Index: format/app_mouse.format =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/format/app_mouse.format (revision 5062) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/format/app_mouse.format (working copy) @@ -297,6 +297,8 @@ 2 mem_firmware_version 26 mem_sensor_8650_init + +1 mem_mouse_dpi_time_count ) ( Index: output/flash.dat =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/flash.dat (revision 5065) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/flash.dat (working copy) @@ -2,7 +2,7 @@ 02 aa 55 -ca +da 1f 20 20 @@ -19,11 +19,11 @@ 60 00 cc -c7 +c8 20 40 07 -0b +0f 68 00 c6 @@ -51,7 +51,7 @@ 20 40 07 -97 +9b 20 40 00 @@ -71,7 +71,7 @@ 60 01 4d -41 +42 58 00 03 @@ -83,7 +83,7 @@ 58 00 06 -4d +51 60 01 41 @@ -107,7 +107,7 @@ 58 00 03 -da +dd 60 01 41 @@ -123,7 +123,7 @@ 58 00 04 -10 +13 60 01 41 @@ -131,7 +131,7 @@ 58 00 04 -12 +15 60 01 41 @@ -147,7 +147,7 @@ 60 01 4d -53 +54 24 55 80 @@ -179,7 +179,7 @@ 60 01 4d -53 +54 20 60 00 @@ -279,43 +279,43 @@ c0 42 87 -6b +6f c0 44 87 -3e +42 c0 0d 86 -65 +69 c0 13 06 -67 +6b c0 24 06 -83 +87 c0 25 06 -8a +8e c0 28 86 -93 +97 c0 2c 86 -81 +85 c0 53 86 -98 +9c c0 56 86 -ae +b2 c0 65 b3 @@ -323,7 +323,7 @@ c0 74 86 -bf +c3 c0 50 80 @@ -343,23 +343,23 @@ c0 71 85 -2d +31 c0 73 05 -52 +56 c0 75 05 -85 +89 c0 75 85 -8b +8f c0 76 05 -9f +a3 20 20 2a @@ -367,71 +367,71 @@ c0 1c 85 -a9 +ad c0 21 85 -b1 +b5 c0 25 05 -b7 +bb c0 2b 85 -ba +be c0 2c 85 -bc +c0 c0 31 85 -be +c2 c0 33 05 -ef +f3 c0 33 86 -06 +0a c0 35 06 -3b +3f c0 3b 86 -43 +47 c0 02 86 -c1 +c5 c0 40 06 -c3 +c7 c0 41 06 -cd +d1 c0 44 06 -cf +d3 c0 46 06 -53 +57 c0 46 86 -5f +63 c0 7d 06 -f3 +f7 20 20 2a @@ -611,7 +611,7 @@ 68 00 cd -50 +51 c0 00 80 @@ -635,7 +635,7 @@ 68 00 cc -20 +21 c1 ff 80 @@ -643,7 +643,7 @@ 20 40 07 -12 +16 58 01 77 @@ -651,7 +651,7 @@ 60 01 cc -3f +40 70 4b 5f @@ -699,7 +699,7 @@ 68 01 4d -51 +52 1f e0 fe @@ -707,11 +707,11 @@ 60 01 4d -51 +52 68 09 4d -53 +54 98 46 7c @@ -726,7 +726,7 @@ 99 70 4d -50 +51 00 58 00 @@ -735,7 +735,7 @@ 60 01 4d -51 +52 58 00 00 @@ -743,19 +743,19 @@ 60 01 4d -53 +54 70 4c -4b +4c 00 68 00 cc -36 +37 60 00 cc -35 +36 20 60 00 @@ -763,7 +763,7 @@ 68 00 cc -37 +38 20 20 00 @@ -771,7 +771,7 @@ 68 00 cc -4b +4c 1f e0 fe @@ -779,7 +779,7 @@ 60 00 cc -4b +4c c0 02 00 @@ -795,7 +795,7 @@ 68 00 cc -3c +3d 20 5a 00 @@ -827,18 +827,18 @@ 68 01 cc -3f +40 20 20 2d 8c 70 4c -3c +3d 01 70 4d -45 +46 00 20 40 @@ -847,7 +847,7 @@ 60 00 cb -ac +ad 58 00 00 @@ -855,23 +855,23 @@ 60 03 cb -ad +ae 68 02 4c -47 +48 60 02 4b -b4 +b5 70 4c -10 +11 0c 68 00 cc -11 +12 79 20 7e @@ -879,7 +879,7 @@ 60 00 cc -11 +12 20 40 01 @@ -890,16 +890,16 @@ 9c 70 4d -46 +47 01 70 4d -48 +49 00 68 00 cc -11 +12 1f e1 7e @@ -907,7 +907,7 @@ 60 00 cc -11 +12 20 60 00 @@ -915,7 +915,7 @@ 68 00 cc -11 +12 c4 02 00 @@ -923,7 +923,7 @@ 68 00 cc -11 +12 79 3f fe @@ -931,15 +931,15 @@ 60 00 cc -11 +12 60 00 cb -cc +cd 20 40 05 -de +e2 20 20 01 @@ -947,10 +947,10 @@ 20 40 05 -de +e2 70 4d -43 +44 00 20 20 @@ -958,15 +958,15 @@ df 70 4d -48 +49 02 70 4d -46 +47 01 70 4d -45 +46 00 20 20 @@ -975,7 +975,7 @@ 68 00 cd -47 +48 c0 01 80 @@ -983,7 +983,7 @@ 68 00 cc -11 +12 2f ec 00 @@ -995,7 +995,7 @@ 68 00 cd -47 +48 c0 00 80 @@ -1011,7 +1011,7 @@ 68 00 cc -20 +21 c1 ff 80 @@ -1035,7 +1035,7 @@ 68 00 cd -46 +47 c1 80 80 @@ -1043,18 +1043,18 @@ 68 00 cd -48 +49 c1 80 00 00 70 4d -47 +48 01 70 4c -55 +56 04 20 20 @@ -1063,7 +1063,7 @@ 68 00 cd -48 +49 20 3a 01 @@ -1075,14 +1075,14 @@ 60 00 cd -48 +49 70 4d -47 +48 02 70 4c -55 +56 04 20 20 @@ -1090,19 +1090,19 @@ be 70 4d -47 +48 03 68 00 cd -45 +46 24 3a 01 37 70 4c -55 +56 02 20 20 @@ -1111,7 +1111,7 @@ 68 00 cc -20 +21 c0 ff 81 @@ -1126,7 +1126,7 @@ ac 70 4c -15 +16 01 20 60 @@ -1135,7 +1135,7 @@ 68 01 4d -41 +42 20 40 7f @@ -1147,7 +1147,7 @@ 68 03 cb -ad +ae 20 7a 00 @@ -1162,7 +1162,7 @@ 7e 70 4c -3c +3d 00 1a 20 @@ -1171,7 +1171,7 @@ 60 00 cc -10 +11 20 40 00 @@ -1179,7 +1179,7 @@ 60 00 cb -ac +ad e8 a8 80 @@ -1215,7 +1215,7 @@ d8 a0 4b -b2 +b3 df 20 00 @@ -1251,7 +1251,7 @@ 68 00 cd -45 +46 c0 80 80 @@ -1259,7 +1259,7 @@ 68 00 cd -43 +44 1f e0 fe @@ -1267,7 +1267,7 @@ 60 00 cd -43 +44 c0 02 00 @@ -1278,11 +1278,11 @@ be 70 4c -55 +56 02 70 4c -19 +1a 00 d9 60 @@ -1315,11 +1315,11 @@ 20 40 07 -0e +12 68 00 cc -0f +10 1f e0 fe @@ -1327,7 +1327,7 @@ 60 00 cc -0f +10 20 40 00 @@ -1335,7 +1335,7 @@ 68 00 cc -20 +21 c0 ff 81 @@ -1351,11 +1351,11 @@ 60 02 4c -15 +16 60 00 cd -44 +45 20 60 00 @@ -1367,7 +1367,7 @@ d8 a0 4b -ac +ad 20 20 7e @@ -1387,7 +1387,7 @@ 68 02 4c -38 +39 98 00 12 @@ -1419,7 +1419,7 @@ 68 00 cc -3c +3d 24 7a 00 @@ -1427,7 +1427,7 @@ 68 01 4c -16 +17 1f e0 fe @@ -1435,11 +1435,11 @@ 60 01 4c -16 +17 68 00 cc -17 +18 c2 82 2d @@ -1447,7 +1447,7 @@ 68 00 cc -20 +21 c0 ff 81 @@ -1463,7 +1463,7 @@ 68 00 cc -16 +17 c1 ff 80 @@ -1475,7 +1475,7 @@ 60 01 4c -16 +17 20 20 2d @@ -1483,11 +1483,11 @@ 20 40 07 -35 +39 20 40 05 -de +e2 20 20 01 @@ -1495,7 +1495,7 @@ 68 00 cc -19 +1a 1f e6 7c @@ -1511,7 +1511,7 @@ 60 00 cc -19 +1a c0 03 00 @@ -1531,7 +1531,7 @@ 68 00 cc -0e +0f 20 7a 00 @@ -1543,11 +1543,11 @@ d8 c0 4b -8c +8d d8 a0 4b -ee +ef 20 20 7f @@ -1559,7 +1559,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -1567,7 +1567,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -1575,7 +1575,7 @@ 20 20 07 -6d +71 79 3f 80 @@ -1595,7 +1595,7 @@ 60 08 cc -10 +11 18 42 72 @@ -1603,7 +1603,7 @@ d8 a0 4b -ac +ad 20 20 2d @@ -1611,7 +1611,7 @@ 68 00 cb -8b +8c 1f e9 7e @@ -1619,7 +1619,7 @@ 60 00 cc -0e +0f 1f e0 fe @@ -1627,7 +1627,7 @@ d8 c0 4b -8b +8c 98 c0 8c @@ -1639,11 +1639,11 @@ 60 01 cc -4d +4e 68 00 cb -8b +8c 1f e3 7e @@ -1655,7 +1655,7 @@ 60 00 cc -53 +54 20 60 00 @@ -1663,7 +1663,7 @@ 60 02 4c -38 +39 da 20 00 @@ -1675,7 +1675,7 @@ d8 c0 4c -38 +39 e8 c0 80 @@ -1695,15 +1695,15 @@ 60 01 4c -c1 +c2 68 00 cc -c1 +c2 68 08 cc -c2 +c3 98 40 fe @@ -1711,7 +1711,7 @@ 60 00 cc -c3 +c4 20 60 00 @@ -1719,7 +1719,7 @@ 68 00 cc -10 +11 1f e0 fe @@ -1727,19 +1727,19 @@ 60 00 cc -12 +13 68 00 cc -11 +12 60 00 cb -cc +cd 68 00 cc -10 +11 1f e9 fe @@ -1747,7 +1747,7 @@ 68 08 cc -0f +10 18 41 04 @@ -1763,7 +1763,7 @@ 68 08 cc -4c +4d 98 40 fe @@ -1775,7 +1775,7 @@ 68 00 cc -10 +11 98 00 72 @@ -1783,7 +1783,7 @@ d8 c0 4b -ac +ad 20 20 7f @@ -1791,11 +1791,11 @@ 68 08 cc -1b +1c 68 00 cc -38 +39 1f e1 7e @@ -1807,7 +1807,7 @@ 58 00 4c -21 +22 9a 20 fe @@ -1823,7 +1823,7 @@ 60 00 cc -1a +1b 18 40 84 @@ -1835,7 +1835,7 @@ 60 08 cc -1b +1c 20 60 00 @@ -1847,7 +1847,7 @@ 68 00 cc -1a +1b 20 20 53 @@ -1879,7 +1879,7 @@ 68 01 4c -13 +14 98 00 36 @@ -1915,11 +1915,11 @@ 60 00 cc -c4 +c5 68 08 cc -c3 +c4 98 46 7c @@ -1935,15 +1935,15 @@ 60 00 cb -8a +8b 68 00 cb -8a +8b 68 08 cc -11 +12 a8 40 0e @@ -1995,7 +1995,7 @@ 60 00 cd -4b +4c 1a 22 0a @@ -2043,7 +2043,7 @@ 68 00 cd -4b +4c 1f e2 22 @@ -2051,11 +2051,11 @@ 68 08 cc -cb +cc 58 00 4c -d2 +d3 98 40 8a @@ -2079,7 +2079,7 @@ 60 08 cc -cb +cc 20 60 00 @@ -2115,7 +2115,7 @@ 68 02 4c -38 +39 98 00 12 @@ -2131,7 +2131,7 @@ 68 08 cc -1a +1b 20 40 29 @@ -2187,7 +2187,7 @@ 68 00 cc -c3 +c4 08 00 86 @@ -2195,7 +2195,7 @@ 68 00 cc -12 +13 98 00 72 @@ -2203,7 +2203,7 @@ d8 c0 4b -cc +cd e8 c0 80 @@ -2235,7 +2235,7 @@ 68 0a 4c -31 +32 1c 42 7e @@ -2255,11 +2255,11 @@ 68 02 4c -31 +32 68 08 cc -35 +36 98 40 84 @@ -2283,7 +2283,7 @@ 60 02 4c -31 +32 20 20 7f @@ -2411,7 +2411,7 @@ 68 00 cd -50 +51 c0 00 ff @@ -2427,7 +2427,7 @@ 20 40 05 -2b +2f 20 40 02 @@ -2567,7 +2567,7 @@ 20 40 05 -60 +64 c0 02 82 @@ -2579,11 +2579,11 @@ 20 20 07 -6d +71 68 00 cc -c7 +c8 60 00 c1 @@ -2659,7 +2659,7 @@ 20 40 05 -9b +9f 20 20 7d @@ -2731,7 +2731,7 @@ 20 20 07 -6d +71 70 47 9c @@ -2827,7 +2827,7 @@ 20 20 05 -2d +31 68 00 c6 @@ -2839,7 +2839,7 @@ 20 20 05 -2d +31 ea 61 00 @@ -2923,7 +2923,7 @@ 20 20 07 -6d +71 68 08 cb @@ -3091,7 +3091,7 @@ da 20 4c -38 +39 da 40 00 @@ -3231,11 +3231,11 @@ 20 40 05 -94 +98 20 40 05 -8d +91 68 00 c7 @@ -3263,7 +3263,7 @@ 60 02 4c -38 +39 20 20 02 @@ -3279,7 +3279,7 @@ 60 02 4c -38 +39 20 60 00 @@ -3331,7 +3331,7 @@ 20 40 04 -e1 +e5 20 40 03 @@ -3347,7 +3347,7 @@ 20 20 07 -6d +71 df 20 00 @@ -3355,7 +3355,7 @@ d8 c0 4c -38 +39 20 40 7f @@ -3398,7 +3398,7 @@ 00 70 4d -50 +51 01 58 00 @@ -3407,7 +3407,7 @@ 60 01 4d -51 +52 20 60 00 @@ -3878,12 +3878,8 @@ 34 20 40 -03 -cb -20 -40 04 -22 +26 20 20 3e @@ -3891,15 +3887,27 @@ 20 40 05 -60 +64 c0 -03 -03 -ce +01 +83 +cd 20 20 3d 62 +da +60 +4b +8a +da +40 +03 +d0 +20 +20 +33 +6d 68 00 c6 @@ -3912,6 +3920,10 @@ 46 b6 00 +70 +4b +8a +28 68 00 c7 @@ -3939,11 +3951,11 @@ 20 40 04 -ed +f1 20 40 -3d -7e +05 +31 20 20 02 @@ -3955,35 +3967,35 @@ c0 0a 03 -ec +ef c0 0a 83 -ee +f1 c0 14 83 -f0 +f3 c0 19 03 -f2 +f5 c0 20 03 -f4 +f7 c0 02 03 -f6 +f9 c0 09 83 -f6 +f9 c0 13 83 -f8 +fb c0 0c b3 @@ -3991,31 +4003,31 @@ c0 10 83 -fa +fd c0 00 83 -fc +ff c0 01 04 -04 +07 c0 15 84 -06 +09 c0 1c 84 -08 +0b c0 1d 04 -0a +0d c0 1e 04 -0c +0f 20 20 41 @@ -4027,7 +4039,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -4035,7 +4047,7 @@ 20 20 07 -6d +71 70 0a 99 @@ -4051,7 +4063,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -4059,7 +4071,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -4067,7 +4079,7 @@ 20 20 07 -6d +71 20 40 43 @@ -4083,7 +4095,7 @@ 20 20 07 -6d +71 68 01 42 @@ -4103,11 +4115,11 @@ 20 40 04 -9c +a0 20 40 04 -cf +d3 70 48 09 @@ -4123,7 +4135,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -4131,7 +4143,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -4139,7 +4151,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -4147,7 +4159,7 @@ 20 20 07 -6d +71 70 4b 64 @@ -4155,7 +4167,7 @@ 20 40 04 -9c +a0 20 40 02 @@ -4171,31 +4183,35 @@ 20 20 07 -6d +71 20 40 04 -f0 +f4 20 40 05 -1c +20 +20 +40 +03 +ca 20 40 04 -9f +a3 20 40 04 -6f +73 20 40 04 -8e +92 20 40 04 -74 +78 20 40 42 @@ -4203,27 +4219,27 @@ 20 40 04 -68 +6c 20 40 04 -54 +58 20 40 04 -51 +55 20 40 04 -5a +5e 20 40 04 -60 +64 20 40 04 -49 +4d 20 40 42 @@ -4231,7 +4247,7 @@ 20 40 04 -4c +50 20 20 42 @@ -4255,7 +4271,7 @@ 20 20 84 -3b +3f 68 00 c6 @@ -4279,11 +4295,11 @@ 20 3a 04 -39 +3d 20 40 04 -32 +36 70 41 bd @@ -4343,7 +4359,7 @@ c2 85 84 -3e +42 70 4b 24 @@ -4411,7 +4427,7 @@ da 40 04 -4f +53 20 20 33 @@ -4443,7 +4459,7 @@ da 40 04 -57 +5b 20 20 33 @@ -4467,7 +4483,7 @@ da 40 04 -5d +61 20 20 33 @@ -4483,7 +4499,7 @@ 20 20 04 -6d +71 68 00 cb @@ -4499,7 +4515,7 @@ da 40 04 -65 +69 20 20 33 @@ -4523,7 +4539,7 @@ da 40 04 -6b +6f 20 20 33 @@ -4535,7 +4551,7 @@ 60 01 cc -3f +40 70 4b 5d @@ -4551,7 +4567,7 @@ da 40 04 -72 +76 20 20 33 @@ -4583,7 +4599,7 @@ 20 20 84 -7c +80 20 40 43 @@ -4603,7 +4619,7 @@ 20 40 04 -7f +83 20 20 43 @@ -4615,7 +4631,7 @@ da 40 04 -82 +86 20 20 33 @@ -4691,7 +4707,7 @@ 20 3a 04 -97 +9b 1f e0 ff @@ -4751,11 +4767,11 @@ c0 00 04 -a5 +a9 c0 00 84 -af +b3 20 60 00 @@ -4763,7 +4779,7 @@ 20 40 04 -bf +c3 68 00 cb @@ -4787,7 +4803,7 @@ 20 42 84 -ad +b1 20 60 00 @@ -4799,7 +4815,7 @@ 20 20 04 -d5 +d9 68 00 cb @@ -4831,7 +4847,7 @@ 20 3a 04 -bb +bf 68 00 cb @@ -4839,7 +4855,7 @@ 20 3a 04 -d3 +d7 1f e0 ff @@ -4855,11 +4871,11 @@ c0 00 84 -d5 +d9 c0 00 04 -bf +c3 20 60 00 @@ -4875,7 +4891,7 @@ c0 01 04 -c6 +ca 68 08 cb @@ -4959,7 +4975,7 @@ 24 3a 04 -d9 +dd 70 4b 24 @@ -5059,7 +5075,7 @@ 20 20 04 -e9 +ed 68 01 4b @@ -5119,7 +5135,7 @@ 24 41 05 -0c +10 60 01 47 @@ -5131,7 +5147,7 @@ 20 40 05 -0f +13 68 00 c2 @@ -5143,7 +5159,7 @@ c3 00 05 -07 +0b 70 4a fd @@ -5171,7 +5187,7 @@ 20 20 04 -db +df d8 40 00 @@ -5275,7 +5291,7 @@ c0 02 84 -ca +ce 1f e6 7c @@ -5283,7 +5299,7 @@ 24 21 05 -29 +2d 20 60 00 @@ -5295,7 +5311,7 @@ 20 20 04 -d5 +d9 68 00 ca @@ -5311,15 +5327,15 @@ c0 01 05 -4a +4e c0 03 05 -3a +3e c0 03 85 -42 +46 68 00 c7 @@ -5327,7 +5343,7 @@ 20 5a 05 -40 +44 68 00 c7 @@ -5335,7 +5351,7 @@ c0 00 85 -37 +3b c0 01 bd @@ -5363,7 +5379,7 @@ 20 5a 05 -40 +44 68 00 c7 @@ -5371,7 +5387,7 @@ c0 00 85 -48 +4c c0 01 bd @@ -5395,7 +5411,7 @@ 20 5a 05 -40 +44 68 00 c7 @@ -5403,7 +5419,7 @@ c0 00 85 -48 +4c c0 01 bd @@ -5427,7 +5443,7 @@ 20 5a 05 -40 +44 68 00 c7 @@ -5439,7 +5455,7 @@ c0 01 85 -50 +54 20 20 3d @@ -5467,7 +5483,7 @@ 20 40 05 -81 +85 20 40 40 @@ -5475,15 +5491,15 @@ 20 40 05 -5e +62 24 34 05 -5b +5f 20 40 07 -8e +92 20 20 3f @@ -5491,7 +5507,7 @@ 20 40 07 -97 +9b 70 4b 36 @@ -5503,7 +5519,7 @@ 20 40 05 -60 +64 20 20 40 @@ -5515,7 +5531,7 @@ 20 40 05 -63 +67 20 20 40 @@ -5527,7 +5543,7 @@ 20 40 05 -7c +80 68 08 c6 @@ -5547,7 +5563,7 @@ 20 40 05 -7c +80 68 08 c6 @@ -5567,7 +5583,7 @@ 20 40 05 -73 +77 68 08 c6 @@ -5583,7 +5599,7 @@ 20 20 05 -7c +80 79 3f 84 @@ -5639,7 +5655,7 @@ 20 20 05 -77 +7b 68 00 c6 @@ -5659,7 +5675,7 @@ 20 40 04 -9c +a0 28 0f fe @@ -5679,7 +5695,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -5687,7 +5703,7 @@ 20 20 07 -6d +71 20 40 03 @@ -5799,7 +5815,7 @@ 20 20 04 -cf +d3 68 00 c5 @@ -5827,7 +5843,7 @@ 20 40 07 -12 +16 20 20 53 @@ -5875,7 +5891,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -5883,7 +5899,7 @@ 20 20 07 -6d +71 68 00 84 @@ -5891,11 +5907,11 @@ c2 82 85 -dd +e1 20 40 07 -0e +12 68 00 c7 @@ -5903,7 +5919,7 @@ 24 3a 05 -c8 +cc 68 00 84 @@ -5911,7 +5927,7 @@ c3 02 05 -cc +d0 68 00 82 @@ -5919,7 +5935,7 @@ 20 3a 05 -cc +d0 20 20 56 @@ -5947,7 +5963,7 @@ c0 82 85 -cf +d3 70 47 8e @@ -6011,11 +6027,11 @@ 20 40 05 -d2 +d6 68 00 cd -49 +4a 1f e6 7c @@ -6023,11 +6039,11 @@ 24 41 05 -e6 +ea 68 00 cd -49 +4a c1 00 00 @@ -6039,14 +6055,14 @@ 60 00 cd -49 +4a 20 60 00 00 70 4d -49 +4a 03 20 60 @@ -6134,8 +6150,8 @@ 0c c0 01 -85 -fe +86 +02 20 20 56 @@ -6147,7 +6163,7 @@ c0 00 86 -01 +05 20 20 5c @@ -6179,11 +6195,11 @@ c0 02 06 -0a +0e c0 03 06 -36 +3a 20 20 56 @@ -6195,7 +6211,7 @@ 20 40 05 -e8 +ec 20 40 7e @@ -6211,7 +6227,7 @@ c0 08 06 -19 +1d 1f ec 84 @@ -6223,7 +6239,7 @@ 20 21 06 -27 +2b d8 40 47 @@ -6307,7 +6323,7 @@ c0 05 06 -29 +2d 20 20 58 @@ -6323,7 +6339,7 @@ c2 81 86 -30 +34 68 01 04 @@ -6351,7 +6367,7 @@ 24 22 86 -2c +30 20 40 5a @@ -6359,7 +6375,7 @@ 24 34 06 -2c +30 20 20 59 @@ -6371,7 +6387,7 @@ c0 00 86 -39 +3d 20 20 5a @@ -6423,7 +6439,7 @@ 20 37 06 -46 +4a 24 36 d8 @@ -6519,7 +6535,7 @@ 20 40 06 -60 +64 60 18 80 @@ -6559,7 +6575,7 @@ 20 20 07 -6d +71 20 40 21 @@ -6595,7 +6611,7 @@ c5 05 86 -74 +78 20 40 24 @@ -6603,11 +6619,11 @@ 24 3a 06 -6d +71 c5 16 86 -7d +81 20 20 21 @@ -6647,7 +6663,7 @@ 20 20 06 -6d +71 68 02 01 @@ -6711,7 +6727,7 @@ 20 40 86 -8e +92 20 20 24 @@ -6727,15 +6743,15 @@ 20 40 85 -de +e2 24 40 87 -0e +12 20 20 07 -12 +16 20 40 24 @@ -6787,7 +6803,7 @@ 20 3a 06 -a2 +a6 68 00 c5 @@ -6895,7 +6911,7 @@ 20 5a 06 -bc +c0 20 20 2b @@ -6919,7 +6935,7 @@ 20 20 07 -6d +71 70 11 c5 @@ -6927,7 +6943,7 @@ 20 20 07 -6d +71 68 00 85 @@ -6939,7 +6955,7 @@ c0 09 86 -c7 +cb 20 20 5d @@ -6975,7 +6991,7 @@ 20 20 07 -6d +71 20 40 62 @@ -6995,11 +7011,11 @@ c0 02 06 -f1 +f5 c0 08 06 -d6 +da 20 20 63 @@ -7015,7 +7031,7 @@ c0 00 86 -da +de 20 20 63 @@ -7031,7 +7047,7 @@ c2 80 06 -de +e2 20 20 63 @@ -7099,7 +7115,7 @@ 24 21 06 -ef +f3 20 20 63 @@ -7139,15 +7155,15 @@ c0 0f 86 -fb +ff c0 10 -06 -fe +07 +02 c0 09 07 -08 +0c 20 20 7d @@ -7163,7 +7179,7 @@ 20 20 07 -00 +04 70 01 85 @@ -7218,11 +7234,11 @@ bf 70 4d -4c +4d 01 70 4d -49 +4a 00 20 60 @@ -7231,7 +7247,7 @@ 68 00 cd -49 +4a 1f e0 fe @@ -7239,7 +7255,7 @@ 60 00 cd -49 +4a 20 60 00 @@ -7263,7 +7279,7 @@ da 20 4c -d2 +d3 20 40 02 @@ -7271,7 +7287,7 @@ 60 08 cd -4a +4b 58 00 00 @@ -7279,7 +7295,7 @@ c5 13 07 -1c +20 58 00 00 @@ -7291,11 +7307,11 @@ 24 21 07 -34 +38 68 00 cd -49 +4a 1f e6 7c @@ -7303,15 +7319,15 @@ 24 21 07 -24 +28 68 00 cd -49 +4a c0 00 07 -35 +39 20 60 00 @@ -7319,19 +7335,19 @@ 68 00 cd -49 +4a c1 90 00 00 70 4d -49 +4a 00 68 08 cd -4a +4b 58 00 00 @@ -7339,7 +7355,7 @@ c5 13 07 -2b +2f 58 00 00 @@ -7355,11 +7371,11 @@ 68 00 cd -4c +4d c0 00 07 -3c +40 1f e0 ff @@ -7367,11 +7383,11 @@ 60 00 cd -4c +4d c0 00 07 -3c +40 70 41 de @@ -7382,16 +7398,16 @@ 00 70 4d -49 +4a 00 68 00 cd -4c +4d c0 01 07 -3a +3e 1f e0 fe @@ -7399,11 +7415,11 @@ 60 00 cd -4c +4d c0 00 87 -32 +36 70 41 de @@ -7487,19 +7503,19 @@ c0 01 07 -56 +5a c0 02 07 -5e +62 c0 10 07 -68 +6c 20 40 07 -63 +67 70 89 55 @@ -7551,7 +7567,7 @@ 20 40 07 -63 +67 70 89 55 @@ -7627,7 +7643,7 @@ 20 22 87 -8c +90 60 08 cb @@ -7703,7 +7719,7 @@ 24 22 87 -7d +81 20 40 03 @@ -7751,7 +7767,7 @@ 20 40 07 -e1 +e5 58 00 00 @@ -7759,7 +7775,7 @@ 20 40 07 -d4 +d8 58 00 00 @@ -7767,7 +7783,7 @@ 20 40 07 -da +de 68 00 cb @@ -7775,7 +7791,7 @@ c0 00 87 -9a +9e df 20 00 @@ -7807,7 +7823,7 @@ 20 40 07 -ad +b1 68 01 11 @@ -7843,7 +7859,7 @@ 20 40 07 -ad +b1 68 01 11 @@ -7887,7 +7903,7 @@ 20 20 87 -ba +be 68 00 91 @@ -7895,7 +7911,7 @@ c0 7f 87 -c1 +c5 68 00 91 @@ -7923,7 +7939,7 @@ c0 00 07 -be +c2 68 01 91 @@ -7931,7 +7947,7 @@ 20 20 07 -b6 +ba 70 11 c4 @@ -7943,7 +7959,7 @@ 20 20 07 -b6 +ba 68 00 91 @@ -7951,7 +7967,7 @@ 20 40 07 -cc +d0 60 00 91 @@ -7963,7 +7979,7 @@ 20 3a 07 -ca +ce 58 00 00 @@ -7987,7 +8003,7 @@ 20 20 07 -c7 +cb 1f e6 7e @@ -8027,7 +8043,7 @@ 24 21 07 -df +e3 9a 46 7c @@ -8035,7 +8051,7 @@ 24 21 07 -df +e3 70 4b 0b @@ -8063,7 +8079,7 @@ 20 20 07 -d8 +dc 70 4b 0b @@ -8083,7 +8099,7 @@ 20 40 07 -ea +ee 1f e2 22 @@ -8099,7 +8115,7 @@ 20 40 07 -ea +ee 1f e2 24 @@ -8115,7 +8131,7 @@ c0 7f 87 -ef +f3 68 00 91 @@ -8139,9 +8155,9 @@ 20 20 07 -ed -56 -cd +f1 +4e +1c aa 55 03 @@ -8228,7 +8244,7 @@ 55 01 00 -4d +4e 4d 00 aa @@ -8733,6 +8749,13 @@ 00 aa 55 +01 +00 +8a +4b +28 +aa +55 06 00 09 @@ -8915,35 +8938,35 @@ 55 01 00 -56 +57 4c 01 aa 55 01 00 -11 +12 4c 01 aa 55 01 00 -55 +56 4c 06 aa 55 01 00 -4c +4d 4c 00 aa 55 02 00 -13 +14 4c c0 12 @@ -8951,7 +8974,7 @@ 55 03 00 -35 +36 4c 19 19 @@ -8960,7 +8983,7 @@ 55 10 00 -21 +22 4c 00 13 @@ -8982,14 +9005,14 @@ 55 01 00 -20 +21 4c ff aa 55 04 00 -1c +1d 4c 20 15 @@ -9015,7 +9038,7 @@ 55 03 00 -3f +40 4c 00 48 @@ -9183,8 +9206,8 @@ 00 50 4b -ea -2f +01 +30 00 ff 20 @@ -9250,7 +9273,7 @@ 20 40 04 -9c +a0 20 40 03 @@ -9318,7 +9341,7 @@ 20 40 03 -f0 +f3 70 46 c6 @@ -9477,7 +9500,7 @@ ce 70 4d -50 +51 00 20 40 @@ -9498,7 +9521,7 @@ 20 20 04 -99 +9d 68 01 45 @@ -9538,7 +9561,7 @@ 20 40 03 -f0 +f3 70 47 c4 @@ -9722,7 +9745,7 @@ 68 00 cc -15 +16 c0 00 ff @@ -9730,7 +9753,7 @@ 68 00 cc -20 +21 c0 00 80 @@ -9749,7 +9772,7 @@ 8c 70 4c -20 +21 11 70 11 @@ -9761,7 +9784,7 @@ 14 70 4c -20 +21 12 70 11 @@ -9773,7 +9796,7 @@ 14 70 4c -20 +21 13 70 11 @@ -9782,7 +9805,7 @@ 68 00 cc -11 +12 1f e1 7e @@ -9794,7 +9817,7 @@ 68 02 4c -47 +48 60 02 11 @@ -9826,11 +9849,11 @@ 20 40 07 -0b +0f 68 00 cc -20 +21 c1 7f 80 @@ -9853,7 +9876,7 @@ 00 70 4c -20 +21 02 20 20 @@ -9861,7 +9884,7 @@ 4f 70 4c -20 +21 03 20 20 @@ -9869,7 +9892,7 @@ 4f 70 4c -20 +21 ff 70 0a @@ -9882,7 +9905,7 @@ 68 02 4b -f0 +f1 20 40 01 @@ -9926,7 +9949,7 @@ 20 40 04 -9c +a0 20 40 02 @@ -9934,7 +9957,7 @@ 68 02 4c -38 +39 60 02 47 @@ -9994,7 +10017,7 @@ 60 02 4c -47 +48 20 40 3e @@ -10050,7 +10073,7 @@ 20 40 05 -89 +8d 20 40 03 @@ -10237,7 +10260,7 @@ 19 70 4c -3d +3e 00 20 00 @@ -10246,7 +10269,7 @@ 68 00 cc -3d +3e c0 7f ad @@ -10274,11 +10297,11 @@ 68 02 4c -38 +39 68 0a 4c -1c +1d 98 46 7c @@ -10298,7 +10321,7 @@ 60 01 4c -3d +3e 20 40 2f @@ -10318,7 +10341,7 @@ 68 00 cc -11 +12 60 00 91 @@ -10326,7 +10349,7 @@ 68 02 4c -47 +48 60 02 11 @@ -10350,7 +10373,7 @@ 68 00 cc -3d +3e 1f e0 fe @@ -10358,11 +10381,11 @@ 60 00 cc -3d +3e 68 00 cd -4e +4f 1f e0 fe @@ -10374,7 +10397,7 @@ 60 00 cd -4e +4f c0 00 00 @@ -10398,7 +10421,7 @@ 60 01 4c -38 +39 e0 a1 00 @@ -10437,7 +10460,7 @@ 3a 70 4c -20 +21 01 20 60 @@ -10449,16 +10472,16 @@ 20 70 4c -0f +10 00 70 4c -1a +1b 4e 68 02 4c -1c +1d 20 20 01 @@ -10498,7 +10521,7 @@ 68 00 cc -20 +21 c1 ff 80 @@ -10514,7 +10537,7 @@ 60 01 4c -3d +3e 20 00 07 @@ -10522,7 +10545,7 @@ 68 00 cc -3d +3e c0 7f ad @@ -10550,7 +10573,7 @@ 60 01 4c -3d +3e 20 40 2f @@ -10570,7 +10593,7 @@ 68 00 cc -11 +12 60 00 91 @@ -10578,7 +10601,7 @@ 68 02 4c -47 +48 60 02 11 @@ -10602,7 +10625,7 @@ 68 01 4c -3d +3e 1f e0 fe @@ -10610,7 +10633,7 @@ 60 01 4c -3d +3e 20 40 01 @@ -10666,7 +10689,7 @@ 60 01 4c -3d +3e 20 40 42 @@ -10685,7 +10708,7 @@ 38 70 4c -20 +21 01 20 60 @@ -10697,16 +10720,16 @@ 20 70 4c -0f +10 00 70 4c -1a +1b 4e 68 02 4c -1c +1d 20 20 01 @@ -10770,7 +10793,7 @@ 20 40 05 -8d +91 68 09 47 @@ -10878,7 +10901,7 @@ 20 20 04 -e6 +ea 70 47 9f @@ -10902,7 +10925,7 @@ 20 40 05 -9b +9f 20 20 7d @@ -11814,7 +11837,7 @@ c2 85 04 -27 +2b 20 20 41 @@ -11846,7 +11869,7 @@ c2 85 04 -27 +2b 20 40 33 @@ -11854,11 +11877,11 @@ 20 40 05 -60 +64 c0 02 84 -99 +9d 20 20 33 @@ -12090,7 +12113,7 @@ 20 40 04 -e1 +e5 68 00 c2 @@ -12106,7 +12129,7 @@ 20 20 04 -99 +9d 00 00 00 @@ -12263,5 +12286,5 @@ 55 00 00 -46 -0a +6a +61 Index: output/memmap.format =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/memmap.format (revision 5062) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/memmap.format (working copy) @@ -1825,120 +1825,121 @@ 0x4b6d mem_mouse_select_device_button_wakeup_flag 0x4b6e mem_firmware_version 0x4b70 mem_sensor_8650_init -0x4b8a mem_24g_rxbuf -0x4bac mem_24g_txbuf -0x4bcc mem_24g_txpayload -0x4bee mem_24g_rxpayload -0x4c0e mem_24g_rxdata_length -0x4c0f mem_24g_pid -0x4c10 mem_24g_datalen -0x4c11 mem_24g_data_type -0x4c12 mem_24g_txlen -0x4c13 mem_24g_rx_window -0x4c15 mem_24g_ensure -0x4c16 mem_24g_txfail_cnt -0x4c18 mem_24g_get_ack_fail -0x4c19 mem_24g_retry -0x4c1a mem_24g_ch -0x4c1b mem_24g_current_ch_number -0x4c1c mem_24g_paring_addr -0x4c20 mem_24g_pairing_sm -0x4c21 mem_24g_ch_map1 -0x4c25 mem_24g_ch_map2 -0x4c29 mem_24g_ch_map3 -0x4c2d mem_24g_ch_map4 -0x4c31 mem_24g_tx_btclk -0x4c35 mem_24g_interval -0x4c36 mem_24g_interval_min -0x4c37 mem_24g_interval_max -0x4c38 mem_24g_addr -0x4c3c mem_24g_abort_pac -0x4c3d mem_24g_check_dongle_times -0x4c3f mem_24g_enter_hibernate -0x4c47 mem_24g_device_addr -0x4c4b mem_24g_pac_index -0x4c4c mem_24g_no_ack -0x4c4d mem_24g_sta_crc -0x4c50 mem_24g_last_crc -0x4c53 mem_24g_sta_pid -0x4c54 mem_24g_last_pid -0x4c55 mem_24g_max_retry -0x4c56 mem_24g_mode -0x4c57 mem_24g_rxdata_temp -0x4c79 mem_24g_rx_addr -0x4c7d mem_dongle_mode_init -0x4c7e mem_dongle_work_mode -0x4c7f mem_dongle_ms_bind_step -0x4c80 mem_dongle_kb_bind_step -0x4c81 mem_dongle_bind_device_status -0x4c82 mem_24g_bind_payload -0x4c8a mem_24g_abort_packet -0x4c8b mem_24g_rf_laststa -0x4c8c mem_24g_hop_btclk -0x4c90 mem_24g_hop_interval -0x4c91 mem_24g_mode_switch -0x4c92 mem_24g_ackpayload_enable -0x4c93 mem_24g_hop_packet -0x4c94 mem_24g_pair_mode -0x4c95 mem_24g_nodata_timer_enable -0x4c96 mem_24g_time_slice -0x4c97 mem_24g_kb_data_sta_data -0x4c9f mem_24g_kb_data_last_data -0x4ca7 mem_24g_kb_multikey_sta_data -0x4caa mem_24g_kb_multikey_last_data -0x4cad mem_24g_kb_blank_data_enable -0x4cae mem_24g_kb_mul_blank_data_enable -0x4caf mem_24g_ms_blank_data_enable -0x4cb0 mem_24g_kb_addr -0x4cb4 mem_24g_ms_addr -0x4cb8 mem_24g_dg_last_ch -0x4cb9 mem_24g_dg_ch_number -0x4cba mem_24g_dg_config_ch_once -0x4cbb mem_24g_kb_last_ch -0x4cbc mem_24g_kb_ch_number -0x4cbd mem_24g_kb_config_ch_once -0x4cbe mem_24g_ms_last_ch -0x4cbf mem_24g_ms_ch_number -0x4cc0 mem_24g_ms_config_ch_once -0x4cc1 mem_24g_syncword -0x4cc3 mem_24g_syncword_crc8 -0x4cc4 mem_24g_get_syncword_crc8 -0x4cc5 mem_24g_ota_sta_pid -0x4cc7 mem_tx_power_temp -0x4cc8 mem_rssi_hex -0x4cc9 mem_rssi_noise_avg -0x4cca mem_rssi_noise_index -0x4ccb mem_rssi_signal_index -0x4ccc mem_rssi_noise_dg_avg -0x4ccd mem_rssi_noise_kb_avg -0x4cce mem_rssi_noise_ms_avg -0x4ccf mem_rssi_noise_dg_index -0x4cd0 mem_rssi_noise_kb_index -0x4cd1 mem_rssi_noise_ms_index -0x4cd2 mem_rssi_signal_buf -0x4cda mem_queue_ele_num -0x4cdb mem_queue_read -0x4cdd mem_queue_write -0x4cdf mem_queue_start -0x4cdf mem_data_ele0 -0x4cff mem_data_ele1 -0x4d1f mem_data_ele2 -0x4d3f mem_queue_end -0x4d3f mem_queue_temp -0x4d41 mem_cb_24g_data -0x4d43 mem_24g_hop_fastly_cnt -0x4d44 mem_24g_hop_pac_retry -0x4d45 mem_24g_rf_hop_ch -0x4d46 mem_24g_rf_last_sta -0x4d47 mem_24g_rf_work_stage -0x4d48 mem_24g_sync_cnt -0x4d49 mem_power_ctrl_pac_succ_cnt -0x4d4a mem_rssi_avg_received -0x4d4b mem_rssi_hex_received -0x4d4c mem_power_ctrl_level -0x4d4d mem_seqi -0x4d4e mem_24g_auto_paring_switch -0x4d4f mem_24g_paccnt -0x4d50 mem_24g_transmit_by_interrupt -0x4d51 mem_24g_transmit_by_interrupt_exit_count -0x4d53 mem_24g_transmit_by_interrupt_exit_count_init +0x4b8a mem_mouse_dpi_time_count +0x4b8b mem_24g_rxbuf +0x4bad mem_24g_txbuf +0x4bcd mem_24g_txpayload +0x4bef mem_24g_rxpayload +0x4c0f mem_24g_rxdata_length +0x4c10 mem_24g_pid +0x4c11 mem_24g_datalen +0x4c12 mem_24g_data_type +0x4c13 mem_24g_txlen +0x4c14 mem_24g_rx_window +0x4c16 mem_24g_ensure +0x4c17 mem_24g_txfail_cnt +0x4c19 mem_24g_get_ack_fail +0x4c1a mem_24g_retry +0x4c1b mem_24g_ch +0x4c1c mem_24g_current_ch_number +0x4c1d mem_24g_paring_addr +0x4c21 mem_24g_pairing_sm +0x4c22 mem_24g_ch_map1 +0x4c26 mem_24g_ch_map2 +0x4c2a mem_24g_ch_map3 +0x4c2e mem_24g_ch_map4 +0x4c32 mem_24g_tx_btclk +0x4c36 mem_24g_interval +0x4c37 mem_24g_interval_min +0x4c38 mem_24g_interval_max +0x4c39 mem_24g_addr +0x4c3d mem_24g_abort_pac +0x4c3e mem_24g_check_dongle_times +0x4c40 mem_24g_enter_hibernate +0x4c48 mem_24g_device_addr +0x4c4c mem_24g_pac_index +0x4c4d mem_24g_no_ack +0x4c4e mem_24g_sta_crc +0x4c51 mem_24g_last_crc +0x4c54 mem_24g_sta_pid +0x4c55 mem_24g_last_pid +0x4c56 mem_24g_max_retry +0x4c57 mem_24g_mode +0x4c58 mem_24g_rxdata_temp +0x4c7a mem_24g_rx_addr +0x4c7e mem_dongle_mode_init +0x4c7f mem_dongle_work_mode +0x4c80 mem_dongle_ms_bind_step +0x4c81 mem_dongle_kb_bind_step +0x4c82 mem_dongle_bind_device_status +0x4c83 mem_24g_bind_payload +0x4c8b mem_24g_abort_packet +0x4c8c mem_24g_rf_laststa +0x4c8d mem_24g_hop_btclk +0x4c91 mem_24g_hop_interval +0x4c92 mem_24g_mode_switch +0x4c93 mem_24g_ackpayload_enable +0x4c94 mem_24g_hop_packet +0x4c95 mem_24g_pair_mode +0x4c96 mem_24g_nodata_timer_enable +0x4c97 mem_24g_time_slice +0x4c98 mem_24g_kb_data_sta_data +0x4ca0 mem_24g_kb_data_last_data +0x4ca8 mem_24g_kb_multikey_sta_data +0x4cab mem_24g_kb_multikey_last_data +0x4cae mem_24g_kb_blank_data_enable +0x4caf mem_24g_kb_mul_blank_data_enable +0x4cb0 mem_24g_ms_blank_data_enable +0x4cb1 mem_24g_kb_addr +0x4cb5 mem_24g_ms_addr +0x4cb9 mem_24g_dg_last_ch +0x4cba mem_24g_dg_ch_number +0x4cbb mem_24g_dg_config_ch_once +0x4cbc mem_24g_kb_last_ch +0x4cbd mem_24g_kb_ch_number +0x4cbe mem_24g_kb_config_ch_once +0x4cbf mem_24g_ms_last_ch +0x4cc0 mem_24g_ms_ch_number +0x4cc1 mem_24g_ms_config_ch_once +0x4cc2 mem_24g_syncword +0x4cc4 mem_24g_syncword_crc8 +0x4cc5 mem_24g_get_syncword_crc8 +0x4cc6 mem_24g_ota_sta_pid +0x4cc8 mem_tx_power_temp +0x4cc9 mem_rssi_hex +0x4cca mem_rssi_noise_avg +0x4ccb mem_rssi_noise_index +0x4ccc mem_rssi_signal_index +0x4ccd mem_rssi_noise_dg_avg +0x4cce mem_rssi_noise_kb_avg +0x4ccf mem_rssi_noise_ms_avg +0x4cd0 mem_rssi_noise_dg_index +0x4cd1 mem_rssi_noise_kb_index +0x4cd2 mem_rssi_noise_ms_index +0x4cd3 mem_rssi_signal_buf +0x4cdb mem_queue_ele_num +0x4cdc mem_queue_read +0x4cde mem_queue_write +0x4ce0 mem_queue_start +0x4ce0 mem_data_ele0 +0x4d00 mem_data_ele1 +0x4d20 mem_data_ele2 +0x4d40 mem_queue_end +0x4d40 mem_queue_temp +0x4d42 mem_cb_24g_data +0x4d44 mem_24g_hop_fastly_cnt +0x4d45 mem_24g_hop_pac_retry +0x4d46 mem_24g_rf_hop_ch +0x4d47 mem_24g_rf_last_sta +0x4d48 mem_24g_rf_work_stage +0x4d49 mem_24g_sync_cnt +0x4d4a mem_power_ctrl_pac_succ_cnt +0x4d4b mem_rssi_avg_received +0x4d4c mem_rssi_hex_received +0x4d4d mem_power_ctrl_level +0x4d4e mem_seqi +0x4d4f mem_24g_auto_paring_switch +0x4d50 mem_24g_paccnt +0x4d51 mem_24g_transmit_by_interrupt +0x4d52 mem_24g_transmit_by_interrupt_exit_count +0x4d54 mem_24g_transmit_by_interrupt_exit_count_init Index: output/program.lis =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/program.lis (nonexistent) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/program.lis (working copy) @@ -0,0 +1,36219 @@ + include "bt_format " + org 0x0000 + +p_start: +0000 20200041 branch p_patch_array + +p_zcode: + +p_wake_from_power: +0001 20400387 call p_mouse_data_init +0002 6800c1de fetch 1 ,mem_tx_power +0003 6000ccc8 store 1 ,mem_tx_power_temp +0004 2040070f call power_ctrl_pac_succ_cnt_init +0005 6800c685 fetch 1 ,mem_ui_button_timeout +0006 6000c6da store 1 ,mem_combination_ui_button_count +0007 6800cb30 fetch 1 ,mem_bt_ui_button_timeout +0008 6000cb31 store 1 ,mem_bt_ui_button_count +0009 204043ca call mouse_bt_discovery_button_down_disable +000a 20400300 call p_mouse_spi_init +000b 2040079b call p_drawing_optima_init +000c 2040000f call p_mouse_cb_fuction +000d 20400022 call p_mouse_wakeup_from_power +000e 202002d8 branch p_mouse_setting_config + +p_mouse_cb_fuction: +000f 5800034d setarg p_mouse_g24_package_data +0010 60014d42 store 2 ,mem_cb_24g_data +0011 58000367 setarg p_mouse_le +0012 600141ef store 2 ,mem_cb_le_process +0013 58000651 setarg p_le_mouse_bb_event_connect_complete +0014 600141f9 store 2 ,mem_cb_att_write +0015 580003a2 setarg p_mouse_bt +0016 600141f1 store 2 ,mem_cb_bt_process +0017 58000249 setarg p_mouse_before_lpm +0018 600141ed store 2 ,mem_cb_before_lpm +0019 580003dd setarg p_mouse_priority_bb_event +001a 600141f5 store 2 ,mem_cb_bb_event_process +001b 580003c7 setarg p_mouse_idle +001c 600141f3 store 2 ,mem_cb_idle_process +001d 58000413 setarg p_mouse_before_hibernate +001e 600141eb store 2 ,mem_cb_before_hibernate +001f 58000415 setarg p_mouse_bb_event_timer +0020 600141fd store 2 ,mem_cb_event_timer +0021 20600000 rtn + +p_mouse_wakeup_from_power: +0022 58000019 setarg 25 +0023 60014d54 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +0024 2455802a ncall p_mouse_24g_transmit_by_interrupt_exit_count_max ,wake +0025 204002ad call p_mouse_init_sunt +0026 204002d1 call p_mouse_sensor_powerdown + +p_mouse_wakeup_no_from_power: +0027 6800c71f fetch 1 ,mem_reconn_times_init +0028 6000c71e store 1 ,mem_reconn_times +0029 20600000 rtn + +p_mouse_24g_transmit_by_interrupt_exit_count_max: +002a 58000177 setarg 375 +002b 60014d54 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +002c 20600000 rtn +002d 20000001 nop 1 +002e 20000001 nop 1 +002f 20000001 nop 1 +0030 20000001 nop 1 +0031 20000001 nop 1 +0032 20000001 nop 1 +0033 20000001 nop 1 +0034 20000001 nop 1 +0035 20000001 nop 1 +0036 20000001 nop 1 +0037 20000001 nop 1 +0038 20000001 nop 1 +0039 20000001 nop 1 +003a 20000001 nop 1 +003b 20000001 nop 1 +003c 20000001 nop 1 +003d 20000001 nop 1 +003e 20000001 nop 1 +003f 20000001 nop 1 +0040 20000001 nop 1 + +p_patch_array: +0041 c284005a bbit1 8 ,pf_patch_ext +0042 c000806c beq patch00_1 ,p_soft_reset_1 +0043 c0010076 beq patch00_2 ,p_soft_reset_2 +0044 c042876f beq patch10_5 ,p_shutdown_radio +0045 c0448742 beq patch11_1 ,p_set_freq_tx +0046 c00d8669 beq patch03_3 ,p_page_wait_fhs_reply_ok +0047 c013066b beq patch04_6 ,p_role_switch_master +0048 c0240687 beq patch09_0 ,p_quit_connection_cont +0049 c025068e beq patch09_2 ,p_prepare_tx +004a c0288697 beq patch0a_1 ,p_slave_conn_recv_packet +004b c02c8685 beq patch0b_1 ,p_process_dmh +004c c053869c beq patch14_7 ,p_lpm_dispatch +004d c05686b2 beq patch15_5 ,p_lpm_set_mult +004e c065b3e4 beq patch19_3 ,app_bt_start_reconnect + 3 +004f c07486c3 beq patch1d_1 ,p_mouse_bb_disconnected +0050 c050807f beq patch14_1 ,p_init_param +0051 c0588084 beq patch16_1 ,p_lpm_check_wake_lock +0052 c0590096 beq patch16_2 ,p_g24_dispatch +0053 c0620275 beq patch18_4 ,p_device_init +0054 c0718531 beq patch1c_3 ,p_mouse_seting_dpi +0055 c0730556 beq patch1c_6 ,p_mouse_motion +0056 c0750589 beq patch1d_2 ,p_mouse_bb_event_discovery_btn +0057 c075858f beq patch1d_3 ,p_mouse_start_discovery +0058 c07605a3 beq patch1d_4 ,p_mouse_stop_discovery +0059 20202a8e branch loop + +pf_patch_ext: +005a c01c85ad beq patch27_1 ,p_le_slave_match +005b c02185b5 beq patch28_3 ,p_le_next_adv_channel +005c c02505bb beq patch29_2 ,p_le_receive_skip +005d c02b85be beq patch2a_7 ,p_le_update_param +005e c02c85c0 beq patch2b_1 ,p_le_update_channel_map +005f c03185c2 beq patch2c_3 ,p_le_prepare_tx +0060 c03305f3 beq patch2c_6 ,p_le_parse +0061 c033860a beq patch2c_7 ,p_le_parse_l2cap +0062 c035063f beq patch2d_2 ,p_le_adv_not_match +0063 c03b8647 beq patch2e_7 ,p_le_lpm_setmult +0064 c00286c5 beq patch20_5 ,p_hid_rx_process +0065 c04006c7 beq patch30_0 ,p_parse_lmp_accepted +0066 c04106d1 beq patch30_2 ,p_send_lmp +0067 c04406d3 beq patch31_0 ,p_process_conn_sm +0068 c0460657 beq patch31_4 ,p_twspi_reset +0069 c0468663 beq patch31_5 ,p_spid_init +006a c07d06f7 beq patch3f_2 ,p_check_51cmd_once_continue +006b 20202a8e branch loop + +p_soft_reset_1: +006c d8a009ae arg mem_sp_state ,contw +006d df20000c arg 12 ,loopcnt +006e 20407ed4 call clear_mem +006f 2040035e call p_mouse_le_txbuff_load +0070 204074c1 call init_memp +0071 20406a03 call rfcomm_init +0072 20405cf6 call init_lmp +0073 2455ac65 ncall lpm_disable_exen_output ,wake +0074 20407ccd call ui_init + 1 +0075 2020200c branch soft_reset + 11 + +p_soft_reset_2: +0076 2055b2e3 call app_lpm_init ,wake +0077 2040756a call publickey_init +0078 2055ab41 call lpm_recover_clk ,wake + +p_sp_cal_loop: +0079 204076dc call sp_calc_sequence +007a 6800c65a fetch 1 ,mem_ssp_enable +007b 203a2012 branch main_loop ,blank +007c 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +007d 203a0079 branch p_sp_cal_loop ,blank +007e 20202012 branch main_loop + +p_init_param: +007f 58000a06 setarg param_le_version +0080 6001c510 store 3 ,mem_lmp_version +0081 58001d87 setarg param_le_subversion +0082 60014513 store 2 ,mem_lmp_version + 3 +0083 20202aa2 branch init_param + 12 + +p_lpm_check_wake_lock: +0084 c6130000 rtnmark1 mark_24g +0085 6800cb26 fetch 1 ,mem_mouse_multi_led_state +0086 243a7fef nbranch disable_blank ,blank +0087 6800cb2b fetch 1 ,mem_mouse_multi_led_blink_count +0088 243a7fef nbranch disable_blank ,blank +0089 6800c79c fetch 1 ,mem_mouse_clear_sensor_data_flag +008a 203a7fef branch disable_blank ,blank +008b 6800c7c4 fetch 1 ,mem_mouse_le_conn_param_reject +008c c000ffef beq le_lpm_disable ,disable_blank +008d 6800c6d9 fetch 1 ,mem_select_device_button_statue +008e c0007fef beq dpi_button_state_down ,disable_blank +008f 68014248 fetch 2 ,mem_sdp_remote_cid +0090 243a7fef nbranch disable_blank ,blank +0091 6800c806 fetch 1 ,mem_mouse_wheel_trigger +0092 243a7fef nbranch disable_blank ,blank +0093 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0094 c2827fef bbit1 mouse_low_voltage_flag ,disable_blank +0095 20207ff1 branch enable_blank + +p_g24_dispatch: +0096 c6930000 rtnmark0 mark_24g +0097 6800cd51 fetch 1 ,mem_24g_transmit_by_interrupt +0098 c00080aa beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt + +p_g24_transmit_process: +0099 20400114 call p_g24_txdata_prep +009a 243400c5 nbranch p_g24_nodata_transmit ,user +009b 204000fb call p_g24_rf_sta_check + +p_g24_transmit_start: +009c 2040013f call p_g24_transmit_packet +009d 6800cc21 fetch 1 ,mem_24g_pairing_sm +009e c1ff8000 rtnne state_24g_pairing_success +009f 20400716 call power_ctrl_start +00a0 58017700 setarg g24_long_sleep_step1 +00a1 6001cc40 store 3 ,mem_24g_enter_hibernate +00a2 704b5f14 jam 20 ,mem_24g_long_sleep_param_update_timer +00a3 6800cb26 fetch 1 ,mem_mouse_multi_led_state +00a4 c0008350 beq on ,p_g24_transmit_by_interrupt_enable + +p_g24_short_sleep: +00a5 20400253 call p_g24_lpm_wait +00a6 24740000 nrtn user +00a7 20400250 call p_clear_wake +00a8 5800ec54 setarg 60500 +00a9 20202b93 branch lpm_dispatch_sleep + +p_g24_transmit_by_interrupt: +00aa 2040022c call p_g24_timer_check +00ab 24740000 nrtn user +00ac 204000bf call p_g24_interval_calibrate +00ad 68014d52 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +00ae 1fe0fe01 increase 1 ,pdata +00af 60014d52 store 2 ,mem_24g_transmit_by_interrupt_exit_count +00b0 68094d54 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init +00b1 98467c00 isub temp ,null +00b2 204280b4 call p_g24_transmit_by_interrupt_exit ,zero +00b3 20200099 branch p_g24_transmit_process + +p_g24_transmit_by_interrupt_exit: +00b4 704d5100 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +00b5 58000000 setarg 0 +00b6 60014d52 store 2 ,mem_24g_transmit_by_interrupt_exit_count +00b7 58000019 setarg 25 +00b8 60014d54 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init + +p_g24_interval_min: +00b9 704c4c00 jam 0 ,mem_24g_pac_index +00ba 6800cc37 fetch 1 ,mem_24g_interval_min + +p_g24_current_interval_store: +00bb 6000cc36 store 1 ,mem_24g_interval +00bc 20600000 rtn + +p_g24_interval_max: +00bd 6800cc38 fetch 1 ,mem_24g_interval_max +00be 202000bb branch p_g24_current_interval_store + +p_g24_interval_calibrate: +00bf 6800cc4c fetch 1 ,mem_24g_pac_index +00c0 1fe0fe01 increase 1 ,pdata +00c1 6000cc4c store 1 ,mem_24g_pac_index +00c2 c00200bd beq 4 ,p_g24_interval_max +00c3 c00280b9 beq 5 ,p_g24_interval_min +00c4 20600000 rtn + +p_g24_nodata_transmit: +00c5 6800cc3d fetch 1 ,mem_24g_abort_pac +00c6 205a00cf call p_g24_send_abort_packet ,blank +00c7 6800cb2b fetch 1 ,mem_mouse_multi_led_blink_count +00c8 247a0000 nrtn blank +00c9 6800cb26 fetch 1 ,mem_mouse_multi_led_state +00ca c1008000 rtneq on + +p_g24_long_sleep: +00cb 20400253 call p_g24_lpm_wait +00cc 24740000 nrtn user +00cd 6801cc40 fetch 3 ,mem_24g_enter_hibernate +00ce 20202d8c branch g24_lpm_long_sleep_next + +p_g24_send_abort_packet: +00cf 704c3d01 jam 1 ,mem_24g_abort_pac +00d0 704d4600 jam 0 ,mem_24g_rf_hop_ch +00d1 204000df call p_g24_transmit_rf_ctrl_clear +00d2 6000cbad store 1 ,mem_24g_txbuf +00d3 58000000 setarg 0 +00d4 6003cbae store 7 ,mem_24g_txbuf + 1 +00d5 68024c48 fetch 4 ,mem_24g_device_addr +00d6 60024bb5 store 4 ,mem_24g_txbuf + 8 +00d7 704c110c jam 12 ,mem_24g_datalen +00d8 6800cc12 fetch 1 ,mem_24g_data_type +00d9 79207e03 set1 bit_abort ,pdata +00da 6000cc12 store 1 ,mem_24g_data_type +00db 20400117 call p_g24_txdata_enable_tx +00dc 2020009c branch p_g24_transmit_start + +p_g24_transmit_rf_sta_init: +00dd 704d4701 jam 1 ,mem_24g_rf_last_sta +00de 704d4900 jam 0 ,mem_24g_sync_cnt + +p_g24_transmit_rf_ctrl_clear: +00df 6800cc12 fetch 1 ,mem_24g_data_type +00e0 1fe17e07 and_into bits_data ,pdata +00e1 6000cc12 store 1 ,mem_24g_data_type +00e2 20600000 rtn + +p_g24_hop_enable_packet: +00e3 6800cc12 fetch 1 ,mem_24g_data_type +00e4 c4020000 rtnbit0 bit_hop + +p_g24_hop_ch_disable: +00e5 6800cc12 fetch 1 ,mem_24g_data_type +00e6 793ffe04 set0 bit_hop ,pdata +00e7 6000cc12 store 1 ,mem_24g_data_type +00e8 6000cbcd store 1 ,mem_24g_txpayload +00e9 204005e2 call power_ctrl_pac_succ_decrs +00ea 202001be branch p_g24_ch + +p_g24_rf_hop_fastly_exit: +00eb 204005e2 call power_ctrl_pac_succ_decrs +00ec 704d4400 jam 0 ,mem_24g_hop_fastly_cnt +00ed 202000df branch p_g24_transmit_rf_ctrl_clear + +p_g24_transmit_hop_pac_succ_wo_hop: +00ee 704d4902 jam 2 ,mem_24g_sync_cnt + +p_g24_transmit_hop_pac_succ: +00ef 704d4701 jam 1 ,mem_24g_rf_last_sta +00f0 704d4600 jam 0 ,mem_24g_rf_hop_ch +00f1 202000df branch p_g24_transmit_rf_ctrl_clear + +p_g24_transmit_succ_rf_config: +00f2 6800cd48 fetch 1 ,mem_24g_rf_work_stage +00f3 c00180ef beq 3 ,p_g24_transmit_hop_pac_succ +00f4 6800cc12 fetch 1 ,mem_24g_data_type +00f5 2fec0004 isolate0 bit_hop ,pdata +00f6 202080dd branch p_g24_transmit_rf_sta_init ,true +00f7 6800cd48 fetch 1 ,mem_24g_rf_work_stage +00f8 c00080ee beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +00f9 c00100ef beq 2 ,p_g24_transmit_hop_pac_succ +00fa 20600000 rtn + +p_g24_rf_sta_check: +00fb 6800cc21 fetch 1 ,mem_24g_pairing_sm +00fc c1ff8000 rtnne state_24g_pairing_success +00fd 20400100 call p_g24_rf_laststa_synccnt_check +00fe 24560108 ncall p_g24_rf_sync_cnt_check ,user2 +00ff 20600000 rtn + +p_g24_rf_laststa_synccnt_check: +0100 78567c00 disable user2 +0101 6800cd47 fetch 1 ,mem_24g_rf_last_sta +0102 c1808000 rtnne 1 +0103 6800cd49 fetch 1 ,mem_24g_sync_cnt +0104 c1800000 rtnne 0 +0105 704d4801 jam 1 ,mem_24g_rf_work_stage +0106 704c5604 jam 4 ,mem_24g_max_retry +0107 20207feb branch enable_user2 + +p_g24_rf_sync_cnt_check: +0108 6800cd49 fetch 1 ,mem_24g_sync_cnt +0109 203a010f branch p_g24_rf_hop_attemp ,blank +010a 1fe0ffff increase -1 ,pdata +010b 6000cd49 store 1 ,mem_24g_sync_cnt +010c 704d4802 jam 2 ,mem_24g_rf_work_stage +010d 704c5604 jam 4 ,mem_24g_max_retry +010e 202001be branch p_g24_ch + +p_g24_rf_hop_attemp: +010f 704d4803 jam 3 ,mem_24g_rf_work_stage +0110 6800cd46 fetch 1 ,mem_24g_rf_hop_ch +0111 243a0137 nbranch p_g24_rf_hop_attemp_again ,blank +0112 704c5602 jam 2 ,mem_24g_max_retry +0113 202001be branch p_g24_ch + +p_g24_txdata_prep: +0114 6800cc21 fetch 1 ,mem_24g_pairing_sm +0115 c0ff8183 bne state_24g_pairing_success ,p_g24_pairing_sm + +p_g24_txdata_prep_packeage_data: +0116 2040011a call p_g24_package_data + +p_g24_txdata_enable_tx: +0117 204001ac call p_g24_transmit_prep +0118 704c1601 jam ensure_on_24g ,mem_24g_ensure +0119 20600000 rtn + +p_g24_package_data: +011a 68014d42 fetch 2 ,mem_cb_24g_data +011b 20407f9c call callback_func +011c 20340120 branch p_g24_accumulate_mouse_data ,user +011d 6803cbae fetch 7 ,mem_24g_txbuf + 1 +011e 207a0000 rtn blank +011f 20207fe7 branch enable_user + +p_g24_accumulate_mouse_data: +0120 2040037e call p_mouse_data_xy_release +0121 704c3d00 jam 0 ,mem_24g_abort_pac +0122 1a20fe01 add rega ,1 ,pdata +0123 6000cc11 store 1 ,mem_24g_datalen +0124 204000df call p_g24_transmit_rf_ctrl_clear +0125 6000cbad store 1 ,mem_24g_txbuf +0126 e8a88000 ifetcht 1 ,contw +0127 ea408000 ifetch 1 ,regb +0128 9841fe00 ior temp ,pdata +0129 e0a08000 istore 1 ,contw +012a 1a40a401 increase 1 ,regb +012b ea420000 ifetch 4 ,regb +012c e0a20000 istore 4 ,contw +012d 1a40a404 increase 4 ,regb +012e d8a04bb3 arg mem_24g_txbuf + 6 ,contw +012f df200002 arg 2 ,loopcnt + +p_g24_accumulation_loop: +0130 ea408000 ifetch 1 ,regb +0131 e8a88000 ifetcht 1 ,contw +0132 9840fe00 iadd temp ,pdata +0133 e0a08000 istore 1 ,contw +0134 1a40a401 increase 1 ,regb +0135 c2000130 loop p_g24_accumulation_loop +0136 20600000 rtn + +p_g24_rf_hop_attemp_again: +0137 6800cd46 fetch 1 ,mem_24g_rf_hop_ch +0138 c08080df bne 1 ,p_g24_transmit_rf_ctrl_clear + +p_g24_rf_hop_fastly: +0139 6800cd44 fetch 1 ,mem_24g_hop_fastly_cnt +013a 1fe0fe01 increase 1 ,pdata +013b 6000cd44 store 1 ,mem_24g_hop_fastly_cnt +013c c00200eb beq 4 ,p_g24_rf_hop_fastly_exit +013d 204001be call p_g24_ch +013e 704c5602 jam 2 ,mem_24g_max_retry + +p_g24_transmit_packet: +013f 704c1a00 jam 0 ,mem_24g_retry + +p_g24_transmit_loop: +0140 d9600d00 arg param_rx_setup ,timeup +0141 34730200 until clkn_rt ,meet +0142 20400156 call p_g24_transmit_receive_ack +0143 242c0161 nbranch p_g24_retransmit ,sync +0144 24378161 nbranch p_g24_retransmit ,user3 +0145 20400153 call p_g24_txbuf_clear +0146 2040017c call p_g24_ackpayload_parse +0147 20400712 call power_ctrl_pac_succ_incrs + +p_g24_transmit_next_packet: +0148 6800cc10 fetch 1 ,mem_24g_pid +0149 1fe0fe01 increase 1 ,pdata +014a 6000cc10 store 1 ,mem_24g_pid +014b 204000e3 call p_g24_hop_enable_packet +014c 6800cc21 fetch 1 ,mem_24g_pairing_sm +014d c0ff8185 bne state_24g_pairing_success ,p_g24_paring_mode_start +014e 204000f2 call p_g24_transmit_succ_rf_config + +p_g24_transmit_abandon: +014f 58000000 setarg 0 +0150 60024c16 store 4 ,mem_24g_ensure +0151 6000cd45 store 1 ,mem_24g_hop_pac_retry +0152 20600000 rtn + +p_g24_txbuf_clear: +0153 df200004 arg 4 ,loopcnt +0154 d8a04bad arg mem_24g_txbuf ,contw +0155 20207ec6 branch memset0 + +p_g24_transmit_receive_ack: +0156 7857fc00 disable user3 +0157 2040020e call p_g24_transmit +0158 18002a00 force 0 ,radio_ctrl +0159 68024c39 fetch 4 ,mem_24g_addr +015a 98001200 iforce access +015b 68088017 fetcht 1 ,mem_last_freq +015c 2040291f call set_freq_rx +015d 20402924 call rf_rx_enable +015e 204001ce call p_g24_receive_rxon +015f 2057820b call p_g24_end_of_packet ,user3 +0160 20600000 rtn + +p_g24_retransmit: +0161 6800cc3d fetch 1 ,mem_24g_abort_pac +0162 247a0000 nrtn blank +0163 68014c17 fetch 2 ,mem_24g_txfail_cnt +0164 1fe0fe01 increase 1 ,pdata +0165 60014c17 store 2 ,mem_24g_txfail_cnt +0166 6800cc18 fetch 1 ,mem_24g_txfail_cnt + 1 +0167 c2822dd4 bbit1 4 ,g24_stop_24g_mode +0168 6800cc21 fetch 1 ,mem_24g_pairing_sm +0169 c0ff816c bne state_24g_pairing_success ,p_g24_tx_paring_retry +016a 20400174 call p_g24_tx_hop_ch_process +016b 20200140 branch p_g24_transmit_loop + +p_g24_tx_paring_retry: +016c 6800cc17 fetch 1 ,mem_24g_txfail_cnt +016d c1ff8000 rtnne 0xff + +p_g24_tx_attempt_fail: +016e 58000000 setarg 0 +016f 60014c17 store 2 ,mem_24g_txfail_cnt +0170 20202dd4 branch g24_stop_24g_mode + +p_g24_tx_fast_hop: +0171 20400739 call power_ctrl_txpower_incrs +0172 204005e2 call power_ctrl_pac_succ_decrs +0173 202001be branch p_g24_ch + +p_g24_tx_hop_ch_process: +0174 6800cc1a fetch 1 ,mem_24g_retry +0175 1fe67c0b sub pdata ,11 ,null +0176 24210171 nbranch p_g24_tx_fast_hop ,positive +0177 1fe0fe01 increase 1 ,pdata +0178 6000cc1a store 1 ,mem_24g_retry +0179 c00300e5 beq 6 ,p_g24_hop_ch_disable +017a c00600e5 beq 12 ,p_g24_hop_ch_disable +017b 20600000 rtn + +p_g24_ackpayload_parse: +017c 20400191 call p_g24_read_len_pid_crc +017d 6800cc0f fetch 1 ,mem_24g_rxdata_length +017e 207a0000 rtn blank +017f 98007200 iforce loopcnt +0180 d8c04b8d arg mem_24g_rxbuf + 2 ,contr +0181 d8a04bef arg mem_24g_rxpayload ,contw +0182 20207f01 branch memcpy + +p_g24_pairing_sm: +0183 7011c590 jam zcode_90 ,mem_zcode_temp_param0 +0184 20200771 branch p_zcode_entrance + +p_g24_paring_mode_start: + +p_g24_paring_mode: +0185 7011c591 jam zcode_91 ,mem_zcode_temp_param0 +0186 20200771 branch p_zcode_entrance + +p_g24_auto_pair_start: +0187 7011c570 jam zcode_70 ,mem_zcode_temp_param0 +0188 20200771 branch p_zcode_entrance + +p_g24_check_51cmd_stop_24g: +0189 793f8026 set0 mark_24g ,mark +018a 204053ce call le_disable + +p_mouse_disable_g24_pairing_flag: +018b d8e00003 arg mosue_24g_pairing_flag ,queue +018c 202043d2 branch mouse_disable_function_flag + +p_g24_put_data_in_buff: +018d 6008cc11 storet 1 ,mem_24g_datalen +018e 18427200 copy temp ,loopcnt +018f d8a04bad arg mem_24g_txbuf ,contw +0190 20202d51 branch g24_put_data_in_buff2 + +p_g24_read_len_pid_crc: +0191 6800cb8c fetch 1 ,mem_24g_rxbuf + 1 +0192 1fe97e00 rshift3 pdata ,pdata +0193 6000cc0f store 1 ,mem_24g_rxdata_length +0194 1fe0fe01 increase 1 ,pdata +0195 d8c04b8c arg mem_24g_rxbuf + 1 ,contr +0196 98c08c00 iadd contr ,contr +0197 e8c18000 ifetch 3 ,contr +0198 6001cc4e store 3 ,mem_24g_sta_crc +0199 6800cb8c fetch 1 ,mem_24g_rxbuf + 1 +019a 1fe37e00 rshift pdata ,pdata +019b 1fe17e03 and pdata ,0x03 ,pdata +019c 6000cc54 store 1 ,mem_24g_sta_pid +019d 20600000 rtn + +p_g24_update_addr_and_synccrc8: +019e 60024c39 store 4 ,mem_24g_addr + +p_g24_syncword_crc8: +019f da200000 arg 0 ,rega +01a0 df200004 arg 4 ,loopcnt +01a1 d8c04c39 arg mem_24g_addr ,contr + +p_g24_syncword_crc8_loop: +01a2 e8c08000 ifetch 1 ,contr +01a3 9a20a200 iadd rega ,rega +01a4 c20001a2 loop p_g24_syncword_crc8_loop +01a5 1a227e00 copy rega ,pdata +01a6 60014cc2 store 2 ,mem_24g_syncword +01a7 6800ccc2 fetch 1 ,mem_24g_syncword +01a8 6808ccc3 fetcht 1 ,mem_24g_syncword + 1 +01a9 9840fe00 iadd temp ,pdata +01aa 6000ccc4 store 1 ,mem_24g_syncword_crc8 +01ab 20600000 rtn + +p_g24_transmit_prep: +01ac 6800cc11 fetch 1 ,mem_24g_datalen +01ad 1fe0fe02 increase 2 ,pdata +01ae 6000cc13 store 1 ,mem_24g_txlen +01af 6800cc12 fetch 1 ,mem_24g_data_type +01b0 6000cbcd store 1 ,mem_24g_txpayload +01b1 6800cc11 fetch 1 ,mem_24g_datalen +01b2 1fe9fe00 lshift3 pdata ,pdata +01b3 6808cc10 fetcht 1 ,mem_24g_pid +01b4 18410403 and temp ,0x03 ,temp +01b5 18438400 lshift temp ,temp +01b6 9841fe00 ior temp ,pdata +01b7 6808cc4d fetcht 1 ,mem_24g_no_ack +01b8 9840fe00 iadd temp ,pdata +01b9 e0a08000 istore 1 ,contw +01ba 6800cc11 fetch 1 ,mem_24g_datalen +01bb 98007200 iforce loopcnt +01bc d8c04bad arg mem_24g_txbuf ,contr +01bd 20207f01 branch memcpy + +p_g24_ch: +01be 6808cc1c fetcht 1 ,mem_24g_current_ch_number +01bf 6800cc39 fetch 1 ,mem_24g_addr +01c0 1fe17e03 and_into 0x03 ,pdata +01c1 1fefa204 mul32 pdata ,4 ,rega +01c2 58004c22 setarg mem_24g_ch_map1 +01c3 9a20fe00 iadd rega ,pdata +01c4 98408c00 iadd temp ,contr +01c5 e8c08000 ifetch 1 ,contr +01c6 6000cc1b store 1 ,mem_24g_ch +01c7 18408401 increase 1 ,temp +01c8 18410403 and_into 3 ,temp +01c9 6008cc1c storet 1 ,mem_24g_current_ch_number +01ca 20600000 rtn + +p_g24_prep: +01cb 20402dee call g24_prep +01cc 6800cc1b fetch 1 ,mem_24g_ch +01cd 202053da branch le_prep2 + +p_g24_receive_rxon: +01ce 204001cb call p_g24_prep +01cf 7857fc00 disable user3 +01d0 7826fc00 enable decode_fec0 +01d1 7830fc00 enable is_rx +01d2 78507c00 disable is_tx +01d3 78287c00 enable swfine +01d4 68014c14 fetch 2 ,mem_24g_rx_window +01d5 98003600 iforce stop_watch +01d6 37c18400 correlate null ,timeout +01d7 242c020b nbranch p_g24_end_of_packet ,sync +01d8 7846fc00 disable decode_fec0 +01d9 7825fc00 enable decode_fec1 +01da 7823fc00 enable enable_white +01db 7824fc00 enable enable_crc +01dc 20400208 call p_g24_receive_byte +01dd 6000ccc5 store 1 ,mem_24g_get_syncword_crc8 +01de 6808ccc4 fetcht 1 ,mem_24g_syncword_crc8 +01df 98467c00 isub temp ,null +01e0 2422820b nbranch p_g24_end_of_packet ,zero +01e1 20400208 call p_g24_receive_byte +01e2 6000cb8b store 1 ,mem_24g_rxbuf +01e3 6800cb8b fetch 1 ,mem_24g_rxbuf +01e4 6808cc12 fetcht 1 ,mem_24g_data_type +01e5 a8400e00 icompare bits_data ,temp +01e6 2420820b nbranch p_g24_end_of_packet ,true + +p_g24_receive_skip: +01e7 20400208 call p_g24_receive_byte +01e8 e0a08000 istore 1 ,contw +01e9 1fe97e00 rshift3 pdata ,pdata +01ea 1fe1721f and pdata ,0x1f ,loopcnt +01eb 202281ef branch p_g24rx_nopayload ,zero + +p_g24rx_loop: +01ec 20400208 call p_g24_receive_byte +01ed e0a08000 istore 1 ,contw +01ee c20001ec loop p_g24rx_loop + +p_g24rx_nopayload: +01ef 18a22200 copy contw ,rega +01f0 20400208 call p_g24_receive_byte +01f1 6000cd4c store 1 ,mem_rssi_hex_received +01f2 1a220a00 copy rega ,contw +01f3 09800018 parse demod ,bucket ,24 +01f4 78287c00 enable swfine +01f5 db600664 arg param_sifs ,stop_watch +01f6 1fef7e00 rshift32 pdata ,pdata +01f7 1ff17e00 rshift16 pdata ,pdata +01f8 e0a18000 istore 3 ,contw +01f9 7845fc00 disable decode_fec1 +01fa 2023020b branch p_g24_end_of_packet ,crc_failed +01fb 7837fc00 enable user3 +01fc 204054ba call lerx_nopayload2 +01fd 6800cd4c fetch 1 ,mem_rssi_hex_received + +p_rssi_signal: +01fe 1fe22200 copy pdata ,rega +01ff 6808cccc fetcht 1 ,mem_rssi_signal_index +0200 58004cd3 setarg mem_rssi_signal_buf +0201 98408a00 iadd temp ,contw +0202 1a227e00 copy rega ,pdata +0203 e0a08000 istore 1 ,contw +0204 18408401 increase 1 ,temp +0205 18410407 and_into rssi_buf_len_signal ,temp +0206 6008cccc storet 1 ,mem_rssi_signal_index +0207 20600000 rtn + +p_g24_receive_byte: +0208 09800008 parse demod ,bucket ,8 +0209 19897e00 rshift3 pwindow ,pdata +020a 20600000 rtn + +p_g24_end_of_packet: +020b 784dfc00 disable encode_fec1 +020c 7845fc00 disable decode_fec1 +020d 2020264d branch end_of_packet + +p_g24_transmit: +020e 204053c4 call le_enable +020f 68024c39 fetch 4 ,mem_24g_addr +0210 98001200 iforce access +0211 204001cb call p_g24_prep +0212 20402918 call set_sync_on +0213 6808cc1b fetcht 1 ,mem_24g_ch +0214 20402933 call set_freq_tx +0215 79202a00 set1 txgfsk ,radio_ctrl +0216 782efc00 enable encode_fec0 +0217 78307c00 enable is_tx +0218 7850fc00 disable is_rx +0219 19317e00 rshift16 access ,pdata +021a 1fecfe00 rshift8 pdata ,pdata +021b 1ff1fe00 rshift4 pdata ,pdata +021c 08008628 inject mod ,40 +021d 784efc00 disable encode_fec0 +021e 782dfc00 enable encode_fec1 +021f 7823fc00 enable enable_white +0220 7824fc00 enable enable_crc +0221 6800ccc4 fetch 1 ,mem_24g_syncword_crc8 +0222 08008608 inject mod ,8 +0223 6800cc13 fetch 1 ,mem_24g_txlen +0224 98007200 iforce loopcnt +0225 d8c04bcd arg mem_24g_txpayload ,contr + +p_g24tr_loop: +0226 e8c08000 ifetch 1 ,contr +0227 08008608 inject mod ,8 +0228 c2000226 loop p_g24tr_loop +0229 204054e2 call letr_nopayload +022a 784dfc00 disable encode_fec1 +022b 20600000 rtn + +p_g24_timer_check: +022c 20407fe9 call disable_user +022d 680a4c32 fetcht 4 ,mem_24g_tx_btclk +022e 1c427e00 copy clkn_bt ,pdata +022f 98467c00 isub temp ,null +0230 24412d18 ncall g24_timer_timeout ,positive +0231 1fe22400 copy pdata ,regb +0232 68024c32 fetch 4 ,mem_24g_tx_btclk +0233 6808cc36 fetcht 1 ,mem_24g_interval +0234 98408400 iadd temp ,temp +0235 1a427e00 copy regb ,pdata +0236 98467c00 isub temp ,null +0237 24610000 nrtn positive +0238 793ffe1c set0 28 ,pdata +0239 60024c32 store 4 ,mem_24g_tx_btclk +023a 20207fe7 branch enable_user + +p_rssi_average: +023b d8400000 arg 0 ,temp +023c df200008 arg rssi_buf_len_signal + 1 ,loopcnt +023d 1a220c00 copy rega ,contr + +p_rssi_average_loop: +023e e8c08000 ifetch 1 ,contr +023f 98408400 iadd temp ,temp +0240 c200023e loop p_rssi_average_loop +0241 18497e00 rshift3 temp ,pdata +0242 1fe20400 copy pdata ,temp +0243 c6930000 rtnmark0 mark_24g +0244 1fe6fc0a div pdata ,10 +0245 20407f86 call wait_div_end +0246 1807fe00 quotient pdata +0247 1ff27e00 lshift4 pdata ,pdata +0248 20207f55 branch clk2bt2 + +p_mouse_before_lpm: +0249 c6130000 rtnmark1 mark_24g +024a 20400354 call p_mouse_le_txbuff_save +024b 2040025d call p_mouse_setgpio_lpm +024c 6800c040 fetch 1 ,mem_context +024d c3000250 bbit0 state_inconn ,p_clear_wake +024e 680080a0 fetch 1 ,mem_lpm_current_mult +024f 247a0000 nrtn blank + +p_clear_wake: +0250 58000000 setarg 0 +0251 600400a1 store 8 ,mem_gpio_wakeup_low +0252 20600000 rtn + +p_g24_lpm_wait: +0253 78347c00 enable user +0254 20402afa call lpo_calibration +0255 6801c16f fetch 3 ,mem_clks_per_lpo +0256 203a7fe9 branch disable_user ,blank +0257 6800c091 fetch 1 ,mem_lpm_mode +0258 203a7fe9 branch disable_user ,blank +0259 6800cd51 fetch 1 ,mem_24g_transmit_by_interrupt +025a c000ffe9 beq g24_tx_timer_int_enable ,disable_user +025b 680246d3 fetch mouse_flag_len ,mem_mouse_flag +025c c3820000 rtnbit1 mouse_low_voltage_flag + +p_mouse_setgpio_lpm: +025d 2040052f call p_mouse_set_sdio_high +025e 20400250 call p_clear_wake + +p_mouse_setgpio_hibernate: +025f 20403ebf call mouse_lpm_before_common +0260 204002da call p_flash_ncs_disable +0261 68120070 hfetch 4 ,core_gpio_oe0 +0262 681a0078 hfetcht 4 ,core_gpio_pu0 +0263 98418400 ior temp ,temp +0264 18440400 invert temp ,temp +0265 601a007c hstoret 4 ,core_gpio_pd0 +0266 6810807d hfetch 1 ,core_gpio_pd1 +0267 793ffe02 set0 2 ,pdata +0268 6010807d hstore 1 ,core_gpio_pd1 +0269 6810807e hfetch 1 ,core_gpio_pd2 +026a 793ffe06 set0 6 ,pdata +026b 6010807e hstore 1 ,core_gpio_pd2 +026c 6810807c hfetch 1 ,core_gpio_pd0 +026d 793ffe05 set0 5 ,pdata +026e 6010807c hstore 1 ,core_gpio_pd0 + +p_set_ice_gpio: +026f 6808cb60 fetcht 1 ,mem_mouse_bt_led_gpio +0270 204067fb call gpio_config_input +0271 6808cb60 fetcht 1 ,mem_mouse_bt_led_gpio +0272 79200407 set1 gpio_active_bit ,temp +0273 d8a08078 arg core_gpio_pu0 ,contw +0274 20206830 branch gpio_set_bit + +p_device_init: +0275 70895b86 jam 0x86 ,0x895b +0276 70895ca0 jam 0xa0 ,0x895c +0277 2040296c call initialize_radio +0278 20403416 call app_lpm_mult_enable +0279 204074b9 call enable_authrom +027a 20358300 branch p_mouse_spi_init ,wake + +p_device_wake_from_power: +027b 6801c4a3 fetch 3 ,mem_le_lap + 3 +027c 6001cb67 store 3 ,mem_le_lap_high_3b +027d 20400001 call p_wake_from_power +027e 6800c241 fetch 1 ,mem_power_on_flag +027f c2810282 bbit1 2 ,p_mouse_skip_24g_pair +0280 20400564 call p_mouse_check_key_gpio +0281 c00282a8 beq mouse_lm_button ,p_mouse_24g_pairing_button + +p_mouse_skip_24g_pair: + +p_mouse_check_reconn_target: +0282 7011c501 jam zcode_01 ,mem_zcode_temp_param0 +0283 20200771 branch p_zcode_entrance + +p_mouse_tx_power_init: +0284 6800ccc8 fetch 1 ,mem_tx_power_temp +0285 6000c1de store 1 ,mem_tx_power +0286 20600000 rtn + +p_mouse3_0_check_reconn_target: +0287 680341d0 fetch 6 ,mem_hci_plap +0288 203a33eb branch app_bt_start_discovery_short ,blank +0289 20204274 branch mouse3_0_check_reconn_target + 3 + +p_mouse4_0_check_reconn_target: +028a 704b6b01 jam 1 ,mem_le_send_security_request_flag +028b 70479f01 jam 1 ,mem_mouse_le_reconnect_flag +028c 680146a8 fetch 2 ,mem_mouse_direct_timeout +028d 6808cb66 fetcht 1 ,mem_mouse_fast_conn_flag +028e 18467cff sub temp ,0xff ,null +028f 24228291 nbranch p_mouse4_0_check_reconn_target_next ,zero +0290 58000258 setarg 0x0258 + +p_mouse4_0_check_reconn_target_next: +0291 600146ae store 2 ,mem_mouse_direct_timer +0292 20403418 call app_lpm_mult_disable +0293 20400299 call p_le_check_adv_flag +0294 58000004 setarg adv_flag_bredr_not_supported +0295 e0c08000 istore 1 ,contr +0296 d8c04390 arg mem_le_scan_data ,contr +0297 2040059f call p_le_adv_data_update +0298 20207df4 branch check_51cmd_adv + +p_le_check_adv_flag: +0299 da204370 arg mem_le_adv_data ,rega + +p_le_check_adv_flag_loop: +029a ea208000 ifetch 1 ,rega +029b 207a0000 rtn blank +029c 98c0a200 iadd contr ,rega +029d e8c08000 ifetch 1 ,contr +029e c1008000 rtneq 0x01 +029f 2020029a branch p_le_check_adv_flag_loop + +p_mouse_le_fast_conn_disable: +02a0 704b665a jam 0x5a ,mem_mouse_fast_conn_flag +02a1 20600000 rtn + +p_mouse_fast_conn_init: +02a2 704b66ff jam 0xff ,mem_mouse_fast_conn_flag +02a3 70421034 jam 0x34 ,mem_xrecord_mode +02a4 580f0f0f setarg 0x0f0f0f +02a5 6001c4a0 store 3 ,mem_le_lap +02a6 6001c4a3 store 3 ,mem_le_lap + 3 +02a7 20600000 rtn + +p_mouse_24g_pairing_button: +02a8 7011c561 jam zcode_61 ,mem_zcode_temp_param0 +02a9 20200771 branch p_zcode_entrance + +p_mouse_clear_sensor_data: +02aa 70479c01 jam 1 ,mem_mouse_clear_sensor_data_flag +02ab 20405814 call le_set_config_more_data + +p_mouse_init_sensor_reset: +02ac 704afe01 jam 1 ,mem_mouse_init_sensor_reset_flag + +p_mouse_init_sunt: +02ad 20400300 call p_mouse_spi_init +02ae 204040c0 call mouse_spi_sdio_gpio_pollup + +p_mouse_init_sensor: +02af 204040d9 call mouse_read_sensor_id +02b0 c01802b5 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +02b1 c01882cc beq p3065_id1 ,p_mouse_p3065_init_param +02b2 204040d1 call mouse_twspi_reset +02b3 200003e8 nop 1000 +02b4 202002af branch p_mouse_init_sensor + +p_mouse_init_p32xx_id2_judge: +02b5 20400383 call p_mouse_sensor_poweron +02b6 6800c6de fetch 1 ,mem_sensor_id2 +02b7 c02d02b9 beq ma8650_id2 ,p_mouse_ma8650_init_param +02b8 202040e1 branch mouse_init_p32xx_id2_judge + 1 + +p_mouse_ma8650_init_param: +02b9 7046e007 jam ma8650 ,mem_config_sensor_type +02ba 58008006 setarg 0x8006 +02bb 20406413 call twspi_write +02bc 20407ec1 call delay_10ms +02bd da604b70 arg mem_sensor_8650_init ,regc +02be 204002c5 call p_sensor_wr_seq + +p_mouse_dpi_config: +02bf 6800c77a fetch 1 ,mem_mouse_dpi +02c0 c07f82c2 beq 0xff ,p_mouse_dpi_config_default +02c1 20200531 branch p_mouse_seting_dpi + +p_mouse_dpi_config_default: +02c2 6800c6e1 fetch 1 ,mem_config_sensor_motion +02c3 6000c77a store 1 ,mem_mouse_dpi +02c4 20200531 branch p_mouse_seting_dpi + +p_sensor_wr_seq: +02c5 ea610000 ifetch 2 ,regc +02c6 d840ffff arg 0xffff ,temp +02c7 98467c00 isub temp ,null +02c8 20628000 rtn zero +02c9 20406413 call twspi_write +02ca 1a60a602 increase 2 ,regc +02cb 202002c5 branch p_sensor_wr_seq + +p_mouse_p3065_init_param: +02cc 20400383 call p_mouse_sensor_poweron +02cd 202040ea branch mouse_p3065_init_param + +p_mouse_sensor_powerdown_check: +02ce 6800cafe fetch 1 ,mem_mouse_init_sensor_reset_flag +02cf 207a0000 rtn blank +02d0 704afe00 jam 0 ,mem_mouse_init_sensor_reset_flag + +p_mouse_sensor_powerdown: +02d1 204002ad call p_mouse_init_sunt +02d2 58000006 setarg 0x06 +02d3 20406414 call twspi_read +02d4 1fe1fe08 or pdata ,0x08 ,pdata +02d5 1fed7e00 lshift8 pdata ,pdata +02d6 1fe0fe06 add pdata ,0x06 ,pdata +02d7 20206413 branch twspi_write + +p_mouse_setting_config: +02d8 7011c580 jam zcode_80 ,mem_zcode_temp_param0 +02d9 20200771 branch p_zcode_entrance + +p_flash_ncs_disable: +02da 6808cb44 fetcht 1 ,mem_flash_ncs_gpio +02db 20206825 branch gpio_out_inactive + +p_spid_init_flash: +02dc 70808640 jam 0x40 ,core_spid_ctrl +02dd 70808700 jam 0x0 ,core_spid_delay +02de 68108081 hfetch 1 ,core_gpio_sel1 +02df 1fe17eec and pdata ,0xec ,pdata +02e0 1fe1fe08 or pdata ,0x08 ,pdata +02e1 60108081 hstore 1 ,core_gpio_sel1 +02e2 58000000 setarg 0 +02e3 600201f5 store 4 ,mem_spid_tbuf +02e4 6810807f hfetch 1 ,core_gpio_pd3 +02e5 793ffe00 set0 0 ,pdata +02e6 6010807f hstore 1 ,core_gpio_pd3 +02e7 20600000 rtn + +p_mouse_load_flash_info_check: +02e8 2040033c call p_flash_release_deep_power_down +02e9 20404423 call mouse_load_flash_flag +02ea 68014778 fetch 2 ,mem_store_flag +02eb d840aa55 arg eeprom_init_flag ,temp +02ec 98467c00 isub temp ,null +02ed 20228323 branch p_mouse_load_flash_device_info ,zero +02ee 60094778 storet 2 ,mem_store_flag + +p_mouse_store_default_info: +02ef 2040441c call mouse_ble_init_address +02f0 6800c6e1 fetch 1 ,mem_config_sensor_motion +02f1 6000c77a store 1 ,mem_mouse_dpi + +p_mouse_store_flash_device_info: +02f2 2040033c call p_flash_release_deep_power_down +02f3 20400306 call p_flash_erase_sector +02f4 2040031d call p_mouse_information_flash_parameters +02f5 20400312 call p_spid_write_flash +02f6 20400309 call p_wait_flash_done + +p_mouse_store_random_addr_increase_count: +02f7 204002dc call p_spid_init_flash +02f8 d8400002 arg 2 ,temp +02f9 da2047c2 arg mem_random_addr_increase_count ,rega +02fa da40005f arg mouse_random_addr_count_eeprom_offset ,regb +02fb 6801c700 fetch 3 ,mem_flash_base +02fc 9a40fe00 iadd regb ,pdata +02fd 20400312 call p_spid_write_flash +02fe 20400309 call p_wait_flash_done +02ff 20400334 call p_flash_deep_power_down + +p_mouse_spi_init: +0300 70421276 jam 0x76 ,mem_spi_init_clk +0301 20203d36 branch mouse_spi_init + +p_mouse_set_24g_addr_flash: +0302 d8400004 arg 4 ,temp +0303 da204c39 arg mem_24g_addr ,rega +0304 da40005b arg mouse_g24_addr_eeprom_offect ,regb +0305 20600000 rtn + +p_flash_erase_sector: +0306 6801c700 fetch 3 ,mem_flash_base +0307 6001c232 store 3 ,mem_spi_write_addr +0308 2040652a call flash_erase_sector + 2 + +p_wait_flash_done: +0309 580186a0 setarg 100000 +030a 20402a8f call sleep +030b 2040650b call spid_unlock_flash +030c 580001fa setarg mem_spid_rbuf +030d 6011008c hstore 2 ,core_spid_rxaddr +030e 58000005 setarg flash_read_satus +030f 204064f3 call spid_read_reg +0310 c2800309 bbit1 flash_status_wip ,p_wait_flash_done +0311 20600000 rtn + +p_spid_write_flash: +0312 1fe22600 copy pdata ,regc +0313 1a227e00 copy rega ,pdata +0314 1fe0fffc increase -4 ,pdata +0315 1fe22400 copy pdata ,regb +0316 ea420000 ifetch 4 ,regb +0317 60024b46 store 4 ,mem_write_flash_head_temp +0318 1a627e00 copy regc ,pdata +0319 20406552 call spid_write_flash +031a 68024b46 fetch 4 ,mem_write_flash_head_temp +031b e2420000 istore 4 ,regb +031c 20600000 rtn + +p_mouse_information_flash_parameters: +031d 5800477f setarg mem_mouse_information_end +031e d8404720 arg mem_mouse_information_start ,temp +031f 98460400 isub temp ,temp +0320 6801c700 fetch 3 ,mem_flash_base +0321 da204720 arg mem_mouse_information_start ,rega +0322 20600000 rtn + +p_mouse_load_flash_device_info: +0323 2040033c call p_flash_release_deep_power_down +0324 2040031d call p_mouse_information_flash_parameters +0325 20406562 call spid_read_flash +0326 20400598 call p_mouse_load_fast_conn_flag +0327 20400591 call p_mouse_load_random_addr_increase_count +0328 6800c720 fetch 1 ,mem_device_flag +0329 c0008330 beq mode_bt_device1 ,p_mouse_load_flash_device_info_next +032a c0010330 beq mode_24g_device ,p_mouse_load_flash_device_info_next +032b 70472002 jam mode_24g_device ,mem_device_flag +032c 68024b4b fetch 4 ,mem_mouse_24g_addr_init +032d 6002477b store 4 ,mem_mouse_24g_addr +032e 60024c39 store 4 ,mem_24g_addr +032f 202002ef branch p_mouse_store_default_info + +p_mouse_load_flash_device_info_next: +0330 2040431a call mouse_select_reconn_device +0331 6802477b fetch 4 ,mem_mouse_24g_addr +0332 60024c39 store 4 ,mem_24g_addr +0333 20600000 rtn + +p_flash_deep_power_down: +0334 700aa2b9 jam flash_command_deep_power_down ,mem_temp + +p_spid_write_flash_cmd: +0335 204002dc call p_spid_init_flash +0336 204069ac call delay_nop100 +0337 2040650b call spid_unlock_flash +0338 da204b46 arg mem_write_flash_head_temp ,rega +0339 68088aa2 fetcht 1 ,mem_temp +033a 20406556 call spid_write_flash_common +033b 202069ac branch delay_nop100 + +p_flash_release_deep_power_down: +033c 700aa2ab jam flash_command_release_deep_power_down ,mem_temp +033d 20200335 branch p_spid_write_flash_cmd + +p_mouse_connect_24g_mode: +033e 70472002 jam mode_24g_device ,mem_device_flag +033f 204004e5 call p_mouse_mode_24g_device_multi_led_on + +p_mouse_start_24g_mode: +0340 20400344 call p_g24_factory_check +0341 20340187 branch p_g24_auto_pair_start ,user + +p_g24_start_24g_mode: +0342 7011c560 jam zcode_60 ,mem_zcode_temp_param0 +0343 20200771 branch p_zcode_entrance + +p_g24_factory_check: +0344 df200002 arg 2 ,loopcnt +0345 d8c04c39 arg mem_24g_addr ,contr + +p_pdata_0xff_check: +0346 20407fe7 call enable_user +0347 5800ffff setarg 0xffff + +p_pdata_0xff_check_loop: +0348 e8c90000 ifetcht 2 ,contr +0349 98467c00 isub temp ,null +034a 2442ffe9 ncall disable_user ,zero +034b c2000348 loop p_pdata_0xff_check_loop +034c 20600000 rtn + +p_mouse_g24_package_data: +034d 20404401 call mouse_g24_package_data +034e 6801469f fetch 2 ,mem_mouse_z +034f 207a0000 rtn blank + +p_g24_transmit_by_interrupt_enable: +0350 704d5101 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +0351 58000000 setarg 0 +0352 60014d52 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0353 20600000 rtn + +p_mouse_le_txbuff_save: +0354 d8c01800 arg mem_le_tx_buffer0 ,contr +0355 d8a0480a arg mem_le_tx_buffer0_omemalloc ,contw +0356 2040035c call p_mouse_le_txbuff_copy +0357 d8c01900 arg mem_le_tx_buffer1 ,contr +0358 2040035c call p_mouse_le_txbuff_copy +0359 d8c01a00 arg mem_le_tx_buffer2 ,contr +035a 2040035c call p_mouse_le_txbuff_copy +035b d8c01b00 arg mem_le_tx_buffer3 ,contr + +p_mouse_le_txbuff_copy: +035c df20001b arg 27 ,loopcnt +035d 20207f01 branch memcpy + +p_mouse_le_txbuff_load: +035e d8c0480a arg mem_le_tx_buffer0_omemalloc ,contr +035f d8a01800 arg mem_le_tx_buffer0 ,contw +0360 2040035c call p_mouse_le_txbuff_copy +0361 d8a01900 arg mem_le_tx_buffer1 ,contw +0362 2040035c call p_mouse_le_txbuff_copy +0363 d8a01a00 arg mem_le_tx_buffer2 ,contw +0364 2040035c call p_mouse_le_txbuff_copy +0365 d8a01b00 arg mem_le_tx_buffer3 ,contw +0366 2020035c branch p_mouse_le_txbuff_copy + +p_mouse_le: +0367 20405892 call le_fifo_check_nearly_full +0368 247a0000 nrtn blank +0369 6800cb66 fetch 1 ,mem_mouse_fast_conn_flag +036a c07f836e beq 0xff ,p_mouse_le_next +036b 6800c6c5 fetch 1 ,mem_le_connect_status_flag +036c 1fe17e03 and pdata ,0x03 ,pdata +036d c1818000 rtnne 0x03 + +p_mouse_le_next: +036e 6800c79c fetch 1 ,mem_mouse_clear_sensor_data_flag +036f 205a02aa call p_mouse_clear_sensor_data ,blank +0370 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0371 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0372 20403f97 call mouse_motion +0373 24740000 nrtn user +0374 2040037b call p_mouse_le_current_mult_update +0375 2040037e call p_mouse_data_xy_release +0376 2040039d call p_mouse_wheel_trigger + +p_mouse_data_push: +0377 da20469a arg mem_mouse_key ,rega +0378 20407e3d call queue_push +0379 2054038c call p_mouse_queue_increase ,user +037a 20600000 rtn + +p_mouse_le_current_mult_update: +037b 70417200 jam 0 ,mem_lpm_mult +037c 704b5e1e jam 30 ,mem_mouse_le_current_mult_timer +037d 20600000 rtn + +p_mouse_data_xy_release: +037e 6800cb5d fetch 1 ,mem_mouse_long_mult_flag +037f c1808000 rtnne 1 +0380 58000000 setarg 0 +0381 6000cb5d store 1 ,mem_mouse_long_mult_flag +0382 6002469b store 4 ,mem_mouse_x + +p_mouse_sensor_poweron: +0383 20400300 call p_mouse_spi_init +0384 58008006 setarg 0x8006 +0385 20406413 call twspi_write +0386 202002bf branch p_mouse_dpi_config + +p_mouse_data_init: +0387 7047a007 jam 7 ,mem_mouse_data_queue +0388 7047a104 jam 4 ,mem_mouse_data_queue + 1 +0389 580047a0 setarg mem_mouse_data_queue +038a 60014218 store 2 ,mem_queue_ptr +038b 20207e38 branch queue_init + +p_mouse_queue_increase: +038c 6800c7c1 fetch 1 ,mem_mouse_data_queue_num +038d 1fe0fe01 increase 1 ,pdata +038e 6000c7c1 store 1 ,mem_mouse_data_queue_num +038f 20600000 rtn + +p_mouse_data_pull: +0390 da20469a arg mem_mouse_key ,rega +0391 20407e54 call queue_pop +0392 20340394 branch p_mouse_fill_data_le ,user +0393 20600000 rtn + +p_mouse_fill_data_le: +0394 20405652 call le_clear_md +0395 6800c7c1 fetch 1 ,mem_mouse_data_queue_num +0396 1fe67c01 sub pdata ,1 ,null +0397 24415650 ncall le_set_md ,positive +0398 6800c7c1 fetch 1 ,mem_mouse_data_queue_num +0399 207a0000 rtn blank +039a 1fe0ffff increase -1 ,pdata +039b 6000c7c1 store 1 ,mem_mouse_data_queue_num +039c 20203f90 branch mouse_fill_data_le + +p_mouse_wheel_trigger: +039d 6801469f fetch 2 ,mem_mouse_z +039e 207a0000 rtn blank +039f 70480601 jam 1 ,mem_mouse_wheel_trigger +03a0 7048070a jam 10 ,mem_mouse_wheel_trigger_timer +03a1 20600000 rtn + +p_mouse_bt: +03a2 20770000 rtn attempt +03a3 6800c1e2 fetch 1 ,mem_app_handshake_flag +03a4 207a0000 rtn blank +03a5 20405271 call l2cap_malloc_is_fifo_nearly_full +03a6 247a0000 nrtn blank +03a7 6800c79c fetch 1 ,mem_mouse_clear_sensor_data_flag +03a8 205a02aa call p_mouse_clear_sensor_data ,blank +03a9 680246d3 fetch mouse_flag_len ,mem_mouse_flag +03aa c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +03ab c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +03ac 20403f97 call mouse_motion +03ad 24740000 nrtn user +03ae 2040037b call p_mouse_le_current_mult_update +03af 2040037e call p_mouse_data_xy_release +03b0 2040039d call p_mouse_wheel_trigger +03b1 6800cb03 fetch 1 ,mem_mouse_bt_boot_mode +03b2 c00083b6 beq 1 ,p_mouse_send_data_boot_mode +03b3 6800cb0a fetch 1 ,mem_mouse_bt_send_first_package_flag +03b4 207a0000 rtn blank +03b5 20203f81 branch mouse_send_data + +p_mouse_send_data_boot_mode: +03b6 6800c69a fetch 1 ,mem_mouse_key +03b7 6000cb04 store 1 ,mem_mouse_bt_boot_data +03b8 6800c69b fetch 1 ,mem_mouse_x +03b9 e0a08000 istore 1 ,contw +03ba 6800c69d fetch 1 ,mem_mouse_y +03bb e0a08000 istore 1 ,contw +03bc 6801469f fetch 2 ,mem_mouse_z +03bd e0a10000 istore 2 ,contw +03be da200007 arg 7 ,rega +03bf 20404d63 call hid_malloc_tx_buff +03c0 6801424e fetch 2 ,mem_hid_int_remote_cid +03c1 e0a10000 istore 2 ,contw +03c2 580002a1 setarg 0x02a1 +03c3 e0a10000 istore 2 ,contw +03c4 6802cb04 fetch 5 ,mem_mouse_bt_boot_data +03c5 e0a28000 istore 5 ,contw +03c6 20600000 rtn + +p_mouse_idle: +03c7 20407e34 call ui_check_paring_button +03c8 20400426 call p_mouse_select_device +03c9 20203ee0 branch mouse_wheel_check + +p_mouse_dpi_check: +03ca 20400564 call p_mouse_check_key_gpio +03cb c00183cd beq mouse_lr_button ,p_mouse_dpi_change +03cc 20203d62 branch mouse_dpi_up + +p_mouse_dpi_change: +03cd da604b8a arg mem_mouse_dpi_time_count ,regc +03ce da4003d0 arg p_mouse_dpi_down ,regb +03cf 2020336d branch timer_single_step + +p_mouse_dpi_down: +03d0 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +03d1 c1000000 rtneq dpi_button_state_down +03d2 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state +03d3 704b8a28 jam 0x28 ,mem_mouse_dpi_time_count +03d4 6800c77a fetch 1 ,mem_mouse_dpi +03d5 1fe0fe01 increase 1 ,pdata +03d6 1fe17e03 and pdata ,0x03 ,pdata +03d7 6000c77a store 1 ,mem_mouse_dpi +03d8 1fe0fe02 increase 2 ,pdata +03d9 6000cb2b store 1 ,mem_mouse_multi_led_blink_count +03da 204004f1 call p_mouse_dpi_multi_led_blink +03db 20400531 call p_mouse_seting_dpi +03dc 202002f2 branch p_mouse_store_flash_device_info + +p_mouse_priority_bb_event: +03dd 1a627e00 copy regc ,pdata +03de c00a03ef beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +03df c00a83f1 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +03e0 c01483f3 beq bt_evt_le_enc_info ,p_mouse_le_enc_info +03e1 c01903f5 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +03e2 c02003f7 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +03e3 c00203f9 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +03e4 c00983f9 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +03e5 c01383fb beq bt_evt_virtual_cable_unplug ,p_mouse_irtual_cable_unplug +03e6 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch +03e7 c01083fd beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +03e8 c00083ff beq bt_evt_bb_connected ,p_mouse_bb_event_connected +03e9 c0010407 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +03ea c0158409 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +03eb c01c840b beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +03ec c01d040d beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +03ed c01e040f beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +03ee 2020417d branch mouse_priority_bb_event + 1 + +p_mouse_le_bb_event_connected: +03ef 7011c5b0 jam zcode_b0 ,mem_zcode_temp_param0 +03f0 20200771 branch p_zcode_entrance + +p_mouse_le_bb_disconnected: +03f1 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 +03f2 20200771 branch p_zcode_entrance + +p_mouse_le_enc_info: + +p_app_updata_le_param: +03f3 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +03f4 20207d8f branch ui_ipc_send_cmd + +p_mouse_le_ll_start_encryt: +03f5 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 +03f6 20200771 branch p_zcode_entrance + +p_mouse_le_conn_param_update_rsp_recieved: +03f7 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 +03f8 20200771 branch p_zcode_entrance + +p_mouse_bb_event_reconn_timeout: + +p_mouse_bb_event_reconn_failed: +03f9 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 +03fa 20200771 branch p_zcode_entrance + +p_mouse_irtual_cable_unplug: +03fb 2040438e call mouse_irtual_cable_unplug +03fc 202033a7 branch app_bb_hibernate + +p_mouse_sniff_not_accept: +03fd 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 +03fe 20200771 branch p_zcode_entrance + +p_mouse_bb_event_connected: +03ff 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0400 793ffe0a set0 app_disc_pb_button ,pdata +0401 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +0402 204002ac call p_mouse_init_sensor_reset +0403 204004a0 call p_mouse_null_enter_hibernate_disable +0404 204004d3 call p_mouse_discovey_led_blink_off +0405 70480900 jam 0 ,mem_mouse_send_switch_req_timer +0406 202042ca branch mouse_stop_discovery + +p_mouse_bb_event_disconnected: +0407 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 +0408 20200771 branch p_zcode_entrance + +p_mouse_enter_sniff_check: +0409 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 +040a 20200771 branch p_zcode_entrance + +p_mouse_24g_pairing_complete: +040b 7011c592 jam zcode_92 ,mem_zcode_temp_param0 +040c 20200771 branch p_zcode_entrance + +p_mouse_24g_attempt_fail: +040d 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 +040e 20200771 branch p_zcode_entrance + +p_mouse_24g_attempt_success: +040f 704b6401 jam 1 ,mem_mouse_24g_attempt_success_flag +0410 204004a0 call p_mouse_null_enter_hibernate_disable +0411 204002ac call p_mouse_init_sensor_reset +0412 20203f8d branch mouse_no_data_timer_init + +p_mouse_before_hibernate: +0413 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 +0414 20200771 branch p_zcode_entrance + +p_mouse_bb_event_timer: +0415 204004f4 call p_mouse_adc_read +0416 20400520 call p_mouse_low_voltage_led_timer +0417 204003ca call p_mouse_dpi_check +0418 204004a3 call p_mouse_multi_led_blink_timer +0419 20400473 call p_mouse_wheel_trigger_timer +041a 20400492 call p_mouse_null_enter_hibernate_timer +041b 20400478 call p_mouse_bt_discovery_check +041c 20404234 call mouse_check_discovery_timeout_timer +041d 2040046c call p_mouse_g24_long_sleep_param_update_timer +041e 20400458 call p_mouse_check_direct_timeout_timer +041f 20400455 call p_mouse_le_enable_att_list_timer +0420 2040045e call p_mouse_le_current_mult_update_timer +0421 20400464 call p_le_send_smp_security_request_timer +0422 2040044d call p_mouse_send_switch_req_timer +0423 20404231 call mouse_check_hid_handshake_timer +0424 20400450 call p_mouse_bt_check_sniff_req_timeout_timer +0425 2020423a branch mouse_check_no_data_timeout_timer + +p_mouse_select_device: + +p_mouse_select_device_by_button: +0426 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +0427 204067fb call gpio_config_input +0428 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +0429 2040681d call gpio_get_bit +042a 2020843f branch p_mouse_select_device_button_down ,true + +p_mouse_select_device_button_up: +042b 6800c6d9 fetch 1 ,mem_select_device_button_statue +042c c1008000 rtneq dpi_button_state_up +042d 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +042e 704b2401 jam on ,mem_mouse_multi_led_blink_enable +042f 6800cb6c fetch 1 ,mem_mouse_long_button_select_device +0430 203a043d branch p_mouse_long_button_state_clear ,blank + +p_mouse_ready_reconnection_by_button: +0431 20400436 call p_mouse_switch_device_flag +0432 7041bd00 jam 0 ,mem_link_key_exists +0433 204002f2 call p_mouse_store_flash_device_info +0434 204043c0 call mouse_select_device_enable +0435 2020437e branch mouse_set_reconnection + +p_mouse_switch_device_flag: +0436 6808c720 fetcht 1 ,mem_device_flag +0437 18408401 increase 1 ,temp +0438 6800c6d2 fetch 1 ,mem_device_number +0439 98467c00 isub temp ,null +043a 244143cc ncall mouse_select_device_count_clean ,positive +043b 6008c720 storet 1 ,mem_device_flag +043c 20600000 rtn + +p_mouse_long_button_state_clear: +043d 704b6cff jam 0xff ,mem_mouse_long_button_select_device +043e 20600000 rtn + +p_mouse_select_device_button_down: +043f 68014682 fetch 2 ,mem_ui_state_map +0440 c2858442 bbit1 ui_state_ble_adv ,p_mouse_select_device_button_down_next +0441 704b2400 jam off ,mem_mouse_multi_led_blink_enable + +p_mouse_select_device_button_down_next: +0442 6800c6d9 fetch 1 ,mem_select_device_button_statue +0443 c1000000 rtneq dpi_button_state_down +0444 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue +0445 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +0446 c3850000 rtnbit1 app_disc_pb_button +0447 6800c720 fetch 1 ,mem_device_flag +0448 c1808000 rtnne mode_bt_device1 + +p_mouse_pb_button_2ble_disconnect: +0449 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +044a 79207e0a set1 app_disc_pb_button ,pdata +044b 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +044c 20204386 branch mouse_disconnect + +p_mouse_send_switch_req_timer: +044d da604809 arg mem_mouse_send_switch_req_timer ,regc +044e da40637a arg host_create_conn_resend ,regb +044f 2020336d branch timer_single_step + +p_mouse_bt_check_sniff_req_timeout_timer: +0450 da604b09 arg mem_mouse_bt_send_first_package_timer ,regc +0451 da400453 arg p_mouse_bt_send_first_package ,regb +0452 2020336d branch timer_single_step + +p_mouse_bt_send_first_package: +0453 704b0a01 jam 1 ,mem_mouse_bt_send_first_package_flag +0454 20600000 rtn + +p_mouse_le_enable_att_list_timer: +0455 da6046c6 arg mem_le_start_encrypt_timer ,regc +0456 da403d60 arg mouse_le_write_enable ,regb +0457 2020336d branch timer_single_step + +p_mouse_check_direct_timeout_timer: +0458 da6046ae arg mem_mouse_direct_timer ,regc +0459 da40045b arg p_mouse_check_direct_timeout ,regb +045a 20203374 branch timer_single_step_2b + +p_mouse_check_direct_timeout: +045b 6800cb2e fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +045c 247a0000 nrtn blank +045d 20204266 branch mouse_check_direct_timeout + +p_mouse_le_current_mult_update_timer: +045e da604b5e arg mem_mouse_le_current_mult_timer ,regc +045f da400461 arg p_mouse_le_current_mult_reinit ,regb +0460 2020336d branch timer_single_step + +p_mouse_le_current_mult_reinit: +0461 6800c7c5 fetch 1 ,mem_lpm_mult_init +0462 6000c172 store 1 ,mem_lpm_mult +0463 20200471 branch p_mouse_long_mult_flag_enable + +p_le_send_smp_security_request_timer: +0464 6800cb65 fetch 1 ,mem_mouse_le_bb_connected_flag +0465 207a0000 rtn blank +0466 da604b6a arg mem_mouse_send_secutiry_request_timer ,regc +0467 da400469 arg p_le_pairing_sm_start_check ,regb +0468 2020336d branch timer_single_step + +p_le_pairing_sm_start_check: +0469 6800cb6b fetch 1 ,mem_le_send_security_request_flag +046a 247a0000 nrtn blank +046b 20205bf5 branch le_pairing_sm_start + +p_mouse_g24_long_sleep_param_update_timer: +046c da604b5f arg mem_24g_long_sleep_param_update_timer ,regc +046d da40046f arg p_mouse_g24_long_sleep_normal_param ,regb +046e 2020336d branch timer_single_step + +p_mouse_g24_long_sleep_normal_param: +046f 58249f00 setarg g24_long_sleep_step2 +0470 6001cc40 store 3 ,mem_24g_enter_hibernate + +p_mouse_long_mult_flag_enable: +0471 704b5d01 jam 1 ,mem_mouse_long_mult_flag +0472 20600000 rtn + +p_mouse_wheel_trigger_timer: +0473 da604807 arg mem_mouse_wheel_trigger_timer ,regc +0474 da400476 arg p_mouse_wheel_trigger_disable ,regb +0475 2020336d branch timer_single_step + +p_mouse_wheel_trigger_disable: +0476 70480600 jam 0 ,mem_mouse_wheel_trigger +0477 20600000 rtn + +p_mouse_bt_discovery_check: + +p_mouse_bt_discovery_by_button: +0478 6808c6ec fetcht 1 ,mem_config_bt_button_gpio +0479 204067fb call gpio_config_input +047a 6808c6ec fetcht 1 ,mem_config_bt_button_gpio +047b 2040681d call gpio_get_bit +047c 20208480 branch p_mouse_bt_discovery_commbination_key_down ,true + +p_mouse_bt_discovery_commbination_key_up: +047d 204043a9 call mouse_bt_discovery_commbination_key_up +047e d8e00009 arg mouse_bt_discovery_button_long_down_flag ,queue +047f 202043d2 branch mouse_disable_function_flag + +p_mouse_bt_discovery_commbination_key_down: +0480 70479e28 jam 40 ,mem_mouse_null_enter_hibernate_timer +0481 20400483 call p_mouse_bt_discovery_timer +0482 202043b0 branch mouse_bt_discovery_commbination_key_down + 1 + +p_mouse_bt_discovery_timer: +0483 da6046da arg mem_combination_ui_button_count ,regc +0484 da400486 arg p_mouse_long_button_bt_discovery ,regb +0485 2020336d branch timer_single_step + +p_mouse_long_button_bt_discovery: +0486 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0487 c3848000 rtnbit1 mouse_bt_discovery_button_long_down_flag +0488 704b6c00 jam 0 ,mem_mouse_long_button_select_device +0489 68014682 fetch 2 ,mem_ui_state_map +048a 2feffe0b isolate1 ui_state_ble_adv ,pdata +048b 2040c2d4 call mouse_stop_le_adv ,true +048c 68014682 fetch 2 ,mem_ui_state_map +048d 2feffe07 isolate1 ui_state_bt_reconnect ,pdata +048e 2040c392 call mouse_cancel_reconnect ,true +048f d8e00009 arg mouse_bt_discovery_button_long_down_flag ,queue +0490 204043ce call mouse_enable_function_flag +0491 202043b8 branch mouse_long_button_bt_discovry + +p_mouse_null_enter_hibernate_timer: +0492 6800cb2e fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0493 247a0000 nrtn blank +0494 6800c79d fetch 1 ,mem_mouse_null_enter_hibernate_flag +0495 207a0000 rtn blank +0496 6800c79e fetch 1 ,mem_mouse_null_enter_hibernate_timer +0497 203a049b branch p_mouse_null_enter_hibernate ,blank +0498 1fe0ffff increase -1 ,pdata +0499 6000c79e store 1 ,mem_mouse_null_enter_hibernate_timer +049a 20600000 rtn + +p_mouse_null_enter_hibernate: +049b 70479d00 jam 0 ,mem_mouse_null_enter_hibernate_flag +049c 2020340a branch app_enter_hibernate + +p_mouse_null_enter_hibernate_enable: +049d 70479d01 jam 1 ,mem_mouse_null_enter_hibernate_flag +049e 70479e28 jam 40 ,mem_mouse_null_enter_hibernate_timer +049f 20600000 rtn + +p_mouse_null_enter_hibernate_disable: +04a0 70479d00 jam 0 ,mem_mouse_null_enter_hibernate_flag +04a1 70479e00 jam 0 ,mem_mouse_null_enter_hibernate_timer +04a2 20600000 rtn + +p_mouse_multi_led_blink_timer: +04a3 6800cb24 fetch 1 ,mem_mouse_multi_led_blink_enable +04a4 207a0000 rtn blank +04a5 6800cb27 fetch 1 ,mem_mouse_multi_led_type +04a6 c00004a9 beq multi_led_on ,p_mouse_multi_led_type_on +04a7 c00084b3 beq multi_led_blink ,p_mouse_multi_led_type_blink +04a8 20600000 rtn + +p_mouse_multi_led_type_on: +04a9 204004c3 call p_mouse_multi_led_on +04aa 6800cb2c fetch 1 ,mem_mouse_multi_led_on_timer +04ab 1fe0fe01 increase 1 ,pdata +04ac 6000cb2c store 1 ,mem_mouse_multi_led_on_timer +04ad 6808cb28 fetcht 1 ,mem_mouse_multi_led_on_timer_init +04ae 98467c00 isub temp ,null +04af 204284b1 call p_mouse_multi_led_off_poweron2s ,zero +04b0 20600000 rtn + +p_mouse_multi_led_off_poweron2s: +04b1 704b2e00 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +04b2 202004d9 branch p_mouse_multi_led_off + +p_mouse_multi_led_type_blink: +04b3 6800cb2a fetch 1 ,mem_mouse_multi_led_blink_timer +04b4 1fe0ffff increase -1 ,pdata +04b5 6000cb2a store 1 ,mem_mouse_multi_led_blink_timer +04b6 247a0000 nrtn blank +04b7 6800cb29 fetch 1 ,mem_mouse_multi_led_blink_timer_init +04b8 6000cb2a store 1 ,mem_mouse_multi_led_blink_timer +04b9 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_count_limited +04ba 203a04bf branch p_mouse_multi_led_blink_count_no_limited ,blank +04bb 6800cb2b fetch 1 ,mem_mouse_multi_led_blink_count +04bc 203a04d7 branch p_mouse_multi_led_blink_off ,blank +04bd 1fe0ffff increase -1 ,pdata +04be 6000cb2b store 1 ,mem_mouse_multi_led_blink_count + +p_mouse_multi_led_blink_count_no_limited: +04bf 6800cb26 fetch 1 ,mem_mouse_multi_led_state +04c0 c00084d9 beq on ,p_mouse_multi_led_off +04c1 c00004c3 beq off ,p_mouse_multi_led_on +04c2 20600000 rtn + +p_mouse_multi_led_on: +04c3 704b2601 jam on ,mem_mouse_multi_led_state +04c4 6800c720 fetch 1 ,mem_device_flag +04c5 c00104ca beq mode_24g_device ,p_mouse_multi_down_led_on + +p_mouse_multi_up_led_on: +04c6 6808cb60 fetcht 1 ,mem_mouse_bt_led_gpio +04c7 2040680e call gpio_config_output +04c8 6808cb60 fetcht 1 ,mem_mouse_bt_led_gpio +04c9 20206829 branch gpio_out_active + +p_mouse_multi_down_led_on: +04ca 6808cb25 fetcht 1 ,mem_mouse_multi_led_gpio +04cb 2040680e call gpio_config_output +04cc 6808cb25 fetcht 1 ,mem_mouse_multi_led_gpio +04cd 20206825 branch gpio_out_inactive + +p_mouse_low_voltage_led_on: +04ce 6808cb25 fetcht 1 ,mem_mouse_multi_led_gpio +04cf 79200407 set1 gpio_active_bit ,temp +04d0 2040680e call gpio_config_output +04d1 6808cb25 fetcht 1 ,mem_mouse_multi_led_gpio +04d2 20206829 branch gpio_out_active + +p_mouse_discovey_led_blink_off: +04d3 6800cb2c fetch 1 ,mem_mouse_multi_led_on_timer +04d4 247a0000 nrtn blank +04d5 6800cb2e fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +04d6 247a0000 nrtn blank + +p_mouse_multi_led_blink_off: +04d7 58000000 setarg 0 +04d8 6001cb2a store 3 ,mem_mouse_multi_led_blink_timer + +p_mouse_multi_led_off: +04d9 6800cb2b fetch 1 ,mem_mouse_multi_led_blink_count +04da 243a04dd nbranch p_mouse_multi_led_off_wait_blink_over ,blank +04db 704b2400 jam 0 ,mem_mouse_multi_led_blink_enable +04dc 704b2700 jam 0 ,mem_mouse_multi_led_type + +p_mouse_multi_led_off_wait_blink_over: +04dd 704b2c00 jam 0 ,mem_mouse_multi_led_on_timer +04de 704b2600 jam off ,mem_mouse_multi_led_state + +p_mouse_multi_led_off2: +04df 6808cb25 fetcht 1 ,mem_mouse_multi_led_gpio +04e0 793f8407 set0 gpio_active_bit ,temp +04e1 20406806 call gpio_set_high_impedance + +p_mouse_bt_led_suspend: +04e2 6808cb60 fetcht 1 ,mem_mouse_bt_led_gpio +04e3 793f8407 set0 gpio_active_bit ,temp +04e4 20206806 branch gpio_set_high_impedance + +p_mouse_mode_bt_device1_multi_led_on: + +p_mouse_mode_24g_device_multi_led_on: +04e5 704b2e01 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +04e6 704b2401 jam on ,mem_mouse_multi_led_blink_enable +04e7 704b2700 jam multi_led_on ,mem_mouse_multi_led_type +04e8 704b2c00 jam 0 ,mem_mouse_multi_led_on_timer +04e9 20600000 rtn + +p_mouse_discovery_multi_led_blink: +04ea 704b2e00 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +04eb 704b2903 jam 3 ,mem_mouse_multi_led_blink_timer_init +04ec 704b2b01 jam 1 ,mem_mouse_multi_led_blink_count + +p_mouse_multi_led_blink_enable: +04ed 704b2a05 jam 5 ,mem_mouse_multi_led_blink_timer +04ee 704b2401 jam on ,mem_mouse_multi_led_blink_enable +04ef 704b2701 jam multi_led_blink ,mem_mouse_multi_led_type +04f0 20600000 rtn + +p_mouse_dpi_multi_led_blink: +04f1 704b2903 jam 3 ,mem_mouse_multi_led_blink_timer_init +04f2 704b2d01 jam 1 ,mem_mouse_multi_led_blink_count_limited +04f3 202004ed branch p_mouse_multi_led_blink_enable + +p_mouse_adc_read: +04f4 68014b2b fetch 2 ,mem_mouse_multi_led_blink_count +04f5 247a0000 nrtn blank +04f6 6800c6ce fetch 1 ,mem_adc_read_timer +04f7 1fe0fe01 increase 1 ,pdata +04f8 6000c6ce store 1 ,mem_adc_read_timer +04f9 1fe67c0a sub pdata ,10 ,null +04fa 20610000 rtn positive +04fb 204068a8 call adc_init_data +04fc 7046ce00 jam 0 ,mem_adc_read_timer +04fd 204068eb call adc_set_mode +04fe 20406908 call vdd_calculate_by_mode +04ff 1fe0fe1c add pdata ,0x1c ,pdata +0500 d8400122 arg 0x0122 ,temp +0501 98467c00 isub temp ,null +0502 24410510 ncall p_mouse_vlotage_sub ,positive +0503 6001470f store 2 ,mem_mouse_vdd_now_vol +0504 da204709 arg mem_mouse_vdd_calculate_set ,rega +0505 20400513 call p_adc_bat_percent_lowpower_out +0506 6800c231 fetch 1 ,mem_adc_power_flag +0507 c280b40a bbit1 1 ,app_enter_hibernate +0508 c300050b bbit0 0 ,p_mouse_adc_no_low_voltage +0509 704afd01 jam 1 ,mem_mouse_adc_last_low_voltage_flag +050a 202043e7 branch mouse_adc_low_voltage + +p_mouse_adc_no_low_voltage: +050b 204043e9 call mouse_adc_no_low_voltage +050c 6800cafd fetch 1 ,mem_mouse_adc_last_low_voltage_flag +050d 207a0000 rtn blank +050e 704afd00 jam 0 ,mem_mouse_adc_last_low_voltage_flag +050f 202004df branch p_mouse_multi_led_off2 + +p_mouse_vlotage_sub: +0510 d840000b arg 0x0b ,temp +0511 98467e00 isub temp ,pdata +0512 20600000 rtn + +p_adc_bat_percent_lowpower_out: +0513 ea240000 ifetch 8 ,rega +0514 60040a9a store 8 ,mem_pdatatemp +0515 68090a9c fetcht 2 ,mem_pdatatemp + 2 +0516 68010aa0 fetch 2 ,mem_pdatatemp + 6 +0517 98467c00 isub temp ,null +0518 24216944 nbranch adc_set_no_power_flag ,positive +0519 68090a9e fetcht 2 ,mem_pdatatemp + 4 +051a 98467c00 isub temp ,null +051b 24216940 nbranch adc_set_low_power_flag ,positive + +p_adc_clear_low_power_flag: +051c 6800c231 fetch 1 ,mem_adc_power_flag +051d 793ffe00 set0 0 ,pdata +051e 6000c231 store 1 ,mem_adc_power_flag +051f 20600000 rtn + +p_mouse_low_voltage_led_timer: +0520 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0521 c4020000 rtnbit0 mouse_low_voltage_flag +0522 68014682 fetch 2 ,mem_ui_state_map +0523 c3858000 rtnbit1 ui_state_ble_adv +0524 68014b2b fetch 2 ,mem_mouse_multi_led_blink_count +0525 247a0000 nrtn blank +0526 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count +0527 1fe0fe01 pincrease 1 +0528 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count +0529 c00284ce beq 5 ,p_mouse_low_voltage_led_on +052a 1fe67c0a sub pdata ,10 ,null +052b 2421052d nbranch p_mouse_adc_low_volatage_led_timer_count_clean ,positive +052c 20600000 rtn + +p_mouse_adc_low_volatage_led_timer_count_clean: +052d 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count +052e 202004d9 branch p_mouse_multi_led_off + +p_mouse_set_sdio_high: +052f 6800cafe fetch 1 ,mem_mouse_init_sensor_reset_flag +0530 207a0000 rtn blank + +p_mouse_seting_dpi: + +p_mouse_seting_sensor_type: +0531 6800c6e0 fetch 1 ,mem_config_sensor_type +0532 c001054e beq ka8 ,p_mouse_seting_ka8_dpi +0533 c003053e beq p3065_xy ,p_mouse_seting_3065xy_dpi +0534 c0038546 beq ma8650 ,p_mouse_seting_8009_dpi + +p_mouse_seting_3205_dpi: +0535 6800c77a fetch 1 ,mem_mouse_dpi +0536 205a0544 call p_mouse_3065xy_dpi_recount ,blank +0537 6800c77a fetch 1 ,mem_mouse_dpi +0538 c000853b beq mouse_dpi_level2 ,p_mouse_3205_set_cpi1 +0539 c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 +053a 20203d88 branch mouse_set_cpi2 + +p_mouse_3205_set_cpi1: +053b 6800c77f fetch 1 ,mem_320x_dpi_1 +053c 1fe0ffff increase -1 ,pdata +053d 20203dbe branch mouse_p3205_dpi + +p_mouse_seting_3065xy_dpi: +053e 6800c77a fetch 1 ,mem_mouse_dpi +053f 205a0544 call p_mouse_3065xy_dpi_recount ,blank +0540 6800c77a fetch 1 ,mem_mouse_dpi +0541 c000854c beq mouse_dpi_level2 ,p_mouse_8009_set_cpi1 +0542 c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 +0543 20203d88 branch mouse_set_cpi2 + +p_mouse_3065xy_dpi_recount: +0544 70477a01 jam mouse_dpi_level2 ,mem_mouse_dpi +0545 20600000 rtn + +p_mouse_seting_8009_dpi: +0546 6800c77a fetch 1 ,mem_mouse_dpi +0547 205a0544 call p_mouse_3065xy_dpi_recount ,blank +0548 6800c77a fetch 1 ,mem_mouse_dpi +0549 c000854c beq mouse_dpi_level2 ,p_mouse_8009_set_cpi1 +054a c001bd88 beq mouse_dpi_level4 ,mouse_set_cpi2 +054b 20203d8a branch mouse_set_cpi1 + +p_mouse_8009_set_cpi1: +054c 7046b500 jam 0 ,mem_mouse_cpi_count +054d 20203dc1 branch mouse_p3205_dpi + 3 + +p_mouse_seting_ka8_dpi: +054e 6800c77a fetch 1 ,mem_mouse_dpi +054f 205a0544 call p_mouse_3065xy_dpi_recount ,blank +0550 6800c77a fetch 1 ,mem_mouse_dpi +0551 c000bd88 beq mouse_dpi_level2 ,mouse_set_cpi2 +0552 c0018554 beq mouse_dpi_level4 ,p_mouse_ka8_set_cpi3 +0553 20203d8e branch mouse_set_cpi4 + +p_mouse_ka8_set_cpi3: +0554 58000005 setarg 5 +0555 20203dbe branch mouse_p3205_dpi + +p_mouse_motion: +0556 78547c00 disable user +0557 58000000 setarg 0 +0558 6003469b store 6 ,mem_mouse_x +0559 20400585 call p_mouse_cheak_sensor_data +055a 20404079 call mouse_zwheel +055b 20400562 call p_mouse_key +055c 2434055f nbranch p_mouse_motion_nodata ,user +055d 20400792 call p_drawing_optima +055e 20203fa0 branch mouse_motion + 9 + +p_mouse_motion_nodata: +055f 2040079b call p_drawing_optima_init +0560 704b3600 jam 0 ,mem_low_power_check_count +0561 20600000 rtn + +p_mouse_key: +0562 20400564 call p_mouse_check_key_gpio +0563 2020409a branch mouse_key + 1 + +p_mouse_check_key_gpio: +0564 da200000 arg 0 ,rega +0565 20400567 call p_mouse_check_lkey_gpio +0566 2020408e branch mouse_check_key_gpio_output + +p_mouse_check_lkey_gpio: +0567 6808c6e2 fetcht 1 ,mem_lbutton_gpio +0568 20400580 call p_gpio_set_input_pu +0569 6808c6e2 fetcht 1 ,mem_lbutton_gpio +056a 2040681d call gpio_get_bit +056b 7920a200 setflag true ,0 ,rega + +p_mouse_check_rkey_gpio: +056c 6808c6e3 fetcht 1 ,mem_rbutton_gpio +056d 20400580 call p_gpio_set_input_pu +056e 6808c6e3 fetcht 1 ,mem_rbutton_gpio +056f 2040681d call gpio_get_bit +0570 7920a201 setflag true ,1 ,rega + +p_mouse_check_mkey_gpio: +0571 6808c6e4 fetcht 1 ,mem_mbutton_gpio +0572 20400577 call p_gpio_set_input_pd +0573 6808c6e4 fetcht 1 ,mem_mbutton_gpio +0574 2040681d call gpio_get_bit +0575 7d20a202 nsetflag true ,2 ,rega +0576 20200580 branch p_gpio_set_input_pu + +p_gpio_set_input_pd: +0577 793f8407 set0 gpio_active_bit ,temp +0578 d8a08078 arg core_gpio_pu0 ,contw +0579 20406830 call gpio_set_bit +057a 79200407 set1 gpio_active_bit ,temp + +p_gpio_set_input_pd4: +057b d8a0807c arg core_gpio_pd0 ,contw +057c 20406830 call gpio_set_bit +057d 793f8407 set0 gpio_active_bit ,temp +057e d8a08070 arg core_gpio_oe0 ,contw +057f 20206830 branch gpio_set_bit + +p_gpio_set_input_pu: +0580 79200407 set1 gpio_active_bit ,temp + +p_gpio_set_input_pu1: +0581 d8a08078 arg core_gpio_pu0 ,contw +0582 20406830 call gpio_set_bit +0583 793f8407 set0 gpio_active_bit ,temp +0584 2020057b branch p_gpio_set_input_pd4 + +p_mouse_cheak_sensor_data: +0585 6800c6e0 fetch 1 ,mem_config_sensor_type + +p_mouse_p32xx_sensor_motion: +0586 20403fc0 call mouse_clear_sensor_data +0587 78547c00 disable user +0588 20203fe7 branch mouse_p32xx_sensor_motion_2 + +p_mouse_bb_event_discovery_btn: +0589 204004a0 call p_mouse_null_enter_hibernate_disable +058a 280ffe26 isolate1 mark_24g ,mark +058b 20408189 call p_g24_check_51cmd_stop_24g ,true +058c 2020426d branch mouse_bb_event_discovery_btn + 1 + +p_le_addr_random_config: +058d 7011c581 jam zcode_81 ,mem_zcode_temp_param0 +058e 20200771 branch p_zcode_entrance + +p_mouse_start_discovery: +058f 7011c550 jam zcode_50 ,mem_zcode_temp_param0 +0590 20200771 branch p_zcode_entrance + +p_mouse_load_random_addr_increase_count: +0591 2040033c call p_flash_release_deep_power_down +0592 d8400002 arg 2 ,temp +0593 da2047c2 arg mem_random_addr_increase_count ,rega +0594 da40005f arg mouse_random_addr_count_eeprom_offset ,regb +0595 6801c700 fetch 3 ,mem_flash_base +0596 9a40fe00 iadd regb ,pdata +0597 20206562 branch spid_read_flash + +p_mouse_load_fast_conn_flag: +0598 2040033c call p_flash_release_deep_power_down +0599 d8400001 arg 1 ,temp +059a da204b66 arg mem_mouse_fast_conn_flag ,rega +059b da400064 arg mouse_fast_conn_flag_offset ,regb +059c 6801c700 fetch 3 ,mem_flash_base +059d 9a40fe00 iadd regb ,pdata +059e 20206562 branch spid_read_flash + +p_le_adv_data_update: +059f d8a0437b arg mem_le_adv_data + 11 ,contw +05a0 df200013 arg 19 ,loopcnt +05a1 20407f01 call memcpy +05a2 202057b8 branch le_modified_name_adv + +p_mouse_stop_discovery: +05a3 58000000 setarg 0 +05a4 600146ac store 2 ,mem_mouse_discovery_timer +05a5 20400383 call p_mouse_sensor_poweron +05a6 6800c092 fetch 1 ,mem_device_option +05a7 2feffe01 isolate1 mode_4_mouse ,pdata +05a8 2040c2d4 call mouse_stop_le_adv ,true +05a9 6800c092 fetch 1 ,mem_device_option +05aa 2feffe00 isolate1 mode_3_mouse ,pdata +05ab 2040c2d7 call mouse_stop_bt3_discovery ,true +05ac 202004d3 branch p_mouse_discovey_led_blink_off + +p_le_slave_match: +05ad 6800c50f fetch 1 ,mem_le_md_count +05ae 1fe0fe01 pincrease 1 +05af 6000c50f store 1 ,mem_le_md_count +05b0 c0065395 beq le_md_max_count ,le_slave_cont +05b1 204055aa call le_acknowledge +05b2 2040561e call le_prepare_tx +05b3 20400716 call power_ctrl_start +05b4 2020538f branch le_slave_match + 7 + +p_le_next_adv_channel: +05b5 68008016 fetch 1 ,mem_le_ch_mapped +05b6 1fe0fe01 increase 1 ,pdata +05b7 60008016 store 1 ,mem_le_ch_mapped +05b8 c1940000 rtnne 40 +05b9 70001625 jam 37 ,mem_le_ch_mapped +05ba 20600000 rtn + +p_le_receive_skip: +05bb 204029bb call save_rssi +05bc 204001fe call p_rssi_signal +05bd 202054a3 branch le_receive_skip + 2 + +p_le_update_param: +05be 7011c540 jam zcode_40 ,mem_zcode_temp_param0 +05bf 20200771 branch p_zcode_entrance + +p_le_update_channel_map: +05c0 7011c541 jam zcode_41 ,mem_zcode_temp_param0 +05c1 20200771 branch p_zcode_entrance + +p_le_prepare_tx: +05c2 68008456 fetch 1 ,mem_le_arq +05c3 c28285e1 bbit1 wak ,p_le_prepare_tx_wak +05c4 20400712 call power_ctrl_pac_succ_incrs +05c5 6800c78e fetch 1 ,mem_empty_count +05c6 243a05cc nbranch p_le_send_empyt ,blank +05c7 6800843f fetch 1 ,mem_le_state +05c8 c30205d0 bbit0 lestate_encryption ,p_le_tx_4 +05c9 680082da fetch 1 ,mem_le_rxbuf + 1 +05ca 203a05d0 branch p_le_tx_4 ,blank +05cb 20205664 branch le_send_empty + +p_le_send_empyt: +05cc 6800c78e fetch 1 ,mem_empty_count +05cd 1fe0ffff increase -1 ,pdata +05ce 6000c78e store 1 ,mem_empty_count +05cf 20205664 branch le_send_empty + +p_le_tx_4: +05d0 6800c4c4 fetch 1 ,mem_le_pairing_state +05d1 c08285d3 bne flag_le_pairing_after_auth ,p_in_le_tx_4 +05d2 70478e03 jam 3 ,mem_empty_count + +p_in_le_tx_4: +05d3 20405892 call le_fifo_check_nearly_full +05d4 205a0390 call p_mouse_data_pull ,blank +05d5 20205622 branch le_prepare_tx + 4 + +p_le_check_tx_retransmit_setmd: +05d6 6800c6c5 fetch 1 ,mem_le_connect_status_flag +05d7 1fe17e03 and pdata ,0x03 ,pdata +05d8 c1818000 rtnne 0x03 +05d9 6800c7c1 fetch 1 ,mem_mouse_data_queue_num +05da 207a0000 rtn blank +05db 6800c3dd fetch 1 ,mem_le_txlen +05dc 207a0000 rtn blank +05dd 6800c3dc fetch 1 ,mem_le_txheader +05de 79207e04 set1 md ,pdata +05df 6000c3dc store 1 ,mem_le_txheader +05e0 20205650 branch le_set_md + +p_le_prepare_tx_wak: +05e1 204005d6 call p_le_check_tx_retransmit_setmd + +p_le_power_ctrl_pac_succ_decrs: + +power_ctrl_pac_succ_decrs: +05e2 6800cd4a fetch 1 ,mem_power_ctrl_pac_succ_cnt +05e3 1fe67c02 sub pdata ,2 ,null +05e4 244105ea ncall power_ctrl_pac_succ_cnt_reinit ,positive +05e5 6800cd4a fetch 1 ,mem_power_ctrl_pac_succ_cnt +05e6 c1000000 rtneq 0 +05e7 1fe0ffff increase -1 ,pdata +05e8 6000cd4a store 1 ,mem_power_ctrl_pac_succ_cnt +05e9 20600000 rtn + +power_ctrl_pac_succ_cnt_reinit: +05ea 704d4a03 jam 3 ,mem_power_ctrl_pac_succ_cnt +05eb 20600000 rtn + +p_mouse_le_reconn_write_enable_timer_reinit: +05ec 6800c79f fetch 1 ,mem_mouse_le_reconnect_flag +05ed 207a0000 rtn blank +05ee 6800c6c5 fetch 1 ,mem_le_connect_status_flag +05ef 1fe17e03 and pdata ,0x03 ,pdata +05f0 c1018000 rtneq 0x03 +05f1 7046c601 jam 1 ,mem_le_start_encrypt_timer +05f2 20600000 rtn + +p_le_parse: +05f3 c6078000 rtnmark1 mark_old_packet +05f4 20405890 call le_fifo_check_full +05f5 247a0000 nrtn blank +05f6 680082d9 fetch 1 ,mem_le_rxbuf +05f7 1fe17e03 and pdata ,0x3 ,pdata +05f8 6000c50c store 1 ,mem_le_packet_llid +05f9 e8c08000 ifetch 1 ,contr +05fa 1fe17e1f and pdata ,0x1f ,pdata +05fb 6000c50b store 1 ,mem_le_packet_size +05fc 207a0000 rtn blank +05fd 18c27e00 copy contr ,pdata +05fe 6001450d store 2 ,mem_le_payload_ptr +05ff 6800c50c fetch 1 ,mem_le_packet_llid +0600 c0018602 beq llid_le_ll ,p_le_parse_ll +0601 2020568d branch le_parse_l2cap + +p_le_parse_ll: +0602 680082db fetch 1 ,mem_le_rxbuf + 2 +0603 c0008605 beq ll_channel_map_req ,p_le_parse_channel_map_req +0604 20205c65 branch le_parse_ll + 1 + +p_le_parse_channel_map_req: +0605 e8c28000 ifetch 5 ,contr +0606 6002c3ce store 5 ,mem_le_new_map +0607 e8c10000 ifetch 2 ,contr +0608 6001045f store 2 ,mem_le_instant +0609 20205c8a branch le_parse_channel_map_req + 7 + +p_le_parse_l2cap: +060a e8c10000 ifetch 2 ,contr +060b c002060e beq le_l2cap_cid_att ,p_le_parse_att +060c c003063a beq le_l2cap_cid_smp ,p_le_parse_smp +060d 20205698 branch le_parse_l2cap + 11 + +p_le_parse_att: +060e 20407ea5 call store_contr +060f 204005ec call p_mouse_le_reconn_write_enable_timer_reinit +0610 20407e9f call get_contr +0611 e8c18000 ifetch 3 ,contr +0612 60018477 store 3 ,mem_le_att_opcode +0613 c008061d beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +0614 1fec8400 rshift8 pdata ,temp +0615 18467c24 sub temp ,0x24 ,null +0616 2021062b branch p_le_parse_att1 ,positive +0617 d84047c6 arg mem_mouse_le_uuid_sup ,temp +0618 600944bc storet 2 ,mem_ui_le_uuid_table +0619 204058ad call le_parse_att + 2 +061a 58008e7a setarg 0x8e7a +061b 600144bc store 2 ,mem_ui_le_uuid_table +061c 20600000 rtn + +p_le_parse_att_read_by_group_type_request: +061d 204059fa call le_parse_att_read_by_group_type_request +061e 20405879 call le_fifo_get_last_tx_ptr +061f 18c08c07 increase 7 ,contr +0620 e8c08000 ifetch 1 ,contr +0621 c1888000 rtnne attop_read_by_group_type_response +0622 18c08c05 increase 5 ,contr +0623 e8c10000 ifetch 2 ,contr +0624 d8401812 arg uuid_service_hids ,temp +0625 98467c00 isub temp ,null +0626 24628000 nrtn zero +0627 18c08dfc increase -4 ,contr +0628 5800002b setarg 0x2b +0629 e0c10000 istore 2 ,contr +062a 20600000 rtn + +p_le_parse_att1: +062b c005062d beq attop_read_request ,p_le_parse_att_read_request +062c 202058ad branch le_parse_att + 2 + +p_le_parse_att_read_request: +062d 68090478 fetcht 2 ,mem_le_att_handle +062e 6800c4e9 fetch 1 ,mem_le_configuration +062f c2818634 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth + +p_le_send_att_read_response: +0630 68010478 fetch 2 ,mem_le_att_handle +0631 c009da76 beq 0x13 ,le_send_att_error_response_notfound +0632 68090478 fetcht 2 ,mem_le_att_handle +0633 202059bf branch le_send_att_read_response + +p_le_send_att_read_response_check_auth: +0634 680144fa fetch 2 ,mem_le_pairing_handle +0635 98467c00 isub temp ,null +0636 24228630 nbranch p_le_send_att_read_response ,zero +0637 20405a42 call le_check_encrypt_state +0638 24340630 nbranch p_le_send_att_read_response ,user +0639 202059e2 branch le_send_att_read_response_check_auth_next + +p_le_parse_smp: +063a e8c08000 ifetch 1 ,contr +063b c000863d beq smp_pairing_request ,p_le_parse_smp_pairing_request +063c 20205af6 branch le_parse_smp + 2 + +p_le_parse_smp_pairing_request: +063d 704b6b01 jam 1 ,mem_le_send_security_request_flag +063e 20205b09 branch le_parse_smp_pairing_request + +p_le_adv_not_match: +063f 68008016 fetch 1 ,mem_le_ch_mapped +0640 c093d6f2 bne 39 ,le_adv_loop +0641 180a7e00 random pdata +0642 d84001ff arg 0x1ff ,temp +0643 98417e00 iand temp ,pdata +0644 1fe0fefa add pdata ,250 ,pdata +0645 20403cbe call delay +0646 20205710 branch le_adv_not_match2 + +p_le_lpm_setmult: +0647 7855fc00 disable wake +0648 2037064a branch p_le_lpm_set_mult_attempt ,attempt +0649 2436d806 nbranch le_lpm_lost ,match + +p_le_lpm_set_mult_attempt: +064a 20402bcb call lpm_match +064b 680140c1 fetch 2 ,mem_rx_window_sniff +064c 6001044d store 2 ,mem_le_receive_window +064d 6800c6c5 fetch 1 ,mem_le_connect_status_flag +064e 2fe00603 compare 3 ,pdata ,3 +064f 2420abde nbranch lpm_mult_short ,true +0650 202057fb branch le_lpm_set_mult_attempt + 3 + +p_le_mouse_bb_event_connect_complete: +0651 6800c79f fetch 1 ,mem_mouse_le_reconnect_flag +0652 247a0000 nrtn blank +0653 68008478 fetch 1 ,mem_le_att_handle +0654 1fe67e1a sub pdata ,26 ,pdata +0655 24628000 nrtn zero +0656 20203d60 branch mouse_le_write_enable + +p_twspi_reset: +0657 68108077 hfetch 1 ,core_gpio_out3 +0658 1fe17efd and_into 0xfd ,pdata +0659 60108077 hstore 1 ,core_gpio_out3 +065a 68188073 hfetcht 1 ,core_gpio_oe3 +065b 18418402 or_into 0x2 ,temp +065c 60188073 hstoret 1 ,core_gpio_oe3 +065d 204063ee call twspi_disable +065e 184104fd and_into 0xfd ,temp +065f 2000000d nop 13 +0660 20400664 call p_twspi_enable +0661 60188073 hstoret 1 ,core_gpio_oe3 +0662 20600000 rtn + +p_spid_init: +0663 204064dd call spid_init_common + +p_twspi_enable: +0664 68108081 hfetch 1 ,core_gpio_sel1 +0665 1fe1fe01 or pdata ,0x01 ,pdata +0666 1fe17ef5 and pdata ,0xf5 ,pdata +0667 60108081 hstore 1 ,core_gpio_sel1 +0668 20600000 rtn + +p_page_wait_fhs_reply_ok: +0669 7011c500 jam zcode_00 ,mem_zcode_temp_param0 +066a 20200771 branch p_zcode_entrance + +p_role_switch_master: +066b 204021c9 call role_switch_check +066c 24740000 nrtn user + +p_wait_role_switch_anchor: +066d 78547c00 disable user +066e 70001120 jam param_newconnto ,mem_newconnto_counter +066f 793f800b set0 mark_fhs_already_good ,mark +0670 793f802d set0 mark_role_switch_receive_fhs ,mark + +p_roles_waitfhs_loop: +0671 20402a4f call rf_setup_time_master_slot +0672 204022e6 call master_recv_packet +0673 c5058678 bmark1 mark_fhs_already_good ,p_roles_replyto_fhs +0674 20402455 call new_conn_timeout +0675 243a0671 nbranch p_roles_waitfhs_loop ,blank +0676 c5168681 bmark1 mark_role_switch_receive_fhs ,p_roles_replyto_fhs1 +0677 202021ec branch role_switch_fail_master + +p_roles_replyto_fhs: +0678 20402a4d call rf_setup_time_slave_slot +0679 d8200010 arg type_id ,type +067a 204022dc call master_send_packet +067b 7920002d set1 mark_role_switch_receive_fhs ,mark +067c 793f800b set0 mark_fhs_already_good ,mark +067d 68008077 fetch 1 ,mem_amaddr +067e 98000800 iforce am_addr +067f 70001102 jam 2 ,mem_newconnto_counter +0680 20200671 branch p_roles_waitfhs_loop + +p_roles_replyto_fhs1: +0681 68020165 fetch 4 ,mem_clke_bt +0682 1fe0fe08 pincrease 8 +0683 60020165 store 4 ,mem_clke_bt +0684 202021f8 branch roles_replyto_fhs + 4 + +p_process_dmh: +0685 c516264d bmark1 mark_first_packet ,end_of_packet +0686 2020258f branch process_dmh + 1 + +p_quit_connection_cont: +0687 204033af call app_disconn_reason_collect_bt +0688 204026e9 call sniff_exit +0689 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp +068a 20407d86 call ui_ipc_send_event +068b 20405cf7 call init_lmp_work +068c 20404d6b call l2cap_init_work +068d 2020246e branch quit_connection_cont + 8 + +p_prepare_tx: +068e 68008030 fetch 1 ,mem_state +068f 2feffe00 isolate1 state_inconn ,pdata +0690 20408692 call p_bt_power_ctrl ,true +0691 2020248a branch prepare_tx + 1 + +p_bt_power_ctrl: +0692 68008047 fetch 1 ,mem_arq +0693 2feffe03 isolate1 wack ,pdata +0694 204085e2 call power_ctrl_pac_succ_decrs ,true +0695 24408712 ncall power_ctrl_pac_succ_incrs ,true +0696 20200716 branch power_ctrl_start + +p_slave_conn_recv_packet: +0697 204024f0 call slave_receive_master_slot +0698 242c28f9 nbranch shutdown_radio ,sync +0699 204029bb call save_rssi +069a 204001fe call p_rssi_signal +069b 20202518 branch slave_conn_recv_packet + 4 + +p_lpm_dispatch: +069c c6130000 rtnmark1 mark_24g +069d 20402afa call lpo_calibration +069e 6801c16f fetch 3 ,mem_clks_per_lpo +069f 207a0000 rtn blank +06a0 6800c091 fetch 1 ,mem_lpm_mode +06a1 207a0000 rtn blank +06a2 6800c65a fetch 1 ,mem_ssp_enable +06a3 203a06a6 branch p_lpm_dispatch_next ,blank +06a4 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +06a5 207a0000 rtn blank + +p_lpm_dispatch_next: +06a6 6800c4c0 fetch 1 ,mem_le_sc_calc +06a7 247a0000 nrtn blank +06a8 20402c3a call lpm_check_wake_lock +06a9 247a0000 nrtn blank +06aa 6800c040 fetch 1 ,mem_context +06ab 2fe00e03 compare 3 ,pdata ,0x7 +06ac 2420ab9d nbranch lpm_dispatch_unconn ,true +06ad 68014042 fetch 2 ,mem_context + coffset_tsniff +06ae d840ffff arg 0xffff ,temp +06af 98467c00 isub temp ,null +06b0 20628000 rtn zero +06b1 20202b7d branch lpm_dispatch_next + 9 + +p_lpm_set_mult: +06b2 7855fc00 disable wake +06b3 68008030 fetch 1 ,mem_state +06b4 c4008000 rtnbit0 state_insniff +06b5 2436abd0 nbranch lpm_not_match ,match +06b6 20402bcb call lpm_match +06b7 680140c1 fetch 2 ,mem_rx_window_sniff +06b8 6001003e store 2 ,mem_rx_window +06b9 68008047 fetch 1 ,mem_arq +06ba c281abde bbit1 wack ,lpm_mult_short +06bb c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +06bc 20405274 call l2cap_malloc_is_fifo_empty +06bd 243a2bde nbranch lpm_mult_short ,blank +06be 205a06c0 call p_lpm_set_attemp_timeout ,blank +06bf 20202bbe branch lpm_set_mult + 13 + +p_lpm_set_attemp_timeout: +06c0 70008a01 jam 1 ,mem_current_sniff_attempt +06c1 70008b00 jam 0 ,mem_current_sniff_timeout +06c2 20600000 rtn + +p_mouse_bb_disconnected: +06c3 7011c510 jam zcode_10 ,mem_zcode_temp_param0 +06c4 20200771 branch p_zcode_entrance + +p_hid_rx_process: +06c5 7011c511 jam zcode_11 ,mem_zcode_temp_param0 +06c6 20200771 branch p_zcode_entrance + +p_parse_lmp_accepted: +06c7 68008552 fetch 1 ,mem_rxbuf + 1 +06c8 600084c9 store 1 ,mem_lmi_accepted_opcode +06c9 c00986cb beq lmp_switch_req ,p_parse_lmp_accepted_switch +06ca 20205db4 branch parse_lmp_accepted + 3 + +p_parse_lmp_accepted_switch: +06cb 20405dcf call parse_lmp_accepted_switch +06cc 704aff01 jam 1 ,mem_bt_rcvd_switch_req_accept +06cd 6800cb01 fetch 1 ,mem_bt_send_lmp_setup_complete +06ce 207a0000 rtn blank +06cf 704b0102 jam 2 ,mem_bt_send_lmp_setup_complete +06d0 20600000 rtn + +p_send_lmp: +06d1 7011c520 jam zcode_20 ,mem_zcode_temp_param0 +06d2 20200771 branch p_zcode_entrance + +p_process_conn_sm: +06d3 204062bc call lmo_fifo_check +06d4 247a0000 nrtn blank + +p_process_conn_sm_continue: +06d5 68008055 fetch 1 ,mem_conn_sm +06d6 207a0000 rtn blank +06d7 c00206f5 beq conn_sm_send_conn_req ,p_host_create_conn_send_conn_req +06d8 c00806da beq conn_sm_wait_switch_after_host_connection ,p_host_creat_conn_wait_switch +06d9 20206320 branch process_conn_sm_continue + 2 + +p_host_creat_conn_wait_switch: +06da 6800c55b fetch 1 ,mem_switch_flag +06db c1000000 rtneq switch_flag_init +06dc c00086de beq switch_flag_accept ,p_host_create_conn_switch_accept +06dd 2020635f branch host_creat_conn_wait_switch + 3 + +p_host_create_conn_switch_accept: +06de 20748000 rtn master + +p_host_create_conn_auth_pair: +06df 6800816d fetch 1 ,mem_connection_options +06e0 c28006e2 bbit1 connection_auth ,p_host_create_conn_auth_pair_true +06e1 20206399 branch host_create_conn_auth_pair + 1 + +p_host_create_conn_auth_pair_true: +06e2 6800cb01 fetch 1 ,mem_bt_send_lmp_setup_complete +06e3 c000e39d beq 1 ,host_create_conn_auth_pair_true +06e4 6800c1bd fetch 1 ,mem_link_key_exists +06e5 203a63a9 branch host_create_conn_auth_pair_nokey ,blank +06e6 680084d1 fetch 1 ,mem_lmp_conn_state +06e7 c4018000 rtnbit0 sent_setup_complete +06e8 c4010000 rtnbit0 received_setup_complete +06e9 6800cb00 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch +06ea 207a0000 rtn blank +06eb 704b0000 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch +06ec 680204e9 fetch 4 ,mem_aurand_send_delay_time +06ed d8400014 arg 20 ,temp +06ee 98408400 iadd temp ,temp +06ef 1c427e00 copy clkn_bt ,pdata +06f0 98467c00 isub temp ,null +06f1 242106f3 nbranch p_bt_send_max_slot_req_accept_after_switch_wait ,positive +06f2 20206349 branch host_create_conn_auth + +p_bt_send_max_slot_req_accept_after_switch_wait: +06f3 704b0001 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +06f4 20600000 rtn + +p_host_create_conn_send_conn_req: +06f5 70480914 jam 20 ,mem_mouse_send_switch_req_timer +06f6 2020636f branch host_create_conn_send_conn_req + +p_check_51cmd_once_continue: +06f7 204062bc call lmo_fifo_check +06f8 243a7ddb nbranch check_51cmd_restore ,blank +06f9 68008a99 fetch 1 ,mem_fifo_temp +06fa c584fdd6 bmark0 mark_context ,check_51cmd_check_idle +06fb c00f86ff beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +06fc c0100702 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +06fd c009070c beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +06fe 20207dca branch check_51cmd_once_continue + 2 + +p_flash_store_le_reconn_info: +06ff 70018534 jam rec_4_mode ,mem_record_bt_mode +0700 6803044f fetch 6 ,mem_le_plap +0701 20200704 branch p_flash_store_reconn_info + +p_flash_store_bd_reconn_info: +0702 70018533 jam rec_3_mode ,mem_record_bt_mode +0703 68030040 fetch 6 ,mem_plap + +p_flash_store_reconn_info: +0704 60030186 store 6 ,mem_temp_lap + +p_mouse_store_remote_bdaddr: +0705 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0706 c4038000 rtnbit0 mouse_store_eeprom_flag +0707 d8e00007 arg mouse_store_eeprom_flag ,queue +0708 204043d2 call mouse_disable_function_flag +0709 204042e8 call mouse_check_device_addr + +p_mouse_unplug_clean_bdaddr: +070a 204042fb call mouse_before_store_reconn_info +070b 202002f2 branch p_mouse_store_flash_device_info + +p_check_51cmd_ble_update_connect_param: +070c 20405890 call le_fifo_check_full +070d 247a0000 nrtn blank +070e 20205abf branch le_l2cap_tx_update_req + +power_ctrl_pac_succ_cnt_init: +070f 704d4d01 jam 1 ,mem_power_ctrl_level +0710 704d4a00 jam 0 ,mem_power_ctrl_pac_succ_cnt +0711 20600000 rtn + +power_ctrl_pac_succ_incrs: +0712 6800cd4a fetch 1 ,mem_power_ctrl_pac_succ_cnt +0713 1fe0fe01 increase 1 ,pdata +0714 6000cd4a store 1 ,mem_power_ctrl_pac_succ_cnt +0715 20600000 rtn + +power_ctrl_start: +0716 68014682 fetch 2 ,mem_ui_state_map +0717 c3858000 rtnbit1 ui_state_ble_adv +0718 c3838000 rtnbit1 ui_state_bt_reconnect +0719 c3830000 rtnbit1 ui_state_bt_discovery +071a da204cd3 arg mem_rssi_signal_buf ,rega +071b 2040023b call p_rssi_average +071c 6008cd4b storet 1 ,mem_rssi_avg_received +071d 58000082 setarg rssi_dis_max_24g +071e c5130720 bmark1 mark_24g ,power_ctrl_start_next +071f 58000080 setarg rssi_dis_max_ble + +power_ctrl_start_next: +0720 98467c00 isub temp ,null +0721 24210738 nbranch power_ctrl_txpower_incrs_force ,positive +0722 6800cd4a fetch 1 ,mem_power_ctrl_pac_succ_cnt +0723 1fe67c02 sub pdata ,2 ,null +0724 24210728 nbranch power_ctrl_txpower_decrs_check ,positive +0725 6800cd4a fetch 1 ,mem_power_ctrl_pac_succ_cnt +0726 c0000739 beq 0 ,power_ctrl_txpower_incrs +0727 20600000 rtn + +power_ctrl_txpower_decrs_check: +0728 6800cd4a fetch 1 ,mem_power_ctrl_pac_succ_cnt +0729 c1900000 rtnne 32 +072a 704d4a00 jam 0 ,mem_power_ctrl_pac_succ_cnt + +power_ctrl_txpower_decrs: +072b 6808cd4b fetcht 1 ,mem_rssi_avg_received +072c 58000077 setarg rssi_dis_min_24g +072d c513072f bmark1 mark_24g ,power_ctrl_txpower_decrs_next +072e 58000075 setarg rssi_dis_min_ble + +power_ctrl_txpower_decrs_next: +072f 98467c00 isub temp ,null +0730 24610000 nrtn positive +0731 6800cd4d fetch 1 ,mem_power_ctrl_level +0732 c0000740 beq 0 ,power_ctrl_decrs_level0 +0733 1fe0ffff increase -1 ,pdata +0734 6000cd4d store 1 ,mem_power_ctrl_level +0735 c0000740 beq 0 ,power_ctrl_decrs_level0 + +power_ctrl_decrs_level1: + +power_ctrl_incrs_level1: +0736 7041de00 jam tx_power_0db ,mem_tx_power +0737 20600000 rtn + +power_ctrl_txpower_incrs_force: +0738 704d4a00 jam 0 ,mem_power_ctrl_pac_succ_cnt + +power_ctrl_txpower_incrs: +0739 6800cd4d fetch 1 ,mem_power_ctrl_level +073a c001073e beq 2 ,power_ctrl_incrs_level2 +073b 1fe0fe01 increase 1 ,pdata +073c 6000cd4d store 1 ,mem_power_ctrl_level +073d c0008736 beq 1 ,power_ctrl_incrs_level1 + +power_ctrl_incrs_level2: +073e 7041de02 jam tx_power_5db ,mem_tx_power +073f 20600000 rtn + +power_ctrl_decrs_level0: +0740 7041de04 jam tx_power_f5db ,mem_tx_power +0741 20600000 rtn + +p_set_freq_tx: +0742 60088017 storet 1 ,mem_last_freq +0743 1840a200 add temp ,0 ,rega +0744 20402981 call rf_write_freq +0745 58000500 setarg param_pll_setup +0746 20402a8f call sleep + +p_rf_tx_enable: +0747 70890601 jam 0x1 ,rfen_adc +0748 7089003c jam 0x3c ,rfen_rx +0749 708901e0 jam 0xe0 ,rfen_tx +074a 2000000a nop 10 +074b 70890201 jam 0x01 ,rfen_mdm +074c 7089023d jam 0x3d ,rfen_mdm +074d 2000000a nop 10 +074e 708903b7 jam 0xb7 ,rfen_sn +074f 2000000a nop 10 +0750 7089027d jam 0x7d ,rfen_mdm +0751 6800c1de fetch 1 ,mem_tx_power +0752 c001075a beq tx_power_5db ,p_set_tx_power_5db +0753 c0020762 beq tx_power_f5db ,p_set_tx_power_f5db +0754 c010076c beq tx_power_pair ,p_set_tx_power_pair + +p_set_tx_power_0db: +0755 20400767 call p_rx_low_sens +0756 708955d0 jam 0xd0 ,0x8955 +0757 708956e0 jam 0xe0 ,0x8956 +0758 7089586c jam 0x6c ,0x8958 +0759 2020294b branch set_tx_power_0db + +p_set_tx_power_5db: +075a 70894cfb jam 0xfb ,0x894c +075b 70894def jam 0xef ,0x894d +075c 70894eec jam 0xec ,0x894e +075d 70894f5e jam 0x5e ,0x894f +075e 708955d0 jam 0xd0 ,0x8955 +075f 708956e0 jam 0xe0 ,0x8956 +0760 7089583c jam 0x3c ,0x8958 +0761 20202953 branch set_tx_power_5db + +p_set_tx_power_f5db: +0762 20400767 call p_rx_low_sens +0763 708955d0 jam 0xd0 ,0x8955 +0764 708956c0 jam 0xc0 ,0x8956 +0765 7089586c jam 0x6c ,0x8958 +0766 2020295b branch set_tx_power_f5db + +p_rx_low_sens: +0767 70894c5b jam 0x5b ,0x894c +0768 70894d96 jam 0x96 ,0x894d +0769 70894e2c jam 0x2c ,0x894e +076a 70894f46 jam 0x46 ,0x894f +076b 20600000 rtn + +p_set_tx_power_pair: +076c 708956c2 jam 0xc2 ,0x8956 +076d 708955d0 jam 0xd0 ,0x8955 +076e 20600000 rtn + +p_shutdown_radio: +076f 18002a08 force 8 ,radio_ctrl +0770 202028fa branch shutdown_radio + 1 + +p_zcode_entrance: +0771 680891c5 fetcht 1 ,mem_zcode_temp_param0 +0772 18518400 rshift4 temp ,temp +0773 6800cb4f fetch 1 ,mem_zcode_current_number +0774 98467c00 isub temp ,null +0775 20228790 branch p_zcode_run ,zero +0776 6008cb4f storet 1 ,mem_zcode_current_number +0777 18408401 increase 1 ,temp +0778 58000100 setarg zcode_buff_size +0779 984f8400 imul32 temp ,temp +077a 6801cb50 fetch 3 ,mem_xip_flash_offset +077b 98467e00 isub temp ,pdata +077c 6809cb53 fetcht 3 ,mem_flash_start_addr +077d 9840fe00 iadd temp ,pdata +077e 1fe0fffb increase -5 ,pdata +077f 6001cb56 store 3 ,mem_flash_address +0780 2040033c call p_flash_release_deep_power_down + +p_zcode_read_loop: +0781 6801cb56 fetch 3 ,mem_flash_address +0782 d8400100 arg zcode_buff_size ,temp +0783 da201f00 arg mem_zcode_buff ,rega +0784 20406562 call spid_read_flash +0785 68021f00 fetch 4 ,mem_zcode_buff +0786 680a4b59 fetcht 4 ,mem_zcode_head +0787 98467c00 isub temp ,null +0788 24228781 nbranch p_zcode_read_loop ,zero +0789 20400300 call p_mouse_spi_init +078a 58001f00 setarg mem_zcode_buff +078b 60014199 store 2 ,mem_patch_ptr +078c 70419b40 jam zcode_code_size ,mem_patch_len +078d 204064ca call load_ucode +078e 58000000 setarg 0 +078f 60024199 store 4 ,mem_patch_ptr + +p_zcode_run: +0790 680091c5 fetch 1 ,mem_zcode_temp_param0 +0791 20200001 branch p_zcode + +p_drawing_optima: +0792 6802469b fetch 4 ,mem_mouse_x +0793 207a0000 rtn blank +0794 204007e5 call p_data_abs_check +0795 58000006 setarg 0x06 +0796 204007d8 call p_data_greater_than_check +0797 58000003 setarg 0x03 +0798 204007de call p_data_less_than_check +0799 6800cb0b fetch 1 ,mem_mouse_asm_flag +079a c000879e beq 1 ,p_drawing_optima_modify + +p_drawing_optima_init: +079b df200005 arg 5 ,loopcnt +079c d8a04b0b arg mem_mouse_asm_flag ,contw +079d 20207ed4 branch clear_mem + +p_drawing_optima_modify: +079e 68014b0c fetch 2 ,mem_mouse_x_pre +079f 600111be store 2 ,mem_data_pre +07a0 6801469b fetch 2 ,mem_mouse_x +07a1 600111c0 store 2 ,mem_data_current +07a2 204007b1 call p_drawing_optima_data +07a3 680111be fetch 2 ,mem_data_pre +07a4 60014b0c store 2 ,mem_mouse_x_pre +07a5 680111c0 fetch 2 ,mem_data_current +07a6 6001469b store 2 ,mem_mouse_x +07a7 68014b0e fetch 2 ,mem_mouse_y_pre +07a8 600111be store 2 ,mem_data_pre +07a9 6801469d fetch 2 ,mem_mouse_y +07aa 600111c0 store 2 ,mem_data_current +07ab 204007b1 call p_drawing_optima_data +07ac 680111be fetch 2 ,mem_data_pre +07ad 60014b0e store 2 ,mem_mouse_y_pre +07ae 680111c0 fetch 2 ,mem_data_current +07af 6001469d store 2 ,mem_mouse_y +07b0 20600000 rtn + +p_drawing_optima_data: +07b1 680111be fetch 2 ,mem_data_pre +07b2 680911c0 fetcht 2 ,mem_data_current +07b3 9840fe00 iadd temp ,pdata +07b4 600191c2 store 3 ,mem_data_sum +07b5 2feffe10 isolate1 16 ,pdata +07b6 202087be branch p_data_sum_overflow ,true +07b7 680091c3 fetch 1 ,mem_data_sum + 1 +07b8 c07f87c5 beq 0xff ,p_data_sum_n +07b9 680091c2 fetch 1 ,mem_data_sum + +p_data_store_pre: +07ba 1fe37e00 rshift pdata ,pdata +07bb 600111be store 2 ,mem_data_pre +07bc 600111c0 store 2 ,mem_data_current +07bd 20600000 rtn + +p_data_sum_overflow: +07be 680091c3 fetch 1 ,mem_data_sum + 1 +07bf c00007c2 beq 0 ,p_data_sum_overflow_p +07c0 680191c2 fetch 3 ,mem_data_sum +07c1 202007ba branch p_data_store_pre + +p_data_sum_overflow_p: +07c2 7011c400 jam 0 ,mem_data_sum + 2 +07c3 680091c2 fetch 1 ,mem_data_sum +07c4 202007ba branch p_data_store_pre + +p_data_sum_n: +07c5 680091c2 fetch 1 ,mem_data_sum +07c6 204007d0 call p_pdata_get_half +07c7 600091be store 1 ,mem_data_pre +07c8 600091c0 store 1 ,mem_data_current +07c9 203a07ce branch p_data_zero ,blank +07ca 580000ff setarg 0xff + +p_data_set_direction: +07cb 600091bf store 1 ,mem_data_pre + 1 +07cc 600091c1 store 1 ,mem_data_current + 1 +07cd 20600000 rtn + +p_data_zero: +07ce 58000000 setarg 0 +07cf 202007cb branch p_data_set_direction + +p_pdata_get_half: +07d0 1fe67e00 sub pdata ,0 ,pdata +07d1 60008aae store 1 ,mem_rega +07d2 68008aae fetch 1 ,mem_rega +07d3 1fe37e00 rshift pdata ,pdata +07d4 60008aae store 1 ,mem_rega +07d5 68008aae fetch 1 ,mem_rega +07d6 1fe67e00 sub pdata ,0 ,pdata +07d7 20600000 rtn + +p_data_greater_than_check: +07d8 9a267c00 isub rega ,null +07d9 242107e3 nbranch p_enable_asm ,positive +07da 9a467c00 isub regb ,null +07db 242107e3 nbranch p_enable_asm ,positive + +p_disable_asm: +07dc 704b0b00 jam 0 ,mem_mouse_asm_flag +07dd 20600000 rtn + +p_data_less_than_check: +07de 9a267c00 isub rega ,null +07df 24610000 nrtn positive +07e0 9a467c00 isub regb ,null +07e1 24610000 nrtn positive +07e2 202007dc branch p_disable_asm + +p_enable_asm: +07e3 704b0b01 jam 1 ,mem_mouse_asm_flag +07e4 20600000 rtn + +p_data_abs_check: +07e5 6801469b fetch 2 ,mem_mouse_x +07e6 600111c0 store 2 ,mem_data_current +07e7 204007ee call p_data_abs +07e8 1fe22200 copy pdata ,rega +07e9 6801469d fetch 2 ,mem_mouse_y +07ea 600111c0 store 2 ,mem_data_current +07eb 204007ee call p_data_abs +07ec 1fe22400 copy pdata ,regb +07ed 20600000 rtn + +p_data_abs: +07ee 680091c1 fetch 1 ,mem_data_current + 1 +07ef c07f87f3 beq 0xff ,p_data_reversal +07f0 680091c0 fetch 1 ,mem_data_current + +p_data_abs_store: +07f1 1fe17eff and_into 0xff ,pdata +07f2 20600000 rtn + +p_data_reversal: +07f3 680111c0 fetch 2 ,mem_data_current +07f4 1fe67e00 sub pdata ,0 ,pdata +07f5 202007f1 branch p_data_abs_store + org 0x2000 + +start: +2000 20402abc call lpmstate + +soft_reset: +2001 44804000 bpatch patch00_0 ,mem_patch00 +2002 20800000 clear_stack +2003 2040640d call spi_ncs_gpio_init +2004 2040296c call initialize_radio +2005 204065a3 call iicd_init_12m +2006 20402a96 call init_param +2007 20404d6a call l2cap_init +2008 4480c000 bpatch patch00_1 ,mem_patch00 +2009 20406a03 call rfcomm_init +200a 20405cf6 call init_lmp +200b 20407ccc call ui_init +200c 204032d8 call app_init +200d 2455e89c ncall load_chip_option ,wake +200e 44814000 bpatch patch00_2 ,mem_patch00 +200f 2055b2e3 call app_lpm_init ,wake +2010 2040756a call publickey_init +2011 2055ab41 call lpm_recover_clk ,wake + +main_loop: +2012 4481c000 bpatch patch00_3 ,mem_patch00 +2013 204076dc call sp_calc_sequence +2014 20407aaf call sp_calc_sequence_256 +2015 2040756d call sp_calc_sequence_256_check +2016 2040535c call le_dispatch +2017 44824000 bpatch patch00_4 ,mem_patch00 +2018 20402038 call idle_dispatch +2019 204032ed call app_process_idle +201a 2040208f call inquiry_dispatch +201b 204022f8 call inquiry_scan_dispatch +201c 2040236a call page_scan_dispatch +201d 20402021 call connection_dispatch +201e 20402b6a call lpm_dispatch +201f 20402c72 call g24_dispatch +2020 20202012 branch main_loop + +connection_dispatch: +2021 20402026 call connection_incontext +2022 c6848000 rtnmark0 mark_context +2023 793f8009 set0 mark_context ,mark +2024 20402223 call context_save +2025 202053ce branch le_disable + +connection_incontext: +2026 4482c000 bpatch patch00_5 ,mem_patch00 +2027 2040225e call context_search_insniff +2028 2422a02f nbranch connection_nosniff ,zero +2029 2040220a call context_load +202a 1a208c01 add rega ,coffset_mode ,contr +202b e8c08000 ifetch 1 ,contr +202c c2805360 bbit1 mode_le ,le_conn_dispatch +202d c280a166 bbit1 mode_master ,master_dispatch +202e 202023cf branch slave_dispatch + +connection_nosniff: +202f 2040222b call context_get_next +2030 1f227c00 copy loopcnt ,null +2031 20628000 rtn zero +2032 2040220a call context_load +2033 68008030 fetch 1 ,mem_state +2034 c281a0d3 bbit1 state_inpage ,master_page +2035 68008031 fetch 1 ,mem_mode +2036 c280a166 bbit1 mode_master ,master_dispatch +2037 202023cf branch slave_dispatch + +idle_dispatch: +2038 6800c1ce fetch 1 ,mem_hci_cmd +2039 207a0000 rtn blank +203a c000a048 beq hci_cmd_inquiry ,idle_inquiry +203b c001204d beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +203c c001a050 beq hci_cmd_remote_name_req ,idle_remote_name_req +203d c002a055 beq hci_cmd_create_conn ,idle_create_conn +203e c00da045 beq hci_cmd_le_create_conn ,idle_le_create_conn +203f 20402257 call context_search_conn_handle +2040 20628000 rtn zero +2041 2040225a call context_search_plap +2042 20628000 rtn zero + +idle_exit: +2043 7041ce00 jam 0 ,mem_hci_cmd +2044 20600000 rtn + +idle_le_create_conn: +2045 70049b1b jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +2046 7041ce00 jam 0 ,mem_hci_cmd +2047 20600000 rtn + +idle_inquiry: +2048 7920001c set1 mark_inquiry_on ,mark +2049 793f801e set0 mark_inquiry_trainb ,mark +204a 70008fff jam param_ninquiry ,mem_ninqy_index +204b 70008d1f jam 31 ,mem_nfreq_index_inq +204c 20202043 branch idle_exit + +idle_inquiry_cancel: +204d 793f801c set0 mark_inquiry_on ,mark +204e 18003600 force 0 ,stop_watch +204f 20202043 branch idle_exit + +idle_remote_name_req: +2050 2040225a call context_search_plap +2051 20628000 rtn zero +2052 18000401 force lmp_name_req ,temp +2053 70016e05 jam 5 ,mem_nameres_cnt +2054 2020205c branch idle_start_page + +idle_create_conn: +2055 44834000 bpatch patch00_6 ,mem_patch00 + +idle_create_conn_device: +2056 680341d0 fetch 6 ,mem_hci_plap +2057 203a2043 branch idle_exit ,blank +2058 70468101 jam reconnect_hid ,memui_reconnect_mode +2059 70005503 jam conn_sm_wait_features_res ,mem_conn_sm +205a 2020205b branch idle_create_conn_cont + +idle_create_conn_cont: +205b 18000425 force lmp_version_req ,temp + +idle_start_page: +205c 4483c000 bpatch patch00_7 ,mem_patch00 +205d 680080f1 fetch 1 ,mem_page_mode +205e 203a2062 branch idle_page_mode_r0 ,blank +205f 1fe9fe00 lshift3 pdata ,pdata +2060 1ff27e00 lshift4 pdata ,pdata +2061 1fe0ffff increase -1 ,pdata + +idle_page_mode_r0: +2062 6000c0a6 store 1 ,mem_npage +2063 600080f0 store 1 ,mem_npage_index +2064 70008e1f jam 31 ,mem_nfreq_index_page +2065 793f800c set0 mark_page_trainb ,mark +2066 2040223b call context_new +2067 2422a083 nbranch idle_page_fail ,zero +2068 20402a6f call get_free_amaddr +2069 60008077 store 1 ,mem_amaddr +206a 6008807c storet 1 ,mem_lmo_opcode2 +206b 680341d0 fetch 6 ,mem_hci_plap +206c 60030040 store 6 ,mem_plap +206d 44844001 bpatch patch01_0 ,mem_patch01 +206e 20407f15 call timer_reinit +206f 18007e00 force 0 ,pdata +2070 2841fe01 compare lmp_name_req ,temp ,0xff +2071 7d20fe05 nsetflag true ,state_init_seq ,pdata +2072 79207e03 set1 state_inpage ,pdata +2073 60008030 store 1 ,mem_state +2074 700a9903 jam bt_evt_reconn_started ,mem_fifo_temp +2075 20407d86 call ui_ipc_send_event +2076 18007e00 force 0 ,pdata +2077 7920fe04 setflag true ,smap_name_req ,pdata +2078 6000804c store 1 ,mem_state_map +2079 58000000 setarg 0 +207a 79207e01 set1 mode_master ,pdata +207b 