 204002c3 call p_mouse_tx_power_init -02b6 204004dd call p_mouse_select_device_by_button -02b7 da204721 arg mem_device1_type ,rega -02b8 6800c720 fetch 1 ,mem_device_flag -02b9 6808c703 fetcht 1 ,mem_24g_device_number -02ba 98467c00 isub temp ,null -02bb 20228371 branch p_mouse_start_24g_mode ,zero -02bc 1fe0ffff increase -1 ,pdata -02bd 1feffe1d mul32 pdata ,29 ,pdata -02be 9a20a200 iadd rega ,rega -02bf ea208000 ifetch 1 ,rega -02c0 6000c210 store 1 ,mem_xrecord_mode -02c1 c01a02c9 beq rec_4_mode ,p_mouse4_0_check_reconn_target -02c2 20600000 rtn +02bd 204002cb call p_mouse_tx_power_init +02be 204004e7 call p_mouse_select_device_by_button +02bf da204721 arg mem_device1_type ,rega +02c0 6800c720 fetch 1 ,mem_device_flag +02c1 6808c703 fetcht 1 ,mem_24g_device_number +02c2 98467c00 isub temp ,null +02c3 20228379 branch p_mouse_start_24g_mode ,zero +02c4 1fe0ffff increase -1 ,pdata +02c5 1feffe1d mul32 pdata ,29 ,pdata +02c6 9a20a200 iadd rega ,rega +02c7 ea208000 ifetch 1 ,rega +02c8 6000c210 store 1 ,mem_xrecord_mode +02c9 c01a02d1 beq rec_4_mode ,p_mouse4_0_check_reconn_target +02ca 20600000 rtn p_mouse_tx_power_init: -02c3 6800ccf8 fetch 1 ,mem_tx_power_temp -02c4 6000c1de store 1 ,mem_tx_power -02c5 20600000 rtn +02cb 6800ccfa fetch 1 ,mem_tx_power_temp +02cc 6000c1de store 1 ,mem_tx_power +02cd 20600000 rtn p_mouse_bt_deepsleep_timerout_adjust: -02c6 58004650 setarg 0x4650 -02c7 600146aa store 2 ,mem_mouse_no_data_timeout -02c8 20600000 rtn +02ce 58004650 setarg 0x4650 +02cf 600146aa store 2 ,mem_mouse_no_data_timeout +02d0 20600000 rtn p_mouse4_0_check_reconn_target: -02c9 7011c523 jam zcode_23 ,mem_zcode_temp_param0 -02ca 2020079d branch p_zcode_entrance +02d1 7011c523 jam zcode_23 ,mem_zcode_temp_param0 +02d2 202007c4 branch p_zcode_entrance p_le_check_adv_flag: -02cb da204370 arg mem_le_adv_data ,rega +02d3 da204370 arg mem_le_adv_data ,rega p_le_check_adv_flag_loop: -02cc ea208000 ifetch 1 ,rega -02cd 207a0000 rtn blank -02ce 98c0a200 iadd contr ,rega -02cf e8c08000 ifetch 1 ,contr -02d0 c1008000 rtneq 0x01 -02d1 202002cc branch p_le_check_adv_flag_loop +02d4 ea208000 ifetch 1 ,rega +02d5 207a0000 rtn blank +02d6 98c0a200 iadd contr ,rega +02d7 e8c08000 ifetch 1 ,contr +02d8 c1008000 rtneq 0x01 +02d9 202002d4 branch p_le_check_adv_flag_loop p_mouse_le_fast_conn_disable: -02d2 704bb35a jam 0x5a ,mem_mouse_fast_conn_flag -02d3 20600000 rtn +02da 704bb35a jam 0x5a ,mem_mouse_fast_conn_flag +02db 20600000 rtn p_mouse_fast_conn_init: -02d4 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag -02d5 70421034 jam 0x34 ,mem_xrecord_mode -02d6 68034d86 fetch 6 ,mem_24g_allpowerful_addr -02d7 600344a0 store 6 ,mem_le_lap -02d8 20600000 rtn +02dc 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag +02dd 70421034 jam 0x34 ,mem_xrecord_mode +02de 68034d88 fetch 6 ,mem_24g_allpowerful_addr +02df 600344a0 store 6 ,mem_le_lap +02e0 20600000 rtn p_mouse_24g_pairing_button: -02d9 7011c562 jam zcode_62 ,mem_zcode_temp_param0 -02da 2020079d branch p_zcode_entrance +02e1 7011c562 jam zcode_62 ,mem_zcode_temp_param0 +02e2 202007c4 branch p_zcode_entrance p_mouse_init_sunt: -02db 20400324 call p_mouse_spi_init -02dc 204040c0 call mouse_spi_sdio_gpio_pollup +02e3 2040032c call p_mouse_spi_init +02e4 204040c0 call mouse_spi_sdio_gpio_pollup p_mouse_init_sensor: -02dd 204040d9 call mouse_read_sensor_id -02de c01802e7 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge -02df c01882f6 beq p3065_id1 ,p_mouse_p3065_init_param -02e0 204040d1 call mouse_twspi_reset -02e1 200003e8 nop 1000 -02e2 202002dd branch p_mouse_init_sensor +02e5 204040d9 call mouse_read_sensor_id +02e6 c01802ef beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +02e7 c01882fe beq p3065_id1 ,p_mouse_p3065_init_param +02e8 204040d1 call mouse_twspi_reset +02e9 200003e8 nop 1000 +02ea 202002e5 branch p_mouse_init_sensor p_mouse_init_sensor_reset: -02e3 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag -02e4 2040640f call spi_ncs_enable -02e5 204002db call p_mouse_init_sunt -02e6 20206411 branch spi_ncs_disable +02eb 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag +02ec 2040640f call spi_ncs_enable +02ed 204002e3 call p_mouse_init_sunt +02ee 20206411 branch spi_ncs_disable p_mouse_init_p32xx_id2_judge: -02e7 20400553 call p_mouse_sensor_poweron -02e8 6800c6de fetch 1 ,mem_sensor_id2 -02e9 c02d02eb beq p_mx8650 ,p_mouse_mx8650_init_param -02ea 202040e1 branch mouse_init_p32xx_id2_judge + 1 +02ef 2040055a call p_mouse_sensor_poweron +02f0 6800c6de fetch 1 ,mem_sensor_id2 +02f1 c02d02f3 beq p_mx8650 ,p_mouse_mx8650_init_param +02f2 202040e1 branch mouse_init_p32xx_id2_judge + 1 p_mouse_mx8650_init_param: -02eb 7046e007 jam mx8650 ,mem_config_sensor_type -02ec da604b6e arg mem_sensor_8650_init ,regc -02ed 204002ef call p_sensor_wr_seq -02ee 20200559 branch p_mouse_dpi_config +02f3 7046e007 jam mx8650 ,mem_config_sensor_type +02f4 da604b6e arg mem_sensor_8650_init ,regc +02f5 204002f7 call p_sensor_wr_seq +02f6 20200560 branch p_mouse_dpi_config p_sensor_wr_seq: -02ef ea610000 ifetch 2 ,regc -02f0 d840ffff arg 0xffff ,temp -02f1 98467c00 isub temp ,null -02f2 20628000 rtn zero -02f3 20406413 call twspi_write -02f4 1a60a602 increase 2 ,regc -02f5 202002ef branch p_sensor_wr_seq +02f7 ea610000 ifetch 2 ,regc +02f8 d840ffff arg 0xffff ,temp +02f9 98467c00 isub temp ,null +02fa 20628000 rtn zero +02fb 20406413 call twspi_write +02fc 1a60a602 increase 2 ,regc +02fd 202002f7 branch p_sensor_wr_seq p_mouse_p3065_init_param: -02f6 20400553 call p_mouse_sensor_poweron -02f7 202040ea branch mouse_p3065_init_param +02fe 2040055a call p_mouse_sensor_poweron +02ff 202040ea branch mouse_p3065_init_param p_spid_init_flash: -02f8 70808640 jam 0x40 ,core_spid_ctrl -02f9 70808700 jam 0x0 ,core_spid_delay -02fa 68108081 hfetch 1 ,core_gpio_sel1 -02fb 793ffe00 set0 0 ,pdata -02fc 793ffe01 set0 1 ,pdata -02fd 79207e03 set1 3 ,pdata -02fe 793ffe04 set0 4 ,pdata -02ff 60108081 hstore 1 ,core_gpio_sel1 -0300 58000000 setarg 0 -0301 600201f5 store 4 ,mem_spid_tbuf -0302 6810807f hfetch 1 ,core_gpio_pd3 +0300 70808640 jam 0x40 ,core_spid_ctrl +0301 70808700 jam 0x0 ,core_spid_delay +0302 68108081 hfetch 1 ,core_gpio_sel1 0303 793ffe00 set0 0 ,pdata -0304 6010807f hstore 1 ,core_gpio_pd3 -0305 20600000 rtn +0304 793ffe01 set0 1 ,pdata +0305 79207e03 set1 3 ,pdata +0306 793ffe04 set0 4 ,pdata +0307 60108081 hstore 1 ,core_gpio_sel1 +0308 58000000 setarg 0 +0309 600201f5 store 4 ,mem_spid_tbuf +030a 6810807f hfetch 1 ,core_gpio_pd3 +030b 793ffe00 set0 0 ,pdata +030c 6010807f hstore 1 ,core_gpio_pd3 +030d 20600000 rtn p_mouse_load_flash_info_check: -0306 20400363 call p_flash_release_deep_power_down -0307 20404423 call mouse_load_flash_flag -0308 68014778 fetch 2 ,mem_store_flag -0309 d840aa55 arg eeprom_init_flag ,temp -030a 98467c00 isub temp ,null -030b 20228353 branch p_mouse_load_flash_device_info ,zero -030c 60094778 storet 2 ,mem_store_flag -030d 2040441c call mouse_ble_init_address -030e 68024b4d fetch 4 ,mem_mouse_24g_addr_init -030f 6002477b store 4 ,mem_mouse_24g_addr -0310 60024c69 store 4 ,mem_24g_addr +030e 2040036b call p_flash_release_deep_power_down +030f 20404423 call mouse_load_flash_flag +0310 68014778 fetch 2 ,mem_store_flag +0311 d840aa55 arg eeprom_init_flag ,temp +0312 98467c00 isub temp ,null +0313 2022835b branch p_mouse_load_flash_device_info ,zero +0314 60094778 storet 2 ,mem_store_flag +0315 2040441c call mouse_ble_init_address +0316 68024b4d fetch 4 ,mem_mouse_24g_addr_init +0317 6002477b store 4 ,mem_mouse_24g_addr +0318 60024c6b store 4 ,mem_24g_addr p_mouse_store_flash_device_info: -0311 20400510 call p_mouse_adc_read_timeout -0312 6801470f fetch 2 ,mem_mouse_vdd_now_vol -0313 203a0311 branch p_mouse_store_flash_device_info ,blank -0314 6800c231 fetch 1 ,mem_adc_power_flag -0315 c280b40a bbit1 1 ,app_enter_hibernate -0316 20400363 call p_flash_release_deep_power_down -0317 2040032f call p_flash_erase_sector -0318 2040033e call p_flash_write_enable -0319 2040034d call p_mouse_information_flash_parameters -031a 20400342 call p_spid_write_flash -031b 20400333 call p_wait_flash_done -031c 20400326 call p_mouse_store_flash_dpi +0319 2040051a call p_mouse_adc_read_timeout +031a 6801470f fetch 2 ,mem_mouse_vdd_now_vol +031b 203a0319 branch p_mouse_store_flash_device_info ,blank +031c 6800c231 fetch 1 ,mem_adc_power_flag +031d c280b40a bbit1 1 ,app_enter_hibernate +031e 2040036b call p_flash_release_deep_power_down +031f 20400337 call p_flash_erase_sector +0320 20400346 call p_flash_write_enable +0321 20400355 call p_mouse_information_flash_parameters +0322 2040034a call p_spid_write_flash +0323 2040033b call p_wait_flash_done +0324 2040032e call p_mouse_store_flash_dpi p_mouse_store_random_addr_increase_count: -031d 204002f8 call p_spid_init_flash -031e 2040033e call p_flash_write_enable -031f d8400002 arg 2 ,temp -0320 da2047c4 arg mem_random_addr_increase_count ,rega -0321 da40005f arg mouse_random_addr_count_eeprom_offset ,regb -0322 2040032b call p_mouse_store_flash_comm -0323 2040035c call p_flash_deep_power_down +0325 20400300 call p_spid_init_flash +0326 20400346 call p_flash_write_enable +0327 d8400002 arg 2 ,temp +0328 da2047c4 arg mem_random_addr_increase_count ,rega +0329 da40005f arg mouse_random_addr_count_eeprom_offset ,regb +032a 20400333 call p_mouse_store_flash_comm +032b 20400364 call p_flash_deep_power_down p_mouse_spi_init: -0324 70421276 jam 0x76 ,mem_spi_init_clk -0325 20203d36 branch mouse_spi_init +032c 70421276 jam 0x76 ,mem_spi_init_clk +032d 20203d36 branch mouse_spi_init p_mouse_store_flash_dpi: -0326 204002f8 call p_spid_init_flash -0327 2040033e call p_flash_write_enable -0328 d8400001 arg 1 ,temp -0329 da20477a arg mem_mouse_dpi ,rega -032a da40005a arg mouse_dpi_eeprom_offect ,regb +032e 20400300 call p_spid_init_flash +032f 20400346 call p_flash_write_enable +0330 d8400001 arg 1 ,temp +0331 da20477a arg mem_mouse_dpi ,rega +0332 da40005a arg mouse_dpi_eeprom_offect ,regb p_mouse_store_flash_comm: -032b 6801c700 fetch 3 ,mem_flash_base -032c 9a40fe00 iadd regb ,pdata -032d 20400342 call p_spid_write_flash -032e 20200333 branch p_wait_flash_done +0333 6801c700 fetch 3 ,mem_flash_base +0334 9a40fe00 iadd regb ,pdata +0335 2040034a call p_spid_write_flash +0336 2020033b branch p_wait_flash_done p_flash_erase_sector: -032f 6801c700 fetch 3 ,mem_flash_base -0330 6001c232 store 3 ,mem_spi_write_addr -0331 2040033e call p_flash_write_enable -0332 2040652b call flash_erase_sector + 3 +0337 6801c700 fetch 3 ,mem_flash_base +0338 6001c232 store 3 ,mem_spi_write_addr +0339 20400346 call p_flash_write_enable +033a 2040652b call flash_erase_sector + 3 p_wait_flash_done: -0333 20400336 call p_flash_read_status -0334 c2800333 bbit1 flash_status_wip ,p_wait_flash_done -0335 20600000 rtn +033b 2040033e call p_flash_read_status +033c c280033b bbit1 flash_status_wip ,p_wait_flash_done +033d 20600000 rtn p_flash_read_status: -0336 580001fa setarg mem_spid_rbuf -0337 6011008c hstore 2 ,core_spid_rxaddr -0338 58000005 setarg flash_read_satus -0339 18000401 force 1 ,temp -033a 600081f5 store 1 ,mem_spid_tbuf -033b 580001f5 setarg mem_spid_tbuf -033c 6011008a hstore 2 ,core_spid_txaddr -033d 202064f6 branch spid_read_regs + 2 +033e 580001fa setarg mem_spid_rbuf +033f 6011008c hstore 2 ,core_spid_rxaddr +0340 58000005 setarg flash_read_satus +0341 18000401 force 1 ,temp +0342 600081f5 store 1 ,mem_spid_tbuf +0343 580001f5 setarg mem_spid_tbuf +0344 6011008a hstore 2 ,core_spid_txaddr +0345 202064f6 branch spid_read_regs + 2 p_flash_write_enable: -033e 2040650b call spid_unlock_flash -033f 20400336 call p_flash_read_status -0340 c300833f bbit0 flash_status_wel ,p_flash_write_enable + 1 -0341 20600000 rtn +0346 2040650b call spid_unlock_flash +0347 2040033e call p_flash_read_status +0348 c3008347 bbit0 flash_status_wel ,p_flash_write_enable + 1 +0349 20600000 rtn p_spid_write_flash: -0342 1fe22600 copy pdata ,regc -0343 1a227e00 copy rega ,pdata -0344 1fe0fffc increase -4 ,pdata -0345 1fe22400 copy pdata ,regb -0346 ea420000 ifetch 4 ,regb -0347 60024b48 store 4 ,mem_write_flash_head_temp -0348 1a627e00 copy regc ,pdata -0349 20406552 call spid_write_flash -034a 68024b48 fetch 4 ,mem_write_flash_head_temp -034b e2420000 istore 4 ,regb -034c 20600000 rtn +034a 1fe22600 copy pdata ,regc +034b 1a227e00 copy rega ,pdata +034c 1fe0fffc increase -4 ,pdata +034d 1fe22400 copy pdata ,regb +034e ea420000 ifetch 4 ,regb +034f 60024b48 store 4 ,mem_write_flash_head_temp +0350 1a627e00 copy regc ,pdata +0351 20406552 call spid_write_flash +0352 68024b48 fetch 4 ,mem_write_flash_head_temp +0353 e2420000 istore 4 ,regb +0354 20600000 rtn p_mouse_information_flash_parameters: -034d 5800477f setarg mem_mouse_information_end -034e d8404720 arg mem_mouse_information_start ,temp -034f 98460400 isub temp ,temp -0350 6801c700 fetch 3 ,mem_flash_base -0351 da204720 arg mem_mouse_information_start ,rega -0352 20600000 rtn +0355 5800477f setarg mem_mouse_information_end +0356 d8404720 arg mem_mouse_information_start ,temp +0357 98460400 isub temp ,temp +0358 6801c700 fetch 3 ,mem_flash_base +0359 da204720 arg mem_mouse_information_start ,rega +035a 20600000 rtn p_mouse_load_flash_device_info: -0353 20400363 call p_flash_release_deep_power_down -0354 2040034d call p_mouse_information_flash_parameters -0355 20406562 call spid_read_flash -0356 20400365 call p_mouse_load_random_addr_increase_count -0357 2040036c call p_mouse_load_dpi_from_flash -0358 2040431a call mouse_select_reconn_device -0359 6802477b fetch 4 ,mem_mouse_24g_addr -035a 60024c69 store 4 ,mem_24g_addr -035b 20600000 rtn +035b 2040036b call p_flash_release_deep_power_down +035c 20400355 call p_mouse_information_flash_parameters +035d 20406562 call spid_read_flash +035e 2040036d call p_mouse_load_random_addr_increase_count +035f 20400374 call p_mouse_load_dpi_from_flash +0360 2040431a call mouse_select_reconn_device +0361 6802477b fetch 4 ,mem_mouse_24g_addr +0362 60024c6b store 4 ,mem_24g_addr +0363 20600000 rtn p_flash_deep_power_down: -035c 700aa2b9 jam flash_command_deep_power_down ,mem_temp +0364 700aa2b9 jam flash_command_deep_power_down ,mem_temp p_spid_write_flash_cmd: -035d 204002f8 call p_spid_init_flash -035e 204069ac call delay_nop100 -035f da204b48 arg mem_write_flash_head_temp ,rega -0360 68088aa2 fetcht 1 ,mem_temp -0361 20406556 call spid_write_flash_common -0362 202069ac branch delay_nop100 +0365 20400300 call p_spid_init_flash +0366 204069ac call delay_nop100 +0367 da204b48 arg mem_write_flash_head_temp ,rega +0368 68088aa2 fetcht 1 ,mem_temp +0369 20406556 call spid_write_flash_common +036a 202069ac branch delay_nop100 p_flash_release_deep_power_down: -0363 700aa2ab jam flash_command_release_deep_power_down ,mem_temp -0364 2020035d branch p_spid_write_flash_cmd +036b 700aa2ab jam flash_command_release_deep_power_down ,mem_temp +036c 20200365 branch p_spid_write_flash_cmd p_mouse_load_random_addr_increase_count: -0365 20400363 call p_flash_release_deep_power_down -0366 d8400002 arg 2 ,temp -0367 da2047c4 arg mem_random_addr_increase_count ,rega -0368 da40005f arg mouse_random_addr_count_eeprom_offset ,regb +036d 2040036b call p_flash_release_deep_power_down +036e d8400002 arg 2 ,temp +036f da2047c4 arg mem_random_addr_increase_count ,rega +0370 da40005f arg mouse_random_addr_count_eeprom_offset ,regb p_mouse_load_flash_comm: -0369 6801c700 fetch 3 ,mem_flash_base -036a 9a40fe00 iadd regb ,pdata -036b 20206562 branch spid_read_flash +0371 6801c700 fetch 3 ,mem_flash_base +0372 9a40fe00 iadd regb ,pdata +0373 20206562 branch spid_read_flash p_mouse_load_dpi_from_flash: -036c 20400363 call p_flash_release_deep_power_down -036d d8400001 arg 1 ,temp -036e da20477a arg mem_mouse_dpi ,rega -036f da40005a arg mouse_dpi_eeprom_offect ,regb -0370 20200369 branch p_mouse_load_flash_comm +0374 2040036b call p_flash_release_deep_power_down +0375 d8400001 arg 1 ,temp +0376 da20477a arg mem_mouse_dpi ,rega +0377 da40005a arg mouse_dpi_eeprom_offect ,regb +0378 20200371 branch p_mouse_load_flash_comm p_mouse_start_24g_mode: -0371 70472001 jam 1 ,mem_device_flag -0372 2040073e call p_mouse_mode_24g_device_multi_led_on +0379 70472001 jam 1 ,mem_device_flag +037a 20400765 call p_mouse_mode_24g_device_multi_led_on p_g24_start_24g_mode: -0373 7011c560 jam zcode_60 ,mem_zcode_temp_param0 -0374 2020079d branch p_zcode_entrance +037b 7011c560 jam zcode_60 ,mem_zcode_temp_param0 +037c 202007c4 branch p_zcode_entrance p_g24_auto_pair_start: -0375 20400743 call p_mouse_discovery_multi_led_blink -0376 7011c561 jam zcode_61 ,mem_zcode_temp_param0 -0377 2020079d branch p_zcode_entrance +037d 2040076a call p_mouse_discovery_multi_led_blink +037e 7011c561 jam zcode_61 ,mem_zcode_temp_param0 +037f 202007c4 branch p_zcode_entrance p_pdata_0xff_check: -0378 20407fe7 call enable_user -0379 5800ffff setarg 0xffff +0380 20407fe7 call enable_user +0381 5800ffff setarg 0xffff p_pdata_0xff_check_loop: -037a e8c90000 ifetcht 2 ,contr -037b 98467c00 isub temp ,null -037c 2442ffe9 ncall disable_user ,zero -037d c200037a loop p_pdata_0xff_check_loop -037e 20600000 rtn +0382 e8c90000 ifetcht 2 ,contr +0383 98467c00 isub temp ,null +0384 2442ffe9 ncall disable_user ,zero +0385 c2000382 loop p_pdata_0xff_check_loop +0386 20600000 rtn p_mouse_g24_package_data: -037f 20404401 call mouse_g24_package_data -0380 6801469f fetch 2 ,mem_mouse_z -0381 207a0000 rtn blank +0387 20404401 call mouse_g24_package_data +0388 6801469f fetch 2 ,mem_mouse_z +0389 207a0000 rtn blank p_g24_transmit_by_interrupt_enable: -0382 704d8101 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt -0383 58000000 setarg 0 -0384 60014d82 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0385 20600000 rtn +038a 704d8301 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +038b 58000000 setarg 0 +038c 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count +038d 20600000 rtn p_mouse_le_txbuff_save: -0386 d8c01800 arg mem_le_tx_buffer0 ,contr -0387 d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw -0388 2040038e call p_mouse_le_txbuff_copy -0389 d8c01900 arg mem_le_tx_buffer1 ,contr -038a 2040038e call p_mouse_le_txbuff_copy -038b d8c01a00 arg mem_le_tx_buffer2 ,contr -038c 2040038e call p_mouse_le_txbuff_copy -038d d8c01b00 arg mem_le_tx_buffer3 ,contr +038e d8c01800 arg mem_le_tx_buffer0 ,contr +038f d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw +0390 20400396 call p_mouse_le_txbuff_copy +0391 d8c01900 arg mem_le_tx_buffer1 ,contr +0392 20400396 call p_mouse_le_txbuff_copy +0393 d8c01a00 arg mem_le_tx_buffer2 ,contr +0394 20400396 call p_mouse_le_txbuff_copy +0395 d8c01b00 arg mem_le_tx_buffer3 ,contr p_mouse_le_txbuff_copy: -038e df20001b arg 27 ,loopcnt -038f 20207f01 branch memcpy +0396 df20001b arg 27 ,loopcnt +0397 20207f01 branch memcpy p_mouse_le_txbuff_load: -0390 d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr -0391 d8a01800 arg mem_le_tx_buffer0 ,contw -0392 2040038e call p_mouse_le_txbuff_copy -0393 d8a01900 arg mem_le_tx_buffer1 ,contw -0394 2040038e call p_mouse_le_txbuff_copy -0395 d8a01a00 arg mem_le_tx_buffer2 ,contw -0396 2040038e call p_mouse_le_txbuff_copy -0397 d8a01b00 arg mem_le_tx_buffer3 ,contw -0398 2020038e branch p_mouse_le_txbuff_copy +0398 d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr +0399 d8a01800 arg mem_le_tx_buffer0 ,contw +039a 20400396 call p_mouse_le_txbuff_copy +039b d8a01900 arg mem_le_tx_buffer1 ,contw +039c 20400396 call p_mouse_le_txbuff_copy +039d d8a01a00 arg mem_le_tx_buffer2 ,contw +039e 20400396 call p_mouse_le_txbuff_copy +039f d8a01b00 arg mem_le_tx_buffer3 ,contw +03a0 20200396 branch p_mouse_le_txbuff_copy p_mouse_le: -0399 20405892 call le_fifo_check_nearly_full -039a 247a0000 nrtn blank -039b 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag -039c c07f83a0 beq 0xff ,p_mouse_le_next -039d 6800c6c5 fetch 1 ,mem_le_connect_status_flag -039e 1fe17e03 and pdata ,0x03 ,pdata -039f c1818000 rtnne 0x03 +03a1 20405892 call le_fifo_check_nearly_full +03a2 247a0000 nrtn blank +03a3 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag +03a4 c07f83a8 beq 0xff ,p_mouse_le_next +03a5 6800c6c5 fetch 1 ,mem_le_connect_status_flag +03a6 1fe17e03 and pdata ,0x03 ,pdata +03a7 c1818000 rtnne 0x03 p_mouse_le_next: -03a0 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -03a1 205a03ee call p_mouse_clear_sensor_data ,blank -03a2 680246d3 fetch mouse_flag_len ,mem_mouse_flag -03a3 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -03a4 20403f97 call mouse_motion -03a5 24740000 nrtn user -03a6 204003ac call p_mouse_le_current_mult_update -03a7 204003c5 call p_mouse_wheel_trigger +03a8 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +03a9 205a03f6 call p_mouse_clear_sensor_data ,blank +03aa 680246d3 fetch mouse_flag_len ,mem_mouse_flag +03ab c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +03ac 20403f97 call mouse_motion +03ad 24740000 nrtn user +03ae 204003b4 call p_mouse_le_current_mult_update +03af 204003cd call p_mouse_wheel_trigger p_mouse_data_push: -03a8 da20469a arg mem_mouse_key ,rega -03a9 20407e3d call queue_push -03aa 205403b4 call p_mouse_queue_increase ,user -03ab 20600000 rtn +03b0 da20469a arg mem_mouse_key ,rega +03b1 20407e3d call queue_push +03b2 205403bc call p_mouse_queue_increase ,user +03b3 20600000 rtn p_mouse_le_current_mult_update: -03ac 70417208 jam 8 ,mem_lpm_mult -03ad 704b681e jam 30 ,mem_mouse_le_current_mult_timer -03ae 20600000 rtn +03b4 70417208 jam 8 ,mem_lpm_mult +03b5 704b681e jam 30 ,mem_mouse_le_current_mult_timer +03b6 20600000 rtn p_mouse_data_init: -03af 7047a207 jam 7 ,mem_mouse_data_queue -03b0 7047a304 jam 4 ,mem_mouse_data_queue + 1 -03b1 580047a2 setarg mem_mouse_data_queue -03b2 60014218 store 2 ,mem_queue_ptr -03b3 20207e38 branch queue_init +03b7 7047a207 jam 7 ,mem_mouse_data_queue +03b8 7047a304 jam 4 ,mem_mouse_data_queue + 1 +03b9 580047a2 setarg mem_mouse_data_queue +03ba 60014218 store 2 ,mem_queue_ptr +03bb 20207e38 branch queue_init p_mouse_queue_increase: -03b4 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03b5 1fe0fe01 increase 1 ,pdata -03b6 6000c7c3 store 1 ,mem_mouse_data_queue_num -03b7 20600000 rtn +03bc 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03bd 1fe0fe01 increase 1 ,pdata +03be 6000c7c3 store 1 ,mem_mouse_data_queue_num +03bf 20600000 rtn p_mouse_data_pull: -03b8 da20469a arg mem_mouse_key ,rega -03b9 20407e54 call queue_pop -03ba 203403bc branch p_mouse_fill_data_le ,user -03bb 20600000 rtn +03c0 da20469a arg mem_mouse_key ,rega +03c1 20407e54 call queue_pop +03c2 203403c4 branch p_mouse_fill_data_le ,user +03c3 20600000 rtn p_mouse_fill_data_le: -03bc 20405652 call le_clear_md -03bd 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03be 1fe67c01 sub pdata ,1 ,null -03bf 24415650 ncall le_set_md ,positive -03c0 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03c1 207a0000 rtn blank -03c2 1fe0ffff increase -1 ,pdata -03c3 6000c7c3 store 1 ,mem_mouse_data_queue_num -03c4 20203f90 branch mouse_fill_data_le +03c4 20405652 call le_clear_md +03c5 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03c6 1fe67c01 sub pdata ,1 ,null +03c7 24415650 ncall le_set_md ,positive +03c8 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03c9 207a0000 rtn blank +03ca 1fe0ffff increase -1 ,pdata +03cb 6000c7c3 store 1 ,mem_mouse_data_queue_num +03cc 20203f90 branch mouse_fill_data_le p_mouse_wheel_trigger: -03c5 6801469f fetch 2 ,mem_mouse_z -03c6 207a0000 rtn blank -03c7 70480801 jam 1 ,mem_mouse_wheel_trigger -03c8 7048090a jam 10 ,mem_mouse_wheel_trigger_timer -03c9 20600000 rtn +03cd 6801469f fetch 2 ,mem_mouse_z +03ce 207a0000 rtn blank +03cf 70480801 jam 1 ,mem_mouse_wheel_trigger +03d0 7048090a jam 10 ,mem_mouse_wheel_trigger_timer +03d1 20600000 rtn p_mouse_bt: -03ca 20770000 rtn attempt -03cb 6800c1e2 fetch 1 ,mem_app_handshake_flag -03cc 207a0000 rtn blank -03cd 20405271 call l2cap_malloc_is_fifo_nearly_full -03ce 247a0000 nrtn blank -03cf 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -03d0 205a03ee call p_mouse_clear_sensor_data ,blank -03d1 680246d3 fetch mouse_flag_len ,mem_mouse_flag -03d2 c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -03d3 c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data -03d4 20403f97 call mouse_motion -03d5 24740000 nrtn user -03d6 204003ac call p_mouse_le_current_mult_update -03d7 204003c5 call p_mouse_wheel_trigger -03d8 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode -03d9 c00083dd beq 1 ,p_mouse_send_data_boot_mode -03da 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag -03db 207a0000 rtn blank -03dc 20203f81 branch mouse_send_data +03d2 20770000 rtn attempt +03d3 6800c1e2 fetch 1 ,mem_app_handshake_flag +03d4 207a0000 rtn blank +03d5 20405271 call l2cap_malloc_is_fifo_nearly_full +03d6 247a0000 nrtn blank +03d7 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +03d8 205a03f6 call p_mouse_clear_sensor_data ,blank +03d9 680246d3 fetch mouse_flag_len ,mem_mouse_flag +03da c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +03db c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +03dc 20403f97 call mouse_motion +03dd 24740000 nrtn user +03de 204003b4 call p_mouse_le_current_mult_update +03df 204003cd call p_mouse_wheel_trigger +03e0 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode +03e1 c00083e5 beq 1 ,p_mouse_send_data_boot_mode +03e2 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag +03e3 207a0000 rtn blank +03e4 20203f81 branch mouse_send_data p_mouse_send_data_boot_mode: -03dd 6800c69a fetch 1 ,mem_mouse_key -03de 6000cb06 store 1 ,mem_mouse_bt_boot_data -03df 6800c69b fetch 1 ,mem_mouse_x -03e0 e0a08000 istore 1 ,contw -03e1 6800c69d fetch 1 ,mem_mouse_y -03e2 e0a08000 istore 1 ,contw -03e3 6801469f fetch 2 ,mem_mouse_z -03e4 e0a10000 istore 2 ,contw -03e5 da200007 arg 7 ,rega -03e6 20404d63 call hid_malloc_tx_buff -03e7 6801424e fetch 2 ,mem_hid_int_remote_cid -03e8 e0a10000 istore 2 ,contw -03e9 580002a1 setarg 0x02a1 -03ea e0a10000 istore 2 ,contw -03eb 6802cb06 fetch 5 ,mem_mouse_bt_boot_data -03ec e0a28000 istore 5 ,contw -03ed 20600000 rtn +03e5 6800c69a fetch 1 ,mem_mouse_key +03e6 6000cb06 store 1 ,mem_mouse_bt_boot_data +03e7 6800c69b fetch 1 ,mem_mouse_x +03e8 e0a08000 istore 1 ,contw +03e9 6800c69d fetch 1 ,mem_mouse_y +03ea e0a08000 istore 1 ,contw +03eb 6801469f fetch 2 ,mem_mouse_z +03ec e0a10000 istore 2 ,contw +03ed da200007 arg 7 ,rega +03ee 20404d63 call hid_malloc_tx_buff +03ef 6801424e fetch 2 ,mem_hid_int_remote_cid +03f0 e0a10000 istore 2 ,contw +03f1 580002a1 setarg 0x02a1 +03f2 e0a10000 istore 2 ,contw +03f3 6802cb06 fetch 5 ,mem_mouse_bt_boot_data +03f4 e0a28000 istore 5 ,contw +03f5 20600000 rtn p_mouse_clear_sensor_data: -03ee 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag -03ef 20405814 call le_set_config_more_data -03f0 202002e3 branch p_mouse_init_sensor_reset +03f6 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag +03f7 20405814 call le_set_config_more_data +03f8 202002eb branch p_mouse_init_sensor_reset p_mouse_idle: -03f1 20407e34 call ui_check_paring_button -03f2 2040043c call p_mouse_dpi_check -03f3 202003f4 branch p_mouse_wheel_check +03f9 20407e34 call ui_check_paring_button +03fa 20400444 call p_mouse_dpi_check +03fb 202003fc branch p_mouse_wheel_check p_mouse_wheel_check: -03f4 204003f7 call p_mouse_t_wheel_scan -03f5 20403f36 call mouse_wheel_scan -03f6 20203ee3 branch mouse_wheel_check + 3 +03fc 204003ff call p_mouse_t_wheel_scan +03fd 20403f36 call mouse_wheel_scan +03fe 20203ee3 branch mouse_wheel_check + 3 p_mouse_t_wheel_scan: -03f7 68108078 hfetch 1 ,core_gpio_pu0 -03f8 79207e05 set1 5 ,pdata -03f9 60108078 hstore 1 ,core_gpio_pu0 -03fa 6810807b hfetch 1 ,core_gpio_pu3 -03fb 79207e06 set1 6 ,pdata -03fc 6010807b hstore 1 ,core_gpio_pu3 -03fd da200000 arg 0 ,rega -03fe 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -03ff 2040681d call gpio_get_bit -0400 7920a200 setflag true ,0 ,rega -0401 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio -0402 2040681d call gpio_get_bit -0403 7920a201 setflag true ,1 ,rega -0404 1a227e00 copy rega ,pdata -0405 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel -0406 c000840b beq 0x01 ,p_mouse_t_wheel_scan_judge1 -0407 c001040f beq 0x02 ,p_mouse_t_wheel_scan_judge2 -0408 6800c6b9 fetch 1 ,mem_wheel_tog -0409 c283841b bbit1 7 ,p_mouse_t_wheel_scan_judge3 -040a 20600000 rtn +03ff 6810807a hfetch 1 ,core_gpio_pu2 +0400 79207e07 set1 7 ,pdata +0401 6010807a hstore 1 ,core_gpio_pu2 +0402 68108078 hfetch 1 ,core_gpio_pu0 +0403 79207e06 set1 6 ,pdata +0404 60108078 hstore 1 ,core_gpio_pu0 +0405 da200000 arg 0 ,rega +0406 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +0407 2040681d call gpio_get_bit +0408 7920a200 setflag true ,0 ,rega +0409 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +040a 2040681d call gpio_get_bit +040b 7920a201 setflag true ,1 ,rega +040c 1a227e00 copy rega ,pdata +040d 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel +040e c0008413 beq 0x01 ,p_mouse_t_wheel_scan_judge1 +040f c0010417 beq 0x02 ,p_mouse_t_wheel_scan_judge2 +0410 6800c6b9 fetch 1 ,mem_wheel_tog +0411 c2838423 bbit1 7 ,p_mouse_t_wheel_scan_judge3 +0412 20600000 rtn p_mouse_t_wheel_scan_judge1: -040b 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel -040c c0000413 beq 0 ,p_mouse_t_wheel_scan_judge11 -040d c0018415 beq 3 ,p_mouse_t_wheel_scan_judge12 -040e 20600000 rtn +0413 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +0414 c000041b beq 0 ,p_mouse_t_wheel_scan_judge11 +0415 c001841d beq 3 ,p_mouse_t_wheel_scan_judge12 +0416 20600000 rtn p_mouse_t_wheel_scan_judge2: -040f 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel -0410 c0000417 beq 0 ,p_mouse_t_wheel_scan_judge21 -0411 c0018419 beq 3 ,p_mouse_t_wheel_scan_judge22 -0412 20600000 rtn +0417 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +0418 c000041f beq 0 ,p_mouse_t_wheel_scan_judge21 +0419 c0018421 beq 3 ,p_mouse_t_wheel_scan_judge22 +041a 20600000 rtn p_mouse_t_wheel_scan_judge11: -0413 7046b982 jam 0x82 ,mem_wheel_tog -0414 20600000 rtn +041b 7046b982 jam 0x82 ,mem_wheel_tog +041c 20600000 rtn p_mouse_t_wheel_scan_judge12: -0415 7046b981 jam 0x81 ,mem_wheel_tog -0416 20600000 rtn +041d 7046b981 jam 0x81 ,mem_wheel_tog +041e 20600000 rtn p_mouse_t_wheel_scan_judge21: -0417 7046b980 jam 0x80 ,mem_wheel_tog -0418 20600000 rtn +041f 7046b980 jam 0x80 ,mem_wheel_tog +0420 20600000 rtn p_mouse_t_wheel_scan_judge22: -0419 7046b983 jam 0x83 ,mem_wheel_tog -041a 20600000 rtn +0421 7046b983 jam 0x83 ,mem_wheel_tog +0422 20600000 rtn p_mouse_t_wheel_scan_judge3: -041b 6800c6b9 fetch 1 ,mem_wheel_tog -041c 793ffe07 set0 7 ,pdata -041d 6000c6b9 store 1 ,mem_wheel_tog -041e c0000423 beq 0 ,p_mouse_t_wheel_scan_judge30 -041f c0008426 beq 1 ,p_mouse_t_wheel_scan_judge31 -0420 c0010429 beq 2 ,p_mouse_t_wheel_scan_judge32 -0421 c001842c beq 3 ,p_mouse_t_wheel_scan_judge33 -0422 20600000 rtn +0423 6800c6b9 fetch 1 ,mem_wheel_tog +0424 793ffe07 set0 7 ,pdata +0425 6000c6b9 store 1 ,mem_wheel_tog +0426 c000042b beq 0 ,p_mouse_t_wheel_scan_judge30 +0427 c000842e beq 1 ,p_mouse_t_wheel_scan_judge31 +0428 c0010431 beq 2 ,p_mouse_t_wheel_scan_judge32 +0429 c0018434 beq 3 ,p_mouse_t_wheel_scan_judge33 +042a 20600000 rtn p_mouse_t_wheel_scan_judge30: -0423 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0424 c001842f beq 3 ,p_mouse_wheel_t_forward -0425 20600000 rtn +042b 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +042c c0018437 beq 3 ,p_mouse_wheel_t_forward +042d 20600000 rtn p_mouse_t_wheel_scan_judge31: -0426 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0427 c000042f beq 0 ,p_mouse_wheel_t_forward -0428 20600000 rtn +042e 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +042f c0000437 beq 0 ,p_mouse_wheel_t_forward +0430 20600000 rtn p_mouse_t_wheel_scan_judge32: -0429 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -042a c0018434 beq 3 ,p_mouse_wheel_t_back -042b 20600000 rtn +0431 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0432 c001843c beq 3 ,p_mouse_wheel_t_back +0433 20600000 rtn p_mouse_t_wheel_scan_judge33: -042c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -042d c0000434 beq 0 ,p_mouse_wheel_t_back -042e 20600000 rtn +0434 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0435 c000043c beq 0 ,p_mouse_wheel_t_back +0436 20600000 rtn p_mouse_wheel_t_forward: -042f 7046bc00 jam 0 ,mem_mouse_tz_data_count1 -0430 6800c6ba fetch 1 ,mem_mouse_tz_data -0431 1fe0fe01 increase 1 ,pdata -0432 6000c6ba store 1 ,mem_mouse_tz_data -0433 20600000 rtn +0437 7046bc00 jam 0 ,mem_mouse_tz_data_count1 +0438 6800c6ba fetch 1 ,mem_mouse_tz_data +0439 1fe0fe01 increase 1 ,pdata +043a 6000c6ba store 1 ,mem_mouse_tz_data +043b 20600000 rtn p_mouse_wheel_t_back: -0434 7046bb00 jam 0 ,mem_mouse_tz_data_count -0435 6800c6ba fetch 1 ,mem_mouse_tz_data -0436 1fe0ffff increase -1 ,pdata -0437 6000c6ba store 1 ,mem_mouse_tz_data -0438 20600000 rtn +043c 7046bb00 jam 0 ,mem_mouse_tz_data_count +043d 6800c6ba fetch 1 ,mem_mouse_tz_data +043e 1fe0ffff increase -1 ,pdata +043f 6000c6ba store 1 ,mem_mouse_tz_data +0440 20600000 rtn p_mouse_comm_gpio_config: -0439 6808cbb8 fetcht 1 ,mem_mouse_comm_gpio -043a c17f8000 rtneq 0xff -043b 202005ac branch p_gpio_set_input_pu +0441 6808cbb8 fetcht 1 ,mem_mouse_comm_gpio +0442 c17f8000 rtneq 0xff +0443 202005d3 branch p_gpio_set_input_pu p_mouse_dpi_check: -043c 20400439 call p_mouse_comm_gpio_config -043d 6808c6e7 fetcht 1 ,mem_dpi_button_gpio -043e 204005b1 call p_gpio_set_input_pd -043f 6808c6e7 fetcht 1 ,mem_dpi_button_gpio -0440 2040681d call gpio_get_bit -0441 2020844e branch p_mouse_dpi_up ,true -0442 204005ac call p_gpio_set_input_pu +0444 20400441 call p_mouse_comm_gpio_config +0445 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +0446 204005d8 call p_gpio_set_input_pd +0447 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +0448 2040681d call gpio_get_bit +0449 20208456 branch p_mouse_dpi_up ,true +044a 204005d3 call p_gpio_set_input_pu p_mouse_dpi_down: -0443 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state -0444 c1000000 rtneq dpi_button_state_down -0445 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0446 6800c77a fetch 1 ,mem_mouse_dpi -0447 1fe0fe01 increase 1 ,pdata -0448 1fe17e03 and pdata ,0x03 ,pdata -0449 6000c77a store 1 ,mem_mouse_dpi -044a 1fe0fe02 increase 2 ,pdata -044b 6000cb2e store 1 ,mem_mouse_multi_led_blink_count -044c 2040073b call p_mouse_dpi_multi_led_blink -044d 20203d7e branch mouse_seting_dpi +044b 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +044c c1000000 rtneq dpi_button_state_down +044d 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state +044e 6800c77a fetch 1 ,mem_mouse_dpi +044f 1fe0fe01 increase 1 ,pdata +0450 1fe17e03 and pdata ,0x03 ,pdata +0451 6000c77a store 1 ,mem_mouse_dpi +0452 1fe0fe02 increase 2 ,pdata +0453 6000cb2e store 1 ,mem_mouse_multi_led_blink_count +0454 20400762 call p_mouse_dpi_multi_led_blink +0455 20203d7e branch mouse_seting_dpi p_mouse_dpi_up: -044e 204005ac call p_gpio_set_input_pu -044f 20203d62 branch mouse_dpi_up +0456 204005d3 call p_gpio_set_input_pu +0457 20203d62 branch mouse_dpi_up p_mouse_priority_bb_event: -0450 1a627e00 copy regc ,pdata -0451 c00a0461 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected -0452 c00a8463 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected -0453 c0148466 beq bt_evt_le_enc_info ,p_mouse_le_enc_info -0454 c0190468 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt -0455 c020046a beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved -0456 c002046c beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed -0457 c009846c beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout -0458 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch -0459 c0108470 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept -045a c0008472 beq bt_evt_bb_connected ,p_mouse_bb_event_connected -045b c0010476 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected -045c c0158479 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check -045d c01c847b beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete -045e c01d0480 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail -045f c01e0486 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success -0460 2020417d branch mouse_priority_bb_event + 1 +0458 1a627e00 copy regc ,pdata +0459 c00a0469 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +045a c00a846b beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +045b c014846e beq bt_evt_le_enc_info ,p_mouse_le_enc_info +045c c0190470 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +045d c0200472 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +045e c0020474 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +045f c0098474 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +0460 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch +0461 c0108478 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +0462 c000847a beq bt_evt_bb_connected ,p_mouse_bb_event_connected +0463 c001047e beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +0464 c0158481 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +0465 c01c8483 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +0466 c01d0488 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +0467 c01e048e beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +0468 2020417d branch mouse_priority_bb_event + 1 p_mouse_le_bb_event_connected: -0461 7011c5d0 jam zcode_d0 ,mem_zcode_temp_param0 -0462 2020079d branch p_zcode_entrance +0469 7011c5d0 jam zcode_d0 ,mem_zcode_temp_param0 +046a 202007c4 branch p_zcode_entrance p_mouse_le_bb_disconnected: -0463 2040048c call p_mouse_sensor_powerdown_check -0464 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 -0465 2020079d branch p_zcode_entrance +046b 20400496 call p_mouse_sensor_powerdown_check +046c 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 +046d 202007c4 branch p_zcode_entrance p_mouse_le_enc_info: p_app_updata_le_param: -0466 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp -0467 20207d8f branch ui_ipc_send_cmd +046e 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +046f 20207d8f branch ui_ipc_send_cmd p_mouse_le_ll_start_encryt: -0468 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 -0469 2020079d branch p_zcode_entrance +0470 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 +0471 202007c4 branch p_zcode_entrance p_mouse_le_conn_param_update_rsp_recieved: -046a 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 -046b 2020079d branch p_zcode_entrance +0472 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 +0473 202007c4 branch p_zcode_entrance p_mouse_bb_event_reconn_timeout: p_mouse_bb_event_reconn_failed: -046c 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 -046d 2020079d branch p_zcode_entrance +0474 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 +0475 202007c4 branch p_zcode_entrance p_mouse_irtual_cable_unplug: -046e 7011c571 jam zcode_71 ,mem_zcode_temp_param0 -046f 2020079d branch p_zcode_entrance +0476 7011c571 jam zcode_71 ,mem_zcode_temp_param0 +0477 202007c4 branch p_zcode_entrance p_mouse_sniff_not_accept: -0470 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 -0471 2020079d branch p_zcode_entrance +0478 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 +0479 202007c4 branch p_zcode_entrance p_mouse_bb_event_connected: -0472 704bb900 jam 0 ,mem_mouse_connected_state -0473 70480b00 jam 0 ,mem_mouse_send_switch_req_timer -0474 204002e3 call p_mouse_init_sensor_reset -0475 202042ca branch mouse_stop_discovery +047a 704bb900 jam 0 ,mem_mouse_connected_state +047b 70480b00 jam 0 ,mem_mouse_send_switch_req_timer +047c 204002eb call p_mouse_init_sensor_reset +047d 202042ca branch mouse_stop_discovery p_mouse_bb_event_disconnected: -0476 2040048c call p_mouse_sensor_powerdown_check -0477 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 -0478 2020079d branch p_zcode_entrance +047e 20400496 call p_mouse_sensor_powerdown_check +047f 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 +0480 202007c4 branch p_zcode_entrance p_mouse_enter_sniff_check: -0479 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 -047a 2020079d branch p_zcode_entrance +0481 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 +0482 202007c4 branch p_zcode_entrance p_mouse_24g_pairing_complete: -047b 20400729 call p_mouse_discovey_led_blink_off -047c 704bb900 jam 0 ,mem_mouse_connected_state -047d 204002e3 call p_mouse_init_sensor_reset -047e 7011c592 jam zcode_92 ,mem_zcode_temp_param0 -047f 2020079d branch p_zcode_entrance +0483 20400750 call p_mouse_discovey_led_blink_off +0484 704bb900 jam 0 ,mem_mouse_connected_state +0485 204002eb call p_mouse_init_sensor_reset +0486 7011c592 jam zcode_92 ,mem_zcode_temp_param0 +0487 202007c4 branch p_zcode_entrance p_mouse_24g_attempt_fail: -0480 704bb901 jam 1 ,mem_mouse_connected_state -0481 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -0482 2040073b call p_mouse_dpi_multi_led_blink -0483 2040048c call p_mouse_sensor_powerdown_check -0484 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 -0485 2020079d branch p_zcode_entrance +0488 704bb901 jam 1 ,mem_mouse_connected_state +0489 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count +048a 20400762 call p_mouse_dpi_multi_led_blink +048b 20400496 call p_mouse_sensor_powerdown_check +048c 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 +048d 202007c4 branch p_zcode_entrance p_mouse_24g_attempt_success: -0486 704bb900 jam 0 ,mem_mouse_connected_state -0487 204002e3 call p_mouse_init_sensor_reset +048e 20400754 call p_mouse_multi_led_blink_off +048f 20400765 call p_mouse_mode_24g_device_multi_led_on +0490 704bb900 jam 0 ,mem_mouse_connected_state +0491 204002eb call p_mouse_init_sensor_reset p_mouse_24g_no_data_timer_init: -0488 20203f8d branch mouse_no_data_timer_init +0492 20203f8d branch mouse_no_data_timer_init p_mouse_before_hibernate: -0489 2040048c call p_mouse_sensor_powerdown_check -048a 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 -048b 2020079d branch p_zcode_entrance +0493 20400496 call p_mouse_sensor_powerdown_check +0494 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 +0495 202007c4 branch p_zcode_entrance p_mouse_sensor_powerdown_check: -048c 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag -048d 207a0000 rtn blank -048e 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag +0496 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag +0497 207a0000 rtn blank +0498 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag p_mouse_sensor_powerdown: -048f 204002db call p_mouse_init_sunt -0490 58000806 setarg 0x0806 -0491 20206413 branch twspi_write +0499 204002e3 call p_mouse_init_sunt +049a 58000806 setarg 0x0806 +049b 20206413 branch twspi_write p_mouse_bb_event_timer: -0492 20400507 call p_mouse_adc_read -0493 20400542 call p_mouse_low_voltage_led_timer -0494 204004c0 call p_mouse_wheel_trigger_timer -0495 204004dd call p_mouse_select_device_by_button -0496 20404234 call mouse_check_discovery_timeout_timer -0497 2040423a call mouse_check_no_data_timeout_timer -0498 204004c5 call p_mouse_g24_stop_mode_timeout_timer -0499 204004ac call p_mouse_check_direct_timeout_timer -049a 204004a9 call p_mouse_le_enable_att_list_timer -049b 204004b2 call p_mouse_le_current_mult_update_timer -049c 204004b8 call p_le_send_smp_security_request_timer -049d 204004a1 call p_mouse_send_switch_req_timer -049e 20404231 call mouse_check_hid_handshake_timer -049f 204004a4 call p_mouse_bt_check_sniff_req_timeout_timer -04a0 