60008031 store 1 ,mem_mode +207c 7834fc00 enable master +207d 20402223 call context_save +207e 7854fc00 disable master +207f 18000e03 force page_length_timer ,queue +2080 680140b9 fetch 2 ,mem_page_to +2081 20407f08 call timer_init +2082 20202043 branch idle_exit + +idle_page_fail: +2083 4484c001 bpatch patch01_1 ,mem_patch01 +2084 680341d0 fetch 6 ,mem_hci_plap +2085 60030040 store 6 ,mem_plap +2086 2841fe01 compare lmp_name_req ,temp ,0xff +2087 2020a089 branch idle_name_fail ,true +2088 20202043 branch idle_exit + +idle_name_fail: +2089 d8a00101 arg mem_tmp_buffer ,contw +208a df200008 arg 8 ,loopcnt +208b 20407ec6 call memset0 +208c 700a9904 jam bt_evt_reconn_failed ,mem_fifo_temp +208d 20407d86 call ui_ipc_send_event +208e 20202043 branch idle_exit + +inquiry_dispatch: +208f c68e0000 rtnmark0 mark_inquiry_on +2090 18000e01 force inquiry_length_timer ,queue +2091 20407f16 call timer_check +2092 7d3a001c nsetflag blank ,mark_inquiry_on ,mark +2093 243a2095 nbranch inquiry_start ,blank +2094 20600000 rtn + +inquiry_start: +2095 44854001 bpatch patch01_2 ,mem_patch01 +2096 680940bb fetcht 2 ,mem_inq_window +2097 18000e04 force 4 ,queue +2098 2040271c call sniff_check_window +2099 20740000 rtn user +209a 204028a4 call afh_clear +209b 18004800 force 0 ,freq_mode + +inquiry_restart: +209c 20618000 rtn timeout +209d 793f800b set0 mark_fhs_already_good ,mark +209e 793f8000 set0 mark_fhs_eir ,mark + +inquiry_rx_restart: +209f 1c40c201 add clkn_bt ,1 ,bt_clk +20a0 280ffe1e isolate1 mark_inquiry_trainb ,mark +20a1 7920c802 setflag true ,2 ,freq_mode +20a2 2c200400 compare 0x00 ,bt_clk ,0x02 +20a3 2420a0be nbranch inquiry_receive ,true + +inquiry_transmit: +20a4 4485c001 bpatch patch01_3 ,mem_patch01 +20a5 68008012 fetch 1 ,mem_inquiry_transmit +20a6 1fe0fe01 increase 1 ,pdata +20a7 60008012 store 1 ,mem_inquiry_transmit +20a8 204028d8 call fetch_giac +20a9 204028d2 call tx_radio_freq +20aa 204028f2 call fetch_diac +20ab 20402a51 call start_transmitter +20ac 20402a56 call start_tx_native +20ad 20402a64 call send_access_word +20ae 2040264d call end_of_packet +20af 204020b1 call inquiry_check_train +20b0 2020209c branch inquiry_restart + +inquiry_check_train: +20b1 44864001 bpatch patch01_4 ,mem_patch01 +20b2 6800808d fetch 1 ,mem_nfreq_index_inq +20b3 1fe0ffff increase -1 ,pdata +20b4 6000808d store 1 ,mem_nfreq_index_inq +20b5 20610000 rtn positive +20b6 70008d1f jam 31 ,mem_nfreq_index_inq +20b7 6800808f fetch 1 ,mem_ninqy_index +20b8 1fe0ffff increase -1 ,pdata +20b9 6000808f store 1 ,mem_ninqy_index +20ba 20610000 rtn positive +20bb 7940001e setflip mark_inquiry_trainb ,mark +20bc 70008fff jam param_ninquiry ,mem_ninqy_index +20bd 20600000 rtn + +inquiry_receive: +20be 4486c001 bpatch patch01_5 ,mem_patch01 +20bf 204028d8 call fetch_giac +20c0 204028cc call rx_radio_freq +20c1 204028f2 call fetch_diac +20c2 20402a5b call start_rx_native +20c3 204029eb call start_receiver +20c4 20402a0d call wait_access_clkn_rt +20c5 202c20c8 branch inquiry_sync ,sync +20c6 204020b1 call inquiry_check_train +20c7 2020209f branch inquiry_rx_restart + +inquiry_sync: +20c8 44874001 bpatch patch01_6 ,mem_patch01 +20c9 204029bb call save_rssi +20ca 20402a6b call scan_mode_whiten +20cb 2040251e call receive_packet_whitened +20cc 793f8001 set0 mark_rxbuf_inuse ,mark +20cd c6858000 rtnmark0 mark_fhs_already_good + +inquiry_receive_rtn: +20ce 4487c001 bpatch patch01_7 ,mem_patch01 + +inquiry_receive_eir_rtn: +20cf 68008013 fetch 1 ,mem_inquiry_rcv +20d0 1fe0fe01 increase 1 ,pdata +20d1 60008013 store 1 ,mem_inquiry_rcv +20d2 20600000 rtn + +master_page: +20d3 44884002 bpatch patch02_0 ,mem_patch02 +20d4 7834fc00 enable master +20d5 78387c00 enable clknt +20d6 680140b5 fetch 2 ,mem_page_interval +20d7 203a20db branch master_page_no_interval ,blank +20d8 18000e08 force page_interval_timer ,queue +20d9 20407f16 call timer_check +20da 247a0000 nrtn blank + +master_page_no_interval: +20db 4488c002 bpatch patch02_1 ,mem_patch02 +20dc 680940b7 fetcht 2 ,mem_page_window +20dd 18000e28 force 40 ,queue +20de 2040271c call sniff_check_window +20df 20342114 branch page_exit ,user +20e0 18000e03 force page_length_timer ,queue +20e1 20407f16 call timer_check +20e2 243a20f0 nbranch page_start ,blank +20e3 6800804c fetch 1 ,mem_state_map +20e4 c28220e6 bbit1 smap_name_req ,master_npage_timeout +20e5 202020e9 branch master_page_timeout + +master_npage_timeout: +20e6 d8a00101 arg mem_tmp_buffer ,contw +20e7 df200008 arg 8 ,loopcnt +20e8 20407ec6 call memset0 + +master_page_timeout: +20e9 44894002 bpatch patch02_2 ,mem_patch02 +20ea 70003000 jam 0 ,mem_state +20eb 20405cf7 call init_lmp_work +20ec 70468100 jam 0 ,memui_reconnect_mode +20ed 700a9913 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +20ee 20407d86 call ui_ipc_send_event +20ef 20202114 branch page_exit + +page_start: +20f0 4489c002 bpatch patch02_3 ,mem_patch02 +20f1 18001600 force 0 ,timeup +20f2 34730200 until clkn_rt ,meet +20f3 680080f2 fetch 1 ,mem_page_clk +20f4 1fe0ffff increase -1 ,pdata +20f5 9c42fe00 ixor clkn_bt ,pdata +20f6 2fe00600 compare 0 ,pdata ,3 +20f7 2420a0f0 nbranch page_start ,true +20f8 18827e00 deposit am_addr +20f9 60008181 store 1 ,mem_fhs_am_addr +20fa 18004c00 force 0 ,n_tx_slot +20fb 18004800 force 0 ,freq_mode + +page_restart: +20fc 448a4002 bpatch patch02_4 ,mem_patch02 +20fd 2021a114 branch page_exit ,timeout +20fe 204028dc call fetch_page_bt_adr +20ff d9600600 arg param_rf_setup ,timeup +2100 34730200 until clkn_rt ,meet + +page_rx_restart: +2101 448ac002 bpatch patch02_5 ,mem_patch02 +2102 680200f2 fetch 4 ,mem_page_clk +2103 98004200 iforce bt_clk +2104 1fe0fe01 increase 1 ,pdata +2105 600200f2 store 4 ,mem_page_clk +2106 280ffe0c isolate1 mark_page_trainb ,mark +2107 7920c802 setflag true ,2 ,freq_mode +2108 2c200400 compare 0x00 ,bt_clk ,0x02 +2109 2420a128 nbranch page_receive ,true +210a 6800800c fetch 1 ,mem_page_transmit +210b 1fe0fe01 increase 1 ,pdata +210c 6000800c store 1 ,mem_page_transmit +210d 204028d2 call tx_radio_freq +210e 20402a51 call start_transmitter +210f 20402a56 call start_tx_native +2110 20402a64 call send_access_word +2111 2040264d call end_of_packet +2112 2040211a call page_check_train +2113 202020fc branch page_restart + +page_exit: +2114 448b4002 bpatch patch02_6 ,mem_patch02 +2115 7854fc00 disable master +2116 680140b5 fetch 2 ,mem_page_interval +2117 207a0000 rtn blank +2118 18000e08 force page_interval_timer ,queue +2119 20207f08 branch timer_init + +page_check_train: +211a 448bc002 bpatch patch02_7 ,mem_patch02 +211b 6800808e fetch 1 ,mem_nfreq_index_page +211c 1fe0ffff increase -1 ,pdata +211d 6000808e store 1 ,mem_nfreq_index_page +211e 20610000 rtn positive +211f 70008e1f jam 31 ,mem_nfreq_index_page +2120 680080f0 fetch 1 ,mem_npage_index +2121 1fe0ffff increase -1 ,pdata +2122 600080f0 store 1 ,mem_npage_index +2123 20610000 rtn positive +2124 7940000c setflip mark_page_trainb ,mark +2125 6800c0a6 fetch 1 ,mem_npage +2126 600080f0 store 1 ,mem_npage_index +2127 20600000 rtn + +page_receive: +2128 448c4003 bpatch patch03_0 ,mem_patch03 +2129 204028cc call rx_radio_freq +212a 20402a5b call start_rx_native +212b 204029eb call start_receiver +212c 20402a0d call wait_access_clkn_rt +212d 202c2130 branch page_sync ,sync +212e 2040211a call page_check_train +212f 20202101 branch page_rx_restart + +page_sync: +2130 2040264d call end_of_packet +2131 6800800d fetch 1 ,mem_page_rcv +2132 1fe0fe01 increase 1 ,pdata +2133 6000800d store 1 ,mem_page_rcv +2134 18003600 force 0 ,stop_watch +2135 680200f2 fetch 4 ,mem_page_clk + +page_send_fhs: +2136 448cc003 bpatch patch03_1 ,mem_patch03 +2137 20402a4f call rf_setup_time_master_slot +2138 204028dc call fetch_page_bt_adr +2139 1cc0cc01 increase 1 ,n_tx_slot + +page_send_fhs_continue: +213a 1c2143fd and_into 0x1fd ,bt_clk +213b 1c8149fc and_into 0x1fc ,freq_mode +213c 204028d2 call tx_radio_freq +213d 20402a51 call start_transmitter +213e 20402a56 call start_tx_native +213f 20402a64 call send_access_word +2140 1c427e00 deposit clkn_bt +2141 60020161 store 4 ,mem_clkn_bt +2142 18000800 force 0 ,am_addr +2143 18000202 force type_fhs ,type +2144 20402a6b call scan_mode_whiten +2145 20402766 call transmit_packet_whitened + +page_wait_fhs_reply: +2146 448d4003 bpatch patch03_2 ,mem_patch03 +2147 20402a4d call rf_setup_time_slave_slot +2148 1c21c202 or_into 0x02 ,bt_clk +2149 1c8149fc and_into 0x1fc ,freq_mode +214a 204028cc call rx_radio_freq +214b 20402a5b call start_rx_native +214c 204029eb call start_receiver +214d 20402a0d call wait_access_clkn_rt +214e 204c264d call end_of_packet ,sync +214f 202c2155 branch page_wait_fhs_reply_ok ,sync +2150 68008010 fetch 1 ,mem_fhs_wait_counter +2151 203a20fc branch page_restart ,blank +2152 1fe0ffff increase -1 ,pdata +2153 60008010 store 1 ,mem_fhs_wait_counter +2154 20202136 branch page_send_fhs + +page_wait_fhs_reply_ok: +2155 448dc003 bpatch patch03_3 ,mem_patch03 +2156 6800800e fetch 1 ,mem_page_rcv_fhs +2157 1fe0fe01 increase 1 ,pdata +2158 6000800e store 1 ,mem_page_rcv_fhs +2159 20402435 call prepare_newconn + +master_newconn_loop: +215a 204022f2 call master_newconn_once +215b 202c215f branch newconn_poll_responded ,sync +215c 20402455 call new_conn_timeout +215d 243a215a nbranch master_newconn_loop ,blank +215e 202020fc branch page_restart + +newconn_poll_responded: +215f 448e4003 bpatch patch03_4 ,mem_patch03 +2160 68008030 fetch 1 ,mem_state +2161 793ffe03 set0 state_inpage ,pdata +2162 60008030 store 1 ,mem_state +2163 20402440 call newconn_init +2164 7854fc00 disable master +2165 20600000 rtn + +master_dispatch: +2166 448ec003 bpatch patch03_5 ,mem_patch03 +2167 7834fc00 enable master +2168 78387c00 enable clknt +2169 204021e1 call role_switch_master +216a 20740000 rtn user +216b 20402c69 call check_bt_disabled +216c 20402a4f call rf_setup_time_master_slot +216d 1c40c201 add clkn_bt ,1 ,bt_clk +216e 204028e2 call fetch_self_bt_adr +216f 18004803 force 0x03 ,freq_mode +2170 20406cc2 call scheduler_tx_l2cap_pkt +2171 20402489 call prepare_tx +2172 204028d2 call tx_radio_freq +2173 20402a51 call start_transmitter +2174 20402a56 call start_tx_native +2175 20402a64 call send_access_word +2176 20402762 call transmit_packet + +master_loop: +2177 448f4003 bpatch patch03_6 ,mem_patch03 +2178 20405d08 call parse_lmp +2179 204022e4 call master_conn_recv_packet +217a 2436a180 nbranch master_notmatch ,match +217b 20402a88 call supervision_flush +217c 20402728 call parse_l2cap +217d 6800800f fetch 1 ,mem_master_rcvcnt +217e 1fe0fe01 increase 1 ,pdata +217f 6000800f store 1 ,mem_master_rcvcnt + +master_notmatch: +2180 448fc003 bpatch patch03_7 ,mem_patch03 +2181 20406caa call scheduler_process +2182 2040218b call check_master_disconnect +2183 24748000 nrtn master +2184 204026f3 call check_attempt +2185 243a2188 nbranch master_attempt ,blank + +master_exit: +2186 7854fc00 disable master +2187 20600000 rtn + +master_attempt: +2188 20402489 call prepare_tx +2189 204022da call master_conn_send_packet +218a 20202177 branch master_loop + +check_master_disconnect: +218b 2036a18e branch check_master_match ,match +218c 20402a7f call supervision_update +218d 2021219c branch master_disconnect ,positive + +check_master_match: +218e 204021a7 call check_disconnect_timeout +218f 2434219c nbranch master_disconnect ,user +2190 6800804c fetch 1 ,mem_state_map +2191 c4020000 rtnbit0 smap_name_req +2192 c3818000 rtnbit1 smap_name_res +2193 6800804b fetch 1 ,mem_op +2194 c3818000 rtnbit1 op_disconn +2195 204021ae call conn_timer_expired +2196 247a0000 nrtn blank +2197 6800816e fetch 1 ,mem_nameres_cnt +2198 1fe0ffff increase -1 ,pdata +2199 6000816e store 1 ,mem_nameres_cnt +219a 247a0000 nrtn blank +219b 20206006 branch lmp_disconnect + +master_disconnect: +219c 44904004 bpatch patch04_0 ,mem_patch04 +219d 2040245d call quit_connection +219e 7854fc00 disable master +219f 6800804c fetch 1 ,mem_state_map +21a0 c28221a2 bbit1 smap_name_req ,master_name_disconnect +21a1 20600000 rtn + +master_name_disconnect: +21a2 6800804c fetch 1 ,mem_state_map +21a3 c3818000 rtnbit1 smap_name_res + +master_name_error: +21a4 d8a00101 arg mem_tmp_buffer ,contw +21a5 df200008 arg 8 ,loopcnt +21a6 20207ec6 branch memset0 + +check_disconnect_timeout: +21a7 4490c004 bpatch patch04_1 ,mem_patch04 +21a8 78347c00 enable user +21a9 6800804b fetch 1 ,mem_op +21aa c4018000 rtnbit0 op_disconn +21ab 204021ae call conn_timer_expired +21ac 247a0000 nrtn blank +21ad 20207fe9 branch disable_user + +conn_timer_expired: +21ae 68008072 fetch 1 ,mem_conn_timer +21af 1fe0ffff increase -1 ,pdata +21b0 60008072 store 1 ,mem_conn_timer +21b1 20600000 rtn + +linkkey_ready: +21b2 44914004 bpatch patch04_2 ,mem_patch04 +21b3 68008030 fetch 1 ,mem_state +21b4 c283a1bb bbit1 state_linkkey ,linkkey_set +21b5 680089b5 fetch 1 ,mem_pairing_auth +21b6 203a21bb branch linkkey_set ,blank +21b7 7009b500 jam defalt_pairing_auth ,mem_pairing_auth +21b8 700a9918 jam bt_evt_linkkey_generate ,mem_fifo_temp +21b9 20407d86 call ui_ipc_send_event +21ba 202021bb branch linkkey_set + +linkkey_set: +21bb 4491c004 bpatch patch04_3 ,mem_patch04 +21bc 20402254 call context_traverse_linkkey +21bd 68008030 fetch 1 ,mem_state +21be 79207e07 set1 state_linkkey ,pdata +21bf 60008030 store 1 ,mem_state +21c0 7041bd01 jam 1 ,mem_link_key_exists +21c1 68008055 fetch 1 ,mem_conn_sm +21c2 c08b21c3 bne conn_sm_pairing ,linkkey_set_continue + +linkkey_set_continue: +21c3 20600000 rtn + +generate_linkkey_continue: +21c4 7009b501 jam pairing_auth ,mem_pairing_auth + +clear_linkstate: +21c5 68008030 fetch 1 ,mem_state +21c6 793ffe07 set0 state_linkkey ,pdata +21c7 60008030 store 1 ,mem_state +21c8 20600000 rtn + +role_switch_check: +21c9 44924004 bpatch patch04_4 ,mem_patch04 +21ca 78547c00 disable user +21cb 68010032 fetch 2 ,mem_tsniff +21cc d840ffff arg 0xffff ,temp +21cd 98467c00 isub temp ,null +21ce 24628000 nrtn zero +21cf 68020034 fetch 4 ,mem_sniff_anchor +21d0 203821d3 branch role_switch_clkn ,clknt +21d1 9d067e00 isub clke_bt ,pdata +21d2 202021d4 branch role_switch_clke + +role_switch_clkn: +21d3 9c467e00 isub clkn_bt ,pdata + +role_switch_clke: +21d4 1fe67c04 sub pdata ,4 ,null +21d5 24610000 nrtn positive +21d6 18007e00 force 0 ,pdata +21d7 60010032 store 2 ,mem_tsniff +21d8 20207fe7 branch enable_user + +role_switch_prepare: +21d9 1fe20400 copy pdata ,temp +21da 4492c004 bpatch patch04_5 ,mem_patch04 +21db 600a0034 storet 4 ,mem_sniff_anchor + +role_switch_prepare0: +21dc 70455b01 jam switch_flag_accept ,mem_switch_flag +21dd 5800ffff setarg 0xffff +21de 60010032 store 2 ,mem_tsniff +21df 70007301 jam 1 ,mem_sniff_attempt +21e0 20600000 rtn + +role_switch_master: +21e1 44934004 bpatch patch04_6 ,mem_patch04 +21e2 204021c9 call role_switch_check +21e3 24740000 nrtn user +21e4 78547c00 disable user +21e5 70001120 jam param_newconnto ,mem_newconnto_counter +21e6 793f800b set0 mark_fhs_already_good ,mark + +roles_waitfhs_loop: +21e7 20402a4f call rf_setup_time_master_slot +21e8 204022e6 call master_recv_packet +21e9 c505a1f4 bmark1 mark_fhs_already_good ,roles_replyto_fhs +21ea 20402455 call new_conn_timeout +21eb 243a21e7 nbranch roles_waitfhs_loop ,blank + +role_switch_fail_master: +21ec 4493c004 bpatch patch04_7 ,mem_patch04 +21ed 78547c00 disable user +21ee 1c427e00 deposit clkn_bt +21ef 600240ca store 4 ,mem_next_btclk +21f0 78387c00 enable clknt +21f1 7834fc00 enable master +21f2 700a992a jam bt_evt_switch_fail_master ,mem_fifo_temp +21f3 20207d86 branch ui_ipc_send_event + +roles_replyto_fhs: +21f4 44944005 bpatch patch05_0 ,mem_patch05 +21f5 20402a4d call rf_setup_time_slave_slot +21f6 d8200010 arg type_id ,type +21f7 204022dc call master_send_packet +21f8 78587c00 disable clknt +21f9 7854fc00 disable master +21fa 20402818 call apply_switch_clke +21fb 20402435 call prepare_newconn + +roles_newconns_loop: +21fc 4494c005 bpatch patch05_1 ,mem_patch05 +21fd 2040247c call slave_newconn_once +21fe 2036a202 branch roles_newconns_responded ,match +21ff 20402455 call new_conn_timeout +2200 243a21fc nbranch roles_newconns_loop ,blank +2201 202021ec branch role_switch_fail_master + +roles_newconns_responded: +2202 68008031 fetch 1 ,mem_mode +2203 793ffe01 set0 mode_master ,pdata +2204 60008031 store 1 ,mem_mode +2205 20402a88 call supervision_flush +2206 20402841 call calc_clke_offset +2207 78347c00 enable user +2208 700a992b jam bt_evt_switch_success_master ,mem_fifo_temp +2209 20207d86 branch ui_ipc_send_event + +context_load: +220a 44954005 bpatch patch05_2 ,mem_patch05 +220b 79200009 set1 mark_context ,mark +220c 1a227e00 deposit rega +220d 6001001e store 2 ,mem_context_ptr +220e 18007250 force context_size ,loopcnt +220f d8a0043f arg mem_le_state ,contw +2210 1a208c01 add rega ,coffset_mode ,contr +2211 e8c08000 ifetch 1 ,contr +2212 1a220c00 copy rega ,contr +2213 c2807f01 bbit1 mode_le ,memcpy +2214 d8a00030 arg mem_state ,contw +2215 20407f01 call memcpy +2216 78577c00 disable attempt +2217 68008077 fetch 1 ,mem_amaddr +2218 98000800 iforce am_addr +2219 70008a01 jam 1 ,mem_current_sniff_attempt +221a 2034a21c branch context_load_master ,master +221b 70008a01 jam 1 ,mem_current_sniff_attempt + +context_load_master: +221c 68008030 fetch 1 ,mem_state +221d c4008000 rtnbit0 state_insniff +221e 68008073 fetch 1 ,mem_sniff_attempt +221f 6000808a store 1 ,mem_current_sniff_attempt +2220 68008074 fetch 1 ,mem_sniff_timeout +2221 6000808b store 1 ,mem_current_sniff_timeout +2222 20600000 rtn + +context_save: +2223 4495c005 bpatch patch05_3 ,mem_patch05 +2224 6801001e fetch 2 ,mem_context_ptr +2225 98000a00 iforce contw +2226 18007250 force context_size ,loopcnt +2227 d8c0043f arg mem_le_state ,contr +2228 203b7f01 branch memcpy ,le +2229 d8c00030 arg mem_state ,contr +222a 20207f01 branch memcpy + +context_get_next: +222b df200001 arg context_num ,loopcnt +222c 68088015 fetcht 1 ,mem_current_context + +context_get_next_loop: +222d 18408401 increase 1 ,temp +222e 2841fe01 compare context_num ,temp ,0xff +222f 2420a231 nbranch context_get_next_cont ,true +2230 d8400000 arg 0 ,temp + +context_get_next_cont: +2231 60088015 storet 1 ,mem_current_context +2232 184ffe50 mul32 temp ,context_size ,pdata +2233 da204040 arg mem_context ,rega +2234 9a20a200 iadd rega ,rega +2235 ea208000 ifetch 1 ,rega +2236 c280a239 bbit1 state_insniff ,context_get_next_sniff +2237 c3800000 rtnbit1 state_inconn +2238 c3818000 rtnbit1 state_inpage + +context_get_next_sniff: +2239 c200222d loop context_get_next_loop +223a 20600000 rtn + +context_new: +223b 44964005 bpatch patch05_4 ,mem_patch05 +223c da60226a arg context_search_empty ,regc +223d 20402261 call context_search +223e 24628000 nrtn zero +223f 1a227e00 deposit rega +2240 6001001e store 2 ,mem_context_ptr +2241 18007c00 force 0 ,null +2242 20600000 rtn + +context_check_all_wack: +2243 20402725 call check_esco_amaddr +2244 2020a24b branch context_check_esco_wack ,true +2245 6801001e fetch 2 ,mem_context_ptr +2246 1fe08a17 add pdata ,coffset_arq ,contw +2247 68008047 fetch 1 ,mem_arq +2248 e0a08000 istore 1 ,contw +2249 da6022aa arg context_check_a_wack ,regc +224a 20202261 branch context_search + +context_check_esco_wack: +224b 68008047 fetch 1 ,mem_arq +224c 2feffe03 isolate1 wack ,pdata +224d 2020a250 branch context_esco_wack ,true +224e 18007c01 force 1 ,null +224f 20600000 rtn + +context_esco_wack: +2250 18007c00 force 0 ,null +2251 20600000 rtn + +context_check_idle: +2252 da6022a7 arg context_check_inconn ,regc +2253 20202261 branch context_search + +context_traverse_linkkey: +2254 6809001e fetcht 2 ,mem_context_ptr +2255 da6022cf arg context_traverse_clearkey ,regc +2256 20202261 branch context_search + +context_search_conn_handle: +2257 6808c1cf fetcht 1 ,mem_hci_conn_handle + +context_search_conn_handle2: +2258 da602275 arg context_search_handle ,regc +2259 20202261 branch context_search + +context_search_plap: +225a 4496c005 bpatch patch05_5 ,mem_patch05 +225b 680b41d0 fetcht 6 ,mem_hci_plap + +context_search_plap2: +225c da60226e arg context_search_lap ,regc +225d 20202261 branch context_search + +context_search_insniff: +225e da60227b arg context_search_sniff ,regc +225f 20202261 branch context_search + +context_search_sniff_window: +2260 da6022c6 arg context_search_window ,regc + +context_search: +2261 44974005 bpatch patch05_6 ,mem_patch05 +2262 da204040 arg mem_context ,rega +2263 df200001 arg context_num ,loopcnt + +context_search_loop: +2264 ea208000 ifetch 1 ,rega +2265 1a627a00 copy regc ,pc + +context_search_next: +2266 1a20a250 increase context_size ,rega +2267 c2002264 loop context_search_loop +2268 18007c01 force 1 ,null +2269 20600000 rtn + +context_search_empty: +226a c2802266 bbit1 state_inconn ,context_search_next +226b c281a266 bbit1 state_inpage ,context_search_next +226c 18007c00 force 0 ,null +226d 20600000 rtn + +context_search_lap: +226e c281a270 bbit1 state_inpage ,context_search_lap_cont +226f c3002266 bbit0 state_inconn ,context_search_next + +context_search_lap_cont: +2270 1a208c10 add rega ,coffset_plap ,contr +2271 e8c30000 ifetch 6 ,contr +2272 98467c00 isub temp ,null +2273 20628000 rtn zero +2274 20202266 branch context_search_next + +context_search_handle: +2275 c3002266 bbit0 state_inconn ,context_search_next +2276 1a208c16 add rega ,coffset_conn_handle ,contr +2277 e8c08000 ifetch 1 ,contr +2278 98467c00 isub temp ,null +2279 20628000 rtn zero +227a 20202266 branch context_search_next + +context_search_sniff: +227b c300a266 bbit0 state_insniff ,context_search_next + +context_search_sniff_loop: +227c 204022b3 call context_get_anchor +227d 20402297 call sign_pdata_temp +227e 98467e00 isub temp ,pdata +227f 1fe0fe01 increase 1 ,pdata +2280 20212291 branch context_search_sniff_miss ,positive +2281 18c22400 copy contr ,regb +2282 60048aa2 store 9 ,mem_temp +2283 6800c4c0 fetch 1 ,mem_le_sc_calc +2284 243a2289 nbranch context_search_sniff_sc ,blank +2285 68048aa2 fetch 9 ,mem_temp +2286 1a420c00 copy regb ,contr +2287 1fe0fe05 increase 5 ,pdata +2288 2020228c branch context_search_meet1 + +context_search_sniff_sc: +2289 68048aa2 fetch 9 ,mem_temp +228a 1a420c00 copy regb ,contr +228b 1fe0fe14 increase 20 ,pdata + +context_search_meet1: +228c 24212266 nbranch context_search_next ,positive + +context_search_meet: +228d 18424200 copy temp ,bt_clk +228e 204022bf call context_next_anchor +228f 18007c00 force 0 ,null +2290 20600000 rtn + +context_search_sniff_miss: +2291 98002400 iforce regb +2292 1a208c02 add rega ,coffset_tsniff ,contr +2293 e8c10000 ifetch 2 ,contr +2294 203a228d branch context_search_meet ,blank +2295 204022bf call context_next_anchor +2296 2020227c branch context_search_sniff_loop + +sign_pdata_temp: +2297 1ff11600 rshift16 pdata ,timeup +2298 196c9600 rshift8 timeup ,timeup +2299 2022a2a1 branch sign_pdata_temp_p0 ,zero +229a 29601e0f compare 0xf ,timeup ,0xf +229b 24608000 nrtn true +229c 18511600 rshift16 temp ,timeup +229d 196c9600 rshift8 timeup ,timeup +229e 24628000 nrtn zero +229f 7920041c set1 28 ,temp +22a0 20600000 rtn + +sign_pdata_temp_p0: +22a1 18511600 rshift16 temp ,timeup +22a2 196c9600 rshift8 timeup ,timeup +22a3 29601e0f compare 0xf ,timeup ,0xf +22a4 24608000 nrtn true +22a5 79207e1c set1 28 ,pdata +22a6 20600000 rtn + +context_check_inconn: +22a7 c3002266 bbit0 state_inconn ,context_search_next +22a8 18007c00 force 0 ,null +22a9 20600000 rtn + +context_check_a_wack: +22aa c3002266 bbit0 state_inconn ,context_search_next +22ab 1a208c01 add rega ,coffset_mode ,contr +22ac e8c08000 ifetch 1 ,contr +22ad c2802266 bbit1 mode_le ,context_search_next +22ae 1a208c17 add rega ,coffset_arq ,contr +22af e8c08000 ifetch 1 ,contr +22b0 c301a266 bbit0 wack ,context_search_next +22b1 18007c00 force 0 ,null +22b2 20600000 rtn + +context_get_anchor: +22b3 1a208c01 add rega ,coffset_mode ,contr +22b4 e8c88000 ifetcht 1 ,contr +22b5 1c427e00 deposit clkn_bt +22b6 284ffe01 isolate1 mode_master ,temp +22b7 1a208c04 add rega ,coffset_sniff_anchor ,contr +22b8 e8ca0000 ifetcht 4 ,contr +22b9 20608000 rtn true +22ba 1a208c08 add rega ,coffset_clk_offset ,contr +22bb e8c30000 ifetch 6 ,contr +22bc 20402854 call calc_clke2 +22bd 1d027e00 deposit clke_bt +22be 20600000 rtn + +context_next_anchor: +22bf 1a208c02 add rega ,coffset_tsniff ,contr +22c0 1a208a04 add rega ,coffset_sniff_anchor ,contw +22c1 e8c10000 ifetch 2 ,contr +22c2 98409600 iadd temp ,timeup +22c3 19627e00 deposit timeup +22c4 e0a20000 istore 4 ,contw +22c5 20205449 branch le_context_nexthop + +context_search_window: +22c6 c300a266 bbit0 state_insniff ,context_search_next +22c7 204022b3 call context_get_anchor +22c8 9b60fe00 iadd stop_watch ,pdata +22c9 9b60fe00 iadd stop_watch ,pdata +22ca 98e0fe00 iadd queue ,pdata +22cb 98467c00 isub temp ,null +22cc 24212266 nbranch context_search_next ,positive +22cd 18007c00 force 0 ,null +22ce 20600000 rtn + +context_traverse_clearkey: +22cf c3002266 bbit0 state_inconn ,context_search_next +22d0 18427e00 deposit temp +22d1 9a267c00 isub rega ,null +22d2 203f2266 branch context_search_next ,null +22d3 1a208c01 add rega ,coffset_mode ,contr +22d4 e8c08000 ifetch 1 ,contr +22d5 c2802266 bbit1 mode_le ,context_search_next +22d6 ea208000 ifetch 1 ,rega +22d7 793ffe07 set0 state_linkkey ,pdata +22d8 e2208000 istore 1 ,rega +22d9 20202266 branch context_search_next + +master_conn_send_packet: +22da 4497c005 bpatch patch05_7 ,mem_patch05 +22db 20402a4f call rf_setup_time_master_slot + +master_send_packet: +22dc 1c40c201 add clkn_bt ,1 ,bt_clk +22dd 204028e2 call fetch_self_bt_adr +22de 18004803 force 0x03 ,freq_mode +22df 204028d2 call tx_radio_freq +22e0 20402a51 call start_transmitter +22e1 20402a56 call start_tx_native +22e2 20402a64 call send_access_word +22e3 20202762 branch transmit_packet + +master_conn_recv_packet: +22e4 44984006 bpatch patch06_0 ,mem_patch06 +22e5 20402a4d call rf_setup_time_slave_slot + +master_recv_packet: +22e6 1c40c201 add clkn_bt ,1 ,bt_clk +22e7 204028e2 call fetch_self_bt_adr +22e8 18004803 force 0x03 ,freq_mode +22e9 204028cc call rx_radio_freq +22ea 2040242a call init_rx_packet_flags +22eb 204029f1 call prep_crypt +22ec 20402a5b call start_rx_native +22ed 204029eb call start_receiver + +master_rx_conn_finish_packet: +22ee 20402a0d call wait_access_clkn_rt +22ef 246c0000 nrtn sync +22f0 204029bb call save_rssi +22f1 2020251c branch receive_packet + +master_newconn_once: +22f2 4498c006 bpatch patch06_1 ,mem_patch06 +22f3 68008181 fetch 1 ,mem_fhs_am_addr +22f4 98000800 iforce am_addr +22f5 18000201 force type_poll ,type +22f6 204022da call master_conn_send_packet +22f7 202022e4 branch master_conn_recv_packet + +inquiry_scan_dispatch: +22f8 6800c093 fetch 1 ,mem_scan_mode +22f9 c4000000 rtnbit0 inq_scan_mode +22fa 18000e04 force iscan_interval_timer ,queue +22fb 20407f16 call timer_check +22fc 247a0000 nrtn blank +22fd 680940ad fetcht 2 ,mem_iscan_window +22fe 18000e04 force 4 ,queue +22ff 2040271c call sniff_check_window +2300 20740000 rtn user +2301 20402308 call inquiry_scan_start +2302 18000e04 force iscan_interval_timer ,queue +2303 680140af fetch 2 ,mem_iscan_interval +2304 242c7f08 nbranch timer_init ,sync +2305 180a7e00 random pdata +2306 9ea17e00 iand mask3ff ,pdata +2307 20207f08 branch timer_init + +inquiry_scan_start: +2308 44994006 bpatch patch06_2 ,mem_patch06 +2309 70018100 jam 0 ,mem_fhs_am_addr +230a 78587c00 disable clknt +230b 78577c00 disable attempt +230c 204028a4 call afh_clear +230d 1c4143fc and clkn_bt ,0x1fc ,bt_clk +230e 18004801 force 0x01 ,freq_mode +230f 204028d8 call fetch_giac +2310 204028cc call rx_radio_freq +2311 7940001d setflip mark_inquiry_state ,mark +2312 68008006 fetch 1 ,mem_inquiryscan_waitcnt +2313 1fe0fe01 increase 1 ,pdata +2314 60008006 store 1 ,mem_inquiryscan_waitcnt +2315 204028f2 call fetch_diac +2316 204029eb call start_receiver +2317 20402a14 call wait_access_forever +2318 246c0000 nrtn sync +2319 4499c006 bpatch patch06_3 ,mem_patch06 +231a 18003600 force 0 ,stop_watch +231b 204028f9 call shutdown_radio +231c 68008007 fetch 1 ,mem_inquiryscan_rcvcnt +231d 1fe0fe01 increase 1 ,pdata +231e 60008007 store 1 ,mem_inquiryscan_rcvcnt +231f 204028d8 call fetch_giac +2320 20402a4d call rf_setup_time_slave_slot +2321 1c21c202 or_into 0x002 ,bt_clk +2322 18004801 force 0x01 ,freq_mode +2323 204028d2 call tx_radio_freq +2324 204028f2 call fetch_diac +2325 20402a51 call start_transmitter +2326 20402a5f call start_tx_external +2327 1c427e00 deposit clkn_bt +2328 60020161 store 4 ,mem_clkn_bt +2329 20402a64 call send_access_word +232a 18000202 force type_fhs ,type +232b 18000800 force 0 ,am_addr +232c 20402a6b call scan_mode_whiten +232d 20402766 call transmit_packet_whitened +232e 20402332 call send_eir +232f 1c2143fd and_into 0x1fd ,bt_clk +2330 1cc0cc01 increase 1 ,n_tx_slot +2331 20600000 rtn + +send_eir: +2332 449a4006 bpatch patch06_4 ,mem_patch06 +2333 6800c0d1 fetch 1 ,mem_eir_enable +2334 207a0000 rtn blank +2335 d8a0018e arg mem_eir ,contw +2336 6800c515 fetch 1 ,mem_local_name_length +2337 1fe27200 copy pdata ,loopcnt +2338 1fe0fe01 increase 1 ,pdata +2339 e0a08000 istore 1 ,contw +233a 18a20400 copy contw ,temp +233b 1fe0fe01 increase 1 ,pdata +233c 600141dc store 2 ,mem_tx_len +233d 18420a00 copy temp ,contw +233e 58000009 setarg 0x09 +233f e0a08000 istore 1 ,contw +2340 d8c04516 arg mem_local_name ,contr +2341 20407f01 call memcpy +2342 da60458d arg mem_all_uuid_128bits ,regc +2343 df200004 arg 4 ,loopcnt +2344 20402354 call get_all_uuid +2345 da604577 arg mem_all_uuid_16bits ,regc +2346 df200001 arg 1 ,loopcnt +2347 20402354 call get_all_uuid +2348 1800020a force type_dm3 ,type +2349 7041db02 jam 2 ,mem_tx_lch +234a 5800018e setarg mem_eir +234b 6001016f store 2 ,mem_txptr +234c 20402a4d call rf_setup_time_slave_slot +234d 204028d2 call tx_radio_freq +234e 20402a51 call start_transmitter +234f 20402a5f call start_tx_external +2350 20402a64 call send_access_word +2351 20402a6b call scan_mode_whiten +2352 20402766 call transmit_packet_whitened +2353 20600000 rtn + +get_all_uuid: +2354 18a20400 copy contw ,temp +2355 1a620c00 copy regc ,contr +2356 e8c08000 ifetch 1 ,contr +2357 207a0000 rtn blank + +lshift_loop: +2358 1fe3fe00 lshift pdata ,pdata +2359 c2002358 loop lshift_loop +235a 1fe22200 copy pdata ,rega +235b 1fe0fe02 increase 2 ,pdata +235c 1fe20e00 copy pdata ,queue +235d 680141dc fetch 2 ,mem_tx_len +235e 98e0fe00 iadd queue ,pdata +235f 600141dc store 2 ,mem_tx_len +2360 18420a00 copy temp ,contw +2361 1a227e00 copy rega ,pdata +2362 1fe0fe01 increase 1 ,pdata +2363 e0a08000 istore 1 ,contw +2364 1a620c00 copy regc ,contr +2365 e8c08000 ifetch 1 ,contr +2366 e8c08000 ifetch 1 ,contr +2367 e0a08000 istore 1 ,contw +2368 1a227200 copy rega ,loopcnt +2369 20207f01 branch memcpy + +page_scan_dispatch: +236a 6800c093 fetch 1 ,mem_scan_mode +236b c4008000 rtnbit0 page_scan_mode +236c 18000e05 force pscan_interval_timer ,queue +236d 20407f16 call timer_check +236e 247a0000 nrtn blank +236f 680940b1 fetcht 2 ,mem_pscan_window +2370 18000e28 force 40 ,queue +2371 2040271c call sniff_check_window +2372 20740000 rtn user +2373 18000800 force 0 ,am_addr +2374 70001008 jam param_pagerespto ,mem_fhs_wait_counter +2375 793f800b set0 mark_fhs_already_good ,mark +2376 2040237a call page_scan_start +2377 18000e05 force pscan_interval_timer ,queue +2378 680140b3 fetch 2 ,mem_pscan_interval +2379 20207f08 branch timer_init + +page_scan_start: +237a 449ac006 bpatch patch06_5 ,mem_patch06 +237b 78587c00 disable clknt +237c 204028a4 call afh_clear +237d 68008008 fetch 1 ,mem_pagescan_waitcnt +237e 1fe0fe01 increase 1 ,pdata +237f 60008008 store 1 ,mem_pagescan_waitcnt +2380 18004c00 force 0 ,n_tx_slot +2381 204028e2 call fetch_self_bt_adr +2382 1c40c201 add clkn_bt ,1 ,bt_clk +2383 18004802 force 0x02 ,freq_mode +2384 449b4006 bpatch patch06_6 ,mem_patch06 +2385 204028cc call rx_radio_freq +2386 204029eb call start_receiver +2387 20402a14 call wait_access_forever +2388 246c0000 nrtn sync +2389 204028f9 call shutdown_radio +238a 68008009 fetch 1 ,mem_pagescan_rcvcnt +238b 1fe0fe01 increase 1 ,pdata +238c 60008009 store 1 ,mem_pagescan_rcvcnt +238d 18003600 force 0 ,stop_watch +238e 20402a4d call rf_setup_time_slave_slot +238f 1c21c202 or_into 0x002 ,bt_clk +2390 18004801 force 0x01 ,freq_mode +2391 204028d2 call tx_radio_freq +2392 20402a51 call start_transmitter +2393 20402a5f call start_tx_external +2394 20402a64 call send_access_word +2395 2040264d call end_of_packet +2396 18000800 force 0 ,am_addr +2397 d9600600 arg param_rf_setup ,timeup +2398 35330200 until clke_rt ,meet +2399 1d01d003 or_into 0x03 ,clke_bt +239a 1c2143fd and_into 0x1fd ,bt_clk + +page_scan_wait_fhs_restart: +239b 449bc006 bpatch patch06_7 ,mem_patch06 +239c 1cc0cc01 increase 1 ,n_tx_slot +239d 204028cc call rx_radio_freq +239e 204029eb call start_receiver +239f 20402a07 call wait_access_mhalfbnd +23a0 242c23a4 nbranch page_scan_wait_fhs_again ,sync +23a1 20402a6b call scan_mode_whiten +23a2 2040251e call receive_packet_whitened +23a3 c505a3ab bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs + +page_scan_wait_fhs_again: +23a4 449c4007 bpatch patch07_0 ,mem_patch07 +23a5 68008010 fetch 1 ,mem_fhs_wait_counter +23a6 207a0000 rtn blank +23a7 1fe0ffff increase -1 ,pdata +23a8 60008010 store 1 ,mem_fhs_wait_counter +23a9 20402a4f call rf_setup_time_master_slot +23aa 2020239b branch page_scan_wait_fhs_restart + +page_scan_reply_to_fhs: +23ab 449cc007 bpatch patch07_1 ,mem_patch07 +23ac 793fd001 set0 1 ,clke_bt +23ad 79205000 set1 0 ,clke_bt +23ae 6800800a fetch 1 ,mem_pagescan_rcvfhscnt +23af 1fe0fe01 increase 1 ,pdata +23b0 6000800a store 1 ,mem_pagescan_rcvfhscnt +23b1 20402a4d call rf_setup_time_slave_slot +23b2 1c21c202 or_into 0x02 ,bt_clk +23b3 204028d2 call tx_radio_freq +23b4 20402a51 call start_transmitter +23b5 20402a5f call start_tx_external +23b6 20402a64 call send_access_word +23b7 2040264d call end_of_packet + +slave_apply_clke_bt: +23b8 2d000603 compare 0x03 ,clke_bt ,0x03 +23b9 2020a3bc branch slave_apply_clke_bt_now ,true +23ba 37cb8200 until null ,mhalfbnd +23bb 202023b8 branch slave_apply_clke_bt + +slave_apply_clke_bt_now: +23bc 68020165 fetch 4 ,mem_clke_bt +23bd 1fe1fe03 or_into 0x03 ,pdata +23be 1fe25000 icopy clke_bt + +start_slave_connection: +23bf 449d4007 bpatch patch07_2 ,mem_patch07 +23c0 68030178 fetch 6 ,extm_lap +23c1 60030040 store 6 ,mem_plap +23c2 20402435 call prepare_newconn + +slave_newconn_loop: +23c3 2040247c call slave_newconn_once +23c4 2036a3c8 branch sconn_successful ,match +23c5 20402455 call new_conn_timeout +23c6 243a23c3 nbranch slave_newconn_loop ,blank +23c7 20600000 rtn + +sconn_successful: +23c8 449dc007 bpatch patch07_3 ,mem_patch07 +23c9 20402440 call newconn_init +23ca 2040223b call context_new +23cb 24628000 nrtn zero +23cc 70003100 jam 0 ,mem_mode +23cd 20402841 call calc_clke_offset +23ce 20202223 branch context_save + +slave_dispatch: +23cf 449e4007 bpatch patch07_4 ,mem_patch07 +23d0 20402850 call calc_clke +23d1 204023f3 call role_switch_slave +23d2 20740000 rtn user + +slave_loop: +23d3 449ec007 bpatch patch07_5 ,mem_patch07 +23d4 20402c69 call check_bt_disabled +23d5 20406caa call scheduler_process +23d6 20402514 call slave_conn_recv_packet +23d7 2436a3e2 nbranch slave_notmatch ,match +23d8 20402a88 call supervision_flush +23d9 20406cc2 call scheduler_tx_l2cap_pkt +23da 20402489 call prepare_tx +23db 20402757 call slave_conn_send_packet +23dc 20402728 call parse_l2cap +23dd 20405d08 call parse_lmp +23de 6800800b fetch 1 ,mem_slave_rcvcnt +23df 1fe0fe01 increase 1 ,pdata +23e0 6000800b store 1 ,mem_slave_rcvcnt +23e1 20402841 call calc_clke_offset + +slave_notmatch: +23e2 449f4007 bpatch patch07_6 ,mem_patch07 +23e3 20402bb1 call lpm_set_mult +23e4 20402a7f call supervision_update +23e5 202123eb branch slave_disconnect ,positive +23e6 204021a7 call check_disconnect_timeout +23e7 243423eb nbranch slave_disconnect ,user +23e8 204026f3 call check_attempt +23e9 243a23d3 nbranch slave_loop ,blank +23ea 20600000 rtn + +slave_disconnect: +23eb 449fc007 bpatch patch07_7 ,mem_patch07 +23ec 70015100 jam 0 ,mem_tester_emulate +23ed 70017f00 jam 0 ,mem_debug_config +23ee 2040245d call quit_connection +23ef 793f8011 set0 mark_testmode ,mark +23f0 20407fb0 call test_enable_white +23f1 68008030 fetch 1 ,mem_state +23f2 20600000 rtn + +role_switch_slave: +23f3 44a04008 bpatch patch08_0 ,mem_patch08 +23f4 204021c9 call role_switch_check +23f5 24740000 nrtn user +23f6 18820400 copy am_addr ,temp +23f7 20402a6f call get_free_amaddr +23f8 60008181 store 1 ,mem_fhs_am_addr +23f9 18420800 copy temp ,am_addr +23fa 70001120 jam param_newconnto ,mem_newconnto_counter + +roles_sendfhs_loop: +23fb 44a0c008 bpatch patch08_1 ,mem_patch08 +23fc 20402a4f call rf_setup_time_master_slot +23fd 18000202 force type_fhs ,type +23fe 2040274f call slave_send_access +23ff 1c427e00 deposit clkn_bt +2400 60020161 store 4 ,mem_clkn_bt +2401 20402762 call transmit_packet +2402 20402a4d call rf_setup_time_slave_slot +2403 7837fc00 enable user3 +2404 204024f6 call slave_receive_access +2405 202c240d branch roles_got_fhs_reply ,sync +2406 204028f9 call shutdown_radio +2407 20402455 call new_conn_timeout +2408 243a23fb nbranch roles_sendfhs_loop ,blank +2409 c6820000 rtnmark0 mark_accept_switch +240a 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 +240b 79200003 set1 mark_switch_initiated ,mark +240c 20600000 rtn + +roles_got_fhs_reply: +240d 78387c00 enable clknt +240e 20402435 call prepare_newconn +240f 204028a4 call afh_clear + +roles_newconn_loop: +2410 44a14008 bpatch patch08_2 ,mem_patch08 +2411 204022f2 call master_newconn_once +2412 202c2419 branch roles_newconn_responded ,sync +2413 20402455 call new_conn_timeout +2414 243a2410 nbranch roles_newconn_loop ,blank +2415 78587c00 disable clknt +2416 1d027e00 deposit clke_bt +2417 600240ca store 4 ,mem_next_btclk +2418 20600000 rtn + +roles_newconn_responded: +2419 7834fc00 enable master +241a c582241f bmark0 mark_accept_switch ,roles_newconn_nolmp +241b 793f8004 set0 mark_accept_switch ,mark +241c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +241d 70007d33 jam lmp_host_connection_req ,mem_lmi_opcode2 +241e 204062f8 call tid_set_reply + +roles_newconn_nolmp: +241f 18827e00 deposit am_addr +2420 60008077 store 1 ,mem_amaddr +2421 18007e00 force 0 ,pdata +2422 60030038 store 6 ,mem_clk_offset +2423 68008031 fetch 1 ,mem_mode +2424 79207e01 set1 mode_master ,pdata +2425 60008031 store 1 ,mem_mode +2426 20402a88 call supervision_flush +2427 7854fc00 disable master +2428 78347c00 enable user +2429 20600000 rtn + +init_rx_packet_flags: +242a 44a1c008 bpatch patch08_3 ,mem_patch08 +242b 7856fc00 disable match +242c 793f8005 set0 mark_loopback ,mark +242d 793f800a set0 mark_am_addr_broadcast ,mark +242e 793f8010 set0 mark_longpacket ,mark +242f 793f800f set0 mark_old_packet ,mark +2430 68008047 fetch 1 ,mem_arq +2431 793ffe05 set0 arqnx ,pdata +2432 79207e04 set1 flowx ,pdata +2433 60008047 store 1 ,mem_arq +2434 20600000 rtn + +prepare_newconn: +2435 44a24008 bpatch patch08_4 ,mem_patch08 +2436 70001120 jam param_newconnto ,mem_newconnto_counter +2437 70004750 jam param_newconn_arq ,mem_arq +2438 680140bf fetch 2 ,mem_rx_window_init +2439 6001003e store 2 ,mem_rx_window +243a 1c427e00 deposit clkn_bt +243b 600240ca store 4 ,mem_next_btclk +243c 20780000 rtn clknt +243d 1d027e00 deposit clke_bt +243e 600240ca store 4 ,mem_next_btclk +243f 20600000 rtn + +newconn_init: +2440 44a2c008 bpatch patch08_5 ,mem_patch08 +2441 20405d04 call init_lmp_reinit +2442 20402459 call new_conn_handle +2443 60008046 store 1 ,mem_conn_handle +2444 58000000 setarg 0 +2445 6001025d store 2 ,mem_l2cap_rxbuff1_len +2446 58001c80 setarg param_supervision_to +2447 60010051 store 2 ,mem_supervision_to +2448 68008030 fetch 1 ,mem_state +2449 79207e00 set1 state_inconn ,pdata +244a 60008030 store 1 ,mem_state +244b 70004b00 jam 0 ,mem_op +244c 70004c00 jam 0 ,mem_state_map +244d 7000a000 jam 0 ,mem_lpm_current_mult +244e 20202a88 branch supervision_flush + +clear_linkkey: +244f 44a34008 bpatch patch08_6 ,mem_patch08 +2450 18007e00 force 0 ,pdata +2451 600441be store 8 ,mem_link_key +2452 e0a40000 istore 8 ,contw +2453 204021c5 call clear_linkstate +2454 20202254 branch context_traverse_linkkey + +new_conn_timeout: +2455 68008011 fetch 1 ,mem_newconnto_counter +2456 1fe0ffff increase -1 ,pdata +2457 60008011 store 1 ,mem_newconnto_counter +2458 20600000 rtn + +new_conn_handle: +2459 6800c0cf fetch 1 ,mem_handle_num +245a 1fe0fe01 increase 1 ,pdata +245b 6000c0cf store 1 ,mem_handle_num +245c 20600000 rtn + +quit_connection: +245d 44a3c008 bpatch patch08_7 ,mem_patch08 +245e 6800c1ce fetch 1 ,mem_hci_cmd +245f c001a462 beq hci_cmd_remote_name_req ,quit_connection_name +2460 68008048 fetch 1 ,mem_lmp_to_send +2461 c080a466 bne lmp_name_req ,quit_connection_cont + +quit_connection_name: +2462 20404d06 call cmd_check_plap +2463 2422a466 nbranch quit_connection_cont ,zero +2464 204021a4 call master_name_error +2465 7041ce00 jam 0 ,mem_hci_cmd + +quit_connection_cont: +2466 44a44009 bpatch patch09_0 ,mem_patch09 +2467 204033af call app_disconn_reason_collect_bt +2468 204026e9 call sniff_exit +2469 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp +246a 20407d86 call ui_ipc_send_event +246b 20405cf7 call init_lmp_work +246c 20404d6b call l2cap_init_work +246d 2040757d call sp_initialize +246e 68008030 fetch 1 ,mem_state +246f 793ffe00 set0 state_inconn +2470 60008030 store 1 ,mem_state +2471 70468100 jam 0 ,memui_reconnect_mode +2472 6800804c fetch 1 ,mem_state_map +2473 2fe18000 compare 0x0 ,pdata ,0xc0 +2474 2020a476 branch quit_connection_not_clear_mark ,true +2475 793f8001 set0 mark_rxbuf_inuse ,mark + +quit_connection_not_clear_mark: +2476 68008047 fetch 1 ,mem_arq +2477 c301a478 bbit0 wack ,quit_connection_not_clear_tx + +quit_connection_not_clear_tx: +2478 6800804b fetch 1 ,mem_op +2479 c4030000 rtnbit0 op_txl2cap +247a 793f8002 set0 mark_tx_l2cap ,mark +247b 20600000 rtn + +slave_newconn_once: +247c 44a4c009 bpatch patch09_1 ,mem_patch09 +247d 68008174 fetch 1 ,extm_newconn_am_addr +247e 207a0000 rtn blank +247f 1fe20800 icopy am_addr +2480 20402514 call slave_conn_recv_packet +2481 24768000 nrtn match +2482 18000200 force type_null ,type +2483 20402757 call slave_conn_send_packet +2484 18827e00 deposit am_addr +2485 60008077 store 1 ,mem_amaddr +2486 18007e00 force 0 ,pdata +2487 60008174 store 1 ,extm_newconn_am_addr +2488 20600000 rtn + +prepare_tx: +2489 44a54009 bpatch patch09_2 ,mem_patch09 +248a 68008030 fetch 1 ,mem_state +248b c3012496 bbit0 state_insco ,prepare_tx_not_sco +248c 18000207 force type_hv3 ,type +248d c583a495 bmark0 mark_esco ,prepare_tx_not_esco +248e 20402725 call check_esco_amaddr +248f 2420a496 nbranch prepare_tx_not_sco ,true +2490 20372496 branch prepare_tx_not_sco ,attempt +2491 204024c1 call set_wait_ack +2492 58000002 setarg 2 +2493 600140c8 store 2 ,mem_retransmission_cnt +2494 20600000 rtn + +prepare_tx_not_esco: +2495 24770000 nrtn attempt + +prepare_tx_not_sco: +2496 44a5c009 bpatch patch09_3 ,mem_patch09 +2497 20402243 call context_check_all_wack +2498 2422a4a7 nbranch prepare_tx_no_retransmit ,zero +2499 68008047 fetch 1 ,mem_arq +249a c301a4b0 bbit0 wack ,prepare_tx_pollnull + +prepare_tx_retransmit: +249b c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback +249c 6800817f fetch 1 ,mem_debug_config +249d c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat +249e 680140c8 fetch 2 ,mem_retransmission_cnt +249f 1fe0ffff increase -1 ,pdata +24a0 600140c8 store 2 ,mem_retransmission_cnt +24a1 203a24a5 branch prepare_tx_nomore_retransmit ,blank +24a2 6800c0c5 fetch 1 ,mem_last_type +24a3 98000200 iforce type +24a4 20600000 rtn + +prepare_tx_nomore_retransmit: +24a5 44a64009 bpatch patch09_4 ,mem_patch09 +24a6 20402687 call clear_got_tx + +prepare_tx_no_retransmit: +24a7 20402725 call check_esco_amaddr +24a8 2020a4b0 branch prepare_tx_pollnull ,true +24a9 2040600a call send_lmp +24aa 203424be branch prepare_tx_sendlmp ,user +24ab 6800804b fetch 1 ,mem_op +24ac c28324c0 bbit1 op_txl2cap ,prepare_tx_sendl2cap +24ad c502a4b4 bmark1 mark_loopback ,prepare_tx_loopback +24ae 6800817f fetch 1 ,mem_debug_config +24af c28324ba bbit1 debug_tx_pattern ,prepare_tx_txpat + +prepare_tx_pollnull: +24b0 18000201 force type_poll ,type +24b1 20748000 rtn master +24b2 18000200 force type_null ,type +24b3 20600000 rtn + +prepare_tx_loopback: +24b4 44a6c009 bpatch patch09_5 ,mem_patch09 +24b5 68008019 fetch 1 ,mem_rx_type +24b6 98000200 iforce type +24b7 c1808000 rtnne 1 +24b8 18000200 force type_null ,type +24b9 20600000 rtn + +prepare_tx_txpat: +24ba 68008158 fetch 1 ,test_mode_packet_type +24bb 1fe1020f and pdata ,0xf ,type +24bc 79200005 set1 mark_loopback ,mark +24bd 20600000 rtn + +prepare_tx_sendlmp: +24be 18000213 force type_lmp ,type +24bf 202024c1 branch set_wait_ack + +prepare_tx_sendl2cap: +24c0 204024ca call tx_l2cap_type + +set_wait_ack: +24c1 44a74009 bpatch patch09_6 ,mem_patch09 +24c2 68088047 fetcht 1 ,mem_arq +24c3 79200403 set1 wack ,temp +24c4 60088047 storet 1 ,mem_arq +24c5 18227e00 deposit type +24c6 6000c0c5 store 1 ,mem_last_type +24c7 5800ffff setarg 0xffff +24c8 600140c8 store 2 ,mem_retransmission_cnt +24c9 20600000 rtn + +tx_l2cap_type: +24ca 44a7c009 bpatch patch09_7 ,mem_patch09 +24cb 6800804c fetch 1 ,mem_state_map +24cc 2feffe05 isolate1 smap_edr ,pdata +24cd 680141dc fetch 2 ,mem_tx_len +24ce 2020a4e0 branch tx_l2cap_type_edr ,true +24cf 18000203 force type_dm1 ,type +24d0 1fe67c11 sub pdata ,17 ,null +24d1 20610000 rtn positive +24d2 18000204 force type_dh1 ,type +24d3 1fe67c1b sub pdata ,27 ,null +24d4 20610000 rtn positive +24d5 1800020a force type_dm3 ,type +24d6 1fe67c79 sub pdata ,121 ,null +24d7 20610000 rtn positive +24d8 1800020b force type_dh3 ,type +24d9 1fe67cb7 sub pdata ,183 ,null +24da 20610000 rtn positive +24db 1800020e force type_dm5 ,type +24dc 1fe67ce0 sub pdata ,224 ,null +24dd 20610000 rtn positive +24de 1800020f force type_dh5 ,type +24df 20600000 rtn + +tx_l2cap_type_edr: +24e0 18000203 force type_dm1 ,type +24e1 1fe67c11 sub pdata ,17 ,null +24e2 20610000 rtn positive +24e3 18000204 force type_dh1 ,type +24e4 1fe67c36 sub pdata ,54 ,null +24e5 20610000 rtn positive +24e6 1800020a force type_dm3 ,type +24e7 d840016f arg 367 ,temp +24e8 98467c00 isub temp ,null +24e9 24610000 nrtn positive +24ea 1800020e force type_dm5 ,type +24eb d84002a7 arg 679 ,temp +24ec 98467c00 isub temp ,null +24ed 24610000 nrtn positive +24ee 1800020f force type_dh5 ,type +24ef 20600000 rtn + +slave_receive_master_slot: +24f0 68008030 fetch 1 ,mem_state +24f1 c300a4f5 bbit0 state_insniff ,slave_receive_notsniff +24f2 68010032 fetch 2 ,mem_tsniff +24f3 203a24f5 branch slave_receive_notsniff ,blank +24f4 243724f7 nbranch slave_receive_sniff ,attempt + +slave_receive_notsniff: +24f5 20402a4f call rf_setup_time_master_slot + +slave_receive_access: +24f6 1d00c201 add clke_bt ,1 ,bt_clk + +slave_receive_sniff: +24f7 78287c00 enable swfine +24f8 6801003e fetch 2 ,mem_rx_window +24f9 1fe37e00 rshift pdata ,pdata +24fa d8400500 arg param_pll_setup ,temp +24fb 9840fe00 iadd temp ,pdata +24fc 20402a24 call ahead_window +24fd 204028ea call fetch_extm_bt_adr +24fe 18004803 force 0x03 ,freq_mode +24ff 204028cc call rx_radio_freq +2500 2040242a call init_rx_packet_flags +2501 204029f1 call prep_crypt +2502 44a8400a bpatch patch0a_0 ,mem_patch0a +2503 6801003e fetch 2 ,mem_rx_window +2504 1fe37e00 rshift pdata ,pdata +2505 20402a24 call ahead_window +2506 204029eb call start_receiver +2507 7826fc00 enable decode_fec0 +2508 6801003e fetch 2 ,mem_rx_window +2509 d84003bb arg param_clke_cal ,temp +250a 9840b600 iadd temp ,stop_watch +250b 37c18400 correlate null ,timeout +250c 1b420400 copy clke ,temp +250d 600b009a storet 6 ,mem_sync_clke +250e 7846fc00 disable decode_fec0 +250f 246c0000 nrtn sync +2510 dd2003bb arg param_clke_cal ,clke_rt +2511 1c225000 copy bt_clk ,clke_bt +2512 2035ab05 branch lpm_adjust_clk ,wake +2513 20600000 rtn + +slave_conn_recv_packet: +2514 44a8c00a bpatch patch0a_1 ,mem_patch0a +2515 204024f0 call slave_receive_master_slot +2516 242c28f9 nbranch shutdown_radio ,sync +2517 204029bb call save_rssi +2518 c588a51c bmark0 mark_testmode ,receive_packet +2519 680100f6 fetch 2 ,mem_tst_pktcnt_sync +251a 1fe0fe01 increase 1 ,pdata +251b 600100f6 store 2 ,mem_tst_pktcnt_sync + +receive_packet: +251c 1c230400 rshift bt_clk ,temp +251d 18419c40 or temp ,0x40 ,white_init + +receive_packet_whitened: +251e 44a9400a bpatch patch0a_2 ,mem_patch0a +251f 7823fc00 enable enable_white +2520 78257c00 enable enable_hec +2521 7825fc00 enable decode_fec1 +2522 09800003 parse demod ,bucket ,3 +2523 198cfe00 rshift8 pwindow ,pdata +2524 6000815d store 1 ,mem_temp_am_addr +2525 09800004 parse demod ,bucket ,4 +2526 08008007 inject bucket ,7 +2527 19827e00 copy pwindow ,pdata +2528 60008019 store 1 ,mem_rx_type +2529 09800003 parse demod ,bucket ,3 +252a 198cfe00 rshift8 pwindow ,pdata +252b 6000815e store 1 ,mem_temp_arq +252c 68008019 fetch 1 ,mem_rx_type +252d 1fe67c03 sub pdata ,3 ,null +252e 20212533 branch receive_packet_noedr ,positive +252f c003a533 beq 7 ,receive_packet_noedr +2530 6800804c fetch 1 ,mem_state_map +2531 2feffe05 isolate1 smap_edr ,pdata +2532 7920aa01 setflag true ,psk ,radio_ctrl + +receive_packet_noedr: +2533 44a9c00a bpatch patch0a_3 ,mem_patch0a +2534 09800008 parse demod ,bucket ,8 +2535 7845fc00 disable decode_fec1 +2536 78457c00 disable enable_hec +2537 20232631 branch error_header ,crc_failed +2538 c588a53c bmark0 mark_testmode ,receive_packet_amchk +2539 680100f8 fetch 2 ,mem_tst_pktcnt_hec +253a 1fe0fe01 increase 1 ,pdata +253b 600100f8 store 2 ,mem_tst_pktcnt_hec + +receive_packet_amchk: +253c 44aa400a bpatch patch0a_4 ,mem_patch0a +253d 6800815d fetch 1 ,mem_temp_am_addr +253e 2fe00e00 compare 0 ,pdata ,0x07 +253f 7920800a setflag true ,mark_am_addr_broadcast ,mark +2540 2020a54c branch am_addr_ok ,true +2541 a8800e00 icompare 0x07 ,am_addr +2542 2020a54b branch am_addr_match ,true +2543 c583a64d bmark0 mark_esco ,end_of_packet +2544 680880b0 fetcht 1 ,mem_saved_amaddr +2545 a8400e00 icompare 0x7 ,temp +2546 2420a64d nbranch end_of_packet ,true +2547 68008047 fetch 1 ,mem_arq +2548 793ffe05 set0 arqnx ,pdata +2549 79207e04 set1 flowx ,pdata +254a 60008047 store 1 ,mem_arq + +am_addr_match: +254b 7836fc00 enable match + +am_addr_ok: +254c 44aac00a bpatch patch0a_5 ,mem_patch0a +254d 68008019 fetch 1 ,mem_rx_type +254e 1fe20200 icopy type +254f c505255b bmark1 mark_am_addr_broadcast ,arqn_bypass +2550 6808815e fetcht 1 ,mem_temp_arq +2551 68008047 fetch 1 ,mem_arq +2552 793ffe00 set0 flow ,pdata +2553 284ffe00 isolate1 flow ,temp +2554 7920fe00 setflag true ,flow ,pdata +2555 284ffe01 isolate1 arqn ,temp +2556 7920fe01 setflag true ,arqn ,pdata +2557 60008047 store 1 ,mem_arq +2558 284c0001 isolate0 arqn ,temp +2559 2020a55b branch arqn_bypass ,true +255a 20402687 call clear_got_tx + +arqn_bypass: +255b 44ab400a bpatch patch0a_6 ,mem_patch0a +255c d8400000 arg 0 ,temp +255d 20402a1c call reserve_slot +255e 18217e0f and type ,0xf ,pdata +255f c000a587 beq type_poll ,process_poll +2560 c000264d beq type_null ,end_of_packet +2561 c0012659 beq type_fhs ,process_fhs +2562 6808815e fetcht 1 ,mem_temp_arq +2563 68008047 fetch 1 ,mem_arq +2564 a8400800 icompare 0x04 ,temp +2565 2420a569 nbranch rx_type_dispatch ,true +2566 c5852568 bmark0 mark_am_addr_broadcast ,failed_seqn +2567 c303a569 bbit0 bcast1 ,rx_type_dispatch + +failed_seqn: +2568 7920000f set1 mark_old_packet ,mark + +rx_type_dispatch: +2569 44abc00a bpatch patch0a_7 ,mem_patch0a +256a 18227e00 deposit type +256b c001a589 beq type_dm1 ,process_dm1 +256c c002258d beq type_dh1 ,process_dh1 +256d c003a578 beq type_hv3 ,process_hev +256e c004258c beq type_3dh1 ,process_3dh1 +256f d8400004 arg 4 ,temp +2570 20402a1c call reserve_slot +2571 c0052588 beq type_dm3 ,process_dm3 +2572 c005a58b beq type_dh3 ,process_dh3 +2573 d8400008 arg 8 ,temp +2574 20402a1c call reserve_slot +2575 c0072588 beq type_dm5 ,process_dm5 +2576 c007a58b beq type_dh5 ,process_dh5 +2577 20600000 rtn + +process_hev: +2578 44ac400b bpatch patch0b_0 ,mem_patch0b +2579 7826fc00 enable decode_fec0 +257a 7824fc00 enable enable_crc +257b 78277c00 enable encrypt +257c d8a000d1 arg mem_sco_ibuf ,contw +257d 1800721e force 30 ,loopcnt + +process_hev_loop: +257e 09800008 parse demod ,bucket ,8 +257f 19897e00 rshift3 pwindow ,pdata +2580 e0a08000 istore 1 ,contw +2581 c200257e loop process_hev_loop +2582 c583a64d bmark0 mark_esco ,end_of_packet +2583 09800010 parse demod ,bucket ,16 +2584 7d230008 nsetflag crc_failed ,mark_esco_rxok ,mark +2585 2023263d branch error_payload ,crc_failed +2586 20202620 branch ack_payload + +process_poll: +2587 2020264d branch end_of_packet + +process_dm3: + +process_dm5: +2588 79200010 set1 mark_longpacket ,mark + +process_dm1: +2589 78267c00 enable decode_fec2 +258a 2020258e branch process_dmh + +process_dh3: + +process_dh5: +258b 79200010 set1 mark_longpacket ,mark + +process_3dh1: +258c 79202a02 set1 psk3m ,radio_ctrl + +process_dh1: +258d 7826fc00 enable decode_fec0 + +process_dmh: +258e 44acc00b bpatch patch0b_1 ,mem_patch0b +258f c500a64d bmark1 mark_rxbuf_inuse ,end_of_packet +2590 2aac0001 isolate0 psk ,radio_ctrl +2591 2020a59a branch process_dmh_noedr ,true +2592 7843fc00 disable enable_white +2593 7826fc00 enable decode_fec0 +2594 78467c00 disable decode_fec2 +2595 1c409602 add clkn_bt ,2 ,timeup +2596 34530400 correlate clkn_bt ,meet +2597 242c263d nbranch error_payload ,sync +2598 79200010 set1 mark_longpacket ,mark +2599 7823fc00 enable enable_white + +process_dmh_noedr: +259a 44ad400b bpatch patch0b_2 ,mem_patch0b +259b 78277c00 enable encrypt +259c 7824fc00 enable enable_crc +259d 09800003 parse demod ,bucket ,3 +259e 198cfe00 rshift8 pwindow ,pdata +259f 60008180 store 1 ,mem_lch_code +25a0 09800005 parse demod ,bucket ,5 +25a1 c50825a5 bmark1 mark_longpacket ,process_dmh_long +25a2 19897200 rshift3 pwindow ,loopcnt +25a3 1f297200 rshift3 loopcnt ,loopcnt +25a4 202025a8 branch process_dmh_common + +process_dmh_long: +25a5 09800005 parse demod ,bucket ,5 +25a6 19837200 rshift pwindow ,loopcnt +25a7 09800003 parse demod ,bucket ,3 + +process_dmh_common: +25a8 44adc00b bpatch patch0b_3 ,mem_patch0b +25a9 1f227e00 deposit loopcnt +25aa 6001015f store 2 ,mem_len +25ab 203a25e8 branch process_dmh_data_end ,blank +25ac 9ea67c00 isub mask3ff ,null +25ad 2021263d branch error_payload ,positive +25ae 44ae400b bpatch patch0b_4 ,mem_patch0b +25af 793f8000 set0 mark_fhs_eir ,mark +25b0 68008180 fetch 1 ,mem_lch_code +25b1 1fe17e03 and_into 0x03 ,pdata +25b2 d8a00551 arg mem_rxbuf ,contw +25b3 c001a5ba beq llid_lmp ,process_lmp +25b4 c508a5e4 bmark1 mark_testmode ,process_dmh_data +25b5 68008180 fetch 1 ,mem_lch_code +25b6 1fe17e03 and_into 0x03 ,pdata +25b7 c00125bf beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +25b8 c000a5d3 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +25b9 2020263d branch error_payload + +process_lmp: +25ba 6801015f fetch 2 ,mem_len +25bb 1fe67c70 sub pdata ,0x70 ,null +25bc 2421263d nbranch error_payload ,positive +25bd c507a620 bmark1 mark_old_packet ,ack_payload +25be 202025e4 branch process_dmh_data + +process_dmh_data_l2cap_start_pkt: +25bf 44aec00b bpatch patch0b_5 ,mem_patch0b +25c0 c507a620 bmark1 mark_old_packet ,ack_payload +25c1 6801015f fetch 2 ,mem_len +25c2 d84002e0 arg 0x2e0 ,temp +25c3 98467c00 isub temp ,null +25c4 2021263d branch error_payload ,positive +25c5 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +25c6 c30025c9 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +25c7 c300a5ce bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +25c8 2020264d branch end_of_packet + +process_dmh_data_into_buff1: +25c9 70026101 jam 1 ,mem_l2cap_rxbuff_new +25ca 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +25cb c080264d bne 0 ,end_of_packet +25cc d8a01000 arg mem_l2cap_rxbuff1 ,contw +25cd 202025e4 branch process_dmh_data + +process_dmh_data_into_buff2: +25ce 70026102 jam 2 ,mem_l2cap_rxbuff_new +25cf 6801025f fetch 2 ,mem_l2cap_rxbuff2_len +25d0 c080264d bne 0 ,end_of_packet +25d1 d8a01400 arg mem_l2cap_rxbuff2 ,contw +25d2 202025e4 branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt: +25d3 44af400b bpatch patch0b_6 ,mem_patch0b +25d4 c507a620 bmark1 mark_old_packet ,ack_payload +25d5 6801015f fetch 2 ,mem_len +25d6 d84002e0 arg 0x2e0 ,temp +25d7 98467c00 isub temp ,null +25d8 2021263d branch error_payload ,positive +25d9 68008261 fetch 1 ,mem_l2cap_rxbuff_new +25da c000a5dd beq 1 ,process_dmh_data_l2cap_continue_pkt1 +25db c00125e1 beq 2 ,process_dmh_data_l2cap_continue_pkt2 +25dc 2020264d branch end_of_packet + +process_dmh_data_l2cap_continue_pkt1: +25dd d8a01000 arg mem_l2cap_rxbuff1 ,contw +25de 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +25df 98a08a00 iadd contw ,contw +25e0 202025e4 branch process_dmh_data + +process_dmh_data_l2cap_continue_pkt2: +25e1 d8a01400 arg mem_l2cap_rxbuff2 ,contw +25e2 6801025f fetch 2 ,mem_l2cap_rxbuff2_len +25e3 98a08a00 iadd contw ,contw + +process_dmh_data: +25e4 09800008 parse demod ,bucket ,8 +25e5 19897e00 rshift3 pwindow ,pdata +25e6 e0a08000 istore 1 ,contw +25e7 c20025e4 loop process_dmh_data + +process_dmh_data_end: +25e8 44afc00b bpatch patch0b_7 ,mem_patch0b +25e9 09800010 parse demod ,bucket ,16 +25ea 20232637 branch error_payload_crc ,crc_failed +25eb 6800c363 fetch 1 ,mem_l2cap_flow_ctrl_flag +25ec c000a64d beq l2cap_flow_ctrl_enable ,end_of_packet +25ed c508a60d bmark1 mark_testmode ,process_dmh_cont +25ee c507a64a bmark1 mark_old_packet ,redundant_payload +25ef 68008180 fetch 1 ,mem_lch_code +25f0 2fe00603 compare 3 ,pdata ,3 +25f1 2020a60d branch process_dmh_cont ,true +25f2 6801015f fetch 2 ,mem_len +25f3 203a260d branch process_dmh_cont ,blank +25f4 44b0400c bpatch patch0c_0 ,mem_patch0c +25f5 68008261 fetch 1 ,mem_l2cap_rxbuff_new +25f6 c000a5f9 beq 1 ,process_l2cap_pass_crc_buff1 +25f7 c0012603 beq 2 ,process_l2cap_pass_crc_buff2 +25f8 20202a8c branch assert + +process_l2cap_pass_crc_buff1: +25f9 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +25fa 6809015f fetcht 2 ,mem_len +25fb 9840fe00 iadd temp ,pdata +25fc 6001025d store 2 ,mem_l2cap_rxbuff1_len +25fd c0002a8c beq 0 ,assert +25fe 68091000 fetcht 2 ,mem_l2cap_rxbuff1 +25ff 18408404 increase 4 ,temp +2600 98467c00 isub temp ,null +2601 2042a747 call l2cap_buff1_inuse ,zero +2602 2020260d branch process_dmh_cont + +process_l2cap_pass_crc_buff2: +2603 6801025f fetch 2 ,mem_l2cap_rxbuff2_len +2604 6809015f fetcht 2 ,mem_len +2605 9840fe00 iadd temp ,pdata +2606 6001025f store 2 ,mem_l2cap_rxbuff2_len +2607 c0002a8c beq 0 ,assert +2608 68091400 fetcht 2 ,mem_l2cap_rxbuff2 +2609 18408404 add temp ,4 ,temp +260a 98467c00 isub temp ,null +260b 2042a74b call l2cap_buff2_inuse ,zero +260c 2020260d branch process_dmh_cont + +process_dmh_cont: +260d 44b0c00c bpatch patch0c_1 ,mem_patch0c +260e 6808804c fetcht 1 ,mem_state_map +260f 68008180 fetch 1 ,mem_lch_code +2610 2fe00603 compare 3 ,pdata ,0x03 +2611 79208406 setflag true ,smap_rxlmp ,temp +2612 7d208407 nsetflag true ,smap_rxl2cap ,temp +2613 6008804c storet 1 ,mem_state_map +2614 2420a616 nbranch process_dmh_cont_rxbuf_not_use ,true +2615 79200001 set1 mark_rxbuf_inuse ,mark + +process_dmh_cont_rxbuf_not_use: +2616 c588a620 bmark0 mark_testmode ,ack_payload +2617 284ffe06 isolate1 smap_rxlmp ,temp +2618 2020a620 branch ack_payload ,true +2619 680100fa fetch 2 ,mem_tst_pktcnt_crc +261a 1fe0fe01 increase 1 ,pdata +261b 600100fa store 2 ,mem_tst_pktcnt_crc +261c 79200005 set1 mark_loopback ,mark +261d 793f8407 set0 smap_rxl2cap ,temp +261e 793f8001 set0 mark_rxbuf_inuse ,mark +261f 6008804c storet 1 ,mem_state_map + +ack_payload: +2620 44b1400c bpatch patch0c_2 ,mem_patch0c +2621 6808815e fetcht 1 ,mem_temp_arq +2622 68008047 fetch 1 ,mem_arq +2623 79207e05 set1 arqnx ,pdata +2624 284ffe02 isolate1 seqn ,temp +2625 7920fe02 setflag true ,seqn ,pdata +2626 280ffe0a isolate1 mark_am_addr_broadcast ,mark +2627 7920fe07 setflag true ,bcast1 ,pdata +2628 60008047 store 1 ,mem_arq +2629 6801015f fetch 2 ,mem_len +262a 243a264d nbranch end_of_packet ,blank +262b 6800804c fetch 1 ,mem_state_map +262c 793ffe07 set0 smap_rxl2cap ,pdata +262d 6000804c store 1 ,mem_state_map +262e 68008180 fetch 1 ,mem_lch_code +262f 2fe00e01 compare 0x01 ,pdata ,0x07 +2630 2020264d branch end_of_packet + +error_header: +2631 44b1c00c bpatch patch0c_3 ,mem_patch0c +2632 7856fc00 disable match +2633 6801001a fetch 2 ,mem_rx_hec_err +2634 1fe0fe01 increase 1 ,pdata +2635 6001001a store 2 ,mem_rx_hec_err +2636 2020264d branch end_of_packet + +error_payload_crc: +2637 6801001c fetch 2 ,mem_rx_crc_err +2638 1fe0fe01 increase 1 ,pdata +2639 6001001c store 2 ,mem_rx_crc_err +263a 2040263e call discard_pkt +263b c588a63d bmark0 mark_testmode ,error_payload +263c 79200005 set1 mark_loopback ,mark + +error_payload: +263d 2020264d branch end_of_packet + +discard_pkt: +263e 44b2400c bpatch patch0c_4 ,mem_patch0c +263f 68008180 fetch 1 ,mem_lch_code +2640 2fe00603 compare 3 ,pdata ,0x03 +2641 2420a646 nbranch discard_pkt_l2cap ,true + +discard_pkt_lmp: +2642 6808804c fetcht 1 ,mem_state_map +2643 793f8406 set0 smap_rxlmp ,temp +2644 6008804c storet 1 ,mem_state_map +2645 20600000 rtn + +discard_pkt_l2cap: +2646 6808804c fetcht 1 ,mem_state_map +2647 793f8407 set0 smap_rxl2cap ,temp +2648 6008804c storet 1 ,mem_state_map +2649 20204c0b branch h4_send_acl_trigger_clear + +redundant_payload: +264a 68008047 fetch 1 ,mem_arq +264b 79207e05 set1 arqnx ,pdata +264c 60008047 store 1 ,mem_arq + +end_of_packet: +264d 44b2c00c bpatch patch0c_5 ,mem_patch0c +264e 784efc00 disable encode_fec0 +264f 784e7c00 disable encode_fec2 +2650 7846fc00 disable decode_fec0 +2651 78467c00 disable decode_fec2 +2652 7844fc00 disable enable_crc +2653 78477c00 disable encrypt +2654 7843fc00 disable enable_white +2655 2030a8f9 branch shutdown_radio ,is_rx +2656 37d38200 until null ,tx_clear +2657 20000064 nop 100 +2658 202028f9 branch shutdown_radio + +process_fhs: +2659 44b3400c bpatch patch0c_6 ,mem_patch0c +265a 7824fc00 enable enable_crc +265b 78267c00 enable decode_fec2 +265c 09800048 parse demod ,bucket ,72 +265d 2feffe3a isolate1 58 ,pdata +265e 79208000 setflag true ,mark_fhs_eir ,mark +265f 1c020400 copy bt_adr ,temp +2660 57e04000 ialigned bt_adr +2661 57e03c00 ialigned fhs0 +2662 782afc00 pulse recalc +2663 380bffff setsect 2 ,0xfffff +2664 380cffff setsect 3 ,0x0ffff +2665 20000020 nop 32 +2666 29a80000 iverify fhs_parity +2667 1d827e00 deposit lap +2668 60018178 store 3 ,extm_lap +2669 1da27e00 deposit uap +266a 6000817b store 1 ,extm_uap +266b 18424000 copy temp ,bt_adr +266c 2020a66e branch fhs_parity_ok ,true +266d 2020263d branch error_payload + +fhs_parity_ok: +266e 44b3c00c bpatch patch0c_7 ,mem_patch0c +266f 09800048 parse demod ,bucket ,72 +2670 57e03e00 ialigned fhs1 +2671 57e00800 ialigned am_addr +2672 57e05c00 ialigned nap +2673 57e02400 ialigned regb +2674 18007e00 force 0 ,pdata +2675 09800010 parse demod ,bucket ,16 +2676 2023263d branch error_payload ,crc_failed +2677 5ffffffc setarg 0x0ffffffc +2678 9a417e00 iand regb ,pdata +2679 60020165 store 4 ,mem_clke_bt +267a 1ba27e00 deposit fhs_class +267b 60018175 store 3 ,extm_class +267c 1b827e00 deposit fhs_misc +267d 60008173 store 1 ,extm_fhs_misc +267e 18827e00 deposit am_addr +267f 60008174 store 1 ,extm_newconn_am_addr +2680 1dc27e00 deposit nap +2681 6001017c store 2 ,extm_nap +2682 1c227e00 deposit bt_clk +2683 08008220 inject rxf ,32 +2684 28201e02 compare type_fhs ,type ,0x0f +2685 7920800b setflag true ,mark_fhs_already_good ,mark +2686 2020264d branch end_of_packet + +clear_got_tx: +2687 44b4400d bpatch patch0d_0 ,mem_patch0d +2688 68008047 fetch 1 ,mem_arq +2689 c4018000 rtnbit0 wack +268a 793ffe03 set0 wack ,pdata +268b 79407e06 setflip seqnx ,pdata +268c 60008047 store 1 ,mem_arq +268d 6800c0c5 fetch 1 ,mem_last_type +268e c009a69c beq type_lmp ,clear_got_txlmp +268f c1038000 rtneq type_hv3 +2690 6800804b fetch 1 ,mem_op +2691 c4030000 rtnbit0 op_txl2cap ,pdata +2692 793ffe06 set0 op_txl2cap ,pdata +2693 79207e07 set1 op_pkt_comp ,pdata +2694 6000804b store 1 ,mem_op +2695 793f8002 set0 mark_tx_l2cap ,mark +2696 68014246 fetch 2 ,mem_l2cap_tx_multi_offset +2697 247a0000 nrtn blank +2698 6800804b fetch 1 ,mem_op +2699 793ffe07 set0 op_pkt_comp ,pdata +269a 6000804b store 1 ,mem_op +269b 2020525d branch l2cap_malloc_free + +clear_got_txlmp: +269c 44b4c00d bpatch patch0d_1 ,mem_patch0d +269d 680084b7 fetch 1 ,mem_lmo_header_opcode +269e 1fe37e00 rshift pdata ,pdata +269f c008a6b8 beq lmp_start_encryption_req ,start_encryption +26a0 c00926c0 beq lmp_stop_encryption_req ,stop_encryption +26a1 c00c26e9 beq lmp_unsniff_req ,sniff_exit +26a2 c03fa6a8 beq lmp_escape ,clear_lmp_escape +26a3 c1818000 rtnne lmp_accepted +26a4 680084b8 fetch 1 ,mem_lmo_payload +26a5 c015a6b0 beq lmp_sco_link_req ,sco_link_req_by_slave +26a6 c008a6ab beq lmp_start_encryption_req ,clear_send_setup_complete +26a7 20600000 rtn + +clear_lmp_escape: +26a8 680084b8 fetch 1 ,mem_lmo_payload +26a9 79207e07 set1 7 ,pdata +26aa 20600000 rtn + +clear_send_setup_complete: +26ab 20748000 rtn master +26ac 68008030 fetch 1 ,mem_state +26ad c3820000 rtnbit1 state_conn_comp +26ae 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +26af 20600000 rtn + +sco_link_req_by_slave: +26b0 20748000 rtn master +26b1 68008031 fetch 1 ,mem_mode +26b2 2feffe04 isolate1 send_sco_when_slave ,pdata +26b3 2020a6b5 branch clean_mem_mode ,true +26b4 20600000 rtn + +clean_mem_mode: +26b5 793ffe04 set0 send_sco_when_slave ,pdata +26b6 60008031 store 1 ,mem_mode +26b7 20600000 rtn + +start_encryption: +26b8 44b5400d bpatch patch0d_2 ,mem_patch0d +26b9 6800804c fetch 1 ,mem_state_map +26ba 79207e02 set1 smap_encryption ,pdata +26bb 6000804c store 1 ,mem_state_map +26bc 70801101 jam 1 ,core_encrypt +26bd 68008030 fetch 1 ,mem_state +26be 2feffe04 isolate1 state_conn_comp ,pdata +26bf 20600000 rtn + +stop_encryption: +26c0 44b5c00d bpatch patch0d_3 ,mem_patch0d +26c1 6800804c fetch 1 ,mem_state_map +26c2 793ffe02 set0 smap_encryption ,pdata +26c3 6000804c store 1 ,mem_state_map +26c4 70801100 jam 0 ,core_encrypt +26c5 20600000 rtn + +sniff_init: +26c6 44b6400d bpatch patch0d_4 ,mem_patch0d +26c7 1c427e00 copy clkn_bt ,pdata +26c8 6002420c store 4 ,mem_lpm_delay_after_sniff +26c9 1c40a203 add clkn_bt ,3 ,rega +26ca 2034a6cc branch sniff_init_master ,master +26cb 1d00a203 add clke_bt ,3 ,rega + +sniff_init_master: +26cc 68090032 fetcht 2 ,mem_tsniff +26cd 1a227e00 deposit rega +26ce 793ffe1b set0 27 ,pdata +26cf 9846fc00 idiv temp +26d0 68010075 fetch 2 ,mem_dsniff +26d1 20407f86 call wait_div_end +26d2 18072600 remainder regc +26d3 9a667e00 isub regc ,pdata +26d4 202126d6 branch sniff_init_nowrap ,positive +26d5 9840fe00 iadd temp ,pdata + +sniff_init_nowrap: +26d6 9a20fe00 iadd rega ,pdata +26d7 60020034 store 4 ,mem_sniff_anchor +26d8 70455b00 jam switch_flag_init ,mem_switch_flag +26d9 68008030 fetch 1 ,mem_state +26da 79207e01 set1 state_insniff ,pdata +26db 60008030 store 1 ,mem_state +26dc 68008073 fetch 1 ,mem_sniff_attempt +26dd 6000808a store 1 ,mem_current_sniff_attempt +26de 58000000 setarg 0 +26df 6001c169 store 3 ,mem_sniff_rcv +26e0 6001c16c store 3 ,mem_sniff_lost +26e1 6000c159 store 1 ,mem_sniff_unint_lost +26e2 700a990b jam bt_evt_enter_sniff ,mem_fifo_temp +26e3 20407d86 call ui_ipc_send_event +26e4 680140c1 fetch 2 ,mem_rx_window_sniff +26e5 6001003e store 2 ,mem_rx_window +26e6 24748000 nrtn master +26e7 18808fff add am_addr ,-1 ,queue +26e8 20600000 rtn + +sniff_exit: +26e9 44b6c00d bpatch patch0d_5 ,mem_patch0d +26ea 68008030 fetch 1 ,mem_state +26eb c4008000 rtnbit0 state_insniff +26ec 793ffe01 set0 state_insniff ,pdata +26ed 60008030 store 1 ,mem_state +26ee 680140bf fetch 2 ,mem_rx_window_init +26ef 6001003e store 2 ,mem_rx_window +26f0 7855fc00 disable wake +26f1 700a990c jam bt_evt_exit_sniff ,mem_fifo_temp +26f2 20207d86 branch ui_ipc_send_event + +check_attempt: +26f3 44b7400d bpatch patch0d_6 ,mem_patch0d +26f4 78377c00 enable attempt +26f5 68008030 fetch 1 ,mem_state +26f6 c280a700 bbit1 state_insniff ,check_attempt_sniff +26f7 c6088000 rtnmark1 mark_testmode +26f8 68008047 fetch 1 ,mem_arq +26f9 c3818000 rtnbit1 wack +26fa 68008048 fetch 1 ,mem_lmp_to_send +26fb 247a0000 nrtn blank +26fc 6800804b fetch 1 ,mem_op +26fd c3830000 rtnbit1 op_txl2cap + +check_attempt_nomore: +26fe 18007e00 force 0 ,pdata +26ff 20600000 rtn + +check_attempt_sniff: +2700 c301270f bbit0 state_insco ,check_attempt_not_sco +2701 6800808a fetch 1 ,mem_current_sniff_attempt +2702 c0012706 beq 2 ,check_attempt_sniff_restore_sco +2703 68008047 fetch 1 ,mem_arq +2704 c281a718 bbit1 wack ,check_attempt_notimeout +2705 c5842718 bmark0 mark_esco_rxok ,check_attempt_notimeout + +check_attempt_sniff_restore_sco: +2706 2434a718 nbranch check_attempt_notimeout ,master +2707 68008048 fetch 1 ,mem_lmp_to_send +2708 243a2718 nbranch check_attempt_notimeout ,blank + +check_attempt_sco_master: +2709 680080ef fetch 1 ,mem_sco_poll +270a 1fe0ffff increase -1 ,pdata +270b 600080ef store 1 ,mem_sco_poll +270c 243a26fe nbranch check_attempt_nomore ,blank +270d 7000ef10 jam param_sco_poll ,mem_sco_poll +270e 20202718 branch check_attempt_notimeout + +check_attempt_not_sco: +270f 6800808a fetch 1 ,mem_current_sniff_attempt +2710 c080a718 bne 1 ,check_attempt_notimeout +2711 6800808b fetch 1 ,mem_current_sniff_timeout +2712 203a2718 branch check_attempt_notimeout ,blank +2713 1fe0ffff increase -1 ,pdata +2714 6000808b store 1 ,mem_current_sniff_timeout +2715 68008047 fetch 1 ,mem_arq +2716 c3818000 rtnbit1 wack +2717 24768000 nrtn match + +check_attempt_notimeout: +2718 6800808a fetch 1 ,mem_current_sniff_attempt +2719 1fe0ffff increase -1 ,pdata +271a 6000808a store 1 ,mem_current_sniff_attempt +271b 20600000 rtn + +sniff_check_window: +271c 44b7c00d bpatch patch0d_7 ,mem_patch0d +271d 78487c00 disable swfine +271e 18423600 copy temp ,stop_watch +271f 20402260 call context_search_sniff_window +2720 78547c00 disable user +2721 24628000 nrtn zero +2722 18003600 force 0 ,stop_watch +2723 78347c00 enable user +2724 20600000 rtn + +check_esco_amaddr: +2725 6800c158 fetch 1 ,mem_esco_addr +2726 a881fe00 icompare 0xff ,am_addr +2727 20600000 rtn + +parse_l2cap: +2728 44b8400e bpatch patch0e_0 ,mem_patch0e +2729 793f8001 set0 mark_rxbuf_inuse ,mark + +parse_l2cap_cont: +272a 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done +272b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +272c 207a0000 rtn blank +272d 2feffe00 isolate1 l2cap_inuse_buff1 ,pdata +272e d8c01000 arg mem_l2cap_rxbuff1 ,contr +272f 2040cd79 call process_rx_l2cap_pkt ,true +2730 44b8c00e bpatch patch0e_1 ,mem_patch0e +2731 6800826a fetch 1 ,mem_l2cap_rx_done +2732 c000a73b beq l2cap_rx_done ,parse_l2cap_release_buff1 +2733 70026a00 jam l2cap_rx_clear ,mem_l2cap_rx_done +2734 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +2735 c4008000 rtnbit0 l2cap_inuse_buff2 +2736 d8c01400 arg mem_l2cap_rxbuff2 ,contr +2737 20404d79 call process_rx_l2cap_pkt +2738 6800826a fetch 1 ,mem_l2cap_rx_done +2739 c000a741 beq l2cap_rx_done ,parse_l2cap_release_buff2 +273a 20600000 rtn + +parse_l2cap_release_buff1: +273b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +273c 793ffe00 set0 l2cap_inuse_buff1 ,pdata +273d 60008263 store 1 ,mem_l2cap_rxbuff_inuse +273e 58000000 setarg 0 +273f 6001025d store 2 ,mem_l2cap_rxbuff1_len +2740 20600000 rtn + +parse_l2cap_release_buff2: +2741 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +2742 793ffe01 set0 l2cap_inuse_buff2 ,pdata +2743 60008263 store 1 ,mem_l2cap_rxbuff_inuse +2744 58000000 setarg 0 +2745 6001025f store 2 ,mem_l2cap_rxbuff2_len +2746 20600000 rtn + +l2cap_buff1_inuse: +2747 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +2748 79207e00 set1 l2cap_inuse_buff1 ,pdata +2749 60008263 store 1 ,mem_l2cap_rxbuff_inuse +274a 20600000 rtn + +l2cap_buff2_inuse: +274b 68008263 fetch 1 ,mem_l2cap_rxbuff_inuse +274c 79207e01 set1 l2cap_inuse_buff2 ,pdata +274d 60008263 store 1 ,mem_l2cap_rxbuff_inuse +274e 20600000 rtn + +slave_send_access: +274f 44b9400e bpatch patch0e_2 ,mem_patch0e +2750 1d00c201 add clke_bt ,1 ,bt_clk +2751 204028ea call fetch_extm_bt_adr +2752 18004803 force 0x03 ,freq_mode +2753 204028d2 call tx_radio_freq +2754 20402a51 call start_transmitter +2755 20402a5f call start_tx_external +2756 20202a64 branch send_access_word + +slave_conn_send_packet: +2757 44b9c00e bpatch patch0e_3 ,mem_patch0e +2758 20402a4d call rf_setup_time_slave_slot +2759 1d027e00 deposit clke_bt +275a 680a40ca fetcht 4 ,mem_next_btclk +275b 98467e00 isub temp ,pdata +275c c1808000 rtnne 1 +275d 28203e00 compare type_null ,type ,0x1f +275e 2420a761 nbranch slave_conn_send_access ,true +275f 68008019 fetch 1 ,mem_rx_type +2760 207a0000 rtn blank + +slave_conn_send_access: +2761 2040274f call slave_send_access + +transmit_packet: +2762 28203e10 compare type_id ,type ,0x1f +2763 2020a64d branch end_of_packet ,true +2764 1c230400 rshift bt_clk ,temp +2765 18419c40 or temp ,0x40 ,white_init + +transmit_packet_whitened: +2766 44ba400e bpatch patch0e_4 ,mem_patch0e +2767 7823fc00 enable enable_white +2768 78257c00 enable enable_hec +2769 782dfc00 enable encode_fec1 +276a 793f8010 set0 mark_longpacket ,mark +276b 18827e00 deposit am_addr +276c 08008603 inject mod ,3 +276d 18227e00 deposit type +276e 08008604 inject mod ,4 +276f 68008047 fetch 1 ,mem_arq +2770 08008004 inject bucket ,4 +2771 08008603 inject mod ,3 +2772 78247c00 enable enable_parity +2773 08008608 inject mod ,8 +2774 784dfc00 disable encode_fec1 +2775 78447c00 disable enable_parity +2776 78457c00 disable enable_hec +2777 793faa02 set0 psk3m ,radio_ctrl +2778 d8400000 arg 0 ,temp +2779 20402a1c call reserve_slot +277a 44bac00e bpatch patch0e_5 ,mem_patch0e +277b 18217e1f and type ,0x1f ,pdata +277c c009a7b4 beq type_lmp ,transmit_lmp +277d c000264d beq type_null ,end_of_packet +277e c000a64d beq type_poll ,end_of_packet +277f c0012797 beq type_fhs ,transmit_fhs +2780 c001a7c5 beq type_dm1 ,transmit_dm1 +2781 c00227cb beq type_dh1 ,transmit_dh1 +2782 c003a78c beq type_hv3 ,transmit_hev +2783 c00427ca beq type_3dh1 ,transmit_3dh1 +2784 d8400004 arg 4 ,temp +2785 20402a1c call reserve_slot +2786 c00527c7 beq type_dm3 ,transmit_dm3 +2787 c005a7cd beq type_dh3 ,transmit_dh3 +2788 d8400008 arg 8 ,temp +2789 20402a1c call reserve_slot +278a c007a7cd beq type_dh5 ,transmit_dh5 +278b 202027c7 branch transmit_dm5 + +transmit_hev: +278c 44bb400e bpatch patch0e_6 ,mem_patch0e +278d 782efc00 enable encode_fec0 +278e 7824fc00 enable enable_crc +278f 78277c00 enable encrypt +2790 1800721e force 30 ,loopcnt +2791 d8c000b3 arg mem_sco_obuf ,contr + +transmit_ev_loop: +2792 e8c08000 ifetch 1 ,contr +2793 08008608 inject mod ,8 +2794 c2002792 loop transmit_ev_loop +2795 c503a7f7 bmark1 mark_esco ,transmit_end +2796 2020264d branch end_of_packet + +transmit_fhs: +2797 44bbc00e bpatch patch0e_7 ,mem_patch0e +2798 68008181 fetch 1 ,mem_fhs_am_addr +2799 1fe20800 icopy am_addr +279a 68008090 fetch 1 ,mem_fhs_misc +279b 1fe23800 icopy fhs_misc +279c 6801c0aa fetch 3 ,mem_class +279d 1fe23a00 icopy fhs_class +279e 680140a4 fetch 2 ,mem_nap +279f 1fe25c00 icopy nap +27a0 7824fc00 enable enable_crc +27a1 782e7c00 enable encode_fec2 +27a2 1c022200 copy bt_adr ,rega +27a3 204028e2 call fetch_self_bt_adr +27a4 782afc00 pulse recalc +27a5 20000020 nop 32 +27a6 1c221600 copy bt_clk ,timeup +27a7 68020161 fetch 4 ,mem_clkn_bt +27a8 1fe24200 icopy bt_clk +27a9 53c07e00 preload fhs0 +27aa 79207e3a set1 58 ,pdata +27ab 08008648 inject mod ,72 +27ac 53e07e00 preload fhs1 +27ad 08008648 inject mod ,72 +27ae 19624200 copy timeup ,bt_clk +27af 1a224000 copy rega ,bt_adr +27b0 78247c00 enable enable_parity +27b1 08008610 inject mod ,16 +27b2 78447c00 disable enable_parity +27b3 2020264d branch end_of_packet + +transmit_lmp: +27b4 44bc400f bpatch patch0f_0 ,mem_patch0f +27b5 78277c00 enable encrypt +27b6 7824fc00 enable enable_crc +27b7 782e7c00 enable encode_fec2 +27b8 680084b6 fetch 1 ,mem_lmo_header_length +27b9 1fe105f8 and pdata ,0x1f8 ,temp +27ba d8c004b6 arg mem_lmo_header_length ,contr +27bb 18408408 increase 8 ,temp + +transmit_lmp_loop: +27bc 1840a7b8 add temp ,-72 ,regc +27bd 242127c2 nbranch transmit_lmp_finish ,positive +27be e8c48000 ifetch 9 ,contr +27bf 08008648 inject mod ,72 +27c0 1a620400 copy regc ,temp +27c1 202027bc branch transmit_lmp_loop + +transmit_lmp_finish: +27c2 e8c48000 ifetch 9 ,contr +27c3 08418600 iinject mod ,temp +27c4 202027f7 branch transmit_end + +transmit_dm1: +27c5 782e7c00 enable encode_fec2 +27c6 202027d0 branch transmit_dmh + +transmit_dm3: + +transmit_dm5: +27c7 782e7c00 enable encode_fec2 +27c8 79200010 set1 mark_longpacket ,mark +27c9 202027d0 branch transmit_dmh + +transmit_3dh1: +27ca 79202a02 set1 psk3m ,radio_ctrl + +transmit_dh1: +27cb 782efc00 enable encode_fec0 +27cc 202027d0 branch transmit_dmh + +transmit_dh3: + +transmit_dh5: +27cd 79202a02 set1 psk3m ,radio_ctrl +27ce 782efc00 enable encode_fec0 +27cf 79200010 set1 mark_longpacket ,mark + +transmit_dmh: +27d0 44bcc00f bpatch patch0f_1 ,mem_patch0f +27d1 6800804c fetch 1 ,mem_state_map +27d2 c302a7e5 bbit0 smap_edr ,transmit_noedr +27d3 18267c03 sub type ,3 ,null +27d4 202127e5 branch transmit_noedr ,positive +27d5 78477c00 disable encrypt +27d6 784e7c00 disable encode_fec2 +27d7 782efc00 enable encode_fec0 +27d8 7843fc00 disable enable_white +27d9 79202a01 set1 psk ,radio_ctrl +27da 2aaffe02 isolate1 psk3m ,radio_ctrl +27db 2020a7df branch transmit_edr3m ,true +27dc 580abeee setarg 0xabeee +27dd 08008614 inject mod ,20 +27de 202027e3 branch transmit_edr_sync_end + +transmit_edr3m: +27df 585faeba setarg 0x5faeba +27e0 08008618 inject mod ,24 +27e1 58000012 setarg 0x12 +27e2 08008606 inject mod ,6 + +transmit_edr_sync_end: +27e3 7823fc00 enable enable_white +27e4 79200010 set1 mark_longpacket ,mark + +transmit_noedr: +27e5 78277c00 enable encrypt +27e6 7824fc00 enable enable_crc +27e7 c502a800 bmark1 mark_loopback ,transmit_loopback +27e8 6800c1db fetch 1 ,mem_tx_lch +27e9 08008603 inject mod ,3 +27ea 680141dc fetch 2 ,mem_tx_len +27eb 98007200 iforce loopcnt +27ec c50827ef bmark1 mark_longpacket ,transmit_long +27ed 08008605 inject mod ,5 +27ee 202027f0 branch transmit_stuff + +transmit_long: +27ef 0800860d inject mod ,13 + +transmit_stuff: +27f0 1f227e00 deposit loopcnt +27f1 203a27f7 branch transmit_end ,blank +27f2 6801016f fetch 2 ,mem_txptr +27f3 98000c00 iforce contr + +transmit_stuff_loop: +27f4 e8c08000 ifetch 1 ,contr +27f5 08008608 inject mod ,8 +27f6 c20027f4 loop transmit_stuff_loop + +transmit_end: +27f7 78247c00 enable enable_parity +27f8 08008610 inject mod ,16 +27f9 78447c00 disable enable_parity +27fa 204024c1 call set_wait_ack +27fb 6800804c fetch 1 ,mem_state_map +27fc c302a64d bbit0 smap_edr ,end_of_packet +27fd 18007e00 force 0 ,pdata +27fe 08008606 inject mod ,6 +27ff 2020264d branch end_of_packet + +transmit_loopback: +2800 44bd400f bpatch patch0f_2 ,mem_patch0f +2801 c5082808 bmark1 mark_longpacket ,transmit_loopback_long + +transmit_loopback_short: +2802 68008180 fetch 1 ,mem_lch_code +2803 08008603 inject mod ,3 +2804 6800815f fetch 1 ,mem_len +2805 98002600 iforce regc +2806 08008605 inject mod ,5 +2807 2020280d branch transmit_loopback_cont + +transmit_loopback_long: +2808 68008180 fetch 1 ,mem_lch_code +2809 08008603 inject mod ,3 +280a 6801015f fetch 2 ,mem_len +280b 98002600 iforce regc +280c 0800860d inject mod ,13 + +transmit_loopback_cont: +280d d8c00551 arg mem_rxbuf ,contr + +transmit_loopback_loop: +280e 1a627c00 copy regc ,null +280f 2022a814 branch transmit_loopback_end ,zero +2810 e8c08000 ifetch 1 ,contr +2811 08008608 inject mod ,8 +2812 1a60a7ff increase -1 ,regc +2813 2020280e branch transmit_loopback_loop + +transmit_loopback_end: +2814 680100fc fetch 2 ,mem_tst_pktcnt_dmh +2815 1fe0fe01 increase 1 ,pdata +2816 600100fc store 2 ,mem_tst_pktcnt_dmh +2817 202027f7 branch transmit_end + +apply_switch_clke: +2818 68020165 fetch 4 ,mem_clke_bt +2819 1fe0a207 add pdata ,7 ,rega +281a 68010171 fetch 2 ,mem_slot_offset +281b 243a281e nbranch apply_switch_nozero ,blank +281c 1a20a3fd increase -3 ,rega +281d 20202826 branch apply_switch_wait_loop + +apply_switch_nozero: +281e 1feffe0c mul32 pdata ,12 ,pdata +281f 68190040 hfetcht 2 ,core_halfslot +2820 18408401 increase 1 ,temp + +apply_switch_loop: +2821 98467e00 isub temp ,pdata +2822 24212825 nbranch apply_switch_bt ,positive +2823 1a20a3ff increase -1 ,rega +2824 20202821 branch apply_switch_loop + +apply_switch_bt: +2825 1fe67e00 sub pdata ,0 ,pdata + +apply_switch_wait_loop: +2826 37d18200 until null ,oneslot +2827 2c400600 compare 0 ,clkn_bt ,3 +2828 2420a826 nbranch apply_switch_wait_loop ,true +2829 98005200 iforce clke_rt +282a 1a225000 copy rega ,clke_bt +282b 98005200 iforce clke_rt +282c 20600000 rtn + +calc_slot_offset: +282d 44bdc00f bpatch patch0f_3 ,mem_patch0f +282e 37d10200 until null ,halfslot +282f 1b427e00 deposit clke +2830 98000c00 iforce contr +2831 1ff17e00 rshift16 ,pdata ,pdata +2832 9c467200 isub clkn_bt ,loopcnt +2833 1f217203 and_into 3 ,loopcnt +2834 2422a837 nbranch calc_bt_portion ,zero +2835 18007e00 force 0 ,pdata +2836 2020283b branch calc_skip_bt + +calc_bt_portion: +2837 d8400ea6 arg 3750 ,temp +2838 18007e00 force 0 ,pdata + +calc_slot_offset_loop: +2839 9840fe00 iadd temp ,pdata +283a c2002839 loop calc_slot_offset_loop + +calc_skip_bt: +283b 98c0fe00 iadd contr ,pdata +283c 1fe6fc0c div pdata ,12 +283d 20407f86 call wait_div_end +283e 1807fe00 quotient pdata +283f 60010171 store 2 ,mem_slot_offset +2840 20600000 rtn + +calc_clke_offset: +2841 44be400f bpatch patch0f_4 ,mem_patch0f +2842 1b427e00 deposit clke +2843 1b220400 copy clkn ,temp +2844 98467c00 isub temp ,null +2845 7d217e2c nsetflag positive ,44 ,pdata +2846 98460400 isub temp ,temp +2847 58000ea6 setarg 3750 +2848 284c000f isolate0 15 ,temp +2849 2020a84c branch calc_clke_pos ,true +284a 5fff0ea6 setarg -61786 +284b 98408400 iadd temp ,temp + +calc_clke_pos: +284c 600b0447 storet 6 ,mem_le_clk_offset +284d 207b0000 rtn le +284e 600b0038 storet 6 ,mem_clk_offset +284f 20600000 rtn + +calc_clke: +2850 78587c00 disable clknt +2851 68030447 fetch 6 ,mem_le_clk_offset +2852 203b2854 branch calc_clke2 ,le +2853 68030038 fetch 6 ,mem_clk_offset + +calc_clke2: +2854 9b20e000 iadd clkn ,alarm +2855 1e00e00a increase 10 ,alarm +2856 58000ea6 setarg 3750 +2857 9e067e00 isub alarm ,pdata +2858 2fec000f isolate0 15 ,pdata +2859 2020a85e branch calc_clke_pos_adj ,true +285a 5800f15a setarg 0xf15a +285b 9e00e000 iadd alarm ,alarm + +calc_clke_pos2: +285c 1e023400 copy alarm ,clke +285d 20600000 rtn + +calc_clke_pos_adj: +285e 18007c00 force 0 ,null +285f 2020285c branch calc_clke_pos2 + +calc_radio_freq: +2860 44bec00f bpatch patch0f_5 ,mem_patch0f +2861 20402918 call set_sync_on +2862 1c227e00 copy bt_clk ,pdata +2863 1fe17f80 and_into 0x180 ,pdata +2864 2c800e03 compare 3 ,freq_mode ,0x07 +2865 2420a869 nbranch freq_not_connection ,true +2866 1fe97e00 rshift3 pdata ,pdata +2867 9ae0fe00 iadd freq_index ,pdata +2868 2020286a branch do_hop_mod_now + +freq_not_connection: +2869 1ae27e00 copy freq_index ,pdata + +do_hop_mod_now: +286a 1fe6fc4f div pdata ,79 +286b 782afc00 pulse recalc +286c 20407f86 call wait_div_end +286d 18072200 remainder rega +286e 1a2085d8 add rega ,-40 ,temp +286f 20212872 branch odd_half ,positive +2870 1a238400 lshift rega ,temp +2871 20202874 branch freq_result + +odd_half: +2872 18438400 lshift temp ,temp +2873 18408401 increase 1 ,temp + +freq_result: +2874 44bf400f bpatch patch0f_6 ,mem_patch0f +2875 68008031 fetch 1 ,mem_mode +2876 c301a885 bbit0 afh_change ,afh_process_con + +afh_process_0: +2877 680240d2 fetch 4 ,mem_afh_instant +2878 9c267c00 isub bt_clk ,null +2879 20212885 branch afh_process_con ,positive +287a 204028a4 call afh_clear +287b 6800c0d9 fetch 1 ,mem_afh_new_mod +287c 207a0000 rtn blank +287d 68008031 fetch 1 ,mem_mode +287e 79207e02 set1 afh_enable ,pdata +287f 60008031 store 1 ,mem_mode +2880 6802c0e7 fetch 5 ,mem_afh_map_new +2881 6002c0da store 5 ,mem_afh_map_lo +2882 e8c28000 ifetch 5 ,contr +2883 6002c0df store 5 ,mem_afh_map_hi +2884 204028a9 call afh_process_freq_map + +afh_process_con: +2885 68008031 fetch 1 ,mem_mode +2886 c4010000 rtnbit0 afh_enable +2887 2c2ffe01 isolate1 1 ,bt_clk +2888 2020a8a1 branch afh_same_channel ,true +2889 18492200 rshift3 temp ,rega +288a 18410e07 and temp ,7 ,queue +288b 580040da setarg mem_afh_map_lo +288c 9a20a200 iadd rega ,rega +288d ea208000 ifetch 1 ,rega +288e afec0000 qisolate0 pdata +288f 2020a892 branch afh_process_1 ,true +2890 18427e00 deposit temp +2891 2020289e branch afh_process_end + +afh_process_1: +2892 6800c0e4 fetch 1 ,mem_afh_used +2893 98002400 iforce regb +2894 1c227e00 deposit bt_clk +2895 1fe17f80 and_into 0x180 ,pdata +2896 1fe97e00 rshift3 pdata ,pdata +2897 9ae0fe00 iadd freq_index ,pdata +2898 9a46fc00 idiv regb +2899 580040f2 setarg mem_afh_map +289a 20407f86 call wait_div_end +289b 18072200 remainder rega +289c 9a208c00 iadd rega ,contr +289d e8c08000 ifetch 1 ,contr + +afh_process_end: +289e 6000c0e5 store 1 ,mem_afh_index +289f 98000400 iforce temp +28a0 20600000 rtn + +afh_same_channel: +28a1 6800c0e5 fetch 1 ,mem_afh_index +28a2 98000400 iforce temp +28a3 20600000 rtn + +afh_clear: +28a4 68008031 fetch 1 ,mem_mode +28a5 793ffe02 set0 afh_enable ,pdata +28a6 793ffe03 set0 afh_change ,pdata +28a7 60008031 store 1 ,mem_mode +28a8 20600000 rtn + +afh_process_freq_map: +28a9 44bfc00f bpatch patch0f_7 ,mem_patch0f +28aa d8a040f2 arg mem_afh_map ,contw +28ab 1800720a force 10 ,loopcnt +28ac 20407ec6 call memset0 +28ad d8a040f2 arg mem_afh_map ,contw +28ae 18002600 force 0 ,regc +28af 18000e02 force 2 ,queue + +process_freq_3: +28b0 6802c0da fetch 5 ,mem_afh_map_lo +28b1 98000400 iforce temp +28b2 28e1fe02 compare 2 ,queue ,0xff +28b3 2020a8b5 branch process_freq_1 ,true +28b4 18430400 rshift temp ,temp + +process_freq_1: +28b5 284c0000 isolate0 0 ,temp +28b6 2020a8b9 branch process_freq_0 ,true +28b7 1a627e00 deposit regc +28b8 e0a08000 istore 1 ,contw + +process_freq_0: +28b9 184b0400 rshift2 temp ,temp +28ba 1a60a602 increase 2 ,regc +28bb 2a61fc28 compare 40 ,regc ,0xfe +28bc 2420a8c2 nbranch process_freq_2 ,true +28bd 6802c0df fetch 5 ,mem_afh_map_hi +28be 98000400 iforce temp +28bf 28e1fe02 compare 2 ,queue ,0xff +28c0 2020a8c2 branch process_freq_2 ,true +28c1 18430400 rshift temp ,temp + +process_freq_2: +28c2 1a667c4e sub regc ,78 ,null +28c3 202128b5 branch process_freq_1 ,positive +28c4 18002601 force 1 ,regc +28c5 18e08fff increase -1 ,queue +28c6 2422a8b0 nbranch process_freq_3 ,zero +28c7 da2040f2 arg mem_afh_map ,rega +28c8 18a27e00 deposit contw +28c9 9a267e00 isub rega ,pdata +28ca 6000c0e4 store 1 ,mem_afh_used +28cb 20600000 rtn + +rx_radio_freq: +28cc 44c04010 bpatch patch10_0 ,mem_patch10 +28cd 20402860 call calc_radio_freq +28ce 6800817f fetch 1 ,mem_debug_config +28cf c302a8d1 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +28d0 680884cc fetcht 1 ,mem_rx_fixed_freq + +rx_radio_freq_now: +28d1 2020291f branch set_freq_rx + +tx_radio_freq: +28d2 44c0c010 bpatch patch10_1 ,mem_patch10 +28d3 20402860 call calc_radio_freq +28d4 6800817f fetch 1 ,mem_debug_config +28d5 c30228d7 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +28d6 680884cb fetcht 1 ,mem_tx_fixed_freq + +tx_radio_freq_now: +28d7 20202933 branch set_freq_tx + +fetch_giac: +28d8 18005a00 force 0 ,uap +28d9 6801c0a7 fetch 3 ,mem_glap +28da 98005800 iforce lap +28db 20600000 rtn + +fetch_page_bt_adr: +28dc 44c14010 bpatch patch10_2 ,mem_patch10 +28dd 6800c1d3 fetch 1 ,mem_hci_puap +28de 1fe25a00 icopy uap +28df 6801c1d0 fetch 3 ,mem_hci_plap +28e0 1fe25800 icopy lap +28e1 20600000 rtn + +fetch_self_bt_adr: +28e2 44c1c010 bpatch patch10_3 ,mem_patch10 +28e3 680140a4 fetch 2 ,mem_nap +28e4 1fe25c00 icopy nap +28e5 6800c0a3 fetch 1 ,mem_uap +28e6 1fe25a00 icopy uap +28e7 6801c0a0 fetch 3 ,mem_lap +28e8 1fe25800 icopy lap +28e9 20600000 rtn + +fetch_extm_bt_adr: +28ea 44c24010 bpatch patch10_4 ,mem_patch10 +28eb 68010044 fetch 2 ,mem_pnap +28ec 1fe25c00 icopy nap +28ed 68008043 fetch 1 ,mem_puap +28ee 1fe25a00 icopy uap +28ef 68018040 fetch 3 ,mem_plap +28f0 1fe25800 icopy lap +28f1 20600000 rtn + +fetch_diac: +28f2 c51028f5 bmark1 mark_all_diac ,fetch_diac_do +28f3 c68e8000 rtnmark0 mark_inquiry_state +28f4 c68f8000 rtnmark0 mark_periodical_diac + +fetch_diac_do: +28f5 1d815900 and_into -256 ,lap +28f6 782afc00 pulse recalc +28f7 20000020 nop 32 +28f8 20600000 rtn + +shutdown_radio: +28f9 44c2c010 bpatch patch10_5 ,mem_patch10 +28fa 2030a90a branch shutdown_radio0 ,is_rx +28fb 708955d4 jam 0xd4 ,rf_tx_pa_ib +28fc 20000004 nop 4 +28fd 708955d2 jam 0xd2 ,rf_tx_pa_ib +28fe 20000004 nop 4 +28ff 708955d1 jam 0xd1 ,rf_tx_pa_ib +2900 20000004 nop 4 +2901 6800c1de fetch 1 ,mem_tx_power +2902 c0002908 beq tx_power_0db ,shutdown_radio_0db +2903 c000a915 beq tx_power_3db ,shutdown_radio_3db +2904 c0012908 beq tx_power_5db ,shutdown_radio_5db +2905 c001a915 beq tx_power_f3db ,shutdown_radio_f3db +2906 c0022915 beq tx_power_f5db ,shutdown_radio_f5db +2907 c0102915 beq tx_power_pair ,shutdown_radio_pair + +shutdown_radio_5db: + +shutdown_radio_0db: +2908 708955d0 jam 0xd0 ,rf_tx_pa_ib +2909 708956e0 jam 0xe0 ,rf_tx_pa_gc + +shutdown_radio0: +290a 18002a00 force 0 ,radio_ctrl +290b 7850fc00 disable is_rx +290c 78507c00 disable is_tx +290d 782f7c00 pulse packet_end +290e 70890200 jam 0x0 ,rfen_mdm +290f 70890100 jam 0x0 ,rfen_tx +2910 70890000 jam 0x0 ,rfen_rx +2911 70890300 jam 0 ,rfen_sn +2912 70890470 jam 0x70 ,rfen_msc +2913 70890600 jam 0x0 ,rfen_adc +2914 20600000 rtn + +shutdown_radio_pair: + +shutdown_radio_f5db: + +shutdown_radio_f3db: + +shutdown_radio_3db: +2915 708955d0 jam 0xd0 ,rf_tx_pa_ib +2916 708956c0 jam 0xc0 ,rf_tx_pa_gc +2917 2020290a branch shutdown_radio0 + +set_sync_on: +2918 44c34010 bpatch patch10_6 ,mem_patch10 +2919 70890200 jam 0x0 ,rfen_mdm +291a 70890100 jam 0x0 ,rfen_tx +291b 70890018 jam 0x18 ,rfen_rx +291c 708903a7 jam 0xa7 ,rfen_sn +291d 7089047f jam 0x7f ,rfen_msc +291e 20600000 rtn + +set_freq_rx: +291f 44c3c010 bpatch patch10_7 ,mem_patch10 +2920 60088017 storet 1 ,mem_last_freq +2921 1840a204 add temp ,rx_freq_offset ,rega +2922 70896d07 jam 0x07 ,rf_balun_ctrim +2923 20202981 branch rf_write_freq + +rf_rx_enable: +2924 44c44011 bpatch patch11_0 ,mem_patch11 +2925 708901cf jam 0xcf ,rfen_tx +2926 2000000a nop 10 +2927 708900ff jam 0xff ,rfen_rx +2928 708903af jam 0xaf ,rfen_sn +2929 708904ff jam 0xff ,rfen_msc +292a 2000000a nop 10 +292b 708902a0 jam 0xa0 ,rfen_mdm +292c 20600000 rtn + +set_freq_tx_offset: +292d 6800c1e0 fetch 1 ,mem_250k_freq_enable +292e 203a2931 branch set_freq_tx_2m_offset ,blank + +set_freq_tx_0m_offset: +292f 1840a202 add temp ,2 ,rega +2930 20600000 rtn + +set_freq_tx_2m_offset: +2931 1840a200 add temp ,0 ,rega +2932 20600000 rtn + +set_freq_tx: +2933 44c4c011 bpatch patch11_1 ,mem_patch11 +2934 60088017 storet 1 ,mem_last_freq +2935 2040292d call set_freq_tx_offset +2936 20402981 call rf_write_freq +2937 58000500 setarg param_pll_setup +2938 20402a8f call sleep + +txon: +2939 70890601 jam 0x1 ,rfen_adc +293a 7089003c jam 0x3c ,rfen_rx +293b 708901e0 jam 0xe0 ,rfen_tx +293c 70896d12 jam 0x12 ,rf_balun_ctrim +293d 2000000a nop 10 +293e 70890201 jam 0x01 ,rfen_mdm +293f 7089023d jam 0x3d ,rfen_mdm +2940 2000000a nop 10 +2941 708903b7 jam 0xb7 ,rfen_sn +2942 2000000a nop 10 +2943 7089027f jam 0x7f ,rfen_mdm + +txon_power_select: +2944 6800c1de fetch 1 ,mem_tx_power +2945 c000294b beq tx_power_0db ,set_tx_power_0db +2946 c000a94f beq tx_power_3db ,set_tx_power_3db +2947 c0012953 beq tx_power_5db ,set_tx_power_5db +2948 c001a957 beq tx_power_f3db ,set_tx_power_f3db +2949 c002295b beq tx_power_f5db ,set_tx_power_f5db +294a c010295f beq tx_power_pair ,set_tx_power_pair + +set_tx_power_0db: +294b 708956f0 jam 0xf0 ,rf_tx_pa_gc +294c 20402965 call txon_common +294d 708955d8 jam 0xd8 ,rf_tx_pa_ib +294e 20600000 rtn + +set_tx_power_3db: +294f 708956df jam 0xdf ,rf_tx_pa_gc +2950 20402965 call txon_common +2951 708955df jam 0xdf ,rf_tx_pa_ib +2952 20600000 rtn + +set_tx_power_5db: +2953 708956ff jam 0xff ,rf_tx_pa_gc +2954 20402965 call txon_common +2955 708955df jam 0xdf ,rf_tx_pa_ib +2956 20600000 rtn + +set_tx_power_f3db: +2957 708956ce jam 0xce ,rf_tx_pa_gc +2958 20402965 call txon_common +2959 708955d8 jam 0xd8 ,rf_tx_pa_ib +295a 20600000 rtn + +set_tx_power_f5db: +295b 708956cb jam 0xcb ,rf_tx_pa_gc +295c 20402965 call txon_common +295d 708955d8 jam 0xd8 ,rf_tx_pa_ib +295e 20600000 rtn + +set_tx_power_pair: +295f 708955d0 jam 0xd0 ,rf_tx_pa_ib +2960 708956c0 jam 0xc0 ,rf_tx_pa_gc +2961 7089574c jam 0x4c ,0x8957 +2962 7089586c jam 0x6c ,0x8958 +2963 70895950 jam 0x50 ,0x8959 +2964 20600000 rtn + +txon_common: +2965 20000004 nop 4 +2966 708955d1 jam 0xd1 ,rf_tx_pa_ib +2967 20000004 nop 4 +2968 708955d2 jam 0xd2 ,rf_tx_pa_ib +2969 20000004 nop 4 +296a 708955d4 jam 0xd4 ,rf_tx_pa_ib +296b 20600000 rtn + +initialize_radio: +296c 70804206 jam clksel_rc ,core_clksel + +initialize_radio_wait: +296d 680140c3 fetch 2 ,mem_rf_init_ptr +296e c307296d bbit0 14 ,initialize_radio_wait +296f 98000c00 iforce contr +2970 d8408900 arg 0x8900 ,temp + +initialize_radio_loop: +2971 e8c08000 ifetch 1 ,contr +2972 c07fa977 beq 0xff ,initialize_radio_cont +2973 98418a00 ior temp ,contw +2974 e8c08000 ifetch 1 ,contr +2975 e0a08000 istore 1 ,contw +2976 20202971 branch initialize_radio_loop + +initialize_radio_cont: +2977 44c54011 bpatch patch11_2 ,mem_patch11 +2978 20402be5 call lpm_cal_xtal_startup +2979 204029c9 call switchto_dpllclk +297a 580007d0 setarg param_dpll_start_delay +297b 9c40fe00 iadd clkn_bt ,pdata +297c 60020169 store 4 ,mem_dpll_clkn +297d 79202a03 set1 reset ,radio_ctrl +297e 18002a00 force 0 ,radio_ctrl +297f 2455a998 ncall do_rccal ,wake +2980 202029ab branch set_rccal + +rf_write_freq: +2981 44c5c011 bpatch patch11_3 ,mem_patch11 +2982 58000960 setarg 2400 +2983 9a208400 iadd rega ,temp +2984 6800c0bd fetch 1 ,mem_fcomp_mul +2985 70895f04 jam 0x04 ,rf_pll_rstn +2986 984ffe00 imul32 temp ,pdata +2987 6808c0be fetcht 1 ,mem_fcomp_div +2988 9846fc00 idiv temp +2989 20407f86 call wait_div_end +298a 1807a200 quotient rega +298b 18077e00 remainder pdata +298c 1ff07e00 lshift16 pdata ,pdata +298d 1ff27e00 lshift4 pdata ,pdata +298e 9846fc00 idiv temp +298f 20407f86 call wait_div_end +2990 1807fe00 quotient pdata +2991 1fed7e00 lshift8 pdata ,pdata +2992 1fe3fe00 lshift pdata ,pdata +2993 9a21fe00 ior rega ,pdata +2994 60120960 hstore 4 ,rf_pll_intg +2995 70895f44 jam 0x44 ,rf_pll_rstn +2996 70895fc4 jam 0xc4 ,rf_pll_rstn +2997 20600000 rtn + +do_rccal: +2998 44c64011 bpatch patch11_4 ,mem_patch11 +2999 70890602 jam 0x02 ,rfen_adc +299a 5803d090 setarg 250000 +299b 20402a8f call sleep +299c 7089007f jam 0x7f ,rfen_rx +299d 20000082 nop 130 +299e 70895230 jam 0x30 ,rf_rccal_ctrl +299f 708901d0 jam 0xd0 ,rfen_tx +29a0 70895270 jam 0x70 ,rf_rccal_ctrl +29a1 708952f0 jam 0xf0 ,rf_rccal_ctrl +29a2 18007232 force 50 ,loopcnt + +do_rccal_loop: +29a3 68108980 hfetch 1 ,rf_rccal_result +29a4 c282a9a6 bbit1 5 ,do_rccal_end +29a5 c20029a3 loop do_rccal_loop + +do_rccal_end: +29a6 6000c0ce store 1 ,mem_rf_rccal +29a7 70890100 jam 0 ,rfen_tx +29a8 70890000 jam 0 ,rfen_rx +29a9 70890600 jam 0x00 ,rfen_adc +29aa 20600000 rtn + +set_rccal: +29ab 44c6c011 bpatch patch11_5 ,mem_patch11 +29ac 6800c0ce fetch 1 ,mem_rf_rccal +29ad 79207e05 set1 5 ,pdata +29ae 60108952 hstore 1 ,rf_rccal_ctrl +29af 68188950 hfetcht 1 ,rf_bpf_ctrim +29b0 18410407 and_into 7 ,temp +29b1 1fe9fe00 lshift3 pdata ,pdata +29b2 9841fe00 ior temp ,pdata +29b3 60108950 hstore 1 ,rf_bpf_ctrim +29b4 68108951 hfetch 1 ,rf_bpf_ib +29b5 793ffe00 set0 bpf_rccal ,pdata +29b6 60108951 hstore 1 ,rf_bpf_ib +29b7 68108952 hfetch 1 ,rf_adc_rccal +29b8 793ffe05 set0 adc_rccal ,pdata +29b9 60108952 hstore 1 ,rf_adc_rccal +29ba 20600000 rtn + +save_rssi: +29bb 44c74011 bpatch patch11_6 ,mem_patch11 +29bc 68110981 hfetch 2 ,rf_afc_d2a +29bd 1ff1fe00 rshift4 pdata ,pdata +29be 1fe97e00 rshift3 pdata ,pdata +29bf 1fe67e00 sub pdata ,0 ,pdata + +bcd: +29c0 1fe17eff and_into 0xff ,pdata +29c1 1fe6fc0a div pdata ,10 +29c2 20407f86 call wait_div_end +29c3 1807fe00 quotient pdata +29c4 1ff27e00 lshift4 pdata ,pdata +29c5 18070400 remainder temp +29c6 9841fe00 ior temp ,pdata +29c7 60008018 store 1 ,mem_rssi +29c8 20600000 rtn + +switchto_dpllclk: +29c9 70804206 jam clksel_rc ,core_clksel +29ca 6810896b hfetch 1 ,rf_clkpll_frac + 2 +29cb 793ffe04 set0 4 ,pdata +29cc 793ffe05 set0 5 ,pdata +29cd 6010896b hstore 1 ,rf_clkpll_frac + 2 +29ce 70890500 jam 0x00 ,rfen_ck +29cf 70890400 jam 0x00 ,rfen_msc +29d0 70890470 jam 0x70 ,rfen_msc +29d1 708905ff jam 0xff ,rfen_ck +29d2 6810896b hfetch 1 ,rf_clkpll_frac + 2 +29d3 79207e04 set1 4 ,pdata +29d4 79207e05 set1 5 ,pdata +29d5 6010896b hstore 1 ,rf_clkpll_frac + 2 +29d6 204029e9 call init_lpm_ctrl +29d7 68108968 hfetch 1 ,rf_clkpll_int +29d8 79207e07 set1 7 ,pdata +29d9 60108968 hstore 1 ,rf_clkpll_int +29da 793ffe07 set0 7 ,pdata +29db 60108968 hstore 1 ,rf_clkpll_int +29dc 79207e07 set1 7 ,pdata +29dd 60108968 hstore 1 ,rf_clkpll_int +29de 70804205 jam clksel_dpll ,core_clksel +29df 20000001 nop 1 +29e0 70804204 jam clksel_xtal ,core_clksel +29e1 6810896b hfetch 1 ,rf_clkpll_frac + 2 +29e2 1fe17ecf and_into 0xcf ,pdata +29e3 6010896b hstore 1 ,rf_clkpll_frac + 2 +29e4 1fe1fe30 or_into 0x30 ,pdata +29e5 6010896b hstore 1 ,rf_clkpll_frac + 2 +29e6 20600000 rtn + +xtal_fast_wake: +29e7 58000f0f setarg 0xf0f +29e8 20202c18 branch lpm_write_config + +init_lpm_ctrl: +29e9 5800080f setarg 0x80f +29ea 20202c18 branch lpm_write_config + +start_receiver: +29eb 44c7c011 bpatch patch11_7 ,mem_patch11 +29ec 20402924 call rf_rx_enable +29ed 78507c00 disable is_tx +29ee 7830fc00 enable is_rx +29ef 782b7c00 pulse init_encrypt +29f0 20600000 rtn + +prep_crypt: +29f1 44c84012 bpatch patch12_0 ,mem_patch12 +29f2 6800804c fetch 1 ,mem_state_map +29f3 2feffe02 isolate1 smap_encryption ,pdata +29f4 7920fe00 setflag true ,0 ,pdata +29f5 60108011 hstore 1 ,core_encrypt +29f6 d8c00062 arg mem_kc ,contr +29f7 e8c48000 ifetch 9 ,contr +29f8 98006400 iforce kc_ls +29f9 e8c38000 ifetch 7 ,contr +29fa 98006600 iforce kc_ms +29fb 68008054 fetch 1 ,mem_key_size +29fc 1fe0e9ff add pdata ,-1 ,g1l +29fd 782d7c00 pulse kc_p_activate +29fe 20600000 rtn + +wait_access_end: +29ff 1b427e00 deposit clke +2a00 6003009a store 6 ,mem_sync_clke +2a01 7846fc00 disable decode_fec0 +2a02 242c28f9 nbranch shutdown_radio ,sync +2a03 dd2003bb arg param_clke_cal ,clke_rt +2a04 1d00d001 increase 1 ,clke_bt +2a05 1d0151fc and_into 0x1fc ,clke_bt +2a06 20600000 rtn + +wait_access_mhalfbnd: +2a07 7826fc00 enable decode_fec0 + +wait_access_mhalfbnd_correlate: +2a08 37cb8400 correlate null ,mhalfbnd +2a09 202c29ff branch wait_access_end ,sync +2a0a 2d000402 compare 0x02 ,clke_bt ,0x02 +2a0b 2420aa08 nbranch wait_access_mhalfbnd_correlate ,true +2a0c 202029ff branch wait_access_end + +wait_access_clkn_rt: +2a0d 44c8c012 bpatch patch12_1 ,mem_patch12 +2a0e d9600600 arg param_conn_access ,timeup +2a0f 7826fc00 enable decode_fec0 +2a10 34730400 correlate clkn_rt ,meet +2a11 7846fc00 disable decode_fec0 +2a12 242c28f9 nbranch shutdown_radio ,sync +2a13 20600000 rtn + +wait_access_forever: +2a14 44c94012 bpatch patch12_2 ,mem_patch12 +2a15 7826fc00 enable decode_fec0 +2a16 37c18400 correlate null ,timeout +2a17 7846fc00 disable decode_fec0 +2a18 242c28f9 nbranch shutdown_radio ,sync +2a19 dd2003bb arg param_clke_cal ,clke_rt +2a1a 1d0151fc and_into 0x1fc ,clke_bt +2a1b 20600000 rtn + +reserve_slot: +2a1c 44c9c012 bpatch patch12_3 ,mem_patch12 +2a1d 98002200 iforce rega +2a1e 1c227e00 deposit bt_clk +2a1f 98409600 iadd temp ,timeup +2a20 19627e00 copy timeup ,pdata +2a21 600240ca store 4 ,mem_next_btclk +2a22 1a227e00 deposit rega +2a23 20600000 rtn + +ahead_window: +2a24 1fe20400 copy pdata ,temp +2a25 44ca4012 bpatch patch12_4 ,mem_patch12 +2a26 18427e00 copy temp ,pdata +2a27 20407f50 call clk2bt +2a28 1c307e00 lshift16 bt_clk ,pdata +2a29 79207e2c set1 44 ,pdata +2a2a 20407f39 call clk_diff +2a2b 793ffe2c set0 44 ,pdata +2a2c 20402a77 call get_clk +2a2d 20407f39 call clk_diff +2a2e 20740000 rtn user +2a2f 20407f43 call clk2rt +2a30 98003600 iforce stop_watch +2a31 37c18200 until null ,timeout +2a32 20600000 rtn + +setup_clk: +2a33 44cac012 bpatch patch12_5 ,mem_patch12 +2a34 20382a38 branch setup_clkn ,clknt +2a35 35330200 until clke_rt ,meet + +skip_setup_clke: +2a36 1d020400 copy clke_bt ,temp +2a37 20202a3b branch setup_clknbt + +setup_clkn: +2a38 20372a3a branch skip_setup_clkn ,attempt +2a39 34730200 until clkn_rt ,meet + +skip_setup_clkn: +2a3a 1c420400 copy clkn_bt ,temp + +setup_clknbt: +2a3b 20342a47 branch setup_clk11 ,user +2a3c 28400601 compare 1 ,temp ,3 +2a3d 2420aa33 nbranch setup_clk ,true + +setup_complete: +2a3e 44cb4012 bpatch patch12_6 ,mem_patch12 +2a3f 68008030 fetch 1 ,mem_state +2a40 c4000000 rtnbit0 state_inconn +2a41 680240ca fetch 4 ,mem_next_btclk +2a42 98467e00 isub temp ,pdata +2a43 24610000 nrtn positive +2a44 1fe67cff sub pdata ,0xff ,null +2a45 20212a33 branch setup_clk ,positive +2a46 20600000 rtn + +setup_clk11: +2a47 28400603 compare 3 ,temp ,3 +2a48 2420aa33 nbranch setup_clk ,true +2a49 20202a3e branch setup_complete + +rf_setup_time: +2a4a 44cbc012 bpatch patch12_7 ,mem_patch12 +2a4b d9600600 arg param_rf_setup ,timeup +2a4c 20202a33 branch setup_clk + +rf_setup_time_slave_slot: +2a4d 78547c00 disable user +2a4e 20202a4a branch rf_setup_time + +rf_setup_time_master_slot: +2a4f 78347c00 enable user +2a50 20202a4a branch rf_setup_time + +start_transmitter: +2a51 44cc4013 bpatch patch13_0 ,mem_patch13 +2a52 204029f1 call prep_crypt +2a53 7850fc00 disable is_rx +2a54 78307c00 enable is_tx +2a55 20600000 rtn + +start_tx_native: +2a56 44ccc013 bpatch patch13_1 ,mem_patch13 +2a57 d9600e43 arg param_tx_setup ,timeup +2a58 34730200 until clkn_rt ,meet +2a59 782b7c00 pulse init_encrypt +2a5a 20600000 rtn + +start_rx_native: +2a5b 44cd4013 bpatch patch13_2 ,mem_patch13 +2a5c d9600d00 arg param_rx_setup ,timeup +2a5d 34730200 until clkn_rt ,meet +2a5e 20600000 rtn + +start_tx_external: +2a5f 44cdc013 bpatch patch13_3 ,mem_patch13 +2a60 d9600e43 arg param_tx_setup ,timeup +2a61 35330200 until clke_rt ,meet +2a62 782b7c00 pulse init_encrypt +2a63 20600000 rtn + +send_access_word: +2a64 44ce4013 bpatch patch13_4 ,mem_patch13 +2a65 51207e00 preload access +2a66 782efc00 enable encode_fec0 +2a67 79202a00 set1 txgfsk ,radio_ctrl +2a68 08008648 inject mod ,72 +2a69 784efc00 disable encode_fec0 +2a6a 20600000 rtn + +scan_mode_whiten: +2a6b 1ca20400 copy xin ,temp +2a6c 18418460 or_into 0x60 ,temp +2a6d 18421c00 copy temp ,white_init +2a6e 20600000 rtn + +get_free_amaddr: +2a6f 44cec013 bpatch patch13_5 ,mem_patch13 +2a70 6800c090 fetch 1 ,mem_current_amaddr +2a71 1fe0fe01 increase 1 ,pdata +2a72 c083aa74 bne param_esco_addr ,get_free_amaddr_cont +2a73 18007e01 force 1 ,pdata + +get_free_amaddr_cont: +2a74 6000c090 store 1 ,mem_current_amaddr +2a75 98000800 iforce am_addr +2a76 20600000 rtn + +get_clk: +2a77 1b220400 copy clkn ,temp +2a78 20748000 rtn master +2a79 1b420400 copy clke ,temp +2a7a 20600000 rtn + +get_clkbt: +2a7b 1c427e00 deposit clkn_bt +2a7c 20748000 rtn master +2a7d 1d027e00 deposit clke_bt +2a7e 20600000 rtn + +supervision_update: +2a7f 44cf4013 bpatch patch13_6 ,mem_patch13 +2a80 680a004d fetcht 4 ,mem_supervision_timer +2a81 20402a7b call get_clkbt +2a82 98461600 isub temp ,timeup +2a83 19627e00 deposit timeup +2a84 68090051 fetcht 2 ,mem_supervision_to +2a85 18438400 lshift temp ,temp +2a86 98467e00 isub temp ,pdata +2a87 20600000 rtn + +supervision_flush: +2a88 44cfc013 bpatch patch13_7 ,mem_patch13 +2a89 20402a7b call get_clkbt +2a8a 6002004d store 4 ,mem_supervision_timer +2a8b 20600000 rtn + +assert: +2a8c 44d04014 bpatch patch14_0 ,mem_patch14 +2a8d 20202a8c branch assert + +loop: +2a8e 20202a8e branch loop + +sleep: +2a8f 207a0000 rtn blank +2a90 1fe37e00 rshift pdata ,pdata +2a91 1fe0fffd increase -3 ,pdata + +sleep_loop: +2a92 1fe0ffff increase -1 ,pdata +2a93 2422aa92 nbranch sleep_loop ,zero +2a94 18007e00 force 0 ,pdata +2a95 20600000 rtn + +init_param: +2a96 df200010 arg 0x10 ,loopcnt +2a97 d8a00000 arg 0 ,contw +2a98 20407ec6 call memset0 +2a99 d8a0043f arg mem_le_state ,contw +2a9a df20000a arg 10 ,loopcnt +2a9b 20407ec6 call memset0 +2a9c 7009b200 jam 0 ,mem_sp_calc +2a9d 700a9900 jam 0 ,mem_fifo_temp +2a9e 70048c00 jam 0 ,mem_le_testtype +2a9f 70017f00 jam 0 ,mem_debug_config +2aa0 7004d100 jam 0 ,mem_lmp_conn_state +2aa1 44d0c014 bpatch patch14_1 ,mem_patch14 +2aa2 70016d00 jam 0 ,mem_connection_options +2aa3 70015100 jam 0 ,mem_tester_emulate +2aa4 70015c00 jam 0 ,mem_tester_cnt +2aa5 589e8b33 setarg param_glap +2aa6 6001c0a7 store 3 ,mem_glap +2aa7 58000153 setarg param_acl_pktlen +2aa8 60010083 store 2 ,mem_acl_pktlen +2aa9 7000851e jam param_sco_pktlen ,mem_sco_pktlen +2aaa 70008601 jam param_acl_pktcnt ,mem_acl_pktcnt +2aab 70008807 jam param_sco_pktcnt ,mem_sco_pktcnt +2aac 5812e904 setarg param_hci_version +2aad 60018080 store 3 ,mem_hci_version +2aae 70009060 jam 0x60 ,mem_fhs_misc +2aaf 7040d005 jam param_max_slot ,mem_max_slot +2ab0 70001402 jam 0x02 ,mem_fw_ver +2ab1 6800c65a fetch 1 ,mem_ssp_enable +2ab2 245a74c1 ncall init_memp ,blank +2ab3 6800c4be fetch 1 ,mem_le_secure_connect_enable +2ab4 245a7518 ncall init_memp_256 ,blank +2ab5 44d14014 bpatch patch14_2 ,mem_patch14 +2ab6 20758000 rtn wake +2ab7 58000000 setarg 0 +2ab8 600141dc store 2 ,mem_tx_len +2ab9 1c437e00 rshift clkn_bt ,pdata +2aba 60024094 store 4 ,mem_last_clkn +2abb 20600000 rtn + +lpmstate: +2abc 5800ee21 setarg 0xee21 +2abd 60110050 hstore 2 ,core_clkoff +2abe 6812011c hfetch 4 ,core_gpio_in +2abf 60020abe store 4 ,mem_saved_gpio_in +2ac0 6810813e hfetch 1 ,core_lpm_ldocnt +2ac1 60008abd store 1 ,mem_wakup_from_power_flag +2ac2 c301e45b bbit0 gpio_latch ,loadcode +2ac3 7835fc00 enable wake +2ac4 c303aacc bbit0 cold_wake ,lpmwake +2ac5 7855fc00 disable wake +2ac6 1ce27e00 deposit auxcnt +2ac7 243a2acc nbranch lpmwake ,blank +2ac8 6810813b hfetch 1 ,core_lpm_ctrl + 3 +2ac9 c2812acc bbit1 reload_code ,lpmwake +2aca d85fffff arg param_hibernate_clks ,temp +2acb 20202b3c branch lpm_enter_sleep + +lpmwake: +2acc 6811813c hfetch 3 ,core_lpm_xtalcnt +2acd 6011804c hstore 3 ,core_lpm_reg +2ace e8c08000 ifetch 1 ,contr +2acf 1fe1feef or_into isogate_mask ,pdata +2ad0 e0a08000 istore 1 ,contw +2ad1 20402c23 call lpm_write_ctrl2 +2ad2 6810804f hfetch 1 ,core_lpm_isogate +2ad3 79207e04 set1 enable_retmem ,pdata +2ad4 6010804f hstore 1 ,core_lpm_isogate +2ad5 20402c23 call lpm_write_ctrl2 +2ad6 2055aadf call lpm_load_context ,wake +2ad7 6810804e hfetch 1 ,core_lpm_reg + 2 +2ad8 793ffe03 set0 gpio_latch ,pdata +2ad9 6010804e hstore 1 ,core_lpm_reg + 2 +2ada 20402c23 call lpm_write_ctrl2 +2adb 2435e45b nbranch loadcode ,wake +2adc c6958000 rtnmark0 mark_otp_encrypt +2add 70800608 jam lock_otp ,core_misc_ctrl +2ade 20600000 rtn + +lpm_load_context: +2adf 6800c198 fetch 1 ,mem_saved_spidctrl +2ae0 60108086 hstore 1 ,core_spid_ctrl +2ae1 6801c18d fetch 3 ,mem_saved_gsel +2ae2 60118080 hstore 3 ,core_gpio_sel +2ae3 68024181 fetch 4 ,mem_saved_gpio + 4 +2ae4 60120074 hstore 4 ,core_gpio_out0 +2ae5 6802417d fetch 4 ,mem_saved_gpio +2ae6 60120070 hstore 4 ,core_gpio_oe0 +2ae7 68044185 fetch 8 ,mem_saved_gpio + 8 +2ae8 60140078 hstore 8 ,core_gpio_pu0 +2ae9 68044190 fetch 8 ,mem_saved_mark +2aea 98000000 iforce mark +2aeb 68140140 hfetch 8 ,core_gpio_wakeup_low +2aec 600400a1 store 8 ,mem_gpio_wakeup_low +2aed 204064ca call load_ucode +2aee 20600000 rtn + +lpm_save_context: +2aef 18027e00 deposit mark +2af0 60044190 store 8 ,mem_saved_mark +2af1 68140070 hfetch 8 ,core_gpio_oe0 +2af2 6004417d store 8 ,mem_saved_gpio +2af3 e8c40000 ifetch 8 ,contr +2af4 e0a40000 istore 8 ,contw +2af5 68118080 hfetch 3 ,core_gpio_sel +2af6 6001c18d store 3 ,mem_saved_gsel +2af7 68108086 hfetch 1 ,core_spid_ctrl +2af8 6000c198 store 1 ,mem_saved_spidctrl +2af9 20202c29 branch lpm_write_gpio_wakeup + +lpo_calibration: +2afa 68108063 hfetch 1 ,core_bist_ctrl +2afb 243a2b00 nbranch lpo_cal_inited ,blank +2afc 6801c16f fetch 3 ,mem_clks_per_lpo +2afd 247a0000 nrtn blank +2afe 708063c0 jam 0xc0 ,core_bist_ctrl +2aff 70800680 jam ccnt_start ,core_misc_ctrl + +lpo_cal_inited: +2b00 6810812d hfetch 1 ,core_perf_status +2b01 c4008000 rtnbit0 1 +2b02 68118149 hfetch 3 ,core_clk_counter +2b03 6001c16f store 3 ,mem_clks_per_lpo +2b04 20600000 rtn + +lpm_adjust_clk: +2b05 44d1c014 bpatch patch14_3 ,mem_patch14 +2b06 1b427e00 deposit clke +2b07 20407f37 call clk_diff_rt +2b08 680a415f fetcht 4 ,mem_sleep_counter_all +2b09 18467cff sub temp ,0xff ,null +2b0a 20610000 rtn positive +2b0b 1fed7e00 lshift8 pdata ,pdata +2b0c 1ff27e00 lshift4 pdata ,pdata +2b0d 9846fc00 idiv temp +2b0e 20407f86 call wait_div_end +2b0f 1807fe00 quotient pdata +2b10 d84000c8 arg param_lpm_adjmax ,temp +2b11 20407f91 call ceiling +2b12 60008099 store 1 ,mem_lpm_adjust +2b13 24342b15 nbranch lpm_adjust_positive ,user +2b14 1fe67e00 sub pdata ,0 ,pdata + +lpm_adjust_positive: +2b15 6809c16f fetcht 3 ,mem_clks_per_lpo +2b16 9840fe00 iadd temp ,pdata +2b17 6001c16f store 3 ,mem_clks_per_lpo + +lpm_clear_counter: +2b18 58000000 setarg 0 +2b19 6002415f store 4 ,mem_sleep_counter_all +2b1a 20600000 rtn + +lpm_doze: +2b1b 6800c177 fetch 1 ,mem_lpm_config + 2 +2b1c 79207e02 set1 reload_code ,pdata +2b1d 6000c177 store 1 ,mem_lpm_config + 2 +2b1e 20202b23 branch lpm_hibernate_normal + +lpm_hibernate: +2b1f d85fffff arg param_hibernate_clks ,temp +2b20 6800c176 fetch 1 ,mem_lpm_config + 1 +2b21 793ffe07 set0 7 ,pdata +2b22 6000c176 store 1 ,mem_lpm_config + 1 + +lpm_hibernate_normal: +2b23 44d24014 bpatch patch14_4 ,mem_patch14 +2b24 20402c29 call lpm_write_gpio_wakeup +2b25 6800c157 fetch 1 ,mem_lpm_hibernate_switch +2b26 6000c17c store 1 ,mem_lpm_xtalcnt + 4 +2b27 6800c17a fetch 1 ,mem_lpm_xtalcnt + 2 +2b28 79207e07 set1 cold_wake ,pdata +2b29 6000c17a store 1 ,mem_lpm_xtalcnt + 2 + +lpm_sleep: +2b2a 44d2c014 bpatch patch14_5 ,mem_patch14 +2b2b 204029e7 call xtal_fast_wake +2b2c 6802415f fetch 4 ,mem_sleep_counter_all +2b2d 9840fe00 iadd temp ,pdata +2b2e 6002415f store 4 ,mem_sleep_counter_all +2b2f 20402aef call lpm_save_context +2b30 6802c178 fetch 5 ,mem_lpm_xtalcnt +2b31 6012004c hstore 4 ,core_lpm_reg +2b32 1fef2200 rshift32 pdata ,rega +2b33 37d98200 until null ,lpo_edge +2b34 1b227e00 deposit clkn +2b35 60034163 store 6 ,mem_sleep_clkn +2b36 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr +2b37 37d98200 until null ,lpo_edge +2b38 37d98200 until null ,lpo_edge +2b39 1a227e00 deposit rega +2b3a 6010804f hstore 1 ,core_lpm_isogate +2b3b 70800502 jam lpmreg_sel_ctrl2 ,core_lpm_wr + +lpm_enter_sleep: +2b3c 37d98200 until null ,lpo_edge +2b3d 37d98200 until null ,lpo_edge +2b3e 601a004c hstoret 4 ,core_lpm_reg +2b3f 70800510 jam lpmreg_sel_counter ,core_lpm_wr +2b40 37df8200 until null ,never + +lpm_recover_clk: +2b41 44d34014 bpatch patch14_6 ,mem_patch14 +2b42 58000000 setarg 0 +2b43 1ce27c00 copy auxcnt ,null +2b44 2022ab4c branch lpm_recover_timeout ,zero +2b45 6810813c hfetch 1 ,core_lpm_xtalcnt +2b46 6818813d hfetcht 1 ,core_lpm_buckcnt +2b47 98467c00 isub temp ,null +2b48 20212b4a branch lpm_recover_xtal ,positive +2b49 18427e00 deposit temp + +lpm_recover_xtal: +2b4a 9ce67e00 isub auxcnt ,pdata +2b4b 1fe0fe01 increase 1 ,pdata + +lpm_recover_timeout: +2b4c 1fe0fe08 increase 8 ,pdata +2b4d 37d98200 until null ,lpo_edge +2b4e 9e20fe00 iadd lpo_time ,pdata +2b4f 680a415b fetcht 4 ,mem_sleep_counter +2b50 9840fe00 iadd temp ,pdata +2b51 6809c16f fetcht 3 ,mem_clks_per_lpo +2b52 984ffe00 imul32 temp ,pdata +2b53 1fecfe00 rshift8 pdata ,pdata +2b54 1ff1fe00 rshift4 pdata ,pdata +2b55 1fe0fe6e increase param_lpm_fix ,pdata +2b56 d8400ea6 arg 3750 ,temp +2b57 9846fc00 idiv temp +2b58 20407f86 call wait_div_end +2b59 1807fe00 quotient pdata +2b5a 1ff07e00 lshift16 pdata ,pdata +2b5b 18070400 remainder temp +2b5c 9841fe00 ior temp ,pdata +2b5d 680b4163 fetcht 6 ,mem_sleep_clkn +2b5e 20407f2c call clk_add +2b5f 18423200 copy temp ,clkn +2b60 68034048 fetch 6 ,mem_context + coffset_clk_offset +2b61 20402854 call calc_clke2 +2b62 1b427e00 deposit clke +2b63 60030a9a store 6 ,mem_pdatatemp +2b64 1ce27e00 deposit auxcnt +2b65 e0a08000 istore 1 ,contw +2b66 6810811d hfetch 1 ,core_gpio_in1 +2b67 1fe1fef0 or_into 0xf0 ,pdata +2b68 e0a08000 istore 1 ,contw +2b69 20600000 rtn + +lpm_dispatch: +2b6a 44d3c014 bpatch patch14_7 ,mem_patch14 +2b6b 20402afa call lpo_calibration +2b6c 6801c16f fetch 3 ,mem_clks_per_lpo +2b6d 207a0000 rtn blank +2b6e 6800c091 fetch 1 ,mem_lpm_mode +2b6f 207a0000 rtn blank +2b70 6800c65a fetch 1 ,mem_ssp_enable +2b71 203a2b74 branch lpm_dispatch_next ,blank +2b72 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +2b73 207a0000 rtn blank + +lpm_dispatch_next: +2b74 6800c4c0 fetch 1 ,mem_le_sc_calc +2b75 247a0000 nrtn blank +2b76 20402c3a call lpm_check_wake_lock +2b77 247a0000 nrtn blank +2b78 6800c040 fetch 1 ,mem_context +2b79 2fe00e03 compare 3 ,pdata ,0x7 +2b7a 2420ab9d nbranch lpm_dispatch_unconn ,true +2b7b 68014042 fetch 2 ,mem_context + coffset_tsniff +2b7c 207a0000 rtn blank +2b7d 20758000 rtn wake +2b7e 44d44015 bpatch patch15_0 ,mem_patch15 + +lpm_dispatch_next2: +2b7f 680880a0 fetcht 1 ,mem_lpm_current_mult +2b80 68014042 fetch 2 ,mem_context + coffset_tsniff +2b81 984ffe00 imul32 temp ,pdata +2b82 18518400 rshift4 temp ,temp +2b83 184b0400 rshift2 temp ,temp +2b84 98467e00 isub temp ,pdata +2b85 680a4044 fetcht 4 ,mem_context + coffset_sniff_anchor +2b86 9840fe00 iadd temp ,pdata +2b87 6808c156 fetcht 1 ,mem_lpm_overhead +2b88 98467e00 isub temp ,pdata +2b89 1ff06000 lshift16 pdata ,alarm +2b8a 44d4c015 bpatch patch15_1 ,mem_patch15 +2b8b 6801404e fetch 2 ,mem_context + coffset_rx_window +2b8c 1fe37e00 rshift pdata ,pdata +2b8d 20407f50 call clk2bt +2b8e 1e027e00 deposit alarm +2b8f 20407f39 call clk_diff +2b90 1b420400 copy clke ,temp +2b91 20407f37 call clk_diff_rt +2b92 20740000 rtn user + +lpm_dispatch_sleep: +2b93 20407f49 call clk2lpo + +lpm_dispatch_lpo: +2b94 44d54015 bpatch patch15_2 ,mem_patch15 +2b95 6800c178 fetch 1 ,mem_lpm_xtalcnt +2b96 98467c00 isub temp ,null +2b97 20212b18 branch lpm_clear_counter ,positive +2b98 600a415b storet 4 ,mem_sleep_counter +2b99 20403328 call app_will_enter_lpm +2b9a 204052fb call l2cap_lpm_save_txbuf +2b9b 680a415b fetcht 4 ,mem_sleep_counter +2b9c 20202b2a branch lpm_sleep + +lpm_dispatch_unconn: +2b9d 44d5c015 bpatch patch15_3 ,mem_patch15 +2b9e 6800c040 fetch 1 ,mem_context +2b9f c3800000 rtnbit1 state_inconn +2ba0 c3818000 rtnbit1 state_inpage +2ba1 6800c65a fetch 1 ,mem_ssp_enable +2ba2 203a2ba5 branch lpm_unconn_nossp ,blank +2ba3 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +2ba4 207a0000 rtn blank + +lpm_unconn_nossp: +2ba5 44d64015 bpatch patch15_4 ,mem_patch15 +2ba6 6800c36e fetch 1 ,mem_le_adv_enable +2ba7 243a2baa nbranch lpm_unconn_cont ,blank +2ba8 6800c093 fetch 1 ,mem_scan_mode +2ba9 207a0000 rtn blank + +lpm_unconn_cont: +2baa 68014154 fetch 2 ,mem_lpm_interval +2bab 207a0000 rtn blank + +lpm_sleep_btclk: +2bac 6808c156 fetcht 1 ,mem_lpm_overhead +2bad 98467e00 isub temp ,pdata +2bae d8401d4c arg 7500 ,temp +2baf 984ffe00 imul32 temp ,pdata +2bb0 20202b93 branch lpm_dispatch_sleep + +lpm_set_mult: +2bb1 44d6c015 bpatch patch15_5 ,mem_patch15 +2bb2 7855fc00 disable wake +2bb3 68008030 fetch 1 ,mem_state +2bb4 c4008000 rtnbit0 state_insniff +2bb5 2436abd0 nbranch lpm_not_match ,match +2bb6 20402bcb call lpm_match +2bb7 680140c1 fetch 2 ,mem_rx_window_sniff +2bb8 6001003e store 2 ,mem_rx_window +2bb9 68008047 fetch 1 ,mem_arq +2bba c281abde bbit1 wack ,lpm_mult_short +2bbb c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +2bbc 20405274 call l2cap_malloc_is_fifo_empty +2bbd 243a2bde nbranch lpm_mult_short ,blank +2bbe 6800c55c fetch 1 ,mem_classic_bt_flag +2bbf c280abde bbit1 short_mult_flag ,lpm_mult_short + +lpm_mult_wait_timeout: +2bc0 7000a000 jam 0 ,mem_lpm_current_mult +2bc1 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +2bc2 6800c174 fetch 1 ,mem_lpm_mult_cnt +2bc3 203a2be2 branch lpm_mult_long ,blank +2bc4 1fe0ffff increase -1 ,pdata +2bc5 6000c174 store 1 ,mem_lpm_mult_cnt +2bc6 20600000 rtn + +classic_bt_set_mult_short_flag: +2bc7 d8e00001 arg short_mult_flag ,queue +2bc8 202060cd branch classic_bluetooth_set_flag + +classic_bt_clr_mult_short_flag: +2bc9 d8e00001 arg short_mult_flag ,queue +2bca 202060d1 branch classic_bluetooth_clr_flag + +lpm_match: +2bcb 70415900 jam 0 ,mem_sniff_unint_lost +2bcc 6801c169 fetch 3 ,mem_sniff_rcv +2bcd 1fe0fe01 increase 1 ,pdata +2bce 6001c169 store 3 ,mem_sniff_rcv +2bcf 20600000 rtn + +lpm_not_match: +2bd0 44d74015 bpatch patch15_6 ,mem_patch15 +2bd1 680940c1 fetcht 2 ,mem_rx_window_sniff +2bd2 18430400 rshift temp ,temp +2bd3 6801003e fetch 2 ,mem_rx_window +2bd4 9840fe00 iadd temp ,pdata +2bd5 6001003e store 2 ,mem_rx_window + +lpm_lost: +2bd6 7000a000 jam 0 ,mem_lpm_current_mult +2bd7 6801c16c fetch 3 ,mem_sniff_lost +2bd8 1fe0fe01 increase 1 ,pdata +2bd9 6001c16c store 3 ,mem_sniff_lost +2bda 6800c159 fetch 1 ,mem_sniff_unint_lost +2bdb 1fe0fe01 increase 1 ,pdata +2bdc 6000c159 store 1 ,mem_sniff_unint_lost +2bdd 20600000 rtn + +lpm_mult_short: +2bde 7000a000 jam 0 ,mem_lpm_current_mult +2bdf 6800c173 fetch 1 ,mem_lpm_mult_timeout +2be0 6000c174 store 1 ,mem_lpm_mult_cnt +2be1 20600000 rtn + +lpm_mult_long: +2be2 6808c172 fetcht 1 ,mem_lpm_mult +2be3 600880a0 storet 1 ,mem_lpm_current_mult +2be4 20600000 rtn + +lpm_cal_xtal_startup: +2be5 44d7c015 bpatch patch15_7 ,mem_patch15 +2be6 6800c178 fetch 1 ,mem_lpm_xtalcnt +2be7 247a0000 nrtn blank +2be8 70804206 jam clksel_rc ,core_clksel +2be9 58000f0c setarg 0xf0c +2bea 20402c18 call lpm_write_config +2beb 58030d40 setarg 200000 +2bec 20402a8f call sleep +2bed 37d98200 until null ,lpo_edge +2bee 1e226000 copy lpo_time ,alarm +2bef 204029e7 call xtal_fast_wake +2bf0 70804204 jam clksel_xtal ,core_clksel +2bf1 2000000a nop 10 +2bf2 37d98200 until null ,lpo_edge +2bf3 1e227e00 deposit lpo_time +2bf4 9e067e00 isub alarm ,pdata +2bf5 1fe0fe30 increase 0x30 ,pdata +2bf6 d84000ff arg 0xff ,temp +2bf7 20407f91 call ceiling +2bf8 6000c178 store 1 ,mem_lpm_xtalcnt +2bf9 20007530 nop 30000 +2bfa 20007530 nop 30000 +2bfb 20007530 nop 30000 +2bfc 20600000 rtn + +lpm_cal_xtal_startup_by_snooze: +2bfd 6800c178 fetch 1 ,mem_lpm_xtalcnt +2bfe 247a0000 nrtn blank +2bff 708044ff jam 0xff ,core_xtal_stable_time +2c00 70804206 jam clksel_rc ,core_clksel +2c01 204029e7 call xtal_fast_wake +2c02 580003e8 setarg 1000 +2c03 9e20e000 iadd lpo_time ,alarm +2c04 07e00000 snooze +2c05 1e227e00 deposit lpo_time +2c06 20002ee0 nop 12000 +2c07 20002ee0 nop 12000 +2c08 20002ee0 nop 12000 +2c09 20002ee0 nop 12000 +2c0a 20002ee0 nop 12000 +2c0b 20002ee0 nop 12000 +2c0c 20002ee0 nop 12000 +2c0d 20002ee0 nop 12000 +2c0e 20002ee0 nop 12000 +2c0f 9e067e00 isub alarm ,pdata +2c10 1fe0fe30 add pdata ,0x30 ,pdata +2c11 d84000ff arg 0xff ,temp +2c12 20407f91 call ceiling +2c13 6000c178 store 1 ,mem_lpm_xtalcnt +2c14 20007530 nop 30000 +2c15 20007530 nop 30000 +2c16 20007530 nop 30000 +2c17 20600000 rtn + +lpm_write_config: +2c18 d8a00fff arg 0xfff ,contw +2c19 98a10a00 iand contw ,contw +2c1a 6800c175 fetch 1 ,mem_lpm_config +2c1b 1fe17ef0 and_into 0xf0 ,pdata +2c1c 1fed7e00 lshift8 pdata ,pdata +2c1d 98a1fe00 ior contw ,pdata +2c1e 6011004c hstore 2 ,core_lpm_reg +2c1f e8c10000 ifetch 2 ,contr +2c20 e0a10000 istore 2 ,contw + +lpm_write_ctrl: +2c21 58000001 setarg lpmreg_sel_ctrl +2c22 20202c24 branch lpm_write + +lpm_write_ctrl2: +2c23 58000002 setarg lpmreg_sel_ctrl2 + +lpm_write: +2c24 37d98200 until null ,lpo_edge +2c25 60108005 hstore 1 ,core_lpm_wr +2c26 37d98200 until null ,lpo_edge +2c27 37d98200 until null ,lpo_edge +2c28 20600000 rtn + +lpm_write_gpio_wakeup: +2c29 44d84016 bpatch patch16_0 ,mem_patch16 +2c2a 680200a1 fetch 4 ,mem_gpio_wakeup_low +2c2b 6012004c hstore 4 ,core_lpm_reg +2c2c 58000004 setarg lpmreg_sel_gpiolow +2c2d 20402c24 call lpm_write +2c2e 680200a5 fetch 4 ,mem_gpio_wakeup_high +2c2f 6012004c hstore 4 ,core_lpm_reg +2c30 58000008 setarg lpmreg_sel_gpiohigh +2c31 20202c24 branch lpm_write + +lpm_get_wake_lock: +2c32 68014152 fetch 2 ,mem_lpm_wake_lock +2c33 f9207e00 qset1 pdata +2c34 60014152 store 2 ,mem_lpm_wake_lock +2c35 20600000 rtn + +lpm_put_wake_lock: +2c36 68014152 fetch 2 ,mem_lpm_wake_lock +2c37 f93ffe00 qset0 pdata +2c38 60014152 store 2 ,mem_lpm_wake_lock +2c39 20600000 rtn + +lpm_check_wake_lock: +2c3a 44d8c016 bpatch patch16_1 ,mem_patch16 +2c3b 20403326 call app_check_wake_lock +2c3c 68014152 fetch 2 ,mem_lpm_wake_lock +2c3d 1fe22200 copy pdata ,rega +2c3e 6800804c fetch 1 ,mem_state_map +2c3f 2feffe06 isolate1 smap_rxlmp ,pdata +2c40 7920a20b setflag true ,wake_lock_lmp_rx ,rega +2c41 68008078 fetch 1 ,mem_lmo_opcode1 +2c42 6808807c fetcht 1 ,mem_lmo_opcode2 +2c43 9840fe00 iadd temp ,pdata +2c44 68088048 fetcht 1 ,mem_lmp_to_send +2c45 9840fe00 iadd temp ,pdata +2c46 7d3a220a nsetflag blank ,wake_lock_lmp_tx ,rega +2c47 6800c4ff fetch 1 ,mem_le_tx_buff_used +2c48 7d3a2201 nsetflag blank ,wake_lock_ble_tx ,rega +2c49 6801025d fetch 2 ,mem_l2cap_rxbuff1_len +2c4a 6809025f fetcht 2 ,mem_l2cap_rxbuff2_len +2c4b 9840fe00 iadd temp ,pdata +2c4c 7d3a220d nsetflag blank ,wake_lock_l2cap_rx ,rega +2c4d 68044668 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +2c4e 7d3a220f nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +2c4f 68044670 fetch util_fifo_len ,mem_ipc_fifo_c512bt +2c50 7d3a220e nsetflag blank ,wake_lock_ipc_c512bt ,rega +2c51 6800c1ce fetch 1 ,mem_hci_cmd +2c52 7d3a2208 nsetflag blank ,wake_lock_cmd ,rega +2c53 6800c092 fetch 1 ,mem_device_option +2c54 2fe1fe0a compare dvc_op_module ,pdata ,0xff +2c55 2040ac5b call lpm_uart_wake_lock ,true +2c56 5ffffff8 setarg -8 +2c57 9a212200 iand rega ,rega +2c58 1a227e00 copy rega ,pdata +2c59 60014152 store 2 ,mem_lpm_wake_lock +2c5a 20600000 rtn + +lpm_uart_wake_lock: +2c5b 68110112 hfetch 2 ,core_uart_rxitems +2c5c 7d3a2206 nsetflag blank ,wake_lock_uart_rx ,rega +2c5d 6811010e hfetch 2 ,core_uart_txitems +2c5e 7d3a2205 nsetflag blank ,wake_lock_uart_tx ,rega +2c5f 20600000 rtn + +lpm_shut_down: +2c60 68120138 hfetch 4 ,core_lpm_ctrl +2c61 793ffe1b set0 27 ,pdata +2c62 6012004c hstore 4 ,core_lpm_reg +2c63 20402c21 call lpm_write_ctrl +2c64 20202a8c branch assert + +lpm_disable_exen_output: +2c65 6812013c hfetch 4 ,core_lpm_xtalcnt +2c66 793ffe14 set0 20 ,pdata +2c67 6012004c hstore 4 ,core_lpm_reg +2c68 20202c23 branch lpm_write_ctrl2 + +check_bt_disabled: +2c69 68014150 fetch 2 ,mem_chip_functions +2c6a c2802a8c bbit1 bt_disabled ,assert +2c6b 20600000 rtn + +check_ble_disabled: +2c6c 68014150 fetch 2 ,mem_chip_functions +2c6d c280aa8c bbit1 ble_disabled ,assert +2c6e 20600000 rtn + +check_module_disabled: +2c6f 68014150 fetch 2 ,mem_chip_functions +2c70 c2812a8c bbit1 module_disable ,assert +2c71 20600000 rtn + +g24_dispatch: +2c72 44d94016 bpatch patch16_2 ,mem_patch16 +2c73 20402c7a call g24_head_ptr2regc +2c74 1a60a4cd add regc ,offset_24g_mode ,regb +2c75 ea408000 ifetch 1 ,regb +2c76 c1000000 rtneq disable_24g +2c77 c000ad06 beq tx_24g ,g24_transmit_process +2c78 c0012c7f beq rx_24g ,g24_receive_process +2c79 20600000 rtn + +g24_head_ptr2regc: +2c7a 68094241 fetcht 2 ,mem_24g_head_ptr +2c7b 18422600 copy temp ,regc +2c7c 20600000 rtn + +g24_receive_process_init: +2c7d 20402f3d call g24_receive_init +2c7e 2020307d branch g24_mode_switch_init + +g24_receive_process: +2c7f 20403084 call g24_mode_switch +2c80 2040305a call g24_dongle_work_mode_auto +2c81 2040305e call g24_dongle_bind_mode_auto +2c82 202030a2 branch g24_dongle_search_mode_auto + +g24_pair_init: +2c83 20403231 call g24_set0_mem_pid +2c84 5800004e setarg g24_pair_ch +2c85 2040322f call g24_store_mem_ch +2c86 204032ba call g24_store_mem_pair_txpower +2c87 1a60a292 add regc ,offset_24g_paring_addr ,rega +2c88 ea220000 ifetch 4 ,rega +2c89 2020322c branch g24_store_mem_addr + +g24_ch: +2c8a 20402c7a call g24_head_ptr2regc +2c8b 1a60a491 add regc ,offset_24g_current_ch_number ,regb +2c8c ea488000 ifetcht 1 ,regb +2c8d 20402c90 call g24_ch_temp_incre_size4 +2c8e 1a608a91 add regc ,offset_24g_current_ch_number ,contw +2c8f 20202e56 branch g24_contw_istoret_1byte + +g24_ch_temp_incre_size4: +2c90 20402c94 call g24_ch_calc +2c91 18408401 increase 1 ,temp +2c92 18410403 and_into 3 ,temp +2c93 20600000 rtn + +g24_ch_calc: +2c94 1a60a4ae add regc ,offset_24g_addr ,regb +2c95 ea408000 ifetch 1 ,regb +2c96 1fe17e03 and_into 0x03 ,pdata +2c97 1fefa204 mul32 pdata ,4 ,rega +2c98 1a60fe97 add regc ,offset_24g_ch_map1 ,pdata +2c99 9a20fe00 iadd rega ,pdata +2c9a 98408c00 iadd temp ,contr +2c9b e8c08000 ifetch 1 ,contr +2c9c 2020322f branch g24_store_mem_ch + +g24_set_device_addr: +2c9d 2040326c call g24_store_mem_tx_power_temp +2c9e 2040666a call otp_enable_chgpump +2c9f 580007e2 setarg 0x7e2 +2ca0 da200aa2 arg mem_temp ,rega +2ca1 d8400004 arg 4 ,temp +2ca2 204066b3 call otpd_read_data +2ca3 2040666d call otp_disable_chgpump +2ca4 68020aa2 fetch 4 ,mem_temp +2ca5 20403227 call g24_store_mem_device_addr +2ca6 247a0000 nrtn blank +2ca7 680240a0 fetch 4 ,mem_lap +2ca8 20203227 branch g24_store_mem_device_addr + +g24_transmit_rf_sta_init: +2ca9 20403241 call g24_set1_mem_rf_last_sta +2caa 58000000 setarg 0 +2cab 2040323f call g24_store_mem_sync_cnt + +g24_transmit_rf_ctrl_clear: +2cac 2040323a call g24_fetch_mem_data_type +2cad 1fe17e07 and_into bits_data ,pdata +2cae 2020323c branch g24_store_mem_data_type + +g24_hop_ch_enable: +2caf 2040323a call g24_fetch_mem_data_type +2cb0 79207e04 set1 bit_hop ,pdata +2cb1 2040323c call g24_store_mem_data_type +2cb2 20203235 branch g24_store_mem_txpayload + +g24_transmit_hop_pac_fail: +2cb3 2040325d call g24_fetch_mem_rf_work_stage +2cb4 c000acb7 beq 1 ,g24_transmit_hop_pac_fail_wo_hop +2cb5 c0012cbc beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 +2cb6 20600000 rtn + +g24_transmit_hop_pac_fail_wo_hop: +2cb7 2040323e call g24_set2_mem_sync_cnt + +g24_transmit_hop_pac_fail_stage1: +2cb8 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw +2cb9 204032d6 call g24_mem_set0 +2cba 20403242 call g24_store_mem_rf_last_sta +2cbb 20202cac branch g24_transmit_rf_ctrl_clear + +g24_transmit_hop_pac_fail_hop_stage2: +2cbc 2040325a call g24_set0_mem_rf_hop_ch +2cbd 20202cb8 branch g24_transmit_hop_pac_fail_stage1 + +g24_transmit_pac_fail_hop_stage3: +2cbe 1a60a28c add regc ,offset_24g_txfail_cnt ,rega +2cbf ea208000 ifetch 1 ,rega +2cc0 1fe0fe01 increase 1 ,pdata +2cc1 1a608a8c add regc ,offset_24g_txfail_cnt ,contw +2cc2 e0a08000 istore 1 ,contw +2cc3 c0102dd2 beq 0x20 ,g24_tx_attempt_fail +2cc4 20403258 call g24_fetch_mem_rf_hop_ch +2cc5 c000acca beq 1 ,g24_rf_hop_fastly +2cc6 58000001 setarg 1 +2cc7 2040325b call g24_store_mem_rf_hop_ch + +g24_rf_hop_attemp_again: +2cc8 20403258 call g24_fetch_mem_rf_hop_ch +2cc9 c080acac bne 1 ,g24_transmit_rf_ctrl_clear + +g24_rf_hop_fastly: +2cca 1a60a2d3 add regc ,offset_24g_hop_fastly_cnt ,rega +2ccb ea208000 ifetch 1 ,rega +2ccc 1fe0fe01 increase 1 ,pdata +2ccd 20402cd5 call g24_store_mem_hop_fastly_cnt +2cce c0022cd2 beq 4 ,g24_rf_hop_fastly_exit +2ccf 20402c8a call g24_ch +2cd0 20402d04 call g24_set2_mem_max_retry +2cd1 20202d8f branch g24_transmit_packet + +g24_rf_hop_fastly_exit: +2cd2 20402cd4 call g24_set0_mem_hop_fastly_cnt +2cd3 20202cac branch g24_transmit_rf_ctrl_clear + +g24_set0_mem_hop_fastly_cnt: +2cd4 58000000 setarg 0 + +g24_store_mem_hop_fastly_cnt: +2cd5 1a608ad3 add regc ,offset_24g_hop_fastly_cnt ,contw +2cd6 202032b4 branch g24_contw_istore_1byte + +g24_transmit_hop_pac_succ_wo_hop: +2cd7 2040323e call g24_set2_mem_sync_cnt + +g24_transmit_hop_pac_succ: +2cd8 2040325a call g24_set0_mem_rf_hop_ch +2cd9 20403241 call g24_set1_mem_rf_last_sta +2cda 20202cac branch