20200701 branch p_mouse_multi_led_blink_timer +049c 20400511 call p_mouse_adc_read +049d 20400549 call p_mouse_low_voltage_led_timer +049e 204004ca call p_mouse_wheel_trigger_timer +049f 204004e7 call p_mouse_select_device_by_button +04a0 20404234 call mouse_check_discovery_timeout_timer +04a1 2040423a call mouse_check_no_data_timeout_timer +04a2 204004cf call p_mouse_g24_stop_mode_timeout_timer +04a3 204004b6 call p_mouse_check_direct_timeout_timer +04a4 204004b3 call p_mouse_le_enable_att_list_timer +04a5 204004bc call p_mouse_le_current_mult_update_timer +04a6 204004c2 call p_le_send_smp_security_request_timer +04a7 204004ab call p_mouse_send_switch_req_timer +04a8 20404231 call mouse_check_hid_handshake_timer +04a9 204004ae call p_mouse_bt_check_sniff_req_timeout_timer +04aa 20200728 branch p_mouse_multi_led_blink_timer p_mouse_send_switch_req_timer: -04a1 da60480b arg mem_mouse_send_switch_req_timer ,regc -04a2 da40637a arg host_create_conn_resend ,regb -04a3 2020336d branch timer_single_step +04ab da60480b arg mem_mouse_send_switch_req_timer ,regc +04ac da40637a arg host_create_conn_resend ,regb +04ad 2020336d branch timer_single_step p_mouse_bt_check_sniff_req_timeout_timer: -04a4 da604b0b arg mem_mouse_bt_send_first_package_timer ,regc -04a5 da4004a7 arg p_mouse_bt_send_first_package ,regb -04a6 2020336d branch timer_single_step +04ae da604b0b arg mem_mouse_bt_send_first_package_timer ,regc +04af da4004b1 arg p_mouse_bt_send_first_package ,regb +04b0 2020336d branch timer_single_step p_mouse_bt_send_first_package: -04a7 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag -04a8 20600000 rtn +04b1 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag +04b2 20600000 rtn p_mouse_le_enable_att_list_timer: -04a9 da6046c6 arg mem_le_start_encrypt_timer ,regc -04aa da403d60 arg mouse_le_write_enable ,regb -04ab 2020336d branch timer_single_step +04b3 da6046c6 arg mem_le_start_encrypt_timer ,regc +04b4 da403d60 arg mouse_le_write_enable ,regb +04b5 2020336d branch timer_single_step p_mouse_check_direct_timeout_timer: -04ac da6046ae arg mem_mouse_direct_timer ,regc -04ad da4004af arg p_mouse_check_direct_timeout ,regb -04ae 20203374 branch timer_single_step_2b +04b6 da6046ae arg mem_mouse_direct_timer ,regc +04b7 da4004b9 arg p_mouse_check_direct_timeout ,regb +04b8 20203374 branch timer_single_step_2b p_mouse_check_direct_timeout: -04af 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -04b0 247a0000 nrtn blank -04b1 20204266 branch mouse_check_direct_timeout +04b9 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +04ba 247a0000 nrtn blank +04bb 20204266 branch mouse_check_direct_timeout p_mouse_le_current_mult_update_timer: -04b2 da604b68 arg mem_mouse_le_current_mult_timer ,regc -04b3 da4004b5 arg p_mouse_le_current_mult_reinit ,regb -04b4 2020336d branch timer_single_step +04bc da604b68 arg mem_mouse_le_current_mult_timer ,regc +04bd da4004bf arg p_mouse_le_current_mult_reinit ,regb +04be 2020336d branch timer_single_step p_mouse_le_current_mult_reinit: -04b5 6800c7c7 fetch 1 ,mem_lpm_mult_init -04b6 6000c172 store 1 ,mem_lpm_mult -04b7 20600000 rtn +04bf 6800c7c7 fetch 1 ,mem_lpm_mult_init +04c0 6000c172 store 1 ,mem_lpm_mult +04c1 20600000 rtn p_le_send_smp_security_request_timer: -04b8 6800cb6a fetch 1 ,mem_mouse_le_bb_connected_flag -04b9 207a0000 rtn blank -04ba da604b6b arg mem_mouse_send_secutiry_request_timer ,regc -04bb da4004bd arg p_le_pairing_sm_start_check ,regb -04bc 2020336d branch timer_single_step +04c2 6800cb6a fetch 1 ,mem_mouse_le_bb_connected_flag +04c3 207a0000 rtn blank +04c4 da604b6b arg mem_mouse_send_secutiry_request_timer ,regc +04c5 da4004c7 arg p_le_pairing_sm_start_check ,regb +04c6 2020336d branch timer_single_step p_le_pairing_sm_start_check: -04bd 6800cb6c fetch 1 ,mem_le_send_security_request_flag -04be 247a0000 nrtn blank -04bf 20205bf5 branch le_pairing_sm_start +04c7 6800cb6c fetch 1 ,mem_le_send_security_request_flag +04c8 247a0000 nrtn blank +04c9 20205bf5 branch le_pairing_sm_start p_mouse_wheel_trigger_timer: -04c0 da604809 arg mem_mouse_wheel_trigger_timer ,regc -04c1 da4004c3 arg p_mouse_wheel_trigger_disable ,regb -04c2 2020336d branch timer_single_step +04ca da604809 arg mem_mouse_wheel_trigger_timer ,regc +04cb da4004cd arg p_mouse_wheel_trigger_disable ,regb +04cc 2020336d branch timer_single_step p_mouse_wheel_trigger_disable: -04c3 70480800 jam 0 ,mem_mouse_wheel_trigger -04c4 20600000 rtn +04cd 70480800 jam 0 ,mem_mouse_wheel_trigger +04ce 20600000 rtn p_mouse_g24_stop_mode_timeout_timer: -04c5 da604d8d arg mem_24g_stop_g24_mode_timeout ,regc -04c6 da4004c8 arg p_mouse_g24_stop_mode_timeout ,regb -04c7 20203374 branch timer_single_step_2b +04cf da604d8f arg mem_24g_stop_g24_mode_timeout ,regc +04d0 da4004d2 arg p_mouse_g24_stop_mode_timeout ,regb +04d1 20203374 branch timer_single_step_2b p_mouse_g24_stop_mode_timeout: -04c8 704d8c01 jam 1 ,mem_24g_stop_g24_mode -04c9 20600000 rtn +04d2 704d8e01 jam 1 ,mem_24g_stop_g24_mode +04d3 20600000 rtn p_mouse_bt_discovery_timer: -04ca da604b47 arg mem_select_ui_button_count ,regc -04cb da4004cd arg p_mouse_long_button_bt_discovery ,regb -04cc 2020336d branch timer_single_step +04d4 da604b47 arg mem_select_ui_button_count ,regc +04d5 da4004d7 arg p_mouse_long_button_bt_discovery ,regb +04d6 2020336d branch timer_single_step p_mouse_long_button_bt_discovery: -04cd 704bba01 jam on ,mem_select_device_button_statue_bt_discovery -04ce 6808c720 fetcht 1 ,mem_device_flag -04cf 6800c703 fetch 1 ,mem_24g_device_number -04d0 98467c00 isub temp ,null -04d1 20628000 rtn zero -04d2 68014682 fetch 2 ,mem_ui_state_map -04d3 2feffe0b isolate1 ui_state_ble_adv ,pdata -04d4 2040c2d4 call mouse_stop_le_adv ,true -04d5 68014682 fetch 2 ,mem_ui_state_map -04d6 2feffe07 isolate1 ui_state_bt_reconnect ,pdata -04d7 2040c392 call mouse_cancel_reconnect ,true -04d8 202043b8 branch mouse_long_button_bt_discovry +04d7 704bba01 jam on ,mem_select_device_button_statue_bt_discovery +04d8 6808c720 fetcht 1 ,mem_device_flag +04d9 6800c703 fetch 1 ,mem_24g_device_number +04da 98467c00 isub temp ,null +04db 20628000 rtn zero +04dc 68014682 fetch 2 ,mem_ui_state_map +04dd 2feffe0b isolate1 ui_state_ble_adv ,pdata +04de 2040c2d4 call mouse_stop_le_adv ,true +04df 68014682 fetch 2 ,mem_ui_state_map +04e0 2feffe07 isolate1 ui_state_bt_reconnect ,pdata +04e1 2040c392 call mouse_cancel_reconnect ,true +04e2 202043b8 branch mouse_long_button_bt_discovry p_mouse_get_select_state: -04d9 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -04da 204005ac call p_gpio_set_input_pu -04db 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -04dc 2020681d branch gpio_get_bit +04e3 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +04e4 204005d3 call p_gpio_set_input_pu +04e5 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +04e6 2020681d branch gpio_get_bit p_mouse_select_device_by_button: -04dd 204004d9 call p_mouse_get_select_state -04de 242084e8 nbranch p_mouse_select_device_button_up ,true +04e7 204004e3 call p_mouse_get_select_state +04e8 242084f2 nbranch p_mouse_select_device_button_up ,true p_mouse_select_device_button_down: -04df 204004ca call p_mouse_bt_discovery_timer -04e0 6800c6d9 fetch 1 ,mem_select_device_button_statue -04e1 c1000000 rtneq pb_button_state_down -04e2 7046d900 jam pb_button_state_down ,mem_select_device_button_statue -04e3 680146a8 fetch 2 ,mem_mouse_direct_timeout -04e4 600146ae store 2 ,mem_mouse_direct_timer -04e5 18000e03 force page_length_timer ,queue -04e6 680140b9 fetch 2 ,mem_page_to -04e7 20207f08 branch timer_init +04e9 204004d4 call p_mouse_bt_discovery_timer +04ea 6800c6d9 fetch 1 ,mem_select_device_button_statue +04eb c1000000 rtneq pb_button_state_down +04ec 7046d900 jam pb_button_state_down ,mem_select_device_button_statue +04ed 680146a8 fetch 2 ,mem_mouse_direct_timeout +04ee 600146ae store 2 ,mem_mouse_direct_timer +04ef 18000e03 force page_length_timer ,queue +04f0 680140b9 fetch 2 ,mem_page_to +04f1 20207f08 branch timer_init p_mouse_select_device_button_up: -04e8 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag -04e9 243a0500 nbranch p_mouse_select_button_wakeup_firstup ,blank -04ea 6800c6d9 fetch 1 ,mem_select_device_button_statue -04eb c1008000 rtneq pb_button_state_up -04ec 6800cb47 fetch 1 ,mem_select_ui_button_count -04ed 1fe67c14 sub pdata ,20 ,null -04ee 244104f3 ncall p_mouse_ready_reconnection_by_button ,positive -04ef 6800c685 fetch 1 ,mem_ui_button_timeout -04f0 6000cb47 store 1 ,mem_select_ui_button_count -04f1 7046d901 jam pb_button_state_up ,mem_select_device_button_statue -04f2 20600000 rtn +04f2 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag +04f3 243a050a nbranch p_mouse_select_button_wakeup_firstup ,blank +04f4 6800c6d9 fetch 1 ,mem_select_device_button_statue +04f5 c1008000 rtneq pb_button_state_up +04f6 6800cb47 fetch 1 ,mem_select_ui_button_count +04f7 1fe67c14 sub pdata ,20 ,null +04f8 244104fd ncall p_mouse_ready_reconnection_by_button ,positive +04f9 6800c685 fetch 1 ,mem_ui_button_timeout +04fa 6000cb47 store 1 ,mem_select_ui_button_count +04fb 7046d901 jam pb_button_state_up ,mem_select_device_button_statue +04fc 20600000 rtn p_mouse_ready_reconnection_by_button: -04f3 204004f9 call p_mouse_switch_device_flag -04f4 7041bd00 jam 0 ,mem_link_key_exists -04f5 20400311 call p_mouse_store_flash_device_info -04f6 680246d3 fetch mouse_flag_len ,mem_mouse_flag -04f7 c1048000 rtneq mouse_bt_discovery_button_long_down_flag -04f8 2020437e branch mouse_set_reconnection +04fd 20400503 call p_mouse_switch_device_flag +04fe 7041bd00 jam 0 ,mem_link_key_exists +04ff 20400319 call p_mouse_store_flash_device_info +0500 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0501 c1048000 rtneq mouse_bt_discovery_button_long_down_flag +0502 2020437e branch mouse_set_reconnection p_mouse_switch_device_flag: -04f9 6808c720 fetcht 1 ,mem_device_flag -04fa 18408401 increase 1 ,temp -04fb 6800c6d2 fetch 1 ,mem_device_number -04fc 98467c00 isub temp ,null -04fd 244143cc ncall mouse_select_device_count_clean ,positive -04fe 6008c720 storet 1 ,mem_device_flag -04ff 20600000 rtn +0503 6808c720 fetcht 1 ,mem_device_flag +0504 18408401 increase 1 ,temp +0505 6800c6d2 fetch 1 ,mem_device_number +0506 98467c00 isub temp ,null +0507 244143cc ncall mouse_select_device_count_clean ,positive +0508 6008c720 storet 1 ,mem_device_flag +0509 20600000 rtn p_mouse_select_button_wakeup_firstup: -0500 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0501 7046d901 jam pb_button_state_up ,mem_select_device_button_statue -0502 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0503 20600000 rtn +050a 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag +050b 7046d901 jam pb_button_state_up ,mem_select_device_button_statue +050c 704b2701 jam on ,mem_mouse_multi_led_blink_enable +050d 20600000 rtn p_mouse_le_bb_disconnected_led_blink_set: -0504 704bb901 jam 1 ,mem_mouse_connected_state -0505 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -0506 2020073b branch p_mouse_dpi_multi_led_blink +050e 704bb901 jam 1 ,mem_mouse_connected_state +050f 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count +0510 20200762 branch p_mouse_dpi_multi_led_blink p_mouse_adc_read: -0507 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count -0508 247a0000 nrtn blank -0509 6800c808 fetch 1 ,mem_mouse_wheel_trigger -050a 247a0000 nrtn blank -050b 6800c6ce fetch 1 ,mem_adc_read_timer -050c 1fe0fe01 increase 1 ,pdata -050d 6000c6ce store 1 ,mem_adc_read_timer -050e 1fe67c0a sub pdata ,10 ,null -050f 20610000 rtn positive +0511 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +0512 247a0000 nrtn blank +0513 6800c808 fetch 1 ,mem_mouse_wheel_trigger +0514 247a0000 nrtn blank +0515 6800c6ce fetch 1 ,mem_adc_read_timer +0516 1fe0fe01 increase 1 ,pdata +0517 6000c6ce store 1 ,mem_adc_read_timer +0518 1fe67c0a sub pdata ,10 ,null +0519 20610000 rtn positive p_mouse_adc_read_timeout: -0510 204068a8 call adc_init_data -0511 7046ce00 jam 0 ,mem_adc_read_timer -0512 2040052d call p_adc_set_mode -0513 20406908 call vdd_calculate_by_mode -0514 1feffe03 mul32 pdata ,3 ,pdata -0515 d840000f arg 0x0f ,temp -0516 98467e00 isub temp ,pdata -0517 1fe67c64 sub pdata ,0x64 ,null -0518 2041052a call p_mouse_vdd_decrease ,positive -0519 6001470f store 2 ,mem_mouse_vdd_now_vol -051a da204709 arg mem_mouse_vdd_calculate_set ,rega -051b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -051c 2040681d call gpio_get_bit -051d 2420851f nbranch p_mouse_adc_read_next ,true -051e 20600000 rtn +051a 204068a8 call adc_init_data +051b 7046ce00 jam 0 ,mem_adc_read_timer +051c 20400534 call p_adc_set_mode +051d 20406908 call vdd_calculate_by_mode +051e 1feffe03 mul32 pdata ,3 ,pdata +051f d840000f arg 0x0f ,temp +0520 98467e00 isub temp ,pdata +0521 1fe67c64 sub pdata ,0x64 ,null +0522 20410531 call p_mouse_vdd_decrease ,positive +0523 6001470f store 2 ,mem_mouse_vdd_now_vol +0524 da204709 arg mem_mouse_vdd_calculate_set ,rega +0525 20200526 branch p_mouse_adc_read_next p_mouse_adc_read_next: -051f 20400535 call p_adc_bat_percent_lowpower_out -0520 6800c231 fetch 1 ,mem_adc_power_flag -0521 c280b40a bbit1 1 ,app_enter_hibernate -0522 c3000525 bbit0 0 ,p_mouse_adc_no_low_voltage -0523 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag -0524 202043e7 branch mouse_adc_low_voltage +0526 2040053c call p_adc_bat_percent_lowpower_out +0527 6800c231 fetch 1 ,mem_adc_power_flag +0528 c280b40a bbit1 1 ,app_enter_hibernate +0529 c300052c bbit0 0 ,p_mouse_adc_no_low_voltage +052a 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag +052b 202043e7 branch mouse_adc_low_voltage p_mouse_adc_no_low_voltage: -0525 204043e9 call mouse_adc_no_low_voltage -0526 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag -0527 207a0000 rtn blank -0528 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag -0529 2020072f branch p_mouse_multi_led_off +052c 204043e9 call mouse_adc_no_low_voltage +052d 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag +052e 207a0000 rtn blank +052f 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag +0530 20200756 branch p_mouse_multi_led_off p_mouse_vdd_decrease: -052a d8400005 arg 0x05 ,temp -052b 98467e00 isub temp ,pdata -052c 20600000 rtn +0531 d8400005 arg 0x05 ,temp +0532 98467e00 isub temp ,pdata +0533 20600000 rtn p_adc_set_mode: p_adc_check_gpio: -052d 68108078 hfetch 1 ,core_gpio_pu0 -052e 793ffe05 set0 5 ,pdata -052f 60108078 hstore 1 ,core_gpio_pu0 -0530 204068f4 call adc_check_gpio -0531 68108078 hfetch 1 ,core_gpio_pu0 -0532 79207e05 set1 5 ,pdata -0533 60108078 hstore 1 ,core_gpio_pu0 -0534 20600000 rtn +0534 68108078 hfetch 1 ,core_gpio_pu0 +0535 793ffe05 set0 5 ,pdata +0536 60108078 hstore 1 ,core_gpio_pu0 +0537 204068f4 call adc_check_gpio +0538 68108078 hfetch 1 ,core_gpio_pu0 +0539 79207e05 set1 5 ,pdata +053a 60108078 hstore 1 ,core_gpio_pu0 +053b 20600000 rtn p_adc_bat_percent_lowpower_out: -0535 ea240000 ifetch 8 ,rega -0536 60040a9a store 8 ,mem_pdatatemp -0537 68090a9c fetcht 2 ,mem_pdatatemp + 2 -0538 68010aa0 fetch 2 ,mem_pdatatemp + 6 -0539 98467c00 isub temp ,null -053a 24216944 nbranch adc_set_no_power_flag ,positive -053b 68090a9e fetcht 2 ,mem_pdatatemp + 4 -053c 98467c00 isub temp ,null -053d 24216940 nbranch adc_set_low_power_flag ,positive +053c ea240000 ifetch 8 ,rega +053d 60040a9a store 8 ,mem_pdatatemp +053e 68090a9c fetcht 2 ,mem_pdatatemp + 2 +053f 68010aa0 fetch 2 ,mem_pdatatemp + 6 +0540 98467c00 isub temp ,null +0541 24216944 nbranch adc_set_no_power_flag ,positive +0542 68090a9e fetcht 2 ,mem_pdatatemp + 4 +0543 98467c00 isub temp ,null +0544 24216940 nbranch adc_set_low_power_flag ,positive p_adc_clear_low_power_flag: -053e 6800c231 fetch 1 ,mem_adc_power_flag -053f 793ffe00 set0 0 ,pdata -0540 6000c231 store 1 ,mem_adc_power_flag -0541 20600000 rtn +0545 6800c231 fetch 1 ,mem_adc_power_flag +0546 793ffe00 set0 0 ,pdata +0547 6000c231 store 1 ,mem_adc_power_flag +0548 20600000 rtn p_mouse_low_voltage_led_timer: -0542 680246d3 fetch mouse_flag_len ,mem_mouse_flag -0543 c4020000 rtnbit0 mouse_low_voltage_flag -0544 68014682 fetch 2 ,mem_ui_state_map -0545 c3858000 rtnbit1 ui_state_ble_adv -0546 c3830000 rtnbit1 ui_state_bt_discovery -0547 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count -0548 247a0000 nrtn blank -0549 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count -054a 1fe0fe01 pincrease 1 -054b 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count -054c 1fe67c1e sub pdata ,30 ,null -054d 24410551 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive -054e 1fe67c0a sub pdata ,10 ,null -054f 20210721 branch p_mouse_multi_led_on ,positive -0550 2020072f branch p_mouse_multi_led_off +0549 680246d3 fetch mouse_flag_len ,mem_mouse_flag +054a c4020000 rtnbit0 mouse_low_voltage_flag +054b 68014682 fetch 2 ,mem_ui_state_map +054c c3858000 rtnbit1 ui_state_ble_adv +054d c3830000 rtnbit1 ui_state_bt_discovery +054e 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +054f 247a0000 nrtn blank +0550 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count +0551 1fe0fe01 pincrease 1 +0552 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count +0553 1fe67c1e sub pdata ,30 ,null +0554 24410558 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive +0555 1fe67c0a sub pdata ,10 ,null +0556 20210748 branch p_mouse_multi_led_on ,positive +0557 20200756 branch p_mouse_multi_led_off p_mouse_adc_low_volatage_led_timer_count_clean: -0551 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count -0552 20600000 rtn +0558 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count +0559 20600000 rtn p_mouse_sensor_poweron: -0553 20400324 call p_mouse_spi_init -0554 58008006 setarg 0x8006 -0555 20406413 call twspi_write -0556 20002ee0 nop 12000 -0557 da604b96 arg mem_sensor_poweron_init ,regc -0558 204002ef call p_sensor_wr_seq +055a 2040032c call p_mouse_spi_init +055b 58008006 setarg 0x8006 +055c 20406413 call twspi_write +055d 20002ee0 nop 12000 +055e da604b96 arg mem_sensor_poweron_init ,regc +055f 204002f7 call p_sensor_wr_seq p_mouse_dpi_config: -0559 6800c77a fetch 1 ,mem_mouse_dpi -055a c0ff855d bne 0xff ,p_mouse_seting_dpi +0560 6800c77a fetch 1 ,mem_mouse_dpi +0561 c0ff8564 bne 0xff ,p_mouse_seting_dpi p_mouse_dpi_config_default: -055b 6800c6e1 fetch 1 ,mem_config_sensor_motion -055c 6000c77a store 1 ,mem_mouse_dpi +0562 6800c6e1 fetch 1 ,mem_config_sensor_motion +0563 6000c77a store 1 ,mem_mouse_dpi p_mouse_seting_dpi: p_mouse_seting_sensor_type: -055d 6800c6e0 fetch 1 ,mem_config_sensor_type -055e c002057a beq p3212 ,p_mouse_seting_3212_dpi -055f c003056d beq p3065_xy ,p_mouse_seting_3065xy_dpi -0560 c003856d beq mx8650 ,p_mouse_seting_3065xy_dpi +0564 6800c6e0 fetch 1 ,mem_config_sensor_type +0565 c0020581 beq p3212 ,p_mouse_seting_3212_dpi +0566 c0030574 beq p3065_xy ,p_mouse_seting_3065xy_dpi +0567 c0038574 beq mx8650 ,p_mouse_seting_3065xy_dpi p_mouse_seting_3205_dpi: -0561 6800c77a fetch 1 ,mem_mouse_dpi -0562 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -0563 20428568 call p_mouse_3205_dpi_recount ,zero -0564 6800c77a fetch 1 ,mem_mouse_dpi -0565 c000056a beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 -0566 c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 -0567 20203d88 branch mouse_set_cpi2 +0568 6800c77a fetch 1 ,mem_mouse_dpi +0569 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +056a 2042856f call p_mouse_3205_dpi_recount ,zero +056b 6800c77a fetch 1 ,mem_mouse_dpi +056c c0000571 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 +056d c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 +056e 20203d88 branch mouse_set_cpi2 p_mouse_3205_dpi_recount: -0568 70477a02 jam mouse_dpi_level3 ,mem_mouse_dpi -0569 20600000 rtn +056f 70477a02 jam mouse_dpi_level3 ,mem_mouse_dpi +0570 20600000 rtn p_mouse_3205_set_cpi1: -056a 6800c77f fetch 1 ,mem_320x_dpi_1 -056b 1fe0ffff increase -1 ,pdata -056c 20203dbe branch mouse_p3205_dpi +0571 6800c77f fetch 1 ,mem_320x_dpi_1 +0572 1fe0ffff increase -1 ,pdata +0573 20203dbe branch mouse_p3205_dpi p_mouse_seting_3065xy_dpi: -056d 6800c77a fetch 1 ,mem_mouse_dpi -056e 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -056f 20428568 call p_mouse_3205_dpi_recount ,zero -0570 6800c77a fetch 1 ,mem_mouse_dpi -0571 c0000576 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 -0572 c0018578 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 +0574 6800c77a fetch 1 ,mem_mouse_dpi +0575 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +0576 2042856f call p_mouse_3205_dpi_recount ,zero +0577 6800c77a fetch 1 ,mem_mouse_dpi +0578 c000057d beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 +0579 c001857f beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 p_mouse_3065xy_set_cpi3: -0573 6800cb3c fetch 1 ,mem_3065xy_dpi_3 +057a 6800cb3c fetch 1 ,mem_3065xy_dpi_3 p_mouse_dpi_store: -0574 6000c6b5 store 1 ,mem_mouse_cpi_count -0575 20203dc1 branch mouse_p3205_dpi + 3 +057b 6000c6b5 store 1 ,mem_mouse_cpi_count +057c 20203dc1 branch mouse_p3205_dpi + 3 p_mouse_3065xy_set_cpi1: -0576 6800cb3a fetch 1 ,mem_3065xy_dpi_1 -0577 20200574 branch p_mouse_dpi_store +057d 6800cb3a fetch 1 ,mem_3065xy_dpi_1 +057e 2020057b branch p_mouse_dpi_store p_mouse_3065xy_set_cpi4: -0578 6800cb3d fetch 1 ,mem_3065xy_dpi_4 -0579 20200574 branch p_mouse_dpi_store +057f 6800cb3d fetch 1 ,mem_3065xy_dpi_4 +0580 2020057b branch p_mouse_dpi_store p_mouse_seting_3212_dpi: -057a 6800c77a fetch 1 ,mem_mouse_dpi -057b 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -057c 20428568 call p_mouse_3205_dpi_recount ,zero -057d 6800c77a fetch 1 ,mem_mouse_dpi -057e c0003d9b beq mouse_dpi_level1 ,mouse_set_p3212_cpi2 -057f c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -0580 20203d9f branch mouse_set_p3212_cpi3 +0581 6800c77a fetch 1 ,mem_mouse_dpi +0582 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +0583 2042856f call p_mouse_3205_dpi_recount ,zero +0584 6800c77a fetch 1 ,mem_mouse_dpi +0585 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0586 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0587 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0588 c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +0589 20203d9b branch mouse_set_p3212_cpi2 p_mouse_motion: -0581 78547c00 disable user -0582 58000000 setarg 0 -0583 6003469b store 6 ,mem_mouse_x -0584 20403fb5 call mouse_cheak_sensor_data -0585 2040029e call p_mouse_set_sdio_high -0586 20404079 call mouse_zwheel -0587 2040407e call mouse_t_zwheel -0588 2040058b call p_mouse_key -0589 24740000 nrtn user -058a 20203fa0 branch mouse_motion + 9 +058a 78547c00 disable user +058b 58000000 setarg 0 +058c 6003469b store 6 ,mem_mouse_x +058d 20403fb5 call mouse_cheak_sensor_data +058e 204002a6 call p_mouse_set_sdio_high +058f 20404079 call mouse_zwheel +0590 2040407e call mouse_t_zwheel +0591 204005b2 call p_mouse_key +0592 20400595 call p_mouse_data_zoom +0593 24740000 nrtn user +0594 20203fa0 branch mouse_motion + 9 + +p_mouse_data_zoom: +0595 6800c6e0 fetch 1 ,mem_config_sensor_type +0596 c1820000 rtnne p3212 +0597 6800c77a fetch 1 ,mem_mouse_dpi +0598 c1818000 rtnne mouse_dpi_level4 +0599 6801469b fetch 2 ,mem_mouse_x +059a 204005a0 call p_mouse_1600_zoom +059b 6001469b store 2 ,mem_mouse_x +059c 6801469d fetch 2 ,mem_mouse_y +059d 204005a0 call p_mouse_1600_zoom +059e 6001469d store 2 ,mem_mouse_y +059f 20600000 rtn + +p_mouse_1600_zoom: +05a0 c28585a3 bbit1 11 ,p_mouse_xy_inverse +05a1 c30585a7 bbit0 11 ,p_mouse_xy_zoom_3200 +05a2 20600000 rtn + +p_mouse_xy_inverse: +05a3 1fe67e00 sub pdata ,0 ,pdata +05a4 204005a7 call p_mouse_xy_zoom_3200 +05a5 1fe67e00 sub pdata ,0 ,pdata +05a6 20600000 rtn + +p_mouse_xy_zoom_3200: +05a7 9fe0fe00 iadd pdata ,pdata +05a8 202005a9 branch p_mouse_xy_zoom_store + +p_mouse_xy_zoom_store: +05a9 60014bbb store 2 ,mem_mouse_temp_data +05aa 6800cbbc fetch 1 ,mem_mouse_temp_data + 1 +05ab 1fe67c07 sub pdata ,0x7 ,null +05ac 244105af ncall p_mouse_xy_forward_overflow ,positive +05ad 68014bbb fetch 2 ,mem_mouse_temp_data +05ae 20600000 rtn + +p_mouse_xy_forward_overflow: +05af 580007ff setarg 0x7ff +05b0 60014bbb store 2 ,mem_mouse_temp_data +05b1 20600000 rtn p_mouse_key: -058b 2040058d call p_mouse_check_key_gpio -058c 2020409a branch mouse_key + 1 +05b2 204005b4 call p_mouse_check_key_gpio +05b3 2020409a branch mouse_key + 1 p_mouse_check_key_gpio: -058d da200000 arg 0 ,rega -058e 20400590 call p_mouse_check_lkey_gpio -058f 2020408e branch mouse_check_key_gpio_output +05b4 da200000 arg 0 ,rega +05b5 204005b7 call p_mouse_check_lkey_gpio +05b6 2020408e branch mouse_check_key_gpio_output p_mouse_check_lkey_gpio: -0590 6808c6e2 fetcht 1 ,mem_lbutton_gpio -0591 204005ac call p_gpio_set_input_pu -0592 6808c6e2 fetcht 1 ,mem_lbutton_gpio -0593 2040681d call gpio_get_bit -0594 7920a200 setflag true ,0 ,rega +05b7 6808c6e2 fetcht 1 ,mem_lbutton_gpio +05b8 204005d3 call p_gpio_set_input_pu +05b9 6808c6e2 fetcht 1 ,mem_lbutton_gpio +05ba 2040681d call gpio_get_bit +05bb 7920a200 setflag true ,0 ,rega p_mouse_check_rkey_gpio: -0595 6808c6e3 fetcht 1 ,mem_rbutton_gpio -0596 204005ac call p_gpio_set_input_pu -0597 6808c6e3 fetcht 1 ,mem_rbutton_gpio -0598 2040681d call gpio_get_bit -0599 7920a201 setflag true ,1 ,rega +05bc 6808c6e3 fetcht 1 ,mem_rbutton_gpio +05bd 204005d3 call p_gpio_set_input_pu +05be 6808c6e3 fetcht 1 ,mem_rbutton_gpio +05bf 2040681d call gpio_get_bit +05c0 7920a201 setflag true ,1 ,rega p_mouse_check_mkey_gpio: -059a 6808c6e4 fetcht 1 ,mem_mbutton_gpio -059b 204005ac call p_gpio_set_input_pu -059c 6808c6e4 fetcht 1 ,mem_mbutton_gpio -059d 2040681d call gpio_get_bit -059e 7920a202 setflag true ,2 ,rega +05c1 6808c6e4 fetcht 1 ,mem_mbutton_gpio +05c2 204005d3 call p_gpio_set_input_pu +05c3 6808c6e4 fetcht 1 ,mem_mbutton_gpio +05c4 2040681d call gpio_get_bit +05c5 7920a202 setflag true ,2 ,rega p_mouse_check_bk_key_gpio: -059f 20400439 call p_mouse_comm_gpio_config -05a0 6808c6e5 fetcht 1 ,mem_bk_button_gpio -05a1 204005b1 call p_gpio_set_input_pd -05a2 6808c6e5 fetcht 1 ,mem_bk_button_gpio -05a3 2040681d call gpio_get_bit -05a4 7d20a203 nsetflag true ,3 ,rega -05a5 204005ac call p_gpio_set_input_pu +05c6 20400441 call p_mouse_comm_gpio_config +05c7 6808c6e5 fetcht 1 ,mem_bk_button_gpio +05c8 204005d8 call p_gpio_set_input_pd +05c9 6808c6e5 fetcht 1 ,mem_bk_button_gpio +05ca 2040681d call gpio_get_bit +05cb 7d20a203 nsetflag true ,3 ,rega +05cc 204005d3 call p_gpio_set_input_pu p_mouse_check_fw_key_gpio: -05a6 20400439 call p_mouse_comm_gpio_config -05a7 6808c6e6 fetcht 1 ,mem_fw_button_gpio -05a8 204005b1 call p_gpio_set_input_pd -05a9 6808c6e6 fetcht 1 ,mem_fw_button_gpio -05aa 2040681d call gpio_get_bit -05ab 7d20a204 nsetflag true ,4 ,rega +05cd 20400441 call p_mouse_comm_gpio_config +05ce 6808c6e6 fetcht 1 ,mem_fw_button_gpio +05cf 204005d8 call p_gpio_set_input_pd +05d0 6808c6e6 fetcht 1 ,mem_fw_button_gpio +05d1 2040681d call gpio_get_bit +05d2 7d20a204 nsetflag true ,4 ,rega p_gpio_set_input_pu: -05ac 79200407 set1 gpio_active_bit ,temp +05d3 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pu1: -05ad d8a08078 arg core_gpio_pu0 ,contw -05ae 20406830 call gpio_set_bit -05af 793f8407 set0 gpio_active_bit ,temp -05b0 202005b5 branch p_gpio_set_input_pd4 +05d4 d8a08078 arg core_gpio_pu0 ,contw +05d5 20406830 call gpio_set_bit +05d6 793f8407 set0 gpio_active_bit ,temp +05d7 202005dc branch p_gpio_set_input_pd4 p_gpio_set_input_pd: -05b1 793f8407 set0 gpio_active_bit ,temp -05b2 d8a08078 arg core_gpio_pu0 ,contw -05b3 20406830 call gpio_set_bit -05b4 79200407 set1 gpio_active_bit ,temp +05d8 793f8407 set0 gpio_active_bit ,temp +05d9 d8a08078 arg core_gpio_pu0 ,contw +05da 20406830 call gpio_set_bit +05db 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pd4: -05b5 d8a0807c arg core_gpio_pd0 ,contw -05b6 2020680a branch gpio_set_high_impedance + 4 +05dc d8a0807c arg core_gpio_pd0 ,contw +05dd 2020680a branch gpio_set_high_impedance + 4 p_mouse_bb_event_discovery_btn: -05b7 280ffe26 isolate1 mark_24g ,mark -05b8 204081ab call p_g24_check_51cmd_stop_24g ,true -05b9 2020426d branch mouse_bb_event_discovery_btn + 1 +05de 280ffe26 isolate1 mark_24g ,mark +05df 204081b1 call p_g24_check_51cmd_stop_24g ,true +05e0 2020426d branch mouse_bb_event_discovery_btn + 1 p_le_addr_random_config: -05ba 7011c581 jam zcode_81 ,mem_zcode_temp_param0 -05bb 2020079d branch p_zcode_entrance +05e1 7011c581 jam zcode_81 ,mem_zcode_temp_param0 +05e2 202007c4 branch p_zcode_entrance p_mouse_start_discovery: -05bc 7011c550 jam zcode_50 ,mem_zcode_temp_param0 -05bd 2020079d branch p_zcode_entrance +05e3 7011c550 jam zcode_50 ,mem_zcode_temp_param0 +05e4 202007c4 branch p_zcode_entrance p_le_adv_data_update: -05be d8a0437b arg mem_le_adv_data + 11 ,contw -05bf df200013 arg 19 ,loopcnt -05c0 20407f01 call memcpy -05c1 202057b8 branch le_modified_name_adv +05e5 d8a0437b arg mem_le_adv_data + 11 ,contw +05e6 df200013 arg 19 ,loopcnt +05e7 20407f01 call memcpy +05e8 202057b8 branch le_modified_name_adv p_mouse_stop_discovery: -05c2 20400729 call p_mouse_discovey_led_blink_off -05c3 58000000 setarg 0 -05c4 600146ac store 2 ,mem_mouse_discovery_timer -05c5 6000c714 store 1 ,mem_mouse_blink_count -05c6 204002e3 call p_mouse_init_sensor_reset -05c7 202042cb branch mouse_stop_discovery + 1 +05e9 20400750 call p_mouse_discovey_led_blink_off +05ea 58000000 setarg 0 +05eb 600146ac store 2 ,mem_mouse_discovery_timer +05ec 6000c714 store 1 ,mem_mouse_blink_count +05ed 204002eb call p_mouse_init_sensor_reset +05ee 202042cb branch mouse_stop_discovery + 1 p_le_slave_match: -05c8 6800c50f fetch 1 ,mem_le_md_count -05c9 1fe0fe01 pincrease 1 -05ca 6000c50f store 1 ,mem_le_md_count -05cb c0065395 beq le_md_max_count ,le_slave_cont -05cc 204055aa call le_acknowledge -05cd 2040561e call le_prepare_tx -05ce 204006a5 call power_ctrl_start -05cf 2020538f branch le_slave_match + 7 +05ef 6800c50f fetch 1 ,mem_le_md_count +05f0 1fe0fe01 pincrease 1 +05f1 6000c50f store 1 ,mem_le_md_count +05f2 c0065395 beq le_md_max_count ,le_slave_cont +05f3 204055aa call le_acknowledge +05f4 2040561e call le_prepare_tx +05f5 204006cc call power_ctrl_start +05f6 2020538f branch le_slave_match + 7 p_le_next_adv_channel: -05d0 68008016 fetch 1 ,mem_le_ch_mapped -05d1 1fe0fe01 increase 1 ,pdata -05d2 60008016 store 1 ,mem_le_ch_mapped -05d3 c1940000 rtnne 40 -05d4 70001625 jam 37 ,mem_le_ch_mapped -05d5 20600000 rtn +05f7 68008016 fetch 1 ,mem_le_ch_mapped +05f8 1fe0fe01 increase 1 ,pdata +05f9 60008016 store 1 ,mem_le_ch_mapped +05fa c1940000 rtnne 40 +05fb 70001625 jam 37 ,mem_le_ch_mapped +05fc 20600000 rtn p_le_receive_skip: -05d6 204029bb call save_rssi -05d7 2040020e call p_rssi_signal -05d8 202054a3 branch le_receive_skip + 2 +05fd 204029bb call save_rssi +05fe 20400214 call p_rssi_signal +05ff 202054a3 branch le_receive_skip + 2 p_le_update_param: -05d9 7011c540 jam zcode_40 ,mem_zcode_temp_param0 -05da 2020079d branch p_zcode_entrance +0600 7011c540 jam zcode_40 ,mem_zcode_temp_param0 +0601 202007c4 branch p_zcode_entrance p_le_update_channel_map: -05db 7011c541 jam zcode_41 ,mem_zcode_temp_param0 -05dc 2020079d branch p_zcode_entrance +0602 7011c541 jam zcode_41 ,mem_zcode_temp_param0 +0603 202007c4 branch p_zcode_entrance p_le_prepare_tx: -05dd 68008456 fetch 1 ,mem_le_arq -05de c28285fc bbit1 wak ,p_le_prepare_tx_wak -05df 2040074e call power_ctrl_pac_succ_incrs -05e0 6800c78e fetch 1 ,mem_empty_count -05e1 243a05e7 nbranch p_le_send_empyt ,blank -05e2 6800843f fetch 1 ,mem_le_state -05e3 c30205eb bbit0 lestate_encryption ,p_le_tx_4 -05e4 680082da fetch 1 ,mem_le_rxbuf + 1 -05e5 203a05eb branch p_le_tx_4 ,blank -05e6 20205664 branch le_send_empty +0604 68008456 fetch 1 ,mem_le_arq +0605 c2828623 bbit1 wak ,p_le_prepare_tx_wak +0606 20400775 call power_ctrl_pac_succ_incrs +0607 6800c78e fetch 1 ,mem_empty_count +0608 243a060e nbranch p_le_send_empyt ,blank +0609 6800843f fetch 1 ,mem_le_state +060a c3020612 bbit0 lestate_encryption ,p_le_tx_4 +060b 680082da fetch 1 ,mem_le_rxbuf + 1 +060c 203a0612 branch p_le_tx_4 ,blank +060d 20205664 branch le_send_empty p_le_send_empyt: -05e7 6800c78e fetch 1 ,mem_empty_count -05e8 1fe0ffff increase -1 ,pdata -05e9 6000c78e store 1 ,mem_empty_count -05ea 20205664 branch le_send_empty +060e 6800c78e fetch 1 ,mem_empty_count +060f 1fe0ffff increase -1 ,pdata +0610 6000c78e store 1 ,mem_empty_count +0611 20205664 branch le_send_empty p_le_tx_4: -05eb 6800c4c4 fetch 1 ,mem_le_pairing_state -05ec c08285ee bne flag_le_pairing_after_auth ,p_in_le_tx_4 -05ed 70478e03 jam 3 ,mem_empty_count +0612 6800c4c4 fetch 1 ,mem_le_pairing_state +0613 c0828615 bne flag_le_pairing_after_auth ,p_in_le_tx_4 +0614 70478e03 jam 3 ,mem_empty_count p_in_le_tx_4: -05ee 20405892 call le_fifo_check_nearly_full -05ef 205a03b8 call p_mouse_data_pull ,blank -05f0 20205622 branch le_prepare_tx + 4 +0615 20405892 call le_fifo_check_nearly_full +0616 205a03c0 call p_mouse_data_pull ,blank +0617 20205622 branch le_prepare_tx + 4 p_le_check_tx_retransmit_setmd: -05f1 6800c6c5 fetch 1 ,mem_le_connect_status_flag -05f2 1fe17e03 and pdata ,0x03 ,pdata -05f3 c1818000 rtnne 0x03 -05f4 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -05f5 207a0000 rtn blank -05f6 6800c3dd fetch 1 ,mem_le_txlen -05f7 207a0000 rtn blank -05f8 6800c3dc fetch 1 ,mem_le_txheader -05f9 79207e04 set1 md ,pdata -05fa 6000c3dc store 1 ,mem_le_txheader -05fb 20205650 branch le_set_md +0618 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0619 1fe17e03 and pdata ,0x03 ,pdata +061a c1818000 rtnne 0x03 +061b 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +061c 207a0000 rtn blank +061d 6800c3dd fetch 1 ,mem_le_txlen +061e 207a0000 rtn blank +061f 6800c3dc fetch 1 ,mem_le_txheader +0620 79207e04 set1 md ,pdata +0621 6000c3dc store 1 ,mem_le_txheader +0622 20205650 branch le_set_md p_le_prepare_tx_wak: -05fc 204005f1 call p_le_check_tx_retransmit_setmd +0623 20400618 call p_le_check_tx_retransmit_setmd p_le_power_ctrl_pac_succ_decrs: power_ctrl_pac_succ_decrs: -05fd 6800cd7a fetch 1 ,mem_power_ctrl_pac_succ_cnt -05fe 1fe67c02 sub pdata ,2 ,null -05ff 24410752 ncall power_ctrl_pac_succ_cnt_reinit ,positive -0600 6800cd7a fetch 1 ,mem_power_ctrl_pac_succ_cnt -0601 c1000000 rtneq 0 -0602 1fe0ffff increase -1 ,pdata -0603 6000cd7a store 1 ,mem_power_ctrl_pac_succ_cnt -0604 20600000 rtn +0624 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +0625 1fe67c02 sub pdata ,2 ,null +0626 24410779 ncall power_ctrl_pac_succ_cnt_reinit ,positive +0627 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +0628 c1000000 rtneq 0 +0629 1fe0ffff increase -1 ,pdata +062a 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt +062b 20600000 rtn p_mouse_le_reconn_write_enable_timer_reinit: -0605 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag -0606 207a0000 rtn blank -0607 6800c6c5 fetch 1 ,mem_le_connect_status_flag -0608 1fe17e03 and pdata ,0x03 ,pdata -0609 c1018000 rtneq 0x03 -060a 7046c60a jam 10 ,mem_le_start_encrypt_timer -060b 20600000 rtn +062c 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag +062d 207a0000 rtn blank +062e 6800c6c5 fetch 1 ,mem_le_connect_status_flag +062f 1fe17e03 and pdata ,0x03 ,pdata +0630 c1018000 rtneq 0x03 +0631 7046c60a jam 10 ,mem_le_start_encrypt_timer +0632 20600000 rtn p_le_parse: -060c c6078000 rtnmark1 mark_old_packet -060d 20405890 call le_fifo_check_full -060e 247a0000 nrtn blank -060f 680082d9 fetch 1 ,mem_le_rxbuf -0610 1fe17e03 and pdata ,0x3 ,pdata -0611 6000c50c store 1 ,mem_le_packet_llid -0612 e8c08000 ifetch 1 ,contr -0613 1fe17e1f and pdata ,0x1f ,pdata -0614 6000c50b store 1 ,mem_le_packet_size -0615 207a0000 rtn blank -0616 18c27e00 copy contr ,pdata -0617 6001450d store 2 ,mem_le_payload_ptr -0618 6800c50c fetch 1 ,mem_le_packet_llid -0619 c001861b beq llid_le_ll ,p_le_parse_ll -061a 2020568d branch le_parse_l2cap +0633 c6078000 rtnmark1 mark_old_packet +0634 20405890 call le_fifo_check_full +0635 247a0000 nrtn blank +0636 680082d9 fetch 1 ,mem_le_rxbuf +0637 1fe17e03 and pdata ,0x3 ,pdata +0638 6000c50c store 1 ,mem_le_packet_llid +0639 e8c08000 ifetch 1 ,contr +063a 1fe17e1f and pdata ,0x1f ,pdata +063b 6000c50b store 1 ,mem_le_packet_size +063c 207a0000 rtn blank +063d 18c27e00 copy contr ,pdata +063e 6001450d store 2 ,mem_le_payload_ptr +063f 6800c50c fetch 1 ,mem_le_packet_llid +0640 c0018642 beq llid_le_ll ,p_le_parse_ll +0641 2020568d branch le_parse_l2cap p_le_parse_ll: -061b 680082db fetch 1 ,mem_le_rxbuf + 2 -061c c000861e beq ll_channel_map_req ,p_le_parse_channel_map_req -061d 20205c65 branch le_parse_ll + 1 +0642 680082db fetch 1 ,mem_le_rxbuf + 2 +0643 c0008645 beq ll_channel_map_req ,p_le_parse_channel_map_req +0644 20205c65 branch le_parse_ll + 1 p_le_parse_channel_map_req: -061e e8c28000 ifetch 5 ,contr -061f 6002c3ce store 5 ,mem_le_new_map -0620 e8c10000 ifetch 2 ,contr -0621 6001045f store 2 ,mem_le_instant -0622 20205c8a branch le_parse_channel_map_req + 7 +0645 e8c28000 ifetch 5 ,contr +0646 6002c3ce store 5 ,mem_le_new_map +0647 e8c10000 ifetch 2 ,contr +0648 6001045f store 2 ,mem_le_instant +0649 20205c8a branch le_parse_channel_map_req + 7 p_le_parse_l2cap: -0623 e8c10000 ifetch 2 ,contr -0624 c0020627 beq le_l2cap_cid_att ,p_le_parse_att -0625 c0030665 beq le_l2cap_cid_smp ,p_le_parse_smp -0626 20205698 branch le_parse_l2cap + 11 +064a e8c10000 ifetch 2 ,contr +064b c002064e beq le_l2cap_cid_att ,p_le_parse_att +064c c003068c beq le_l2cap_cid_smp ,p_le_parse_smp +064d 20205698 branch le_parse_l2cap + 11 p_le_parse_att: -0627 20407ea5 call store_contr -0628 20400605 call p_mouse_le_reconn_write_enable_timer_reinit -0629 20407e9f call get_contr -062a e8c18000 ifetch 3 ,contr -062b 60018477 store 3 ,mem_le_att_opcode -062c c0080636 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request -062d 1fec8400 rshift8 pdata ,temp -062e 18467c24 sub temp ,0x24 ,null -062f 20210644 branch p_le_parse_att1 ,positive -0630 d84047c8 arg mem_mouse_le_uuid_sup ,temp -0631 600944bc storet 2 ,mem_ui_le_uuid_table -0632 204058ad call le_parse_att + 2 -0633 58008e7a setarg 0x8e7a -0634 600144bc store 2 ,mem_ui_le_uuid_table -0635 20600000 rtn +064e 20407ea5 call store_contr +064f 2040062c call p_mouse_le_reconn_write_enable_timer_reinit +0650 20407e9f call get_contr +0651 e8c18000 ifetch 3 ,contr +0652 60018477 store 3 ,mem_le_att_opcode +0653 c008065d beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +0654 1fec8400 rshift8 pdata ,temp +0655 18467c24 sub temp ,0x24 ,null +0656 2021066b branch p_le_parse_att1 ,positive +0657 d84047c8 arg mem_mouse_le_uuid_sup ,temp +0658 600944bc storet 2 ,mem_ui_le_uuid_table +0659 204058ad call le_parse_att + 2 +065a 58008e7a setarg 0x8e7a +065b 600144bc store 2 ,mem_ui_le_uuid_table +065c 20600000 rtn p_le_parse_att_read_by_group_type_request: -0636 204059fa call le_parse_att_read_by_group_type_request -0637 20405879 call le_fifo_get_last_tx_ptr -0638 18c08c07 increase 7 ,contr -0639 e8c08000 ifetch 1 ,contr -063a c1888000 rtnne attop_read_by_group_type_response -063b 18c08c05 increase 5 ,contr -063c e8c10000 ifetch 2 ,contr -063d d8401812 arg uuid_service_hids ,temp -063e 98467c00 isub temp ,null -063f 24628000 nrtn zero -0640 18c08dfc increase -4 ,contr -0641 5800002b setarg 0x2b -0642 e0c10000 istore 2 ,contr -0643 20600000 rtn +065d 204059fa call le_parse_att_read_by_group_type_request +065e 20405879 call le_fifo_get_last_tx_ptr +065f 18c08c07 increase 7 ,contr +0660 e8c08000 ifetch 1 ,contr +0661 c1888000 rtnne attop_read_by_group_type_response +0662 18c08c05 increase 5 ,contr +0663 e8c10000 ifetch 2 ,contr +0664 d8401812 arg uuid_service_hids ,temp +0665 98467c00 isub temp ,null +0666 24628000 nrtn zero +0667 18c08dfc increase -4 ,contr +0668 5800002b setarg 0x2b +0669 e0c10000 istore 2 ,contr +066a 20600000 rtn p_le_parse_att1: -0644 c0050647 beq attop_read_request ,p_le_parse_att_read_request -0645 c0090655 beq attop_write_request ,p_le_parse_att_write_request -0646 202058ad branch le_parse_att + 2 +066b c005066e beq attop_read_request ,p_le_parse_att_read_request +066c c009067c beq attop_write_request ,p_le_parse_att_write_request +066d 202058ad branch le_parse_att + 2 p_le_parse_att_read_request: -0647 68090478 fetcht 2 ,mem_le_att_handle -0648 6800c4e9 fetch 1 ,mem_le_configuration -0649 c281864e bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth +066e 68090478 fetcht 2 ,mem_le_att_handle +066f 6800c4e9 fetch 1 ,mem_le_configuration +0670 c2818675 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth p_le_send_att_read_response: -064a 68010478 fetch 2 ,mem_le_att_handle -064b c009da76 beq 0x13 ,le_send_att_error_response_notfound -064c 68090478 fetcht 2 ,mem_le_att_handle -064d 202059bf branch le_send_att_read_response +0671 68010478 fetch 2 ,mem_le_att_handle +0672 c009da76 beq 0x13 ,le_send_att_error_response_notfound +0673 68090478 fetcht 2 ,mem_le_att_handle +0674 202059bf branch le_send_att_read_response p_le_send_att_read_response_check_auth: -064e 680144fa fetch 2 ,mem_le_pairing_handle -064f 98467c00 isub temp ,null -0650 2422864a nbranch p_le_send_att_read_response ,zero -0651 20405a42 call le_check_encrypt_state -0652 2434064a nbranch p_le_send_att_read_response ,user -0653 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code -0654 20205a77 branch le_send_att_error_response +0675 680144fa fetch 2 ,mem_le_pairing_handle +0676 98467c00 isub temp ,null +0677 24228671 nbranch p_le_send_att_read_response ,zero +0678 20405a42 call le_check_encrypt_state +0679 24340671 nbranch p_le_send_att_read_response ,user +067a 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +067b 20205a77 branch le_send_att_error_response p_le_parse_att_write_request: -0655 18c22200 copy contr ,rega -0656 680144fc fetch 2 ,mem_le_l2cap_size -0657 1fe0a5fd add pdata ,-3 ,regb -0658 204056e2 call le_writeatt_cb -0659 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag -065a c07fda33 beq 0xff ,le_send_att_write_response_check_auth -065b 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag -065c 203a5a33 branch le_send_att_write_response_check_auth ,blank -065d 6800c6c5 fetch 1 ,mem_le_connect_status_flag -065e c280da33 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth -065f 5800001a setarg 0x001a -0660 68090478 fetcht 2 ,mem_le_att_handle -0661 98467c00 isub temp ,null -0662 2422da33 nbranch le_send_att_write_response_check_auth ,zero -0663 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code -0664 20205a77 branch le_send_att_error_response +067c 18c22200 copy contr ,rega +067d 680144fc fetch 2 ,mem_le_l2cap_size +067e 1fe0a5fd add pdata ,-3 ,regb +067f 204056e2 call le_writeatt_cb +0680 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag +0681 c07fda33 beq 0xff ,le_send_att_write_response_check_auth +0682 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag +0683 203a5a33 branch le_send_att_write_response_check_auth ,blank +0684 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0685 c280da33 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +0686 5800001a setarg 0x001a +0687 68090478 fetcht 2 ,mem_le_att_handle +0688 98467c00 isub temp ,null +0689 2422da33 nbranch le_send_att_write_response_check_auth ,zero +068a 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +068b 20205a77 branch le_send_att_error_response p_le_parse_smp: -0665 e8c08000 ifetch 1 ,contr -0666 c0008669 beq smp_pairing_request ,p_le_parse_smp_pairing_request -0667 c002866b beq smp_pairing_failed ,p_le_parse_smp_pairing_failed -0668 20205af6 branch le_parse_smp + 2 +068c e8c08000 ifetch 1 ,contr +068d c0008690 beq smp_pairing_request ,p_le_parse_smp_pairing_request +068e c0028692 