g24_transmit_rf_ctrl_clear + +g24_transmit_succ_rf_config: +2cdb 2040325d call g24_fetch_mem_rf_work_stage +2cdc c001acd8 beq 3 ,g24_transmit_hop_pac_succ +2cdd 2040323a call g24_fetch_mem_data_type +2cde 2fec0004 isolate0 bit_hop ,pdata +2cdf 2020aca9 branch g24_transmit_rf_sta_init ,true +2ce0 2040325d call g24_fetch_mem_rf_work_stage +2ce1 c000acd7 beq 1 ,g24_transmit_hop_pac_succ_wo_hop +2ce2 c0012cd8 beq 2 ,g24_transmit_hop_pac_succ +2ce3 20600000 rtn + +g24_rf_sta_check: +2ce4 20403253 call g24_fetch_mem_pairing_sm +2ce5 c1ff8000 rtnne state_24g_pairing_success +2ce6 20402ce9 call g24_rf_laststa_synccnt_check +2ce7 24562cf4 ncall g24_rf_sync_cnt_check ,user2 +2ce8 20600000 rtn + +g24_rf_laststa_synccnt_check: +2ce9 78567c00 disable user2 +2cea 1a60a2ce add regc ,offset_24g_rf_last_sta ,rega +2ceb ea208000 ifetch 1 ,rega +2cec c1808000 rtnne 1 +2ced 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega +2cee ea208000 ifetch 1 ,rega +2cef c1800000 rtnne 0 +2cf0 58000001 setarg 1 +2cf1 20402cfd call g24_store_mem_rf_work_stage +2cf2 20403237 call g24_set4_mem_max_retry +2cf3 20207feb branch enable_user2 + +g24_rf_sync_cnt_check: +2cf4 1a60a2d0 add regc ,offset_24g_sync_cnt ,rega +2cf5 ea208000 ifetch 1 ,rega +2cf6 203a2cff branch g24_rf_hop_attemp ,blank +2cf7 1fe0ffff increase -1 ,pdata +2cf8 2040323f call g24_store_mem_sync_cnt +2cf9 58000002 setarg 2 +2cfa 20402cfd call g24_store_mem_rf_work_stage +2cfb 20402c8a call g24_ch +2cfc 20203237 branch g24_set4_mem_max_retry + +g24_store_mem_rf_work_stage: +2cfd 1a608ad2 add regc ,offset_24g_rf_work_stage ,contw +2cfe 202032b4 branch g24_contw_istore_1byte + +g24_rf_hop_attemp: +2cff 58000003 setarg 3 +2d00 20402cfd call g24_store_mem_rf_work_stage +2d01 20403258 call g24_fetch_mem_rf_hop_ch +2d02 243a2cc8 nbranch g24_rf_hop_attemp_again ,blank +2d03 20402c8a call g24_ch + +g24_set2_mem_max_retry: +2d04 58000002 setarg 2 +2d05 20203238 branch g24_store_mem_max_retry + +g24_transmit_process: +2d06 c6930000 rtnmark0 mark_24g +2d07 79200027 set1 mark_24g_conext ,mark +2d08 44d9c016 bpatch patch16_3 ,mem_patch16 +2d09 1a60a28e add regc ,offset_24g_tx_without_int ,rega +2d0a ea208000 ifetch 1 ,rega +2d0b c000ad0f beq 1 ,g24_transmit_without_int +2d0c 2040306a call g24_timer_check +2d0d 24342d16 nbranch g24_transmit_exit ,user +2d0e 20402d1b call g24_interval_calibrate + +g24_transmit_without_int: +2d0f 1a608a8e add regc ,offset_24g_tx_without_int ,contw +2d10 204032d6 call g24_mem_set0 +2d11 20402d2c call g24_txdata_prep +2d12 24342d7d nbranch g24_enter_lpm ,user +2d13 20402ce4 call g24_rf_sta_check + +g24_transmit_start: +2d14 20402d8f call g24_transmit_packet +2d15 20402e7a call g24_power_ctrl + +g24_transmit_exit: +2d16 793f8027 set0 mark_24g_conext ,mark +2d17 20600000 rtn + +g24_timer_timeout: +2d18 20628000 rtn zero +2d19 79207e1c set1 28 ,pdata +2d1a 20600000 rtn + +g24_interval_calibrate: +2d1b 1a60a2c2 add regc ,offset_24g_pac_index ,rega +2d1c ea208000 ifetch 1 ,rega +2d1d 1fe0fe01 increase 1 ,pdata +2d1e 1a608ac2 add regc ,offset_24g_pac_index ,contw +2d1f e0a08000 istore 1 ,contw +2d20 c0022d23 beq 4 ,g24_interval_max +2d21 c002ad27 beq 5 ,g24_interval_min +2d22 20600000 rtn + +g24_interval_max: +2d23 1a60a2ad add regc ,offset_24g_interval_max ,rega +2d24 ea208000 ifetch 1 ,rega + +g24_interval_update: +2d25 1a608aab add regc ,offset_24g_interval ,contw +2d26 202032b4 branch g24_contw_istore_1byte + +g24_interval_min: +2d27 1a608ac2 add regc ,offset_24g_pac_index ,contw +2d28 204032d6 call g24_mem_set0 +2d29 1a60a2ac add regc ,offset_24g_interval_min ,rega +2d2a ea208000 ifetch 1 ,rega +2d2b 20202d25 branch g24_interval_update + +g24_txdata_prep: +2d2c 20403253 call g24_fetch_mem_pairing_sm +2d2d c0ffaeb1 bne state_24g_pairing_success ,g24_pairing_sm +2d2e 44da4016 bpatch patch16_4 ,mem_patch16 +2d2f 20402d3a call g24_package_data +2d30 24342d36 nbranch g24_txdata_last_pac ,user +2d31 20402d53 call g24_transmit_prep +2d32 20402e71 call g24_power_ctrl_pac_incrs + +g24_txdata_enable_tx: +2d33 58000001 setarg ensure_on_24g + +g24_store_mem_ensure: +2d34 1a608a8b add regc ,offset_24g_ensure ,contw +2d35 202032b4 branch g24_contw_istore_1byte + +g24_txdata_last_pac: +2d36 1a60a28b add regc ,offset_24g_ensure ,rega +2d37 ea208000 ifetch 1 ,rega +2d38 c000ffe7 beq ensure_on_24g ,enable_user +2d39 20600000 rtn + +g24_package_data: +2d3a 1a6084d8 add regc ,offset_24g_cb_data ,temp +2d3b e8410000 ifetch 2 ,temp +2d3c 20407f9c call callback_func +2d3d 24740000 nrtn user +2d3e 1a227e00 copy rega ,pdata +2d3f 60008aae store 1 ,mem_rega +2d40 1a608ab2 add regc ,offset_24g_abort_pac ,contw +2d41 204032d6 call g24_mem_set0 +2d42 20402cac call g24_transmit_rf_ctrl_clear +2d43 6000919e store 1 ,mem_24g_common_temp +2d44 68008aae fetch 1 ,mem_rega +2d45 1fe22200 copy pdata ,rega +2d46 1a208401 add rega ,1 ,temp +2d47 d8a0119f arg mem_24g_common_temp + 1 ,contw +2d48 1a227200 copy rega ,loopcnt +2d49 1a420c00 copy regb ,contr +2d4a 20407f01 call memcpy +2d4b da20119e arg mem_24g_common_temp ,rega + +g24_put_data_in_buff: +2d4c c6938000 rtnmark0 mark_24g_conext +2d4d 1a608a86 add regc ,offset_24g_datalen ,contw +2d4e e0a88000 istoret 1 ,contw +2d4f 18427200 copy temp ,loopcnt +2d50 1a608a22 add regc ,offset_24g_txbuf ,contw + +g24_put_data_in_buff2: +2d51 1a220c00 copy rega ,contr +2d52 20207f01 branch memcpy + +g24_transmit_prep: +2d53 1a60a286 add regc ,offset_24g_datalen ,rega +2d54 ea208000 ifetch 1 ,rega +2d55 1fe0fe02 increase 2 ,pdata +2d56 1a608a88 add regc ,offset_24g_txlen ,contw +2d57 e0a08000 istore 1 ,contw +2d58 2040323a call g24_fetch_mem_data_type +2d59 20403235 call g24_store_mem_txpayload +2d5a 1a60a286 add regc ,offset_24g_datalen ,rega +2d5b ea208000 ifetch 1 ,rega +2d5c 1fe9fe00 lshift3 pdata ,pdata +2d5d 1a60a285 add regc ,offset_24g_pid ,rega +2d5e ea288000 ifetcht 1 ,rega +2d5f 18410403 and temp ,0x03 ,temp +2d60 18438400 lshift temp ,temp +2d61 9841fe00 ior temp ,pdata +2d62 1a60a2c3 add regc ,offset_24g_no_ack ,rega +2d63 ea288000 ifetcht 1 ,rega +2d64 9840fe00 iadd temp ,pdata +2d65 e0a08000 istore 1 ,contw +2d66 1a60a286 add regc ,offset_24g_datalen ,rega +2d67 ea208000 ifetch 1 ,rega +2d68 98007200 iforce loopcnt +2d69 1a608c22 add regc ,offset_24g_txbuf ,contr +2d6a 20207f01 branch memcpy + +g24_send_abort_packet: +2d6b 2040324f call g24_set1_mem_abort_pac +2d6c 2040325a call g24_set0_mem_rf_hop_ch +2d6d 20402e6d call g24_power_ctrl_reinit +2d6e 20402cac call g24_transmit_rf_ctrl_clear +2d6f 6000919e store 1 ,mem_24g_common_temp +2d70 20402d77 call g24_put_data_in_buff_pre +2d71 2040323a call g24_fetch_mem_data_type +2d72 79207e03 set1 bit_abort ,pdata +2d73 2040323c call g24_store_mem_data_type +2d74 20402d53 call g24_transmit_prep +2d75 20402d33 call g24_txdata_enable_tx +2d76 20202d14 branch g24_transmit_start + +g24_put_data_in_buff_pre: +2d77 6000919f store 1 ,mem_24g_common_temp + 1 +2d78 20403224 call g24_fetch_mem_device_addr +2d79 600211a0 store 4 ,mem_24g_common_temp + 2 +2d7a d8400006 arg 6 ,temp +2d7b da20119e arg mem_24g_common_temp ,rega +2d7c 20202d4c branch g24_put_data_in_buff + +g24_enter_lpm: +2d7d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega +2d7e ea208000 ifetch 1 ,rega +2d7f 203a2d6b branch g24_send_abort_packet ,blank + +g24_enter_lpm_prepare: +2d80 1a60a2da add regc ,offset_24g_cb_lpm_prepare ,rega +2d81 ea210000 ifetch 2 ,rega +2d82 20207f9c branch callback_func + +g24_lpm_long_sleep: +2d83 20402c7a call g24_head_ptr2regc +2d84 20402afa call lpo_calibration +2d85 6801c16f fetch 3 ,mem_clks_per_lpo +2d86 207a0000 rtn blank +2d87 1a6084dc add regc ,offset_24g_cb_lpm_before ,temp +2d88 e8410000 ifetch 2 ,temp +2d89 20407f9c call callback_func +2d8a 1a6084b6 add regc ,offset_24g_enter_hibernate ,temp +2d8b e8440000 ifetch 8 ,temp + +g24_lpm_long_sleep_next: +2d8c 20407f49 call clk2lpo +2d8d 600a415b storet 4 ,mem_sleep_counter +2d8e 20202b2a branch lpm_sleep + +g24_transmit_packet: +2d8f 20402c7a call g24_head_ptr2regc +2d90 1a608a8f add regc ,offset_24g_retry ,contw +2d91 204032d6 call g24_mem_set0 + +g24_transmit_loop: +2d92 20402da4 call g24_transmit_receive_ack +2d93 242c2dae nbranch g24_retransmit ,sync +2d94 2437adae nbranch g24_retransmit ,user3 +2d95 20402dd6 call g24_ackpayload_parse +2d96 20402e75 call g24_power_ctrl_ack_incrs + +g24_transmit_next_packet: +2d97 20402c7a call g24_head_ptr2regc +2d98 1a60a285 add regc ,offset_24g_pid ,rega +2d99 ea208000 ifetch 1 ,rega +2d9a 1fe0fe01 increase 1 ,pdata +2d9b 20403232 call g24_store_mem_pid +2d9c 20403253 call g24_fetch_mem_pairing_sm +2d9d c0ffaed0 bne state_24g_pairing_success ,g24_paring_mode +2d9e 20402cdb call g24_transmit_succ_rf_config + +g24_transmit_abandon: +2d9f 58000000 setarg 0 +2da0 1a608a8c add regc ,offset_24g_txfail_cnt ,contw +2da1 e0a10000 istore 2 ,contw +2da2 58000000 setarg ensure_off_24g +2da3 20202d34 branch g24_store_mem_ensure + +g24_transmit_receive_ack: +2da4 7857fc00 disable user3 +2da5 20402df7 call g24_transmit +2da6 20402c7a call g24_head_ptr2regc +2da7 1a60a2c3 add regc ,offset_24g_no_ack ,rega +2da8 ea208000 ifetch 1 ,rega +2da9 c000adac beq no_ack_24g ,g24_transmit_no_ack +2daa 20402e11 call g24_receive_packet +2dab 20202e45 branch g24_end_of_packet + +g24_transmit_no_ack: +2dac 20402e45 call g24_end_of_packet +2dad 20202d97 branch g24_transmit_next_packet + +g24_retransmit: +2dae 44dac016 bpatch patch16_5 ,mem_patch16 +2daf 1a60a28d add regc ,offset_24g_get_ack_fail ,rega +2db0 ea208000 ifetch 1 ,rega +2db1 1fe0fe01 increase 1 ,pdata +2db2 1a608a8d add regc ,offset_24g_get_ack_fail ,contw +2db3 e0a08000 istore 1 ,contw +2db4 20403253 call g24_fetch_mem_pairing_sm +2db5 c0ffadcc bne state_24g_pairing_success ,g24_tx_paring_retry +2db6 1a60a28f add regc ,offset_24g_retry ,rega +2db7 ea288000 ifetcht 1 ,rega +2db8 18408401 increase 1 ,temp +2db9 1a608a8f add regc ,offset_24g_retry ,contw +2dba e0a88000 istoret 1 ,contw +2dbb 1a60a2cc add regc ,offset_24g_max_retry ,rega +2dbc ea208000 ifetch 1 ,rega +2dbd 98467e00 isub temp ,pdata +2dbe 243a2d92 nbranch g24_transmit_loop ,blank +2dbf 44db4016 bpatch patch16_6 ,mem_patch16 +2dc0 2040325d call g24_fetch_mem_rf_work_stage +2dc1 c001acbe beq 3 ,g24_transmit_pac_fail_hop_stage3 +2dc2 1a60a2d1 add regc ,offset_24g_hop_pac_retry ,rega +2dc3 ea208000 ifetch 1 ,rega +2dc4 1fe0fe01 increase 1 ,pdata +2dc5 1a608ad1 add regc ,offset_24g_hop_pac_retry ,contw +2dc6 e0a08000 istore 1 ,contw +2dc7 c0012cb3 beq 2 ,g24_transmit_hop_pac_fail +2dc8 20402caf call g24_hop_ch_enable +2dc9 58000001 setarg 1 +2dca 20403238 call g24_store_mem_max_retry +2dcb 20202d8f branch g24_transmit_packet + +g24_tx_paring_retry: +2dcc 1a60a28d add regc ,offset_24g_get_ack_fail ,rega +2dcd ea208000 ifetch 1 ,rega +2dce c1ff8000 rtnne 0xff +2dcf 1a608a8d add regc ,offset_24g_get_ack_fail ,contw +2dd0 204032d6 call g24_mem_set0 +2dd1 20202dd4 branch g24_stop_24g_mode + +g24_tx_attempt_fail: +2dd2 1a608a8c add regc ,offset_24g_txfail_cnt ,contw +2dd3 204032d6 call g24_mem_set0 + +g24_stop_24g_mode: +2dd4 700a993a jam bt_evt_24g_attempt_fail ,mem_fifo_temp +2dd5 20207d86 branch ui_ipc_send_event + +g24_ackpayload_parse: +2dd6 20402dde call g24_read_len_pid_crc +2dd7 1a60a284 add regc ,offset_24g_rxdata_length ,rega +2dd8 ea208000 ifetch 1 ,rega +2dd9 207a0000 rtn blank +2dda 98007200 iforce loopcnt +2ddb 1a608c02 add regc ,offset_24g_rxbuf_add2 ,contr +2ddc 1a608a64 add regc ,offset_24g_rxpayload ,contw +2ddd 20207f01 branch memcpy + +g24_read_len_pid_crc: +2dde 2040325f call g24_fetch_mem_rxbuf_add1 +2ddf 1fe97e00 rshift3 pdata ,pdata +2de0 1a608a84 add regc ,offset_24g_rxdata_length ,contw +2de1 e0a08000 istore 1 ,contw +2de2 1fe0fe01 increase 1 ,pdata +2de3 1a608c01 add regc ,offset_24g_rxbuf_add1 ,contr +2de4 98c08c00 iadd contr ,contr +2de5 e8c18000 ifetch 3 ,contr +2de6 1a608ac4 add regc ,offset_24g_sta_crc ,contw +2de7 e0a18000 istore 3 ,contw +2de8 2040325f call g24_fetch_mem_rxbuf_add1 +2de9 1fe37e00 rshift pdata ,pdata +2dea 1fe17e03 and pdata ,0x03 ,pdata +2deb 1a608aca add regc ,offset_24g_sta_pid ,contw +2dec e0a08000 istore 1 ,contw +2ded 20600000 rtn + +g24_prep: +2dee 7844fc00 disable enable_crc +2def 7843fc00 disable enable_white +2df0 58555555 setarg 0x555555 +2df1 98001e00 iforce crc24_init +2df2 20600000 rtn + +g24_set_freq_tx: +2df3 20402918 call set_sync_on +2df4 1a60a290 add regc ,offset_24g_ch ,rega +2df5 ea288000 ifetcht 1 ,rega +2df6 20202933 branch set_freq_tx + +g24_transmit: +2df7 20402dee call g24_prep +2df8 20402df3 call g24_set_freq_tx +2df9 79202a00 set1 txgfsk ,radio_ctrl +2dfa 782efc00 enable encode_fec0 +2dfb 78307c00 enable is_tx +2dfc 7850fc00 disable is_rx +2dfd 204053c4 call le_enable +2dfe 2040322a call g24_fetch_mem_addr +2dff 98001200 iforce access +2e00 08008620 inject mod ,32 +2e01 7824fc00 enable enable_crc +2e02 1a60a288 add regc ,offset_24g_txlen ,rega +2e03 ea208000 ifetch 1 ,rega +2e04 98007200 iforce loopcnt +2e05 1a608c42 add regc ,offset_24g_txpayload ,contr + +g24tr_loop: +2e06 e8c08000 ifetch 1 ,contr +2e07 08008608 inject mod ,8 +2e08 c2002e06 loop g24tr_loop +2e09 78247c00 enable enable_parity +2e0a 08008618 inject mod ,24 +2e0b 78447c00 disable enable_parity +2e0c 37d38200 until null ,tx_clear +2e0d 44dbc016 bpatch patch16_7 ,mem_patch16 +2e0e 20000064 nop 100 +2e0f 784efc00 disable encode_fec0 +2e10 20600000 rtn + +g24_receive_packet: +2e11 7857fc00 disable user3 +2e12 18002a00 force 0 ,radio_ctrl +2e13 1a60a290 add regc ,offset_24g_ch ,rega +2e14 ea288000 ifetcht 1 ,rega +2e15 2040291f call set_freq_rx +2e16 20402924 call rf_rx_enable + +g24_receive_rxon: +2e17 20402dee call g24_prep +2e18 7826fc00 enable decode_fec0 +2e19 7830fc00 enable is_rx +2e1a 78507c00 disable is_tx +2e1b 204053c4 call le_enable +2e1c 2040322a call g24_fetch_mem_addr +2e1d 98001200 iforce access +2e1e 78287c00 enable swfine +2e1f 1a60a289 add regc ,offset_24g_rx_window ,rega +2e20 ea210000 ifetch 2 ,rega +2e21 98003600 iforce stop_watch +2e22 37c18400 correlate null ,timeout +2e23 242c2e4d nbranch g24_sync_timeout ,sync +2e24 7824fc00 enable enable_crc +2e25 09800008 parse demod ,bucket ,8 +2e26 19897e00 rshift3 pwindow ,pdata +2e27 1a608a00 add regc ,offset_24g_rxbuf ,contw +2e28 e0a08000 istore 1 ,contw +2e29 1a60a2cd add regc ,offset_24g_mode ,rega +2e2a ea208000 ifetch 1 ,rega +2e2b c0012e33 beq rx_24g ,g24_receive_skip +2e2c 44dc4017 bpatch patch17_0 ,mem_patch17 +2e2d 1a60a200 add regc ,offset_24g_rxbuf ,rega +2e2e ea208000 ifetch 1 ,rega +2e2f 1a60a287 add regc ,offset_24g_data_type ,rega +2e30 ea288000 ifetcht 1 ,rega +2e31 a8400e00 icompare bits_data ,temp +2e32 2420ae45 nbranch g24_end_of_packet ,true + +g24_receive_skip: +2e33 09800008 parse demod ,bucket ,8 +2e34 19897e00 rshift3 pwindow ,pdata +2e35 e0a08000 istore 1 ,contw +2e36 1fe97e00 rshift3 pdata ,pdata +2e37 1fe1721f and pdata ,0x1f ,loopcnt +2e38 2022ae3d branch g24rx_nopayload ,zero + +g24rx_loop: +2e39 09800008 parse demod ,bucket ,8 +2e3a 19897e00 rshift3 pwindow ,pdata +2e3b e0a08000 istore 1 ,contw +2e3c c2002e39 loop g24rx_loop + +g24rx_nopayload: +2e3d 09800018 parse demod ,bucket ,24 +2e3e 1fef7e00 rshift32 pdata ,pdata +2e3f 1ff17e00 rshift16 pdata ,pdata +2e40 e0a18000 istore 3 ,contw +2e41 20232e45 branch g24_end_of_packet ,crc_failed +2e42 7837fc00 enable user3 +2e43 7846fc00 disable decode_fec0 +2e44 20600000 rtn + +g24_end_of_packet: +2e45 784efc00 disable encode_fec0 +2e46 7846fc00 disable decode_fec0 +2e47 7844fc00 disable enable_crc +2e48 7843fc00 disable enable_white +2e49 2030a8f9 branch shutdown_radio ,is_rx +2e4a 37d38200 until null ,tx_clear +2e4b 20000064 nop 100 +2e4c 202028f9 branch shutdown_radio + +g24_sync_timeout: +2e4d 20402e4f call rssi_noise +2e4e 20202e45 branch g24_end_of_packet + +rssi_noise: +2e4f 204029bb call save_rssi +2e50 207a0000 rtn blank +2e51 1a60a2ea add regc ,offset_rssi_noise_index ,rega +2e52 ea288000 ifetcht 1 ,rega +2e53 da200d9e arg mem_rssi_noise_buffer ,rega +2e54 20402e58 call rssi_noise_store +2e55 1a608aea add regc ,offset_rssi_noise_index ,contw + +g24_contw_istoret_1byte: +2e56 e0a88000 istoret 1 ,contw +2e57 20600000 rtn + +rssi_noise_store: +2e58 da4000ff arg rssi_buf_len_noise ,regb +2e59 20202e5a branch rssi_store + +rssi_store: +2e5a 1a227e00 copy rega ,pdata +2e5b 98408a00 iadd temp ,contw +2e5c 68008018 fetch 1 ,mem_rssi +2e5d e0a08000 istore 1 ,contw +2e5e 18408401 increase 1 ,temp +2e5f 1a427e00 copy regb ,pdata +2e60 98410400 iand_into temp +2e61 20600000 rtn + +rssi_average: +2e62 d8400000 arg 0 ,temp +2e63 1a220c00 copy rega ,contr + +rssi_average_loop: +2e64 e8c08000 ifetch 1 ,contr +2e65 98408400 iadd temp ,temp +2e66 c2002e64 loop rssi_average_loop +2e67 184c8400 rshift8 temp ,temp +2e68 20600000 rtn + +g24_power_ctrl_init: +2e69 20402c7a call g24_head_ptr2regc +2e6a 20402e9f call g24_power_ctrl_incrs_level1 +2e6b 58000001 setarg 1 +2e6c 20403272 call g24_store_mem_power_ctrl_level + +g24_power_ctrl_reinit: +2e6d 58000000 setarg 0 +2e6e 20402e73 call g24_store_mem_power_ctrl_pac +2e6f e0a08000 istore 1 ,contw +2e70 20600000 rtn + +g24_power_ctrl_pac_incrs: +2e71 20403270 call g24_fetch_mem_power_ctrl_pac +2e72 1fe0fe01 increase 1 ,pdata + +g24_store_mem_power_ctrl_pac: +2e73 1a608afc add regc ,offset_power_ctrl_packet_cnt ,contw +2e74 202032b4 branch g24_contw_istore_1byte + +g24_power_ctrl_ack_incrs: +2e75 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega +2e76 ea208000 ifetch 1 ,rega +2e77 1fe0fe01 increase 1 ,pdata +2e78 1a608afd add regc ,offset_power_ctrl_ack_cnt ,contw +2e79 202032b4 branch g24_contw_istore_1byte + +g24_power_ctrl: +2e7a 44dcc017 bpatch patch17_1 ,mem_patch17 +2e7b 20403270 call g24_fetch_mem_power_ctrl_pac +2e7c 1fe67c7c sub pdata ,power_ctrl_max_packet_cnt ,null +2e7d 20610000 rtn positive +2e7e 1a60a2fd add regc ,offset_power_ctrl_ack_cnt ,rega +2e7f ea288000 ifetcht 1 ,rega +2e80 98460400 isub temp ,temp +2e81 20402e6d call g24_power_ctrl_reinit +2e82 58000102 setarg offset_power_ctrl_threshold_up +2e83 9a60a200 iadd regc ,rega +2e84 ea208000 ifetch 1 ,rega +2e85 98467c00 isub temp ,null +2e86 24212e8d nbranch g24_power_ctrl_incrs ,positive +2e87 58000103 setarg offset_power_ctrl_threshold_down +2e88 9a60a200 iadd regc ,rega +2e89 ea208000 ifetch 1 ,rega +2e8a 98467c00 isub temp ,null +2e8b 20212e99 branch g24_power_ctrl_decrs ,positive +2e8c 20600000 rtn + +g24_power_ctrl_incrs: +2e8d 1a60a2fe add regc ,offset_power_ctrl_level ,rega +2e8e ea208000 ifetch 1 ,rega +2e8f c0012e93 beq 2 ,g24_power_ctrl_incrs_level2 +2e90 1fe0fe01 increase 1 ,pdata +2e91 20403272 call g24_store_mem_power_ctrl_level +2e92 c000ae9f beq 1 ,g24_power_ctrl_incrs_level1 + +g24_power_ctrl_incrs_level2: +2e93 5800000a setarg power_ctrl_losspac_thresh_up2 +2e94 204032b0 call g24_store_mem_power_ctrl_threshold_up +2e95 58000000 setarg power_ctrl_losspac_thresh_down2 +2e96 204032b2 call g24_store_mem_power_ctrl_threshold_down +2e97 1a60a2ff add regc ,offset_power_ctrl_txpwr_level2 ,rega +2e98 20202ea5 branch g24_ifetch_rega_store_mem_txpower + +g24_power_ctrl_decrs: +2e99 1a60a2fe add regc ,offset_power_ctrl_level ,rega +2e9a ea208000 ifetch 1 ,rega +2e9b c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 +2e9c 1fe0ffff increase -1 ,pdata +2e9d 20403272 call g24_store_mem_power_ctrl_level +2e9e c0002ea7 beq 0 ,g24_power_ctrl_decrs_level0 + +g24_power_ctrl_decrs_level1: + +g24_power_ctrl_incrs_level1: +2e9f 58000005 setarg power_ctrl_losspac_thresh_up1 +2ea0 204032b0 call g24_store_mem_power_ctrl_threshold_up +2ea1 58000000 setarg power_ctrl_losspac_thresh_down1 +2ea2 204032b2 call g24_store_mem_power_ctrl_threshold_down +2ea3 58000100 setarg offset_power_ctrl_txpwr_level1 + +g24_iadd_offset_mem_txpower: +2ea4 9a60a200 iadd regc ,rega + +g24_ifetch_rega_store_mem_txpower: +2ea5 ea208000 ifetch 1 ,rega +2ea6 2020326a branch g24_store_mem_txpower + +g24_power_ctrl_decrs_level0: +2ea7 58000002 setarg power_ctrl_losspac_thresh_up0 +2ea8 204032b0 call g24_store_mem_power_ctrl_threshold_up +2ea9 58000000 setarg power_ctrl_losspac_thresh_down0 +2eaa 204032b2 call g24_store_mem_power_ctrl_threshold_down +2eab 58000101 setarg offset_power_ctrl_txpwr_level0 +2eac 20202ea4 branch g24_iadd_offset_mem_txpower + +g24_start_pairing_sm1: +2ead 79200026 set1 mark_24g ,mark +2eae 20402c83 call g24_pair_init + +g24_set_pairing_sm_1: +2eaf 58000001 setarg state_24g_pairing_1 +2eb0 20203256 branch g24_store_mem_pairing_sm + +g24_pairing_sm: +2eb1 1a60a28b add regc ,offset_24g_ensure ,rega +2eb2 ea208000 ifetch 1 ,rega +2eb3 c000ffe7 beq ensure_on_24g ,enable_user +2eb4 20403253 call g24_fetch_mem_pairing_sm +2eb5 c000aeb9 beq state_24g_pairing_1 ,g24_pairing_sm_1 +2eb6 c0012ebd beq state_24g_pairing_2 ,g24_pairing_sm_2 +2eb7 c001aec1 beq state_24g_pairing_3 ,g24_pairing_sm_3 +2eb8 20202a8c branch assert + +g24_pairing_sm_1: +2eb9 58000011 setarg state_24g_pairing_1_waiting_ack +2eba 20403256 call g24_store_mem_pairing_sm +2ebb 70119eaa jam 0xaa ,mem_24g_common_temp +2ebc 20202ec4 branch g24_pairing_sm_common + +g24_pairing_sm_2: +2ebd 58000012 setarg state_24g_pairing_2_waiting_ack +2ebe 20403256 call g24_store_mem_pairing_sm +2ebf 70119e55 jam 0x55 ,mem_24g_common_temp +2ec0 20202ec4 branch g24_pairing_sm_common + +g24_pairing_sm_3: +2ec1 58000013 setarg state_24g_pairing_3_waiting_ack +2ec2 20403256 call g24_store_mem_pairing_sm +2ec3 70119e22 jam 0x22 ,mem_24g_common_temp + +g24_pairing_sm_common: +2ec4 2040323a call g24_fetch_mem_data_type +2ec5 1fe17e07 and_into bits_data ,pdata +2ec6 6000919f store 1 ,mem_24g_common_temp + 1 +2ec7 20403224 call g24_fetch_mem_device_addr +2ec8 600211a0 store 4 ,mem_24g_common_temp + 2 + +g24_put_pairing_data_in_buff: +2ec9 7011a400 jam 0 ,mem_24g_common_temp + 6 +2eca da20119e arg mem_24g_common_temp ,rega +2ecb d8400007 arg 7 ,temp +2ecc 20402d4c call g24_put_data_in_buff +2ecd 20402d53 call g24_transmit_prep +2ece 20402d33 call g24_txdata_enable_tx +2ecf 20207fe7 branch enable_user + +g24_paring_mode: +2ed0 20403253 call g24_fetch_mem_pairing_sm +2ed1 c17f8000 rtneq state_24g_pairing_success +2ed2 c008aed6 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack +2ed3 c0092ed9 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack +2ed4 c009aedc beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack +2ed5 20600000 rtn + +g24_pairing_sm_1_waiting_ack: +2ed6 58000002 setarg state_24g_pairing_2 +2ed7 20403256 call g24_store_mem_pairing_sm +2ed8 20202d9f branch g24_transmit_abandon + +g24_pairing_sm_2_waiting_ack: +2ed9 58000003 setarg state_24g_pairing_3 +2eda 20403256 call g24_store_mem_pairing_sm +2edb 20202d9f branch g24_transmit_abandon + +g24_pairing_sm_3_waiting_ack: +2edc 580000ff setarg state_24g_pairing_success +2edd 20403256 call g24_store_mem_pairing_sm +2ede 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +2edf 20407d86 call ui_ipc_send_event +2ee0 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega +2ee1 ea220000 ifetch 4 ,rega +2ee2 2040322c call g24_store_mem_addr +2ee3 20202d9f branch g24_transmit_abandon + +g24_auto_pair_start: +2ee4 793f8026 set0 mark_24g ,mark +2ee5 20402f08 call g24_auto_pair_set_device_info +2ee6 20402f22 call g24_tx_attemp_data_prep + +g24_auto_pair_restart: +2ee7 20403263 call g24_set0_mem_check_dongle_times + +g24_auto_pair_start_loop: +2ee8 200007d0 nop 2000 +2ee9 20403261 call g24_fetch_mem_check_dongle_times +2eea c07fadd4 beq 0xff ,g24_stop_24g_mode +2eeb 20402da4 call g24_transmit_receive_ack +2eec 242c2efa nbranch g24_auto_pair_retry ,sync +2eed 2437aefa nbranch g24_auto_pair_retry ,user3 +2eee 20402dd6 call g24_ackpayload_parse +2eef 20402c7a call g24_head_ptr2regc +2ef0 1a60a292 add regc ,offset_24g_paring_addr ,rega +2ef1 ea2a0000 ifetcht 4 ,rega +2ef2 204030be call g24_fetch_mem_addr_isub_temp +2ef3 2022aead branch g24_start_pairing_sm1 ,zero +2ef4 20402c7a call g24_head_ptr2regc +2ef5 1a60a266 add regc ,offset_24g_rxpayload_add2 ,rega +2ef6 ea220000 ifetch 4 ,rega +2ef7 c0002ee7 beq 0 ,g24_auto_pair_restart +2ef8 2040322c call g24_store_mem_addr +2ef9 20202f1c branch g24_tx_attemp_dongle_succ + +g24_auto_pair_retry: +2efa 20403261 call g24_fetch_mem_check_dongle_times +2efb 1fe0fe01 increase 1 ,pdata +2efc 20403264 call g24_store_mem_check_dongle_times +2efd 20402f04 call g24_fetch_mem_auto_paring_switch +2efe 1fe0fe01 increase 1 ,pdata +2eff 1fe17e01 and_into 1 ,pdata +2f00 20402f06 call g24_store_mem_auto_paring_switch +2f01 c0002f0c beq 0 ,g24_auto_pair_device_attemp +2f02 c000af0e beq 1 ,g24_auto_pair_pair_attemp +2f03 20600000 rtn + +g24_fetch_mem_auto_paring_switch: +2f04 5800018b setarg offset_24g_auto_pair_switch +2f05 202032d0 branch g24_set_rega_ifetch_1byte + +g24_store_mem_auto_paring_switch: +2f06 da20018b arg offset_24g_auto_pair_switch ,rega +2f07 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_auto_pair_set_device_info: +2f08 20403267 call g24_store_mem_tx_power +2f09 20403224 call g24_fetch_mem_device_addr +2f0a 2040322c call g24_store_mem_addr +2f0b 20202c8a branch g24_ch + +g24_auto_pair_device_attemp: +2f0c 20402f08 call g24_auto_pair_set_device_info +2f0d 20202ee8 branch g24_auto_pair_start_loop + +g24_auto_pair_pair_attemp: +2f0e 20402c83 call g24_pair_init +2f0f 20202ee8 branch g24_auto_pair_start_loop + +g24_start_24g_mode: +2f10 793f8026 set0 mark_24g ,mark +2f11 20402c8a call g24_ch +2f12 20403253 call g24_fetch_mem_pairing_sm +2f13 c1ff8000 rtnne state_24g_pairing_success +2f14 20402f22 call g24_tx_attemp_data_prep +2f15 20403263 call g24_set0_mem_check_dongle_times + +g24_tx_attemp_dongle_loop: +2f16 200007d0 nop 2000 +2f17 20403261 call g24_fetch_mem_check_dongle_times +2f18 c07fadd4 beq 0xff ,g24_stop_24g_mode +2f19 20402da4 call g24_transmit_receive_ack +2f1a 242c2f27 nbranch g24_attemp_txdata_retry ,sync +2f1b 2437af27 nbranch g24_attemp_txdata_retry ,user3 + +g24_tx_attemp_dongle_succ: +2f1c 79200026 set1 mark_24g ,mark +2f1d 20403263 call g24_set0_mem_check_dongle_times +2f1e 580000ff setarg state_24g_pairing_success +2f1f 20403256 call g24_store_mem_pairing_sm + +g24_app_tx_attempt_success: +2f20 700a993c jam bt_evt_24g_attempt_success ,mem_fifo_temp +2f21 20207d86 branch ui_ipc_send_event + +g24_tx_attemp_data_prep: +2f22 79200027 set1 mark_24g_conext ,mark +2f23 70119eff jam 0xff ,mem_24g_common_temp +2f24 2040323a call g24_fetch_mem_data_type +2f25 20402d77 call g24_put_data_in_buff_pre +2f26 20202d53 branch g24_transmit_prep + +g24_attemp_txdata_retry: +2f27 20403261 call g24_fetch_mem_check_dongle_times +2f28 1fe0fe01 increase 1 ,pdata +2f29 20403264 call g24_store_mem_check_dongle_times +2f2a 20402c8a call g24_ch +2f2b 20202f16 branch g24_tx_attemp_dongle_loop + +g24_check_51cmd_start_24g: +2f2c 20403267 call g24_store_mem_tx_power +2f2d 580000ff setarg state_24g_pairing_success +2f2e 20403256 call g24_store_mem_pairing_sm +2f2f 20202f10 branch g24_start_24g_mode + +dongle_init: +2f30 44dd4017 bpatch patch17_2 ,mem_patch17 +2f31 20402c7a call g24_head_ptr2regc +2f32 580031b0 setarg dongle_rxdata_type1 +2f33 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw +2f34 e0a10000 istore 2 ,contw +2f35 20402f3d call g24_receive_init +2f36 204048ea call usb_init +2f37 204032b6 call g24_fetch_mem_pair_mode +2f38 44ddc017 bpatch patch17_3 ,mem_patch17 +2f39 c0003055 beq 0x00 ,dongle_auto_bind +2f3a c000af45 beq 0x01 ,dongle_pc_bind +2f3b c007af41 beq 0x0f ,dongle_all_powerful +2f3c 20202a8c branch assert + +g24_receive_init: +2f3d 2040326c call g24_store_mem_tx_power_temp +2f3e df200080 arg 0x80 ,loopcnt +2f3f d8a00d9e arg mem_rssi_noise_buffer ,contw +2f40 20207ec6 branch memset0 + +dongle_all_powerful: +2f41 20402f4c call dongle_check_mode + +dongle_all_powerful_loop: +2f42 20402f4f call g24_dongle_work_mode +2f43 204048d3 call usb_isr +2f44 20202f42 branch dongle_all_powerful_loop + +dongle_pc_bind: +2f45 44de4017 bpatch patch17_4 ,mem_patch17 +2f46 20402f4c call dongle_check_mode + +dongle_pc_bind_loop: +2f47 20402f4f call g24_dongle_work_mode +2f48 20402fbd call g24_dongle_bind_mode +2f49 204048d3 call usb_isr +2f4a 20403019 call dongle_usb_dispatch +2f4b 20202f47 branch dongle_pc_bind_loop + +dongle_check_mode: +2f4c 20403291 call g24_set_work_mem_dongle_work_mode +2f4d 20403296 call g24_set0_mem_dongle_mode_init +2f4e 20203299 branch g24_set0_mem_ackpayload_enable + +g24_dongle_work_mode: +2f4f 2040328f call g24_fetch_mem_dongle_work_mode +2f50 c1800000 rtnne dongle_work + +g24_dongle_work_mode_start: +2f51 20402f55 call g24_dongle_work_init +2f52 20402f65 call g24_ch_process +2f53 2040316b call g24_receive_packet_start +2f54 20202f96 branch g24_blank_data_process + +g24_dongle_work_init: +2f55 20403294 call g24_fetch_mem_dongle_mode_init +2f56 c3800000 rtnbit1 dongle_work +2f57 79207e00 set1 dongle_work ,pdata +2f58 20403297 call g24_store_mem_dongle_mode_init +2f59 20403267 call g24_store_mem_tx_power +2f5a 20403299 call g24_set0_mem_ackpayload_enable +2f5b 700d3800 jam 0 ,mem_usb_tx_enable +2f5c 2040324f call g24_set1_mem_abort_pac +2f5d 20402f61 call g24_dongle_init + +g24_rx_interrupt_clear: +2f5e 1a608a00 add regc ,offset_24g_rxbuf ,contw +2f5f df200042 arg 66 ,loopcnt +2f60 20207ed4 branch clear_mem + +g24_dongle_init: +2f61 20403231 call g24_set0_mem_pid +2f62 2040327d call g24_fetch_mem_rx_addr +2f63 2040322c call g24_store_mem_addr +2f64 20202c8a branch g24_ch + +g24_ch_process: +2f65 44dec017 bpatch patch17_5 ,mem_patch17 +2f66 2040324c call g24_fetch_mem_abort_pac +2f67 c000af8d beq 1 ,g24_noise_rssi +2f68 20403245 call g24_fetch_mem_hop_pac +2f69 c000ac8a beq 1 ,g24_ch +2f6a 58000136 setarg offset_24g_hop_btclk +2f6b 9a60a200 iadd regc ,rega +2f6c ea2a0000 ifetcht 4 ,rega +2f6d 1c427e00 copy clkn_bt ,pdata +2f6e 98467c00 isub temp ,null +2f6f 24412d18 ncall g24_timer_timeout ,positive +2f70 1fe22400 copy pdata ,regb +2f71 58000136 setarg offset_24g_hop_btclk +2f72 9a60a200 iadd regc ,rega +2f73 ea220000 ifetch 4 ,rega +2f74 1fe20400 copy pdata ,temp +2f75 5800013a setarg offset_24g_hop_interval +2f76 9a60a200 iadd regc ,rega +2f77 18427e00 copy temp ,pdata +2f78 ea288000 ifetcht 1 ,rega +2f79 98408400 iadd temp ,temp +2f7a 1a427e00 copy regb ,pdata +2f7b 98467c00 isub temp ,null +2f7c 24610000 nrtn positive +2f7d 793ffe1c set0 28 ,pdata +2f7e 58000136 setarg offset_24g_hop_btclk +2f7f 9a608a00 iadd regc ,contw +2f80 e0a20000 istore 4 ,contw + +g24_ch_update: +2f81 20402c8a call g24_ch +2f82 20403278 call g24_fetch_mem_rf_laststa +2f83 1fe0fe01 increase 1 ,pdata +2f84 2040327b call g24_store_mem_rf_laststa +2f85 c1810000 rtnne 2 +2f86 2040327a call g24_set0_mem_rf_laststa +2f87 2020324f branch g24_set1_mem_abort_pac + +g24_ch_timer_reinit: +2f88 1c427e00 copy clkn_bt ,pdata +2f89 da200136 arg offset_24g_hop_btclk ,rega +2f8a 204032bf call g24_set_contw_with_temp +2f8b e0a20000 istore 4 ,contw +2f8c 2020327a branch g24_set0_mem_rf_laststa + +g24_noise_rssi: +2f8d da200d9e arg mem_rssi_noise_buffer ,rega +2f8e 20402f94 call g24_noise_rssi_average +2f8f 1a608aeb add regc ,offset_rssi_noise_avg ,contw +2f90 e0a88000 istoret 1 ,contw +2f91 18467c50 sub temp ,rssi_thresh_noise ,null +2f92 24610000 nrtn positive +2f93 20202c8a branch g24_ch + +g24_noise_rssi_average: +2f94 df200100 arg rssi_buf_len_noise + 1 ,loopcnt +2f95 20202e62 branch rssi_average + +g24_blank_data_process: +2f96 20402f99 call g24_ms_blank_data +2f97 20402fa5 call g24_kb_blank_data +2f98 20202fb1 branch g24_kb_mul_blank_data + +g24_ms_blank_data: +2f99 58000180 setarg offset_24g_ms_blank_data_enable +2f9a 204032d0 call g24_set_rega_ifetch_1byte +2f9b 207a0000 rtn blank +2f9c d8e0000b arg timer_ms_blank ,queue +2f9d 20407f16 call timer_check +2f9e 247a0000 nrtn blank +2f9f 204032a7 call g24_set0_mem_ms_blank_data_enable + +g24_ms_blank_data_2usb: +2fa0 58000001 setarg ms_report_id +2fa1 60008d54 store 1 ,mem_usb_mouse_data +2fa2 58000000 setarg 0 +2fa3 e0a38000 istore 7 ,contw +2fa4 202031b8 branch g24_data_type1_usbtx_enable + +g24_kb_blank_data: +2fa5 5800017e setarg offset_24g_kb_blank_data_enable +2fa6 204032d0 call g24_set_rega_ifetch_1byte +2fa7 207a0000 rtn blank +2fa8 d8e0000e arg timer_kb_blank ,queue +2fa9 20407f16 call timer_check +2faa 247a0000 nrtn blank +2fab 204032aa call g24_set0_mem_kb_blank_data_enable + +g24_kb_blank_data_2usb: +2fac d8a00d64 arg mem_usb_kb_data ,contw +2fad df200002 arg 2 ,loopcnt +2fae 20407ec6 call memset0 +2faf 700d6400 jam kb_normal_report_id ,mem_usb_kb_data +2fb0 202031ed branch g24_kb_data_into_ep1_fifo + +g24_kb_mul_blank_data: +2fb1 5800017f setarg offset_24g_kb_mul_blank_data_enable +2fb2 204032d0 call g24_set_rega_ifetch_1byte +2fb3 207a0000 rtn blank +2fb4 d8e0000c arg timer_kb_mul_blank ,queue +2fb5 20407f16 call timer_check +2fb6 247a0000 nrtn blank +2fb7 204032ad call g24_set0_mem_kb_mul_blank_data_enable + +g24_kb_mul_blank_data_2usb: +2fb8 d8a00d74 arg mem_usb_kb_multikey ,contw +2fb9 df200002 arg 2 ,loopcnt +2fba 20407ec6 call memset0 +2fbb 700d7403 jam kb_multikey_report_id ,mem_usb_kb_multikey +2fbc 20203207 branch g24_kb_mul_data_into_ep2_fifo + +g24_dongle_bind_mode: +2fbd 2040328f call g24_fetch_mem_dongle_work_mode +2fbe c1808000 rtnne dongle_bind +2fbf 20402fc1 call g24_dongle_bind_init +2fc0 20202fcb branch g24_dongle_bind_data_process + +g24_dongle_bind_init: +2fc1 20403294 call g24_fetch_mem_dongle_mode_init +2fc2 c3808000 rtnbit1 dongle_bind +2fc3 79207e01 set1 dongle_bind ,pdata +2fc4 20403297 call g24_store_mem_dongle_mode_init +2fc5 2040329c call g24_set1_mem_ackpayload_enable +2fc6 20402c83 call g24_pair_init +2fc7 58000000 setarg 0 +2fc8 da200106 arg offset_dongle_ms_bind_step ,rega +2fc9 204032bf call g24_set_contw_with_temp +2fca 202032c5 branch g24_contw_istore_3byte + +g24_dongle_bind_data_process: +2fcb 2040316e call g24_receive_transmit_ack +2fcc 2437af5e nbranch g24_rx_interrupt_clear ,user3 +2fcd 1a608c00 add regc ,offset_24g_rxbuf ,contr +2fce 58000109 setarg offset_24g_rxdata_temp +2fcf 9a608a00 iadd regc ,contw +2fd0 df200008 arg 8 ,loopcnt +2fd1 20407f01 call memcpy +2fd2 5800010b setarg offset_24g_rxdata_temp_add2 +2fd3 204032d0 call g24_set_rega_ifetch_1byte +2fd4 c0552fd9 beq datatype_bind ,g24_dongle_bind_first_step +2fd5 c02aafed beq datatype_config ,g24_dongle_bind_second_step +2fd6 c0113001 beq datatype_ok ,g24_dongle_bind_third_step +2fd7 c07fb212 beq 0xff ,g24_data_attemp +2fd8 20202f5e branch g24_rx_interrupt_clear + +g24_dongle_bind_first_step: +2fd9 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +2fda c000afdd beq bind_mouse ,g24_dongle_bind_first_step_mouse +2fdb c0012fe8 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard +2fdc 20600000 rtn + +g24_dongle_bind_first_step_mouse: +2fdd 58000001 setarg 1 +2fde 20402ff7 call g24_store_mem_ms_bind_step + +g24_dongle_bind_ms_payload_cfg: +2fdf 58000001 setarg datatype_mouse +2fe0 20403289 call g24_store_mem_bind_payload + +g24_dongle_bind_payload_cfg: +2fe1 58000080 setarg 0x80 +2fe2 da200130 arg offset_24g_bind_payload_add1 ,rega +2fe3 204032b3 call g24_set_contw_with_regb_store_1byte +2fe4 2040327d call g24_fetch_mem_rx_addr +2fe5 da200131 arg offset_24g_bind_payload_add2 ,rega +2fe6 204032bf call g24_set_contw_with_temp +2fe7 2020322d branch g24_contw_istore_4byte + +g24_dongle_bind_first_step_keyboard: +2fe8 58000001 setarg 1 +2fe9 20402fff call g24_store_mem_kb_bind_step + +g24_dongle_bind_kb_payload_cfg: +2fea 58000002 setarg datatype_keyboard +2feb 20403289 call g24_store_mem_bind_payload +2fec 20202fe1 branch g24_dongle_bind_payload_cfg + +g24_dongle_bind_second_step: +2fed 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +2fee c000aff1 beq bind_mouse ,g24_dongle_bind_second_step_mouse +2fef c0012ff9 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard +2ff0 20600000 rtn + +g24_dongle_bind_second_step_mouse: +2ff1 20402fdf call g24_dongle_bind_ms_payload_cfg +2ff2 58000106 setarg offset_dongle_ms_bind_step +2ff3 204032d0 call g24_set_rega_ifetch_1byte +2ff4 c000aff6 beq 1 ,g24_dongle_ms_bind_step_set2 +2ff5 20600000 rtn + +g24_dongle_ms_bind_step_set2: +2ff6 58000002 setarg 2 + +g24_store_mem_ms_bind_step: +2ff7 da200106 arg offset_dongle_ms_bind_step ,rega +2ff8 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_second_step_keyboard: +2ff9 20402fea call g24_dongle_bind_kb_payload_cfg +2ffa 58000107 setarg offset_dongle_kb_bind_step +2ffb 204032d0 call g24_set_rega_ifetch_1byte +2ffc c000affe beq 1 ,g24_dongle_kb_bind_step_set2 +2ffd 20600000 rtn + +g24_dongle_kb_bind_step_set2: +2ffe 58000002 setarg 2 + +g24_store_mem_kb_bind_step: +2fff da200107 arg offset_dongle_kb_bind_step ,rega +3000 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_dongle_bind_third_step: +3001 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +3002 c000b005 beq bind_mouse ,g24_dongle_bind_third_step_mouse +3003 c0013011 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard +3004 20600000 rtn + +g24_dongle_bind_third_step_mouse: +3005 58000106 setarg offset_dongle_ms_bind_step +3006 204032d0 call g24_set_rega_ifetch_1byte +3007 c0013009 beq 2 ,g24_dongle_ms_bind_step_success +3008 20600000 rtn + +g24_dongle_ms_bind_step_success: +3009 2040328b call g24_fetch_mem_bind_device_status +300a 1fe1fe01 or_into 0x01 ,pdata +300b 2040328d call g24_store_mem_bind_device_status + +g24_dongle_bind_exit: +300c 58000000 setarg 0 +300d 58000106 setarg offset_dongle_ms_bind_step +300e 9a608a00 iadd regc ,contw +300f e0a10000 istore 2 ,contw +3010 20202f5e branch g24_rx_interrupt_clear + +g24_dongle_bind_third_step_keyboard: +3011 58000107 setarg offset_dongle_kb_bind_step +3012 204032d0 call g24_set_rega_ifetch_1byte +3013 c0803015 bne 0 ,g24_dongle_kb_bind_step_success +3014 20600000 rtn + +g24_dongle_kb_bind_step_success: +3015 2040328b call g24_fetch_mem_bind_device_status +3016 1fe1fe02 or_into 0x02 ,pdata +3017 2040328d call g24_store_mem_bind_device_status +3018 2020300c branch g24_dongle_bind_exit + +dongle_usb_dispatch: +3019 68008d50 fetch 1 ,mem_usb0_get_set_report +301a 207a0000 rtn blank +301b 700d5000 jam 0 ,mem_usb0_get_set_report +301c 68010d4e fetch 2 ,mem_usb_setup_bvalue_temp +301d d84002ba arg pc_set_report ,temp +301e 98467c00 isub temp ,null +301f 24628000 nrtn zero +3020 68008cb6 fetch 1 ,mem_usb0_set_report_data +3021 c1dd0000 rtnne pc_report_id +3022 68008cb7 fetch 1 ,mem_usb0_set_report_data + 1 +3023 44df4017 bpatch patch17_6 ,mem_patch17 +3024 c050303b beq command_mode ,dongle_dispose_cmd_mode +3025 c050b02c beq command_bind ,dongle_dispose_cmd_bind +3026 c0533041 beq command_current_project ,dongle_dispose_cmd_current_project +3027 c053b043 beq command_current_mode ,dongle_dispose_cmd_current_mode +3028 c054b049 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version +3029 c058304d beq command_user_defined ,dongle_dispose_cmd_user_defined + +usb0_data_ready_report_set0: +302a 700d4200 jam 0 ,mem_usb0_data_ready_report +302b 20600000 rtn + +dongle_dispose_cmd_bind: +302c 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 +302d c000b031 beq com_bind_get ,dongle_dispose_cmd_get_bind +302e c0423034 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +302f c053b039 beq com_read_mode ,dongle_dispose_cmd_read_mode +3030 2020302a branch usb0_data_ready_report_set0 + +dongle_dispose_cmd_get_bind: +3031 2040328b call g24_fetch_mem_bind_device_status +3032 60008cf7 store 1 ,mem_usb0_get_report_data + 1 +3033 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_exit_bind: +3034 20403291 call g24_set_work_mem_dongle_work_mode +3035 20403296 call g24_set0_mem_dongle_mode_init +3036 2040328b call g24_fetch_mem_bind_device_status +3037 60008cf7 store 1 ,mem_usb0_get_report_data + 1 +3038 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_read_mode: + +dongle_dispose_in_bind_mode: +3039 700cf7a1 jam command_bind ,mem_usb0_get_report_data + 1 +303a 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_mode: +303b 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 +303c c040b03e beq com_mode_bind ,dongle_enter_bind_mode +303d 2020302a branch usb0_data_ready_report_set0 + +dongle_enter_bind_mode: +303e 20403090 call g24_bind_mode_enable + +usb0_data_ready_report_set1: +303f 700d4201 jam 1 ,mem_usb0_data_ready_report +3040 20600000 rtn + +dongle_dispose_cmd_current_project: +3041 700cf715 jam product_id ,mem_usb0_get_report_data + 1 +3042 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_mode: +3043 2040328f call g24_fetch_mem_dongle_work_mode +3044 c0003047 beq dongle_work ,dongle_dispose_in_work_mode +3045 c000b039 beq dongle_bind ,dongle_dispose_in_bind_mode +3046 20600000 rtn + +dongle_dispose_in_work_mode: +3047 700cf7a0 jam command_mode ,mem_usb0_get_report_data + 1 +3048 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_current_fw_version: +3049 700cf700 jam fw_version0 ,mem_usb0_get_report_data + 1 +304a 700cf800 jam fw_version1 ,mem_usb0_get_report_data + 2 +304b 700cf901 jam fw_version2 ,mem_usb0_get_report_data + 3 +304c 2020303f branch usb0_data_ready_report_set1 + +dongle_dispose_cmd_user_defined: +304d 2040329c call g24_set1_mem_ackpayload_enable +304e 68008cb8 fetch 1 ,mem_usb0_set_report_data + 2 +304f 1fe0fe02 increase 2 ,pdata +3050 1fe27200 copy pdata ,loopcnt +3051 d8c00cb6 arg mem_usb0_set_report_data ,contr +3052 5800013c setarg offset_24g_ackpayload +3053 9a608a00 iadd regc ,contw +3054 20207f01 branch memcpy + +dongle_auto_bind: +3055 44dfc017 bpatch patch17_7 ,mem_patch17 +3056 2040307d call g24_mode_switch_init + +dongle_auto_bind_loop: +3057 20402c7f call g24_receive_process +3058 204048d3 call usb_isr +3059 20203057 branch dongle_auto_bind_loop + +g24_dongle_work_mode_auto: +305a 2040328f call g24_fetch_mem_dongle_work_mode +305b c1800000 rtnne dongle_work +305c 20402f51 call g24_dongle_work_mode_start +305d 20203098 branch g24_rx_nodata_process + +g24_dongle_bind_mode_auto: +305e 2040328f call g24_fetch_mem_dongle_work_mode +305f c1808000 rtnne dongle_bind +3060 20402fc1 call g24_dongle_bind_init +3061 20402fcb call g24_dongle_bind_data_process +3062 2040328b call g24_fetch_mem_bind_device_status +3063 207a0000 rtn blank +3064 20403286 call g24_set0_mem_mode_switch +3065 20402f4c call dongle_check_mode +3066 20403093 call g24_enable_nodata_timer + +g24_timer_init: +3067 58000000 setarg 0 +3068 1a608aa7 add regc ,offset_24g_tx_btclk ,contw +3069 2020322d branch g24_contw_istore_4byte + +g24_timer_check: +306a 20407fe9 call disable_user +306b 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega +306c ea2a0000 ifetcht 4 ,rega +306d 1c427e00 copy clkn_bt ,pdata +306e 98467c00 isub temp ,null +306f 24412d18 ncall g24_timer_timeout ,positive +3070 1fe22400 copy pdata ,regb +3071 1a60a2a7 add regc ,offset_24g_tx_btclk ,rega +3072 ea220000 ifetch 4 ,rega +3073 1a60a2ab add regc ,offset_24g_interval ,rega +3074 ea288000 ifetcht 1 ,rega +3075 98408400 iadd temp ,temp +3076 1a427e00 copy regb ,pdata +3077 98467c00 isub temp ,null +3078 24610000 nrtn positive +3079 793ffe1c set0 28 ,pdata +307a 1a608aa7 add regc ,offset_24g_tx_btclk ,contw +307b e0a20000 istore 4 ,contw +307c 20207fe7 branch enable_user + +g24_mode_switch_init: +307d 58000001 setarg 1 +307e 20403287 call g24_store_mem_mode_switch +307f 20403283 call g24_set0_mem_time_slice +3080 580000ff setarg 0xff +3081 1a608aab add regc ,offset_24g_interval ,contw +3082 e0a08000 istore 1 ,contw +3083 20203067 branch g24_timer_init + +g24_mode_switch: +3084 5800015c setarg offset_24g_mode_switch +3085 204032d0 call g24_set_rega_ifetch_1byte +3086 207a0000 rtn blank +3087 2040306a call g24_timer_check +3088 24740000 nrtn user +3089 20403281 call g24_fetch_mem_time_slice +308a 1fe0fe01 increase 1 ,pdata +308b 1fe17e01 and_into 1 ,pdata +308c 20403284 call g24_store_mem_time_slice +308d c0002f4c beq 0 ,dongle_check_mode +308e c000b090 beq 1 ,g24_bind_mode_enable +308f 20600000 rtn + +g24_bind_mode_enable: +3090 58000001 setarg dongle_bind +3091 20403292 call g24_store_mem_dongle_work_mode +3092 20203296 branch g24_set0_mem_dongle_mode_init + +g24_enable_nodata_timer: +3093 58000001 setarg 1 +3094 204032a5 call g24_store_mem_nodata_timer_enable + +g24_enable_nodata_timer_init: +3095 58000280 setarg timer_nodata_delay +3096 d8e00008 arg timer_nodata ,queue +3097 20207f08 branch timer_init + +g24_rx_nodata_process: +3098 204032a2 call g24_fetch_mem_nodata_timer_enable +3099 207a0000 rtn blank +309a d8e00008 arg timer_nodata ,queue +309b 20407f16 call timer_check +309c 247a0000 nrtn blank +309d 204032a4 call g24_set0_mem_nodata_timer_enable +309e 58000007 setarg dongle_search +309f 20403292 call g24_store_mem_dongle_work_mode +30a0 20403296 call g24_set0_mem_dongle_mode_init +30a1 20202f5e branch g24_rx_interrupt_clear + +g24_dongle_search_mode_auto: +30a2 44e04018 bpatch patch18_0 ,mem_patch18 +30a3 2040328f call g24_fetch_mem_dongle_work_mode +30a4 c1838000 rtnne dongle_search +30a5 204030cb call g24_dongle_search_mode_init +30a6 204030e0 call g24_rx_auto_addr_ch_search +30a7 2040316e call g24_receive_transmit_ack +30a8 2437af5e nbranch g24_rx_interrupt_clear ,user3 +30a9 204030bc call g24_dongle_search_addr_check +30aa 2042b172 call g24_receive_packet_parse ,zero +30ab 20402f4c call dongle_check_mode +30ac 20403294 call g24_fetch_mem_dongle_mode_init +30ad 79207e00 set1 dongle_work ,pdata +30ae 20403297 call g24_store_mem_dongle_mode_init +30af 20402f5e call g24_rx_interrupt_clear +30b0 20403093 call g24_enable_nodata_timer +30b1 204030bc call g24_dongle_search_addr_check +30b2 2022b0c1 branch g24_dg_ch_num_reinit ,zero +30b3 58000164 setarg offset_24g_kb_addr +30b4 204032d3 call g24_set_rega_ifetcht_4byte +30b5 204030be call g24_fetch_mem_addr_isub_temp +30b6 2022b0c5 branch g24_kb_ch_num_reinit ,zero +30b7 58000160 setarg offset_24g_mouse_addr +30b8 204032d3 call g24_set_rega_ifetcht_4byte +30b9 204030be call g24_fetch_mem_addr_isub_temp +30ba 2022b0c8 branch g24_ms_ch_num_reinit ,zero +30bb 20600000 rtn + +g24_dongle_search_addr_check: +30bc 5800012b setarg offset_24g_rx_addr +30bd 204032d3 call g24_set_rega_ifetcht_4byte + +g24_fetch_mem_addr_isub_temp: +30be 2040322a call g24_fetch_mem_addr +30bf 98467c00 isub temp ,null +30c0 20600000 rtn + +g24_dg_ch_num_reinit: +30c1 58000182 setarg offset_24g_dg_ch_number +30c2 204032d0 call g24_set_rega_ifetch_1byte + +g24_current_ch_num_reinit: +30c3 1a608a91 add regc ,offset_24g_current_ch_number ,contw +30c4 202032b4 branch g24_contw_istore_1byte + +g24_kb_ch_num_reinit: +30c5 58000185 setarg offset_24g_kb_ch_number +30c6 204032d0 call g24_set_rega_ifetch_1byte +30c7 202030c3 branch g24_current_ch_num_reinit + +g24_ms_ch_num_reinit: +30c8 58000188 setarg offset_24g_ms_ch_number +30c9 204032d0 call g24_set_rega_ifetch_1byte +30ca 202030c3 branch g24_current_ch_num_reinit + +g24_dongle_search_mode_init: +30cb 20403294 call g24_fetch_mem_dongle_mode_init +30cc c3838000 rtnbit1 dongle_search +30cd 79207e07 set1 dongle_search ,pdata +30ce 20403297 call g24_store_mem_dongle_mode_init +30cf 20403283 call g24_set0_mem_time_slice +30d0 2040329c call g24_set1_mem_ackpayload_enable +30d1 58000000 setarg 0 +30d2 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw +30d3 e0a18000 istore 3 ,contw +30d4 da200183 arg offset_24g_dg_config_ch_once ,rega +30d5 204032bf call g24_set_contw_with_temp +30d6 e0a38000 istore 7 ,contw +30d7 204030bc call g24_dongle_search_addr_check +30d8 24628000 nrtn zero +30d9 1a60a291 add regc ,offset_24g_current_ch_number ,rega +30da ea208000 ifetch 1 ,rega +30db da200182 arg offset_24g_dg_ch_number ,rega +30dc 204032b3 call g24_set_contw_with_regb_store_1byte +30dd 1a60a290 add regc ,offset_24g_ch ,rega +30de ea208000 ifetch 1 ,rega +30df 2020314a branch g24_store_mem_dg_last_ch + +g24_rx_auto_addr_ch_search: +30e0 44e0c018 bpatch patch18_1 ,mem_patch18 +30e1 20403281 call g24_fetch_mem_time_slice +30e2 1fe0fe01 increase 1 ,pdata +30e3 1fe17e03 and_into 3 ,pdata +30e4 20403284 call g24_store_mem_time_slice +30e5 c000310e beq 0 ,g24_rx_auto_bind_config_kb +30e6 c000b132 beq 1 ,g24_rx_auto_bind_config_dongle +30e7 c00130ea beq 2 ,g24_rx_auto_bind_config_mouse +30e8 c001b132 beq 3 ,g24_rx_auto_bind_config_dongle +30e9 20600000 rtn + +g24_rx_auto_bind_config_mouse: +30ea 20402fdf call g24_dongle_bind_ms_payload_cfg +30eb 58000160 setarg offset_24g_mouse_addr +30ec 2040327e call g24_set_rega_ifetch_4byte +30ed 203a30e0 branch g24_rx_auto_addr_ch_search ,blank +30ee 2040322c call g24_store_mem_addr +30ef 58000189 setarg offset_24g_ms_config_ch_once +30f0 204032d0 call g24_set_rega_ifetch_1byte +30f1 205a3108 call g24_ms_config_ch_once ,blank +30f2 58000187 setarg offset_24g_ms_last_ch +30f3 204032d0 call g24_set_rega_ifetch_1byte +30f4 2040322f call g24_store_mem_ch +30f5 1a60a2f7 add regc ,offset_rssi_noise_ms_index ,rega +30f6 ea288000 ifetcht 1 ,rega +30f7 da200f9e arg mem_rssi_noise_ms_buffer ,rega +30f8 20402e58 call rssi_noise_store +30f9 1a608af7 add regc ,offset_rssi_noise_ms_index ,contw +30fa e0a88000 istoret 1 ,contw +30fb 20402f94 call g24_noise_rssi_average +30fc 1a608afa add regc ,offset_rssi_noise_ms_avg ,contw +30fd e0a88000 istoret 1 ,contw +30fe 18467c50 sub temp ,rssi_thresh_noise ,null +30ff 24610000 nrtn positive +3100 58000188 setarg offset_24g_ms_ch_number +3101 20403275 call g24_set_rega_ifetcht_1byte +3102 20402c90 call g24_ch_temp_incre_size4 +3103 da200188 arg offset_24g_ms_ch_number ,rega +3104 204032c8 call g24_set_contw_with_regb2 +3105 e0a88000 istoret 1 ,contw + +g24_store_mem_ms_last_ch: +3106 da200187 arg offset_24g_ms_last_ch ,rega +3107 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_ms_config_ch_once: +3108 58000001 setarg 1 +3109 da200189 arg offset_24g_ms_config_ch_once ,rega +310a 204032b3 call g24_set_contw_with_regb_store_1byte +310b d8400000 arg 0 ,temp +310c 20402c94 call g24_ch_calc +310d 20203106 branch g24_store_mem_ms_last_ch + +g24_rx_auto_bind_config_kb: +310e 20402fea call g24_dongle_bind_kb_payload_cfg +310f 58000164 setarg offset_24g_kb_addr +3110 2040327e call g24_set_rega_ifetch_4byte +3111 203a30e0 branch g24_rx_auto_addr_ch_search ,blank +3112 2040322c call g24_store_mem_addr +3113 58000186 setarg offset_24g_kb_config_ch_once +3114 204032d0 call g24_set_rega_ifetch_1byte +3115 205a312c call g24_kb_config_ch_once ,blank +3116 58000184 setarg offset_24g_kb_last_ch +3117 204032d0 call g24_set_rega_ifetch_1byte +3118 2040322f call g24_store_mem_ch +3119 1a60a2f6 add regc ,offset_rssi_noise_kb_index ,rega +311a ea288000 ifetcht 1 ,rega +311b da20109e arg mem_rssi_noise_kb_buffer ,rega +311c 20402e58 call rssi_noise_store +311d 1a608af6 add regc ,offset_rssi_noise_kb_index ,contw +311e e0a88000 istoret 1 ,contw +311f 20402f94 call g24_noise_rssi_average +3120 1a608af9 add regc ,offset_rssi_noise_kb_avg ,contw +3121 e0a88000 istoret 1 ,contw +3122 18467c50 sub temp ,rssi_thresh_noise ,null +3123 24610000 nrtn positive +3124 58000185 setarg offset_24g_kb_ch_number +3125 20403275 call g24_set_rega_ifetcht_1byte +3126 20402c90 call g24_ch_temp_incre_size4 +3127 da200185 arg offset_24g_kb_ch_number ,rega +3128 204032c8 call g24_set_contw_with_regb2 +3129 e0a88000 istoret 1 ,contw + +g24_store_mem_kb_last_ch: +312a da200184 arg offset_24g_kb_last_ch ,rega +312b 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_kb_config_ch_once: +312c 58000001 setarg 1 +312d da200186 arg offset_24g_kb_config_ch_once ,rega +312e 204032b3 call g24_set_contw_with_regb_store_1byte +312f d8400000 arg 0 ,temp +3130 20402c94 call g24_ch_calc +3131 2020312a branch g24_store_mem_kb_last_ch + +g24_rx_auto_bind_config_dongle: +3132 20402fdf call g24_dongle_bind_ms_payload_cfg +3133 2040327d call g24_fetch_mem_rx_addr +3134 2040322c call g24_store_mem_addr +3135 58000183 setarg offset_24g_dg_config_ch_once +3136 204032d0 call g24_set_rega_ifetch_1byte +3137 205a314c call g24_dg_config_ch_once ,blank +3138 2040314f call g24_dg_store_config_ch +3139 1a60a2f5 add regc ,offset_rssi_noise_dg_index ,rega +313a ea288000 ifetcht 1 ,rega +313b da200e9e arg mem_rssi_noise_dg_buffer ,rega +313c 20402e58 call rssi_noise_store +313d 1a608af5 add regc ,offset_rssi_noise_dg_index ,contw +313e e0a88000 istoret 1 ,contw +313f 20402f94 call g24_noise_rssi_average +3140 1a608af8 add regc ,offset_rssi_noise_dg_avg ,contw +3141 e0a88000 istoret 1 ,contw +3142 18467c50 sub temp ,rssi_thresh_noise ,null +3143 24610000 nrtn positive +3144 58000182 setarg offset_24g_dg_ch_number +3145 20403275 call g24_set_rega_ifetcht_1byte +3146 20402c90 call g24_ch_temp_incre_size4 +3147 da200182 arg offset_24g_dg_ch_number ,rega +3148 204032c8 call g24_set_contw_with_regb2 +3149 e0a88000 istoret 1 ,contw + +g24_store_mem_dg_last_ch: +314a da200181 arg offset_24g_dg_last_ch ,rega +314b 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_dg_config_ch_once: +314c 58000001 setarg 1 +314d da200183 arg offset_24g_dg_config_ch_once ,rega +314e 204032b3 call g24_set_contw_with_regb_store_1byte + +g24_dg_store_config_ch: +314f 58000181 setarg offset_24g_dg_last_ch +3150 204032d0 call g24_set_rega_ifetch_1byte +3151 2020322f branch g24_store_mem_ch + +g24_transmit_ack: +3152 1a60a200 add regc ,offset_24g_rxbuf ,rega +3153 ea208000 ifetch 1 ,rega +3154 2040323c call g24_store_mem_data_type +3155 20402dde call g24_read_len_pid_crc +3156 2040325f call g24_fetch_mem_rxbuf_add1 +3157 2feffe00 isolate1 bit_ack_24g ,pdata +3158 2020b15c branch g24tx_no_ack ,true + +g24tx_with_ack: +3159 2040315d call g24_ackpayload_prep +315a 20402d53 call g24_transmit_prep +315b 20402df7 call g24_transmit + +g24tx_no_ack: +315c 20202e45 branch g24_end_of_packet + +g24_ackpayload_prep: +315d 44e14018 bpatch patch18_2 ,mem_patch18 +315e 1a608a86 add regc ,offset_24g_datalen ,contw +315f 204032d6 call g24_mem_set0 +3160 5800013b setarg offset_24g_ackpayload_enable +3161 204032d0 call g24_set_rega_ifetch_1byte +3162 207a0000 rtn blank +3163 58000006 setarg 0x06 +3164 1a608a86 add regc ,offset_24g_datalen ,contw +3165 e0a08000 istore 1 ,contw +3166 df200006 arg 0x06 ,loopcnt +3167 5800012f setarg offset_24g_bind_payload +3168 9a608c00 iadd regc ,contr +3169 1a608a22 add regc ,offset_24g_txbuf ,contw +316a 20207f01 branch memcpy + +g24_receive_packet_start: +316b 2040316e call g24_receive_transmit_ack +316c 2437af5e nbranch g24_rx_interrupt_clear ,user3 +316d 20203172 branch g24_receive_packet_parse + +g24_receive_transmit_ack: +316e 20402f5e call g24_rx_interrupt_clear +316f 20402e11 call g24_receive_packet +3170 24778000 nrtn user3 +3171 20203152 branch g24_transmit_ack + +g24_receive_packet_parse: +3172 44e1c018 bpatch patch18_3 ,mem_patch18 +3173 20403188 call g24_receive_packet_parse_pid_crc +3174 24342f5e nbranch g24_rx_interrupt_clear ,user +3175 1a60a284 add regc ,offset_24g_rxdata_length ,rega +3176 ea208000 ifetch 1 ,rega +3177 203a2f5e branch g24_rx_interrupt_clear ,blank +3178 1fe0fe02 increase 2 ,pdata +3179 98007200 iforce loopcnt +317a 1a608c00 add regc ,offset_24g_rxbuf ,contr +317b 58000109 setarg offset_24g_rxdata_temp +317c 9a608a00 iadd regc ,contw +317d 20407f01 call memcpy +317e 20403286 call g24_set0_mem_mode_switch +317f 204032b6 call g24_fetch_mem_pair_mode +3180 205a3093 call g24_enable_nodata_timer ,blank +3181 5800010b setarg offset_24g_rxdata_temp_add2 +3182 204032d0 call g24_set_rega_ifetch_1byte +3183 c000b19e beq 0x01 ,g24_data_type1 +3184 c00131c6 beq 0x02 ,g24_data_type2 +3185 c001b1f2 beq 0x03 ,g24_data_type3 +3186 c07fb212 beq 0xff ,g24_data_attemp +3187 20202f5e branch g24_rx_interrupt_clear + +g24_receive_packet_parse_pid_crc: +3188 20402c7a call g24_head_ptr2regc +3189 20407fe9 call disable_user +318a 1a60a2ca add regc ,offset_24g_sta_pid ,rega +318b ea208000 ifetch 1 ,rega +318c 1a60a2cb add regc ,offset_24g_last_pid ,rega +318d ea288000 ifetcht 1 ,rega +318e 98467c00 isub temp ,null +318f 2442ffe7 ncall enable_user ,zero +3190 1a60a2ca add regc ,offset_24g_sta_pid ,rega +3191 ea208000 ifetch 1 ,rega +3192 1a608acb add regc ,offset_24g_last_pid ,contw +3193 e0a08000 istore 1 ,contw +3194 1a60a2c4 add regc ,offset_24g_sta_crc ,rega +3195 ea218000 ifetch 3 ,rega +3196 1a60a2c7 add regc ,offset_24g_last_crc ,rega +3197 ea298000 ifetcht 3 ,rega +3198 98467c00 isub temp ,null +3199 2442ffe7 ncall enable_user ,zero +319a 1a60a2c4 add regc ,offset_24g_sta_crc ,rega +319b ea218000 ifetch 3 ,rega +319c 1a608ac7 add regc ,offset_24g_last_crc ,contw +319d 202032c5 branch g24_contw_istore_3byte + +g24_data_type1: +319e 20402f88 call g24_ch_timer_reinit +319f 2040324c call g24_fetch_mem_abort_pac +31a0 60008aa2 store 1 ,mem_temp +31a1 20403274 call g24_fetcht_mem_rxdata_temp +31a2 68008aa2 fetch 1 ,mem_temp +31a3 284ffe03 isolate1 bit_abort ,temp +31a4 7920fe00 setflag true ,0 ,pdata +31a5 1a608ab2 add regc ,offset_24g_abort_pac ,contw +31a6 e0a08000 istore 1 ,contw +31a7 c000b216 beq 1 ,g24_data_attemp_mouse +31a8 20403245 call g24_fetch_mem_hop_pac +31a9 20403274 call g24_fetcht_mem_rxdata_temp +31aa 284ffe04 isolate1 bit_hop ,temp +31ab 7920fe00 setflag true ,0 ,pdata +31ac 20403249 call g24_store_mem_hop_pac +31ad 1a60a2de add regc ,offset_24g_cb_rxdata_type1 ,rega +31ae ea210000 ifetch 2 ,rega +31af 20207f9c branch callback_func + +dongle_rxdata_type1: +31b0 58000001 setarg ms_report_id +31b1 60008d54 store 1 ,mem_usb_mouse_data +31b2 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte +31b3 e0a38000 istore 7 ,contw +31b4 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte +31b5 245a31bd ncall g24_ms_enable_blank_data_forcibly ,blank +31b6 2040329e call g24_fetch_mem_rxdata_temp_add3_7byte +31b7 205a31c2 call g24_ms_disable_blank_data_forcibly ,blank + +g24_data_type1_usbtx_enable: +31b8 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data + +g24_data_type1_usbtx_enable_ep2: +31b9 68008d38 fetch 1 ,mem_usb_tx_enable +31ba 79207e02 set1 2 ,pdata +31bb 60008d38 store 1 ,mem_usb_tx_enable +31bc 20600000 rtn + +g24_ms_enable_blank_data_forcibly: +31bd 58000001 setarg 1 +31be 204032a8 call g24_store_mem_ms_blank_data_enable + +g24_ms_enable_blank_data_timer: +31bf 58000140 setarg timer_ms_blank_delay +31c0 d8e0000b arg timer_ms_blank ,queue +31c1 20207f08 branch timer_init + +g24_ms_disable_blank_data_forcibly: +31c2 204032a7 call g24_set0_mem_ms_blank_data_enable + +g24_ms_disable_blank_data_timer: +31c3 58000000 setarg 0 +31c4 d8e0000b arg timer_ms_blank ,queue +31c5 20207f08 branch timer_init + +g24_data_type2: +31c6 20403274 call g24_fetcht_mem_rxdata_temp +31c7 284ffe03 isolate1 bit_abort ,temp +31c8 2020b21b branch g24_data_attemp_kbd ,true +31c9 d8a00d64 arg mem_usb_kb_data ,contw +31ca 204031e0 call g24_data_type2_reverse_data +31cb 68040d64 fetch 8 ,mem_usb_kb_data +31cc 245a31e4 ncall g24_kb_enable_blank_data_forcibly ,blank +31cd 68040d64 fetch 8 ,mem_usb_kb_data +31ce 205a31e9 call g24_kb_disable_blank_data_forcibly ,blank +31cf 20402c7a call g24_head_ptr2regc +31d0 68040d64 fetch 8 ,mem_usb_kb_data +31d1 da200168 arg offset_24g_kb_data_sta_data ,rega +31d2 204032bf call g24_set_contw_with_temp +31d3 e0a40000 istore 8 ,contw +31d4 58000170 setarg offset_24g_kb_data_last_data +31d5 9a60a200 iadd regc ,rega +31d6 ea2c0000 ifetcht 8 ,rega +31d7 98467c00 isub temp ,null +31d8 2442b1ed ncall g24_kb_data_dispose ,zero +31d9 58000168 setarg offset_24g_kb_data_sta_data +31da 9a60a200 iadd regc ,rega +31db ea240000 ifetch 8 ,rega +31dc da200170 arg offset_24g_kb_data_last_data ,rega +31dd 204032bf call g24_set_contw_with_temp +31de e0a40000 istore 8 ,contw +31df 20202f5e branch g24_rx_interrupt_clear + +g24_data_type2_reverse_data: +31e0 5800010b setarg offset_24g_rxdata_temp_add2 +31e1 9a608c00 iadd regc ,contr +31e2 df200009 arg 9 ,loopcnt +31e3 20207ff3 branch reverse_byte + +g24_kb_enable_blank_data_forcibly: +31e4 58000001 setarg 1 +31e5 204032ab call g24_store_mem_kb_blank_data_enable + +g24_kb_enable_blank_data_timer: +31e6 58000140 setarg timer_kb_blank_delay +31e7 d8e0000e arg timer_kb_blank ,queue +31e8 20207f08 branch timer_init + +g24_kb_disable_blank_data_forcibly: +31e9 204032aa call g24_set0_mem_kb_blank_data_enable + +g24_kb_disable_blank_data_timer: +31ea 58000000 setarg 0 +31eb d8e0000e arg timer_kb_blank ,queue +31ec 20207f08 branch timer_init + +g24_kb_data_dispose: + +g24_kb_data_into_ep1_fifo: +31ed 700d5110 jam usb_ep1_kb ,mem_usb_ep1_data +31ee 68008d38 fetch 1 ,mem_usb_tx_enable +31ef 79207e01 set1 1 ,pdata +31f0 60008d38 store 1 ,mem_usb_tx_enable +31f1 20600000 rtn + +g24_data_type3: +31f2 d8a00d74 arg mem_usb_kb_multikey ,contw +31f3 204031e0 call g24_data_type2_reverse_data +31f4 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 +31f5 245a3209 ncall g24_kb_mul_enable_blank_data_forcibly ,blank +31f6 68010d75 fetch 2 ,mem_usb_kb_multikey + 1 +31f7 205a320e call g24_kb_mul_disable_blank_data_forcibly ,blank +31f8 20402c7a call g24_head_ptr2regc +31f9 68018d74 fetch 3 ,mem_usb_kb_multikey +31fa da200178 arg offset_24g_kb_multikey_sta_data ,rega +31fb 204032c4 call g24_set_contw_with_temp_store_3byte +31fc 5800017b setarg offset_24g_kb_multikey_last_data +31fd 9a60a200 iadd regc ,rega +31fe ea298000 ifetcht 3 ,rega +31ff 98467c00 isub temp ,null +3200 2442b207 ncall g24_kb_mul_data_into_ep2_fifo ,zero +3201 58000178 setarg offset_24g_kb_multikey_sta_data +3202 9a60a200 iadd regc ,rega +3203 ea218000 ifetch 3 ,rega +3204 da20017b arg offset_24g_kb_multikey_last_data ,rega +3205 204032c4 call g24_set_contw_with_temp_store_3byte +3206 20202f5e branch g24_rx_interrupt_clear + +g24_kb_mul_data_into_ep2_fifo: +3207 700d5221 jam usb_ep2_multikey ,mem_usb_ep2_data +3208 202031b9 branch g24_data_type1_usbtx_enable_ep2 + +g24_kb_mul_enable_blank_data_forcibly: +3209 58000001 setarg 1 +320a 204032ae call g24_store_mem_kb_mul_blank_data_enable + +g24_kb_mul_enable_blank_data_timer: +320b 58000140 setarg timer_kb_mul_blank_delay +320c d8e0000c arg timer_kb_mul_blank ,queue +320d 20207f08 branch timer_init + +g24_kb_mul_disable_blank_data_forcibly: +320e 204032ad call g24_set0_mem_kb_mul_blank_data_enable + +g24_kb_mul_disable_blank_data_timer: +320f 58000000 setarg 0 +3210 d8e0000c arg timer_kb_mul_blank ,queue +3211 20207f08 branch timer_init + +g24_data_attemp: +3212 204032bd call g24_fetch_mem_rxdata_temp_add3_1byte +3213 c000b216 beq datatype_mouse ,g24_data_attemp_mouse +3214 c001321b beq datatype_keyboard ,g24_data_attemp_kbd +3215 20600000 rtn + +g24_data_attemp_mouse: +3216 5800010d setarg offset_24g_rxdata_temp_add4 +3217 2040327e call g24_set_rega_ifetch_4byte +3218 da200160 arg offset_24g_mouse_addr ,rega +3219 204032bf call g24_set_contw_with_temp +321a 2020322d branch g24_contw_istore_4byte + +g24_data_attemp_kbd: +321b 5800010d setarg offset_24g_rxdata_temp_add4 +321c 2040327e call g24_set_rega_ifetch_4byte +321d da200164 arg offset_24g_kb_addr ,rega +321e 204032bf call g24_set_contw_with_temp +321f 2020322d branch g24_contw_istore_4byte + +g24_store_mem_24g_mode: +3220 20402c7a call g24_head_ptr2regc +3221 1a608acd add regc ,offset_24g_mode ,contw +3222 e0a08000 istore 1 ,contw +3223 20600000 rtn + +g24_fetch_mem_device_addr: +3224 20402c7a call g24_head_ptr2regc +3225 1a60a2be add regc ,offset_24g_device_addr ,rega +3226 2020327f branch g24_rega_ifetch_4byte + +g24_store_mem_device_addr: +3227 20402c7a call g24_head_ptr2regc +3228 1a608abe add regc ,offset_24g_device_addr ,contw +3229 2020322d branch g24_contw_istore_4byte + +g24_fetch_mem_addr: +322a 1a60a2ae add regc ,offset_24g_addr ,rega +322b 2020327f branch g24_rega_ifetch_4byte + +g24_store_mem_addr: +322c 1a608aae add regc ,offset_24g_addr ,contw + +g24_contw_istore_4byte: +322d e0a20000 istore 4 ,contw +322e 20600000 rtn + +g24_store_mem_ch: +322f 1a608a90 add regc ,offset_24g_ch ,contw +3230 202032b4 branch g24_contw_istore_1byte + +g24_set0_mem_pid: +3231 58000000 setarg 0 + +g24_store_mem_pid: +3232 20402c7a call g24_head_ptr2regc +3233 1a608a85 add regc ,offset_24g_pid ,contw +3234 202032b4 branch g24_contw_istore_1byte + +g24_store_mem_txpayload: +3235 1a608a42 add regc ,offset_24g_txpayload ,contw +3236 202032b4 branch g24_contw_istore_1byte + +g24_set4_mem_max_retry: +3237 58000004 setarg 4 + +g24_store_mem_max_retry: +3238 1a608acc add regc ,offset_24g_max_retry ,contw +3239 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_data_type: +323a 1a60a287 add regc ,offset_24g_data_type ,rega +323b 202032d1 branch g24_rega_ifetch_1byte + +g24_store_mem_data_type: +323c 1a608a87 add regc ,offset_24g_data_type ,contw +323d 202032b4 branch g24_contw_istore_1byte + +g24_set2_mem_sync_cnt: +323e 58000002 setarg 2 + +g24_store_mem_sync_cnt: +323f 1a608ad0 add regc ,offset_24g_sync_cnt ,contw +3240 202032b4 branch g24_contw_istore_1byte + +g24_set1_mem_rf_last_sta: +3241 58000001 setarg 1 + +g24_store_mem_rf_last_sta: +3242 20402c7a call g24_head_ptr2regc +3243 1a608ace add regc ,offset_24g_rf_last_sta ,contw +3244 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_hop_pac: +3245 20402c7a call g24_head_ptr2regc +3246 1a60a2b4 add regc ,offset_24g_hop_pac ,rega +3247 202032d1 branch g24_rega_ifetch_1byte + +g24_set1_mem_hop_pac: +3248 58000001 setarg 1 + +g24_store_mem_hop_pac: +3249 20402c7a call g24_head_ptr2regc +324a 1a608ab4 add regc ,offset_24g_hop_pac ,contw +324b 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_abort_pac: +324c 20402c7a call g24_head_ptr2regc +324d 1a60a2b2 add regc ,offset_24g_abort_pac ,rega +324e 202032d1 branch g24_rega_ifetch_1byte + +g24_set1_mem_abort_pac: +324f 58000001 setarg 1 + +g24_store_mem_abort_pac: +3250 20402c7a call g24_head_ptr2regc +3251 1a608ab2 add regc ,offset_24g_abort_pac ,contw +3252 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_pairing_sm: +3253 20402c7a call g24_head_ptr2regc +3254 1a60a296 add regc ,offset_24g_pairing_sm ,rega +3255 202032d1 branch g24_rega_ifetch_1byte + +g24_store_mem_pairing_sm: +3256 1a608a96 add regc ,offset_24g_pairing_sm ,contw +3257 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_rf_hop_ch: +3258 1a60a2cf add regc ,offset_24g_rf_hop_ch ,rega +3259 202032d1 branch g24_rega_ifetch_1byte + +g24_set0_mem_rf_hop_ch: +325a 58000000 setarg 0 + +g24_store_mem_rf_hop_ch: +325b 1a608acf add regc ,offset_24g_rf_hop_ch ,contw +325c 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_rf_work_stage: +325d 1a60a2d2 add regc ,offset_24g_rf_work_stage ,rega +325e 202032d1 branch g24_rega_ifetch_1byte + +g24_fetch_mem_rxbuf_add1: +325f 1a60a201 add regc ,offset_24g_rxbuf_add1 ,rega +3260 202032d1 branch g24_rega_ifetch_1byte + +g24_fetch_mem_check_dongle_times: +3261 1a60a2b5 add regc ,offset_24g_check_dongle_times ,rega +3262 202032d1 branch g24_rega_ifetch_1byte + +g24_set0_mem_check_dongle_times: +3263 58000000 setarg 0 + +g24_store_mem_check_dongle_times: +3264 20402c7a call g24_head_ptr2regc +3265 1a608ab5 add regc ,offset_24g_check_dongle_times ,contw +3266 202032b4 branch g24_contw_istore_1byte + +g24_store_mem_tx_power: +3267 20402c7a call g24_head_ptr2regc +3268 1a60a2fb add regc ,offset_tx_power_temp ,rega +3269 ea208000 ifetch 1 ,rega + +g24_store_mem_txpower: +326a 6000c1de store 1 ,mem_tx_power +326b 20600000 rtn + +g24_store_mem_tx_power_temp: +326c 20402c7a call g24_head_ptr2regc +326d 6800c1de fetch 1 ,mem_tx_power +326e 1a608afb add regc ,offset_tx_power_temp ,contw +326f 202032b4 branch g24_contw_istore_1byte + +g24_fetch_mem_power_ctrl_pac: +3270 1a60a2fc add regc ,offset_power_ctrl_packet_cnt ,rega +3271 202032d1 branch g24_rega_ifetch_1byte + +g24_store_mem_power_ctrl_level: +3272 1a608afe add regc ,offset_power_ctrl_level ,contw +3273 202032b4 branch g24_contw_istore_1byte + +g24_fetcht_mem_rxdata_temp: +3274 58000109 setarg offset_24g_rxdata_temp + +g24_set_rega_ifetcht_1byte: +3275 9a60a200 iadd regc ,rega +3276 ea288000 ifetcht 1 ,rega +3277 20600000 rtn + +g24_fetch_mem_rf_laststa: +3278 58000135 setarg offset_24g_rf_laststa +3279 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_rf_laststa: +327a 58000000 setarg 0 + +g24_store_mem_rf_laststa: +327b da200135 arg offset_24g_rf_laststa ,rega +327c 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_rx_addr: +327d 5800012b setarg offset_24g_rx_addr + +g24_set_rega_ifetch_4byte: +327e 204032cd call g24_set_rega + +g24_rega_ifetch_4byte: +327f ea220000 ifetch 4 ,rega +3280 20600000 rtn + +g24_fetch_mem_time_slice: +3281 5800015f setarg offset_24g_time_slice +3282 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_time_slice: +3283 58000000 setarg 0 + +g24_store_mem_time_slice: +3284 da20015f arg offset_24g_time_slice ,rega +3285 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_mode_switch: +3286 58000000 setarg 0 + +g24_store_mem_mode_switch: +3287 da20015c arg offset_24g_mode_switch ,rega +3288 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_bind_payload: +3289 da20012f arg offset_24g_bind_payload ,rega +328a 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_bind_device_status: +328b 58000108 setarg offset_dongle_bind_device_status +328c 202032d0 branch g24_set_rega_ifetch_1byte + +g24_store_mem_bind_device_status: +328d da200108 arg offset_dongle_bind_device_status ,rega +328e 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_work_mode: +328f 58000105 setarg offset_dongle_work_mode +3290 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set_work_mem_dongle_work_mode: +3291 58000000 setarg dongle_work + +g24_store_mem_dongle_work_mode: +3292 da200105 arg offset_dongle_work_mode ,rega +3293 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_fetch_mem_dongle_mode_init: +3294 58000104 setarg offset_dongle_mode_init +3295 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_dongle_mode_init: +3296 58000000 setarg clear_init + +g24_store_mem_dongle_mode_init: +3297 da200104 arg offset_dongle_mode_init ,rega +3298 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ackpayload_enable: +3299 58000000 setarg 0 + +g24_store_mem_ackpayload_enable: +329a da20013b arg offset_24g_ackpayload_enable ,rega +329b 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set1_mem_ackpayload_enable: +329c 58000001 setarg 1 +329d 2020329a branch g24_store_mem_ackpayload_enable + +g24_fetch_mem_rxdata_temp_add3_7byte: +329e 5800010c setarg offset_24g_rxdata_temp_add3 +329f 204032cd call g24_set_rega +32a0 ea238000 ifetch 7 ,rega +32a1 20600000 rtn + +g24_fetch_mem_nodata_timer_enable: +32a2 5800015e setarg offset_24g_nodata_timer_enable +32a3 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set0_mem_nodata_timer_enable: +32a4 58000000 setarg 0 + +g24_store_mem_nodata_timer_enable: +32a5 da20015e arg offset_24g_nodata_timer_enable ,rega +32a6 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_ms_blank_data_enable: +32a7 58000000 setarg 0 + +g24_store_mem_ms_blank_data_enable: +32a8 da200180 arg offset_24g_ms_blank_data_enable ,rega +32a9 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_blank_data_enable: +32aa 58000000 setarg 0 + +g24_store_mem_kb_blank_data_enable: +32ab da20017e arg offset_24g_kb_blank_data_enable ,rega +32ac 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_set0_mem_kb_mul_blank_data_enable: +32ad 58000000 setarg 0 + +g24_store_mem_kb_mul_blank_data_enable: +32ae da20017f arg offset_24g_kb_mul_blank_data_enable ,rega +32af 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_up: +32b0 da200102 arg offset_power_ctrl_threshold_up ,rega +32b1 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_power_ctrl_threshold_down: +32b2 da200103 arg offset_power_ctrl_threshold_down ,rega + +g24_set_contw_with_regb_store_1byte: +32b3 204032c7 call g24_set_contw_with_regb + +g24_contw_istore_1byte: +32b4 e0a08000 istore 1 ,contw +32b5 20600000 rtn + +g24_fetch_mem_pair_mode: +32b6 5800015d setarg offset_24g_pair_mode +32b7 202032d0 branch g24_set_rega_ifetch_1byte + +g24_store_mem_pair_mode: +32b8 da20015d arg offset_24g_pair_mode ,rega +32b9 202032b3 branch g24_set_contw_with_regb_store_1byte + +g24_store_mem_pair_txpower: +32ba 5800018a setarg offset_24g_pair_txpower +32bb 204032d0 call g24_set_rega_ifetch_1byte +32bc 2020326a branch g24_store_mem_txpower + +g24_fetch_mem_rxdata_temp_add3_1byte: +32bd 5800010c setarg offset_24g_rxdata_temp_add3 +32be 202032d0 branch g24_set_rega_ifetch_1byte + +g24_set_contw_with_temp: +32bf 1fe20400 copy pdata ,temp +32c0 1a227e00 copy rega ,pdata +32c1 9a608a00 iadd regc ,contw +32c2 18427e00 copy temp ,pdata +32c3 20600000 rtn + +g24_set_contw_with_temp_store_3byte: +32c4 204032bf call g24_set_contw_with_temp + +g24_contw_istore_3byte: +32c5 e0a18000 istore 3 ,contw +32c6 20600000 rtn + +g24_set_contw_with_regb: +32c7 20402c7a call g24_head_ptr2regc + +g24_set_contw_with_regb2: +32c8 1fe22400 copy pdata ,regb +32c9 1a227e00 copy rega ,pdata +32ca 9a608a00 iadd regc ,contw +32cb 1a427e00 copy regb ,pdata +32cc 20600000 rtn + +g24_set_rega: +32cd 20402c7a call g24_head_ptr2regc +32ce 9a60a200 iadd regc ,rega +32cf 20600000 rtn + +g24_set_rega_ifetch_1byte: +32d0 204032cd call g24_set_rega + +g24_rega_ifetch_1byte: +32d1 ea208000 ifetch 1 ,rega +32d2 20600000 rtn + +g24_set_rega_ifetcht_4byte: +32d3 204032cd call g24_set_rega +32d4 ea2a0000 ifetcht 4 ,rega +32d5 20600000 rtn + +g24_mem_set0: +32d6 58000000 setarg 0 +32d7 202032b4 branch g24_contw_istore_1byte + +app_init: +32d8 44e24018 bpatch patch18_4 ,mem_patch18 +32d9 6800c092 fetch 1 ,mem_device_option +32da 203a32d8 branch app_init ,blank +32db c0022f30 beq dvc_op_dongle ,dongle_init +32dc c007b436 beq dvc_op_antilost ,antilost_init +32dd c004c5de beq dvc_op_shutter ,shutter_init +32de c005392a beq dvc_op_module ,module_init +32df c00735bf beq dvc_op_car ,car_init +32e0 c00844a4 beq dvc_op_remote_car ,remote_car_init +32e1 c2833d00 bbit1 dvc_op_mouse ,mouse_init +32e2 20600000 rtn + +app_lpm_init: +32e3 44e2c018 bpatch patch18_5 ,mem_patch18 +32e4 70015100 jam 0 ,mem_tester_emulate +32e5 70017f00 jam 0 ,mem_debug_config +32e6 70018000 jam 0 ,mem_lch_code +32e7 58000000 setarg 0 +32e8 600289ae store 5 ,mem_sp_state_start +32e9 6800c092 fetch 1 ,mem_device_option +32ea 203a32e3 branch app_lpm_init ,blank +32eb c0053962 beq dvc_op_module ,module_lpm_init + +app_lpm_init0: +32ec 20600000 rtn + +app_process_idle: +32ed 20407cd1 call ui_dispatch +32ee 20407d9c call check_51cmd +32ef 204032f6 call app_process_bb_event +32f0 680141f3 fetch 2 ,mem_cb_idle_process +32f1 20207f9c branch callback_func + +app_process_bt: +32f2 680141f1 fetch 2 ,mem_cb_bt_process +32f3 20207f9c branch callback_func + +app_process_ble: +32f4 680141ef fetch 2 ,mem_cb_le_process +32f5 20207f9c branch callback_func + +app_process_bb_event: +32f6 44e34018 bpatch patch18_6 ,mem_patch18 +32f7 da204668 arg mem_ipc_fifo_bt2c51 ,rega +32f8 20407fc4 call fifo_out +32f9 207a0000 rtn blank +32fa 1fe22600 copy pdata ,regc +32fb 204032ff call app_event_normal_process +32fc 20203324 branch app_process_bb_event_priority + +app_discard_event: +32fd da600000 arg 0 ,regc +32fe 20600000 rtn + +app_event_normal_process: +32ff c000b311 beq bt_evt_bb_connected ,app_evt_bt_conn +3300 c0083357 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +3301 c002b335 beq bt_evt_setup_complete ,app_evt_setup_complete +3302 c009333c beq bt_evt_hid_handshake ,app_evt_hid_handshake +3303 c0033353 beq bt_evt_hid_connected ,app_bb_event_hid_connected +3304 c0023394 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +3305 c0013399 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +3306 c009b394 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +3307 c00a334b beq bt_evt_le_connected ,app_le_event_bb_connected +3308 c00ab34f beq bt_evt_le_disconnected ,app_le_event_bb_disconn +3309 c001b32e beq bt_evt_reconn_started ,app_event_reconn_start +330a c005b340 beq bt_evt_enter_sniff ,app_event_enter_sniff +330b c0063347 beq bt_evt_exit_sniff ,app_event_exit_sniff +330c c00b335b beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +330d c00c332a beq bt_evt_linkkey_generate ,app_event_linkkey_generate +330e c015331a beq bt_evt_switch_fail_master ,app_event_switch_fail_master +330f c015b318 beq bt_evt_switch_success_master ,app_event_switch_success +3310 20600000 rtn + +app_evt_bt_conn: +3311 68014682 fetch 2 ,mem_ui_state_map +3312 79207e00 set1 ui_state_bt_connected ,pdata +3313 60014682 store 2 ,mem_ui_state_map +3314 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3315 793ffe00 set0 app_disc_by_button ,pdata +3316 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3317 20600000 rtn + +app_event_switch_success: +3318 70022900 jam 0 ,mem_switch_fail_master_count +3319 20600000 rtn + +app_event_switch_fail_master: +331a 68008229 fetch 1 ,mem_switch_fail_master_count +331b 1fe0fe01 increase 1 ,pdata +331c 60008229 store 1 ,mem_switch_fail_master_count +331d 1fe67c01 sub pdata ,1 ,null +331e 202133df branch app_bt_role_switch ,positive +331f 70022900 jam 0 ,mem_switch_fail_master_count +3320 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3321 79207e09 set1 app_disc_switch_fail ,pdata +3322 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3323 202033e9 branch app_bt_disconnect + +app_process_bb_event_priority: +3324 680141f5 fetch 2 ,mem_cb_bb_event_process +3325 20207f9c branch callback_func + +app_check_wake_lock: +3326 680141e9 fetch 2 ,mem_cb_check_wakelock +3327 20207f9c branch callback_func + +app_will_enter_lpm: +3328 680141ed fetch 2 ,mem_cb_before_lpm +3329 20207f9c branch callback_func + +app_event_linkkey_generate: +332a 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +332b 79207e01 set1 app_disc_after_pairing ,pdata +332c 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +332d 20203412 branch app_bt_store_reconn_info + +app_event_reconn_start: +332e 68014682 fetch 2 ,mem_ui_state_map +332f 79207e07 set1 ui_state_bt_reconnect ,pdata +3330 60014682 store 2 ,mem_ui_state_map +3331 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3332 79207e02 set1 app_disc_after_reconn ,pdata +3333 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3334 20600000 rtn + +app_evt_setup_complete: +3335 68014682 fetch 2 ,mem_ui_state_map +3336 79207e01 set1 ui_state_bt_setup_complete ,pdata +3337 60014682 store 2 ,mem_ui_state_map +3338 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3339 79207e04 set1 app_disc_after_setup_done ,pdata +333a 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +333b 20600000 rtn + +app_evt_hid_handshake: +333c 68014682 fetch 2 ,mem_ui_state_map +333d 79207e03 set1 ui_state_bt_hid_handshake ,pdata +333e 60014682 store 2 ,mem_ui_state_map +333f 20600000 rtn + +app_event_enter_sniff: +3340 68014682 fetch 2 ,mem_ui_state_map +3341 79207e05 set1 ui_state_bt_sniff ,pdata +3342 60014682 store 2 ,mem_ui_state_map +3343 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3344 79207e03 set1 app_disc_after_sniff ,pdata +3345 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +3346 20600000 rtn + +app_event_exit_sniff: +3347 68014682 fetch 2 ,mem_ui_state_map +3348 793ffe05 set0 ui_state_bt_sniff ,pdata +3349 60014682 store 2 ,mem_ui_state_map +334a 20600000 rtn + +app_le_event_bb_connected: +334b 68014682 fetch 2 ,mem_ui_state_map +334c 79207e09 set1 ui_state_ble_connected ,pdata +334d 60014682 store 2 ,mem_ui_state_map +334e 20600000 rtn + +app_le_event_bb_disconn: +334f 68014682 fetch 2 ,mem_ui_state_map +3350 793ffe09 set0 ui_state_ble_connected ,pdata +3351 60014682 store 2 ,mem_ui_state_map +3352 20203418 branch app_lpm_mult_disable + +app_bb_event_hid_connected: +3353 68014682 fetch 2 ,mem_ui_state_map +3354 79207e02 set1 ui_state_bt_hid_conn ,pdata +3355 60014682 store 2 ,mem_ui_state_map +3356 20600000 rtn + +app_evt_button_long_pressed: +3357 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +3358 79207e00 set1 app_disc_by_button ,pdata +3359 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +335a 20600000 rtn + +app_event_ml2cap_conn_refused: +335b 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +335c 79207e08 set1 app_disc_l2cap_refused ,pdata +335d 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +335e 202033e9 branch app_bt_disconnect + +app_evt_timer: +335f 44e3c018 bpatch patch18_7 ,mem_patch18 +3360 6000822a store 1 ,mem_app_evt_timer_count + +app_evt_100ms_loop: +3361 6800822a fetch 1 ,mem_app_evt_timer_count +3362 207a0000 rtn blank +3363 1fe0ffff increase -1 ,pdata +3364 6000822a store 1 ,mem_app_evt_timer_count +3365 20407cdd call ui_button_polling +3366 204033d6 call app_lpm_wake_auto_lock_timer +3367 20403387 call app_unsniff_delay_timer +3368 2040338d call app_discovery_timer +3369 2040651b call flash_write_spi_sm_timer +336a 680141fd fetch 2 ,mem_cb_event_timer +336b 20407f9c call callback_func +336c 20203361 branch app_evt_100ms_loop + +timer_single_step: +336d ea608000 ifetch 1 ,regc +336e 207a0000 rtn blank +336f 1fe0ffff pincrease -1 +3370 e2608000 istore 1 ,regc +3371 247a0000 nrtn blank +3372 1a427e00 copy regb ,pdata +3373 20207f9c branch callback_func + +timer_single_step_2b: +3374 ea610000 ifetch 2 ,regc +3375 207a0000 rtn blank +3376 1fe0ffff pincrease -1 +3377 e2610000 istore 2 ,regc +3378 247a0000 nrtn blank +3379 1a427e00 copy regb ,pdata +337a 20207f9c branch callback_func + +app_power_timer: +337b 6809423f fetcht 2 ,mem_power_param_ptr +337c 1840a601 add temp ,power_timer_offset ,regc +337d da40337f arg app_power_timer_timeout ,regb +337e 2020336d branch timer_single_step + +app_power_timer_timeout: +337f 2040342d call app_got_power_state_common +3380 c000b382 beq power_starting ,app_enter_power_stanby_state + +app_enter_power_off_state: +3381 2020340a branch app_enter_hibernate + +app_enter_power_stanby_state: +3382 58000002 setarg power_standby +3383 e2608000 istore 1 ,regc +3384 1840a408 add temp ,power_standby_cb_offset ,regb + +app_power_cb_common: +3385 ea410000 ifetch 2 ,regb +3386 20207f9c branch callback_func + +app_unsniff_delay_timer: +3387 da604205 arg mem_unsniff2sniff_timer_count ,regc +3388 da40338a arg app_unsniff_delay_timeout ,regb +3389 2020336d branch timer_single_step + +app_unsniff_delay_timeout: +338a 20402252 call context_check_idle +338b 2022b40e branch app_bt_enter_sniff ,zero +338c 20600000 rtn + +app_discovery_timer: +338d da60467e arg mem_discovery_timeout_timer_count ,regc +338e da403390 arg app_discovery_timeout ,regb +338f 20203374 branch timer_single_step_2b + +app_discovery_timeout: +3390 204033f0 call app_bt_stop_discovery +3391 20403408 call app_led_off +3392 680141f7 fetch 2 ,mem_cb_discovry_timeout +3393 20207f9c branch callback_func + +app_bb_event_reconn_failed: +3394 204033ac call app_disconn_reason_flag_clear + +app_clear_reconnect_flag: +3395 68014682 fetch 2 ,mem_ui_state_map +3396 793ffe07 set0 ui_state_bt_reconnect ,pdata +3397 60014682 store 2 ,mem_ui_state_map +3398 20600000 rtn + +app_bb_event_bb_disconn: +3399 70420500 jam 0 ,mem_unsniff2sniff_timer_count +339a 68014682 fetch 2 ,mem_ui_state_map +339b c283b39e bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +339c 2fec0001 isolate0 ui_state_bt_setup_complete ,pdata +339d 2040b2fd call app_discard_event ,true + +app_bb_event_bb_reconn_disconn: +339e 44e44019 bpatch patch19_0 ,mem_patch19 +339f 68014682 fetch 2 ,mem_ui_state_map +33a0 793ffe00 set0 ui_state_bt_connected ,pdata +33a1 793ffe01 set0 ui_state_bt_setup_complete ,pdata +33a2 793ffe02 set0 ui_state_bt_hid_conn ,pdata +33a3 793ffe03 set0 ui_state_bt_hid_handshake ,pdata +33a4 793ffe07 set0 ui_state_bt_reconnect ,pdata +33a5 60014682 store 2 ,mem_ui_state_map +33a6 20203418 branch app_lpm_mult_disable + +app_bb_hibernate: +33a7 204033a9 call app_disconn_reason_clear +33a8 2020340a branch app_enter_hibernate + +app_disconn_reason_clear: +33a9 58000000 setarg 0 +33aa 60014208 store app_disc_rsn_size ,mem_app_disconn_reason +33ab 20600000 rtn + +app_disconn_reason_flag_clear: +33ac 58000000 setarg 0 +33ad 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +33ae 20600000 rtn + +app_disconn_reason_collect_bt: +33af 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +33b0 60014208 store app_disc_rsn_size ,mem_app_disconn_reason +33b1 58000000 setarg 0 +33b2 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +33b3 20600000 rtn + +app_disconn_reason_collect_ble: +33b4 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +33b5 79207e07 set1 app_disc_ble ,pdata +33b6 60014208 store app_disc_rsn_size ,mem_app_disconn_reason +33b7 58000000 setarg 0 +33b8 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +33b9 20600000 rtn + +app_check_sniff: +33ba 6800c682 fetch 1 ,mem_ui_state_map +33bb 2feffe05 isolate1 ui_state_bt_sniff ,pdata +33bc 20600000 rtn + +app_initflag_store: +33bd 5800aa55 setarg eeprom_init_flag + +app_flag_store: +33be 60010aaa store 2 ,mem_timeup +33bf 44e4c019 bpatch patch19_1 ,mem_patch19 +33c0 d8400002 arg 2 ,temp +33c1 da200aaa arg mem_timeup ,rega +33c2 da4000c3 arg eeprom_module_init_flag ,regb +33c3 20206606 branch iicd_write_eep_data + +app_initflag_check: +33c4 44e54019 bpatch patch19_2 ,mem_patch19 +33c5 d8400002 arg 2 ,temp +33c6 da200a9a arg mem_pdatatemp ,rega +33c7 da4000c3 arg eeprom_module_init_flag ,regb +33c8 204065df call iicd_read_eep_data +33c9 68010a9a fetch 2 ,mem_pdatatemp +33ca d840aa55 arg eeprom_init_flag ,temp +33cb 98467c00 isub temp ,null +33cc 20600000 rtn + +app_start_auto_sniff: +33cd 6800c55a fetch 1 ,mem_unsniff2sniff_timer +33ce 6000c205 store 1 ,mem_unsniff2sniff_timer_count +33cf 20600000 rtn + +app_get_lpm_wake_lock: +33d0 d8e00009 arg wake_lock_app ,queue +33d1 20202c32 branch lpm_get_wake_lock + +app_put_lpm_wake_lock: +33d2 d8e00009 arg wake_lock_app ,queue +33d3 20202c36 branch lpm_put_wake_lock + +app_lpm_wake_auto_lock: +33d4 70420605 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +33d5 202033d0 branch app_get_lpm_wake_lock + +app_lpm_wake_auto_lock_timer: +33d6 da604206 arg mem_wake_up_delay_timer ,regc +33d7 da4033d2 arg app_put_lpm_wake_lock ,regb +33d8 2020336d branch timer_single_step + +app_l2cap_flow_control_enable: +33d9 70436301 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +33da 20600000 rtn + +app_l2cap_flow_control_disable: +33db 70436300 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +33dc 20600000 rtn + +app_bt_set_pincode: +33dd 700a990a jam bt_cmd_set_pin_code ,mem_fifo_temp +33de 20207d8f branch ui_ipc_send_cmd + +app_bt_role_switch: +33df 700a991d jam bt_cmd_role_switch ,mem_fifo_temp +33e0 20207d8f branch ui_ipc_send_cmd + +app_bt_start_reconnect: +33e1 44e5c019 bpatch patch19_3 ,mem_patch19 +33e2 6800c207 fetch 1 ,mem_app_connection_options +33e3 6000816d store 1 ,mem_connection_options +33e4 70022801 jam app_flag_reconnect ,mem_reconnect_flag +33e5 700a9903 jam bt_cmd_reconnect ,mem_fifo_temp +33e6 20207d8f branch ui_ipc_send_cmd + +app_bt_reconnect_cancel: +33e7 700a991e jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +33e8 20207d8f branch ui_ipc_send_cmd + +app_bt_disconnect: +33e9 700a9904 jam bt_cmd_disconnect ,mem_fifo_temp +33ea 20207d8f branch ui_ipc_send_cmd + +app_bt_start_discovery_short: +33eb 68014687 fetch 2 ,mem_discovery_timeout +33ec 6001467e store 2 ,mem_discovery_timeout_timer_count + +app_bt_start_discovery_led_blink: +33ed 20403404 call app_led_start_blink + +app_bt_start_discovery: +33ee 700a9901 jam bt_cmd_start_discovery ,mem_fifo_temp +33ef 20207d8f branch ui_ipc_send_cmd + +app_bt_stop_discovery: +33f0 58000000 setarg 0 +33f1 6001467e store 2 ,mem_discovery_timeout_timer_count +33f2 700a9902 jam bt_cmd_stop_discovery ,mem_fifo_temp +33f3 20207d8f branch ui_ipc_send_cmd + +app_ble_start_direct_adv: +33f4 700a990f jam bt_cmd_start_direct_adv ,mem_fifo_temp +33f5 20207d8f branch ui_ipc_send_cmd + +app_ble_stop_direct_adv: +33f6 700a9910 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +33f7 20207d8f branch ui_ipc_send_cmd + +app_ble_stop_adv: +33f8 700a990e jam bt_cmd_stop_adv ,mem_fifo_temp +33f9 20207d8f branch ui_ipc_send_cmd + +app_ble_start_adv: +33fa 700a990d jam bt_cmd_start_adv ,mem_fifo_temp +33fb 20207d8f branch ui_ipc_send_cmd + +app_ble_start_scan: +33fc 700a9917 jam bt_cmd_le_start_scan ,mem_fifo_temp +33fd 20207d8f branch ui_ipc_send_cmd + +app_ble_stop_scan: +33fe 700a9918 jam bt_cmd_le_stop_scan ,mem_fifo_temp +33ff 20207d8f branch ui_ipc_send_cmd + +app_ble_start_conn: +3400 700a9916 jam bt_cmd_le_start_conn ,mem_fifo_temp +3401 20207d8f branch ui_ipc_send_cmd + +app_ble_disconnect: +3402 700a9911 jam bt_cmd_le_disconnect ,mem_fifo_temp +3403 20207d8f branch ui_ipc_send_cmd + +app_led_start_blink: +3404 700a9915 jam bt_cmd_led_blink ,mem_fifo_temp +3405 20207d8f branch ui_ipc_send_cmd + +app_led_on: +3406 700a9914 jam bt_cmd_led_on ,mem_fifo_temp +3407 20207d8f branch ui_ipc_send_cmd + +app_led_stop_blink: + +app_led_off: +3408 700a9913 jam bt_cmd_led_off ,mem_fifo_temp +3409 20207d8f branch ui_ipc_send_cmd + +app_enter_hibernate: +340a 700a9919 jam bt_cmd_enter_hibernate ,mem_fifo_temp +340b 20207d8f branch ui_ipc_send_cmd + +app_bt_sniff_exit: +340c 700a9906 jam bt_cmd_exit_sniff ,mem_fifo_temp +340d 20207d8f branch ui_ipc_send_cmd + +app_bt_enter_sniff: +340e 700a9905 jam bt_cmd_enter_sniff ,mem_fifo_temp +340f 20207d8f branch ui_ipc_send_cmd + +app_ble_store_reconn_info: +3410 700a991f jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +3411 20207d8f branch ui_ipc_send_cmd + +app_bt_store_reconn_info: +3412 700a9920 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +3413 20207d8f branch ui_ipc_send_cmd + +app_store_reconn_info: +3414 700a9925 jam bt_cmd_store_reconn_info ,mem_fifo_temp +3415 20207d8f branch ui_ipc_send_cmd + +app_lpm_mult_enable: +3416 7920000d set1 mark_lpm_mult_enable ,mark +3417 20600000 rtn + +app_lpm_mult_disable: +3418 793f800d set0 mark_lpm_mult_enable ,mark +3419 20600000 rtn + +app_button_long_pressed: +341a 2040342d call app_got_power_state_common +341b c0013424 beq power_standby ,app_power_shutting_down + +app_power_starting: +341c 58000001 setarg power_starting +341d e2608000 istore 1 ,regc +341e 1840a203 add temp ,power_starting_timeout_offset ,rega +341f 1840a406 add temp ,power_starting_cb_offset ,regb + +app_power_common: +3420 ea288000 ifetcht 1 ,rega +3421 1a60a601 increase 1 ,regc +3422 e2688000 istoret 1 ,regc +3423 20203385 branch app_power_cb_common + +app_power_shutting_down: +3424 58000000 setarg power_off +3425 e2608000 istore 1 ,regc +3426 68014682 fetch 2 ,mem_ui_state_map +3427 c304b429 bbit0 ui_state_ble_connected ,app_power_off_end +3428 20403402 call app_ble_disconnect + +app_power_off_end: +3429 6809423f fetcht 2 ,mem_power_param_ptr +342a 1840a202 add temp ,power_off_timeout_offset ,rega +342b 1840a404 add temp ,power_off_cb_offset ,regb +342c 20203420 branch app_power_common + +app_got_power_state_common: +342d 6809423f fetcht 2 ,mem_power_param_ptr +342e 1840a600 add temp ,power_state_offset ,regc +342f ea608000 ifetch 1 ,regc +3430 20600000 rtn + +app_event_button_up: +3431 2040342d call app_got_power_state_common +3432 c0803434 bne power_off ,app_power_release +3433 2020340a branch app_enter_hibernate + +app_power_release: +3434 1840a40a add temp ,ui_butten_up_cb_offset ,regb +3435 20203385 branch app_power_cb_common + +antilost_init: +3436 20758000 rtn wake +3437 70808100 jam 0x00 ,core_gpio_sel1 +3438 58003463 setarg antilost_le_before_hibernate +3439 600141eb store 2 ,mem_cb_before_hibernate +343a 5800696c setarg keyscan_process_lpm_before +343b 600141ed store 2 ,mem_cb_before_lpm +343c 580034f5 setarg antilost_idle_process +343d 600141f3 store 2 ,mem_cb_idle_process +343e 580034f4 setarg antilost_le_conn_process +343f 600141ef store 2 ,mem_cb_le_process +3440 5800347e setarg antilost_bb_event_process +3441 600141f5 store 2 ,mem_cb_bb_event_process +3442 580034b2 setarg antilost_le_bb_event_timer +3443 600141fd store 2 ,mem_cb_event_timer +3444 58003465 setarg antilost_le_notification +3445 600141fb store 2 ,mem_cb_ble_transmit +3446 58003470 setarg antilost_lpm_lock_process +3447 600141e9 store 2 ,mem_cb_check_wakelock +3448 58003501 setarg antilost_le_receive_data_process +3449 600141f9 store 2 ,mem_cb_att_write +344a 44e64019 bpatch patch19_4 ,mem_patch19 +344b 2040359b call antilost_buzzer_pwm_init +344c 20406948 call keyscan_key_init +344d 204035ad call antilost_adc_init +344e 20407d08 call ui_led_init_global +344f 20407cd3 call ui_button_init +3450 5800350b setarg antilost_key_up_down +3451 60014766 store 2 ,mem_cb_antl_key +3452 580034fc setarg antilost_power_off_cb +3453 6001475d store 2 ,mem_antl_power_off_cb +3454 580034f8 setarg antilost_power_starting_cb +3455 6001475f store 2 ,mem_antl_power_starting_cb +3456 5800346c setarg antilost_power_standby_cb +3457 60014761 store 2 ,mem_antl_power_standby_cb +3458 580035a2 setarg antilost_led_on_cb +3459 600146a9 store 2 ,mem_antl_led_cb_on +345a 580035a4 setarg antilost_led_off_cb +345b 600146ab store 2 ,mem_antl_led_cb_off +345c 580035a9 setarg antilost_buzzer_on +345d 600146b4 store 2 ,mem_antl_buzzer_cb_on +345e 580035a6 setarg antilost_buzzer_off +345f 600146b6 store 2 ,mem_antl_buzzer_cb_off +3460 68014682 fetch 2 ,mem_ui_state_map +3461 c3860000 rtnbit1 ui_state_btn_down +3462 2020340a branch app_enter_hibernate + +antilost_le_before_hibernate: +3463 20403586 call antilost_led_buzzer_stop_blink +3464 2020340a branch app_enter_hibernate + +antilost_le_notification: +3465 20405892 call le_fifo_check_nearly_full +3466 247a0000 nrtn blank +3467 da200b06 arg mem_temp_block5 ,rega +3468 20407e54 call queue_pop +3469 24740000 nrtn user +346a d8c00b06 arg mem_temp_block5 ,contr +346b 20204746 branch le_send_notify_from_list + +antilost_power_standby_cb: +346c 68014797 fetch 2 ,mem_antl_le_sleep_timeout +346d 60014791 store 2 ,mem_antl_le_sleep_timer +346e 70475301 jam 1 ,mem_antl_key_scan_enable +346f 2020358f branch antilost_fast_adv_start + +antilost_lpm_lock_process: +3470 6800c79d fetch 1 ,mem_antl_key_state +3471 c000b479 beq 1 ,antilost_lpm_ctrl_for_led_buzzer +3472 68014682 fetch 2 ,mem_ui_state_map +3473 c304b479 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +3474 6800c79e fetch 1 ,mem_antl_lost_mode +3475 c000b3d0 beq 1 ,app_get_lpm_wake_lock +3476 6800c700 fetch 1 ,mem_antl_queue_curr_num +3477 243a33d0 nbranch app_get_lpm_wake_lock ,blank +3478 202033d2 branch app_put_lpm_wake_lock + +antilost_lpm_ctrl_for_led_buzzer: +3479 6800c79b fetch 1 ,mem_antl_led_state +347a 6808c79c fetcht 1 ,mem_antl_buzzer_state +347b 9841fe00 ior temp ,pdata +347c c000b3d0 beq 1 ,app_get_lpm_wake_lock +347d 202033d2 branch app_put_lpm_wake_lock + +antilost_bb_event_process: +347e 1a627e00 copy regc ,pdata +347f c016b431 beq bt_evt_button_up ,app_event_button_up +3480 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed +3481 c00a34df beq bt_evt_le_connected ,antilost_le_process_conn +3482 c00ab4e8 beq bt_evt_le_disconnected ,antilost_le_process_discon +3483 c0203485 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +3484 20600000 rtn + +antilost_le_conn_param_update_rsp_recieved: +3485 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +3486 c000b48c beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected + +antilost_le_conn_param_accepted: +3487 680143d8 fetch 2 ,mem_le_new_connslavelatency +3488 203a34a2 branch antilost_master_nonsupport_latency ,blank + +antilost_le_conn_param_updata_procedure_sucsess: +3489 70478a02 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +348a 70478f3c jam 60 ,mem_antl_conn_update_timer +348b 20600000 rtn + +antilost_le_conn_param_rejected: +348c 6801449a fetch 2 ,mem_le_latency +348d 203a34a0 branch antilost_conn_param_updata_procedure_faild ,blank + +antilost_conn_param_retransimiting: +348e 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +348f 680947b4 fetcht 2 ,mem_interval_increment +3490 68014496 fetch 2 ,mem_le_interval_min +3491 9840fe00 iadd temp ,pdata +3492 60014496 store 2 ,mem_le_interval_min +3493 1fe22200 copy pdata ,rega +3494 68014498 fetch 2 ,mem_le_interval_max +3495 9840fe00 iadd temp ,pdata +3496 60014498 store 2 ,mem_le_interval_max +3497 9a20fe00 iadd rega ,pdata +3498 1fe30400 rshift pdata ,temp +3499 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max +349a 9846fc00 idiv temp +349b 20407f86 call wait_div_end +349c 1807fe00 quotient pdata +349d 6001449a store 2 ,mem_le_latency +349e 70479001 jam 1 ,mem_antl_send_updata_le_param_timer +349f 20600000 rtn + +antilost_conn_param_updata_procedure_faild: +34a0 70478a03 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +34a1 20600000 rtn + +antilost_master_nonsupport_latency: +34a2 70417200 jam 0 ,mem_lpm_mult +34a3 70479000 jam 0 ,mem_antl_send_updata_le_param_timer +34a4 680143d6 fetch 2 ,mem_le_new_conninterval +34a5 680947be fetcht 2 ,mem_antl_le_unnormal_interval_min +34a6 98467c00 isub temp ,null +34a7 79212200 setflag positive ,0 ,rega +34a8 680147c0 fetch 2 ,mem_antl_le_unnormal_interval_max +34a9 680943d6 fetcht 2 ,mem_le_new_conninterval +34aa 98467e00 isub temp ,pdata +34ab 79212201 setflag positive ,1 ,rega +34ac 2a200603 compare 0x03 ,rega ,0x03 +34ad 20608000 rtn true +34ae 680447be fetch 8 ,mem_antl_le_unnormal_interval_min +34af 60044496 store 8 ,mem_le_interval_min +34b0 70479001 jam 1 ,mem_antl_send_updata_le_param_timer +34b1 20600000 rtn + +antilost_le_bb_event_timer: +34b2 2040337b call app_power_timer +34b3 204034b9 call antilost_double_click_timer +34b4 204034be call antilost_le_fast_adv_timer +34b5 204034d5 call antilost_le_sleep_timer +34b6 204034ca call antilost_app_updata_le_param_timer +34b7 204034c4 call antilost_conn_update_timer +34b8 202034d9 branch antilost_adc_check_timer + +antilost_double_click_timer: +34b9 da604799 arg mem_double_click_timer ,regc +34ba da4034bc arg antilost_double_click_timeout ,regb +34bb 2020336d branch timer_single_step + +antilost_double_click_timeout: +34bc 70479a00 jam 0 ,mem_butten_click_cnt +34bd 20600000 rtn + +antilost_le_fast_adv_timer: +34be da604793 arg mem_antl_fast_adv_timer ,regc +34bf da4034c1 arg antilost_le_fast_adv_timeout ,regb +34c0 20203374 branch timer_single_step_2b + +antilost_le_fast_adv_timeout: +34c1 da6046bf arg mem_antl_slow_adv_led_style ,regc +34c2 da40469e arg mem_antl_slow_adv_lpm_interval ,regb +34c3 20203591 branch antilost_adv_start_common + +antilost_conn_update_timer: +34c4 da60478f arg mem_antl_conn_update_timer ,regc +34c5 da4034c7 arg antilost_conn_update_timer_time_out ,regb +34c6 2020336d branch timer_single_step + +antilost_conn_update_timer_time_out: +34c7 6801449a fetch 2 ,mem_le_latency +34c8 6000c172 store 1 ,mem_lpm_mult +34c9 20600000 rtn + +antilost_app_updata_le_param_timer: +34ca da604790 arg mem_antl_send_updata_le_param_timer ,regc +34cb da4034cd arg antilost_app_updata_le_param_timeout ,regb +34cc 2020336d branch timer_single_step + +antilost_app_updata_le_param_timeout: +34cd 6800843f fetch 1 ,mem_le_state +34ce 2fe0c000 compare 0 ,pdata ,0x60 +34cf 2420b4d3 nbranch antilost_wait_for_updata_param_instant_expire ,true +34d0 70478a01 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +34d1 20403416 call app_lpm_mult_enable +34d2 20205abf branch le_l2cap_tx_update_req + +antilost_wait_for_updata_param_instant_expire: +34d3 70479001 jam 1 ,mem_antl_send_updata_le_param_timer +34d4 20600000 rtn + +antilost_le_sleep_timer: +34d5 da604791 arg mem_antl_le_sleep_timer ,regc +34d6 da4034d8 arg antilost_le_sleep_timer_timeout ,regb +34d7 20203374 branch timer_single_step_2b + +antilost_le_sleep_timer_timeout: +34d8 2020341a branch app_button_long_pressed + +antilost_adc_check_timer: +34d9 da60478d arg mem_adc_timer ,regc +34da da4034dc arg antilost_adc_check_timer_timeout ,regb +34db 20203374 branch timer_single_step_2b + +antilost_adc_check_timer_timeout: +34dc 680147a7 fetch 2 ,mem_adc_timeout +34dd 6001478d store 2 ,mem_adc_timer +34de 202035af branch antilost_battery_process + +antilost_le_process_conn: +34df 680147a7 fetch 2 ,mem_adc_timeout +34e0 6001478d store 2 ,mem_adc_timer +34e1 58000000 setarg 0 +34e2 60014793 store 2 ,mem_antl_fast_adv_timer +34e3 60014791 store 2 ,mem_antl_le_sleep_timer +34e4 2040355c call antilost_alert_off +34e5 20403586 call antilost_led_buzzer_stop_blink +34e6 70417200 jam 0 ,mem_lpm_mult +34e7 202033f8 branch app_ble_stop_adv + +antilost_le_process_discon: +34e8 58000000 setarg 0 +34e9 6002478d store 4 ,mem_adc_timer +34ea 6001c78a store 3 ,mem_antl_conn_updata_procedure_state +34eb 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +34ec 7047a001 jam 1 ,mem_alarm_config_notfy_cnt +34ed 68014797 fetch 2 ,mem_antl_le_sleep_timeout +34ee 60014791 store 2 ,mem_antl_le_sleep_timer +34ef 20407e38 call queue_init +34f0 6800c759 fetch 1 ,mem_antl_power_state +34f1 c1000000 rtneq power_off +34f2 2040358f call antilost_fast_adv_start +34f3 2020356e branch antilost_on_off_alarm_after_disconn + +antilost_le_conn_process: +34f4 20203508 branch antilost_key_process + +antilost_idle_process: +34f5 6800c759 fetch 1 ,mem_antl_power_state +34f6 c1810000 rtnne power_standby +34f7 20203508 branch antilost_key_process + +antilost_power_starting_cb: +34f8 da6046cd arg mem_antl_power_starting_buzzer_style ,regc +34f9 20403582 call antilost_buzzer_configuration +34fa da6046c6 arg mem_antl_power_starting_led_style ,regc + +antilost_power_common: +34fb 20203584 branch antilost_led_configuration + +antilost_power_off_cb: +34fc 70436e00 jam off ,mem_le_adv_enable +34fd da6046db arg mem_antl_power_off_buzzer_style ,regc +34fe 20403582 call antilost_buzzer_configuration +34ff da6046d4 arg mem_antl_power_off_led_style ,regc +3500 202034fb branch antilost_power_common + +antilost_le_receive_data_process: +3501 68008477 fetch 1 ,mem_le_att_opcode +3502 c0093504 beq attop_write_request ,antilost_le_parse_att_write_request +3503 20600000 rtn + +antilost_le_parse_att_write_request: +3504 68010478 fetch 2 ,mem_le_att_handle +3505 c006b536 beq new_spec_write_handle ,antilost_cmd_parse_for_application +3506 c005b571 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +3507 20600000 rtn + +antilost_key_process: +3508 6800c753 fetch 1 ,mem_antl_key_scan_enable +3509 207a0000 rtn blank +350a 20206978 branch keyscan_key_process + +antilost_key_up_down: +350b 1a227e00 copy rega ,pdata +350c 203a3510 branch antilost_key_is_up ,blank + +antilost_key_is_down: +350d 18e27e00 copy queue ,pdata +350e c0003513 beq 0 ,antilost_key0_down +350f 20600000 rtn + +antilost_key_is_up: +3510 18e27e00 copy queue ,pdata +3511 c000351b beq 0 ,antilost_key0_up +3512 20600000 rtn + +antilost_key0_down: +3513 70479d01 jam 1 ,mem_antl_key_state +3514 da6046f7 arg mem_antl_key_buzzer_style ,regc +3515 20403582 call antilost_buzzer_configuration +3516 da6046f0 arg mem_antl_key_led_style ,regc +3517 20403584 call antilost_led_configuration +3518 68014682 fetch 2 ,mem_ui_state_map +3519 c304b532 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +351a 20203521 branch antilost_butten_down_after_conn + +antilost_key0_up: +351b 70479d00 jam 0 ,mem_antl_key_state +351c 2020351d branch antilost_double_click_timer_init + +antilost_double_click_timer_init: +351d 6800c79a fetch 1 ,mem_butten_click_cnt +351e c1808000 rtnne 1 +351f 70479905 jam 5 ,mem_double_click_timer +3520 20600000 rtn + +antilost_butten_down_after_conn: +3521 6800c79a fetch 1 ,mem_butten_click_cnt +3522 1fe0fe01 pincrease 1 +3523 6000c79a store 1 ,mem_butten_click_cnt +3524 c000b527 beq 1 ,antilost_click_once +3525 c001352b beq 2 ,antilost_click_twice +3526 20600000 rtn + +antilost_click_once: +3527 2040355c call antilost_alert_off +3528 70477101 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +3529 da60476c arg mem_antl_key0_press ,regc +352a 20203544 branch antilost_prepare_data_and_send + +antilost_click_twice: +352b 70479a00 jam 0 ,mem_butten_click_cnt +352c 70477102 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +352d da60476c arg mem_antl_key0_press ,regc +352e 20403544 call antilost_prepare_data_and_send +352f 6800c79e fetch 1 ,mem_antl_lost_mode +3530 c000b551 beq 1 ,antilost_alert_on +3531 20600000 rtn + +antilost_butten_down_while_disconn: +3532 68014797 fetch 2 ,mem_antl_le_sleep_timeout +3533 60014791 store 2 ,mem_antl_le_sleep_timer +3534 2040355c call antilost_alert_off +3535 2020358f branch antilost_fast_adv_start + +antilost_cmd_parse_for_application: +3536 44e6c019 bpatch patch19_5 ,mem_patch19 +3537 204036fc call le_app_receive_data +3538 ea208000 ifetch 1 ,rega +3539 c001b53c beq opcode3_antl_start_alram ,antilost_on_of_alram +353a c003b540 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +353b 20600000 rtn + +antilost_on_of_alram: +353c 6800c79e fetch 1 ,mem_antl_lost_mode +353d c0003551 beq anti_le_alarm_off ,antilost_alert_on +353e c000b55c beq anti_le_alarm_on ,antilost_alert_off +353f 20600000 rtn + +antilost_configuration_for_alram: +3540 ea408000 ifetch 1 ,regb +3541 c000b564 beq 1 ,antilost_set_start_alarm_after_disconn +3542 c0003569 beq 0 ,antilost_set_no_alarm_after_disconn +3543 20600000 rtn + +antilost_prepare_data_and_send: +3544 44e74019 bpatch patch19_6 ,mem_patch19 +3545 6800c78b fetch 1 ,mem_client_characteristic_configuration_descriptor +3546 2feffe00 isolate1 notification_enable_bit ,pdata +3547 24608000 nrtn true +3548 1a608c06 add regc ,6 ,contr +3549 e8c10000 ifetch 2 ,contr +354a 1ff0fe00 byteswap pdata ,pdata +354b 1fe0f205 add pdata ,5 ,loopcnt +354c 1a608c03 add regc ,3 ,contr +354d 204036f0 call calc_check_sum_start +354e e0c08000 istore 1 ,contr +354f 1a622200 copy regc ,rega +3550 20207e3d branch queue_push + +antilost_alert_on: +3551 6800c759 fetch 1 ,mem_antl_power_state +3552 207a0000 rtn blank +3553 70479e01 jam 1 ,mem_antl_lost_mode +3554 da6046e9 arg mem_antl_alert_buzzer_stlye ,regc +3555 20403582 call antilost_buzzer_configuration +3556 da6046e2 arg mem_antl_alert_led_stlye ,regc +3557 20403584 call antilost_led_configuration +3558 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +3559 70478301 jam 1 ,mem_antl_key0_release + 8 +355a da60477b arg mem_antl_key0_release ,regc +355b 20203544 branch antilost_prepare_data_and_send + +antilost_alert_off: +355c 6800c79e fetch 1 ,mem_antl_lost_mode +355d 207a0000 rtn blank +355e 70479e00 jam 0 ,mem_antl_lost_mode +355f 20403586 call antilost_led_buzzer_stop_blink +3560 70478004 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +3561 70478300 jam 0 ,mem_antl_key0_release + 8 +3562 da60477b arg mem_antl_key0_release ,regc +3563 20203544 branch antilost_prepare_data_and_send + +antilost_set_start_alarm_after_disconn: +3564 70479f01 jam 1 ,mem_alarm_config +3565 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +3566 70478301 jam 1 ,mem_antl_key0_release + 8 +3567 da60477b arg mem_antl_key0_release ,regc +3568 20203544 branch antilost_prepare_data_and_send + +antilost_set_no_alarm_after_disconn: +3569 70479f00 jam 0 ,mem_alarm_config +356a 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +356b 70478300 jam 0 ,mem_antl_key0_release + 8 +356c da60477b arg mem_antl_key0_release ,regc +356d 20203544 branch antilost_prepare_data_and_send + +antilost_on_off_alarm_after_disconn: +356e 6800c79f fetch 1 ,mem_alarm_config +356f 207a0000 rtn blank +3570 20203551 branch antilost_alert_on + +antilost_notify_alarm_config_first_time: +3571 ea210000 ifetch 2 ,rega +3572 6001478b store 2 ,mem_client_characteristic_configuration_descriptor +3573 2feffe00 isolate1 notification_enable_bit ,pdata +3574 24608000 nrtn true +3575 6800c7a0 fetch 1 ,mem_alarm_config_notfy_cnt +3576 207a0000 rtn blank +3577 7047a000 jam 0 ,mem_alarm_config_notfy_cnt +3578 680447b6 fetch 8 ,mem_antl_le_interval_min +3579 60044496 store 8 ,mem_le_interval_min +357a 70479002 jam 2 ,mem_antl_send_updata_le_param_timer +357b 204035af call antilost_battery_process +357c 204035b9 call antilost_battery_calculate_end +357d 70478007 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +357e 6800c79f fetch 1 ,mem_alarm_config +357f 6000c783 store 1 ,mem_antl_key0_release + 8 +3580 da60477b arg mem_antl_key0_release ,regc +3581 20203544 branch antilost_prepare_data_and_send + +antilost_buzzer_configuration: +3582 da200001 arg 1 ,rega +3583 20203585 branch antilost_configuration_common + +antilost_led_configuration: +3584 da200000 arg 0 ,rega + +antilost_configuration_common: +3585 2020358c branch antilost_led_buzzer_style_configuration + +antilost_led_buzzer_stop_blink: +3586 da200000 arg 0 ,rega +3587 20407d19 call ui_led_blink_stop_global +3588 da200001 arg 1 ,rega +3589 20407d19 call ui_led_blink_stop_global +358a 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf +358b 202069d7 branch pwm_disable + +antilost_led_buzzer_style_configuration: +358c 20407d04 call calc_curr_struct_prt +358d df200007 arg 7 ,loopcnt +358e 20207d26 branch ui_led_set_style_global + 2 + +antilost_fast_adv_start: +358f da6046b8 arg mem_antl_fast_adv_led_style ,regc +3590 da40469a arg mem_antl_lpm_interval ,regb + +antilost_adv_start_common: +3591 20403596 call antilost_adv_interval_lpm_interval_set +3592 20403584 call antilost_led_configuration +3593 68014795 fetch 2 ,mem_antl_fast_adv_timeout +3594 60014793 store 2 ,mem_antl_fast_adv_timer +3595 202033fa branch app_ble_start_adv + +antilost_adv_interval_lpm_interval_set: +3596 ea410000 ifetch 2 ,regb +3597 60014154 store 2 ,mem_lpm_interval +3598 e8c10000 ifetch 2 ,contr +3599 60014482 store 2 ,mem_le_adv_interval +359a 20600000 rtn + +antilost_buzzer_pwm_init: +359b da200000 arg 0 ,rega +359c 204069a6 call pwm_init +359d 680347a1 fetch 6 ,mem_buzzer_pwm_conf +359e 60030a9a store 6 ,mem_pdatatemp +359f 204069ae call pwm_out_set +35a0 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf +35a1 202069d7 branch pwm_disable + +antilost_led_on_cb: +35a2 70479b01 jam 1 ,mem_antl_led_state +35a3 20600000 rtn + +antilost_led_off_cb: +35a4 70479b00 jam 0 ,mem_antl_led_state +35a5 20600000 rtn + +antilost_buzzer_off: +35a6 70479c00 jam 0 ,mem_antl_buzzer_state +35a7 6800c7a1 fetch 1 ,mem_buzzer_pwm_conf +35a8 202069d7 branch pwm_disable + +antilost_buzzer_on: +35a9 70479c01 jam 1 ,mem_antl_buzzer_state +35aa 680347a1 fetch 6 ,mem_buzzer_pwm_conf +35ab 60030a9a store 6 ,mem_pdatatemp +35ac 202069ae branch pwm_out_set + +antilost_adc_init: +35ad 70422d00 jam 0 ,mem_adc_config_flag +35ae 202068a8 branch adc_init_data + +antilost_battery_process: +35af 204068eb call adc_set_mode +35b0 20406908 call vdd_calculate_by_mode +35b1 600147b0 store 2 ,mem_battery_current_voltage +35b2 da2047aa arg mem_battery_calculate_set ,rega +35b3 20406930 call adc_bat_percent_lowpower_out +35b4 6000c7a9 store 1 ,mem_voltage_remain_percent +35b5 c00035be beq 0 ,antilost_low_battery +35b6 1fe67c64 sub pdata ,0x64 ,null +35b7 242135bc nbranch antilost_full_battery ,positive +35b8 6000c783 store 1 ,mem_antl_key0_release + 8 + +antilost_battery_calculate_end: +35b9 70478005 jam opcode5_batter_information ,mem_antl_key0_release + 5 +35ba da60477b arg mem_antl_key0_release ,regc +35bb 20203544 branch antilost_prepare_data_and_send + +antilost_full_battery: +35bc 70478364 jam 100 ,mem_antl_key0_release + 8 +35bd 202035b9 branch antilost_battery_calculate_end + +antilost_low_battery: +35be 2020341a branch app_button_long_pressed + +car_init: +35bf 20758000 rtn wake +35c0 68108081 hfetch 1 ,core_gpio_sel1 +35c1 1fe17ef0 and_into 0xf0 ,pdata +35c2 60108081 hstore 1 ,core_gpio_sel1 +35c3 58003631 setarg car_le_before_hibernate +35c4 600141eb store 2 ,mem_cb_before_hibernate +35c5 58003633 setarg car_le_process_lpm_before +35c6 600141ed store 2 ,mem_cb_before_lpm +35c7 5800340a setarg app_enter_hibernate +35c8 600141f7 store 2 ,mem_cb_discovry_timeout +35c9 58003635 setarg car_scale_process_idle +35ca 600141f3 store 2 ,mem_cb_idle_process +35cb 5800364b setarg car_scale_process_bb_event +35cc 600141f5 store 2 ,mem_cb_bb_event_process +35cd 580033d0 setarg app_get_lpm_wake_lock +35ce 600141e9 store 2 ,mem_cb_check_wakelock +35cf 580036f6 setarg car_le_receive_data +35d0 600141f9 store 2 ,mem_cb_att_write +35d1 5800367a setarg car_le_bb_event_timer +35d2 600141fd store 2 ,mem_cb_event_timer +35d3 20402c7a call g24_head_ptr2regc +35d4 58003722 setarg car_24g_receive_data +35d5 1a608ade add regc ,offset_24g_cb_rxdata_type1 ,contw +35d6 e0a10000 istore 2 ,contw +35d7 580035ed setarg car_power_off_signal +35d8 6001475b store 2 ,mem_remote_car_power_off_cb +35d9 580035ef setarg car_soft_switch_power_on_signal +35da 6001475f store 2 ,mem_remote_car_power_standby_cb +35db 44e7c019 bpatch patch19_7 ,mem_patch19 +35dc 20403628 call car_init_environment +35dd 20407e38 call queue_init +35de 70417202 jam 2 ,mem_lpm_mult +35df 7049f600 jam power_on ,mem_car_24g_received_pac +35e0 6800c7cb fetch 1 ,mem_car_config_soft_switch_enable +35e1 6000c69a store 1 ,mem_car_hard_soft_switch +35e2 c00035ee beq hard_switch ,car_hard_switch_power_on_signal +35e3 6800c7cc fetch 1 ,mem_car_config_soft_switch_gpio +35e4 6000c686 store 1 ,mem_ui_button_gpio +35e5 70436e00 jam off ,mem_le_adv_enable + +car_soft_switch_power_on_init: +35e6 2040360f call car_ui_led_init +35e7 20407cd3 call ui_button_init +35e8 20407cdd call ui_button_polling +35e9 7047f301 jam power_starting ,mem_car_power_state +35ea 68014682 fetch 2 ,mem_ui_state_map +35eb c3860000 rtnbit1 ui_state_btn_down +35ec 2020340a branch app_enter_hibernate + +car_power_off_signal: +35ed 2020360f branch car_ui_led_init + +car_hard_switch_power_on_signal: +35ee 7047f302 jam power_standby ,mem_car_power_state + +car_soft_switch_power_on_signal: +35ef 70436e01 jam on ,mem_le_adv_enable +35f0 2040360f call car_ui_led_init +35f1 da200000 arg 0 ,rega +35f2 20407d1e call ui_led_blink_start_global +35f3 58000020 setarg fast_adv_interval_value_car +35f4 204046f0 call shutter_ble_adv_interval_set + +car_le_modified_name_adv: +35f5 d8a043b7 arg mem_le_name + 7 ,contw +35f6 6800c4a0 fetch 1 ,mem_le_lap + +car_name_loop: +35f7 1fe104f0 and pdata ,0xF0 ,temp +35f8 18518400 rshift4 temp ,temp +35f9 20403609 call car_hex_to_ascii +35fa e0a88000 istoret 1 ,contw +35fb 1fe1040f and pdata ,0x0F ,temp +35fc 20403609 call car_hex_to_ascii +35fd e0a88000 istoret 1 ,contw +35fe 204057a6 call le_modified_name_att_list +35ff 6808c3af fetcht 1 ,mem_le_name_len +3600 18427200 copy temp ,loopcnt +3601 d8a04372 arg mem_le_adv_data + 2 ,contw +3602 d8c043b0 arg mem_le_name ,contr +3603 20407f01 call memcpy + +car_le_modified_name_scan: +3604 6808c3af fetcht 1 ,mem_le_name_len +3605 18427200 copy temp ,loopcnt +3606 d8a04392 arg mem_le_scan_data + 2 ,contw +3607 d8c043b0 arg mem_le_name ,contr +3608 20207f01 branch memcpy + +car_hex_to_ascii: +3609 18467c09 sub temp ,9 ,null +360a 2021360d branch car_hex_num ,positive +360b 18408437 add temp ,55 ,temp +360c 20600000 rtn + +car_hex_num: +360d 18408430 add temp ,48 ,temp +360e 20600000 rtn + +car_ui_led_init: +360f 6800c7c0 fetch 1 ,mem_car_config_blood_led1_gpio +3610 c0ffb621 bne invalid_pin_num ,car_blood_led_gpio_set + +car_ui_led_init_1: +3611 6800c7be fetch 1 ,mem_car_config_pairing_led_gpio +3612 c0ffb624 bne invalid_pin_num ,car_pairing_led_gpio_set + +car_ui_led_init_2: +3613 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio +3614 c0ffb626 bne invalid_pin_num ,car_low_voltage_led_gpio_set + +car_ui_led_init_3: +3615 6800c72c fetch 1 ,mem_car_led_num +3616 1fe27200 copy pdata ,loopcnt +3617 5800472d setarg mem_car_led_map +3618 1fe22200 copy pdata ,rega + +car_in_lp1: +3619 1a220c00 copy rega ,contr +361a e8c08000 ifetch 1 ,contr +361b 18c22200 copy contr ,rega +361c c07fb61f beq invalid_pin_num ,car_in_lp1_end +361d 1fe20400 copy pdata ,temp +361e 2040680e call gpio_config_output + +car_in_lp1_end: +361f c2003619 loop car_in_lp1 + +car_ui_led_init_end: +3620 20600000 rtn + +car_blood_led_gpio_set: +3621 680447c0 fetch 8 ,mem_car_config_blood_led1_gpio +3622 6004472f store 8 ,mem_car_led_map + 2 +3623 20203611 branch car_ui_led_init_1 + +car_pairing_led_gpio_set: +3624 6000c72d store 1 ,mem_car_led_map +3625 20203613 branch car_ui_led_init_2 + +car_low_voltage_led_gpio_set: +3626 6000c72e store 1 ,mem_car_led_map + 1 +3627 20203615 branch car_ui_led_init_3 + +car_init_environment: +3628 da200000 arg 0 ,rega +3629 204069a6 call pwm_init +362a 204037e4 call car_ir_rx_init +362b 20402c7d call g24_receive_process_init +362c 2020362d branch car_init_adc_hvin + +car_init_adc_hvin: +362d 7047cf64 jam 100 ,mem_car_notify_vdd_value_last +362e 6800c7c9 fetch 1 ,mem_car_config_low_voltage_led_gpio +362f 6000c744 store 1 ,mem_car_style2_struct_led_gpio +3630 202068a8 branch adc_init_data + +car_le_before_hibernate: +3631 20406835 call gpio_set_before_lpm_common +3632 2020696c branch keyscan_process_lpm_before + +car_le_process_lpm_before: +3633 2020696c branch keyscan_process_lpm_before + +car_key_scan_process: +3634 20206978 branch keyscan_key_process + +car_scale_process_idle: +3635 20403642 call car_le_send_packet +3636 204037ee call car_ir_receive_process +3637 20403639 call car_g24_status_process +3638 20203634 branch car_key_scan_process + +car_g24_status_process: +3639 68014682 fetch 2 ,mem_ui_state_map +363a c3848000 rtnbit1 ui_state_ble_connected +363b 6800c9f6 fetch 1 ,mem_car_24g_received_pac +363c c000b63e beq work_paired ,car_g24_connected_event +363d 20600000 rtn + +car_g24_connected_event: +363e 6800c7ea fetch 1 ,mem_car_24g_status +363f c1008000 rtneq work_paired +3640 7047ea01 jam work_paired ,mem_car_24g_status +3641 20203654 branch car_g24_connected + +car_le_send_packet: +3642 68014682 fetch 2 ,mem_ui_state_map +3643 c4048000 rtnbit0 ui_state_ble_connected +3644 20405892 call le_fifo_check_nearly_full +3645 247a0000 nrtn blank +3646 da204718 arg mem_car_pop_queue_buff ,rega +3647 20407e54 call queue_pop +3648 24740000 nrtn user +3649 d8c04718 arg mem_car_pop_queue_buff ,contr +364a 20204746 branch le_send_notify_from_list + +car_scale_process_bb_event: +364b 1a627e00 copy regc ,pdata +364c c016b431 beq bt_evt_button_up ,app_event_button_up +364d c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed +364e c00a3651 beq bt_evt_le_connected ,car_scale_event_le_conn +364f c00ab660 beq bt_evt_le_disconnected ,car_scale_event_le_discon +3650 20600000 rtn + +car_scale_event_le_conn: +3651 58000000 setarg disable_24g +3652 20403220 call g24_store_mem_24g_mode +3653 20203656 branch car_scale_process_conn + +car_g24_connected: +3654 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count +3655 600147ed store 2 ,mem_car_24g_no_data_timeout_timer + +car_scale_process_conn: +3656 7047ce14 jam 0x14 ,mem_car_notify_vdd_timer +3657 70409100 jam 0 ,mem_lpm_mode +3658 204033f8 call app_ble_stop_adv +3659 20403416 call app_lpm_mult_enable +365a 6800c7bd fetch 1 ,mem_car_config_pairing_led_conn_status +365b c000b65e beq 0x01 ,car_pairing_led_conn_status_setting + +car_scale_process_conn_next: +365c da200000 arg 0 ,rega +365d 20207d14 branch ui_led_on_global + +car_pairing_led_conn_status_setting: +365e da200000 arg 0 ,rega +365f 20207d19 branch ui_led_blink_stop_global + +car_scale_event_le_discon: +3660 58000002 setarg rx_24g +3661 20403220 call g24_store_mem_24g_mode + +car_g24_disconnect: +3662 58000000 setarg 0 +3663 6002c79c store 5 ,mem_car_led_control +3664 58000004 setarg 4 +3665 204069d7 call pwm_disable +3666 58000005 setarg 5 +3667 204069d7 call pwm_disable +3668 58000014 setarg 20 +3669 204069d7 call pwm_disable +366a 58000015 setarg 21 +366b 204069d7 call pwm_disable +366c 58000016 setarg 22 +366d 204069d7 call pwm_disable +366e 58000007 setarg 7 +366f 204069d7 call pwm_disable +3670 20407e38 call queue_init +3671 70475e0a jam 10 ,mem_motor1_speed +3672 7047600a jam 10 ,mem_motor2_speed +3673 7047620a jam 10 ,mem_motor3_speed +3674 70417202 jam 2 ,mem_lpm_mult +3675 da200000 arg 0 ,rega +3676 20407d1e call ui_led_blink_start_global +3677 58000020 setarg fast_adv_interval_value_car +3678 204046f0 call shutter_ble_adv_interval_set +3679 202033fa branch app_ble_start_adv + +car_le_bb_event_timer: +367a 2040373b call car_moto1_blank_data_timer +367b 2040373e call car_moto2_blank_data_timer +367c 20403741 call car_moto3_blank_data_timer +367d 2040337b call app_power_timer +367e 204036c8 call car_led_control_timer +367f 204036a1 call car_notify_vdd_timer +3680 2040368a call car_24g_no_data_timeout_timer +3681 20403683 call car_ir_breakdown_timer +3682 2020368f branch car_attack_shake_timer + +car_ir_breakdown_timer: +3683 da60479a arg mem_car_ir_breakdown_check_timer ,regc +3684 da403686 arg car_ir_breakdown_timeout ,regb +3685 2020336d branch timer_single_step + +car_ir_breakdown_timeout: +3686 20403847 call car_ir_gpio_get_status +3687 24608000 nrtn true +3688 70479b01 jam 1 ,mem_car_ir_breakdown_flag +3689 20600000 rtn + +car_24g_no_data_timeout_timer: +368a da6047ed arg mem_car_24g_no_data_timeout_timer ,regc +368b da40368d arg car_24g_no_data_timer_timeout ,regb +368c 20203374 branch timer_single_step_2b + +car_24g_no_data_timer_timeout: +368d 7047ea02 jam work_search ,mem_car_24g_status +368e 20203662 branch car_g24_disconnect + +car_attack_shake_timer: +368f da6047f1 arg mem_car_attack_shake_timer ,regc +3690 da403692 arg car_attack_shake ,regb +3691 2020336d branch timer_single_step + +car_attack_shake: +3692 6800c7f2 fetch 1 ,mem_car_attack_shake_flag +3693 203a369e branch car_attack_shake_stop ,blank +3694 7047f102 jam 2 ,mem_car_attack_shake_timer +3695 7047f200 jam 0 ,mem_car_attack_shake_flag +3696 58000a02 setarg 0x0a02 +3697 60014752 store 2 ,mem_le_receive_payload +3698 6800c7b9 fetch 1 ,mem_car_config_device_select +3699 c001b69b beq device_battle_tank ,car_attack_shake_front_battle_tank + +car_attack_shake_front_battle_car: +369a 20203762 branch car_motor_control + +car_attack_shake_front_battle_tank: +369b 58000a02 setarg 0x0a02 +369c 60014754 store 2 ,mem_le_receive_payload + 2 +369d 20203762 branch car_motor_control + +car_attack_shake_stop: +369e 58000000 setarg 0 +369f 60024752 store 4 ,mem_le_receive_payload +36a0 20203762 branch car_motor_control + +car_notify_vdd_timer: +36a1 6800c7c8 fetch 1 ,mem_car_config_bat_notify_enable +36a2 207a0000 rtn blank +36a3 68014682 fetch 2 ,mem_ui_state_map +36a4 c304b6c6 bbit0 ui_state_ble_connected ,car_low_bat_led_off +36a5 da6047ce arg mem_car_notify_vdd_timer ,regc +36a6 da4036a8 arg car_notify_vdd ,regb +36a7 2020336d branch timer_single_step + +car_notify_vdd: +36a8 6800c7cd fetch 1 ,mem_car_notify_vdd_count +36a9 6000c7ce store 1 ,mem_car_notify_vdd_timer +36aa 6800c7d1 fetch 1 ,mem_car_working_flag +36ab 247a0000 nrtn blank + +car_read_hvin: +36ac 204068eb call adc_set_mode +36ad 20406908 call vdd_calculate_by_mode +36ae 600147e8 store 2 ,mem_vdd_now_vol +36af da2047e2 arg mem_vdd_calculate_set ,rega +36b0 20406930 call adc_bat_percent_lowpower_out +36b1 6808c7cf fetcht 1 ,mem_car_notify_vdd_value_last +36b2 98467c00 isub temp ,null +36b3 202136b6 branch car_notify_vdd_next2 ,positive +36b4 6000c7cf store 1 ,mem_car_notify_vdd_value_last +36b5 1fe20400 copy pdata ,temp + +car_notify_vdd_next2: +36b6 6008c7d0 storet 1 ,mem_car_notify_vdd_percent +36b7 6800c7ca fetch 1 ,mem_car_config_low_voltage_percent +36b8 98467c00 isub temp ,null +36b9 204136c1 call car_enter_low_bat ,positive +36ba 6008c7db storet 1 ,mem_notify_bat_payload +36bb df200006 arg 6 ,loopcnt +36bc d8c047d6 arg mem_notify_bat_head ,contr +36bd 204036f0 call calc_check_sum_start +36be 6000c7dc store 1 ,mem_notify_bat_check_sum +36bf da2047d3 arg mem_notify_bat_packet ,rega +36c0 20207e3d branch queue_push + +car_enter_low_bat: +36c1 6800c7d2 fetch 1 ,mem_low_bat_flag +36c2 247a0000 nrtn blank +36c3 7047d201 jam 1 ,mem_low_bat_flag +36c4 da200001 arg 1 ,rega +36c5 20207d1e branch ui_led_blink_start_global + +car_low_bat_led_off: +36c6 da200001 arg 1 ,rega +36c7 20207d19 branch ui_led_blink_stop_global + +car_led_control_timer: +36c8 da6047a4 arg mem_car_led_control_timer ,regc +36c9 da4036cb arg car_led_control ,regb +36ca 2020336d branch timer_single_step + +car_led_control: +36cb 7047a405 jam 5 ,mem_car_led_control_timer +36cc 7047a600 jam 0 ,mem_car_led_no +36cd 6800c7a5 fetch 1 ,mem_car_led_blink_status +36ce c000b6ee beq led_on ,car_led_control_blink_off +36cf c00036ec beq led_off ,car_led_control_blink_on + +car_led_control_set: +36d0 d8c0479c arg mem_car_led_control ,contr +36d1 18c22200 copy contr ,rega +36d2 df200008 arg 8 ,loopcnt + +car_led_control_timer_next: +36d3 1a220c00 copy rega ,contr +36d4 e8c08000 ifetch 1 ,contr +36d5 18c22200 copy contr ,rega +36d6 c00036e3 beq led_off ,car_led_control_off +36d7 c000b6e6 beq led_on ,car_led_control_on +36d8 c00136e9 beq led_blink ,car_led_control_blink + +car_led_control_timer_next_2: +36d9 6800c7a6 fetch 1 ,mem_car_led_no +36da 1fe0fe01 increase 1 ,pdata +36db 6000c7a6 store 1 ,mem_car_led_no +36dc c20036d3 loop car_led_control_timer_next +36dd 20600000 rtn + +car_led_switch: +36de 6800c7a6 fetch 1 ,mem_car_led_no +36df da4047c0 arg mem_car_config_blood_led_gpio ,regb +36e0 9a40a400 iadd regb ,regb +36e1 ea488000 ifetcht 1 ,regb +36e2 20600000 rtn + +car_led_control_off: +36e3 204036de call car_led_switch +36e4 20406825 call gpio_out_inactive +36e5 202036d9 branch car_led_control_timer_next_2 + +car_led_control_on: +36e6 204036de call car_led_switch +36e7 20406829 call gpio_out_active +36e8 202036d9 branch car_led_control_timer_next_2 + +car_led_control_blink: +36e9 6800c7a5 fetch 1 ,mem_car_led_blink_status +36ea c000b6e3 beq led_on ,car_led_control_off +36eb 202036e6 branch car_led_control_on + +car_led_control_blink_on: +36ec 7047a501 jam led_on ,mem_car_led_blink_status +36ed 202036d0 branch car_led_control_set + +car_led_control_blink_off: +36ee 7047a500 jam led_off ,mem_car_led_blink_status +36ef 202036d0 branch car_led_control_set + +calc_check_sum_start: +36f0 da200000 arg 0 ,rega + +calc_check_sum_loop: +36f1 e8c08000 ifetch 1 ,contr +36f2 9a20a200 iadd rega ,rega +36f3 c20036f1 loop calc_check_sum_loop + +calc_check_sum_and: +36f4 1a217eff and rega ,0xff ,pdata +36f5 20600000 rtn + +car_le_receive_data: +36f6 68008477 fetch 1 ,mem_le_att_opcode +36f7 c00936f9 beq attop_write_request ,car_le_parse_att_write_request +36f8 20600000 rtn + +car_le_parse_att_write_request: +36f9 68010478 fetch 2 ,mem_le_att_handle +36fa c00a3710 beq att_car_control_handle ,car_control_le_receive +36fb 20600000 rtn + +le_app_receive_data: +36fc 44e8401a bpatch patch1a_0 ,mem_patch1a +36fd ea228000 ifetch 5 ,rega +36fe 60028b12 store 5 ,mem_app_receive_temp +36ff 68010b12 fetch 2 ,mem_app_receive_temp +3700 d8406b5a arg le_receive_packet_head ,temp +3701 98467c00 isub temp ,null +3702 24628000 nrtn zero +3703 68010b15 fetch 2 ,mem_app_receive_temp + 3 +3704 1ff0fe00 byteswap pdata ,pdata +3705 60010b15 store 2 ,mem_app_receive_temp + 3 +3706 1fe27200 copy pdata ,loopcnt +3707 1a20a205 increase 5 ,rega +3708 1a220c00 copy rega ,contr +3709 d8a00b17 arg mem_app_receive_temp + 5 ,contw +370a 20407f01 call memcpy +370b e8c08000 ifetch 1 ,contr +370c 60008b21 store 1 ,mem_app_receive_temp + 15 +370d da200b14 arg mem_app_receive_temp + 2 ,rega +370e da400b17 arg mem_app_receive_temp + 5 ,regb +370f 20600000 rtn + +car_control_le_receive: +3710 58000000 setarg 0 +3711 6002c752 store 5 ,mem_le_receive_payload +3712 6002c757 store 5 ,mem_le_receive_payload + 5 +3713 204036fc call le_app_receive_data +3714 1a420c00 copy regb ,contr +3715 d8a04752 arg mem_le_receive_payload ,contw +3716 df20000a arg 10 ,loopcnt +3717 20407f01 call memcpy + +car_receive_cmd_select: +3718 44e8c01a bpatch patch1a_1 ,mem_patch1a +3719 ea208000 ifetch 1 ,rega +371a c001374a beq car_cmd_old_car_control ,car_drive_old +371b c001b75c beq car_cmd_old_speed_control ,car_speed_set_old +371c c0023762 beq car_cmd_l_r_motor_control ,car_motor_control +371d c002b762 beq car_cmd_f_b_motor_control ,car_motor_control +371e c00337b1 beq car_cmd_ir_control ,car_ir_data_rx_from_app +371f c003b849 beq car_cmd_led_control ,car_led_control_receive +3720 c004384c beq car_cmd_device_info ,car_info_request +3721 20600000 rtn + +car_24g_receive_data: +3722 68014682 fetch 2 ,mem_ui_state_map +3723 c3848000 rtnbit1 ui_state_ble_connected +3724 680147eb fetch 2 ,mem_car_24g_no_data_timeout_count +3725 600147ed store 2 ,mem_car_24g_no_data_timeout_timer +3726 7049f601 jam work_paired ,mem_car_24g_received_pac +3727 5800010c setarg offset_24g_rxdata_temp_add3 +3728 204032cd call g24_set_rega +3729 20403710 call car_control_le_receive +372a 68008b14 fetch 1 ,mem_app_receive_temp + 2 +372b c002372e beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +372c c002b72e beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +372d 