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed +068f 20205af6 branch le_parse_smp + 2 p_le_parse_smp_pairing_request: -0669 704b6c01 jam 1 ,mem_le_send_security_request_flag -066a 20205b09 branch le_parse_smp_pairing_request +0690 704b6c01 jam 1 ,mem_le_send_security_request_flag +0691 20205b09 branch le_parse_smp_pairing_request p_le_parse_smp_pairing_failed: -066b 7011c582 jam zcode_82 ,mem_zcode_temp_param0 -066c 2020079d branch p_zcode_entrance +0692 7011c582 jam zcode_82 ,mem_zcode_temp_param0 +0693 202007c4 branch p_zcode_entrance p_le_adv_not_match: -066d 68008016 fetch 1 ,mem_le_ch_mapped -066e c093d6f2 bne 39 ,le_adv_loop -066f 180a7e00 random pdata -0670 d84001ff arg 0x1ff ,temp -0671 98417e00 iand temp ,pdata -0672 1fe0fefa add pdata ,250 ,pdata -0673 20403cbe call delay -0674 d8e00000 arg le_adv_interval_timer ,queue -0675 68014482 fetch 2 ,mem_le_adv_interval -0676 20207f08 branch timer_init +0694 68008016 fetch 1 ,mem_le_ch_mapped +0695 c093d6f2 bne 39 ,le_adv_loop +0696 180a7e00 random pdata +0697 d84001ff arg 0x1ff ,temp +0698 98417e00 iand temp ,pdata +0699 1fe0fefa add pdata ,250 ,pdata +069a 20403cbe call delay +069b d8e00000 arg le_adv_interval_timer ,queue +069c 68014482 fetch 2 ,mem_le_adv_interval +069d 20207f08 branch timer_init p_le_lpm_setmult: -0677 7855fc00 disable wake -0678 2037067a branch p_le_lpm_set_mult_attempt ,attempt -0679 2436d806 nbranch le_lpm_lost ,match +069e 7855fc00 disable wake +069f 203706a1 branch p_le_lpm_set_mult_attempt ,attempt +06a0 2436d806 nbranch le_lpm_lost ,match p_le_lpm_set_mult_attempt: -067a 20402bcb call lpm_match -067b 680140c1 fetch 2 ,mem_rx_window_sniff -067c 6001044d store 2 ,mem_le_receive_window -067d 6800c6c5 fetch 1 ,mem_le_connect_status_flag -067e 2fe00603 compare 3 ,pdata ,3 -067f 2420abde nbranch lpm_mult_short ,true -0680 202057fb branch le_lpm_set_mult_attempt + 3 +06a1 20402bcb call lpm_match +06a2 680140c1 fetch 2 ,mem_rx_window_sniff +06a3 6001044d store 2 ,mem_le_receive_window +06a4 6800c6c5 fetch 1 ,mem_le_connect_status_flag +06a5 2fe00603 compare 3 ,pdata ,3 +06a6 2420abde nbranch lpm_mult_short ,true +06a7 202057fb branch le_lpm_set_mult_attempt + 3 p_le_mouse_bb_event_connect_complete: -0681 7011c542 jam zcode_42 ,mem_zcode_temp_param0 -0682 2020079d branch p_zcode_entrance +06a8 7011c542 jam zcode_42 ,mem_zcode_temp_param0 +06a9 202007c4 branch p_zcode_entrance p_twspi_reset: -0683 68108077 hfetch 1 ,core_gpio_out3 -0684 1fe17efd and_into 0xfd ,pdata -0685 60108077 hstore 1 ,core_gpio_out3 -0686 68188073 hfetcht 1 ,core_gpio_oe3 -0687 18418402 or_into 0x2 ,temp -0688 60188073 hstoret 1 ,core_gpio_oe3 -0689 204063ee call twspi_disable -068a 184104fd and_into 0xfd ,temp -068b 2000000d nop 13 -068c 20400690 call p_twspi_enable -068d 60188073 hstoret 1 ,core_gpio_oe3 -068e 20600000 rtn +06aa 68108077 hfetch 1 ,core_gpio_out3 +06ab 1fe17efd and_into 0xfd ,pdata +06ac 60108077 hstore 1 ,core_gpio_out3 +06ad 68188073 hfetcht 1 ,core_gpio_oe3 +06ae 18418402 or_into 0x2 ,temp +06af 60188073 hstoret 1 ,core_gpio_oe3 +06b0 204063ee call twspi_disable +06b1 184104fd and_into 0xfd ,temp +06b2 2000000d nop 13 +06b3 204006b7 call p_twspi_enable +06b4 60188073 hstoret 1 ,core_gpio_oe3 +06b5 20600000 rtn p_spid_init: -068f 204064dd call spid_init_common +06b6 204064dd call spid_init_common p_twspi_enable: -0690 68108081 hfetch 1 ,core_gpio_sel1 -0691 79207e00 set1 0 ,pdata -0692 793ffe01 set0 1 ,pdata -0693 793ffe03 set0 3 ,pdata -0694 60108081 hstore 1 ,core_gpio_sel1 -0695 20600000 rtn +06b7 68108081 hfetch 1 ,core_gpio_sel1 +06b8 79207e00 set1 0 ,pdata +06b9 793ffe01 set0 1 ,pdata +06ba 793ffe03 set0 3 ,pdata +06bb 60108081 hstore 1 ,core_gpio_sel1 +06bc 20600000 rtn p_quit_connection_cont: -0696 204033af call app_disconn_reason_collect_bt -0697 204026e9 call sniff_exit -0698 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp -0699 20407d86 call ui_ipc_send_event -069a 20405cf7 call init_lmp_work -069b 20404d6b call l2cap_init_work -069c 2020246e branch quit_connection_cont + 8 +06bd 204033af call app_disconn_reason_collect_bt +06be 204026e9 call sniff_exit +06bf 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp +06c0 20407d86 call ui_ipc_send_event +06c1 20405cf7 call init_lmp_work +06c2 20404d6b call l2cap_init_work +06c3 2020246e branch quit_connection_cont + 8 p_prepare_tx: -069d 68008030 fetch 1 ,mem_state -069e 2feffe00 isolate1 state_inconn ,pdata -069f 204086a1 call p_bt_power_ctrl ,true -06a0 2020248a branch prepare_tx + 1 +06c4 68008030 fetch 1 ,mem_state +06c5 2feffe00 isolate1 state_inconn ,pdata +06c6 204086c8 call p_bt_power_ctrl ,true +06c7 2020248a branch prepare_tx + 1 p_bt_power_ctrl: -06a1 68008047 fetch 1 ,mem_arq -06a2 2feffe03 isolate1 wack ,pdata -06a3 204085fd call power_ctrl_pac_succ_decrs ,true -06a4 2440874e ncall power_ctrl_pac_succ_incrs ,true +06c8 68008047 fetch 1 ,mem_arq +06c9 2feffe03 isolate1 wack ,pdata +06ca 20408624 call power_ctrl_pac_succ_decrs ,true +06cb 24408775 ncall power_ctrl_pac_succ_incrs ,true power_ctrl_start: -06a5 68014682 fetch 2 ,mem_ui_state_map -06a6 c3858000 rtnbit1 ui_state_ble_adv -06a7 c3838000 rtnbit1 ui_state_bt_reconnect -06a8 c3830000 rtnbit1 ui_state_bt_discovery -06a9 da204d03 arg mem_rssi_signal_buf ,rega -06aa 20400250 call p_rssi_average -06ab 6008cd7b storet 1 ,mem_rssi_avg_received -06ac 58000082 setarg rssi_dis_max_24g -06ad c51306af bmark1 mark_24g ,power_ctrl_start_next -06ae 58000080 setarg rssi_dis_max_ble +06cc 68014682 fetch 2 ,mem_ui_state_map +06cd c3858000 rtnbit1 ui_state_ble_adv +06ce c3838000 rtnbit1 ui_state_bt_reconnect +06cf c3830000 rtnbit1 ui_state_bt_discovery +06d0 da204d05 arg mem_rssi_signal_buf ,rega +06d1 20400256 call p_rssi_average +06d2 6008cd7d storet 1 ,mem_rssi_avg_received +06d3 58000082 setarg rssi_dis_max_24g +06d4 c51306d6 bmark1 mark_24g ,power_ctrl_start_next +06d5 58000080 setarg rssi_dis_max_ble power_ctrl_start_next: -06af 98467c00 isub temp ,null -06b0 24210764 nbranch power_ctrl_txpower_incrs_force ,positive -06b1 6800cd7a fetch 1 ,mem_power_ctrl_pac_succ_cnt -06b2 1fe67c02 sub pdata ,2 ,null -06b3 24210754 nbranch power_ctrl_txpower_decrs_check ,positive -06b4 6800cd7a fetch 1 ,mem_power_ctrl_pac_succ_cnt -06b5 c0000765 beq 0 ,power_ctrl_txpower_incrs -06b6 20600000 rtn +06d6 98467c00 isub temp ,null +06d7 2421078b nbranch power_ctrl_txpower_incrs_force ,positive +06d8 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +06d9 1fe67c02 sub pdata ,2 ,null +06da 2421077b nbranch power_ctrl_txpower_decrs_check ,positive +06db 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +06dc c000078c beq 0 ,power_ctrl_txpower_incrs +06dd 20600000 rtn p_slave_conn_recv_packet: -06b7 204024f0 call slave_receive_master_slot -06b8 242c28f9 nbranch shutdown_radio ,sync -06b9 204029bb call save_rssi -06ba 2040020e call p_rssi_signal -06bb 20202518 branch slave_conn_recv_packet + 4 +06de 204024f0 call slave_receive_master_slot +06df 242c28f9 nbranch shutdown_radio ,sync +06e0 204029bb call save_rssi +06e1 20400214 call p_rssi_signal +06e2 20202518 branch slave_conn_recv_packet + 4 p_lpm_dispatch: -06bc c6130000 rtnmark1 mark_24g -06bd 20402afa call lpo_calibration -06be 6801c16f fetch 3 ,mem_clks_per_lpo -06bf 207a0000 rtn blank -06c0 6800c091 fetch 1 ,mem_lpm_mode -06c1 207a0000 rtn blank -06c2 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -06c3 247a0000 nrtn blank -06c4 6800c65a fetch 1 ,mem_ssp_enable -06c5 203a06c8 branch p_lpm_dispatch_next ,blank -06c6 6800c5b1 fetch 1 ,mem_sp_local_key_invalid -06c7 207a0000 rtn blank +06e3 c6130000 rtnmark1 mark_24g +06e4 20402afa call lpo_calibration +06e5 6801c16f fetch 3 ,mem_clks_per_lpo +06e6 207a0000 rtn blank +06e7 6800c091 fetch 1 ,mem_lpm_mode +06e8 207a0000 rtn blank +06e9 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +06ea 247a0000 nrtn blank +06eb 6800c65a fetch 1 ,mem_ssp_enable +06ec 203a06ef branch p_lpm_dispatch_next ,blank +06ed 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +06ee 207a0000 rtn blank p_lpm_dispatch_next: -06c8 6800c4c0 fetch 1 ,mem_le_sc_calc -06c9 247a0000 nrtn blank -06ca 20402c3a call lpm_check_wake_lock -06cb 247a0000 nrtn blank -06cc 6800c040 fetch 1 ,mem_context -06cd 2fe00e03 compare 3 ,pdata ,0x7 -06ce 2420ab9d nbranch lpm_dispatch_unconn ,true -06cf 68014042 fetch 2 ,mem_context + coffset_tsniff -06d0 d840ffff arg 0xffff ,temp -06d1 98467c00 isub temp ,null -06d2 20628000 rtn zero -06d3 20202b7d branch lpm_dispatch_next + 9 +06ef 6800c4c0 fetch 1 ,mem_le_sc_calc +06f0 247a0000 nrtn blank +06f1 20402c3a call lpm_check_wake_lock +06f2 247a0000 nrtn blank +06f3 6800c040 fetch 1 ,mem_context +06f4 2fe00e03 compare 3 ,pdata ,0x7 +06f5 2420ab9d nbranch lpm_dispatch_unconn ,true +06f6 68014042 fetch 2 ,mem_context + coffset_tsniff +06f7 d840ffff arg 0xffff ,temp +06f8 98467c00 isub temp ,null +06f9 20628000 rtn zero +06fa 20202b7d branch lpm_dispatch_next + 9 p_lpm_set_mult: -06d4 7855fc00 disable wake -06d5 68008030 fetch 1 ,mem_state -06d6 c4008000 rtnbit0 state_insniff -06d7 2436abd0 nbranch lpm_not_match ,match -06d8 20402bcb call lpm_match -06d9 680140c1 fetch 2 ,mem_rx_window_sniff -06da 6001003e store 2 ,mem_rx_window -06db 68008047 fetch 1 ,mem_arq -06dc c281abde bbit1 wack ,lpm_mult_short -06dd c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short -06de 20405274 call l2cap_malloc_is_fifo_empty -06df 243a2bde nbranch lpm_mult_short ,blank -06e0 205a06e2 call p_lpm_set_attemp_timeout ,blank -06e1 20202bbe branch lpm_set_mult + 13 +06fb 7855fc00 disable wake +06fc 68008030 fetch 1 ,mem_state +06fd c4008000 rtnbit0 state_insniff +06fe 2436abd0 nbranch lpm_not_match ,match +06ff 20402bcb call lpm_match +0700 680140c1 fetch 2 ,mem_rx_window_sniff +0701 6001003e store 2 ,mem_rx_window +0702 68008047 fetch 1 ,mem_arq +0703 c281abde bbit1 wack ,lpm_mult_short +0704 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +0705 20405274 call l2cap_malloc_is_fifo_empty +0706 243a2bde nbranch lpm_mult_short ,blank +0707 205a0709 call p_lpm_set_attemp_timeout ,blank +0708 20202bbe branch lpm_set_mult + 13 p_lpm_set_attemp_timeout: -06e2 70008a01 jam 1 ,mem_current_sniff_attempt -06e3 70008b00 jam 0 ,mem_current_sniff_timeout -06e4 20600000 rtn +0709 70008a01 jam 1 ,mem_current_sniff_attempt +070a 70008b00 jam 0 ,mem_current_sniff_timeout +070b 20600000 rtn p_mouse_bb_disconnected: -06e5 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -06e6 247a0000 nrtn blank -06e7 7011c510 jam zcode_10 ,mem_zcode_temp_param0 -06e8 2020079d branch p_zcode_entrance +070c 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +070d 247a0000 nrtn blank +070e 7011c510 jam zcode_10 ,mem_zcode_temp_param0 +070f 202007c4 branch p_zcode_entrance p_check_51cmd_once_continue: -06e9 204062bc call lmo_fifo_check -06ea 243a7ddb nbranch check_51cmd_restore ,blank -06eb 68008a99 fetch 1 ,mem_fifo_temp -06ec c584fdd6 bmark0 mark_context ,check_51cmd_check_idle -06ed c00f86f4 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info -06ee c01006f7 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info -06ef c00906f1 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param -06f0 20207dca branch check_51cmd_once_continue + 2 +0710 204062bc call lmo_fifo_check +0711 243a7ddb nbranch check_51cmd_restore ,blank +0712 68008a99 fetch 1 ,mem_fifo_temp +0713 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle +0714 c00f871b beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +0715 c010071e beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +0716 c0090718 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +0717 20207dca branch check_51cmd_once_continue + 2 p_check_51cmd_ble_update_connect_param: -06f1 20405890 call le_fifo_check_full -06f2 247a0000 nrtn blank -06f3 20205abf branch le_l2cap_tx_update_req +0718 20405890 call le_fifo_check_full +0719 247a0000 nrtn blank +071a 20205abf branch le_l2cap_tx_update_req p_flash_store_le_reconn_info: -06f4 70018534 jam rec_4_mode ,mem_record_bt_mode -06f5 6803044f fetch 6 ,mem_le_plap -06f6 202006f9 branch p_flash_store_reconn_info +071b 70018534 jam rec_4_mode ,mem_record_bt_mode +071c 6803044f fetch 6 ,mem_le_plap +071d 20200720 branch p_flash_store_reconn_info p_flash_store_bd_reconn_info: -06f7 70018533 jam rec_3_mode ,mem_record_bt_mode -06f8 68030040 fetch 6 ,mem_plap +071e 70018533 jam rec_3_mode ,mem_record_bt_mode +071f 68030040 fetch 6 ,mem_plap p_flash_store_reconn_info: -06f9 60030186 store 6 ,mem_temp_lap +0720 60030186 store 6 ,mem_temp_lap p_mouse_store_remote_bdaddr: -06fa 680246d3 fetch mouse_flag_len ,mem_mouse_flag -06fb c4038000 rtnbit0 mouse_store_eeprom_flag -06fc d8e00007 arg mouse_store_eeprom_flag ,queue -06fd 204043d2 call mouse_disable_function_flag -06fe 204042e8 call mouse_check_device_addr +0721 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0722 c4038000 rtnbit0 mouse_store_eeprom_flag +0723 d8e00007 arg mouse_store_eeprom_flag ,queue +0724 204043d2 call mouse_disable_function_flag +0725 204042e8 call mouse_check_device_addr p_mouse_unplug_clean_bdaddr: -06ff 204042fb call mouse_before_store_reconn_info -0700 20200311 branch p_mouse_store_flash_device_info +0726 204042fb call mouse_before_store_reconn_info +0727 20200319 branch p_mouse_store_flash_device_info p_mouse_multi_led_blink_timer: -0701 6800cb27 fetch 1 ,mem_mouse_multi_led_blink_enable -0702 207a0000 rtn blank -0703 6800cb2a fetch 1 ,mem_mouse_multi_led_type -0704 c0000707 beq multi_led_on ,p_mouse_multi_led_type_on -0705 c0008711 beq multi_led_blink ,p_mouse_multi_led_type_blink -0706 20600000 rtn +0728 6800cb27 fetch 1 ,mem_mouse_multi_led_blink_enable +0729 207a0000 rtn blank +072a 6800cb2a fetch 1 ,mem_mouse_multi_led_type +072b c000072e beq multi_led_on ,p_mouse_multi_led_type_on +072c c0008738 beq multi_led_blink ,p_mouse_multi_led_type_blink +072d 20600000 rtn p_mouse_multi_led_type_on: -0707 20400721 call p_mouse_multi_led_on -0708 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -0709 1fe0fe01 increase 1 ,pdata -070a 6000cb2f store 1 ,mem_mouse_multi_led_on_timer -070b 6808cb2b fetcht 1 ,mem_mouse_multi_led_on_timer_init -070c 98467c00 isub temp ,null -070d 2042870f call p_mouse_multi_led_off_poweron2s ,zero -070e 20600000 rtn +072e 20400748 call p_mouse_multi_led_on +072f 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0730 1fe0fe01 increase 1 ,pdata +0731 6000cb2f store 1 ,mem_mouse_multi_led_on_timer +0732 6808cb2b fetcht 1 ,mem_mouse_multi_led_on_timer_init +0733 98467c00 isub temp ,null +0734 20428736 call p_mouse_multi_led_off_poweron2s ,zero +0735 20600000 rtn p_mouse_multi_led_off_poweron2s: -070f 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0710 2020072f branch p_mouse_multi_led_off +0736 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0737 20200756 branch p_mouse_multi_led_off p_mouse_multi_led_type_blink: -0711 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_timer -0712 1fe0ffff increase -1 ,pdata -0713 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer -0714 247a0000 nrtn blank -0715 6800cb2c fetch 1 ,mem_mouse_multi_led_blink_timer_init -0716 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer -0717 6800cb30 fetch 1 ,mem_mouse_multi_led_blink_count_limited -0718 203a071d branch p_mouse_multi_led_blink_count_no_limited ,blank -0719 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -071a 203a072d branch p_mouse_multi_led_blink_off ,blank -071b 1fe0ffff increase -1 ,pdata -071c 6000cb2e store 1 ,mem_mouse_multi_led_blink_count +0738 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_timer +0739 1fe0ffff increase -1 ,pdata +073a 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer +073b 247a0000 nrtn blank +073c 6800cb2c fetch 1 ,mem_mouse_multi_led_blink_timer_init +073d 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer +073e 6800cb30 fetch 1 ,mem_mouse_multi_led_blink_count_limited +073f 203a0744 branch p_mouse_multi_led_blink_count_no_limited ,blank +0740 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0741 203a0754 branch p_mouse_multi_led_blink_off ,blank +0742 1fe0ffff increase -1 ,pdata +0743 6000cb2e store 1 ,mem_mouse_multi_led_blink_count p_mouse_multi_led_blink_count_no_limited: -071d 6800cb29 fetch 1 ,mem_mouse_multi_led_state -071e c000872f beq on ,p_mouse_multi_led_off -071f c0000721 beq off ,p_mouse_multi_led_on -0720 20600000 rtn +0744 6800cb29 fetch 1 ,mem_mouse_multi_led_state +0745 c0008756 beq on ,p_mouse_multi_led_off +0746 c0000748 beq off ,p_mouse_multi_led_on +0747 20600000 rtn p_mouse_multi_led_on: -0721 704b2901 jam on ,mem_mouse_multi_led_state -0722 6800c720 fetch 1 ,mem_device_flag -0723 c0008727 beq 1 ,p_mouse_multi_24g_led_on -0724 c0010726 beq 2 ,p_mouse_multi_bt_led_on -0725 20200728 branch p_mouse_multi_ble_led_on +0748 704b2901 jam on ,mem_mouse_multi_led_state +0749 6800c720 fetch 1 ,mem_device_flag +074a c000874e beq 1 ,p_mouse_multi_24g_led_on +074b c001074d beq 2 ,p_mouse_multi_bt_led_on +074c 2020074f branch p_mouse_multi_ble_led_on p_mouse_multi_bt_led_on: -0726 2020448c branch mouse_device2_led_on +074d 2020448c branch mouse_device2_led_on p_mouse_multi_24g_led_on: -0727 20204489 branch mouse_device1_led_on +074e 20204489 branch mouse_device1_led_on p_mouse_multi_ble_led_on: -0728 2020448f branch mouse_device3_led_on +074f 2020448f branch mouse_device3_led_on p_mouse_discovey_led_blink_off: -0729 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -072a 247a0000 nrtn blank -072b 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -072c 247a0000 nrtn blank +0750 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0751 247a0000 nrtn blank +0752 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0753 247a0000 nrtn blank p_mouse_multi_led_blink_off: -072d 58000000 setarg 0 -072e 6001cb2d store 3 ,mem_mouse_multi_led_blink_timer +0754 58000000 setarg 0 +0755 6001cb2d store 3 ,mem_mouse_multi_led_blink_timer p_mouse_multi_led_off: -072f 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0730 243a0733 nbranch p_mouse_multi_led_off_wait_blink_over ,blank -0731 704b2700 jam 0 ,mem_mouse_multi_led_blink_enable -0732 704b2a00 jam 0 ,mem_mouse_multi_led_type +0756 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0757 243a075a nbranch p_mouse_multi_led_off_wait_blink_over ,blank +0758 704b2700 jam 0 ,mem_mouse_multi_led_blink_enable +0759 704b2a00 jam 0 ,mem_mouse_multi_led_type p_mouse_multi_led_off_wait_blink_over: -0733 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer -0734 704b2900 jam off ,mem_mouse_multi_led_state -0735 20404483 call mouse_devce_led_off + 1 -0736 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0737 247a0000 nrtn blank -0738 6800cbb9 fetch 1 ,mem_mouse_connected_state -0739 243a340a nbranch app_enter_hibernate ,blank -073a 20600000 rtn +075a 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer +075b 704b2900 jam off ,mem_mouse_multi_led_state +075c 20404483 call mouse_devce_led_off + 1 +075d 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +075e 247a0000 nrtn blank +075f 6800cbb9 fetch 1 ,mem_mouse_connected_state +0760 243a340a nbranch app_enter_hibernate ,blank +0761 20600000 rtn p_mouse_dpi_multi_led_blink: -073b 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init -073c 704b3001 jam 1 ,mem_mouse_multi_led_blink_count_limited -073d 20200747 branch p_mouse_multi_led_blink_enable +0762 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init +0763 704b3001 jam 1 ,mem_mouse_multi_led_blink_count_limited +0764 2020076e branch p_mouse_multi_led_blink_enable p_mouse_mode_bt_device_multi_led_on: p_mouse_mode_24g_device_multi_led_on: -073e 704b3101 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag -073f 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0740 704b2a00 jam multi_led_on ,mem_mouse_multi_led_type -0741 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer -0742 20600000 rtn +0765 704b3101 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +0766 704b2701 jam on ,mem_mouse_multi_led_blink_enable +0767 704b2a00 jam multi_led_on ,mem_mouse_multi_led_type +0768 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer +0769 20600000 rtn p_mouse_discovery_multi_led_blink: -0743 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0744 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init -0745 704b3000 jam 0 ,mem_mouse_multi_led_blink_count_limited -0746 704b2e01 jam 1 ,mem_mouse_multi_led_blink_count +076a 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +076b 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init +076c 704b3000 jam 0 ,mem_mouse_multi_led_blink_count_limited +076d 704b2e01 jam 1 ,mem_mouse_multi_led_blink_count p_mouse_multi_led_blink_enable: -0747 704b2d05 jam 5 ,mem_mouse_multi_led_blink_timer -0748 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0749 704b2a01 jam multi_led_blink ,mem_mouse_multi_led_type -074a 20600000 rtn +076e 704b2d05 jam 5 ,mem_mouse_multi_led_blink_timer +076f 704b2701 jam on ,mem_mouse_multi_led_blink_enable +0770 704b2a01 jam multi_led_blink ,mem_mouse_multi_led_type +0771 20600000 rtn power_ctrl_pac_succ_cnt_init: -074b 704d7d01 jam 1 ,mem_power_ctrl_level -074c 704d7a00 jam 0 ,mem_power_ctrl_pac_succ_cnt -074d 20600000 rtn +0772 704d7f01 jam 1 ,mem_power_ctrl_level +0773 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +0774 20600000 rtn power_ctrl_pac_succ_incrs: -074e 6800cd7a fetch 1 ,mem_power_ctrl_pac_succ_cnt -074f 1fe0fe01 increase 1 ,pdata -0750 6000cd7a store 1 ,mem_power_ctrl_pac_succ_cnt -0751 20600000 rtn +0775 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +0776 1fe0fe01 increase 1 ,pdata +0777 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt +0778 20600000 rtn power_ctrl_pac_succ_cnt_reinit: -0752 704d7a03 jam 3 ,mem_power_ctrl_pac_succ_cnt -0753 20600000 rtn +0779 704d7c03 jam 3 ,mem_power_ctrl_pac_succ_cnt +077a 20600000 rtn power_ctrl_txpower_decrs_check: -0754 6800cd7a fetch 1 ,mem_power_ctrl_pac_succ_cnt -0755 c1900000 rtnne 32 -0756 704d7a00 jam 0 ,mem_power_ctrl_pac_succ_cnt +077b 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +077c c1900000 rtnne 32 +077d 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_decrs: -0757 6808cd7b fetcht 1 ,mem_rssi_avg_received -0758 58000077 setarg rssi_dis_min_24g -0759 c513075b bmark1 mark_24g ,power_ctrl_txpower_decrs_next -075a 58000075 setarg rssi_dis_min_ble +077e 6808cd7d fetcht 1 ,mem_rssi_avg_received +077f 58000077 setarg rssi_dis_min_24g +0780 c5130782 bmark1 mark_24g ,power_ctrl_txpower_decrs_next +0781 58000075 setarg rssi_dis_min_ble power_ctrl_txpower_decrs_next: -075b 98467c00 isub temp ,null -075c 24610000 nrtn positive -075d 6800cd7d fetch 1 ,mem_power_ctrl_level -075e c000076c beq 0 ,power_ctrl_decrs_level0 -075f 1fe0ffff increase -1 ,pdata -0760 6000cd7d store 1 ,mem_power_ctrl_level -0761 c000076c beq 0 ,power_ctrl_decrs_level0 +0782 98467c00 isub temp ,null +0783 24610000 nrtn positive +0784 6800cd7f fetch 1 ,mem_power_ctrl_level +0785 c0000793 beq 0 ,power_ctrl_decrs_level0 +0786 1fe0ffff increase -1 ,pdata +0787 6000cd7f store 1 ,mem_power_ctrl_level +0788 c0000793 beq 0 ,power_ctrl_decrs_level0 power_ctrl_decrs_level1: power_ctrl_incrs_level1: -0762 7041de00 jam tx_power_0db ,mem_tx_power -0763 20600000 rtn +0789 7041de00 jam tx_power_0db ,mem_tx_power +078a 20600000 rtn power_ctrl_txpower_incrs_force: -0764 704d7a00 jam 0 ,mem_power_ctrl_pac_succ_cnt +078b 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_incrs: -0765 6800cd7d fetch 1 ,mem_power_ctrl_level -0766 c001076a beq 2 ,power_ctrl_incrs_level2 -0767 1fe0fe01 increase 1 ,pdata -0768 6000cd7d store 1 ,mem_power_ctrl_level -0769 c0008762 beq 1 ,power_ctrl_incrs_level1 +078c 6800cd7f fetch 1 ,mem_power_ctrl_level +078d c0010791 beq 2 ,power_ctrl_incrs_level2 +078e 1fe0fe01 increase 1 ,pdata +078f 6000cd7f store 1 ,mem_power_ctrl_level +0790 c0008789 beq 1 ,power_ctrl_incrs_level1 power_ctrl_incrs_level2: -076a 7041de02 jam tx_power_5db ,mem_tx_power -076b 20600000 rtn +0791 7041de02 jam tx_power_5db ,mem_tx_power +0792 20600000 rtn power_ctrl_decrs_level0: -076c 7041de04 jam tx_power_f5db ,mem_tx_power -076d 20600000 rtn +0793 7041de04 jam tx_power_f5db ,mem_tx_power +0794 20600000 rtn p_set_freq_tx: -076e 60088017 storet 1 ,mem_last_freq -076f 1840a200 add temp ,0 ,rega -0770 20402981 call rf_write_freq -0771 58000500 setarg param_pll_setup -0772 20402a8f call sleep +0795 60088017 storet 1 ,mem_last_freq +0796 1840a200 add temp ,0 ,rega +0797 20402981 call rf_write_freq +0798 58000500 setarg param_pll_setup +0799 20402a8f call sleep p_rf_tx_enable: -0773 70890601 jam 0x1 ,rfen_adc -0774 7089003c jam 0x3c ,rfen_rx -0775 708901e0 jam 0xe0 ,rfen_tx -0776 2000000a nop 10 -0777 70890201 jam 0x01 ,rfen_mdm -0778 7089023d jam 0x3d ,rfen_mdm -0779 2000000a nop 10 -077a 708903b7 jam 0xb7 ,rfen_sn -077b 2000000a nop 10 -077c 7089027d jam 0x7d ,rfen_mdm -077d 6800c1de fetch 1 ,mem_tx_power -077e c0010786 beq tx_power_5db ,p_set_tx_power_5db -077f c002078e beq tx_power_f5db ,p_set_tx_power_f5db -0780 c0100798 beq tx_power_pair ,p_set_tx_power_pair +079a 70890601 jam 0x1 ,rfen_adc +079b 7089003c jam 0x3c ,rfen_rx +079c 708901e0 jam 0xe0 ,rfen_tx +079d 2000000a nop 10 +079e 70890201 jam 0x01 ,rfen_mdm +079f 7089023d jam 0x3d ,rfen_mdm +07a0 2000000a nop 10 +07a1 708903b7 jam 0xb7 ,rfen_sn +07a2 2000000a nop 10 +07a3 7089027d jam 0x7d ,rfen_mdm +07a4 6800c1de fetch 1 ,mem_tx_power +07a5 c00107ad beq tx_power_5db ,p_set_tx_power_5db +07a6 c00207b5 beq tx_power_f5db ,p_set_tx_power_f5db +07a7 c01007bf beq tx_power_pair ,p_set_tx_power_pair p_set_tx_power_0db: -0781 20400793 call p_rx_low_sens -0782 708955d0 jam 0xd0 ,0x8955 -0783 708956e0 jam 0xe0 ,0x8956 -0784 7089586c jam 0x6c ,0x8958 -0785 2020294b branch set_tx_power_0db +07a8 204007ba call p_rx_low_sens +07a9 708955d0 jam 0xd0 ,0x8955 +07aa 708956e0 jam 0xe0 ,0x8956 +07ab 7089586c jam 0x6c ,0x8958 +07ac 2020294b branch set_tx_power_0db p_set_tx_power_5db: -0786 70894cfb jam 0xfb ,0x894c -0787 70894def jam 0xef ,0x894d -0788 70894eec jam 0xec ,0x894e -0789 70894f5e jam 0x5e ,0x894f -078a 708955d0 jam 0xd0 ,0x8955 -078b 708956e0 jam 0xe0 ,0x8956 -078c 7089583c jam 0x3c ,0x8958 -078d 20202953 branch set_tx_power_5db +07ad 70894cfb jam 0xfb ,0x894c +07ae 70894def jam 0xef ,0x894d +07af 70894eec jam 0xec ,0x894e +07b0 70894f5e jam 0x5e ,0x894f +07b1 708955d0 jam 0xd0 ,0x8955 +07b2 708956e0 jam 0xe0 ,0x8956 +07b3 7089583c jam 0x3c ,0x8958 +07b4 20202953 branch set_tx_power_5db p_set_tx_power_f5db: -078e 20400793 call p_rx_low_sens -078f 708955d0 jam 0xd0 ,0x8955 -0790 708956c0 jam 0xc0 ,0x8956 -0791 7089586c jam 0x6c ,0x8958 -0792 2020295b branch set_tx_power_f5db +07b5 204007ba call p_rx_low_sens +07b6 708955d0 jam 0xd0 ,0x8955 +07b7 708956c0 jam 0xc0 ,0x8956 +07b8 7089586c jam 0x6c ,0x8958 +07b9 2020295b branch set_tx_power_f5db p_rx_low_sens: -0793 70894c5b jam 0x5b ,0x894c -0794 70894d96 jam 0x96 ,0x894d -0795 70894e2c jam 0x2c ,0x894e -0796 70894f46 jam 0x46 ,0x894f -0797 20600000 rtn +07ba 70894c5b jam 0x5b ,0x894c +07bb 70894d96 jam 0x96 ,0x894d +07bc 70894e2c jam 0x2c ,0x894e +07bd 70894f46 jam 0x46 ,0x894f +07be 20600000 rtn p_set_tx_power_pair: -0798 708956c0 jam 0xc0 ,0x8956 -0799 708955d0 jam 0xd0 ,0x8955 -079a 20600000 rtn +07bf 708956c0 jam 0xc0 ,0x8956 +07c0 708955d0 jam 0xd0 ,0x8955 +07c1 20600000 rtn p_shutdown_radio: -079b 18002a08 force 8 ,radio_ctrl -079c 202028fa branch shutdown_radio + 1 +07c2 18002a08 force 8 ,radio_ctrl +07c3 202028fa branch shutdown_radio + 1 p_zcode_entrance: -079d 680891c5 fetcht 1 ,mem_zcode_temp_param0 -079e 18518400 rshift4 temp ,temp -079f 6800cb56 fetch 1 ,mem_zcode_current_number -07a0 98467c00 isub temp ,null -07a1 202287bc branch p_zcode_run ,zero -07a2 6008cb56 storet 1 ,mem_zcode_current_number -07a3 18408401 increase 1 ,temp -07a4 58000100 setarg zcode_buff_size -07a5 984f8400 imul32 temp ,temp -07a6 6801cb57 fetch 3 ,mem_xip_flash_offset -07a7 98467e00 isub temp ,pdata -07a8 6809cb5a fetcht 3 ,mem_flash_start_addr -07a9 9840fe00 iadd temp ,pdata -07aa 1fe0fffb increase -5 ,pdata -07ab 6001cb5d store 3 ,mem_flash_address -07ac 20400363 call p_flash_release_deep_power_down +07c4 680891c5 fetcht 1 ,mem_zcode_temp_param0 +07c5 18518400 rshift4 temp ,temp +07c6 6800cb56 fetch 1 ,mem_zcode_current_number +07c7 98467c00 isub temp ,null +07c8 202287e3 branch p_zcode_run ,zero +07c9 6008cb56 storet 1 ,mem_zcode_current_number +07ca 18408401 increase 1 ,temp +07cb 58000100 setarg zcode_buff_size +07cc 984f8400 imul32 temp ,temp +07cd 6801cb57 fetch 3 ,mem_xip_flash_offset +07ce 98467e00 isub temp ,pdata +07cf 6809cb5a fetcht 3 ,mem_flash_start_addr +07d0 9840fe00 iadd temp ,pdata +07d1 1fe0fffb increase -5 ,pdata +07d2 6001cb5d store 3 ,mem_flash_address +07d3 2040036b call p_flash_release_deep_power_down p_zcode_read_loop: -07ad 6801cb5d fetch 3 ,mem_flash_address -07ae d8400100 arg zcode_buff_size ,temp -07af da201f00 arg mem_zcode_buff ,rega -07b0 20406562 call spid_read_flash -07b1 68021f00 fetch 4 ,mem_zcode_buff -07b2 680a4b60 fetcht 4 ,mem_zcode_head -07b3 98467c00 isub temp ,null -07b4 242287ad nbranch p_zcode_read_loop ,zero -07b5 20400324 call p_mouse_spi_init -07b6 58001f00 setarg mem_zcode_buff -07b7 60014199 store 2 ,mem_patch_ptr -07b8 70419b40 jam zcode_code_size ,mem_patch_len -07b9 204064ca call load_ucode -07ba 58000000 setarg 0 -07bb 60024199 store 4 ,mem_patch_ptr +07d4 6801cb5d fetch 3 ,mem_flash_address +07d5 d8400100 arg zcode_buff_size ,temp +07d6 da201f00 arg mem_zcode_buff ,rega +07d7 20406562 call spid_read_flash +07d8 68021f00 fetch 4 ,mem_zcode_buff +07d9 680a4b60 fetcht 4 ,mem_zcode_head +07da 98467c00 isub temp ,null +07db 242287d4 nbranch p_zcode_read_loop ,zero +07dc 2040032c call p_mouse_spi_init +07dd 58001f00 setarg mem_zcode_buff +07de 60014199 store 2 ,mem_patch_ptr +07df 70419b40 jam zcode_code_size ,mem_patch_len +07e0 204064ca call load_ucode +07e1 58000000 setarg 0 +07e2 60024199 store 4 ,mem_patch_ptr p_zcode_run: -07bc 680091c5 fetch 1 ,mem_zcode_temp_param0 -07bd 20200001 branch p_zcode +07e3 680091c5 fetch 1 ,mem_zcode_temp_param0 +07e4 20200001 branch p_zcode org 0x2000 start: @@ -35377,7 +35428,7 @@ z_mouse4_0_event_bb_disconn: 2000e 204041c1 call mouse_le_clean_connect_flag 2000f 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason -20010 c28504e8 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +20010 c28504f2 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up 20011 202041f7 branch mouse4_0_event_bb_disconn + 2 z_mouse_event_light_state_pairing: @@ -35389,7 +35440,7 @@ 20015 68014682 fetch 2 ,mem_ui_state_map 20016 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 20017 204033a9 call app_disconn_reason_clear -20018 2040058d call p_mouse_check_key_gpio +20018 204005b4 call p_mouse_check_key_gpio 20019 20608000 rtn true 2001a 202033a7 branch app_bb_hibernate @@ -35415,7 +35466,7 @@ z_hid_rx_process_hid_control: 2002b 18427e00 copy temp ,pdata -2002c c002846e beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug +2002c c0028476 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug 2002d 20204d41 branch hid_rx_process_hid_control + 2 org 0x30001 @@ -35428,7 +35479,7 @@ z_mouse4_0_check_reconn_target: 30006 704b6c01 jam 1 ,mem_le_send_security_request_flag -30007 2040073e call p_mouse_mode_bt_device_multi_led_on +30007 20400765 call p_mouse_mode_bt_device_multi_led_on 30008 7047a101 jam 1 ,mem_mouse_le_reconnect_flag 30009 680146a8 fetch 2 ,mem_mouse_direct_timeout 3000a 6808cbb3 fetcht 1 ,mem_mouse_fast_conn_flag @@ -35439,11 +35490,11 @@ z_mouse4_0_check_reconn_target_next: 3000e 600146ae store 2 ,mem_mouse_direct_timer 3000f 20403418 call app_lpm_mult_disable -30010 204002cb call p_le_check_adv_flag +30010 204002d3 call p_le_check_adv_flag 30011 58000004 setarg adv_flag_bredr_not_supported 30012 e0c08000 istore 1 ,contr 30013 d8c04390 arg mem_le_scan_data ,contr -30014 204005be call p_le_adv_data_update +30014 204005e5 call p_le_adv_data_update 30015 20207df4 branch check_51cmd_adv z_send_lmp_escape: @@ -35474,7 +35525,7 @@ 30026 6800804b fetch 1 ,mem_op 30027 793ffe03 set0 op_disconn ,pdata 30028 6000804b store 1 ,mem_op -30029 2020048f branch p_mouse_sensor_powerdown +30029 20200499 branch p_mouse_sensor_powerdown z_send_lmp_accepted: 3002a 18007e02 force 2 ,pdata @@ -35635,23 +35686,23 @@ z_mouse_start_discovery: 60003 704b6c00 jam 0 ,mem_le_send_security_request_flag -60004 204002c3 call p_mouse_tx_power_init +60004 204002cb call p_mouse_tx_power_init 60005 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag 60006 68014682 fetch 2 ,mem_ui_state_map 60007 c2858010 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom -60008 20400365 call p_mouse_load_random_addr_increase_count +60008 2040036d call p_mouse_load_random_addr_increase_count 60009 680947c4 fetcht 2 ,mem_random_addr_increase_count 6000a 18408401 increase 1 ,temp 6000b 600947c4 storet 2 ,mem_random_addr_increase_count 6000c 600944a1 storet 2 ,mem_le_lap + 1 -6000d 2040031d call p_mouse_store_random_addr_increase_count +6000d 20400325 call p_mouse_store_random_addr_increase_count 6000e 180a7e00 random pdata 6000f 6000c4a0 store 1 ,mem_le_lap z_mouse_start_discovery_norandom: 60010 6801cbb0 fetch 3 ,mem_le_lap_high_3b 60011 6001c4a3 store 3 ,mem_le_lap + 3 -60012 204002d2 call p_mouse_le_fast_conn_disable +60012 204002da call p_mouse_le_fast_conn_disable 60013 20403418 call app_lpm_mult_disable 60014 68014687 fetch 2 ,mem_discovery_timeout 60015 600146ac store 2 ,mem_mouse_discovery_timer @@ -35670,15 +35721,15 @@ 60022 2040fddd call check_51cmd_start_discovery ,true 60023 704b5100 jam 0 ,mem_mouse_bt_reconnect_flag 60024 204042c4 call mouse_start_discovery_norandom + 13 -60025 20200743 branch p_mouse_discovery_multi_led_blink +60025 2020076a branch p_mouse_discovery_multi_led_blink z_check_51cmd_adv: 60026 7047a100 jam 0 ,mem_mouse_le_reconnect_flag -60027 204002cb call p_le_check_adv_flag +60027 204002d3 call p_le_check_adv_flag 60028 58000005 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable 60029 e0c08000 istore 1 ,contr 6002a d8c04b12 arg mem_le_adv_swift_pair ,contr -6002b 204005be call p_le_adv_data_update +6002b 204005e5 call p_le_adv_data_update 6002c 20207df4 branch check_51cmd_adv org 0x70001 @@ -35690,18 +35741,18 @@ z_g24_start_24g_mode: 70005 2040000e call z_g24_factory_check -70006 20340375 branch p_g24_auto_pair_start ,user +70006 2034037d branch p_g24_auto_pair_start ,user 70007 79200026 set1 mark_24g ,mark -70008 6800cd91 fetch 1 ,mem_24g_conn_sm +70008 6800cd93 fetch 1 ,mem_24g_conn_sm 70009 79207e02 set1 state_24g_reconn ,pdata -7000a 6000cd91 store 1 ,mem_24g_conn_sm -7000b 20400196 call p_g24_syncword_crc8 -7000c 2040012b call p_g24_ch +7000a 6000cd93 store 1 ,mem_24g_conn_sm +7000b 2040019c call p_g24_syncword_crc8 +7000c 20400131 call p_g24_ch 7000d 2020001b branch z_g24_auto_pair_timeout_init z_g24_factory_check: 7000e df200002 arg 2 ,loopcnt -7000f d8c04c69 arg mem_24g_addr ,contr +7000f d8c04c6b arg mem_24g_addr ,contr 70010 20407fe7 call enable_user 70011 5800ffff setarg 0xffff @@ -35714,14 +35765,14 @@ z_g24_auto_pair_start: 70017 79200026 set1 mark_24g ,mark -70018 6800cd91 fetch 1 ,mem_24g_conn_sm +70018 6800cd93 fetch 1 ,mem_24g_conn_sm 70019 79207e01 set1 state_24g_pair ,pdata -7001a 6000cd91 store 1 ,mem_24g_conn_sm +7001a 6000cd93 store 1 ,mem_24g_conn_sm z_g24_auto_pair_timeout_init: 7001b 5800003c setarg g24_first_disconn_nodata_timer -7001c 60014d8d store 2 ,mem_24g_stop_g24_mode_timeout -7001d 704d8c00 jam 0 ,mem_24g_stop_g24_mode +7001c 60014d8f store 2 ,mem_24g_stop_g24_mode_timeout +7001d 704d8e00 jam 0 ,mem_24g_stop_g24_mode 7001e 20600000 rtn z_mouse_24g_pairing_button: @@ -35735,9 +35786,9 @@ 70026 58000000 setarg 0 70027 600146ae store 2 ,mem_mouse_direct_timer 70028 6000c6b4 store 1 ,mem_mouse_send_blank_timer -70029 60014c6e store 2 ,mem_24g_check_dongle_times +70029 60014c70 store 2 ,mem_24g_check_dongle_times 7002a 204042ca call mouse_stop_discovery -7002b 20200375 branch p_g24_auto_pair_start +7002b 2020037d branch p_g24_auto_pair_start org 0x80001 z_entrance7: @@ -35746,32 +35797,32 @@ 80003 20600000 rtn z_g24_reconn_dispatch: -80004 6800cd8c fetch 1 ,mem_24g_stop_g24_mode +80004 6800cd8e fetch 1 ,mem_24g_stop_g24_mode 80005 c000add4 beq 1 ,g24_stop_24g_mode 80006 20400011 call z_g24_tx_attemp_data_prep -80007 20400162 call p_g24_transmit_receive_ack -80008 242c012b nbranch p_g24_ch ,sync -80009 2437812b nbranch p_g24_ch ,user3 -8000a 6800cd91 fetch 1 ,mem_24g_conn_sm +80007 20400168 call p_g24_transmit_receive_ack +80008 242c0131 nbranch p_g24_ch ,sync +80009 24378131 nbranch p_g24_ch ,user3 +8000a 6800cd93 fetch 1 ,mem_24g_conn_sm 8000b 793ffe02 set0 state_24g_reconn ,pdata -8000c 6000cd91 store 1 ,mem_24g_conn_sm +8000c 6000cd93 store 1 ,mem_24g_conn_sm z_g24_tx_attemp_dongle_succ: 8000d 704b6700 jam 0 ,mem_mouse_long_mult_flag 8000e 20402f20 call g24_app_tx_attempt_success -8000f 2040015f call p_g24_txbuf_clear -80010 20200382 branch p_g24_transmit_by_interrupt_enable +8000f 20400165 call p_g24_txbuf_clear +80010 2020038a branch p_g24_transmit_by_interrupt_enable z_g24_tx_attemp_data_prep: 80011 70119eff jam 0xff ,mem_24g_common_temp -80012 6800cc42 fetch 1 ,mem_24g_data_type +80012 6800cc44 fetch 1 ,mem_24g_data_type 80013 6000919f store 1 ,mem_24g_common_temp + 1 -80014 68024c78 fetch 4 ,mem_24g_device_addr +80014 68024c7a fetch 4 ,mem_24g_device_addr 80015 600211a0 store 4 ,mem_24g_common_temp + 2 80016 d8400006 arg 6 ,temp 80017 da20119e arg mem_24g_common_temp ,rega -80018 204001b0 call p_g24_put_data_in_buff -80019 202001c2 branch p_g24_transmit_prep +80018 204001b6 call p_g24_put_data_in_buff +80019 202001c8 branch p_g24_transmit_prep z_mouse_irtual_cable_unplug: 8001a 5fffffff setarg -1 @@ -35780,7 +35831,7 @@ 8001d 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag 8001e 204042fb call mouse_before_store_reconn_info 8001f 704721ff jam 0xff ,mem_device1_type -80020 20200311 branch p_mouse_store_flash_device_info +80020 20200319 branch p_mouse_store_flash_device_info org 0x90001 z_entrance8: @@ -35800,7 +35851,7 @@ z_mouse_setting_config: 9000a 680240a0 fetch 4 ,mem_lap -9000b 60024c78 store 4 ,mem_24g_device_addr +9000b 60024c7a store 4 ,mem_24g_device_addr 9000c 20403e6e call mouse_gpio_init 9000d 6808cb46 fetcht 1 ,mem_flash_ncs_gpio 9000e 2040680e call gpio_config_output @@ -35814,17 +35865,17 @@ 90016 20405839 call le_set_justwork 90017 2040582c call le_set_fixed_ltk 90018 20405818 call le_set_config_read_authentication -90019 204005ba call p_le_addr_random_config -9001a 20400306 call p_mouse_load_flash_info_check +90019 204005e1 call p_le_addr_random_config +9001a 2040030e call p_mouse_load_flash_info_check 9001b df200003 arg 3 ,loopcnt 9001c d8c0473f arg mem_device2_addr ,contr -9001d 20400378 call p_pdata_0xff_check -9001e 243402d2 nbranch p_mouse_le_fast_conn_disable ,user +9001d 20400380 call p_pdata_0xff_check +9001e 243402da nbranch p_mouse_le_fast_conn_disable ,user 9001f df200003 arg 3 ,loopcnt 90020 d8c0475c arg mem_device3_addr ,contr -90021 20400378 call p_pdata_0xff_check -90022 243402d2 nbranch p_mouse_le_fast_conn_disable ,user -90023 204002d4 call p_mouse_fast_conn_init +90021 20400380 call p_pdata_0xff_check +90022 243402da nbranch p_mouse_le_fast_conn_disable ,user +90023 204002dc call p_mouse_fast_conn_init 90024 20600000 rtn z_mouse_bt_sdp_update: @@ -35864,45 +35915,45 @@ a0004 20600000 rtn z_g24_pairing_sm: -a0005 6800cc46 fetch 1 ,mem_24g_ensure +a0005 6800cc48 fetch 1 ,mem_24g_ensure a0006 c000ffe7 beq ensure_on_24g ,enable_user -a0007 6800cc51 fetch 1 ,mem_24g_pairing_sm +a0007 6800cc53 fetch 1 ,mem_24g_pairing_sm a0008 c000800c beq state_24g_pairing_1 ,z_g24_pairing_sm_1 a0009 c001000f beq state_24g_pairing_2 ,z_g24_pairing_sm_2 a000a c0018012 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 a000b 20202a8c branch assert z_g24_pairing_sm_1: -a000c 704c5111 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm +a000c 704c5311 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm a000d 70119eaa jam 0xaa ,mem_24g_common_temp a000e 20200014 branch z_g24_pairing_sm_common z_g24_pairing_sm_2: -a000f 704c5112 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm +a000f 704c5312 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm a0010 70119e55 jam 0x55 ,mem_24g_common_temp a0011 20200014 branch z_g24_pairing_sm_common z_g24_pairing_sm_3: -a0012 704c5113 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm +a0012 704c5313 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm a0013 70119e22 jam 0x22 ,mem_24g_common_temp z_g24_pairing_sm_common: -a0014 6800cc42 fetch 1 ,mem_24g_data_type +a0014 6800cc44 fetch 1 ,mem_24g_data_type a0015 1fe17e07 and_into bits_data ,pdata a0016 6000919f store 1 ,mem_24g_common_temp + 1 -a0017 68024c78 fetch 4 ,mem_24g_device_addr +a0017 68024c7a fetch 4 ,mem_24g_device_addr a0018 600211a0 store 4 ,mem_24g_common_temp + 2 z_g24_put_pairing_data_in_buff: a0019 7011a400 jam 0 ,mem_24g_common_temp + 6 a001a da20119e arg mem_24g_common_temp ,rega a001b d8400007 arg 7 ,temp -a001c 204001b0 call p_g24_put_data_in_buff -a001d 20400140 call p_g24_txdata_enable_tx +a001c 204001b6 call p_g24_put_data_in_buff +a001d 20400146 call p_g24_txdata_enable_tx a001e 20207fe7 branch enable_user z_g24_paring_mode: -a001f 6800cc51 fetch 1 ,mem_24g_pairing_sm +a001f 6800cc53 fetch 1 ,mem_24g_pairing_sm a0020 c17f8000 rtneq state_24g_pairing_success a0021 c0088025 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack a0022 c0090027 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack @@ -35910,23 +35961,23 @@ a0024 20600000 rtn z_g24_pairing_sm_1_waiting_ack: -a0025 704c5102 jam state_24g_pairing_2 ,mem_24g_pairing_sm -a0026 20200104 branch p_g24_transmit_abandon +a0025 704c5302 jam state_24g_pairing_2 ,mem_24g_pairing_sm +a0026 2020010a branch p_g24_transmit_abandon z_g24_pairing_sm_2_waiting_ack: -a0027 704c5103 jam state_24g_pairing_3 ,mem_24g_pairing_sm -a0028 20200104 branch p_g24_transmit_abandon +a0027 704c5303 jam state_24g_pairing_3 ,mem_24g_pairing_sm +a0028 2020010a branch p_g24_transmit_abandon z_g24_pairing_sm_3_waiting_ack: -a0029 704c51ff jam state_24g_pairing_success ,mem_24g_pairing_sm +a0029 704c53ff jam state_24g_pairing_success ,mem_24g_pairing_sm a002a 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp a002b 20407d86 call ui_ipc_send_event -a002c 68024c21 fetch 4 ,mem_24g_rxpayload + 2 -a002d 20400195 call p_g24_update_addr_and_synccrc8 -a002e 20200104 branch p_g24_transmit_abandon +a002c 68024c23 fetch 4 ,mem_24g_rxpayload + 2 +a002d 2040019b call p_g24_update_addr_and_synccrc8 +a002e 2020010a branch p_g24_transmit_abandon z_mouse_24g_pairing_complete: -a002f 20400488 call p_mouse_24g_no_data_timer_init +a002f 20400492 call p_mouse_24g_no_data_timer_init a0030 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable a0031 d8e00003 arg mosue_24g_pairing_flag ,queue a0032 204043d2 call mouse_disable_function_flag @@ -35934,10 +35985,10 @@ a0034 60014707 store 2 ,mem_24g_pairing_timer_count a0035 7046a700 jam 0 ,mem_mouse_move_flag a0036 2040405d call mouse_read_sensor_common -a0037 204002c3 call p_mouse_tx_power_init -a0038 68024c69 fetch 4 ,mem_24g_addr +a0037 204002cb call p_mouse_tx_power_init +a0038 68024c6b fetch 4 ,mem_24g_addr a0039 6002477b store 4 ,mem_mouse_24g_addr -a003a 20200311 branch p_mouse_store_flash_device_info +a003a 20200319 branch p_mouse_store_flash_device_info org 0xb0001 z_entrancea: @@ -35949,13 +36000,13 @@ b0006 20600000 rtn z_mouse_24g_attempt_fail: -b0007 704d8100 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -b0008 204002c3 