20600000 rtn + +car_24g_receive_data_next: +372e 6800c752 fetch 1 ,mem_le_receive_payload +372f 245a3735 ncall car_moto1_enable_blank_data_timer ,blank +3730 6800c754 fetch 1 ,mem_le_receive_payload + 2 +3731 245a3737 ncall car_moto2_enable_blank_data_timer ,blank +3732 6800c756 fetch 1 ,mem_le_receive_payload + 4 +3733 245a3739 ncall car_moto3_enable_blank_data_timer ,blank +3734 20600000 rtn + +car_moto1_enable_blank_data_timer: +3735 7049f305 jam 5 ,mem_car_moto1_blank_timer +3736 20600000 rtn + +car_moto2_enable_blank_data_timer: +3737 7049f405 jam 5 ,mem_car_moto2_blank_timer +3738 20600000 rtn + +car_moto3_enable_blank_data_timer: +3739 7049f505 jam 5 ,mem_car_moto3_blank_timer +373a 20600000 rtn + +car_moto1_blank_data_timer: +373b da6049f3 arg mem_car_moto1_blank_timer ,regc +373c da403744 arg car_moto1_blank_data ,regb +373d 2020336d branch timer_single_step + +car_moto2_blank_data_timer: +373e da6049f4 arg mem_car_moto2_blank_timer ,regc +373f da403746 arg car_moto2_blank_data ,regb +3740 2020336d branch timer_single_step + +car_moto3_blank_data_timer: +3741 da6049f5 arg mem_car_moto3_blank_timer ,regc +3742 da403748 arg car_moto3_blank_data ,regb +3743 2020336d branch timer_single_step + +car_moto1_blank_data: +3744 70475200 jam 0 ,mem_le_receive_payload +3745 20203762 branch car_motor_control + +car_moto2_blank_data: +3746 70475400 jam 0 ,mem_le_receive_payload + 2 +3747 20203762 branch car_motor_control + +car_moto3_blank_data: +3748 70475600 jam 0 ,mem_le_receive_payload + 4 +3749 20203762 branch car_motor_control + +car_drive_old: +374a 2040374c call car_left_right_control_old +374b 2020374f branch car_front_back_control_old + +car_left_right_control_old: +374c 6800c752 fetch 1 ,mem_le_receive_payload +374d 6000c75f store 1 ,mem_motor2_status +374e 20203773 branch car_motor2_control + +car_front_back_control_old: +374f 6800c75e fetch 1 ,mem_motor1_speed +3750 20403754 call car_reset_old_speed +3751 6800c753 fetch 1 ,mem_le_receive_payload + 1 +3752 6000c75d store 1 ,mem_motor1_status +3753 20203770 branch car_motor1_control + +car_reset_old_speed: +3754 c0013758 beq speed_level_2 ,car_reset_old_speed2 +3755 c001b75a beq speed_level_3 ,car_reset_old_speed3 +3756 6000c75e store 1 ,mem_motor1_speed +3757 20600000 rtn + +car_reset_old_speed2: +3758 70475e05 jam speed_level_5 ,mem_motor1_speed +3759 20600000 rtn + +car_reset_old_speed3: +375a 70475e0a jam speed_level_10 ,mem_motor1_speed +375b 20600000 rtn + +car_speed_set_old: +375c 6800c752 fetch 1 ,mem_le_receive_payload +375d 20403754 call car_reset_old_speed +375e 6800c75e fetch 1 ,mem_motor1_speed +375f 2040379e call car_motor_speed_duty_setting +3760 204037a1 call car_motor_speed_duty_transform +3761 202069c4 branch pwm_pwm0_duty_set + +car_motor_control: +3762 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag +3763 247a0000 nrtn blank +3764 68034752 fetch 6 ,mem_le_receive_payload +3765 6003475d store 6 ,mem_motor1_status +3766 6800c75e fetch 1 ,mem_motor1_speed +3767 6808c760 fetcht 1 ,mem_motor2_speed +3768 98417e00 iand temp ,pdata +3769 6808c762 fetcht 1 ,mem_motor3_speed +376a 98417e00 iand temp ,pdata +376b 205a3779 call car_motor_working_flag ,blank +376c 44e9401a bpatch patch1a_2 ,mem_patch1a +376d 20403770 call car_motor1_control +376e 20403773 call car_motor2_control +376f 20203776 branch car_motor3_control + +car_motor1_control: +3770 da404763 arg mem_motor1_pwm_set ,regb +3771 d8c0475d arg mem_motor1_status ,contr +3772 2020377b branch car_motor_status_select + +car_motor2_control: +3773 da40476b arg mem_motor2_pwm_set ,regb +3774 d8c0475f arg mem_motor2_status ,contr +3775 2020377b branch car_motor_status_select + +car_motor3_control: +3776 da404773 arg mem_motor3_pwm_set ,regb +3777 d8c04761 arg mem_motor3_status ,contr +3778 2020377b branch car_motor_status_select + +car_motor_working_flag: +3779 7047d100 jam 0 ,mem_car_working_flag +377a 20600000 rtn + +car_motor_status_select: +377b e8c08000 ifetch 1 ,contr +377c c0003787 beq motor_stop ,car_motor_stop +377d c000b780 beq go_front ,car_motor_positive +377e c0013782 beq go_back ,car_motor_negative +377f 20600000 rtn + +car_motor_positive: +3780 70477b00 jam 0 ,mem_motor_select_p_n +3781 20203783 branch car_motor_negative + 1 + +car_motor_negative: +3782 70477b01 jam 1 ,mem_motor_select_p_n +3783 e8c08000 ifetch 1 ,contr +3784 6000c77d store 1 ,mem_car_motor_speed +3785 ea440000 ifetch 8 ,regb +3786 2020378c branch car_motor_work + +car_motor_stop: +3787 ea408000 ifetch 1 ,regb +3788 204069d7 call pwm_disable +3789 1a40a401 increase 1 ,regb +378a ea408000 ifetch 1 ,regb +378b 202069d7 branch pwm_disable + +car_motor_work: +378c 6004477e store 8 ,mem_motor_pwm_pin1_set +378d 7047d101 jam 1 ,mem_car_working_flag +378e 6800c77b fetch 1 ,mem_motor_select_p_n +378f c000379a beq 0 ,car_motor_select_positive + +car_motor_select_negative: +3790 6800c77f fetch 1 ,mem_motor_pwm_pin2_set +3791 6000c780 store 1 ,mem_motor_pwm_pin_set +3792 6800c77e fetch 1 ,mem_motor_pwm_pin1_set + +car_motor_work_next: +3793 204069d7 call pwm_disable +3794 6800c77d fetch 1 ,mem_car_motor_speed +3795 2040379e call car_motor_speed_duty_setting +3796 6000c785 store 1 ,mem_motor_pwm_dute_set +3797 68034780 fetch 6 ,mem_motor_pwm_pin_set +3798 60030a9a store 6 ,mem_pdatatemp +3799 202069ae branch pwm_out_set + +car_motor_select_positive: +379a 6800c77e fetch 1 ,mem_motor_pwm_pin1_set +379b 6000c780 store 1 ,mem_motor_pwm_pin_set +379c 6800c77f fetch 1 ,mem_motor_pwm_pin2_set +379d 20203793 branch car_motor_work_next + +car_motor_speed_duty_setting: +379e 1feffe05 mul32 pdata ,5 ,pdata +379f 1fe0fe32 add pdata ,50 ,pdata +37a0 20600000 rtn + +car_motor_speed_duty_transform: +37a1 d8402ee0 arg 12000 ,temp +37a2 984ffe00 imul32 temp ,pdata +37a3 1fe6fc64 div pdata ,100 +37a4 20407f86 call wait_div_end +37a5 18078400 quotient temp +37a6 18422200 copy temp ,rega +37a7 58002ee0 setarg 12000 +37a8 98462400 isub temp ,regb +37a9 20600000 rtn + +car_ir_init: +37aa 68108082 hfetch 1 ,core_gpio_sel2 +37ab 79207e02 set1 2 ,pdata +37ac 60108082 hstore 1 ,core_gpio_sel2 +37ad 5800009e setarg 158 +37ae 60110068 hstore 2 ,core_pwm_pcnt4 +37af 6011006a hstore 2 ,core_pwm_ncnt4 +37b0 20600000 rtn + +car_ir_data_rx_from_app: +37b1 6800c7f0 fetch 1 ,mem_car_24g_go_die_flag +37b2 247a0000 nrtn blank +37b3 68014752 fetch 2 ,mem_le_receive_payload +37b4 60014787 store 2 ,mem_ir_data +37b5 6800c7ea fetch 1 ,mem_car_24g_status +37b6 c080b7b9 bne work_paired ,car_ir_data_tx +37b7 680144a0 fetch 2 ,mem_le_lap +37b8 60014787 store 2 ,mem_ir_data + +car_ir_data_tx: +37b9 44e9c01a bpatch patch1a_3 ,mem_patch1a +37ba 204037aa call car_ir_init +37bb 204037dc call car_ir_enable +37bc 5800bb80 setarg 48000 +37bd 20402a8f call sleep +37be 204037e0 call car_ir_disable +37bf 58001c20 setarg 7200 +37c0 20402a8f call sleep +37c1 df200010 arg 16 ,loopcnt + +car_ir_send_loop: +37c2 204037dc call car_ir_enable +37c3 68014787 fetch 2 ,mem_ir_data +37c4 c28037c9 bbit1 0 ,car_ir_is_bit1 +37c5 58001c20 setarg 7200 +37c6 20402a8f call sleep +37c7 204037e0 call car_ir_disable +37c8 202037cc branch car_ir_wait_finish + +car_ir_is_bit1: +37c9 58003840 setarg 14400 +37ca 20402a8f call sleep +37cb 204037e0 call car_ir_disable + +car_ir_wait_finish: +37cc 58001c20 setarg 7200 +37cd 20402a8f call sleep +37ce 68014787 fetch 2 ,mem_ir_data +37cf 1fe37e00 rshift pdata ,pdata +37d0 60014787 store 2 ,mem_ir_data +37d1 c20037c2 loop car_ir_send_loop +37d2 7047f102 jam 2 ,mem_car_attack_shake_timer +37d3 7047f201 jam 1 ,mem_car_attack_shake_flag +37d4 58000a01 setarg 0x0a01 +37d5 60014752 store 2 ,mem_le_receive_payload +37d6 6800c7b9 fetch 1 ,mem_car_config_device_select +37d7 c001b7d9 beq device_battle_tank ,car_attack_shake_back_battle_tank + +car_attack_shake_back_battle_car: +37d8 20203762 branch car_motor_control + +car_attack_shake_back_battle_tank: +37d9 58000a01 setarg 0x0a01 +37da 60014754 store 2 ,mem_le_receive_payload + 2 +37db 20203762 branch car_motor_control + +car_ir_enable: +37dc 68108085 hfetch 1 ,core_gpio_key2 +37dd 1fe1fe40 or_into 0x40 ,pdata +37de 60108085 hstore 1 ,core_gpio_key2 +37df 20600000 rtn + +car_ir_disable: +37e0 68108085 hfetch 1 ,core_gpio_key2 +37e1 1fe17ebf and_into 0xbf ,pdata +37e2 60108085 hstore 1 ,core_gpio_key2 +37e3 20600000 rtn + +car_ir_rx_init: +37e4 6800c7bb fetch 1 ,mem_car_config_ir_enable +37e5 c1000000 rtneq 0x00 +37e6 20402c65 call lpm_disable_exen_output +37e7 6808c7bc fetcht 1 ,mem_car_config_ir_rx_gpio +37e8 6008c786 storet 1 ,mem_ir_rx_gpio +37e9 204067fb call gpio_config_input +37ea 20403847 call car_ir_gpio_get_status +37eb 24608000 nrtn true +37ec 70479a01 jam 1 ,mem_car_ir_breakdown_check_timer +37ed 20600000 rtn + +car_ir_receive_process: +37ee 6800c7bb fetch 1 ,mem_car_config_ir_enable +37ef c1000000 rtneq flag_ir_disable +37f0 6800c79b fetch 1 ,mem_car_ir_breakdown_flag +37f1 247a0000 nrtn blank +37f2 68014682 fetch 2 ,mem_ui_state_map +37f3 c284b7f6 bbit1 ui_state_ble_connected ,car_ir_receive_process_next +37f4 6800c7ea fetch 1 ,mem_car_24g_status +37f5 c1808000 rtnne work_paired + +car_ir_receive_process_next: +37f6 44ea401a bpatch patch1a_4 ,mem_patch1a +37f7 20403847 call car_ir_gpio_get_status +37f8 24608000 nrtn true +37f9 58008ca0 setarg 36000 +37fa 20402a8f call sleep +37fb 20403847 call car_ir_gpio_get_status +37fc 24608000 nrtn true +37fd 2040383f call car_ir_clk_get + +car_ir_packet_head_wait_end: +37fe 20403842 call car_ir_clk_check +37ff 24610000 nrtn positive +3800 20403847 call car_ir_gpio_get_status +3801 2020b7fe branch car_ir_packet_head_wait_end ,true +3802 da200000 arg 0 ,rega +3803 df200010 arg 16 ,loopcnt +3804 2040383f call car_ir_clk_get + +car_ir_receive_process_loop: +3805 20403842 call car_ir_clk_check +3806 24610000 nrtn positive +3807 20403847 call car_ir_gpio_get_status +3808 2420b805 nbranch car_ir_receive_process_loop ,true +3809 58002a30 setarg 10800 +380a 20402a8f call sleep +380b 20403847 call car_ir_gpio_get_status +380c 2020b812 branch car_ir_get_bit1 ,true + +car_ir_get_bit0: +380d 58000000 setarg 0 +380e 1a232200 rshift rega ,rega +380f 9a21a200 ior rega ,rega +3810 c2003805 loop car_ir_receive_process_loop +3811 2020381b branch car_ir_receive_process_end + +car_ir_get_bit1: +3812 58008000 setarg 0x8000 +3813 1a232200 rshift rega ,rega +3814 9a21a200 ior rega ,rega +3815 2040383f call car_ir_clk_get + +car_ir_get_bit1_wait_low_end: +3816 20403842 call car_ir_clk_check +3817 24610000 nrtn positive +3818 20403847 call car_ir_gpio_get_status +3819 2020b816 branch car_ir_get_bit1_wait_low_end ,true +381a c2003805 loop car_ir_receive_process_loop + +car_ir_receive_process_end: +381b 44eac01a bpatch patch1a_5 ,mem_patch1a +381c 1a227e00 copy rega ,pdata +381d 60014789 store 2 ,mem_ir_rx_buf +381e 60014797 store 2 ,mem_ir_notify_data + 8 +381f 6800c7ea fetch 1 ,mem_car_24g_status +3820 c000b827 beq work_paired ,car_ir_24g_receive_attack + +car_ir_data_notify: +3821 df200007 arg 0x07 ,loopcnt +3822 d8c04792 arg mem_ir_notify_data_head ,contr +3823 204036f0 call calc_check_sum_start +3824 6000c799 store 1 ,mem_ir_notify_data_check_sum +3825 da20478f arg mem_ir_notify_data ,rega +3826 20207e3d branch queue_push + +car_ir_24g_receive_attack: +3827 6800c7ef fetch 1 ,mem_car_24g_ir_receive_attack_count +3828 1fe0fe01 increase 1 ,pdata +3829 6000c7ef store 1 ,mem_car_24g_ir_receive_attack_count +382a 1fe6fc02 div pdata ,2 +382b 20407f86 call wait_div_end +382c 18078400 quotient temp +382d 18077e00 remainder pdata +382e 243a3838 nbranch car_ir_24g_receive_attack_blink ,blank + +car_ir_24g_receive_attack_off: +382f 6800c7bf fetch 1 ,mem_car_config_led_num +3830 98467c00 isub temp ,null +3831 2042b83d call car_ir_24g_go_die ,zero +3832 dfe0479c arg mem_car_led_control ,pdata +3833 184085ff increase -1 ,temp +3834 9840a200 iadd temp ,rega +3835 dfe00000 arg 0 ,pdata +3836 e2208000 istore 1 ,rega +3837 20600000 rtn + +car_ir_24g_receive_attack_blink: +3838 dfe0479c arg mem_car_led_control ,pdata +3839 9840a200 iadd temp ,rega +383a dfe00002 arg 2 ,pdata +383b e2208000 istore 1 ,rega +383c 20600000 rtn + +car_ir_24g_go_die: +383d 7047f001 jam 1 ,mem_car_24g_go_die_flag +383e 20600000 rtn + +car_ir_clk_get: +383f 1c427e00 copy clkn_bt ,pdata +3840 6002478b store 4 ,mem_ir_receive_clkn +3841 20600000 rtn + +car_ir_clk_check: +3842 1c427e00 copy clkn_bt ,pdata +3843 680a478b fetcht 4 ,mem_ir_receive_clkn +3844 98467e00 isub temp ,pdata +3845 1fe67cc8 sub pdata ,200 ,null +3846 20600000 rtn + +car_ir_gpio_get_status: +3847 6808c786 fetcht 1 ,mem_ir_rx_gpio +3848 2020681d branch gpio_get_bit + +car_led_control_receive: +3849 68044752 fetch 8 ,mem_le_receive_payload +384a 6004479c store 8 ,mem_car_led_control +384b 20600000 rtn + +car_info_request: +384c 6800c7b9 fetch 1 ,mem_car_config_device_select +384d 6000c7af store 1 ,mem_car_info_request_payload +384e 6800c7ba fetch 1 ,mem_car_config_motor_layout +384f 6000c7b0 store 1 ,mem_car_info_request_payload + 1 +3850 6800c7bb fetch 1 ,mem_car_config_ir_enable +3851 6000c7b1 store 1 ,mem_car_info_request_payload + 2 +3852 df20000d arg 13 ,loopcnt +3853 d8c047aa arg mem_car_info_request_head ,contr +3854 204036f0 call calc_check_sum_start +3855 6000c7b7 store 1 ,mem_car_info_request_checksum +3856 da2047a7 arg mem_car_info_request ,rega +3857 20207e3d branch queue_push + +light_init: +3858 204065c2 call clear_eeprom_size_2k +3859 7046f67a jam 0x7a ,mem_curr_packet_num +385a 2040386d call light_load_controler_list +385b 20403867 call light_init_crr_cmd_count +385c 58003860 setarg light_pairing_timer +385d 600141fd store 2 ,mem_cb_event_timer +385e da200000 arg 0 ,rega +385f 202069a6 branch pwm_init + +light_pairing_timer: +3860 680146a1 fetch 2 ,mem_light_pairing_timer +3861 207a0000 rtn blank +3862 1fe0ffff increase -1 ,pdata +3863 600146a1 store 2 ,mem_light_pairing_timer +3864 c1800000 rtnne 0 +3865 7046a000 jam 0 ,mem_light_pairing_enable +3866 20600000 rtn + +light_init_crr_cmd_count: +3867 44eb401a bpatch patch1a_6 ,mem_patch1a +3868 6800c6a4 fetch 1 ,mem_light_next_record +3869 1fe67c28 sub pdata ,40 ,null +386a 20610000 rtn positive +386b 7046a400 jam 0 ,mem_light_next_record +386c 20600000 rtn + +light_load_controler_list: +386d da2046a4 arg mem_light_next_record ,rega +386e da400000 arg 0 ,regb +386f d8400051 arg 81 ,temp +3870 202065df branch iicd_read_eep_data + +light_find_controler_pairing: +3871 78547c00 disable user +3872 6800c6a3 fetch 1 ,mem_light_cnum +3873 1fe27200 copy pdata ,loopcnt +3874 da2046a5 arg mem_light_clist ,rega +3875 1a622400 copy regc ,regb + +light_find_controler_pairing_loop: +3876 44ebc01a bpatch patch1a_7 ,mem_patch1a +3877 2040387c call light_compare_addr_record +3878 2022ffe7 branch enable_user ,zero + +light_find_single_pairing_diff: +3879 1a20a204 increase 4 ,rega +387a c2003876 loop light_find_controler_pairing_loop +387b 20600000 rtn + +light_compare_addr_record: +387c 44ec401b bpatch patch1b_0 ,mem_patch1b +387d ea218000 ifetch 3 ,rega +387e ea498000 ifetcht 3 ,regb +387f 98467c00 isub temp ,null +3880 20600000 rtn + +light_compare_single_record: +3881 44ecc01b bpatch patch1b_1 ,mem_patch1b +3882 ea218000 ifetch 3 ,rega +3883 ea498000 ifetcht 3 ,regb +3884 98467c00 isub temp ,null +3885 24628000 nrtn zero +3886 e8c08000 ifetch 1 ,contr +3887 1fe67c00 sub pdata ,0 ,null +3888 20628000 rtn zero +3889 1a208c03 add rega ,3 ,contr +388a e8c88000 ifetcht 1 ,contr +388b 98467c00 isub temp ,null +388c 20600000 rtn + +light_find_controler_cmd: +388d 44ed401b bpatch patch1b_2 ,mem_patch1b +388e 78547c00 disable user +388f 6800c6a3 fetch 1 ,mem_light_cnum +3890 1fe27200 copy pdata ,loopcnt +3891 da2046a5 arg mem_light_clist ,rega +3892 1a622400 copy regc ,regb + +light_find_controler_cmd_loop: +3893 20403881 call light_compare_single_record +3894 2022ffe7 branch enable_user ,zero +3895 1a20a204 increase 4 ,rega +3896 c2003893 loop light_find_controler_cmd_loop +3897 20600000 rtn + +light_recv_adv: +3898 68008004 fetch 1 ,mem_le_scanrsp_rcv +3899 1fe0fe01 increase 1 ,pdata +389a 60008004 store 1 ,mem_le_scanrsp_rcv +389b da6002e5 arg mem_le_rxbuf + 12 ,regc + +light_anylize_command: +389c ea610000 ifetch 2 ,regc +389d d84055aa arg 0x55aa ,temp +389e 98467c00 isub temp ,null +389f 24628000 nrtn zero +38a0 18c22600 copy contr ,regc +38a1 ea698000 ifetcht 3 ,regc +38a2 58ffffff setarg 0xffffff +38a3 98467c00 isub temp ,null +38a4 2022b8a8 branch light_parse_cmd ,zero +38a5 2040388d call light_find_controler_cmd +38a6 203438a8 branch light_parse_cmd ,user +38a7 20600000 rtn + +light_parse_cmd: +38a8 44edc01b bpatch patch1b_3 ,mem_patch1b +38a9 1a60a604 increase 4 ,regc +38aa ea608000 ifetch 1 ,regc +38ab 6808c6f6 fetcht 1 ,mem_curr_packet_num +38ac 98467c00 isub temp ,null +38ad 20628000 rtn zero +38ae 6000c6f6 store 1 ,mem_curr_packet_num +38af 68008003 fetch 1 ,mem_le_req_rcv +38b0 1fe0fe01 increase 1 ,pdata +38b1 60008003 store 1 ,mem_le_req_rcv +38b2 1a60a601 increase 1 ,regc +38b3 ea608000 ifetch 1 ,regc +38b4 6000c6f5 store 1 ,mem_light_crr_cmd_count +38b5 1fe27200 copy pdata ,loopcnt +38b6 207a0000 rtn blank + +light_parse_cmd_loop: +38b7 e8c08000 ifetch 1 ,contr +38b8 c00038c2 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 +38b9 c000b8cf beq light_cmd_pwm1 ,light_parse_cmd_pwm1 +38ba c00138d4 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 +38bb c001b8d9 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 +38bc c00238de beq light_cmd_pwm4 ,light_parse_cmd_pwm4 +38bd c002b8e3 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 +38be c00338e8 beq light_cmd_auto_mode ,light_parse_auto_mode +38bf c07fb8ea beq light_cmd_pairing ,light_parse_pairing +38c0 c20038b7 loop light_parse_cmd_loop +38c1 20600000 rtn + +light_parse_cmd_pwm0: +38c2 18c22600 copy contr ,regc +38c3 6800c69a fetch 1 ,mem_light_pwm0 +38c4 60008a9a store 1 ,mem_pdatatemp +38c5 d8400000 arg 0 ,temp + +light_parse_cmd_pwm_common: +38c6 60088a9b storet 1 ,mem_pdatatemp + 1 +38c7 58002710 setarg 10000 +38c8 60018a9c store 3 ,mem_pdatatemp + 2 +38c9 ea608000 ifetch 1 ,regc +38ca 60008a9f store 1 ,mem_pdatatemp + 5 +38cb 204069ae call pwm_out_set +38cc 1a610c01 and regc ,1 ,contr +38cd c20038b7 loop light_parse_cmd_loop +38ce 20600000 rtn + +light_parse_cmd_pwm1: +38cf 1a620c00 copy regc ,contr +38d0 6800c69b fetch 1 ,mem_light_pwm1 +38d1 60008a9a store 1 ,mem_pdatatemp +38d2 d8400001 arg 1 ,temp +38d3 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm2: +38d4 1a620c00 copy regc ,contr +38d5 6800c69c fetch 1 ,mem_light_pwm2 +38d6 60008a9a store 1 ,mem_pdatatemp +38d7 d8400002 arg 2 ,temp +38d8 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm3: +38d9 1a620c00 copy regc ,contr +38da 6800c69d fetch 1 ,mem_light_pwm3 +38db 60008a9a store 1 ,mem_pdatatemp +38dc d8400003 arg 3 ,temp +38dd 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm4: +38de 1a620c00 copy regc ,contr +38df 6800c69e fetch 1 ,mem_light_pwm4 +38e0 60008a9a store 1 ,mem_pdatatemp +38e1 d8400004 arg 4 ,temp +38e2 202038c6 branch light_parse_cmd_pwm_common + +light_parse_cmd_pwm5: +38e3 1a620c00 copy regc ,contr +38e4 6800c69f fetch 1 ,mem_light_pwm5 +38e5 60008a9a store 1 ,mem_pdatatemp +38e6 d8400005 arg 5 ,temp +38e7 202038c6 branch light_parse_cmd_pwm_common + +light_parse_auto_mode: +38e8 e8c08000 ifetch 1 ,contr +38e9 20600000 rtn + +light_parse_pairing: +38ea 18c22600 copy contr ,regc +38eb 6800c6a0 fetch 1 ,mem_light_pairing_enable +38ec c080b8ee bne 1 ,light_parse_pairing_abandon +38ed 204038f0 call update_controler_list + +light_parse_pairing_abandon: +38ee 1a610c04 and regc ,4 ,contr +38ef 20600000 rtn + +update_controler_list: +38f0 44ee401b bpatch patch1b_4 ,mem_patch1b +38f1 20403871 call light_find_controler_pairing +38f2 203438fe branch update_conrtoler_list_found ,user +38f3 6800c6a4 fetch 1 ,mem_light_next_record +38f4 1fe20400 copy pdata ,temp +38f5 1fe0fe01 increase 1 ,pdata +38f6 6000c6a4 store 1 ,mem_light_next_record +38f7 20403867 call light_init_crr_cmd_count +38f8 184b8400 lshift2 temp ,temp +38f9 580046a5 setarg mem_light_clist +38fa 98408a00 iadd temp ,contw +38fb ea620000 ifetch 4 ,regc +38fc e0a20000 istore 4 ,contw +38fd 20203903 branch update_conrtoler_store_list + +update_conrtoler_list_found: +38fe 1a608c03 add regc ,3 ,contr +38ff e8c08000 ifetch 1 ,contr +3900 207a0000 rtn blank +3901 ea620000 ifetch 4 ,regc +3902 e2220000 istore 4 ,rega + +update_conrtoler_store_list: +3903 da2046a4 arg mem_light_next_record ,rega +3904 da400000 arg 0 ,regb +3905 d8400051 arg 81 ,temp +3906 20206606 branch iicd_write_eep_data + +lightc_init: +3907 6808c69a fetcht 1 ,mem_lightc_led_gpio +3908 20406825 call gpio_out_inactive +3909 20600000 rtn + +lightc_dispatch: +390a 6808c69a fetcht 1 ,mem_lightc_led_gpio +390b 20406829 call gpio_out_active +390c 6808c69a fetcht 1 ,mem_lightc_led_gpio +390d 20406825 call gpio_out_inactive +390e 2040391d call lightc_start_adv +390f 6800c6a7 fetch 1 ,mem_adv_time +3910 247a0000 nrtn blank +3911 20402c29 call lpm_write_gpio_wakeup +3912 68120138 hfetch 4 ,core_lpm_ctrl +3913 793ffe0f set0 15 ,pdata +3914 6012004c hstore 4 ,core_lpm_reg +3915 20402c21 call lpm_write_ctrl +3916 d85fffff arg param_hibernate_clks ,temp +3917 20202b2a branch lpm_sleep + +lightc_adv: +3918 6800c6a7 fetch 1 ,mem_adv_time +3919 203a56f9 branch le_adv_loop_tx ,blank +391a 1fe0ffff increase -1 ,pdata +391b 6000c6a7 store 1 ,mem_adv_time +391c 202056f9 branch le_adv_loop_tx + +lightc_start_adv: +391d 1feffe14 mul32 pdata ,20 ,pdata +391e d8c046a8 arg mem_cmd0_string ,contr +391f 98c08c00 iadd contr ,contr +3920 e8c08000 ifetch 1 ,contr +3921 207a0000 rtn blank +3922 1fe22200 copy pdata ,rega +3923 1a227200 copy rega ,loopcnt +3924 d8a04372 arg mem_le_adv_data + 2 ,contw +3925 20407f01 call memcpy +3926 1a227e00 copy rega ,pdata +3927 1fe0fe02 increase 2 ,pdata +3928 6000c36f store 1 ,mem_le_adv_data_len +3929 20600000 rtn + +module_init: +392a 20758000 rtn wake +392b 204057a3 call le_modified_name +392c 204068a8 call adc_init_data +392d 58003982 setarg module_process_idle +392e 600141f3 store 2 ,mem_cb_idle_process +392f 5800396e setarg module_bt_conn_process +3930 600141f1 store 2 ,mem_cb_bt_process +3931 58003986 setarg module_process_bb_event +3932 600141f5 store 2 ,mem_cb_bb_event_process +3933 5800396d setarg module_le_conn_process +3934 600141ef store 2 ,mem_cb_le_process +3935 58003969 setarg module_lpm_lock +3936 600141e9 store 2 ,mem_cb_check_wakelock +3937 58003ab7 setarg module_hci_cmd_transmit_le_notify +3938 600141fb store 2 ,mem_cb_ble_transmit +3939 58003c32 setarg module_hci_event_receive_spp_data +393a 6001456f store 2 ,mem_cb_receive_spp_data +393b 58003cc2 setarg module_le_receive_data +393c 600141f9 store 2 ,mem_cb_att_write +393d 58003cd7 setarg module_bb_event_timer +393e 600141fd store 2 ,mem_cb_event_timer +393f 2040397f call module_spp_clear_last_transmite_clock +3940 44eec01b bpatch patch1b_5 ,mem_patch1b +3941 20403945 call module_lpm_uart_init +3942 20403964 call module_gpio_init +3943 20402c6f call check_module_disabled +3944 20203c48 branch module_hci_event_enter_standby_mode + +module_lpm_uart_init: +3945 680246aa fetch 4 ,mem_module_uart_rx_buffer +3946 60120054 hstore 4 ,core_uart_rsaddr +3947 680246ae fetch 4 ,mem_module_uart_tx_buffer +3948 6012005a hstore 4 ,core_uart_tsaddr +3949 68108081 hfetch 1 ,core_gpio_sel1 +394a 1fe1fe04 or_into 0x04 ,pdata +394b 1fe17efc and_into 0xfc ,pdata +394c 60108081 hstore 1 ,core_gpio_sel1 +394d 70806200 jam 0x00 ,core_uart_ctrl +394e 680146aa fetch 2 ,mem_module_uart_rx_buffer +394f 60110058 hstore 2 ,core_uart_rrptr +3950 680146ae fetch 2 ,mem_module_uart_tx_buffer +3951 6011005e hstore 2 ,core_uart_twptr +3952 60110060 hstore 2 ,core_uart_trptrp +3953 68120078 hfetch 4 ,core_gpio_pu0 +3954 79207e07 set1 7 ,pdata +3955 60120078 hstore 4 ,core_gpio_pu0 +3956 68110050 hfetch 2 ,core_clkoff +3957 793ffe0f set0 clock_off_uart ,pdata +3958 60110050 hstore 2 ,core_clkoff +3959 204066ce call uart_set_baud_by_mem +395a 70804300 jam uartclk_crystal ,core_uart_clksel +395b 70806281 jam uart_ctrl_h4 ,core_uart_ctrl +395c 6800c6bf fetch 1 ,mem_module_flag +395d 2feffe00 isolate1 module_flag_uart_flow_control ,pdata +395e 68188062 hfetcht 1 ,core_uart_ctrl +395f 79208404 setflag true ,4 ,temp +3960 60188062 hstoret 1 ,core_uart_ctrl +3961 20600000 rtn + +module_lpm_init: +3962 2040397f call module_spp_clear_last_transmite_clock +3963 20203945 branch module_lpm_uart_init + +module_gpio_init: +3964 6808c69e fetcht 1 ,mem_module_connect_state_gpio +3965 2040680e call gpio_config_output +3966 204039e6 call module_set_conn_pin_low +3967 6808c69c fetcht 1 ,mem_module_wake_up_gpio +3968 202067fb branch gpio_config_input + +module_lpm_lock: +3969 6808c69c fetcht 1 ,mem_module_wake_up_gpio +396a 2040681d call gpio_get_bit +396b 2420b3d2 nbranch app_put_lpm_wake_lock ,true +396c 202033d0 branch app_get_lpm_wake_lock + +module_le_conn_process: +396d 20600000 rtn + +module_bt_conn_process: +396e 20403970 call module_spp_enter_sniff +396f 20203ce9 branch module_control_air_flow + +module_spp_enter_sniff: +3970 6800c682 fetch 1 ,mem_ui_state_map +3971 c302397f bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +3972 44ef401b bpatch patch1b_6 ,mem_patch1b +3973 58003eff setarg 0x3eff +3974 680a46c5 fetcht 4 ,mem_last_transmite_clock +3975 98408400 iadd temp ,temp +3976 1c427e00 copy clkn_bt ,pdata +3977 98467c00 isub temp ,null +3978 24610000 nrtn positive +3979 68014682 fetch 2 ,mem_ui_state_map +397a c282b97f bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +397b 6800c6bf fetch 1 ,mem_module_flag +397c c3830000 rtnbit1 moudle_task_sniff +397d 20403cec call module_set_sniff_task_flag +397e 2040340e call app_bt_enter_sniff + +module_spp_clear_last_transmite_clock: +397f 1c427e00 copy clkn_bt ,pdata +3980 600246c5 store 4 ,mem_last_transmite_clock +3981 20600000 rtn + +module_process_idle: +3982 20403ce9 call module_control_air_flow +3983 2040526e call l2cap_malloc_is_fifo_full +3984 247a0000 nrtn blank +3985 202039eb branch module_process + +module_process_bb_event: +3986 1a627e00 copy regc ,pdata +3987 c000b9d4 beq bt_evt_bb_connected ,module_process_bb_conn +3988 c00139a3 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +3989 c00239d7 beq bt_evt_reconn_failed ,module_process_reconn_fail +398a c002b9c4 beq bt_evt_setup_complete ,module_process_setup_complete +398b c00439aa beq bt_evt_spp_connected ,module_process_spp_connected +398c c004b9b1 beq bt_evt_spp_disconnected ,module_process_spp_disconnected +398d c00539c9 beq bt_evt_pincode_req ,module_process_evt_pincode_req +398e c005b9b6 beq bt_evt_enter_sniff ,module_process_enter_sniff +398f c00639c2 beq bt_evt_exit_sniff ,module_process_exit_sniff +3990 c009b9d7 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +3991 c00a39cf beq bt_evt_le_connected ,module_process_le_conn +3992 c00ab9c6 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +3993 c010b9ca beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +3994 c011b9cb beq bt_evt_unsniff_accept ,module_process_unsniff_accept +3995 c01239ce beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +3996 c0183c8a beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +3997 c018bc8c beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +3998 c0193c9a beq bt_evt_le_start_enc ,module_hci_event_start_enc +3999 c019bc98 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +399a c01a3c84 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +399b c01abc73 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +399c c01b3c82 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +399d c01bbc8e beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +399e c01c3c90 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +399f c01dbca1 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey +39a0 c01ebc6a beq bt_evt_store_nvram ,module_hci_event_store_device +39a1 c020b9d9 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +39a2 20600000 rtn + +module_process_bb_event_disconned: +39a3 2040397f call module_spp_clear_last_transmite_clock +39a4 6800c665 fetch 1 ,mem_flag_pairing_state +39a5 245a3c8e ncall module_hci_event_bt_pairing_fail ,blank +39a6 204039d7 call module_disconn_start +39a7 68014682 fetch 2 ,mem_ui_state_map +39a8 c4020000 rtnbit0 ui_state_bt_spp_conn +39a9 202039b1 branch module_spp_disconnected + +module_process_spp_connected: +39aa 68014682 fetch 2 ,mem_ui_state_map +39ab 79207e04 set1 ui_state_bt_spp_conn ,pdata +39ac 60014682 store 2 ,mem_ui_state_map +39ad 6800c6a7 fetch 1 ,mem_module_spp_lpm_mult +39ae 6000c172 store 1 ,mem_lpm_mult +39af 204039e6 call module_set_conn_pin_low +39b0 20203c1d branch module_hci_event_spp_connect + +module_process_spp_disconnected: + +module_spp_disconnected: +39b1 68014682 fetch 2 ,mem_ui_state_map +39b2 c4020000 rtnbit0 ui_state_bt_spp_conn +39b3 793ffe04 set0 ui_state_bt_spp_conn ,pdata +39b4 60014682 store 2 ,mem_ui_state_map +39b5 20203c21 branch module_hci_event_spp_disconnect + +module_process_enter_sniff: + +module_sniff_param_check: +39b6 2040397f call module_spp_clear_last_transmite_clock +39b7 68014042 fetch 2 ,mem_context + coffset_tsniff +39b8 1fe37e00 rshift pdata ,pdata +39b9 680941e3 fetcht 2 ,mem_sniff_param_interval +39ba 98467c00 isub temp ,null +39bb 2422b9bd nbranch module_sniff_param_check_unsniff ,zero +39bc 20203416 branch app_lpm_mult_enable + +module_sniff_param_check_unsniff: +39bd 6800c6bf fetch 1 ,mem_module_flag +39be c3828000 rtnbit1 moudle_task_unsniff +39bf 68110112 hfetch 2 ,core_uart_rxitems +39c0 245a3cf0 ncall module_set_unsniff_task_flag ,blank +39c1 2020340c branch app_bt_sniff_exit + +module_process_exit_sniff: +39c2 20403cee call module_clear_sniff_task_flag +39c3 20203418 branch app_lpm_mult_disable + +module_process_setup_complete: +39c4 2040397f call module_spp_clear_last_transmite_clock +39c5 202039dd branch module_conn_start + +module_process_bb_even_le_disconn: +39c6 20405816 call le_clr_config_more_data +39c7 204039d7 call module_disconn_start +39c8 20203c23 branch module_hci_event_le_disconnect + +module_process_evt_pincode_req: +39c9 202033dd branch app_bt_set_pincode + +module_process_sniff_not_accept: +39ca 20203cee branch module_clear_sniff_task_flag + +module_process_unsniff_accept: +39cb 6800c6bf fetch 1 ,mem_module_flag +39cc c302b40e bbit0 moudle_task_unsniff ,app_bt_enter_sniff +39cd 20203cf2 branch module_clear_unsniff_task_flag + +module_process_unsniff_not_accept: +39ce 20203cf2 branch module_clear_unsniff_task_flag + +module_process_le_conn: +39cf 204058ba call le_send_att_exchange_mtu_requset +39d0 204039dd call module_conn_start +39d1 6800c6a8 fetch 1 ,mem_module_le_lpm_mult +39d2 6000c172 store 1 ,mem_lpm_mult +39d3 20203c1f branch module_hci_event_le_connect + +module_process_bb_conn: +39d4 70466100 jam 0 ,mem_flag_mode_ssp_pin +39d5 20403cee call module_clear_sniff_task_flag +39d6 20203cf2 branch module_clear_unsniff_task_flag + +module_process_page_time_out: + +module_process_reconn_fail: + +module_disconn_start: +39d7 20403a52 call module_start_adv_discovery_by_command +39d8 202039db branch module_set_conn_pin_high + +module_process_ble_ltk_lost: +39d9 20405cc9 call le_send_reject_ind +39da 20205b02 branch le_send_smp_security_request + +module_set_conn_pin_high: +39db 6808c69e fetcht 1 ,mem_module_connect_state_gpio +39dc 20206829 branch gpio_out_active + +module_conn_start: +39dd 204039df call module_stop_adv_discovery +39de 202039e6 branch module_set_conn_pin_low + +module_stop_adv_discovery: +39df 6800c6a1 fetch 1 ,mem_module_state +39e0 2feffe00 isolate1 moudle_state_bt_bit ,pdata +39e1 2040b3f0 call app_bt_stop_discovery ,true +39e2 6800c6a1 fetch 1 ,mem_module_state +39e3 2feffe01 isolate1 moudle_state_ble_bit ,pdata +39e4 2040b3f8 call app_ble_stop_adv ,true +39e5 20600000 rtn + +module_set_conn_pin_low: +39e6 6808c69e fetcht 1 ,mem_module_connect_state_gpio +39e7 20206825 branch gpio_out_inactive + +module_process_with_credit: +39e8 6800c56b fetch 1 ,mem_credit_flag +39e9 c1000000 rtneq credit_disable +39ea 20206c28 branch rfcomm_send_uih_without_payload + +module_process: +39eb 6810810c hfetch 1 ,core_uart_status +39ec c281b9e8 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +39ed 204066cb call uartd_prepare_rx +39ee e8608000 ifetch 1 ,contru +39ef c080ba01 bne 0x01 ,module_hci_in_excp +39f0 68110112 hfetch 2 ,core_uart_rxitems +39f1 1fe67c02 sub pdata ,2 ,null +39f2 20610000 rtn positive +39f3 e8608000 ifetch 1 ,contru +39f4 60008b03 store 1 ,mem_module_uart_opcode +39f5 e8688000 ifetcht 1 ,contru +39f6 18622200 copy contru ,rega +39f7 60088b04 storet 1 ,mem_module_uart_len +39f8 18408403 add temp ,3 ,temp +39f9 68110112 hfetch 2 ,core_uart_rxitems +39fa 98460400 isub temp ,temp +39fb 24610000 nrtn positive +39fc 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +39fd 20403a17 call module_hci_cmd_control +39fe 68008b05 fetch 1 ,mem_module_temp_nl_discard_packet +39ff c1000000 rtneq hci_not_discard_packet +3a00 20203a12 branch module_hci_dicard_packet + +module_hci_in_excp: +3a01 20407ec1 call delay_10ms +3a02 20403c79 call module_hci_event_invalid_packet +3a03 20203a04 branch module_hci_release_except + +module_hci_release_except: +3a04 44efc01b bpatch patch1b_7 ,mem_patch1b +3a05 68110112 hfetch 2 ,core_uart_rxitems +3a06 207a0000 rtn blank +3a07 204066cb call uartd_prepare_rx +3a08 e8608000 ifetch 1 ,contru +3a09 1fe67c01 sub pdata ,0x01 ,null +3a0a 2442ba16 ncall module_hci_dicard_bytes ,zero +3a0b 2422ba04 nbranch module_hci_release_except ,zero +3a0c e8608000 ifetch 1 ,contru +3a0d c1028000 rtneq hci_cmd_spp_data_req +3a0e c1148000 rtneq hci_cmd_set_credit_given +3a0f 186087ff increase -1 ,contru +3a10 20403a16 call module_hci_dicard_bytes +3a11 20203a04 branch module_hci_release_except + +module_hci_dicard_packet: +3a12 204066cb call uartd_prepare_rx +3a13 18608602 increase 2 ,contru +3a14 e8608000 ifetch 1 ,contru +3a15 98608600 iadd contru ,contru + +module_hci_dicard_bytes: +3a16 202066c8 branch uartd_rxdone + +module_hci_cmd_control: +3a17 44f0401c bpatch patch1c_0 ,mem_patch1c +3a18 68008b03 fetch 1 ,mem_module_uart_opcode +3a19 c0003a3f beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +3a1a c000ba44 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +3a1b c0013a49 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +3a1c c001ba5f beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +3a1d c0023a6b beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +3a1e c002ba75 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +3a1f c004ba9a beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +3a20 c005bad7 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +3a21 c0063ad8 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +3a22 c006baec beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +3a23 c0073af4 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +3a24 c007bafa beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +3a25 c0083b06 beq hci_cmd_version_req ,module_hci_cmd_version_request +3a26 c008bb0e beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +3a27 c0093b12 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +3a28 c0133b16 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +3a29 c0143b1d beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +3a2a c014bb2d beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +3a2b c0153b36 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +3a2c c015bb69 beq hci_cmd_power_req ,module_hci_cmd_power_request +3a2d c0163b6f beq hci_cmd_power_set ,module_hci_cmd_power_set +3a2e c0183b76 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +3a2f c018bb7c beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +3a30 c0193b90 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +3a31 c019bb98 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +3a32 c01a3bbb beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +3a33 c01abbc4 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +3a34 c01b3bcd beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +3a35 c01bbbd7 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +3a36 c01c3bda beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +3a37 c0203be2 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +3a38 c0213bec beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +3a39 c0243bf1 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +3a3a c024bbfc beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +3a3b c028bc02 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +3a3c c030bc06 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +3a3d c07fbc15 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm +3a3e 20203c17 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_set_bt_addr: +3a3f 68008b04 fetch 1 ,mem_module_uart_len +3a40 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd +3a41 e8630000 ifetch 6 ,contru +3a42 600340a0 store 6 ,mem_lap +3a43 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_addr: +3a44 68008b04 fetch 1 ,mem_module_uart_len +3a45 c0833c17 bne 6 ,module_hci_event_receive_invalid_cmd +3a46 e8630000 ifetch 6 ,contru +3a47 600344a0 store 6 ,mem_le_lap +3a48 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_visibility: +3a49 68008b04 fetch 1 ,mem_module_uart_len +3a4a c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd +3a4b 1a220600 copy rega ,contru +3a4c 20403c1a call module_hci_event_receive_valid_cmd +3a4d e8688000 ifetcht 1 ,contru +3a4e 6008c6a9 storet 1 ,mem_module_bluetooth_stauts_by_command +3a4f 68014682 fetch 2 ,mem_ui_state_map +3a50 c3848000 rtnbit1 ui_state_ble_connected +3a51 c3800000 rtnbit1 ui_state_bt_connected + +module_start_adv_discovery_by_command: +3a52 6800c6a1 fetch 1 ,mem_module_state +3a53 2feffe00 isolate1 moudle_state_bt_bit ,pdata +3a54 2420ba58 nbranch moudle_start_adv_by_command ,true +3a55 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command +3a56 18417e03 and temp ,0x03 ,pdata +3a57 6000c093 store 1 ,mem_scan_mode + +moudle_start_adv_by_command: +3a58 6800c6a1 fetch 1 ,mem_module_state +3a59 2feffe01 isolate1 moudle_state_ble_bit ,pdata +3a5a 24608000 nrtn true +3a5b 6808c6a9 fetcht 1 ,mem_module_bluetooth_stauts_by_command +3a5c 284ffe02 isolate1 2 ,temp +3a5d 2020b3fa branch app_ble_start_adv ,true +3a5e 202033f8 branch app_ble_stop_adv + +module_hci_cmd_set_bt_name: +3a5f 68008b04 fetch 1 ,mem_module_uart_len +3a60 1fe67c43 sub pdata ,67 ,null +3a61 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3a62 6000c515 store 1 ,mem_local_name_length +3a63 df200008 arg 8 ,loopcnt +3a64 20407ec6 call memset0 +3a65 68008b04 fetch 1 ,mem_module_uart_len +3a66 1fe27200 copy pdata ,loopcnt +3a67 1a220600 copy rega ,contru +3a68 d8a04516 arg mem_local_name ,contw +3a69 204066ea call uart_copy_rx_bytes_fast +3a6a 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_name: +3a6b 68008b04 fetch 1 ,mem_module_uart_len +3a6c 1fe67c1d sub pdata ,29 ,null +3a6d 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3a6e 6000c3af store 1 ,mem_le_name_len +3a6f 1fe27200 copy pdata ,loopcnt +3a70 1a220600 copy rega ,contru +3a71 d8a043b0 arg mem_le_name ,contw +3a72 204066ea call uart_copy_rx_bytes_fast +3a73 204057a3 call le_modified_name +3a74 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_receive_spp_data: +3a75 6800c682 fetch 1 ,mem_ui_state_map +3a76 c3023c17 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +3a77 204033ba call app_check_sniff +3a78 2020ba86 branch module_hci_cmd_spp_exit_sniff ,true +3a79 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3a7a 2040397f call module_spp_clear_last_transmite_clock +3a7b 6800c568 fetch 1 ,mem_remote_credits +3a7c 207a0000 rtn blank +3a7d 68014573 fetch 2 ,mem_nl_rx_len_all +3a7e c0803a84 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all +3a7f 68008b04 fetch 1 ,mem_module_uart_len +3a80 60014573 store 2 ,mem_nl_rx_len_all +3a81 1a220600 copy rega ,contru +3a82 18627e00 copy contru ,pdata +3a83 60014571 store 2 ,mem_nl_rx_data_src + +module_hci_cmd_pass_init_ng_rx_len_all: +3a84 20403a88 call module_hci_cmd_get_current_packet_len_and_remain_len +3a85 20206c4d branch spp_tx_rfcomm_packet + +module_hci_cmd_spp_exit_sniff: +3a86 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3a87 20203cd1 branch module_exit_sniff + +module_hci_cmd_get_current_packet_len_and_remain_len: +3a88 20403a8e call module_hci_cmd_get_current_patcket_len +3a89 68014573 fetch 2 ,mem_nl_rx_len_all +3a8a 6809469f fetcht 2 ,mem_current_packet_length +3a8b 98467e00 isub temp ,pdata +3a8c 60014573 store 2 ,mem_nl_rx_len_all +3a8d 20600000 rtn + +module_hci_cmd_get_current_patcket_len: +3a8e 68014573 fetch 2 ,mem_nl_rx_len_all +3a8f d840006e arg dm_refcom_buff_len ,temp +3a90 20407fdd call not_greater_than +3a91 6809456c fetcht 2 ,mem_rfcomm_max_frame_size +3a92 20407fdd call not_greater_than +3a93 6809455e fetcht 2 ,mem_pn_max_frame_size +3a94 20407fdd call not_greater_than +3a95 6001469f store 2 ,mem_current_packet_length +3a96 20600000 rtn + +module_hci_command_tx_spp_tx_complete: +3a97 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3a98 700b0305 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +3a99 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_receive_le_data: +3a9a 68014682 fetch 2 ,mem_ui_state_map +3a9b c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +3a9c 20403ad4 call module_check_ble_encrypt_state +3a9d 20343c17 branch module_hci_event_receive_invalid_cmd ,user +3a9e 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3a9f 6800c6bf fetch 1 ,mem_module_flag +3aa0 c2823ab4 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +3aa1 6800c6c0 fetch 1 ,mem_module_hci_notify_len +3aa2 247a0000 nrtn blank +3aa3 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3aa4 e8610000 ifetch 2 ,contru +3aa5 600146c1 store 2 ,mem_module_hci_notify_handle +3aa6 18627e00 copy contru ,pdata +3aa7 600146c3 store 2 ,mem_module_hci_nofiy_addr +3aa8 68008b04 fetch 1 ,mem_module_uart_len +3aa9 1fe0fffe pincrease -2 +3aaa 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3aab 2022bc17 branch module_hci_event_receive_invalid_cmd ,zero +3aac 6000c6c0 store 1 ,mem_module_hci_notify_len +3aad 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +3aae 20405814 call le_set_config_more_data +3aaf 20403ab7 call module_hci_cmd_transmit_le_notify +3ab0 20403ab7 call module_hci_cmd_transmit_le_notify +3ab1 20403ab7 call module_hci_cmd_transmit_le_notify +3ab2 6800c6bf fetch 1 ,mem_module_flag +3ab3 c4020000 rtnbit0 module_flag_ble_data_finish + +module_hci_cmd_receive_le_data_finish: +3ab4 700b0501 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +3ab5 20403cf6 call module_clear_le_tx_data_flag +3ab6 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_transmit_le_notify: +3ab7 6800c6c0 fetch 1 ,mem_module_hci_notify_len +3ab8 207a0000 rtn blank +3ab9 20405892 call le_fifo_check_nearly_full +3aba 247a0000 nrtn blank +3abb 20403acf call module_get_le_remote_mtu +3abc 44f0c01c bpatch patch1c_1 ,mem_patch1c +3abd 1840fffd add temp ,-3 ,pdata +3abe 6808c6c0 fetcht 1 ,mem_module_hci_notify_len +3abf 20407fdd call not_greater_than +3ac0 1fe22200 copy pdata ,rega +3ac1 18427e00 copy temp ,pdata +3ac2 9a267e00 isub rega ,pdata +3ac3 6000c6c0 store 1 ,mem_module_hci_notify_len +3ac4 680946c1 fetcht 2 ,mem_module_hci_notify_handle +3ac5 20405a64 call le_att_malloc_tx_notify +3ac6 680146c3 fetch 2 ,mem_module_hci_nofiy_addr +3ac7 1fe20600 copy pdata ,contru +3ac8 1a227200 copy rega ,loopcnt +3ac9 204066ea call uart_copy_rx_bytes_fast +3aca 18627e00 copy contru ,pdata +3acb 600146c3 store 2 ,mem_module_hci_nofiy_addr +3acc 6800c6c0 fetch 1 ,mem_module_hci_notify_len +3acd 247a0000 nrtn blank +3ace 20203cf4 branch module_set_le_tx_data_flag + +module_get_le_remote_mtu: +3acf d8400017 arg 0x17 ,temp +3ad0 6800c6bf fetch 1 ,mem_module_flag +3ad1 c3808000 rtnbit1 module_flag_ble_send_mtu23 +3ad2 680944a8 fetcht 2 ,mem_le_remote_mtu +3ad3 20600000 rtn + +module_check_ble_encrypt_state: +3ad4 6800c6bf fetch 1 ,mem_module_flag +3ad5 c2815a42 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +3ad6 20207fe9 branch disable_user + +module_hci_cmd_inquire_status: +3ad7 20203c4c branch module_hci_event_status_res + +module_hci_cmd_set_pairing_mode: +3ad8 1a220600 copy rega ,contru +3ad9 e8608000 ifetch 1 ,contru +3ada c0003adf beq pairing_pincode ,module_hci_pairing_pincode_mode +3adb c000bae2 beq pairing_justwork ,module_hci_pairing_just_work_mode +3adc c0013ae8 beq pairing_passkey ,module_hci_pairing_passkey +3add c001baea beq pairing_confirm ,module_hci_pairing_numeric_comparison +3ade 20203c17 branch module_hci_event_receive_invalid_cmd + +module_hci_pairing_pincode_mode: +3adf 2040612b call ssp_disable +3ae0 70465a00 jam 0 ,mem_ssp_enable +3ae1 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_pairing_just_work_mode: +3ae2 58040003 setarg ssp_mode_just_work_io_cap_data + +module_hci_sspairing_mode: +3ae3 6001c65b store 3 ,mem_sp_iocap_local +3ae4 6000c662 store 1 ,mem_ssp_mode_flag +3ae5 20406124 call ssp_enable +3ae6 70465a01 jam 1 ,mem_ssp_enable +3ae7 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_pairing_passkey: +3ae8 58040002 setarg ssp_mode_passkey_io_cap_data +3ae9 20203ae3 branch module_hci_sspairing_mode + +module_hci_pairing_numeric_comparison: +3aea 58040001 setarg ssp_mode_ssp_pin_io_cap_data +3aeb 20203ae3 branch module_hci_sspairing_mode + +module_hci_cmd_set_pincode: +3aec 68008b04 fetch 1 ,mem_module_uart_len +3aed 1fe67c10 sub pdata ,16 ,null +3aee 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3aef 6000c689 store 1 ,mem_pin_length +3af0 1fe27200 copy pdata ,loopcnt +3af1 d8a0468a arg mem_pin ,contw +3af2 204066fd call uart_copy_rx_bytes +3af3 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_uart_control_mode: +3af4 1a220600 copy rega ,contru +3af5 e8608000 ifetch 1 ,contru +3af6 68188062 hfetcht 1 ,core_uart_ctrl +3af7 7d3a0404 nsetflag blank ,4 ,temp +3af8 60188062 hstoret 1 ,core_uart_ctrl +3af9 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_uart_baud: +3afa 68008b04 fetch 1 ,mem_module_uart_len +3afb 1fe27200 copy pdata ,loopcnt +3afc 1a220600 copy rega ,contru +3afd 20407f58 call string2dec_from_uart +3afe 596e3600 setarg uart_clk_24 +3aff 9846fc00 idiv temp +3b00 20407f86 call wait_div_end +3b01 1807fe00 quotient pdata + +module_hci_cmd_set_uart_baud_ok: +3b02 60014243 store uart_baud_len ,mem_baud +3b03 20403c1a call module_hci_event_receive_valid_cmd +3b04 20407f9e call wait_uarttx +3b05 202066ce branch uart_set_baud_by_mem + +module_hci_cmd_version_request: +3b06 da200002 arg 2 ,rega +3b07 da40469a arg mem_soft_version_num ,regb +3b08 d8400000 arg 0 ,temp +3b09 20203c25 branch module_hci_event_set_cmd + +module_hci_event_set_cmd_send_response: +3b0a 60010ac2 store 2 ,mem_event_cmd_response_content +3b0b da400ac2 arg mem_event_cmd_response_content ,regb +3b0c d8400000 arg 0 ,temp +3b0d 20203c25 branch module_hci_event_set_cmd + +module_hci_cmd_bt_disconnect: +3b0e 68014682 fetch 2 ,mem_ui_state_map +3b0f c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd + +module_hci_cmd_bt_disconnect_doing: +3b10 20403c1a call module_hci_event_receive_valid_cmd +3b11 202033e9 branch app_bt_disconnect + +module_hci_cmd_ble_disconnect: +3b12 68014682 fetch 2 ,mem_ui_state_map +3b13 c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd + +module_hci_cmd_ble_disconnect_doing: +3b14 20403c1a call module_hci_event_receive_valid_cmd +3b15 20203402 branch app_ble_disconnect + +module_hci_cmd_set_nvram: +3b16 68008b04 fetch 1 ,mem_module_uart_len +3b17 1fe27200 copy pdata ,loopcnt +3b18 1a220600 copy rega ,contru +3b19 68014215 fetch 2 ,mem_nv_data_ptr +3b1a 1fe20a00 icopy contw +3b1b 204066ea call uart_copy_rx_bytes_fast +3b1c 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_confirm_gkey: +3b1d 6800c682 fetch 1 ,mem_ui_state_map +3b1e c3003c17 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +3b1f e8608000 ifetch 1 ,contru +3b20 6808c661 fetcht 1 ,mem_flag_mode_ssp_pin +3b21 793a0400 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +3b22 79200407 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +3b23 6008c661 storet 1 ,mem_flag_mode_ssp_pin +3b24 20403c1a call module_hci_event_receive_valid_cmd +3b25 6800c661 fetch 1 ,mem_flag_mode_ssp_pin +3b26 c2833b2b bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +3b27 20600000 rtn + +dhkey_not_accept: +3b28 70466100 jam 0 ,mem_flag_mode_ssp_pin +3b29 700a9921 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +3b2a 20207d8f branch ui_ipc_send_cmd + +module_hci_cmd_spp_number_comparison_result_is1: +3b2b c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +3b2c 20203b28 branch dhkey_not_accept + +module_hci_cmd_set_credit_given: +3b2d 6800c682 fetch 1 ,mem_ui_state_map +3b2e c4020000 rtnbit0 ui_state_bt_spp_conn +3b2f 6800c56b fetch 1 ,mem_credit_flag +3b30 c1000000 rtneq credit_disable +3b31 e8608000 ifetch 1 ,contru +3b32 6808c569 fetcht 1 ,mem_credit_given +3b33 98408400 iadd temp ,temp +3b34 6008c569 storet 1 ,mem_credit_given +3b35 20600000 rtn + +module_hci_cmd_auto_adv: +3b36 df200040 arg 0x40 ,loopcnt +3b37 d8a0436f arg mem_le_adv_data_len ,contw +3b38 20407ed4 call clear_mem +3b39 58000000 setarg 0 +3b3a 60008ab2 store 1 ,mem_regb +3b3b 1a220600 copy rega ,contru + +module_hci_cmd_auto_adv_loop: +3b3c 18627e00 copy contru ,pdata +3b3d 60010ab6 store 2 ,mem_regc +3b3e 20403b64 call module_hci_cmd_auto_adv_adv_analys +3b3f 68008ab2 fetch 1 ,mem_regb +3b40 68088aa2 fetcht 1 ,mem_temp +3b41 18408401 increase 1 ,temp +3b42 9840fe00 iadd temp ,pdata +3b43 60008ab2 store 1 ,mem_regb +3b44 1fe67c1f sub pdata ,31 ,null +3b45 24213b50 nbranch module_hci_cmd_auto_adv_store_scan ,positive + +module_hci_cmd_auto_adv_store_adv: +3b46 6808c36f fetcht 1 ,mem_le_adv_data_len +3b47 58004370 setarg mem_le_adv_data +3b48 9840fe00 iadd temp ,pdata +3b49 60010abb store 2 ,mem_contw +3b4a 68088aa2 fetcht 1 ,mem_temp +3b4b 18408401 increase 1 ,temp +3b4c 6800c36f fetch 1 ,mem_le_adv_data_len +3b4d 9840fe00 iadd temp ,pdata +3b4e 6000c36f store 1 ,mem_le_adv_data_len +3b4f 20203b59 branch module_hci_cmd_auto_adv_store_common + +module_hci_cmd_auto_adv_store_scan: +3b50 6808c38f fetcht 1 ,mem_le_scan_data_len +3b51 58004390 setarg mem_le_scan_data +3b52 9840fe00 iadd temp ,pdata +3b53 60010abb store 2 ,mem_contw +3b54 68088aa2 fetcht 1 ,mem_temp +3b55 18408401 increase 1 ,temp +3b56 6800c38f fetch 1 ,mem_le_scan_data_len +3b57 9840fe00 iadd temp ,pdata +3b58 6000c38f store 1 ,mem_le_scan_data_len + +module_hci_cmd_auto_adv_store_common: +3b59 68010abb fetch 2 ,mem_contw +3b5a 1fe20a00 copy pdata ,contw +3b5b 68010ab6 fetch 2 ,mem_regc +3b5c 1fe20600 copy pdata ,contru +3b5d 18427200 copy temp ,loopcnt +3b5e 204066ea call uart_copy_rx_bytes_fast +3b5f 68008b04 fetch 1 ,mem_module_uart_len +3b60 68088ab2 fetcht 1 ,mem_regb +3b61 98467c00 isub temp ,null +3b62 2422bb3c nbranch module_hci_cmd_auto_adv_loop ,zero +3b63 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_auto_adv_adv_analys: +3b64 e8608000 ifetch 1 ,contru +3b65 60008aa2 store 1 ,mem_temp +3b66 e8608000 ifetch 1 ,contru +3b67 60008aae store 1 ,mem_rega +3b68 20600000 rtn + +module_hci_cmd_power_request: +3b69 d8400000 arg 0 ,temp +3b6a da200002 arg 2 ,rega +3b6b 680146b4 fetch 2 ,mem_module_vdd_quotient +3b6c 60010ac2 store 2 ,mem_event_cmd_response_content +3b6d da400ac2 arg mem_event_cmd_response_content ,regb +3b6e 20203c25 branch module_hci_event_set_cmd + +module_hci_cmd_power_set: +3b6f 68008b04 fetch 1 ,mem_module_uart_len +3b70 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd +3b71 e8608000 ifetch 1 ,contru +3b72 6000c6b2 store 1 ,mem_module_read_vdd_flag +3b73 58000000 setarg 0x00 +3b74 600146b4 store 2 ,mem_module_vdd_quotient +3b75 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_passkey_entry: +3b76 e8620000 ifetch 4 ,contru +3b77 6002468a store 4 ,mem_pin +3b78 70468904 jam 4 ,mem_pin_length +3b79 70466300 jam 0 ,mem_authentication_passkey_times +3b7a 20403c1a call module_hci_event_receive_valid_cmd +3b7b 20205f31 branch authentication_passkey + +module_hci_cmd_set_gpio: +3b7c 68008b04 fetch 1 ,mem_module_uart_len +3b7d c081bc17 bne 3 ,module_hci_event_receive_invalid_cmd +3b7e e8608000 ifetch 1 ,contru +3b7f c0003b82 beq hci_cmd_config_gpio_input ,module_set_gpio_input +3b80 c000bb8a beq hci_cmd_config_gpio_output ,module_set_gpio_output +3b81 20203c17 branch module_hci_event_receive_invalid_cmd + +module_set_gpio_input: +3b82 e8688000 ifetcht 1 ,contru +3b83 e8608000 ifetch 1 ,contru +3b84 c0013b88 beq gpio_input_high_impedance ,module_set_gpio_high_impedance +3b85 7d3a0407 nsetflag blank ,7 ,temp +3b86 204067fb call gpio_config_input +3b87 20203c1a branch module_hci_event_receive_valid_cmd + +module_set_gpio_high_impedance: +3b88 20406806 call gpio_set_high_impedance +3b89 20203c1a branch module_hci_event_receive_valid_cmd + +module_set_gpio_output: +3b8a e8688000 ifetcht 1 ,contru +3b8b 20406812 call gpio_config_output0 +3b8c e8608000 ifetch 1 ,contru +3b8d 2feffe00 isolate1 0 ,pdata +3b8e 2040682c call gpio_out_flag +3b8f 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_read_gpio: +3b90 68008b04 fetch 1 ,mem_module_uart_len +3b91 c080bc17 bne 1 ,module_hci_event_receive_invalid_cmd +3b92 e8688000 ifetcht 1 ,contru +3b93 2040681d call gpio_get_bit +3b94 58000000 setarg 0x0 +3b95 7d20fe00 nsetflag true ,0 ,pdata +3b96 da200001 arg 1 ,rega +3b97 20203b0a branch module_hci_event_set_cmd_send_response + +module_hci_cmd_le_set_pairing_mode: +3b98 1a220600 copy rega ,contru +3b99 e8608000 ifetch 1 ,contru +3b9a 1fe20400 copy pdata ,temp +3b9b c040bba3 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +3b9c c0413ba8 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +3b9d c041bbae beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +3b9e 6000c4c6 store 1 ,mem_le_pairing_mode +3b9f c0003bb3 beq le_pairing_mode_none ,module_le_set_no_pairing +3ba0 c000bbb6 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +3ba1 c0013bb8 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +3ba2 20203c17 branch module_hci_event_receive_invalid_cmd + +module_le_set_pairing_mode_secure_justwork: +3ba3 6800c4be fetch 1 ,mem_le_secure_connect_enable +3ba4 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3ba5 6008c4c6 storet 1 ,mem_le_pairing_mode +3ba6 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +3ba7 20203bb4 branch module_le_set_noinputnooutput + +module_le_set_pairing_mode_secure_numeric: +3ba8 6800c4be fetch 1 ,mem_le_secure_connect_enable +3ba9 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3baa 6008c4c6 storet 1 ,mem_le_pairing_mode +3bab 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +3bac 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap +3bad 20203c1a branch module_hci_event_receive_valid_cmd + +module_le_set_pairing_mode_secure_passkey: +3bae 6800c4be fetch 1 ,mem_le_secure_connect_enable +3baf 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3bb0 6008c4c6 storet 1 ,mem_le_pairing_mode +3bb1 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +3bb2 20203bb9 branch module_le_set_displayonly + +module_le_set_no_pairing: +3bb3 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth + +module_le_set_noinputnooutput: +3bb4 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +3bb5 20203c1a branch module_hci_event_receive_valid_cmd + +module_le_set_pairing_mode_lagacy_just_work: +3bb6 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth +3bb7 20203bb4 branch module_le_set_noinputnooutput + +module_le_set_pairing_mode_lagacy_passkey: +3bb8 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth + +module_le_set_displayonly: +3bb9 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap +3bba 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_adv_data: +3bbb 68008b04 fetch 1 ,mem_module_uart_len +3bbc 1fe67c1f sub pdata ,31 ,null +3bbd 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3bbe 6000c36f store 1 ,mem_le_adv_data_len +3bbf 1fe27200 copy pdata ,loopcnt +3bc0 1a220600 copy rega ,contru +3bc1 d8a04370 arg mem_le_adv_data ,contw +3bc2 204066ea call uart_copy_rx_bytes_fast +3bc3 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_scan_data: +3bc4 68008b04 fetch 1 ,mem_module_uart_len +3bc5 1fe67c1f sub pdata ,31 ,null +3bc6 24213c17 nbranch module_hci_event_receive_invalid_cmd ,positive +3bc7 6000c38f store 1 ,mem_le_scan_data_len +3bc8 1fe27200 copy pdata ,loopcnt +3bc9 1a220600 copy rega ,contru +3bca d8a04390 arg mem_le_scan_data ,contw +3bcb 204066ea call uart_copy_rx_bytes_fast +3bcc 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_send_conn_update_req: +3bcd 68014682 fetch 2 ,mem_ui_state_map +3bce c304bc17 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +3bcf 68008b04 fetch 1 ,mem_module_uart_len +3bd0 c0843c17 bne 0x08 ,module_hci_event_receive_invalid_cmd +3bd1 1a220600 copy rega ,contru +3bd2 e8640000 ifetch 8 ,contru +3bd3 60044496 store 8 ,mem_le_interval_min +3bd4 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +3bd5 20407d8f call ui_ipc_send_cmd +3bd6 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_le_adv_parameter: +3bd7 e8610000 ifetch 2 ,contru +3bd8 60014482 store 2 ,mem_le_adv_interval +3bd9 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_start_pairing: +3bda 6800c4c6 fetch 1 ,mem_le_pairing_mode +3bdb 203a3c17 branch module_hci_event_receive_invalid_cmd ,blank +3bdc 6800c4c4 fetch 1 ,mem_le_pairing_state +3bdd c0803c17 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +3bde 6800c4c5 fetch 1 ,mem_le_enc_state +3bdf c0803c17 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +3be0 20407e25 call check_51cmd_le_smp_sec_req +3be1 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_wake_gpio: +3be2 68008b04 fetch 1 ,mem_module_uart_len +3be3 c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd +3be4 e8608000 ifetch 1 ,contru +3be5 6000c6a2 store 1 ,mem_module_mcu_wake_pin +3be6 e8620000 ifetch 4 ,contru +3be7 600246a3 store 4 ,mem_module_mcu_wake_delay_us +3be8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3be9 2040680e call gpio_config_output +3bea 20403cbc call module_set_mcu_wake_pin_low +3beb 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_tx_power: +3bec 68008b04 fetch 1 ,mem_module_uart_len +3bed c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd +3bee e8608000 ifetch 1 ,contru +3bef 6000c1de store 1 ,mem_tx_power +3bf0 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey: +3bf1 e8608000 ifetch 1 ,contru +3bf2 c000bbfa beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +3bf3 6800c4c1 fetch 1 ,mem_le_secure_connect_state +3bf4 c001bbf8 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +3bf5 c0033bf8 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +3bf6 c003bbf8 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +3bf7 20203c17 branch module_hci_event_receive_invalid_cmd + +module_hci_cmd_le_confirm_gkey_ok: +3bf8 7044c201 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +3bf9 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_confirm_gkey_fail: +3bfa 20405b53 call le_send_pairing_confirm_value_failed +3bfb 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_set_reject_justwork_flag: +3bfc 68008b04 fetch 1 ,mem_module_uart_len +3bfd c080bc17 bne 0x01 ,module_hci_event_receive_invalid_cmd +3bfe 20403c1a call module_hci_event_receive_valid_cmd +3bff e8608000 ifetch 1 ,contru +3c00 203a60cb branch classic_bt_clr_reject_justwork_flag ,blank +3c01 202060c9 branch classic_bt_set_reject_justwork_flag + +module_hci_cmd_reset_chip: +3c02 20403c1a call module_hci_event_receive_valid_cmd +3c03 20407f9e call wait_uarttx +3c04 70801001 jam 0x01 ,core_reset +3c05 20202a8e branch loop + +module_hci_cmd_le_set_fixed_passkey: +3c06 68008b04 fetch 1 ,mem_module_uart_len +3c07 c0003c17 beq 0 ,module_hci_event_receive_invalid_cmd +3c08 e8608000 ifetch 1 ,contru +3c09 203a3c13 branch module_hci_cmd_le_set_random_passkey ,blank +3c0a 68008b04 fetch 1 ,mem_module_uart_len +3c0b c082bc17 bne 5 ,module_hci_event_receive_invalid_cmd +3c0c e8620000 ifetch 4 ,contru +3c0d d84f4240 arg 1000000 ,temp +3c0e 98467c00 isub temp ,null +3c0f 20213c17 branch module_hci_event_receive_invalid_cmd ,positive +3c10 600244c7 store 4 ,mem_le_tk +3c11 2040580c call le_set_config_fixed_tk +3c12 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_cmd_le_set_random_passkey: +3c13 2040580e call le_clr_config_fixed_tk +3c14 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_test_cmde_close_lpm: +3c15 70409100 jam 0 ,mem_lpm_mode +3c16 20203c1a branch module_hci_event_receive_valid_cmd + +module_hci_event_receive_invalid_cmd: +3c17 d8400001 arg 1 ,temp +3c18 da200000 arg 0 ,rega +3c19 20203c25 branch module_hci_event_set_cmd + +module_hci_event_receive_valid_cmd: +3c1a d8400000 arg 0 ,temp +3c1b da200000 arg 0 ,rega +3c1c 20203c25 branch module_hci_event_set_cmd + +module_hci_event_spp_connect: +3c1d 700b0300 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +3c1e 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_connect: +3c1f 700b0302 jam hci_event_le_conn_rep ,mem_module_uart_opcode +3c20 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_spp_disconnect: +3c21 700b0303 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +3c22 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_disconnect: +3c23 700b0305 jam hci_event_le_dis_rep ,mem_module_uart_opcode +3c24 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_set_cmd: +3c25 68008b03 fetch 1 ,mem_module_uart_opcode +3c26 1fe22600 copy pdata ,regc +3c27 700b0306 jam hci_event_cmd_res ,mem_module_uart_opcode +3c28 58000002 setarg 2 +3c29 9a20fe00 iadd rega ,pdata +3c2a 20403ca7 call module_hci_prepare_tx +3c2b 1a627e00 copy regc ,pdata +3c2c e1408000 istore 1 ,contwu +3c2d e1488000 istoret 1 ,contwu +3c2e 1a227200 copy rega ,loopcnt +3c2f 1a420c00 copy regb ,contr +3c30 204066e4 call uart_copy_tx_bytes +3c31 202066c5 branch uartd_send + +module_hci_event_receive_spp_data: +3c32 2040397f call module_spp_clear_last_transmite_clock +3c33 700b0307 jam hci_event_spp_data_rep ,mem_module_uart_opcode +3c34 680084ff fetch 1 ,mem_current_length +3c35 207a0000 rtn blank +3c36 20403ca7 call module_hci_prepare_tx +3c37 680084ff fetch 1 ,mem_current_length +3c38 1fe27200 copy pdata ,loopcnt +3c39 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +3c3a 1fe20c00 copy pdata ,contr +3c3b 204066d1 call uart_copy_tx_bytes_fast +3c3c 202066c5 branch uartd_send + +module_hci_event_receive_le_data: +3c3d 700b0308 jam hci_event_le_data_rep ,mem_module_uart_opcode +3c3e 6800c6b6 fetch 1 ,mem_module_le_rx_data_len +3c3f 1fe27200 icopy loopcnt +3c40 1fe0fe02 increase 2 ,pdata +3c41 20403ca7 call module_hci_prepare_tx +3c42 680146b9 fetch 2 ,mem_module_le_rx_data_handle +3c43 e1410000 istore 2 ,contwu +3c44 680146b7 fetch 2 ,mem_module_le_rx_data_address +3c45 1fe20c00 icopy contr +3c46 204066d1 call uart_copy_tx_bytes_fast +3c47 202066c5 branch uartd_send + +module_hci_event_enter_standby_mode: +3c48 700b0309 jam hci_event_standby_rep ,mem_module_uart_opcode + +module_hci_event_enter_standby_mode_len0: +3c49 58000000 setarg 0 +3c4a 20403ca7 call module_hci_prepare_tx +3c4b 202066c5 branch uartd_send + +module_hci_event_status_res: +3c4c 700b030a jam hci_event_status_res ,mem_module_uart_opcode +3c4d 58000001 setarg 1 +3c4e 20403ca7 call module_hci_prepare_tx +3c4f 20403c5d call module_hci_read_bt_status +3c50 68014682 fetch 2 ,mem_ui_state_map +3c51 d8e00002 arg ui_state_bt_hid_conn ,queue +3c52 afefffff qisolate1 pdata +3c53 79208403 setflag true ,3 ,temp +3c54 d8e00009 arg ui_state_ble_connected ,queue +3c55 afefffff qisolate1 pdata +3c56 79208405 setflag true ,5 ,temp +3c57 6800c682 fetch 1 ,mem_ui_state_map +3c58 d8e00004 arg ui_state_bt_spp_conn ,queue +3c59 afefffff qisolate1 pdata +3c5a 79208404 setflag true ,4 ,temp +3c5b e1488000 istoret 1 ,contwu +3c5c 202066c5 branch uartd_send + +module_hci_read_bt_status: +3c5d d8400000 arg 0 ,temp +3c5e 6800c093 fetch 1 ,mem_scan_mode +3c5f d8e00000 arg inq_scan_mode ,queue +3c60 afefffff qisolate1 pdata +3c61 79208400 setflag true ,0 ,temp +3c62 d8e00001 arg page_scan_mode ,queue +3c63 afefffff qisolate1 pdata +3c64 79208401 setflag true ,1 ,temp +3c65 6800c36e fetch 1 ,mem_le_adv_enable +3c66 d8e00000 arg 0 ,queue +3c67 afefffff qisolate1 pdata +3c68 79208402 setflag true ,2 ,temp +3c69 20600000 rtn + +module_hci_event_store_device: +3c6a 700b030d jam hci_event_nvram_rep ,mem_module_uart_opcode +3c6b 6800c217 fetch 1 ,mem_nv_data_number +3c6c 1feffe22 mul32 pdata ,34 ,pdata +3c6d 1fe27200 icopy loopcnt +3c6e 20403ca7 call module_hci_prepare_tx +3c6f 68014215 fetch 2 ,mem_nv_data_ptr +3c70 1fe20c00 icopy contr +3c71 204066d1 call uart_copy_tx_bytes_fast +3c72 202066c5 branch uartd_send + +module_hci_event_gkey_generate: +3c73 700b030e jam hci_event_gkey ,mem_module_uart_opcode +3c74 58000004 setarg 4 +3c75 20403ca7 call module_hci_prepare_tx +3c76 680209ba fetch 4 ,mem_gkey +3c77 e1420000 istore 4 ,contwu +3c78 202066c5 branch uartd_send + +module_hci_event_invalid_packet: +3c79 700b030f jam hci_event_invalid_packet ,mem_module_uart_opcode +3c7a 68110112 hfetch 2 ,core_uart_rxitems +3c7b d84000ff arg 0xff ,temp +3c7c 20407fdd call not_greater_than +3c7d 1fe27200 copy pdata ,loopcnt +3c7e 20403ca7 call module_hci_prepare_tx +3c7f 204066cb call uartd_prepare_rx +3c80 20406703 call uart_copy_rx2tx +3c81 202066c5 branch uartd_send + +module_hci_event_passkey_entry_mode: +3c82 700b0310 jam hci_event_get_passkey ,mem_module_uart_opcode +3c83 20203c49 branch module_hci_event_enter_standby_mode_len0 + +module_hci_event_le_tk: +3c84 700b0311 jam hci_event_le_tk ,mem_module_uart_opcode +3c85 58000004 setarg 4 +3c86 20403ca7 call module_hci_prepare_tx +3c87 680244c7 fetch 4 ,mem_le_tk +3c88 e1420000 istore 4 ,contwu +3c89 202066c5 branch uartd_send + +module_hci_event_le_pairing_fail: +3c8a da200180 arg flag_ble_pairing_fail ,rega +3c8b 20203c91 branch module_hci_event_pairing_completed + +module_hci_event_le_pairing_success: +3c8c da200080 arg flag_ble_pairing_success ,rega +3c8d 20203c91 branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_fail: +3c8e da200101 arg flag_bt_pairing_fail ,rega +3c8f 20203c91 branch module_hci_event_pairing_completed + +module_hci_event_bt_pairing_success: +3c90 da200001 arg flag_bt_pairing_success ,rega + +module_hci_event_pairing_completed: +3c91 70466100 jam 0 ,mem_flag_mode_ssp_pin +3c92 700b0314 jam hci_event_le_pairing_state ,mem_module_uart_opcode +3c93 58000002 setarg 2 +3c94 20403ca7 call module_hci_prepare_tx +3c95 1a227e00 copy rega ,pdata +3c96 e1410000 istore 2 ,contwu +3c97 202066c5 branch uartd_send + +module_hci_event_pause_enc: +3c98 da600000 arg flag_event_pause_enc ,regc +3c99 20203c9b branch module_hci_event_enc + +module_hci_event_start_enc: +3c9a da600001 arg flag_event_start_enc ,regc + +module_hci_event_enc: +3c9b 700b0315 jam hci_event_le_encryption_state ,mem_module_uart_opcode +3c9c 58000001 setarg 1 +3c9d 20403ca7 call module_hci_prepare_tx +3c9e 1a627e00 copy regc ,pdata +3c9f e1408000 istore 1 ,contwu +3ca0 202066c5 branch uartd_send + +module_hci_event_le_gkey: +3ca1 700b031d jam hci_event_le_gkey ,mem_module_uart_opcode +3ca2 58000004 setarg 4 +3ca3 20403ca7 call module_hci_prepare_tx +3ca4 680209ba fetch 4 ,mem_gkey +3ca5 e1420000 istore 4 ,contwu +3ca6 202066c5 branch uartd_send + +module_hci_prepare_tx: +3ca7 700b0202 jam 0x02 ,mem_module_uart_cmd +3ca8 60008b04 store 1 ,mem_module_uart_len +3ca9 600c0aa2 storet 8 ,mem_temp +3caa 44f1401c bpatch patch1c_2 ,mem_patch1c +3cab 20403cb1 call module_set_mcu_wake_pin_high_delay +3cac 680c0aa2 fetcht 8 ,mem_temp +3cad 204066c2 call uartd_prepare_tx +3cae 68018b02 fetch 3 ,mem_module_uart_cmd +3caf e1418000 istore 3 ,contwu +3cb0 20600000 rtn + +module_set_mcu_wake_pin_high_delay: +3cb1 20403cba call module_check_mcu_wake_pin_high +3cb2 20608000 rtn true + +module_set_mcu_wake_pin_h_delay: +3cb3 20403cb8 call module_set_mcu_wake_pin_high +3cb4 680246a3 fetch 4 ,mem_module_mcu_wake_delay_us +3cb5 1feb7e00 rshift2 pdata ,pdata +3cb6 207a0000 rtn blank +3cb7 20203cbe branch delay + +module_set_mcu_wake_pin_high: +3cb8 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3cb9 20206829 branch gpio_out_active + +module_check_mcu_wake_pin_high: +3cba 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3cbb 2020681b branch gpio_check_active + +module_set_mcu_wake_pin_low: +3cbc 6808c6a2 fetcht 1 ,mem_module_mcu_wake_pin +3cbd 20206825 branch gpio_out_inactive + +delay: +3cbe 1fe0ffff increase -1 ,pdata +3cbf 20000026 nop 38 +3cc0 243a3cbe nbranch delay ,blank +3cc1 20600000 rtn + +module_le_receive_data: +3cc2 20403ad4 call module_check_ble_encrypt_state +3cc3 20740000 rtn user +3cc4 1a227e00 copy rega ,pdata +3cc5 600146b7 store 2 ,mem_module_le_rx_data_address +3cc6 1a427e00 copy regb ,pdata +3cc7 6000c6b6 store 1 ,mem_module_le_rx_data_len +3cc8 68010478 fetch 2 ,mem_le_att_handle +3cc9 680946bb fetcht 2 ,mem_module_data_write_handle +3cca 98467c00 isub temp ,null +3ccb 2022bccf branch module_le_receive_data_ok ,zero +3ccc 680946bd fetcht 2 ,mem_module_data_write_handle2 +3ccd 98467c00 isub temp ,null +3cce 24628000 nrtn zero + +module_le_receive_data_ok: +3ccf 600146b9 store 2 ,mem_module_le_rx_data_handle +3cd0 20203c3d branch module_hci_event_receive_le_data + +module_exit_sniff: +3cd1 6800c6bf fetch 1 ,mem_module_flag +3cd2 c3828000 rtnbit1 moudle_task_unsniff +3cd3 20403cf0 call module_set_unsniff_task_flag +3cd4 2020340c branch app_bt_sniff_exit + +module_set_lpm_mult_2: +3cd5 70417202 jam 2 ,mem_lpm_mult +3cd6 20600000 rtn + +module_bb_event_timer: +3cd7 20203cd8 branch module_read_vdd_timer + +module_read_vdd_timer: +3cd8 6800c6b2 fetch 1 ,mem_module_read_vdd_flag +3cd9 207a0000 rtn blank +3cda 6800c6b3 fetch 1 ,mem_module_read_vdd_count +3cdb 207a0000 rtn blank +3cdc 1fe0ffff increase -1 ,pdata +3cdd 6000c6b3 store 1 ,mem_module_read_vdd_count +3cde 247a0000 nrtn blank +3cdf 7046b30a jam flag_module_read_vdd_count ,mem_module_read_vdd_count +3ce0 204068eb call adc_set_mode +3ce1 20406908 call vdd_calculate_by_mode +3ce2 1fe6fc64 div pdata ,0x64 +3ce3 20407f86 call wait_div_end +3ce4 1807fe00 quotient pdata +3ce5 18070400 remainder temp +3ce6 6000c6b4 store 1 ,mem_module_vdd_quotient +3ce7 6008c6b5 storet 1 ,mem_module_vdd_remainder +3ce8 20600000 rtn + +module_control_air_flow: +3ce9 20407fb4 call check_uart_tx_buff +3cea 202133d9 branch app_l2cap_flow_control_enable ,positive +3ceb 202033db branch app_l2cap_flow_control_disable + +module_set_sniff_task_flag: +3cec d8e00006 arg moudle_task_sniff ,queue +3ced 20203cfc branch module_set_state + +module_clear_sniff_task_flag: +3cee d8e00006 arg moudle_task_sniff ,queue +3cef 20203cf8 branch module_clr_state + +module_set_unsniff_task_flag: +3cf0 d8e00005 arg moudle_task_unsniff ,queue +3cf1 20203cfc branch module_set_state + +module_clear_unsniff_task_flag: +3cf2 d8e00005 arg moudle_task_unsniff ,queue +3cf3 20203cf8 branch module_clr_state + +module_set_le_tx_data_flag: +3cf4 d8e00004 arg module_flag_ble_data_finish ,queue +3cf5 20203cfc branch module_set_state + +module_clear_le_tx_data_flag: +3cf6 d8e00004 arg module_flag_ble_data_finish ,queue +3cf7 20203cf8 branch module_clr_state + +module_clr_state: +3cf8 6800c6bf fetch 1 ,mem_module_flag +3cf9 f93ffe00 qset0 pdata +3cfa 6000c6bf store 1 ,mem_module_flag +3cfb 20600000 rtn + +module_set_state: +3cfc 6800c6bf fetch 1 ,mem_module_flag +3cfd f9207e00 qset1 pdata +3cfe 6000c6bf store 1 ,mem_module_flag +3cff 20600000 rtn + +mouse_init: +3d00 20403d39 call mouse_setting_config +3d01 2040640f call spi_ncs_enable +3d02 204040c6 call mouse_init_sunt +3d03 20403d66 call mouse_dpi_config +3d04 20406411 call spi_ncs_disable +3d05 20758000 rtn wake +3d06 20403d16 call mouse_cheak_enable_usb +3d07 20403d19 call mouse_cb_fuction +3d08 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d09 c3880000 rtnbit1 mouse_enable_usb +3d0a 20403d4e call mouse_wakeup_from_power +3d0b c6130000 rtnmark1 mark_24g +3d0c 68014682 fetch 2 ,mem_ui_state_map +3d0d c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +3d0e 202042a2 branch mouse_check_reconn_target + +mouse_delay_4s: +3d0f 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d10 c40d8000 rtnbit0 mouse_enable_init_delay +3d11 df200014 arg 20 ,loopcnt + +mouse_delay_20ms: +3d12 58030d40 setarg 200000 +3d13 20402a8f call sleep +3d14 c2007ec1 loop delay_10ms +3d15 20600000 rtn + +mouse_cheak_enable_usb: +3d16 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d17 c4080000 rtnbit0 mouse_enable_usb +3d18 202048ea branch usb_init + +mouse_cb_fuction: +3d19 5800416d setarg mouse_le +3d1a 600141ef store 2 ,mem_cb_le_process +3d1b 58003f77 setarg mouse_send_process +3d1c 600141f1 store 2 ,mem_cb_bt_process +3d1d 58003ebb setarg mouse_process_lpm_before +3d1e 600141ed store 2 ,mem_cb_before_lpm +3d1f 5800417c setarg mouse_priority_bb_event +3d20 600141f5 store 2 ,mem_cb_bb_event_process +3d21 58003de3 setarg mouse_idle +3d22 600141f3 store 2 ,mem_cb_idle_process +3d23 58003eb3 setarg mouse_before_hibernate +3d24 600141eb store 2 ,mem_cb_before_hibernate +3d25 58003d5b setarg le_mouse_bb_event_connect_complete +3d26 600141f9 store 2 ,mem_cb_att_write +3d27 20402c7a call g24_head_ptr2regc +3d28 58004401 setarg mouse_g24_package_data +3d29 1a608ad8 add regc ,offset_24g_cb_data ,contw +3d2a e0a10000 istore 2 ,contw +3d2b 58004406 setarg mouse_g24_enter_lpm +3d2c 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw +3d2d e0a10000 istore 2 ,contw +3d2e 58003ebf setarg mouse_lpm_before_common +3d2f 1a608adc add regc ,offset_24g_cb_lpm_before ,contw +3d30 e0a10000 istore 2 ,contw +3d31 580041f9 setarg mouse_bb_event_timer +3d32 600141fd store 2 ,mem_cb_event_timer +3d33 58003d36 setarg mouse_spi_write_flash_cb +3d34 60014201 store 2 ,mem_cb_spi_flash_write_complate +3d35 20600000 rtn + +mouse_spi_write_flash_cb: + +mouse_spi_init: +3d36 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d37 c30964d7 bbit0 mouse_enable_spi2 ,spid_init +3d38 202064da branch spid_init2 + +mouse_setting_config: +3d39 20758000 rtn wake +3d3a 20402c9d call g24_set_device_addr +3d3b 20403e6e call mouse_gpio_init +3d3c 20403e1e call mouse_param_init +3d3d 20403e54 call mouse_adc_init +3d3e 20405810 call le_set_config_fixed_ltk +3d3f 20405839 call le_set_justwork +3d40 2040582c call le_set_fixed_ltk +3d41 20405818 call le_set_config_read_authentication +3d42 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d43 c28a3d46 bbit1 mouse_enable_eeprom ,mouse_init_iic +3d44 c289c414 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak +3d45 20600000 rtn + +mouse_init_iic: +3d46 2040659c call iic_init_390k +3d47 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d48 2feffe19 isolate1 mouse_enable_2k_eeprom ,pdata +3d49 2440e5c2 ncall clear_eeprom_size_2k ,true +3d4a 2040443f call mouse_load_eeprom_dpi +3d4b 20403dc9 call mouse_init_environment +3d4c 204041aa call mouse_set_24g_addr_eeprom +3d4d 202065df branch iicd_read_eep_data + +mouse_wakeup_from_power: +3d4e 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d4f c30f3d53 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power +3d50 68008abd fetch 1 ,mem_wakup_from_power_flag +3d51 2fec0003 isolate0 gpio_latch ,pdata +3d52 24608000 nrtn true + +mouse_wakeup_no_from_power: +3d53 6800c71f fetch 1 ,mem_reconn_times_init +3d54 6000c71e store 1 ,mem_reconn_times +3d55 6800c6f5 fetch 1 ,mem_config_function_enable +3d56 c3830000 rtnbit1 enable_select_device_by_switch + +mouse_start_24g_mode: +3d57 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d58 c4088000 rtnbit0 mouse_enable_24g +3d59 c28eaee4 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start +3d5a 20202f2c branch g24_check_51cmd_start_24g + +le_mouse_bb_event_connect_complete: +3d5b 68008478 fetch 1 ,mem_le_att_handle +3d5c 1fe67e1a sub pdata ,26 ,pdata +3d5d 24628000 nrtn zero +3d5e 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +3d5f 20407d8f call ui_ipc_send_cmd + +mouse_le_write_enable: +3d60 d8e00000 arg write_req_enable_flag ,queue +3d61 202041b9 branch mouse_le_enable_connect_flag + +mouse_dpi_up: +3d62 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +3d63 c1008000 rtneq dpi_button_state_up +3d64 7046b601 jam dpi_button_state_up ,mem_mouse_dpi_button_state +3d65 20600000 rtn + +mouse_dpi_config: +3d66 6800c6e1 fetch 1 ,mem_config_sensor_motion +3d67 1fe17e0f and pdata ,0x0f ,pdata +3d68 6000c77a store 1 ,mem_mouse_dpi +3d69 20203d80 branch mouse_seting_dpi + 2 + +mouse_dpi_cheak: +3d6a 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +3d6b 2040681d call gpio_get_bit +3d6c 2420bd62 nbranch mouse_dpi_up ,true + +mouse_dpi_down: +3d6d 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +3d6e c1000000 rtneq dpi_button_state_down +3d6f 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state +3d70 6800c77a fetch 1 ,mem_mouse_dpi +3d71 1fe0fe01 increase 1 ,pdata +3d72 1fe17e03 and pdata ,0x03 ,pdata +3d73 6000c77a store 1 ,mem_mouse_dpi +3d74 20403d7e call mouse_seting_dpi +3d75 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3d76 c28a443b bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi +3d77 c289bd79 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi +3d78 20600000 rtn + +mouse_before_store_flash_cpi: +3d79 d840001e arg mouse_spi2_clk_gpio ,temp +3d7a 2040680e call gpio_config_output +3d7b d840001f arg mouse_spi2_sdio_gpio ,temp +3d7c 2040680e call gpio_config_output +3d7d 20204435 branch mouse_store_flash_device_info + +mouse_seting_dpi: +3d7e 44f1c01c bpatch patch1c_3 ,mem_patch1c +3d7f 2040424a call mosue_dpi_led_blink_init +3d80 6800c6e0 fetch 1 ,mem_config_sensor_type +3d81 c002bdaa beq p3610 ,mouse_seting_3610_dpi +3d82 c0023d96 beq p3212 ,mouse_seting_3212_dpi +3d83 6800c77a fetch 1 ,mem_mouse_dpi +3d84 c0003d8a beq mouse_dpi_level1 ,mouse_set_cpi1 +3d85 c000bd88 beq mouse_dpi_level2 ,mouse_set_cpi2 +3d86 c0013d8c beq mouse_dpi_level3 ,mouse_set_cpi3 +3d87 c001bd8e beq mouse_dpi_level4 ,mouse_set_cpi4 + +mouse_set_cpi2: +3d88 6800c780 fetch 1 ,mem_320x_dpi_2 +3d89 20203dbe branch mouse_p3205_dpi + +mouse_set_cpi1: +3d8a 6800c77f fetch 1 ,mem_320x_dpi_1 +3d8b 20203dbe branch mouse_p3205_dpi + +mouse_set_cpi3: +3d8c 6800c781 fetch 1 ,mem_320x_dpi_3 +3d8d 20203dbe branch mouse_p3205_dpi + +mouse_set_cpi4: +3d8e 6800c782 fetch 1 ,mem_320x_dpi_4 +3d8f 20203dbe branch mouse_p3205_dpi + +moue_seting_cpi_count: +3d90 6800c6e0 fetch 1 ,mem_config_sensor_type +3d91 c1030000 rtneq p3065_xy +3d92 6800c6b5 fetch 1 ,mem_mouse_cpi_count +3d93 1fe0fe01 increase 1 ,pdata +3d94 6000c6b5 store 1 ,mem_mouse_cpi_count +3d95 20600000 rtn + +mouse_seting_3212_dpi: +3d96 6800c77a fetch 1 ,mem_mouse_dpi +3d97 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +3d98 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +3d99 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +3d9a c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 + +mouse_set_p3212_cpi2: +3d9b 6800c784 fetch 1 ,mem_3212_dpi_2 +3d9c 20203da2 branch mouse_p3212_dpi + +mouse_set_p3212_cpi1: +3d9d 6800c783 fetch 1 ,mem_3212_dpi_1 +3d9e 20203da2 branch mouse_p3212_dpi + +mouse_set_p3212_cpi3: +3d9f 6800c785 fetch 1 ,mem_3212_dpi_3 +3da0 20203da2 branch mouse_p3212_dpi + +mouse_set_p3212_cpi4: +3da1 6800c786 fetch 1 ,mem_3212_dpi_4 + +mouse_p3212_dpi: +3da2 6000c6b5 store 1 ,mem_mouse_cpi_count +3da3 1fed7e00 lshift8 pdata ,pdata +3da4 1fe22200 copy pdata ,rega +3da5 1fe0fe0d add pdata ,mouse_p3212_dpi_xaddress ,pdata +3da6 20406413 call twspi_write +3da7 1a227e00 copy rega ,pdata +3da8 1fe0fe0e add pdata ,mouse_p3212_dpi_yaddress ,pdata +3da9 20206413 branch twspi_write + +mouse_seting_3610_dpi: +3daa 6800c77a fetch 1 ,mem_mouse_dpi +3dab c0003db1 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 +3dac c000bdaf beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 +3dad c0013db3 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 +3dae c001bdb5 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 + +mouse_set_p3610_cpi2: +3daf 6800c788 fetch 1 ,mem_3610_dpi_2 +3db0 20203db6 branch mouse_p3610_dpi + +mouse_set_p3610_cpi1: +3db1 6800c787 fetch 1 ,mem_3610_dpi_1 +3db2 20203db6 branch mouse_p3610_dpi + +mouse_set_p3610_cpi3: +3db3 6800c789 fetch 1 ,mem_3610_dpi_3 +3db4 20203db6 branch mouse_p3610_dpi + +mouse_set_p3610_cpi4: +3db5 6800c78a fetch 1 ,mem_3610_dpi_4 + +mouse_p3610_dpi: +3db6 6000c6b5 store 1 ,mem_mouse_cpi_count +3db7 204040c0 call mouse_spi_sdio_gpio_pollup +3db8 6800c6b5 fetch 1 ,mem_mouse_cpi_count + +mouse_reset_p3610_dpi: +3db9 1fe0fe80 add pdata ,0x80 ,pdata +3dba 1fed7e00 lshift8 pdata ,pdata +3dbb 1fe0fe05 add pdata ,mouse_p3610_dpi_address ,pdata +3dbc 1fe22200 copy pdata ,rega +3dbd 2020415a branch mouse_set_sensor_reg + +mouse_p3205_dpi: +3dbe 6000c6b5 store 1 ,mem_mouse_cpi_count +3dbf 20403d90 call moue_seting_cpi_count +3dc0 6800c6b5 fetch 1 ,mem_mouse_cpi_count +3dc1 58000006 setarg mouse_dpi_address +3dc2 20406414 call twspi_read +3dc3 1fe104f8 and pdata ,0xf8 ,temp +3dc4 6800c6b5 fetch 1 ,mem_mouse_cpi_count +3dc5 9840fe00 iadd temp ,pdata +3dc6 1fed7e00 lshift8 pdata ,pdata +3dc7 1fe0fe06 add pdata ,mouse_dpi_address ,pdata +3dc8 20206413 branch twspi_write + +mouse_init_environment: +3dc9 204033c4 call app_initflag_check +3dca 2022c316 branch mouse_eeprom_load_recon_info ,zero +3dcb 2040441c call mouse_ble_init_address +3dcc 204042e4 call mouse_store_eeprom_device_info +3dcd 202033bd branch app_initflag_store + +mouse_24g_pairing_button: +3dce 68014707 fetch 2 ,mem_24g_pairing_timer_count +3dcf 207a0000 rtn blank +3dd0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3dd1 c4088000 rtnbit0 mouse_enable_24g +3dd2 c3818000 rtnbit1 mosue_24g_pairing_flag +3dd3 c6130000 rtnmark1 mark_24g +3dd4 20404083 call mouse_check_key_gpio +3dd5 c1838000 rtnne mouse_lmr_button +3dd6 20404482 call mouse_devce_led_off +3dd7 d8e00003 arg mosue_24g_pairing_flag ,queue +3dd8 204043ce call mouse_enable_function_flag +3dd9 58000000 setarg 0 +3dda 600146ae store 2 ,mem_mouse_direct_timer +3ddb 6000c6b4 store 1 ,mem_mouse_send_blank_timer +3ddc 20403263 call g24_set0_mem_check_dongle_times +3ddd 68014682 fetch 2 ,mem_ui_state_map +3dde c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +3ddf c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +3de0 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +3de1 204042ca call mouse_stop_discovery +3de2 20202ead branch g24_start_pairing_sm1 + +mouse_idle: +3de3 20403dce call mouse_24g_pairing_button +3de4 20407e34 call ui_check_paring_button +3de5 20403d6a call mouse_dpi_cheak +3de6 20403de9 call mouse_usb_isr +3de7 20403ee0 call mouse_wheel_check +3de8 20203df7 branch mouse_usb_mode + +mouse_usb_isr: +3de9 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3dea c4080000 rtnbit0 mouse_enable_usb +3deb 204048d3 call usb_isr +3dec 202048fd branch usb_offline_state + +mouse_cheak_usb: +3ded 68108a04 hfetch 1 ,core_usb_addr +3dee c303bdf1 bbit0 7 ,mouse_usb_no_exsit +3def c283bdf4 bbit1 7 ,mouse_usb_exsit +3df0 20600000 rtn + +mouse_usb_no_exsit: +3df1 6800c6ff fetch 1 ,mem_usb_addr +3df2 c4038000 rtnbit0 7 +3df3 2020659a branch soft_reset_chip + +mouse_usb_exsit: +3df4 6800c6ff fetch 1 ,mem_usb_addr +3df5 c3838000 rtnbit1 7 +3df6 20204381 branch mouse_stop_bluetooth_mode + +mouse_usb_mode: +3df7 20403ded call mouse_cheak_usb +3df8 68108a04 hfetch 1 ,core_usb_addr +3df9 6000c6ff store 1 ,mem_usb_addr +3dfa c4038000 rtnbit0 7 +3dfb 20403e07 call mouse_clkn_check +3dfc 680246f9 fetch 4 ,mem_btclk_sensor +3dfd 6808c6fd fetcht 1 ,mem_wire_usb_interval +3dfe 98408400 iadd temp ,temp +3dff 1c427e00 copy clkn_bt ,pdata +3e00 98467c00 isub temp ,null +3e01 24610000 nrtn positive +3e02 600246f9 store 4 ,mem_btclk_sensor +3e03 20403f97 call mouse_motion +3e04 24740000 nrtn user +3e05 700d3804 jam 4 ,mem_usb_tx_enable +3e06 20203e0f branch mouse_wired_to_usb + +mouse_clkn_check: +3e07 680a46f9 fetcht 4 ,mem_btclk_sensor +3e08 1c427e00 copy clkn_bt ,pdata +3e09 98467c00 isub temp ,null +3e0a 24413e0c ncall mouse_clkn_timeout ,positive +3e0b 20600000 rtn + +mouse_clkn_timeout: +3e0c 58000000 setarg 0 +3e0d 600246f9 store 4 ,mem_btclk_sensor +3e0e 20600000 rtn + +mouse_wired_to_usb: +3e0f 68008d38 fetch 1 ,mem_usb_tx_enable +3e10 c4010000 rtnbit0 2 +3e11 20203e12 branch mouse_data_push + +mouse_data_push: +3e12 68108a04 hfetch 1 ,core_usb_addr +3e13 c4038000 rtnbit0 7 +3e14 700d5220 jam usb_ep2_ms ,mem_usb_ep2_data +3e15 58000001 setarg ms_report_id +3e16 60008d54 store 1 ,mem_usb_mouse_data +3e17 6803c69a fetch 7 ,mem_mouse_key +3e18 e0a38000 istore 7 ,contw +3e19 20600000 rtn + +mouse_enable_clock_qdecoder: +3e1a 68110050 hfetch 2 ,core_clkoff +3e1b 793ffe0b set0 clock_off_qdecoder ,pdata +3e1c 60110050 hstore 2 ,core_clkoff +3e1d 20600000 rtn + +mouse_param_init: +3e1e 58008c00 setarg 0x8c00 +3e1f 60014575 store 2 ,mem_ui_uuid_table +3e20 58008e7a setarg 0x8e7a +3e21 600144bc store 2 ,mem_ui_le_uuid_table +3e22 58002402 setarg 0x2402 +3e23 600140bd store 2 ,mem_fcomp_mul +3e24 58002580 setarg 0x2580 +3e25 6001c0aa store 3 ,mem_class +3e26 70417303 jam 3 ,mem_lpm_mult_timeout +3e27 70415608 jam 8 ,mem_lpm_overhead +3e28 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +3e29 58000200 setarg 0x0200 +3e2a 60014154 store 2 ,mem_lpm_interval +3e2b 7044a617 jam 0x17 ,mem_le_local_mtu +3e2c 7044a817 jam 0x17 ,mem_le_remote_mtu +3e2d 58000a77 setarg 0x0a77 +3e2e 60014212 store 2 ,mem_spi_init_clk +3e2f 38000306 setsect 0 ,0x306 +3e30 38044440 setsect 1 ,0x4440 +3e31 38090000 setsect 2 ,0x10000 +3e32 380c4408 setsect 3 ,0x4408 +3e33 6004c577 store 9 ,mem_all_uuid_16bits +3e34 38001224 setsect 0 ,0x1224 +3e35 38044000 setsect 1 ,0x4000 +3e36 38080000 setsect 2 ,0x0 +3e37 e0a28000 istore 5 ,contw +3e38 3803ffff setsect 0 ,0x3ffff +3e39 3806fe23 setsect 1 ,0x2fe23 +3e3a 380999d9 setsect 2 ,0x199d9 +3e3b 380c020d setsect 3 ,0x20d +3e3c 60044098 store 8 ,mem_features +3e3d 5800012c setarg 0x012c +3e3e 60014707 store 2 ,mem_24g_pairing_timer_count +3e3f 204057a3 call le_modified_name +3e40 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3e41 c40f8000 rtnbit0 mouse_enable_gpio_control_adc_sensor +3e42 20403e44 call mouse_sensor_set_angle +3e43 20203e4c branch mouse_select_adc + +mouse_sensor_set_angle: +3e44 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio +3e45 204067fb call gpio_config_input +3e46 6808c6f7 fetcht 1 ,mem_select_sensor_angle_gpio +3e47 2040681d call gpio_get_bit +3e48 7046f603 jam mouse_3clk_angle ,mem_config_sensor_angle +3e49 20608000 rtn true +3e4a 7046f602 jam mouse_12clk_angle ,mem_config_sensor_angle +3e4b 20600000 rtn + +mouse_select_adc: +3e4c 6808c6f8 fetcht 1 ,mem_select_adc_gpio +3e4d 204067fb call gpio_config_input +3e4e 6808c6f8 fetcht 1 ,mem_select_adc_gpio +3e4f 2040681d call gpio_get_bit +3e50 70422d00 jam adc_config_vinlpm ,mem_adc_config_flag +3e51 20608000 rtn true +3e52 70422d02 jam adc_config_gpio ,mem_adc_config_flag +3e53 20600000 rtn + +mouse_adc_init: +3e54 6800c22d fetch 1 ,mem_adc_config_flag +3e55 c0003e59 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm +3e56 c000be62 beq adc_config_hvin ,mouse_adc_init_data_hvin +3e57 c0013e6b beq adc_config_gpio ,mouse_adc_init_data_io +3e58 20203e59 branch mouse_adc_init_data_vinlpm + +mouse_adc_init_data_vinlpm: +3e59 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data +3e5a 68014227 fetch 2 ,mem_3v_adc_vinlpm_data +3e5b 98467e00 isub temp ,pdata +3e5c 1feffe14 mul32 pdata ,20 ,pdata +3e5d 1fe6fc64 div pdata ,100 +3e5e 20407f86 call wait_div_end +3e5f 1807fe00 quotient pdata +3e60 600146d0 store 2 ,mem_adc_reference_voltage +3e61 20600000 rtn + +mouse_adc_init_data_hvin: +3e62 6809421f fetcht 2 ,mem_1v_adc_hvin_data +3e63 68014225 fetch 2 ,mem_5v_adc_hvin_data +3e64 98467e00 isub temp ,pdata +3e65 1feffee6 mul32 pdata ,230 ,pdata +3e66 1fe6fd90 div pdata ,400 +3e67 20407f86 call wait_div_end +3e68 1807fe00 quotient pdata +3e69 600146d0 store 2 ,mem_adc_reference_voltage +3e6a 20600000 rtn + +mouse_adc_init_data_io: +3e6b 68014223 fetch 2 ,mem_1v_adc_io_data +3e6c 600146d0 store 2 ,mem_adc_reference_voltage +3e6d 20600000 rtn + +mouse_gpio_init: +3e6e 6808c23a fetcht 1 ,mem_eeprom_wp_gpio +3e6f 2040680e call gpio_config_output +3e70 204048fb call usb_offline_check_init +3e71 6808c6e2 fetcht 1 ,mem_lbutton_gpio +3e72 204067fb call gpio_config_input +3e73 6808c6e3 fetcht 1 ,mem_rbutton_gpio +3e74 204067fb call gpio_config_input +3e75 6808c6e4 fetcht 1 ,mem_mbutton_gpio +3e76 204067fb call gpio_config_input +3e77 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3e78 204067fb call gpio_config_input +3e79 6808c6dc fetcht 1 ,mem_sensor_reset_gpio +3e7a 2040680e call gpio_config_output +3e7b 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3e7c 204067fb call gpio_config_input +3e7d 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3e7e 204067fb call gpio_config_input +3e7f 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3e80 204067fb call gpio_config_input +3e81 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3e82 204067fb call gpio_config_input +3e83 6808c6e5 fetcht 1 ,mem_bk_button_gpio +3e84 204067fb call gpio_config_input +3e85 6808c6e6 fetcht 1 ,mem_fw_button_gpio +3e86 204067fb call gpio_config_input +3e87 6808c6ef fetcht 1 ,mem_config_low_voltage_alarm_gpio +3e88 2040680e call gpio_config_output +3e89 6808c6f0 fetcht 1 ,mem_config_device1_led_gpio +3e8a 2040680e call gpio_config_output +3e8b 6808c6f1 fetcht 1 ,mem_config_device2_led_gpio +3e8c 2040680e call gpio_config_output +3e8d 6808c6f2 fetcht 1 ,mem_config_device3_led_gpio +3e8e 2040680e call gpio_config_output +3e8f 6808c6f4 fetcht 1 ,mem_dpi_led_gpio +3e90 2040680e call gpio_config_output +3e91 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +3e92 204067fb call gpio_config_input +3e93 6808c6ec fetcht 1 ,mem_config_bt_button_gpio +3e94 204067fb call gpio_config_input +3e95 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +3e96 202067fb branch gpio_config_input + +mouse_wheel_gpio_set_wake: +3e97 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3e98 204067dd call gpio_set_wake_by_current_state +3e99 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3e9a 204067dd call gpio_set_wake_by_current_state +3e9b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3e9c 204067dd call gpio_set_wake_by_current_state +3e9d 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3e9e 202067dd branch gpio_set_wake_by_current_state + +mouse_before_hibernate_wheel_gpio_set: +3e9f 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3ea0 20403ea7 call mouse_gpio_set_pupd_by_input +3ea1 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3ea2 20403ea7 call mouse_gpio_set_pupd_by_input +3ea3 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3ea4 20403ea7 call mouse_gpio_set_pupd_by_input +3ea5 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3ea6 20203ea7 branch mouse_gpio_set_pupd_by_input + +mouse_gpio_set_pupd_by_input: +3ea7 18467cff sub temp ,ui_button_gpio_disable ,null +3ea8 20628000 rtn zero +3ea9 18410e7f and temp ,0x7f ,queue +3eaa 6812011c hfetch 4 ,core_gpio_in +3eab afefffff qisolate1 pdata +3eac 68120078 hfetch 4 ,core_gpio_pu0 +3ead f920fe00 qsetflag true ,pdata +3eae 60120078 hstore 4 ,core_gpio_pu0 +3eaf 6812007c hfetch 4 ,core_gpio_pd0 +3eb0 fd20fe00 nqsetflag true ,pdata +3eb1 6012007c hstore 4 ,core_gpio_pd0 +3eb2 20600000 rtn + +mouse_before_hibernate: +3eb3 78347c00 enable user +3eb4 68120138 hfetch 4 ,0x8138 +3eb5 79347e1a setflag user ,26 ,pdata +3eb6 6012004c hstore 4 ,core_lpm_reg +3eb7 20402c21 call lpm_write_ctrl +3eb8 20404482 call mouse_devce_led_off +3eb9 20403e9f call mouse_before_hibernate_wheel_gpio_set +3eba 20203ebf branch mouse_lpm_before_common + +mouse_process_lpm_before: +3ebb 20403ebf call mouse_lpm_before_common +3ebc 680080a0 fetch 1 ,mem_lpm_current_mult +3ebd 247a0000 nrtn blank +3ebe 202067ed branch gpio_clr_wake + +mouse_lpm_before_common: +3ebf 20403ee0 call mouse_wheel_check +3ec0 d8400019 arg mouse_spi1_clk_gpio ,temp +3ec1 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3ec2 2feffe12 isolate1 mouse_enable_spi2 ,pdata +3ec3 2040bede call mouse_spi_clk_gpio ,true +3ec4 2040680e call gpio_config_output +3ec5 204063ee call twspi_disable +3ec6 6808c6e2 fetcht 1 ,mem_lbutton_gpio +3ec7 204067dd call gpio_set_wake_by_current_state +3ec8 6808c6e3 fetcht 1 ,mem_rbutton_gpio +3ec9 204067dd call gpio_set_wake_by_current_state +3eca 6808c6e4 fetcht 1 ,mem_mbutton_gpio +3ecb 204067dd call gpio_set_wake_by_current_state +3ecc 6808c6e5 fetcht 1 ,mem_bk_button_gpio +3ecd 204067dd call gpio_set_wake_by_current_state +3ece 6808c6e6 fetcht 1 ,mem_fw_button_gpio +3ecf 204067dd call gpio_set_wake_by_current_state +3ed0 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +3ed1 204067dd call gpio_set_wake_by_current_state +3ed2 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +3ed3 204067dd call gpio_set_wake_by_current_state +3ed4 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3ed5 204067dd call gpio_set_wake_by_current_state +3ed6 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3ed7 204067dd call gpio_set_wake_by_current_state +3ed8 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3ed9 204067dd call gpio_set_wake_by_current_state +3eda 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3edb 204067dd call gpio_set_wake_by_current_state +3edc 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3edd 202067e1 branch gpio_set_wake + +mouse_spi_clk_gpio: +3ede d840001e arg mouse_spi2_clk_gpio ,temp +3edf 20600000 rtn + +mouse_wheel_check: +3ee0 44f2401c bpatch patch1c_4 ,mem_patch1c +3ee1 20403eee call mouse_t_wheel_scan +3ee2 20403f36 call mouse_wheel_scan +3ee3 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3ee4 6808c6b7 fetcht 1 ,mem_wheel_tb_old_pinlevel +3ee5 6000c6b7 store 1 ,mem_wheel_tb_old_pinlevel +3ee6 98467c00 isub temp ,null +3ee7 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero +3ee8 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3ee9 6808c6bd fetcht 1 ,mem_mwheel_b_old_pinlevel +3eea 6000c6bd store 1 ,mem_mwheel_b_old_pinlevel +3eeb 98467c00 isub temp ,null +3eec 2422b3d4 nbranch app_lpm_wake_auto_lock ,zero +3eed 20600000 rtn + +mouse_t_wheel_scan: +3eee 6800c6ea fetch 1 ,mem_whee_ta_data_gpio +3eef c17f8000 rtneq gpio_disable +3ef0 da200000 arg 0 ,rega +3ef1 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +3ef2 2040681d call gpio_get_bit +3ef3 7920a200 setflag true ,0 ,rega +3ef4 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +3ef5 2040681d call gpio_get_bit +3ef6 7920a201 setflag true ,1 ,rega +3ef7 1a227e00 copy rega ,pdata +3ef8 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel +3ef9 c000befe beq 0x01 ,mouse_t_wheel_scan_judge1 +3efa c0013f02 beq 0x02 ,mouse_t_wheel_scan_judge2 +3efb 6800c6b9 fetch 1 ,mem_wheel_tog +3efc c283bf0e bbit1 7 ,mouse_t_wheel_scan_judge3 +3efd 20600000 rtn + +mouse_t_wheel_scan_judge1: +3efe 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +3eff c0003f06 beq 0 ,mouse_t_wheel_scan_judge11 +3f00 c001bf08 beq 3 ,mouse_t_wheel_scan_judge12 +3f01 20600000 rtn + +mouse_t_wheel_scan_judge2: +3f02 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +3f03 c0003f0a beq 0 ,mouse_t_wheel_scan_judge21 +3f04 c001bf0c beq 3 ,mouse_t_wheel_scan_judge22 +3f05 20600000 rtn + +mouse_t_wheel_scan_judge11: +3f06 7046b982 jam 0x82 ,mem_wheel_tog +3f07 20600000 rtn + +mouse_t_wheel_scan_judge12: +3f08 7046b981 jam 0x81 ,mem_wheel_tog +3f09 20600000 rtn + +mouse_t_wheel_scan_judge21: +3f0a 7046b980 jam 0x80 ,mem_wheel_tog +3f0b 20600000 rtn + +mouse_t_wheel_scan_judge22: +3f0c 7046b983 jam 0x83 ,mem_wheel_tog +3f0d 20600000 rtn + +mouse_t_wheel_scan_judge3: +3f0e 6800c6b9 fetch 1 ,mem_wheel_tog +3f0f 793ffe07 set0 7 ,pdata +3f10 6000c6b9 store 1 ,mem_wheel_tog +3f11 c0003f16 beq 0 ,mouse_t_wheel_scan_judge30 +3f12 c000bf19 beq 1 ,mouse_t_wheel_scan_judge31 +3f13 c0013f1c beq 2 ,mouse_t_wheel_scan_judge32 +3f14 c001bf1f beq 3 ,mouse_t_wheel_scan_judge33 +3f15 20600000 rtn + +mouse_t_wheel_scan_judge30: +3f16 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f17 c001bf22 beq 3 ,mouse_wheel_t_forward +3f18 20600000 rtn + +mouse_t_wheel_scan_judge31: +3f19 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f1a c0003f22 beq 0 ,mouse_wheel_t_forward +3f1b 20600000 rtn + +mouse_t_wheel_scan_judge32: +3f1c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f1d c001bf2c beq 3 ,mouse_wheel_t_back +3f1e 20600000 rtn + +mouse_t_wheel_scan_judge33: +3f1f 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +3f20 c0003f2c beq 0 ,mouse_wheel_t_back +3f21 20600000 rtn + +mouse_wheel_t_forward: +3f22 6800c6bc fetch 1 ,mem_mouse_tz_data_count1 +3f23 1fe0fe01 increase 1 ,pdata +3f24 6000c6bc store 1 ,mem_mouse_tz_data_count1 +3f25 1fe67c01 sub pdata ,1 ,null +3f26 20610000 rtn positive +3f27 7046bc00 jam 0 ,mem_mouse_tz_data_count1 +3f28 6800c6ba fetch 1 ,mem_mouse_tz_data +3f29 1fe0fe01 increase 1 ,pdata +3f2a 6000c6ba store 1 ,mem_mouse_tz_data +3f2b 20600000 rtn + +mouse_wheel_t_back: +3f2c 6800c6bb fetch 1 ,mem_mouse_tz_data_count +3f2d 1fe0fe01 increase 1 ,pdata +3f2e 6000c6bb store 1 ,mem_mouse_tz_data_count +3f2f 1fe67c01 sub pdata ,1 ,null +3f30 20610000 rtn positive +3f31 7046bb00 jam 0 ,mem_mouse_tz_data_count +3f32 6800c6ba fetch 1 ,mem_mouse_tz_data +3f33 1fe0ffff increase -1 ,pdata +3f34 6000c6ba store 1 ,mem_mouse_tz_data +3f35 20600000 rtn + +mouse_wheel_scan: +3f36 6800c6e8 fetch 1 ,mem_whee_a_data_gpio +3f37 c17f8000 rtneq gpio_disable +3f38 da200000 arg 0 ,rega +3f39 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +3f3a 2040681d call gpio_get_bit +3f3b 7920a200 setflag true ,0 ,rega +3f3c 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +3f3d 2040681d call gpio_get_bit +3f3e 7920a201 setflag true ,1 ,rega +3f3f 1a227e00 copy rega ,pdata +3f40 6000c6be store 1 ,mem_mwheel_b_new_pinlevel +3f41 c000bf46 beq 0x01 ,mouse_wheel_scan_judge1 +3f42 c0013f4a beq 0x02 ,mouse_wheel_scan_judge2 +3f43 6800c6bf fetch 1 ,mem_mwheel_tog +3f44 c283bf56 bbit1 7 ,mouse_wheel_scan_judge3 +3f45 20600000 rtn + +mouse_wheel_scan_judge1: +3f46 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel +3f47 c0003f4e beq 0 ,mouse_wheel_scan_judge11 +3f48 c001bf50 beq 3 ,mouse_wheel_scan_judge12 +3f49 20600000 rtn + +mouse_wheel_scan_judge2: +3f4a 6800c6bd fetch 1 ,mem_mwheel_b_old_pinlevel +3f4b c0003f52 beq 0 ,mouse_wheel_scan_judge21 +3f4c c001bf54 beq 3 ,mouse_wheel_scan_judge22 +3f4d 20600000 rtn + +mouse_wheel_scan_judge11: +3f4e 7046bf82 jam 0x82 ,mem_mwheel_tog +3f4f 20600000 rtn + +mouse_wheel_scan_judge12: +3f50 7046bf81 jam 0x81 ,mem_mwheel_tog +3f51 20600000 rtn + +mouse_wheel_scan_judge21: +3f52 7046bf80 jam 0x80 ,mem_mwheel_tog +3f53 20600000 rtn + +mouse_wheel_scan_judge22: +3f54 7046bf83 jam 0x83 ,mem_mwheel_tog +3f55 20600000 rtn + +mouse_wheel_scan_judge3: +3f56 6800c6bf fetch 1 ,mem_mwheel_tog +3f57 793ffe07 set0 7 ,pdata +3f58 6000c6bf store 1 ,mem_mwheel_tog +3f59 c0003f5e beq 0 ,mouse_wheel_scan_judge30 +3f5a c000bf61 beq 1 ,mouse_wheel_scan_judge31 +3f5b c0013f64 beq 2 ,mouse_wheel_scan_judge32 +3f5c c001bf67 beq 3 ,mouse_wheel_scan_judge33 +3f5d 20600000 rtn + +mouse_wheel_scan_judge30: +3f5e 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f5f c001bf6a beq 3 ,mouse_wheel_forward +3f60 20600000 rtn + +mouse_wheel_scan_judge31: +3f61 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f62 c0003f6a beq 0 ,mouse_wheel_forward +3f63 20600000 rtn + +mouse_wheel_scan_judge32: +3f64 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f65 c001bf6f beq 3 ,mouse_wheel_back +3f66 20600000 rtn + +mouse_wheel_scan_judge33: +3f67 6800c6be fetch 1 ,mem_mwheel_b_new_pinlevel +3f68 c0003f6f beq 0 ,mouse_wheel_back +3f69 20600000 rtn + +mouse_wheel_forward: +3f6a 7046c200 jam 0 ,mem_mouse_z_data_count1 +3f6b 6800c6c0 fetch 1 ,mem_mouse_z_data +3f6c 1fe0fe01 increase 1 ,pdata +3f6d 6000c6c0 store 1 ,mem_mouse_z_data +3f6e 20600000 rtn + +mouse_wheel_back: +3f6f 7046c100 jam 0 ,mem_mouse_z_data_count +3f70 6800c6c0 fetch 1 ,mem_mouse_z_data +3f71 1fe0ffff increase -1 ,pdata +3f72 6000c6c0 store 1 ,mem_mouse_z_data +3f73 20600000 rtn + +mouse_hid_connected: +3f74 58000002 setarg hid_handshake_timeout +3f75 6000c680 store 1 ,mem_hid_handshake_timer_count +3f76 20600000 rtn + +mouse_send_process: +3f77 6800c1e2 fetch 1 ,mem_app_handshake_flag +3f78 207a0000 rtn blank +3f79 20405271 call l2cap_malloc_is_fifo_nearly_full +3f7a 247a0000 nrtn blank +3f7b 680246d3 fetch mouse_flag_len ,mem_mouse_flag +3f7c c281bf8a bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data +3f7d c2803f8a bbit1 mouse_select_device_flag ,mouse_send_empty_data +3f7e c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +3f7f 20403f97 call mouse_motion +3f80 24740000 nrtn user + +mouse_send_data: +3f81 da200009 arg 9 ,rega +3f82 20404d63 call hid_malloc_tx_buff +3f83 6801424e fetch 2 ,mem_hid_int_remote_cid +3f84 e0a10000 istore 2 ,contw +3f85 580002a1 setarg 0x02a1 +3f86 e0a10000 istore 2 ,contw +3f87 6803c69a fetch 7 ,mem_mouse_key +3f88 e0a38000 istore 7 ,contw +3f89 20600000 rtn + +mouse_send_empty_data: +3f8a 58000000 setarg 0 +3f8b 6003c69a store 7 ,mem_mouse_key +3f8c 20203f81 branch mouse_send_data + +mouse_no_data_timer_init: +3f8d 680146aa fetch 2 ,mem_mouse_no_data_timeout +3f8e 600146b0 store 2 ,mem_mouse_no_data_timer +3f8f 20600000 rtn + +mouse_fill_data_le: +3f90 44f2c01c bpatch patch1c_5 ,mem_patch1c +3f91 da200007 arg 7 ,rega +3f92 6809446f fetcht 2 ,mem_le_notify_handle +3f93 20405a64 call le_att_malloc_tx_notify +3f94 6803c69a fetch 7 ,mem_mouse_key +3f95 e0a38000 istore 7 ,contw +3f96 20600000 rtn + +mouse_motion: +3f97 44f3401c bpatch patch1c_6 ,mem_patch1c +3f98 78547c00 disable user +3f99 58000000 setarg 0 +3f9a 6003469b store 6 ,mem_mouse_x +3f9b 20403fb5 call mouse_cheak_sensor_data +3f9c 20404079 call mouse_zwheel +3f9d 2040407e call mouse_t_zwheel +3f9e 20404099 call mouse_key +3f9f 24740000 nrtn user +3fa0 20403f8d call mouse_no_data_timer_init +3fa1 d8e00008 arg mouse_statue_up_flag ,queue +3fa2 202043ce branch mouse_enable_function_flag + +motion_6clk_direction_dispose: +3fa3 6801469b fetch 2 ,mem_mouse_x +3fa4 1fe67e00 sub pdata ,0 ,pdata +3fa5 6001469b store 2 ,mem_mouse_x +3fa6 20207fe7 branch enable_user + +motion_12clk_direction_dispose: +3fa7 6801469d fetch 2 ,mem_mouse_y +3fa8 1fe67e00 sub pdata ,0 ,pdata +3fa9 6001469d store 2 ,mem_mouse_y +3faa 20207fe7 branch enable_user + +motion_9clk_direction_dispose: +3fab 6801469d fetch 2 ,mem_mouse_y +3fac 1fe67e00 sub pdata ,0 ,pdata +3fad 6001469d store 2 ,mem_mouse_y +3fae 6801469b fetch 2 ,mem_mouse_x +3faf 1fe67e00 sub pdata ,0 ,pdata +3fb0 6001469b store 2 ,mem_mouse_x +3fb1 20404002 call mouse_sensor_data_swap_places +3fb2 20207fe7 branch enable_user + +motion_3clk_direction_dispose: +3fb3 20404002 call mouse_sensor_data_swap_places +3fb4 20207fe7 branch enable_user + +mouse_cheak_sensor_data: +3fb5 6800c239 fetch 1 ,mem_spi_write_flash_sm +3fb6 c1800000 rtnne flash_sm_no_buys +3fb7 6800c6e0 fetch 1 ,mem_config_sensor_type +3fb8 c0003fe2 beq p3205 ,mouse_p32xx_sensor_motion +3fb9 c000bfe2 beq p3065 ,mouse_p32xx_sensor_motion +3fba c0013fe2 beq ka8 ,mouse_p32xx_sensor_motion +3fbb c001bfe2 beq p3204 ,mouse_p32xx_sensor_motion +3fbc c0023fc4 beq p3212 ,mouse_p3212_sensor_motion +3fbd c002c010 beq p3610 ,mouse_p3610_sensor_motion +3fbe c0033fe2 beq p3065_xy ,mouse_p32xx_sensor_motion +3fbf 20203fe2 branch mouse_p32xx_sensor_motion + +mouse_clear_sensor_data: +3fc0 6800c6a7 fetch 1 ,mem_mouse_move_flag +3fc1 205a405d call mouse_read_sensor_common ,blank +3fc2 7046a701 jam 1 ,mem_mouse_move_flag +3fc3 20600000 rtn + +mouse_p3212_sensor_motion: +3fc4 20403fc0 call mouse_clear_sensor_data +3fc5 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3fc6 2040681d call gpio_get_bit +3fc7 24608000 nrtn true +3fc8 58000000 setarg pan_reg_pid_l +3fc9 20406414 call twspi_read +3fca c09840d1 bne p32xx_id1 ,mouse_twspi_reset +3fcb 58000002 setarg pan_reg_motion_staus +3fcc 20406414 call twspi_read +3fcd c4038000 rtnbit0 7 +3fce 2040405d call mouse_read_sensor_common +3fcf 20403fde call mouse_read_3212sensor_xy_high +3fd0 6000c6a1 store 1 ,mem_mouse_xy_h +3fd1 1ff1fe00 rshift4 pdata ,pdata +3fd2 20404169 call extsign_bit3 +3fd3 6000c69c store 1 ,mem_mouse_x + 1 +3fd4 6800c6a1 fetch 1 ,mem_mouse_xy_h +3fd5 1fe17e0f and pdata ,0x0f ,pdata +3fd6 20404169 call extsign_bit3 +3fd7 6000c69e store 1 ,mem_mouse_y + 1 +3fd8 6800c6f6 fetch 1 ,mem_config_sensor_angle +3fd9 c0003fa3 beq mouse_6clk_angle ,motion_6clk_direction_dispose +3fda c000bfab beq mouse_9clk_angle ,motion_9clk_direction_dispose +3fdb c0013fa7 beq mouse_12clk_angle ,motion_12clk_direction_dispose +3fdc c001bfb3 beq mouse_3clk_angle ,motion_3clk_direction_dispose +3fdd 20600000 rtn + +mouse_read_3212sensor_xy_high: +3fde 58000012 setarg 0x12 +3fdf 20206414 branch twspi_read + +mouse_p3065_judge: +3fe0 c018bfea beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +3fe1 202040d1 branch mouse_twspi_reset + +mouse_p32xx_sensor_motion: +3fe2 20403fc0 call mouse_clear_sensor_data +3fe3 78547c00 disable user +3fe4 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +3fe5 2040681d call gpio_get_bit +3fe6 24608000 nrtn true + +mouse_p32xx_sensor_motion_2: +3fe7 58000000 setarg pan_reg_pid_l +3fe8 20406414 call twspi_read +3fe9 c0983fe0 bne p32xx_id1 ,mouse_p3065_judge + +mouse_p32xx_sensor_motion_1: +3fea 58000002 setarg pan_reg_motion_staus +3feb 20406414 call twspi_read +3fec c4038000 rtnbit0 7 +3fed 2040405d call mouse_read_sensor_common +3fee 6800c69b fetch 1 ,mem_mouse_x +3fef 20404165 call extsign +3ff0 6001469b store 2 ,mem_mouse_x +3ff1 6800c69d fetch 1 ,mem_mouse_y +3ff2 20404165 call extsign +3ff3 6001469d store 2 ,mem_mouse_y +3ff4 6800c6f6 fetch 1 ,mem_config_sensor_angle +3ff5 c0003ffa beq mouse_6clk_angle ,motion32xx_6clk_direction_selection +3ff6 c000bffc beq mouse_9clk_angle ,motion32xx_9clk_direction_selection +3ff7 c0013ffe beq mouse_12clk_angle ,motion32xx_12clk_direction_selection +3ff8 c001c000 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection +3ff9 20600000 rtn + +motion32xx_6clk_direction_selection: +3ffa 20403fa3 call motion_6clk_direction_dispose +3ffb 202040b3 branch mouse_sensor_sdio_low + +motion32xx_9clk_direction_selection: +3ffc 20403fab call motion_9clk_direction_dispose +3ffd 202040b3 branch mouse_sensor_sdio_low + +motion32xx_12clk_direction_selection: +3ffe 20403fa7 call motion_12clk_direction_dispose +3fff 202040b3 branch mouse_sensor_sdio_low + +motion32xx_3clk_direction_selection: +4000 20403fb3 call motion_3clk_direction_dispose +4001 202040b3 branch mouse_sensor_sdio_low + +mouse_sensor_data_swap_places: +4002 6801469d fetch 2 ,mem_mouse_y +4003 6809469b fetcht 2 ,mem_mouse_x +4004 6001469b store 2 ,mem_mouse_x +4005 6009469d storet 2 ,mem_mouse_y +4006 20600000 rtn + +mouse_p3610sensor_read: +4007 2040640f call spi_ncs_enable +4008 20000064 nop 100 +4009 1a427e00 copy regb ,pdata +400a 20406414 call twspi_read +400b 1fe22400 copy pdata ,regb +400c 20406411 call spi_ncs_disable +400d 20000064 nop 100 +400e 1a427e00 copy regb ,pdata +400f 20600000 rtn + +mouse_p3610_sensor_motion: +4010 78547c00 disable user +4011 6808c6f3 fetcht 1 ,mem_sensor_data_gpio +4012 2040681d call gpio_get_bit +4013 24608000 nrtn true +4014 da400002 arg pan_reg_motion_staus ,regb +4015 20404007 call mouse_p3610sensor_read +4016 c4038000 rtnbit0 7 +4017 da400000 arg pan_reg_pid_l ,regb +4018 20404007 call mouse_p3610sensor_read +4019 6000c6dd store 1 ,mem_sensor_id1 +401a c09f4145 bne p3610_id1 ,mouse_init_3610sensor_reset +401b 6800c6a7 fetch 1 ,mem_mouse_move_flag +401c 205a4039 call mouse_read_sensor3610_data ,blank +401d 7046a701 jam 1 ,mem_mouse_move_flag +401e 20404039 call mouse_read_sensor3610_data +401f 6800c6a1 fetch 1 ,mem_mouse_xy_h +4020 1ff1fe00 rshift4 pdata ,pdata +4021 20404169 call extsign_bit3 +4022 6000c69c store 1 ,mem_mouse_x + 1 +4023 6800c6a1 fetch 1 ,mem_mouse_xy_h +4024 1fe17e0f and pdata ,0x0f ,pdata +4025 20404169 call extsign_bit3 +4026 6000c69e store 1 ,mem_mouse_y + 1 +4027 6800c6f6 fetch 1 ,mem_config_sensor_angle +4028 c0004031 beq 0 ,motion3610_6clk_direction_selection +4029 c000c035 beq 1 ,motion3610_9clk_direction_selection +402a c0014033 beq 2 ,motion3610_12clk_direction_selection +402b c001c037 beq 3 ,motion3610_3clk_direction_selection +402c 20600000 rtn + +mouse_3610_smart_select: +402d 6800c6a4 fetch 1 ,mem_sensor_smart_flag +402e c0004051 beq p3610_smart_enable ,mouse_3610_smart_disable +402f c000c045 beq p3610_smart_disable ,mouse_3610_smart_enable +4030 20600000 rtn + +motion3610_6clk_direction_selection: +4031 20403fa3 call motion_6clk_direction_dispose +4032 2020402d branch mouse_3610_smart_select + +motion3610_12clk_direction_selection: +4033 20403fa7 call motion_12clk_direction_dispose +4034 2020402d branch mouse_3610_smart_select + +motion3610_9clk_direction_selection: +4035 20403fab call motion_9clk_direction_dispose +4036 2020402d branch mouse_3610_smart_select + +motion3610_3clk_direction_selection: +4037 20403fb3 call motion_3clk_direction_dispose +4038 2020402d branch mouse_3610_smart_select + +mouse_read_sensor3610_data: +4039 2040640f call spi_ncs_enable +403a 2040405d call mouse_read_sensor_common +403b dfe00005 arg 5 ,pdata +403c 20406414 call twspi_read +403d 6000c6a1 store 1 ,mem_mouse_xy_h +403e dfe00007 arg 7 ,pdata +403f 20406414 call twspi_read +4040 6000c6a2 store 1 ,mem_sensor_shutter_hi +4041 dfe00008 arg 8 ,pdata +4042 20406414 call twspi_read +4043 6000c6a3 store 1 ,mem_sensor_shutter_lo +4044 20206411 branch spi_ncs_disable + +mouse_3610_smart_enable: +4045 6800c6a2 fetch 1 ,mem_sensor_shutter_hi +4046 c1800000 rtnne 0 +4047 6800c6a3 fetch 1 ,mem_sensor_shutter_lo +4048 1fe67c2d sub pdata ,45 ,null +4049 20610000 rtn positive +404a 7046a400 jam p3610_smart_enable ,mem_sensor_smart_flag +404b 5800ba41 setarg 0xba41 +404c 20406405 call sensor_write +404d 58000032 setarg 0x0032 +404e 20406405 call sensor_write +404f 5800b541 setarg 0xb541 +4050 20206405 branch sensor_write + +mouse_3610_smart_disable: +4051 6800c6a2 fetch 1 ,mem_sensor_shutter_hi +4052 c1800000 rtnne 0 +4053 6800c6a3 fetch 1 ,mem_sensor_shutter_lo +4054 1fe67c2d sub pdata ,45 ,null +4055 24610000 nrtn positive +4056 7046a401 jam p3610_smart_disable ,mem_sensor_smart_flag +4057 5800ba41 setarg 0xba41 +4058 20406405 call sensor_write +4059 58008032 setarg 0x8032 +405a 20406405 call sensor_write +405b 5800b541 setarg 0xb541 +405c 20206405 branch sensor_write + +mouse_read_sensor_common: +405d dfe00003 arg pan_reg_delta_x ,pdata +405e 20406414 call twspi_read +405f 6001469b store 2 ,mem_mouse_x +4060 dfe00004 arg pan_reg_delta_y ,pdata +4061 20406414 call twspi_read +4062 6001469d store 2 ,mem_mouse_y +4063 20600000 rtn + +mouse_set_qdecoder_x: +4064 d840001b arg mouse_default_xa_gpio ,temp +4065 204067fb call gpio_config_input +4066 d840001b arg mouse_default_xa_gpio ,temp +4067 2040681d call gpio_get_bit +4068 20608000 rtn true +4069 68108109 hfetch 1 ,core_qdec_cntx +406a 79207e04 set1 4 ,pdata +406b 60108109 hstore 1 ,core_qdec_cntx +406c 20600000 rtn + +mouse_hardware_zwheel: +406d 6808c6c0 fetcht 1 ,mem_mouse_z_data +406e 68108109 hfetch 1 ,core_qdec_cntx +406f 9840fe00 iadd temp ,pdata +4070 207a0000 rtn blank +4071 6000c69f store 1 ,mem_mouse_z +4072 7046c000 jam 0 ,mem_mouse_z_data +4073 20207fe7 branch enable_user + +mouse_hardware_zwheel_beforelpm: +4074 6808c6c0 fetcht 1 ,mem_mouse_z_data +4075 68108109 hfetch 1 ,core_qdec_cntx +4076 9840fe00 iadd temp ,pdata +4077 6000c6c0 store 1 ,mem_mouse_z_data +4078 20600000 rtn + +mouse_zwheel: +4079 6800c6c0 fetch 1 ,mem_mouse_z_data +407a 207a0000 rtn blank +407b 6000c69f store 1 ,mem_mouse_z +407c 7046c000 jam 0 ,mem_mouse_z_data +407d 20207fe7 branch enable_user + +mouse_t_zwheel: +407e 6800c6ba fetch 1 ,mem_mouse_tz_data +407f 207a0000 rtn blank +4080 6000c6a0 store 1 ,mem_mouse_tz +4081 7046ba00 jam 0 ,mem_mouse_tz_data +4082 20207fe7 branch enable_user + +mouse_check_key_gpio: +4083 da200000 arg 0 ,rega +4084 6808c6e2 fetcht 1 ,mem_lbutton_gpio +4085 2040681d call gpio_get_bit +4086 7920a200 setflag true ,0 ,rega +4087 6808c6e3 fetcht 1 ,mem_rbutton_gpio +4088 2040681d call gpio_get_bit +4089 7920a201 setflag true ,1 ,rega +408a 6808c6e4 fetcht 1 ,mem_mbutton_gpio +408b 2040681d call gpio_get_bit +408c 7920a202 setflag true ,2 ,rega +408d 20404090 call mouse_check_s_key_gpio + +mouse_check_key_gpio_output: +408e 1a227e00 copy rega ,pdata +408f 20600000 rtn + +mouse_check_s_key_gpio: +4090 6800c6e5 fetch 1 ,mem_bk_button_gpio +4091 c17f8000 rtneq gpio_disable +4092 6808c6e5 fetcht 1 ,mem_bk_button_gpio +4093 2040681d call gpio_get_bit +4094 7920a203 setflag true ,3 ,rega +4095 6808c6e6 fetcht 1 ,mem_fw_button_gpio +4096 2040681d call gpio_get_bit +4097 7920a204 setflag true ,4 ,rega +4098 20600000 rtn + +mouse_key: +4099 20404083 call mouse_check_key_gpio +409a 204040a8 call mouse_set_mult +409b 204040a3 call mouse_24g_key +409c 1a227e00 copy rega ,pdata +409d 6808c69a fetcht 1 ,mem_mouse_key +409e 6000c69a store 1 ,mem_mouse_key +409f 9842fe00 ixor temp ,pdata +40a0 1fe67c00 sub pdata ,0 ,null +40a1 20628000 rtn zero +40a2 20207fe7 branch enable_user + +mouse_24g_key: +40a3 c6930000 rtnmark0 mark_24g +40a4 1a227e00 copy rega ,pdata +40a5 207a0000 rtn blank +40a6 6000c69a store 1 ,mem_mouse_key +40a7 20207fe7 branch enable_user + +mouse_set_mult: +40a8 68014682 fetch 2 ,mem_ui_state_map +40a9 c284c0ad bbit1 ui_state_ble_connected ,mouse_set_ble_mult +40aa 68014682 fetch 2 ,mem_ui_state_map +40ab c28040b0 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +40ac 20600000 rtn + +mouse_set_ble_mult: +40ad 1a227e00 copy rega ,pdata +40ae 243a5820 nbranch le_set_config_short_mult ,blank +40af 20205822 branch le_clr_config_short_mult + +mouse_set_bt_mult: +40b0 1a227e00 copy rega ,pdata +40b1 243a2bc7 nbranch classic_bt_set_mult_short_flag ,blank +40b2 20202bc9 branch classic_bt_clr_mult_short_flag + +mouse_sensor_sdio_low: +40b3 44f3c01c bpatch patch1c_7 ,mem_patch1c +40b4 d840001a arg mouse_spi1_sdio_gpio ,temp +40b5 680246d3 fetch mouse_flag_len ,mem_mouse_flag +40b6 2feffe12 isolate1 mouse_enable_spi2 ,pdata +40b7 2040c0be call mouse_sensor_sdio_low2 ,true +40b8 2040681d call gpio_get_bit +40b9 20608000 rtn true +40ba 5800000a setarg 0x0a +40bb 20406414 call twspi_read +40bc 200003e8 nop 1000 +40bd 202040b3 branch mouse_sensor_sdio_low + +mouse_sensor_sdio_low2: +40be d840001f arg mouse_spi2_sdio_gpio ,temp +40bf 20600000 rtn + +mouse_spi_sdio_gpio_pollup: +40c0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +40c1 c28940c4 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup + +mouse_spi1_sdio_gpio_pollup: +40c2 d840001a arg mouse_spi1_sdio_gpio ,temp +40c3 202067fe branch gpio_config_input_without_wake + +mouse_spi2_sdio_gpio_pollup: +40c4 d840001f arg mouse_spi2_sdio_gpio ,temp +40c5 202067fe branch gpio_config_input_without_wake + +mouse_init_sunt: +40c6 20403d36 call mouse_spi_init +40c7 20758000 rtn wake +40c8 204040c0 call mouse_spi_sdio_gpio_pollup +40c9 6800c6e0 fetch 1 ,mem_config_sensor_type +40ca c002c0d5 beq p3610 ,mouse_init_3610sensor + +mouse_init_sensor: +40cb 204040d9 call mouse_read_sensor_id +40cc c01840e0 beq p32xx_id1 ,mouse_init_p32xx_id2_judge +40cd c018c0ea beq p3065_id1 ,mouse_p3065_init_param +40ce 204040d1 call mouse_twspi_reset +40cf 200003e8 nop 1000 +40d0 202040cb branch mouse_init_sensor + +mouse_twspi_reset: +40d1 44f4401d bpatch patch1d_0 ,mem_patch1d +40d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag +40d3 c28963e0 bbit1 mouse_enable_spi2 ,twspi_reset2 +40d4 202063d1 branch twspi_reset + +mouse_init_3610sensor: +40d5 204040d9 call mouse_read_sensor_id +40d6 c01f414b beq p3610_id1 ,mouse_init_p3610 +40d7 20404145 call mouse_init_3610sensor_reset +40d8 202040d5 branch mouse_init_3610sensor + +mouse_read_sensor_id: +40d9 58000001 setarg pan_reg_pid_h +40da 20406414 call twspi_read +40db 6000c6de store 1 ,mem_sensor_id2 +40dc 58000000 setarg pan_reg_pid_l +40dd 20406414 call twspi_read +40de 6000c6dd store 1 ,mem_sensor_id1 +40df 20600000 rtn + +mouse_init_p32xx_id2_judge: +40e0 6800c6de fetch 1 ,mem_sensor_id2 +40e1 c068c139 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +40e2 c06940f8 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +40e3 c00140ee beq p3212_id2 ,mouse_3212_init_param +40e4 c02a40e6 beq pka8_id2 ,mouse_ka8_init_param +40e5 20600000 rtn + +mouse_ka8_init_param: +40e6 7046e002 jam ka8 ,mem_config_sensor_type +40e7 20600000 rtn + +mouse_p3065xy_init_param: +40e8 7046e006 jam p3065_xy ,mem_config_sensor_type +40e9 20600000 rtn + +mouse_p3065_init_param: +40ea 6800c6de fetch 1 ,mem_sensor_id2 +40eb c03840e8 beq p3065_xy_id2 ,mouse_p3065xy_init_param +40ec 7046e001 jam p3065 ,mem_config_sensor_type +40ed 20600000 rtn + +mouse_3212_init_param: +40ee 7046e004 jam p3212 ,mem_config_sensor_type +40ef 204040f6 call mouse_sensor_disable_wp +40f0 58003426 setarg 0x3426 +40f1 20406413 call twspi_write +40f2 58000419 setarg 0x0419 +40f3 20406413 call twspi_write + +mouse_sensor_enable_wp: +40f4 58000009 setarg 0x0009 +40f5 20206413 branch twspi_write + +mouse_sensor_disable_wp: +40f6 58005a09 setarg 0x5a09 +40f7 20206413 branch twspi_write + +mouse_3204_3l_init_param: +40f8 7046e003 jam p3204 ,mem_config_sensor_type +40f9 204040f6 call mouse_sensor_disable_wp +40fa 58000f0d setarg 0x0f0d +40fb 20406413 call twspi_write +40fc 5800e31d setarg 0xe31d +40fd 20406413 call twspi_write +40fe 5800d27d setarg 0xd27d +40ff 20406413 call twspi_write +4100 20404102 call mouse_32xx_init_param +4101 2020411a branch mouse_32xx_init_param_1 + +mouse_32xx_init_param: +4102 5800351b setarg 0x351b +4103 20406413 call twspi_write +4104 5800b428 setarg 0xb428 +4105 20406413 call twspi_write +4106 58004629 setarg 0x4629 +4107 20406413 call twspi_write +4108 5800962a setarg 0x962a +4109 20406413 call twspi_write +410a 58008c2b setarg 0x8c2b +410b 20406413 call twspi_write +410c 58006e2c setarg 0x6e2c +410d 20406413 call twspi_write +410e 5800642d setarg 0x642d +410f 20406413 call twspi_write +4110 58005f38 setarg 0x5f38 +4111 20406413 call twspi_write +4112 58000f39 setarg 0x0f39 +4113 20406413 call twspi_write +4114 5800323a setarg 0x323a +4115 20406413 call twspi_write +4116 5800473b setarg 0x473b +4117 20406413 call twspi_write +4118 58001042 setarg 0x1042 +4119 20206413 branch twspi_write + +mouse_32xx_init_param_1: +411a 58002e54 setarg 0x2e54 +411b 20406413 call twspi_write +411c 5800f255 setarg 0xf255 +411d 20406413 call twspi_write +411e 5800f461 setarg 0xf461 +411f 20406413 call twspi_write +4120 58007063 setarg 0x7063 +4121 20406413 call twspi_write +4122 58005275 setarg 0x5275 +4123 20406413 call twspi_write +4124 58004176 setarg 0x4176 +4125 20406413 call twspi_write +4126 5800ed77 setarg 0xed77 +4127 20406413 call twspi_write +4128 58002378 setarg 0x2378 +4129 20406413 call twspi_write +412a 58004679 setarg 0x4679 +412b 20406413 call twspi_write +412c 5800e57a setarg 0xe57a +412d 20406413 call twspi_write +412e 5800487c setarg 0x487c +412f 20406413 call twspi_write +4130 5800777e setarg 0x777e +4131 20406413 call twspi_write +4132 5800017f setarg 0x017f +4133 20406413 call twspi_write +4134 5800000b setarg 0x000b +4135 20406413 call twspi_write +4136 5800007f setarg 0x007f +4137 20406413 call twspi_write +4138 202040f4 branch mouse_sensor_enable_wp + +mouse_3205_3t_init_param: +4139 7046e000 jam p3205 ,mem_config_sensor_type +413a 204040f6 call mouse_sensor_disable_wp +413b 5800100d setarg 0x100d +413c 20406413 call twspi_write +413d 5800ed1d setarg 0xed1d +413e 20406413 call twspi_write +413f 5800807d setarg 0x807d +4140 20406413 call twspi_write +4141 20404102 call mouse_32xx_init_param +4142 58000943 setarg 0x0943 +4143 20406413 call twspi_write +4144 2020411a branch mouse_32xx_init_param_1 + +mouse_init_3610sensor_reset: +4145 6808c6dc fetcht 1 ,mem_sensor_reset_gpio +4146 20406829 call gpio_out_active +4147 20407ec1 call delay_10ms +4148 6808c6dc fetcht 1 ,mem_sensor_reset_gpio +4149 20406825 call gpio_out_inactive +414a 20207ec1 branch delay_10ms + +mouse_init_p3610: +414b 7046e005 jam p3610 ,mem_config_sensor_type +414c 5800ba41 setarg 0xba41 +414d 20406405 call sensor_write +414e 58000d11 setarg 0x0d11 +414f 20406405 call sensor_write +4150 5800041b setarg 0x041b +4151 20406405 call sensor_write +4152 5800041c setarg 0x041c +4153 20406405 call sensor_write +4154 58000f1d setarg 0x0f1d +4155 20406405 call sensor_write +4156 58000032 setarg 0x0032 +4157 20406405 call sensor_write +4158 5800b541 setarg 0xb541 +4159 20206405 branch sensor_write + +mouse_set_sensor_reg: +415a 5800ba41 setarg 0xba41 +415b 20406405 call sensor_write +415c 20000fa0 nop 4000 +415d 5800ff7f setarg 0xff7f +415e 20406405 call sensor_write +415f 1a227e00 copy rega ,pdata +4160 20406405 call sensor_write +4161 5800007f setarg 0x007f +4162 20406405 call sensor_write +4163 5800b541 setarg 0xb541 +4164 20206405 branch sensor_write + +extsign: +4165 c4038000 rtnbit0 7 +4166 d840ff00 arg 0xff00 ,temp +4167 9841fe00 ior temp ,pdata +4168 20600000 rtn + +extsign_bit3: +4169 c4018000 rtnbit0 3 +416a d84000f0 arg 0xf0 ,temp +416b 9841fe00 ior temp ,pdata +416c 20600000 rtn + +mouse_le: +416d 20405892 call le_fifo_check_nearly_full +416e 247a0000 nrtn blank +416f 6800c6c5 fetch 1 ,mem_le_connect_status_flag +4170 1fe17e03 and pdata ,0x03 ,pdata +4171 c1818000 rtnne 0x03 +4172 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4173 c281c179 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet +4174 c2804179 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +4175 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +4176 20403f97 call mouse_motion +4177 24740000 nrtn user +4178 20203f90 branch mouse_fill_data_le + +mouse_le_send_empty_packet: +4179 58000000 setarg 0 +417a 6003c69a store 7 ,mem_mouse_key +417b 20203f90 branch mouse_fill_data_le + +mouse_priority_bb_event: +417c 1a627e00 copy regc ,pdata +417d c00a41c3 beq bt_evt_le_connected ,mouse_le_bb_event_connected +417e c000c2ca beq bt_evt_bb_connected ,mouse_stop_discovery +417f c00ac1d9 beq bt_evt_le_disconnected ,mouse_bb_disconnected +4180 c00141d9 beq bt_evt_bb_disconnected ,mouse_bb_disconnected +4181 c002c1d6 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +4182 c008426c beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +4183 c009429b beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +4184 c00341d5 beq bt_evt_hid_connected ,mouse_bt_hid_connected +4185 c00241cc beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +4186 c009c1cc beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +4187 c00541ca beq bt_evt_pincode_req ,mouse_bb_event_pincode +4188 c01733cd beq bt_evt_remote_unsniff ,app_start_auto_sniff +4189 c018c1b4 beq bt_evt_le_pairing_success ,mouse_le_pairing_success +418a c01941b6 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +418b c01f4191 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +418c c013c38e beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +418d c01cc19c beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +418e c01d4192 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +418f c01e419a beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +4190 20600000 rtn + +mouse_le_pairing_complete: +4191 20203410 branch app_ble_store_reconn_info + +mouse_24g_attempt_fail: +4192 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +4193 6800c71e fetch 1 ,mem_reconn_times +4194 243a4492 nbranch mouse_polling_device ,blank +4195 6800c720 fetch 1 ,mem_device_flag +4196 6808c703 fetcht 1 ,mem_24g_device_number +4197 98467c00 isub temp ,null +4198 2022b40a branch app_enter_hibernate ,zero +4199 20600000 rtn + +mouse_24g_attempt_success: +419a 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +419b 20600000 rtn + +mouse_24g_pairing_complete: +419c 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +419d d8e00003 arg mosue_24g_pairing_flag ,queue +419e 204043d2 call mouse_disable_function_flag +419f 58000000 setarg 0 +41a0 60014707 store 2 ,mem_24g_pairing_timer_count +41a1 7046a700 jam 0 ,mem_mouse_move_flag +41a2 6800c6e0 fetch 1 ,mem_config_sensor_type +41a3 1fe67c05 sub pdata ,p3610 ,null +41a4 2042c039 call mouse_read_sensor3610_data ,zero +41a5 2442c05d ncall mouse_read_sensor_common ,zero +41a6 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag +41a7 c289c1af bbit1 mouse_enable_flash ,mouse_store_flash_24g_address +41a8 204041aa call mouse_set_24g_addr_eeprom +41a9 202065d1 branch iicd_write_protect_eep_data + +mouse_set_24g_addr_eeprom: +41aa 20402c7a call g24_head_ptr2regc +41ab 1a60a2ae add regc ,offset_24g_addr ,rega +41ac da40005b arg mouse_g24_addr_eeprom_offect ,regb +41ad d8400004 arg 4 ,temp +41ae 20600000 rtn + +mouse_store_flash_24g_address: +41af 20402c7a call g24_head_ptr2regc +41b0 1a60a4ae add regc ,offset_24g_addr ,regb +41b1 ea408000 ifetch 1 ,regb +41b2 6000c77b store 1 ,mem_mouse_24g_addr +41b3 20204435 branch mouse_store_flash_device_info + +mouse_le_pairing_success: +41b4 d8e00002 arg ll_pairing_success_flag ,queue +41b5 202041b9 branch mouse_le_enable_connect_flag + +mouse_le_ll_start_encryt: +41b6 7046c602 jam 2 ,mem_le_start_encrypt_timer +41b7 d8e00001 arg ll_start_enc_flag ,queue +41b8 202041b9 branch mouse_le_enable_connect_flag + +mouse_le_enable_connect_flag: +41b9 6800c6c5 fetch 1 ,mem_le_connect_status_flag +41ba f9207e00 qset1 pdata +41bb 6000c6c5 store 1 ,mem_le_connect_status_flag +41bc 20600000 rtn + +mouse_le_disable_connect_flag: +41bd 6800c6c5 fetch 1 ,mem_le_connect_status_flag +41be f93ffe00 qset0 pdata +41bf 6000c6c5 store 1 ,mem_le_connect_status_flag +41c0 20600000 rtn + +mouse_le_clean_connect_flag: +41c1 7046c500 jam 0 ,mem_le_connect_status_flag +41c2 20600000 rtn + +mouse_le_bb_event_connected: +41c3 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +41c4 793ffe00 set0 app_disc_by_button ,pdata +41c5 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +41c6 58000000 setarg 0 +41c7 600146ae store 2 ,mem_mouse_direct_timer +41c8 20403f8d call mouse_no_data_timer_init +41c9 202042ca branch mouse_stop_discovery + +mouse_bb_event_pincode: +41ca 204063cb call pincode_reinit +41cb 202033dd branch app_bt_set_pincode + +mouse_bb_event_reconn_timeout: + +mouse_bb_event_reconn_failed: +41cc 6800c71e fetch 1 ,mem_reconn_times +41cd 243a4492 nbranch mouse_polling_device ,blank +41ce 68014682 fetch 2 ,mem_ui_state_map +41cf c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +41d0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +41d1 c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset +41d2 c282c2b0 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery +41d3 c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +41d4 202033a7 branch app_bb_hibernate + +mouse_bt_hid_connected: +41d5 20203f74 branch mouse_hid_connected + +mouse_bt_event_setup_complete: +41d6 20600000 rtn + +mouse_soft_reset: +41d7 204043c0 call mouse_select_device_enable +41d8 2020659a branch soft_reset_chip + +mouse_bb_disconnected: +41d9 44f4c01d bpatch patch1d_1 ,mem_patch1d +41da 204041e7 call mouse_bb_discon_clear_stack +41db 680246d3 fetch mouse_flag_len ,mem_mouse_flag +41dc c28041d7 bbit1 mouse_select_device_flag ,mouse_soft_reset +41dd c281aead bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +41de 6800c71e fetch 1 ,mem_reconn_times +41df 243a4492 nbranch mouse_polling_device ,blank +41e0 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +41e1 c283c1f5 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +41e2 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear +41e3 c280c1ef bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +41e4 c28141f2 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +41e5 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +41e6 202042b0 branch mouse_start_discovery + +mouse_bb_discon_clear_stack: +41e7 58000000 setarg 0 +41e8 600446b7 store 8 ,mem_wheel_tb_old_pinlevel +41e9 e0a20000 istore 4 ,contw +41ea 7046b400 jam 0 ,mem_mouse_send_blank_timer +41eb 7046a700 jam 0 ,mem_mouse_move_flag +41ec 7041e200 jam app_handshake_null ,mem_app_handshake_flag +41ed 70442900 jam 0 ,mem_ltk_exists +41ee 20600000 rtn + +mouse_event_light_state_pairing: +41ef c282c1f2 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +41f0 c281c1f2 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +41f1 202042b0 branch mouse_start_discovery + +mouse_event_light_state_hibernate: +41f2 68014682 fetch 2 ,mem_ui_state_map +41f3 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +41f4 202033a7 branch app_bb_hibernate + +mouse4_0_event_bb_disconn: +41f5 204041c1 call mouse_le_clean_connect_flag +41f6 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +41f7 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear +41f8 202033a7 branch app_bb_hibernate + +mouse_bb_event_timer: +41f9 204043d6 call mouse_adc_read +41fa 20404243 call mouse_24g_delay_timer +41fb 20404246 call mouse_ban_24g_pairing_timer +41fc 20404250 call mouse_dpi_led_blink_delay_timer +41fd 2040445d call mouse_statue_up_timer +41fe 20404443 call mouse_statue_cheak_timer +41ff 20404333 call mouse_select_device +4200 204043a5 call mouse_bt_discovery_cheak +4201 204043eb call mouse_low_voltage_led_timer +4202 20404209 call mouse_sensor_led_contrl_timer +4203 20404231 call mouse_check_hid_handshake_timer +4204 20404234 call mouse_check_discovery_timeout_timer +4205 20404237 call mouse_check_direct_timeout_timer +4206 2040423a call mouse_check_no_data_timeout_timer +4207 2040423d call mouse_check_mouse_state_timer +4208 20204240 branch mouse_le_enable_att_list_timer + +mouse_sensor_led_contrl_timer: +4209 6800c711 fetch 1 ,mem_mouse_sensor_timer_count +420a 207a0000 rtn blank +420b 1fe0ffff increase -1 ,pdata +420c 6000c711 store 1 ,mem_mouse_sensor_timer_count +420d 247a0000 nrtn blank +420e 2020420f branch mouse_sensor_led_contrl + +mouse_sensor_led_contrl: +420f 6800c712 fetch 1 ,mem_sensor_led_style +4210 c1000000 rtneq ui_led_state_blink_stop +4211 c002c216 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking + +mouse_sensor_led_blink_state_lighting: +4212 20404225 call mouse_sensor_led_on +4213 70471205 jam ui_led_state_blink_darking ,mem_sensor_led_style +4214 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +4215 20600000 rtn + +mouse_sensor_led_blink_state_darking: +4216 2040422c call mouse_sensor_led_off +4217 70471204 jam ui_led_state_blink_lighting ,mem_sensor_led_style +4218 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +4219 20600000 rtn + +mouse_sensor_led_blink_stop: + +mouse_sensor_reset: +421a 58008006 setarg 0x8006 +421b 20406413 call twspi_write +421c 200003e8 nop 1000 +421d 70471100 jam 0x00 ,mem_mouse_sensor_timer_count +421e 70471200 jam ui_led_state_blink_stop ,mem_sensor_led_style +421f 202040e0 branch mouse_init_p32xx_id2_judge + +mouse_p3212sensor_led_on: +4220 5800a006 setarg 0xa006 +4221 20406413 call twspi_write +4222 5800a005 setarg 0xa005 +4223 20206413 branch twspi_write + +mouse_sensor_led_on_global: +4224 70471100 jam 0 ,mem_mouse_sensor_timer_count + +mouse_sensor_led_on: +4225 6800c6e0 fetch 1 ,mem_config_sensor_type +4226 c0024220 beq p3212 ,mouse_p3212sensor_led_on +4227 58000106 setarg 0x0106 +4228 20406413 call twspi_write +4229 5800a105 setarg 0xa105 +422a 20206413 branch twspi_write + +mouse_sensor_led_off_global: +422b 70471100 jam 0 ,mem_mouse_sensor_timer_count + +mouse_sensor_led_off: +422c 58000906 setarg 0x0906 +422d 20206413 branch twspi_write + +mouse_sensor_start_blink: +422e 70471105 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +422f 70471201 jam ui_led_state_blink_start ,mem_sensor_led_style +4230 20600000 rtn + +mouse_check_hid_handshake_timer: +4231 da604680 arg mem_hid_handshake_timer_count ,regc +4232 da40429b arg mouse_bt_hid_handshake ,regb +4233 2020336d branch timer_single_step + +mouse_check_discovery_timeout_timer: +4234 da6046ac arg mem_mouse_discovery_timer ,regc +4235 da404264 arg mouse_check_discovery_timeout ,regb +4236 20203374 branch timer_single_step_2b + +mouse_check_direct_timeout_timer: +4237 da6046ae arg mem_mouse_direct_timer ,regc +4238 da404266 arg mouse_check_direct_timeout ,regb +4239 20203374 branch timer_single_step_2b + +mouse_check_no_data_timeout_timer: +423a da6046b0 arg mem_mouse_no_data_timer ,regc +423b da40426a arg mouse_check_no_data_timeout ,regb +423c 20203374 branch timer_single_step_2b + +mouse_check_mouse_state_timer: +423d da6046c4 arg mem_mouse_statue_led_timer ,regc +423e da404478 arg mouse_statue_led_off ,regb +423f 2020336d branch timer_single_step + +mouse_le_enable_att_list_timer: +4240 da6046c6 arg mem_le_start_encrypt_timer ,regc +4241 da40425e arg mouse_le_enable_att_list ,regb +4242 2020336d branch timer_single_step + +mouse_24g_delay_timer: +4243 da604704 arg mem_24g_enter_lpm_timer ,regc +4244 da404249 arg mouse_24g_delay ,regb +4245 2020336d branch timer_single_step + +mouse_ban_24g_pairing_timer: +4246 da604707 arg mem_24g_pairing_timer_count ,regc +4247 da404249 arg mouse_ban_24g_pairing ,regb +4248 20203374 branch timer_single_step_2b + +mouse_ban_24g_pairing: + +mouse_24g_delay: +4249 20600000 rtn + +mosue_dpi_led_blink_init: +424a 680246d3 fetch mouse_flag_len ,mem_mouse_flag +424b c40b8000 rtnbit0 mouse_enable_dpi_led_blink +424c 7046df0a jam 10 ,mem_mouse_dpi_led_delay_count +424d 6800c6f4 fetch 1 ,mem_dpi_led_gpio +424e 6000c715 store 1 ,mem_mouse_struct_led_gpio +424f 20600000 rtn + +mouse_dpi_led_blink_delay_timer: +4250 da6046df arg mem_mouse_dpi_led_delay_count ,regc +4251 da404253 arg mouse_dpi_led_setting ,regb +4252 2020336d branch timer_single_step + +mouse_dpi_led_setting: +4253 6800c6f4 fetch 1 ,mem_dpi_led_gpio +4254 6000c715 store 1 ,mem_mouse_struct_led_gpio +4255 58000190 setarg led_dpi_blink +4256 60014716 store 2 ,mem_mouse_on_time +4257 60014718 store 2 ,mem_mouse_off_time +4258 da200000 arg 0 ,rega +4259 6808c77a fetcht 1 ,mem_mouse_dpi +425a 18408401 increase 1 ,temp +425b 6008c714 storet 1 ,mem_mouse_blink_count +425c 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type +425d 20600000 rtn + +mouse_le_enable_att_list: +425e 6800c6c5 fetch 1 ,mem_le_connect_status_flag +425f c3810000 rtnbit1 ll_pairing_success_flag +4260 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +4261 20407d8f call ui_ipc_send_cmd +4262 d8e00000 arg write_req_enable_flag ,queue +4263 202041b9 branch mouse_le_enable_connect_flag + +mouse_check_discovery_timeout: +4264 204042ca call mouse_stop_discovery +4265 2020340a branch app_enter_hibernate + +mouse_check_direct_timeout: +4266 204033f6 call app_ble_stop_direct_adv +4267 6800c71e fetch 1 ,mem_reconn_times +4268 243a4492 nbranch mouse_polling_device ,blank +4269 2020340a branch app_enter_hibernate + +mouse_check_no_data_timeout: +426a c5137e1d bmark1 mark_24g ,check_51cmd_hibernate +426b 20204386 branch mouse_disconnect + +mouse_bb_event_discovery_btn: +426c 44f5401d bpatch patch1d_2 ,mem_patch1d +426d 7046b400 jam 0 ,mem_mouse_send_blank_timer +426e 20404386 call mouse_disconnect +426f 204041c1 call mouse_le_clean_connect_flag +4270 202042b0 branch mouse_start_discovery + +mouse3_0_check_reconn_target: +4271 680341d0 fetch 6 ,mem_hci_plap +4272 203a33eb branch app_bt_start_discovery_short ,blank +4273 2040427e call mouse_reconn_setting_led_gpio +4274 70016d17 jam 0x17 ,mem_connection_options +4275 6800c65a fetch 1 ,mem_ssp_enable +4276 243a33e1 nbranch app_bt_start_reconnect ,blank +4277 70016d04 jam 0x04 ,mem_connection_options +4278 202033e1 branch app_bt_start_reconnect + +mouse4_0_check_reconn_target: +4279 680146a8 fetch 2 ,mem_mouse_direct_timeout +427a 600146ae store 2 ,mem_mouse_direct_timer +427b 2040427e call mouse_reconn_setting_led_gpio +427c 20403418 call app_lpm_mult_disable +427d 20207df4 branch check_51cmd_adv + +mouse_reconn_setting_led_gpio: +427e 580000c8 setarg led_reconnect_blink +427f 60014716 store 2 ,mem_mouse_on_time +4280 60014718 store 2 ,mem_mouse_off_time +4281 20204285 branch mouse_setting_led_gpio_comman + +mouse_discover_setting_led_gpio: +4282 580003e8 setarg led_discovery_blink +4283 60014716 store 2 ,mem_mouse_on_time +4284 60014718 store 2 ,mem_mouse_off_time + +mouse_setting_led_gpio_comman: +4285 6800c720 fetch 1 ,mem_device_flag +4286 c000c28a beq mode_bt_device1 ,mouse_device_led1 +4287 c001428c beq mode_bt_device2 ,mouse_device_led2 +4288 c001c28e beq mode_bt_device3 ,mouse_device_led3 +4289 20600000 rtn + +mouse_device_led1: +428a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +428b 2020428f branch mouse_led_blink + +mouse_device_led2: +428c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio +428d 2020428f branch mouse_led_blink + +mouse_device_led3: +428e 6800c6f2 fetch 1 ,mem_config_device3_led_gpio + +mouse_led_blink: +428f 60008aa2 store 1 ,mem_temp +4290 20404482 call mouse_devce_led_off +4291 68008aa2 fetch 1 ,mem_temp +4292 6000c715 store 1 ,mem_mouse_struct_led_gpio +4293 da200000 arg 0 ,rega +4294 70471301 jam ui_led_state_blink_start ,mem_mouse_led_type +4295 20207d1e branch ui_led_blink_start_global + +mouse_led_off: +4296 da200000 arg 0 ,rega +4297 20207d19 branch ui_led_off_global + +mouse_led_on: +4298 da200000 arg 0 ,rega +4299 20207d14 branch ui_led_on_global + +mouse4_0_bb_event_discovery_btn: +429a 202041c1 branch mouse_le_clean_connect_flag + +mouse_bt_hid_handshake: +429b 7041e201 jam app_handshake_done ,mem_app_handshake_flag +429c 20403416 call app_lpm_mult_enable +429d 20403412 call app_bt_store_reconn_info +429e 58000000 setarg 0 +429f 6001467e store 2 ,mem_discovery_timeout_timer_count +42a0 6000c680 store 1 ,mem_hid_handshake_timer_count +42a1 2020340e branch app_bt_enter_sniff + +mouse_check_reconn_target: +42a2 2040435f call mouse_cheak_select_device_by_switch +42a3 6800c720 fetch 1 ,mem_device_flag +42a4 6808c703 fetcht 1 ,mem_24g_device_number +42a5 98467c00 isub temp ,null +42a6 2022c2ab branch mouse_connect_24g_mode ,zero +42a7 6800c210 fetch 1 ,mem_xrecord_mode +42a8 c019c271 beq rec_3_mode ,mouse3_0_check_reconn_target +42a9 c01a4279 beq rec_4_mode ,mouse4_0_check_reconn_target +42aa 202042b0 branch mouse_start_discovery + +mouse_connect_24g_mode: +42ab 20403d57 call mouse_start_24g_mode +42ac c6130000 rtnmark1 mark_24g +42ad 6800c71e fetch 1 ,mem_reconn_times +42ae 243a4492 nbranch mouse_polling_device ,blank +42af 20600000 rtn + +mouse_start_discovery: +42b0 44f5c01d bpatch patch1d_3 ,mem_patch1d +42b1 68014682 fetch 2 ,mem_ui_state_map +42b2 c285c2b7 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +42b3 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42b4 c30c42b7 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +42b5 180a7e00 random pdata +42b6 6000c4a1 store 1 ,mem_le_lap + 1 + +mouse_start_discovery_norandom: +42b7 20403418 call app_lpm_mult_disable +42b8 68014687 fetch 2 ,mem_discovery_timeout +42b9 600146ac store 2 ,mem_mouse_discovery_timer +42ba 70016d06 jam 6 ,mem_connection_options +42bb 58000000 setarg 0 +42bc 600146b0 store 2 ,mem_mouse_no_data_timer +42bd 600146ae store 2 ,mem_mouse_direct_timer +42be d8e00007 arg mouse_store_eeprom_flag ,queue +42bf 204043ce call mouse_enable_function_flag +42c0 204043ca call mouse_bt_discovery_button_down_disable +42c1 6800c092 fetch 1 ,mem_device_option +42c2 2feffe01 isolate1 mode_4_mouse ,pdata +42c3 2040fdf4 call check_51cmd_adv ,true +42c4 6800c092 fetch 1 ,mem_device_option +42c5 2feffe00 isolate1 mode_3_mouse ,pdata +42c6 2040fddd call check_51cmd_start_discovery ,true +42c7 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42c8 c28e422e bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink +42c9 20204282 branch mouse_discover_setting_led_gpio + +mouse_stop_discovery: +42ca 44f6401d bpatch patch1d_4 ,mem_patch1d +42cb 6800c092 fetch 1 ,mem_device_option +42cc 2feffe01 isolate1 mode_4_mouse ,pdata +42cd 2040c2d4 call mouse_stop_le_adv ,true +42ce 6800c092 fetch 1 ,mem_device_option +42cf 2feffe00 isolate1 mode_3_mouse ,pdata +42d0 2040c2d7 call mouse_stop_bt3_discovery ,true +42d1 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42d2 c28e421a bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop +42d3 20204482 branch mouse_devce_led_off + +mouse_stop_le_adv: +42d4 58000000 setarg 0 +42d5 600146ae store 2 ,mem_mouse_direct_timer +42d6 20207dfa branch check_51cmd_stop_adv + +mouse_stop_bt3_discovery: +42d7 58000000 setarg 0 +42d8 600146ac store 2 ,mem_mouse_discovery_timer +42d9 20207de2 branch check_51cmd_stop_discovery + +mouse_store_remote_bdaddr: +42da 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42db c4038000 rtnbit0 mouse_store_eeprom_flag +42dc d8e00007 arg mouse_store_eeprom_flag ,queue +42dd 204043d2 call mouse_disable_function_flag +42de 204042e8 call mouse_check_device_addr + +mouse_unplug_clean_bdaddr: +42df 204042fb call mouse_before_store_reconn_info +42e0 680246d3 fetch mouse_flag_len ,mem_mouse_flag +42e1 c289c435 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +42e2 c28a42e4 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +42e3 20600000 rtn + +mouse_store_eeprom_device_info: +42e4 d8400058 arg 88 ,temp +42e5 da204720 arg mem_device_flag ,rega +42e6 da400000 arg mouse_info_eeprom_offect ,regb +42e7 202065d1 branch iicd_write_protect_eep_data + +mouse_check_device_addr: +42e8 68008185 fetch 1 ,mem_record_bt_mode +42e9 c01a42ec beq rec_4_mode ,mouse_check_le_device_addr +42ea c019c2ef beq rec_3_mode ,mouse_check_bt_device_addr +42eb 20600000 rtn + +mouse_check_le_device_addr: +42ec 6000c6c7 store 1 ,mem_device_addr_temp +42ed 6803044f fetch 6 ,mem_le_plap +42ee 202042f1 branch mouse_check_bt_device_addr_common + +mouse_check_bt_device_addr: +42ef 6000c6c7 store 1 ,mem_device_addr_temp +42f0 68030040 fetch 6 ,mem_plap + +mouse_check_bt_device_addr_common: +42f1 600346c8 store 6 ,mem_device_addr_temp + 1 +42f2 6803c6c7 fetch 7 ,mem_device_addr_temp +42f3 d8c04721 arg mem_device1_type ,contr +42f4 df200003 arg 3 ,loopcnt + +mouse_check_device_addr_end: +42f5 e8cb8000 ifetcht 7 ,contr +42f6 98467c00 isub temp ,null +42f7 2022c310 branch mouse_clean_addr ,zero +42f8 18c08c16 increase 22 ,contr +42f9 c20042f5 loop mouse_check_device_addr_end +42fa 20600000 rtn + +mouse_before_store_reconn_info: +42fb da204721 arg mem_device1_type ,rega +42fc 6800c720 fetch 1 ,mem_device_flag +42fd 1fe0ffff increase -1 ,pdata +42fe 1feffe1d mul32 pdata ,29 ,pdata +42ff 9a20a200 iadd rega ,rega +4300 68008185 fetch 1 ,mem_record_bt_mode +4301 e2208000 istore 1 ,rega +4302 c01a4305 beq rec_4_mode ,mouse_store_le_device +4303 c019c30c beq rec_3_mode ,mouse_store_bt_device +4304 20600000 rtn + +mouse_store_le_device: +4305 6803044f fetch 6 ,mem_le_plap +4306 e0a30000 istore 6 ,contw +4307 d8c04419 arg mem_le_ltk ,contr +4308 20407ebf call memcpy16 +4309 680344a0 fetch 6 ,mem_le_lap +430a e0a30000 istore 6 ,contw +430b 20600000 rtn + +mouse_store_bt_device: +430c 68030040 fetch 6 ,mem_plap +430d e0a30000 istore 6 ,contw +430e d8c041be arg mem_link_key ,contr +430f 20207ebf branch memcpy16 + +mouse_clean_addr: +4310 18c08dfa increase -6 ,contr +4311 18c20a00 copy contr ,contw +4312 680b46c8 fetcht 6 ,mem_device_addr_temp + 1 +4313 18408403 increase 3 ,temp +4314 e0ab0000 istoret 6 ,contw +4315 20600000 rtn + +mouse_eeprom_load_recon_info: +4316 d8400058 arg 88 ,temp +4317 da204720 arg mem_device_flag ,rega +4318 da400000 arg mouse_info_eeprom_offect ,regb +4319 204065df call iicd_read_eep_data + +mouse_select_reconn_device: +431a da204721 arg mem_device1_type ,rega +431b 6800c720 fetch 1 ,mem_device_flag +431c 6808c703 fetcht 1 ,mem_24g_device_number +431d 98467c00 isub temp ,null +431e 20628000 rtn zero +431f 1fe0ffff increase -1 ,pdata +4320 1feffe1d mul32 pdata ,29 ,pdata +4321 9a20a200 iadd rega ,rega +4322 ea208000 ifetch 1 ,rega +4323 6000c210 store 1 ,mem_xrecord_mode +4324 c019c327 beq rec_3_mode ,mouse_load_bt_device +4325 c01a432c beq rec_4_mode ,mouse_load_le_device +4326 20600000 rtn + +mouse_load_bt_device: +4327 e8c30000 ifetch 6 ,contr + +mouse_load_bt_device_end: +4328 600341d0 store 6 ,mem_hci_plap +4329 d8a041be arg mem_link_key ,contw +432a 20407ebf call memcpy16 +432b 202067d7 branch check_link_key_load + +mouse_load_le_device: +432c e8c30000 ifetch 6 ,contr + +mouse_load_le_device_end: +432d 600341d0 store 6 ,mem_hci_plap +432e d8a04419 arg mem_le_ltk ,contw +432f 20407ebf call memcpy16 +4330 e8c30000 ifetch 6 ,contr +4331 600344a0 store 6 ,mem_le_lap +4332 20600000 rtn + +mouse_select_device: +4333 6800c6f5 fetch 1 ,mem_config_function_enable +4334 c282c349 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button +4335 c2834359 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch +4336 20204337 branch mouse_select_device_by_combination_key + +mouse_select_device_by_combination_key: +4337 20404083 call mouse_check_key_gpio +4338 c003433e beq mouse_rm_button ,mouse_select_device_commbination_key_down + +mouse_select_device_commbination_key_up: +4339 7046d81e jam 30 ,mem_combination_select_device_count +433a 6800c6d9 fetch 1 ,mem_select_device_button_statue +433b c1008000 rtneq dpi_button_state_up +433c 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +433d 20600000 rtn + +mouse_select_device_commbination_key_down: +433e 20404343 call mouse_combination_select_device_timer +433f 6800c6d9 fetch 1 ,mem_select_device_button_statue +4340 c1000000 rtneq dpi_button_state_down +4341 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue +4342 202043c0 branch mouse_select_device_enable + +mouse_combination_select_device_timer: +4343 6800c6d8 fetch 1 ,mem_combination_select_device_count +4344 207a0000 rtn blank +4345 1fe0ffff pincrease -1 +4346 6000c6d8 store 1 ,mem_combination_select_device_count +4347 247a0000 nrtn blank +4348 20204370 branch mouse_ready_reconnection_by_button + +mouse_select_device_by_button: +4349 6800c6ed fetch 1 ,mem_config_select_device_button_gpio +434a c17f8000 rtneq gpio_disable +434b 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +434c 2040681d call gpio_get_bit +434d 2020c354 branch mouse_select_device_button_down ,true + +mouse_select_device_button_up: +434e 6800c6d9 fetch 1 ,mem_select_device_button_statue +434f c1008000 rtneq dpi_button_state_up +4350 7046d901 jam dpi_button_state_up ,mem_select_device_button_statue +4351 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4352 c3830000 rtnbit1 mouse_long_bt_button_flag +4353 20204370 branch mouse_ready_reconnection_by_button + +mouse_select_device_button_down: +4354 6800c6d9 fetch 1 ,mem_select_device_button_statue +4355 c1000000 rtneq dpi_button_state_down +4356 7046d900 jam dpi_button_state_down ,mem_select_device_button_statue +4357 d8e00006 arg mouse_long_bt_button_flag ,queue +4358 202043d2 branch mouse_disable_function_flag + +mouse_select_device_by_switch: +4359 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag +435a c4030000 rtnbit0 enable_select_device_by_switch +435b 6800c720 fetch 1 ,mem_device_flag +435c c000c369 beq mode_bt_device1 ,mouse_select1_device +435d c001436c beq mode_24g_device ,mouse_select2_device +435e 20600000 rtn + +mouse_cheak_select_device_by_switch: +435f 68008004 fetch 1 ,mouse_flag_len ,mem_mouse_flag +4360 c4030000 rtnbit0 enable_select_device_by_switch +4361 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +4362 2040681d call gpio_get_bit +4363 2020c366 branch mouse_cheak_select_24gdevice ,true + +mouse_select_btdevice: +4364 70472001 jam mode_bt_device1 ,mem_device_flag +4365 20600000 rtn + +mouse_cheak_select_24gdevice: +4366 6800c703 fetch 1 ,mem_24g_device_number +4367 6000c720 store 1 ,mem_device_flag +4368 20600000 rtn + +mouse_select1_device: +4369 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +436a 2420c370 nbranch mouse_ready_reconnection_by_button ,true +436b 20600000 rtn + +mouse_select2_device: +436c 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +436d 2040681d call gpio_get_bit +436e 2020c354 branch mouse_select_device_button_down ,true +436f 20600000 rtn + +mouse_ready_reconnection_by_button: +4370 6808c720 fetcht 1 ,mem_device_flag +4371 18408401 increase 1 ,temp +4372 6800c6d2 fetch 1 ,mem_device_number +4373 98467c00 isub temp ,null +4374 244143cc ncall mouse_select_device_count_clean ,positive +4375 6008c720 storet 1 ,mem_device_flag +4376 7041bd00 jam 0 ,mem_link_key_exists +4377 2040437a call mouse_store_device_number2eeprom +4378 204043c0 call mouse_select_device_enable +4379 2020437e branch mouse_set_reconnection + +mouse_store_device_number2eeprom: +437a d8400001 arg 1 ,temp +437b da204720 arg mem_device_flag ,rega +437c da400000 arg 0 ,regb +437d 20206606 branch iicd_write_eep_data + +mouse_set_reconnection: +437e 20404381 call mouse_stop_bluetooth_mode +437f 204043c2 call mouse_select_device_disable +4380 202041d7 branch mouse_soft_reset + +mouse_stop_bluetooth_mode: +4381 68014682 fetch 2 ,mem_ui_state_map +4382 c283c392 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +4383 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +4384 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +4385 202042ca branch mouse_stop_discovery + +mouse_disconnect: +4386 44f6c01d bpatch patch1d_5 ,mem_patch1d +4387 58000000 setarg 0 +4388 600146b0 store 2 ,mem_mouse_no_data_timer +4389 68014682 fetch 2 ,mem_ui_state_map +438a c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +438b 68014682 fetch 2 ,mem_ui_state_map +438c c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +438d 20600000 rtn + +mouse_irtual_cable_unplug: +438e 58000001 setarg 0x01 +438f 60030040 store 6 ,mem_plap +4390 70018533 jam rec_3_mode ,mem_record_bt_mode +4391 202042df branch mouse_unplug_clean_bdaddr + +mouse_cancel_reconnect: +4392 204043c4 call mouse_bt_cannel_reconn_enable +4393 20207e2f branch check_51cmd_bb_reconn_cancel + +mouse_bt_discovery_by_button: +4394 6800c6ec fetch 1 ,mem_config_bt_button_gpio +4395 c17f8000 rtneq gpio_disable +4396 6808c6ec fetcht 1 ,mem_config_bt_button_gpio +4397 2040681d call gpio_get_bit +4398 2020c39f branch mouse_bt_discovery_button_down ,true + +mouse_bt_discovery_button_up: +4399 6800c685 fetch 1 ,mem_ui_button_timeout +439a 6000c6da store 1 ,mem_combination_ui_button_count +439b 6800c6db fetch 1 ,mem_bt_discovey_button_statue +439c c1008000 rtneq dpi_button_state_up +439d 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue +439e 202043ca branch mouse_bt_discovery_button_down_disable + +mouse_bt_discovery_button_down: +439f 204043b5 call mouse_bt_discovry_timer +43a0 6800c6db fetch 1 ,mem_bt_discovey_button_statue +43a1 c1000000 rtneq dpi_button_state_down +43a2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue +43a3 20407e2f call check_51cmd_bb_reconn_cancel +43a4 202043c8 branch mouse_bt_discovery_button_down_enable + +mouse_bt_discovery_cheak: +43a5 6800c6f5 fetch 1 ,mem_config_function_enable +43a6 c2824394 bbit1 enable_bt_button ,mouse_bt_discovery_by_button + +mouse_bt_discovery_commbination_key: +43a7 20404083 call mouse_check_key_gpio +43a8 c003c3af beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down + +mouse_bt_discovery_commbination_key_up: +43a9 6800c685 fetch 1 ,mem_ui_button_timeout +43aa 6000c6da store 1 ,mem_combination_ui_button_count +43ab 6800c6db fetch 1 ,mem_bt_discovey_button_statue +43ac c1008000 rtneq dpi_button_state_up +43ad 7046db01 jam dpi_button_state_up ,mem_bt_discovey_button_statue +43ae 202043ca branch mouse_bt_discovery_button_down_disable + +mouse_bt_discovery_commbination_key_down: +43af 204043b5 call mouse_bt_discovry_timer +43b0 6800c6db fetch 1 ,mem_bt_discovey_button_statue +43b1 c1000000 rtneq dpi_button_state_down +43b2 7046db00 jam dpi_button_state_down ,mem_bt_discovey_button_statue +43b3 20407e2f call check_51cmd_bb_reconn_cancel +43b4 202043c8 branch mouse_bt_discovery_button_down_enable + +mouse_bt_discovry_timer: +43b5 da6046da arg mem_combination_ui_button_count ,regc +43b6 da4043b8 arg mouse_long_button_bt_discovry ,regb +43b7 2020336d branch timer_single_step + +mouse_long_button_bt_discovry: +43b8 d8e00006 arg mouse_long_bt_button_flag ,queue +43b9 204043ce call mouse_enable_function_flag +43ba 20403357 call app_evt_button_long_pressed +43bb 2020426c branch mouse_bb_event_discovery_btn + +mouse_cpi_enable: +43bc d8e00001 arg mouse_cpi_flag ,queue +43bd 202043ce branch mouse_enable_function_flag + +mouse_cpi_disable: +43be d8e00001 arg mouse_cpi_flag ,queue +43bf 202043d2 branch mouse_disable_function_flag + +mouse_select_device_enable: +43c0 d8e00000 arg mouse_select_device_flag ,queue +43c1 202043ce branch mouse_enable_function_flag + +mouse_select_device_disable: +43c2 d8e00000 arg mouse_select_device_flag ,queue +43c3 202043d2 branch mouse_disable_function_flag + +mouse_bt_cannel_reconn_enable: +43c4 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue +43c5 202043ce branch mouse_enable_function_flag + +mouse_bt_cannel_reconn_disable: +43c6 d8e00002 arg mouse_bt_cannel_reconn_flag ,queue +43c7 202043d2 branch mouse_disable_function_flag + +mouse_bt_discovery_button_down_enable: +43c8 d8e00005 arg mouse_bt_discovery_button_down_flag ,queue +43c9 202043ce branch mouse_enable_function_flag + +mouse_bt_discovery_button_down_disable: +43ca d8e00005 arg mouse_bt_discovery_button_down_flag ,queue +43cb 202043d2 branch mouse_disable_function_flag + +mouse_select_device_count_clean: +43cc d8400001 arg 1 ,temp +43cd 20600000 rtn + +mouse_enable_function_flag: +43ce 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43cf f9207e00 qset1 pdata +43d0 600246d3 store mouse_flag_len ,mem_mouse_flag +43d1 20600000 rtn + +mouse_disable_function_flag: +43d2 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43d3 f93ffe00 qset0 pdata +43d4 600246d3 store mouse_flag_len ,mem_mouse_flag +43d5 20600000 rtn + +mouse_adc_read: +43d6 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43d7 c40d0000 rtnbit0 mouse_enable_adc +43d8 6800c6ce fetch 1 ,mem_adc_read_timer +43d9 1fe0fe01 increase 1 ,pdata +43da 6000c6ce store 1 ,mem_adc_read_timer +43db 1fe67c0a sub pdata ,10 ,null +43dc 20610000 rtn positive +43dd 7046ce00 jam 0 ,mem_adc_read_timer +43de 204068eb call adc_set_mode +43df 20406908 call vdd_calculate_by_mode +43e0 6001470f store 2 ,mem_mouse_vdd_now_vol +43e1 da204709 arg mem_mouse_vdd_calculate_set ,rega +43e2 20406930 call adc_bat_percent_lowpower_out +43e3 6800c231 fetch 1 ,mem_adc_power_flag +43e4 c280c4a0 bbit1 1 ,mouse_power_down +43e5 c30043e9 bbit0 0 ,mouse_adc_no_low_voltage +43e6 202043e7 branch mouse_adc_low_voltage + +mouse_adc_low_voltage: +43e7 d8e00004 arg mouse_low_voltage_flag ,queue +43e8 202043ce branch mouse_enable_function_flag + +mouse_adc_no_low_voltage: +43e9 d8e00004 arg mouse_low_voltage_flag ,queue +43ea 202043d2 branch mouse_disable_function_flag + +mouse_low_voltage_led_timer: +43eb 680246d3 fetch mouse_flag_len ,mem_mouse_flag +43ec c4020000 rtnbit0 mouse_low_voltage_flag +43ed 6800c6ef fetch 1 ,mem_config_low_voltage_alarm_gpio +43ee 6000c715 store 1 ,mem_mouse_struct_led_gpio +43ef 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count +43f0 1fe0fe01 pincrease 1 +43f1 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count +43f2 1fe67c14 sub pdata ,20 ,null +43f3 244143f9 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +43f4 c00143fb beq 2 ,mouse_low_voltage_led_on +43f5 c00243fe beq 4 ,mouse_low_voltage_led_off +43f6 c00343fb beq 6 ,mouse_low_voltage_led_on +43f7 c00443fe beq 8 ,mouse_low_voltage_led_off +43f8 20600000 rtn + +mouse_adc_low_volatage_led_timer_count_clean: +43f9 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count +43fa 202043fe branch mouse_low_voltage_led_off + +mouse_low_voltage_led_on: +43fb da200000 arg 0 ,rega +43fc 70471302 jam ui_led_state_lighting ,mem_mouse_led_type +43fd 20207d14 branch ui_led_on_global + +mouse_low_voltage_led_off: +43fe da200000 arg 0 ,rega +43ff 70471302 jam ui_led_state_lighting ,mem_mouse_led_type +4400 20207d19 branch ui_led_off_global + +mouse_g24_package_data: +4401 20403f97 call mouse_motion +4402 24740000 nrtn user +4403 da200007 arg 7 ,rega +4404 da40469a arg mem_mouse_key ,regb +4405 20600000 rtn + +mouse_g24_enter_lpm: +4406 6800c78b fetch 1 ,mem_mouse_24g_enter_lpm_enable +4407 207a0000 rtn blank +4408 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +4409 2040681d call gpio_get_bit +440a 2040c410 call mouse_24g_dpi_delay_init ,true +440b 6800c704 fetch 1 ,mem_24g_enter_lpm_timer +440c 247a0000 nrtn blank +440d 20404083 call mouse_check_key_gpio +440e 247a0000 nrtn blank +440f 20202d83 branch g24_lpm_long_sleep + +mouse_24g_dpi_delay_init: +4410 6800c6e7 fetch 1 ,mem_dpi_button_gpio +4411 c17f8000 rtneq ui_button_gpio_disable +4412 7047040a jam 10 ,mem_24g_enter_lpm_timer +4413 20600000 rtn + +mouse_load_flash_info_cheak: +4414 20404423 call mouse_load_flash_flag +4415 68014778 fetch 2 ,mem_store_flag +4416 d840aa55 arg eeprom_init_flag ,temp +4417 98467c00 isub temp ,null +4418 2022c42b branch mouse_load_flash_device_info ,zero +4419 60094778 storet 2 ,mem_store_flag +441a 2040441c call mouse_ble_init_address +441b 20204435 branch mouse_store_flash_device_info + +mouse_ble_init_address: +441c 680344a0 fetch 6 ,mem_le_lap +441d 60034738 store 6 ,mem_device1_locall_addr +441e 1fe0ff00 add pdata ,0x0100 ,pdata +441f 60034755 store 6 ,mem_device2_locall_addr +4420 1fe0ff00 add pdata ,0x0100 ,pdata +4421 60034772 store 6 ,mem_device3_locall_addr +4422 20600000 rtn + +mouse_load_flash_flag: +4423 58004778 setarg mem_store_flag +4424 d8404720 arg mem_mouse_information_start ,temp +4425 98460400 isub temp ,temp +4426 6801c700 fetch 3 ,mem_flash_base +4427 9840fe00 iadd temp ,pdata +4428 d8400002 arg 2 ,temp +4429 da204778 arg mem_store_flag ,rega +442a 20206562 branch spid_read_flash + +mouse_load_flash_device_info: +442b 5800477f setarg mem_mouse_information_end +442c d8404720 arg mem_mouse_information_start ,temp +442d 98460400 isub temp ,temp +442e 6801c700 fetch 3 ,mem_flash_base +442f da204720 arg mem_mouse_information_start ,rega +4430 20406562 call spid_read_flash +4431 2040431a call mouse_select_reconn_device +4432 6802477b fetch 4 ,mem_mouse_24g_addr +4433 20402c7a call g24_head_ptr2regc +4434 2020322c branch g24_store_mem_addr + +mouse_store_flash_device_info: +4435 5800477f setarg mem_mouse_information_end +4436 d8404720 arg mem_mouse_information_start ,temp +4437 98460400 isub temp ,temp +4438 da204720 arg mem_mouse_information_start ,rega +4439 6801c700 fetch 3 ,mem_flash_base +443a 20206514 branch flash_write + +mouse_store_eerpom_dpi: +443b d8400001 arg 1 ,temp +443c da20477a arg mem_mouse_dpi ,rega +443d da40005a arg mouse_dpi_eeprom_offect ,regb +443e 202065d1 branch iicd_write_protect_eep_data + +mouse_load_eeprom_dpi: +443f d8400001 arg 1 ,temp +4440 da20477a arg mem_mouse_dpi ,rega +4441 da40005a arg mouse_dpi_eeprom_offect ,regb +4442 202065df branch iicd_read_eep_data + +mouse_statue_cheak_timer: +4443 c6130000 rtnmark1 mark_24g +4444 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4445 c40b0000 rtnbit0 mouse_enable_statue_up +4446 6800c705 fetch 1 ,mem_mouse_1step_up_count +4447 1fe0fe01 pincrease 1 +4448 1fe17e07 and pdata ,0x07 ,pdata +4449 6000c705 store 1 ,mem_mouse_1step_up_count +444a c1838000 rtnne 0x07 +444b 68014682 fetch 2 ,mem_ui_state_map +444c c280444f bbit1 ui_state_bt_connected ,mouse_check_statue_up +444d c284c44f bbit1 ui_state_ble_connected ,mouse_check_statue_up +444e 20600000 rtn + +mouse_check_statue_up: +444f 44f7401d bpatch patch1d_6 ,mem_patch1d +4450 6800c706 fetch 1 ,mem_mouse_2step_up_count +4451 247a0000 nrtn blank +4452 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4453 c4040000 rtnbit0 mouse_statue_up_flag +4454 6800c6a5 fetch 1 ,mem_sensor_squal_reg +4455 204063fb call sensor_read +4456 6000c6a6 store 1 ,mem_sensor_iqc +4457 1fe67c10 sub pdata ,0x10 ,null +4458 2021445b branch mouse_statue_up_timer_init ,positive +4459 70470600 jam 0 ,mem_mouse_2step_up_count +445a 20600000 rtn + +mouse_statue_up_timer_init: +445b 7047061e jam 30 ,mem_mouse_2step_up_count +445c 20600000 rtn + +mouse_statue_up_timer: +445d da604706 arg mem_mouse_2step_up_count ,regc +445e da404460 arg mouse_statue_up ,regb +445f 2020336d branch timer_single_step + +mouse_statue_up: +4460 6800c6a5 fetch 1 ,mem_sensor_squal_reg +4461 20406414 call twspi_read +4462 1fe67c10 sub pdata ,0x10 ,null +4463 24610000 nrtn positive +4464 680246d3 fetch mouse_flag_len ,mem_mouse_flag +4465 c4040000 rtnbit0 mouse_statue_up_flag +4466 d8e00008 arg mouse_statue_up_flag ,queue +4467 204043d2 call mouse_disable_function_flag +4468 70417200 jam 0 ,mem_lpm_mult +4469 7046c41e jam 30 ,mem_mouse_statue_led_timer +446a 20404482 call mouse_devce_led_off +446b 680246d3 fetch mouse_flag_len ,mem_mouse_flag +446c c28ac471 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up + +mouse_two_device_statue_up: +446d 6800c720 fetch 1 ,mem_device_flag +446e c000c489 beq mode_bt_device1 ,mouse_device1_led_on +446f c0014476 beq mode_bt_device2 ,mouse_device_blink_led_init +4470 20600000 rtn + +mouse_three_device_statue_up: +4471 6800c720 fetch 1 ,mem_device_flag +4472 c000c489 beq mode_bt_device1 ,mouse_device1_led_on +4473 c001448c beq mode_bt_device2 ,mouse_device2_led_on +4474 c001c48f beq mode_bt_device3 ,mouse_device3_led_on +4475 20600000 rtn + +mouse_device_blink_led_init: +4476 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +4477 2020428f branch mouse_led_blink + +mouse_statue_led_off: +4478 70417220 jam 0x20 ,mem_lpm_mult +4479 20204482 branch mouse_devce_led_off + +mouse_devce1_led_off: +447a 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +447b c17f8000 rtneq gpio_disable +447c 6000c715 store 1 ,mem_mouse_struct_led_gpio +447d 20204296 branch mouse_led_off + +mouse_devce2_led_off: +447e 6800c6f1 fetch 1 ,mem_config_device2_led_gpio +447f c17f8000 rtneq gpio_disable +4480 6000c715 store 1 ,mem_mouse_struct_led_gpio +4481 20204296 branch mouse_led_off + +mouse_devce_led_off: +4482 20404296 call mouse_led_off +4483 2040447a call mouse_devce1_led_off +4484 2040447e call mouse_devce2_led_off + +mouse_devce3_led_off: +4485 6800c6f2 fetch 1 ,mem_config_device3_led_gpio +4486 c17f8000 rtneq gpio_disable +4487 6000c715 store 1 ,mem_mouse_struct_led_gpio +4488 20204296 branch mouse_led_off + +mouse_device1_led_on: +4489 6800c6f0 fetch 1 ,mem_config_device1_led_gpio +448a 6000c715 store 1 ,mem_mouse_struct_led_gpio +448b 20204298 branch mouse_led_on + +mouse_device2_led_on: +448c 6800c6f1 fetch 1 ,mem_config_device2_led_gpio +448d 6000c715 store 1 ,mem_mouse_struct_led_gpio +448e 20204298 branch mouse_led_on + +mouse_device3_led_on: +448f 6800c6f2 fetch 1 ,mem_config_device3_led_gpio +4490 6000c715 store 1 ,mem_mouse_struct_led_gpio +4491 20204298 branch mouse_led_on + +mouse_polling_device: +4492 44f7c01d bpatch patch1d_7 ,mem_patch1d +4493 6800c71e fetch 1 ,mem_reconn_times +4494 1fe0ffff increase -1 ,pdata +4495 6000c71e store 1 ,mem_reconn_times +4496 6808c720 fetcht 1 ,mem_device_flag +4497 18408401 increase 1 ,temp +4498 6800c6d2 fetch 1 ,mem_device_number +4499 98467c00 isub temp ,null +449a 244143cc ncall mouse_select_device_count_clean ,positive +449b 6008c720 storet 1 ,mem_device_flag +449c 7041bd00 jam 0 ,mem_link_key_exists +449d 2040437a call mouse_store_device_number2eeprom +449e 204042fb call mouse_before_store_reconn_info +449f 202042a2 branch mouse_check_reconn_target + +mouse_power_down: +44a0 20404482 call mouse_devce_led_off +44a1 58000000 setarg 0 +44a2 600400a1 store 8 ,mem_gpio_wakeup_low +44a3 20202b1f branch lpm_hibernate + +remote_car_init: +44a4 20758000 rtn wake +44a5 68108081 hfetch 1 ,core_gpio_sel1 +44a6 1fe17ef0 and_into 0xf0 ,pdata +44a7 60108081 hstore 1 ,core_gpio_sel1 +44a8 20406948 call keyscan_key_init +44a9 580044e6 setarg remote_car_le_before_hibernate +44aa 600141eb store 2 ,mem_cb_before_hibernate +44ab 580044e9 setarg remote_car_process_lpm_before +44ac 600141ed store 2 ,mem_cb_before_lpm +44ad 580044ef setarg remote_car_scale_process_idle +44ae 600141f3 store 2 ,mem_cb_idle_process +44af 580044f2 setarg remote_car_scale_process_bb_event +44b0 600141f5 store 2 ,mem_cb_bb_event_process +44b1 580033d0 setarg app_get_lpm_wake_lock +44b2 600141e9 store 2 ,mem_cb_check_wakelock +44b3 20402c7a call g24_head_ptr2regc +44b4 580045c2 setarg remote_car_g24_package_data +44b5 1a608ad8 add regc ,offset_24g_cb_data ,contw +44b6 e0a10000 istore 2 ,contw +44b7 580044ea setarg remote_car_g24_enter_lpm +44b8 1a608ada add regc ,offset_24g_cb_lpm_prepare ,contw +44b9 e0a10000 istore 2 ,contw +44ba 580044e9 setarg remote_car_process_lpm_before +44bb 1a608adc add regc ,offset_24g_cb_lpm_before ,contw +44bc e0a10000 istore 2 ,contw +44bd 5800450e setarg remote_car_event_timer +44be 600141fd store 2 ,mem_cb_event_timer +44bf 580044da setarg remote_car_power_off_signal +44c0 6001475b store 2 ,mem_remote_car_power_off_cb +44c1 580044d6 setarg remote_car_soft_switch_power_on_signal +44c2 6001475f store 2 ,mem_remote_car_power_standby_cb +44c3 58004560 setarg remote_car_send_key_data +44c4 6001470f store 2 ,mem_cb_remote_car_keyscan +44c5 44f8401e bpatch patch1e_0 ,mem_patch1e +44c6 204044e2 call remote_car_init_environment +44c7 20407e38 call queue_init +44c8 70417202 jam 2 ,mem_lpm_mult +44c9 6800c72b fetch 1 ,mem_remote_car_config_soft_switch_enable +44ca 6000c69a store 1 ,mem_remote_car_hard_soft_switch +44cb c00044d5 beq hard_switch ,remote_car_hard_switch_power_on_signal +44cc 6800c72c fetch 1 ,mem_remote_car_config_soft_switch_gpio +44cd 6000c686 store 1 ,mem_ui_button_gpio + +remote_car_soft_switch_power_on_init: +44ce 204044db call remote_car_ui_led_init +44cf 20407cd3 call ui_button_init +44d0 20407cdd call ui_button_polling +44d1 70475701 jam power_starting ,mem_remote_car_power_state +44d2 68014682 fetch 2 ,mem_ui_state_map +44d3 c3860000 rtnbit1 ui_state_btn_down +44d4 2020340a branch app_enter_hibernate + +remote_car_hard_switch_power_on_signal: +44d5 70475702 jam power_standby ,mem_remote_car_power_state + +remote_car_soft_switch_power_on_signal: +44d6 204044db call remote_car_ui_led_init +44d7 da200000 arg 0 ,rega +44d8 20407d1e call ui_led_blink_start_global + +remote_car_connect_24g_mode: +44d9 20202ee4 branch g24_auto_pair_start + +remote_car_power_off_signal: +44da 202044db branch remote_car_ui_led_init + +remote_car_ui_led_init: +44db 44f8c01e bpatch patch1e_1 ,mem_patch1e +44dc 6800c729 fetch 1 ,mem_remote_car_config_connect_led_gpio +44dd c0ffc4e0 bne invalid_pin_num ,remote_car_pairing_led_gpio_set + +remote_car_ui_led_init_1: +44de 6808c706 fetcht 1 ,mem_remote_car_led_map +44df 2020680e branch gpio_config_output + +remote_car_pairing_led_gpio_set: +44e0 6000c706 store 1 ,mem_remote_car_led_map +44e1 202044de branch remote_car_ui_led_init_1 + +remote_car_init_environment: +44e2 20402c9d call g24_set_device_addr +44e3 68014753 fetch 2 ,mem_remote_car_no_data_timeout +44e4 60014755 store 2 ,mem_remote_car_no_data_timer +44e5 20204515 branch remote_car_get_adc_default_data + +remote_car_le_before_hibernate: + +remote_car_in_enter_hibernate: +44e6 20406835 call gpio_set_before_lpm_common +44e7 204044e9 call remote_car_process_lpm_before +44e8 2020340a branch app_enter_hibernate + +remote_car_process_lpm_before: +44e9 2020696c branch keyscan_process_lpm_before + +remote_car_g24_enter_lpm: +44ea 6800c765 fetch 1 ,mem_remote_car_24g_enter_lpm_enable +44eb 207a0000 rtn blank +44ec 20202d83 branch g24_lpm_long_sleep + +remote_car_process_auto_pair_exit: +44ed 20600000 rtn + +remote_car_key_scan_process: +44ee 20206978 branch keyscan_key_process + +remote_car_scale_process_idle: +44ef 20404544 call remote_car_rocker_process +44f0 20404503 call remote_car_24g_status_process +44f1 202044ee branch remote_car_key_scan_process + +remote_car_scale_process_bb_event: +44f2 1a627e00 copy regc ,pdata +44f3 c016b431 beq bt_evt_button_up ,app_event_button_up +44f4 c008341a beq bt_evt_button_long_pressed ,app_button_long_pressed +44f5 c01cc4fb beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +44f6 c01e44ff beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +44f7 c01d44f9 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +44f8 20600000 rtn + +remote_car_24g_attempt_fail: +44f9 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable +44fa 20600000 rtn + +remote_car_24g_pairing_complete: +44fb 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable +44fc 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step +44fd 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag +44fe 20600000 rtn + +remote_car_24g_attempt_success: +44ff 70476501 jam 1 ,mem_remote_car_24g_enter_lpm_enable +4500 70476301 jam work_paired ,mem_remote_car_24g_auto_work_step +4501 70476401 jam work_paired ,mem_remote_car_24g_pair_success_flag +4502 20600000 rtn + +remote_car_24g_status_process: +4503 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step +4504 c1000000 rtneq power_on +4505 6800c762 fetch 1 ,mem_remote_car_24g_status +4506 c1008000 rtneq work_paired +4507 70476201 jam work_paired ,mem_remote_car_24g_status + +remote_car_scale_process_paired: +4508 da200000 arg 0 ,rega +4509 20207d19 branch ui_led_off_global + +remote_car_scale_process_shutdown: +450a da200000 arg 0 ,rega +450b 20407d19 call ui_led_off_global +450c 204044db call remote_car_ui_led_init +450d 2020340a branch app_enter_hibernate + +remote_car_event_timer: +450e 2040337b call app_power_timer +450f 20204510 branch remote_car_no_data_timer + +remote_car_no_data_timer: +4510 6800c72d fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +4511 207a0000 rtn blank +4512 da604755 arg mem_remote_car_no_data_timer ,regc +4513 da40450a arg remote_car_scale_process_shutdown ,regb +4514 20203374 branch timer_single_step_2b + +remote_car_get_adc_default_data: +4515 2040451a call remote_car_rocker_get_x +4516 6009471a storet 2 ,mem_current_vdd_value_default_mid_x +4517 2040451f call remote_car_rocker_get_y +4518 6009471c storet 2 ,mem_current_vdd_value_default_mid_y +4519 20600000 rtn + +remote_car_rocker_data_get: + +remote_car_rocker_get_x: +451a 6801471a fetch 2 ,mem_current_vdd_value_default_mid_x +451b 6001471e store 2 ,mem_current_vdd_value_default_mid_temp +451c 20404540 call remote_car_get_adc_from_gpio6 +451d 20404525 call remote_car_rocker_get_value +451e 6000c724 store 1 ,mem_rocker_status + +remote_car_rocker_get_y: +451f 6801471c fetch 2 ,mem_current_vdd_value_default_mid_y +4520 6001471e store 2 ,mem_current_vdd_value_default_mid_temp +4521 20404542 call remote_car_get_adc_from_gpio7 +4522 20404525 call remote_car_rocker_get_value +4523 6000c725 store 1 ,mem_rocker_status + 1 +4524 20600000 rtn + +remote_car_rocker_get_value: +4525 68014720 fetch 2 ,mem_current_vdd_default_range +4526 1fe22200 copy pdata ,rega +4527 6801471e fetch 2 ,mem_current_vdd_value_default_mid_temp +4528 2040452e call remote_car_rocker_mid_value_adjust +4529 6800c719 fetch 1 ,mem_rocker_work_status +452a 243a4537 nbranch remote_car_rocker_translate_key ,blank +452b 24610000 nrtn positive +452c 6809471e fetcht 2 ,mem_current_vdd_value_default_mid_temp +452d 20600000 rtn + +remote_car_rocker_mid_value_adjust: +452e 98467e00 isub temp ,pdata +452f 20214534 branch remote_car_rocker_mid_adjust_positive ,positive +4530 1fe67e00 sub pdata ,0 ,pdata +4531 70471801 jam 1 ,mem_rocker_negative_flag +4532 9a267c00 isub rega ,null +4533 20600000 rtn + +remote_car_rocker_mid_adjust_positive: +4534 70471800 jam 0 ,mem_rocker_negative_flag +4535 9a267c00 isub rega ,null +4536 20600000 rtn + +remote_car_rocker_translate_key: +4537 2421453e nbranch remote_car_rocker_middle_key ,positive +4538 6800c718 fetch 1 ,mem_rocker_negative_flag +4539 243a453c nbranch remote_car_rocker_negative_key ,blank + +remote_car_rocker_positive_key: +453a 58000001 setarg rocker_positive_key +453b 20600000 rtn + +remote_car_rocker_negative_key: +453c 58000002 setarg rocker_negative_key +453d 20600000 rtn + +remote_car_rocker_middle_key: +453e 58000000 setarg rocker_middle_key +453f 20600000 rtn + +remote_car_get_adc_from_gpio6: +4540 70422e33 jam 0x33 ,mem_adc_channel +4541 202068eb branch adc_set_mode + +remote_car_get_adc_from_gpio7: +4542 70422e34 jam 0x34 ,mem_adc_channel +4543 202068eb branch adc_set_mode + +remote_car_rocker_process: +4544 6800c72a fetch 1 ,mem_remote_car_config_check_way +4545 c1808000 rtnne car_remote_check_rocker + +remote_car_read_rocker_check_start: +4546 44f9401e bpatch patch1e_2 ,mem_patch1e +4547 70471901 jam 1 ,mem_rocker_work_status +4548 2040451a call remote_car_rocker_data_get +4549 68014724 fetch 2 ,mem_rocker_status +454a 68094722 fetcht 2 ,mem_rocker_last_status +454b 98467c00 isub temp ,null +454c 20628000 rtn zero +454d 60014722 store 2 ,mem_rocker_last_status +454e 20404550 call remote_car_rocker_x_to_key +454f 20204554 branch remote_car_rocker_y_to_key + +remote_car_rocker_x_to_key: +4550 6800c724 fetch 1 ,mem_rocker_x_status +4551 203a455a branch rocker_to_queue_set_0 ,blank +4552 1fe0ffff increase -1 ,pdata +4553 20204557 branch remote_car_rocker_to_key + +remote_car_rocker_y_to_key: +4554 6800c725 fetch 1 ,mem_rocker_y_status +4555 203a455d branch rocker_to_queue_set_2 ,blank +4556 1fe0fe01 increase 1 ,pdata + +remote_car_rocker_to_key: +4557 1fe20e00 copy pdata ,queue +4558 da200001 arg 1 ,rega +4559 20204560 branch remote_car_send_key_data + +rocker_to_queue_set_0: +455a d8e00000 arg 0 ,queue +455b da200000 arg 0 ,rega +455c 20204560 branch remote_car_send_key_data + +rocker_to_queue_set_2: +455d d8e00002 arg 2 ,queue +455e da200000 arg 0 ,rega +455f 20204560 branch remote_car_send_key_data + +remote_car_send_key_data: +4560 1a227e00 copy rega ,pdata +4561 6000c761 store 1 ,mem_remote_key_status +4562 6800c763 fetch 1 ,mem_remote_car_24g_auto_work_step +4563 c0002ee4 beq power_on ,g24_auto_pair_start +4564 68014753 fetch 2 ,mem_remote_car_no_data_timeout +4565 60014755 store 2 ,mem_remote_car_no_data_timer +4566 6800c761 fetch 1 ,mem_remote_key_status +4567 203a4580 branch remote_car_key_is_release ,blank + +remote_car_key_is_press: +4568 44f9c01e bpatch patch1e_3 ,mem_patch1e +4569 da200000 arg 0 ,rega +456a 20407d14 call ui_led_on_global + +remote_car_attack_key_press: +456b 18e27e00 copy queue ,pdata +456c c00245a3 beq 4 ,remote_car_send_attack_key4_press +456d c002c5a5 beq 5 ,remote_car_send_attack_key5_press +456e c00345a7 beq 6 ,remote_car_send_fire_key6_press + +remote_car_motor_key_press: +456f 2040458b call remote_car_device_layout_select +4570 c0004574 beq control_f_b_ten ,remote_car_single_motor_key_is_press +4571 c001457a beq control_l_r_ten ,remote_car_double_motor_key_press +4572 c001c574 beq control_l_r_lr ,remote_car_single_motor_key_is_press +4573 20600000 rtn + +remote_car_single_motor_key_is_press: +4574 18e27e00 copy queue ,pdata +4575 c000458f beq 0 ,remote_car_send_motor1_key0_press +4576 c000c591 beq 1 ,remote_car_send_motor1_key1_press +4577 c0014593 beq 2 ,remote_car_send_motor2_key2_press +4578 c001c595 beq 3 ,remote_car_send_motor2_key3_press +4579 20600000 rtn + +remote_car_double_motor_key_press: +457a 18e27e00 copy queue ,pdata +457b c0004597 beq 0 ,remote_car_send_double_motor_key0_press +457c c000c59a beq 1 ,remote_car_send_double_motor_key1_press +457d c001459d beq 2 ,remote_car_send_double_motor_key2_press +457e c001c5a0 beq 3 ,remote_car_send_double_motor_key3_press +457f 20600000 rtn + +remote_car_key_is_release: +4580 44fa401e bpatch patch1e_4 ,mem_patch1e +4581 da200000 arg 0 ,rega +4582 20407d19 call ui_led_off_global + +remote_car_attack_key_release: +4583 18e27e00 copy queue ,pdata +4584 c00245bc beq 4 ,remote_car_send_attack_key4_rel +4585 c002c5bc beq 5 ,remote_car_send_attack_key5_rel + +remote_car_motor_key_release: +4586 2040458b call remote_car_device_layout_select +4587 c00045a9 beq control_f_b_ten ,remote_car_single_motor_key_rel +4588 c00145af beq control_l_r_ten ,remote_car_double_motor_key_rel +4589 c001c5a9 beq control_l_r_lr ,remote_car_single_motor_key_rel +458a 20600000 rtn + +remote_car_device_layout_select: +458b 6800c728 fetch 1 ,mem_remote_car_config_layout +458c 6808c727 fetcht 1 ,mem_remote_car_config_key_map +458d 9841fe00 ior temp ,pdata +458e 20600000 rtn + +remote_car_send_motor1_key0_press: +458f 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload +4590 202045be branch remote_car_send_key + +remote_car_send_motor1_key1_press: +4591 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload +4592 202045be branch remote_car_send_key + +remote_car_send_motor2_key2_press: +4593 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload +4594 202045be branch remote_car_send_key + +remote_car_send_motor2_key3_press: +4595 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload +4596 202045be branch remote_car_send_key + +remote_car_send_double_motor_key0_press: +4597 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload +4598 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload +4599 202045be branch remote_car_send_key + +remote_car_send_double_motor_key1_press: +459a 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload +459b 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload +459c 202045be branch remote_car_send_key + +remote_car_send_double_motor_key2_press: +459d 70473402 jam motor_negative ,mem_remote_car_24g_motor1_payload +459e 70473601 jam motor_positive ,mem_remote_car_24g_motor2_payload +459f 202045be branch remote_car_send_key + +remote_car_send_double_motor_key3_press: +45a0 70473401 jam motor_positive ,mem_remote_car_24g_motor1_payload +45a1 70473602 jam motor_negative ,mem_remote_car_24g_motor2_payload +45a2 202045be branch remote_car_send_key + +remote_car_send_attack_key4_press: +45a3 70473801 jam motor_positive ,mem_remote_car_24g_motor3_payload +45a4 202045be branch remote_car_send_key + +remote_car_send_attack_key5_press: +45a5 70473802 jam motor_negative ,mem_remote_car_24g_motor3_payload +45a6 202045be branch remote_car_send_key + +remote_car_send_fire_key6_press: +45a7 70474101 jam 0x01 ,mem_remote_car_24g_fire_send_payload +45a8 202045c0 branch remote_car_send_attack + +remote_car_single_motor_key_rel: +45a9 18e27e00 copy queue ,pdata +45aa c00045b5 beq 0 ,remote_car_send_motor1_key0_rel +45ab c000c5b5 beq 1 ,remote_car_send_motor1_key1_rel +45ac c00145b7 beq 2 ,remote_car_send_motor2_key2_rel +45ad c001c5b7 beq 3 ,remote_car_send_motor2_key3_rel +45ae 20600000 rtn + +remote_car_double_motor_key_rel: +45af 18e27e00 copy queue ,pdata +45b0 c00045b9 beq 0 ,remote_car_send_double_motor_key0_rel +45b1 c000c5b9 beq 1 ,remote_car_send_double_motor_key1_rel +45b2 c00145b9 beq 2 ,remote_car_send_double_motor_key2_rel +45b3 c001c5b9 beq 3 ,remote_car_send_double_motor_key3_rel +45b4 20600000 rtn + +remote_car_send_motor1_key0_rel: + +remote_car_send_motor1_key1_rel: +45b5 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload +45b6 202045be branch remote_car_send_key + +remote_car_send_motor2_key2_rel: + +remote_car_send_motor2_key3_rel: +45b7 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload +45b8 202045be branch remote_car_send_key + +remote_car_send_double_motor_key0_rel: + +remote_car_send_double_motor_key1_rel: + +remote_car_send_double_motor_key2_rel: + +remote_car_send_double_motor_key3_rel: +45b9 70473400 jam motor_stop ,mem_remote_car_24g_motor1_payload +45ba 70473600 jam motor_stop ,mem_remote_car_24g_motor2_payload +45bb 202045be branch remote_car_send_key + +remote_car_send_attack_key4_rel: + +remote_car_send_attack_key5_rel: +45bc 70473800 jam motor_stop ,mem_remote_car_24g_motor3_payload +45bd 202045be branch remote_car_send_key + +remote_car_send_key: +45be da20472e arg mem_remote_car_24g_motor_packet ,rega +45bf 20207e3d branch queue_push + +remote_car_send_attack: +45c0 da20473b arg mem_remote_car_24g_fire_packet ,rega +45c1 20207e3d branch queue_push + +remote_car_g24_package_data: +45c2 6800c764 fetch 1 ,mem_remote_car_24g_pair_success_flag +45c3 c000c5cc beq work_paired ,remote_car_g24_send_empty +45c4 da204744 arg mem_remote_car_24g_tx_temp ,rega +45c5 20407e54 call queue_pop +45c6 243445d1 nbranch remote_car_moto_data ,user + +remote_car_g24_package_data_continue: +45c7 d8c04744 arg mem_remote_car_24g_tx_temp ,contr +45c8 e8c08000 ifetch 1 ,contr +45c9 1fe22200 copy pdata ,rega +45ca da404745 arg mem_remote_car_24g_tx_temp + 1 ,regb +45cb 20600000 rtn + +remote_car_g24_send_empty: +45cc 70476400 jam 0 ,mem_remote_car_24g_pair_success_flag +45cd 78347c00 enable user +45ce da200001 arg 1 ,rega +45cf da404766 arg mem_remote_car_empty_packet ,regb +45d0 20600000 rtn + +remote_car_moto_data: +45d1 6800c747 fetch 1 ,mem_remote_car_24g_tx_temp + 3 +45d2 c00245d5 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +45d3 c002c5d5 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +45d4 20600000 rtn + +remote_car_moto_data_next: +45d5 6800c74a fetch 1 ,mem_remote_car_24g_tx_temp + 6 +45d6 243a45dc nbranch remote_car_moto_data_enable_user ,blank +45d7 6800c74c fetch 1 ,mem_remote_car_24g_tx_temp + 8 +45d8 243a45dc nbranch remote_car_moto_data_enable_user ,blank +45d9 6800c74e fetch 1 ,mem_remote_car_24g_tx_temp + 10 +45da 243a45dc nbranch remote_car_moto_data_enable_user ,blank +45db 20600000 rtn + +remote_car_moto_data_enable_user: +45dc 78347c00 enable user +45dd 202045c7 branch remote_car_g24_package_data_continue + +shutter_init: +45de 20758000 rtn wake +45df 68108081 hfetch 1 ,core_gpio_sel1 +45e0 1fe17efc and_into 0xfc ,pdata +45e1 60108081 hstore 1 ,core_gpio_sel1 +45e2 580046b4 setarg shutter_le_before_hibernate +45e3 600141eb store 2 ,mem_cb_before_hibernate +45e4 580046b3 setarg shutter_process_lpm_before +45e5 600141ed store 2 ,mem_cb_before_lpm +45e6 5800340a setarg app_enter_hibernate +45e7 600141f7 store 2 ,mem_cb_discovry_timeout +45e8 580046b1 setarg shutter_process_idle +45e9 600141f3 store 2 ,mem_cb_idle_process +45ea 58004612 setarg shutter_process_bb_event +45eb 600141f5 store 2 ,mem_cb_bb_event_process +45ec 5800460c setarg shutter_le_scale_lpm_lock +45ed 600141e9 store 2 ,mem_cb_check_wakelock +45ee 5800476a setarg ble_shutter_receive_data +45ef 600141f9 store 2 ,mem_cb_att_write +45f0 58004686 setarg shutter_le_bb_event_timer +45f1 600141fd store 2 ,mem_cb_event_timer +45f2 58004729 setarg shutter_key_change +45f3 600146e7 store 2 ,mem_cb_shutter_keycan +45f4 58004806 setarg shutter_soft_swtich_power_on +45f5 600146e2 store 2 ,mem_shutter_soft_switch_poweron_callback_function +45f6 58004807 setarg shutter_soft_swtich_power_off +45f7 600146e4 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +45f8 204057a3 call le_modified_name +45f9 204047da call shutter_load_bluetooth_config_by_user_config +45fa 20404788 call shutter_init_bluetooth_config +45fb 2040476d call shutter_init_param +45fc 20406948 call keyscan_key_init +45fd 2040477a call shutter_load_buffer_config_form_datarom +45fe 20407e38 call queue_init +45ff 20407d08 call ui_led_init_global +4600 20404793 call shutter_load_bluetooth_config +4601 204047c7 call shutter_load_bluetooth_config_by_eeprom +4602 44fac01e bpatch patch1e_5 ,mem_patch1e +4603 2040464f call classic_shutter_load_reconn_info +4604 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case +4605 c0004609 beq hard_switch ,shutter_hart_swtich_power_on +4606 6800c6de fetch 1 ,mem_shutter_soft_switch_button_gpio +4607 6000c686 store 1 ,mem_ui_button_gpio +4608 2020480e branch ui_soft_swtich_init + +shutter_hart_swtich_power_on: +4609 704686ff jam ui_button_gpio_disable ,mem_ui_button_gpio +460a 7046df01 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +460b 202046d9 branch shutter_start_reconnect + +shutter_le_scale_lpm_lock: +460c 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +460d c00133d0 beq ss_state_power_off ,app_get_lpm_wake_lock +460e 2040527e call l2cap_malloc_get_full_map +460f 6800c256 fetch 1 ,mem_used_map +4610 243a33d0 nbranch app_get_lpm_wake_lock ,blank +4611 202033d2 branch app_put_lpm_wake_lock + +shutter_process_bb_event: +4612 1a627e00 copy regc ,pdata +4613 c000c626 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect +4614 c0014629 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect +4615 c0024631 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed +4616 c002c633 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete +4617 c0034635 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect +4618 c003c638 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect +4619 c009463c beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake +461a c009c644 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout +461b c013c645 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug +461c c0174648 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff +461d c01ec649 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information +461e c00a4658 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +461f c00ac65c beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +4620 c01fc65f beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +4621 c0204665 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +4622 c008466b beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +4623 c016466c beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +4624 c016c677 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +4625 20600000 rtn + +classic_shutter_process_baseband_connect: +4626 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count +4627 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut +4628 20600000 rtn + +classic_shutter_process_baseband_disconnect: +4629 2040462b call classic_shutter_disconnect_clear_flag +462a 20204631 branch classic_shutter_process_reconnect_failed + +classic_shutter_disconnect_clear_flag: +462b 7041e200 jam app_handshake_null ,mem_app_handshake_flag +462c 70468000 jam 0 ,mem_hid_handshake_timer_count +462d 70420500 jam 0 ,mem_unsniff2sniff_timer_count +462e 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut +462f 7046ad00 jam 0 ,mem_classic_shutter_hid_disconn_count +4630 20207e38 branch queue_init + +classic_shutter_process_reconnect_failed: +4631 204033a9 call app_disconn_reason_clear +4632 202046c2 branch shutter_start_bluetooth_discovery + +classic_shutter_process_setup_complete: +4633 204046b6 call shutter_stop_bluetooth_discovery +4634 20203408 branch app_led_stop_blink + +classic_shutter_process_hid_connect: +4635 58000002 setarg hid_handshake_timeout +4636 6000c680 store 1 ,mem_hid_handshake_timer_count +4637 20600000 rtn + +classic_shutter_process_hid_disconnect: +4638 7046ac00 jam 0 ,mem_classic_shutter_cable_unplug_conut +4639 58000001 setarg flag_shutter_hid_disconn_timeout +463a 6000c6ad store 1 ,mem_classic_shutter_hid_disconn_count +463b 20600000 rtn + +classic_shutter_process_hid_handshake: +463c 6800c1e2 fetch 1 ,mem_app_handshake_flag +463d c1008000 rtneq app_handshake_done +463e 7041e201 jam app_handshake_done ,mem_app_handshake_flag +463f 20403416 call app_lpm_mult_enable +4640 20403414 call app_store_reconn_info +4641 204046b6 call shutter_stop_bluetooth_discovery +4642 20403408 call app_led_off +4643 2020340e branch app_bt_enter_sniff + +classic_shutter_process_reconnect_page_timeout: +4644 20204631 branch classic_shutter_process_reconnect_failed + +classic_shutter_process_virtual_cable_unplug: +4645 58000005 setarg flag_shutter_cable_unplug_timeout +4646 6000c6ac store 1 ,mem_classic_shutter_cable_unplug_conut +4647 20600000 rtn + +classic_shutter_process_remote_unsniff: +4648 202033cd branch app_start_auto_sniff + +classic_shutter_process_store_reconnect_information: +4649 da400000 arg nvram_eeprom_offset ,regb +464a 6800c217 fetch 1 ,mem_nv_data_number +464b 1fef8422 mul32 pdata ,34 ,temp +464c 68014215 fetch 2 ,mem_nv_data_ptr +464d 1fe22200 copy pdata ,rega +464e 20206606 branch iicd_write_eep_data + +classic_shutter_load_reconn_info: +464f da400000 arg nvram_eeprom_offset ,regb +4650 6800c69a fetch 1 ,mem_shutter_bluetooth_type +4651 c4008000 rtnbit0 classic_shutter +4652 6800c217 fetch 1 ,mem_nv_data_number +4653 207a0000 rtn blank +4654 1fef8422 mul32 pdata ,34 ,temp +4655 68014215 fetch 2 ,mem_nv_data_ptr +4656 1fe22200 copy pdata ,rega +4657 202065df branch iicd_read_eep_data + +ble_shutter_process_baseband_connect: +4658 204046b6 call shutter_stop_bluetooth_discovery +4659 58000000 setarg 0 +465a 600146b7 store 2 ,mem_ble_shutter_reconn_timer +465b 20203408 branch app_led_off + +ble_shutter_process_baseband_disconnect: +465c 20407e38 call queue_init +465d 7046b000 jam 0 ,mem_ble_shutter_enable_notify +465e 202046d9 branch shutter_start_reconnect + +ble_shutter_process_reconnect_complete: +465f 20407e38 call queue_init +4660 7046b001 jam 1 ,mem_ble_shutter_enable_notify +4661 680446c1 fetch 8 ,mem_ble_shutter_interval_min +4662 60044496 store 8 ,mem_le_interval_min +4663 20403416 call app_lpm_mult_enable +4664 20205abf branch le_l2cap_tx_update_req + +ble_shutter_process_parse_connect_parameter_update_response: +4665 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +4666 c1000000 rtneq ble_signaling_connect_parameter_update_accepted +4667 680446c9 fetch 8 ,mem_ble_shutter_interval_min_new +4668 207a0000 rtn blank +4669 60044496 store 8 ,mem_le_interval_min +466a 20205abf branch le_l2cap_tx_update_req + +shutter_process_soft_swtich_button_long_press: +466b 2020481f branch ui_soft_switch_botton_long_press + +shutter_process_soft_swtich_button_down: +466c 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case +466d c1000000 rtneq hard_switch +466e 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +466f c1808000 rtnne ss_state_power_on +4670 20404672 call shutter_store_currenct_led_state +4671 20203406 branch app_led_on + +shutter_store_currenct_led_state: +4672 7048df01 jam 1 ,mem_shutter_soft_swtich_botton_down +4673 df20000b arg 11 ,loopcnt +4674 d8a048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contw +4675 d8c048c9 arg mem_shutter_led_struct_app_led ,contr +4676 20207f01 branch memcpy + +shutter_process_soft_swtich_button_up: +4677 6800c6dd fetch 1 ,mem_shutter_hard_soft_switch_case +4678 c1000000 rtneq hard_switch +4679 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +467a c000c67c beq ss_state_power_on ,shutter_load_currenct_led_state +467b 2020481b branch ui_soft_switch_botton_up + +shutter_load_currenct_led_state: +467c 6800c8df fetch 1 ,mem_shutter_soft_swtich_botton_down +467d c1808000 rtnne 1 +467e 7048df00 jam 0 ,mem_shutter_soft_swtich_botton_down +467f 68014682 fetch 2 ,mem_ui_state_map +4680 c2803408 bbit1 ui_state_bt_connected ,app_led_off +4681 c284b408 bbit1 ui_state_ble_connected ,app_led_off +4682 df20000b arg 11 ,loopcnt +4683 d8c048e0 arg mem_shutter_soft_swtich_led_struct_temp ,contr +4684 d8a048c9 arg mem_shutter_led_struct_app_led ,contw +4685 20207f01 branch memcpy + +shutter_le_bb_event_timer: +4686 2040468c call shutter_check_sleep_timer +4687 20404693 call shutter_check_power_off_timer +4688 2040469e call classic_shutter_check_unplug_timer +4689 204046a6 call classic_shutter_hid_handshake_timer +468a 204046a9 call classic_shutter_hid_disconn_timer +468b 202046ac branch ble_shutter_reconn_timer + +shutter_check_sleep_timer: +468c da6046db arg mem_shutter_sleep_timer ,regc +468d da40468f arg shutter_sleep_timeout ,regb +468e 20203374 branch timer_single_step_2b + +shutter_sleep_timeout: +468f 7046df02 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +4690 20403408 call app_led_off +4691 204046f4 call shutter_disconnect_current_connection +4692 2020480b branch shutter_wait_power_off + +shutter_check_power_off_timer: +4693 da6048ec arg mem_shutter_power_off_timer ,regc +4694 da404696 arg shutter_check_power_off_timeout ,regb +4695 2020336d branch timer_single_step + +shutter_check_power_off_timeout: +4696 68014682 fetch 2 ,mem_ui_state_map +4697 c284c80b bbit1 ui_state_ble_connected ,shutter_wait_power_off +4698 c280480b bbit1 ui_state_bt_connected ,shutter_wait_power_off +4699 6800c8c9 fetch 1 ,mem_shutter_led_struct_app_led_type +469a c000c80b beq ui_led_state_blink_start ,shutter_wait_power_off +469b c002480b beq ui_led_state_blink_lighting ,shutter_wait_power_off +469c c002c80b beq ui_led_state_blink_darking ,shutter_wait_power_off +469d 2020340a branch app_enter_hibernate + +classic_shutter_check_unplug_timer: +469e da6046ac arg mem_classic_shutter_cable_unplug_conut ,regc +469f da4046a1 arg classic_shutter_unplug_timeout ,regb +46a0 2020336d branch timer_single_step + +classic_shutter_unplug_timeout: +46a1 6800827f fetch 1 ,mem_control_tasks +46a2 79207e00 set1 l2cap_disconnect_interrupt ,pdata +46a3 79207e07 set1 l2cap_disconnect_control ,pdata +46a4 6000827f store 1 ,mem_control_tasks +46a5 20600000 rtn + +classic_shutter_hid_handshake_timer: +46a6 da604680 arg mem_hid_handshake_timer_count ,regc +46a7 da40463c arg classic_shutter_process_hid_handshake ,regb +46a8 2020336d branch timer_single_step + +classic_shutter_hid_disconn_timer: +46a9 da6046ad arg mem_classic_shutter_hid_disconn_count ,regc +46aa da4033e9 arg app_bt_disconnect ,regb +46ab 2020336d branch timer_single_step + +ble_shutter_reconn_timer: +46ac 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +46ad c1808000 rtnne ss_state_power_on +46ae da6046b7 arg mem_ble_shutter_reconn_timer ,regc +46af da4046c2 arg shutter_start_bluetooth_discovery ,regb +46b0 20203374 branch timer_single_step_2b + +shutter_process_idle: +46b1 2040473a call shutter_send_data_to_master +46b2 20206978 branch keyscan_key_process + +shutter_process_lpm_before: +46b3 2020696c branch keyscan_process_lpm_before + +shutter_le_before_hibernate: +46b4 20406835 call gpio_set_before_lpm_common +46b5 202046b3 branch shutter_process_lpm_before + +shutter_stop_bluetooth_discovery: +46b6 6800c69a fetch 1 ,mem_shutter_bluetooth_type +46b7 c280c6be bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery +46b8 c28046ba bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +46b9 20600000 rtn + +ble_shutter_stop_bluetooth_discovery: +46ba 680146d7 fetch 2 ,mem_ble_shutter_connect_timeout +46bb 600146d9 store 2 ,mem_shutter_sleep_timeout +46bc 600146db store 2 ,mem_shutter_sleep_timer +46bd 202033f8 branch app_ble_stop_adv + +classic_shutter_stop_bluetooth_discovery: +46be 680146d3 fetch 2 ,mem_classic_shutter_connect_timeout +46bf 600146d9 store 2 ,mem_shutter_sleep_timeout +46c0 600146db store 2 ,mem_shutter_sleep_timer +46c1 202033f0 branch app_bt_stop_discovery + +shutter_start_bluetooth_discovery: +46c2 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +46c3 c1808000 rtnne ss_state_power_on +46c4 6800c69a fetch 1 ,mem_shutter_bluetooth_type +46c5 c280c6c8 bbit1 classic_shutter ,classic_shutter_start_discovery +46c6 c28046cc bbit1 ble_shutter ,ble_shutter_start_discovery +46c7 20600000 rtn + +classic_shutter_start_discovery: +46c8 680146d1 fetch 2 ,mem_classic_shutter_discovery_timeout , +46c9 600146d9 store 2 ,mem_shutter_sleep_timeout +46ca 600146db store 2 ,mem_shutter_sleep_timer +46cb 202033eb branch app_bt_start_discovery_short + +ble_shutter_start_discovery: +46cc 68014682 fetch 2 ,mem_ui_state_map +46cd c3848000 rtnbit1 ui_state_ble_connected +46ce 680146d5 fetch 2 ,mem_ble_shutter_discovery_timeout +46cf 600146d9 store 2 ,mem_shutter_sleep_timeout +46d0 600146db store 2 ,mem_shutter_sleep_timer +46d1 680146b3 fetch 2 ,mem_ble_shutter_discovery_adv_interval +46d2 204046f0 call shutter_ble_adv_interval_set +46d3 20403404 call app_led_start_blink +46d4 680246bd fetch 4 ,mem_ble_shutter_discovery_blink_on_time +46d5 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time +46d6 68014682 fetch 2 ,mem_ui_state_map +46d7 c3858000 rtnbit1 ui_state_ble_adv +46d8 202033fa branch app_ble_start_adv + +shutter_start_reconnect: +46d9 6800c6df fetch 1 ,mem_shutter_soft_switch_power_state +46da c1808000 rtnne ss_state_power_on +46db 6800c69a fetch 1 ,mem_shutter_bluetooth_type +46dc c280c6df bbit1 classic_shutter ,classic_shutter_start_reconnect +46dd c28046e4 bbit1 ble_shutter ,ble_shutter_start_reconnect +46de 20600000 rtn + +classic_shutter_start_reconnect: +46df 204046f8 call app_check_reconn_target +46e0 203a46c2 branch shutter_start_bluetooth_discovery ,blank +46e1 20403406 call app_led_on +46e2 204033f0 call app_bt_stop_discovery +46e3 202033e1 branch app_bt_start_reconnect + +ble_shutter_start_reconnect: +46e4 680146b7 fetch 2 ,mem_ble_shutter_reconn_timer +46e5 680946b5 fetcht 2 ,mem_ble_shutter_reconn_timeout +46e6 600946b7 storet 2 ,mem_ble_shutter_reconn_timer +46e7 247a0000 nrtn blank +46e8 680146b1 fetch 2 ,mem_ble_shutter_reconn_dav_interval +46e9 204046f0 call shutter_ble_adv_interval_set +46ea 20403404 call app_led_start_blink +46eb 680246b9 fetch 4 ,mem_ble_shutter_reconn_blink_on_time +46ec 600248cc store 4 ,mem_shutter_led_struct_app_led_on_time +46ed 68014682 fetch 2 ,mem_ui_state_map +46ee c3858000 rtnbit1 ui_state_ble_adv +46ef 202033fa branch app_ble_start_adv + +shutter_ble_adv_interval_set: +46f0 60014154 store 2 ,mem_lpm_interval +46f1 1fe0fffc increase -4 ,pdata +46f2 60014482 store 2 ,mem_le_adv_interval +46f3 20600000 rtn + +shutter_disconnect_current_connection: +46f4 68014682 fetch 2 ,mem_ui_state_map +46f5 c284b402 bbit1 ui_state_ble_connected ,app_ble_disconnect +46f6 c28033e9 bbit1 ui_state_bt_connected ,app_bt_disconnect +46f7 202046b6 branch shutter_stop_bluetooth_discovery + +app_check_reconn_target: +46f8 6800c217 fetch 1 ,mem_nv_data_number +46f9 1fe27200 copy pdata ,loopcnt +46fa 68014215 fetch 2 ,mem_nv_data_ptr +46fb 1fe22200 copy pdata ,rega + +app_check_reconn_target_loop: +46fc ea210000 ifetch 2 ,rega +46fd c0004701 beq 0 ,found_reconn_device +46fe 1a20a222 increase nv_data_len ,rega +46ff c20046fc loop app_check_reconn_target_loop +4700 20207ff1 branch enable_blank + +found_reconn_device: +4701 e8c30000 ifetch 6 ,contr +4702 600341d0 store 6 ,mem_hci_plap +4703 18c08c0a increase 10 ,contr +4704 d8a041be arg mem_link_key ,contw +4705 20407ebf call memcpy16 +4706 204067d7 call check_link_key_load +4707 20207fef branch disable_blank + +shutter_check_data_enable: +4708 20407fe9 call disable_user +4709 68014682 fetch 2 ,mem_ui_state_map +470a c280470d bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable +470b c284c710 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +470c 20600000 rtn + +shutter_check_bt_data_enable: +470d 6800c253 fetch 1 ,mem_hid_interrupt_state +470e c19f8000 rtnne 0x3f +470f 20207fe7 branch enable_user + +shutter_check_ble_data_enable: +4710 6800c6b0 fetch 1 ,mem_ble_shutter_enable_notify +4711 207a0000 rtn blank +4712 20207fe7 branch enable_user + +shutter_check_bluetooth_conn: +4713 20407fe9 call disable_user +4714 68014682 fetch 2 ,mem_ui_state_map +4715 c3800000 rtnbit1 ui_state_bt_connected +4716 c3848000 rtnbit1 ui_state_ble_connected +4717 20207fe7 branch enable_user + +shutter_change_bluetooth_status_bt_disconn: +4718 6800c69a fetch 1 ,mem_shutter_bluetooth_type +4719 c280c71c bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn +471a c280471f bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +471b 20600000 rtn + +classic_shutter_change_bluetooth_status_bt_disconn: +471c 6800c093 fetch 1 ,mem_scan_mode +471d c1818000 rtnne 0x03 +471e 202046d9 branch shutter_start_reconnect + +ble_shutter_change_bluetooth_status_bt_disconn: +471f 202046d9 branch shutter_start_reconnect + +shutter_check_send_data: +4720 78567c00 disable user2 +4721 680146d9 fetch 2 ,mem_shutter_sleep_timeout +4722 600146db store 2 ,mem_shutter_sleep_timer +4723 20404713 call shutter_check_bluetooth_conn +4724 20344718 branch shutter_change_bluetooth_status_bt_disconn ,user +4725 20404708 call shutter_check_data_enable +4726 24740000 nrtn user +4727 78367c00 enable user2 +4728 20600000 rtn + +shutter_key_change: +4729 20404720 call shutter_check_send_data +472a 24760000 nrtn user2 +472b 1a227e00 deposit rega +472c 203a4730 branch shutter_key_release ,blank + +shutter_key_press: +472d 20403406 call app_led_on +472e da6046f1 arg mem_key0_press ,regc +472f 20204732 branch push_queue_press_or_release + +shutter_key_release: +4730 20403408 call app_led_off +4731 da604719 arg mem_key0_release ,regc + +push_queue_press_or_release: +4732 dfe00005 arg max_queue_num ,pdata +4733 98effe00 imul32 queue ,pdata +4734 9a60a600 iadd regc ,regc + +push_buffer_in_queue: +4735 ea608000 ifetch 1 ,regc +4736 207a0000 rtn blank +4737 20404762 call queue_push_one_byte +4738 1a60a601 increase 1 ,regc +4739 20204735 branch push_buffer_in_queue + +shutter_send_data_to_master: +473a 68014682 fetch 2 ,mem_ui_state_map +473b c284c73e bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +473c c280474e bbit1 ui_state_bt_connected ,pop_queue_to_classic_data +473d 20600000 rtn + +pop_queue_to_ble_data: +473e 20405892 call le_fifo_check_nearly_full +473f 247a0000 nrtn blank +4740 20404765 call queue_pop_one_byte +4741 24740000 nrtn user +4742 1fe0ffff pincrease -1 +4743 1feffe05 mul32 pdata ,shutter_ble_data_buffer ,pdata +4744 d8404741 arg mem_ble_data_buffer1 ,temp +4745 98408c00 iadd temp ,contr + +le_send_notify_from_list: +4746 e8c08000 ifetch 1 ,contr +4747 1fe22200 copy pdata ,rega +4748 e8c90000 ifetcht 2 ,contr +4749 20407ea5 call store_contr +474a 20405a64 call le_att_malloc_tx_notify +474b 1a227200 copy rega ,loopcnt +474c 20407e9f call get_contr +474d 20207f01 branch memcpy + +pop_queue_to_classic_data: +474e 20405271 call l2cap_malloc_is_fifo_nearly_full +474f 247a0000 nrtn blank +4750 20404765 call queue_pop_one_byte +4751 24740000 nrtn user +4752 1fe0ffff pincrease -1 +4753 1feffe05 mul32 pdata ,shutter_classic_data_buffer ,pdata +4754 d84047a0 arg mem_classic_data_buffer1 ,temp +4755 98408c00 iadd temp ,contr +4756 e8c28000 ifetch 5 ,contr +4757 6002c79b store 5 ,mem_classic_data_buffer + +classic_send_hid_data: +4758 6800c79b fetch 1 ,mem_classic_data_buffer +4759 1fe22200 copy pdata ,rega +475a 20404d63 call hid_malloc_tx_buff +475b 6801424e fetch 2 ,mem_hid_int_remote_cid +475c e0a10000 istore 2 ,contw +475d 580000a1 setarg 0xa1 +475e e0a08000 istore 1 ,contw +475f 6802479c fetch 4 ,mem_classic_data_buffer + 1 +4760 e0a48000 istore 9 ,contw +4761 20600000 rtn + +queue_push_one_byte: +4762 60008a9a store 1 ,mem_pdatatemp +4763 da200a9a arg mem_pdatatemp ,rega +4764 20207e3d branch queue_push + +queue_pop_one_byte: +4765 da200a9a arg mem_pdatatemp ,rega +4766 20407e54 call queue_pop +4767 24740000 nrtn user +4768 68008a9a fetch 1 ,mem_pdatatemp +4769 20600000 rtn + +ble_shutter_receive_data: +476a 68010478 fetch 2 ,mem_le_att_handle +476b c00c465f beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +476c 20600000 rtn + +shutter_init_param: +476d 58000002 setarg 0x02 +476e 6000c8eb store 1 ,mem_shutter_power_off_timeout +476f 58200008 setarg 0x00200008 +4770 600246c1 store 4 ,mem_ble_shutter_interval_min +4771 592c0005 setarg 0x012c0005 +4772 e0a20000 istore 4 ,contw +4773 7044a617 jam 0x17 ,mem_le_local_mtu +4774 5800001b setarg 0x1b +4775 600144fa store 2 ,mem_le_pairing_handle +4776 20405810 call le_set_config_fixed_ltk +4777 2040582c call le_set_fixed_ltk +4778 20405839 call le_set_justwork +4779 20205818 branch le_set_config_read_authentication + +shutter_load_buffer_config_form_datarom: +477a df200028 arg ble_key_value_list_size ,loopcnt +477b d8a04741 arg mem_ble_data_buffer1 ,contw +477c d8c0949f arg ble_shutter_key_value_list ,contr +477d 20407ef4 call memcpy_fast +477e df200028 arg bt_key_value_list_size ,loopcnt +477f d8a047a0 arg mem_classic_data_buffer1 ,contw +4780 d8c094c7 arg classic_shutter_key_value_list ,contr +4781 20207ef4 branch memcpy_fast + +shutter_load_ble_gatt_form_datarom: +4782 df20017e arg ble_gatt_list_size ,loopcnt +4783 d8c0913a arg ble_shutter_gatt_list ,contr +4784 20207ef4 branch memcpy_fast + +shutter_load_bt_sdp_form_datarom: +4785 df2001e7 arg bt_sdp_list_size ,loopcnt +4786 d8c092b8 arg classic_shutter_sdp_list ,contr +4787 20207ef4 branch memcpy_fast + +shutter_init_bluetooth_config: +4788 204047ae call shutter_check_load_config_flag +4789 24740000 nrtn user +478a 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 +478b 20404790 call shutter_init_bluetooth_config_gpio_input +478c 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 +478d 20404790 call shutter_init_bluetooth_config_gpio_input +478e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 +478f 20204790 branch shutter_init_bluetooth_config_gpio_input + +shutter_init_bluetooth_config_gpio_input: +4790 207a0000 rtn blank +4791 1fe18480 or pdata ,0x80 ,temp +4792 202067f9 branch gpio_config_input_nowake + +shutter_load_bluetooth_config: +4793 204047ae call shutter_check_load_config_flag +4794 24740000 nrtn user +4795 20404797 call shutter_load_bluetooth_config_label +4796 202047b4 branch shutter_load_bluetooth_config_by_otp + +shutter_load_bluetooth_config_label: +4797 da200000 arg 0 ,rega +4798 6800c69f fetch 1 ,mem_shutter_config_select_gpio1 +4799 204047a9 call shutter_load_bluetooth_config_read_gpio_input +479a 7d3a2200 nsetflag blank ,0 ,rega +479b 6800c6a0 fetch 1 ,mem_shutter_config_select_gpio2 +479c 204047a9 call shutter_load_bluetooth_config_read_gpio_input +479d 7d3a2201 nsetflag blank ,1 ,rega +479e 6800c6a1 fetch 1 ,mem_shutter_config_select_gpio3 +479f 204047a9 call shutter_load_bluetooth_config_read_gpio_input +47a0 7d3a2202 nsetflag blank ,2 ,rega +47a1 1a227e00 copy rega ,pdata +47a2 6000c6a9 store 1 ,mem_shutter_config_label +47a3 6800c69e fetch 1 ,mem_shutter_config_size +47a4 9a2ffe00 imul32 rega ,pdata +47a5 6809469c fetcht 2 ,mem_shutter_config_otp_base_address +47a6 9840fe00 iadd temp ,pdata +47a7 600146aa store 2 ,mem_shutter_config_otp_addr +47a8 20600000 rtn + +shutter_load_bluetooth_config_read_gpio_input: +47a9 207a0000 rtn blank +47aa 1fe18480 or pdata ,0x80 ,temp +47ab 2040681d call gpio_get_bit +47ac 2420fff1 nbranch enable_blank ,true +47ad 20207fef branch disable_blank + +shutter_check_load_config_flag: +47ae 20407fe9 call disable_user +47af 6800c6a8 fetch 1 ,mem_shutter_config_user_size +47b0 247a0000 nrtn blank +47b1 6800c69b fetch 1 ,mem_shutter_config_enable +47b2 207a0000 rtn blank +47b3 20207fe7 branch enable_user + +shutter_load_bluetooth_config_by_otp: +47b4 2040666a call otp_enable_chgpump +47b5 680146aa fetch 2 ,mem_shutter_config_otp_addr +47b6 da200ac2 arg mem_shutter_config_data_temp ,rega +47b7 6808c69e fetcht 1 ,mem_shutter_config_size +47b8 204066b3 call otpd_read_data +47b9 2040666d call otp_disable_chgpump + +shutter_load_bluetooth_config_store_name: +47ba 68008ac2 fetch 1 ,mem_shutter_config_data_temp +47bb 1fe27200 copy pdata ,loopcnt +47bc 6000c3af store 1 ,mem_le_name_len +47bd 20407ef4 call memcpy_fast +47be 68008ac2 fetch 1 ,mem_shutter_config_data_temp +47bf 1fe27200 copy pdata ,loopcnt +47c0 6000c515 store 1 ,mem_local_name_length +47c1 20407ef4 call memcpy_fast +47c2 e8c08000 ifetch 1 ,contr +47c3 6000c6e6 store 1 ,mem_shutter_key_num +47c4 e8c08000 ifetch 1 ,contr +47c5 6000c6dd store 1 ,mem_shutter_hard_soft_switch_case +47c6 20600000 rtn + +shutter_load_bluetooth_config_by_eeprom: +47c7 6800c69a fetch 1 ,mem_shutter_bluetooth_type +47c8 c4008000 rtnbit0 classic_shutter +47c9 d8400003 arg 3 ,temp +47ca 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr +47cb 1fe22400 copy pdata ,regb +47cc da2046a6 arg mem_shutter_config_eeprom_start_flag ,rega +47cd 204065df call iicd_read_eep_data +47ce 680946a6 fetcht 2 ,mem_shutter_config_eeprom_start_flag +47cf 58001b3a setarg shutter_eeprom_config_crc +47d0 98467c00 isub temp ,null +47d1 24628000 nrtn zero +47d2 6800c6a8 fetch 1 ,mem_shutter_config_user_size +47d3 207a0000 rtn blank +47d4 1fe20400 copy pdata ,temp +47d5 680146a4 fetch 2 ,mem_shutter_config_eeprom_offset_addr +47d6 1fe0a403 add pdata ,3 ,regb +47d7 da200ac2 arg mem_shutter_config_data_temp ,rega +47d8 204065df call iicd_read_eep_data +47d9 202047e8 branch shutter_store_config + +shutter_load_bluetooth_config_by_user_config: +47da 680146a2 fetch 2 ,mem_shutter_config_user_otp_address +47db 207a0000 rtn blank +47dc 2040666a call otp_enable_chgpump +47dd d8400001 arg 1 ,temp +47de da2046a8 arg mem_shutter_config_user_size ,rega +47df 204066b3 call otpd_read_data +47e0 6800c6a8 fetch 1 ,mem_shutter_config_user_size +47e1 207a0000 rtn blank +47e2 680146a2 fetch 2 ,mem_shutter_config_user_otp_address +47e3 1fe0fe01 pincrease 1 +47e4 da200ac2 arg mem_shutter_config_data_temp ,rega +47e5 6808c6a8 fetcht 1 ,mem_shutter_config_user_size +47e6 204066b3 call otpd_read_data +47e7 2040666d call otp_disable_chgpump + +shutter_store_config: +47e8 204047ba call shutter_load_bluetooth_config_store_name + +shutter_load_bluetooth_config_custom: +47e9 e8c10000 ifetch 2 ,contr +47ea 207a0000 rtn blank +47eb 1fe20a00 copy pdata ,contw +47ec e8c88000 ifetcht 1 ,contr +47ed 18427200 copy temp ,loopcnt +47ee 20407f01 call memcpy +47ef 202047e9 branch shutter_load_bluetooth_config_custom + +shutter_random_mac_addr: +47f0 6800c69a fetch 1 ,mem_shutter_bluetooth_type +47f1 c4008000 rtnbit0 classic_shutter +47f2 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr +47f3 1fe22400 copy pdata ,regb +47f4 d8400004 arg 4 ,temp +47f5 da200ac2 arg mem_shutter_random_mac_data_temp ,rega +47f6 204065df call iicd_read_eep_data +47f7 68008ac2 fetch 1 ,mem_shutter_random_mac_data_temp +47f8 c080c7f9 bne 1 ,shutter_write_random_mac_addr_to_eeprom + +shutter_write_random_mac_addr_to_eeprom: +47f9 58000001 setarg 1 +47fa 60008ac2 store 1 ,mem_shutter_random_mac_data_temp +47fb 18007203 force 3 ,loopcnt +47fc 2040630d call generate_random_loop +47fd 680146ae fetch 2 ,mem_classic_shutter_random_mac_offset_addr +47fe 1fe22400 copy pdata ,regb +47ff d8400004 arg 4 ,temp +4800 da200ac2 arg mem_shutter_random_mac_data_temp ,rega +4801 20406606 call iicd_write_eep_data + +shutter_write_random_mac_addr: +4802 68018ac3 fetch 3 ,mem_shutter_random_mac_data_temp + 1 +4803 6001c0a0 store 3 ,mem_lap +4804 6001c4a0 store 3 ,mem_le_lap +4805 20600000 rtn + +shutter_soft_swtich_power_on: +4806 202046d9 branch shutter_start_reconnect + +shutter_soft_swtich_power_off: +4807 da200000 arg 0 ,rega +4808 da6048d4 arg mem_shutter_power_off_led_style ,regc +4809 20407d24 call ui_led_set_style_global +480a 204046f4 call shutter_disconnect_current_connection + +shutter_wait_power_off: +480b 6800c8eb fetch 1 ,mem_shutter_power_off_timeout +480c 6000c8ec store 1 ,mem_shutter_power_off_timer +480d 20600000 rtn + +ui_soft_swtich_init: +480e 58000000 setarg ss_state_power_up +480f 20404816 call ui_soft_swtich_init_power_on_time +4810 70467901 jam ui_button_state_up ,mem_ui_button_last_state +4811 20407cd3 call ui_button_init +4812 20407cdd call ui_button_polling +4813 68014682 fetch 2 ,mem_ui_state_map +4814 c3860000 rtnbit1 ui_state_btn_down +4815 2020340a branch app_enter_hibernate + +ui_soft_swtich_init_power_on_time: +4816 6809423f fetcht 2 ,mem_power_param_ptr +4817 e0408000 istore 1 ,temp +4818 e8a08000 ifetch 1 ,contw +4819 6000c685 store 1 ,mem_ui_button_timeout +481a 20600000 rtn + +ui_soft_switch_botton_up: +481b 6801423f fetch 2 ,mem_power_param_ptr +481c efe08000 ifetch 1 ,pdata +481d c1800000 rtnne ss_state_power_up +481e 2020340a branch app_enter_hibernate + +ui_soft_switch_botton_long_press: +481f 6809423f fetcht 2 ,mem_power_param_ptr +4820 e8408000 ifetch 1 ,temp +4821 c000c82a beq ss_state_power_on ,ui_soft_switch_power_off + +ui_soft_switch_power_on: +4822 58000001 setarg ss_state_power_on +4823 6809423f fetcht 2 ,mem_power_param_ptr +4824 e0408000 istore 1 ,temp +4825 18408c02 add temp ,ss_power_off_time ,contr +4826 e8c08000 ifetch 1 ,contr +4827 e0a08000 istore 1 ,mem_ui_button_timeout +4828 e8c10000 ifetch 2 ,contr +4829 20207f9c branch callback_func + +ui_soft_switch_power_off: +482a 58000002 setarg ss_state_power_off +482b 20404816 call ui_soft_swtich_init_power_on_time +482c 18408c05 add temp ,ss_power_off_cb ,contr +482d e8c10000 ifetch 2 ,contr +482e 203a340a branch app_enter_hibernate ,blank +482f 20207f9c branch callback_func + +shutter_byteswap: +4830 60030101 store 6 ,mem_tmp_buffer +4831 68008101 fetch 1 ,mem_tmp_buffer +4832 6000810c store 1 ,mem_tmp_buffer + 11 +4833 e8c08000 ifetch 1 ,contr +4834 6000810b store 1 ,mem_tmp_buffer + 10 +4835 e8c08000 ifetch 1 ,contr +4836 6000810a store 1 ,mem_tmp_buffer + 9 +4837 e8c08000 ifetch 1 ,contr +4838 60008109 store 1 ,mem_tmp_buffer + 8 +4839 e8c08000 ifetch 1 ,contr +483a 60008108 store 1 ,mem_tmp_buffer + 7 +483b e8c08000 ifetch 1 ,contr +483c 60008107 store 1 ,mem_tmp_buffer + 6 +483d 68030107 fetch 6 ,mem_tmp_buffer + 6 +483e 20600000 rtn + +shutter_random_addr_by_otp: +483f 204068a2 call load_adc_init +4840 6800c223 fetch 1 ,mem_1v_adc_io_data +4841 6000c4a0 store 1 ,mem_le_lap +4842 6800c225 fetch 1 ,mem_5v_adc_hvin_data +4843 e0a08000 istore 1 ,contw +4844 6800c227 fetch 1 ,mem_3v_adc_vinlpm_data +4845 e0a08000 istore 1 ,contw +4846 6801c4a0 fetch 3 ,mem_le_lap +4847 6001c0a0 store 3 ,mem_lap +4848 20600000 rtn + +sim_iic_read_eep_data: +4849 68014203 fetch 2 ,mem_eeprom_base +484a 9a40fe00 iadd regb ,pdata +484b 1ff0fe00 byteswap pdata ,pdata +484c 600101f7 store 2 ,mem_addr_mi +484d 18422400 copy temp ,regb +484e 2040489b call sim_iic_start +484f 580000a0 setarg 0xa0 +4850 2040488d call sim_iic_send_byte +4851 680081f7 fetch 1 ,mem_addr_mi +4852 2040488d call sim_iic_send_byte +4853 c5144856 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k +4854 680081f8 fetch 1 ,mem_addr_mi + 1 +4855 2040488d call sim_iic_send_byte + +sim_iic_read_eep_data_2k: +4856 204048a1 call sim_iic_stop +4857 2040489b call sim_iic_start +4858 580000a1 setarg 0xa1 +4859 2040488d call sim_iic_send_byte + +sim_iic_read_eep_data_loop: +485a 2040487f call sim_iic_read_byte +485b e2208000 istore 1 ,rega +485c 1a20a201 increase 1 ,rega +485d 1a40a5ff increase -1 ,regb +485e 2422c85a nbranch sim_iic_read_eep_data_loop ,zero +485f 202048a1 branch sim_iic_stop + +sim_iic_write_eep_data: +4860 1a50fe00 byteswap regb ,pdata +4861 600101f7 store 2 ,mem_addr_mi +4862 18422400 copy temp ,regb +4863 2040489b call sim_iic_start +4864 580000a0 setarg 0xa0 +4865 2040488d call sim_iic_send_byte +4866 680081f7 fetch 1 ,mem_addr_mi +4867 2040488d call sim_iic_send_byte +4868 c514486b bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop +4869 680081f8 fetch 1 ,mem_addr_mi + 1 +486a 2040488d call sim_iic_send_byte + +sim_iic_write_eep_data_loop: +486b ea208000 ifetch 1 ,rega +486c 2040488d call sim_iic_send_byte +486d 1a20a201 increase 1 ,rega +486e 1a40a5ff increase -1 ,regb +486f 2422c86b nbranch sim_iic_write_eep_data_loop ,zero +4870 202048a1 branch sim_iic_stop + +sim_iic_wait_ack: +4871 df20000a arg 10 ,loopcnt +4872 204048be call sim_iic_release_sda +4873 204048a6 call sim_iic_scl_output_high +4874 204048d2 call sim_iic_delay + +sim_iic_wait_ack_loop: +4875 204048c7 call sim_iic_read_sda_level +4876 203a48a9 branch sim_iic_scl_output_low ,blank +4877 c2004875 loop sim_iic_wait_ack_loop +4878 202048a9 branch sim_iic_scl_output_low + +sim_iic_ack_slave: +4879 204048a9 call sim_iic_scl_output_low +487a 204048af call sim_iic_sda_output_low +487b 204048d2 call sim_iic_delay +487c 204048a6 call sim_iic_scl_output_high +487d 204048d2 call sim_iic_delay +487e 202048a9 branch sim_iic_scl_output_low + +sim_iic_read_byte: +487f df200008 arg 8 ,loopcnt +4880 da600000 arg 0 ,regc +4881 204048be call sim_iic_release_sda + +sim_iic_read_byte_loop: +4882 204048a6 call sim_iic_scl_output_high +4883 204048d2 call sim_iic_delay +4884 1a63a600 lshift regc ,regc +4885 204048c7 call sim_iic_read_sda_level +4886 9a60a600 iadd regc ,regc +4887 204048d2 call sim_iic_delay +4888 204048a9 call sim_iic_scl_output_low +4889 c2004882 loop sim_iic_read_byte_loop +488a 20404879 call sim_iic_ack_slave +488b 1a627e00 copy regc ,pdata +488c 20600000 rtn + +sim_iic_send_byte: +488d df200008 arg 8 ,loopcnt +488e 1fe22600 copy pdata ,regc +488f 204048a9 call sim_iic_scl_output_low + +sim_iic_send_byte_loop: +4890 2a6ffe07 isolate1 7 ,regc +4891 2040c8ac call sim_iic_sda_output_high ,true +4892 2440c8af ncall sim_iic_sda_output_low ,true +4893 1a63a600 lshift regc ,regc +4894 204048d2 call sim_iic_delay +4895 204048a6 call sim_iic_scl_output_high +4896 204048d2 call sim_iic_delay +4897 204048a9 call sim_iic_scl_output_low +4898 204048d2 call sim_iic_delay +4899 c2004890 loop sim_iic_send_byte_loop +489a 20204871 branch sim_iic_wait_ack + +sim_iic_start: +489b 204048ac call sim_iic_sda_output_high +489c 204048a6 call sim_iic_scl_output_high +489d 204048d2 call sim_iic_delay +489e 204048af call sim_iic_sda_output_low +489f 204048d2 call sim_iic_delay +48a0 202048a9 branch sim_iic_scl_output_low + +sim_iic_stop: +48a1 204048af call sim_iic_sda_output_low +48a2 204048a6 call sim_iic_scl_output_high +48a3 204048d2 call sim_iic_delay +48a4 204048ac call sim_iic_sda_output_high +48a5 202048d2 branch sim_iic_delay + +sim_iic_scl_output_high: +48a6 78347c00 enable user +48a7 6800cffe fetch 1 ,sim_iic_scl_gpio_num +48a8 202048b2 branch sim_iic_config_gpio + +sim_iic_scl_output_low: +48a9 78547c00 disable user +48aa 6800cffe fetch 1 ,sim_iic_scl_gpio_num +48ab 202048b2 branch sim_iic_config_gpio + +sim_iic_sda_output_high: +48ac 78347c00 enable user +48ad 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48ae 202048b2 branch sim_iic_config_gpio + +sim_iic_sda_output_low: +48af 78547c00 disable user +48b0 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48b1 202048b2 branch sim_iic_config_gpio + +sim_iic_config_gpio: +48b2 1fe10e07 and pdata ,0x07 ,queue +48b3 1fe97e00 rshift3 pdata ,pdata +48b4 d8408070 arg core_gpio_oe0 ,temp +48b5 98408400 iadd temp ,temp +48b6 e8408000 ifetch 1 ,temp +48b7 f9207e00 qset1 pdata +48b8 e0408000 istore 1 ,temp +48b9 18408404 increase 4 ,temp +48ba e8408000 ifetch 1 ,temp +48bb f9347e00 qsetflag user ,pdata +48bc e0408000 istore 1 ,temp +48bd 20600000 rtn + +sim_iic_release_sda: +48be 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48bf 1fe10e07 and pdata ,0x07 ,queue +48c0 1fe97e00 rshift3 pdata ,pdata +48c1 d8408070 arg core_gpio_oe0 ,temp +48c2 98408400 iadd temp ,temp +48c3 e8408000 ifetch 1 ,temp +48c4 f93ffe00 qset0 pdata +48c5 e0408000 istore 1 ,temp +48c6 20600000 rtn + +sim_iic_read_sda_level: +48c7 20000004 nop 4 +48c8 6800cfff fetch 1 ,sim_iic_sda_gpio_num +48c9 1fe10e07 and pdata ,0x07 ,queue +48ca 1fe97e00 rshift3 pdata ,pdata +48cb d840811c arg core_gpio_in ,temp +48cc 98408400 iadd temp ,temp +48cd 58000000 setarg 0 +48ce e8488000 ifetcht 1 ,temp +48cf a84fffff qisolate1 temp +48d0 7920fe00 setflag true ,0 ,pdata +48d1 20600000 rtn + +sim_iic_delay: +48d2 20600000 rtn + +usb_isr: +48d3 44fb401e bpatch patch1e_6 ,mem_patch1e +48d4 68108a26 hfetch 1 ,core_usb_status +48d5 2feffe07 isolate1 7 ,pdata +48d6 2040c8ea call usb_init ,true +48d7 2040492e call usb_nak_state_judge +48d8 68108a26 hfetch 1 ,core_usb_status +48d9 60008b22 store 1 ,mem_usb_status +48da 68108a27 hfetch 1 ,core_usb_fifo_empty +48db 60008b23 store 1 ,mem_usb_fifo_empty +48dc 60108a27 hstore 1 ,core_usb_fifo_empty +48dd 1fe47e00 pinvert +48de 68088d37 fetcht 1 ,mem_usb_tx_wait +48df 98417e00 iand temp ,pdata +48e0 60008d37 store 1 ,mem_usb_tx_wait +48e1 708a26e0 jam 0xe0 ,core_usb_status +48e2 68008b23 fetch 1 ,mem_usb_fifo_empty +48e3 2fe00201 compare 0x1 ,pdata ,0x1 +48e4 2040c941 call usb0_fifo_empty ,true +48e5 68008b22 fetch 1 ,mem_usb_status +48e6 2fe00201 compare 0x1 ,pdata ,0x1 +48e7 2040c94a call usb_status1 ,true +48e8 20404b61 call usb_tx +48e9 20204903 branch usb_nak_state + +usb_init: +48ea 44fbc01e bpatch patch1e_7 ,mem_patch1e +48eb 20404919 call usb_init_param +48ec 708a0000 jam 0x00 ,core_usb_config +48ed 20002710 nop 10000 +48ee 708a10c0 jam 0xc0 ,core_usb_trig +48ef 68110050 hfetch 2 ,core_clkoff +48f0 793ffe0a set0 clock_off_usb ,pdata +48f1 60110050 hstore 2 ,core_clkoff +48f2 708a003c jam 0x3c ,core_usb_config +48f3 708a26ff jam 0xff ,core_usb_status +48f4 708a27ff jam 0xff ,core_usb_fifo_empty +48f5 708a0400 jam 0 ,core_usb_addr +48f6 700c6b02 jam dev_default ,mem_usb0_state +48f7 58000d9d setarg mem_usb_clear_mem_end +48f8 d8a00c6e arg mem_usb_clear_mem_start ,contw +48f9 98a67200 isub contw ,loopcnt +48fa 20207ed4 branch clear_mem + +usb_offline_check_init: +48fb 68088c6c fetcht 1 ,mem_usb_offline_check_gpio +48fc 202067fb branch gpio_config_input + +usb_offline_state: +48fd 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag +48fe 207a0000 rtn blank +48ff 68088c6c fetcht 1 ,mem_usb_offline_check_gpio +4900 2040681d call gpio_get_bit +4901 2020c8ea branch usb_init ,true +4902 20600000 rtn + +usb_nak_state: +4903 d8e00000 arg timer_nak ,queue +4904 20407f16 call timer_check +4905 247a0000 nrtn blank +4906 68008d46 fetch 1 ,mem_usb_wakestate_onetime_flag +4907 247a0000 nrtn blank +4908 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag +4909 245a4bb7 ncall usb_mac_wakeup_judge ,blank +490a 20600000 rtn + +usb_mem_devicedesc_init: +490b d8a00b68 arg mem_devicedesc ,contw +490c 38011212 setsect 0 ,0x11212 +490d 38048000 setsect 1 ,0x8000 +490e 38080000 setsect 2 ,0x0 +490f 380d0000 setsect 3 ,0x10000 +4910 e0a48000 istore 9 ,contw +4911 38022412 setsect 0 ,0x22412 +4912 38048604 setsect 1 ,0x8604 +4913 38081000 setsect 2 ,0x1000 +4914 380c0008 setsect 3 ,0x8 +4915 e0a48000 istore 9 ,contw +4916 38000001 setsect 0 ,0x1 +4917 e0a08000 istore 1 ,contw +4918 20600000 rtn + +usb_init_param: +4919 700c6b02 jam 2 ,mem_usb0_state +491a 58000000 setarg 0x0 +491b 60008b67 store 1 ,mem_remain +491c 60010c65 store 2 ,mem_usb_zero_packet +491d 1fe0fe01 pincrease 1 +491e 60010c67 store 2 ,mem_usb_ones_packet +491f 1fe0fe01 pincrease 1 +4920 60010c69 store 2 ,mem_usb_two_packet +4921 58008ffa setarg hid_kbdata_addr +4922 60010b7c store 2 ,mem_hidreportdesc_kb +4923 5800903a setarg hid_msdata_addr +4924 60010b7e store 2 ,mem_hidreportdesc_m +4925 d8a00b80 arg mem_confdesc ,contw +4926 d8c090fe arg hid_confdata_addr ,contr +4927 20407eb3 call memcpy64 +4928 68008c6d fetch 1 ,mem_usb_tx_interval +4929 245a492b ncall usb_tx_interval_config ,blank +492a 2020490b branch usb_mem_devicedesc_init + +usb_tx_interval_config: +492b 60008ba2 store 1 ,mem_confdesc + 34 +492c 60008bbb store 1 ,mem_confdesc + 59 +492d 20600000 rtn + +usb_nak_state_judge: +492e 68108a26 hfetch 1 ,core_usb_status +492f c2834931 bbit1 usb_status_nak ,usb_nak_state_timer_init +4930 20600000 rtn + +usb_nak_state_timer_init: +4931 20404936 call usb0_attached_state_judge +4932 20407f15 call timer_reinit +4933 58000280 setarg timer_nak_delay +4934 d8e00000 arg timer_nak ,queue +4935 20207f08 branch timer_init + +usb0_attached_state_judge: +4936 68008d36 fetch 1 ,mem_usb_state +4937 c081493b bne usb_connected ,usb_clear_halt_dispose +4938 700d4600 jam 0 ,mem_usb_wakestate_onetime_flag +4939 700d4700 jam 0 ,mem_usb_mac_wakeup_trig +493a 20600000 rtn + +usb_clear_halt_dispose: +493b 68008d53 fetch 1 ,mem_usb_clear_halt +493c 207a0000 rtn blank +493d 700d5300 jam 0 ,mem_usb_clear_halt +493e 700d3602 jam usb_connected ,mem_usb_state +493f 700d4501 jam 1 ,mem_usb_device_enumeration_endflag +4940 20600000 rtn + +usb0_fifo_empty: +4941 708a2701 jam 0x1 ,core_usb_fifo_empty +4942 20204b37 branch usb0_tx + +usb_rx_no_data: +4943 68008b22 fetch 1 ,mem_usb_status +4944 c2824955 bbit1 usb_status_setup ,usb_class_type +4945 20600000 rtn + +usb_rx_read: +4946 68108a18 hfetch 1 ,core_usb_ep +4947 e0a08000 istore 1 ,contw +4948 c2004946 loop usb_rx_read +4949 20600000 rtn + +usb_status1: +494a 44fc401f bpatch patch1f_0 ,mem_patch1f +494b 708a2611 jam 0x11 ,core_usb_status +494c 68108a20 hfetch 1 ,core_usb_ep_len +494d 60008b24 store 1 ,mem_usb_read_len +494e 1fe27200 copy pdata ,loopcnt +494f 203a4943 branch usb_rx_no_data ,blank +4950 d8a00c6e arg mem_usb_setup ,contw +4951 20404946 call usb_rx_read +4952 68008b24 fetch 1 ,mem_usb_read_len +4953 1fe67c07 sub pdata ,7 ,null +4954 20610000 rtn positive + +usb_class_type: +4955 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4956 1fe17e80 and_into 0x80 ,pdata +4957 c040495a beq in_device ,usb_in_device +4958 c0004962 beq out_device ,usb_out_device +4959 20202a8c branch assert + +usb_in_device: +495a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +495b 1ff1fe00 rshift4 pdata ,pdata +495c 1fe37e00 rshift pdata ,pdata +495d 1fe17e03 and_into 0x03 ,pdata +495e c000496a beq standard_req ,usb_in_standard_req +495f c000c970 beq class_req ,usb_in_class_req +4960 c0014975 beq manufacturer_req ,usb_in_manufacturer_req +4961 20202a8c branch assert + +usb_out_device: +4962 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4963 1ff1fe00 rshift4 pdata ,pdata +4964 1fe37e00 rshift pdata ,pdata +4965 1fe17e03 and_into 0x03 ,pdata +4966 c0004976 beq standard_req ,usb_out_standard_req +4967 c000c97e beq class_req ,usb_out_class_req +4968 c0014983 beq manufacturer_req ,usb_out_manufacturer_req +4969 20202a8c branch assert + +usb_in_standard_req: +496a 68008c6f fetch 1 ,mem_usb_setup_brequest +496b c004498a beq get_configuration ,usb0_request_get_configuration +496c c00349a0 beq get_descriptor ,usb0_request_get_descriptor +496d c00549ea beq get_interface ,usb0_request_get_interface +496e c00049fc beq get_status ,usb0_request_get_status +496f 20204984 branch usb0_force_stall + +usb_in_class_req: +4970 68008c6f fetch 1 ,mem_usb_setup_brequest +4971 c0014a2f beq get_idle ,usb_get_idle +4972 c000ca33 beq get_report ,usb_get_report +4973 c001ca45 beq get_protocol ,usb_get_protocol_req +4974 20204984 branch usb0_force_stall + +usb_in_manufacturer_req: +4975 20204984 branch usb0_force_stall + +usb_out_standard_req: +4976 68008c6f fetch 1 ,mem_usb_setup_brequest +4977 c000ca4f beq clear_feature ,usb0_request_clear_feature +4978 c001ca79 beq set_feature ,usb0_request_set_feature +4979 c002caa3 beq set_address ,usb0_request_set_address +497a c004cabc beq set_configuration ,usb0_request_set_configuration +497b c005cad7 beq set_interface ,usb0_request_set_interface +497c c003c984 beq set_descriptor ,usb0_force_stall +497d 20204984 branch usb0_force_stall + +usb_out_class_req: +497e 68008c6f fetch 1 ,mem_usb_setup_brequest +497f c0054ae8 beq set_idle ,usb_set_idle +4980 c004caf9 beq set_report ,usb_set_report +4981 c005cb11 beq set_protocol ,usb_set_protocol_req +4982 20204984 branch usb0_force_stall + +usb_out_manufacturer_req: +4983 20204984 branch usb0_force_stall + +usb0_force_stall: +4984 68108a11 hfetch 1 ,core_usb_stall +4985 79207e00 set1 0 ,pdata +4986 60108a11 hstore 1 ,core_usb_stall +4987 20204988 branch usb0_reply_zerolen + +usb0_reply_zerolen: +4988 708a1240 jam 0x40 ,core_usb_clear +4989 20600000 rtn + +usb0_request_get_configuration: +498a 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +498b c0c04984 bne in_device ,usb0_force_stall +498c 68008c72 fetch 1 ,mem_usb_setup_windex +498d c0804984 bne 0 ,usb0_force_stall +498e 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +498f c0804984 bne 0 ,usb0_force_stall +4990 68008c74 fetch 1 ,mem_usb_setup_blength +4991 c080c984 bne 1 ,usb0_force_stall +4992 68008c75 fetch 1 ,mem_usb_setup_blengthh +4993 c0804984 bne 0 ,usb0_force_stall +4994 68008c70 fetch 1 ,mem_usb_setup_bvalue +4995 c0804984 bne 0 ,usb0_force_stall +4996 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 +4997 c0804984 bne 0 ,usb0_force_stall +4998 68008c6b fetch 1 ,mem_usb0_state +4999 c002499c beq dev_configured ,usb0_request_get_cfg_dev_cfg +499a c001c99e beq dev_address ,usb0_request_get_cfg_dev_addr +499b 20204984 branch usb0_force_stall + +usb0_request_get_cfg_dev_cfg: +499c da400001 arg 1 ,regb +499d 20204a14 branch usb_send_ones_packet + +usb0_request_get_cfg_dev_addr: +499e da400001 arg 1 ,regb +499f 20204a12 branch usb_send_zero_packet + +usb0_request_get_descriptor: +49a0 44fcc01f bpatch patch1f_1 ,mem_patch1f +49a1 793f8023 set0 mark_isstr ,mark +49a2 68008c71 fetch 1 ,mem_usb_setup_bvalueh +49a3 c000c9b6 beq dsc_device ,dsc_device_info +49a4 c00149cf beq dsc_config ,dsc_config_info +49a5 c001c9d2 beq dsc_string ,dsc_string_info +49a6 c010c9a9 beq dsc_hid ,dsc_hid_info +49a7 c01149e0 beq dsc_hid_report ,dsc_hid_report_info +49a8 20204984 branch usb0_force_stall + +dsc_hid_info: +49a9 700d4b00 jam 0 ,mem_usb_get_protocol_flag +49aa 68008c72 fetch 1 ,mem_usb_setup_windex +49ab c00049ae beq 0 ,dsc_hid_info_interface0 +49ac c000c9b2 beq 1 ,dsc_hid_info_interface1 +49ad 20204984 branch usb0_force_stall + +dsc_hid_info_interface0: +49ae da200b93 arg mem_confdesc + 19 ,rega +49af ea208000 ifetch 1 ,rega +49b0 98002400 iforce regb +49b1 20204b21 branch usb0_respond + +dsc_hid_info_interface1: +49b2 da200bac arg mem_confdesc + 44 ,rega +49b3 ea208000 ifetch 1 ,rega +49b4 98002400 iforce regb +49b5 20204b21 branch usb0_respond + +dsc_device_info: +49b6 68008d48 fetch 1 ,mem_usb_set_high_addr_flag +49b7 245a49c7 ncall usb_set_high_addr ,blank +49b8 58000b68 setarg mem_devicedesc +49b9 68088b68 fetcht 1 ,mem_devicedesc + +dsc_info_set_data_len: +49ba 60010d3f store 2 ,mem_dsc_info_data_pointer +49bb 60088d41 storet 1 ,mem_dsc_info_len +49bc 68008c74 fetch 1 ,mem_usb_setup_blength +49bd 98467c00 isub temp ,null +49be 242149c5 nbranch dsc_info_set_current_data_len ,positive + +dsc_info_set_initial_data_len: +49bf 68008d41 fetch 1 ,mem_dsc_info_len + +dsc_info_set_data_size_completed: +49c0 98002400 iforce regb +49c1 68010d3f fetch 2 ,mem_dsc_info_data_pointer +49c2 1fe0fe01 add pdata ,1 ,pdata +49c3 98002200 iforce rega +49c4 20204b21 branch usb0_respond + +dsc_info_set_current_data_len: +49c5 68008c74 fetch 1 ,mem_usb_setup_blength +49c6 202049c0 branch dsc_info_set_data_size_completed + +usb_set_high_addr: +49c7 68108a04 hfetch 1 ,core_usb_addr +49c8 245a49cb ncall usb0_set_addr ,blank +49c9 700d4800 jam 0 ,mem_usb_set_high_addr_flag +49ca 20600000 rtn + +usb0_set_addr: +49cb 68108a04 hfetch 1 ,core_usb_addr +49cc 79207e07 set1 7 ,pdata +49cd 60108a04 hstore 1 ,core_usb_addr +49ce 20600000 rtn + +dsc_config_info: +49cf 58000b80 setarg mem_confdesc +49d0 68088b80 fetcht 1 ,mem_confdesc +49d1 202049ba branch dsc_info_set_data_len + +dsc_string_info: +49d2 68008c70 fetch 1 ,mem_usb_setup_bvalue +49d3 1fe67c03 sub pdata ,3 ,null +49d4 24214984 nbranch usb0_force_stall ,positive +49d5 68008c70 fetch 1 ,mem_usb_setup_bvalue +49d6 da200be4 arg mem_string0 ,rega +49d7 c0004b1e beq 0 ,usb0_respond_length +49d8 79200023 set1 mark_isstr ,mark +49d9 da200be9 arg mem_string1 ,rega +49da c000cb1e beq 1 ,usb0_respond_length +49db da200c07 arg mem_string2 ,rega +49dc c0014b1e beq 2 ,usb0_respond_length +49dd da200c47 arg mem_string3 ,rega +49de c001cb1e beq 3 ,usb0_respond_length +49df 20600000 rtn + +dsc_hid_report_info: +49e0 68010c72 fetch 2 ,mem_usb_setup_windex +49e1 c000c9e5 beq 1 ,dsc_hid_report_info0 +49e2 68010b7c fetch 2 ,mem_hidreportdesc_kb +49e3 1fe22200 copy pdata ,rega +49e4 20204b1e branch usb0_respond_length + +dsc_hid_report_info0: +49e5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag +49e6 700d3601 jam usb_got_report_req ,mem_usb_state +49e7 68010b7e fetch 2 ,mem_hidreportdesc_m +49e8 1fe22200 copy pdata ,rega +49e9 20204b1e branch usb0_respond_length + +usb0_request_get_interface: +49ea 68008c6b fetch 1 ,mem_usb0_state +49eb c0824984 bne dev_configured ,usb0_force_stall +49ec 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +49ed c0c0c984 bne in_interface ,usb0_force_stall +49ee 68008c70 fetch 1 ,mem_usb_setup_bvalue +49ef c0804984 bne 0 ,usb0_force_stall +49f0 68008c71 fetch 1 ,mem_usb_setup_bvalueh +49f1 c0804984 bne 0 ,usb0_force_stall +49f2 68008c74 fetch 1 ,mem_usb_setup_blength +49f3 c080c984 bne 1 ,usb0_force_stall +49f4 68008c75 fetch 1 ,mem_usb_setup_blengthh +49f5 c0804984 bne 0 ,usb0_force_stall +49f6 68008c72 fetch 1 ,mem_usb_setup_windex +49f7 c0804984 bne 0 ,usb0_force_stall +49f8 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +49f9 c0804984 bne 0 ,usb0_force_stall +49fa da400001 arg 1 ,regb +49fb 20204a12 branch usb_send_zero_packet + +usb0_request_get_status: +49fc 68008c6b fetch 1 ,mem_usb0_state +49fd c0014984 beq dev_default ,usb0_force_stall +49fe 68008c70 fetch 1 ,mem_usb_setup_bvalue +49ff c0804984 bne 0 ,usb0_force_stall +4a00 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4a01 c0804984 bne 0 ,usb0_force_stall +4a02 68008c74 fetch 1 ,mem_usb_setup_blength +4a03 c0814984 bne 2 ,usb0_force_stall +4a04 68008c75 fetch 1 ,mem_usb_setup_blengthh +4a05 c0804984 bne 0 ,usb0_force_stall +4a06 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4a07 c0804984 bne 0 ,usb0_force_stall +4a08 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4a09 c0404a0d beq in_device ,usb0_get_status_in_device +4a0a c040ca18 beq in_interface ,usb0_get_status_in_interface +4a0b c0414a1c beq in_endpoint ,usb0_get_status_in_endpoint +4a0c 20204984 branch usb0_force_stall + +usb0_get_status_in_device: +4a0d 68008c72 fetch 1 ,mem_usb_setup_windex +4a0e c0804984 bne 0 ,usb0_force_stall +4a0f da400002 arg 2 ,regb +4a10 68008d39 fetch 1 ,mem_usb_remote_wakeup +4a11 c000ca16 beq 0x01 ,usb_send_two_packet + +usb_send_zero_packet: +4a12 da200c65 arg mem_usb_zero_packet ,rega +4a13 20204b21 branch usb0_respond + +usb_send_ones_packet: +4a14 da200c67 arg mem_usb_ones_packet ,rega +4a15 20204b21 branch usb0_respond + +usb_send_two_packet: +4a16 da200c69 arg mem_usb_two_packet ,rega +4a17 20204b21 branch usb0_respond + +usb0_get_status_in_interface: +4a18 68008c6b fetch 1 ,mem_usb0_state +4a19 c0824984 bne dev_configured ,usb0_force_stall +4a1a da400002 arg 2 ,regb +4a1b 20204a12 branch usb_send_zero_packet + +usb0_get_status_in_endpoint: +4a1c 68008c6b fetch 1 ,mem_usb0_state +4a1d c0824984 bne dev_configured ,usb0_force_stall +4a1e 68008c72 fetch 1 ,mem_usb_setup_windex +4a1f c040ca29 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +4a20 c0414a2b beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +4a21 c041ca2d beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +4a22 1fe17e7f and_into 0x7f ,pdata +4a23 c0004a25 beq 0x00 ,usb0_get_status_in_ep_in_ep0 +4a24 20204984 branch usb0_force_stall + +usb0_get_status_in_ep_in_ep0: +4a25 68008d3b fetch 1 ,mem_usb_ep0_stall_status + +usb0_get_status_in_ep_in_ack: +4a26 da400002 arg 2 ,regb +4a27 c000ca14 beq 1 ,usb_send_ones_packet +4a28 20204a12 branch usb_send_zero_packet + +usb0_get_status_in_ep_in_ep1: +4a29 68008d3c fetch 1 ,mem_usb_ep1_stall_status +4a2a 20204a26 branch usb0_get_status_in_ep_in_ack + +usb0_get_status_in_ep_in_ep2: +4a2b 68008d3d fetch 1 ,mem_usb_ep2_stall_status +4a2c 20204a26 branch usb0_get_status_in_ep_in_ack + +usb0_get_status_in_ep_in_ep3: +4a2d 68008d3e fetch 1 ,mem_usb_ep3_stall_status +4a2e 20204a26 branch usb0_get_status_in_ep_in_ack + +usb_get_idle: +4a2f 700d4c01 jam 1 ,mem_usb_idle_flag +4a30 da200d4d arg mem_usb_idle_rate ,rega +4a31 da400001 arg 1 ,regb +4a32 20204b21 branch usb0_respond + +usb_get_report: +4a33 68010c70 fetch 2 ,mem_usb_setup_bvalue +4a34 d84001ba arg pc_get_report ,temp +4a35 98467c00 isub temp ,null +4a36 2422c984 nbranch usb0_force_stall ,zero +4a37 793f8023 set0 mark_isstr ,mark + +usb_get_report_dispose: +4a38 68008d42 fetch 1 ,mem_usb0_data_ready_report +4a39 243a4a42 nbranch usb_get_report_data_success ,blank +4a3a 700cf600 jam pc_get_nondata ,mem_usb0_get_report_data + +usb_get_report_send_data: +4a3b 68008c74 fetch 1 ,mem_usb_setup_blength +4a3c 98002400 iforce regb +4a3d da200cf6 arg mem_usb0_get_report_data ,rega +4a3e 20404b21 call usb0_respond + +usb_get_report_data_release: +4a3f d8a00cf6 arg mem_usb0_get_report_data ,contw +4a40 df200008 arg 8 ,loopcnt +4a41 20207ec6 branch memset0 + +usb_get_report_data_success: +4a42 700d4200 jam 0 ,mem_usb0_data_ready_report +4a43 700cf601 jam pc_get_data ,mem_usb0_get_report_data +4a44 20204a3b branch usb_get_report_send_data + +usb_get_protocol_req: +4a45 68008c74 fetch 1 ,mem_usb_setup_blength +4a46 c080c984 bne 1 ,usb0_force_stall +4a47 700d4b01 jam 1 ,mem_usb_get_protocol_flag +4a48 da400001 arg 1 ,regb +4a49 68008d49 fetch 1 ,mem_usb_set_protocol_value +4a4a c0004a4d beq 0 ,usb_get_report_protocol +4a4b c000ca4e beq 1 ,usb_get_boot_protocol +4a4c 20204a12 branch usb_send_zero_packet + +usb_get_report_protocol: +4a4d 20204a14 branch usb_send_ones_packet + +usb_get_boot_protocol: +4a4e 20204a12 branch usb_send_zero_packet + +usb0_request_clear_feature: +4a4f 68008c6b fetch 1 ,mem_usb0_state +4a50 c0824984 bne dev_configured ,usb0_force_stall +4a51 68008c74 fetch 1 ,mem_usb_setup_blength +4a52 c0804984 bne 0 ,usb0_force_stall +4a53 68008c75 fetch 1 ,mem_usb_setup_blengthh +4a54 c0804984 bne 0 ,usb0_force_stall +4a55 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4a56 c0804984 bne 0 ,usb0_force_stall +4a57 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4a58 c0804984 bne 0 ,usb0_force_stall +4a59 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4a5a c0004a5e beq out_device ,usb0_request_clear_feature_out_device +4a5b c000ca66 beq out_interface ,usb0_request_clear_feature_out_interface +4a5c c0014a67 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +4a5d 20204984 branch usb0_force_stall + +usb0_request_clear_feature_out_device: +4a5e 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a5f c080c984 bne device_remote_wakeup ,usb0_force_stall +4a60 68108a00 hfetch 1 ,core_usb_config +4a61 793ffe07 set0 7 ,pdata +4a62 60108a00 hstore 1 ,core_usb_config +4a63 700d3900 jam 0 ,mem_usb_remote_wakeup +4a64 700d3a01 jam 1 ,mem_usb_clear_remote_wakeup +4a65 20204988 branch usb0_reply_zerolen + +usb0_request_clear_feature_out_interface: +4a66 20204984 branch usb0_force_stall + +usb0_request_clear_feature_out_endpoint: +4a67 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a68 c0804984 bne endpoint_halt ,usb0_force_stall +4a69 68008c72 fetch 1 ,mem_usb_setup_windex +4a6a c040ca72 beq in_ep1 ,usb0_force_stall_ep1_in_off +4a6b c0414a75 beq in_ep2 ,usb0_force_stall_ep2_in_off +4a6c c041ca77 beq in_ep3 ,usb0_force_stall_ep3_in_off +4a6d 1fe17e7f and_into 0x7f ,pdata +4a6e c0004a70 beq 0x00 ,usb0_force_stall_ep0_in_off +4a6f 20204984 branch usb0_force_stall + +usb0_force_stall_ep0_in_off: +4a70 700d3b00 jam 0 ,mem_usb_ep0_stall_status +4a71 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep1_in_off: +4a72 700d3c00 jam 0 ,mem_usb_ep1_stall_status + +usb0_force_stall_ep1_in_off_reply: +4a73 700d5301 jam 1 ,mem_usb_clear_halt +4a74 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep2_in_off: +4a75 700d3d00 jam 0 ,mem_usb_ep2_stall_status +4a76 20204a73 branch usb0_force_stall_ep1_in_off_reply + +usb0_force_stall_ep3_in_off: +4a77 700d3e00 jam 0 ,mem_usb_ep3_stall_status +4a78 20204a73 branch usb0_force_stall_ep1_in_off_reply + +usb0_request_set_feature: +4a79 68008c74 fetch 1 ,mem_usb_setup_blength +4a7a c0804984 bne 0 ,usb0_force_stall +4a7b 68008c75 fetch 1 ,mem_usb_setup_blengthh +4a7c c0804984 bne 0 ,usb0_force_stall +4a7d 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4a7e c0004a82 beq out_device ,usb0_request_set_feature_out_device +4a7f c000ca8f beq out_interface ,usb0_request_set_feature_out_interface +4a80 c0014a90 beq out_endpoint ,usb0_request_set_feature_out_endpoint +4a81 20204984 branch usb0_force_stall + +usb0_request_set_feature_out_device: +4a82 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a83 c080c984 bne device_remote_wakeup ,usb0_force_stall +4a84 68108a00 hfetch 1 ,core_usb_config +4a85 79207e07 set1 7 ,pdata +4a86 60108a00 hstore 1 ,core_usb_config +4a87 700d3901 jam 1 ,mem_usb_remote_wakeup +4a88 700d3603 jam usb_sleep ,mem_usb_state +4a89 700d4300 jam 0 ,mem_usb_tx_win_enable +4a8a 20404988 call usb0_reply_zerolen + +usb_wakeup_timer_reinit: +4a8b 20407f15 call timer_reinit +4a8c 58001388 setarg timer_wakeup_delay +4a8d d8e0000f arg timer_wakeup ,queue +4a8e 20207f08 branch timer_init + +usb0_request_set_feature_out_interface: +4a8f 20204984 branch usb0_force_stall + +usb0_request_set_feature_out_endpoint: +4a90 68008c70 fetch 1 ,mem_usb_setup_bvalue +4a91 c0804984 bne endpoint_halt ,usb0_force_stall +4a92 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4a93 c0804984 bne 0 ,usb0_force_stall +4a94 68008c72 fetch 1 ,mem_usb_setup_windex +4a95 c040ca9d beq in_ep1 ,usb0_force_stall_ep1_in_on +4a96 c0414a9f beq in_ep2 ,usb0_force_stall_ep2_in_on +4a97 c041caa1 beq in_ep3 ,usb0_force_stall_ep3_in_on +4a98 1fe17e7f and_into 0x7f ,pdata +4a99 c0004a9b beq 0x00 ,usb0_force_stall_ep0_in_on +4a9a 20204984 branch usb0_force_stall + +usb0_force_stall_ep0_in_on: +4a9b 700d3b01 jam 1 ,mem_usb_ep0_stall_status +4a9c 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep1_in_on: +4a9d 700d3c01 jam 1 ,mem_usb_ep1_stall_status +4a9e 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep2_in_on: +4a9f 700d3d01 jam 1 ,mem_usb_ep2_stall_status +4aa0 20204988 branch usb0_reply_zerolen + +usb0_force_stall_ep3_in_on: +4aa1 700d3e01 jam 1 ,mem_usb_ep3_stall_status +4aa2 20204988 branch usb0_reply_zerolen + +usb0_request_set_address: +4aa3 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4aa4 c0804984 bne out_device ,usb0_force_stall +4aa5 68008c72 fetch 1 ,mem_usb_setup_windex +4aa6 c0804984 bne 0 ,usb0_force_stall +4aa7 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4aa8 c0804984 bne 0 ,usb0_force_stall +4aa9 68008c74 fetch 1 ,mem_usb_setup_blength +4aaa c0804984 bne 0 ,usb0_force_stall +4aab 68008c75 fetch 1 ,mem_usb_setup_blengthh +4aac c0804984 bne 0 ,usb0_force_stall +4aad 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4aae c0804984 bne 0 ,usb0_force_stall +4aaf 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ab0 1fe17e80 and_into 0x80 ,pdata +4ab1 c0804984 bne 0 ,usb0_force_stall +4ab2 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ab3 c0804aba bne 0 ,usb_usb0_state_set_dev_addr + +usb_usb0_state_set_dev_default: +4ab4 700c6b02 jam dev_default ,mem_usb0_state + +usb0_request_set_wait_address: +4ab5 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ab6 60108a04 hstore 1 ,core_usb_addr +4ab7 20404988 call usb0_reply_zerolen +4ab8 700d4801 jam 1 ,mem_usb_set_high_addr_flag +4ab9 20600000 rtn + +usb_usb0_state_set_dev_addr: +4aba 700c6b03 jam dev_address ,mem_usb0_state +4abb 20204ab5 branch usb0_request_set_wait_address + +usb0_request_set_configuration: +4abc 68008c6b fetch 1 ,mem_usb0_state +4abd c0014984 beq dev_default ,usb0_force_stall +4abe 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4abf c0804984 bne out_device ,usb0_force_stall +4ac0 68008c72 fetch 1 ,mem_usb_setup_windex +4ac1 c0804984 bne 0 ,usb0_force_stall +4ac2 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4ac3 c0804984 bne 0 ,usb0_force_stall +4ac4 68008c74 fetch 1 ,mem_usb_setup_blength +4ac5 c0804984 bne 0 ,usb0_force_stall +4ac6 68008c75 fetch 1 ,mem_usb_setup_blengthh +4ac7 c0804984 bne 0 ,usb0_force_stall +4ac8 68008c71 fetch 1 ,mem_usb_setup_bvalue + 1 +4ac9 c0804984 bne 0 ,usb0_force_stall +4aca 68008c70 fetch 1 ,mem_usb_setup_bvalue +4acb 1fe67c01 sub pdata ,usb_max_num_cfg ,null +4acc 24214984 nbranch usb0_force_stall ,positive +4acd 68008c6b fetch 1 ,mem_usb0_state +4ace c001cad1 beq dev_address ,usb0_request_set_cfg_addr_state +4acf c0024ad1 beq dev_configured ,usb0_request_set_cfg_cfg_state +4ad0 20204984 branch usb0_force_stall + +usb0_request_set_cfg_addr_state: + +usb0_request_set_cfg_cfg_state: +4ad1 68008c70 fetch 1 ,mem_usb_setup_bvalue +4ad2 c0004ad5 beq 0 ,usb0_request_set_cfg_stay_addr_state +4ad3 700c6b04 jam dev_configured ,mem_usb0_state +4ad4 20204988 branch usb0_reply_zerolen + +usb0_request_set_cfg_stay_addr_state: +4ad5 700c6b03 jam dev_address ,mem_usb0_state +4ad6 20204988 branch usb0_reply_zerolen + +usb0_request_set_interface: +4ad7 68008c6b fetch 1 ,mem_usb0_state +4ad8 c0824984 bne dev_configured ,usb0_force_stall +4ad9 68008c6e fetch 1 ,mem_usb_setup_bmrequesttype +4ada c080c984 bne out_interface ,usb0_force_stall +4adb 68008c70 fetch 1 ,mem_usb_setup_bvalue +4adc c0804984 bne 0 ,usb0_force_stall +4add 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4ade c0804984 bne 0 ,usb0_force_stall +4adf 68008c74 fetch 1 ,mem_usb_setup_blength +4ae0 c0804984 bne 0 ,usb0_force_stall +4ae1 68008c75 fetch 1 ,mem_usb_setup_blengthh +4ae2 c0804984 bne 0 ,usb0_force_stall +4ae3 68008c72 fetch 1 ,mem_usb_setup_windex +4ae4 c0804984 bne 0 ,usb0_force_stall +4ae5 68008c73 fetch 1 ,mem_usb_setup_windex + 1 +4ae6 c0804984 bne 0 ,usb0_force_stall +4ae7 20204988 branch usb0_reply_zerolen + +usb_set_idle: +4ae8 700d4c01 jam 1 ,mem_usb_idle_flag +4ae9 68008c71 fetch 1 ,mem_usb_setup_bvalueh +4aea 60008d4d store 1 ,mem_usb_idle_rate +4aeb 68008c72 fetch 1 ,mem_usb_setup_windex +4aec 1fe67c01 sub pdata ,1 ,null +4aed 2042caf5 call usb_clear_remote_wakeup_set0 ,zero +4aee 68008d36 fetch 1 ,mem_usb_state +4aef c0824988 bne usb_resume ,usb0_reply_zerolen +4af0 700d3602 jam usb_connected ,mem_usb_state +4af1 20404988 call usb0_reply_zerolen +4af2 20007530 nop 30000 +4af3 20007530 nop 30000 +4af4 20600000 rtn + +usb_clear_remote_wakeup_set0: +4af5 700d4501 jam 1 ,mem_usb_device_enumeration_endflag +4af6 700d3a00 jam 0 ,mem_usb_clear_remote_wakeup +4af7 700d3604 jam usb_resume ,mem_usb_state +4af8 20600000 rtn + +usb_set_report: +4af9 700d5001 jam 1 ,mem_usb0_get_set_report +4afa 20404b03 call usb_set_report_resume_judge +4afb 68010c70 fetch 2 ,mem_usb_setup_bvalue +4afc 60010d4e store 2 ,mem_usb_setup_bvalue_temp +4afd 68008c74 fetch 1 ,mem_usb_setup_blength +4afe 98007200 iforce loopcnt +4aff d8c00c76 arg mem_usb0_setup ,contr +4b00 d8a00cb6 arg mem_usb0_set_report_data ,contw +4b01 20407f01 call memcpy +4b02 20204988 branch usb0_reply_zerolen + +usb_set_report_resume_judge: +4b03 68010c70 fetch 2 ,mem_usb_setup_bvalue +4b04 d8400200 arg pc_set_report_bvalue ,temp +4b05 98467c00 isub temp ,null +4b06 24628000 nrtn zero +4b07 68010c72 fetch 2 ,mem_usb_setup_windex +4b08 d8400000 arg pc_set_report_windex ,temp +4b09 98467c00 isub temp ,null +4b0a 24628000 nrtn zero +4b0b 68010c74 fetch 2 ,mem_usb_setup_blength +4b0c d8400001 arg pc_set_report_blength ,temp +4b0d 98467c00 isub temp ,null +4b0e 24628000 nrtn zero +4b0f 700d4301 jam 1 ,mem_usb_tx_win_enable +4b10 20600000 rtn + +usb_set_protocol_req: +4b11 68008c74 fetch 1 ,mem_usb_setup_blength +4b12 c0804984 bne 0 ,usb0_force_stall +4b13 68008c70 fetch 1 ,mem_usb_setup_bvalue +4b14 c0004b17 beq boot_protocol ,usb_set_boot_protocol +4b15 c000cb1a beq report_protocol ,usb_set_report_protocol +4b16 20204984 branch usb0_force_stall + +usb_set_boot_protocol: +4b17 700d4a00 jam 0 ,mem_usb_set_protocol_status +4b18 700d4901 jam 1 ,mem_usb_set_protocol_value +4b19 20204988 branch usb0_reply_zerolen + +usb_set_report_protocol: +4b1a 700d4401 jam 1 ,mem_usb_tx_mac_enable +4b1b 700d4a01 jam 1 ,mem_usb_set_protocol_status +4b1c 700d4900 jam 0 ,mem_usb_set_protocol_value +4b1d 20204988 branch usb0_reply_zerolen + +usb0_respond_length: +4b1e ea208000 ifetch 1 ,rega +4b1f 98002400 iforce regb +4b20 1a20a201 increase 1 ,rega + +usb0_respond: +4b21 44fd401f bpatch patch1f_2 ,mem_patch1f +4b22 c591cb2c bmark0 mark_isstr ,usb0_respond0 +4b23 1a40fe01 add regb ,1 ,pdata +4b24 1fe3fe00 lshift pdata ,pdata +4b25 60108a18 hstore 1 ,core_usb_dfifo0 +4b26 708a1803 jam 3 ,core_usb_dfifo0 +4b27 68008c74 fetch 1 ,mem_usb_setup_blength +4b28 1fe0fffe increase -2 ,pdata +4b29 1fe37e00 rshift pdata ,pdata +4b2a 60008c74 store 1 ,mem_usb_setup_blength +4b2b c0004b35 beq 0 ,usb_no_respond_data + +usb0_respond0: +4b2c 68010c74 fetch 2 ,mem_usb_setup_blength +4b2d 9a467c00 isub regb ,null +4b2e 20214b30 branch usb0_respond1 ,positive +4b2f 1fe22400 copy pdata ,regb + +usb0_respond1: +4b30 1a227e00 deposit rega +4b31 60010b65 store 2 ,mem_bufptr +4b32 1a427e00 deposit regb +4b33 60008b67 store 1 ,mem_remain +4b34 20204b37 branch usb0_tx + +usb_no_respond_data: +4b35 d8e00000 arg 0 ,queue +4b36 20204b57 branch usb_trig + +usb0_tx: +4b37 44fdc01f bpatch patch1f_3 ,mem_patch1f +4b38 68008b67 fetch 1 ,mem_remain +4b39 207a0000 rtn blank +4b3a 1fe27200 copy pdata ,loopcnt +4b3b 1fe67c40 sub pdata ,ep0_packet_size ,null +4b3c 20214b3e branch usb0_tx_info ,positive +4b3d df200040 arg ep0_packet_size ,loopcnt + +usb0_tx_info: +4b3e 68008b67 fetch 1 ,mem_remain +4b3f 9f267e00 isub loopcnt ,pdata +4b40 60008b67 store 1 ,mem_remain +4b41 68010b65 fetch 2 ,mem_bufptr +4b42 1fe20c00 copy pdata ,contr + +usb0_tx0: +4b43 e8c08000 ifetch 1 ,contr +4b44 60108a18 hstore 1 ,core_usb_dfifo0 +4b45 c591cb47 bmark0 mark_isstr ,usb0_tx1 +4b46 708a1800 jam 0 ,core_usb_dfifo0 + +usb0_tx1: +4b47 c2004b43 loop usb0_tx0 +4b48 18c27e00 copy contr ,pdata +4b49 60010b65 store 2 ,mem_bufptr +4b4a d8e00000 arg 0 ,queue +4b4b 20404b57 call usb_trig +4b4c 68008b67 fetch 1 ,mem_remain +4b4d 247a0000 nrtn blank +4b4e 68008d36 fetch 1 ,mem_usb_state +4b4f c1808000 rtnne usb_got_report_req +4b50 700d3602 jam usb_connected ,mem_usb_state +4b51 20600000 rtn + +usb_tx_ep1: +4b52 da208a19 arg core_usb_dfifo1 ,rega +4b53 d8e00001 arg 1 ,queue + +usb_tx_loop: +4b54 e8c08000 ifetch 1 ,contr +4b55 e2208000 istore 1 ,rega +4b56 c2004b54 loop usb_tx_loop + +usb_trig: +4b57 58000000 setarg 0 +4b58 f9207e00 qset1 pdata +4b59 60108a10 hstore 1 ,core_usb_trig +4b5a 68088d37 fetcht 1 ,mem_usb_tx_wait +4b5b 9841fe00 ior temp ,pdata +4b5c 60008d37 store 1 ,mem_usb_tx_wait +4b5d 20600000 rtn + +usb_tx_ep2: +4b5e d8e00002 arg 2 ,queue +4b5f da208a1a arg core_usb_dfifo2 ,rega +4b60 20204b54 branch usb_tx_loop + +usb_tx: +4b61 44fe401f bpatch patch1f_4 ,mem_patch1f +4b62 68008d38 fetch 1 ,mem_usb_tx_enable +4b63 207a0000 rtn blank +4b64 68008d37 fetch 1 ,mem_usb_tx_wait +4b65 243a4bac nbranch usb_inwake_state_tx_dispose ,blank +4b66 68008d45 fetch 1 ,mem_usb_device_enumeration_endflag +4b67 203a4b86 branch usb_tx_fifo_release ,blank +4b68 68008d36 fetch 1 ,mem_usb_state +4b69 c001cbbf beq usb_sleep ,usb_windows_wakeup +4b6a c0814b86 bne usb_connected ,usb_tx_fifo_release +4b6b 68008d3a fetch 1 ,mem_usb_clear_remote_wakeup +4b6c 243a4b86 nbranch usb_tx_fifo_release ,blank +4b6d 20404b6f call usb_tx_data_ep1 +4b6e 20204b7a branch usb_tx_data_ep2 + +usb_tx_data_ep1: +4b6f 68008d38 fetch 1 ,mem_usb_tx_enable +4b70 c4008000 rtnbit0 1 +4b71 68008d37 fetch 1 ,mem_usb_tx_wait +4b72 c3808000 rtnbit1 1 +4b73 68008d38 fetch 1 ,mem_usb_tx_enable +4b74 793ffe01 set0 1 ,pdata +4b75 60008d38 store 1 ,mem_usb_tx_enable +4b76 68008d51 fetch 1 ,mem_usb_ep1_data +4b77 207a0000 rtn blank +4b78 c0084ba8 beq usb_ep1_kb ,usb_tx_kb_normal_data +4b79 20202a8c branch assert + +usb_tx_data_ep2: +4b7a 68008d38 fetch 1 ,mem_usb_tx_enable +4b7b c4010000 rtnbit0 2 +4b7c 68008d37 fetch 1 ,mem_usb_tx_wait +4b7d c3810000 rtnbit1 2 +4b7e 68008d38 fetch 1 ,mem_usb_tx_enable +4b7f 793ffe02 set0 2 ,pdata +4b80 60008d38 store 1 ,mem_usb_tx_enable +4b81 68008d52 fetch 1 ,mem_usb_ep2_data +4b82 207a0000 rtn blank +4b83 c0104b89 beq usb_ep2_ms ,usb_tx_ms_data +4b84 c010cba4 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +4b85 20202a8c branch assert + +usb_tx_fifo_release: +4b86 d8a00d54 arg mem_usb_mouse_data ,contw +4b87 df200006 arg 6 ,loopcnt +4b88 20207ec6 branch memset0 + +usb_tx_ms_data: +4b89 68008d4c fetch 1 ,mem_usb_idle_flag +4b8a 68088d4b fetcht 1 ,mem_usb_get_protocol_flag +4b8b 98417e00 iand temp ,pdata +4b8c 203a4ba0 branch usb_tx_ms_data_normal_mode ,blank +4b8d 68088d4a fetcht 1 ,mem_usb_set_protocol_status +4b8e 9840fe00 iadd temp ,pdata +4b8f c000cb91 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +4b90 20204ba0 branch usb_tx_ms_data_normal_mode + +usb_tx_ms_data_mac_boot_mode: +4b91 700d5200 jam 0 ,mem_usb_ep2_data + +usb_tx_ms_data_mac_boot_regroup: +4b92 68008d55 fetch 1 ,mem_usb_mouse_data + 1 +4b93 c0014ba1 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +4b94 c001cba1 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +4b95 68008d55 fetch 1 ,mem_usb_mouse_data + 1 +4b96 60008d54 store 1 ,mem_usb_mouse_data +4b97 68008d56 fetch 1 ,mem_usb_mouse_data + 2 +4b98 e0a08000 istore 1 ,contw +4b99 68008d58 fetch 1 ,mem_usb_mouse_data + 4 +4b9a e0a08000 istore 1 ,contw +4b9b 68008d5a fetch 1 ,mem_usb_mouse_data + 6 +4b9c e0a08000 istore 1 ,contw +4b9d df200004 arg 4 ,loopcnt +4b9e d8c00d54 arg mem_usb_mouse_data ,contr +4b9f 20204b5e branch usb_tx_ep2 + +usb_tx_ms_data_normal_mode: +4ba0 700d5200 jam 0 ,mem_usb_ep2_data + +usb_tx_mac_boot_ms_regroup_r_or_lrkey: +4ba1 df200008 arg 8 ,loopcnt +4ba2 d8c00d54 arg mem_usb_mouse_data ,contr +4ba3 20204b5e branch usb_tx_ep2 + +usb_tx_kb_multikey_data: +4ba4 700d5200 jam 0 ,mem_usb_ep2_data +4ba5 df200003 arg 3 ,loopcnt +4ba6 d8c00d74 arg mem_usb_kb_multikey ,contr +4ba7 20204b5e branch usb_tx_ep2 + +usb_tx_kb_normal_data: +4ba8 700d5100 jam 0 ,mem_usb_ep1_data +4ba9 df200008 arg 8 ,loopcnt +4baa d8c00d64 arg mem_usb_kb_data ,contr +4bab 20204b52 branch usb_tx_ep1 + +usb_inwake_state_tx_dispose: +4bac 68008d36 fetch 1 ,mem_usb_state +4bad c001cbb0 beq usb_sleep ,usb_clear_tx_wait +4bae c0014bb2 beq usb_connected ,usb_mac_wakeup_trig +4baf 20600000 rtn + +usb_clear_tx_wait: +4bb0 700d3700 jam 0 ,mem_usb_tx_wait +4bb1 20600000 rtn + +usb_mac_wakeup_trig: +4bb2 68108a00 hfetch 1 ,core_usb_config +4bb3 79207e07 set1 7 ,pdata +4bb4 60108a00 hstore 1 ,core_usb_config +4bb5 700d4701 jam 1 ,mem_usb_mac_wakeup_trig +4bb6 20600000 rtn + +usb_mac_wakeup_judge: +4bb7 68008d36 fetch 1 ,mem_usb_state +4bb8 c1018000 rtneq usb_sleep +4bb9 c0014bbb beq usb_connected ,usb_mac_wakeup +4bba 20600000 rtn + +usb_mac_wakeup: +4bbb 68008d47 fetch 1 ,mem_usb_mac_wakeup_trig +4bbc 207a0000 rtn blank +4bbd 700d4601 jam 1 ,mem_usb_wakestate_onetime_flag +4bbe 20204bc2 branch usb_wakeup + +usb_windows_wakeup: +4bbf d8e0000f arg timer_wakeup ,queue +4bc0 20407f16 call timer_check +4bc1 247a0000 nrtn blank + +usb_wakeup: +4bc2 68108a00 hfetch 1 ,core_usb_config +4bc3 c4038000 rtnbit0 7 +4bc4 708a00fc jam 0xfc ,core_usb_config +4bc5 20007530 nop 30000 +4bc6 708a003c jam 0x3c ,core_usb_config +4bc7 20600000 rtn + +hci_rx_h4: +4bc8 44fec01f bpatch patch1f_5 ,mem_patch1f +4bc9 6800c1ce fetch 1 ,mem_hci_cmd +4bca 247a0000 nrtn blank + +hci_rx_h4_1: +4bcb 20404bce call hci_h4_parse_packet +4bcc 24544be6 ncall h4_rx_discard_packet ,user +4bcd 20600000 rtn + +hci_h4_parse_packet: +4bce 44ff401f bpatch patch1f_6 ,mem_patch1f +4bcf 18622200 copy contru ,rega +4bd0 d8400004 arg 4 ,temp +4bd1 e8608000 ifetch 1 ,contru +4bd2 c000cbd8 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len +4bd3 18408401 increase 1 ,temp +4bd4 c0014bd8 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len +4bd5 18627e00 copy contru ,pdata +4bd6 60110058 hstore 2 ,core_uart_rrptr +4bd7 20600000 rtn + +hci_h4_parse_packet_wait_len: +4bd8 68110112 hfetch 2 ,core_uart_rxitems +4bd9 98467c00 isub temp ,null +4bda 24214bd8 nbranch hci_h4_parse_packet_wait_len ,positive +4bdb 78547c00 disable user +4bdc 1a220600 copy rega ,contru +4bdd 20404bee call h4_get_rx_payload_len +4bde 98408400 iadd temp ,temp + +hci_h4_parse_packet_wait: +4bdf 68110112 hfetch 2 ,core_uart_rxitems +4be0 98467c00 isub temp ,null +4be1 24214bdf nbranch hci_h4_parse_packet_wait ,positive +4be2 1a220600 copy rega ,contru +4be3 e8608000 ifetch 1 ,contru +4be4 c000cc3f beq hci_h4_type_cmd ,process_hci_cmd +4be5 20202a8c branch assert + +h4_rx_discard_packet: +4be6 44ffc01f bpatch patch1f_7 ,mem_patch1f +4be7 68110058 hfetch 2 ,core_uart_rrptr +4be8 98000600 iforce contru +4be9 20404bee call h4_get_rx_payload_len +4bea 98608600 iadd contru ,contru +4beb 18627e00 deposit contru +4bec 60110058 hstore 2 ,core_uart_rrptr +4bed 20600000 rtn + +h4_get_rx_payload_len: +4bee e8608000 ifetch 1 ,contru +4bef 18608602 increase 2 ,contru +4bf0 c0014bf3 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl +4bf1 e8608000 ifetch 1 ,contru +4bf2 20600000 rtn + +h4_get_rx_payload_len_acl: +4bf3 e8610000 ifetch 2 ,contru +4bf4 20600000 rtn + +h4_get_tx_ptr: +4bf5 6811005e hfetch 2 ,core_uart_twptr +4bf6 194095fb increase -5 ,contwu +4bf7 99409400 iadd contwu ,contwu +4bf8 20600000 rtn + +h4_send_packet_event: +4bf9 d8400004 arg hci_h4_type_event ,temp +4bfa 20204bfc branch h4_send_packet + +h4_send_packet_acl: +4bfb d8400002 arg hci_h4_type_acl ,temp + +h4_send_packet: +4bfc 47004020 bpatchx patch20_0 ,mem_patch20 +4bfd 1f20f201 increase 1 ,loopcnt +4bfe 6811005e hfetch 2 ,core_uart_twptr +4bff 1fe21400 copy pdata ,contwu +4c00 