call p_mouse_tx_power_init -b0009 204001ab call p_g24_check_51cmd_stop_24g +b0007 704d8300 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +b0008 204002cb call p_mouse_tx_power_init +b0009 204001b1 call p_g24_check_51cmd_stop_24g b000a 7041bd00 jam 0 ,mem_link_key_exists b000b 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count b000c 247a0000 nrtn blank -b000d 20400272 call p_mouse_setgpio_hibernate +b000d 20400278 call p_mouse_setgpio_hibernate b000e 2020340a branch app_enter_hibernate z_mouse_le_conn_param_update_rsp_recieved: @@ -35968,7 +36019,7 @@ b0015 58000009 setarg le_interval_11_25ms b0016 60014496 store 2 ,mem_le_interval_min b0017 60014498 store 2 ,mem_le_interval_min + 2 -b0018 20400466 call p_app_updata_le_param +b0018 2040046e call p_app_updata_le_param b0019 7047c601 jam le_lpm_disable ,mem_mouse_le_conn_param_reject b001a 20600000 rtn @@ -35985,7 +36036,7 @@ z_mouse_le_bb_disconnected: b0022 6800cbba fetch 1 ,mem_select_device_button_statue_bt_discovery -b0023 205a0504 call p_mouse_le_bb_disconnected_led_blink_set ,blank +b0023 205a050e call p_mouse_le_bb_disconnected_led_blink_set ,blank b0024 704bba00 jam off ,mem_select_device_button_statue_bt_discovery b0025 704b6a00 jam 0 ,mem_mouse_le_bb_connected_flag b0026 58000007 setarg le_interval_8_75ms @@ -35993,9 +36044,9 @@ b0028 60014498 store 2 ,mem_le_interval_min + 2 b0029 7047c600 jam le_lpm_enable ,mem_mouse_le_conn_param_reject b002a 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag -b002b 204003af call p_mouse_data_init +b002b 204003b7 call p_mouse_data_init b002c 20405816 call le_clr_config_more_data -b002d 20400311 call p_mouse_store_flash_device_info +b002d 20400319 call p_mouse_store_flash_device_info b002e 202041d9 branch mouse_bb_disconnected z_mouse_before_hibernate: @@ -36004,15 +36055,15 @@ b0031 6012004c hstore 4 ,core_lpm_reg b0032 20402c21 call lpm_write_ctrl b0033 204074bd call disable_authrom -b0034 2040072d call p_mouse_multi_led_blink_off -b0035 20400311 call p_mouse_store_flash_device_info +b0034 20400754 call p_mouse_multi_led_blink_off +b0035 20400319 call p_mouse_store_flash_device_info b0036 20403e9f call mouse_before_hibernate_wheel_gpio_set -b0037 20400272 call p_mouse_setgpio_hibernate -b0038 2040035c call p_flash_deep_power_down +b0037 20400278 call p_mouse_setgpio_hibernate +b0038 20400364 call p_flash_deep_power_down b0039 68108081 hfetch 1 ,core_gpio_sel1 b003a 1fe17ef7 and pdata ,0xf7 ,pdata b003b 60108081 hstore 1 ,core_gpio_sel1 -b003c 2020028f branch p_mouse_t_wheel_clear_wake +b003c 20200294 branch p_mouse_t_wheel_clear_wake org 0xc0001 z_entranceb: @@ -36043,7 +36094,7 @@ c0013 20200016 branch z_mouse_le_ll_enable_start_enc_flag z_mouse_le_ll_reconn_start_encryt: -c0014 20400466 call p_app_updata_le_param +c0014 2040046e call p_app_updata_le_param c0015 7046c60a jam 10 ,mem_le_start_encrypt_timer z_mouse_le_ll_enable_start_enc_flag: @@ -36053,92 +36104,92 @@ z_mouse_bb_event_disconnected: c0018 704bb901 jam 1 ,mem_mouse_connected_state c0019 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -c001a 2040073b call p_mouse_dpi_multi_led_blink +c001a 20400762 call p_mouse_dpi_multi_led_blink c001b 704b0100 jam 0 ,mem_bt_rcvd_switch_req_accept c001c 704b0300 jam 0 ,mem_bt_send_lmp_setup_complete c001d 704b0c00 jam 0 ,mem_mouse_bt_send_first_package_flag -c001e 20400311 call p_mouse_store_flash_device_info +c001e 20400319 call p_mouse_store_flash_device_info c001f 202041d9 branch mouse_bb_disconnected org 0xd0001 z_entrancec: z_g24_pair_dispatch: -d0001 6800cd8c fetch 1 ,mem_24g_stop_g24_mode +d0001 6800cd8e fetch 1 ,mem_24g_stop_g24_mode d0002 c000add4 beq 1 ,g24_stop_24g_mode d0003 70119eff jam 0xff ,mem_24g_common_temp -d0004 6800cc42 fetch 1 ,mem_24g_data_type +d0004 6800cc44 fetch 1 ,mem_24g_data_type d0005 6000919f store 1 ,mem_24g_common_temp + 1 -d0006 68024c78 fetch 4 ,mem_24g_device_addr +d0006 68024c7a fetch 4 ,mem_24g_device_addr d0007 600211a0 store 4 ,mem_24g_common_temp + 2 d0008 d8400006 arg 6 ,temp d0009 da20119e arg mem_24g_common_temp ,rega -d000a 204001b0 call p_g24_put_data_in_buff -d000b 204001c2 call p_g24_transmit_prep -d000c 20400162 call p_g24_transmit_receive_ack +d000a 204001b6 call p_g24_put_data_in_buff +d000b 204001c8 call p_g24_transmit_prep +d000c 20400168 call p_g24_transmit_receive_ack d000d 242c0026 nbranch z_g24_pair_txdata_retry ,sync d000e 24378026 nbranch z_g24_pair_txdata_retry ,user3 -d000f 2040018a call p_g24_ackpayload_parse -d0010 68024c69 fetch 4 ,mem_24g_addr -d0011 680a4d86 fetcht 4 ,mem_24g_allpowerful_addr +d000f 20400190 call p_g24_ackpayload_parse +d0010 68024c6b fetch 4 ,mem_24g_addr +d0011 680a4d88 fetcht 4 ,mem_24g_allpowerful_addr d0012 98467c00 isub temp ,null d0013 20228016 branch z_g24_auto_pair_skip_rx_length ,zero -d0014 6800cc3f fetch 1 ,mem_24g_rxdata_length +d0014 6800cc41 fetch 1 ,mem_24g_rxdata_length d0015 c1840000 rtnne bind_ackpayload_length z_g24_auto_pair_skip_rx_length: -d0016 704d9100 jam 0 ,mem_24g_conn_sm -d0017 204002c3 call p_mouse_tx_power_init -d0018 68024c69 fetch 4 ,mem_24g_addr -d0019 680a4c4d fetcht 4 ,mem_24g_paring_addr +d0016 704d9300 jam 0 ,mem_24g_conn_sm +d0017 204002cb call p_mouse_tx_power_init +d0018 68024c6b fetch 4 ,mem_24g_addr +d0019 680a4c4f fetcht 4 ,mem_24g_paring_addr d001a 98467c00 isub temp ,null -d001b 202281a3 branch p_g24_start_pairing_sm1 ,zero -d001c 68024c69 fetch 4 ,mem_24g_addr -d001d 680a4c78 fetcht 4 ,mem_24g_device_addr +d001b 202281a9 branch p_g24_start_pairing_sm1 ,zero +d001c 68024c6b fetch 4 ,mem_24g_addr +d001d 680a4c7a fetcht 4 ,mem_24g_device_addr d001e 98467c00 isub temp ,null d001f 20428024 call z7_g24_store_dongle_addr ,zero d0020 704b6700 jam 0 ,mem_mouse_long_mult_flag d0021 20402f20 call g24_app_tx_attempt_success -d0022 2040015f call p_g24_txbuf_clear -d0023 20200382 branch p_g24_transmit_by_interrupt_enable +d0022 20400165 call p_g24_txbuf_clear +d0023 2020038a branch p_g24_transmit_by_interrupt_enable z7_g24_store_dongle_addr: -d0024 68024c21 fetch 4 ,mem_24g_rxpayload + 2 -d0025 20200195 branch p_g24_update_addr_and_synccrc8 +d0024 68024c23 fetch 4 ,mem_24g_rxpayload + 2 +d0025 2020019b branch p_g24_update_addr_and_synccrc8 z_g24_pair_txdata_retry: z_g24_pair_txdata_switch: -d0026 6800cd7f fetch 1 ,mem_24g_auto_paring_switch +d0026 6800cd81 fetch 1 ,mem_24g_auto_paring_switch d0027 1fe0fe01 increase 1 ,pdata d0028 1fe17e03 and_into 3 ,pdata -d0029 6000cd7f store 1 ,mem_24g_auto_paring_switch +d0029 6000cd81 store 1 ,mem_24g_auto_paring_switch d002a c000002d beq 0 ,z_g24_auto_pair_first_attemp d002b c0010037 beq 2 ,z_g24_auto_pair_all_powerful -d002c 20200191 branch p_g24_pair_init +d002c 20200197 branch p_g24_pair_init z_g24_auto_pair_first_attemp: -d002d 204002c3 call p_mouse_tx_power_init -d002e 68024c78 fetch 4 ,mem_24g_device_addr -d002f 60024c69 store 4 ,mem_24g_addr -d0030 6800cd8f fetch 1 ,mem_24g_pair_current_ch_num -d0031 6000cc4c store 1 ,mem_24g_current_ch_number +d002d 204002cb call p_mouse_tx_power_init +d002e 68024c7a fetch 4 ,mem_24g_device_addr +d002f 60024c6b store 4 ,mem_24g_addr +d0030 6800cd91 fetch 1 ,mem_24g_pair_current_ch_num +d0031 6000cc4e store 1 ,mem_24g_current_ch_number d0032 20400035 call z_g24_ch_syncword_crc8_init -d0033 6008cd8f storet 1 ,mem_24g_pair_current_ch_num +d0033 6008cd91 storet 1 ,mem_24g_pair_current_ch_num d0034 20600000 rtn z_g24_ch_syncword_crc8_init: -d0035 20400196 call p_g24_syncword_crc8 -d0036 2020012b branch p_g24_ch +d0035 2040019c call p_g24_syncword_crc8 +d0036 20200131 branch p_g24_ch z_g24_auto_pair_all_powerful: d0037 7041de20 jam tx_power_pair ,mem_tx_power -d0038 68024d86 fetch 4 ,mem_24g_allpowerful_addr -d0039 60024c69 store 4 ,mem_24g_addr -d003a 6800cd90 fetch 1 ,mem_24g_powerful_current_ch_num -d003b 6000cc4c store 1 ,mem_24g_current_ch_number +d0038 68024d88 fetch 4 ,mem_24g_allpowerful_addr +d0039 60024c6b store 4 ,mem_24g_addr +d003a 6800cd92 fetch 1 ,mem_24g_powerful_current_ch_num +d003b 6000cc4e store 1 ,mem_24g_current_ch_number d003c 20400035 call z_g24_ch_syncword_crc8_init -d003d 6008cd90 storet 1 ,mem_24g_powerful_current_ch_num +d003d 6008cd92 storet 1 ,mem_24g_powerful_current_ch_num d003e 20600000 rtn org 0xe0001 @@ -36148,7 +36199,7 @@ z_mouse_le_bb_event_connected: e0003 704bb900 jam 0 ,mem_mouse_connected_state -e0004 204002e3 call p_mouse_init_sensor_reset +e0004 204002eb call p_mouse_init_sensor_reset e0005 20403410 call app_ble_store_reconn_info e0006 704b6a01 jam 1 ,mem_mouse_le_bb_connected_flag e0007 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag @@ -36156,6 +36207,6 @@ e0009 704b6b14 jam 0x14 ,mem_mouse_send_secutiry_request_timer z_mouse_le_bb_event_connected_next: -e000a 204003af call p_mouse_data_init +e000a 204003b7 call p_mouse_data_init e000b 202041c3 branch mouse_le_bb_event_connected Index: output/ramcode.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/ramcode.rom (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/ramcode.rom (working copy) @@ -1,50 +1,50 @@ 20200040 -204003af +204003b7 6800c1de -6000ccf8 -2040074c +6000ccfa +20400772 6800c685 6000cb47 6800cb33 6000cb34 204043ca -20400324 +2040032c 20400010 20400023 20400063 7011c580 -2020079e -5800037f -60014d72 -58000399 +202007c4 +58000387 +60014d74 +580003a1 600141ef -58000682 +580006a8 600141f9 -580003ca +580003d2 600141f1 -5800025e +58000264 600141ed -58000450 +58000458 600141f5 -580003f1 +580003f9 600141f3 -5800048a -600141eb 58000493 +600141eb +5800049c 600141fd 20600000 58000019 -60014d84 +60014d86 2455802d -204002db -20400490 +204002e3 +20400499 6800c71f 6000c71e 6800c241 c3810000 -2020055c +20200562 58000177 -60014d84 +60014d86 20600000 20000001 20000001 @@ -64,55 +64,61 @@ 20000001 c2840055 c000806f -c0010079 -c042879c -c044876f -c02886b8 -c05386bd -c05686d5 +c001007f +c04287c2 +c0448795 +c02886de +c05386e3 +c05686fb c065b3e4 -c07486e6 -c0508082 -c0588087 -c0590091 -c06202a1 -c071855e -c07203f4 -c0730582 -c07505b8 -c07585bd -c07605c3 +c074870c +c0508088 +c058808d +c0590097 +c06202a9 +c0718564 +c07203fc +c073058a +c07505de +c07585e3 +c07605e9 20202a8e -c01c85c9 -c02185d1 -c02505d7 -c02b85da -c02c85dc -c03185de -c033060d -c0338624 -c035066e -c03b8678 -c0460684 -c0468690 -c07d06ea +c01c85ef +c02185f7 +c02505fd +c02b8600 +c02c8602 +c0318604 +c0330633 +c033864a +c0350694 +c03b869e +c04606aa +c04686b6 +c07d0710 20202a8e 704b6d00 -204004da +204004e3 24608000 20407ec1 -204004da +204004e3 24608000 704b6d01 20600000 6800cb6d 207a0000 -204004fa -20200311 +20400503 +20200319 d8a009ae df20000c 20407ed4 -20400390 +20400398 +6810807b +1fe17e3f +6010807b +68108081 +793ffe04 +60108081 204074c1 20406a03 20405cf6 @@ -126,7 +132,7 @@ 6800c65a 203a2012 6800c5b1 -203a007c +203a0082 20202012 58000a06 6001c510 @@ -144,194 +150,194 @@ 243a7fef 20207ff1 c6930000 -6800cd91 -c28080a5 -c28100a7 -6800cd81 -c00080a9 -2040013d -243400c4 -20400118 -204000f3 -6800cc51 +6800cd93 +c28080ab +c28100ad +6800cd83 +c00080af +20400143 +243400ca +2040011e +204000f9 +6800cc53 c1ff8000 -204006a6 +204006cc 6800cb29 -c0008382 -20400268 +c000838a +2040026e 24740000 -20400265 +2040026b 5800e290 20202d8c 7011c5c0 -2020079e +202007c4 7011c570 -2020079e -20400241 +202007c4 +20400247 24740000 -204000be -68014d82 +204000c4 +68014d84 1fe0fe01 -60014d82 -68094d84 +60014d84 +68094d86 98467c00 -204280b3 -20200097 -704d8100 +204280b9 +2020009d +704d8300 58000000 -60014d82 -58000019 60014d84 -704c7c00 -6800cc67 -6000cc66 -20600000 -6800cc68 -202000ba -6800cc7c +58000019 +60014d86 +704c7e00 +6800cc69 +6000cc68 +20600000 +6800cc6a +202000c0 +6800cc7e 1fe0fe01 -6000cc7c -c00200bc -c00280b8 -20600000 -6800cc6d -205a00ca -20400268 +6000cc7e +c00200c2 +c00280be +20600000 +6800cc6f +205a00d0 +2040026e 24740000 -6801cc70 +6801cc72 20202d8c -704c6d01 -704d7600 -204000da -6000cbdd +704c6f01 +704d7800 +204000e0 +6000cbdf 58000000 -6003cbde -68024c78 -60024be5 -704c410c -6800cc42 +6003cbe0 +68024c7a +60024be7 +704c430c +6800cc44 79207e03 -6000cc42 -20400140 -2020009a -704d7701 -704d7900 -6800cc42 +6000cc44 +20400146 +202000a0 +704d7901 +704d7b00 +6800cc44 1fe17e07 -6000cc42 +6000cc44 20600000 -6800cc42 +6800cc44 79207e04 -6000cc42 -6000cbfd +6000cc44 +6000cbff 20600000 -6800cc42 +6800cc44 c4020000 -6800cc42 +6800cc44 793ffe04 -6000cc42 -6000cbfd -204005fe -2020012b +6000cc44 +6000cbff +20400624 +20200131 +6800cd78 +c08080e0 6800cd76 -c08080da -6800cd74 1fe0fe01 -6000cd74 -c0020108 -2040012b -704c8602 -704c4a00 +6000cd76 +c002010e +20400131 +704c8802 +704c4c00 d9600d00 34730200 -20400162 -242c016d -2437816d -2040015f -2040018a -2040074f +20400168 +242c0173 +24378173 +20400165 +20400190 +20400775 704b5200 -6800cc40 +6800cc42 1fe0fe01 -6000cc40 -204000e3 -6800cc51 -c0ff81a8 -2040010f +6000cc42 +204000e9 +6800cc53 +c0ff81ae +20400115 58000000 -60024c46 -6000cd75 +60024c48 +6000cd77 20600000 -204005fe -704d7400 -202000da -704d7902 -704d7701 +20400624 704d7600 -202000da -6800cd78 -c001810c -6800cc42 +202000e0 +704d7b02 +704d7901 +704d7800 +202000e0 +6800cd7a +c0018112 +6800cc44 2fec0004 -202080d8 -6800cd78 -c000810b -c001010c +202080de +6800cd7a +c0008111 +c0010112 20600000 -6800cc51 +6800cc53 c1ff8000 -2040011d -24560125 +20400123 +2456012b 20600000 78567c00 -6800cd77 -c1808000 6800cd79 +c1808000 +6800cd7b c1800000 -704d7801 -704c8604 +704d7a01 +704c8804 20207feb -6800cd79 -203a0138 +6800cd7b +203a013e 1fe0ffff -6000cd79 -704d7802 -704c8604 -6808cc4c -6800cc69 +6000cd7b +704d7a02 +704c8804 +6808cc4e +6800cc6b 1fe17e03 1fefa204 -58004c52 +58004c54 9a20fe00 98408c00 e8c08000 -6000cc4b +6000cc4d 18408401 18410403 -6008cc4c +6008cc4e 20600000 -704d7803 -6800cd76 -243a00eb -704c8602 -2020012b -6800cc51 -c0ff81a6 -20400143 -204001c2 -704c4601 +704d7a03 +6800cd78 +243a00f1 +704c8802 +20200131 +6800cc53 +c0ff81ac +20400149 +204001c8 +704c4801 20600000 -68014d72 +68014d74 20407f9c -20340149 -6803cbde +2034014f +6803cbe0 207a0000 20207fe7 -704c6d00 +704c6f00 1a20fe01 -6000cc41 -204000da -6000cbdd +6000cc43 +204000e0 +6000cbdf e8a88000 ea408000 9841fe00 @@ -340,174 +346,174 @@ ea420000 e0a20000 1a40a404 -d8a04be3 +d8a04be5 df200002 ea408000 e8a88000 9840fe00 e0a08000 1a40a401 -c2000158 +c200015e 20600000 df200004 -d8a04bdd +d8a04bdf 20207ec6 7857fc00 -2040021e +20400224 18002a00 -68024c69 +68024c6b 98001200 68088017 2040291f 20402924 -204001da -2057821b +204001e0 +20578221 20600000 -6800cc6d +6800cc6f 247a0000 -68014c47 +68014c49 1fe0fe01 -60014c47 -6800cc48 +60014c49 +6800cc4a c2822dd4 -6800cc51 -c0ff8178 -20400180 -202000f4 -6800cc47 +6800cc53 +c0ff817e +20400186 +202000fa +6800cc49 c1ff8000 58000000 -60014c47 +60014c49 20202dd4 -20400766 -204005fe -2020012b -6800cc4a +2040078c +20400624 +20200131 +6800cc4c 1fe67c0b -2421017d +24210183 1fe0fe01 -6000cc4a -c00100de -c00300e5 -c00400de -c00600e5 +6000cc4c +c00100e4 +c00300eb +c00400e4 +c00600eb 20600000 -204001b5 -6800cc3f +204001bb +6800cc41 207a0000 98007200 -d8c04bbd -d8a04c1f +d8c04bbf +d8a04c21 20207f01 7041de20 -704c4000 -704c4b4e -68024c4d -60024c69 +704c4200 +704c4d4e +68024c4f +60024c6b da200000 df200004 -d8c04c69 +d8c04c6b e8c08000 9a20a200 -c2000199 +c200019f 1a227e00 -60014cf2 -6800ccf2 -6808ccf3 +60014cf4 +6800ccf4 +6808ccf5 9840fe00 -6000ccf4 +6000ccf6 20600000 -20400191 -704c5101 +20400197 +704c5301 20600000 7011c590 -2020079e -2040074c +202007c4 +20400772 7011c591 -2020079e +202007c4 793f8026 -704d9100 +704d9300 204053ce d8e00003 202043d2 -6008cc41 +6008cc43 18427200 -d8a04bdd +d8a04bdf 1a220c00 20207f01 -6800cbbc +6800cbbe 1fe97e00 -6000cc3f +6000cc41 1fe0fe01 -d8c04bbc +d8c04bbe 98c08c00 e8c18000 -6001cc7e -6800cbbc +6001cc80 +6800cbbe 1fe37e00 1fe17e03 -6000cc84 +6000cc86 20600000 -6800cc41 +6800cc43 1fe0fe02 -6000cc43 -6800cc42 -6000cbfd -6800cc41 +6000cc45 +6800cc44 +6000cbff +6800cc43 1fe9fe00 -6808cc40 +6808cc42 18410403 18438400 9841fe00 -6808cc7d +6808cc7f 9840fe00 e0a08000 -6800cc41 +6800cc43 98007200 -d8c04bdd +d8c04bdf 20207f01 7844fc00 7843fc00 58555555 98001e00 -6800cc4b +6800cc4d 202053da -204001d4 +204001da 7857fc00 7826fc00 7830fc00 78507c00 78287c00 -68014c44 +68014c46 98003600 37c18400 -242c021b +242c0221 7846fc00 7825fc00 7823fc00 7824fc00 -20400218 -6000ccf5 -6808ccf4 -98467c00 -2422821b -20400218 -6000cbbb -6800cbbb -6808cc42 +2040021e +6000ccf7 +6808ccf6 +98467c00 +24228221 +2040021e +6000cbbd +6800cbbd +6808cc44 a8400e00 -2420821b -20400218 +24208221 +2040021e e0a08000 1fe97e00 1fe1721f -202281fb -20400218 +20228201 +2040021e e0a08000 -c20001f8 +c20001fe 18a22200 -20400218 -6000cd7c +2040021e +6000cd7e 1a220a00 09800018 78287c00 @@ -516,23 +522,23 @@ 1ff17e00 e0a18000 7845fc00 -2023021b +20230221 7837fc00 68008017 1fe0a200 20402981 7846fc00 20402918 -6800cd7c +6800cd7e 1fe22200 -6808ccfc -58004d03 +6808ccfe +58004d05 98408a00 1a227e00 e0a08000 18408401 18410407 -6008ccfc +6008ccfe 20600000 09800008 19897e00 @@ -541,11 +547,11 @@ 7845fc00 2020264d 204053c4 -68024c69 +68024c6b 98001200 -204001d4 +204001da 20402918 -6808cc4b +6808cc4d 20402933 79202a00 782efc00 @@ -559,14 +565,14 @@ 782dfc00 7823fc00 7824fc00 -6800ccf4 +6800ccf6 08008608 -6800cc43 +6800cc45 98007200 -d8c04bfd +d8c04bff e8c08000 08008608 -c2000236 +c200023c 78247c00 08008618 78447c00 @@ -576,26 +582,26 @@ 784dfc00 20600000 20407fe9 -680a4c62 +680a4c64 1c427e00 98467c00 24412d18 1fe22400 -68024c62 -6808cc66 +68024c64 +6808cc68 98408400 1a427e00 98467c00 24610000 793ffe1c -60024c62 +60024c64 20207fe7 d8400000 df200008 1a220c00 e8c08000 98408400 -c2000253 +c2000259 18497e00 1fe20400 c6930000 @@ -605,10 +611,10 @@ 1ff27e00 20207f55 c6130000 -20400386 -20400270 +2040038e +20400276 6800c040 -c3000265 +c300026b 680080a0 247a0000 58000000 @@ -620,10 +626,10 @@ 203a7fe9 6800c091 203a7fe9 -6800cd81 +6800cd83 c000ffe9 -2040029e -20400265 +204002a6 +2040026b 20403ebf 6808cb46 20406825 @@ -651,32 +657,34 @@ 6810807f 1fe17e7f 6010807f -6808c6ed -202067ed +20600000 6808c6e8 -204005b2 +204005d8 6808c6e9 -204005b2 +204005d8 6808c6ea -204005b2 +204005d8 6808c6eb -204005b2 +204005d8 +680080a1 +1fe17ebf +600080a1 680080a3 -1fe17efd +1fe17e7f 600080a3 680080a4 -1fe17ea7 +1fe17ee7 600080a4 20600000 6800cb00 207a0000 -2020055e +20200564 70895b86 70895ca0 2040296c 20403416 204074b9 -20358324 +2035832c 6801c4a3 6001cbb0 20400001 @@ -684,79 +692,79 @@ 6808c720 6800c703 98467c00 -244282c6 +244282ce 6800c720 -c07f82b3 +c07f82bb 1fe67c01 -242282b5 -2040058e -c00282d9 -204002c3 -204004de +242282bd +204005b4 +c00282e1 +204002cb +204004e7 da204721 6800c720 6808c703 98467c00 -20228371 +20228379 1fe0ffff 1feffe1d 9a20a200 ea208000 6000c210 -c01a02c9 +c01a02d1 20600000 -6800ccf8 +6800ccfa 6000c1de 20600000 58004650 600146aa 20600000 7011c523 -2020079e +202007c4 da204370 ea208000 207a0000 98c0a200 e8c08000 c1008000 -202002cc +202002d4 704bb35a 20600000 704bb3ff 70421034 -68034d86 +68034d88 600344a0 20600000 7011c562 -2020079e -20400324 +202007c4 +2040032c 204040c0 204040d9 -c01802e7 -c01882f6 +c01802ef +c01882fe 204040d1 200003e8 -202002dd +202002e5 704b0001 2040640f -204002db +204002e3 20206411 -20400554 +2040055a 6800c6de -c02d02eb +c02d02f3 202040e1 7046e007 da604b6e -204002ef -2020055a +204002f7 +20200560 ea610000 d840ffff 98467c00 20628000 20406413 1a60a602 -202002ef -20400554 +202002f7 +2040055a 202040ea 70808640 70808700 @@ -772,53 +780,53 @@ 793ffe00 6010807f 20600000 -20400363 +2040036b 20404423 68014778 d840aa55 98467c00 -20228353 +2022835b 60094778 2040441c 68024b4d 6002477b -60024c69 -20400511 +60024c6b +2040051a 6801470f -203a0311 +203a0319 6800c231 c280b40a -20400363 -2040032f -2040033e -2040034d -20400342 -20400333 -20400326 -204002f8 -2040033e +2040036b +20400337 +20400346 +20400355 +2040034a +2040033b +2040032e +20400300 +20400346 d8400002 da2047c4 da40005f -2040032b -2040035c +20400333 +20400364 70421276 20203d36 -204002f8 -2040033e +20400300 +20400346 d8400001 da20477a da40005a 6801c700 9a40fe00 -20400342 -20200333 +2040034a +2020033b 6801c700 6001c232 -2040033e +20400346 2040652b -20400336 -c2800333 +2040033e +c280033b 20600000 580001fa 6011008c @@ -829,8 +837,8 @@ 6011008a 202064f6 2040650b -20400336 -c300833f +2040033e +c3008347 20600000 1fe22600 1a227e00 @@ -849,94 +857,94 @@ 6801c700 da204720 20600000 -20400363 -2040034d +2040036b +20400355 20406562 -20400365 -2040036c +2040036d +20400374 2040431a 6802477b -60024c69 +60024c6b 20600000 700aa2b9 -204002f8 +20400300 204069ac da204b48 68088aa2 20406556 202069ac 700aa2ab -2020035d -20400363 +20200365 +2040036b d8400002 da2047c4 da40005f 6801c700 9a40fe00 20206562 -20400363 +2040036b d8400001 da20477a da40005a -20200369 +20200371 70472001 -2040073f +20400765 7011c560 -2020079e -20400744 +202007c4 +2040076a 7011c561 -2020079e +202007c4 20407fe7 5800ffff e8c90000 98467c00 2442ffe9 -c200037a +c2000382 20600000 20404401 6801469f 207a0000 -704d8101 +704d8301 58000000 -60014d82 +60014d84 20600000 d8c01800 d8a0480c -2040038e +20400396 d8c01900 -2040038e +20400396 d8c01a00 -2040038e +20400396 d8c01b00 df20001b 20207f01 d8c0480c d8a01800 -2040038e +20400396 d8a01900 -2040038e +20400396 d8a01a00 -2040038e +20400396 d8a01b00 -2020038e +20200396 20405892 247a0000 6800cbb3 -c07f83a0 +c07f83a8 6800c6c5 1fe17e03 c1818000 6800c79e -205a03ee +205a03f6 680246d3 c282c179 20403f97 24740000 -204003ac -204003c5 +204003b4 +204003cd da20469a 20407e3d -205403b4 +205403bc 20600000 70417208 704b681e @@ -952,7 +960,7 @@ 20600000 da20469a 20407e54 -203403bc +203403c4 20600000 20405652 6800c7c3 @@ -974,16 +982,16 @@ 20405271 247a0000 6800c79e -205a03ee +205a03f6 680246d3 c282bf8a c284bf8a 20403f97 24740000 -204003ac -204003c5 +204003b4 +204003cd 6800cb05 -c00083dd +c00083e5 6800cb0c 207a0000 20203f81 @@ -1006,19 +1014,19 @@ 20600000 70479e01 20405814 -202002e3 +202002eb 20407e34 -2040043c -202003f4 -204003f7 +20400444 +202003fc +204003ff 20403f36 20203ee3 +6810807a +79207e07 +6010807a 68108078 -79207e05 -60108078 -6810807b 79207e06 -6010807b +60108078 da200000 