1f227e00 copy loopcnt ,pdata +4c01 e1488000 istoret 1 ,contwu +4c02 1fe0ffff increase -1 ,pdata +4c03 99409400 iadd contwu ,contwu +4c04 19427e00 copy contwu ,pdata +4c05 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr +4c06 18427e00 copy temp ,pdata +4c07 c1010000 rtneq hci_h4_type_acl +4c08 68010258 fetch 2 ,mem_hci_acl_tx_trigger_wptr +4c09 6011005e hstore 2 ,core_uart_twptr +4c0a 20204c0b branch h4_send_acl_trigger_clear + +h4_send_acl_trigger_clear: +4c0b 58000000 setarg 0 +4c0c 60010258 store 2 ,mem_hci_acl_tx_trigger_wptr +4c0d 20600000 rtn + +hci_init: +4c0e 20758000 rtn wake +4c0f 58004d28 setarg hci_idle_dispatch +4c10 600141f3 store 2 ,mem_cb_idle_process +4c11 580001a0 setarg uart_baud_115200 +4c12 60014243 store uart_baud_len ,mem_baud + +hci_lpm_init: +4c13 58001800 setarg mem_h5rx_buf +4c14 60110054 hstore 2 ,core_uart_rsaddr +4c15 58001bff setarg mem_h5rx_buf_end +4c16 60110056 hstore 2 ,core_uart_readdr +4c17 58001c00 setarg mem_h5tx_buf +4c18 6011005a hstore 2 ,core_uart_tsaddr +4c19 20404c28 call hci_sel_init + +hci_reinit: +4c1a 70806200 jam 0x0 ,core_uart_ctrl +4c1b 58001c00 setarg mem_h5tx_buf +4c1c 6011005e hstore 2 ,core_uart_twptr +4c1d 60110060 hstore 2 ,core_uart_trptrp +4c1e 58001800 setarg mem_h5rx_buf +4c1f 60110058 hstore 2 ,core_uart_rrptr +4c20 60010244 store 2 ,mem_h5rx_rptr + +hci_init_common: +4c21 68110050 hfetch 2 ,core_clkoff +4c22 793ffe0f set0 clock_off_uart ,pdata +4c23 60110050 hstore 2 ,core_clkoff +4c24 204066ce call uart_set_baud_by_mem +4c25 70804301 jam uartclk_dpll ,core_uart_clksel +4c26 70806281 jam uart_ctrl_h4 ,core_uart_ctrl +4c27 20600000 rtn + +hci_sel_init: +4c28 58001fff setarg mem_h5tx_buf_end +4c29 6011005c hstore 2 ,core_uart_teaddr +4c2a 68108081 hfetch 1 ,core_gpio_sel1 +4c2b 1fe1fe07 or_into 0x07 ,pdata +4c2c 60108081 hstore 1 ,core_gpio_sel1 +4c2d 20600000 rtn + +hci_rx_packet: +4c2e 4700c020 bpatchx patch20_1 ,mem_patch20 +4c2f 6810810c hfetch 1 ,core_uart_status +4c30 98002400 iforce regb +4c31 c301cc37 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont +4c32 68110112 hfetch 2 ,core_uart_rxitems +4c33 98002600 iforce regc +4c34 d840044f arg 0x44f ,temp +4c35 98467c00 isub temp ,null +4c36 24628000 nrtn zero + +hci_rx_packet_cont: +4c37 68110058 hfetch 2 ,core_uart_rrptr +4c38 98000600 iforce contru +4c39 20204bc8 branch hci_rx_h4 + +uart_send_byte: +4c3a 6818810c hfetcht 1 ,core_uart_status +4c3b 284ffe06 isolate1 6 ,temp +4c3c 2020cc3a branch uart_send_byte ,true +4c3d 60108015 hstore 1 ,core_uart_txd +4c3e 20600000 rtn + +process_hci_cmd: +4c3f 47014020 bpatchx patch20_2 ,mem_patch20 +4c40 6800c1ce fetch 1 ,mem_hci_cmd +4c41 203a4c44 branch process_hci_cmd_cont ,blank +4c42 78347c00 enable user +4c43 20600000 rtn + +process_hci_cmd_cont: +4c44 e8610000 ifetch 2 ,contru +4c45 98006000 iforce alarm +4c46 98000e00 iforce queue +4c47 e8608000 ifetch 1 ,contru +4c48 98000400 iforce temp +4c49 1e0b7e00 rshift2 alarm ,pdata +4c4a 1fecfe00 rshift8 pdata ,pdata +4c4b c01fcc4d beq hci_ogf_vendor_specific ,phci_grp_vendor_specific +4c4c 20600000 rtn + +phci_grp_vendor_specific: +4c4d 4701c020 bpatchx patch20_3 ,mem_patch20 +4c4e 18e27e00 deposit queue +4c4f c0004cdc beq hci_vendor_cmd_reset ,hci_normal_reply +4c50 c000cc66 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +4c51 c0014c6b beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +4c52 c001cc7a beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +4c53 c0024cb3 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +4c54 c002ccdc beq hci_vendor_cmd_echo ,hci_normal_reply +4c55 c0034cc6 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr +4c56 c003cc5c beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm +4c57 c0084cc9 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +4c58 c008ccd1 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep +4c59 c0094ca5 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init +4c5a c009cc85 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec +4c5b 20204cdc branch hci_normal_reply + +phci_grp_vendor_enter_lpm: +4c5c 20404cdc call hci_normal_reply +4c5d 20407f9e call wait_uarttx +4c5e 2040688c call gpio_pu_uart_tx + +hci_enter_lpm: +4c5f 204033d2 call app_put_lpm_wake_lock +4c60 204033d9 call app_l2cap_flow_control_enable +4c61 2020688f branch gpio_rx_config_input_with_pu + +hci_exit_lpm: +4c62 70424500 jam hci_rx_ready ,mem_hci_lt_rx_state +4c63 204033d0 call app_get_lpm_wake_lock +4c64 20404c13 call hci_lpm_init +4c65 202033db branch app_l2cap_flow_control_disable + +phci_grp_vendor_chipid: +4c66 20404cf2 call hci_get_cmd_complete_ptr +4c67 68110000 hfetch 2 ,core_chipid +4c68 e1410000 istore 2 ,contwu +4c69 18007206 force 6 ,loopcnt +4c6a 20204cdd branch hci_command_complete + +phci_grp_vendor_baud: +4c6b e8610000 ifetch 2 ,contru +4c6c 60014243 store 2 ,mem_baud +4c6d 60110052 hstore 2 ,core_uart_baud +4c6e 20600000 rtn + +phci_grp_vendor_patch_common: +4c6f e8608000 ifetch 1 ,contru +4c70 1fe20400 copy pdata ,temp +4c71 60108024 hstore 1 ,core_ucode_low +4c72 e8608000 ifetch 1 ,contru +4c73 98408400 iadd temp ,temp +4c74 79207e07 set1 7 ,pdata +4c75 60108023 hstore 1 ,core_ucode_ctrl +4c76 e8608000 ifetch 1 ,contru +4c77 98408400 iadd temp ,temp +4c78 1fe27200 copy pdata ,loopcnt +4c79 20600000 rtn + +phci_grp_vendor_patch: +4c7a c515ccc4 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad +4c7b 20404c6f call phci_grp_vendor_patch_common + +phci_grp_vendor_patch_loop: +4c7c e8608000 ifetch 1 ,contru +4c7d 60108025 hstore 1 ,core_ucode_data +4c7e 98408400 iadd temp ,temp +4c7f c2004c7c loop phci_grp_vendor_patch_loop + +phci_grp_vendor_patch_check_sum: +4c80 184104ff and temp ,0xff ,temp +4c81 e8608000 ifetch 1 ,contru +4c82 98467c00 isub temp ,null +4c83 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero +4c84 20204cdc branch hci_normal_reply + +phci_grp_vendor_patch_sec: +4c85 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +4c86 20404c6f call phci_grp_vendor_patch_common +4c87 60040a9a store 8 ,mem_pdatatemp + +phci_grp_vendor_patch_sec_loop: +4c88 20407422 call do_aes_cbc +4c89 df200010 arg 16 ,loopcnt +4c8a d8a00ac2 arg mem_temp_block0 ,contw +4c8b 20404ca0 call load_uart_sum_loop +4c8c 600c0aa2 storet 8 ,mem_temp +4c8d d8a00ad2 arg mem_temp_block2 ,contw +4c8e 20407497 call store_aes_result +4c8f da200ad2 arg mem_temp_block2 ,rega +4c90 da400ac2 arg mem_temp_block0 ,regb +4c91 d8a00ae2 arg mem_temp_block3 ,contw +4c92 20407352 call xor16 +4c93 df200010 arg 16 ,loopcnt +4c94 d8c00ae2 arg mem_temp_block3 ,contr +4c95 20404c9c call load_ucode_only_loop +4c96 680c0aa2 fetcht 8 ,mem_temp +4c97 68040a9a fetch 8 ,mem_pdatatemp +4c98 1fe0fff0 increase -16 ,pdata +4c99 60040a9a store 8 ,mem_pdatatemp +4c9a 243a4c88 nbranch phci_grp_vendor_patch_sec_loop ,blank +4c9b 20204c80 branch phci_grp_vendor_patch_check_sum + +load_ucode_only_loop: +4c9c e8c08000 ifetch 1 ,contr +4c9d 60108025 hstore 1 ,core_ucode_data +4c9e c2004c9c loop load_ucode_only_loop +4c9f 20600000 rtn + +load_uart_sum_loop: +4ca0 e8608000 ifetch 1 ,contru +4ca1 e0a08000 istore 1 ,contw +4ca2 98408400 iadd temp ,temp +4ca3 c2004ca0 loop load_uart_sum_loop +4ca4 20600000 rtn + +phci_grp_vendor_patch_sec_init: +4ca5 c595ccc4 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +4ca6 d8400000 arg 0 ,temp +4ca7 df200010 arg 16 ,loopcnt +4ca8 d8a00ac2 arg mem_temp_block0 ,contw +4ca9 20404ca0 call load_uart_sum_loop +4caa 68108085 hfetch 1 ,core_gpio_key2 +4cab 1fe17efd and_into 0xfd ,pdata +4cac 60108085 hstore 1 ,core_gpio_key2 +4cad d8c00ac2 arg mem_temp_block0 ,contr +4cae df200010 arg 16 ,loopcnt +4caf 20407478 call aes_load_data +4cb0 20407428 call aes_init +4cb1 20407491 call aes_clear_data +4cb2 20204c80 branch phci_grp_vendor_patch_check_sum + +phci_grp_vendor_done: +4cb3 df200020 arg 0x20 ,loopcnt +4cb4 d8a04000 arg mem_patch00 ,contw +4cb5 d8400000 arg 0 ,temp + +phci_grp_vendor_done_loop: +4cb6 e8608000 ifetch 1 ,contru +4cb7 e0a08000 istore 1 ,contw +4cb8 98408400 iadd temp ,temp +4cb9 c2004cb6 loop phci_grp_vendor_done_loop +4cba 184104ff and temp ,0xff ,temp +4cbb e8608000 ifetch 1 ,contru +4cbc 98467c00 isub temp ,null +4cbd 2422ccc4 nbranch phci_grp_vendor_patch_bad ,zero +4cbe 70802300 jam 0 ,core_ucode_ctrl +4cbf 20404cdc call hci_normal_reply +4cc0 20404be6 call h4_rx_discard_packet +4cc1 204064a3 call clear_key_buf +4cc2 20407f9e call wait_uarttx +4cc3 20202001 branch soft_reset + +phci_grp_vendor_patch_bad: +4cc4 70802300 jam 0 ,core_ucode_ctrl +4cc5 20202000 branch start + +phci_grp_vendor_bdaddr: +4cc6 e8630000 ifetch 6 ,contru +4cc7 600340a0 store 6 ,mem_lap +4cc8 20204cdc branch hci_normal_reply + +phci_grp_vendor_mem: +4cc9 e8608000 ifetch 1 ,contru +4cca 6000825a store 1 ,mem_hci_curr_len +4ccb 1fe27200 copy pdata ,loopcnt +4ccc e8610000 ifetch 2 ,contru +4ccd 6001025b store 2 ,mem_hci_curr_target +4cce 1fe20a00 copy pdata ,contw +4ccf 204066fd call uart_copy_rx_bytes +4cd0 20204cdc branch hci_normal_reply + +phci_grp_vendor_eep: +4cd1 e8608000 ifetch 1 ,contru +4cd2 6000825a store 1 ,mem_hci_curr_len +4cd3 1fe27200 copy pdata ,loopcnt +4cd4 e8610000 ifetch 2 ,contru +4cd5 6001025b store 2 ,mem_hci_curr_target +4cd6 d8a01000 arg mem_l2cap_rxbuff1 ,contw +4cd7 204066fd call uart_copy_rx_bytes +4cd8 6808825a fetcht 1 ,mem_hci_curr_len +4cd9 da201000 arg mem_l2cap_rxbuff1 ,rega +4cda 6801025b fetch 2 ,mem_hci_curr_target +4cdb 20206608 branch iicd_write_ota_data + +hci_normal_reply: +4cdc 18007204 force 4 ,loopcnt + +hci_command_complete: +4cdd 20404cf4 call hci_get_payload_ptr +4cde 18007e01 force 0x1 ,pdata +4cdf e1408000 istore 1 ,contwu +4ce0 1e027e00 deposit alarm +4ce1 e1418000 istore 3 ,contwu +4ce2 18000e0e force hci_event_command_complete ,queue + +hci_send_event: +4ce3 47024020 bpatchx patch20_4 ,mem_patch20 +4ce4 20404cf6 call hci_get_packet_ptr +4ce5 18e27e00 deposit queue +4ce6 e1408000 istore 1 ,contwu +4ce7 1f227e00 deposit loopcnt +4ce8 e1408000 istore 1 ,contwu + +hci_send_event_raw: +4ce9 18000e05 force 5 ,queue +4cea 1f20f202 increase 2 ,loopcnt + +hci_send_packet: +4ceb 20204bf9 branch h4_send_packet_event + +hci_send_commu_ready_event: +4cec 18000eff force hci_event_vendor_specific ,queue +4ced 20404cf4 call hci_get_payload_ptr +4cee 58000001 setarg hci_vendor_event_commu_ready +4cef e1408000 istore 1 ,contwu +4cf0 18007201 force 1 ,loopcnt +4cf1 20204ce3 branch hci_send_event + +hci_get_cmd_complete_ptr: +4cf2 1800140c force 12 ,contwu +4cf3 20204cf7 branch hci_get_tx_ptr + +hci_get_payload_ptr: +4cf4 18001408 force 8 ,contwu +4cf5 20204cf7 branch hci_get_tx_ptr + +hci_get_packet_ptr: +4cf6 18001406 force 6 ,contwu + +hci_get_tx_ptr: +4cf7 20204bf5 branch h4_get_tx_ptr + +calc_tx_crc16: +4cf8 7827fc00 pulse crc16 +4cf9 7824fc00 enable enable_crc + +crcloop: +4cfa e9408000 ifetch 1 ,contwu +4cfb 08008008 inject bucket ,8 +4cfc c2004cfa loop crcloop +4cfd 78247c00 enable enable_parity +4cfe 08008010 inject bucket ,16 +4cff 78447c00 disable enable_parity +4d00 7844fc00 disable enable_crc +4d01 7847fc00 disable crc16 +4d02 1ff0fe00 byteswap pdata ,pdata +4d03 20600000 rtn + +cmd_exit: +4d04 7041ce00 jam 0 ,mem_hci_cmd +4d05 20600000 rtn + +cmd_check_plap: +4d06 680341d0 fetch 6 ,mem_hci_plap +4d07 680b0040 fetcht 6 ,mem_plap +4d08 98467c00 isub temp ,null +4d09 20600000 rtn + +cmd_pair: +4d0a 6800804b fetch 1 ,mem_op +4d0b c2814d0f bbit1 op_inrand_req ,cmd_pair_passive +4d0c 204062ef call tid_initiate +4d0d 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 +4d0e 20204d04 branch cmd_exit + +cmd_pair_passive: +4d0f 793ffe02 set0 op_inrand_req ,pdata +4d10 6000804b store 1 ,mem_op +4d11 20406001 call lmp_accept_inrand +4d12 58000000 setarg 0 +4d13 7934fe01 setflag master ,smap_lmptid ,pdata +4d14 6000807f store 1 ,mem_lmo_tid2 +4d15 20204d04 branch cmd_exit +4d16 20600000 rtn + +cmd_in_sniff: +4d17 70007c17 jam lmp_sniff_req ,mem_lmo_opcode2 +4d18 d8a004d9 arg mem_sniff_payload ,contw +4d19 58000000 setarg 0 +4d1a 2d0ffe1b isolate1 27 ,clke_bt +4d1b 7920fe01 setflag true ,1 ,pdata +4d1c e0a08000 istore 1 ,contw +4d1d 58000000 setarg 0 +4d1e e0a10000 istore 2 ,contw +4d1f 680141e3 fetch 2 ,mem_sniff_param_interval +4d20 e0a10000 istore 2 ,contw +4d21 6800c1e5 fetch 1 ,mem_sniff_param_attempt +4d22 e0a10000 istore 2 ,contw +4d23 6800c1e7 fetch 1 ,mem_sniff_param_timeout +4d24 e0a10000 istore 2 ,contw +4d25 20204d04 branch cmd_exit + +cmd_exit_sniff: +4d26 70007c18 jam lmp_unsniff_req ,mem_lmo_opcode2 +4d27 20204d04 branch cmd_exit + +hci_idle_dispatch: +4d28 20406899 call gpio_check_uart_state +4d29 20608000 rtn true +4d2a d8400007 arg uart_wakeup_rx ,temp +4d2b 2040681d call gpio_get_bit +4d2c 2420cd2f nbranch uart_wake_up ,true +4d2d 70424501 jam hci_rx_wake ,mem_hci_lt_rx_state +4d2e 20600000 rtn + +uart_wake_up: +4d2f 6800c245 fetch 1 ,mem_hci_lt_rx_state +4d30 c1808000 rtnne hci_rx_wake +4d31 20404c62 call hci_exit_lpm +4d32 20204cec branch hci_send_commu_ready_event + +hid_rx_process: +4d33 4702c020 bpatchx patch20_5 ,mem_patch20 +4d34 68010264 fetch 2 ,mem_l2cap_payload_ptr +4d35 1fe20c00 copy pdata ,contr +4d36 e8c08000 ifetch 1 ,contr +4d37 1fe1040f and pdata ,0x0f ,temp +4d38 1ff1fe00 rshift4 pdata ,pdata +4d39 c004cd53 beq hid_type_set_idle ,hid_rx_process_handshake +4d3a c003cd53 beq hid_type_set_protocol ,hid_rx_process_handshake +4d3b c0054d5f beq hid_type_data ,hid_rx_process_data +4d3c c002cd4b beq hid_type_set_report ,hid_rx_process_set_report +4d3d c000cd3f beq hid_type_control ,hid_rx_process_hid_control +4d3e 20600000 rtn + +hid_rx_process_hid_control: +4d3f 18427e00 copy temp ,pdata +4d40 c002cd43 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +4d41 c001cd4a beq hid_control_p_suspend ,hid_rx_process_suspend +4d42 20600000 rtn + +hid_rx_process_virtual_cable_unplug: +4d43 700a9927 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +4d44 20407d86 call ui_ipc_send_event +4d45 6800c092 fetch 1 ,mem_device_option +4d46 c4030000 rtnbit0 dvc_op_mouse +4d47 18427e00 copy temp ,pdata +4d48 c002c38e beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +4d49 20600000 rtn + +hid_rx_process_suspend: +4d4a 20600000 rtn + +hid_rx_process_set_report: +4d4b 20404d5f call hid_rx_process_data +4d4c da200001 arg 0x01 ,rega +4d4d 20404d63 call hid_malloc_tx_buff +4d4e 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4d4f e0a10000 istore 2 ,contw +4d50 58000000 setarg 0x00 +4d51 e0a08000 istore 1 ,contw +4d52 20600000 rtn + +hid_rx_process_handshake: +4d53 da200001 arg 1 ,rega +4d54 20404d63 call hid_malloc_tx_buff +4d55 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4d56 e0a10000 istore 2 ,contw +4d57 58000000 setarg 0 +4d58 e0a08000 istore 1 ,contw +4d59 700a8e01 jam 1 ,mem_ui_data_txbuff_length +4d5a 6800c252 fetch 1 ,mem_hid_control_state +4d5b 79207e06 set1 l2cap_channel_hid_handshake_done +4d5c 6000c252 store 1 ,mem_hid_control_state +4d5d 700a9912 jam bt_evt_hid_handshake ,mem_fifo_temp +4d5e 20207d86 branch ui_ipc_send_event + +hid_rx_process_data: +4d5f e8c08000 ifetch 1 ,contr +4d60 c000cd62 beq hid_report_id_kb ,hid_rx_process_data_hid_kb +4d61 20600000 rtn + +hid_rx_process_data_hid_kb: +4d62 20600000 rtn + +hid_malloc_tx_buff: +4d63 20405240 call l2cap_malloc +4d64 1a220400 copy rega ,temp +4d65 60088a8e storet 1 ,mem_ui_data_txbuff_length +4d66 1fe20a00 copy pdata ,contw +4d67 1a227e00 copy rega ,pdata +4d68 e0a10000 istore 2 ,contw +4d69 20600000 rtn + +l2cap_init: +4d6a 2035cd6f branch l2cap_init_wake ,wake + +l2cap_init_work: +4d6b 58004365 setarg mem_l2cap_xmem_end +4d6c d8a04246 arg mem_l2cap_xmem_start ,contw +4d6d 98a67200 isub contw ,loopcnt +4d6e 20407ed4 call clear_mem + +l2cap_init_wake: +4d6f 47034020 bpatchx patch20_6 ,mem_patch20 +4d70 58000551 setarg mem_sdp_mem_end +4d71 d8a00511 arg mem_sdp_mem_start ,contw +4d72 98a67200 isub contw ,loopcnt +4d73 20407ed4 call clear_mem +4d74 580002c9 setarg mem_l2cap_mem_end +4d75 d8a0025d arg mem_l2cap_mem_start ,contw +4d76 98a67200 isub contw ,loopcnt +4d77 20407ed4 call clear_mem +4d78 20205318 branch l2cap_lpm_load_txbuf + +process_rx_l2cap_pkt: +4d79 4703c020 bpatchx patch20_7 ,mem_patch20 +4d7a 18c20400 copy contr ,temp +4d7b 18420c00 copy temp ,contr +4d7c e8c10000 ifetch 2 ,contr +4d7d 60010266 store 2 ,mem_l2cap_rx_pkt_length +4d7e e8c10000 ifetch 2 ,contr +4d7f 60010268 store 2 ,mem_l2cap_rx_cid +4d80 18c27e00 deposit contr +4d81 60010264 store 2 ,mem_l2cap_payload_ptr +4d82 6800c681 fetch 1 ,memui_reconnect_mode +4d83 c0004d85 beq no_reconnection ,l2cap_rx_multiplexing +4d84 202050ef branch ml2cap_rx_multiplexing + +l2cap_rx_multiplexing: +4d85 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +4d86 203a4dfc branch l2cap_rx_reset_state ,blank +4d87 47044021 bpatchx patch21_0 ,mem_patch21 +4d88 68008268 fetch 1 ,mem_l2cap_rx_cid +4d89 c000cd9d beq l2cap_signal_channel ,l2cap_call_proc_signal + +l2cap_rx_multiplexing0: +4d8a c0284de0 beq l2cap_sdp_channel ,l2cap_call_proc_sdp +4d8b c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +4d8c c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +4d8d c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +4d8e 20204dfc branch l2cap_rx_reset_state + +l2cap_check_map: +4d8f 4704c021 bpatchx patch21_1 ,mem_patch21 +4d90 2040527e call l2cap_malloc_get_full_map +4d91 6800c256 fetch 1 ,mem_used_map +4d92 c0004d9b beq 0 ,set_pdata_0 +4d93 c000cd9b beq 1 ,set_pdata_0 +4d94 c0014d9b beq 2 ,set_pdata_0 +4d95 c001cd9b beq 3 ,set_pdata_0 +4d96 c040cd9b beq 0x81 ,set_pdata_0 +4d97 c0604d9b beq 0xc0 ,set_pdata_0 +4d98 c0404d9b beq 0x80 ,set_pdata_0 +4d99 c0204d9b beq 0x40 ,set_pdata_0 +4d9a 20600000 rtn + +set_pdata_0: +4d9b 58000000 setarg 0 +4d9c 20600000 rtn + +l2cap_call_proc_signal: +4d9d 20404d8f call l2cap_check_map +4d9e 247a0000 nrtn blank + +l2cap_call_proc_signal0: +4d9f 204052b8 call l2cap_malloc_signal_channel +4da0 20404e01 call l2cap_process_signal_pkt +4da1 6809026f fetcht 2 ,mem_l2cap_signal_tx_length +4da2 203a4dfb branch l2cap_call_proc_no_reply ,blank +4da3 204052c1 call l2cap_get_signal_tx_buff +4da4 6801026f fetch 2 ,mem_l2cap_signal_tx_length +4da5 e0a10000 istore 2 ,contw +4da6 18007e01 force l2cap_signal_channel ,pdata +4da7 e0a10000 istore 2 ,contw +4da8 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_sigal_pending: +4da9 6800c364 fetch 1 ,mem_l2cap_pending_item +4daa 207a0000 rtn blank +4dab 1fe22200 copy pdata ,rega +4dac 47054021 bpatchx patch21_2 ,mem_patch21 +4dad 680202d5 fetch 4 ,mem_l2cap_sdpres_delay_time +4dae d8400100 arg 0x100 ,temp +4daf 98408400 iadd temp ,temp +4db0 1c427e00 copy clkn_bt ,pdata +4db1 98467c00 isub temp ,null +4db2 24610000 nrtn positive +4db3 70436400 jam 0 ,mem_l2cap_pending_item +4db4 1a227e00 copy rega ,pdata +4db5 c0284db7 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +4db6 20202a8c branch assert + +l2cap_sdp_conn_succ: +4db7 d9000000 arg 0 ,debug +4db8 204052b8 call l2cap_malloc_signal_channel +4db9 20404e7a call restore_l2cap_req_param +4dba 204052c3 call l2cap_get_signal_tx_payload +4dbb 20407ea8 call save_cont_pointers +4dbc 20404ead call send_connection_sdp_res +4dbd 204052c1 call l2cap_get_signal_tx_buff +4dbe 5800000c setarg 0x000c +4dbf e0a10000 istore 2 ,contw +4dc0 18007e01 force l2cap_signal_channel ,pdata +4dc1 e0a10000 istore 2 ,contw +4dc2 20204dfc branch l2cap_rx_reset_state + +l2cap_reset_sdp_map: +4dc3 4705c021 bpatchx patch21_3 ,mem_patch21 +4dc4 68010275 fetch 2 ,mem_sdp_tx_pkt_length +4dc5 1fe0fe04 increase 4 ,pdata +4dc6 1ff1fe00 rshift4 pdata ,pdata +4dc7 1fe97e00 rshift3 pdata ,pdata +4dc8 1fe08401 add pdata ,1 ,temp +4dc9 d8c04260 arg mem_tx_fifo3 ,contr +4dca e8c18000 ifetch 3 ,contr +4dcb 207a0000 rtn blank +4dcc 60018ac2 store 3 ,mem_tx_fifo_map_temp +4dcd 68008ac2 fetch 1 ,mem_tx_fifo_map_temp +4dce 1fe22200 copy pdata ,rega +4dcf 20404dd3 call check_l2cap_map +4dd0 1a427e00 copy regb ,pdata +4dd1 6000c260 store 1 ,mem_tx_fifo3 +4dd2 20600000 rtn + +check_l2cap_map: +4dd3 d8e00000 arg 0 ,queue +4dd4 da400000 arg 0 ,regb + +check_l2cap_map_loop: +4dd5 18e67c07 sub queue ,7 ,null +4dd6 24610000 nrtn positive +4dd7 aa2fffff qisolate1 rega +4dd8 2020cdda branch check_l2cap_map_used ,true +4dd9 20204dde branch check_l2cap_map_used2 + +check_l2cap_map_used: +4dda 18427e00 copy temp ,pdata +4ddb 203a4dde branch check_l2cap_map_used2 ,blank +4ddc f9202400 qset1 regb +4ddd 184085ff increase -1 ,temp + +check_l2cap_map_used2: +4dde 18e08e01 increase 1 ,queue +4ddf 20204dd5 branch check_l2cap_map_loop + +l2cap_call_proc_sdp: +4de0 20405274 call l2cap_malloc_is_fifo_empty +4de1 247a0000 nrtn blank +4de2 20404d8f call l2cap_check_map +4de3 247a0000 nrtn blank +4de4 204052c5 call l2cap_malloc_sdp_channel +4de5 20406e11 call sdp_process +4de6 20404dc3 call l2cap_reset_sdp_map +4de7 20204dec branch l2cap_call_proc_sdp_common + +ml2cap_call_proc_sdp: +4de8 20405274 call l2cap_malloc_is_fifo_empty +4de9 247a0000 nrtn blank +4dea 204052c5 call l2cap_malloc_sdp_channel +4deb 20406e11 call sdp_process + +l2cap_call_proc_sdp_common: +4dec 204052ce call l2cap_get_sdp_tx_buff +4ded 68010275 fetch 2 ,mem_sdp_tx_pkt_length +4dee 203a4dfb branch l2cap_call_proc_no_reply ,blank +4def e0a10000 istore 2 ,contw +4df0 68014248 fetch 2 ,mem_sdp_remote_cid +4df1 e0a10000 istore 2 ,contw +4df2 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_hid: +4df3 20404d33 call hid_rx_process +4df4 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_rfcomm: +4df5 47064021 bpatchx patch21_4 ,mem_patch21 +4df6 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +4df7 20406a8a call rfcomm_rx_process +4df8 68008284 fetch 1 ,mem_rfcomm_malloc_fail_flag +4df9 c1008000 rtneq rfcomm_malloc_fail +4dfa 20204dfc branch l2cap_rx_reset_state + +l2cap_call_proc_no_reply: +4dfb 20405264 call l2cap_malloc_discard + +l2cap_rx_reset_state: +4dfc 58000000 setarg 0 +4dfd 60010266 store 2 ,mem_l2cap_rx_pkt_length +4dfe 60010268 store 2 ,mem_l2cap_rx_cid +4dff 70026a01 jam l2cap_rx_done ,mem_l2cap_rx_done +4e00 20600000 rtn + +l2cap_process_signal_pkt: +4e01 4706c021 bpatchx patch21_5 ,mem_patch21 +4e02 204052c3 call l2cap_get_signal_tx_payload +4e03 18002400 force 0 ,regb +4e04 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +4e05 1fe22600 copy pdata ,regc +4e06 68010264 fetch 2 ,mem_l2cap_payload_ptr +4e07 98000c00 iforce contr + +l2cap_process_signal_pkt_loop: +4e08 20404e10 call l2cap_process_one_signal +4e09 1a627e00 deposit regc +4e0a 1a60a7fc increase -4 ,regc +4e0b 1fe0fffc increase -4 ,pdata +4e0c 243a4e08 nbranch l2cap_process_signal_pkt_loop ,blank +4e0d 1a427e00 copy regb ,pdata +4e0e 6001026f store 2 ,mem_l2cap_signal_tx_length +4e0f 20600000 rtn + +l2cap_process_one_signal: +4e10 47074021 bpatchx patch21_6 ,mem_patch21 +4e11 e8c08000 ifetch 1 ,contr +4e12 c000ce49 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +4e13 c0014e51 beq signal_connect_req ,l2cap_proc_signal_connect_req +4e14 c001ced5 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +4e15 c0024f05 beq signal_config_req ,l2cap_proc_signal_config_req +4e16 c002cfa2 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +4e17 c0034fcb beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +4e18 c003d01b beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +4e19 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req +4e1a c004d060 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +4e1b c0054e1f beq signal_info_req ,l2cap_proc_signal_info_req +4e1c c005d061 beq signal_info_rsp ,l2cap_proc_signal_info_rsp +4e1d 20405062 call l2cap_reject_command + +l2cap_process_one_signal_rtn: +4e1e 20600000 rtn + +l2cap_proc_signal_info_req: +4e1f e8c08000 ifetch 1 ,contr +4e20 1fe20e00 copy pdata ,queue +4e21 e8c10000 ifetch 2 ,contr +4e22 1fe22200 copy pdata ,rega +4e23 1a627e00 copy regc ,pdata +4e24 9a262600 isub rega ,regc +4e25 5800000b setarg signal_info_rsp +4e26 e0a08000 istore 1 ,contw +4e27 18e27e00 copy queue ,pdata +4e28 e0a08000 istore 1 ,contw +4e29 e8c10000 ifetch 2 ,contr + +l2cap_proc_signal_info_req_reply: +4e2a c0014e2d beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +4e2b c001ce33 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +4e2c 20600000 rtn + +l2cap_proc_signal_info_req_ext: +4e2d 58020008 setarg 0x020008 +4e2e e0a30000 istore 6 ,contw +4e2f 58000280 setarg 0x0280 +4e30 e0a20000 istore 4 ,contw +4e31 18007e0c force 12 ,pdata +4e32 20204e38 branch l2cap_proc_signal_info_req_common + +l2cap_proc_signal_info_req_fix: +4e33 5803000c setarg 0x3000c +4e34 e0a30000 istore 6 ,contw +4e35 58000006 setarg 0x0006 +4e36 e0a40000 istore 8 ,contw +4e37 18007e10 force 16 ,pdata + +l2cap_proc_signal_info_req_common: +4e38 9a40a400 iadd regb ,regb +4e39 20204e1e branch l2cap_process_one_signal_rtn + +ml2cap_proc_signal_info_req: +4e3a e8c08000 ifetch 1 ,contr +4e3b 1fe20e00 copy pdata ,queue +4e3c e8c10000 ifetch 2 ,contr +4e3d 1fe22200 copy pdata ,rega +4e3e e8c10000 ifetch 2 ,contr +4e3f 60010aa2 store 2 ,mem_temp +4e40 1a627e00 copy regc ,pdata +4e41 9a262600 isub rega ,regc +4e42 204052c3 call l2cap_get_signal_tx_payload +4e43 5800000b setarg signal_info_rsp +4e44 e0a08000 istore 1 ,contw +4e45 18e27e00 copy queue ,pdata +4e46 e0a08000 istore 1 ,contw +4e47 68010aa2 fetch 2 ,mem_temp +4e48 20204e2a branch l2cap_proc_signal_info_req_reply + +l2cap_proc_signal_cmd_reject: +4e49 e8c08000 ifetch 1 ,contr +4e4a 1fe20e00 copy pdata ,queue +4e4b e8c10000 ifetch 2 ,contr +4e4c 1fe22200 copy pdata ,rega +4e4d 98c08c00 iadd contr ,contr +4e4e 1a627e00 copy regc ,pdata +4e4f 9a262600 isub rega ,regc + +l2cap_proc_signal_cmd_reject_rtn: +4e50 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_req: +4e51 20407ea8 call save_cont_pointers +4e52 20407ead call load_cont_pointers +4e53 d9000000 arg 0 ,debug +4e54 e8c08000 ifetch 1 ,contr +4e55 1fe20e00 copy pdata ,queue +4e56 e8c10000 ifetch 2 ,contr +4e57 1fe22200 copy pdata ,rega +4e58 e8c10000 ifetch 2 ,contr +4e59 1fe20400 copy pdata ,temp +4e5a e8c10000 ifetch 2 ,contr +4e5b 1fe21600 copy pdata ,timeup +4e5c 4707c021 bpatchx patch21_7 ,mem_patch21 +4e5d 18427e00 copy temp ,pdata +4e5e c000ce64 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +4e5f c001ce86 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +4e60 c008ce92 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +4e61 c009ce9d beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +4e62 20405062 call l2cap_reject_command +4e63 20204ed4 branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_sdp: +4e64 20407ea8 call save_cont_pointers +4e65 d8400050 arg l2cap_sdp_channel ,temp +4e66 68014248 fetch 2 ,mem_sdp_remote_cid +4e67 243a4ece nbranch already_connected ,blank +4e68 19627e00 copy timeup ,pdata +4e69 60014248 store 2 ,mem_sdp_remote_cid +4e6a 1c427e00 copy clkn_bt ,pdata +4e6b 600202d5 store 4 ,mem_l2cap_sdpres_delay_time +4e6c 20404e6e call store_l2cap_req_param +4e6d 20204ea9 branch send_connection_pending + +store_l2cap_req_param: +4e6e 600902d3 storet 2 ,mem_psm +4e6f 19627e00 deposit timeup +4e70 600102c9 store 2 ,mem_scid +4e71 1a227e00 deposit rega +4e72 600102cb store 2 ,mem_cmd_length +4e73 1a427e00 deposit regb +4e74 600102cd store 2 ,mem_tt2 +4e75 1a627e00 deposit regc +4e76 600102cf store 2 ,mem_tt3 +4e77 18e27e00 deposit queue +4e78 600102d1 store 2 ,mem_id +4e79 20600000 rtn + +restore_l2cap_req_param: +4e7a 680902d3 fetcht 2 ,mem_psm +4e7b 680102c9 fetch 2 ,mem_scid +4e7c 1fe21600 copy pdata ,timeup +4e7d 680102cb fetch 2 ,mem_cmd_length +4e7e 1fe22200 copy pdata ,rega +4e7f 680102cd fetch 2 ,mem_tt2 +4e80 1fe22400 copy pdata ,regb +4e81 680102cf fetch 2 ,mem_tt3 +4e82 1fe22600 copy pdata ,regc +4e83 680102d1 fetch 2 ,mem_id +4e84 1fe20e00 copy pdata ,queue +4e85 20600000 rtn + +l2cap_proc_signal_connect_req_rfcomm: +4e86 20407ea8 call save_cont_pointers +4e87 58000051 setarg l2cap_rfcomm_channel +4e88 d8400051 arg l2cap_rfcomm_channel ,temp +4e89 6801424a fetch 2 ,mem_rfcomm_remote_cid +4e8a 243a4ece nbranch already_connected ,blank +4e8b 19627e00 copy timeup ,pdata +4e8c 6001424a store 2 ,mem_rfcomm_remote_cid +4e8d 6800c251 fetch 1 ,mem_rfcomm_state +4e8e 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4e8f 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4e90 6000c251 store 1 ,mem_rfcomm_state +4e91 20204eb1 branch send_connection_res + +l2cap_proc_signal_connect_req_hid_ctrl: +4e92 20407ea8 call save_cont_pointers +4e93 d8400052 arg l2cap_hid_control_channel ,temp +4e94 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4e95 243a4ece nbranch already_connected ,blank +4e96 19627e00 copy timeup ,pdata +4e97 6001424c store 2 ,mem_hid_ctrl_remote_cid +4e98 6800c252 fetch 1 ,mem_hid_control_state +4e99 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4e9a 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4e9b 6000c252 store 1 ,mem_hid_control_state +4e9c 20204eb1 branch send_connection_res + +l2cap_proc_signal_connect_req_hid_int: +4e9d 20407ea8 call save_cont_pointers +4e9e 1b427e00 deposit clke +4e9f d8400053 arg l2cap_hid_interrupt_channel ,temp +4ea0 6801424e fetch 2 ,mem_hid_int_remote_cid +4ea1 243a4ece nbranch already_connected ,blank +4ea2 19627e00 copy timeup ,pdata +4ea3 6001424e store 2 ,mem_hid_int_remote_cid +4ea4 6800c253 fetch 1 ,mem_hid_interrupt_state +4ea5 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4ea6 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ea7 6000c253 store 1 ,mem_hid_interrupt_state +4ea8 20204eb1 branch send_connection_res + +send_connection_pending: +4ea9 58000001 setarg l2cap_connect_pending +4eaa 6001027d store 2 ,meml2cap_t1 +4eab 70436450 jam l2cap_sdp_channel ,mem_l2cap_pending_item +4eac 20204eb3 branch send_connection_res0 + +send_connection_sdp_res: +4ead 6800c250 fetch 1 ,mem_sdp_state +4eae 79207e00 set1 l2cap_channel_state_conn_req ,pdata +4eaf 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4eb0 6000c250 store 1 ,mem_sdp_state + +send_connection_res: +4eb1 58000000 setarg l2cap_connect_successful +4eb2 6001027d store 2 ,meml2cap_t1 + +send_connection_res0: +4eb3 47084022 bpatchx patch22_0 ,mem_patch22 +4eb4 20407ead call load_cont_pointers +4eb5 58000003 setarg signal_connect_rsp +4eb6 e0a08000 istore 1 ,contw +4eb7 18e27e00 copy queue ,pdata +4eb8 e0a08000 istore 1 ,contw +4eb9 58000008 setarg 0x0008 +4eba e0a10000 istore 2 ,contw +4ebb 18427e00 copy temp ,pdata +4ebc e0a10000 istore 2 ,contw +4ebd 19627e00 copy timeup ,pdata +4ebe e0a10000 istore 2 ,contw +4ebf 6801027d fetch 2 ,meml2cap_t1 +4ec0 c000cec9 beq l2cap_connect_pending ,connect_pending +4ec1 290c0000 isolate0 0 ,debug +4ec2 2020cec4 branch connect_suc ,true +4ec3 58000004 setarg l2cap_connect_refused_no_resources + +connect_suc: +4ec4 e0a10000 istore 2 ,contw +4ec5 18007e00 force 0x0000 ,pdata +4ec6 e0a10000 istore 2 ,contw +4ec7 5800000c setarg 12 +4ec8 20204ed0 branch connect_req_update_byte_counts + +connect_pending: +4ec9 e0a10000 istore 2 ,contw +4eca 18007e02 force 0x0002 ,pdata +4ecb e0a10000 istore 2 ,contw +4ecc 5800000c setarg 12 +4ecd 20204ed0 branch connect_req_update_byte_counts + +already_connected: +4ece 79201000 set1 0 ,debug +4ecf 20204eb1 branch send_connection_res + +connect_req_update_byte_counts: +4ed0 9a40a400 iadd regb ,regb +4ed1 1a627e00 copy regc ,pdata +4ed2 9a262600 isub rega ,regc +4ed3 20204ed4 branch l2cap_proc_signal_connect_req_rtn + +l2cap_proc_signal_connect_req_rtn: +4ed4 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp: +4ed5 e8c08000 ifetch 1 ,contr +4ed6 1fe20e00 copy pdata ,queue +4ed7 e8c10000 ifetch 2 ,contr +4ed8 1fe22200 copy pdata ,rega +4ed9 1a627e00 copy regc ,pdata +4eda 9a262600 isub rega ,regc +4edb e8c10000 ifetch 2 ,contr +4edc 1fe21600 copy pdata ,timeup +4edd e8c10000 ifetch 2 ,contr +4ede 1fe20400 copy pdata ,temp +4edf 4708c022 bpatchx patch22_1 ,mem_patch22 +4ee0 58000050 setarg l2cap_sdp_channel +4ee1 98467c00 isub temp ,null +4ee2 2022ceed branch l2cap_proc_signal_connect_rsp_sdp ,zero +4ee3 58000051 setarg l2cap_rfcomm_channel +4ee4 98467c00 isub temp ,null +4ee5 2022cef3 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +4ee6 58000052 setarg l2cap_hid_control_channel +4ee7 98467c00 isub temp ,null +4ee8 2022ceff branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +4ee9 58000053 setarg l2cap_hid_interrupt_channel +4eea 98467c00 isub temp ,null +4eeb 2022cef9 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +4eec 20600000 rtn + +l2cap_proc_signal_connect_rsp_sdp: +4eed 19627e00 copy timeup ,pdata +4eee 60014248 store 2 ,mem_sdp_remote_cid +4eef 6800c250 fetch 1 ,mem_sdp_state +4ef0 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ef1 6000c250 store 1 ,mem_sdp_state +4ef2 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_connect_rsp_rfcomm: +4ef3 19627e00 copy timeup ,pdata +4ef4 6001424a store 2 ,mem_rfcomm_remote_cid +4ef5 6800c251 fetch 1 ,mem_rfcomm_state +4ef6 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4ef7 6000c251 store 1 ,mem_rfcomm_state +4ef8 20600000 rtn + +l2cap_proc_signal_connect_rsp_hid_int: +4ef9 19627e00 copy timeup ,pdata +4efa 6001424c store 2 ,mem_hid_ctrl_remote_cid +4efb 6800c253 fetch 1 ,mem_hid_interrupt_state +4efc 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4efd 6000c253 store 1 ,mem_hid_interrupt_state +4efe 20600000 rtn + +l2cap_proc_signal_connect_rsp_hid_ctrl: +4eff 19627e00 copy timeup ,pdata +4f00 6001424e store 2 ,mem_hid_int_remote_cid +4f01 6800c252 fetch 1 ,mem_hid_control_state +4f02 79207e01 set1 l2cap_channel_state_conn_res ,pdata +4f03 6000c252 store 1 ,mem_hid_control_state +4f04 20600000 rtn + +l2cap_proc_signal_config_req: +4f05 e8c08000 ifetch 1 ,contr +4f06 1fe20e00 copy pdata ,queue +4f07 e8c10000 ifetch 2 ,contr +4f08 1fe22200 copy pdata ,rega +4f09 1a627e00 copy regc ,pdata +4f0a 9a262600 isub rega ,regc +4f0b e8c10000 ifetch 2 ,contr +4f0c 1fe20400 copy pdata ,temp +4f0d 18422200 copy temp ,rega +4f0e 47094022 bpatchx patch22_2 ,mem_patch22 +4f0f 58000050 setarg l2cap_sdp_channel +4f10 98467c00 isub temp ,null +4f11 2022cf1c branch l2cap_proc_signal_config_req_sdp ,zero +4f12 58000051 setarg l2cap_rfcomm_channel +4f13 98467c00 isub temp ,null +4f14 2022cf3a branch l2cap_proc_signal_config_req_rfcomm ,zero +4f15 58000052 setarg l2cap_hid_control_channel +4f16 98467c00 isub temp ,null +4f17 2022cf26 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +4f18 58000053 setarg l2cap_hid_interrupt_channel +4f19 98467c00 isub temp ,null +4f1a 2022cf30 branch l2cap_proc_signal_config_req_hid_int ,zero +4f1b 20205062 branch l2cap_reject_command + +l2cap_proc_signal_config_req_sdp: +4f1c 18a21600 copy contw ,timeup +4f1d 6800c250 fetch 1 ,mem_sdp_state +4f1e 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f1f 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f20 6000c250 store 1 ,mem_sdp_state +4f21 19620a00 copy timeup ,contw +4f22 d9600050 arg l2cap_sdp_channel ,timeup +4f23 68014248 fetch 2 ,mem_sdp_remote_cid +4f24 1fe20400 copy pdata ,temp +4f25 20204f43 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_hid_ctrl: +4f26 18a21600 copy contw ,timeup +4f27 6800c252 fetch 1 ,mem_hid_control_state +4f28 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f29 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f2a 6000c252 store 1 ,mem_hid_control_state +4f2b 19620a00 copy timeup ,contw +4f2c d9600052 arg l2cap_hid_control_channel ,timeup +4f2d 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4f2e 1fe20400 copy pdata ,temp +4f2f 20204f43 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_hid_int: +4f30 18a21600 copy contw ,timeup +4f31 6800c253 fetch 1 ,mem_hid_interrupt_state +4f32 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f33 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f34 6000c253 store 1 ,mem_hid_interrupt_state +4f35 19620a00 copy timeup ,contw +4f36 d9600053 arg l2cap_hid_interrupt_channel ,timeup +4f37 6801424e fetch 2 ,mem_hid_int_remote_cid +4f38 1fe20400 copy pdata ,temp +4f39 20204f43 branch l2cap_send_config_rsp + +l2cap_proc_signal_config_req_rfcomm: +4f3a 18a21600 copy contw ,timeup +4f3b 6800c251 fetch 1 ,mem_rfcomm_state +4f3c 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +4f3d 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +4f3e 6000c251 store 1 ,mem_rfcomm_state +4f3f 19620a00 copy timeup ,contw +4f40 d9600051 arg l2cap_rfcomm_channel ,timeup +4f41 6801424a fetch 2 ,mem_rfcomm_remote_cid +4f42 1fe20400 copy pdata ,temp + +l2cap_send_config_rsp: +4f43 4709c022 bpatchx patch22_3 ,mem_patch22 +4f44 58000005 setarg signal_config_rsp +4f45 e0a08000 istore 1 ,contw +4f46 18e27e00 copy queue ,pdata +4f47 e0a08000 istore 1 ,contw +4f48 58000006 setarg 0x0006 +4f49 e0a10000 istore 2 ,contw +4f4a 18427e00 copy temp ,pdata +4f4b e0a10000 istore 2 ,contw +4f4c 18007e00 force 0x00 ,pdata +4f4d e0a10000 istore 2 ,contw +4f4e 18007e00 force l2cap_config_success ,pdata +4f4f e0a10000 istore 2 ,contw +4f50 18007e0a force 10 ,pdata +4f51 9a40a400 iadd regb ,regb +4f52 60090282 storet 2 ,mem_config_req_dest_cid +4f53 18e27e00 copy queue ,pdata +4f54 60008281 store 1 ,mem_config_identifier +4f55 18007e50 force l2cap_sdp_channel ,pdata +4f56 a961fe00 icompare 0xff ,timeup +4f57 2020cf59 branch l2cap_send_config_rsp_is_sdp ,true +4f58 1fe0fe01 increase 1 ,pdata + +l2cap_send_config_rsp_is_sdp: +4f59 20600000 rtn + +l2cap_check_channel_state: +4f5a 78547c00 disable user +4f5b c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +4f5c c4000000 rtnbit0 l2cap_channel_state_conn_req ,pdata +4f5d c4008000 rtnbit0 l2cap_channel_state_conn_res ,pdata +4f5e 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +4f5f 18c20a00 copy contr ,contw +4f60 18a08bff increase -1 ,contw +4f61 e0a08000 istore 1 ,contw +4f62 78347c00 enable user +4f63 20600000 rtn + +l2cap_send_config_req: + +l2cap_send_config_req_sdp: +4f64 6800c250 fetch 1 ,mem_sdp_state +4f65 20404f5a call l2cap_check_channel_state +4f66 24344f6b nbranch l2cap_send_config_req_rfcomm ,user +4f67 70028050 jam l2cap_sdp_channel ,mem_send_config_req +4f68 68014248 fetch 2 ,mem_sdp_remote_cid +4f69 60010282 store 2 ,mem_config_req_dest_cid +4f6a 20204f7f branch l2cap_generate_config_req + +l2cap_send_config_req_rfcomm: +4f6b 6800c251 fetch 1 ,mem_rfcomm_state +4f6c 20404f5a call l2cap_check_channel_state +4f6d 24344f72 nbranch l2cap_send_config_req_hid_ctrl ,user +4f6e 70028051 jam l2cap_rfcomm_channel ,mem_send_config_req +4f6f 6801424a fetch 2 ,mem_rfcomm_remote_cid +4f70 60010282 store 2 ,mem_config_req_dest_cid +4f71 20204f7f branch l2cap_generate_config_req + +l2cap_send_config_req_hid_ctrl: +4f72 6800c252 fetch 1 ,mem_hid_control_state +4f73 20404f5a call l2cap_check_channel_state +4f74 24344f79 nbranch l2cap_send_config_req_hid_int ,user +4f75 70028052 jam l2cap_hid_control_channel ,mem_send_config_req +4f76 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4f77 60010282 store 2 ,mem_config_req_dest_cid +4f78 20204f7f branch l2cap_generate_config_req + +l2cap_send_config_req_hid_int: +4f79 6800c253 fetch 1 ,mem_hid_interrupt_state +4f7a 20404f5a call l2cap_check_channel_state +4f7b 24740000 nrtn user +4f7c 70028053 jam l2cap_hid_interrupt_channel ,mem_send_config_req +4f7d 6801424e fetch 2 ,mem_hid_int_remote_cid +4f7e 60010282 store 2 ,mem_config_req_dest_cid + +l2cap_generate_config_req: +4f7f 470a4022 bpatchx patch22_4 ,mem_patch22 +4f80 2040523a call l2cap_get_req_id +4f81 204052b8 call l2cap_malloc_signal_channel +4f82 18002400 force 0 ,regb +4f83 204052c3 call l2cap_get_signal_tx_payload +4f84 18007e04 force signal_config_req ,pdata +4f85 e0a08000 istore 1 ,contw +4f86 6800c255 fetch 1 ,mem_ml2cap_comm_id +4f87 e0a08000 istore 1 ,contw +4f88 58000008 setarg 0x0008 +4f89 e0a10000 istore 2 ,contw +4f8a 68010282 fetch 2 ,mem_config_req_dest_cid +4f8b e0a10000 istore 2 ,contw +4f8c 58000000 setarg 0x0000 +4f8d e0a10000 istore 2 ,contw +4f8e 18007e01 force 1 ,pdata +4f8f e0a08000 istore 1 ,contw +4f90 18007e02 force 2 ,pdata +4f91 e0a08000 istore 1 ,contw +4f92 68008280 fetch 1 ,mem_send_config_req +4f93 c028cf97 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +4f94 58000030 setarg l2cap_config_mtu_sdp +4f95 e0a10000 istore 2 ,contw +4f96 20204f99 branch l2cap_generate_config_req_done + +l2cap_generate_config_req_rfcomm: +4f97 580003e3 setarg l2cap_config_mtu_rfcomm +4f98 e0a10000 istore 2 ,contw + +l2cap_generate_config_req_done: +4f99 d840000c arg 0x0c ,temp +4f9a 6009026f storet 2 ,mem_l2cap_signal_tx_length +4f9b 204052c1 call l2cap_get_signal_tx_buff +4f9c 6801026f fetch 2 ,mem_l2cap_signal_tx_length +4f9d e0a10000 istore 2 ,contw +4f9e 18007e01 force l2cap_signal_channel ,pdata +4f9f e0a10000 istore 2 ,contw +4fa0 70028000 jam 0 ,mem_send_config_req + +l2cap_proc_signal_config_req_rtn: +4fa1 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp: +4fa2 18c08c01 increase 1 ,contr +4fa3 e8c10000 ifetch 2 ,contr +4fa4 1fe22200 copy pdata ,rega +4fa5 1a627e00 copy regc ,pdata +4fa6 9a262600 isub rega ,regc +4fa7 e8c10000 ifetch 2 ,contr +4fa8 1fe22200 copy pdata ,rega +4fa9 470ac022 bpatchx patch22_5 ,mem_patch22 +4faa 58000050 setarg l2cap_sdp_channel +4fab 9a267c00 isub rega ,null +4fac 2022cfba branch l2cap_proc_signal_config_rsp_sdp ,zero +4fad 58000051 setarg l2cap_rfcomm_channel +4fae 9a267c00 isub rega ,null +4faf 2022cfbe branch l2cap_proc_signal_config_rsp_rfcomm ,zero +4fb0 58000052 setarg l2cap_hid_control_channel +4fb1 9a267c00 isub rega ,null +4fb2 2022cfc2 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +4fb3 58000053 setarg l2cap_hid_interrupt_channel +4fb4 9a267c00 isub rega ,null +4fb5 2022cfc6 branch l2cap_proc_signal_config_rsp_hid_int ,zero +4fb6 18c08c02 increase 2 ,contr +4fb7 e8c10000 ifetch 2 ,contr +4fb8 98007c00 iforce null +4fb9 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_sdp: +4fba 6800c250 fetch 1 ,mem_sdp_state +4fbb 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fbc 6000c250 store 1 ,mem_sdp_state +4fbd 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_rfcomm: +4fbe 6800c251 fetch 1 ,mem_rfcomm_state +4fbf 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fc0 6000c251 store 1 ,mem_rfcomm_state +4fc1 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_hid_ctrl: +4fc2 6800c252 fetch 1 ,mem_hid_control_state +4fc3 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fc4 6000c252 store 1 ,mem_hid_control_state +4fc5 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_config_rsp_hid_int: +4fc6 6800c253 fetch 1 ,mem_hid_interrupt_state +4fc7 79207e05 set1 l2cap_channel_state_rcv_cfg_res ,pdata +4fc8 6000c253 store 1 ,mem_hid_interrupt_state +4fc9 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp +4fca 20207d86 branch ui_ipc_send_event + +l2cap_proc_signal_disconnect_req: +4fcb e8c08000 ifetch 1 ,contr +4fcc 1fe20e00 copy pdata ,queue +4fcd e8c10000 ifetch 2 ,contr +4fce 1fe22200 copy pdata ,rega +4fcf 1a627e00 copy regc ,pdata +4fd0 9a262600 isub rega ,regc +4fd1 e8c10000 ifetch 2 ,contr +4fd2 1fe22200 copy pdata ,rega +4fd3 e8c10000 ifetch 2 ,contr +4fd4 1fe21600 copy pdata ,timeup +4fd5 1a220400 copy rega ,temp +4fd6 20407ea8 call save_cont_pointers +4fd7 470b4022 bpatchx patch22_6 ,mem_patch22 +4fd8 58000050 setarg l2cap_sdp_channel +4fd9 98467c00 isub temp ,null +4fda 2022cff2 branch l2cap_proc_signal_disconnect_req_sdp ,zero +4fdb 58000051 setarg l2cap_rfcomm_channel +4fdc 98467c00 isub temp ,null +4fdd 2022d002 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +4fde 58000052 setarg l2cap_hid_control_channel +4fdf 98467c00 isub temp ,null +4fe0 2022cfe6 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +4fe1 58000053 setarg l2cap_hid_interrupt_channel +4fe2 98467c00 isub temp ,null +4fe3 2022cfec branch l2cap_proc_signal_disconnect_req_hid_int ,zero +4fe4 20405062 call l2cap_reject_command +4fe5 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_hid_ctrl: +4fe6 19620400 copy timeup ,temp +4fe7 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4fe8 98467c00 isub temp ,null +4fe9 2022cff8 branch l2cap_disconnect_hid_control_now ,zero +4fea 20405062 call l2cap_reject_command +4feb 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_hid_int: +4fec 19620400 copy timeup ,temp +4fed 6801424e fetch 2 ,mem_hid_int_remote_cid +4fee 98467c00 isub temp ,null +4fef 2022cffa branch l2cap_disconnect_hid_interrupt_now ,zero +4ff0 20405062 call l2cap_reject_command +4ff1 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_proc_signal_disconnect_req_sdp: +4ff2 19620400 copy timeup ,temp +4ff3 68014248 fetch 2 ,mem_sdp_remote_cid +4ff4 98467c00 isub temp ,null +4ff5 2022cffe branch l2cap_disconnect_sdp_now ,zero +4ff6 20405062 call l2cap_reject_command +4ff7 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_disconnect_hid_control_now: +4ff8 20405079 call l2cap_reset_hid_ctrl_state +4ff9 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_hid_interrupt_now: +4ffa 2040507f call l2cap_reset_hid_int_state +4ffb 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +4ffc 203a500a branch l2cap_send_disconnect_rsp_pkt ,blank +4ffd 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_disconnect_sdp_now: +4ffe 20405074 call l2cap_reset_sdp_channel_state +4fff 68008288 fetch 1 ,mem_upper_sm_ss +5000 243a500a nbranch l2cap_send_disconnect_rsp_pkt ,blank +5001 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_proc_signal_disconnect_req_rfcomm: +5002 19620400 copy timeup ,temp +5003 6801424a fetch 2 ,mem_rfcomm_remote_cid +5004 98467c00 isub temp ,null +5005 2022d008 branch l2cap_disconnect_rfcomm_now ,zero +5006 20405062 call l2cap_reject_command +5007 20205017 branch l2cap_proc_signal_disconnect_req_err_rtn + +l2cap_disconnect_rfcomm_now: +5008 2040506f call l2cap_reset_rfcomm_channel_state +5009 2020500a branch l2cap_send_disconnect_rsp_pkt + +l2cap_send_disconnect_rsp_pkt: +500a 20407ead call load_cont_pointers +500b 58000007 setarg signal_disconnect_rsp +500c e0a08000 istore 1 ,contw +500d 18e27e00 copy queue ,pdata +500e e0a08000 istore 1 ,contw +500f 58000004 setarg 0x0004 +5010 e0a10000 istore 2 ,contw +5011 1a227e00 copy rega ,pdata +5012 e0a10000 istore 2 ,contw +5013 19627e00 copy timeup ,pdata +5014 e0a10000 istore 2 ,contw +5015 18007e08 force 8 ,pdata +5016 20205019 branch l2cap_proc_signal_disconnect_req_rtn + +l2cap_proc_signal_disconnect_req_err_rtn: +5017 20407ead call load_cont_pointers +5018 20205019 branch l2cap_proc_signal_disconnect_req_rtn + +l2cap_proc_signal_disconnect_req_rtn: +5019 9a40a400 iadd regb ,regb +501a 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_disconnect_rsp: +501b e8c08000 ifetch 1 ,contr +501c 1fe20e00 copy pdata ,queue +501d e8c10000 ifetch 2 ,contr +501e 1fe22200 copy pdata ,rega +501f 1a627e00 copy regc ,pdata +5020 9a262600 isub rega ,regc +5021 e8c10000 ifetch 2 ,contr +5022 1fe21600 copy pdata ,timeup +5023 e8c10000 ifetch 2 ,contr +5024 1fe20400 copy pdata ,temp +5025 20407ea8 call save_cont_pointers +5026 470bc022 bpatchx patch22_7 ,mem_patch22 +5027 58000050 setarg l2cap_sdp_channel +5028 98467c00 isub temp ,null +5029 2022d035 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +502a 58000051 setarg l2cap_rfcomm_channel +502b 98467c00 isub temp ,null +502c 2022d03b branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +502d 58000052 setarg l2cap_hid_control_channel +502e 98467c00 isub temp ,null +502f 2022d041 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +5030 58000053 setarg l2cap_hid_interrupt_channel +5031 98467c00 isub temp ,null +5032 2022d047 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +5033 20405062 call l2cap_reject_command +5034 2020504f branch l2cap_proc_signal_disconnect_rsp_err_rtn + +l2cap_proc_signal_disconnect_rsp_sdp: +5035 18422200 copy temp ,rega +5036 19620400 copy timeup ,temp +5037 68014248 fetch 2 ,mem_sdp_remote_cid +5038 98467c00 isub temp ,null +5039 2042d074 call l2cap_reset_sdp_channel_state ,zero +503a 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_rfcomm: +503b 18422200 copy temp ,rega +503c 19620400 copy timeup ,temp +503d 6801424a fetch 2 ,mem_rfcomm_remote_cid +503e 98467c00 isub temp ,null +503f 2042d06f call l2cap_reset_rfcomm_channel_state ,zero +5040 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_hid_ctrl: +5041 18422200 copy temp ,rega +5042 19620400 copy timeup ,temp +5043 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +5044 98467c00 isub temp ,null +5045 2042d079 call l2cap_reset_hid_ctrl_state ,zero +5046 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_hid_int: +5047 18422200 copy temp ,rega +5048 19620400 copy timeup ,temp +5049 6801424e fetch 2 ,mem_hid_int_remote_cid +504a 98467c00 isub temp ,null +504b 2042d07f call l2cap_reset_hid_int_state ,zero +504c 2020504d branch l2cap_proc_signal_disconnect_rsp_rtn + +l2cap_proc_signal_disconnect_rsp_rtn: +504d 20407ead call load_cont_pointers +504e 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_disconnect_rsp_err_rtn: +504f 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_echo_req: +5050 e8c08000 ifetch 1 ,contr +5051 1fe20e00 copy pdata ,queue +5052 e8c10000 ifetch 2 ,contr +5053 1fe22200 copy pdata ,rega +5054 98c08c00 iadd contr ,contr +5055 58000009 setarg 9 +5056 e0a08000 istore 1 ,contw +5057 18e27e00 copy queue ,pdata +5058 e0a08000 istore 1 ,contw +5059 18007e00 force 0x0000 ,pdata +505a e0a10000 istore 2 ,contw +505b 18007e04 force 4 ,pdata +505c 9a40a400 iadd regb ,regb +505d 1a627e00 copy regc ,pdata +505e 9a262600 isub rega ,regc +505f 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_echo_rsp: +5060 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_proc_signal_info_rsp: +5061 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_reject_command: +5062 18002400 force 0 ,regb +5063 204052c3 call l2cap_get_signal_tx_payload +5064 58000001 setarg signal_cmd_reject +5065 e0a08000 istore 1 ,contw +5066 18e27e00 copy queue ,pdata +5067 e0a08000 istore 1 ,contw +5068 58000002 setarg 2 +5069 e0a10000 istore 2 ,contw +506a 58000000 setarg cmd_not_understood +506b e0a10000 istore 2 ,contw +506c 1a40a406 increase 6 ,regb +506d da600004 arg 4 ,regc +506e 20204e1e branch l2cap_process_one_signal_rtn + +l2cap_reset_rfcomm_channel_state: +506f 58000000 setarg 0 +5070 6001027b store 2 ,mem_rfcomm_tx_pkt_length +5071 6001424a store 2 ,mem_rfcomm_remote_cid +5072 70425100 jam 0 ,mem_rfcomm_state +5073 20600000 rtn + +l2cap_reset_sdp_channel_state: +5074 58000000 setarg 0 +5075 60010275 store 2 ,mem_sdp_tx_pkt_length +5076 60014248 store 2 ,mem_sdp_remote_cid +5077 70425000 jam 0 ,mem_sdp_state +5078 20600000 rtn + +l2cap_reset_hid_ctrl_state: +5079 58000000 setarg 0 +507a 6001424c store 2 ,mem_hid_ctrl_remote_cid +507b 70425200 jam 0 ,mem_hid_control_state +507c 6800c253 fetch 1 ,mem_hid_interrupt_state +507d c0005085 beq 0 ,l2cap_reset_hid_disconnected +507e 20600000 rtn + +l2cap_reset_hid_int_state: +507f 58000000 setarg 0 +5080 6001424e store 2 ,mem_hid_int_remote_cid +5081 70425300 jam 0 ,mem_hid_interrupt_state +5082 6800c252 fetch 1 ,mem_hid_control_state +5083 c0005085 beq 0 ,l2cap_reset_hid_disconnected +5084 20600000 rtn + +l2cap_reset_hid_disconnected: +5085 700a9907 jam bt_evt_hid_disconnected ,mem_fifo_temp +5086 20207d86 branch ui_ipc_send_event + +l2cap_disconnect_interrupt_req: +5087 6800827f fetch 1 ,mem_control_tasks +5088 793ffe00 set0 l2cap_disconnect_interrupt ,pdata +5089 6000827f store 1 ,mem_control_tasks +508a 6801424e fetch 2 ,mem_hid_int_remote_cid +508b 207a0000 rtn blank +508c 204052b8 call l2cap_malloc_signal_channel +508d 6801424e fetch 2 ,mem_hid_int_remote_cid +508e 1fe22200 copy pdata ,rega +508f 18002453 force l2cap_hid_interrupt_channel ,regb +5090 2020509a branch l2cap_generate_disconnect_req + +l2cap_disconnect_control_req: +5091 6800827f fetch 1 ,mem_control_tasks +5092 793ffe07 set0 l2cap_disconnect_control ,pdata +5093 6000827f store 1 ,mem_control_tasks +5094 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +5095 207a0000 rtn blank +5096 204052b8 call l2cap_malloc_signal_channel +5097 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +5098 1fe22200 copy pdata ,rega +5099 18002452 force l2cap_hid_control_channel ,regb + +l2cap_generate_disconnect_req: +509a 2040523a call l2cap_get_req_id +509b 204052c3 call l2cap_get_signal_tx_payload +509c 18007e06 force signal_disconnect_req ,pdata +509d e0a08000 istore 1 ,contw +509e 6800c255 fetch 1 ,mem_ml2cap_comm_id +509f e0a08000 istore 1 ,contw +50a0 58000004 setarg 0x0004 +50a1 e0a10000 istore 2 ,contw +50a2 1a227e00 copy rega ,pdata +50a3 e0a10000 istore 2 ,contw +50a4 1a427e00 copy regb ,pdata +50a5 e0a10000 istore 2 ,contw +50a6 18000408 force 0x08 ,temp +50a7 202050de branch ml2cap_send_signal + +ml2cap_send_signal_connect_req: +50a8 470c4023 bpatchx patch23_0 ,mem_patch23 +50a9 2040523a call l2cap_get_req_id +50aa 204052c3 call l2cap_get_signal_tx_payload +50ab 58000002 setarg signal_connect_req +50ac e0a08000 istore 1 ,contw +50ad 6800c255 fetch 1 ,mem_ml2cap_comm_id +50ae e0a08000 istore 1 ,contw +50af 58000004 setarg 0x0004 +50b0 e0a10000 istore 2 ,contw +50b1 18427e00 copy temp ,pdata +50b2 e0a10000 istore 2 ,contw +50b3 19627e00 copy timeup ,pdata +50b4 e0a10000 istore 2 ,contw +50b5 d8400008 arg 8 ,temp +50b6 202050de branch ml2cap_send_signal + +ml2cap_send_signal_config_req: +50b7 470cc023 bpatchx patch23_1 ,mem_patch23 +50b8 2040523a call l2cap_get_req_id +50b9 204052c3 call l2cap_get_signal_tx_payload +50ba 58000004 setarg signal_config_req +50bb e0a08000 istore 1 ,contw +50bc 6800c255 fetch 1 ,mem_ml2cap_comm_id +50bd e0a08000 istore 1 ,contw +50be 58000008 setarg 0x0008 +50bf e0a10000 istore 2 ,contw +50c0 18427e00 copy temp ,pdata +50c1 e0a10000 istore 2 ,contw +50c2 58000000 setarg 0x0000 +50c3 e0a10000 istore 2 ,contw +50c4 58000001 setarg 0x01 +50c5 e0a08000 istore 1 ,contw +50c6 58000002 setarg 0x02 +50c7 e0a08000 istore 1 ,contw +50c8 580003e3 setarg l2cap_config_mtu_rfcomm +50c9 e0a10000 istore 2 ,contw +50ca d840000c arg 0xc ,temp +50cb 202050de branch ml2cap_send_signal + +ml2cap_send_signal_disconn_req: +50cc 470d4023 bpatchx patch23_2 ,mem_patch23 +50cd 2040523a call l2cap_get_req_id +50ce 204052c3 call l2cap_get_signal_tx_payload +50cf 58000006 setarg signal_disconnect_req +50d0 e0a08000 istore 1 ,contw +50d1 6800c255 fetch 1 ,mem_ml2cap_comm_id +50d2 1fe0fe01 increase 1 ,pdata +50d3 18a22200 copy contw ,rega +50d4 6000c255 store 1 ,mem_ml2cap_comm_id +50d5 1a220a00 copy rega ,contw +50d6 e0a08000 istore 1 ,contw +50d7 58000004 setarg 0x0004 +50d8 e0a10000 istore 2 ,contw +50d9 18427e00 copy temp ,pdata +50da e0a10000 istore 2 ,contw +50db 19627e00 copy timeup ,pdata +50dc e0a10000 istore 2 ,contw +50dd d8400008 arg 0x8 ,temp + +ml2cap_send_signal: +50de 6009026f storet 2 ,mem_l2cap_signal_tx_length +50df 18427e00 copy temp ,pdata +50e0 203a5264 branch l2cap_malloc_discard ,blank +50e1 204052c1 call l2cap_get_signal_tx_buff +50e2 6801026f fetch 2 ,mem_l2cap_signal_tx_length +50e3 e0a10000 istore 2 ,contw +50e4 18007e01 force l2cap_signal_channel ,pdata +50e5 e0a10000 istore 2 ,contw +50e6 20600000 rtn + +msdp_send_req_done: +50e7 68010275 fetch 2 ,mem_sdp_tx_pkt_length +50e8 203a2a8c branch assert ,blank +50e9 204052ce call l2cap_get_sdp_tx_buff +50ea 68010275 fetch 2 ,mem_sdp_tx_pkt_length +50eb e0a10000 istore 2 ,contw +50ec 68014248 fetch 2 ,mem_sdp_remote_cid +50ed e0a10000 istore 2 ,contw +50ee 20600000 rtn + +ml2cap_rx_multiplexing: +50ef 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +50f0 203a4dfc branch l2cap_rx_reset_state ,blank +50f1 470dc023 bpatchx patch23_3 ,mem_patch23 +50f2 68008268 fetch 1 ,mem_l2cap_rx_cid +50f3 c000d0f9 beq l2cap_signal_channel ,ml2cap_call_proc_signal +50f4 c0284de8 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +50f5 c028cdf5 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +50f6 c0294df3 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +50f7 c029cdf3 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +50f8 20204dfc branch l2cap_rx_reset_state + +ml2cap_call_proc_signal: +50f9 470e4023 bpatchx patch23_4 ,mem_patch23 +50fa 204052b8 call l2cap_malloc_signal_channel +50fb 18002400 force 0 ,regb +50fc 204052c3 call l2cap_get_signal_tx_payload +50fd 1fe20a00 copy pdata ,contw +50fe 68010266 fetch 2 ,mem_l2cap_rx_pkt_length +50ff 1fe22600 copy pdata ,regc +5100 68010264 fetch 2 ,mem_l2cap_payload_ptr +5101 98000c00 iforce contr + +ml2cap_proc_one_comm_loop: +5102 20405108 call ml2cap_proc_one_comm +5103 1a60a7fc increase -4 ,regc +5104 2422d102 nbranch ml2cap_proc_one_comm_loop ,zero +5105 1a420400 copy regb ,temp +5106 204050de call ml2cap_send_signal +5107 20204dfc branch l2cap_rx_reset_state + +ml2cap_proc_one_comm: +5108 e8c08000 ifetch 1 ,contr +5109 c0015113 beq signal_connect_req ,ml2cap_proc_signal_connect_req +510a c000d116 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +510b c001d120 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +510c c002d15c beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +510d c002518e beq signal_config_req ,ml2cap_proc_signal_config_req +510e c003d213 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +510f c00351e1 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +5110 c0045050 beq signal_echo_req ,l2cap_proc_signal_echo_req +5111 c0054e3a beq signal_info_req ,ml2cap_proc_signal_info_req +5112 2020522e branch ml2cap_proc_send_reject + +ml2cap_proc_signal_connect_req: +5113 20407ea8 call save_cont_pointers +5114 20407ead call load_cont_pointers +5115 20204e51 branch l2cap_proc_signal_connect_req + +ml2cap_proc_signal_cmd_reject: +5116 e8c08000 ifetch 1 ,contr +5117 1fe20e00 copy pdata ,queue +5118 e8c10000 ifetch 2 ,contr +5119 1fe22200 copy pdata ,rega +511a 1a627e00 copy regc ,pdata +511b 9a262600 isub rega ,regc + +mvptr: +511c e8c08000 ifetch 1 ,contr +511d 1a20a3ff increase -1 ,rega +511e 2422d11c nbranch mvptr ,zero +511f 20600000 rtn + +ml2cap_proc_signal_connect_rsp: +5120 e8c08000 ifetch 1 ,contr +5121 1fe20e00 copy pdata ,queue +5122 e8c10000 ifetch 2 ,contr +5123 1fe22200 copy pdata ,rega +5124 e8c10000 ifetch 2 ,contr +5125 1fe21600 copy pdata ,timeup +5126 e8c10000 ifetch 2 ,contr +5127 1fe20400 copy pdata ,temp +5128 e8c10000 ifetch 2 ,contr +5129 1fe67c00 sub pdata ,0 ,null +512a 2022d132 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +512b c001512e beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +512c c002512e beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +512d 20205130 branch ml2cap_proc_signal_connect_rsp_mnosucc + +ml2cap_proc_signal_connect_refused_result: +512e 700a9916 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +512f 20407d86 call ui_ipc_send_event + +ml2cap_proc_signal_connect_rsp_mnosucc: +5130 e8c10000 ifetch 2 ,contr +5131 20205159 branch mnosucc + +ml2cap_proc_signal_connect_rsp_sucessful: +5132 20407ea8 call save_cont_pointers +5133 470ec023 bpatchx patch23_5 ,mem_patch23 +5134 58000050 setarg l2cap_sdp_channel +5135 98467c00 isub temp ,null +5136 2022d141 branch ml2cap_proc_signal_connect_rsp_sdp ,zero +5137 58000051 setarg l2cap_rfcomm_channel +5138 98467c00 isub temp ,null +5139 2022d147 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +513a 58000053 setarg l2cap_hid_interrupt_channel +513b 98467c00 isub temp ,null +513c 2022d153 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +513d 58000052 setarg l2cap_hid_control_channel +513e 98467c00 isub temp ,null +513f 2022d14d branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +5140 20205159 branch mnosucc + +ml2cap_proc_signal_connect_rsp_sdp: +5141 19627e00 copy timeup ,pdata +5142 60014248 store 2 ,mem_sdp_remote_cid +5143 6800c250 fetch 1 ,mem_sdp_state +5144 79207e01 set1 l2cap_channel_state_conn_res +5145 6000c250 store 1 ,mem_sdp_state +5146 20205158 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_rfcomm: +5147 19627e00 copy timeup ,pdata +5148 6001424a store 2 ,mem_rfcomm_remote_cid +5149 6800c251 fetch 1 ,mem_rfcomm_state +514a 79207e01 set1 l2cap_channel_state_conn_res +514b 6000c251 store 1 ,mem_rfcomm_state +514c 20205158 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_hid_ctrl: +514d 19627e00 copy timeup ,pdata +514e 6001424c store 2 ,mem_hid_ctrl_remote_cid +514f 6800c252 fetch 1 ,mem_hid_control_state +5150 79207e01 set1 l2cap_channel_state_conn_res +5151 6000c252 store 1 ,mem_hid_control_state +5152 20205158 branch mnosucc1 + +ml2cap_proc_signal_connect_rsp_hid_int: +5153 19627e00 copy timeup ,pdata +5154 6001424e store 2 ,mem_hid_int_remote_cid +5155 6800c253 fetch 1 ,mem_hid_interrupt_state +5156 79207e01 set1 l2cap_channel_state_conn_res +5157 6000c253 store 1 ,mem_hid_interrupt_state + +mnosucc1: +5158 20407ead call load_cont_pointers + +mnosucc: +5159 1a627e00 copy regc ,pdata +515a 9a262600 isub rega ,regc +515b 20600000 rtn + +ml2cap_proc_signal_config_rsp: +515c e8c08000 ifetch 1 ,contr +515d 1fe20e00 copy pdata ,queue +515e e8c10000 ifetch 2 ,contr +515f 1fe22200 copy pdata ,rega +5160 1a627e00 copy regc ,pdata +5161 9a262600 isub rega ,regc +5162 e8c10000 ifetch 2 ,contr +5163 1fe21600 copy pdata ,timeup +5164 e8c10000 ifetch 2 ,contr +5165 e8c10000 ifetch 2 ,contr +5166 243a5188 nbranch mcrsdone1 ,blank +5167 20407ea8 call save_cont_pointers +5168 19620400 copy timeup ,temp +5169 470f4023 bpatchx patch23_6 ,mem_patch23 +516a 58000050 setarg l2cap_sdp_channel +516b 98467c00 isub temp ,null +516c 2022d176 branch ml2cap_proc_signal_config_rsp_sdp ,zero +516d 58000051 setarg l2cap_rfcomm_channel +516e 98467c00 isub temp ,null +516f 2022d17a branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +5170 58000052 setarg l2cap_hid_control_channel +5171 98467c00 isub temp ,null +5172 2022d17e branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +5173 58000053 setarg l2cap_hid_interrupt_channel +5174 98467c00 isub temp ,null +5175 2022d182 branch ml2cap_proc_signal_config_rsp_hid_int ,zero + +ml2cap_proc_signal_config_rsp_sdp: +5176 6800c250 fetch 1 ,mem_sdp_state +5177 79207e05 set1 l2cap_channel_state_rcv_cfg_res +5178 6000c250 store 1 ,mem_sdp_state +5179 20600000 rtn + +ml2cap_proc_signal_config_rsp_rfcomm: +517a 6800c251 fetch 1 ,mem_rfcomm_state +517b 79207e05 set1 l2cap_channel_state_rcv_cfg_res +517c 6000c251 store 1 ,mem_rfcomm_state +517d 20600000 rtn + +ml2cap_proc_signal_config_rsp_hid_ctrl: +517e 6800c252 fetch 1 ,mem_hid_control_state +517f 79207e05 set1 l2cap_channel_state_rcv_cfg_res +5180 6000c252 store 1 ,mem_hid_control_state +5181 20600000 rtn + +ml2cap_proc_signal_config_rsp_hid_int: +5182 6800c253 fetch 1 ,mem_hid_interrupt_state +5183 79207e05 set1 l2cap_channel_state_rcv_cfg_res +5184 6000c253 store 1 ,mem_hid_interrupt_state +5185 700a9906 jam bt_evt_hid_connected ,mem_fifo_temp +5186 20207d86 branch ui_ipc_send_event + +mcfrsdone: +5187 20407ead call load_cont_pointers + +mcrsdone1: +5188 1a20a3fa increase -6 ,rega + +mloop2: +5189 2022d18d branch mcrsdone ,zero +518a 18c08c01 increase 1 ,contr +518b 1a20a3ff increase -1 ,rega +518c 20205189 branch mloop2 + +mcrsdone: +518d 20600000 rtn + +ml2cap_proc_signal_config_req: +518e e8c08000 ifetch 1 ,contr +518f 1fe20e00 copy pdata ,queue +5190 e8c10000 ifetch 2 ,contr +5191 1fe22200 copy pdata ,rega +5192 1a627e00 copy regc ,pdata +5193 9a262600 isub rega ,regc +5194 e8c10000 ifetch 2 ,contr +5195 18c08c02 increase 2 ,contr +5196 1fe20400 copy pdata ,temp +5197 58000005 setarg signal_config_rsp +5198 e0a08000 istore 1 ,contw +5199 18e27e00 copy queue ,pdata +519a e0a08000 istore 1 ,contw +519b 1a20a202 increase 2 ,rega +519c 1a227e00 copy rega ,pdata +519d e0a10000 istore 2 ,contw +519e 20407ea8 call save_cont_pointers +519f 470fc023 bpatchx patch23_7 ,mem_patch23 +51a0 58000050 setarg l2cap_sdp_channel +51a1 98467c00 isub temp ,null +51a2 2022d1ad branch ml2cap_proc_signal_config_req_sdp ,zero +51a3 58000051 setarg l2cap_rfcomm_channel +51a4 98467c00 isub temp ,null +51a5 2022d1be branch ml2cap_proc_signal_config_req_rfcomm ,zero +51a6 58000052 setarg l2cap_hid_control_channel +51a7 98467c00 isub temp ,null +51a8 2022d1c4 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +51a9 58000053 setarg l2cap_hid_interrupt_channel +51aa 98467c00 isub temp ,null +51ab 2022d1ca branch ml2cap_proc_signal_config_req_hid_int ,zero +51ac 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_sdp: +51ad 6800c250 fetch 1 ,mem_sdp_state +51ae 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51af 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51b0 6000c250 store 1 ,mem_sdp_state +51b1 c28151bb bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +51b2 6808827f fetcht 1 ,mem_control_tasks +51b3 79200406 set1 l2cap_init_config_req ,temp +51b4 6008827f storet 1 ,mem_control_tasks +51b5 18e27e00 copy queue ,pdata +51b6 1fe0fe01 increase 1 ,pdata +51b7 60008281 store 1 ,mem_config_identifier +51b8 6800c250 fetch 1 ,mem_sdp_state +51b9 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +51ba 6000c250 store 1 ,mem_sdp_state + +ml2cap_proc_signal_config_req_sdp_nsndreq: +51bb 68014248 fetch 2 ,mem_sdp_remote_cid +51bc 60010282 store 2 ,mem_config_req_dest_cid +51bd 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_rfcomm: +51be 6800c251 fetch 1 ,mem_rfcomm_state +51bf 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51c0 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51c1 6000c251 store 1 ,mem_rfcomm_state +51c2 6801424a fetch 2 ,mem_rfcomm_remote_cid +51c3 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_hid_ctrl: +51c4 6800c252 fetch 1 ,mem_hid_control_state +51c5 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51c6 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51c7 6000c252 store 1 ,mem_hid_control_state +51c8 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +51c9 202051cf branch mcfgrq_done + +ml2cap_proc_signal_config_req_hid_int: +51ca 6800c253 fetch 1 ,mem_hid_interrupt_state +51cb 79207e04 set1 l2cap_channel_state_rcv_cfg_req ,pdata +51cc 79207e03 set1 l2cap_channel_state_snd_cfg_res ,pdata +51cd 6000c253 store 1 ,mem_hid_interrupt_state +51ce 6801424e fetch 2 ,mem_hid_int_remote_cid + +mcfgrq_done: +51cf 1fe21600 copy pdata ,timeup +51d0 20407ead call load_cont_pointers +51d1 19627e00 copy timeup ,pdata +51d2 e0a10000 istore 2 ,contw +51d3 18007e00 force 0x0000 ,pdata +51d4 e0a10000 istore 2 ,contw +51d5 18007e00 force 0x0000 ,pdata +51d6 e0a10000 istore 2 ,contw +51d7 18007e0a force 10 ,pdata +51d8 9a40a400 iadd regb ,regb +51d9 1a20a3fa increase -6 ,rega + +mloop1: +51da 2022d1e0 branch mcrqdone ,zero +51db e8c08000 ifetch 1 ,contr +51dc e0a08000 istore 1 ,contw +51dd 1a40a401 increase 1 ,regb +51de 1a20a3ff increase -1 ,rega +51df 202051da branch mloop1 + +mcrqdone: +51e0 20600000 rtn + +ml2cap_proc_signal_disconn_req: +51e1 e8c08000 ifetch 1 ,contr +51e2 1fe20e00 copy pdata ,queue +51e3 e8c10000 ifetch 2 ,contr +51e4 1fe22200 copy pdata ,rega +51e5 1a627e00 copy regc ,pdata +51e6 9a262600 isub rega ,regc +51e7 e8c10000 ifetch 2 ,contr +51e8 1fe22200 copy pdata ,rega +51e9 e8c10000 ifetch 2 ,contr +51ea 1fe21600 copy pdata ,timeup +51eb 20407ea8 call save_cont_pointers +51ec 47104024 bpatchx patch24_0 ,mem_patch24 +51ed 58000050 setarg l2cap_sdp_channel +51ee 1a220400 copy rega ,temp +51ef 98467c00 isub temp ,null +51f0 2022d1fa branch ml2cap_proc_signal_disconn_sdp ,zero +51f1 58000052 setarg l2cap_hid_control_channel +51f2 1a220400 copy rega ,temp +51f3 98467c00 isub temp ,null +51f4 2022d1ff branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +51f5 58000053 setarg l2cap_hid_interrupt_channel +51f6 1a220400 copy rega ,temp +51f7 98467c00 isub temp ,null +51f8 2022d201 branch ml2cap_proc_signal_disconn_hid_int ,zero +51f9 20205203 branch mclsrfc + +ml2cap_proc_signal_disconn_sdp: +51fa 58000000 setarg 0x0000 +51fb 60010275 store 2 ,mem_sdp_tx_pkt_length +51fc 60014248 store 2 ,mem_sdp_remote_cid +51fd 6000c250 store 1 ,mem_sdp_state +51fe 20205205 branch mclssdp + +ml2cap_proc_signal_disconn_hid_ctrl: +51ff 20405079 call l2cap_reset_hid_ctrl_state +5200 20205205 branch mclssdp + +ml2cap_proc_signal_disconn_hid_int: +5201 2040507f call l2cap_reset_hid_int_state +5202 20205205 branch mclssdp + +mclsrfc: +5203 58000000 setarg 0x0000 +5204 6001027b store 2 ,mem_rfcomm_tx_pkt_length + +mclssdp: +5205 20407ead call load_cont_pointers +5206 58000007 setarg signal_disconnect_rsp +5207 e0a08000 istore 1 ,contw +5208 18e27e00 copy queue ,pdata +5209 e0a08000 istore 1 ,contw +520a 58000004 setarg 0x0004 +520b e0a10000 istore 2 ,contw +520c 1a227e00 copy rega ,pdata +520d e0a10000 istore 2 ,contw +520e 19627e00 copy timeup ,pdata +520f e0a10000 istore 2 ,contw +5210 18007e08 force 8 ,pdata +5211 9a40a400 iadd regb ,regb +5212 20600000 rtn + +ml2cap_proc_signal_disconn_rsp: +5213 e8c08000 ifetch 1 ,contr +5214 1fe20e00 copy pdata ,queue +5215 e8c10000 ifetch 2 ,contr +5216 1fe22200 copy pdata ,rega +5217 e8c10000 ifetch 2 ,contr +5218 1fe21600 copy pdata ,timeup +5219 e8c10000 ifetch 2 ,contr +521a 1fe20400 copy pdata ,temp +521b 20407ea8 call save_cont_pointers +521c 4710c024 bpatchx patch24_1 ,mem_patch24 +521d 6800c255 fetch 1 ,mem_ml2cap_comm_id +521e a8e1fe00 icompare 0xff ,queue +521f 2420d22a nbranch mdisdone ,true +5220 58000050 setarg l2cap_sdp_channel +5221 98467c00 isub temp ,null +5222 2022d227 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +5223 58000051 setarg l2cap_rfcomm_channel +5224 98467c00 isub temp ,null +5225 2022d22a branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +5226 2020522a branch mdisdone + +ml2cap_proc_signal_disconn_rsp_sdp: +5227 70424800 jam 0 ,mem_sdp_remote_cid +5228 70425000 jam 0 ,mem_sdp_state +5229 2020522a branch mdisdone + +ml2cap_proc_signal_disconn_rsp_rfcomm: + +mdisdone: +522a 20407ead call load_cont_pointers +522b 1a627e00 copy regc ,pdata +522c 9a262600 isub rega ,regc +522d 20600000 rtn + +ml2cap_proc_send_reject: +522e 58000001 setarg signal_cmd_reject +522f e0a08000 istore 1 ,contw +5230 e8c08000 ifetch 1 ,contr +5231 e0a08000 istore 1 ,contw +5232 58000002 setarg 0x0002 +5233 e0a10000 istore 2 ,contw +5234 58000000 setarg 0x0000 +5235 e0a10000 istore 2 ,contw +5236 58000006 setarg 0x0006 +5237 9a40a400 iadd regb ,regb +5238 18002604 force 4 ,regc +5239 20600000 rtn + +l2cap_get_req_id: +523a 6800c255 fetch 1 ,mem_ml2cap_comm_id +523b 1fe0fe01 increase 1 ,pdata +523c c080523e bne 0 ,l2cap_get_req_id_ok +523d 1fe0fe01 increase 1 ,pdata + +l2cap_get_req_id_ok: +523e 6000c255 store 1 ,mem_ml2cap_comm_id +523f 20600000 rtn + +l2cap_malloc: +5240 47114024 bpatchx patch24_2 ,mem_patch24 +5241 da400000 arg 0 ,regb +5242 2040526e call l2cap_malloc_is_fifo_full +5243 243a2a8c nbranch assert ,blank +5244 2040527e call l2cap_malloc_get_full_map +5245 da401800 arg mem_tx_buff0 ,regb +5246 d8e00000 arg 0 ,queue + +l2cap_malloc_loop: +5247 6808c256 fetcht 1 ,mem_used_map +5248 a84fffff qisolate1 temp +5249 2020d24f branch l2cap_malloc_next ,true +524a 204052a0 call l2cap_malloc_enough +524b 19667c00 sub timeup ,0 ,null +524c 2021524f branch l2cap_malloc_next ,positive +524d 20405288 call l2cap_malloc_into_fifo +524e 20205255 branch l2cap_malloc_rtn + +l2cap_malloc_next: +524f 1a40a480 increase 128 ,regb +5250 18e08e01 increase 1 ,queue +5251 58000008 setarg 8 +5252 98e67c00 isub queue ,null +5253 20215247 branch l2cap_malloc_loop ,positive +5254 da400000 arg 0 ,regb + +l2cap_malloc_rtn: +5255 1a427e00 copy regb ,pdata +5256 203a2a8c branch assert ,blank +5257 20600000 rtn + +l2cap_malloc_fifo_out: +5258 4711c024 bpatchx patch24_3 ,mem_patch24 +5259 20405277 call l2cap_malloc_fifo_get_first_ptr +525a 18c08c01 increase 1 ,contr +525b e8c10000 ifetch 2 ,contr +525c 20600000 rtn + +l2cap_malloc_free: +525d 47124024 bpatchx patch24_4 ,mem_patch24 +525e 20405277 call l2cap_malloc_fifo_get_first_ptr +525f 18c20a00 copy contr ,contw +5260 18c20400 copy contr ,temp +5261 58000000 setarg 0 +5262 e0a18000 istore 3 ,contw +5263 20600000 rtn + +l2cap_malloc_discard: +5264 4712c024 bpatchx patch24_5 ,mem_patch24 +5265 20405274 call l2cap_malloc_is_fifo_empty +5266 203a2a8c branch assert ,blank +5267 6801c25d fetch 3 ,mem_tx_fifo2 +5268 6001c260 store 3 ,mem_tx_fifo3 +5269 6801c25a fetch 3 ,mem_tx_fifo1 +526a 6001c25d store 3 ,mem_tx_fifo2 +526b 6801c257 fetch 3 ,mem_tx_fifo0 +526c 6001c25a store 3 ,mem_tx_fifo1 +526d 20600000 rtn + +l2cap_malloc_is_fifo_full: +526e 47134024 bpatchx patch24_6 ,mem_patch24 +526f 6801c257 fetch 3 ,mem_tx_fifo0 +5270 20600000 rtn + +l2cap_malloc_is_fifo_nearly_full: +5271 4713c024 bpatchx patch24_7 ,mem_patch24 +5272 6801c25a fetch 3 ,mem_tx_fifo1 +5273 20600000 rtn + +l2cap_malloc_is_fifo_empty: +5274 47144025 bpatchx patch25_0 ,mem_patch25 +5275 6801c260 fetch 3 ,mem_tx_fifo3 +5276 20600000 rtn + +l2cap_malloc_fifo_get_first_ptr: +5277 20405274 call l2cap_malloc_is_fifo_empty +5278 203a2a8c branch assert ,blank +5279 d8c04257 arg mem_tx_fifo0 ,contr + +l2cap_malloc_free_loop: +527a e8c18000 ifetch 3 ,contr +527b 203a527a branch l2cap_malloc_free_loop ,blank +527c 18c08dfd increase -3 ,contr +527d 20600000 rtn + +l2cap_malloc_get_full_map: +527e 4714c025 bpatchx patch25_1 ,mem_patch25 +527f df200004 arg 4 ,loopcnt +5280 d8c04257 arg mem_tx_fifo0_map ,contr +5281 d8400000 arg 0 ,temp + +l2cap_malloc_get_full_map_loop: +5282 e8c18000 ifetch 3 ,contr +5283 1fe17eff and pdata ,0xff ,pdata +5284 98418400 ior temp ,temp +5285 c2005282 loop l2cap_malloc_get_full_map_loop +5286 6008c256 storet 1 ,mem_used_map +5287 20600000 rtn + +l2cap_malloc_into_fifo: +5288 47154025 bpatchx patch25_2 ,mem_patch25 +5289 2040526e call l2cap_malloc_is_fifo_full +528a 243a2a8c nbranch assert ,blank +528b 20405274 call l2cap_malloc_is_fifo_empty +528c 203a5295 branch l2cap_malloc_into_fifo_no_push ,blank +528d 6801c25a fetch 3 ,mem_tx_fifo1 +528e 6001c257 store 3 ,mem_tx_fifo0 +528f e8c18000 ifetch 3 ,contr +5290 e0a18000 istore 3 ,contw +5291 e8c18000 ifetch 3 ,contr +5292 e0a18000 istore 3 ,contw +5293 58000000 setarg 0 +5294 e0a18000 istore 3 ,contw + +l2cap_malloc_into_fifo_no_push: +5295 d8400000 arg 0 ,temp +5296 19627e00 copy timeup ,pdata +5297 98e0fe00 iadd queue ,pdata + +l2cap_malloc_into_fifo_loop: +5298 f9200400 qset1 temp +5299 18e08e01 increase 1 ,queue +529a 98e67c00 isub queue ,null +529b 2422d298 nbranch l2cap_malloc_into_fifo_loop ,zero +529c 1a4d7e00 lshift8 regb ,pdata +529d 9841fe00 ior temp ,pdata +529e 6001c260 store 3 ,mem_tx_fifo3 +529f 20600000 rtn + +l2cap_malloc_enough: +52a0 4715c025 bpatchx patch25_3 ,mem_patch25 +52a1 2040527e call l2cap_malloc_get_full_map +52a2 18e22600 copy queue ,regc +52a3 d8400000 arg 0 ,temp +52a4 d9600000 arg 0 ,timeup + +l2cap_malloc_enough_loop: +52a5 18e27e00 copy queue ,pdata +52a6 c00452b0 beq 8 ,l2cap_malloc_enough_end +52a7 6800c256 fetch 1 ,mem_used_map +52a8 afefffff qisolate1 pdata +52a9 2020d2b0 branch l2cap_malloc_enough_end ,true +52aa 18408480 increase 128 ,temp +52ab 18e08e01 increase 1 ,queue +52ac 1a227e00 copy rega ,pdata +52ad 98467c00 isub temp ,null +52ae 2022d2b0 branch l2cap_malloc_enough_end ,zero +52af 202152a5 branch l2cap_malloc_enough_loop ,positive + +l2cap_malloc_enough_end: +52b0 18427e00 copy temp ,pdata +52b1 9a267c00 isub rega ,null +52b2 242152b6 nbranch l2cap_malloc_enough_rtn ,positive +52b3 18e27e00 copy queue ,pdata +52b4 1a620400 copy regc ,temp +52b5 98461600 isub temp ,timeup + +l2cap_malloc_enough_rtn: +52b6 1a620e00 copy regc ,queue +52b7 20600000 rtn + +l2cap_malloc_signal_channel: +52b8 47164025 bpatchx patch25_4 ,mem_patch25 +52b9 da20007f arg l2cap_signal_malloc_size ,rega +52ba 20405240 call l2cap_malloc +52bb 6001026b store 2 ,mem_l2cap_signal_tx_buff_ptr +52bc 1fe0fe04 increase 4 ,pdata +52bd 6001026d store 2 ,mem_l2cap_signal_tx_payload_ptr +52be 58000000 setarg 0 +52bf 6001026f store 2 ,mem_l2cap_signal_tx_length +52c0 20600000 rtn + +l2cap_get_signal_tx_buff: +52c1 6801026b fetch 2 ,mem_l2cap_signal_tx_buff_ptr +52c2 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_get_signal_tx_payload: +52c3 6801026d fetch 2 ,mem_l2cap_signal_tx_payload_ptr +52c4 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_malloc_sdp_channel: +52c5 4716c025 bpatchx patch25_5 ,mem_patch25 +52c6 da2000fa arg sdp_malloc_size ,rega +52c7 20405240 call l2cap_malloc +52c8 60010271 store 2 ,mem_sdp_tx_buff_ptr +52c9 1fe0fe04 increase 4 ,pdata +52ca 60010273 store 2 ,mem_sdp_tx_payload_ptr +52cb 58000000 setarg 0 +52cc 60010275 store 2 ,mem_sdp_tx_pkt_length +52cd 20600000 rtn + +l2cap_get_sdp_tx_buff: +52ce 68010271 fetch 2 ,mem_sdp_tx_buff_ptr +52cf 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_get_sdp_tx_payload: +52d0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr +52d1 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_malloc_rfcomm_channel: +52d2 47174025 bpatchx patch25_6 ,mem_patch25 +52d3 20407e7c call push_stack +52d4 70028401 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +52d5 2040526e call l2cap_malloc_is_fifo_full +52d6 247a0000 nrtn blank +52d7 da20007f arg rfcomm_malloc_size ,rega +52d8 20405240 call l2cap_malloc +52d9 60010277 store 2 ,mem_rfcomm_tx_buff_ptr +52da 1fe0fe04 increase 4 ,pdata +52db 60010279 store 2 ,mem_rfcomm_tx_payload_ptr +52dc 58000000 setarg 0 +52dd 6001027b store 2 ,mem_rfcomm_tx_pkt_length +52de 70028400 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +52df 20207e8c branch pop_stack + +l2cap_get_rfcomm_tx_buff: +52e0 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr +52e1 202052e2 branch l2cap_util_pdata_to_contw + +l2cap_util_pdata_to_contw: +52e2 203a2a8c branch assert ,blank +52e3 1fe20a00 copy pdata ,contw +52e4 20600000 rtn + +l2cap_lpm_save_calc_len: +52e5 4717c025 bpatchx patch25_7 ,mem_patch25 +52e6 da400000 arg 0 ,regb +52e7 da204257 arg mem_tx_fifo0_map ,rega +52e8 1a20a3fe increase -2 ,rega + +l2cap_lpm_save_calc_len_loop: +52e9 1a20a202 increase 2 ,rega +52ea 58004263 setarg mem_tx_fifo_end +52eb 9a267c00 isub rega ,null +52ec 2022d2f5 branch l2cap_lpm_save_calc_len_end ,zero +52ed ea208000 ifetch 1 ,rega +52ee 1a20a201 increase 1 ,rega +52ef 203a52e9 branch l2cap_lpm_save_calc_len_loop ,blank +52f0 ea290000 ifetcht 2 ,rega +52f1 e8410000 ifetch 2 ,temp +52f2 9a40a400 iadd regb ,regb +52f3 1a40a404 increase 4 ,regb +52f4 202052e9 branch l2cap_lpm_save_calc_len_loop + +l2cap_lpm_save_calc_len_end: +52f5 1a427e00 copy regb ,pdata +52f6 20600000 rtn + +l2cap_lpm_get_wake_lock: +52f7 d8e0000c arg wake_lock_l2cap_tx ,queue +52f8 20202c32 branch lpm_get_wake_lock + +l2cap_lpm_put_wake_lock: +52f9 d8e0000c arg wake_lock_l2cap_tx ,queue +52fa 20202c36 branch lpm_put_wake_lock + +l2cap_lpm_save_txbuf: +52fb 47184026 bpatchx patch26_0 ,mem_patch26 +52fc 2040527e call l2cap_malloc_get_full_map +52fd 6800c256 fetch 1 ,mem_used_map +52fe 207a0000 rtn blank +52ff 204052e5 call l2cap_lpm_save_calc_len +5300 d8400100 arg l2cap_lpm_txbuf_len ,temp +5301 98467c00 isub temp ,null +5302 202152f7 branch l2cap_lpm_get_wake_lock ,positive +5303 204052f9 call l2cap_lpm_put_wake_lock +5304 d8a04263 arg mem_l2cap_lpm_txbuf ,contw +5305 da204257 arg mem_tx_fifo0 ,rega + +l2cap_lpm_save_txbuf_loop: +5306 58004263 setarg mem_tx_fifo_end +5307 9a267c00 isub rega ,null +5308 20628000 rtn zero +5309 ea208000 ifetch 1 ,rega +530a 1a20a201 increase 1 ,rega +530b 243a530f nbranch l2cap_lpm_save_txbuf_nempty ,blank +530c e0a10000 istore 2 ,contw +530d 1a20a202 increase 2 ,rega +530e 20205306 branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_save_txbuf_nempty: +530f ea210000 ifetch 2 ,rega +5310 1a20a202 increase 2 ,rega +5311 1fe20c00 copy pdata ,contr +5312 e8c10000 ifetch 2 ,contr +5313 e0a10000 istore 2 ,contw +5314 1fe27200 copy pdata ,loopcnt +5315 1f20f202 increase 2 ,loopcnt +5316 20407f01 call memcpy +5317 20205306 branch l2cap_lpm_save_txbuf_loop + +l2cap_lpm_load_txbuf: +5318 4718c026 bpatchx patch26_1 ,mem_patch26 +5319 2040527e call l2cap_malloc_get_full_map +531a 6800c256 fetch 1 ,mem_used_map +531b 207a0000 rtn blank +531c da204258 arg mem_tx_fifo0_ptr ,rega +531d 1a20a3fd increase -3 ,rega +531e d8c04263 arg mem_l2cap_lpm_txbuf ,contr + +l2cap_lpm_load_txbuf_loop: +531f 1a20a203 increase 3 ,rega +5320 58004264 setarg mem_tx_fifo_end + 1 +5321 9a267c00 isub rega ,null +5322 20628000 rtn zero +5323 e8c10000 ifetch 2 ,contr +5324 203a531f branch l2cap_lpm_load_txbuf_loop ,blank +5325 1fe0fe04 increase 4 ,pdata +5326 1fe27200 copy pdata ,loopcnt +5327 18c22400 copy contr ,regb +5328 ea210000 ifetch 2 ,rega +5329 1fe20a00 copy pdata ,contw +532a 1a420c00 copy regb ,contr +532b 18c08dfe increase -2 ,contr +532c 20407f01 call memcpy +532d 2020531f branch l2cap_lpm_load_txbuf_loop + +le_init_conn: +532e 47194026 bpatchx patch26_2 ,mem_patch26 +532f 7855fc00 disable wake +5330 70045501 jam 1 ,mem_le_conn_handle +5331 70043f03 jam 3 ,mem_le_state +5332 70045601 jam 1 ,mem_le_arq +5333 5fffffff setarg -1 +5334 60010459 store 2 ,mem_le_event_count +5335 18007e00 force 0 ,pdata +5336 60008457 store 1 ,mem_le_ch +5337 60008462 store 1 ,mem_le_op +5338 6001c169 store 3 ,mem_sniff_rcv +5339 6001c16c store 3 ,mem_sniff_lost +533a 6002c403 store 5 ,mem_le_pcnt_tx +533b 79207e27 set1 39 ,pdata +533c 6002c408 store 5 ,mem_le_pcnt_rx +533d 7043dc01 jam 1 ,mem_le_txheader +533e 7043dd00 jam 0 ,mem_le_txlen +533f 202056ed branch le_supervision_flush + +le_init_master: +5340 4719c026 bpatchx patch26_3 ,mem_patch26 +5341 7834fc00 enable master +5342 70044003 jam lemode_master ,mem_le_mode +5343 70047801 jam 1 ,mem_le_att_handle +5344 70445a01 jam 1 ,mem_le_search_handle_start +5345 5800ffff setarg 0xffff +5346 6001445c store 2 ,mem_le_search_handle_end +5347 18007e00 force 0 ,pdata +5348 6002c408 store 5 ,mem_le_pcnt_rx +5349 79207e27 set1 39 ,pdata +534a 6002c403 store 5 ,mem_le_pcnt_tx +534b 2020532e branch le_init_conn + +le_init_slave: +534c 471a4026 bpatchx patch26_4 ,mem_patch26 +534d 7854fc00 disable master +534e 58000017 setarg 0x17 +534f 600144a8 store 2 ,mem_le_remote_mtu +5350 70044001 jam lemode_slave ,mem_le_mode +5351 70436e00 jam 0 ,mem_le_adv_enable +5352 7000a000 jam 0 ,mem_lpm_current_mult +5353 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state +5354 7044c500 jam flag_le_enc_null ,mem_le_enc_state +5355 6801046d fetch 2 ,mem_le_superto +5356 600144ba store 2 ,mem_le_init_superto +5357 68010441 fetch 2 ,mem_le_tsniff +5358 1feffe05 mul32 pdata ,5 ,pdata +5359 1ff1fe00 rshift4 pdata ,pdata +535a 6001046d store 2 ,mem_le_superto +535b 2020532e branch le_init_conn + +le_dispatch: +535c 204053c4 call le_enable +535d 204055e8 call le_scan +535e 204056f0 call le_adv +535f 202053ce branch le_disable + +le_conn_dispatch: +5360 471ac026 bpatchx patch26_5 ,mem_patch26 +5361 204053c4 call le_enable +5362 204032f4 call app_process_ble +5363 68008440 fetch 1 ,mem_le_mode +5364 c001d366 beq lemode_master ,le_master_dispatch +5365 2020537a branch le_slave_dispatch + +le_master_dispatch: +5366 471b4026 bpatchx patch26_6 ,mem_patch26 +5367 7834fc00 enable master +5368 204056e4 call le_supervision_update +5369 20215377 branch le_master_disconn ,positive +536a 20402c6c call check_ble_disabled +536b 20405413 call le_setup +536c 2040561e call le_prepare_tx +536d 7856fc00 disable match +536e 204054bf call le_transmit_receive_sifs +536f 24768000 nrtn match +5370 471bc026 bpatchx patch26_7 ,mem_patch26 +5371 68008005 fetch 1 ,mem_le_conn_rcv +5372 1fe0fe01 increase 1 ,pdata +5373 60008005 store 1 ,mem_le_conn_rcv +5374 204055aa call le_acknowledge +5375 7854fc00 disable master +5376 20600000 rtn + +le_master_disconn: +5377 204053a9 call le_disconnect +5378 7854fc00 disable master +5379 20600000 rtn + +le_slave_dispatch: +537a 471c4027 bpatchx patch27_0 ,mem_patch27 +537b 70450f00 jam 0 ,mem_le_md_count +537c 20407aaf call sp_calc_sequence_256 +537d 20405c18 call le_secure_connect_sm +537e 78577c00 disable attempt +537f 204056e4 call le_supervision_update +5380 202153a9 branch le_slave_disconn ,positive +5381 20402c6c call check_ble_disabled +5382 20405413 call le_setup +5383 20405489 call le_receive_slave +5384 242c539b nbranch le_slave_unsync ,sync +5385 204053b7 call le_got_first_packet +5386 2036d388 branch le_slave_match ,match +5387 20205395 branch le_slave_cont + +le_slave_match: +5388 471cc027 bpatchx patch27_1 ,mem_patch27 +5389 6800c50f fetch 1 ,mem_le_md_count +538a 1fe0fe01 pincrease 1 +538b 6000c50f store 1 ,mem_le_md_count +538c c0065395 beq le_md_max_count ,le_slave_cont +538d 204055aa call le_acknowledge +538e 2040561e call le_prepare_tx +538f 204054c7 call le_transmit_norx +5390 2040567e call le_parse +5391 680141fb fetch 2 ,mem_cb_ble_transmit +5392 20407f9c call callback_func +5393 204053a0 call le_check_md +5394 203453a4 branch le_slave_more_data ,user + +le_slave_cont: +5395 471d4027 bpatchx patch27_2 ,mem_patch27 +5396 20405be4 call le_pairing_sm +5397 20405bdb call le_check_paring_time +5398 20407d9c call check_51cmd +5399 68008462 fetch 1 ,mem_le_op +539a c281d3a9 bbit1 op_disconn ,le_slave_disconn + +le_slave_unsync: +539b 471dc027 bpatchx patch27_3 ,mem_patch27 +539c 204057f4 call le_lpm_set_mult +539d 2040559d call le_update_channel_map +539e 20405575 call le_update_param +539f 20202841 branch calc_clke_offset + +le_check_md: +53a0 78547c00 disable user +53a1 c5157fe7 bmark1 mark_ble_rx_md ,enable_user +53a2 c514ffe7 bmark1 mark_ble_tx_md ,enable_user +53a3 20600000 rtn + +le_slave_more_data: +53a4 471e4027 bpatchx patch27_4 ,mem_patch27 +53a5 78377c00 enable attempt +53a6 204054c1 call le_transmit_receive_sifs_notx +53a7 2036d388 branch le_slave_match ,match +53a8 20205395 branch le_slave_cont + +le_slave_disconn: + +le_disconnect: +53a9 471ec027 bpatchx patch27_5 ,mem_patch27 +53aa 204053af call le_clear_connection_info +53ab 204033b4 call app_disconn_reason_collect_ble +53ac 20407a77 call sp_initialize_256 +53ad 700a9915 jam bt_evt_le_disconnected ,mem_fifo_temp +53ae 20207d86 branch ui_ipc_send_event + +le_clear_connection_info: +53af 58000000 setarg 0 +53b0 6004c4ff store 9 ,mem_le_tx_buff_used +53b1 70045500 jam 0 ,mem_le_conn_handle +53b2 70044000 jam lemode_idle ,mem_le_mode +53b3 70043f00 jam 0 ,mem_le_state +53b4 7044c500 jam flag_le_enc_null ,mem_le_enc_state +53b5 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state +53b6 20600000 rtn + +le_got_first_packet: +53b7 471f4027 bpatchx patch27_6 ,mem_patch27 +53b8 68008005 fetch 1 ,mem_le_conn_rcv +53b9 1fe0fe01 increase 1 ,pdata +53ba 60008005 store 1 ,mem_le_conn_rcv +53bb 6800843f fetch 1 ,mem_le_state +53bc c3818000 rtnbit1 lestate_got_first_packet +53bd 79207e03 set1 lestate_got_first_packet +53be 6000843f store 1 ,mem_le_state +53bf 680144ba fetch 2 ,mem_le_init_superto +53c0 6001046d store 2 ,mem_le_superto +53c1 58000000 setarg 0 +53c2 600244e5 store 4 ,mem_le_transmit_window +53c3 20600000 rtn + +le_enable: +53c4 471fc027 bpatchx patch27_7 ,mem_patch27 +53c5 70890f36 jam 0x36 ,rf_adc_goff +53c6 70890b5f jam 0x5f ,rf_agc_nsat +53c7 783b7c00 enable le +53c8 70891407 jam 7 ,rfen_ulp +53c9 20402c6c call check_ble_disabled +53ca 6800c1e0 fetch 1 ,mem_250k_freq_enable +53cb 207a0000 rtn blank +53cc 70890ab8 jam 0xb8 ,rf_iq_gain +53cd 20600000 rtn + +le_disable: +53ce 47204028 bpatchx patch28_0 ,mem_patch28 +53cf 70890f2e jam 0x2e ,rf_adc_goff +53d0 70890bff jam 0xff ,rf_agc_nsat +53d1 785b7c00 disable le +53d2 70891403 jam 3 ,rfen_ulp +53d3 db600000 arg 0 ,stop_watch +53d4 20600000 rtn + +le_prep: +53d5 7844fc00 disable enable_crc +53d6 7843fc00 disable enable_white +53d7 68018467 fetch 3 ,mem_le_crcinit +53d8 98001e00 iforce crc24_init +53d9 68008016 fetch 1 ,mem_le_ch_mapped + +le_prep2: +53da 1fed8400 reverse pdata ,temp +53db 79200401 set1 1 ,temp +53dc 18431c00 rshift temp ,white_init +53dd 20600000 rtn + +lerx_setfreq: +53de 204053e6 call le_setfreq +53df 2040291f call set_freq_rx +53e0 58000500 setarg param_pll_setup +53e1 20402a8f call sleep +53e2 20202924 branch rf_rx_enable + +letx_setfreq: +53e3 2036a939 branch txon ,match + +letx_setfreq0: +53e4 204053e6 call le_setfreq +53e5 20202933 branch set_freq_tx + +le_setfreq: +53e6 4720c028 bpatchx patch28_1 ,mem_patch28 +53e7 20402918 call set_sync_on +53e8 6800848c fetch 1 ,mem_le_testtype +53e9 243a53f9 nbranch le_ctf_test ,blank +53ea 68008016 fetch 1 ,mem_le_ch_mapped +53eb 1fe67c24 sub pdata ,36 ,null +53ec 202153f3 branch le_ctf_normal ,positive +53ed 18000400 force 0 ,temp +53ee c1128000 rtneq 37 +53ef 18000418 force 24 ,temp +53f0 c1130000 rtneq 38 +53f1 1800044e force 78 ,temp +53f2 20600000 rtn + +le_ctf_normal: +53f3 1fe67c0a sub pdata ,10 ,null +53f4 202153f6 branch le_ctf_low ,positive +53f5 1fe0fe01 increase 1 ,pdata + +le_ctf_low: +53f6 1fe3fe00 lshift pdata ,pdata +53f7 1fe08402 add pdata ,2 ,temp +53f8 20600000 rtn + +le_ctf_test: +53f9 68008016 fetch 1 ,mem_le_ch_mapped +53fa 1fe38400 lshift pdata ,temp +53fb 20600000 rtn + +le_sca_map: +53fc d84001f4 arg 500 ,temp +53fd 207a0000 rtn blank +53fe d84000fa arg 250 ,temp +53ff c1008000 rtneq 1 +5400 d8400096 arg 150 ,temp +5401 c1010000 rtneq 2 +5402 d8400064 arg 100 ,temp +5403 c1018000 rtneq 3 +5404 d840004b arg 75 ,temp +5405 c1020000 rtneq 4 +5406 d8400032 arg 50 ,temp +5407 c1028000 rtneq 5 +5408 d8400028 arg 40 ,temp +5409 c1030000 rtneq 6 +540a d8400014 arg 20 ,temp +540b 20600000 rtn + +le_adv_access: +540c 588e89be setarg 0x8e89be +540d 1fed7e00 lshift8 pdata ,pdata +540e 1fe1fed6 or_into 0xd6 ,pdata +540f 98001200 iforce access +5410 58555555 setarg 0x555555 +5411 60018467 store 3 ,mem_le_crcinit +5412 20600000 rtn + +le_setup: +5413 47214028 bpatchx patch28_2 ,mem_patch28 +5414 78287c00 enable swfine +5415 68020463 fetch 4 ,mem_le_access +5416 98001200 iforce access +5417 20405466 call le_map_channel +5418 58000200 setarg 0x200 +5419 2034d41c branch le_setup_master ,master +541a 6801044d fetch 2 ,mem_le_receive_window +541b 1fe37e00 rshift pdata ,pdata + +le_setup_master: +541c d8400500 arg param_pll_setup ,temp +541d 9840fe00 iadd temp ,pdata +541e 20402a24 call ahead_window +541f 1b427e00 deposit clke +5420 60030491 store 6 ,mem_le_rxon_ts +5421 20600000 rtn + +le_next_adv_channel: +5422 4721c028 bpatchx patch28_3 ,mem_patch28 +5423 68008016 fetch 1 ,mem_le_ch_mapped +5424 c012d428 beq 37 ,le_next_adv_channel_curr_channel_37 +5425 c013542e beq 38 ,le_next_adv_channel_curr_channel_38 +5426 c013d434 beq 39 ,le_next_adv_channel_curr_channel_39 +5427 20205434 branch le_next_adv_channel_curr_channel_39 + +le_next_adv_channel_curr_channel_37: +5428 6808c48d fetcht 1 ,mem_le_adv_channel_map +5429 284ffe01 isolate1 bit_adv_channel_map_38 ,temp +542a 2020d43f branch set_le_next_adv_channel_38 ,true +542b 284ffe02 isolate1 bit_adv_channel_map_39 ,temp +542c 2020d444 branch set_le_next_adv_channel_39 ,true +542d 2020543a branch set_le_next_adv_channel_37 + +le_next_adv_channel_curr_channel_38: +542e 6808c48d fetcht 1 ,mem_le_adv_channel_map +542f 284ffe02 isolate1 bit_adv_channel_map_39 ,temp +5430 2020d444 branch set_le_next_adv_channel_39 ,true +5431 284ffe00 isolate1 bit_adv_channel_map_37 ,temp +5432 2020d43a branch set_le_next_adv_channel_37 ,true +5433 2020543f branch set_le_next_adv_channel_38 + +le_next_adv_channel_curr_channel_39: +5434 6808c48d fetcht 1 ,mem_le_adv_channel_map +5435 284ffe00 isolate1 bit_adv_channel_map_37 ,temp +5436 2020d43a branch set_le_next_adv_channel_37 ,true +5437 284ffe01 isolate1 bit_adv_channel_map_38 ,temp +5438 2020d43f branch set_le_next_adv_channel_38 ,true +5439 20205444 branch set_le_next_adv_channel_39 + +set_le_next_adv_channel_37: +543a 70001625 jam 37 ,mem_le_ch_mapped +543b 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +543c 79207e00 set1 bit_adv_channel_map_37 ,pdata +543d 60008ac2 store 1 ,mem_le_adv_channel_map_temp +543e 20600000 rtn + +set_le_next_adv_channel_38: +543f 70001626 jam 38 ,mem_le_ch_mapped +5440 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +5441 79207e01 set1 bit_adv_channel_map_38 ,pdata +5442 60008ac2 store 1 ,mem_le_adv_channel_map_temp +5443 20600000 rtn + +set_le_next_adv_channel_39: +5444 70001627 jam 39 ,mem_le_ch_mapped +5445 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +5446 79207e02 set1 bit_adv_channel_map_39 ,pdata +5447 60008ac2 store 1 ,mem_le_adv_channel_map_temp +5448 20600000 rtn + +le_context_nexthop: +5449 47224028 bpatchx patch28_4 ,mem_patch28 +544a 1a208c01 add rega ,coffset_mode ,contr +544b e8c08000 ifetch 1 ,contr +544c c4000000 rtnbit0 mode_le +544d 1a208a1a add rega ,coffset_le_event_cnt ,contw +544e e8a10000 ifetch 2 ,contw +544f 1fe0fe01 increase 1 ,pdata +5450 e0a10000 istore 2 ,contw +5451 1a208c19 add rega ,coffset_le_hop ,contr +5452 e8c08000 ifetch 1 ,contr +5453 1a208a18 add rega ,coffset_le_ch ,contw +5454 e8a88000 ifetcht 1 ,contw +5455 9840fe00 iadd temp ,pdata +5456 1fe67c24 sub pdata ,36 ,null +5457 20215459 branch le_nexthop_nowrap ,positive +5458 1fe0ffdb increase -37 ,pdata + +le_nexthop_nowrap: +5459 e0a08000 istore 1 ,contw +545a 20600000 rtn + +le_calc_channel_map: +545b 4722c028 bpatchx patch28_5 ,mem_patch28 +545c 6802846f fetch 5 ,mem_le_channel_map +545d 18000400 force 0 ,temp +545e 18007225 force 37 ,loopcnt + +le_count_channels_loop: +545f c3005461 bbit0 0 ,le_count_channels_notused +5460 18408401 increase 1 ,temp + +le_count_channels_notused: +5461 1fe37e00 rshift pdata ,pdata +5462 c200545f loop le_count_channels_loop +5463 1840ffff add temp ,-1 ,pdata +5464 60008461 store 1 ,mem_le_channels +5465 20600000 rtn + +le_map_channel: +5466 47234028 bpatchx patch28_6 ,mem_patch28 +5467 68008457 fetch 1 ,mem_le_ch +5468 98000e00 iforce queue +5469 680a846f fetcht 5 ,mem_le_channel_map +546a a84fffff qisolate1 temp +546b 2020d47c branch le_map_channel_end ,true + +le_map_channel_next: +546c 4723c028 bpatchx patch28_7 ,mem_patch28 +546d 68008461 fetch 1 ,mem_le_channels +546e 98e67e00 isub queue ,pdata +546f 20215472 branch le_map_channel_cont ,positive +5470 1fe60fff sub pdata ,-1 ,queue +5471 2020546c branch le_map_channel_next + +le_map_channel_cont: +5472 18e27200 copy queue ,loopcnt +5473 18000e00 force 0 ,queue + +le_map_channel_loop: +5474 a84fffff qisolate1 temp +5475 2020d477 branch le_map_channel_skip ,true +5476 1f20f201 increase 1 ,loopcnt + +le_map_channel_skip: +5477 1f227e00 deposit loopcnt +5478 203a547c branch le_map_channel_end ,blank +5479 18e08e01 increase 1 ,queue +547a 1f20f3ff increase -1 ,loopcnt +547b 20205474 branch le_map_channel_loop + +le_map_channel_end: +547c 18e27e00 deposit queue +547d 60008016 store 1 ,mem_le_ch_mapped +547e 20600000 rtn + +le_wait_tx: +547f 2034d482 branch le_wait_master ,master +5480 37c18200 until null ,timeout +5481 20600000 rtn + +le_wait_master: +5482 d9600ea0 arg 0xea0 ,timeup +5483 34730200 until clkn_rt ,meet +5484 20600000 rtn + +le_receive_adv: +5485 78487c00 disable swfine +5486 6801436c fetch 2 ,mem_le_scan_window +5487 1fe21600 copy pdata ,timeup +5488 2020548e branch le_receive_packet + +le_receive_slave: +5489 47244029 bpatchx patch29_0 ,mem_patch29 +548a 78287c00 enable swfine +548b 6801044d fetch 2 ,mem_le_receive_window +548c 680a44e5 fetcht 4 ,mem_le_transmit_window +548d 98409600 iadd temp ,timeup + +le_receive_packet: +548e 204053de call lerx_setfreq + +le_receive_rxon: +548f 4724c029 bpatchx patch29_1 ,mem_patch29 +5490 204053d5 call le_prep +5491 7856fc00 disable match +5492 7826fc00 enable decode_fec0 +5493 7830fc00 enable is_rx +5494 78507c00 disable is_tx +5495 19623600 copy timeup ,stop_watch +5496 37c18400 correlate null ,timeout +5497 2037549a branch le_receive_on_attempt ,attempt +5498 1b420400 copy clke ,temp +5499 600b009a storet 6 ,mem_sync_clke + +le_receive_on_attempt: +549a 242c264d nbranch end_of_packet ,sync +549b 203754a1 branch le_receive_skip ,attempt +549c dd2001e0 arg param_clke_cal_le ,clke_rt +549d 1c225000 copy bt_clk ,clke_bt +549e 6800843f fetch 1 ,mem_le_state +549f c301d4a1 bbit0 lestate_got_first_packet ,le_receive_skip +54a0 2055ab05 call lpm_adjust_clk ,wake + +le_receive_skip: +54a1 47254029 bpatchx patch29_2 ,mem_patch29 +54a2 204029bb call save_rssi +54a3 7823fc00 enable enable_white +54a4 7824fc00 enable enable_crc +54a5 09800008 parse demod ,bucket ,8 +54a6 19897e00 rshift3 pwindow ,pdata +54a7 600082d9 store 1 ,mem_le_rxbuf +54a8 09800008 parse demod ,bucket ,8 +54a9 19897e00 rshift3 pwindow ,pdata +54aa e0a08000 istore 1 ,contw +54ab 1fe1723f and pdata ,0x3f ,loopcnt +54ac 2022d4b1 branch lerx_nopayload ,zero + +lerx_loop: +54ad 09800008 parse demod ,bucket ,8 +54ae 19897e00 rshift3 pwindow ,pdata +54af e0a08000 istore 1 ,contw +54b0 c20054ad loop lerx_loop + +lerx_nopayload: +54b1 4725c029 bpatchx patch29_3 ,mem_patch29 +54b2 09800018 parse demod ,bucket ,24 +54b3 78287c00 enable swfine +54b4 db600664 arg param_sifs ,stop_watch +54b5 1fef7e00 rshift32 pdata ,pdata +54b6 1ff17e00 rshift16 pdata ,pdata +54b7 e0a18000 istore 3 ,contw +54b8 2023264d branch end_of_packet ,crc_failed +54b9 7836fc00 enable match + +lerx_nopayload2: +54ba 68008017 fetch 1 ,mem_last_freq +54bb 1fe0a200 add pdata ,0 ,rega +54bc 20402981 call rf_write_freq +54bd 7846fc00 disable decode_fec0 +54be 20202918 branch set_sync_on + +le_transmit_receive_sifs: +54bf 47264029 bpatchx patch29_4 ,mem_patch29 +54c0 204054c9 call le_transmit + +le_transmit_receive_sifs_notx: +54c1 68088017 fetcht 1 ,mem_last_freq +54c2 2040291f call set_freq_rx +54c3 20402924 call rf_rx_enable +54c4 78287c00 enable swfine +54c5 d960157c arg 5500 ,timeup +54c6 2020548f branch le_receive_rxon + +le_transmit_norx: +54c7 204054c9 call le_transmit +54c8 2020264d branch end_of_packet + +le_transmit: +54c9 4726c029 bpatchx patch29_5 ,mem_patch29 +54ca 204053d5 call le_prep +54cb 204053e3 call letx_setfreq +54cc 202054cd branch le_transmit0 + +le_transmit0: +54cd 79202a00 set1 txgfsk ,radio_ctrl +54ce 782efc00 enable encode_fec0 +54cf 78307c00 enable is_tx +54d0 7850fc00 disable is_rx +54d1 2040547f call le_wait_tx +54d2 19317e00 rshift16 access ,pdata +54d3 1fecfe00 rshift8 pdata ,pdata +54d4 1ff1fe00 rshift4 pdata ,pdata +54d5 08008628 inject mod ,40 +54d6 7823fc00 enable enable_white +54d7 7824fc00 enable enable_crc +54d8 47274029 bpatchx patch29_6 ,mem_patch29 +54d9 6800c3dc fetch 1 ,mem_le_txheader +54da 08008608 inject mod ,8 +54db e8c08000 ifetch 1 ,contr +54dc 1fe1723f and pdata ,0x3f ,loopcnt +54dd 08008608 inject mod ,8 +54de 2022d4e2 branch letr_nopayload ,zero + +letr_loop: +54df e8c08000 ifetch 1 ,contr +54e0 08008608 inject mod ,8 +54e1 c20054df loop letr_loop + +letr_nopayload: +54e2 78247c00 enable enable_parity +54e3 08008618 inject mod ,24 +54e4 78447c00 disable enable_parity +54e5 37d38200 until null ,tx_clear +54e6 20000064 nop 100 +54e7 784efc00 disable encode_fec0 +54e8 20600000 rtn + +le_send_adv_ind: +54e9 4727c029 bpatchx patch29_7 ,mem_patch29 +54ea 6800c484 fetch 1 ,mem_le_adv_type +54eb c000d4f9 beq adv_direct_ind ,le_send_adv_direct_ind +54ec 6800c485 fetch 1 ,mem_le_adv_own_addr_type +54ed 1ff27e00 lshift4 pdata ,pdata +54ee 1febfe00 lshift2 pdata ,pdata +54ef 6000c3dc store 1 ,mem_le_txheader +54f0 6808c36f fetcht 1 ,mem_le_adv_data_len +54f1 1840fe06 add temp ,6 ,pdata +54f2 6000c3dd store 1 ,mem_le_txlen +54f3 680344a0 fetch 6 ,mem_le_lap +54f4 600343de store 6 ,mem_le_txpayload +54f5 18427200 copy temp ,loopcnt +54f6 d8c04370 arg mem_le_adv_data ,contr +54f7 20407ef4 call memcpy_fast +54f8 20205504 branch le_send_adv_transmit + +le_send_adv_direct_ind: +54f9 6800c486 fetch 1 ,mem_le_adv_direct_addr_type +54fa 1ff27e00 lshift4 pdata ,pdata +54fb 1febfe00 lshift2 pdata ,pdata +54fc 1fe0fe01 increase 1 ,pdata +54fd 6000c3dc store 1 ,mem_le_txheader +54fe 5800000c setarg 12 +54ff 6000c3dd store 1 ,mem_le_txlen +5500 680344a0 fetch 6 ,mem_le_lap +5501 600343de store 6 ,mem_le_txpayload +5502 680341d0 fetch 6 ,mem_hci_plap +5503 e0a30000 istore 6 ,contw + +le_send_adv_transmit: +5504 4728402a bpatchx patch2a_0 ,mem_patch2a +5505 68008000 fetch 1 ,mem_le_adv_transmit +5506 1fe0fe01 increase 1 ,pdata +5507 60008000 store 1 ,mem_le_adv_transmit +5508 db600708 arg 1800 ,stop_watch +5509 7856fc00 disable match +550a 202054bf branch le_transmit_receive_sifs + +le_send_scan_request: +550b 4728c02a bpatchx patch2a_1 ,mem_patch2a +550c 6800c49e fetch 1 ,mem_le_scan_type +550d c1808000 rtnne le_scan_type_active +550e 68008000 fetch 1 ,mem_le_adv_transmit +550f 1fe0fe01 increase 1 ,pdata +5510 60008000 store 1 ,mem_le_adv_transmit +5511 d8400c03 arg 0x0c03 ,temp +5512 6800c49f fetch 1 ,mem_le_scan_own_addr_type +5513 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp +5514 1a227e00 copy rega ,pdata +5515 7d3a0407 nsetflag blank ,le_receiver_addr_bit ,temp +5516 600943dc storet 2 ,mem_le_txheader +5517 680344a0 fetch 6 ,mem_le_lap +5518 e0a30000 istore 6 ,contw +5519 6803044f fetch 6 ,mem_le_plap +551a e0a30000 istore 6 ,contw +551b 202054bf branch le_transmit_receive_sifs + +le_send_scan_response: +551c 4729402a bpatchx patch2a_2 ,mem_patch2a +551d d8400004 arg scan_rsp ,temp +551e 6800c485 fetch 1 ,mem_le_adv_own_addr_type +551f 7d3a0406 nsetflag blank ,le_sender_addr_bit ,temp +5520 6008c3dc storet 1 ,mem_le_txheader +5521 6808c38f fetcht 1 ,mem_le_scan_data_len +5522 1840fe06 add temp ,6 ,pdata +5523 6000c3dd store 1 ,mem_le_txlen +5524 680344a0 fetch 6 ,mem_le_lap +5525 600343de store 6 ,mem_le_txpayload +5526 d8c04390 arg mem_le_scan_data ,contr +5527 18427200 copy temp ,loopcnt +5528 20407ef4 call memcpy_fast +5529 204054c7 call le_transmit_norx +552a 20205706 branch le_adv_not_match + +le_connect_request: +552b 4729c02a bpatchx patch2a_3 ,mem_patch2a +552c 18007fff force -1 ,pdata +552d 38080001 setsect 2 ,1 +552e 6002846f store 5 ,mem_le_channel_map +552f 2040545b call le_calc_channel_map +5530 18007204 force 4 ,loopcnt +5531 d8a00463 arg mem_le_access ,contw +5532 2040630d call generate_random_loop +5533 6801449c fetch 2 ,mem_le_timeout +5534 6001046d store 2 ,mem_le_superto + +le_con_req_hop_retry: +5535 180a7e00 random pdata +5536 1fe17e0f and_into 0xf ,pdata +5537 1fe67c04 sub pdata ,4 ,null +5538 20215535 branch le_con_req_hop_retry ,positive +5539 60008458 store 1 ,mem_le_hop +553a 600086e6 store 1 ,mem_tmp1 +553b 472a402a bpatchx patch2a_4 ,mem_patch2a +553c 68094367 fetcht 2 ,mem_le_conn_interval +553d 60090441 storet 2 ,mem_le_tsniff +553e 18422600 copy temp ,regc +553f 1c40fe07 add clkn_bt ,7 ,pdata +5540 9a66fc00 idiv regc +5541 20407f86 call wait_div_end +5542 18072200 remainder rega +5543 9a267e00 isub rega ,pdata +5544 9a60fe00 iadd regc ,pdata +5545 68094365 fetcht 2 ,mem_le_dsniff +5546 9840fe00 iadd temp ,pdata +5547 60020443 store 4 ,mem_le_anchor +5548 9c462200 isub clkn_bt ,rega +5549 1a20a3fa increase -6 ,rega +554a da402205 arg 0x2205 ,regb +554b 6800c495 fetch 1 ,mem_le_conn_own_addr_type +554c 7d3a2406 nsetflag blank ,le_sender_addr_bit ,regb +554d 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +554e 7d3a2407 nsetflag blank ,le_receiver_addr_bit ,regb +554f 1a427e00 copy regb ,pdata +5550 600143dc store 2 ,mem_le_txheader +5551 680344a0 fetch 6 ,mem_le_lap +5552 e0a30000 istore 6 ,contw +5553 6803044f fetch 6 ,mem_le_plap +5554 e0a30000 istore 6 ,contw +5555 68020463 fetch 4 ,mem_le_access +5556 e0a20000 istore 4 ,contw +5557 180a7e00 random pdata +5558 e0a10000 istore 2 ,contw +5559 180a7e00 random pdata +555a e0a08000 istore 1 ,contw +555b 18007e02 force 2 ,pdata +555c e0a08000 istore 1 ,contw +555d 1a2b7e00 rshift2 rega ,pdata +555e e0a10000 istore 2 ,contw +555f 1a6b7e00 rshift2 regc ,pdata +5560 e0a10000 istore 2 ,contw +5561 472ac02a bpatchx patch2a_5 ,mem_patch2a +5562 58000000 setarg 0 +5563 e0a10000 istore 2 ,contw +5564 6801449c fetch 2 ,mem_le_timeout +5565 e0a10000 istore 2 ,contw +5566 6802846f fetch 5 ,mem_le_channel_map +5567 e0a28000 istore 5 ,contw +5568 68008458 fetch 1 ,mem_le_hop +5569 d84000a0 arg param_le_sca ,temp +556a 9841fe00 ior temp ,pdata +556b e0a08000 istore 1 ,contw +556c 204054c7 call le_transmit_norx +556d 580043dc setarg mem_le_txheader +556e 1fe08c12 add pdata ,18 ,contr +556f e8c18000 ifetch 3 ,contr +5570 60018467 store 3 ,mem_le_crcinit +5571 20600000 rtn + +le_init_adv: +5572 472b402a bpatchx patch2a_6 ,mem_patch2a +5573 7854fc00 disable master +5574 2020540c branch le_adv_access + +le_update_param: +5575 6800843f fetch 1 ,mem_le_state +5576 c4028000 rtnbit0 lestate_update_param +5577 68010459 fetch 2 ,mem_le_event_count +5578 6809045f fetcht 2 ,mem_le_instant +5579 98467e00 isub temp ,pdata +557a 24610000 nrtn positive +557b 60010a9a store 2 ,mem_pdatatemp +557c 472bc02a bpatchx patch2a_7 ,mem_patch2a +557d 6800843f fetch 1 ,mem_le_state +557e 793ffe05 set0 lestate_update_param ,pdata +557f 793ffe03 set0 lestate_got_first_packet ,pdata +5580 6000843f store 1 ,mem_le_state +5581 68020443 fetch 4 ,mem_le_anchor +5582 68090441 fetcht 2 ,mem_le_tsniff +5583 60090aa2 storet 2 ,mem_temp +5584 98462200 isub temp ,rega +5585 472c402b bpatchx patch2b_0 ,mem_patch2b +5586 6800c3d3 fetch 1 ,mem_le_new_param +5587 6000846a store 1 ,mem_le_window_size +5588 e8c90000 ifetcht 2 ,contr +5589 e8c10000 ifetch 2 ,contr +558a 1febfe00 lshift2 pdata ,pdata +558b 60010441 store 2 ,mem_le_tsniff +558c 184b8400 lshift2 temp ,temp +558d 9840fe00 iadd temp ,pdata +558e e8ca0000 ifetcht 4 ,contr +558f 600a046b storet 4 ,mem_le_slave_latency +5590 9a20fe00 iadd rega ,pdata +5591 1fe22800 copy pdata ,regab +5592 68010441 fetch 2 ,mem_le_tsniff +5593 68090aa2 fetcht 2 ,mem_temp +5594 98467e00 isub temp ,pdata +5595 68090a9a fetcht 2 ,mem_pdatatemp +5596 984ffe00 imul32 temp ,pdata +5597 9a80fe00 iadd regab ,pdata +5598 60020443 store 4 ,mem_le_anchor +5599 20405713 call le_receive_window_size +559a 6801046d fetch 2 ,mem_le_superto +559b 600144ba store 2 ,mem_le_init_superto +559c 20600000 rtn + +le_update_channel_map: +559d 472cc02b bpatchx patch2b_1 ,mem_patch2b +559e 6800843f fetch 1 ,mem_le_state +559f c4030000 rtnbit0 lestate_update_map +55a0 68010459 fetch 2 ,mem_le_event_count +55a1 6809045f fetcht 2 ,mem_le_instant +55a2 98467e00 isub temp ,pdata +55a3 24610000 nrtn positive +55a4 6800843f fetch 1 ,mem_le_state +55a5 793ffe06 set0 lestate_update_map ,pdata +55a6 6000843f store 1 ,mem_le_state +55a7 6802c3ce fetch 5 ,mem_le_new_map +55a8 6002846f store 5 ,mem_le_channel_map +55a9 2020545b branch le_calc_channel_map + +le_acknowledge: +55aa 472d402b bpatchx patch2b_2 ,mem_patch2b +55ab 204056ed call le_supervision_flush +55ac 204055c0 call le_check_wak +55ad 680082d9 fetch 1 ,mem_le_rxbuf +55ae 2feffe04 isolate1 md ,pdata +55af 7920802a setflag true ,mark_ble_rx_md ,mark +55b0 1fe37e00 rshift pdata ,pdata +55b1 9842fe00 ixor temp ,pdata +55b2 2feffe02 isolate1 nesn ,pdata +55b3 7920800f setflag true ,mark_old_packet ,mark +55b4 c6078000 rtnmark1 mark_old_packet +55b5 680082da fetch 1 ,mem_le_rxbuf + 1 +55b6 203a55bc branch le_ack_unenc ,blank +55b7 6800843f fetch 1 ,mem_le_state +55b8 c30255bc bbit0 lestate_encryption ,le_ack_unenc +55b9 2040748d call load_sk +55ba 204073fb call le_decrypt +55bb 247a0000 nrtn blank + +le_ack_unenc: +55bc 68088456 fetcht 1 ,mem_le_arq +55bd 79400402 setflip nesn ,temp +55be 60088456 storet 1 ,mem_le_arq +55bf 20600000 rtn + +le_check_wak: +55c0 472dc02b bpatchx patch2b_3 ,mem_patch2b +55c1 68088456 fetcht 1 ,mem_le_arq +55c2 284c0005 isolate0 wak ,temp +55c3 20608000 rtn true +55c4 680082d9 fetch 1 ,mem_le_rxbuf +55c5 1fe3fe00 lshift pdata ,pdata +55c6 9842fe00 ixor temp ,pdata +55c7 c4018000 rtnbit0 sn +55c8 793f8405 set0 wak ,temp +55c9 79400403 setflip sn ,temp +55ca 60088456 storet 1 ,mem_le_arq +55cb 28400603 compare 3 ,temp ,3 +55cc 24608000 nrtn true +55cd 6800c3de fetch 1 ,mem_le_txpayload +55ce c002d5d2 beq ll_start_enc_req ,le_set_enc +55cf 6800c4c5 fetch 1 ,mem_le_enc_state +55d0 c00155d6 beq flag_le_enc_pause ,le_clear_enc +55d1 20600000 rtn + +le_set_enc: +55d2 6800843f fetch 1 ,mem_le_state +55d3 79207e04 set1 lestate_encryption ,pdata +55d4 6000843f store 1 ,mem_le_state +55d5 20600000 rtn + +le_clear_enc: +55d6 472e402b bpatchx patch2b_4 ,mem_patch2b +55d7 7044c500 jam flag_le_enc_null ,mem_le_enc_state +55d8 dfe00000 arg 0 ,pdata +55d9 6002440d store 4 ,mem_le_last_mic +55da 6002c403 store 5 ,mem_le_pcnt_tx +55db 79207e27 set1 39 ,pdata +55dc 6002c408 store 5 ,mem_le_pcnt_rx +55dd 6800843f fetch 1 ,mem_le_state +55de 793ffe04 set0 lestate_encryption ,pdata +55df 6000843f store 1 ,mem_le_state +55e0 20600000 rtn + +le_wait_adv: +55e1 472ec02b bpatchx patch2b_5 ,mem_patch2b +55e2 20405422 call le_next_adv_channel +55e3 20405485 call le_receive_adv +55e4 68008001 fetch 1 ,mem_le_adv_waitcnt +55e5 1fe0fe01 increase 1 ,pdata +55e6 60008001 store 1 ,mem_le_adv_waitcnt +55e7 20600000 rtn + +le_scan: +55e8 472f402b bpatchx patch2b_6 ,mem_patch2b +55e9 6800c369 fetch 1 ,mem_le_scan_enable +55ea c1808000 rtnne le_scan_enable +55eb d8e00002 arg le_scan_interval_timer ,queue +55ec 20407f16 call timer_check +55ed 247a0000 nrtn blank +55ee 6801436a fetch 2 ,mem_le_scan_interval +55ef 6809436c fetcht 2 ,mem_le_scan_window +55f0 98467e00 isub temp ,pdata +55f1 d8e00002 arg le_scan_interval_timer ,queue +55f2 20407f08 call timer_init +55f3 7854fc00 disable master +55f4 20405572 call le_init_adv +55f5 204055e1 call le_wait_adv +55f6 24768000 nrtn match +55f7 472fc02b bpatchx patch2b_7 ,mem_patch2b +55f8 680302db fetch 6 ,mem_le_rxbuf + 2 +55f9 6003044f store 6 ,mem_le_plap +55fa 68008002 fetch 1 ,mem_le_adv_rcv +55fb 1fe0fe01 increase 1 ,pdata +55fc 60008002 store 1 ,mem_le_adv_rcv +55fd 20405608 call le_create_conn +55fe 20748000 rtn master +55ff 2040550b call le_send_scan_request +5600 24768000 nrtn match +5601 4730402c bpatchx patch2c_0 ,mem_patch2c +5602 68008004 fetch 1 ,mem_le_scanrsp_rcv +5603 1fe0fe01 increase 1 ,pdata +5604 60008004 store 1 ,mem_le_scanrsp_rcv +5605 680482e1 fetch 9 ,mem_le_rxbuf + 8 +5606 60048101 store 9 ,mem_tmp_buffer +5607 20600000 rtn + +le_create_conn: +5608 4730c02c bpatchx patch2c_1 ,mem_patch2c +5609 6800849b fetch 1 ,mem_cmd_le_create_conn +560a c18d8000 rtnne hci_cmd_le_create_conn +560b 6803044f fetch 6 ,mem_le_plap +560c 680b448f fetcht 6 ,mem_le_conn_peer_addr +560d 98467c00 isub temp ,null +560e 24628000 nrtn zero +560f 2040223b call context_new +5610 24628000 nrtn zero +5611 2040552b call le_connect_request +5612 20405340 call le_init_master +5613 4731402c bpatchx patch2c_2 ,mem_patch2c +5614 7041ce00 jam 0 ,mem_hci_cmd +5615 70047600 jam 0 ,mem_le_peer_sca +5616 70436900 jam 0 ,mem_le_scan_enable +5617 70049b00 jam 0 ,mem_cmd_le_create_conn +5618 20202223 branch context_save + +le_scan_check_sender_addr_type: +5619 da200001 arg 1 ,rega +561a 680082d9 fetch 1 ,mem_le_rxbuf +561b c3830000 rtnbit1 le_sender_addr_bit +561c da200000 arg 0 ,rega +561d 20600000 rtn + +le_prepare_tx: +561e 4731c02c bpatchx patch2c_3 ,mem_patch2c +561f 68008456 fetch 1 ,mem_le_arq +5620 c3828000 rtnbit1 wak +5621 20405642 call le_check_tx_md +5622 20405873 call le_fifo_get_first_tx_ptr +5623 203a5664 branch le_send_empty ,blank +5624 e8c08000 ifetch 1 ,contr +5625 e8c88000 ifetcht 1 ,contr +5626 18422200 copy temp ,rega +5627 9a267e00 isub rega ,pdata +5628 d840001b arg le_max_paket_len ,temp +5629 20407fdd call not_greater_than +562a 1fe20400 copy pdata ,temp +562b e8c08000 ifetch 1 ,contr +562c 1fe20200 copy pdata ,type +562d 1a227e00 copy rega ,pdata +562e 98c08c00 iadd contr ,contr +562f d8a043de arg mem_le_txpayload ,contw +5630 18427200 copy temp ,loopcnt +5631 20407f01 call memcpy +5632 20405654 call le_update_tx_type +5633 20405666 call le_send_packet +5634 20405873 call le_fifo_get_first_tx_ptr +5635 e8c08000 ifetch 1 ,contr +5636 1fe22200 copy pdata ,rega +5637 18c22600 copy contr ,regc +5638 e8c88000 ifetcht 1 ,contr +5639 18422400 copy temp ,regb +563a 9a467e00 isub regb ,pdata +563b d840001b arg le_max_paket_len ,temp +563c 20407fdd call not_greater_than +563d 9a40fe00 iadd regb ,pdata +563e e2608000 istore 1 ,regc +563f 9a267c00 isub rega ,null +5640 24628000 nrtn zero +5641 20205896 branch le_fifo_release_first_node + +le_check_tx_md: +5642 20405649 call le_check_continue +5643 c6148000 rtnmark1 mark_ble_tx_md +5644 6800c4e9 fetch 1 ,mem_le_configuration +5645 c3015652 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +5646 20405876 call le_fifo_get_second_tx_ptr +5647 203a5652 branch le_clear_md ,blank +5648 20205650 branch le_set_md + +le_check_continue: +5649 20405873 call le_fifo_get_first_tx_ptr +564a 203a5652 branch le_clear_md ,blank +564b e8c08000 ifetch 1 ,contr +564c e8c88000 ifetcht 1 ,contr +564d 98467e00 isub temp ,pdata +564e 1fe67c1b sub pdata ,le_max_paket_len ,null +564f 20215652 branch le_clear_md ,positive + +le_set_md: +5650 79200029 set1 mark_ble_tx_md ,mark +5651 20600000 rtn + +le_clear_md: +5652 793f8029 set0 mark_ble_tx_md ,mark +5653 20600000 rtn + +le_update_tx_type: +5654 1a227e00 copy rega ,pdata +5655 207a0000 rtn blank +5656 d8200001 arg llid_continue ,type +5657 20600000 rtn + +le_att_check_notification_enable: +5658 4732402c bpatchx patch2c_4 ,mem_patch2c +5659 18408401 increase 1 ,temp +565a 2040576a call le_att_get_handle_ptr +565b 18c08dfe increase -2 ,contr +565c e8c10000 ifetch 2 ,contr +565d d8402902 arg client_charactertic_configuration ,temp +565e 98467c00 isub temp ,null +565f 24628000 nrtn zero +5660 18c08c01 increase 1 ,contr +5661 18c22200 copy contr ,rega +5662 e8c08000 ifetch 1 ,contr +5663 20600000 rtn + +le_send_empty: +5664 18000400 force 0 ,temp +5665 18000201 force 1 ,type + +le_send_packet: +5666 4732c02c bpatchx patch2c_5 ,mem_patch2c +5667 6008c3dd storet 1 ,mem_le_txlen +5668 68088456 fetcht 1 ,mem_le_arq +5669 79200405 set1 wak ,temp +566a 18417efc and temp ,0xfc ,pdata +566b 9821fe00 ior type ,pdata +566c 60008456 store 1 ,mem_le_arq +566d 1fe17e1f and_into 0x1f ,pdata +566e 280ffe29 isolate1 mark_ble_tx_md ,mark +566f 7920fe04 setflag true ,md ,pdata +5670 6000c3dc store 1 ,mem_le_txheader +5671 6800c3dc fetch 1 ,mem_le_txheader +5672 28200601 compare 1 ,type ,3 +5673 2420d676 nbranch le_send_no_txlen ,true +5674 6800c3dd fetch 1 ,mem_le_txlen +5675 207a0000 rtn blank + +le_send_no_txlen: +5676 6800843f fetch 1 ,mem_le_state +5677 c4020000 rtnbit0 lestate_encryption +5678 2040748d call load_sk +5679 202073e3 branch le_encrypt + +get_lpm_wake_ble_rx_lock: +567a d8e00000 arg wake_lock_ble_rx ,queue +567b 20202c32 branch lpm_get_wake_lock + +put_lpm_wake_ble_rx_lock: +567c d8e00000 arg wake_lock_ble_rx ,queue +567d 20202c36 branch lpm_put_wake_lock + +le_parse: +567e 4733402c bpatchx patch2c_6 ,mem_patch2c +567f c6078000 rtnmark1 mark_old_packet +5680 20405890 call le_fifo_check_full +5681 247a0000 nrtn blank +5682 680082d9 fetch 1 ,mem_le_rxbuf +5683 1fe17e03 and pdata ,0x3 ,pdata +5684 6000c50c store 1 ,mem_le_packet_llid +5685 e8c08000 ifetch 1 ,contr +5686 1fe17e1f and pdata ,0x1f ,pdata +5687 6000c50b store 1 ,mem_le_packet_size +5688 207a0000 rtn blank +5689 18c27e00 copy contr ,pdata +568a 6001450d store 2 ,mem_le_payload_ptr +568b 6800c50c fetch 1 ,mem_le_packet_llid +568c c001dc64 beq llid_le_ll ,le_parse_ll + +le_parse_l2cap: +568d 2040569a call le_check_l2cap_complete +568e 2434567a nbranch get_lpm_wake_ble_rx_lock ,user +568f 2040567c call put_lpm_wake_ble_rx_lock +5690 6801450d fetch 2 ,mem_le_payload_ptr +5691 1fe20c00 copy pdata ,contr +5692 e8c10000 ifetch 2 ,contr +5693 600144fc store 2 ,mem_le_l2cap_size +5694 4733c02c bpatchx patch2c_7 ,mem_patch2c +5695 e8c10000 ifetch 2 ,contr +5696 c00258ab beq le_l2cap_cid_att ,le_parse_att +5697 c0035af4 beq le_l2cap_cid_smp ,le_parse_smp +5698 c002dab6 beq le_l2cap_cid_signal ,le_parse_signaling +5699 20600000 rtn + +le_check_l2cap_complete: +569a 6800c50c fetch 1 ,mem_le_packet_llid +569b c00156a9 beq llid_start ,le_check_l2cap_llid_start +569c c000d6c1 beq llid_continue ,le_check_l2cap_llid_continue +569d 20600000 rtn + +le_check_l2cap_cid_legal: +569e 20407fe7 call enable_user +569f d8400004 arg le_l2cap_cid_att ,temp +56a0 9fe67c00 isub pdata ,null +56a1 20628000 rtn zero +56a2 d8400005 arg le_l2cap_cid_signal ,temp +56a3 9fe67c00 isub pdata ,null +56a4 20628000 rtn zero +56a5 d8400006 arg le_l2cap_cid_smp ,temp +56a6 9fe67c00 isub pdata ,null +56a7 20628000 rtn zero +56a8 20207fe9 branch disable_user + +le_check_l2cap_llid_start: +56a9 6801450d fetch 2 ,mem_le_payload_ptr +56aa 1fe20c00 copy pdata ,contr +56ab e8c10000 ifetch 2 ,contr +56ac 600144fc store 2 ,mem_le_l2cap_size +56ad e8c10000 ifetch 2 ,contr +56ae 2040569e call le_check_l2cap_cid_legal +56af 24740000 nrtn user +56b0 6808c50b fetcht 1 ,mem_le_packet_size +56b1 6008c4fe storet 1 ,mem_le_packet_len_recved +56b2 680144fc fetch 2 ,mem_le_l2cap_size +56b3 1fe0fe04 increase 4 ,pdata +56b4 98467c00 isub temp ,null +56b5 2022ffe7 branch enable_user ,zero +56b6 6800c50b fetch 1 ,mem_le_packet_size +56b7 1fe27200 copy pdata ,loopcnt +56b8 d8a00311 arg mem_le_l2capbuf ,contw +56b9 6801450d fetch 2 ,mem_le_payload_ptr +56ba 1fe20c00 copy pdata ,contr +56bb 20407f01 call memcpy +56bc 20207fe9 branch disable_user + +le_check_l2cap_continue_legal: +56bd 20407fe7 call enable_user +56be 6800c4fe fetch 1 ,mem_le_packet_len_recved +56bf 247a0000 nrtn blank +56c0 20207fe9 branch disable_user + +le_check_l2cap_llid_continue: +56c1 204056bd call le_check_l2cap_continue_legal +56c2 24740000 nrtn user +56c3 6800c4fe fetch 1 ,mem_le_packet_len_recved +56c4 d8a00311 arg mem_le_l2capbuf ,contw +56c5 98a0a200 iadd contw ,rega +56c6 6808c50b fetcht 1 ,mem_le_packet_size +56c7 9840fe00 iadd temp ,pdata +56c8 6000c4fe store 1 ,mem_le_packet_len_recved +56c9 6800c50b fetch 1 ,mem_le_packet_size +56ca 1fe27200 copy pdata ,loopcnt +56cb 1a220a00 copy rega ,contw +56cc 6801450d fetch 2 ,mem_le_payload_ptr +56cd 1fe20c00 copy pdata ,contr +56ce 20407ef4 call memcpy_fast +56cf 58000311 setarg mem_le_l2capbuf +56d0 6001450d store 2 ,mem_le_payload_ptr +56d1 680144fc fetch 2 ,mem_le_l2cap_size +56d2 1fe0fe04 increase 4 ,pdata +56d3 6808c4fe fetcht 1 ,mem_le_packet_len_recved +56d4 98467c00 isub temp ,null +56d5 2022ffe7 branch enable_user ,zero +56d6 20207fe9 branch disable_user + +le_get_search_att_type: +56d7 20407ea5 call store_contr +56d8 d8a0445e arg mem_le_search_att_type_length ,contw + +le_get_search_common: +56d9 680144fc fetch 2 ,mem_le_l2cap_size +56da 1fe0fffb increase -5 ,pdata + +le_get_search_common2: +56db e0a08000 istore 1 ,contw +56dc 1fe27200 copy pdata ,loopcnt +56dd 20407e9f call get_contr +56de 20207ef4 branch memcpy_fast + +le_get_search_att_uuid: +56df 20407ea5 call store_contr +56e0 d8a04471 arg mem_le_search_uuid_length ,contw +56e1 202056d9 branch le_get_search_common + +le_writeatt_cb: +56e2 680141f9 fetch 2 ,mem_cb_att_write +56e3 20207f9c branch callback_func + +le_supervision_update: +56e4 680a045b fetcht 4 ,mem_le_supervision_timer +56e5 20402a7b call get_clkbt +56e6 98461600 isub temp ,timeup +56e7 19627e00 deposit timeup +56e8 6809046d fetcht 2 ,mem_le_superto +56e9 18520400 lshift4 temp ,temp +56ea 18438400 lshift temp ,temp +56eb 98467e00 isub temp ,pdata +56ec 20600000 rtn + +le_supervision_flush: +56ed 20402a7b call get_clkbt +56ee 6002045b store 4 ,mem_le_supervision_timer +56ef 20600000 rtn + +le_adv: +56f0 70001624 jam 36 ,mem_le_ch_mapped +56f1 700ac200 jam 0 ,mem_le_adv_channel_map_temp + +le_adv_loop: +56f2 4734402d bpatchx patch2d_0 ,mem_patch2d +56f3 6800c36e fetch 1 ,mem_le_adv_enable +56f4 207a0000 rtn blank +56f5 d8e00000 arg le_adv_interval_timer ,queue +56f6 20407f16 call timer_check +56f7 247a0000 nrtn blank +56f8 4734c02d bpatchx patch2d_1 ,mem_patch2d + +le_adv_loop_tx: +56f9 7854fc00 disable master +56fa 78287c00 enable swfine +56fb 20405572 call le_init_adv +56fc 20405422 call le_next_adv_channel +56fd 204054e9 call le_send_adv_ind +56fe 2436d706 nbranch le_adv_not_match ,match +56ff 68008003 fetch 1 ,mem_le_req_rcv +5700 1fe0fe01 increase 1 ,pdata +5701 60008003 store 1 ,mem_le_req_rcv +5702 680082d9 fetch 1 ,mem_le_rxbuf +5703 1fe17e0f and pdata ,0x0f ,pdata +5704 c001d51c beq scan_req ,le_send_scan_response +5705 c002d728 beq connect_req ,le_parse_connect_req + +le_adv_not_match: +5706 4735402d bpatchx patch2d_2 ,mem_patch2d +5707 180a7e00 random pdata +5708 d84001ff arg 0x1ff ,temp +5709 98417e00 iand temp ,pdata +570a 1fe0fefa add pdata ,250 ,pdata +570b 20403cbe call delay +570c 68008ac2 fetch 1 ,mem_le_adv_channel_map_temp +570d 6808c48d fetcht 1 ,mem_le_adv_channel_map +570e 98467c00 isub temp ,null +570f 2422d6f2 nbranch le_adv_loop ,zero + +le_adv_not_match2: +5710 d8e00000 arg le_adv_interval_timer ,queue +5711 68014482 fetch 2 ,mem_le_adv_interval +5712 20207f08 branch timer_init + +le_receive_window_size: +5713 4735c02d bpatchx patch2d_3 ,mem_patch2d +5714 68008476 fetch 1 ,mem_le_peer_sca +5715 204053fc call le_sca_map +5716 68010441 fetch 2 ,mem_le_tsniff +5717 984ffe00 imul32 temp ,pdata +5718 d8400177 arg 375 ,temp +5719 984ffe00 imul32 temp ,pdata +571a d84186a0 arg 100000 ,temp +571b 9846fc00 idiv temp +571c 6800846a fetch 1 ,mem_le_window_size +571d d8404e20 arg 20000 ,temp +571e 984ffe00 imul32 temp ,pdata +571f 9840fe00 iadd temp ,pdata +5720 600244e5 store 4 ,mem_le_transmit_window +5721 4736402d bpatchx patch2d_4 ,mem_patch2d +5722 680140c1 fetch 2 ,mem_rx_window_sniff +5723 20407f86 call wait_div_end +5724 18078400 quotient temp +5725 9840fe00 iadd temp ,pdata +5726 6001044d store 2 ,mem_le_receive_window +5727 20600000 rtn + +le_parse_connect_req: +5728 4736c02d bpatchx patch2d_5 ,mem_patch2d +5729 680302e1 fetch 6 ,mem_le_rxbuf + 8 +572a 680b44a0 fetcht 6 ,mem_le_lap +572b 98467c00 isub temp ,null +572c 24628000 nrtn zero +572d 20405619 call le_scan_check_sender_addr_type +572e 1a227e00 copy rega ,pdata +572f 6000c48e store 1 ,mem_le_conn_peer_addr_type +5730 680382ee fetch 7 ,mem_le_rxbuf + 21 +5731 60038101 store 7 ,mem_tmp_buffer +5732 e8c40000 ifetch 8 ,contr +5733 e0a40000 istore 8 ,contw +5734 680302db fetch 6 ,mem_le_rxbuf + 2 +5735 6003044f store 6 ,mem_le_plap +5736 18c08c06 increase 6 ,contr +5737 e8c40000 ifetch 8 ,contr +5738 60040463 store 8 ,mem_le_access +5739 e8c90000 ifetcht 2 ,contr +573a 4737402d bpatchx patch2d_6 ,mem_patch2d +573b 184b8400 lshift2 temp ,temp +573c e8c10000 ifetch 2 ,contr +573d 1febfe00 lshift2 pdata ,pdata +573e 60010441 store 2 ,mem_le_tsniff +573f 60020443 store 4 ,mem_le_anchor +5740 98467e00 isub temp ,pdata +5741 1fe0d1fe add pdata ,-2 ,clke_bt +5742 e8c48000 ifetch 9 ,contr +5743 6004846b store 9 ,mem_le_slave_latency +5744 4737c02d bpatchx patch2d_7 ,mem_patch2d +5745 e8c08000 ifetch 1 ,contr +5746 1ff18400 rshift4 pdata ,temp +5747 18430400 rshift temp ,temp +5748 60088476 storet 1 ,mem_le_peer_sca +5749 1fe17e1f and_into 0x1f ,pdata +574a 60008458 store 1 ,mem_le_hop +574b 20405713 call le_receive_window_size +574c 2040545b call le_calc_channel_map +574d 2040534c call le_init_slave +574e 2040223b call context_new +574f 24628000 nrtn zero +5750 4738402e bpatchx patch2e_0 ,mem_patch2e +5751 20402841 call calc_clke_offset +5752 20405ad3 call le_l2cap_reset_signaling_identifier +5753 700a9914 jam bt_evt_le_connected ,mem_fifo_temp +5754 20407d86 call ui_ipc_send_event +5755 20202223 branch context_save + +le_init_attlist_search: +5756 4738c02e bpatchx patch2e_1 ,mem_patch2e +5757 6801445a fetch 2 ,mem_le_search_handle_start +5758 98002400 iforce regb +5759 6801445c fetch 2 ,mem_le_search_handle_end +575a 98002600 iforce regc +575b 680144bc fetch 2 ,mem_ui_le_uuid_table +575c 98000c00 iforce contr +575d 78347c00 enable user +575e 20600000 rtn + +le_att_handle_inrange: +575f e8c10000 ifetch 2 ,contr +5760 207a0000 rtn blank +5761 9a467c00 isub regb ,null +5762 24610000 nrtn positive +5763 9a667c00 isub regc ,null +5764 20628000 rtn zero +5765 20215768 branch le_att_handle_blank ,positive +5766 18007c01 force 1 ,null +5767 20600000 rtn + +le_att_handle_blank: +5768 18007e00 force 0 ,pdata +5769 20600000 rtn + +le_att_get_handle_ptr: +576a 2040576d call le_att_get_handle_ptr2 +576b 2022d779 branch le_att_get_handle_ptr_found ,zero +576c 20600000 rtn + +le_att_get_handle_ptr2: +576d 4739402e bpatchx patch2e_2 ,mem_patch2e +576e 680144bc fetch 2 ,mem_ui_le_uuid_table +576f 98000c00 iforce contr + +le_att_get_handle_loop1: +5770 e8c10000 ifetch 2 ,contr +5771 207a0000 rtn blank +5772 98467c00 isub temp ,null +5773 20628000 rtn zero +5774 e8c08000 ifetch 1 ,contr +5775 98c08c00 iadd contr ,contr +5776 e8c08000 ifetch 1 ,contr +5777 98c08c00 iadd contr ,contr +5778 20205770 branch le_att_get_handle_loop1 + +le_att_get_handle_ptr_found: +5779 e8c08000 ifetch 1 ,contr +577a 98c08c00 iadd contr ,contr +577b 20600000 rtn + +le_att_get_short_uuid_ptr: +577c 4739c02e bpatchx patch2e_3 ,mem_patch2e +577d 680144bc fetch 2 ,mem_ui_le_uuid_table +577e 98000c00 iforce contr + +le_att_get_short_uuid_loop: +577f e8c10000 ifetch 2 ,contr +5780 207a0000 rtn blank +5781 e8c08000 ifetch 1 ,contr +5782 98c08c00 iadd contr ,contr +5783 18c08dfe increase -2 ,contr +5784 e8c10000 ifetch 2 ,contr +5785 98467c00 isub temp ,null +5786 20628000 rtn zero +5787 e8c08000 ifetch 1 ,contr +5788 98c08c00 iadd contr ,contr +5789 2020577f branch le_att_get_short_uuid_loop + +le_att_get_handle_info_from_ptr: +578a 6801049c fetch 2 ,mem_le_cur_attlist_start_ptr +578b 2020578e branch le_att_get_handle_info_fast + +le_att_get_handle_info: +578c 473a402e bpatchx patch2e_4 ,mem_patch2e +578d 680144bc fetch 2 ,mem_ui_le_uuid_table + +le_att_get_handle_info_fast: +578e 98000c00 iforce contr +578f 18422200 copy temp ,rega + +le_att_get_handle_loop: +5790 e8c10000 ifetch 2 ,contr +5791 203a5799 branch le_att_unfind_handle ,blank +5792 9a267c00 isub rega ,null +5793 2022d79a branch le_att_finded_handle ,zero +5794 e8c08000 ifetch 1 ,contr +5795 98c08c00 iadd contr ,contr +5796 e8c08000 ifetch 1 ,contr +5797 98c08c00 iadd contr ,contr +5798 20205790 branch le_att_get_handle_loop + +le_att_unfind_handle: +5799 20207fef branch disable_blank + +le_att_finded_handle: +579a e8c08000 ifetch 1 ,contr +579b 600084a2 store 1 ,mem_le_cur_uuid_length +579c 1fe27200 copy pdata ,loopcnt +579d d8a004a3 arg mem_le_cur_uuid ,contw +579e 20407ef4 call memcpy_fast +579f e8c08000 ifetch 1 ,contr +57a0 600084b3 store 1 ,mem_le_curr_att_len +57a1 20407ea5 call store_contr +57a2 20207ff1 branch enable_blank + +le_modified_name: +57a3 473ac02e bpatchx patch2e_5 ,mem_patch2e +57a4 204057a6 call le_modified_name_att_list +57a5 202057b8 branch le_modified_name_adv + +le_modified_name_att_list: +57a6 d8402a00 arg uuid_chrctr_device_name ,temp +57a7 2040577c call le_att_get_short_uuid_ptr +57a8 207a0000 rtn blank +57a9 e8c08000 ifetch 1 ,contr +57aa 18c20a00 copy contr ,contw +57ab 6808c3af fetcht 1 ,mem_le_name_len +57ac 18427200 copy temp ,loopcnt +57ad 98467c00 isub temp ,null +57ae 242157b5 nbranch le_name_length_longer_than_att ,positive +57af 98460400 isub temp ,temp +57b0 d8c043b0 arg mem_le_name ,contr +57b1 20407f01 call memcpy +57b2 18427200 copy temp ,loopcnt +57b3 2442d7f0 ncall memcpy_empty ,zero +57b4 20600000 rtn + +le_name_length_longer_than_att: +57b5 1fe27200 copy pdata ,loopcnt +57b6 d8c043b0 arg mem_le_name ,contr +57b7 20207ef4 branch memcpy_fast + +le_modified_name_adv: +57b8 da60438f arg mem_le_adv_data_len + 32 ,regc +57b9 da204370 arg mem_le_adv_data ,rega +57ba 204057c5 call le_modified_name_adv_and_scan +57bb 58000000 setarg 0 +57bc 79347e00 setflag user ,0 ,pdata +57bd 60008a9a store 1 ,mem_pdatatemp +57be da6043af arg mem_le_scan_data_len + 32 ,regc +57bf da204390 arg mem_le_scan_data ,rega +57c0 204057c5 call le_modified_name_adv_and_scan +57c1 20740000 rtn user +57c2 68008a9a fetch 1 ,mem_pdatatemp +57c3 203a2a8c branch assert ,blank +57c4 20600000 rtn + +le_modified_name_adv_and_scan: +57c5 473b402e bpatchx patch2e_6 ,mem_patch2e +57c6 20407fe7 call enable_user +57c7 20407eda call clear_temp_block +57c8 da400000 arg 0 ,regb +57c9 d8a00ac3 arg mem_le_data_temp ,contw +57ca 204057df call le_modified_name_adv_loop +57cb 6800c3af fetch 1 ,mem_le_name_len +57cc 1fe08401 add pdata ,1 ,temp +57cd 9a40a200 iadd regb ,rega +57ce 1a20a202 increase 2 ,rega +57cf 1a267c1f sub rega ,0x1f ,null +57d0 242157dd nbranch le_modified_name_adv_and_scan_name_overflow ,positive +57d1 e0a88000 istoret 1 ,contw +57d2 d8400009 arg gap_adtype_local_name_complete ,temp +57d3 e0a88000 istoret 1 ,contw +57d4 98007200 iforce loopcnt +57d5 20407ef4 call memcpy_fast +57d6 1a222400 copy rega ,regb + +le_modified_name_adv_and_scan_store_data: +57d7 1a427e00 deposit regb +57d8 60008ac2 store 1 ,mem_le_data_len_temp +57d9 d8c00ac2 arg mem_le_data_len_temp ,contr +57da 5fffffe0 setarg -32 +57db 9a608a00 iadd regc ,contw +57dc 20207ebd branch memcpy32 + +le_modified_name_adv_and_scan_name_overflow: +57dd 20407fe9 call disable_user +57de 202057d7 branch le_modified_name_adv_and_scan_store_data + +le_modified_name_adv_loop: +57df ea208000 ifetch 1 ,rega +57e0 207a0000 rtn blank +57e1 1fe0fe01 pincrease 1 +57e2 e8c88000 ifetcht 1 ,contr +57e3 18467c09 sub temp ,gap_adtype_local_name_complete ,null +57e4 2022d7ee branch le_modified_name_adv_found_name ,zero +57e5 9a40a400 iadd regb ,regb +57e6 1a220c00 copy rega ,contr +57e7 98007200 iforce loopcnt +57e8 20407ef4 call memcpy_fast +57e9 18c22200 copy contr ,rega + +le_modified_name_adv_loop2: +57ea 1a227e00 deposit rega +57eb 9a667c00 isub regc ,null +57ec 20610000 rtn positive +57ed 202057df branch le_modified_name_adv_loop + +le_modified_name_adv_found_name: +57ee 9a20a200 iadd rega ,rega +57ef 202057ea branch le_modified_name_adv_loop2 + +memcpy_empty: +57f0 58000020 setarg space +57f1 e0a08000 istore 1 ,contw +57f2 c20057f0 loop memcpy_empty +57f3 20600000 rtn + +le_lpm_set_mult: +57f4 473bc02e bpatchx patch2e_7 ,mem_patch2e +57f5 7855fc00 disable wake +57f6 203757f8 branch le_lpm_set_mult_attempt ,attempt +57f7 2436d806 nbranch le_lpm_lost ,match + +le_lpm_set_mult_attempt: +57f8 20402bcb call lpm_match +57f9 680140c1 fetch 2 ,mem_rx_window_sniff +57fa 6001044d store 2 ,mem_le_receive_window +57fb 2436abde nbranch lpm_mult_short ,match +57fc c507abde bmark1 mark_old_packet ,lpm_mult_short +57fd 6800c50b fetch 1 ,mem_le_packet_size +57fe 243a2bde nbranch lpm_mult_short ,blank +57ff 6800c3dd fetch 1 ,mem_le_txlen +5800 243a2bde nbranch lpm_mult_short ,blank +5801 6800c4e9 fetch 1 ,mem_le_configuration +5802 c282abde bbit1 bit_ble_short_mult ,lpm_mult_short +5803 6800843f fetch 1 ,mem_le_state +5804 c282abde bbit1 lestate_update_param ,lpm_mult_short +5805 20202bc0 branch lpm_mult_wait_timeout + +le_lpm_lost: +5806 680940c1 fetcht 2 ,mem_rx_window_sniff +5807 18430400 rshift temp ,temp +5808 6801044d fetch 2 ,mem_le_receive_window +5809 9840fe00 iadd temp ,pdata +580a 6001044d store 2 ,mem_le_receive_window +580b 20202bd6 branch lpm_lost + +le_set_config_fixed_tk: +580c d8e00000 arg bit_ble_passkey_fixed_key ,queue +580d 20205824 branch le_set_config + +le_clr_config_fixed_tk: +580e d8e00000 arg bit_ble_passkey_fixed_key ,queue +580f 20205828 branch le_clr_config + +le_set_config_fixed_ltk: +5810 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue +5811 20205824 branch le_set_config + +le_clr_config_fixed_ltk: +5812 d8e00001 arg bit_ble_pairing_fixed_ltk ,queue +5813 20205828 branch le_clr_config + +le_set_config_more_data: +5814 d8e00002 arg bit_ble_transmit_packet_by_md ,queue +5815 20205824 branch le_set_config + +le_clr_config_more_data: +5816 d8e00002 arg bit_ble_transmit_packet_by_md ,queue +5817 20205828 branch le_clr_config + +le_set_config_read_authentication: +5818 d8e00003 arg bit_ble_read_auth ,queue +5819 20205824 branch le_set_config + +le_clr_config_read_authentication: +581a d8e00003 arg bit_ble_read_auth ,queue +581b 20205828 branch le_clr_config + +le_set_config_write_authentication: +581c d8e00004 arg bit_ble_write_auth ,queue +581d 20205824 branch le_set_config + +le_clr_config_write_authentication: +581e d8e00004 arg bit_ble_write_auth ,queue +581f 20205828 branch le_clr_config + +le_set_config_short_mult: +5820 d8e00005 arg bit_ble_short_mult ,queue +5821 20205824 branch le_set_config + +le_clr_config_short_mult: +5822 d8e00005 arg bit_ble_short_mult ,queue +5823 20205828 branch le_clr_config + +le_set_config: +5824 6800c4e9 fetch 1 ,mem_le_configuration +5825 f9207e00 qset1 pdata +5826 6000c4e9 store 1 ,mem_le_configuration +5827 20600000 rtn + +le_clr_config: +5828 6800c4e9 fetch 1 ,mem_le_configuration +5829 f93ffe00 qset0 pdata +582a 6000c4e9 store 1 ,mem_le_configuration +582b 20600000 rtn + +le_set_fixed_ltk: +582c 58112233 setarg 0x112233 +582d 6001c4ea store 3 ,mem_le_fixed_ltk +582e 58445566 setarg 0x445566 +582f e0a18000 istore 3 ,contw +5830 58778899 setarg 0x778899 +5831 e0a18000 istore 3 ,contw +5832 58001122 setarg 0x001122 +5833 e0a18000 istore 3 ,contw +5834 58334455 setarg 0x334455 +5835 e0a18000 istore 3 ,contw +5836 58000066 setarg 0x66 +5837 e0a08000 istore 1 ,contw +5838 20600000 rtn + +le_set_justwork: +5839 59000302 setarg 0x01000302 +583a 60024453 store 4 ,mem_le_pres +583b 58010010 setarg 0x010010 +583c 6001c457 store 3 ,mem_le_pres_max_keysize +583d 7044c601 jam 1 ,mem_le_pairing_mode +583e 20600000 rtn + +le_fifo_malloc_tx_empty: +583f da200000 arg 0 ,rega +5840 d8200001 arg llid_empty ,type +5841 20205850 branch le_fifo_malloc_tx + +le_fifo_malloc_tx_ll: +5842 d8200003 arg llid_le_ll ,type +5843 20405850 call le_fifo_malloc_tx +5844 1a427e00 copy regb ,pdata +5845 e0a08000 istore 1 ,contw +5846 20600000 rtn + +le_fifo_malloc_tx_l2cap: +5847 18000202 force llid_l2cap_start ,type +5848 1a20a204 increase 4 ,rega +5849 20405850 call le_fifo_malloc_tx +584a 1a20a3fc increase -4 ,rega +584b 1a227e00 copy rega ,pdata +584c e0a10000 istore 2 ,contw +584d 1a427e00 copy regb ,pdata +584e e0a10000 istore 2 ,contw +584f 20600000 rtn + +le_fifo_malloc_tx: +5850 1a267cf0 sub rega ,240 ,null +5851 24212a8c nbranch assert ,positive +5852 6800c4ff fetch 1 ,mem_le_tx_buff_used +5853 d8400001 arg 1 ,temp +5854 df200004 arg le_tx_buff_count ,loopcnt + +le_fifo_malloc_tx_loop: +5855 98417c00 iand temp ,null +5856 2022d85a branch le_fifo_malloc_tx_got_empty ,zero +5857 18438400 lshift temp ,temp +5858 c2005855 loop le_fifo_malloc_tx_loop +5859 20202a8c branch assert + +le_fifo_malloc_tx_got_empty: +585a 9842fe00 ixor temp ,pdata +585b 6000c4ff store 1 ,mem_le_tx_buff_used +585c 1f267e04 sub loopcnt ,le_tx_buff_count ,pdata +585d 1ff27e00 lshift4 pdata ,pdata +585e 1ff27e00 lshift4 pdata ,pdata +585f d8401800 arg mem_le_tx_buffer0 ,temp +5860 98408400 iadd temp ,temp + +le_fifo_tx_find_empty_ptr: +5861 df200000 arg 0 ,loopcnt +5862 d8c04500 arg mem_le_tx_ptr0 ,contr + +le_fifo_tx_find_empty_ptr_loop: +5863 e8c10000 ifetch 2 ,contr +5864 203a5869 branch le_fifo_tx_found_empty_ptr ,blank +5865 1f227e00 copy loopcnt ,pdata +5866 1f20f201 increase 1 ,loopcnt +5867 c0825863 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop +5868 20202a8c branch assert + +le_fifo_tx_found_empty_ptr: +5869 18c08dfe increase -2 ,contr +586a e0c90000 istoret 2 ,contr +586b 18420a00 copy temp ,contw +586c 1a227e00 copy rega ,pdata +586d e0a08000 istore 1 ,contw +586e 58000000 setarg 0 +586f e0a08000 istore 1 ,contw +5870 18227e00 copy type ,pdata +5871 e0a08000 istore 1 ,contw +5872 20600000 rtn + +le_fifo_get_first_tx_ptr: +5873 68014500 fetch 2 ,mem_le_tx_ptr0 +5874 1fe20c00 copy pdata ,contr +5875 20600000 rtn + +le_fifo_get_second_tx_ptr: +5876 68014502 fetch 2 ,mem_le_tx_ptr1 +5877 1fe20c00 copy pdata ,contr +5878 20600000 rtn + +le_fifo_get_last_tx_ptr: +5879 2040587c call le_fifo_get_last_tx_ptr0 +587a 1fe20c00 copy pdata ,contr +587b 20600000 rtn + +le_fifo_get_last_tx_ptr0: +587c 68014506 fetch 2 ,mem_le_tx_ptr3 +587d 247a0000 nrtn blank +587e 68014504 fetch 2 ,mem_le_tx_ptr2 +587f 247a0000 nrtn blank +5880 68014502 fetch 2 ,mem_le_tx_ptr1 +5881 247a0000 nrtn blank +5882 68014500 fetch 2 ,mem_le_tx_ptr0 +5883 20600000 rtn + +le_fifo_get_first_l2cap_ptr: +5884 20405873 call le_fifo_get_first_tx_ptr +5885 18c08c03 increase 3 ,contr +5886 20600000 rtn + +le_fifo_get_first_att_ptr: +5887 20405873 call le_fifo_get_first_tx_ptr +5888 18c08c07 increase 7 ,contr +5889 20600000 rtn + +le_fifo_get_last_att_ptr: +588a 20405879 call le_fifo_get_last_tx_ptr +588b 18c08c07 increase 7 ,contr +588c 20600000 rtn + +le_fifo_get_last_l2cap_ptr: +588d 20405879 call le_fifo_get_last_tx_ptr +588e 18c08c03 increase 3 ,contr +588f 20600000 rtn + +le_fifo_check_full: +5890 68014506 fetch 2 ,mem_le_tx_ptr3 +5891 20600000 rtn + +le_fifo_check_nearly_full: +5892 68014504 fetch 2 ,mem_le_tx_ptr2 +5893 20600000 rtn + +le_fifo_check_empty: +5894 68014500 fetch 2 ,mem_le_tx_ptr0 +5895 20600000 rtn + +le_fifo_release_first_node: +5896 68014500 fetch 2 ,mem_le_tx_ptr0 +5897 d8401800 arg mem_le_tx_buffer0 ,temp +5898 98467e00 isub temp ,pdata +5899 1ff1fe00 rshift4 pdata ,pdata +589a 1ff18e00 rshift4 pdata ,queue +589b 6800c4ff fetch 1 ,mem_le_tx_buff_used +589c f93ffe00 qset0 pdata +589d 6000c4ff store 1 ,mem_le_tx_buff_used +589e df200000 arg 0 ,loopcnt + +le_fifo_release_first_node_loop: +589f 1f23fe00 lshift loopcnt ,pdata +58a0 d8404502 arg mem_le_tx_ptr1 ,temp +58a1 98408400 iadd temp ,temp +58a2 e8410000 ifetch 2 ,temp +58a3 184085fe increase -2 ,temp +58a4 e0410000 istore 2 ,temp +58a5 1f227e00 copy loopcnt ,pdata +58a6 1f20f201 increase 1 ,loopcnt +58a7 c081d89f bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop +58a8 58000000 setarg 0 +58a9 e0410000 istore 2 ,temp +58aa 20600000 rtn + +le_parse_att: +58ab e8c18000 ifetch 3 ,contr +58ac 60018477 store 3 ,mem_le_att_opcode +58ad c00158c1 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +58ae c001d8c9 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +58af c00258cc beq attop_find_information_request ,le_parse_att_find_information_request +58b0 c00358f2 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +58b1 c004593f beq attop_read_by_type_request ,le_parse_att_read_by_type_request +58b2 c00559bc beq attop_read_request ,le_parse_att_read_request +58b3 c00659e4 beq attop_read_blob_request ,le_parse_att_read_blob_request +58b4 c00859fa beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +58b5 c0095a2f beq attop_write_request ,le_parse_att_write_request +58b6 c00b5a48 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +58b7 c00c5a5b beq attop_execute_write_request ,le_parse_att_execute_write_request +58b8 c0295a60 beq attop_write_command ,le_parse_att_write_command +58b9 20600000 rtn + +le_send_att_exchange_mtu_requset: +58ba 18002203 force 3 ,rega +58bb 20405a82 call le_fifo_malloc_tx_l2cap_gatt +58bc 58000002 setarg attop_exchange_mtu_request +58bd e0a08000 istore 1 ,contw +58be 680144a6 fetch 2 ,mem_le_local_mtu +58bf e0a10000 istore 2 ,contw +58c0 20600000 rtn + +le_parse_att_exchange_mtu_request: +58c1 204058c9 call le_parse_att_exchange_mtu_response + +le_send_att_exchange_mtu_response: +58c2 18002203 force 3 ,rega +58c3 20405a82 call le_fifo_malloc_tx_l2cap_gatt +58c4 58000003 setarg attop_exchange_mtu_response +58c5 e0a08000 istore 1 ,contw +58c6 680144a6 fetch 2 ,mem_le_local_mtu +58c7 e0a10000 istore 2 ,contw +58c8 20600000 rtn + +le_parse_att_exchange_mtu_response: +58c9 1fecfe00 rshift8 pdata ,pdata +58ca 600144a8 store 2 ,mem_le_remote_mtu +58cb 20600000 rtn + +le_parse_att_find_information_request: +58cc 20405ab1 call le_get_search_handle_start_end_common +58cd 20407fe7 call enable_user +58ce 202058cf branch le_send_att_find_information_response + +le_send_att_find_information_response: +58cf d9600003 arg 3 ,timeup +58d0 20405756 call le_init_attlist_search + +le_send_att_find_information_res_loop: +58d1 2040575f call le_att_handle_inrange +58d2 203a58f0 branch le_send_att_find_information_res_end ,blank +58d3 242158ed nbranch le_send_att_find_information_res_next ,positive +58d4 18c08dfe increase -2 ,contr +58d5 20407ea5 call store_contr +58d6 20407e9c call get_contw +58d7 243458e1 nbranch le_send_att_find_information_res_store_info ,user +58d8 20407e85 call push_stack_rega_b_c +58d9 20407fe9 call disable_user +58da 18002214 force 20 ,rega +58db 20405a82 call le_fifo_malloc_tx_l2cap_gatt +58dc 20407e95 call pop_stack_rega_b_c +58dd 58000005 setarg attop_find_information_response +58de e0a08000 istore 1 ,contw +58df 58000001 setarg uuid_size_16bit +58e0 e0a08000 istore 1 ,contw + +le_send_att_find_information_res_store_info: +58e1 20407e9f call get_contr +58e2 e8c10000 ifetch 2 ,contr +58e3 e0a10000 istore 2 ,contw +58e4 e8c08000 ifetch 1 ,contr +58e5 1fe27200 copy pdata ,loopcnt +58e6 20407f01 call memcpy +58e7 20407ea2 call store_contw +58e8 196097ff increase -1 ,timeup +58e9 2022d8f0 branch le_send_att_find_information_res_end ,zero + +le_send_att_find_information_res_cont: +58ea e8c08000 ifetch 1 ,contr +58eb 98c08c00 iadd contr ,contr +58ec 202058d1 branch le_send_att_find_information_res_loop + +le_send_att_find_information_res_next: +58ed e8c08000 ifetch 1 ,contr +58ee 98c08c00 iadd contr ,contr +58ef 202058ea branch le_send_att_find_information_res_cont + +le_send_att_find_information_res_end: +58f0 20345a76 branch le_send_att_error_response_notfound ,user +58f1 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_find_by_type_value_request: +58f2 20405ab1 call le_get_search_handle_start_end_common +58f3 e8c10000 ifetch 2 ,contr +58f4 60014472 store 2 ,mem_le_search_uuid +58f5 20407ea5 call store_contr +58f6 d8a0445e arg mem_le_search_att_type_length ,contw +58f7 680144fc fetch 2 ,mem_le_l2cap_size +58f8 1fe0fff9 increase -7 ,pdata +58f9 204056db call le_get_search_common2 +58fa 20205905 branch le_send_att_find_by_type_value_response + +le_start_end_handle_check_1: +58fb 78547c00 disable user +58fc 6809445a fetcht 2 ,mem_le_search_handle_start +58fd 6801445c fetch 2 ,mem_le_search_handle_end +58fe 98467c00 isub temp ,null +58ff 24215902 nbranch le_start_end_handle_check_1_fail ,positive +5900 18427e00 deposit temp +5901 c1800000 rtnne 0 + +le_start_end_handle_check_1_fail: +5902 78347c00 enable user +5903 70047a01 jam att_err_invalid_handle ,mem_le_err_code +5904 20205a77 branch le_send_att_error_response + +le_send_att_find_by_type_value_response: +5905 204058fb call le_start_end_handle_check_1 +5906 20740000 rtn user +5907 68094472 fetcht 2 ,mem_le_search_uuid +5908 58002800 setarg uuid_gatt_primary_service +5909 98467c00 isub temp ,null +590a 2022d90c branch le_send_att_find_by_type_value_res_primary ,zero +590b 20205a76 branch le_send_att_error_response_notfound + +le_send_att_find_by_type_value_res_primary: +590c 7004b400 jam le_find_by_type_val_res_not_found ,mem_le_search_res +590d 6809445a fetcht 2 ,mem_le_search_handle_start +590e 60090aa2 storet 2 ,mem_temp +590f 2040578c call le_att_get_handle_info +5910 243a5a76 nbranch le_send_att_error_response_notfound ,blank + +le_send_att_find_primary_search_loop: +5911 68090aa2 fetcht 2 ,mem_temp +5912 2040578c call le_att_get_handle_info +5913 243a5925 nbranch le_send_att_error_response_notfound2 ,blank +5914 18c22200 copy contr ,rega +5915 680084b3 fetch 1 ,mem_le_curr_att_len +5916 1fe27200 copy pdata ,loopcnt +5917 6808c45e fetcht 1 ,mem_le_search_att_type_length +5918 98467c00 isub temp ,null +5919 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero +591a da40445f arg mem_le_search_att_type ,regb +591b 20407f88 call string_compare +591c 2022d928 branch le_send_att_find_primary_search_end_start_handle_found ,zero +591d 680104a3 fetch 2 ,mem_le_cur_uuid +591e 68094472 fetcht 2 ,mem_le_search_uuid +591f 98467c00 isub temp ,null +5920 2022d930 branch le_send_att_find_primary_search_end_ending_handle_found ,zero + +le_send_att_find_primary_search_loop1: +5921 68010aa2 fetch 2 ,mem_temp +5922 1fe0fe01 increase 1 ,pdata +5923 60010aa2 store 2 ,mem_temp +5924 20205911 branch le_send_att_find_primary_search_loop + +le_send_att_error_response_notfound2: +5925 680084b4 fetch 1 ,mem_le_search_res +5926 c000d930 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +5927 20205a76 branch le_send_att_error_response_notfound + +le_send_att_find_primary_search_end_start_handle_found: +5928 680104a3 fetch 2 ,mem_le_cur_uuid +5929 68094472 fetcht 2 ,mem_le_search_uuid +592a 98467c00 isub temp ,null +592b 2422d921 nbranch le_send_att_find_primary_search_loop1 ,zero +592c 7004b401 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +592d 68090aa2 fetcht 2 ,mem_temp +592e 6009049e storet 2 ,mem_le_cur_handle_start +592f 20205921 branch le_send_att_find_primary_search_loop1 + +le_send_att_find_primary_search_end_ending_handle_found: +5930 680084b4 fetch 1 ,mem_le_search_res +5931 c0005921 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +5932 7004b402 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +5933 68090aa2 fetcht 2 ,mem_temp +5934 184085ff increase -1 ,temp +5935 600904a0 storet 2 ,mem_le_cur_handle_end + +le_send_att_find_primary_search_end: +5936 da200005 arg 5 ,rega +5937 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5938 58000007 setarg attop_find_by_type_value_response +5939 e0a08000 istore 1 ,contw +593a 6801049e fetch 2 ,mem_le_cur_handle_start +593b e0a10000 istore 2 ,contw +593c 680104a0 fetch 2 ,mem_le_cur_handle_end +593d e0a10000 istore 2 ,contw +593e 20600000 rtn + +le_parse_att_read_by_type_request: +593f 20405ab1 call le_get_search_handle_start_end_common +5940 204056df call le_get_search_att_uuid +5941 20205942 branch le_send_att_read_by_type_response + +le_send_att_read_by_type_response: +5942 6809445a fetcht 2 ,mem_le_search_handle_start +5943 60090aa2 storet 2 ,mem_temp +5944 20405756 call le_init_attlist_search +5945 2040576d call le_att_get_handle_ptr2 +5946 18c08dfe increase -2 ,contr +5947 18c27e00 copy contr ,pdata +5948 6001049c store 2 ,mem_le_cur_attlist_start_ptr +5949 68094472 fetcht 2 ,mem_le_search_uuid +594a 58002a00 setarg uuid_chrctr_device_name +594b 98467c00 isub temp ,null +594c 2022d9a8 branch le_send_att_read_by_type_res_device_name ,zero +594d 58002803 setarg uuid_gatt_characteristic +594e 98467c00 isub temp ,null +594f 2422d990 nbranch le_send_att_read_by_type_res_not_characteristic ,zero +5950 d9600002 arg 2 ,timeup + +le_send_att_read_by_type_response_loop: +5951 20405a88 call le_att_check_handle_end +5952 2421596d nbranch le_send_att_read_by_type_response_end ,positive +5953 68090aa2 fetcht 2 ,mem_temp +5954 2040578a call le_att_get_handle_info_from_ptr +5955 c000d96d beq 1 ,le_send_att_read_by_type_response_end +5956 20405a94 call le_att_same_uuid +5957 2422d96b nbranch le_send_att_read_by_type_response_next_handle ,zero +5958 2434596f nbranch le_send_att_read_by_type_res_found_next ,user +5959 78547c00 disable user +595a da200014 arg 20 ,rega +595b 20405a82 call le_fifo_malloc_tx_l2cap_gatt +595c 58000009 setarg attop_read_by_type_response +595d e0a08000 istore 1 ,contw +595e 18a26000 copy contw ,alarm +595f 18a08a01 increase 1 ,contw +5960 2040597d call le_send_att_read_by_type_write_properties +5961 20405a84 call le_att_next_handle +5962 2040578a call le_att_get_handle_info_from_ptr +5963 20405984 call le_send_att_read_by_type_write_uuid +5964 680084a2 fetch 1 ,mem_le_cur_uuid_length +5965 1fe0fe05 increase 5 ,pdata +5966 e6008000 istore 1 ,alarm +5967 680084a2 fetch 1 ,mem_le_cur_uuid_length +5968 c008596d beq 16 ,le_send_att_read_by_type_response_end +5969 196097ff increase -1 ,timeup +596a 2022d96d branch le_send_att_read_by_type_response_end ,zero + +le_send_att_read_by_type_response_next_handle: +596b 20405a84 call le_att_next_handle +596c 20205951 branch le_send_att_read_by_type_response_loop + +le_send_att_read_by_type_response_end: +596d 20345a76 branch le_send_att_error_response_notfound ,user +596e 20205aa5 branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_found_next: +596f 20405a97 call le_store_att_record +5970 20405a84 call le_att_next_handle +5971 2040578a call le_att_get_handle_info_from_ptr +5972 680084a2 fetch 1 ,mem_le_cur_uuid_length +5973 c008596d beq 16 ,le_send_att_read_by_type_response_end +5974 20407e9c call get_contw +5975 68010aa2 fetch 2 ,mem_temp +5976 1fe0ffff increase -1 ,pdata +5977 e0a10000 istore 2 ,contw +5978 20405aa1 call le_write_att_record_common +5979 20405984 call le_send_att_read_by_type_write_uuid +597a 196097ff increase -1 ,timeup +597b 2022d96d branch le_send_att_read_by_type_response_end ,zero +597c 2020596b branch le_send_att_read_by_type_response_next_handle + +le_send_att_read_by_type_write_properties: +597d 68010aa2 fetch 2 ,mem_temp +597e e0a10000 istore 2 ,contw +597f 680084b3 fetch 1 ,mem_le_curr_att_len +5980 1fe27200 copy pdata ,loopcnt +5981 20407e9f call get_contr +5982 20407ef4 call memcpy_fast +5983 20207ea2 branch store_contw + +le_send_att_read_by_type_write_uuid: +5984 20407e9c call get_contw +5985 68010aa2 fetch 2 ,mem_temp +5986 e0a10000 istore 2 ,contw +5987 20407ea2 call store_contw +5988 680084a2 fetch 1 ,mem_le_cur_uuid_length +5989 1fe27200 copy pdata ,loopcnt +598a 20407e9c call get_contw +598b 20407e9f call get_contr +598c 9f260c00 isub loopcnt ,contr +598d 18c08dff increase -1 ,contr +598e 20407ef4 call memcpy_fast +598f 20207ea2 branch store_contw + +le_send_att_read_by_type_res_not_characteristic: +5990 6809445a fetcht 2 ,mem_le_search_handle_start +5991 60090aa2 storet 2 ,mem_temp + +le_send_att_read_by_type_res_not_char_loop: +5992 20405a88 call le_att_check_handle_end +5993 24215a76 nbranch le_send_att_error_response_notfound ,positive +5994 2040578a call le_att_get_handle_info_from_ptr +5995 c000da76 beq 1 ,le_send_att_error_response_notfound +5996 20405a94 call le_att_same_uuid +5997 2422d9a6 nbranch le_send_att_read_by_type_res_not_char_next ,zero + +le_send_att_read_by_type_res_not_char_common: +5998 da200014 arg 20 ,rega +5999 20405a82 call le_fifo_malloc_tx_l2cap_gatt +599a 58000009 setarg attop_read_by_type_response +599b e0a08000 istore 1 ,contw +599c 680084b3 fetch 1 ,mem_le_curr_att_len +599d 1fe27200 copy pdata ,loopcnt +599e 1fe0fe02 increase 2 ,pdata +599f e0a08000 istore 1 ,contw +59a0 68010aa2 fetch 2 ,mem_temp +59a1 e0a10000 istore 2 ,contw +59a2 20407e9f call get_contr +59a3 20407ef4 call memcpy_fast +59a4 20407ea2 call store_contw +59a5 20205aa5 branch le_send_auto_len_by_mem + +le_send_att_read_by_type_res_not_char_next: +59a6 20405a84 call le_att_next_handle +59a7 20205992 branch le_send_att_read_by_type_res_not_char_loop + +le_send_att_read_by_type_res_device_name: +59a8 d8402a00 arg uuid_chrctr_device_name ,temp +59a9 2040577c call le_att_get_short_uuid_ptr +59aa 207a0000 rtn blank +59ab 18c08dfb increase -5 ,contr +59ac e8c10000 ifetch 2 ,contr +59ad 60010aa2 store 2 ,mem_temp +59ae da200014 arg 20 ,rega +59af 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59b0 58000009 setarg attop_read_by_type_response +59b1 e0a08000 istore 1 ,contw +59b2 6800c3af fetch 1 ,mem_le_name_len +59b3 1fe27200 copy pdata ,loopcnt +59b4 1fe0fe02 increase 2 ,pdata +59b5 e0a08000 istore 1 ,contw +59b6 68010aa2 fetch 2 ,mem_temp +59b7 e0a10000 istore 2 ,contw +59b8 d8c043b0 arg mem_le_name ,contr +59b9 20407ef4 call memcpy_fast +59ba 20407ea2 call store_contw +59bb 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_read_request: +59bc 68090478 fetcht 2 ,mem_le_att_handle +59bd 6800c4e9 fetch 1 ,mem_le_configuration +59be c281d9dd bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth + +le_send_att_read_response: +59bf 2040576a call le_att_get_handle_ptr +59c0 203a5a76 branch le_send_att_error_response_notfound ,blank +59c1 18c08dfe increase -2 ,contr +59c2 e8c10000 ifetch 2 ,contr +59c3 d8402a00 arg uuid_chrctr_device_name ,temp +59c4 98467c00 isub temp ,null +59c5 2022d9d3 branch le_send_device_name ,zero +59c6 e8c08000 ifetch 1 ,contr +59c7 1fe67c16 sub pdata ,22 ,null +59c8 202159ca branch le_send_att_read_response_less ,positive +59c9 18007e16 force 22 ,pdata + +le_send_att_read_response_less: +59ca 1fe22600 copy pdata ,regc +59cb 20407ea5 call store_contr +59cc 1a60a201 add regc ,1 ,rega +59cd 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59ce 5800000b setarg attop_read_response +59cf e0a08000 istore 1 ,contw +59d0 1a627200 copy regc ,loopcnt +59d1 20407e9f call get_contr +59d2 20207f01 branch memcpy + +le_send_device_name: +59d3 20407ea5 call store_contr +59d4 6800c3af fetch 1 ,mem_le_name_len +59d5 1fe0a201 add pdata ,1 ,rega +59d6 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59d7 5800000b setarg attop_read_response +59d8 e0a08000 istore 1 ,contw +59d9 6800c3af fetch 1 ,mem_le_name_len +59da 1fe27200 copy pdata ,loopcnt +59db d8c043b0 arg mem_le_name ,contr +59dc 20207f01 branch memcpy + +le_send_att_read_response_check_auth: +59dd 680144fa fetch 2 ,mem_le_pairing_handle +59de 98467c00 isub temp ,null +59df 2422d9bf nbranch le_send_att_read_response ,zero +59e0 20405a42 call le_check_encrypt_state +59e1 243459bf nbranch le_send_att_read_response ,user + +le_send_att_read_response_check_auth_next: +59e2 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +59e3 20205a77 branch le_send_att_error_response + +le_parse_att_read_blob_request: +59e4 e8c10000 ifetch 2 ,contr +59e5 6001445e store 2 ,mem_le_att_offset + +le_send_att_read_blob_response: +59e6 da200014 arg 20 ,rega +59e7 20405a82 call le_fifo_malloc_tx_l2cap_gatt +59e8 5800000d setarg attop_read_blob_response +59e9 e0a08000 istore 1 ,contw +59ea 6801445e fetch 2 ,mem_le_att_offset +59eb 98002200 iforce rega +59ec 68090478 fetcht 2 ,mem_le_att_handle +59ed 2040576a call le_att_get_handle_ptr +59ee 203a5a76 branch le_send_att_error_response_notfound ,blank +59ef e8c08000 ifetch 1 ,contr +59f0 9a267200 isub rega ,loopcnt +59f1 24215a76 nbranch le_send_att_error_response_notfound ,positive +59f2 1f267c16 sub loopcnt ,22 ,null +59f3 202159f5 branch le_send_att_read_blob_response_less ,positive +59f4 18007216 force 22 ,loopcnt + +le_send_att_read_blob_response_less: +59f5 1a227e00 deposit rega +59f6 98c08c00 iadd contr ,contr +59f7 20407ef4 call memcpy_fast +59f8 20407ea2 call store_contw +59f9 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_read_by_group_type_request: +59fa 20405ab1 call le_get_search_handle_start_end_common +59fb 204056d7 call le_get_search_att_type +59fc 202059fd branch le_send_att_read_by_group_type_response + +le_send_att_read_by_group_type_response: +59fd d9600002 arg 2 ,timeup +59fe 6809445a fetcht 2 ,mem_le_search_handle_start +59ff 60090aa2 storet 2 ,mem_temp +5a00 20405756 call le_init_attlist_search +5a01 2040576d call le_att_get_handle_ptr2 +5a02 18c08dfe increase -2 ,contr +5a03 18c27e00 copy contr ,pdata +5a04 6001049c store 2 ,mem_le_cur_attlist_start_ptr + +le_send_att_read_by_group_type_response_loop: +5a05 20405a88 call le_att_check_handle_end +5a06 24215a25 nbranch le_send_att_read_by_group_type_end0 ,positive +5a07 68090aa2 fetcht 2 ,mem_temp +5a08 2040578a call le_att_get_handle_info_from_ptr +5a09 c000da28 beq 1 ,le_send_att_read_by_group_type_end1 +5a0a 20405a8c call le_att_same_type +5a0b 2422da23 nbranch le_send_att_read_by_group_type_next_handle ,zero +5a0c 19627e00 copy timeup ,pdata +5a0d c0005a28 beq 0 ,le_send_att_read_by_group_type_end1 +5a0e 24345a19 nbranch le_send_att_read_by_group_type_store_write_record ,user +5a0f 78547c00 disable user +5a10 da200014 arg 20 ,rega +5a11 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a12 58000011 setarg attop_read_by_group_type_response +5a13 e0a08000 istore 1 ,contw +5a14 680084b3 fetch 1 ,mem_le_curr_att_len +5a15 1fe0fe04 increase 4 ,pdata +5a16 e0a08000 istore 1 ,contw +5a17 20407ea2 call store_contw +5a18 20205a1f branch le_send_att_read_by_group_type_store_record + +le_send_att_read_by_group_type_store_write_record: +5a19 680084b3 fetch 1 ,mem_le_curr_att_len +5a1a c0085a28 beq 16 ,le_send_att_read_by_group_type_end1 +5a1b 68010aa2 fetch 2 ,mem_temp +5a1c 1fe0ffff increase -1 ,pdata +5a1d 600104a0 store 2 ,mem_le_cur_handle_end +5a1e 20405a9c call le_write_att_record + +le_send_att_read_by_group_type_store_record: +5a1f 68010aa2 fetch 2 ,mem_temp +5a20 6001049e store 2 ,mem_le_cur_handle_start +5a21 20405a97 call le_store_att_record +5a22 196097ff increase -1 ,timeup + +le_send_att_read_by_group_type_next_handle: +5a23 20405a84 call le_att_next_handle +5a24 20205a05 branch le_send_att_read_by_group_type_response_loop + +le_send_att_read_by_group_type_end0: +5a25 68010aa2 fetch 2 ,mem_temp +5a26 600104a0 store 2 ,mem_le_cur_handle_end +5a27 20205a2c branch le_send_att_read_by_group_type_end_common + +le_send_att_read_by_group_type_end1: +5a28 68010aa2 fetch 2 ,mem_temp +5a29 1fe0ffff increase -1 ,pdata +5a2a 600104a0 store 2 ,mem_le_cur_handle_end +5a2b 20205a2c branch le_send_att_read_by_group_type_end_common + +le_send_att_read_by_group_type_end_common: +5a2c 20345a76 branch le_send_att_error_response_notfound ,user +5a2d 20405a9c call le_write_att_record +5a2e 20205aa5 branch le_send_auto_len_by_mem + +le_parse_att_write_request: +5a2f 18c22200 copy contr ,rega +5a30 680144fc fetch 2 ,mem_le_l2cap_size +5a31 1fe0a5fd add pdata ,-3 ,regb +5a32 204056e2 call le_writeatt_cb + +le_send_att_write_response_check_auth: +5a33 6800c4e9 fetch 1 ,mem_le_configuration +5a34 c3025a3d bbit0 bit_ble_write_auth ,le_send_att_write_response +5a35 68090478 fetcht 2 ,mem_le_att_handle +5a36 680144fa fetch 2 ,mem_le_pairing_handle +5a37 98467c00 isub temp ,null +5a38 2422da3d nbranch le_send_att_write_response ,zero +5a39 20405a42 call le_check_encrypt_state +5a3a 24345a3d nbranch le_send_att_write_response ,user +5a3b 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +5a3c 20205a77 branch le_send_att_error_response + +le_send_att_write_response: +5a3d 18002201 force 1 ,rega +5a3e 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a3f 58000013 setarg attop_write_response +5a40 e0a08000 istore 1 ,contw +5a41 20600000 rtn + +le_check_encrypt_state: +5a42 20407fe9 call disable_user +5a43 6800c4c6 fetch 1 ,mem_le_pairing_mode +5a44 c1000000 rtneq le_pairing_mode_none +5a45 6800c040 fetch 1 ,mem_context +5a46 c3820000 rtnbit1 lestate_encryption +5a47 20207fe7 branch enable_user + +le_parse_att_prepare_write_request: +5a48 18c0a202 add contr ,2 ,rega +5a49 680144fc fetch 2 ,mem_le_l2cap_size +5a4a 1fe0a5fb add pdata ,-5 ,regb +5a4b 204056e2 call le_writeatt_cb +5a4c 20205a4d branch le_send_att_prepare_write_response + +le_send_att_prepare_write_response: +5a4d 680144fc fetch 2 ,mem_le_l2cap_size +5a4e 1fe22200 copy pdata ,rega +5a4f 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a50 58000017 setarg attop_prepare_write_response +5a51 e0a08000 istore 1 ,contw +5a52 68010478 fetch 2 ,mem_le_att_handle +5a53 e0a10000 istore 2 ,contw +5a54 680144fc fetch 2 ,mem_le_l2cap_size +5a55 1fe0f3fb add pdata ,-5 ,loopcnt +5a56 6801450d fetch 2 ,mem_le_payload_ptr +5a57 1fe08c07 add pdata ,7 ,contr +5a58 e8c10000 ifetch 2 ,contr +5a59 e0a10000 istore 2 ,contw +5a5a 20207ef4 branch memcpy_fast + +le_parse_att_execute_write_request: + +le_send_att_execute_write_response: +5a5b 18002201 force 1 ,rega +5a5c 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a5d 58000019 setarg attop_execute_write_response +5a5e e0a08000 istore 1 ,contw +5a5f 20600000 rtn + +le_parse_att_write_command: +5a60 18c22200 copy contr ,rega +5a61 680144fc fetch 2 ,mem_le_l2cap_size +5a62 1fe0a5fd add pdata ,-3 ,regb +5a63 202056e2 branch le_writeatt_cb + +le_att_malloc_tx_notify: +5a64 18422600 copy temp ,regc +5a65 1a20a203 increase 3 ,rega +5a66 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a67 1a20a3fd increase -3 ,rega +5a68 5800001b setarg attop_handle_value_notification +5a69 e0a08000 istore 1 ,contw +5a6a 1a620400 copy regc ,temp +5a6b e0a90000 istoret 2 ,contw +5a6c 20600000 rtn + +le_att_malloc_tx_indication: +5a6d 18422600 copy temp ,regc +5a6e 1a20a203 increase 3 ,rega +5a6f 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a70 1a20a3fd increase -3 ,rega +5a71 5800001d setarg attop_handle_value_indication +5a72 e0a08000 istore 1 ,contw +5a73 1a620400 copy regc ,temp +5a74 e0a90000 istoret 2 ,contw +5a75 20600000 rtn + +le_send_att_error_response_notfound: +5a76 70047a0a jam att_err_attribute_not_found ,mem_le_err_code + +le_send_att_error_response: +5a77 18002205 force 5 ,rega +5a78 20405a82 call le_fifo_malloc_tx_l2cap_gatt +5a79 58000001 setarg attop_error_response +5a7a e0a08000 istore 1 ,contw +5a7b 68008477 fetch 1 ,mem_le_att_opcode +5a7c e0a08000 istore 1 ,contw +5a7d 68010478 fetch 2 ,mem_le_att_handle +5a7e e0a10000 istore 2 ,contw +5a7f 6800847a fetch 1 ,mem_le_err_code +5a80 e0a08000 istore 1 ,contw +5a81 20600000 rtn + +le_fifo_malloc_tx_l2cap_gatt: +5a82 18002404 force le_l2cap_cid_att ,regb +5a83 20205847 branch le_fifo_malloc_tx_l2cap + +le_att_next_handle: +5a84 68090aa2 fetcht 2 ,mem_temp +5a85 18408401 increase 1 ,temp +5a86 60090aa2 storet 2 ,mem_temp +5a87 20600000 rtn + +le_att_check_handle_end: +5a88 68090aa2 fetcht 2 ,mem_temp +5a89 6801445c fetch 2 ,mem_le_search_handle_end +5a8a 98467c00 isub temp ,null +5a8b 20600000 rtn + +le_att_same_type: +5a8c 6808c45e fetcht 1 ,mem_le_search_att_type_length +5a8d da20445f arg mem_le_search_att_type ,rega + +le_att_check_same_common: +5a8e 680084a2 fetch 1 ,mem_le_cur_uuid_length +5a8f 1fe27200 copy pdata ,loopcnt +5a90 98467c00 isub temp ,null +5a91 24628000 nrtn zero +5a92 da4004a3 arg mem_le_cur_uuid ,regb +5a93 20207f88 branch string_compare + +le_att_same_uuid: +5a94 6808c471 fetcht 1 ,mem_le_search_uuid_length +5a95 da204472 arg mem_le_search_uuid ,rega +5a96 20205a8e branch le_att_check_same_common + +le_store_att_record: +5a97 680084b3 fetch 1 ,mem_le_curr_att_len +5a98 60008101 store 1 ,mem_tmp_buffer +5a99 1fe27200 copy pdata ,loopcnt +5a9a 20407e9f call get_contr +5a9b 20207ef4 branch memcpy_fast + +le_write_att_record: +5a9c 20407e9c call get_contw +5a9d 6801049e fetch 2 ,mem_le_cur_handle_start +5a9e e0a10000 istore 2 ,contw +5a9f 680104a0 fetch 2 ,mem_le_cur_handle_end +5aa0 e0a10000 istore 2 ,contw + +le_write_att_record_common: +5aa1 68008101 fetch 1 ,mem_tmp_buffer +5aa2 1fe27200 copy pdata ,loopcnt +5aa3 20407ef4 call memcpy_fast +5aa4 20207ea2 branch store_contw + +le_send_auto_len_by_mem: +5aa5 20407e9c call get_contw +5aa6 2040588a call le_fifo_get_last_att_ptr +5aa7 18a27e00 copy contw ,pdata +5aa8 98c62200 isub contr ,rega +5aa9 2040588d call le_fifo_get_last_l2cap_ptr +5aaa 1a227e00 copy rega ,pdata +5aab e0c10000 istore 2 ,contr +5aac 1a20a204 increase 4 ,rega +5aad 20405879 call le_fifo_get_last_tx_ptr +5aae 1a227e00 copy rega ,pdata +5aaf e0c08000 istore 1 ,contr +5ab0 20600000 rtn + +le_get_search_handle_start_end_common: +5ab1 1fecfe00 rshift8 pdata ,pdata +5ab2 6001445a store 2 ,mem_le_search_handle_start +5ab3 e8c10000 ifetch 2 ,contr +5ab4 6001445c store 2 ,mem_le_search_handle_end +5ab5 20600000 rtn + +le_parse_signaling: +5ab6 e8c08000 ifetch 1 ,contr +5ab7 e8c88000 ifetcht 1 ,contr +5ab8 e8c90000 ifetcht 2 ,contr +5ab9 c009dabb beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +5aba 20600000 rtn + +le_l2cap_parse_conn_parameter_update_rsp: +5abb e8c10000 ifetch 2 ,contr +5abc 60014509 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +5abd 700a9940 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +5abe 20207d86 branch ui_ipc_send_event + +le_l2cap_tx_update_req: +5abf da20000c arg 0x0c ,rega +5ac0 da600012 arg l2cap_connection_parameter_update_request ,regc +5ac1 20405ac7 call le_fifo_malloc_tx_l2cap_signaling +5ac2 58000008 setarg 0x08 +5ac3 e0a10000 istore 2 ,contw +5ac4 68044496 fetch 8 ,mem_le_interval_min +5ac5 e0a40000 istore 8 ,contw +5ac6 20600000 rtn + +le_fifo_malloc_tx_l2cap_signaling: +5ac7 20405acf call le_l2cap_update_signaling_identifier +5ac8 da400005 arg le_l2cap_cid_signal ,regb +5ac9 20405847 call le_fifo_malloc_tx_l2cap +5aca 1a627e00 copy regc ,pdata +5acb e0a08000 istore 1 ,contw +5acc 6800c508 fetch 1 ,mem_le_signaling_identifier +5acd e0a08000 istore 1 ,contw +5ace 20600000 rtn + +le_l2cap_update_signaling_identifier: +5acf 6800c508 fetch 1 ,mem_le_signaling_identifier +5ad0 1fe0fe01 pincrease 1 +5ad1 6000c508 store 1 ,mem_le_signaling_identifier +5ad2 c1800000 rtnne 0 + +le_l2cap_reset_signaling_identifier: +5ad3 70450801 jam 1 ,mem_le_signaling_identifier +5ad4 20600000 rtn + +le_pairing_mode_init: +5ad5 6800c4c6 fetch 1 ,mem_le_pairing_mode +5ad6 c0005ae4 beq le_pairing_mode_none ,le_set_no_pairing +5ad7 c000dae7 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +5ad8 c0015ae9 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +5ad9 c040dadd beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +5ada c0415adf beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +5adb c041dae2 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +5adc 20600000 rtn + +le_set_pairing_mode_secure_justwork: +5add 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +5ade 20205ae5 branch le_set_noinputnooutput + +le_set_pairing_mode_secure_numeric: +5adf 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +5ae0 70445401 jam flag_iocap_displayyesno ,mem_le_pres_iocap +5ae1 20600000 rtn + +le_set_pairing_mode_secure_passkey: +5ae2 7044560d jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +5ae3 20205aea branch le_set_displayonly + +le_set_no_pairing: +5ae4 70445600 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth + +le_set_noinputnooutput: +5ae5 70445403 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +5ae6 20600000 rtn + +le_set_pairing_mode_lagacy_just_work: +5ae7 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth +5ae8 20205ae5 branch le_set_noinputnooutput + +le_set_pairing_mode_lagacy_passkey: +5ae9 70445605 jam flag_le_bonding_mitm ,mem_le_pres_auth + +le_set_displayonly: +5aea 70445400 jam flag_iocap_displayonly ,mem_le_pres_iocap +5aeb 20600000 rtn + +le_secure_connection_enable: +5aec 6800c456 fetch 1 ,mem_le_pres_auth +5aed 79207e03 set1 le_auth_secure_connection_pairing_bit ,pdata +5aee 6000c456 store 1 ,mem_le_pres_auth +5aef 20600000 rtn + +le_secure_connection_disable: +5af0 6800c456 fetch 1 ,mem_le_pres_auth +5af1 793ffe03 set0 le_auth_secure_connection_pairing_bit ,pdata +5af2 6000c456 store 1 ,mem_le_pres_auth +5af3 20600000 rtn + +le_parse_smp: +5af4 e8c08000 ifetch 1 ,contr +5af5 c000db09 beq smp_pairing_request ,le_parse_smp_pairing_request +5af6 c001db30 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +5af7 c0025b4d beq smp_pairing_random ,le_parse_smp_pairing_random +5af8 c002db5a beq smp_pairing_failed ,le_parse_smp_pairing_failed +5af9 c0035b80 beq smp_encryption_information ,le_parse_smp_encryption_information +5afa c003dbc4 beq smp_master_identification ,le_parse_smp_master_identification +5afb c0045baf beq smp_identity_information ,le_parse_smp_identity_information +5afc c004dbc0 beq smp_identity_address_information ,le_parse_smp_identity_address_information +5afd c0055bc4 beq smp_signing_information ,le_parse_smp_signing_information +5afe c005dbc4 beq smp_security_request ,le_parse_smp_security_request +5aff c0065bc5 beq smp_pairing_public_key ,le_parse_smp_public_key +5b00 c006dbca beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +5b01 20600000 rtn + +le_send_smp_security_request: +5b02 18002202 force 2 ,rega +5b03 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b04 5800000b setarg smp_security_request +5b05 e0a08000 istore 1 ,contw +5b06 6800c456 fetch 1 ,mem_le_pres_auth +5b07 e0a08000 istore 1 ,contw +5b08 20600000 rtn + +le_parse_smp_pairing_request: +5b09 6000c44c store 1 ,mem_le_preq +5b0a e8c30000 ifetch 6 ,contr +5b0b e0a30000 istore 6 ,contw +5b0c 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b0d c0005b5f beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +5b0e 20405b2b call le_send_smp_pairing_response +5b0f 20405b26 call le_check_master_support_secure_connect +5b10 7044c403 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +5b11 6800c44d fetch 1 ,mem_le_preq_iocap +5b12 c0005b18 beq flag_iocap_displayonly ,le_set_tk_0 +5b13 c000db18 beq flag_iocap_displayyesno ,le_set_tk_0 +5b14 c001db18 beq flag_iocap_noinputnooutput ,le_set_tk_0 +5b15 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b16 c0015b1b beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +5b17 c1418000 rtneq le_pairing_mode_secure_connect_passkey + +le_set_tk_0: +5b18 dfe00000 arg 0 ,pdata +5b19 600244c7 store 4 ,mem_le_tk +5b1a 20600000 rtn + +le_parse_smp_pairing_req_passkey: +5b1b 6800c4e9 fetch 1 ,mem_le_configuration +5b1c c2805b24 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey + +le_genernate_tk: +5b1d da2044c7 arg mem_le_tk ,rega +5b1e 1a220a00 copy rega ,contw +5b1f df200003 arg 3 ,loopcnt +5b20 2040630d call generate_random_loop +5b21 680144c9 fetch 2 ,mem_le_tk + 2 +5b22 1fe17e07 and_into 0x7 ,pdata +5b23 600144c9 store 2 ,mem_le_tk + 2 + +le_parse_smp_pairing_req_fixed_passkey: +5b24 700a9934 jam bt_evt_le_tk_generate ,mem_fifo_temp +5b25 20207d86 branch ui_ipc_send_event + +le_check_master_support_secure_connect: +5b26 6800c44f fetch 1 ,mem_le_preq_auth +5b27 c3818000 rtnbit1 le_auth_secure_connection_pairing_bit +5b28 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b29 c4038000 rtnbit0 le_pairing_mode_secure_connect_bit +5b2a 20203402 branch app_ble_disconnect + +le_send_smp_pairing_response: +5b2b 18002207 force 7 ,rega +5b2c 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b2d 6803c453 fetch 7 ,mem_le_pres +5b2e e0a38000 istore 7 ,contw +5b2f 20600000 rtn + +le_parse_smp_pairing_confirm: +5b30 18c22200 copy contr ,rega +5b31 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b32 c041db37 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +5b33 1a220c00 copy rega ,contr +5b34 d8a0442a arg mem_le_rconfirm ,contw +5b35 20407ebf call memcpy16 +5b36 20205b3d branch le_send_smp_pairing_confirm + +le_parse_smp_pairing_confirm_secure_passkey: +5b37 1a220c00 copy rega ,contr +5b38 d8a0442a arg mem_le_rconfirm ,contw +5b39 20407ebf call memcpy16 +5b3a 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5b3b 7044c108 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +5b3c 20600000 rtn + +le_send_smp_pairing_confirm: +5b3d 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b3e c283db45 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +5b3f 2040739c call generate_confirm +5b40 18002211 force 17 ,rega +5b41 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b42 58000003 setarg smp_pairing_confirm +5b43 e0a08000 istore 1 ,contw +5b44 20207497 branch store_aes_result + +le_send_smp_pairing_confirm_sc: +5b45 d8a0443a arg mem_le_srand ,contw +5b46 2040630c call generate_random +5b47 204071c5 call function_f4_cb +5b48 18002211 force 17 ,rega +5b49 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b4a 58000003 setarg smp_pairing_confirm +5b4b e0a08000 istore 1 ,contw +5b4c 20207201 branch load_inverse_result + +le_parse_smp_pairing_random: +5b4d 18c22200 copy contr ,rega +5b4e 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b4f c283db61 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +5b50 1a220c00 copy rega ,contr +5b51 20407394 call authenticate_rconfirm +5b52 2022db75 branch le_parse_smp_pairing_random_success ,zero + +le_send_pairing_confirm_value_failed: +5b53 70047b04 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason + +le_send_pairing_failed: +5b54 18002202 force 2 ,rega +5b55 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b56 58000005 setarg smp_pairing_failed +5b57 e0a08000 istore 1 ,contw +5b58 6800847b fetch 1 ,mem_le_ll_pairing_fail_reason +5b59 e0a08000 istore 1 ,contw + +le_parse_smp_pairing_failed: +5b5a 18000e0a force smp_pairing_timer ,queue +5b5b 20407f07 call timer_stop +5b5c 7044c400 jam flag_le_pairing_null ,mem_le_pairing_state +5b5d 700a9930 jam bt_evt_le_pairing_fail ,mem_fifo_temp +5b5e 20207d86 branch ui_ipc_send_event + +le_smp_pairing_fail_reason_not_support_pairing: +5b5f 70047b05 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +5b60 20205b54 branch le_send_pairing_failed + +le_parse_smp_pairing_random_sc: +5b61 d8a0042f arg mem_le_mrand ,contw +5b62 1a220c00 copy rega ,contr +5b63 20407ebf call memcpy16 +5b64 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b65 c041db6c beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +5b66 2040714f call function_g2 +5b67 20405b7a call le_send_smp_pairing_random +5b68 6800c4c6 fetch 1 ,mem_le_pairing_mode +5b69 c1c10000 rtnne le_pairing_mode_secure_connect_numeric +5b6a 700a993b jam bt_evt_le_gkey_generate ,mem_fifo_temp +5b6b 20207d86 branch ui_ipc_send_event + +le_parse_smp_pairing_random_sc_passkey: +5b6c 204071ba call function_f4_ca +5b6d d8a00af2 arg mem_aes_cmac_temp ,contw +5b6e 20407201 call load_inverse_result +5b6f da200af2 arg mem_aes_cmac_temp ,rega +5b70 da40442a arg mem_le_rconfirm ,regb +5b71 df200010 arg 16 ,loopcnt +5b72 20407f88 call string_compare +5b73 2422db53 nbranch le_send_pairing_confirm_value_failed ,zero +5b74 20205b7a branch le_send_smp_pairing_random + +le_parse_smp_pairing_random_success: +5b75 20407390 call generate_stk +5b76 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp +5b77 20407d86 call ui_ipc_send_event +5b78 70442901 jam 1 ,mem_ltk_exists +5b79 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state + +le_send_smp_pairing_random: +5b7a 18002211 force 17 ,rega +5b7b 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b7c 58000004 setarg smp_pairing_random +5b7d e0a08000 istore 1 ,contw +5b7e d8c0443a arg mem_le_srand ,contr +5b7f 20207ebf branch memcpy16 + +le_parse_smp_encryption_information: +5b80 d8a0041f arg mem_le_peer_ltk ,contw +5b81 20207ebf branch memcpy16 + +le_send_smp_encryption_information: +5b82 18002211 force 17 ,rega +5b83 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b84 58000006 setarg smp_encryption_information +5b85 e0a08000 istore 1 ,contw +5b86 6800c4e9 fetch 1 ,mem_le_configuration +5b87 c280db8a bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +5b88 d8c04419 arg mem_le_ltk ,contr +5b89 20207ebf branch memcpy16 + +le_send_fixed_ltk: +5b8a d8c044ea arg mem_le_fixed_ltk ,contr +5b8b 20207ebf branch memcpy16 + +le_send_smp_master_identification: +5b8c d8a044cb arg mem_le_ediv ,contw +5b8d 1800720a force 10 ,loopcnt +5b8e 2040630d call generate_random_loop +5b8f 1800220b force 11 ,rega +5b90 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b91 58000007 setarg smp_master_identification +5b92 e0a08000 istore 1 ,contw +5b93 680144cb fetch 2 ,mem_le_ediv +5b94 e0a10000 istore 2 ,contw +5b95 680444cd fetch 8 ,mem_le_rand +5b96 e0a40000 istore 8 ,contw +5b97 20600000 rtn + +le_send_smp_identity_information: +5b98 18002211 force 17 ,rega +5b99 20405c62 call le_fifo_malloc_tx_l2cap_smp +5b9a 58000008 setarg smp_identity_information +5b9b e0a08000 istore 1 ,contw +5b9c 58000000 setarg 0 +5b9d e0a40000 istore 8 ,contw +5b9e e0a40000 istore 8 ,contw +5b9f 20600000 rtn + +le_send_smp_identity_address_information: +5ba0 18002208 force 8 ,rega +5ba1 20405c62 call le_fifo_malloc_tx_l2cap_smp +5ba2 58000009 setarg smp_identity_address_information +5ba3 e0a08000 istore 1 ,contw +5ba4 6800c495 fetch 1 ,mem_le_conn_own_addr_type +5ba5 e0a08000 istore 1 ,contw +5ba6 680344a0 fetch 6 ,mem_le_lap +5ba7 e0a30000 istore 6 ,contw +5ba8 20600000 rtn + +le_send_pairing_fail_unspecified_reason: +5ba9 70047b08 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +5baa 20205b54 branch le_send_pairing_failed + +le_check_init_key_distribution: +5bab 6800c458 fetch 1 ,mem_le_pres_init_key_distribution +5bac 6808c458 fetcht 1 ,mem_le_pres_init_key_distribution +5bad 98417e00 iand temp ,pdata +5bae 20600000 rtn + +le_parse_smp_identity_information: +5baf d8a044d5 arg mem_le_irk ,contw +5bb0 20407ebf call memcpy16 +5bb1 20405bab call le_check_init_key_distribution +5bb2 2fec0001 isolate0 le_initator_irk_bit ,pdata +5bb3 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true +5bb4 6800c092 fetch 1 ,mem_device_option +5bb5 c1850000 rtnne dvc_op_module +5bb6 20405bb9 call le_check_master_addr_type +5bb7 24740000 nrtn user +5bb8 20203410 branch app_ble_store_reconn_info + +le_check_master_addr_type: +5bb9 20407fe9 call disable_user +5bba 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +5bbb c1000000 rtneq master_public_addr +5bbc 68008454 fetch 1 ,mem_le_plap + 5 +5bbd 2fe180c0 compare 0xc0 ,pdata ,0xc0 +5bbe 20608000 rtn true +5bbf 20207fe7 branch enable_user + +le_parse_smp_identity_address_information: +5bc0 20405bab call le_check_init_key_distribution +5bc1 2fec0001 isolate0 le_initator_irk_bit ,pdata +5bc2 2020dba9 branch le_send_pairing_fail_unspecified_reason ,true +5bc3 20600000 rtn + +le_parse_smp_master_identification: + +le_parse_smp_signing_information: + +le_parse_smp_security_request: +5bc4 20600000 rtn + +le_parse_smp_public_key: +5bc5 d8a009be arg mem_le_pubkey_remote_x_256 ,contw +5bc6 20407eb3 call memcpy64 +5bc7 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5bc8 7044c101 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +5bc9 20600000 rtn + +le_parse_smp_dhkey_check: +5bca d8a00a6e arg mem_sp_confirm_remote ,contw +5bcb 20407ebf call memcpy16 +5bcc 7044c106 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +5bcd 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5bce 20600000 rtn + +le_send_smp_pairing_public_key: +5bcf 18002241 force 65 ,rega +5bd0 20405c62 call le_fifo_malloc_tx_l2cap_smp +5bd1 5800000c setarg smp_pairing_public_key +5bd2 e0a08000 istore 1 ,contw +5bd3 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +5bd4 20207eb3 branch memcpy64 + +le_send_smp_pairing_dhkey_check: +5bd5 20407166 call function_f6_eb +5bd6 18002211 force 17 ,rega +5bd7 20405c62 call le_fifo_malloc_tx_l2cap_smp +5bd8 5800000d setarg smp_pairing_dhkey_check +5bd9 e0a08000 istore 1 ,contw +5bda 20207201 branch load_inverse_result + +le_check_paring_time: +5bdb 6800c4c4 fetch 1 ,mem_le_pairing_state +5bdc c17f8000 rtneq flag_le_pairing_end +5bdd d8400003 arg flag_le_pairing_rcv_pairing_req ,temp +5bde 98467c00 isub temp ,null +5bdf 24610000 nrtn positive +5be0 d8e0000a arg smp_pairing_timer ,queue +5be1 20407f16 call timer_check +5be2 247a0000 nrtn blank +5be3 20205ba9 branch le_send_pairing_fail_unspecified_reason + +le_pairing_sm: +5be4 473c402f bpatchx patch2f_0 ,mem_patch2f +5be5 6800c4c4 fetch 1 ,mem_le_pairing_state +5be6 c0005bef beq flag_le_pairing_null ,le_pairing_sm_null +5be7 c000dbf5 beq flag_le_pairing_start ,le_pairing_sm_start +5be8 c0015bef beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +5be9 c001dbf7 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +5bea c002dbfb beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +5beb c003dc07 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +5bec c0045c09 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +5bed c004dc10 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +5bee 20600000 rtn + +le_pairing_sm_null: + +le_pairing_sm_send_sec_req: +5bef 6800c4c5 fetch 1 ,mem_le_enc_state +5bf0 c1820000 rtnne flag_le_send_start_enc_rsp +5bf1 7044c5ff jam flag_le_enc_end ,mem_le_enc_state +5bf2 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state +5bf3 700a993f jam bt_evt_le_reconnect_complete ,mem_fifo_temp +5bf4 20207d86 branch ui_ipc_send_event + +le_pairing_sm_start: +5bf5 7044c402 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +5bf6 20205b02 branch le_send_smp_security_request + +le_pairing_sm_rcv_pairing_req: +5bf7 7044c404 jam flag_le_pairing_auth ,mem_le_pairing_state +5bf8 58017700 setarg timer_smp_pairing_timeout +5bf9 d8e0000a arg smp_pairing_timer ,queue +5bfa 20207f08 branch timer_init + +le_pairing_sm_after_auth: +5bfb 6800c4c5 fetch 1 ,mem_le_enc_state +5bfc c0025bfe beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +5bfd 20600000 rtn + +le_pairing_sm_after_auth_start_enc: +5bfe 7044c407 jam flag_le_paring_send_enc_information ,mem_le_pairing_state +5bff 700a9929 jam bt_evt_le_enc_info ,mem_fifo_temp +5c00 20407d86 call ui_ipc_send_event +5c01 20405b82 call le_send_smp_encryption_information +5c02 6800c092 fetch 1 ,mem_device_option +5c03 c1850000 rtnne dvc_op_module +5c04 20405bb9 call le_check_master_addr_type +5c05 20740000 rtn user +5c06 20203410 branch app_ble_store_reconn_info + +le_pairng_sm_send_enc_information: +5c07 7044c408 jam flag_le_paring_send_master_identification ,mem_le_pairing_state +5c08 20205b8c branch le_send_smp_master_identification + +le_pairng_sm_send_master_indentification: +5c09 6800c452 fetch 1 ,mem_le_preq_resp_key_distribution +5c0a 6808c459 fetcht 1 ,mem_le_pres_resp_key_distribution +5c0b 98417e00 iand temp ,pdata +5c0c 2fec0001 isolate0 le_initator_irk_bit ,pdata +5c0d 2020dc12 branch le_parse_start_enc_rsp_after_auth_end ,true +5c0e 7044c409 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +5c0f 20205b98 branch le_send_smp_identity_information + +le_pairng_sm_send_indentity_information: +5c10 20405ba0 call le_send_smp_identity_address_information +5c11 20205c12 branch le_parse_start_enc_rsp_after_auth_end + +le_parse_start_enc_rsp_after_auth_end: +5c12 18000e0a force smp_pairing_timer ,queue +5c13 20407f07 call timer_stop +5c14 7044c5ff jam flag_le_enc_end ,mem_le_enc_state +5c15 7044c4ff jam flag_le_pairing_end ,mem_le_pairing_state +5c16 700a993e jam bt_evt_le_pairing_complete ,mem_fifo_temp +5c17 20207d86 branch ui_ipc_send_event + +le_secure_connect_sm: +5c18 473cc02f bpatchx patch2f_1 ,mem_patch2f +5c19 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c1a c4038000 rtnbit0 le_pairing_mode_secure_connect_bit +5c1b 6800c4bf fetch 1 ,mem_le_secure_connect_flag +5c1c c1810000 rtnne le_sp_flag_commit_256 +5c1d 7044bf00 jam sp_flag_standby ,mem_le_secure_connect_flag +5c1e 6800c4c1 fetch 1 ,mem_le_secure_connect_state +5c1f c000dc58 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +5c20 c0015c5f beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +5c21 c001dc52 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +5c22 c0035c39 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +5c23 c003dc30 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +5c24 c0045c26 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +5c25 20600000 rtn + +le_sc_sm_passkey_wait_confirm: +5c26 6800c663 fetch 1 ,mem_authentication_passkey_times +5c27 1fe20e00 copy pdata ,queue +5c28 1fe0fe01 increase 1 ,pdata +5c29 6000c663 store 1 ,mem_authentication_passkey_times +5c2a 680244c7 fetch 4 ,mem_le_tk +5c2b afefffff qisolate1 pdata +5c2c 58000080 setarg 0x80 +5c2d 7920fe00 setflag true ,0 ,pdata +5c2e 6000c664 store 1 ,mem_passkey_1bit +5c2f 20205c55 branch le_sc_sm_ready_send_pairing_confirm + +le_sc_sm_wait_confirm_gkey: +5c30 6800c4c2 fetch 1 ,mem_le_sc_confirm_gkey_flag +5c31 7044c200 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +5c32 c000dc35 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +5c33 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c34 20600000 rtn + +le_sc_confirm_gkey_ok: +5c35 700a9931 jam bt_evt_le_pairing_success ,mem_fifo_temp +5c36 20407d86 call ui_ipc_send_event +5c37 7044c405 jam flag_le_pairing_after_auth ,mem_le_pairing_state +5c38 20205bd5 branch le_send_smp_pairing_dhkey_check + +le_sc_sm_receive_dhkey: +5c39 680089b9 fetch 1 ,mem_sp_dhkey_invalid +5c3a c001dc3d beq sp_key_valid_256 ,le_dhkey_ready +5c3b 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c3c 20600000 rtn + +le_dhkey_ready: +5c3d 2040718d call function_f5 +5c3e 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c3f c041dc41 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +5c40 20405b18 call le_set_tk_0 + +le_dhkey_ready_common: +5c41 2040717a call function_f6_ea +5c42 da200af2 arg mem_aes_cmac_temp ,rega +5c43 da400a6e arg mem_sp_confirm_remote ,regb +5c44 df200010 arg 16 ,loopcnt +5c45 20407f88 call string_compare +5c46 2022dc49 branch le_dhkey_check_ok ,zero + +le_dhkey_check_fail: +5c47 70047b0b jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +5c48 20205b54 branch le_send_pairing_failed + +le_dhkey_check_ok: +5c49 20407595 call sp_calc_check_publickey_256 +5c4a 2422dc47 nbranch le_dhkey_check_fail ,zero +5c4b 70442901 jam 1 ,mem_ltk_exists +5c4c 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c4d c040dc35 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +5c4e c041dc35 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +5c4f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c50 7044c107 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +5c51 20600000 rtn + +le_sc_sm_send_public_key: +5c52 6800c4c6 fetch 1 ,mem_le_pairing_mode +5c53 c041dc56 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +5c54 70466400 jam 0 ,mem_passkey_1bit + +le_sc_sm_ready_send_pairing_confirm: +5c55 20205b3d branch le_send_smp_pairing_confirm + +le_sc_sm_send_public_key_passkey: +5c56 70466300 jam 0 ,mem_authentication_passkey_times +5c57 20205b1b branch le_parse_smp_pairing_req_passkey + +le_sc_sm_receive_public_key: +5c58 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c59 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid +5c5a c001dc5c beq sp_key_valid_256 ,le_public_key_ready +5c5b 20600000 rtn + +le_public_key_ready: +5c5c 7044c102 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +5c5d 7009b900 jam sp_key_invalid ,mem_sp_dhkey_invalid +5c5e 20207a99 branch sp_dhkey_calc_256 + +le_sc_sm_wait_send_public_key: +5c5f 7044bf02 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +5c60 7044c103 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +5c61 20205bcf branch le_send_smp_pairing_public_key + +le_fifo_malloc_tx_l2cap_smp: +5c62 18002406 force le_l2cap_cid_smp ,regb +5c63 20205847 branch le_fifo_malloc_tx_l2cap + +le_parse_ll: +5c64 680082db fetch 1 ,mem_le_rxbuf + 2 +5c65 c0005c7b beq ll_connection_update_req ,le_parse_connection_update_req +5c66 c000dc83 beq ll_channel_map_req ,le_parse_channel_map_req +5c67 c0015c8e beq ll_terminate_ind ,le_parse_terminate_ind +5c68 c001dcaa beq ll_enc_req ,le_parse_enc_req +5c69 c0025ce1 beq ll_enc_rsp ,le_parse_enc_rsp +5c6a c002dce6 beq ll_start_enc_req ,le_parse_start_enc_req +5c6b c0035cea beq ll_start_enc_rsp ,le_parse_start_enc_rsp +5c6c c003dcf5 beq ll_unknown_rsp ,le_parse_unknown_rsp +5c6d c0045c99 beq ll_feature_req ,le_parse_feature_req +5c6e c004dcf5 beq ll_feature_rsp ,le_parse_feature_rsp +5c6f c0055cef beq ll_pause_enc_req ,le_parse_pause_enc_req +5c70 c005dcf5 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +5c71 c0065c9f beq ll_version_ind ,le_parse_version_ind +5c72 c006dcf5 beq ll_reject_ind ,le_parse_reject_ind +5c73 c0095ca6 beq ll_ping_req ,le_parse_ping_req +5c74 c009dcf5 beq ll_ping_rsp ,le_parse_ping_rsp +5c75 da200002 arg 2 ,rega +5c76 da400007 arg ll_unknown_rsp ,regb +5c77 20405842 call le_fifo_malloc_tx_ll +5c78 680082db fetch 1 ,mem_le_rxbuf + 2 +5c79 e0a08000 istore 1 ,contw +5c7a 20600000 rtn + +le_parse_connection_update_req: +5c7b e8c48000 ifetch 9 ,contr +5c7c 6004c3d3 store 9 ,mem_le_new_param +5c7d e8c10000 ifetch 2 ,contr +5c7e 6001045f store 2 ,mem_le_instant +5c7f 6800843f fetch 1 ,mem_le_state +5c80 79207e05 set1 lestate_update_param ,pdata +5c81 6000843f store 1 ,mem_le_state +5c82 20600000 rtn + +le_parse_channel_map_req: +5c83 e8c28000 ifetch 5 ,contr +5c84 6002c3ce store 5 ,mem_le_new_map +5c85 e8c10000 ifetch 2 ,contr +5c86 6001045f store 2 ,mem_le_instant +5c87 68090459 fetcht 2 ,mem_le_event_count +5c88 98467c00 isub temp ,null +5c89 24215c8e nbranch le_parse_terminate_ind ,positive +5c8a 6800843f fetch 1 ,mem_le_state +5c8b 79207e06 set1 lestate_update_map ,pdata +5c8c 6000843f store 1 ,mem_le_state +5c8d 20600000 rtn + +le_parse_terminate_ind: +5c8e 58000014 setarg 20 +5c8f 6001046d store 2 ,mem_le_superto +5c90 600144ba store 2 ,mem_le_init_superto +5c91 20600000 rtn + +le_send_terminate_ind_user_terminated: +5c92 da600013 arg error_remote_user_terminated_connection ,regc + +le_send_terminate_ind: +5c93 da200002 arg 2 ,rega +5c94 da400002 arg ll_terminate_ind ,regb +5c95 20405842 call le_fifo_malloc_tx_ll +5c96 1a627e00 copy regc ,pdata +5c97 e0a08000 istore 1 ,contw +5c98 20600000 rtn + +le_parse_feature_req: + +le_send_feature_rsp: +5c99 da200009 arg 9 ,rega +5c9a da400009 arg ll_feature_rsp ,regb +5c9b 20405842 call le_fifo_malloc_tx_ll +5c9c 58000001 setarg param_le_features +5c9d e0a40000 istore 8 ,contw +5c9e 20600000 rtn + +le_parse_version_ind: +5c9f 20748000 rtn master + +le_send_version_ind: +5ca0 da200006 arg 6 ,rega +5ca1 da40000c arg ll_version_ind ,regb +5ca2 20405842 call le_fifo_malloc_tx_ll +5ca3 6802c510 fetch 5 ,mem_lmp_version +5ca4 e0a28000 istore 5 ,contw +5ca5 20600000 rtn + +le_parse_ping_req: +5ca6 da400013 arg ll_ping_rsp ,regb +5ca7 20205ca8 branch le_send_ll_one_lenth + +le_send_ll_one_lenth: +5ca8 da200001 arg 1 ,rega +5ca9 20205842 branch le_fifo_malloc_tx_ll + +le_parse_enc_req: +5caa e8c40000 ifetch 8 ,contr +5cab 600444cd store 8 ,mem_le_rand +5cac e8c10000 ifetch 2 ,contr +5cad 600144cb store 2 ,mem_le_ediv +5cae e8c40000 ifetch 8 ,contr +5caf 600444aa store 8 ,mem_le_skdm +5cb0 e8c20000 ifetch 4 ,contr +5cb1 60024411 store 4 ,mem_le_ivm +5cb2 20405ccf call le_send_enc_rsp +5cb3 473d402f bpatchx patch2f_2 ,mem_patch2f +5cb4 6800c4c4 fetch 1 ,mem_le_pairing_state +5cb5 c002dcbc beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +5cb6 6800c4e9 fetch 1 ,mem_le_configuration +5cb7 c280dcbf bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +5cb8 6800c217 fetch 1 ,mem_nv_data_number +5cb9 245a67be ncall load_device_list_mode_4 ,blank +5cba 6800c429 fetch 1 ,mem_ltk_exists +5cbb c0005cc4 beq 0 ,le_ltk_lost + +le_parse_enc_req_after_auth: +5cbc 7044c501 jam flag_le_rcv_enc_start ,mem_le_enc_state +5cbd 20405cdd call le_send_start_enc_req +5cbe 202073a2 branch generate_sk + +le_parse_enc_req_fixed_ltk: +5cbf 70442901 jam 1 ,mem_ltk_exists +5cc0 d8c044ea arg mem_le_fixed_ltk ,contr +5cc1 d8a04419 arg mem_le_ltk ,contw +5cc2 20407ebf call memcpy16 +5cc3 20205cbc branch le_parse_enc_req_after_auth + +le_ltk_lost: +5cc4 473dc02f bpatchx patch2f_3 ,mem_patch2f +5cc5 7044c500 jam flag_le_enc_null ,mem_le_enc_state +5cc6 7044c400 jam flag_le_enc_null ,mem_le_pairing_state +5cc7 700a9941 jam bt_evt_le_ltk_lost ,mem_fifo_temp +5cc8 20207d86 branch ui_ipc_send_event + +le_send_reject_ind: +5cc9 da200002 arg 2 ,rega +5cca da40000d arg ll_reject_ind ,regb +5ccb 20405842 call le_fifo_malloc_tx_ll +5ccc 58000006 setarg le_err_pin_or_key_missing +5ccd e0a08000 istore 1 ,contw +5cce 20600000 rtn + +le_send_enc_rsp: +5ccf d8a044b2 arg mem_le_skds ,contw +5cd0 18007208 force 8 ,loopcnt +5cd1 2040630d call generate_random_loop +5cd2 d8a04415 arg mem_le_ivs ,contw +5cd3 18007204 force 4 ,loopcnt +5cd4 2040630d call generate_random_loop +5cd5 da20000d arg 13 ,rega +5cd6 da400004 arg ll_enc_rsp ,regb +5cd7 20405842 call le_fifo_malloc_tx_ll +5cd8 680444b2 fetch 8 ,mem_le_skds +5cd9 e0a40000 istore 8 ,contw +5cda 68024415 fetch 4 ,mem_le_ivs +5cdb e0a20000 istore 4 ,contw +5cdc 20600000 rtn + +le_send_start_enc_req: +5cdd da400005 arg ll_start_enc_req ,regb +5cde 20205ca8 branch le_send_ll_one_lenth + +le_send_start_enc_rsp: +5cdf da400006 arg ll_start_enc_rsp ,regb +5ce0 20205ca8 branch le_send_ll_one_lenth + +le_parse_enc_rsp: +5ce1 e8c40000 ifetch 8 ,contr +5ce2 600444b2 store 8 ,mem_le_skds +5ce3 e8c20000 ifetch 4 ,contr +5ce4 60024415 store 4 ,mem_le_ivs +5ce5 202073a2 branch generate_sk + +le_parse_start_enc_req: +5ce6 6800843f fetch 1 ,mem_le_state +5ce7 79207e04 set1 lestate_encryption ,pdata +5ce8 6000843f store 1 ,mem_le_state +5ce9 20600000 rtn + +le_parse_start_enc_rsp: +5cea 20748000 rtn master +5ceb 700a9932 jam bt_evt_le_start_enc ,mem_fifo_temp +5cec 20407d86 call ui_ipc_send_event +5ced 7044c504 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +5cee 20205cdf branch le_send_start_enc_rsp + +le_parse_pause_enc_req: +5cef 7044c502 jam flag_le_enc_pause ,mem_le_enc_state +5cf0 20405cf3 call le_send_pause_enc_rsp +5cf1 700a9933 jam bt_evt_le_pause_enc ,mem_fifo_temp +5cf2 20207d86 branch ui_ipc_send_event + +le_send_pause_enc_rsp: +5cf3 da40000b arg ll_pause_enc_rsp ,regb +5cf4 20205ca8 branch le_send_ll_one_lenth + +le_parse_feature_rsp: + +le_parse_unknown_rsp: + +le_parse_pause_enc_rsp: + +le_parse_reject_ind: + +le_parse_ping_rsp: +5cf5 20600000 rtn + +init_lmp: +5cf6 20758000 rtn wake + +init_lmp_work: +5cf7 473e402f bpatchx patch2f_4 ,mem_patch2f +5cf8 58000000 setarg 0 +5cf9 60008048 store 1 ,mem_lmp_to_send +5cfa 60008055 store 1 ,mem_conn_sm +5cfb 60008078 store 1 ,mem_lmo_opcode1 +5cfc 6000807c store 1 ,mem_lmo_opcode2 +5cfd 6000c158 store 1 ,mem_esco_addr +5cfe 600084d7 store 1 ,mem_auth_enable +5cff 6000816d store 1 ,mem_connection_options +5d00 600089b5 store 1 ,mem_pairing_auth +5d01 70455b00 jam switch_flag_init ,mem_switch_flag +5d02 70022900 jam 0 ,mem_switch_fail_master_count +5d03 7004d800 jam null_encryp ,mem_wait_encryption + +init_lmp_reinit: +5d04 7009b500 jam 0 ,mem_pairing_auth +5d05 7009b400 jam 0 ,mem_sp_localsm +5d06 7004d100 jam 0 ,mem_lmp_conn_state + +parse_rx_done: +5d07 20600000 rtn + +parse_lmp: +5d08 473ec02f bpatchx patch2f_5 ,mem_patch2f +5d09 2054e2ff call setlocalsm_master ,master +5d0a 2454e303 ncall setlocalsm_slave ,master +5d0b 204062bc call lmo_fifo_check +5d0c 247a0000 nrtn blank +5d0d 6800804c fetch 1 ,mem_state_map +5d0e c4030000 rtnbit0 smap_rxlmp +5d0f 793ffe06 set0 smap_rxlmp ,pdata +5d10 793f8001 set0 mark_rxbuf_inuse ,mark +5d11 6000804c store 1 ,mem_state_map +5d12 68008551 fetch 1 ,mem_rxbuf +5d13 6808804c fetcht 1 ,mem_state_map +5d14 2feffe00 isolate1 smap_lmptidinit ,pdata +5d15 79208401 setflag true ,smap_lmptid ,temp +5d16 6008804c storet 1 ,mem_state_map +5d17 18410402 and_into 0x2 ,temp +5d18 6008807f storet 1 ,mem_lmo_tid2 +5d19 6808804c fetcht 1 ,mem_state_map +5d1a 1fe37e00 rshift pdata ,pdata +5d1b 6000807d store 1 ,mem_lmi_opcode2 +5d1c 473f402f bpatchx patch2f_6 ,mem_patch2f +5d1d 6800807d fetch 1 ,mem_lmi_opcode2 +5d1e c03fdd66 beq lmp_escape ,parse_lmp_escape +5d1f c001ddb1 beq lmp_accepted ,parse_lmp_accepted +5d20 c0025dc2 beq lmp_not_accepted ,parse_lmp_not_accepted +5d21 c01e5d59 beq lmp_set_afh ,parse_lmp_set_afh +5d22 c002dd55 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +5d23 c007dfa8 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +5d24 c0085e24 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +5d25 c011de42 beq lmp_auto_rate ,parse_lmp_auto_rate +5d26 c01cdfc1 beq lmp_test_control ,parse_lmp_test_control +5d27 c01c5fbc beq lmp_test_activate ,parse_lmp_test_activate +5d28 c018de27 beq lmp_setup_complete ,parse_lmp_setup_complete +5d29 c01bdeb0 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +5d2a c013deac beq lmp_features_req ,parse_lmp_features_req +5d2b c019dea9 beq lmp_host_connection_req ,parse_lmp_conn_req +5d2c c012deae beq lmp_version_req ,parse_lmp_version_req +5d2d c0135e3e beq lmp_version_res ,parse_lmp_version_res +5d2e c003de36 beq lmp_detach ,parse_lmp_detach +5d2f c016de2d beq lmp_max_slot ,parse_lmp_max_slot +5d30 c0175e2e beq lmp_max_slot_req ,parse_lmp_max_slot_req +5d31 c000dea5 beq lmp_name_req ,parse_lmp_name_req +5d32 c0015e90 beq lmp_name_res ,parse_lmp_name_res +5d33 c0145fb3 beq lmp_features_res ,parse_lmp_features_res +5d34 c004de86 beq lmp_comb_key ,parse_lmp_comb_key +5d35 c005de5f beq lmp_au_rand ,parse_lmp_au_rand +5d36 c0045e43 beq lmp_in_rand ,parse_lmp_in_rand +5d37 c0065e6a beq lmp_sres ,parse_lmp_sres +5d38 c00fde3a beq lmp_incr_power_req ,parse_lmp_incr_power +5d39 c0105e3c beq lmp_decr_power_req ,parse_lmp_decr_power +5d3a c010deca beq lmp_max_power ,parse_lmp_max_power +5d3b c0115eca beq lmp_min_power ,parse_lmp_min_power +5d3c c01adecb beq lmp_page_mode_req ,parse_lmp_page_mode_req +5d3d c01b5ecc beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +5d3e c0125eca beq lmp_preferred_rate ,parse_lmp_preferred_rate +5d3f c01a5ecd beq lmp_slot_offset ,parse_lmp_slot_offset +5d40 c00bded6 beq lmp_sniff_req ,parse_lmp_sniff_req +5d41 c008def2 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +5d42 c0095ef6 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +5d43 c009def8 beq lmp_switch_req ,parse_lmp_switch_req +5d44 c006df0a beq lmp_temp_rand ,parse_lmp_temp_rand +5d45 c0075f0a beq lmp_temp_key ,parse_lmp_temp_key +5d46 c017deaa beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +5d47 c0185f0a beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +5d48 c0055f0a beq lmp_unit_key ,parse_lmp_unit_key +5d49 c00c5f0b beq lmp_unsniff_req ,parse_lmp_unsniff_req +5d4a c0195f0a beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +5d4b c01edf10 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +5d4c c01f5f51 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +5d4d c01fdf4b beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +5d4e c0205f78 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +5d4f c020df8a beq lmp_dhkey_check ,parse_dhkey_check +5d50 c0035fa7 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +5d51 c01d5d57 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req + +reject_unknown_packet: +5d52 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 + +reject_lmp_packet: +5d53 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5d54 20600000 rtn + +parse_lmp_clkoffset_req: +5d55 70007c06 jam lmp_clkoffset_res ,mem_lmo_opcode2 +5d56 20600000 rtn + +parse_enc_key_size_mask_req: +5d57 70007c3b jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +5d58 20600000 rtn + +parse_lmp_set_afh: +5d59 68020552 fetch 4 ,mem_rxbuf + 1 +5d5a 1fe3fe00 lshift pdata ,pdata +5d5b 600240d2 store 4 ,mem_afh_instant +5d5c 68008556 fetch 1 ,mem_rxbuf + 5 +5d5d 6000c0d9 store 1 ,mem_afh_new_mod +5d5e 68028557 fetch 5 ,mem_rxbuf + 6 +5d5f 6002c0e7 store 5 ,mem_afh_map_new +5d60 6802855c fetch 5 ,mem_rxbuf + 11 +5d61 e0a28000 istore 5 ,contw +5d62 68008031 fetch 1 ,mem_mode +5d63 79207e03 set1 afh_change ,pdata +5d64 60008031 store 1 ,mem_mode +5d65 20600000 rtn + +parse_lmp_escape: +5d66 473fc02f bpatchx patch2f_7 ,mem_patch2f +5d67 68008552 fetch 1 ,mem_rxbuf + 1 +5d68 79207e07 set1 7 ,pdata +5d69 6000807d store 1 ,mem_lmi_opcode2 +5d6a c040dd88 beq lmp_ext_accepted ,parse_lmpext_accepted +5d6b c0415d8d beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +5d6c c04adeb1 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +5d6d c04b5eca beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +5d6e c045debf beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +5d6f c041dda5 beq lmp_ext_features_req ,parse_lmpext_features_req +5d70 c0425da7 beq lmp_ext_features_res ,parse_lmpext_features_res +5d71 c0485d7a beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +5d72 c04bdd9e beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +5d73 c04c5da3 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +5d74 c04cdd7d beq lmp_io_cap_req ,parse_lmpext_iocap_req +5d75 c04d5d80 beq lmp_io_cap_res ,parse_lmpext_iocap_res +5d76 c1420000 rtneq lmp_ext_features_res + +reject_unknown_ext_packet: +5d77 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +5d78 70007e19 jam unknown_lmp_pdu ,mem_lmo_reason2 +5d79 20600000 rtn + +parse_lmpext_chn_classification_req: +5d7a 70007c82 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +5d7b 70007e2e jam not_support_chn_classification ,mem_lmo_reason2 +5d7c 20600000 rtn + +parse_lmpext_iocap_req: +5d7d 20405d82 call iocap_lmpext_load +5d7e 70007c9a jam lmp_io_cap_res ,mem_lmo_opcode2 +5d7f 20600000 rtn + +parse_lmpext_iocap_res: +5d80 20405d82 call iocap_lmpext_load +5d81 20205d86 branch iocap_lmpext_common + +iocap_lmpext_load: +5d82 d8a0465e arg mem_sp_iocap_remote ,contw +5d83 68018553 fetch 3 ,mem_rxbuf + 2 +5d84 e0a18000 istore 3 ,contw +5d85 20600000 rtn + +iocap_lmpext_common: +5d86 2020f6d8 branch master_set_mem_master_sp_flag ,true +5d87 20600000 rtn + +parse_lmpext_accepted: +5d88 68008554 fetch 1 ,mem_rxbuf + 3 +5d89 79207e07 set1 7 ,pdata +5d8a 600084c9 store 1 ,mem_lmi_accepted_opcode +5d8b c045dd92 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +5d8c 20600000 rtn + +parse_lmpext_not_accepted: +5d8d 68008554 fetch 1 ,mem_rxbuf + 3 +5d8e 79207e07 set1 7 ,pdata +5d8f 600084c9 store 1 ,mem_lmi_accepted_opcode +5d90 c045dd96 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +5d91 20600000 rtn + +parse_lmpext_accepted_ptt: +5d92 6800c15a fetch 1 ,mem_ptt +5d93 6808804c fetcht 1 ,mem_state_map +5d94 7d3a0405 nsetflag blank ,smap_edr ,temp +5d95 6008804c storet 1 ,mem_state_map + +parse_lmpext_not_accepted_ptt: +5d96 68008030 fetch 1 ,mem_state +5d97 c4028000 rtnbit0 state_init_seq +5d98 793ffe05 set0 state_init_seq ,pdata +5d99 60008030 store 1 ,mem_state +5d9a 680084d7 fetch 1 ,mem_auth_enable +5d9b 247a0000 nrtn blank +5d9c 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +5d9d 20600000 rtn + +parse_lmpext_pause_encrypt: +5d9e 2434dda1 nbranch parse_lmpext_pause_encrypt_slave ,master +5d9f 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +5da0 202062eb branch tid_reply + +parse_lmpext_pause_encrypt_slave: +5da1 70007c97 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +5da2 20600000 rtn + +parse_lmpext_resume_encrypt: +5da3 204062eb call tid_reply +5da4 20205ffe branch lmp_start_encryption + +parse_lmpext_features_req: +5da5 70007c84 jam lmp_ext_features_res ,mem_lmo_opcode2 +5da6 20600000 rtn + +parse_lmpext_features_res: +5da7 68088555 fetcht 1 ,mem_rxbuf + 4 +5da8 18410401 and temp ,0x1 ,temp +5da9 600884d0 storet 1 ,mem_remote_sppcap +5daa 6800c1ce fetch 1 ,mem_hci_cmd +5dab c0a8ddad bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +5dac 7041ce00 jam 0 ,mem_hci_cmd + +parse_lmpext_features_res_not_hci: +5dad 68008055 fetch 1 ,mem_conn_sm +5dae c18a8000 rtnne conn_sm_wait_features_ext +5daf 70005504 jam conn_sm_send_conn_req ,mem_conn_sm +5db0 2020631b branch process_conn_sm + +parse_lmp_accepted: +5db1 47404030 bpatchx patch30_0 ,mem_patch30 +5db2 68008552 fetch 1 ,mem_rxbuf + 1 +5db3 600084c9 store 1 ,mem_lmi_accepted_opcode +5db4 c019ddd8 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +5db5 c0045de7 beq lmp_in_rand ,parse_lmp_accepted_inrand +5db6 c007ddee beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +5db7 c0085df4 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +5db8 c008ddf5 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +5db9 c0095dfd beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +5dba c00c5e13 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +5dbb c00bde16 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +5dbc c009ddcf beq lmp_switch_req ,parse_lmp_accepted_switch +5dbd c01edf1e beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +5dbe c01f5f6a beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +5dbf c0205f20 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +5dc0 c020df3d beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +5dc1 20600000 rtn + +parse_lmp_not_accepted: +5dc2 4740c030 bpatchx patch30_1 ,mem_patch30 +5dc3 68008552 fetch 1 ,mem_rxbuf + 1 +5dc4 600084c9 store 1 ,mem_lmi_accepted_opcode +5dc5 c000de0a beq lmp_name_req ,parse_lmp_not_accepted_name_req +5dc6 c019dde2 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +5dc7 c005ddfe beq lmp_au_rand ,parse_lmp_not_accepted_aurand +5dc8 c0045e01 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +5dc9 c009ddd2 beq lmp_switch_req ,parse_lmp_not_accepted_switch +5dca c0205e0b beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +5dcb c020de0e beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +5dcc c00c5e11 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +5dcd c00bde22 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +5dce 20600000 rtn + +parse_lmp_accepted_switch: +5dcf 700a9920 jam bt_evt_switch_accept ,mem_fifo_temp +5dd0 20407d86 call ui_ipc_send_event +5dd1 202021dc branch role_switch_prepare0 + +parse_lmp_not_accepted_switch: +5dd2 700a9919 jam bt_evt_switch_not_accept ,mem_fifo_temp +5dd3 20407d86 call ui_ipc_send_event +5dd4 70455b02 jam switch_flag_not_accept ,mem_switch_flag +5dd5 58000050 setarg timer_switch_waite +5dd6 d8e00006 arg switch_wait_timer ,queue +5dd7 20207f08 branch timer_init + +parse_lmp_accepted_hostconn: +5dd8 680084d1 fetch 1 ,mem_lmp_conn_state +5dd9 79207e00 set1 received_conn_req ,pdata +5dda 600084d1 store 1 ,mem_lmp_conn_state +5ddb 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp +5ddc 20407d86 call ui_ipc_send_event +5ddd 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 + +parse_lmp_accepted_hostconn_ctn: +5dde 68008055 fetch 1 ,mem_conn_sm +5ddf c082dd07 bne conn_sm_wait_conn_accept ,parse_rx_done +5de0 70005506 jam conn_sm_auth_pair ,mem_conn_sm +5de1 20600000 rtn + +parse_lmp_not_accepted_hostconn: +5de2 7004ca0b jam acl_connection_already_exists ,mem_disconn_reason_send +5de3 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5de4 70005500 jam conn_sm_standby ,mem_conn_sm +5de5 2020dd07 branch parse_rx_done ,true +5de6 20600000 rtn + +parse_lmp_accepted_inrand: +5de7 6800c1bd fetch 1 ,mem_link_key_exists +5de8 247a0000 nrtn blank +5de9 2040244f call clear_linkkey +5dea 20405ffc call lmp_generate_key +5deb 20748000 rtn master +5dec 79200021 set1 mark_slave_in_rand_accepted ,mark +5ded 20600000 rtn + +parse_lmp_accepted_enc_mode: +5dee 24748000 nrtn master +5def 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +5df0 6800804c fetch 1 ,mem_state_map +5df1 c4010000 rtnbit0 smap_encryption +5df2 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +5df3 20600000 rtn + +parse_lmp_accepted_enc_keysize: +5df4 20205ffe branch lmp_start_encryption + +parse_lmp_accepted_start_enc: +5df5 20406059 call send_create_conn_start_l2cap_timer_sm +5df6 68008030 fetch 1 ,mem_state +5df7 c3820000 rtnbit1 state_conn_comp +5df8 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +5df9 68008055 fetch 1 ,mem_conn_sm +5dfa c1850000 rtnne conn_sm_encrypt_wait +5dfb 7000550b jam conn_sm_encrypt_wait_clear ,mem_conn_sm +5dfc 20600000 rtn + +parse_lmp_accepted_stop_enc: +5dfd 20600000 rtn + +parse_lmp_not_accepted_aurand: + +parse_lmp_not_accepted_aurand_send_detach: +5dfe 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5dff 7004ca13 jam other_end_terminated ,mem_disconn_reason_send +5e00 20600000 rtn + +parse_lmp_not_accepted_inrand: +5e01 68008553 fetch 1 ,mem_rxbuf + 2 +5e02 c0035e07 beq key_missing ,parse_lmp_inrand_key_missing +5e03 c18c0000 rtnne pairing_not_allowed +5e04 7004ca18 jam pairing_not_allowed ,mem_disconn_reason_send +5e05 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e06 20600000 rtn + +parse_lmp_inrand_key_missing: +5e07 7004ca06 jam key_missing ,mem_disconn_reason_send +5e08 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e09 20600000 rtn + +parse_lmp_not_accepted_name_req: +5e0a 20600000 rtn + +parse_lmp_not_accepted_simple_pairing_number: +5e0b 7009ae00 jam sp_stat_null ,mem_sp_state +5e0c 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e0d 20205d07 branch parse_rx_done + +parse_lmp_not_accepted_dhkey_check: +5e0e 7009ae00 jam sp_stat_null ,mem_sp_state +5e0f 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e10 20205d07 branch parse_rx_done + +parse_lmp_not_accepted_unsniff_req: +5e11 700a9924 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +5e12 20207d86 branch ui_ipc_send_event + +parse_lmp_accepted_unsniff_req: +5e13 700a9923 jam bt_evt_unsniff_accept ,mem_fifo_temp +5e14 20407d86 call ui_ipc_send_event +5e15 202026e9 branch sniff_exit + +parse_lmp_accepted_sniff_req: +5e16 700a9922 jam bt_evt_sniff_accept ,mem_fifo_temp +5e17 20407d86 call ui_ipc_send_event +5e18 58000000 setarg 0 +5e19 60010075 store 2 ,mem_dsniff +5e1a 680141e3 fetch 2 ,mem_sniff_param_interval +5e1b 1fe3fe00 lshift pdata ,pdata +5e1c 60010032 store 2 ,mem_tsniff +5e1d 6800c1e5 fetch 1 ,mem_sniff_param_attempt +5e1e 60008073 store 1 ,mem_sniff_attempt +5e1f 6800c1e7 fetch 1 ,mem_sniff_param_timeout +5e20 60008074 store 1 ,mem_sniff_timeout +5e21 202026c6 branch sniff_init + +parse_lmp_not_acdcept_sniff_req: +5e22 700a9921 jam bt_evt_sniff_not_accept ,mem_fifo_temp +5e23 20207d86 branch ui_ipc_send_event + +parse_lmp_crypt_key: +5e24 68088552 fetcht 1 ,mem_rxbuf + 1 +5e25 60088054 storet 1 ,mem_key_size +5e26 20205e38 branch accept_lmp_msg + +parse_lmp_setup_complete: +5e27 680084d1 fetch 1 ,mem_lmp_conn_state +5e28 79207e02 set1 received_setup_complete ,pdata +5e29 600084d1 store 1 ,mem_lmp_conn_state +5e2a c3818000 rtnbit1 sent_setup_complete +5e2b 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +5e2c 20205d07 branch parse_rx_done + +parse_lmp_max_slot: +5e2d 20600000 rtn + +parse_lmp_max_slot_req: +5e2e 6800c0d0 fetch 1 ,mem_max_slot +5e2f 68088552 fetcht 1 ,mem_rxbuf + 1 +5e30 98467c00 isub temp ,null +5e31 20215e38 branch accept_lmp_msg ,positive +5e32 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5e33 70007e1f jam unspecified_error ,mem_lmo_reason2 +5e34 70007d2e jam lmp_max_slot_req ,mem_lmi_opcode2 +5e35 20600000 rtn + +parse_lmp_detach: +5e36 20406157 call prepare_disconnect +5e37 20205e38 branch accept_lmp_msg + +accept_lmp_msg: +5e38 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5e39 20600000 rtn + +parse_lmp_incr_power: +5e3a 70007c21 jam lmp_max_power ,mem_lmo_opcode2 +5e3b 20600000 rtn + +parse_lmp_decr_power: +5e3c 70007c22 jam lmp_min_power ,mem_lmo_opcode2 +5e3d 20600000 rtn + +parse_lmp_version_res: +5e3e 68008055 fetch 1 ,mem_conn_sm +5e3f c1098000 rtneq conn_sm_wait_version +5e40 70005502 jam conn_sm_send_features ,mem_conn_sm +5e41 20600000 rtn + +parse_lmp_auto_rate: +5e42 20600000 rtn + +parse_lmp_in_rand: +5e43 20405ff9 call lmp_copy_rand +5e44 7004d401 jam pincode_state_wait_pincode ,mem_pincode_state +5e45 700a990a jam bt_evt_pincode_req ,mem_fifo_temp +5e46 20407d86 call ui_ipc_send_event +5e47 204062f3 call tid_check +5e48 2420e001 nbranch lmp_accept_inrand ,true +5e49 2434de4e nbranch parse_lmp_inrand_res ,master +5e4a 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5e4b 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 +5e4c 70007e23 jam transaction_collision ,mem_lmo_reason2 +5e4d 20600000 rtn + +parse_lmp_inrand_res: +5e4e 6800804b fetch 1 ,mem_op +5e4f 79207e02 set1 op_inrand_req ,pdata +5e50 6000804b store 1 ,mem_op +5e51 20600000 rtn + +pop_tid_follow: +5e52 6808804c fetcht 1 ,mem_state_map +5e53 7d3a0401 nsetflag blank ,smap_lmptid ,temp +5e54 6008804c storet 1 ,mem_state_map +5e55 20600000 rtn + +push_tid_follow: +5e56 6800807f fetch 1 ,mem_lmo_tid2 +5e57 1fe37e00 rshift pdata ,pdata +5e58 1fe17e01 and_into 1 ,pdata +5e59 20600000 rtn + +parse_lmp_au_rand_moudle: +5e5a 6800c217 fetch 1 ,mem_nv_data_number +5e5b 207a0000 rtn blank +5e5c 680089b5 fetch 1 ,mem_pairing_auth +5e5d 205a67b2 call load_device_list ,blank +5e5e 20600000 rtn + +parse_lmp_au_rand: +5e5f 20405e5a call parse_lmp_au_rand_moudle +5e60 20405e56 call push_tid_follow +5e61 600084d5 store 1 ,mem_sres_tid +5e62 20405ff9 call lmp_copy_rand +5e63 70007c0c jam lmp_sres ,mem_lmo_opcode2 +5e64 6800c1bd fetch 1 ,mem_link_key_exists +5e65 247a0000 nrtn blank +5e66 68008030 fetch 1 ,mem_state +5e67 c3830000 rtnbit1 state_combkey +5e68 70007e06 jam key_missing ,mem_lmo_reason2 +5e69 20205d53 branch reject_lmp_packet + +parse_lmp_sres: +5e6a da200040 arg mem_plap ,rega +5e6b 20407288 call function_e1 +5e6c 68020552 fetch 4 ,mem_rxbuf + 1 +5e6d 680a0592 fetcht 4 ,mem_input_store +5e6e 98467c00 isub temp ,null +5e6f 2022de73 branch authentication_ok ,zero +5e70 70007c07 jam lmp_detach ,mem_lmo_opcode2 +5e71 7004ca05 jam authentication_failure_error ,mem_disconn_reason_send +5e72 20600000 rtn + +authentication_ok: +5e73 20405e77 call authentication_ok_common +5e74 6800c65a fetch 1 ,mem_ssp_enable +5e75 203a5f3e branch pairing_success ,blank +5e76 20600000 rtn + +authentication_ok_common: +5e77 20407386 call copy_aco +5e78 204021b2 call linkkey_ready +5e79 6800804b fetch 1 ,mem_op +5e7a 2feffe01 isolate1 op_auth_req ,pdata +5e7b 793ffe01 set0 op_auth_req ,pdata +5e7c 6000804b store 1 ,mem_op +5e7d 68008055 fetch 1 ,mem_conn_sm +5e7e c00cde81 beq conn_sm_auth_wait ,authentication_ok_conn_sm +5e7f c00c5e81 beq conn_sm_pairing_wait ,authentication_ok_conn_sm +5e80 20600000 rtn + +authentication_ok_conn_sm: +5e81 680089b5 fetch 1 ,mem_pairing_auth +5e82 c1800000 rtnne defalt_pairing_auth +5e83 6800804c fetch 1 ,mem_state_map +5e84 c3810000 rtnbit1 smap_encryption +5e85 202063b1 branch host_create_conn_encrypt + +parse_lmp_comb_key: +5e86 da200552 arg mem_rxbuf + 1 ,rega +5e87 da400582 arg mem_kinit ,regb +5e88 d8a00562 arg mem_random_number ,contw +5e89 20407352 call xor16 +5e8a da200040 arg mem_plap ,rega +5e8b 20406311 call generate_linkkey +5e8c 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 +5e8d 68008030 fetch 1 ,mem_state +5e8e c3035ffc bbit0 state_combkey ,lmp_generate_key +5e8f 20600000 rtn + +parse_lmp_name_res: +5e90 6801015f fetch 2 ,mem_len +5e91 1fe0f3fd add pdata ,-3 ,loopcnt +5e92 68088552 fetcht 1 ,mem_rxbuf + 1 +5e93 58000101 setarg mem_tmp_buffer +5e94 98408a00 iadd temp ,contw +5e95 d8c00554 arg mem_rxbuf + 3 ,contr +5e96 20407f01 call memcpy +5e97 68088053 fetcht 1 ,mem_name_offset +5e98 68008553 fetch 1 ,mem_rxbuf + 2 +5e99 98467e00 isub temp ,pdata +5e9a 1fe67c0e sub pdata ,14 ,null +5e9b 20215ea0 branch parse_lmp_name_res_end ,positive +5e9c 1840fe0e add temp ,14 ,pdata +5e9d 60008053 store 1 ,mem_name_offset +5e9e 70007c01 jam lmp_name_req ,mem_lmo_opcode2 +5e9f 20600000 rtn + +parse_lmp_name_res_end: +5ea0 6800804c fetch 1 ,mem_state_map +5ea1 79207e03 set1 smap_name_res ,pdata +5ea2 6000804c store 1 ,mem_state_map +5ea3 c2826006 bbit1 smap_name_req ,lmp_disconnect +5ea4 20600000 rtn + +parse_lmp_name_req: +5ea5 68008552 fetch 1 ,mem_rxbuf + 1 +5ea6 6000807d store 1 ,mem_lmi_opcode2 +5ea7 70007c02 jam lmp_name_res ,mem_lmo_opcode2 +5ea8 20600000 rtn + +parse_lmp_conn_req: +5ea9 20205e38 branch accept_lmp_msg + +parse_lmp_timing_accuracy_req: +5eaa 70007c30 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +5eab 20600000 rtn + +parse_lmp_features_req: +5eac 70007c28 jam lmp_features_res ,mem_lmo_opcode2 +5ead 20600000 rtn + +parse_lmp_version_req: +5eae 70007c26 jam lmp_version_res ,mem_lmo_opcode2 +5eaf 20600000 rtn + +parse_lmp_supervision_timeout: +5eb0 20600000 rtn + +parse_lmp_sniff_subrating_req: +5eb1 68010032 fetch 2 ,mem_tsniff +5eb2 98000400 iforce temp +5eb3 68008553 fetch 1 ,mem_rxbuf + 2 +5eb4 60008095 store 1 ,mem_subsniff_rate +5eb5 984f8400 imul32 temp ,temp +5eb6 68010554 fetch 2 ,mem_rxbuf + 3 +5eb7 1fe3fe00 lshift pdata ,pdata +5eb8 60010096 store 2 ,mem_subsniff_tcmax +5eb9 68020556 fetch 4 ,mem_rxbuf + 5 +5eba 1fe3fe00 lshift pdata ,pdata +5ebb 60020091 store 4 ,mem_subsniff_instant +5ebc 18427e00 deposit temp +5ebd 60010098 store 2 ,mem_subsniff_tsniff +5ebe 20600000 rtn + +parse_lmpext_packet_type_table_req: +5ebf 6808c15a fetcht 1 ,mem_ptt +5ec0 68008553 fetch 1 ,mem_rxbuf + 2 +5ec1 9842fc00 ixor temp ,null +5ec2 2422dd77 nbranch reject_unknown_ext_packet ,zero +5ec3 2feffe00 isolate1 0 ,pdata +5ec4 6800804c fetch 1 ,mem_state_map +5ec5 7920fe05 setflag true ,smap_edr ,pdata +5ec6 6000804c store 1 ,mem_state_map +5ec7 70007c81 jam lmp_ext_accepted ,mem_lmo_opcode2 +5ec8 70007d8b jam lmp_packet_type_table_req ,mem_lmi_opcode2 +5ec9 20600000 rtn + +parse_lmp_sniff_subrating_res: + +parse_lmp_preferred_rate: + +parse_lmp_max_power: + +parse_lmp_min_power: +5eca 20600000 rtn + +parse_lmp_page_mode_req: +5ecb 20205e38 branch accept_lmp_msg + +parse_lmp_page_scan_mode_req: +5ecc 20205e38 branch accept_lmp_msg + +parse_lmp_slot_offset: +5ecd 68010552 fetch 2 ,mem_rxbuf + 1 +5ece 60010171 store 2 ,mem_slot_offset +5ecf 20600000 rtn + +parse_lmp_sniff_req_check_sniff_para: +5ed0 68010555 fetch 2 ,mem_rxbuf + 4 +5ed1 6808c172 fetcht 1 ,mem_lpm_mult +5ed2 984ffe00 imul32 temp ,pdata +5ed3 d8400640 arg 0x640 ,temp +5ed4 98467c00 isub temp ,null +5ed5 20600000 rtn + +parse_lmp_sniff_req: +5ed6 68010557 fetch 2 ,mem_rxbuf + 6 +5ed7 203a5ef0 branch lmp_reject_sniff ,blank +5ed8 20405ed0 call parse_lmp_sniff_req_check_sniff_para +5ed9 20215ef0 branch lmp_reject_sniff ,positive +5eda 6800c092 fetch 1 ,mem_device_option +5edb 1fe67c0a sub pdata ,dvc_op_module ,null +5edc 2042bcd5 call module_set_lpm_mult_2 ,zero +5edd 68008030 fetch 1 ,mem_state +5ede c280def0 bbit1 state_insniff ,lmp_reject_sniff +5edf 68010553 fetch 2 ,mem_rxbuf + 2 +5ee0 1fe3fe00 lshift pdata ,pdata +5ee1 60010075 store 2 ,mem_dsniff +5ee2 68010555 fetch 2 ,mem_rxbuf + 4 +5ee3 1fe3fe00 lshift pdata ,pdata +5ee4 60010032 store 2 ,mem_tsniff +5ee5 68010557 fetch 2 ,mem_rxbuf + 6 +5ee6 60008073 store 1 ,mem_sniff_attempt +5ee7 98000400 iforce temp +5ee8 68010559 fetch 2 ,mem_rxbuf + 8 +5ee9 60008074 store 1 ,mem_sniff_timeout +5eea 98467c00 isub temp ,null +5eeb 24215eed nbranch set_big_value_to_attempt ,positive +5eec 60008073 store 1 ,mem_sniff_attempt + +set_big_value_to_attempt: +5eed 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5eee 70007d17 jam lmp_sniff_req ,mem_lmi_opcode2 +5eef 20600000 rtn + +lmp_reject_sniff: +5ef0 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5ef1 20205d53 branch reject_lmp_packet + +parse_lmp_start_encryption_req: +5ef2 20405e38 call accept_lmp_msg +5ef3 20405ff9 call lmp_copy_rand +5ef4 2040728b call function_e3 +5ef5 202026b8 branch start_encryption + +parse_lmp_stop_encryption_req: +5ef6 20405e38 call accept_lmp_msg +5ef7 202026c0 branch stop_encryption + +parse_lmp_switch_req: +5ef8 68020552 fetch 4 ,mem_rxbuf + 1 +5ef9 1fe3fe00 lshift pdata ,pdata +5efa 2034df04 branch parse_lmp_switch_accept ,master +5efb 6808c1bd fetcht 1 ,mem_link_key_exists +5efc 243a5f01 nbranch parse_lmp_switch_req_clear_mark ,blank + +parse_lmp_switch_req_not_accept: +5efd 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +5efe 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 +5eff 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f00 20600000 rtn + +parse_lmp_switch_req_clear_mark: +5f01 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 +5f02 70005500 jam 0 ,mem_conn_sm +5f03 202021d9 branch role_switch_prepare + +parse_lmp_switch_accept: +5f04 204021d9 call role_switch_prepare +5f05 79200022 set1 mark_reconn_recieve_switch ,mark +5f06 6800816d fetch 1 ,mem_connection_options +5f07 793ffe02 set0 connection_switch ,pdata +5f08 6000816d store 1 ,mem_connection_options +5f09 20205e38 branch accept_lmp_msg + +parse_lmp_temp_rand: + +parse_lmp_temp_key: + +parse_lmp_timing_accuracy_res: + +parse_lmp_unit_key: + +parse_lmp_use_semi_permanend_key: +5f0a 20600000 rtn + +parse_lmp_unsniff_req: +5f0b 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5f0c 70007d18 jam lmp_unsniff_req ,mem_lmi_opcode2 +5f0d 700a992e jam bt_evt_remote_unsniff ,mem_fifo_temp +5f0e 20407d86 call ui_ipc_send_event +5f0f 202026e9 branch sniff_exit + +parse_lmp_encapsulated_header: +5f10 68008552 fetch 1 ,mem_rxbuf + 1 +5f11 c080df1c bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject +5f12 68008553 fetch 1 ,mem_rxbuf + 2 +5f13 c080df1c bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject +5f14 68008554 fetch 1 ,mem_rxbuf + 3 +5f15 c0985f1c bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject +5f16 204062fc call check_localsm +5f17 2020df19 branch parse_lmp_encapsulated_header_master ,true +5f18 7009ae01 jam sp_stat_key_recv ,mem_sp_state + +parse_lmp_encapsulated_header_master: +5f19 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5f1a 70007d3d jam lmp_encapsulated_header ,mem_lmi_opcode2 +5f1b 20205d07 branch parse_rx_done + +parse_lmp_encapsulated_header_reject: +5f1c 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f1d 20205d53 branch reject_lmp_packet + +parse_lmp_accepted_encapsulated_header: +5f1e 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +5f1f 20600000 rtn + +parse_lmp_accepted_simple_pairing_number: +5f20 6800c662 fetch 1 ,mem_ssp_mode_flag +5f21 c000df27 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +5f22 c0015f2b beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey + +parse_lmp_accepted_simple_pairing_number_common: +5f23 204062fc call check_localsm +5f24 20608000 rtn true +5f25 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state +5f26 20600000 rtn + +parse_lmp_accepted_simple_pairing_number_ssp_pin: +5f27 20407962 call g_noninit_number_confirm +5f28 700a9935 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +5f29 20407d86 call ui_ipc_send_event +5f2a 20205f23 branch parse_lmp_accepted_simple_pairing_number_common + +parse_lmp_accepted_simple_pairing_number_passkey: +5f2b 204062fc call check_localsm +5f2c 20608000 rtn true +5f2d 6800c663 fetch 1 ,mem_authentication_passkey_times +5f2e c009df3b beq 19 ,authentication_passkey_end +5f2f 1fe0fe01 increase 1 ,pdata +5f30 6000c663 store 1 ,mem_authentication_passkey_times + +authentication_passkey: +5f31 7009b001 jam sp_flag_commit ,mem_sp_flag +5f32 7009ae04 jam sp_stat_commit_calc ,mem_sp_state +5f33 6800c663 fetch 1 ,mem_authentication_passkey_times +5f34 1fe20e00 copy pdata ,queue +5f35 6803468a fetch 6 ,mem_pin +5f36 afefffff qisolate1 pdata +5f37 58000080 setarg 0x80 +5f38 7920fe00 setflag true ,0 ,pdata +5f39 6000c664 store 1 ,mem_passkey_1bit +5f3a 20600000 rtn + +authentication_passkey_end: +5f3b 7009ae08 jam sp_stat_confirm_recv ,mem_sp_state +5f3c 20600000 rtn + +parse_lmp_accepted_dhkey_check: +5f3d 20405f43 call parse_lmp_accepted_dhkey_check_common + +pairing_success: +5f3e 6800c665 fetch 1 ,mem_flag_pairing_state +5f3f 207a0000 rtn blank +5f40 70466500 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +5f41 700a9938 jam bt_evt_bt_pairing_success ,mem_fifo_temp +5f42 20207d86 branch ui_ipc_send_event + +parse_lmp_accepted_dhkey_check_common: +5f43 204062fc call check_localsm +5f44 2440f965 ncall g_noninit ,true +5f45 2040f975 call g_init ,true +5f46 204062fc call check_localsm +5f47 20608000 rtn true +5f48 7009ae0c jam sp_stat_link_key_calc ,mem_sp_state +5f49 7009b001 jam sp_flag_commit ,mem_sp_flag +5f4a 20600000 rtn + +parse_simple_pairing_confirm: +5f4b d8a00a6e arg mem_sp_confirm_remote ,contw +5f4c d8c00552 arg mem_rxbuf + 1 ,contr +5f4d 20407ebf call memcpy16 +5f4e 6800c662 fetch 1 ,mem_ssp_mode_flag +5f4f c1010000 rtneq ssp_mode_passkey_entry_flag +5f50 202076d8 branch master_set_mem_master_sp_flag + +parse_lmp_encapsulated_payload: +5f51 680089af fetch 1 ,mem_master_sp_state +5f52 c003df55 beq sp_stat_random_send ,parse_encapsulated_payload_master +5f53 680089ae fetch 1 ,mem_sp_state +5f54 c080df68 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject + +parse_encapsulated_payload_master: +5f55 680089b7 fetch 1 ,mem_sp_remote_key_recv_count +5f56 1fe60a20 sub pdata ,0x20 ,contw +5f57 24215f68 nbranch parse_lmp_encapsulated_payload_reject ,positive +5f58 d8a009c6 arg mem_sp_pubkey_remote ,contw +5f59 98a08a00 iadd contw ,contw +5f5a 68040552 fetch 8 ,mem_rxbuf + 1 +5f5b e0a40000 istore 8 ,contw +5f5c 6804055a fetch 8 ,mem_rxbuf + 9 +5f5d e0a40000 istore 8 ,contw +5f5e 680089b7 fetch 1 ,mem_sp_remote_key_recv_count +5f5f 1fe0fe10 increase 16 ,pdata +5f60 600089b7 store 1 ,mem_sp_remote_key_recv_count +5f61 c0985e38 bne encapsulated_len_p192 ,accept_lmp_msg + +parse_lmp_encapsulated_payload_completed: +5f62 204062fc call check_localsm +5f63 2020de38 branch accept_lmp_msg ,true +5f64 7009b801 jam sp_key_valid ,mem_sp_remote_key_invalid +5f65 7009ae02 jam sp_stat_key_generate ,mem_sp_state +5f66 7009b001 jam sp_flag_commit ,mem_sp_flag +5f67 20205e38 branch accept_lmp_msg + +parse_lmp_encapsulated_payload_reject: +5f68 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f69 20205d53 branch reject_lmp_packet + +parse_lmp_accepted_encapsulated_payload: +5f6a 680089b6 fetch 1 ,mem_sp_local_key_send_count +5f6b c0185f6e beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +5f6c 70007c3e jam lmp_encapsulated_payload ,mem_lmo_opcode2 +5f6d 20205d07 branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted: +5f6e 204062fc call check_localsm +5f6f 2020df77 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +5f70 6800c662 fetch 1 ,mem_ssp_mode_flag +5f71 c0015f75 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +5f72 7009b001 jam sp_flag_commit ,mem_sp_flag +5f73 7009ae04 jam sp_stat_commit_calc ,mem_sp_state +5f74 20205d07 branch parse_rx_done + +parse_lmp_encapsulated_payload_all_accepted_get_passkey: +5f75 700a9936 jam bt_evt_bt_get_passkey ,mem_fifo_temp +5f76 20207d86 branch ui_ipc_send_event + +parse_lmp_encapsulated_payload_all_accepted_master: +5f77 20205d07 branch parse_rx_done + +parse_lmp_simple_pairing_number: +5f78 680089af fetch 1 ,mem_master_sp_state +5f79 c003df7c beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +5f7a 680089ae fetch 1 ,mem_sp_state +5f7b c0835f88 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject + +parse_lmp_simple_pairing_number_master: +5f7c d8a00a2e arg mem_sp_random_remote ,contw +5f7d 68040552 fetch 8 ,mem_rxbuf + 1 +5f7e e0a40000 istore 8 ,contw +5f7f 6804055a fetch 8 ,mem_rxbuf + 9 +5f80 e0a40000 istore 8 ,contw +5f81 204062fc call check_localsm +5f82 2020df86 branch parse_lmp_simple_pairing_number_master0 ,true +5f83 7009ae07 jam sp_stat_random_send ,mem_sp_state +5f84 7009b001 jam sp_flag_commit ,mem_sp_flag +5f85 20205e38 branch accept_lmp_msg + +parse_lmp_simple_pairing_number_master0: +5f86 7009af04 jam sp_stat_commit_calc ,mem_master_sp_state +5f87 202076d8 branch master_set_mem_master_sp_flag + +parse_lmp_simple_pairing_number_reject: +5f88 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f89 20205d53 branch reject_lmp_packet + +parse_dhkey_check: +5f8a 680089af fetch 1 ,mem_master_sp_state +5f8b c005df8e beq sp_stat_confirm_send ,parse_dhkey_check_master +5f8c 680089ae fetch 1 ,mem_sp_state +5f8d c0845f9d bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject + +parse_dhkey_check_master: +5f8e d8a00a5e arg mem_sp_check_result ,contw +5f8f d8c00552 arg mem_rxbuf + 1 ,contr +5f90 20407ebf call memcpy16 +5f91 204062fc call check_localsm +5f92 2020df9a branch parse_dhkey_check_master0 ,true +5f93 6800c662 fetch 1 ,mem_ssp_mode_flag +5f94 c000df9f beq ssp_mode_ssp_pin_flag ,number_comparison_mode + +number_comparison_successed: +5f95 70466100 jam 0 ,mem_flag_mode_ssp_pin +5f96 7009ae09 jam sp_stat_confirm_check ,mem_sp_state +5f97 7009b001 jam sp_flag_commit ,mem_sp_flag +5f98 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 +5f99 20205d07 branch parse_rx_done + +parse_dhkey_check_master0: +5f9a 7009af09 jam sp_stat_confirm_check ,mem_master_sp_state +5f9b 7009b101 jam sp_flag_commit ,mem_master_sp_flag +5f9c 20205d07 branch parse_rx_done + +parse_lmp_dhkey_check_reject: +5f9d 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +5f9e 20205d53 branch reject_lmp_packet + +number_comparison_mode: +5f9f 6800c661 fetch 1 ,mem_flag_mode_ssp_pin +5fa0 c283dfa4 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +5fa1 79207e06 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +5fa2 6000c661 store 1 ,mem_flag_mode_ssp_pin +5fa3 20600000 rtn + +comparison_result: +5fa4 c2805f95 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +5fa5 70466100 jam 0 ,mem_flag_mode_ssp_pin +5fa6 20205f9d branch parse_lmp_dhkey_check_reject + +parse_lmp_clkoffset_res: +5fa7 20205d07 branch parse_rx_done + +parse_lmp_encryption_mode_req: +5fa8 6800816d fetch 1 ,mem_connection_options +5fa9 793ffe01 set0 connection_encrypt +5faa 6000816d store 1 ,mem_connection_options +5fab 20405e38 call accept_lmp_msg +5fac 24748000 nrtn master +5fad 68008552 fetch 1 ,mem_rxbuf + 1 +5fae 6808804b fetcht 1 ,mem_op +5faf 793a0404 setflag blank ,op_stop_enc ,temp +5fb0 7d3a0405 nsetflag blank ,op_start_enc ,temp +5fb1 6008804b storet 1 ,mem_op +5fb2 20600000 rtn + +parse_lmp_features_res: +5fb3 680c0552 fetcht 8 ,mem_rxbuf + 1 + +parse_lmp_features_res_not_hci: +5fb4 68008055 fetch 1 ,mem_conn_sm +5fb5 c1818000 rtnne conn_sm_wait_features_res +5fb6 6800816d fetch 1 ,mem_connection_options +5fb7 c3025fba bbit0 connection_feature_ext ,parse_lmp_send_conn +5fb8 70005514 jam conn_sm_send_features_ext ,mem_conn_sm +5fb9 20600000 rtn + +parse_lmp_send_conn: +5fba 70005504 jam conn_sm_send_conn_req ,mem_conn_sm +5fbb 20600000 rtn + +parse_lmp_test_activate: +5fbc 6800817f fetch 1 ,mem_debug_config +5fbd 6000815b store 1 ,mem_test_mode_old_debug_config +5fbe 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5fbf 70007d38 jam lmp_test_activate ,mem_lmi_opcode2 +5fc0 20600000 rtn + +parse_lmp_test_control: +5fc1 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +5fc2 70007d39 jam lmp_test_control ,mem_lmi_opcode2 +5fc3 18007209 force 9 ,loopcnt +5fc4 d8c00552 arg mem_rxbuf + 1 ,contr +5fc5 d8a00152 arg mem_temp_payload ,contw + +parse_lmp_test_xor: +5fc6 e8c08000 ifetch 1 ,contr +5fc7 1fe2fe55 xor_into 0x55 ,pdata +5fc8 e0a08000 istore 1 ,contw +5fc9 c2005fc6 loop parse_lmp_test_xor +5fca 68008152 fetch 1 ,test_mode_scenario +5fcb 68088151 fetcht 1 ,mem_tester_emulate +5fcc 793f8407 set0 tester_no_whitening ,temp +5fcd 793f8404 set0 tester_pattern_test ,temp +5fce c07fdfda beq exit_test_mode ,parse_lmp_test_control_exit +5fcf c0005ff3 beq pause_test_mode ,parse_lmp_test_control_pause +5fd0 c002dfe7 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +5fd1 c003dfe6 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +5fd2 c0035fe7 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +5fd3 c0045fe6 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +5fd4 c000dfdf beq zero_pattern ,parse_lmp_test_control_pattern +5fd5 c0015fdf beq one_pattern ,parse_lmp_test_control_pattern +5fd6 c001dfdf beq alt_pattern ,parse_lmp_test_control_pattern +5fd7 c004dfdf beq alt2_pattern ,parse_lmp_test_control_pattern +5fd8 c0025fdf beq pseudorandom ,parse_lmp_test_control_pattern +5fd9 20600000 rtn + +parse_lmp_test_control_exit: +5fda 68008151 fetch 1 ,mem_tester_emulate +5fdb 79207e03 set1 tester_exit ,pdata +5fdc 79207e02 set1 tester_change ,pdata +5fdd 60008151 store 1 ,mem_tester_emulate +5fde 20600000 rtn + +parse_lmp_test_control_pattern: +5fdf 79200404 set1 tester_pattern_test ,temp +5fe0 70018005 jam 5 ,mem_lch_code +5fe1 68010159 fetch 2 ,test_mode_data_length +5fe2 98007200 iforce loopcnt +5fe3 6001015f store 2 ,mem_len +5fe4 d8a00551 arg mem_rxbuf ,contw +5fe5 20407f73 call pn9 + +parse_lmp_test_control_loopback_nowhite: +5fe6 79200407 set1 tester_no_whitening ,temp + +parse_lmp_test_control_loopback: +5fe7 79200402 set1 tester_change ,temp +5fe8 18007e00 force 0 ,pdata +5fe9 6000800b store 1 ,mem_slave_rcvcnt +5fea 600100fa store 2 ,mem_tst_pktcnt_crc +5feb 600100fc store 2 ,mem_tst_pktcnt_dmh +5fec 600100f8 store 2 ,mem_tst_pktcnt_hec +5fed 600100f6 store 2 ,mem_tst_pktcnt_sync +5fee 68008153 fetch 1 ,test_mode_hopping_mode +5fef 2fe1fe00 compare fixed_freq ,pdata ,0xff +5ff0 79208406 setflag true ,tester_fixed_freq ,temp +5ff1 60088151 storet 1 ,mem_tester_emulate +5ff2 20600000 rtn + +parse_lmp_test_control_pause: +5ff3 793f8011 set0 mark_testmode ,mark +5ff4 70015100 jam 0 ,mem_tester_emulate +5ff5 6800817f fetch 1 ,mem_debug_config +5ff6 793ffe06 set0 debug_tx_pattern ,pdata +5ff7 6000817f store 1 ,mem_debug_config +5ff8 20600000 rtn + +lmp_copy_rand: +5ff9 d8c00552 arg mem_rxbuf + 1 ,contr +5ffa d8a00562 arg mem_random_number ,contw +5ffb 20207ebf branch memcpy16 + +lmp_generate_key: +5ffc 70007c09 jam lmp_comb_key ,mem_lmo_opcode2 +5ffd 20600000 rtn + +lmp_start_encryption: +5ffe 24748000 nrtn master +5fff 70007c11 jam lmp_start_encryption_req ,mem_lmo_opcode2 +6000 20600000 rtn + +lmp_accept_inrand: +6001 da2040a0 arg mem_lap ,rega +6002 20407255 call generate_kinit +6003 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +6004 70007d08 jam lmp_in_rand ,mem_lmi_opcode2 +6005 20600000 rtn + +lmp_disconnect: +6006 7000720a jam 10 ,mem_conn_timer +6007 70007c07 jam lmp_detach ,mem_lmo_opcode2 +6008 7004ca16 jam local_host ,mem_disconn_reason_send +6009 20600000 rtn + +send_lmp: +600a 47414030 bpatchx patch30_2 ,mem_patch30 +600b 78547c00 disable user +600c 204062c1 call lmo_fifo_process +600d 68008048 fetch 1 ,mem_lmp_to_send +600e 207a0000 rtn blank +600f c283e03f bbit1 7 ,send_lmp_escape + +send_lmp0: +6010 c000e16f beq lmp_name_req ,send_lmp_name_req +6011 c00160e4 beq lmp_name_res ,send_lmp_name_res +6012 c001e04a beq lmp_accepted ,send_lmp_accepted +6013 c0026060 beq lmp_not_accepted ,send_lmp_not_accepted +6014 c013e1db beq lmp_features_req ,send_lmp_features_req +6015 c0146108 beq lmp_features_res ,send_lmp_features_res +6016 c01860f4 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +6017 c012e1d6 beq lmp_version_req ,send_lmp_version_req +6018 c0136103 beq lmp_version_res ,send_lmp_version_res +6019 c018e1c3 beq lmp_setup_complete ,send_lmp_setup_complete +601a c01be16a beq lmp_supervision_timeout ,send_lmp_superto +601b c019e15c beq lmp_host_connection_req ,send_lmp_no_payload +601c c0046259 beq lmp_in_rand ,send_lmp_inrand +601d c004e24f beq lmp_comb_key ,send_lmp_comb_key +601e c005e264 beq lmp_au_rand ,send_lmp_aurand +601f c006626d beq lmp_sres ,send_lmp_sres +6020 c007e162 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +6021 c0086292 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +6022 c008e288 beq lmp_start_encryption_req ,send_lmp_start_encryption +6023 c003e152 beq lmp_detach ,send_lmp_detach +6024 c015617e beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +6025 c005617f beq lmp_unit_key ,send_lmp_unit_key +6026 c00fe1bc beq lmp_incr_power_req ,send_lmp_inc_power +6027 c00360f9 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +6028 c010e15f beq lmp_max_power ,send_lmp_nopayload_reply +6029 c016e1b2 beq lmp_max_slot ,send_lmp_max_slot +602a c01761b7 beq lmp_max_slot_req ,send_lmp_max_slot_req +602b c011615f beq lmp_min_power ,send_lmp_nopayload_reply +602c c01a6180 beq lmp_slot_offset ,send_lmp_slot_offset +602d c009e195 beq lmp_switch_req ,send_lmp_switch_req +602e c00be1a4 beq lmp_sniff_req ,send_lmp_sniff_req +602f c009628f beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +6030 c017e1aa beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +6031 c00c61af beq lmp_unsniff_req ,send_lmp_unsniff_req +6032 c01ee1ff beq lmp_encapsulated_header ,send_lmp_encapsulated_header +6033 c01f620b beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +6034 c01fe21d beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +6035 c0206227 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +6036 c020e23c beq lmp_dhkey_check ,send_lmp_dhkey_check +6037 c011e24b beq lmp_auto_rate ,send_lmp_auto_rate +6038 c01de246 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +6039 c002e24c beq lmp_clkoffset_req ,send_lmp_clkoffset_req +603a c014e24d beq lmp_quality_of_service ,send_lmp_quality_of_service +603b c01c624e beq lmp_test_activate ,send_lmp_test_activate +603c c01ce175 beq lmp_test_control ,send_lmp_test_control + +send_lmp_error: +603d 20202a8c branch assert +603e 20600000 rtn + +send_lmp_escape: +603f c040e06d beq lmp_ext_accepted ,send_lmpext_accepted +6040 c0426099 beq lmp_ext_features_res ,send_lmpext_features_res +6041 c0416076 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +6042 c041e10d beq lmp_ext_features_req ,send_lmpext_features_req +6043 c045e118 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +6044 c04be14e beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +6045 c04ce0d5 beq lmp_io_cap_req ,send_lmp_io_cap_req +6046 c04d60a4 beq lmp_io_cap_res ,send_lmpext_io_cap_res +6047 c04ae0da beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +6048 c04b60db beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +6049 20202a8c branch assert + +send_lmp_accepted: +604a 18007e02 force 2 ,pdata +604b 20406298 call msg_send_lmp +604c 68008049 fetch 1 ,mem_lmi_opcode +604d e0a08000 istore 1 ,contw +604e 204062a7 call send_lmp_follow +604f 4741c030 bpatchx patch30_3 ,mem_patch30 +6050 68008049 fetch 1 ,mem_lmi_opcode +6051 c0046080 beq lmp_in_rand ,send_lmp_accepted_inrand +6052 c007e084 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +6053 c008608f beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +6054 c00be05f beq lmp_sniff_req ,send_lmp_accept_sniff_req +6055 c019e092 beq lmp_host_connection_req ,send_lmp_accepted_connection +6056 c020e098 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +6057 c008e059 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +6058 20600000 rtn + +send_create_conn_start_l2cap_timer_sm: +6059 68008055 fetch 1 ,mem_conn_sm +605a 207a0000 rtn blank +605b 7000551b jam conn_sm_wait_done ,mem_conn_sm +605c 5800000c setarg timer_enpt_waite +605d d8e00007 arg enpt_delay_timer ,queue +605e 20207f08 branch timer_init + +send_lmp_accept_sniff_req: +605f 202026c6 branch sniff_init + +send_lmp_not_accepted: +6060 18007e03 force 3 ,pdata +6061 20406298 call msg_send_lmp +6062 68008049 fetch 1 ,mem_lmi_opcode +6063 c005e068 beq lmp_au_rand ,send_not_accept_aurand +6064 e0a08000 istore 1 ,contw +6065 6800804a fetch 1 ,mem_lmo_reason +6066 e0a08000 istore 1 ,contw +6067 202062a7 branch send_lmp_follow + +send_not_accept_aurand: +6068 e0a08000 istore 1 ,contw +6069 6800804a fetch 1 ,mem_lmo_reason +606a e0a08000 istore 1 ,contw +606b d84004d5 arg mem_sres_tid ,temp +606c 202062e2 branch special_tid_store + +send_lmpext_accepted: +606d 18000e04 force 4 ,queue +606e 204062a0 call send_lmpext +606f 5800007f setarg lmp_escape +6070 e0a08000 istore 1 ,contw +6071 68008049 fetch 1 ,mem_lmi_opcode +6072 793ffe07 set0 7 ,pdata +6073 e0a08000 istore 1 ,contw +6074 68008049 fetch 1 ,mem_lmi_opcode +6075 202062a7 branch send_lmp_follow + +send_lmpext_not_accepted: +6076 18000e05 force 5 ,queue +6077 204062a0 call send_lmpext +6078 5800007f setarg lmp_escape +6079 e0a08000 istore 1 ,contw +607a 68008049 fetch 1 ,mem_lmi_opcode +607b 793ffe07 set0 7 ,pdata +607c e0a08000 istore 1 ,contw +607d 6800804a fetch 1 ,mem_lmo_reason +607e e0a08000 istore 1 ,contw +607f 202062a7 branch send_lmp_follow + +send_lmp_accepted_inrand: +6080 2040244f call clear_linkkey +6081 204062f3 call tid_check +6082 20608000 rtn true +6083 20205ffc branch lmp_generate_key + +send_lmp_accepted_enc_mode: +6084 6800804b fetch 1 ,mem_op +6085 c282e08b bbit1 op_start_enc ,send_lmp_accepted_enc_start +6086 c4020000 rtnbit0 op_stop_enc +6087 70007c12 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +6088 793ffe04 set0 op_stop_enc ,pdata +6089 204062eb call tid_reply +608a 2020608d branch send_lmp_accepted_enc_exit + +send_lmp_accepted_enc_start: +608b 70007c10 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +608c 793ffe05 set0 op_start_enc ,pdata + +send_lmp_accepted_enc_exit: +608d 6000804b store 1 ,mem_op +608e 20600000 rtn + +send_lmp_accepted_enc_key: +608f 204062fc call check_localsm +6090 2020dffe branch lmp_start_encryption ,true +6091 20600000 rtn + +send_lmp_accepted_connection: +6092 70007c8b jam lmp_packet_type_table_req ,mem_lmo_opcode2 +6093 680084d1 fetch 1 ,mem_lmp_conn_state +6094 79207e00 set1 received_conn_req ,pdata +6095 600084d1 store 1 ,mem_lmp_conn_state +6096 700a9901 jam bt_evt_bb_connected ,mem_fifo_temp +6097 20207d86 branch ui_ipc_send_event + +send_lmp_accept_dhkey_check: +6098 20600000 rtn + +send_lmpext_features_res: +6099 18000e0c force 12 ,queue +609a 204062a0 call send_lmpext +609b 58000001 setarg 0x01 +609c e0a08000 istore 1 ,contw +609d 680104ce fetch 2 ,mem_lmpext_ssp_enable +609e e0a10000 istore 2 ,contw +609f 58000000 setarg 0 +60a0 e0a18000 istore 3 ,contw +60a1 58000000 setarg 0x00 +60a2 e0a20000 istore 4 ,contw +60a3 202062b0 branch send_lmp_reply + +send_lmpext_io_cap_res: +60a4 18000e05 force 5 ,queue +60a5 204062a0 call send_lmpext +60a6 6801c65b fetch 3 ,mem_sp_iocap_local +60a7 e0a18000 istore 3 ,contw +60a8 204062b0 call send_lmp_reply +60a9 70466501 jam flag_pairing_state_pairing ,mem_flag_pairing_state +60aa 6800c65b fetch 1 ,mem_sp_iocap_local +60ab c000e0b5 beq display_yesno ,responder_iocap_display_yesno +60ac c00160af beq keyboard_only ,responder_iocap_keyboard_only +60ad c001e0bb beq no_input_no_output ,responder_iocap_no_input_no_output +60ae 20600000 rtn + +responder_iocap_keyboard_only: +60af 6800c65e fetch 1 ,mem_sp_iocap_remote +60b0 c00060c7 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +60b1 c000e0c7 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +60b2 c00160c7 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +60b3 c001e0c1 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +60b4 20600000 rtn + +responder_iocap_display_yesno: +60b5 6800c65e fetch 1 ,mem_sp_iocap_remote +60b6 c00060c1 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +60b7 c000e0c5 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +60b8 c00160c7 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +60b9 c001e0c1 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +60ba 20600000 rtn + +responder_iocap_no_input_no_output: +60bb 6800c65e fetch 1 ,mem_sp_iocap_remote +60bc c00060c1 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +60bd c000e0c1 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +60be c00160c1 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +60bf c001e0c1 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +60c0 20600000 rtn + +responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: + +responder_iocap_display_yesno_initiator_iocap_no_input_no_output: + +responder_iocap_display_yesno_initiator_iocap_display_only: + +responder_iocap_no_input_no_output_initiator_iocap_display_only: + +responder_iocap_no_input_no_output_initiator_iocap_display_yesno: + +responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: + +responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: + +set_ssp_mode_justwork: +60c1 70466203 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +60c2 6800c55c fetch 1 ,mem_classic_bt_flag +60c3 c28033e9 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +60c4 20600000 rtn + +responder_iocap_display_yesno_initiator_iocap_display_yesno: + +set_ssp_mode_numeric_comparison: +60c5 70466201 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +60c6 20600000 rtn + +responder_iocap_keyboard_only_initiator_iocap_display_yesno: + +responder_iocap_keyboard_only_initiator_iocap_keyboard_only: + +responder_iocap_keyboard_only_initiator_iocap_display_only: + +responder_iocap_display_yesno_initiator_iocap_keyboard_only: + +set_ssp_mode_passkey: +60c7 70466202 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +60c8 20600000 rtn + +classic_bt_set_reject_justwork_flag: +60c9 d8e00000 arg flag_ssp_reject_justwork ,queue +60ca 202060cd branch classic_bluetooth_set_flag + +classic_bt_clr_reject_justwork_flag: +60cb d8e00000 arg flag_ssp_reject_justwork ,queue +60cc 202060d1 branch classic_bluetooth_clr_flag + +classic_bluetooth_set_flag: +60cd 6800c55c fetch 1 ,mem_classic_bt_flag +60ce f9207e00 qset1 pdata +60cf 6000c55c store 1 ,mem_classic_bt_flag +60d0 20600000 rtn + +classic_bluetooth_clr_flag: +60d1 6800c55c fetch 1 ,mem_classic_bt_flag +60d2 f93ffe00 qset0 pdata +60d3 6000c55c store 1 ,mem_classic_bt_flag +60d4 20600000 rtn + +send_lmp_io_cap_req: +60d5 18000e05 force 5 ,queue +60d6 204062a0 call send_lmpext +60d7 6801c65b fetch 3 ,mem_sp_iocap_local +60d8 e0a18000 istore 3 ,contw +60d9 202062b2 branch send_lmp_request + +send_lmpext_sniff_subrating_req: +60da 20600000 rtn + +send_lmpext_sniff_subrating_res: +60db 18000e09 force 9 ,queue +60dc 204062a0 call send_lmpext +60dd 68008095 fetch 1 ,mem_subsniff_rate +60de e0a08000 istore 1 ,contw +60df 68010096 fetch 2 ,mem_subsniff_tcmax +60e0 e0a10000 istore 2 ,contw +60e1 68020091 fetch 4 ,mem_subsniff_instant +60e2 e0a20000 istore 4 ,contw +60e3 202062b0 branch send_lmp_reply + +send_lmp_name_res: +60e4 18007e11 force 17 ,pdata +60e5 20406298 call msg_send_lmp +60e6 68008049 fetch 1 ,mem_lmi_opcode +60e7 1fe20400 copy pdata ,temp +60e8 c00060ec beq 0x00 ,send_lmp_name_res_offset_ok +60e9 c00760ec beq 0x0e ,send_lmp_name_res_offset_ok +60ea c00e60ec beq 0x1c ,send_lmp_name_res_offset_ok +60eb 20600000 rtn + +send_lmp_name_res_offset_ok: +60ec e0a08000 istore 1 ,contw +60ed 6800c515 fetch 1 ,mem_local_name_length +60ee e0a08000 istore 1 ,contw +60ef df20000e arg 14 ,loopcnt +60f0 58004516 setarg mem_local_name +60f1 98408c00 iadd temp ,contr +60f2 20407f01 call memcpy +60f3 202062b0 branch send_lmp_reply + +send_lmp_timing_accuracy_res: +60f4 18007e03 force 3 ,pdata +60f5 20406298 call msg_send_lmp +60f6 58000114 setarg 0x0114 +60f7 e0a10000 istore 2 ,contw +60f8 202062b0 branch send_lmp_reply + +send_lmp_clkoffset_res: +60f9 18007e03 force 3 ,pdata +60fa 20406298 call msg_send_lmp +60fb 68020165 fetch 4 ,mem_clke_bt +60fc 9c467e00 isub clkn_bt ,pdata +60fd 2034e0ff branch send_lmp_clkoffset_res_master ,master +60fe 1fe67e00 sub pdata ,0 ,pdata + +send_lmp_clkoffset_res_master: +60ff 1feb7e00 rshift2 pdata ,pdata +6100 793ffe0f set0 15 ,pdata +6101 e0a10000 istore 2 ,contw +6102 202062b0 branch send_lmp_reply + +send_lmp_version_res: +6103 18007e06 force 6 ,pdata +6104 20406298 call msg_send_lmp +6105 6802c510 fetch 5 ,mem_lmp_version +6106 e0a28000 istore 5 ,contw +6107 202062b0 branch send_lmp_reply + +send_lmp_features_res: +6108 18007e09 force 9 ,pdata +6109 20406298 call msg_send_lmp +610a 68044098 fetch 8 ,mem_features +610b e0a40000 istore 8 ,contw +610c 202062b0 branch send_lmp_reply + +send_lmpext_features_req: +610d 18000e0c force 12 ,queue +610e 204062a0 call send_lmpext +610f 58000001 setarg 0x01 +6110 e0a08000 istore 1 ,contw +6111 680104ce fetch 2 ,mem_lmpext_ssp_enable +6112 e0a10000 istore 2 ,contw +6113 58000000 setarg 0 +6114 e0a18000 istore 3 ,contw +6115 58000000 setarg 0x00 +6116 e0a20000 istore 4 ,contw +6117 202062b2 branch send_lmp_request + +send_lmpext_packet_type_table_req: +6118 18000e03 force 3 ,queue +6119 204062a0 call send_lmpext +611a 6800c15a fetch 1 ,mem_ptt +611b e0a08000 istore 1 ,contw +611c 78547c00 disable user +611d 204062b2 call send_lmp_request +611e 24740000 nrtn user +611f 24748000 nrtn master +6120 6800c0d8 fetch 1 ,mem_afh_cfg +6121 c4000000 rtnbit0 afh_cfg_on +6122 20406132 call afh_init +6123 2020613c branch afh_open_all_channels + +ssp_enable: +6124 47424030 bpatchx patch30_4 ,mem_patch30 +6125 6800c09e fetch 1 ,mem_features + 6 +6126 79207e03 set1 param_featrue_ssp ,pdata +6127 6000c09e store 1 ,mem_features + 6 +6128 58000101 setarg param_lmpext_ssp_enable +6129 600104ce store 2 ,mem_lmpext_ssp_enable +612a 20600000 rtn + +ssp_disable: +612b 4742c030 bpatchx patch30_5 ,mem_patch30 +612c 6800c09e fetch 1 ,mem_features + 6 +612d 793ffe03 set0 param_featrue_ssp ,pdata +612e 6000c09e store 1 ,mem_features + 6 +612f 58000000 setarg 0 +6130 600104ce store 2 ,mem_lmpext_ssp_enable +6131 20600000 rtn + +afh_init: +6132 7040d803 jam 0x3 ,mem_afh_cfg +6133 58000000 setarg 0 +6134 60024142 store 4 ,mem_afh_timer +6135 d8a040da arg mem_afh_map_lo ,contw +6136 20406140 call afh_reset_map +6137 d8a040e7 arg mem_afh_map_new ,contw +6138 20406140 call afh_reset_map +6139 d8a04146 arg mem_afh_classify_channel_map ,contw +613a 20406140 call afh_reset_map +613b 20206147 branch afh_clear_error_counter + +afh_open_all_channels: +613c d8a040e7 arg mem_afh_map_new ,contw +613d 20406140 call afh_reset_map +613e 20406147 call afh_clear_error_counter +613f 2020614a branch afh_set_send_flag + +afh_reset_map: +6140 58ffffff setarg 0xffffff +6141 e0a18000 istore 3 ,contw +6142 e0a18000 istore 3 ,contw +6143 e0a18000 istore 3 ,contw +6144 5800007f setarg 0x7f +6145 e0a08000 istore 1 ,contw +6146 20600000 rtn + +afh_clear_error_counter: +6147 58000000 setarg 0 +6148 600140d6 store 2 ,mem_afh_error_total +6149 20600000 rtn + +afh_set_send_flag: +614a 6800c0d8 fetch 1 ,mem_afh_cfg +614b 79207e02 set1 send_lmp_set_afh ,pdata +614c 6000c0d8 store 1 ,mem_afh_cfg +614d 20600000 rtn + +send_lmpext_pause_encryption_req: +614e 18000e02 force 2 ,queue +614f 204062a0 call send_lmpext +6150 2434e2b0 nbranch send_lmp_reply ,master +6151 202062b2 branch send_lmp_request + +send_lmp_detach: +6152 18007e02 force 2 ,pdata +6153 20406298 call msg_send_lmp +6154 680084ca fetch 1 ,mem_disconn_reason_send +6155 e0a08000 istore 1 ,contw +6156 204062b2 call send_lmp_request + +prepare_disconnect: +6157 6800804b fetch 1 ,mem_op +6158 79207e03 set1 op_disconn ,pdata +6159 6000804b store 1 ,mem_op +615a 70007232 jam 50 ,mem_conn_timer +615b 20600000 rtn + +send_lmp_no_payload: +615c 18007e01 force 1 ,pdata +615d 20406298 call msg_send_lmp +615e 202062b2 branch send_lmp_request + +send_lmp_nopayload_reply: +615f 18007e01 force 1 ,pdata +6160 20406298 call msg_send_lmp +6161 202062b0 branch send_lmp_reply + +send_lmp_encryption_mode_req: +6162 18007e02 force 2 ,pdata +6163 20406298 call msg_send_lmp +6164 6800804c fetch 1 ,mem_state_map +6165 2fec0002 isolate0 smap_encryption ,pdata +6166 7920fe00 setflag true ,0 ,pdata +6167 1fe17e01 and_into 1 ,pdata +6168 e0a08000 istore 1 ,contw +6169 202062b2 branch send_lmp_request + +send_lmp_superto: +616a 18007e03 force 3 ,pdata +616b 20406298 call msg_send_lmp +616c 68010051 fetch 2 ,mem_supervision_to +616d e0a10000 istore 2 ,contw +616e 202062b2 branch send_lmp_request + +send_lmp_name_req: +616f 700072fa jam 250 ,mem_conn_timer +6170 18007e02 force 2 ,pdata +6171 20406298 call msg_send_lmp +6172 68008053 fetch 1 ,mem_name_offset +6173 e0a08000 istore 1 ,contw +6174 202062b2 branch send_lmp_request + +send_lmp_test_control: +6175 18007e0a force 10 ,pdata +6176 20406298 call msg_send_lmp +6177 d8c00152 arg mem_temp_payload ,contr +6178 18007209 force 9 ,loopcnt + +send_lmp_test_control_loop: +6179 e8c08000 ifetch 1 ,contr +617a 1fe2fe55 xor_into 0x55 ,pdata +617b e0a08000 istore 1 ,contw +617c c2006179 loop send_lmp_test_control_loop +617d 202062b2 branch send_lmp_request + +send_lmp_quality_of_service_req: +617e 202062b2 branch send_lmp_request + +send_lmp_unit_key: +617f 202062b2 branch send_lmp_request + +send_lmp_slot_offset: +6180 20748000 rtn master +6181 2040282d call calc_slot_offset +6182 18007e09 force 9 ,pdata +6183 20406298 call msg_send_lmp +6184 68010171 fetch 2 ,mem_slot_offset +6185 e0a10000 istore 2 ,contw +6186 6801c0a0 fetch 3 ,mem_lap +6187 e0a18000 istore 3 ,contw +6188 6800c0a3 fetch 1 ,mem_uap +6189 e0a08000 istore 1 ,contw +618a 680140a4 fetch 2 ,mem_nap +618b e0a10000 istore 2 ,contw +618c c581e191 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +618d 793f8003 set0 mark_switch_initiated ,mark +618e 204062b2 call send_lmp_request +618f 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +6190 20600000 rtn + +send_lmp_slot_offset_reply: +6191 204062b0 call send_lmp_reply +6192 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +6193 70007d13 jam lmp_switch_req ,mem_lmi_opcode2 +6194 20600000 rtn + +send_lmp_switch_req: +6195 d8400200 arg 0x200 ,temp +6196 2034e199 branch switch_on_native ,master +6197 1d027e00 deposit clke_bt +6198 2020619a branch switch_slack + +switch_on_native: +6199 1c427e00 deposit clkn_bt + +switch_slack: +619a 1c227e00 deposit bt_clk +619b 9840fe00 iadd temp ,pdata +619c 1fe17ffc and_into 0x1fc ,pdata +619d 60020034 store 4 ,mem_sniff_anchor +619e 18007e05 force 5 ,pdata +619f 20406298 call msg_send_lmp +61a0 68020034 fetch 4 ,mem_sniff_anchor +61a1 1fe37e00 rshift pdata ,pdata +61a2 e0a20000 istore 4 ,contw +61a3 202062b2 branch send_lmp_request + +send_lmp_sniff_req: +61a4 18007e0a force 10 ,pdata +61a5 20406298 call msg_send_lmp +61a6 d8c004d9 arg mem_sniff_payload ,contr +61a7 e8c48000 ifetch 9 ,contr +61a8 e0a48000 istore 9 ,contw +61a9 202062b2 branch send_lmp_request + +send_lmp_timing_accuracy_req: +61aa 18007e03 force 3 ,pdata +61ab 20406298 call msg_send_lmp +61ac 58000114 setarg 0x0114 +61ad e0a10000 istore 2 ,contw +61ae 202062b2 branch send_lmp_request + +send_lmp_unsniff_req: +61af 18007e01 force 1 ,pdata +61b0 20406298 call msg_send_lmp +61b1 202062b2 branch send_lmp_request + +send_lmp_max_slot: +61b2 18007e02 force 2 ,pdata +61b3 20406298 call msg_send_lmp +61b4 6800c0d0 fetch 1 ,mem_max_slot +61b5 e0a08000 istore 1 ,contw +61b6 202062b2 branch send_lmp_request + +send_lmp_max_slot_req: +61b7 18007e02 force 2 ,pdata +61b8 20406298 call msg_send_lmp +61b9 58000005 setarg 0x05 +61ba e0a08000 istore 1 ,contw +61bb 202062b2 branch send_lmp_request + +send_lmp_inc_power: +61bc 18007e02 force 2 ,pdata +61bd 20406298 call msg_send_lmp +61be 58000000 setarg 0x00 +61bf e0a08000 istore 1 ,contw +61c0 202062b2 branch send_lmp_request + +send_lmp_setup_complete_by_module: +61c1 70007c2e jam lmp_max_slot_req ,mem_lmo_opcode2 +61c2 20600000 rtn + +send_lmp_setup_complete: +61c3 6800c092 fetch 1 ,mem_device_option +61c4 1fe67c0a sub pdata ,dvc_op_module ,null +61c5 2042e1c1 call send_lmp_setup_complete_by_module ,zero +61c6 68008030 fetch 1 ,mem_state +61c7 79207e04 set1 state_conn_comp ,pdata +61c8 60008030 store 1 ,mem_state +61c9 1c427e00 copy clkn_bt ,pdata +61ca 600204e9 store 4 ,mem_aurand_send_delay_time +61cb 680084d1 fetch 1 ,mem_lmp_conn_state +61cc c281e1d4 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +61cd 79207e03 set1 sent_setup_complete ,pdata +61ce 600084d1 store 1 ,mem_lmp_conn_state +61cf 700a9905 jam bt_evt_setup_complete ,mem_fifo_temp +61d0 20407d86 call ui_ipc_send_event +61d1 18007e01 force 1 ,pdata +61d2 20406298 call msg_send_lmp +61d3 202062b2 branch send_lmp_request + +send_lmp_setup_complete_has_sent: +61d4 70004800 jam 0 ,mem_lmp_to_send +61d5 20600000 rtn + +send_lmp_version_req: +61d6 18007e06 force 6 ,pdata +61d7 20406298 call msg_send_lmp +61d8 6802c510 fetch 5 ,mem_lmp_version +61d9 e0a28000 istore 5 ,contw +61da 202062b2 branch send_lmp_request + +send_lmp_features_req: +61db 18007e09 force 9 ,pdata +61dc 20406298 call msg_send_lmp +61dd 68044098 fetch 8 ,mem_features +61de e0a40000 istore 8 ,contw +61df 202062b2 branch send_lmp_request + +sp_master_send_io_cap_get: +61e0 7009b101 jam sp_flag_commit ,mem_master_sp_flag +61e1 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +61e2 c1808000 rtnne sp_key_valid +61e3 7009af13 jam sp_master_stat_start_done ,mem_master_sp_state +61e4 20600000 rtn + +sp_master_send_io_cap_send: +61e5 204062ef call tid_initiate +61e6 70007c99 jam lmp_io_cap_req ,mem_lmo_opcode2 +61e7 7009af03 jam sp_stat_key_send ,mem_master_sp_state +61e8 20600000 rtn + +sp_master_send_lmp_encapsulated_header: +61e9 204062ef call tid_initiate +61ea 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 +61eb 7009af07 jam sp_stat_random_send ,mem_master_sp_state +61ec 20600000 rtn + +sp_master_commitment_compare: +61ed da200a4e arg mem_sp_calc_result_high ,rega +61ee da400a6e arg mem_sp_confirm_remote ,regb +61ef df200010 arg 16 ,loopcnt +61f0 20407f88 call string_compare +61f1 2022e1f7 branch sp_master_commitment_compare_success ,zero +61f2 7009af00 jam sp_stat_null ,mem_master_sp_state +61f3 204076da call master_clear_mem_master_sp_flag +61f4 70007e24 jam pdu_not_allowed ,mem_lmo_reason2 +61f5 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +61f6 20205d53 branch reject_lmp_packet + +sp_master_commitment_compare_success: +61f7 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state +61f8 204076d8 call master_set_mem_master_sp_flag +61f9 70007d40 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +61fa 20205e38 branch accept_lmp_msg + +sp_master_send_lmp_simple_pairing_number: +61fb 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +61fc 20600000 rtn + +sp_send_lmp_encapsulated_header: +61fd 70007c3d jam lmp_encapsulated_header ,mem_lmo_opcode2 +61fe 20600000 rtn + +send_lmp_encapsulated_header: +61ff 7009b600 jam 0 ,mem_sp_local_key_send_count +6200 18007e04 force 4 ,pdata +6201 20406298 call msg_send_lmp +6202 18007e01 force encapsulated_major_type_p192 ,pdata +6203 e0a08000 istore 1 ,contw +6204 18007e01 force encapsulated_minor_type_p192 ,pdata +6205 e0a08000 istore 1 ,contw +6206 18007e30 force encapsulated_len_p192 ,pdata +6207 e0a08000 istore 1 ,contw +6208 204062fc call check_localsm +6209 2020e2b2 branch send_lmp_request ,true +620a 202062b0 branch send_lmp_reply + +send_lmp_encapsulated_payload: +620b 18007e11 force 17 ,pdata +620c 20406298 call msg_send_lmp +620d 680089b6 fetch 1 ,mem_sp_local_key_send_count +620e d8c0462a arg mem_sp_pubkey_local ,contr +620f 98c08c00 iadd contr ,contr +6210 e8c40000 ifetch 8 ,contr +6211 e0a40000 istore 8 ,contw +6212 e8c40000 ifetch 8 ,contr +6213 e0a40000 istore 8 ,contw +6214 680089b6 fetch 1 ,mem_sp_local_key_send_count +6215 1fe0fe10 increase 16 ,pdata +6216 600089b6 store 1 ,mem_sp_local_key_send_count +6217 204062fc call check_localsm +6218 2020e2b2 branch send_lmp_request ,true +6219 202062b0 branch send_lmp_reply + +sp_send_lmp_simple_pairing_comfirm: +621a 7009ae06 jam sp_stat_random_recv ,mem_sp_state +621b 70007c3f jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +621c 20600000 rtn + +send_lmp_simple_pairing_comfirm: +621d 18007e11 force 17 ,pdata +621e 20406298 call msg_send_lmp +621f d8c00a4e arg mem_sp_calc_result_high ,contr +6220 