6808c6ea 2040681d @@ -1028,18 +1036,18 @@ 7920a201 1a227e00 6000c6b8 -c000840b -c001040f +c0008413 +c0010417 6800c6b9 -c283841b +c2838423 20600000 6800c6b7 -c0000413 -c0018415 +c000041b +c001841d 20600000 6800c6b7 -c0000417 -c0018419 +c000041f +c0018421 20600000 7046b982 20600000 @@ -1052,22 +1060,22 @@ 6800c6b9 793ffe07 6000c6b9 -c0000423 -c0008426 -c0010429 -c001842c +c000042b +c000842e +c0010431 +c0018434 20600000 6800c6b8 -c001842f +c0018437 20600000 6800c6b8 -c000042f +c0000437 20600000 6800c6b8 -c0018434 +c001843c 20600000 6800c6b8 -c0000434 +c000043c 20600000 7046bc00 6800c6ba @@ -1081,14 +1089,14 @@ 20600000 6808cbb8 c17f8000 -202005ad -20400439 +202005d3 +20400441 6808c6e7 -204005b2 +204005d8 6808c6e7 2040681d -2020844e -204005ad +20208456 +204005d3 6800c6b6 c1000000 7046b600 @@ -1098,97 +1106,98 @@ 6000c77a 1fe0fe02 6000cb2e -2040073c +20400762 20203d7e -204005ad +204005d3 20203d62 1a627e00 -c00a0461 -c00a8463 -c0148466 -c0190468 -c020046a -c002046c -c009846c +c00a0469 +c00a846b +c014846e +c0190470 +c0200472 +c0020474 +c0098474 c00cb3df -c0108470 -c0008472 -c0010476 -c0158479 -c01c847b -c01d0480 -c01e0486 +c0108478 +c000847a +c001047e +c0158481 +c01c8483 +c01d0488 +c01e048e 2020417d 7011c5d0 -2020079e -2040048d +202007c4 +20400496 7011c5a2 -2020079e +202007c4 700a9912 20207d8f 7011c5b3 -2020079e +202007c4 7011c5a1 -2020079e +202007c4 7011c5a3 -2020079e +202007c4 7011c571 -2020079e +202007c4 7011c5b1 -2020079e +202007c4 704bb900 70480b00 -204002e3 +204002eb 202042ca -2040048d +20400496 7011c5b4 -2020079e +202007c4 7011c5b2 -2020079e -2040072a +202007c4 +20400750 704bb900 -204002e3 +204002eb 7011c592 -2020079e +202007c4 704bb901 704b2e0a -2040073c -2040048d +20400762 +20400496 7011c5a0 -2020079e -2040072e +202007c4 +20400754 +20400765 704bb900 -204002e3 +204002eb 20203f8d -2040048d +20400496 7011c5a4 -2020079e +202007c4 6800cb00 207a0000 704b0000 -204002db +204002e3 58000806 20206413 -20400508 -20400543 -204004c1 -204004de +20400511 +20400549 +204004ca +204004e7 20404234 2040423a -204004c6 -204004ad -204004aa +204004cf +204004b6 204004b3 -204004b9 -204004a2 +204004bc +204004c2 +204004ab 20404231 -204004a5 -20200702 +204004ae +20200728 da60480b da40637a 2020336d da604b0b -da4004a8 +da4004b1 2020336d 704b0c01 20600000 @@ -1196,13 +1205,13 @@ da403d60 2020336d da6046ae -da4004b0 +da4004b9 20203374 6800cb31 247a0000 20204266 da604b68 -da4004b6 +da4004bf 2020336d 6800c7c7 6000c172 @@ -1210,23 +1219,23 @@ 6800cb6a 207a0000 da604b6b -da4004be +da4004c7 2020336d 6800cb6c 247a0000 20205bf5 da604809 -da4004c4 +da4004cd 2020336d 70480800 20600000 -da604d8d -da4004c9 +da604d8f +da4004d2 20203374 -704d8c01 +704d8e01 20600000 da604b47 -da4004ce +da4004d7 2020336d 704bba01 6808c720 @@ -1241,12 +1250,12 @@ 2040c392 202043b8 6808c6ed -204005ad +204005d3 6808c6ed 2020681d -204004da -242084e9 -204004cb +204004e3 +242084f2 +204004d4 6800c6d9 c1000000 7046d900 @@ -1256,19 +1265,19 @@ 680140b9 20207f08 6800cb6d -243a0501 +243a050a 6800c6d9 c1008000 6800cb47 1fe67c14 -244104f4 +244104fd 6800c685 6000cb47 7046d901 20600000 -204004fa +20400503 7041bd00 -20400311 +20400319 680246d3 c1048000 2020437e @@ -1285,7 +1294,7 @@ 20600000 704bb901 704b2e0a -2020073c +20200762 68014b2e 247a0000 6800c808 @@ -1297,30 +1306,27 @@ 20610000 204068a8 7046ce00 -2040052e +20400534 20406908 1feffe03 d840000f 98467e00 1fe67c64 -2041052b +20410531 6001470f da204709 -6808c6ea -2040681d -24208520 -20600000 -20400536 +20200526 +2040053c 6800c231 c280b40a -c3000526 +c300052c 704aff01 202043e7 204043e9 6800caff 207a0000 704aff00 -20200730 +20200756 d8400005 98467e00 20600000 @@ -1356,31 +1362,31 @@ 1fe0fe01 6000c6cf 1fe67c1e -24410552 +24410558 1fe67c0a -20210722 -20200730 +20210748 +20200756 7046cf01 20600000 -20400324 +2040032c 58008006 20406413 20002ee0 da604b96 -204002ef +204002f7 6800c77a -c0ff855e +c0ff8564 6800c6e1 6000c77a 6800c6e0 -c002057b -c003056e -c003856e +c0020581 +c0030574 +c0038574 6800c77a 1fe67c01 -20428569 +2042856f 6800c77a -c000056b +c0000571 c001bd8c 20203d88 70477a02 @@ -1390,64 +1396,96 @@ 20203dbe 6800c77a 1fe67c01 -20428569 +2042856f 6800c77a -c0000577 -c0018579 +c000057d +c001857f 6800cb3c 6000c6b5 20203dc1 6800cb3a -20200575 +2020057b 6800cb3d -20200575 +2020057b 6800c77a 1fe67c01 -20428569 +2042856f 6800c77a -c0003d9b +c0003d9d +c000bd9b +c0013d9f c001bda1 -20203d9f +20203d9b 78547c00 58000000 6003469b 20403fb5 -2040029e +204002a6 20404079 2040407e -2040058c +204005b2 +20400595 24740000 20203fa0 -2040058e +6800c6e0 +c1820000 +6800c77a +c1818000 +6801469b +204005a0 +6001469b +6801469d +204005a0 +6001469d +20600000 +c28585a3 +c30585a7 +20600000 +1fe67e00 +204005a7 +1fe67e00 +20600000 +9fe0fe00 +202005a9 +60014bbb +6800cbbc +1fe67c07 +244105af +68014bbb +20600000 +580007ff +60014bbb +20600000 +204005b4 2020409a da200000 -20400591 +204005b7 2020408e 6808c6e2 -204005ad +204005d3 6808c6e2 2040681d 7920a200 6808c6e3 -204005ad +204005d3 6808c6e3 2040681d 7920a201 6808c6e4 -204005ad +204005d3 6808c6e4 2040681d 7920a202 -20400439 +20400441 6808c6e5 -204005b2 +204005d8 6808c6e5 2040681d 7d20a203 -204005ad -20400439 +204005d3 +20400441 6808c6e6 -204005b2 +204005d8 6808c6e6 2040681d 7d20a204 @@ -1455,7 +1493,7 @@ d8a08078 20406830 793f8407 -202005b6 +202005dc 793f8407 d8a08078 20406830 @@ -1463,21 +1501,21 @@ d8a0807c 2020680a 280ffe26 -204081ab +204081b1 2020426d 7011c581 -2020079e +202007c4 7011c550 -2020079e +202007c4 d8a0437b df200013 20407f01 202057b8 -2040072a +20400750 58000000 600146ac 6000c714 -204002e3 +204002eb 202042cb 6800c50f 1fe0fe01 @@ -1485,7 +1523,7 @@ c0065395 204055aa 2040561e -204006a6 +204006cc 2020538f 68008016 1fe0fe01 @@ -1494,31 +1532,31 @@ 70001625 20600000 204029bb -2040020e +20400214 202054a3 7011c540 -2020079e +202007c4 7011c541 -2020079e +202007c4 68008456 -c28285fd -2040074f +c2828623 +20400775 6800c78e -243a05e8 +243a060e 6800843f -c30205ec +c3020612 680082da -203a05ec +203a0612 20205664 6800c78e 1fe0ffff 6000c78e 20205664 6800c4c4 -c08285ef +c0828615 70478e03 20405892 -205a03b8 +205a03c0 20205622 6800c6c5 1fe17e03 @@ -1531,14 +1569,14 @@ 79207e04 6000c3dc 20205650 -204005f2 -6800cd7a +20400618 +6800cd7c 1fe67c02 -24410753 -6800cd7a +24410779 +6800cd7c c1000000 1fe0ffff -6000cd7a +6000cd7c 20600000 6800c7a1 207a0000 @@ -1560,10 +1598,10 @@ 18c27e00 6001450d 6800c50c -c001861c +c0018642 2020568d 680082db -c000861f +c0008645 20205c65 e8c28000 6002c3ce @@ -1571,18 +1609,18 @@ 6001045f 20205c8a e8c10000 -c0020628 -c0030666 +c002064e +c003068c 20205698 20407ea5 -20400606 +2040062c 20407e9f e8c18000 60018477 -c0080637 +c008065d 1fec8400 18467c24 -20210645 +2021066b d84047c8 600944bc 204058ad @@ -1603,21 +1641,21 @@ 5800002b e0c10000 20600000 -c0050648 -c0090656 +c005066e +c009067c 202058ad 68090478 6800c4e9 -c281864f +c2818675 68010478 c009da76 68090478 202059bf 680144fa 98467c00 -2422864b +24228671 20405a42 -2434064b +24340671 70047a05 20205a77 18c22200 @@ -1637,13 +1675,13 @@ 70047a05 20205a77 e8c08000 -c000866a -c002866c +c0008690 +c0028692 20205af6 704b6c01 20205b09 7011c582 -2020079e +202007c4 68008016 c093d6f2 180a7e00 @@ -1655,7 +1693,7 @@ 68014482 20207f08 7855fc00 -2037067b +203706a1 2436d806 20402bcb 680140c1 @@ -1665,7 +1703,7 @@ 2420abde 202057fb 7011c542 -2020079e +202007c4 68108077 1fe17efd 60108077 @@ -1675,7 +1713,7 @@ 204063ee 184104fd 2000000d -20400691 +204006b7 60188073 20600000 204064dd @@ -1694,34 +1732,34 @@ 2020246e 68008030 2feffe00 -204086a2 +204086c8 2020248a 68008047 2feffe03 -204085fe -2440874f +20408624 +24408775 68014682 c3858000 c3838000 c3830000 -da204d03 -20400250 -6008cd7b +da204d05 +20400256 +6008cd7d 58000082 -c51306b0 +c51306d6 58000080 98467c00 -24210765 -6800cd7a +2421078b +6800cd7c 1fe67c02 -24210755 -6800cd7a -c0000766 +2421077b +6800cd7c +c000078c 20600000 204024f0 242c28f9 204029bb -2040020e +20400214 20202518 c6130000 20402afa @@ -1732,7 +1770,7 @@ 6800cb2f 247a0000 6800c65a -203a06c9 +203a06ef 6800c5b1 207a0000 6800c4c0 @@ -1759,7 +1797,7 @@ c586abde 20405274 243a2bde -205a06e3 +205a0709 20202bbe 70008a01 70008b00 @@ -1767,21 +1805,21 @@ 6800cb2e 247a0000 7011c510 -2020079e +202007c4 204062bc 243a7ddb 68008a99 c584fdd6 -c00f86f5 -c01006f8 -c00906f2 +c00f871b +c010071e +c0090718 20207dca 20405890 247a0000 20205abf 70018534 6803044f -202006fa +20200720 70018533 68030040 60030186 @@ -1791,23 +1829,23 @@ 204043d2 204042e8 204042fb -20200311 +20200319 6800cb27 207a0000 6800cb2a -c0000708 -c0008712 +c000072e +c0008738 20600000 -20400722 +20400748 6800cb2f 1fe0fe01 6000cb2f 6808cb2b 98467c00 -20428710 +20428736 20600000 704b3100 -20200730 +20200756 6800cb2d 1fe0ffff 6000cb2d @@ -1815,20 +1853,20 @@ 6800cb2c 6000cb2d 6800cb30 -203a071e +203a0744 6800cb2e -203a072e +203a0754 1fe0ffff 6000cb2e 6800cb29 -c0008730 -c0000722 +c0008756 +c0000748 20600000 704b2901 6800c720 -c0008728 -c0010727 -20200729 +c000874e +c001074d +2020074f 2020448c 20204489 2020448f @@ -1839,7 +1877,7 @@ 58000000 6001cb2d 6800cb2e -243a0734 +243a075a 704b2700 704b2a00 704b2f00 @@ -1852,7 +1890,7 @@ 20600000 704b2c03 704b3001 -20200748 +2020076e 704b3101 704b2701 704b2a00 @@ -1866,37 +1904,37 @@ 704b2701 704b2a01 20600000 -704d7d01 -704d7a00 +704d7f01 +704d7c00 20600000 -6800cd7a +6800cd7c 1fe0fe01 -6000cd7a +6000cd7c 20600000 -704d7a03 +704d7c03 20600000 -6800cd7a +6800cd7c c1900000 -704d7a00 -6808cd7b +704d7c00 +6808cd7d 58000077 -c513075c +c5130782 58000075 98467c00 24610000 -6800cd7d -c000076d +6800cd7f +c0000793 1fe0ffff -6000cd7d -c000076d +6000cd7f +c0000793 7041de00 20600000 -704d7a00 -6800cd7d -c001076b +704d7c00 +6800cd7f +c0010791 1fe0fe01 -6000cd7d -c0008763 +6000cd7f +c0008789 7041de02 20600000 7041de04 @@ -1917,10 +1955,10 @@ 2000000a 7089027d 6800c1de -c0010787 -c002078f -c0100799 -20400794 +c00107ad +c00207b5 +c01007bf +204007ba 708955d0 708956e0 7089586c @@ -1933,7 +1971,7 @@ 708956e0 7089583c 20202953 -20400794 +204007ba 708955d0 708956c0 7089586c @@ -1952,7 +1990,7 @@ 18518400 6800cb56 98467c00 -202287bd +202287e3 6008cb56 18408401 58000100 @@ -1963,7 +2001,7 @@ 9840fe00 1fe0fffb 6001cb5d -20400363 +2040036b 6801cb5d d8400100 da201f00 @@ -1971,8 +2009,8 @@ 68021f00 680a4b60 98467c00 -242287ae -20400324 +242287d4 +2040032c 58001f00 60014199 70419b40 Index: output/romcode.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/romcode.rom (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/romcode.rom (working copy) @@ -24602,7 +24602,7 @@ 202042b0 204041c1 68014208 -c28504e9 +c28504f2 202041f7 c2828015 c2818015 @@ -24610,7 +24610,7 @@ 68014682 c28642b0 204033a9 -2040058e +204005b4 20608000 202033a7 68010264 @@ -24630,7 +24630,7 @@ 704b0501 20600000 18427e00 -c002846e +c0028476 20204d41 c0100016 c010802a @@ -24638,7 +24638,7 @@ c0118006 20600000 704b6c01 -2040073f +20400765 7047a101 680146a8 6808cbb3 @@ -24647,11 +24647,11 @@ 58000258 600146ae 20403418 -204002cb +204002d3 58000004 e0c08000 d8c04390 -204005bf +204005e5 20207df4 68008048 c042001a @@ -24672,7 +24672,7 @@ 6800804b 793ffe03 6000804b -20200490 +20200499 18007e02 20406298 68008049 @@ -24784,21 +24784,21 @@ c0280003 20600000 704b6c00 -204002c3 +204002cb 70479e00 68014682 c2858010 -20400365 +2040036d 680947c4 18408401 600947c4 600944a1 -2040031d +20400325 180a7e00 6000c4a0 6801cbb0 6001c4a3 -204002d2 +204002da 20403418 68014687 600146ac @@ -24817,29 +24817,29 @@ 2040fddd 704b5100 204042c4 -20200744 +2020076a 7047a100 -204002cb +204002d3 58000005 e0c08000 d8c04b12 -204005bf +204005e5 20207df4 c0300005 c0308017 c031001f 20600000 2040000e -20340375 +2034037d 79200026 -6800cd91 +6800cd93 79207e02 -6000cd91 -20400196 -2040012b +6000cd93 +2040019c +20400131 2020001b df200002 -d8c04c69 +d8c04c6b 20407fe7 5800ffff e8c90000 @@ -24848,12 +24848,12 @@ c2000012 20600000 79200026 -6800cd91 +6800cd93 79207e01 -6000cd91 +6000cd93 5800003c -60014d8d -704d8c00 +60014d8f +704d8e00 20600000 680246d3 c4088000 @@ -24865,41 +24865,41 @@ 58000000 600146ae 6000c6b4 -60014c6e +60014c70 204042ca -20200375 +2020037d c0380004 c038801a 20600000 -6800cd8c +6800cd8e c000add4 20400011 -20400162 -242c012b -2437812b -6800cd91 +20400168 +242c0131 +24378131 +6800cd93 793ffe02 -6000cd91 +6000cd93 704b6700 20402f20 -2040015f -20200382 +20400165 +2020038a 70119eff -6800cc42 +6800cc44 6000919f -68024c78 +68024c7a 600211a0 d8400006 da20119e -204001b0 -202001c2 +204001b6 +202001c8 5fffffff 60030040 70018533 704bb3ff 204042fb 704721ff -20200311 +20200319 c040000a c0408004 20600000 @@ -24910,7 +24910,7 @@ 600147c4 20600000 680240a0 -60024c78 +60024c7a 20403e6e 6808cb46 2040680e @@ -24924,17 +24924,17 @@ 20405839 2040582c 20405818 -204005bb -20400306 +204005e1 +2040030e df200003 d8c0473f -20400378 -243402d2 +20400380 +243402da df200003 d8c0475c -20400378 -243402d2 -204002d4 +20400380 +243402da +204002dc 20600000 204074b9 d8c08c00 @@ -24967,49 +24967,49 @@ c048801f c049002f 20600000 -6800cc46 +6800cc48 c000ffe7 -6800cc51 +6800cc53 c000800c c001000f c0018012 20202a8c -704c5111 +704c5311 70119eaa 20200014 -704c5112 +704c5312 70119e55 20200014 -704c5113 +704c5313 70119e22 -6800cc42 +6800cc44 1fe17e07 6000919f -68024c78 +68024c7a 600211a0 7011a400 da20119e d8400007 -204001b0 -20400140 +204001b6 +20400146 20207fe7 -6800cc51 +6800cc53 c17f8000 c0088025 c0090027 c0098029 20600000 -704c5102 -20200104 -704c5103 -20200104 -704c51ff +704c5302 +2020010a +704c5303 +2020010a +704c53ff 700a9939 20407d86 -68024c21 -20400195 -20200104 -20400489 +68024c23 +2040019b +2020010a +20400492 70478b01 d8e00003 204043d2 @@ -25017,23 +25017,23 @@ 60014707 7046a700 2040405d -204002c3 -68024c69 +204002cb +68024c6b 6002477b -20200311 +20200319 c0500007 c050800f c0510022 c051801b c052002f 20600000 -704d8100 -204002c3 -204001ab +704d8300 +204002cb +204001b1 7041bd00 6800cb2e 247a0000 -20400272 +20400278 2020340a 68014509 c1000000 @@ -25044,7 +25044,7 @@ 58000009 60014496 60014498 -20400466 +2040046e 7047c601 20600000 68014682 @@ -25055,7 +25055,7 @@ c3828000 202033a7 6800cbba -205a0505 +205a050e 704bba00 704b6a00 58000007 @@ -25063,24 +25063,24 @@ 60014498 7047c600 70479e00 -204003af +204003b7 20405816 -20400311 +20400319 202041d9 68120138 79207e1a 6012004c 20402c21 204074bd -2040072e -20400311 +20400754 +20400319 20403e9f -20400272 -2040035c +20400278 +20400364 68108081 1fe17ef7 60108081 -2020028f +20200294 c0588006 c059000c c0598011 @@ -25100,89 +25100,89 @@ 6800c7a1 c0008014 20200016 -20400466 +2040046e 7046c60a d8e00001 202041b9 704bb901 704b2e0a -2040073c +20400762 704b0100 704b0300 704b0c00 -20400311 +20400319 202041d9 -6800cd8c +6800cd8e c000add4 70119eff -6800cc42 +6800cc44 6000919f -68024c78 +68024c7a 600211a0 d8400006 da20119e -204001b0 -204001c2 -20400162 +204001b6 +204001c8 +20400168 242c0026 24378026 -2040018a -68024c69 -680a4d86 +20400190 +68024c6b +680a4d88 98467c00 20228016 -6800cc3f +6800cc41 c1840000 -704d9100 -204002c3 -68024c69 -680a4c4d +704d9300 +204002cb +68024c6b +680a4c4f 98467c00 -202281a3 -68024c69 -680a4c78 +202281a9 +68024c6b +680a4c7a 98467c00 20428024 704b6700 20402f20 -2040015f -20200382 -68024c21 -20200195 -6800cd7f +20400165 +2020038a +68024c23 +2020019b +6800cd81 1fe0fe01 1fe17e03 -6000cd7f +6000cd81 c000002d c0010037 -20200191 -204002c3 -68024c78 -60024c69 -6800cd8f -6000cc4c +20200197 +204002cb +68024c7a +60024c6b +6800cd91 +6000cc4e 20400035 -6008cd8f +6008cd91 20600000 -20400196 -2020012b +2040019c +20200131 7041de20 -68024d86 -60024c69 -6800cd90 -6000cc4c +68024d88 +60024c6b +6800cd92 +6000cc4e 20400035 -6008cd90 +6008cd92 20600000 c0680003 20600000 704bb900 -204002e3 +204002eb 20403410 704b6a01 6800c7a1 243a000a 704b6b14 -204003af +204003b7 202041c3 -0000e02c +0000aa21 Index: output/sched.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/sched.rom (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/sched.rom (working copy) @@ -189,7 +189,7 @@ mem_config_sensor_type:00 -02 #mem_config_sensor_motion:01 +01 #mem_config_sensor_motion:01 03 #mem_lbutton_gpio:16 07 #mem_rbutton_gpio:14 02 #mem_mbutton_gpio:15 @@ -199,14 +199,14 @@ 1b #mem_whee_a_data_gpio:0b 1c #mem_whee_b_data_gpio:07 17 #mem_whee_ta_data_gpio:ff -1e #mem_whee_tb_data_gpio:ff +06 #mem_whee_tb_data_gpio:ff ff #mem_config_bt_button_gpio:18 1f #mem_config_select_device_button_gpio:ff ff #mem_config_paraing_led_gpio:ff ff #mem_config_low_voltage_alarm_gpio:01 04 #mem_config_device1_led_gpio:01 08 #mem_config_device2_led_gpio:ff -06 #mem_config_device3_led_gpio:ff +1e #mem_config_device3_led_gpio:ff 18 #mem_sensor_data_gpio:0c ff #mem_dpi_led_gpio:01 b0 #mem_config_function_enable @@ -243,10 +243,10 @@ 03##mem_320x_dpi_3 04##mem_320x_dpi_4 -15##mem_3212_dpi_1#800 -1a##mem_3212_dpi_2#1000 -2a##mem_3212_dpi_3#1600 -3f##mem_3212_dpi_4#2400 +1a ##mem_3212_dpi_1#1000 +2a ##mem_3212_dpi_2#1600 +3f ##mem_3212_dpi_3#2400 +2a ##mem_3212_dpi_4#1600x2=3200 #04##mem_3610_dpi_1 #05##mem_3610_dpi_2 Index: program/patch.prog =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/patch.prog (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/patch.prog (working copy) @@ -201,6 +201,12 @@ ifdef BLE call p_mouse_le_txbuff_load endif + hfetch 1,core_gpio_pu3 + and_into 0x3f,pdata + hstore 1,core_gpio_pu3 + hfetch 1,core_gpio_sel1 + set0 4,pdata + hstore 1,core_gpio_sel1 call init_memp call rfcomm_init call init_lmp @@ -1012,8 +1018,9 @@ hfetch 1,core_gpio_pd3 //gpio31 can not be set pulldown and pdata,0x7f,pdata hstore 1,core_gpio_pd3 - fetcht 1,mem_config_select_device_button_gpio - branch gpio_clr_wake +// fetcht 1,mem_config_select_device_button_gpio +// branch gpio_clr_wake + rtn p_mouse_t_wheel_clear_wake: fetcht 1,mem_whee_a_data_gpio @@ -1025,11 +1032,14 @@ fetcht 1,mem_whee_tb_data_gpio call p_gpio_set_input_pd - fetch 1,mem_gpio_wakeup_low+2 // 0x17 - and pdata,0xfd,pdata + fetch 1,mem_gpio_wakeup_low // 0x06 + and pdata,0xbf,pdata + store 1,mem_gpio_wakeup_low + fetch 1,mem_gpio_wakeup_low+2 // 0x17 + and pdata,0x7f,pdata store 1,mem_gpio_wakeup_low+2 - fetch 1,mem_gpio_wakeup_low+3 // 0x1b 0x1c 0x1e - and pdata,0xa7,pdata + fetch 1,mem_gpio_wakeup_low+3 // 0x1b 0x1c + and pdata,0xe7,pdata store 1,mem_gpio_wakeup_low+3 rtn @@ -1654,12 +1664,12 @@ branch mouse_wheel_check+3 p_mouse_t_wheel_scan: - hfetch 1,core_gpio_pu0 //wheel gpio need pull up - set1 5,pdata - hstore 1,core_gpio_pu0 - hfetch 1,core_gpio_pu3 + hfetch 1,core_gpio_pu2 //wheel gpio need pull up + set1 7,pdata + hstore 1,core_gpio_pu2 + hfetch 1,core_gpio_pu0 set1 6,pdata - hstore 1,core_gpio_pu3 + hstore 1,core_gpio_pu0 arg 0,rega fetcht 1,mem_whee_ta_data_gpio call gpio_get_bit @@ -1867,6 +1877,7 @@ p_mouse_24g_attempt_success: call p_mouse_multi_led_blink_off + call p_mouse_mode_24g_device_multi_led_on jam 0,mem_mouse_connected_state // call p_mouse_null_enter_hibernate_disable call p_mouse_init_sensor_reset @@ -2168,10 +2179,10 @@ call p_mouse_vdd_decrease,positive store 2,mem_mouse_vdd_now_vol arg mem_mouse_vdd_calculate_set,rega - fetcht 1,mem_whee_ta_data_gpio - call gpio_get_bit - nbranch p_mouse_adc_read_next,true - rtn + //fetcht 1,mem_whee_ta_data_gpio + //call gpio_get_bit + branch p_mouse_adc_read_next + //rtn // arg mem_mouse_vdd_vinvol,rega p_mouse_adc_read_next: call p_adc_bat_percent_lowpower_out @@ -2316,9 +2327,11 @@ sub pdata,MOUSE_DPI_LEVEL2,null call p_mouse_3205_dpi_recount,zero fetch 1,mem_mouse_dpi - beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi2 + beq MOUSE_DPI_LEVEL1,mouse_set_p3212_cpi1 + beq MOUSE_DPI_LEVEL2,mouse_set_p3212_cpi2 + beq MOUSE_DPI_LEVEL3,mouse_set_p3212_cpi3 beq MOUSE_DPI_LEVEL4,mouse_set_p3212_cpi4 - branch mouse_set_p3212_cpi3 + branch mouse_set_p3212_cpi2 p_mouse_motion: disable user @@ -2329,6 +2342,7 @@ call mouse_zwheel call mouse_t_zwheel call p_mouse_key + call p_mouse_data_zoom ifdef MOUSE_SMOOTHER nbranch p_drawing_optima_init,user call p_drawing_optima @@ -2338,6 +2352,47 @@ branch mouse_motion+9 +p_mouse_data_zoom: + fetch 1,mem_config_sensor_type + rtnne P3212 + fetch 1,mem_mouse_dpi + rtnne MOUSE_DPI_LEVEL4 + fetch 2,mem_mouse_x + call p_mouse_1600_zoom + store 2,mem_mouse_x + fetch 2,mem_mouse_y + call p_mouse_1600_zoom + store 2,mem_mouse_y + rtn + +p_mouse_1600_zoom: + bbit1 11,p_mouse_xy_inverse + bbit0 11,p_mouse_xy_zoom_3200 + rtn + +p_mouse_xy_inverse: + sub pdata,0,pdata + call p_mouse_xy_zoom_3200 + sub pdata,0,pdata + rtn + +p_mouse_xy_zoom_3200: + iadd pdata,pdata + branch p_mouse_xy_zoom_store + +p_mouse_xy_zoom_store: + store 2,mem_mouse_temp_data + fetch 1,mem_mouse_temp_data+1 + sub pdata,0x7,null + ncall p_mouse_xy_forward_overflow,positive + fetch 2,mem_mouse_temp_data + rtn + +p_mouse_xy_forward_overflow: + setarg 0x7ff + store 2,mem_mouse_temp_data + rtn + p_mouse_key: call p_mouse_check_key_gpio branch mouse_key+1 Index: sched/mouse.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/mouse.dat (revision 5014) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/mouse.dat (working copy) @@ -152,7 +152,7 @@ mem_config_sensor_type:00 -02 #mem_config_sensor_motion:01 +01 #mem_config_sensor_motion:01 03 #mem_lbutton_gpio:16 07 #mem_rbutton_gpio:14 02 #mem_mbutton_gpio:15 @@ -162,14 +162,14 @@ 1b #mem_whee_a_data_gpio:0b 1c #mem_whee_b_data_gpio:07 17 #mem_whee_ta_data_gpio:ff -1e #mem_whee_tb_data_gpio:ff +06 #mem_whee_tb_data_gpio:ff ff #mem_config_bt_button_gpio:18 1f #mem_config_select_device_button_gpio:ff ff #mem_config_paraing_led_gpio:ff ff #mem_config_low_voltage_alarm_gpio:01 04 #mem_config_device1_led_gpio:01 08 #mem_config_device2_led_gpio:ff -06 #mem_config_device3_led_gpio:ff +1e #mem_config_device3_led_gpio:ff 18 #mem_sensor_data_gpio:0c ff #mem_dpi_led_gpio:01 b0 #mem_config_function_enable @@ -206,10 +206,10 @@ 03##mem_320x_dpi_3 04##mem_320x_dpi_4 -15##mem_3212_dpi_1#800 -1a##mem_3212_dpi_2#1000 -2a##mem_3212_dpi_3#1600 -3f##mem_3212_dpi_4#2400 +1a ##mem_3212_dpi_1#1000 +2a ##mem_3212_dpi_2#1600 +3f ##mem_3212_dpi_3#2400 +2a ##mem_3212_dpi_4#1600x2=3200 #04##mem_3610_dpi_1 #05##mem_3610_dpi_2