e8c40000 ifetch 8 ,contr +6221 e0a40000 istore 8 ,contw +6222 e8c40000 ifetch 8 ,contr +6223 e0a40000 istore 8 ,contw +6224 202062b0 branch send_lmp_reply + +sp_send_lmp_simple_pairing_number: +6225 70007c40 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +6226 20600000 rtn + +send_lmp_simple_pairing_number: +6227 204062fc call check_localsm +6228 2040f612 call sp_local_random_key_generator ,true +6229 18007e11 force 17 ,pdata +622a 20406298 call msg_send_lmp +622b d8c00a1e arg mem_sp_random_local ,contr +622c e8c40000 ifetch 8 ,contr +622d e0a40000 istore 8 ,contw +622e e8c40000 ifetch 8 ,contr +622f e0a40000 istore 8 ,contw +6230 204062fc call check_localsm +6231 2420e2b0 nbranch send_lmp_reply ,true +6232 2020e2b2 branch send_lmp_request ,true + +master_sp_sm_end: +6233 7009af0f jam sp_stat_done ,mem_master_sp_state + +sp_aurand_send: +6234 204062ef call tid_initiate +6235 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 +6236 20406307 call check_localsm_master +6237 2020f64e branch sp_master_key_prarm_push ,true +6238 20207658 branch sp_link_key_prarm_push + +master_sp_send_lmp_dhkey_check: +6239 204062eb call tid_reply + +sp_send_lmp_dhkey_check: +623a 70007c41 jam lmp_dhkey_check ,mem_lmo_opcode2 +623b 20600000 rtn + +send_lmp_dhkey_check: +623c 18007e11 force 17 ,pdata +623d 20406298 call msg_send_lmp +623e d8c00a4e arg mem_sp_calc_result_high ,contr +623f e8c40000 ifetch 8 ,contr +6240 e0a40000 istore 8 ,contw +6241 e8c40000 ifetch 8 ,contr +6242 e0a40000 istore 8 ,contw +6243 204062fc call check_localsm +6244 2420e2b0 nbranch send_lmp_reply ,true +6245 2020e2b2 branch send_lmp_request ,true + +send_lmp_enc_key_size_mask_res: +6246 18007e03 force 3 ,pdata +6247 20406298 call msg_send_lmp +6248 5800fffe setarg 0xfffe +6249 e0a10000 istore 2 ,contw +624a 202062b0 branch send_lmp_reply + +send_lmp_auto_rate: +624b 202062b2 branch send_lmp_request + +send_lmp_clkoffset_req: +624c 202062b2 branch send_lmp_request + +send_lmp_quality_of_service: +624d 202062b2 branch send_lmp_request + +send_lmp_test_activate: +624e 202062b2 branch send_lmp_request + +send_lmp_comb_key: +624f 2040630b call generate_random_number +6250 da2040a0 arg mem_lap ,rega +6251 20406311 call generate_linkkey +6252 18007e11 force 17 ,pdata +6253 20406298 call msg_send_lmp +6254 da200582 arg mem_kinit ,rega +6255 da400562 arg mem_random_number ,regb +6256 20407352 call xor16 +6257 2434e2a7 nbranch send_lmp_follow ,master +6258 202062ad branch send_lmp_tid + +send_lmp_inrand: +6259 2040630b call generate_random_number +625a da200040 arg mem_plap ,rega +625b 20407255 call generate_kinit + +send_lmp_rand: +625c 18007e11 force 17 ,pdata +625d 20406298 call msg_send_lmp +625e d8c00562 arg mem_random_number ,contr +625f 20407ebf call memcpy16 +6260 68008055 fetch 1 ,mem_conn_sm +6261 c00ce2b2 beq conn_sm_auth_wait ,send_lmp_request +6262 c00c62b2 beq conn_sm_pairing_wait ,send_lmp_request +6263 202062ad branch send_lmp_tid + +send_lmp_aurand: +6264 680089b5 fetch 1 ,mem_pairing_auth +6265 203a626a branch send_lmp_aurand_notpairing ,blank +6266 204062fc call check_localsm +6267 2040e2ef call tid_initiate ,true +6268 2440e2eb ncall tid_reply ,true +6269 2020626b branch send_lmp_aurand_common + +send_lmp_aurand_notpairing: +626a 204062ef call tid_initiate + +send_lmp_aurand_common: +626b 2040630b call generate_random_number +626c 2020625c branch send_lmp_rand + +send_lmp_sres: +626d da2040a0 arg mem_lap ,rega +626e 20407288 call function_e1 +626f 18007e05 force 5 ,pdata +6270 20406298 call msg_send_lmp +6271 68020592 fetch 4 ,mem_input_store +6272 e0a20000 istore 4 ,contw +6273 d84004d5 arg mem_sres_tid ,temp +6274 204062e2 call special_tid_store +6275 20407386 call copy_aco +6276 204062fc call check_localsm +6277 2020e27c branch send_lmp_sres_master ,true +6278 7004d801 jam done_encryp ,mem_wait_encryption +6279 680089b5 fetch 1 ,mem_pairing_auth +627a 207a0000 rtn blank +627b 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 + +send_lmp_sres_master: +627c 6800c1bd fetch 1 ,mem_link_key_exists +627d 207a0000 rtn blank + +send_lmp_sres_startenc: +627e 204062fc call check_localsm +627f 2420e284 nbranch send_lmp_sres_startenc_slave ,true +6280 680084d7 fetch 1 ,mem_auth_enable +6281 207a0000 rtn blank +6282 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +6283 20600000 rtn + +send_lmp_sres_startenc_slave: +6284 c6908000 rtnmark0 mark_slave_in_rand_accepted +6285 793f8021 set0 mark_slave_in_rand_accepted ,mark +6286 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +6287 20600000 rtn + +send_lmp_start_encryption: +6288 2040630b call generate_random_number +6289 2040728b call function_e3 +628a 18007e11 force 17 ,pdata +628b 20406298 call msg_send_lmp +628c d8c00562 arg mem_random_number ,contr +628d 20407ebf call memcpy16 +628e 202062ad branch send_lmp_tid + +send_lmp_stop_encryption_req: +628f 18007e01 force 1 ,pdata +6290 20406298 call msg_send_lmp +6291 202062ad branch send_lmp_tid + +send_lmp_encryption_key_size_req: +6292 18007e02 force 2 ,pdata +6293 20406298 call msg_send_lmp +6294 18007e10 force 16 ,pdata +6295 e0a08000 istore 1 ,contw +6296 60008054 store 1 ,mem_key_size +6297 202062ad branch send_lmp_tid + +msg_send_lmp: +6298 1fe9fe00 lshift3 pdata ,pdata +6299 1fe1fe07 or_into 0x07 ,pdata +629a 600084b6 store 1 ,mem_lmo_header_length +629b df200011 arg 17 ,loopcnt +629c d8a004b8 arg mem_lmo_payload ,contw +629d 20407ed4 call clear_mem +629e d8a004b8 arg mem_lmo_payload ,contw +629f 20600000 rtn + +send_lmpext: +62a0 1fe1227f and pdata ,0x7f ,rega +62a1 7000487f jam lmp_escape ,mem_lmp_to_send +62a2 18e27e00 deposit queue +62a3 20406298 call msg_send_lmp +62a4 1a227e00 deposit rega +62a5 e0a08000 istore 1 ,contw +62a6 20600000 rtn + +send_lmp_follow: +62a7 68008048 fetch 1 ,mem_lmp_to_send +62a8 1fe3fe00 lshift pdata ,pdata +62a9 6808804c fetcht 1 ,mem_state_map +62aa 284ffe01 isolate1 smap_lmptid ,temp +62ab 7920fe00 setflag true ,0 ,pdata +62ac 202062b7 branch send_lmp_exit + +send_lmp_tid: +62ad 6808804c fetcht 1 ,mem_state_map +62ae 18410401 and_into 1 ,temp +62af 202062b3 branch send_lmp_end + +send_lmp_reply: +62b0 18000400 force 0 ,temp +62b1 202062b3 branch send_lmp_end + +send_lmp_request: +62b2 18000401 force 1 ,temp + +send_lmp_end: +62b3 68008048 fetch 1 ,mem_lmp_to_send +62b4 1fe3fe00 lshift pdata ,pdata +62b5 7934fe00 setflag master ,0 ,pdata +62b6 9842fe00 ixor temp ,pdata + +send_lmp_exit: +62b7 600084b7 store 1 ,mem_lmo_header_opcode +62b8 70004800 jam 0 ,mem_lmp_to_send +62b9 204062c7 call lmo_fifo_process_lmo0empty +62ba 78347c00 enable user +62bb 20600000 rtn + +lmo_fifo_check: +62bc 6800807c fetch 1 ,mem_lmo_opcode2 +62bd 207a0000 rtn blank +62be 204062c1 call lmo_fifo_process +62bf 6800807c fetch 1 ,mem_lmo_opcode2 +62c0 20600000 rtn + +lmo_fifo_process: +62c1 47434030 bpatchx patch30_6 ,mem_patch30 +62c2 68008048 fetch 1 ,mem_lmp_to_send +62c3 203a62c7 branch lmo_fifo_process_lmo0empty ,blank +62c4 68008078 fetch 1 ,mem_lmo_opcode1 +62c5 247a0000 nrtn blank +62c6 202062d1 branch lmo_fifo_process_lmo2to1 + +lmo_fifo_process_lmo0empty: +62c7 68008078 fetch 1 ,mem_lmo_opcode1 +62c8 203a62d7 branch lmo_fifo_process_lmo1_empty ,blank +62c9 68018078 fetch 3 ,mem_lmo_opcode1 +62ca 60018048 store 3 ,mem_lmp_to_send +62cb 6808807b fetcht 1 ,mem_lmo_tid1 +62cc 6800804c fetch 1 ,mem_state_map +62cd 793ffe01 set0 smap_lmptid ,pdata +62ce 9841fe00 ior temp ,pdata +62cf 6000804c store 1 ,mem_state_map +62d0 70007800 jam 0 ,mem_lmo_opcode1 + +lmo_fifo_process_lmo2to1: +62d1 6800807c fetch 1 ,mem_lmo_opcode2 +62d2 207a0000 rtn blank +62d3 6802007c fetch 4 ,mem_lmo_opcode2 +62d4 60020078 store 4 ,mem_lmo_opcode1 +62d5 70007c00 jam 0 ,mem_lmo_opcode2 +62d6 20600000 rtn + +lmo_fifo_process_lmo1_empty: +62d7 6800807c fetch 1 ,mem_lmo_opcode2 +62d8 207a0000 rtn blank +62d9 6801807c fetch 3 ,mem_lmo_opcode2 +62da 60018048 store 3 ,mem_lmp_to_send +62db 6808807f fetcht 1 ,mem_lmo_tid2 +62dc 6800804c fetch 1 ,mem_state_map +62dd 793ffe01 set0 smap_lmptid ,pdata +62de 9841fe00 ior temp ,pdata +62df 6000804c store 1 ,mem_state_map +62e0 70007c00 jam 0 ,mem_lmo_opcode2 +62e1 20600000 rtn + +special_tid_store: +62e2 4743c030 bpatchx patch30_7 ,mem_patch30 +62e3 6800804c fetch 1 ,mem_state_map +62e4 1fe22600 copy pdata ,regc +62e5 e8408000 ifetch 1 ,temp +62e6 20405e52 call pop_tid_follow +62e7 204062a7 call send_lmp_follow +62e8 1a627e00 copy regc ,pdata +62e9 6000804c store 1 ,mem_state_map +62ea 20600000 rtn + +tid_reply: +62eb 6808804c fetcht 1 ,mem_state_map +62ec 793f8400 set0 smap_lmptidinit ,temp +62ed 6008804c storet 1 ,mem_state_map +62ee 20600000 rtn + +tid_initiate: +62ef 6808804c fetcht 1 ,mem_state_map +62f0 79200400 set1 smap_lmptidinit ,temp +62f1 6008804c storet 1 ,mem_state_map +62f2 20600000 rtn + +tid_check: +62f3 7d34fe01 nsetflag master ,smap_lmptid ,pdata +62f4 6808804c fetcht 1 ,mem_state_map +62f5 9842fe00 ixor temp ,pdata +62f6 2feffe01 isolate1 smap_lmptid ,pdata +62f7 20600000 rtn + +tid_set_reply: +62f8 6800804c fetch 1 ,mem_state_map +62f9 7934fe01 setflag master ,smap_lmptid ,pdata +62fa 6000804c store 1 ,mem_state_map +62fb 20600000 rtn + +check_localsm: +62fc 680089b4 fetch 1 ,mem_sp_localsm +62fd 2fe0fe01 compare local_statemachine ,pdata ,0x7f +62fe 20600000 rtn + +setlocalsm_master: +62ff 680089b4 fetch 1 ,mem_sp_localsm +6300 79207e07 set1 7 ,pdata +6301 600089b4 store 1 ,mem_sp_localsm +6302 20600000 rtn + +setlocalsm_slave: +6303 680089b4 fetch 1 ,mem_sp_localsm +6304 793ffe07 set0 7 ,pdata +6305 600089b4 store 1 ,mem_sp_localsm +6306 20600000 rtn + +check_localsm_master: +6307 680089b4 fetch 1 ,mem_sp_localsm +6308 2feffe07 isolate1 7 ,pdata +6309 600089b4 store 1 ,mem_sp_localsm +630a 20600000 rtn + +generate_random_number: +630b d8a00562 arg mem_random_number ,contw + +generate_random: +630c 18007210 force 16 ,loopcnt + +generate_random_another: + +generate_random_loop: +630d 180a7e00 random pdata +630e e0a08000 istore 1 ,contw +630f c200630d loop generate_random_another +6310 20600000 rtn + +generate_linkkey: +6311 20407259 call function_e21 +6312 da2041be arg mem_link_key ,rega +6313 da400592 arg mem_input_store ,regb +6314 ea240000 ifetch 8 ,rega +6315 68088030 fetcht 1 ,mem_state +6316 7d3a0406 nsetflag blank ,state_combkey ,temp +6317 60088030 storet 1 ,mem_state +6318 1a220a00 copy rega ,contw +6319 20407352 call xor16 +631a 202021c4 branch generate_linkkey_continue + +process_conn_sm: +631b 47444031 bpatchx patch31_0 ,mem_patch31 +631c 204062bc call lmo_fifo_check +631d 247a0000 nrtn blank + +process_conn_sm_continue: +631e 68008055 fetch 1 ,mem_conn_sm +631f 207a0000 rtn blank +6320 c002636f beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +6321 c002e374 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +6322 c0016366 beq conn_sm_send_features ,host_create_conn_send_features +6323 c001e37c beq conn_sm_wait_features_res ,host_create_conn_waiting +6324 c0076369 beq conn_sm_send_switch ,host_create_conn_send_switch +6325 c0036398 beq conn_sm_auth_pair ,host_create_conn_auth_pair +6326 c003e3b0 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +6327 c004e3b1 beq conn_sm_encrypt ,host_create_conn_encrypt +6328 c00563ba beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +6329 c005e3be beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +632a c0066386 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +632b c006e389 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +632c c007e38f beq conn_sm_detach_delay ,host_create_conn_master_detach +632d c0096359 beq conn_sm_send_version ,host_create_conn_send_version +632e c009e37c beq conn_sm_wait_version ,host_create_conn_waiting +632f c008635c beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +6330 c00a6356 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +6331 c00ae37c beq conn_sm_wait_features_ext ,host_create_conn_waiting +6332 c00b6350 beq conn_sm_pairing ,host_create_conn_pairing +6333 c00c6355 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +6334 c00be349 beq conn_sm_auth ,host_create_conn_auth +6335 c00ce34f beq conn_sm_auth_wait ,host_create_conn_auth_wait +6336 c00d633a beq conn_sm_done ,host_create_conn_done +6337 c00de344 beq conn_sm_wait_done ,host_create_conn_done_wait +6338 70005500 jam conn_sm_standby ,mem_conn_sm +6339 20600000 rtn + +host_create_conn_done: +633a 680084d1 fetch 1 ,mem_lmp_conn_state +633b c4010000 rtnbit0 received_setup_complete +633c c4018000 rtnbit0 sent_setup_complete +633d 70005500 jam conn_sm_standby ,mem_conn_sm +633e 20406340 call host_conn_judge_encrypt +633f 20206cef branch scheduler_start_upper_sm + +host_conn_judge_encrypt: +6340 6800816d fetch 1 ,mem_connection_options +6341 c4008000 rtnbit0 connection_encrypt +6342 7000550a jam conn_sm_encrypt_wait ,mem_conn_sm +6343 20600000 rtn + +host_create_conn_done_wait: +6344 d8e00007 arg enpt_delay_timer ,queue +6345 20407f16 call timer_check +6346 247a0000 nrtn blank +6347 7000551a jam conn_sm_done ,mem_conn_sm +6348 20600000 rtn + +host_create_conn_auth: +6349 6800816d fetch 1 ,mem_connection_options +634a 793ffe00 set0 connection_auth ,pdata +634b 6000816d store 1 ,mem_connection_options +634c 70005519 jam conn_sm_auth_wait ,mem_conn_sm +634d 70007c0b jam lmp_au_rand ,mem_lmo_opcode2 +634e 20600000 rtn + +host_create_conn_auth_wait: +634f 20600000 rtn + +host_create_conn_pairing: +6350 680084d4 fetch 1 ,mem_pincode_state +6351 c1810000 rtnne pincode_state_pincode_ready +6352 204063c0 call host_auth +6353 70005518 jam conn_sm_pairing_wait ,mem_conn_sm +6354 20600000 rtn + +host_create_conn_pairing_wait: +6355 20600000 rtn + +host_creat_conn_send_feat_ext: +6356 70005515 jam conn_sm_wait_features_ext ,mem_conn_sm +6357 70007c83 jam lmp_ext_features_req ,mem_lmo_opcode2 +6358 20600000 rtn + +host_create_conn_send_version: +6359 70005513 jam conn_sm_wait_version ,mem_conn_sm +635a 70007c25 jam lmp_version_req ,mem_lmo_opcode2 +635b 20600000 rtn + +host_creat_conn_wait_switch: +635c 6800c55b fetch 1 ,mem_switch_flag +635d c1000000 rtneq switch_flag_init +635e c000e364 beq switch_flag_accept ,host_create_conn_switch_accept +635f d8e00006 arg switch_wait_timer ,queue +6360 20407f16 call timer_check +6361 247a0000 nrtn blank +6362 70455b00 jam switch_flag_init ,mem_switch_flag +6363 2020637d branch host_create_conn_switch + +host_create_conn_switch_accept: +6364 20748000 rtn master +6365 20206398 branch host_create_conn_auth_pair + +host_create_conn_send_features: +6366 70005503 jam conn_sm_wait_features_res ,mem_conn_sm +6367 70007c27 jam lmp_features_req ,mem_lmo_opcode2 +6368 20600000 rtn + +host_create_conn_send_switch: +6369 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +636a 79200003 set1 mark_switch_initiated ,mark +636b 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm +636c 580001ff setarg 0x1ff +636d 600104d2 store 2 ,mem_soft_timer +636e 20600000 rtn + +host_create_conn_send_conn_req: +636f 70005505 jam conn_sm_wait_conn_accept ,mem_conn_sm +6370 7004d2ff jam 0xff ,mem_soft_timer +6371 793f8022 set0 mark_reconn_recieve_switch ,mark +6372 70007c33 jam lmp_host_connection_req ,mem_lmo_opcode2 +6373 20205d04 branch init_lmp_reinit + +host_create_conn_wait_accept: +6374 c6110000 rtnmark1 mark_reconn_recieve_switch +6375 680104d2 fetch 2 ,mem_soft_timer +6376 1fe67e01 sub pdata ,1 ,pdata +6377 2022e37a branch host_create_conn_resend ,zero +6378 600104d2 store 2 ,mem_soft_timer +6379 20600000 rtn + +host_create_conn_resend: +637a 7000550e jam conn_sm_send_switch ,mem_conn_sm +637b 20600000 rtn + +host_create_conn_waiting: +637c 20600000 rtn + +host_create_conn_switch: +637d 680084d1 fetch 1 ,mem_lmp_conn_state +637e c4018000 rtnbit0 sent_setup_complete +637f c4010000 rtnbit0 received_setup_complete +6380 6800816d fetch 1 ,mem_connection_options +6381 793ffe02 set0 connection_switch ,pdata +6382 6000816d store 1 ,mem_connection_options +6383 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +6384 70005510 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +6385 20600000 rtn + +host_create_conn_send_setup_complete: +6386 7000550d jam conn_sm_wait_setup_complete ,mem_conn_sm +6387 70007c31 jam lmp_setup_complete ,mem_lmo_opcode2 +6388 20600000 rtn + +host_create_conn_wait_setup_complete: +6389 680084d1 fetch 1 ,mem_lmp_conn_state +638a c4010000 rtnbit0 received_setup_complete +638b 70005500 jam conn_sm_standby ,mem_conn_sm +638c 20600000 rtn + +host_create_conn_wait_setup_complete_rtn: +638d 70005506 jam conn_sm_auth_pair ,mem_conn_sm +638e 20600000 rtn + +host_create_conn_master_detach: +638f 680084d2 fetch 1 ,mem_soft_timer +6390 1fe0ffff increase -1 ,pdata +6391 203a6394 branch host_create_conn_send_detach ,blank +6392 600084d2 store 1 ,mem_soft_timer +6393 20600000 rtn + +host_create_conn_send_detach: +6394 70007c07 jam lmp_detach ,mem_lmo_opcode2 +6395 7004ca16 jam local_host ,mem_disconn_reason_send +6396 70005500 jam 0 ,mem_conn_sm +6397 20600000 rtn + +host_create_conn_auth_pair: +6398 6800816d fetch 1 ,mem_connection_options +6399 c281637d bbit1 connection_switch ,host_create_conn_switch +639a c280639d bbit1 connection_auth ,host_create_conn_auth_pair_true + +host_create_conn_sm_done: +639b 7000551a jam conn_sm_done ,mem_conn_sm +639c 20600000 rtn + +host_create_conn_auth_pair_true: +639d 6800c1bd fetch 1 ,mem_link_key_exists +639e 203a63a9 branch host_create_conn_auth_pair_nokey ,blank +639f 680084d1 fetch 1 ,mem_lmp_conn_state +63a0 c4018000 rtnbit0 sent_setup_complete +63a1 c4010000 rtnbit0 received_setup_complete +63a2 680204e9 fetch 4 ,mem_aurand_send_delay_time +63a3 d8400064 arg 100 ,temp +63a4 98408400 iadd temp ,temp +63a5 1c427e00 copy clkn_bt ,pdata +63a6 98467c00 isub temp ,null +63a7 24610000 nrtn positive +63a8 20206349 branch host_create_conn_auth + +host_create_conn_auth_pair_nokey: +63a9 70005516 jam conn_sm_pairing ,mem_conn_sm +63aa 70468904 jam 4 ,mem_pin_length +63ab 58003030 setarg 0x3030 +63ac 6001468a store 2 ,mem_pin +63ad e0a10000 istore 2 ,contw +63ae 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state +63af 20206350 branch host_create_conn_pairing + +host_create_conn_auth_pair_wait: +63b0 20600000 rtn + +host_create_conn_encrypt: +63b1 6800816d fetch 1 ,mem_connection_options +63b2 c280e3b5 bbit1 connection_encrypt ,host_create_conn_encrypt_start +63b3 7000551a jam conn_sm_done ,mem_conn_sm +63b4 20600000 rtn + +host_create_conn_encrypt_start: +63b5 6800816d fetch 1 ,mem_connection_options +63b6 793ffe01 set0 connection_encrypt ,pdata +63b7 6000816d store 1 ,mem_connection_options +63b8 70007c0f jam lmp_encryption_mode_req ,mem_lmo_opcode2 +63b9 20600000 rtn + +host_create_conn_encrypt_wait: +63ba 680084d8 fetch 1 ,mem_wait_encryption +63bb 207a0000 rtn blank +63bc 70005500 jam conn_sm_standby ,mem_conn_sm +63bd 202063b5 branch host_create_conn_encrypt_start + +host_create_conn_encrypt_wait_clear: +63be 7000550c jam conn_sm_send_setup_complete ,mem_conn_sm +63bf 20600000 rtn + +host_auth: +63c0 6800804b fetch 1 ,mem_op +63c1 c28163c5 bbit1 op_inrand_req ,remote_auth +63c2 204062ef call tid_initiate +63c3 70007c08 jam lmp_in_rand ,mem_lmo_opcode2 +63c4 20204d04 branch cmd_exit + +remote_auth: +63c5 6800804b fetch 1 ,mem_op +63c6 793ffe02 set0 op_inrand_req ,pdata +63c7 6000804b store 1 ,mem_op +63c8 20406001 call lmp_accept_inrand +63c9 204062f8 call tid_set_reply +63ca 20204d04 branch cmd_exit + +pincode_reinit: +63cb 58000004 setarg 4 +63cc 6000c689 store 1 ,mem_pin_length +63cd 58003030 setarg 0x3030 +63ce e0a10000 istore 2 ,contw +63cf e0a10000 istore 2 ,contw +63d0 20600000 rtn + +twspi_reset: +63d1 47464031 bpatchx patch31_4 ,mem_patch31 +63d2 68108073 hfetch 1 ,core_gpio_oe3 +63d3 d8400006 arg 0x06 ,temp +63d4 9841fe00 ior temp ,pdata +63d5 60108073 hstore 1 ,core_gpio_oe3 +63d6 68108077 hfetch 1 ,core_gpio_out3 +63d7 9841fe00 ior temp ,pdata +63d8 60108077 hstore 1 ,core_gpio_out3 +63d9 204063ee call twspi_disable +63da 68108077 hfetch 1 ,core_gpio_out3 +63db 793ffe01 set0 1 ,pdata +63dc 793ffe02 set0 2 ,pdata +63dd 60108077 hstore 1 ,core_gpio_out3 +63de 2000001e nop 30 +63df 202063f2 branch twspi_enable + +twspi_reset2: +63e0 68108073 hfetch 1 ,core_gpio_oe3 +63e1 d84000c0 arg 0xc0 ,temp +63e2 9841fe00 ior temp ,pdata +63e3 60108073 hstore 1 ,core_gpio_oe3 +63e4 68108077 hfetch 1 ,core_gpio_out3 +63e5 9841fe00 ior temp ,pdata +63e6 60108077 hstore 1 ,core_gpio_out3 +63e7 204063ee call twspi_disable +63e8 68108077 hfetch 1 ,core_gpio_out3 +63e9 793ffe06 set0 6 ,pdata +63ea 793ffe07 set0 7 ,pdata +63eb 60108077 hstore 1 ,core_gpio_out3 +63ec 2000001e nop 30 +63ed 202063f6 branch twspi_enable2 + +twspi_disable: +63ee 68108081 hfetch 1 ,core_gpio_sel1 +63ef 1fe17efc and pdata ,0xfc ,pdata +63f0 60108081 hstore 1 ,core_gpio_sel1 +63f1 20600000 rtn + +twspi_enable: +63f2 68108081 hfetch 1 ,core_gpio_sel1 +63f3 1fe1fe01 or pdata ,0x01 ,pdata +63f4 60108081 hstore 1 ,core_gpio_sel1 +63f5 20600000 rtn + +twspi_enable2: +63f6 68108081 hfetch 1 ,core_gpio_sel1 +63f7 1fe1fe03 or pdata ,0x03 ,pdata +63f8 793ffe04 set0 4 ,pdata +63f9 60108081 hstore 1 ,core_gpio_sel1 +63fa 20600000 rtn + +sensor_read: +63fb 1fe22400 copy pdata ,regb +63fc 2040640f call spi_ncs_enable +63fd 20000064 nop 100 +63fe 1a427e00 copy regb ,pdata +63ff 20406414 call twspi_read +6400 1fe22400 copy pdata ,regb +6401 20406411 call spi_ncs_disable +6402 20000064 nop 100 +6403 1a427e00 copy regb ,pdata +6404 20600000 rtn + +sensor_write: +6405 1fe22400 copy pdata ,regb +6406 2040640f call spi_ncs_enable +6407 20000064 nop 100 +6408 1a427e00 copy regb ,pdata +6409 20406413 call twspi_write +640a 20406411 call spi_ncs_disable +640b 20000064 nop 100 +640c 20600000 rtn + +spi_ncs_gpio_init: +640d 6808c214 fetcht 1 ,mem_spi_ncs_gpio +640e 2020680e branch gpio_config_output + +spi_ncs_enable: +640f 6808c214 fetcht 1 ,mem_spi_ncs_gpio +6410 20206829 branch gpio_out_active + +spi_ncs_disable: +6411 6808c214 fetcht 1 ,mem_spi_ncs_gpio +6412 20206825 branch gpio_out_inactive + +twspi_write: +6413 202064ec branch spid_write_reg + +twspi_read: +6414 202064f3 branch spid_read_reg + +read_function_aes: +6415 24346419 nbranch read_function ,user +6416 68108085 hfetch 1 ,core_gpio_key2 +6417 1fe1fe02 or_into 0x2 ,pdata +6418 60108085 hstore 1 ,core_gpio_key2 + +read_function: +6419 18427c00 copy temp ,null +641a 2022e41c branch read_fuction_zero ,zero +641b 1a627a00 copy regc ,pc + +read_fuction_zero: +641c 2fcc0000 isolate0 0 ,null +641d 202064b9 branch set_ucode_status + +get_block_header: +641e 18000404 force 4 ,temp + +get_block_header0: +641f da2001fe arg mem_ucode_buf ,rega +6420 68108085 hfetch 1 ,core_gpio_key2 +6421 1fe17efd and_into 0xfd ,pdata +6422 60108085 hstore 1 ,core_gpio_key2 +6423 20406419 call read_function +6424 da2055aa arg 0x55aa ,rega +6425 680101fe fetch 2 ,mem_ucode_buf +6426 e8c90000 ifetcht 2 ,contr +6427 9a267c00 isub rega ,null +6428 20600000 rtn + +read_first_block: +6429 d8400002 arg 2 ,temp +642a da200204 arg mem_ucode_ptr ,rega +642b 20406419 call read_function +642c 68010204 fetch 2 ,mem_ucode_ptr +642d 600101f7 store 2 ,mem_addr_mi +642e 20546430 call get_iv ,user +642f 20600000 rtn + +get_iv: +6430 d8400010 arg 16 ,temp +6431 da200206 arg mem_ucode_keybuf ,rega +6432 68108085 hfetch 1 ,core_gpio_key2 +6433 1fe17efd and_into 0xfd ,pdata +6434 60108085 hstore 1 ,core_gpio_key2 +6435 20406419 call read_function +6436 d8c00206 arg mem_ucode_keybuf ,contr +6437 df200010 arg 16 ,loopcnt +6438 20407478 call aes_load_data +6439 20407428 call aes_init +643a 20407491 call aes_clear_data +643b 20207422 branch do_aes_cbc + +load_storage: +643c 7856fc00 disable match +643d 2040641e call get_block_header +643e 24628000 nrtn zero +643f 7836fc00 enable match +6440 70802380 jam 0x80 ,core_ucode_ctrl +6441 70802200 jam 0 ,core_ucode_hi +6442 70802400 jam 0 ,core_ucode_low +6443 da208025 arg core_ucode_data ,rega +6444 20406415 call read_function_aes +6445 70802300 jam 0x0 ,core_ucode_ctrl + +load_storage_loop: +6446 d8400006 arg 6 ,temp +6447 2040641f call get_block_header0 +6448 24628000 nrtn zero +6449 e8c10000 ifetch 2 ,contr +644a 98002200 iforce rega +644b 20406419 call read_function +644c 20206446 branch load_storage_loop + +reload_eeprom: +644d 20407f99 call clean_mem +644e 58001000 setarg 0x1000 +644f 600101f7 store 2 ,mem_addr_mi +6450 da6065e5 arg iicd_read_eep ,regc +6451 df200002 arg 2 ,loopcnt + +reload_eeprom_loop: +6452 2040641e call get_block_header +6453 24628000 nrtn zero +6454 680101f7 fetch 2 ,mem_addr_mi +6455 1ff0fe00 byteswap pdata ,pdata +6456 9840fe00 iadd temp ,pdata +6457 1ff0fe00 byteswap pdata ,pdata +6458 600101f7 store 2 ,mem_addr_mi +6459 c2006452 loop reload_eeprom_loop +645a 20206446 branch load_storage_loop + +loadcode: +645b 20407f99 call clean_mem +645c 78547c00 disable user +645d 2040666a call otp_enable_chgpump +645e 58000000 setarg otp_ucode_flag +645f da2001f3 arg mem_otp_ucode_flag ,rega +6460 d8400002 arg 2 ,temp +6461 204066b3 call otpd_read_data +6462 680101f3 fetch 2 ,mem_otp_ucode_flag +6463 c303e46e bbit0 otp_uflag_aes ,loadcode_otp +6464 70805025 jam 0x25 ,core_clkoff +6465 580007f0 setarg otp_ucode_aeskey +6466 da200206 arg mem_ucode_keybuf ,rega +6467 d8400010 arg 16 ,temp +6468 204066b3 call otpd_read_data +6469 70800608 jam lock_otp ,core_misc_ctrl +646a 7920002b set1 mark_otp_encrypt ,mark +646b d8c00206 arg mem_ucode_keybuf ,contr +646c 20407484 call load_key +646d 78347c00 enable user + +loadcode_otp: +646e 7041da00 jam 0 ,mem_loadcode_times + +loadcode_otp_2: +646f 204064b0 call loadcode_check_times +6470 680101f3 fetch 2 ,mem_otp_ucode_flag +6471 1ff0fe00 byteswap pdata ,pdata +6472 d84007ff arg 0x7ff ,temp +6473 98417e00 iand temp ,pdata +6474 2022e47b branch loadcode_iic ,zero +6475 2040666f call otp_set_addr +6476 da6066b8 arg otpd_read_code ,regc +6477 20546430 call get_iv ,user +6478 2040643c call load_storage +6479 680081f2 fetch 1 ,mem_ucode_status +647a c300646f bbit0 0 ,loadcode_otp_2 + +loadcode_iic: +647b 2040666d call otp_disable_chgpump +647c 7041da00 jam 0 ,mem_loadcode_times + +loadcode_iic_2: +647d 204064b0 call loadcode_check_times +647e 204065c2 call clear_eeprom_size_2k +647f 680081f3 fetch 1 ,mem_otp_ucode_flag +6480 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi +6481 204064aa call loadcode_iic_by_eeprom +6482 2436e486 nbranch loadcode_iic_eeprom_2k ,match +6483 680081f2 fetch 1 ,mem_ucode_status +6484 c300647d bbit0 0 ,loadcode_iic_2 +6485 2020649b branch loadcode_hci + +loadcode_iic_eeprom_2k: +6486 204065bf call set_eeprom_size_2k +6487 680081f3 fetch 1 ,mem_otp_ucode_flag +6488 c283648e bbit1 otp_uflag_skip_eep ,loadcode_spi +6489 204064aa call loadcode_iic_by_eeprom +648a 2436e48e nbranch loadcode_spi ,match +648b 680081f2 fetch 1 ,mem_ucode_status +648c c300647d bbit0 0 ,loadcode_iic_2 +648d 2020649b branch loadcode_hci + +loadcode_spi: +648e 7041da00 jam 0 ,mem_loadcode_times + +loadcode_spi_2: +648f 204064b0 call loadcode_check_times +6490 680081f3 fetch 1 ,mem_otp_ucode_flag +6491 c282e49b bbit1 otp_uflag_skip_flash ,loadcode_hci +6492 58000000 setarg 0x0 +6493 600181f6 store 3 ,mem_addr_hi +6494 20406502 call spid_init_flash +6495 da606578 arg spid_load_flash ,regc +6496 20406429 call read_first_block +6497 2040643c call load_storage +6498 2436e49b nbranch loadcode_hci ,match +6499 680081f2 fetch 1 ,mem_ucode_status +649a c300648f bbit0 0 ,loadcode_spi_2 + +loadcode_hci: +649b c515e49d bmark1 mark_otp_encrypt ,loadcode_hci_enc +649c 204064a3 call clear_key_buf + +loadcode_hci_enc: +649d 680081f3 fetch 1 ,mem_otp_ucode_flag +649e c30264a3 bbit0 otp_uflag_hci ,clear_key_buf +649f 70805021 jam 0x21 ,core_clkoff +64a0 20404c0e call hci_init + +loadcode_hci_loop: +64a1 20404c2e call hci_rx_packet +64a2 202064a1 branch loadcode_hci_loop + +clear_key_buf: +64a3 58000000 setarg 0 +64a4 60040206 store 8 ,mem_ucode_keybuf +64a5 6004020e store 8 ,mem_ucode_keybuf + 8 +64a6 18007004 force regidx_key ,regext_index +64a7 20407492 call aes_clear +64a8 70805021 jam 0x21 ,core_clkoff +64a9 20600000 rtn + +loadcode_iic_by_eeprom: +64aa 58000000 setarg 0x0 +64ab 600101f7 store 2 ,mem_addr_mi +64ac da6065e5 arg iicd_read_eep ,regc +64ad 204065a3 call iicd_init_12m +64ae 20406429 call read_first_block +64af 2020643c branch load_storage + +loadcode_check_times: +64b0 6800c1da fetch 1 ,mem_loadcode_times +64b1 1fe0fe01 increase 1 ,pdata +64b2 1fe67c03 sub pdata ,3 ,null +64b3 242164b6 nbranch loadcode_error ,positive +64b4 6000c1da store 1 ,mem_loadcode_times +64b5 20600000 rtn + +loadcode_error: +64b6 204064a3 call clear_key_buf +64b7 20407fa1 call ice_break +64b8 20600000 rtn + +set_ucode_status: +64b9 680081f2 fetch 1 ,mem_ucode_status +64ba 1fe3fe00 lshift pdata ,pdata +64bb 7920fe00 setflag true ,0 ,pdata +64bc 2a2c000f isolate0 15 ,rega +64bd 20608000 rtn true +64be 600081f2 store 1 ,mem_ucode_status +64bf 20600000 rtn + +decrypt_code: +64c0 68108085 hfetch 1 ,core_gpio_key2 +64c1 c4008000 rtnbit0 1 +64c2 202064c6 branch decrypt_code_skip + +decrypt_code_loop: +64c3 6810812c hfetch 1 ,core_dma_status +64c4 afefffff qisolate1 pdata +64c5 20608000 rtn true + +decrypt_code_skip: +64c6 68108108 hfetch 1 ,core_misc_status +64c7 c300e4c3 bbit0 1 ,decrypt_code_loop +64c8 20407422 call do_aes_cbc +64c9 202064c3 branch decrypt_code_loop + +load_ucode: +64ca 68014199 fetch 2 ,mem_patch_ptr +64cb 207a0000 rtn blank +64cc 70802380 jam 0x80 ,core_ucode_ctrl +64cd 70802200 jam 0 ,core_ucode_hi +64ce 70802400 jam 0 ,core_ucode_low +64cf 6809419b fetcht 2 ,mem_patch_len +64d0 184bf200 lshift2 temp ,loopcnt +64d1 98000c00 iforce contr + +load_ucode_loop: +64d2 e8c08000 ifetch 1 ,contr +64d3 60108025 hstore 1 ,core_ucode_data +64d4 c20064d2 loop load_ucode_loop +64d5 70802300 jam 0x0 ,core_ucode_ctrl +64d6 20600000 rtn + +spid_init: +64d7 4746c031 bpatchx patch31_5 ,mem_patch31 +64d8 204064dd call spid_init_common +64d9 202063f2 branch twspi_enable + +spid_init2: +64da 204064dd call spid_init_common +64db 204063ee call twspi_disable +64dc 202063f6 branch twspi_enable2 + +spid_init_common: +64dd 6800c212 fetch 1 ,mem_spi_init_clk +64de 60108086 hstore 1 ,core_spid_ctrl +64df 6800c213 fetch 1 ,mem_spi_init_delay_time +64e0 60108087 hstore 1 ,core_spid_delay +64e1 580001f5 setarg mem_spid_tbuf +64e2 6011008a hstore 2 ,core_spid_txaddr +64e3 580001fa setarg mem_spid_rbuf +64e4 6011008c hstore 2 ,core_spid_rxaddr +64e5 202063ee branch twspi_disable + +spid_reset: +64e6 68108086 hfetch 1 ,core_spid_ctrl +64e7 79207e07 set1 7 ,pdata +64e8 60108086 hstore 1 ,core_spid_ctrl +64e9 793ffe07 set0 7 ,pdata +64ea 60108086 hstore 1 ,core_spid_ctrl +64eb 20600000 rtn + +spid_write_reg: +64ec 79207e07 set1 7 ,pdata +64ed 600101f5 store 2 ,mem_spid_tbuf +64ee 47474031 bpatchx patch31_6 ,mem_patch31 +64ef 70808802 jam 2 ,core_spid_txlen +64f0 70808e00 jam 0 ,core_spid_rxlen +64f1 70800602 jam spid_start ,core_misc_ctrl +64f2 202064fc branch wait_spid_done + +spid_read_reg: +64f3 18000401 force 1 ,temp + +spid_read_regs: +64f4 600081f5 store 1 ,mem_spid_tbuf +64f5 4747c031 bpatchx patch31_7 ,mem_patch31 +64f6 70808801 jam 1 ,core_spid_txlen +64f7 6019008e hstoret 2 ,core_spid_rxlen +64f8 70800602 jam spid_start ,core_misc_ctrl +64f9 204064fc call wait_spid_done +64fa 680081fa fetch 1 ,mem_spid_rbuf +64fb 20600000 rtn + +wait_spid_done: +64fc 680140d6 fetch 2 ,mem_afh_error_total +64fd 1fe0fe01 increase 1 ,pdata +64fe 600140d6 store 2 ,mem_afh_error_total +64ff 6810812c hfetch 1 ,core_dma_status +6500 c301e4fc bbit0 spid_done ,wait_spid_done +6501 20600000 rtn + +spid_init_flash: +6502 70808640 jam 0x40 ,core_spid_ctrl +6503 70808700 jam 0x0 ,core_spid_delay +6504 68108081 hfetch 1 ,core_gpio_sel1 +6505 793ffe00 set0 0 ,pdata +6506 79207e01 set1 1 ,pdata +6507 60108081 hstore 1 ,core_gpio_sel1 +6508 58000000 setarg 0 +6509 600201f5 store 4 ,mem_spid_tbuf +650a 20600000 rtn + +spid_unlock_flash: +650b 58000000 setarg 0 +650c 6011008e hstore 2 ,core_spid_rxlen +650d 58000001 setarg 1 +650e 60110088 hstore 2 ,core_spid_txlen +650f 580001f5 setarg mem_spid_tbuf +6510 6011008a hstore 2 ,core_spid_txaddr +6511 7001f506 jam 6 ,mem_spid_tbuf +6512 70800602 jam spid_start ,core_misc_ctrl +6513 202064fc branch wait_spid_done + +flash_write: +6514 78547c00 disable user +6515 1fe22400 copy pdata ,regb +6516 6800c239 fetch 1 ,mem_spi_write_flash_sm +6517 c1800000 rtnne flash_sm_no_buys +6518 78347c00 enable user +6519 1a427e00 copy regb ,pdata +651a 20206522 branch flash_write_start + +flash_write_spi_sm_timer: +651b 6800c239 fetch 1 ,mem_spi_write_flash_sm +651c c000e522 beq flash_sm_start ,flash_write_start +651d c0016528 beq flash_sm_erase_sector ,flash_erase_sector +651e c001e530 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector +651f c0026537 beq flash_sm_write_data ,flash_write_data +6520 c002e53d beq flash_sm_wait_write_data ,flash_wait_write_data +6521 20600000 rtn + +flash_write_start: +6522 6001c232 store 3 ,mem_spi_write_addr +6523 1a227e00 copy rega ,pdata +6524 60014235 store 2 ,mem_spi_write_ptr +6525 60094237 storet 2 ,mem_spi_write_len +6526 70423902 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +6527 20206502 branch spid_init_flash + +flash_erase_sector: +6528 20406502 call spid_init_flash +6529 70423903 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +652a 2040650b call spid_unlock_flash +652b da2001f5 arg mem_spid_tbuf ,rega +652c 6801c232 fetch 3 ,mem_spi_write_addr +652d 70808804 jam 4 ,core_spid_txlen +652e d8400020 arg flash_command_sector_erase ,temp +652f 20206556 branch spid_write_flash_common + +flash_wait_erase_sector: +6530 20406502 call spid_init_flash +6531 2040650b call spid_unlock_flash +6532 58000005 setarg flash_read_satus +6533 204064f3 call spid_read_reg +6534 c3800000 rtnbit1 flash_status_wip +6535 70423904 jam flash_sm_write_data ,mem_spi_write_flash_sm +6536 20600000 rtn + +flash_write_data: +6537 20406502 call spid_init_flash +6538 70423905 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +6539 2040650b call spid_unlock_flash +653a 2040654a call flash_data_preserve +653b 20406552 call spid_write_flash +653c 20206545 branch flash_data_recover + +flash_wait_write_data: +653d 20406502 call spid_init_flash +653e 2040650b call spid_unlock_flash +653f 58000005 setarg flash_read_satus +6540 204064f3 call spid_read_reg +6541 c3800000 rtnbit1 flash_status_wip +6542 70423900 jam flash_sm_no_buys ,mem_spi_write_flash_sm +6543 68014201 fetch 2 ,mem_cb_spi_flash_write_complate +6544 20207f9c branch callback_func + +flash_data_recover: +6545 68020aa2 fetch 4 ,mem_temp +6546 68094235 fetcht 2 ,mem_spi_write_ptr +6547 184085fc increase -4 ,temp +6548 e0420000 istore 4 ,temp +6549 20600000 rtn + +flash_data_preserve: +654a 68094235 fetcht 2 ,mem_spi_write_ptr +654b 18422200 copy temp ,rega +654c 184085fc increase -4 ,temp +654d e8420000 ifetch 4 ,temp +654e 60020aa2 store 4 ,mem_temp +654f 68094237 fetcht 2 ,mem_spi_write_len +6550 6801c232 fetch 3 ,mem_spi_write_addr +6551 20600000 rtn + +spid_write_flash: +6552 18408404 increase 4 ,temp +6553 60190088 hstoret 2 ,core_spid_txlen +6554 d8400002 arg flash_command_write_data ,temp +6555 1a20a3fc increase -4 ,rega + +spid_write_flash_common: +6556 e2288000 istoret 1 ,rega +6557 1ff10400 rshift16 pdata ,temp +6558 e0a88000 istoret 1 ,contw +6559 1fec8400 rshift8 pdata ,temp +655a e0a88000 istoret 1 ,contw +655b e0a08000 istore 1 ,contw +655c 1a227e00 deposit rega +655d 6011008a hstore 2 ,core_spid_txaddr +655e 58000000 setarg 0 +655f 6011008e hstore 2 ,core_spid_rxlen +6560 70800602 jam spid_start ,core_misc_ctrl +6561 202064fc branch wait_spid_done + +spid_read_flash: +6562 6019008e hstoret 2 ,core_spid_rxlen +6563 1ff10400 rshift16 pdata ,temp +6564 600881f6 storet 1 ,mem_addr_hi +6565 1fec8400 rshift8 pdata ,temp +6566 600881f7 storet 1 ,mem_addr_mi +6567 600081f8 store 1 ,mem_addr_lo +6568 58000004 setarg 4 +6569 60110088 hstore 2 ,core_spid_txlen +656a 7001f503 jam flash_command_read_data ,mem_spid_tbuf +656b 580001f5 setarg mem_spid_tbuf +656c 6011008a hstore 2 ,core_spid_txaddr +656d 1a227e00 deposit rega +656e 6011008c hstore 2 ,core_spid_rxaddr +656f 68108086 hfetch 1 ,core_spid_ctrl +6570 2a2c000f isolate0 15 ,rega +6571 7920fe06 setflag true ,6 ,pdata +6572 60108086 hstore 1 ,core_spid_ctrl +6573 70800602 jam spid_start ,core_misc_ctrl + +spi_read_flash_wait: +6574 6810812c hfetch 1 ,core_dma_status +6575 c283e574 bbit1 7 ,spi_read_flash_wait +6576 d8e00003 arg spid_done ,queue +6577 202064fc branch wait_spid_done + +spid_load_flash: +6578 6019008e hstoret 2 ,core_spid_rxlen +6579 58000004 setarg 4 +657a 60110088 hstore 2 ,core_spid_txlen +657b 7001f503 jam 3 ,mem_spid_tbuf +657c 580001f5 setarg mem_spid_tbuf +657d 6011008a hstore 2 ,core_spid_txaddr +657e 1a227e00 deposit rega +657f 6011008c hstore 2 ,core_spid_rxaddr +6580 68108086 hfetch 1 ,core_spid_ctrl +6581 2a2c000f isolate0 15 ,rega +6582 7920fe06 setflag true ,6 ,pdata +6583 60108086 hstore 1 ,core_spid_ctrl +6584 70800602 jam spid_start ,core_misc_ctrl + +spi_load_flash_wait: +6585 6810812c hfetch 1 ,core_dma_status +6586 c283e585 bbit1 7 ,spi_load_flash_wait +6587 d8e00003 arg spid_done ,queue +6588 204064c0 call decrypt_code +6589 204064fc call wait_spid_done +658a 2feffe02 isolate1 spid_crcok ,pdata +658b 204064b9 call set_ucode_status +658c 680081f6 fetch 1 ,mem_addr_hi +658d 1ff02400 lshift16 pdata ,regb +658e 680081f7 fetch 1 ,mem_addr_mi +658f 1fed7e00 lshift8 pdata ,pdata +6590 9a41a400 ior regb ,regb +6591 680081f8 fetch 1 ,mem_addr_lo +6592 9a41fe00 ior regb ,pdata +6593 9840fe00 iadd temp ,pdata +6594 600081f8 store 1 ,mem_addr_lo +6595 1fecfe00 rshift8 pdata ,pdata +6596 600081f7 store 1 ,mem_addr_mi +6597 1fecfe00 rshift8 pdata ,pdata +6598 600081f6 store 1 ,mem_addr_hi +6599 20600000 rtn + +soft_reset_chip: +659a 70801001 jam 1 ,core_reset +659b 20600000 rtn + +iic_init_390k: +659c 7080910c jam 12 ,core_iicd_scl_low +659d 7080920d jam 13 ,core_iicd_scl_high +659e 7080930d jam 13 ,core_iicd_start_setup +659f 7080940d jam 13 ,core_iicd_start_hold +65a0 7080950d jam 13 ,core_iicd_stop_setup +65a1 7080960c jam 12 ,core_iicd_data_setup +65a2 202065a9 branch iicd_init_gpio + +iicd_init_12m: +65a3 70809105 jam 5 ,core_iicd_scl_low +65a4 70809207 jam 7 ,core_iicd_scl_high +65a5 70809307 jam 7 ,core_iicd_start_setup +65a6 70809407 jam 7 ,core_iicd_start_hold +65a7 70809507 jam 7 ,core_iicd_stop_setup +65a8 70809605 jam 5 ,core_iicd_data_setup + +iicd_init_gpio: +65a9 6810807b hfetch 1 ,core_gpio_pu3 +65aa 1fe1fec0 or_into 0xc0 ,pdata +65ab 6010807b hstore 1 ,core_gpio_pu3 +65ac 68108081 hfetch 1 ,core_gpio_sel1 +65ad 1fe1fe10 or_into 0x10 ,pdata +65ae 60108081 hstore 1 ,core_gpio_sel1 +65af 20600000 rtn + +wait_iicd_done: +65b0 6810812c hfetch 1 ,core_dma_status +65b1 c302e5b0 bbit0 iicd_done ,wait_iicd_done +65b2 20600000 rtn + +iicd_read_data: +65b3 60110098 hstore 2 ,core_iicd_txlen +65b4 1a227e00 deposit rega +65b5 6011009a hstore 2 ,core_iicd_txaddr +65b6 1a427e00 deposit regb +65b7 6011009c hstore 2 ,core_iicd_rxaddr +65b8 18427e00 deposit temp +65b9 6011009e hstore 2 ,core_iicd_rxlen +65ba d8400001 arg 1 ,temp +65bb 7d3a0401 nsetflag blank ,1 ,temp +65bc 60108090 hstore 1 ,core_iicd_ctrl +65bd 70800604 jam iicd_start ,core_misc_ctrl +65be 202065b0 branch wait_iicd_done + +set_eeprom_size_2k: +65bf 79200028 set1 mark_eeprom_size ,mark +65c0 70421108 jam 0x08 ,mem_eeprom_block_size +65c1 20600000 rtn + +clear_eeprom_size_2k: +65c2 793f8028 set0 mark_eeprom_size ,mark +65c3 70421120 jam 0x20 ,mem_eeprom_block_size +65c4 20600000 rtn + +iicd_read_eep_data_size_2k: +65c5 6800c203 fetch 1 ,mem_eeprom_base +65c6 9a40fe00 iadd regb ,pdata +65c7 600081f7 store 1 ,mem_addr_mi +65c8 202065cc branch iicd_read_eep_size_2k + +iicd_read_eep_size_2k_lcadcode: +65c9 680101f7 fetch 2 ,mem_addr_mi +65ca 1ff0fe00 byteswap pdata ,pdata +65cb 600081f7 store 1 ,mem_addr_mi + +iicd_read_eep_size_2k: +65cc 58000003 setarg 3 +65cd 60110098 hstore 2 ,core_iicd_txlen +65ce 7001f6a0 jam 0xa0 ,mem_iicd_tbuf +65cf 7001f8a1 jam 0xa1 ,mem_iicd_tbuf + 2 +65d0 202065eb branch iicd_read_eep_common + +iicd_write_protect_eep_data: +65d1 60090aa2 storet 2 ,mem_temp +65d2 204065d6 call iicd_eeprom_write_enable +65d3 68090aa2 fetcht 2 ,mem_temp +65d4 20406606 call iicd_write_eep_data +65d5 202065dd branch iicd_eeprom_write_disable + +iicd_eeprom_write_enable: +65d6 6800c23a fetch 1 ,mem_eeprom_wp_gpio +65d7 c17f8000 rtneq gpio_disable +65d8 c30365db bbit0 6 ,iicd_wp_gpio_output_low +65d9 580249f0 setarg 150000 +65da 20402a8f call sleep + +iicd_wp_gpio_output_low: +65db 6808c23a fetcht 1 ,mem_eeprom_wp_gpio +65dc 20206829 branch gpio_out_active + +iicd_eeprom_write_disable: +65dd 6808c23a fetcht 1 ,mem_eeprom_wp_gpio +65de 20206825 branch gpio_out_inactive + +iicd_read_eep_data: +65df 47484032 bpatchx patch32_0 ,mem_patch32 +65e0 c51465c5 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +65e1 68014203 fetch 2 ,mem_eeprom_base +65e2 9a40fe00 iadd regb ,pdata +65e3 1ff0fe00 byteswap pdata ,pdata +65e4 600101f7 store 2 ,mem_addr_mi + +iicd_read_eep: +65e5 4748c032 bpatchx patch32_1 ,mem_patch32 +65e6 c51465c9 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +65e7 58000004 setarg 4 +65e8 60110098 hstore 2 ,core_iicd_txlen +65e9 7001f6a0 jam 0xa0 ,mem_iicd_tbuf +65ea 7001f9a1 jam 0xa1 ,mem_iicd_tbuf + 3 + +iicd_read_eep_common: +65eb 580001f6 setarg mem_iicd_tbuf +65ec 6011009a hstore 2 ,core_iicd_txaddr +65ed 6019009e hstoret 2 ,core_iicd_rxlen +65ee 1a227e00 deposit rega +65ef 6011009c hstore 2 ,core_iicd_rxaddr +65f0 58000002 setarg 2 +65f1 2a2c000f isolate0 15 ,rega +65f2 7920fe00 setflag true ,0 ,pdata +65f3 60108090 hstore 1 ,core_iicd_ctrl +65f4 70800604 jam iicd_start ,core_misc_ctrl +65f5 d8e00005 arg iicd_done ,queue +65f6 204064c0 call decrypt_code +65f7 204065b0 call wait_iicd_done +65f8 2feffe04 isolate1 iicd_crcok ,pdata +65f9 204064b9 call set_ucode_status +65fa c5146601 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +65fb 680101f7 fetch 2 ,mem_addr_mi +65fc 1ff0fe00 byteswap pdata ,pdata +65fd 9840fe00 iadd temp ,pdata +65fe 1ff0fe00 byteswap pdata ,pdata +65ff 600101f7 store 2 ,mem_addr_mi +6600 20600000 rtn + +iicd_read_eep_load_code_size_2k: +6601 680081f7 fetch 1 ,mem_addr_mi +6602 9840fe00 iadd temp ,pdata +6603 1ff0fe00 byteswap pdata ,pdata +6604 600101f7 store 2 ,mem_addr_mi +6605 20600000 rtn + +iicd_write_eep_data: +6606 68014203 fetch 2 ,mem_eeprom_base +6607 9a40fe00 iadd regb ,pdata + +iicd_write_ota_data: +6608 60010a9a store 2 ,mem_pdatatemp +6609 47494032 bpatchx patch32_2 ,mem_patch32 +660a 60090aa2 storet 2 ,mem_temp +660b 1a227e00 copy rega ,pdata +660c 60010ab9 store 2 ,mem_contr + +iicd_write_eep_loop: +660d 2040661d call iicd_eep_transparency +660e 68090ab2 fetcht 2 ,mem_regb +660f 68010ab9 fetch 2 ,mem_contr +6610 1fe22200 copy pdata ,rega +6611 68010a9a fetch 2 ,mem_pdatatemp +6612 2040663d call iicd_write_eep +6613 68010ab2 fetch 2 ,mem_regb +6614 68090ab9 fetcht 2 ,mem_contr +6615 98408400 iadd temp ,temp +6616 60090ab9 storet 2 ,mem_contr +6617 68090a9a fetcht 2 ,mem_pdatatemp +6618 98408400 iadd temp ,temp +6619 60090a9a storet 2 ,mem_pdatatemp +661a 68010aa2 fetch 2 ,mem_temp +661b 243a660d nbranch iicd_write_eep_loop ,blank +661c 20600000 rtn + +iicd_eep_transparency: +661d 4749c032 bpatchx patch32_3 ,mem_patch32 +661e 6800c211 fetch 1 ,mem_eeprom_block_size +661f 1fe0ffff increase -1 ,pdata +6620 68090a9a fetcht 2 ,mem_pdatatemp +6621 9841fe00 ior temp ,pdata +6622 1fe0fe01 increase 1 ,pdata +6623 60018ab6 store 3 ,mem_regc +6624 68010aa2 fetch 2 ,mem_temp +6625 9840fe00 iadd temp ,pdata +6626 68098ab6 fetcht 3 ,mem_regc +6627 98467e00 isub temp ,pdata +6628 2421662f nbranch iicd_eep_deal_short_packet ,positive +6629 60010aa2 store 2 ,mem_temp +662a 68018ab6 fetch 3 ,mem_regc +662b 68090a9a fetcht 2 ,mem_pdatatemp +662c 98467e00 isub temp ,pdata +662d 60010ab2 store 2 ,mem_regb +662e 20600000 rtn + +iicd_eep_deal_short_packet: +662f 68010aa2 fetch 2 ,mem_temp +6630 60010ab2 store 2 ,mem_regb +6631 58000000 setarg 0 +6632 60010aa2 store 2 ,mem_temp +6633 20600000 rtn + +iicd_write_eep_size_2k: +6634 18408402 increase 2 ,temp +6635 60190098 hstoret 2 ,core_iicd_txlen +6636 1a20a3fe increase -2 ,rega +6637 ea298000 ifetcht 3 ,rega +6638 18422400 copy temp ,regb +6639 d84000a0 arg 0xa0 ,temp +663a e2288000 istoret 1 ,rega +663b e0a08000 istore 1 ,contw +663c 2020664a branch iicd_write_eep_common + +iicd_write_eep: +663d 1fe22400 copy pdata ,regb +663e 474a4032 bpatchx patch32_4 ,mem_patch32 +663f c5146634 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +6640 1a427e00 copy regb ,pdata +6641 18408403 increase 3 ,temp +6642 60190098 hstoret 2 ,core_iicd_txlen +6643 1a20a3fd increase -3 ,rega +6644 ea298000 ifetcht 3 ,rega +6645 18422400 copy temp ,regb +6646 d84000a0 arg 0xa0 ,temp +6647 e2288000 istoret 1 ,rega +6648 1ff0fe00 byteswap pdata ,pdata +6649 e0a10000 istore 2 ,contw + +iicd_write_eep_common: +664a 1a227e00 deposit rega +664b 6011009a hstore 2 ,core_iicd_txaddr +664c 58000000 setarg 0 +664d 6011009e hstore 2 ,core_iicd_rxlen +664e 70809001 jam 1 ,core_iicd_ctrl +664f 70800604 jam iicd_start ,core_misc_ctrl +6650 204065b0 call wait_iicd_done +6651 1a427e00 copy regb ,pdata +6652 e2218000 istore 3 ,rega + +iic_check_eeprom_standby: +6653 474ac032 bpatchx patch32_5 ,mem_patch32 +6654 7001f900 jam 0 ,mem_iicd_tbuf + 3 + +iic_check_eeprom_standby_wait: +6655 58000001 setarg 1 +6656 60110098 hstore 2 ,core_iicd_txlen +6657 7001f6a0 jam 0xa0 ,mem_iicd_tbuf +6658 580001f6 setarg mem_iicd_tbuf +6659 6011009a hstore 2 ,core_iicd_txaddr +665a 58000000 setarg 0 +665b 6011009e hstore 2 ,core_iicd_rxlen +665c 6011009c hstore 2 ,core_iicd_rxaddr +665d 58000003 setarg 3 +665e 60108090 hstore 1 ,core_iicd_ctrl +665f 70800604 jam iicd_start ,core_misc_ctrl +6660 204065b0 call wait_iicd_done +6661 6810812c hfetch 1 ,core_dma_status +6662 c4030000 rtnbit0 iicd_ack +6663 200005dc nop 1500 +6664 680081f9 fetch 1 ,mem_iicd_tbuf + 3 +6665 1fe0fe01 increase 1 ,pdata +6666 600081f9 store 1 ,mem_iicd_tbuf + 3 +6667 1fe67c28 sub pdata ,40 ,null +6668 24610000 nrtn positive +6669 20206655 branch iic_check_eeprom_standby_wait + +otp_enable_chgpump: +666a 70897370 jam 0x70 ,rfen_chgpump +666b 20000bb8 nop param_chgpump_delay +666c 20600000 rtn + +otp_disable_chgpump: +666d 70897330 jam 0x30 ,rfen_chgpump +666e 20600000 rtn + +otp_set_addr: +666f 1fe9fe00 lshift3 pdata ,pdata +6670 60110045 hstore 2 ,core_otp_addr +6671 70804b00 jam 0 ,core_otpd_ctrl +6672 20600000 rtn + +otp_write: +6673 2040666f call otp_set_addr +6674 204066a0 call otp_ce + +otp_program: +6675 ea288000 ifetcht 1 ,rega +6676 1a20a201 increase 1 ,rega +6677 18000e00 force 0 ,queue + +otp_program_bit: +6678 a84c0000 qisolate0 temp +6679 2020e697 branch otp_skip_0 ,true +667a 68108046 hfetch 1 ,core_otp_din +667b 79207e06 set1 6 ,pdata +667c 79207e07 set1 7 ,pdata +667d 60108046 hstore 1 ,core_otp_din +667e 70804702 jam 0x02 ,core_otp_ctrl +667f 70804782 jam 0x82 ,core_otp_ctrl +6680 793ffe07 set0 7 ,pdata +6681 60108046 hstore 1 ,core_otp_din +6682 7080478a jam 0x8a ,core_otp_ctrl +6683 2000000b nop 11 +6684 708047ca jam 0xca ,core_otp_ctrl +6685 20000021 nop 33 +6686 7080474a jam 0x4a ,core_otp_ctrl +6687 2000002c nop 44 +6688 708047ca jam 0xca ,core_otp_ctrl +6689 20000016 nop 22 +668a 7080478a jam 0x8a ,core_otp_ctrl +668b 20000021 nop 33 +668c 70804782 jam 0x82 ,core_otp_ctrl +668d 20000001 nop 1 +668e 70804792 jam 0x92 ,core_otp_ctrl +668f 2000000a nop 10 +6690 708047b2 jam 0xb2 ,core_otp_ctrl +6691 68108007 hfetch 1 ,core_otp_rdata +6692 70804792 jam 0x92 ,core_otp_ctrl +6693 20000001 nop 1 +6694 70804782 jam 0x82 ,core_otp_ctrl +6695 afec0000 qisolate0 pdata +6696 2020e678 branch otp_program_bit ,true + +otp_skip_0: +6697 68110045 hfetch 2 ,core_otp_addr +6698 1fe0fe01 increase 1 ,pdata +6699 60110045 hstore 2 ,core_otp_addr +669a 18e08e01 increase 1 ,queue +669b 28e01e08 compare 8 ,queue ,0xf +669c 2420e678 nbranch otp_program_bit ,true +669d c2006675 loop otp_program +669e 70804783 jam 0x83 ,core_otp_ctrl +669f 20600000 rtn + +otp_ce: +66a0 70804782 jam 0x82 ,core_otp_ctrl +66a1 2000000c nop 12 +66a2 70804780 jam 0x80 ,core_otp_ctrl +66a3 70804782 jam 0x82 ,core_otp_ctrl +66a4 20000096 nop 150 +66a5 20600000 rtn + +otpd_read_init: +66a6 204066a0 call otp_ce +66a7 708047a2 jam 0xa2 ,core_otp_ctrl +66a8 1a227e00 deposit rega +66a9 60110048 hstore 2 ,core_otpd_addr +66aa 7920040b set1 11 ,temp +66ab 2fec000f isolate0 15 ,pdata +66ac 7920840f setflag true ,15 ,temp +66ad 6019004a hstoret 2 ,core_otpd_len +66ae 70800601 jam otpd_start ,core_misc_ctrl +66af 20600000 rtn + +otpd_wait_end: +66b0 6810812c hfetch 1 ,core_dma_status +66b1 c300e6b0 bbit0 otpd_done ,otpd_wait_end +66b2 20600000 rtn + +otpd_read_data: +66b3 2040666f call otp_set_addr +66b4 204066a6 call otpd_read_init +66b5 204066b0 call otpd_wait_end +66b6 70804783 jam 0x83 ,core_otp_ctrl +66b7 20600000 rtn + +otpd_read_code: +66b8 68110124 hfetch 2 ,core_current_otp_addr +66b9 60110045 hstore 2 ,core_otp_addr +66ba 204066a6 call otpd_read_init +66bb d8e00001 arg otpd_done ,queue +66bc 204064c0 call decrypt_code +66bd 204066b0 call otpd_wait_end +66be 2feffe00 isolate1 otpd_crcok ,pdata +66bf 204064b9 call set_ucode_status +66c0 70804783 jam 0x83 ,core_otp_ctrl +66c1 20600000 rtn + +uartd_prepare_tx: +66c2 6811005e hfetch 2 ,core_uart_twptr +66c3 98001400 iforce contwu +66c4 20600000 rtn + +uartd_send: +66c5 19427e00 deposit contwu +66c6 6011005e hstore 2 ,core_uart_twptr +66c7 20600000 rtn + +uartd_rxdone: +66c8 18627e00 deposit contru +66c9 60110058 hstore 2 ,core_uart_rrptr +66ca 20600000 rtn + +uartd_prepare_rx: +66cb 68110058 hfetch 2 ,core_uart_rrptr +66cc 1fe20600 copy pdata ,contru +66cd 20600000 rtn + +uart_set_baud_by_mem: +66ce 68014243 fetch uart_baud_len ,mem_baud +66cf 60110052 hstore uart_baud_len ,core_uart_baud +66d0 20600000 rtn + +uart_copy_tx_bytes_fast: +66d1 1f227e00 deposit loopcnt +66d2 207a0000 rtn blank + +uart_copy_tx_bytes_fast_loop: +66d3 1f20f3f8 increase -8 ,loopcnt +66d4 204166de call uart_tx_8_bytes ,positive +66d5 20628000 rtn zero +66d6 202166d3 branch uart_copy_tx_bytes_fast_loop ,positive +66d7 1f20f208 increase 8 ,loopcnt + +uart_copy_tx_bytes_fast_loop_four: +66d8 1f20f3fc increase -4 ,loopcnt +66d9 204166e1 call uart_tx_4_bytes ,positive +66da 20628000 rtn zero +66db 202166d8 branch uart_copy_tx_bytes_fast_loop_four ,positive +66dc 1f20f204 increase 4 ,loopcnt +66dd 202066e4 branch uart_copy_tx_bytes + +uart_tx_8_bytes: +66de e8c40000 ifetch 8 ,contr +66df e1440000 istore 8 ,contwu +66e0 20600000 rtn + +uart_tx_4_bytes: +66e1 e8c20000 ifetch 4 ,contr +66e2 e1420000 istore 4 ,contwu +66e3 20600000 rtn + +uart_copy_tx_bytes: +66e4 1f227e00 deposit loopcnt +66e5 207a0000 rtn blank + +uart_copy_tx_bytes_loop: +66e6 e8c08000 ifetch 1 ,contr +66e7 e1408000 istore 1 ,contwu +66e8 c20066e6 loop uart_copy_tx_bytes_loop +66e9 20600000 rtn + +uart_copy_rx_bytes_fast: +66ea 1f227e00 deposit loopcnt +66eb 207a0000 rtn blank + +uart_copy_rx_bytes_fast_loop: +66ec 1f20f3f8 increase -8 ,loopcnt +66ed 204166f7 call uart_rx_8_bytes ,positive +66ee 20628000 rtn zero +66ef 202166ec branch uart_copy_rx_bytes_fast_loop ,positive +66f0 1f20f208 increase 8 ,loopcnt + +uart_copy_rx_bytes_fast_loop_four: +66f1 1f20f3fc increase -4 ,loopcnt +66f2 204166fa call uart_rx_4_bytes ,positive +66f3 20628000 rtn zero +66f4 202166f1 branch uart_copy_rx_bytes_fast_loop_four ,positive +66f5 1f20f204 increase 4 ,loopcnt +66f6 202066fd branch uart_copy_rx_bytes + +uart_rx_8_bytes: +66f7 e8640000 ifetch 8 ,contru +66f8 e0a40000 istore 8 ,contw +66f9 20600000 rtn + +uart_rx_4_bytes: +66fa e8620000 ifetch 4 ,contru +66fb e0a20000 istore 4 ,contw +66fc 20600000 rtn + +uart_copy_rx_bytes: +66fd 1f227e00 deposit loopcnt +66fe 207a0000 rtn blank + +uart_copy_rx_bytes_loop: +66ff e8608000 ifetch 1 ,contru +6700 e0a08000 istore 1 ,contw +6701 c20066ff loop uart_copy_rx_bytes_loop +6702 20600000 rtn + +uart_copy_rx2tx: +6703 1f227e00 deposit loopcnt +6704 207a0000 rtn blank + +uart_copy_rx2tx_loop: +6705 e8608000 ifetch 1 ,contru +6706 e1408000 istore 1 ,contwu +6707 c2006705 loop uart_copy_rx2tx_loop +6708 20600000 rtn + +app_store_nvram_event: +6709 700a993d jam bt_evt_store_nvram ,mem_fifo_temp +670a 20207d86 branch ui_ipc_send_event + +check_51cmd_store_reconn_info: + +check_51cmd_update_device_record: +670b 474b4032 bpatchx patch32_6 ,mem_patch32 +670c 6800c217 fetch 1 ,mem_nv_data_number +670d 207a0000 rtn blank +670e 204067a3 call check_nvram +670f 2042e7a9 call init_device_list ,zero +6710 2040673e call nvram_find_addr_from_bd_list + +write_device_record: +6711 6800c217 fetch 1 ,mem_nv_data_number +6712 1fe22600 icopy regc +6713 68094215 fetcht 2 ,mem_nv_data_ptr +6714 6009018c storet 2 ,mem_list_item_ptr + +write_device_loop_find: +6715 1a627e00 copy regc ,pdata +6716 203a6709 branch app_store_nvram_event ,blank +6717 1a60a7ff increase -1 ,regc +6718 18422200 copy temp ,rega +6719 ea208000 ifetch 1 ,rega +671a 68088184 fetcht 1 ,mem_select_list_item +671b 98467c00 isub temp ,null +671c 2042e725 call set_index_finded_device ,zero +671d 20216721 branch write_device_loop_find0 ,positive +671e ea208000 ifetch 1 ,rega +671f 1fe0fe01 increase 1 ,pdata +6720 e2208000 istore 1 ,rega + +write_device_loop_find0: +6721 6809018c fetcht 2 ,mem_list_item_ptr +6722 18408422 increase nv_data_len ,temp +6723 6009018c storet 2 ,mem_list_item_ptr +6724 20206715 branch write_device_loop_find + +set_index_finded_device: +6725 58000000 setarg 0 +6726 e2208000 istore 1 ,rega +6727 68008185 fetch 1 ,mem_temp_reconn_record +6728 e0a08000 istore 1 ,contw +6729 c099e733 bne rec_3_mode ,set_index_finded_device_ble_mode +672a da4041be arg mem_link_key ,regb + +set_index_find_device_master_addr: +672b e8c30000 ifetch 6 ,contr +672c e0a40000 istore 8 ,contw +672d 58000000 setarg 0 +672e e0a40000 istore 8 ,contw +672f 1a420c00 copy regb ,contr + +store_rec_data_common: +6730 20407ebf call memcpy16 +6731 18007c01 force 1 ,null +6732 20600000 rtn + +set_index_finded_device_ble_mode: +6733 c01b6737 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +6734 c01be73b beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +6735 da404419 arg mem_le_ltk ,regb +6736 2020672b branch set_index_find_device_master_addr + +set_index_finded_device_irk: +6737 d8c044d5 arg mem_le_irk ,contr +6738 20407ebf call memcpy16 + +store_ble_rec_data_common: +6739 d8c04419 arg mem_le_ltk ,contr +673a 20206730 branch store_rec_data_common + +set_index_finded_device_ediv: +673b d8c044cd arg mem_le_rand ,contr +673c 20407ebf call memcpy16 +673d 20206739 branch store_ble_rec_data_common + +nvram_find_addr_from_bd_list: +673e 20407fe9 call disable_user +673f 6800c217 fetch 1 ,mem_nv_data_number +6740 207a0000 rtn blank +6741 68014682 fetch 2 ,mem_ui_state_map +6742 c2806754 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode + +find_addr_from_bd_list_ble_mode: +6743 474bc032 bpatchx patch32_7 ,mem_patch32 +6744 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +6745 c000674d beq master_public_addr ,find_addr_from_bd_list_static_addr +6746 68008454 fetch 1 ,mem_le_plap + 5 +6747 2fe180c0 compare 0xc0 ,pdata ,0xc0 +6748 2020e74d branch find_addr_from_bd_list_static_addr ,true +6749 2fe18040 compare 0x40 ,pdata ,0xc0 +674a 2020e752 branch find_addr_from_bd_list_random_addr ,true +674b 2fe18000 compare 0x00 ,pdata ,0xc0 +674c 2020e750 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true + +find_addr_from_bd_list_static_addr: +674d 70018535 jam rec_4_mode_static_address ,mem_temp_reconn_record +674e 6803044f fetch 6 ,mem_le_plap +674f 20206757 branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_non_resolvable_private_address: +6750 70018537 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +6751 20206757 branch find_addr_from_bd_list_common + +find_addr_from_bd_list_random_addr: +6752 70018536 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +6753 20206757 branch find_addr_from_bd_list_common + +find_addr_from_bd_list_spp_mode: +6754 474c4033 bpatchx patch33_0 ,mem_patch33 +6755 70018533 jam rec_3_mode ,mem_temp_reconn_record +6756 68030040 fetch 6 ,mem_plap + +find_addr_from_bd_list_common: +6757 60030186 store 6 ,mem_temp_reconn_record + 1 +6758 68014215 fetch 2 ,mem_nv_data_ptr +6759 efe88000 ifetcht 1 ,pdata +675a 1fe0fe01 pincrease 1 +675b 6001018c store 2 ,mem_list_item_ptr +675c 60088184 storet 1 ,mem_select_list_item +675d 6800c217 fetch 1 ,mem_nv_data_number +675e 1fe22600 icopy regc + +nvram_find_addr_from_list: +675f 6801018c fetch 2 ,mem_list_item_ptr +6760 1fe22200 copy pdata ,rega +6761 2040676f call nvram_find_addr_from_list_compare +6762 20740000 rtn user +6763 6809018c fetcht 2 ,mem_list_item_ptr +6764 18408422 increase nv_data_len ,temp +6765 6009018c storet 2 ,mem_list_item_ptr +6766 184085ff increase -1 ,temp +6767 e8408000 ifetch 1 ,temp +6768 60008184 store 1 ,mem_select_list_item +6769 1a60a7ff increase -1 ,regc +676a 2422e75f nbranch nvram_find_addr_from_list ,zero +676b 6800c217 fetch 1 ,mem_nv_data_number +676c 1fe0ffff pincrease decreased_one +676d 60008184 store 1 ,mem_select_list_item +676e 20600000 rtn + +nvram_find_addr_from_list_compare: +676f 68008185 fetch 1 ,mem_temp_reconn_record +6770 c099e776 bne rec_3_mode ,find_addr_from_list_compare_ble_mode + +find_master_addr_from_list_compare: +6771 da400185 arg mem_temp_reconn_record ,regb +6772 df200007 arg 7 ,loopcnt +6773 20407f88 call string_compare +6774 2022ffe7 branch enable_user ,zero +6775 20600000 rtn + +find_addr_from_list_compare_ble_mode: +6776 c01b6779 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +6777 c01be794 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +6778 20206771 branch find_master_addr_from_list_compare + +find_irk_form_list_compare: +6779 ea288000 ifetcht 1 ,rega +677a 98467c00 isub temp ,null +677b 24628000 nrtn zero +677c d8a00ac2 arg mem_le_prand ,contw +677d df200010 arg 16 ,loopcnt +677e 20407ed4 call clear_mem +677f 68018452 fetch 3 ,mem_le_plap + 3 +6780 60018ac2 store 3 ,mem_le_prand +6781 2040678b call genernate_master_macaddress +6782 68010adf fetch 2 ,mem_le_aes_128 + 13 +6783 1ff0fe00 byteswap pdata ,pdata +6784 1fed0400 lshift8 pdata ,temp +6785 e8c08000 ifetch 1 ,contr +6786 9840fe00 iadd temp ,pdata +6787 6809844f fetcht 3 ,mem_le_plap +6788 98467c00 isub temp ,null +6789 2022ffe7 branch enable_user ,zero +678a 20600000 rtn + +genernate_master_macaddress: +678b d8c00ac2 arg mem_le_prand ,contr +678c 20407486 call load_data128 +678d ea208000 ifetch 1 ,rega +678e 20407487 call load_regext +678f 18006c38 force 0x38 ,aes_ctrl +6790 18006c00 force 0x0 ,aes_ctrl +6791 2040741d call wait_aes +6792 d8a00ad2 arg mem_le_aes_128 ,contw +6793 20207497 branch store_aes_result + +find_ediv_form_list_compare: +6794 ea288000 ifetcht 1 ,rega +6795 98467c00 isub temp ,null +6796 24628000 nrtn zero +6797 18c22200 copy contr ,rega +6798 18c0a608 add contr ,8 ,regc +6799 da4044cd arg mem_le_rand ,regb +679a df200008 arg 8 ,loopcnt +679b 20407f88 call string_compare +679c 2022ffe7 branch enable_user ,zero +679d 1a622200 copy regc ,rega +679e da4044d5 arg mem_le_irk ,regb +679f df200008 arg 8 ,loopcnt +67a0 20407f88 call string_compare +67a1 2022ffe7 branch enable_user ,zero +67a2 20600000 rtn + +check_nvram: +67a3 68014215 fetch 2 ,mem_nv_data_ptr +67a4 efe88000 ifetcht 1 ,pdata +67a5 1fe0fe22 pincrease nv_data_len +67a6 efe08000 ifetch 1 ,pdata +67a7 98467c00 isub temp ,null +67a8 20600000 rtn + +init_device_list: +67a9 6800c217 fetch 1 ,mem_nv_data_number +67aa 1fe27200 icopy loopcnt +67ab 68094215 fetcht 2 ,mem_nv_data_ptr +67ac 58000000 setarg 0 + +init_device_list_loop: +67ad e0408000 istore 1 ,temp +67ae 18408422 increase nv_data_len ,temp +67af 1fe0fe01 pincrease 1 +67b0 c20067ad loop init_device_list_loop +67b1 20600000 rtn + +load_device_list: +67b2 474cc033 bpatchx patch33_1 ,mem_patch33 +67b3 2040673e call nvram_find_addr_from_bd_list +67b4 68008030 fetch 1 ,mem_state +67b5 79347e06 setflag user ,state_combkey ,pdata +67b6 60008030 store 1 ,mem_state +67b7 243467bc nbranch clear_key_exists ,user +67b8 1a208c0a add rega ,10 ,contr +67b9 d8a041be arg mem_link_key ,contw +67ba 20407ebf call memcpy16 +67bb 202067d7 branch check_link_key_load + +clear_key_exists: +67bc 7041bd00 jam 0 ,mem_link_key_exists +67bd 20600000 rtn + +load_device_list_mode_4: +67be 6804c4cb fetch 9 ,mem_le_ediv +67bf 203a67ca branch clear_ltk_exists ,blank +67c0 2040673e call nvram_find_addr_from_bd_list +67c1 243467ca nbranch clear_ltk_exists ,user +67c2 6801018c fetch 2 ,mem_list_item_ptr +67c3 1fe08c01 add pdata ,1 ,contr +67c4 d8a044d5 arg mem_le_irk ,contw +67c5 20407ebf call memcpy16 +67c6 d8a04419 arg mem_le_ltk ,contw +67c7 20407ebf call memcpy16 +67c8 70442901 jam 1 ,mem_ltk_exists +67c9 20600000 rtn + +clear_ltk_exists: +67ca 70442900 jam 0 ,mem_ltk_exists +67cb 20600000 rtn + +eeprom_store_le_reconn_info: +67cc 6803044f fetch 6 ,mem_le_plap +67cd 60030186 store 6 ,mem_temp_lap +67ce 70018534 jam rec_4_mode ,mem_record_bt_mode +67cf 202067d3 branch eeprom_store_reconn_info + +eeprom_store_bd_reconn_info: +67d0 68030040 fetch 6 ,mem_plap +67d1 60030186 store 6 ,mem_temp_lap +67d2 70018533 jam rec_3_mode ,mem_record_bt_mode + +eeprom_store_reconn_info: +67d3 6800c092 fetch 1 ,mem_device_option +67d4 c005670b beq dvc_op_module ,check_51cmd_update_device_record +67d5 c28342da bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr +67d6 20600000 rtn + +check_link_key_load: +67d7 680441be fetch 8 ,mem_link_key +67d8 680c41c6 fetcht 8 ,mem_link_key + 8 +67d9 9841fe00 ior temp ,pdata +67da 207a0000 rtn blank +67db 7041bd01 jam 1 ,mem_link_key_exists +67dc 20600000 rtn + +gpio_set_wake_by_current_state: +67dd 474d4033 bpatchx patch33_2 ,mem_patch33 +67de 79200407 set1 7 ,temp +67df 2040681d call gpio_get_bit +67e0 7d208407 nsetflag true ,7 ,temp + +gpio_set_wake: +67e1 474dc033 bpatchx patch33_3 ,mem_patch33 +67e2 18467cff sub temp ,ui_button_gpio_disable ,null +67e3 20628000 rtn zero +67e4 284c0007 isolate0 7 ,temp +67e5 18410e1f and temp ,0x1f ,queue +67e6 680200a1 fetch 4 ,mem_gpio_wakeup_low +67e7 f920fe00 qsetflag true ,pdata +67e8 600200a1 store 4 ,mem_gpio_wakeup_low +67e9 680200a5 fetch 4 ,mem_gpio_wakeup_high +67ea fd20fe00 nqsetflag true ,pdata +67eb 600200a5 store 4 ,mem_gpio_wakeup_high +67ec 20600000 rtn + +gpio_clr_wake: +67ed 474e4033 bpatchx patch33_4 ,mem_patch33 +67ee 18467cff sub temp ,ui_button_gpio_disable ,null +67ef 20628000 rtn zero +67f0 284c0007 isolate0 7 ,temp +67f1 18410e1f and temp ,0x1f ,queue +67f2 680200a1 fetch 4 ,mem_gpio_wakeup_low +67f3 f93ffe00 qset0 pdata +67f4 600200a1 store 4 ,mem_gpio_wakeup_low +67f5 680200a5 fetch 4 ,mem_gpio_wakeup_high +67f6 f93ffe00 qset0 pdata +67f7 600200a5 store 4 ,mem_gpio_wakeup_high +67f8 20600000 rtn + +gpio_config_input_nowake: +67f9 204067ed call gpio_clr_wake +67fa 202067fe branch gpio_config_input_without_wake + +gpio_config_input: +67fb 18467cff sub temp ,ui_button_gpio_disable ,null +67fc 20628000 rtn zero +67fd 2455e7e1 ncall gpio_set_wake ,wake + +gpio_config_input_without_wake: +67fe d8a0807c arg core_gpio_pd0 ,contw +67ff 20406830 call gpio_set_bit +6800 79400407 setflip gpio_active_bit ,temp +6801 d8a08078 arg core_gpio_pu0 ,contw +6802 20406830 call gpio_set_bit +6803 793f8407 set0 gpio_active_bit ,temp +6804 d8a08070 arg core_gpio_oe0 ,contw +6805 20206830 branch gpio_set_bit + +gpio_set_high_impedance: +6806 d8a0807c arg core_gpio_pd0 ,contw +6807 20406830 call gpio_set_bit +6808 793f8407 set0 gpio_active_bit ,temp +6809 d8a08078 arg core_gpio_pu0 ,contw +680a 20406830 call gpio_set_bit +680b 793f8407 set0 gpio_active_bit ,temp +680c d8a08070 arg core_gpio_oe0 ,contw +680d 20206830 branch gpio_set_bit + +gpio_config_output: +680e 18467cff sub temp ,ui_button_gpio_disable ,null +680f 20628000 rtn zero +6810 79400407 setflip gpio_active_bit ,temp +6811 2040682f call gpio_out + +gpio_config_output0: +6812 79200407 set1 gpio_active_bit ,temp +6813 d8a08070 arg core_gpio_oe0 ,contw +6814 20206830 branch gpio_set_bit + +gpio_common: +6815 18410e07 and temp ,0x07 ,queue +6816 18497e00 rshift3 temp ,pdata +6817 1fe17e03 and_into 3 ,pdata +6818 98a08a00 iadd contw ,contw +6819 e8a08000 ifetch 1 ,contw +681a 20600000 rtn + +gpio_check_active: +681b d8a08074 arg core_gpio_out0 ,contw +681c 2020681e branch get_bit_common + +gpio_get_bit: +681d d8a0811c arg core_gpio_in ,contw + +get_bit_common: +681e 20406815 call gpio_common +681f 284ffe07 isolate1 gpio_active_bit ,temp +6820 2020e823 branch gpio_get_bit_reverse ,true +6821 afec0000 qisolate0 pdata +6822 20600000 rtn + +gpio_get_bit_reverse: +6823 afefffff qisolate1 pdata +6824 20600000 rtn + +gpio_out_inactive: +6825 18467cff sub temp ,ui_button_gpio_disable ,null +6826 20628000 rtn zero +6827 2fcffe07 isolate1 7 ,null +6828 2020682c branch gpio_out_flag + +gpio_out_active: +6829 18467cff sub temp ,ui_button_gpio_disable ,null +682a 20628000 rtn zero +682b 2fcc0007 isolate0 7 ,null + +gpio_out_flag: +682c 58000000 setarg 0 +682d 7d20fe07 nsetflag true ,gpio_active_bit ,pdata +682e 98428400 ixor temp ,temp + +gpio_out: +682f d8a08074 arg core_gpio_out0 ,contw + +gpio_set_bit: +6830 20406815 call gpio_common +6831 284ffe07 isolate1 gpio_active_bit ,temp +6832 f920fe00 qsetflag true ,pdata +6833 e0a08000 istore 1 ,contw +6834 20600000 rtn + +gpio_set_before_lpm_common: +6835 da3fffff arg -1 ,rega +6836 68108081 hfetch 1 ,core_gpio_sel1 +6837 2fe00602 compare 0x02 ,pdata ,0x03 +6838 2040e878 call neglact4_from_23_pin ,true +6839 2fe00601 compare 0x01 ,pdata ,0x03 +683a 2040e87a call neglact2_form_25_pin ,true +683b 2fe00603 compare 0x03 ,pdata ,0x03 +683c 2040e87a call neglact2_form_25_pin ,true +683d 2feffe02 isolate1 2 ,pdata +683e 2040e874 call neglect2_from_6_pin ,true +683f 2feffe03 isolate1 3 ,pdata +6840 2040e876 call neglect4_from_9_pin ,true +6841 2feffe04 isolate1 4 ,pdata +6842 2040e87c call neglact2_form_30_pin ,true +6843 2feffe06 isolate1 6 ,pdata +6844 7d20a204 nsetflag true ,04 ,rega +6845 2feffe07 isolate1 7 ,pdata +6846 7d20a205 nsetflag true ,05 ,rega +6847 68108082 hfetch 1 ,core_gpio_sel2 +6848 2feffe00 isolate1 0 ,pdata +6849 7d20a21b nsetflag true ,27 ,rega +684a 2feffe01 isolate1 1 ,pdata +684b 7d20a21c nsetflag true ,28 ,rega +684c 2feffe02 isolate1 2 ,pdata +684d 7d20a203 nsetflag true ,03 ,rega +684e 2feffe03 isolate1 3 ,pdata +684f 7d20a208 nsetflag true ,08 ,rega +6850 2feffe04 isolate1 4 ,pdata +6851 7d20a214 nsetflag true ,20 ,rega +6852 2feffe05 isolate1 5 ,pdata +6853 7d20a215 nsetflag true ,21 ,rega +6854 2feffe06 isolate1 6 ,pdata +6855 7d20a216 nsetflag true ,22 ,rega +6856 2feffe07 isolate1 7 ,pdata +6857 7d20a217 nsetflag true ,23 ,rega +6858 68108080 hfetch 1 ,core_gpio_sel +6859 2feffe00 isolate1 0 ,pdata +685a 7d20a205 nsetflag true ,05 ,rega +685b 2feffe01 isolate1 1 ,pdata +685c 7d20a206 nsetflag true ,06 ,rega +685d 2feffe02 isolate1 2 ,pdata +685e 7d20a207 nsetflag true ,07 ,rega +685f 2feffe03 isolate1 3 ,pdata +6860 7d20a212 nsetflag true ,18 ,rega +6861 2feffe04 isolate1 4 ,pdata +6862 7d20a213 nsetflag true ,19 ,rega +6863 2feffe05 isolate1 5 ,pdata +6864 7d20a214 nsetflag true ,20 ,rega +6865 2feffe06 isolate1 6 ,pdata +6866 7d20a215 nsetflag true ,21 ,rega +6867 2feffe07 isolate1 7 ,pdata +6868 7d20a216 nsetflag true ,22 ,rega +6869 68108062 hfetch 1 ,core_uart_ctrl +686a 2feffe04 isolate1 4 ,pdata +686b 2040e87e call neglact2_form_2_pin ,true +686c 474ec033 bpatchx patch33_5 ,mem_patch33 +686d 68120078 hfetch 4 ,core_gpio_pu0 +686e 681a007c hfetcht 4 ,core_gpio_pd0 +686f 9841fe00 ior temp ,pdata +6870 1fe47e00 invert pdata ,pdata +6871 9a217e00 iand rega ,pdata +6872 60120070 hstore 4 ,core_gpio_oe0 +6873 20600000 rtn + +neglect2_from_6_pin: +6874 d8e00006 arg 6 ,queue +6875 20206884 branch neglect_2_pin + +neglect4_from_9_pin: +6876 d8e00009 arg 9 ,queue +6877 20206882 branch neglact_4_pin + +neglact4_from_23_pin: +6878 d8e00017 arg 23 ,queue +6879 20206882 branch neglact_4_pin + +neglact2_form_25_pin: +687a d8e00019 arg 25 ,queue +687b 20206884 branch neglect_2_pin + +neglact2_form_30_pin: +687c d8e0001e arg 30 ,queue +687d 20206884 branch neglect_2_pin + +neglact2_form_2_pin: +687e d8e00002 arg 2 ,queue +687f 20206884 branch neglect_2_pin + +neglact_1_pin: +6880 df200001 arg 1 ,loopcnt +6881 20206885 branch neglect_pin_loop + +neglact_4_pin: +6882 df200004 arg 4 ,loopcnt +6883 20206885 branch neglect_pin_loop + +neglect_2_pin: +6884 df200002 arg 2 ,loopcnt + +neglect_pin_loop: +6885 f93fa200 qset0 rega +6886 18e08e01 increase 1 ,queue +6887 c2006885 loop neglect_pin_loop +6888 20600000 rtn + +gpio_cfg_uart_tx_output: +6889 20406895 call gpio_uart2gpio +688a d8400006 arg uart_wakeup_tx ,temp +688b 2020680e branch gpio_config_output + +gpio_pu_uart_tx: +688c 20406889 call gpio_cfg_uart_tx_output +688d d8400006 arg uart_wakeup_tx ,temp +688e 20206825 branch gpio_out_inactive + +gpio_rx_config_input_with_pu: +688f 20406895 call gpio_uart2gpio +6890 68108078 hfetch 1 ,core_gpio_pu0 +6891 79207e07 set1 uart_wakeup_rx ,pdata +6892 60108078 hstore 1 ,core_gpio_pu0 +6893 d8400007 arg uart_wakeup_rx ,temp +6894 202067fb branch gpio_config_input + +gpio_uart2gpio: +6895 68108081 hfetch 1 ,core_gpio_sel1 +6896 1fe17efb and_into 0xfb ,pdata +6897 60108081 hstore 1 ,core_gpio_sel1 +6898 20600000 rtn + +gpio_check_uart_state: +6899 68108081 hfetch 1 ,core_gpio_sel1 +689a 2feffe02 isolate1 2 ,pdata +689b 20600000 rtn + +load_chip_option: +689c 2040666a call otp_enable_chgpump +689d 580007e0 setarg otp_chip_functions +689e da204150 arg mem_chip_functions ,rega +689f d8400002 arg 0x02 ,temp +68a0 204066b3 call otpd_read_data +68a1 2020666d branch otp_disable_chgpump + +load_adc_init: +68a2 2040666a call otp_enable_chgpump +68a3 580007e2 setarg otp_adc_io_0_5v_addr +68a4 da20421d arg mem_0_5_adc_io_data ,rega +68a5 d840000e arg 14 ,temp +68a6 204066b3 call otpd_read_data +68a7 2020666d branch otp_disable_chgpump + +adc_init_data: +68a8 474f4033 bpatchx patch33_6 ,mem_patch33 +68a9 204068a2 call load_adc_init +68aa 6800c22d fetch 1 ,mem_adc_config_flag +68ab c00068af beq adc_config_vinlpm ,adc_init_data_vinlpm +68ac c000e8c3 beq adc_config_hvin ,adc_init_data_hvin +68ad c00168d7 beq adc_config_gpio ,adc_init_data_io +68ae 20600000 rtn + +adc_init_data_vinlpm: +68af 68094229 fetcht 2 ,mem_otp_adc_flag +68b0 5800aa55 setarg otp_adc_flag +68b1 98467c00 isub temp ,null +68b2 2022e8b8 branch adc_check_data_vinlpm ,zero +68b3 58004dfa setarg 0x4dfa +68b4 60014227 store 2 ,mem_3v_adc_vinlpm_data +68b5 58004894 setarg 0x4894 +68b6 60014221 store 2 ,mem_2v_adc_vinlpm_data +68b7 202068c0 branch set_vdd_reference_voltage_1v + +adc_check_data_vinlpm: +68b8 68014227 fetch 2 ,mem_3v_adc_vinlpm_data +68b9 243a68bc nbranch adc_check_2v_vinlpm ,blank +68ba 58004dfa setarg 0x4dfa +68bb 60014227 store 2 ,mem_3v_adc_vinlpm_data + +adc_check_2v_vinlpm: +68bc 68014221 fetch 2 ,mem_2v_adc_vinlpm_data +68bd 243a68c0 nbranch set_vdd_reference_voltage_1v ,blank +68be 58004894 setarg 0x4894 +68bf 60014221 store 2 ,mem_2v_adc_vinlpm_data + +set_vdd_reference_voltage_1v: +68c0 58000064 setarg 100 +68c1 6001422b store 2 ,mem_reference_voltage +68c2 20600000 rtn + +adc_init_data_hvin: +68c3 68094229 fetcht 2 ,mem_otp_adc_flag +68c4 5800aa55 setarg otp_adc_flag +68c5 98467c00 isub temp ,null +68c6 2022e8cc branch adc_check_data_hvin ,zero +68c7 58005932 setarg 0x5932 +68c8 60014225 store 2 ,mem_5v_adc_hvin_data +68c9 58004323 setarg 0x4323 +68ca 6001421f store 2 ,mem_1v_adc_hvin_data +68cb 202068d4 branch set_vdd_reference_voltage_4v + +adc_check_data_hvin: +68cc 68014225 fetch 2 ,mem_5v_adc_hvin_data +68cd 243a68d0 nbranch adc_check_1v_hvin ,blank +68ce 58005932 setarg 0x5932 +68cf 60014225 store 2 ,mem_5v_adc_hvin_data + +adc_check_1v_hvin: +68d0 6801421f fetch 2 ,mem_1v_adc_hvin_data +68d1 243a68d4 nbranch set_vdd_reference_voltage_4v ,blank +68d2 58004323 setarg 0x4323 +68d3 6001421f store 2 ,mem_1v_adc_hvin_data + +set_vdd_reference_voltage_4v: +68d4 58000190 setarg 400 +68d5 6001422b store 2 ,mem_reference_voltage +68d6 20600000 rtn + +adc_init_data_io: +68d7 68094229 fetcht 2 ,mem_otp_adc_flag +68d8 5800aa55 setarg otp_adc_flag +68d9 98467c00 isub temp ,null +68da 2022e8e0 branch adc_check_data_io ,zero +68db 58006946 setarg 0x6946 +68dc 60014223 store 2 ,mem_1v_adc_io_data +68dd 58005377 setarg 0x5377 +68de 6001421d store 2 ,mem_0_5_adc_io_data +68df 202068e8 branch set_vdd_reference_voltage_0_5v + +adc_check_data_io: +68e0 68014223 fetch 2 ,mem_1v_adc_io_data +68e1 243a68e4 nbranch adc_check_0_5v_io ,blank +68e2 58006946 setarg 0x6946 +68e3 60014223 store 2 ,mem_1v_adc_io_data + +adc_check_0_5v_io: +68e4 6801421d fetch 2 ,mem_0_5_adc_io_data +68e5 243a68e8 nbranch set_vdd_reference_voltage_0_5v ,blank +68e6 58005377 setarg 0x5377 +68e7 6001421d store 2 ,mem_0_5_adc_io_data + +set_vdd_reference_voltage_0_5v: +68e8 58000032 setarg 50 +68e9 6001422b store 2 ,mem_reference_voltage +68ea 20600000 rtn + +adc_set_mode: +68eb 6800c22d fetch 1 ,mem_adc_config_flag +68ec c00068f0 beq adc_config_vinlpm ,adc_check_vinlpm +68ed c000e8f2 beq adc_config_hvin ,adc_check_hvin +68ee c00168f4 beq adc_config_gpio ,adc_check_gpio +68ef 20600000 rtn + +adc_check_vinlpm: +68f0 708971bf jam 0xbf ,rf_adc_mode +68f1 202068f8 branch read_adc + +adc_check_hvin: +68f2 708971af jam 0xaf ,rf_adc_mode +68f3 202068f8 branch read_adc + +adc_check_gpio: +68f4 7089718f jam 0x8f ,rf_adc_mode +68f5 6800c22e fetch 1 ,mem_adc_channel +68f6 60108973 hstore 1 ,rf_adc_ch +68f7 202068f8 branch read_adc + +read_adc: +68f8 474fc033 bpatchx patch33_7 ,mem_patch33 +68f9 68108053 hfetch 1 ,core_uart_baud + 1 +68fa 79207e07 set1 7 ,pdata +68fb 60108053 hstore 1 ,core_uart_baud + 1 +68fc 68108973 hfetch 1 ,rf_adc_ch +68fd 1fe1fe30 or_into 0x30 ,pdata +68fe 60108973 hstore 1 ,rf_adc_ch +68ff 7089067c jam 0x7c ,rfen_adc +6900 708972aa jam 0xaa ,rf_adc_gc +6901 20001388 nop 5000 +6902 68190150 hfetcht 2 ,core_adc_sum +6903 68108053 hfetch 1 ,core_uart_baud + 1 +6904 793ffe07 set0 7 ,pdata +6905 60108053 hstore 1 ,core_uart_baud + 1 +6906 6009422f storet 2 ,mem_adc_current_value +6907 20600000 rtn + +vdd_calculate_by_mode: +6908 47504034 bpatchx patch34_0 ,mem_patch34 +6909 6800c22d fetch 1 ,mem_adc_config_flag +690a c000690e beq adc_config_vinlpm ,vdd_calculate_vinlpm +690b c000e912 beq adc_config_hvin ,vdd_calculate_hvin +690c c0016916 beq adc_config_gpio ,vdd_calculate_io +690d 20600000 rtn + +vdd_calculate_vinlpm: +690e 68014227 fetch 2 ,mem_3v_adc_vinlpm_data +690f 68094221 fetcht 2 ,mem_2v_adc_vinlpm_data +6910 da6000c8 arg 200 ,regc +6911 2020691a branch vdd_calculate + +vdd_calculate_hvin: +6912 68014225 fetch 2 ,mem_5v_adc_hvin_data +6913 6809421f fetcht 2 ,mem_1v_adc_hvin_data +6914 da600064 arg 100 ,regc +6915 2020691a branch vdd_calculate + +vdd_calculate_io: +6916 68014223 fetch 2 ,mem_1v_adc_io_data +6917 6809421d fetcht 2 ,mem_0_5_adc_io_data +6918 da600032 arg 50 ,regc +6919 2020691a branch vdd_calculate + +vdd_calculate: +691a 98462200 isub temp ,rega +691b 6801422f fetch 2 ,mem_adc_current_value +691c 98467e00 isub temp ,pdata +691d 24216927 nbranch vdd_calculate1 ,positive +691e 6809422b fetcht 2 ,mem_reference_voltage +691f 984fa400 imul32 temp ,regb +6920 1a627e00 copy regc ,pdata +6921 9a2ffe00 imul32 rega ,pdata +6922 9a40fe00 iadd regb ,pdata + +vdd_calculate2: +6923 9a26fc00 idiv rega +6924 20407f86 call wait_div_end +6925 1807fe00 quotient pdata +6926 20600000 rtn + +vdd_calculate1: +6927 18427e00 copy temp ,pdata +6928 6809422f fetcht 2 ,mem_adc_current_value +6929 98467e00 isub temp ,pdata +692a 6809422b fetcht 2 ,mem_reference_voltage +692b 984fa400 imul32 temp ,regb +692c 1a627e00 copy regc ,pdata +692d 9a2ffe00 imul32 rega ,pdata +692e 9a467e00 isub regb ,pdata +692f 20206923 branch vdd_calculate2 + +adc_bat_percent_lowpower_out: +6930 ea240000 ifetch 8 ,rega +6931 60040a9a store 8 ,mem_pdatatemp +6932 68010a9a fetch 2 ,mem_pdatatemp +6933 68090a9c fetcht 2 ,mem_pdatatemp + 2 +6934 98462200 isub temp ,rega +6935 68010aa0 fetch 2 ,mem_pdatatemp + 6 +6936 98462400 isub temp ,regb +6937 68090a9e fetcht 2 ,mem_pdatatemp + 4 +6938 98467c00 isub temp ,null +6939 24416940 ncall adc_set_low_power_flag ,positive +693a 1a4ffe64 mul32 regb ,100 ,pdata +693b 9a26fc00 idiv rega +693c 20407f86 call wait_div_end +693d 1807fe00 quotient pdata +693e 205a6944 call adc_set_no_power_flag ,blank +693f 20600000 rtn + +adc_set_low_power_flag: +6940 6800c231 fetch 1 ,mem_adc_power_flag +6941 79207e00 set1 0 ,pdata +6942 6000c231 store 1 ,mem_adc_power_flag +6943 20600000 rtn + +adc_set_no_power_flag: +6944 6808c231 fetcht 1 ,mem_adc_power_flag +6945 79200401 set1 1 ,temp +6946 6008c231 storet 1 ,mem_adc_power_flag +6947 20600000 rtn + +keyscan_key_init: +6948 6801423d fetch 2 ,mem_key_num_ptr +6949 efe08000 ifetch 1 ,pdata + +keyscan_key_init_next: +694a 207a0000 rtn blank +694b 1fe27200 copy pdata ,loopcnt +694c 6801423d fetch 2 ,mem_keyscan_ptr +694d 1fe0fe03 increase 3 ,pdata +694e 1fe22200 copy pdata ,rega + +keyscan_key_init_lp1: +694f ea288000 ifetcht 1 ,rega +6950 204067fb call gpio_config_input +6951 1a20a201 increase key_conf_struct_len ,rega +6952 c200694f loop keyscan_key_init_lp1 + +keyscan_key_init_end: +6953 20600000 rtn + +keyscan_scan_key: +6954 6801423d fetch 2 ,mem_keyscan_ptr +6955 1fe0fe03 increase 3 ,pdata +6956 1fe22200 copy pdata ,rega +6957 18002400 force 0 ,regb +6958 700b1200 jam 0 ,mem_key_value_temp + +keyscan_scan_key_lp1: +6959 ea288000 ifetcht 1 ,rega +695a 2040681d call gpio_get_bit +695b 4750c034 bpatchx patch34_1 ,mem_patch34 +695c 68010b12 fetch 2 ,mem_key_value_temp +695d 1a420e00 copy regb ,queue +695e f920fe00 qsetflag true ,pdata +695f 60010b12 store 2 ,mem_key_value_temp +6960 1a20a201 increase key_conf_struct_len ,rega +6961 1a40a401 increase 1 ,regb +6962 6801423d fetch 2 ,mem_key_num_ptr +6963 efe08000 ifetch 1 ,pdata + +keyscan_scan_key_lp1_next: +6964 9a42fc00 ixor regb ,null +6965 2422e959 nbranch keyscan_scan_key_lp1 ,zero +6966 68010b12 fetch 2 ,mem_key_value_temp +6967 68090b14 fetcht 2 ,mem_key_value +6968 9842fc00 ixor temp ,null +6969 20628000 rtn zero +696a 78347c00 enable user +696b 20600000 rtn + +keyscan_process_lpm_before: +696c 6801423d fetch 2 ,mem_key_num_ptr +696d efe08000 ifetch 1 ,pdata + +keyscan_process_lpm_before_next: +696e 207a0000 rtn blank +696f 1fe27200 copy pdata ,loopcnt +6970 6801423d fetch 2 ,mem_keyscan_ptr +6971 1fe0fe03 increase 3 ,pdata +6972 1fe22200 copy pdata ,rega + +keyscan_process_lpm_before_lp1: +6973 ea288000 ifetcht 1 ,rega +6974 204067dd call gpio_set_wake_by_current_state +6975 1a20a201 increase key_conf_struct_len ,rega +6976 c2006973 loop keyscan_process_lpm_before_lp1 + +keyscan_process_lpm_before_end: +6977 20600000 rtn + +keyscan_key_process: +6978 d8e00009 arg key_scan_timer ,queue +6979 20407f16 call timer_check +697a 247a0000 nrtn blank +697b 58000020 setarg 0x20 +697c d8e00009 arg key_scan_timer ,queue +697d 20407f08 call timer_init +697e 78547c00 disable user +697f 2040696c call keyscan_process_lpm_before +6980 47514034 bpatchx patch34_2 ,mem_patch34 +6981 6801423d fetch 2 ,mem_key_num_ptr +6982 efe08000 ifetch 1 ,pdata + +keyscan_key_process_next: +6983 207a0000 rtn blank +6984 20406954 call keyscan_scan_key +6985 24347d02 nbranch lpm_button_clean_wake_lock ,user +6986 20407d00 call lpm_button_get_wake_lock +6987 78547c00 disable user +6988 68010b12 fetch 2 ,mem_key_value_temp +6989 60010b19 store 2 ,mem_key_value_temp4 +698a 700b1b00 jam 0 ,mem_key_value_temp6 +698b 18000e00 force 0 ,queue + +keyscan_key_lp1: +698c 68010b14 fetch 2 ,mem_key_value +698d 1fe30400 rshift pdata ,temp +698e 60090b14 storet 2 ,mem_key_value +698f 1fe17e01 and pdata ,0x01 ,pdata +6990 68090b19 fetcht 2 ,mem_key_value_temp4 +6991 18412201 and temp ,0x01 ,rega +6992 18430400 rshift temp ,temp +6993 60090b19 storet 2 ,mem_key_value_temp4 +6994 9a22fc00 ixor rega ,null +6995 2442e9a1 ncall keyscan_send_key_data ,zero +6996 6801423d fetch 2 ,mem_key_num_ptr +6997 efe08000 ifetch 1 ,pdata + +keyscan_key_lp1_next: +6998 68088b1b fetcht 1 ,mem_key_value_temp6 +6999 18408401 increase 1 ,temp +699a 60088b1b storet 1 ,mem_key_value_temp6 +699b 18420e00 copy temp ,queue +699c 98e2fc00 ixor queue ,null +699d 2422e98c nbranch keyscan_key_lp1 ,zero +699e 68010b12 fetch 2 ,mem_key_value_temp +699f 60010b14 store 2 ,mem_key_value +69a0 20600000 rtn + +keyscan_send_key_data: +69a1 4751c034 bpatchx patch34_3 ,mem_patch34 +69a2 6801423d fetch 2 ,mem_keyscan_ptr +69a3 1fe0fe01 increase 1 ,pdata +69a4 efe10000 ifetch 2 ,pdata +69a5 20207f9c branch callback_func + +pwm_init: +69a6 68108042 hfetch 1 ,core_clksel +69a7 9a21fe00 ior rega ,pdata +69a8 60108042 hstore 1 ,core_clksel +69a9 68110050 hfetch 2 ,core_clkoff +69aa 793ffe0d set0 clock_off_pwm ,pdata +69ab 60110050 hstore 2 ,core_clkoff + +delay_nop100: +69ac 20000064 nop 100 +69ad 20600000 rtn + +pwm_out_set: +69ae 68098a9c fetcht 3 ,mem_pdatatemp + 2 +69af 58b71b00 setarg pwm_12mhz +69b0 9846fc00 idiv temp +69b1 20407f86 call wait_div_end +69b2 18078400 quotient temp +69b3 68008a9f fetch 1 ,mem_pdatatemp + 5 +69b4 984ffe00 imul32 temp ,pdata +69b5 1fe6fc64 div pdata ,100 +69b6 20407f86 call wait_div_end +69b7 1807a200 quotient rega +69b8 18427e00 copy temp ,pdata +69b9 9a262400 isub rega ,regb +69ba 68008a9b fetch 1 ,mem_pdatatemp + 1 +69bb 204069be call pwm_duty_cycle_set +69bc 68008a9a fetch 1 ,mem_pdatatemp +69bd 202069d5 branch pwm_enable + +pwm_duty_cycle_set: +69be c00069c4 beq 0 ,pwm_pwm0_duty_set +69bf c000e9c6 beq 1 ,pwm_pwm1_duty_set +69c0 c00169c8 beq 2 ,pwm_pwm2_duty_set +69c1 c001e9ca beq 3 ,pwm_pwm3_duty_set +69c2 c00269cc beq 4 ,pwm_pwm4_duty_set +69c3 c002e9ce beq 5 ,pwm_pwm5_duty_set + +pwm_pwm0_duty_set: +69c4 d8a080a0 arg core_pwm_pcnt0 ,contw +69c5 202069d0 branch pwm_set_pncnt + +pwm_pwm1_duty_set: +69c6 d8a080a4 arg core_pwm_pcnt1 ,contw +69c7 202069d0 branch pwm_set_pncnt + +pwm_pwm2_duty_set: +69c8 d8a080a8 arg core_pwm_pcnt2 ,contw +69c9 202069d0 branch pwm_set_pncnt + +pwm_pwm3_duty_set: +69ca d8a08064 arg core_pwm_pcnt3 ,contw +69cb 202069d0 branch pwm_set_pncnt + +pwm_pwm4_duty_set: +69cc d8a08068 arg core_pwm_pcnt4 ,contw +69cd 202069d0 branch pwm_set_pncnt + +pwm_pwm5_duty_set: +69ce d8a0806c arg core_pwm_pcnt5 ,contw +69cf 202069d0 branch pwm_set_pncnt + +pwm_set_pncnt: +69d0 1a227e00 copy rega ,pdata +69d1 e0a10000 istore 2 ,contw +69d2 1a427e00 copy regb ,pdata +69d3 e0a10000 istore 2 ,contw +69d4 20600000 rtn + +pwm_enable: +69d5 78347c00 enable user +69d6 202069d8 branch pwm_gpio_set + +pwm_disable: +69d7 78547c00 disable user + +pwm_gpio_set: +69d8 c00269e3 beq 4 ,pwm_gpio4_set +69d9 c002e9e5 beq 5 ,pwm_gpio5_set +69da c00de9e7 beq 27 ,pwm_gpio27_set +69db c00e69e9 beq 28 ,pwm_gpio28_set +69dc c001e9eb beq 3 ,pwm_gpio3_set +69dd c00469ed beq 8 ,pwm_gpio8_set +69de c00a69ef beq 20 ,pwm_gpio20_set +69df c00ae9f1 beq 21 ,pwm_gpio21_set +69e0 c00b69f3 beq 22 ,pwm_gpio22_set +69e1 c00be9f5 beq 23 ,pwm_gpio23_set +69e2 20600000 rtn + +pwm_gpio4_set: +69e3 d8e00006 arg 6 ,queue +69e4 202069ff branch pwm_one_set_select + +pwm_gpio5_set: +69e5 d8e00007 arg 7 ,queue +69e6 202069ff branch pwm_one_set_select + +pwm_gpio27_set: +69e7 d8e00008 arg 8 ,queue +69e8 202069ff branch pwm_one_set_select + +pwm_gpio28_set: +69e9 d8e00009 arg 9 ,queue +69ea 202069ff branch pwm_one_set_select + +pwm_gpio3_set: +69eb d8e0000a arg 10 ,queue +69ec 202069ff branch pwm_one_set_select + +pwm_gpio8_set: +69ed d8e0000b arg 11 ,queue +69ee 202069ff branch pwm_one_set_select + +pwm_gpio20_set: +69ef d8e0000c arg 12 ,queue +69f0 20206a01 branch pwm_tw0_set_select + +pwm_gpio21_set: +69f1 d8e0000d arg 13 ,queue +69f2 20206a01 branch pwm_tw0_set_select + +pwm_gpio22_set: +69f3 d8e0000e arg 14 ,queue +69f4 20206a01 branch pwm_tw0_set_select + +pwm_gpio23_set: +69f5 d8e0000f arg 15 ,queue +69f6 20206a01 branch pwm_tw0_set_select + +pwm_set_select: +69f7 68110081 hfetch 2 ,core_gpio_sel1 +69f8 f9347e00 qsetflag user ,pdata +69f9 60110081 hstore 2 ,core_gpio_sel1 +69fa 1a220e00 copy rega ,queue +69fb 68108085 hfetch 1 ,core_gpio_key2 +69fc f9347e00 qsetflag user ,pdata +69fd 60108085 hstore 1 ,core_gpio_key2 +69fe 20600000 rtn + +pwm_one_set_select: +69ff 18e0a3fc add queue ,-4 ,rega +6a00 202069f7 branch pwm_set_select + +pwm_tw0_set_select: +6a01 18e0a3f6 add queue ,-10 ,rega +6a02 202069f7 branch pwm_set_select + +rfcomm_init: +6a03 20758000 rtn wake +6a04 70456700 jam 0 ,mem_rfcomm_send_more_pkt +6a05 7004ed03 jam bits9600 ,memremoterpnbitrate +6a06 7004ee03 jam databits8 ,memremoteprndatabits +6a07 7004f211 jam 0x11 ,memremoteprnxon +6a08 7004f313 jam 0x13 ,memremoteprnxoff +6a09 58000000 setarg 0 +6a0a 600184ef store 3 ,memremoteprnstopbit +6a0b 6000c254 store 1 ,mem_spp_state +6a0c 70468100 jam 0 ,memui_reconnect_mode + +rfcomm_init_spp: +6a0d 47524034 bpatchx patch34_4 ,mem_patch34 +6a0e 58000000 setarg 0 +6a0f 6000c254 store 1 ,mem_spp_state +6a10 6000c564 store 1 ,mem_remote_spp_channel +6a11 6000c55d store 1 ,mem_pn_dlci +6a12 6800c56b fetch 1 ,mem_credit_flag +6a13 c000ea16 beq credit_enable ,rfcomm_init_spp_with_credit +6a14 70456950 jam 0x50 ,mem_credit_given +6a15 20600000 rtn + +rfcomm_init_spp_with_credit: +6a16 70456900 jam 0x00 ,mem_credit_given +6a17 20600000 rtn + +set_cr_bit: +6a18 18418402 or_into 0x02 ,temp +6a19 20600000 rtn + +rfcomm_calculate_fcs_sabm: +6a1a 18427e00 copy temp ,pdata +6a1b 1fedfe00 reverse pdata ,pdata +6a1c 6000c562 store 1 ,memfcstemp3 +6a1d 18007e3f force ini_tx_sabm ,pdata +6a1e 1fedfe00 reverse pdata ,pdata +6a1f 6000c561 store 1 ,memfcstemp2 +6a20 18007e01 force 0x01 ,pdata +6a21 1fedfe00 reverse pdata ,pdata +6a22 6000c560 store 1 ,memfcstemp1 +6a23 20406a50 call caculate_fcs +6a24 18427e00 copy temp ,pdata +6a25 20600000 rtn + +rfcomm_calculate_fcs_ua: +6a26 1fedfe00 reverse pdata ,pdata +6a27 6000c562 store 1 ,memfcstemp3 +6a28 18007e73 force rsp_tx_ua ,pdata +6a29 1fedfe00 reverse pdata ,pdata +6a2a 6000c561 store 1 ,memfcstemp2 +6a2b 18007e01 force 0x01 ,pdata +6a2c 1fedfe00 reverse pdata ,pdata +6a2d 6000c560 store 1 ,memfcstemp1 +6a2e 20206a50 branch caculate_fcs + +rfcomm_calculate_fcs_dlci0: +6a2f 6800c563 fetch 1 ,mem_rfcomm_initiator +6a30 203a6a33 branch rfcomm_calculate_fcs_dlci0_res ,blank +6a31 58000070 setarg 0x70 +6a32 20600000 rtn + +rfcomm_calculate_fcs_dlci0_res: +6a33 580000aa setarg 0xaa +6a34 20600000 rtn + +rfcomm_save_fcs_uih: +6a35 1fedfe00 reverse pdata ,pdata +6a36 6000c562 store 1 ,memfcstemp3 +6a37 18007eef force rsp_rx_uih ,pdata +6a38 20406a44 call caculate_uihdata_fcs +6a39 680904f7 fetcht 2 ,mem_contw_temp +6a3a 18420a00 copy temp ,contw +6a3b e0a08000 istore 1 ,contw +6a3c 18a20400 copy contw ,temp +6a3d 600904f7 storet 2 ,mem_contw_temp +6a3e 18007eff force rsp_rx_uih_wdata ,pdata +6a3f 20406a44 call caculate_uihdata_fcs +6a40 680904f7 fetcht 2 ,mem_contw_temp +6a41 18420a00 copy temp ,contw +6a42 e0a08000 istore 1 ,contw +6a43 20600000 rtn + +caculate_uihdata_fcs: +6a44 1fedfe00 reverse pdata ,pdata +6a45 6000c561 store 1 ,memfcstemp2 +6a46 68014561 fetch 2 ,memfcstemp2 +6a47 1fed7e00 lshift8 pdata ,pdata +6a48 600184f4 store 3 ,mem_mod2div_temp +6a49 da200107 arg 0x107 ,rega +6a4a da40000f arg 0xf ,regb +6a4b 20406a5d call mod2div +6a4c 1fe2fed7 xor_into 0xd7 ,pdata +6a4d 1fe47e00 invert pdata ,pdata +6a4e 1fedfe00 reverse pdata ,pdata +6a4f 20600000 rtn + +caculate_fcs: +6a50 6801c560 fetch 3 ,memfcstemp1 +6a51 600184f4 store 3 ,mem_mod2div_temp +6a52 da200107 arg 0x107 ,rega +6a53 da40000f arg 0xf ,regb +6a54 20406a5d call mod2div +6a55 1fed7e00 lshift8 pdata ,pdata +6a56 da400007 arg 0x7 ,regb +6a57 20406a5d call mod2div +6a58 1fe2fe2b xor_into 0x2b ,pdata +6a59 1fe47e00 invert pdata ,pdata +6a5a 1fedfe00 reverse pdata ,pdata +6a5b 1fe20400 copy pdata ,temp +6a5c 20600000 rtn + +mod2div: +6a5d da600000 arg 0 ,regc +6a5e 1a427200 copy regb ,loopcnt +6a5f 20407e71 call right_shift_n +6a60 1fe20400 icopy temp + +mod2div_loop: +6a61 18427e00 copy temp ,pdata +6a62 1a63a600 lshift regc ,regc +6a63 c3046a66 bbit0 8 ,mod2div_not_enough_reduction +6a64 9a228400 ixor rega ,temp +6a65 1a60a601 increase 1 ,regc + +mod2div_not_enough_reduction: +6a66 18438400 lshift temp ,temp +6a67 680184f4 fetch 3 ,mem_mod2div_temp +6a68 1a40a5ff increase -1 ,regb +6a69 2a41feff compare 0xff ,regb ,0xff +6a6a 2020ea70 branch mod2div_end ,true +6a6b 1a427200 copy regb ,loopcnt +6a6c 20407e71 call right_shift_n +6a6d 2feffe00 isolate1 0 ,pdata +6a6e 79208400 setflag true ,0 ,temp +6a6f 20206a61 branch mod2div_loop + +mod2div_end: +6a70 18437e00 rshift temp ,pdata +6a71 20600000 rtn + +get_rfcomm_snd_adss: +6a72 6808c55d fetcht 1 ,mem_pn_dlci + +dlci_to_address_cmd: +6a73 184b8400 lshift2 temp ,temp +6a74 79200400 set1 rfcomm_address_ext_len ,temp +6a75 6800c563 fetch 1 ,mem_rfcomm_initiator +6a76 245a6a18 ncall set_cr_bit ,blank +6a77 6008850d storet 1 ,mem_rfcomm_send_adss +6a78 20600000 rtn + +channel_to_dlci: +6a79 18438400 lshift temp ,temp +6a7a 6800c563 fetch 1 ,mem_rfcomm_initiator +6a7b 793a0400 setflag blank ,0 ,temp +6a7c 20600000 rtn + +rfcomm_rx_process_dlci0_sabm: +6a7d 680884fc fetcht 1 ,mem_current_channel +6a7e 7004fed7 jam 0xd7 ,mem_current_fcs +6a7f 20406bb6 call rfcomm_send_ua +6a80 6800c251 fetch 1 ,mem_rfcomm_state +6a81 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata +6a82 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata +6a83 6000c251 store 1 ,mem_rfcomm_state +6a84 70456300 jam 0 ,mem_rfcomm_initiator +6a85 20206b97 branch rfcomm_rx_process_end + +rfcomm_rx_process_dlci0_ua: +6a86 6800c251 fetch 1 ,mem_rfcomm_state +6a87 79207e07 set1 l2cap_channel_rfcomm_only_ua ,pdata +6a88 6000c251 store 1 ,mem_rfcomm_state +6a89 20206b97 branch rfcomm_rx_process_end + +rfcomm_rx_process: +6a8a 4752c034 bpatchx patch34_5 ,mem_patch34 +6a8b 6800c681 fetch 1 ,memui_reconnect_mode +6a8c c0006a8e beq no_reconnection ,rfcomm_rx_process_remote_page +6a8d 20206b4c branch rfcomm_rx_process_reconn + +rfcomm_rx_process_remote_page: +6a8e 68010264 fetch 2 ,mem_l2cap_payload_ptr +6a8f 1fe20c00 copy pdata ,contr +6a90 20406ab8 call get_rfcomm_head_struct +6a91 680084fc fetch 1 ,mem_current_channel +6a92 c0006a94 beq 0 ,parse_dlci0_rp +6a93 20206b18 branch parse_uih_rp + +parse_dlci0_rp: +6a94 47534034 bpatchx patch34_6 ,mem_patch34 +6a95 680084fd fetch 1 ,mem_current_frame_type +6a96 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +6a97 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +6a98 c077ea9b beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +6a99 c029eb44 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +6a9a 20600000 rtn + +parse_dlci0_rp_uih: +6a9b 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +6a9c 1fe20c00 copy pdata ,contr +6a9d 20406ac3 call get_rfcomm_uih_head_struct +6a9e 68008503 fetch 1 ,mem_uih_cmd_type +6a9f c020eaa5 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +6aa0 c0206aad beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +6aa1 c038eae6 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +6aa2 c0386af2 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +6aa3 c024eafd beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +6aa4 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_cmd: +6aa5 20406aaf call parse_dlci0_rp_uih_pn_res_common +6aa6 20206aa7 branch parse_dlci0_rp_uih_pn_cmd_spp + +parse_dlci0_rp_uih_pn_cmd_spp: +6aa7 6800c254 fetch 1 ,mem_spp_state +6aa8 79207e00 set1 rfcomm_channel_state_pn_cmd ,pdata +6aa9 79207e01 set1 rfcomm_channel_state_pn_res ,pdata +6aaa 6000c254 store 1 ,mem_spp_state +6aab 20406be0 call rfcomm_send_param_neg_res +6aac 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_res: +6aad 20406aaf call parse_dlci0_rp_uih_pn_res_common +6aae 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_pn_res_common: +6aaf 20406acb call get_param_payload_ptr +6ab0 20206ad7 branch get_rfcomm_prarmer_negotiation + +get_rfcomm_param_modem_status: +6ab1 20406acb call get_param_payload_ptr +6ab2 e8c08000 ifetch 1 ,contr +6ab3 1fe97e00 rshift3 pdata ,pdata +6ab4 6000c56a store 1 ,mem_ms_channel +6ab5 e8c08000 ifetch 1 ,contr +6ab6 60008508 store 1 ,mem_ms_param +6ab7 20600000 rtn + +get_rfcomm_head_struct: +6ab8 e8c08000 ifetch 1 ,contr +6ab9 600084fb store 1 ,mem_current_adss +6aba 1fe97e00 rshift3 pdata ,pdata +6abb 600084fc store 1 ,mem_current_channel +6abc e8c08000 ifetch 1 ,contr +6abd 600084fd store 1 ,mem_current_frame_type + +get_rfcomm_current_length: +6abe 20406ace call get_rfcomm_length_common +6abf 600904ff storet 2 ,mem_current_length +6ac0 18c27e00 copy contr ,pdata +6ac1 60010501 store 2 ,mem_rfcomm_uih_payload_ptr +6ac2 20600000 rtn + +get_rfcomm_uih_head_struct: +6ac3 e8c08000 ifetch 1 ,contr +6ac4 1fe37e00 rshift pdata ,pdata +6ac5 60008503 store 1 ,mem_uih_cmd_type +6ac6 20406ace call get_rfcomm_length_common +6ac7 60090504 storet 2 ,mem_uih_length +6ac8 18c27e00 copy contr ,pdata +6ac9 60010506 store 2 ,mem_param_payload_ptr +6aca 20600000 rtn + +get_param_payload_ptr: +6acb 68010506 fetch 2 ,mem_param_payload_ptr +6acc 1fe20c00 copy pdata ,contr +6acd 20600000 rtn + +get_rfcomm_length_common: +6ace e8c08000 ifetch 1 ,contr +6acf 1fe20400 copy pdata ,temp +6ad0 18430400 rshift temp ,temp +6ad1 c3800000 rtnbit1 0 +6ad2 e8c08000 ifetch 1 ,contr +6ad3 1fe9fe00 lshift3 pdata ,pdata +6ad4 1ff27e00 lshift4 pdata ,pdata +6ad5 98408400 iadd temp ,temp +6ad6 20600000 rtn + +get_rfcomm_prarmer_negotiation: +6ad7 e8c08000 ifetch 1 ,contr +6ad8 6000c55d store 1 ,mem_pn_dlci +6ad9 e8c08000 ifetch 1 ,contr +6ada 60008509 store 1 ,mem_pn_credit_flow_type_info +6adb e8c08000 ifetch 1 ,contr +6adc 6000850a store 1 ,mem_pn_priority +6add e8c08000 ifetch 1 ,contr +6ade 6000850b store 1 ,mem_pn_acknowledg_timer +6adf e8c10000 ifetch 2 ,contr +6ae0 6001455e store 2 ,mem_pn_max_frame_size +6ae1 e8c08000 ifetch 1 ,contr +6ae2 6000850c store 1 ,mem_pn_max_retrans +6ae3 e8c08000 ifetch 1 ,contr +6ae4 6000c568 store 1 ,mem_remote_credits +6ae5 20600000 rtn + +parse_dlci0_rp_uih_ms_cmd: +6ae6 20406ab1 call get_rfcomm_param_modem_status +6ae7 20206ae8 branch parse_dlci0_rp_uih_ms_cmd_spp + +parse_dlci0_rp_uih_ms_cmd_spp: +6ae8 6800c254 fetch 1 ,mem_spp_state +6ae9 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +6aea 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata +6aeb 6000c254 store 1 ,mem_spp_state +6aec 6808c55d fetcht 1 ,mem_pn_dlci +6aed 184b8400 lshift2 temp ,temp +6aee 18418403 or_into 3 ,temp +6aef 20406c11 call rfcomm_send_modem_status_res +6af0 70456703 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +6af1 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_ms_res: +6af2 700a9908 jam bt_evt_spp_connected ,mem_fifo_temp +6af3 20407d86 call ui_ipc_send_event +6af4 20406ab1 call get_rfcomm_param_modem_status +6af5 6800c56a fetch 1 ,mem_ms_channel +6af6 1fe67c01 sub pdata ,1 ,null +6af7 2022eaf9 branch parse_dlci0_rp_uih_ms_res_spp ,zero +6af8 20202a8c branch assert + +parse_dlci0_rp_uih_ms_res_spp: +6af9 6800c254 fetch 1 ,mem_spp_state +6afa 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata +6afb 6000c254 store 1 ,mem_spp_state +6afc 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_rp_uih_cmd_port: +6afd 20406acb call get_param_payload_ptr +6afe e8c08000 ifetch 1 ,contr +6aff 60008ac2 store 1 ,mem_rpn_dlci +6b00 204052d2 call l2cap_malloc_rfcomm_channel +6b01 204052e0 call l2cap_get_rfcomm_tx_buff +6b02 5800000e setarg 0x000e +6b03 e0a10000 istore 2 ,contw +6b04 6801424a fetch 2 ,mem_rfcomm_remote_cid +6b05 e0a10000 istore 2 ,contw +6b06 6800c563 fetch 1 ,mem_rfcomm_initiator +6b07 1fe3fe00 lshift pdata ,pdata +6b08 79207e00 set1 0 ,pdata +6b09 e0a08000 istore 1 ,contw +6b0a 4753c034 bpatchx patch34_7 ,mem_patch34 +6b0b 580015ef setarg 0x15ef +6b0c e0a10000 istore 2 ,contw +6b0d 58001191 setarg 0x1191 +6b0e e0a10000 istore 2 ,contw +6b0f 68008ac2 fetch 1 ,mem_rpn_dlci +6b10 e0a08000 istore 1 ,contw +6b11 58000007 setarg 0x000007 +6b12 e0a28000 istore 5 ,contw +6b13 58000001 setarg 0x01 +6b14 e0a10000 istore 2 ,contw +6b15 20406a2f call rfcomm_calculate_fcs_dlci0 +6b16 e0a08000 istore 1 ,contw +6b17 20600000 rtn + +parse_uih_rp: +6b18 20206b19 branch parse_uih_rp_spp + +parse_uih_rp_spp: +6b19 47544035 bpatchx patch35_0 ,mem_patch35 +6b1a 680084fd fetch 1 ,mem_current_frame_type +6b1b c039eb21 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +6b1c c01feb25 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +6b1d c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih +6b1e c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +6b1f c029eb46 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +6b20 20600000 rtn + +parse_uih_rp_spp_ua: +6b21 6800c254 fetch 1 ,mem_spp_state +6b22 79207e03 set1 rfcomm_channel_state_ua ,pdata +6b23 6000c254 store 1 ,mem_spp_state +6b24 20206b97 branch rfcomm_rx_process_end + +parse_uih_rp_spp_sabm: +6b25 6800c254 fetch 1 ,mem_spp_state +6b26 79207e03 set1 rfcomm_channel_state_ua ,pdata +6b27 79207e02 set1 rfcomm_channel_state_sabm ,pdata +6b28 6000c254 store 1 ,mem_spp_state +6b29 680084fb fetch 1 ,mem_current_adss +6b2a 20406a26 call rfcomm_calculate_fcs_ua +6b2b 600084fe store 1 ,mem_current_fcs +6b2c 20406bb6 call rfcomm_send_ua +6b2d 680084fb fetch 1 ,mem_current_adss +6b2e 1feb7e00 rshift2 pdata ,pdata +6b2f 6000c55d store 1 ,mem_pn_dlci +6b30 1febfe00 lshift2 pdata ,pdata +6b31 793ffe01 set0 rfcomm_address_cr ,pdata +6b32 79207e00 set1 rfcomm_address_ext_len ,pdata +6b33 d8404565 arg mem_hiufcs_spp ,temp +6b34 600904f7 storet 2 ,mem_contw_temp +6b35 20406a35 call rfcomm_save_fcs_uih +6b36 20206b97 branch rfcomm_rx_process_end + +parse_uih_spp_uih_credits: +6b37 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +6b38 1fe20c00 copy pdata ,contr +6b39 1fe0fe01 increase 1 ,pdata +6b3a 60010501 store 2 ,mem_rfcomm_uih_payload_ptr +6b3b e8c08000 ifetch 1 ,contr +6b3c 6808c568 fetcht 1 ,mem_remote_credits +6b3d 9840fe00 iadd temp ,pdata +6b3e 6000c568 store 1 ,mem_remote_credits + +parse_uih_spp_uih: +6b3f 20406c42 call rfcomm_increase_credit_given + +parse_uih_spp_uih_cont: +6b40 20406a72 call get_rfcomm_snd_adss +6b41 20406c28 call rfcomm_send_uih_without_payload +6b42 20406c4b call spp_process_rx_data +6b43 20206b97 branch rfcomm_rx_process_end + +parse_uih_rp_spp_disconn_send_event: +6b44 700a9909 jam bt_evt_spp_disconnected ,mem_fifo_temp +6b45 20407d86 call ui_ipc_send_event + +parse_uih_rp_spp_disconn: +6b46 20406a0d call rfcomm_init_spp +6b47 680084fb fetch 1 ,mem_current_adss +6b48 20406a26 call rfcomm_calculate_fcs_ua +6b49 600084fe store 1 ,mem_current_fcs +6b4a 20406bb6 call rfcomm_send_ua +6b4b 20206b97 branch rfcomm_rx_process_end + +rfcomm_rx_process_reconn: +6b4c 68010264 fetch 2 ,mem_l2cap_payload_ptr +6b4d 1fe20c00 copy pdata ,contr +6b4e 20406ab8 call get_rfcomm_head_struct +6b4f 680084fc fetch 1 ,mem_current_channel +6b50 c0006b52 beq 0 ,parse_dlci0_reconn +6b51 20206b86 branch parse_uih_reconn + +parse_dlci0_reconn: +6b52 4754c035 bpatchx patch35_1 ,mem_patch35 +6b53 680084fd fetch 1 ,mem_current_frame_type +6b54 c01fea7d beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +6b55 c039ea86 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +6b56 c077eb58 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +6b57 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih: +6b58 68010501 fetch 2 ,mem_rfcomm_uih_payload_ptr +6b59 1fe20c00 copy pdata ,contr +6b5a 20406ac3 call get_rfcomm_uih_head_struct +6b5b 68008503 fetch 1 ,mem_uih_cmd_type +6b5c c020eb61 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +6b5d c0206b61 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +6b5e c038eb6c beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +6b5f c0386b7c beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +6b60 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_pn_cmd: +6b61 20406aaf call parse_dlci0_rp_uih_pn_res_common +6b62 6800c55d fetch 1 ,mem_pn_dlci +6b63 1fe37e00 rshift pdata ,pdata +6b64 6808c564 fetcht 1 ,mem_remote_spp_channel +6b65 98467c00 isub temp ,null +6b66 2022eb68 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +6b67 20202a8c branch assert + +parse_dlci0_reconn_uih_pn_cmd_spp: +6b68 6800c254 fetch 1 ,mem_spp_state +6b69 79207e01 set1 rfcomm_channel_state_pn_res ,pdata +6b6a 6000c254 store 1 ,mem_spp_state +6b6b 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_cmd: +6b6c 20406ab1 call get_rfcomm_param_modem_status +6b6d 6800c56a fetch 1 ,mem_ms_channel +6b6e 6808c564 fetcht 1 ,mem_remote_spp_channel +6b6f 98467c00 isub temp ,null +6b70 2022eb73 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +6b71 20202a8c branch assert +6b72 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_cmd_spp: +6b73 6800c254 fetch 1 ,mem_spp_state +6b74 79207e05 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +6b75 79207e06 set1 rfcomm_channel_state_snd_ms_res ,pdata +6b76 6000c254 store 1 ,mem_spp_state +6b77 6808c55d fetcht 1 ,mem_pn_dlci +6b78 184b8400 lshift2 temp ,temp +6b79 18418403 or_into 3 ,temp +6b7a 20406c11 call rfcomm_send_modem_status_res +6b7b 20206b97 branch rfcomm_rx_process_end + +parse_dlci0_reconn_uih_ms_res: +6b7c 20406ab1 call get_rfcomm_param_modem_status +6b7d 6800c56a fetch 1 ,mem_ms_channel +6b7e 6808c564 fetcht 1 ,mem_remote_spp_channel +6b7f 98467c00 isub temp ,null +6b80 2022eb82 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +6b81 20202a8c branch assert + +parse_dlci0_reconn_uih_ms_res_spp: +6b82 6800c254 fetch 1 ,mem_spp_state +6b83 79207e07 set1 rfcomm_channel_state_rcv_ms_res ,pdata +6b84 6000c254 store 1 ,mem_spp_state +6b85 20206b97 branch rfcomm_rx_process_end + +parse_uih_reconn: +6b86 680084fc fetch 1 ,mem_current_channel +6b87 6808c564 fetcht 1 ,mem_remote_spp_channel +6b88 98467c00 isub temp ,null +6b89 2022eb8c branch parse_uih_reconn_spp ,zero +6b8a 20202a8c branch assert +6b8b 20206b97 branch rfcomm_rx_process_end + +parse_uih_reconn_spp: +6b8c 680084fd fetch 1 ,mem_current_frame_type +6b8d c039eb91 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +6b8e c077eb3f beq rfcomm_frame_type_uih ,parse_uih_spp_uih +6b8f c07feb37 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +6b90 c029eb96 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn + +parse_uih_reconn_spp_ua: +6b91 6800c254 fetch 1 ,mem_spp_state +6b92 79207e03 set1 rfcomm_channel_state_ua ,pdata +6b93 6000c254 store 1 ,mem_spp_state +6b94 20206b97 branch rfcomm_rx_process_end + +parse_uih_reconn_spp_sabm: +6b95 20206b95 branch parse_uih_reconn_spp_sabm + +parse_uih_reconn_spp_disconn: +6b96 20206b46 branch parse_uih_rp_spp_disconn + +rfcomm_rx_process_end: +6b97 20600000 rtn + +rfcomm_send_more_pkt: +6b98 6800c567 fetch 1 ,mem_rfcomm_send_more_pkt +6b99 207a0000 rtn blank +6b9a c001eb9c beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +6b9b 20202a8c branch assert + +rfcomm_send_more_pkt_msc_cmd_spp: +6b9c 70456700 jam 0 ,mem_rfcomm_send_more_pkt +6b9d 204052d2 call l2cap_malloc_rfcomm_channel +6b9e d8400001 arg spp_slave_channel ,temp +6b9f 6808c55d fetcht 1 ,mem_pn_dlci +6ba0 184b8400 lshift2 temp ,temp + +rfcomm_send_more_pkt_msc_cmd_spp0: +6ba1 18418403 or_into 0x03 ,temp +6ba2 da2000aa arg 0xaa ,rega +6ba3 20406bfc call rfcomm_send_modem_status_cmd +6ba4 204052e0 call l2cap_get_rfcomm_tx_buff +6ba5 18a20c00 copy contw ,contr +6ba6 e8c10000 ifetch 2 ,contr +6ba7 203a2a8c branch assert ,blank +6ba8 20600000 rtn + +rfcomm_send_sabm: +6ba9 204052e0 call l2cap_get_rfcomm_tx_buff +6baa 58000004 setarg 0x0004 +6bab e0a10000 istore 2 ,contw +6bac 6801424a fetch 2 ,mem_rfcomm_remote_cid +6bad e0a10000 istore 2 ,contw +6bae 680084fb fetch 1 ,mem_current_adss +6baf e0a08000 istore 1 ,contw +6bb0 47554035 bpatchx patch35_2 ,mem_patch35 +6bb1 5800013f setarg 0x013f +6bb2 e0a10000 istore 2 ,contw +6bb3 680084fe fetch 1 ,mem_current_fcs +6bb4 e0a08000 istore 1 ,contw +6bb5 20600000 rtn + +rfcomm_send_ua: +6bb6 204052d2 call l2cap_malloc_rfcomm_channel +6bb7 204052e0 call l2cap_get_rfcomm_tx_buff +6bb8 58000004 setarg 0x0004 +6bb9 e0a10000 istore 2 ,contw +6bba 6801424a fetch 2 ,mem_rfcomm_remote_cid +6bbb e0a10000 istore 2 ,contw +6bbc 680084fb fetch 1 ,mem_current_adss +6bbd e0a08000 istore 1 ,contw +6bbe 4755c035 bpatchx patch35_3 ,mem_patch35 +6bbf 58000173 setarg 0x0173 +6bc0 e0a10000 istore 2 ,contw +6bc1 680084fe fetch 1 ,mem_current_fcs +6bc2 e0a08000 istore 1 ,contw +6bc3 20600000 rtn + +rfcomm_send_param_neg_cmd: +6bc4 204052e0 call l2cap_get_rfcomm_tx_buff +6bc5 5800000e setarg 0x000e +6bc6 e0a10000 istore 2 ,contw +6bc7 6801424a fetch 2 ,mem_rfcomm_remote_cid +6bc8 e0a10000 istore 2 ,contw +6bc9 6800c563 fetch 1 ,mem_rfcomm_initiator +6bca 1fe3fe00 lshift pdata ,pdata +6bcb 79207e00 set1 0 ,pdata +6bcc e0a08000 istore 1 ,contw +6bcd 47564035 bpatchx patch35_4 ,mem_patch35 +6bce 580015ef setarg 0x15ef +6bcf e0a10000 istore 2 ,contw +6bd0 58001183 setarg 0x1183 +6bd1 e0a10000 istore 2 ,contw +6bd2 18427e00 copy temp ,pdata +6bd3 e0a08000 istore 1 ,contw +6bd4 580000f0 setarg 0x0000f0 +6bd5 e0a18000 istore 3 ,contw +6bd6 5800007f setarg rfcomm_max_frame_size +6bd7 e0a10000 istore 2 ,contw +6bd8 58000000 setarg 0 +6bd9 e0a08000 istore 1 ,contw +6bda 58000001 setarg 0x01 +6bdb e0a08000 istore 1 ,contw +6bdc 20406a2f call rfcomm_calculate_fcs_dlci0 +6bdd e0a08000 istore 1 ,contw +6bde 70456910 jam 0x10 ,mem_credit_given +6bdf 20600000 rtn + +rfcomm_send_param_neg_res: +6be0 204052d2 call l2cap_malloc_rfcomm_channel +6be1 204052e0 call l2cap_get_rfcomm_tx_buff +6be2 5800000e setarg 0x000e +6be3 e0a10000 istore 2 ,contw +6be4 6801424a fetch 2 ,mem_rfcomm_remote_cid +6be5 e0a10000 istore 2 ,contw +6be6 6800c563 fetch 1 ,mem_rfcomm_initiator +6be7 1fe3fe00 lshift pdata ,pdata +6be8 79207e00 set1 0 ,pdata +6be9 e0a08000 istore 1 ,contw +6bea 4756c035 bpatchx patch35_5 ,mem_patch35 +6beb 580015ef setarg 0x15ef +6bec e0a10000 istore 2 ,contw +6bed 58001181 setarg 0x1181 +6bee e0a10000 istore 2 ,contw +6bef 6800c55d fetch 1 ,mem_pn_dlci +6bf0 e0a08000 istore 1 ,contw +6bf1 580000e0 setarg 0x0000e0 +6bf2 e0a18000 istore 3 ,contw +6bf3 6801456c fetch 2 ,mem_rfcomm_max_frame_size +6bf4 e0a10000 istore 2 ,contw +6bf5 58000000 setarg 0x00 +6bf6 e0a08000 istore 1 ,contw +6bf7 6800c56e fetch 1 ,mem_rfcomm_credit_init_data +6bf8 e0a08000 istore 1 ,contw +6bf9 20406a2f call rfcomm_calculate_fcs_dlci0 +6bfa e0a08000 istore 1 ,contw +6bfb 20600000 rtn + +rfcomm_send_modem_status_cmd: +6bfc 204052e0 call l2cap_get_rfcomm_tx_buff +6bfd 58000008 setarg 0x0008 +6bfe e0a10000 istore 2 ,contw +6bff 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c00 e0a10000 istore 2 ,contw +6c01 6800c563 fetch 1 ,mem_rfcomm_initiator +6c02 1fe3fe00 lshift pdata ,pdata +6c03 79207e00 set1 0 ,pdata +6c04 e0a08000 istore 1 ,contw +6c05 47574035 bpatchx patch35_6 ,mem_patch35 +6c06 580009ef setarg 0x09ef +6c07 e0a10000 istore 2 ,contw +6c08 580005e3 setarg 0x05e3 +6c09 e0a10000 istore 2 ,contw +6c0a 18427e00 copy temp ,pdata +6c0b e0a08000 istore 1 ,contw +6c0c 5800008d setarg 0x8d +6c0d e0a08000 istore 1 ,contw +6c0e 20406a2f call rfcomm_calculate_fcs_dlci0 +6c0f e0a08000 istore 1 ,contw +6c10 20600000 rtn + +rfcomm_send_modem_status_res: +6c11 204052d2 call l2cap_malloc_rfcomm_channel +6c12 204052e0 call l2cap_get_rfcomm_tx_buff +6c13 58000008 setarg 0x0008 +6c14 e0a10000 istore 2 ,contw +6c15 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c16 e0a10000 istore 2 ,contw +6c17 18421600 copy temp ,timeup +6c18 6800c563 fetch 1 ,mem_rfcomm_initiator +6c19 1fe3fe00 lshift pdata ,pdata +6c1a 79207e00 set1 0 ,pdata +6c1b e0a08000 istore 1 ,contw +6c1c 4757c035 bpatchx patch35_7 ,mem_patch35 +6c1d 580009ef setarg 0x09ef +6c1e e0a10000 istore 2 ,contw +6c1f 580005e1 setarg 0x05e1 +6c20 e0a10000 istore 2 ,contw +6c21 19627e00 copy timeup ,pdata +6c22 e0a08000 istore 1 ,contw +6c23 5800008d setarg 0x8d +6c24 e0a08000 istore 1 ,contw +6c25 20406a2f call rfcomm_calculate_fcs_dlci0 +6c26 e0a08000 istore 1 ,contw +6c27 20600000 rtn + +rfcomm_send_uih_without_payload: +6c28 47584036 bpatchx patch36_0 ,mem_patch36 +6c29 6800c569 fetch 1 ,mem_credit_given +6c2a 207a0000 rtn blank +6c2b 68110112 hfetch 2 ,core_uart_rxitems +6c2c 247a0000 nrtn blank +6c2d 1a227e00 copy rega ,pdata +6c2e 60008a9b store 1 ,mem_pdatatemp + 1 +6c2f 60088a9a storet 1 ,mem_pdatatemp +6c30 2040526e call l2cap_malloc_is_fifo_full +6c31 247a0000 nrtn blank +6c32 204052d2 call l2cap_malloc_rfcomm_channel +6c33 204052e0 call l2cap_get_rfcomm_tx_buff +6c34 58000005 setarg 0x05 +6c35 e0a10000 istore 2 ,contw +6c36 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c37 e0a10000 istore 2 ,contw +6c38 6800850d fetch 1 ,mem_rfcomm_send_adss +6c39 e0a08000 istore 1 ,contw +6c3a 580001ff setarg 0x01ff +6c3b e0a10000 istore 2 ,contw +6c3c 6800c569 fetch 1 ,mem_credit_given +6c3d e0a08000 istore 1 ,contw +6c3e 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits +6c3f e0a08000 istore 1 ,contw +6c40 70456900 jam 0 ,mem_credit_given +6c41 20600000 rtn + +rfcomm_increase_credit_given: +6c42 4758c036 bpatchx patch36_1 ,mem_patch36 +6c43 6800c56b fetch 1 ,mem_credit_flag +6c44 c1008000 rtneq credit_enable +6c45 680104ff fetch 2 ,mem_current_length +6c46 207a0000 rtn blank +6c47 6800c569 fetch 1 ,mem_credit_given +6c48 1fe0fe01 increase 1 ,pdata +6c49 6000c569 store 1 ,mem_credit_given +6c4a 20600000 rtn + +spp_process_rx_data: +6c4b 6801456f fetch 2 ,mem_cb_receive_spp_data +6c4c 20207f9c branch callback_func + +spp_tx_rfcomm_packet: +6c4d 47594036 bpatchx patch36_2 ,mem_patch36 +6c4e 6800c568 fetch 1 ,mem_remote_credits +6c4f 207a0000 rtn blank +6c50 1fe0ffff increase -1 ,pdata +6c51 6000c568 store 1 ,mem_remote_credits +6c52 6801455e fetch 2 ,mem_pn_max_frame_size +6c53 6809469f fetcht 2 ,mem_current_packet_length +6c54 98467c00 isub temp ,null +6c55 20216c57 branch ssp_tx_rfcomm_from_uart ,positive +6c56 6001469f store 2 ,mem_current_packet_length + +ssp_tx_rfcomm_from_uart: +6c57 6800c569 fetch 1 ,mem_credit_given +6c58 203a6c5f branch ssp_tx_rfcomm_from_uart_without_credit ,blank +6c59 70051001 jam 1 ,mem_rfcomm_send_offset +6c5a 6800c566 fetch 1 ,mem_hiufcs_spp_wcredits +6c5b 6000850f store 1 ,mem_rfcomm_send_fcs +6c5c 580000ff setarg rsp_rx_uih_wdata +6c5d 6000850e store 1 ,mem_rfcomm_send_frame_type +6c5e 20206c64 branch ssp_tx_rfcomm_from_uart_common + +ssp_tx_rfcomm_from_uart_without_credit: +6c5f 70051000 jam 0 ,mem_rfcomm_send_offset +6c60 6800c565 fetch 1 ,mem_hiufcs_spp +6c61 6000850f store 1 ,mem_rfcomm_send_fcs +6c62 580000ef setarg rsp_tx_uih +6c63 6000850e store 1 ,mem_rfcomm_send_frame_type + +ssp_tx_rfcomm_from_uart_common: +6c64 4759c036 bpatchx patch36_3 ,mem_patch36 +6c65 6801469f fetch 2 ,mem_current_packet_length +6c66 1fe67c7f sub pdata ,127 ,null +6c67 20216c6b branch ssp_tx_rfcomm_from_uart_common0 ,positive +6c68 68008510 fetch 1 ,mem_rfcomm_send_offset +6c69 1fe0fe01 increase 1 ,pdata +6c6a 60008510 store 1 ,mem_rfcomm_send_offset + +ssp_tx_rfcomm_from_uart_common0: +6c6b 20406a72 call get_rfcomm_snd_adss +6c6c 6801469f fetch 2 ,mem_current_packet_length +6c6d 1fe0fe08 increase 8 ,pdata +6c6e 68088510 fetcht 1 ,mem_rfcomm_send_offset +6c6f 9840a200 iadd temp ,rega +6c70 20405240 call l2cap_malloc +6c71 60010277 store 2 ,mem_rfcomm_tx_buff_ptr +6c72 1fe0fe04 increase 4 ,pdata +6c73 60010279 store 2 ,mem_rfcomm_tx_payload_ptr +6c74 1fe20a00 copy pdata ,contw +6c75 6800850d fetch 1 ,mem_rfcomm_send_adss +6c76 e0a08000 istore 1 ,contw +6c77 6800850e fetch 1 ,mem_rfcomm_send_frame_type +6c78 e0a08000 istore 1 ,contw +6c79 20406c95 call ssp_tx_write_length +6c7a 20406ca6 call ssp_tx_write_given_credit +6c7b 475a4036 bpatchx patch36_4 ,mem_patch36 +6c7c 68014571 fetch 2 ,mem_nl_rx_data_src +6c7d 1fe20600 copy pdata ,contru +6c7e 6801469f fetch 2 ,mem_current_packet_length +6c7f 1fe27200 copy pdata ,loopcnt +6c80 204066ea call uart_copy_rx_bytes_fast +6c81 18a20400 copy contw ,temp +6c82 18627e00 copy contru ,pdata +6c83 60014571 store 2 ,mem_nl_rx_data_src +6c84 18420a00 copy temp ,contw +6c85 6800850f fetch 1 ,mem_rfcomm_send_fcs +6c86 e0a08000 istore 1 ,contw +6c87 68010277 fetch 2 ,mem_rfcomm_tx_buff_ptr +6c88 1fe20a00 copy pdata ,contw +6c89 6801469f fetch 2 ,mem_current_packet_length +6c8a 68088510 fetcht 1 ,mem_rfcomm_send_offset +6c8b 9840fe00 iadd temp ,pdata +6c8c 1fe0fe04 increase 4 ,pdata +6c8d e0a10000 istore 2 ,contw +6c8e 6801424a fetch 2 ,mem_rfcomm_remote_cid +6c8f e0a10000 istore 2 ,contw +6c90 70456900 jam 0 ,mem_credit_given +6c91 68014573 fetch 2 ,mem_nl_rx_len_all +6c92 c0003a97 beq 0 ,module_hci_command_tx_spp_tx_complete +6c93 700b0500 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +6c94 20600000 rtn + +ssp_tx_write_length: +6c95 475ac036 bpatchx patch36_5 ,mem_patch36 +6c96 6801469f fetch 2 ,mem_current_packet_length +6c97 1fe67c7f sub pdata ,0x7f ,null +6c98 24216c9d nbranch ssp_tx_write_long_packet ,positive +6c99 1fe3fe00 lshift pdata ,pdata +6c9a 79207e00 set1 0 ,pdata +6c9b e0a08000 istore 1 ,contw +6c9c 20600000 rtn + +ssp_tx_write_long_packet: +6c9d 6801469f fetch 2 ,mem_current_packet_length +6c9e 1fe97e00 rshift3 pdata ,pdata +6c9f 1ff18400 rshift4 pdata ,temp +6ca0 1fe17e7f and_into 0x7f ,pdata +6ca1 1fe3fe00 lshift pdata ,pdata +6ca2 793ffe00 set0 0 ,pdata +6ca3 e0a08000 istore 1 ,contw +6ca4 e0a88000 istoret 1 ,contw +6ca5 20600000 rtn + +ssp_tx_write_given_credit: +6ca6 6800c569 fetch 1 ,mem_credit_given +6ca7 207a0000 rtn blank +6ca8 e0a08000 istore 1 ,contw +6ca9 20600000 rtn + +scheduler_process: +6caa 475b4036 bpatchx patch36_6 ,mem_patch36 +6cab 20407d9c call check_51cmd +6cac 204032f6 call app_process_bb_event +6cad 2040631b call process_conn_sm +6cae 475bc036 bpatchx patch36_7 ,mem_patch36 +6caf 204076dc call sp_calc_sequence +6cb0 204076b5 call simple_pairing_sequence +6cb1 204076c6 call master_simple_paring_sequence +6cb2 2040526e call l2cap_malloc_is_fifo_full +6cb3 247a0000 nrtn blank +6cb4 20404da9 call l2cap_call_proc_sigal_pending +6cb5 2040526e call l2cap_malloc_is_fifo_full +6cb6 247a0000 nrtn blank +6cb7 475c4037 bpatchx patch37_0 ,mem_patch37 +6cb8 20406cf5 call process_upper_sm +6cb9 20404f64 call l2cap_send_config_req +6cba 20406b98 call rfcomm_send_more_pkt + +scheduler_process0: +6cbb 20406cbe call scheduler_tx_disconnect_hid +6cbc 475cc037 bpatchx patch37_1 ,mem_patch37 +6cbd 202032f2 branch app_process_bt + +scheduler_tx_disconnect_hid: +6cbe 6800827f fetch 1 ,mem_control_tasks +6cbf c2805087 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +6cc0 c283d091 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +6cc1 20600000 rtn + +scheduler_tx_l2cap_pkt: +6cc2 475d4037 bpatchx patch37_2 ,mem_patch37 +6cc3 20405274 call l2cap_malloc_is_fifo_empty +6cc4 207a0000 rtn blank +6cc5 6800804b fetch 1 ,mem_op +6cc6 c3830000 rtnbit1 op_txl2cap +6cc7 20405258 call l2cap_malloc_fifo_out +6cc8 6001016f store 2 ,mem_txptr +6cc9 1fe20c00 copy pdata ,contr +6cca e8c10000 ifetch 2 ,contr +6ccb 1fe0fe04 increase 4 ,pdata +6ccc 600141dc store 2 ,mem_tx_len +6ccd 7041db06 jam 6 ,mem_tx_lch +6cce 475dc037 bpatchx patch37_3 ,mem_patch37 +6ccf 68014246 fetch 2 ,mem_l2cap_tx_multi_offset +6cd0 203a6cdd branch scheduler_tx_l2cap_start_pkt ,blank +6cd1 6800804b fetch 1 ,mem_op +6cd2 c4038000 rtnbit0 op_pkt_comp +6cd3 793ffe07 set0 op_pkt_comp ,pdata +6cd4 6000804b store 1 ,mem_op +6cd5 7041db05 jam 5 ,mem_tx_lch +6cd6 68094246 fetcht 2 ,mem_l2cap_tx_multi_offset +6cd7 6801016f fetch 2 ,mem_txptr +6cd8 9840fe00 iadd temp ,pdata +6cd9 6001016f store 2 ,mem_txptr +6cda 680141dc fetch 2 ,mem_tx_len +6cdb 98467e00 isub temp ,pdata +6cdc 600141dc store 2 ,mem_tx_len + +scheduler_tx_l2cap_start_pkt: +6cdd 475e4037 bpatchx patch37_4 ,mem_patch37 +6cde 680141dc fetch 2 ,mem_tx_len +6cdf 203a2a8c branch assert ,blank +6ce0 d8400104 arg l2cap_max_pkt_len ,temp +6ce1 98467e00 isub temp ,pdata +6ce2 24216ce9 nbranch scheduler_tx_l2cap_last_pkt ,positive +6ce3 475ec037 bpatchx patch37_5 ,mem_patch37 +6ce4 600941dc storet 2 ,mem_tx_len +6ce5 68014246 fetch 2 ,mem_l2cap_tx_multi_offset +6ce6 9840fe00 iadd temp ,pdata +6ce7 60014246 store 2 ,mem_l2cap_tx_multi_offset +6ce8 20206ceb branch scheduler_tx_l2cap_pkt_end + +scheduler_tx_l2cap_last_pkt: +6ce9 58000000 setarg 0 +6cea 60014246 store 2 ,mem_l2cap_tx_multi_offset + +scheduler_tx_l2cap_pkt_end: +6ceb 6800804b fetch 1 ,mem_op +6cec 79207e06 set1 op_txl2cap ,pdata +6ced 6000804b store 1 ,mem_op +6cee 20600000 rtn + +scheduler_start_upper_sm: +6cef 6800c684 fetch 1 ,mem_ui_profile_supported +6cf0 c2806cf3 bbit1 support_hid ,scheduler_start_upper_sm_hid +6cf1 70028701 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +6cf2 20600000 rtn + +scheduler_start_upper_sm_hid: +6cf3 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +6cf4 20600000 rtn + +process_upper_sm: +6cf5 6800c681 fetch 1 ,memui_reconnect_mode +6cf6 243a6cfb nbranch process_upper_sm_reconn ,blank + +process_upper_sm_remote_page: +6cf7 68008286 fetch 1 ,mem_upper_sm_remote_page +6cf8 207a0000 rtn blank +6cf9 70028600 jam 0 ,mem_upper_sm_remote_page + +process_upper_sm_rp_wait: +6cfa 20600000 rtn + +process_upper_sm_reconn: +6cfb 475f4037 bpatchx patch37_6 ,mem_patch37 +6cfc 68008287 fetch 1 ,mem_upper_sm_reconn +6cfd 207a0000 rtn blank +6cfe c000ed1b beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +6cff c0016d74 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +6d00 c001ed21 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +6d01 c0026d78 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +6d02 c01ded2b beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +6d03 c01e6d7b beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +6d04 c006ed30 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +6d05 c0076d80 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +6d06 c007ed33 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +6d07 c0086d86 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +6d08 c008ed39 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +6d09 c0096d8a beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +6d0a c009ed3f beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +6d0b c00a6d8e beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +6d0c c00aed45 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +6d0d c00b6d92 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +6d0e c00bed4b beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +6d0f c00c6d97 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +6d10 c00ced51 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +6d11 c00d6d9b beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +6d12 c00ded57 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +6d13 c00e6d9f beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +6d14 c00eed5d beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +6d15 c00f6da4 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +6d16 c00fed63 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +6d17 c0106da8 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +6d18 c010ed6e beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +6d19 c0116dac beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait + +process_upper_sm_reconn_wait: +6d1a 20600000 rtn + +process_upper_sm_reconn_sdp_conn: +6d1b 20406db7 call upper_sm_send_sdp_conn +6d1c 70028702 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +6d1d 6800c250 fetch 1 ,mem_sdp_state +6d1e 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d1f 6000c250 store 1 ,mem_sdp_state +6d20 20600000 rtn + +process_upper_sm_reconn_sdp_cfg: +6d21 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +6d22 6800c250 fetch 1 ,mem_sdp_state +6d23 c3810000 rtnbit1 l2cap_channel_state_snd_cfg_req +6d24 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +6d25 20406dbe call upper_sm_send_sdp_cfg +6d26 70028704 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +6d27 6800c250 fetch 1 ,mem_sdp_state +6d28 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d29 6000c250 store 1 ,mem_sdp_state +6d2a 20600000 rtn + +process_upper_sm_reconn_ss_spp: +6d2b 20405274 call l2cap_malloc_is_fifo_empty +6d2c 247a0000 nrtn blank +6d2d 20406dcd call upper_sm_send_ss_spp +6d2e 7002873c jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +6d2f 20600000 rtn + +process_upper_sm_reconn_sdp_disconn: +6d30 20406dc3 call upper_sm_send_sdp_disconn +6d31 7002870e jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +6d32 20600000 rtn + +process_upper_sm_reconn_hid_ctrl_conn: +6d33 20406ddd call upper_sm_send_hid_ctrl_conn +6d34 70028710 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +6d35 6800c252 fetch 1 ,mem_hid_control_state +6d36 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d37 6000c252 store 1 ,mem_hid_control_state +6d38 20600000 rtn + +process_upper_sm_reconn_hid_ctrl_cfg: +6d39 20406de4 call upper_sm_send_hid_ctrl_cfg +6d3a 70028712 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +6d3b 6800c252 fetch 1 ,mem_hid_control_state +6d3c 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d3d 6000c252 store 1 ,mem_hid_control_state +6d3e 20600000 rtn + +process_upper_sm_reconn_hid_int_conn: +6d3f 20406de9 call upper_sm_send_hid_int_conn +6d40 70028714 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +6d41 6800c253 fetch 1 ,mem_hid_interrupt_state +6d42 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d43 6000c253 store 1 ,mem_hid_interrupt_state +6d44 20600000 rtn + +process_upper_sm_reconn_hid_int_cfg: +6d45 20406df0 call upper_sm_send_hid_int_cfg +6d46 70028716 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +6d47 6800c253 fetch 1 ,mem_hid_interrupt_state +6d48 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d49 6000c253 store 1 ,mem_hid_interrupt_state +6d4a 20600000 rtn + +process_upper_sm_reconn_rfcomm_conn: +6d4b 20406dd1 call upper_sm_send_rfcomm_conn +6d4c 70028718 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +6d4d 6800c251 fetch 1 ,mem_rfcomm_state +6d4e 79207e00 set1 l2cap_channel_state_conn_req ,pdata +6d4f 6000c251 store 1 ,mem_rfcomm_state +6d50 20600000 rtn + +process_upper_sm_reconn_rfcomm_cfg: +6d51 20406dd8 call upper_sm_send_rfcomm_cfg +6d52 7002871a jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +6d53 6800c251 fetch 1 ,mem_rfcomm_state +6d54 79207e02 set1 l2cap_channel_state_snd_cfg_req ,pdata +6d55 6000c251 store 1 ,mem_rfcomm_state +6d56 20600000 rtn + +process_upper_sm_reconn_rfcomm_sabm: +6d57 20406df5 call upper_sm_send_rfcomm_sabm +6d58 7002871c jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +6d59 6800c251 fetch 1 ,mem_rfcomm_state +6d5a 79207e06 set1 l2cap_channel_rfcomm_only_sabm ,pdata +6d5b 6000c251 store 1 ,mem_rfcomm_state +6d5c 20600000 rtn + +process_upper_sm_reconn_spp_cmd_pn: +6d5d 20406dfc call upper_sm_send_spp_cmd_pn +6d5e 6800c254 fetch 1 ,mem_spp_state +6d5f 79207e00 set1 rfcomm_channel_state_pn_cmd +6d60 6000c254 store 1 ,mem_spp_state +6d61 7002871e jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +6d62 20600000 rtn + +process_upper_sm_reconn_spp_sabm: +6d63 20406e02 call upper_sm_send_spp_sabm +6d64 6800c254 fetch 1 ,mem_spp_state +6d65 79207e02 set1 rfcomm_channel_state_sabm +6d66 6000c254 store 1 ,mem_spp_state +6d67 70028720 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +6d68 6800c564 fetch 1 ,mem_remote_spp_channel +6d69 1fe9fe00 lshift3 pdata ,pdata +6d6a 1fe1fe03 or_into 3 ,pdata +6d6b d8404565 arg mem_hiufcs_spp ,temp +6d6c 600904f7 storet 2 ,mem_contw_temp +6d6d 20206a35 branch rfcomm_save_fcs_uih + +process_upper_sm_reconn_spp_cmd_ms: +6d6e 20406e0c call upper_sm_send_spp_cmd_ms +6d6f 6800c254 fetch 1 ,mem_spp_state +6d70 79207e04 set1 rfcomm_channel_state_snd_ms_cmd +6d71 6000c254 store 1 ,mem_spp_state +6d72 70028722 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +6d73 20600000 rtn + +process_upper_sm_reconn_sdp_conn_wait: +6d74 6800c250 fetch 1 ,mem_sdp_state +6d75 c4008000 rtnbit0 l2cap_channel_state_conn_res +6d76 70028703 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +6d77 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_sdp_cfg_wait: +6d78 6800c250 fetch 1 ,mem_sdp_state +6d79 c19f8000 rtnne l2cap_channel_setup_complete +6d7a 7002873b jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn + +process_upper_sm_reconn_ss_spp_wait: +6d7b 68008285 fetch 1 ,mem_message_to_uppersm +6d7c c18b8000 rtnne recieve_ss_reasult_hf +6d7d 70028500 jam 0 ,mem_message_to_uppersm +6d7e 7002870d jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +6d7f 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_sdp_disconn_wait: +6d80 6800c250 fetch 1 ,mem_sdp_state +6d81 247a0000 nrtn blank +6d82 6800c684 fetch 1 ,mem_ui_profile_supported +6d83 c2806daf bbit1 support_hid ,process_upper_sm_reconn_setup_hid +6d84 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +6d85 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_hid_ctrl_conn_wait: +6d86 6800c252 fetch 1 ,mem_hid_control_state +6d87 c4008000 rtnbit0 l2cap_channel_state_conn_res +6d88 70028711 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +6d89 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_ctrl_cfg_wait: +6d8a 6800c252 fetch 1 ,mem_hid_control_state +6d8b c19f8000 rtnne l2cap_channel_setup_complete +6d8c 70028713 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +6d8d 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_int_conn_wait: +6d8e 6800c253 fetch 1 ,mem_hid_interrupt_state +6d8f c4008000 rtnbit0 l2cap_channel_state_conn_res +6d90 70028715 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +6d91 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_hid_int_cfg_wait: +6d92 6800c253 fetch 1 ,mem_hid_interrupt_state +6d93 c19f8000 rtnne l2cap_channel_setup_complete +6d94 6800c684 fetch 1 ,mem_ui_profile_supported +6d95 c2836db1 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +6d96 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_rfcomm_conn_wait: +6d97 6800c251 fetch 1 ,mem_rfcomm_state +6d98 c4008000 rtnbit0 l2cap_channel_state_conn_res +6d99 70028719 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +6d9a 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_rfcomm_cfg_wait: +6d9b 6800c251 fetch 1 ,mem_rfcomm_state +6d9c c19f8000 rtnne l2cap_channel_setup_complete +6d9d 7002871b jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +6d9e 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_rfcomm_sabm_wait: +6d9f 6800c251 fetch 1 ,mem_rfcomm_state +6da0 c1ff8000 rtnne l2cap_channel_rfcomm_dlci0_opened +6da1 6800c684 fetch 1 ,mem_ui_profile_supported +6da2 c2836db3 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +6da3 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_spp_cmd_pn_wait: +6da4 6800c254 fetch 1 ,mem_spp_state +6da5 c4008000 rtnbit0 rfcomm_channel_state_pn_res +6da6 7002871f jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +6da7 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_spp_sabm_wait: +6da8 6800c254 fetch 1 ,mem_spp_state +6da9 c4018000 rtnbit0 rfcomm_channel_state_ua +6daa 70028721 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +6dab 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_spp_cmd_ms_wait: +6dac 6800c254 fetch 1 ,mem_spp_state +6dad c1ff8000 rtnne rfcomm_channel_setup_complete +6dae 20206db5 branch process_upper_sm_reconn_termination + +process_upper_sm_reconn_setup_hid: +6daf 7002870f jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +6db0 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_rfcomm: +6db1 70028717 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +6db2 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_setup_spp: +6db3 7002871d jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +6db4 20206cfb branch process_upper_sm_reconn + +process_upper_sm_reconn_termination: +6db5 70028700 jam 0 ,mem_upper_sm_reconn +6db6 20600000 rtn + +upper_sm_send_sdp_conn: +6db7 475fc037 bpatchx patch37_7 ,mem_patch37 +6db8 204052b8 call l2cap_malloc_signal_channel +6db9 58000001 setarg psm_sdp +6dba 1fe20400 copy pdata ,temp +6dbb 58000050 setarg l2cap_sdp_channel +6dbc 1fe21600 copy pdata ,timeup +6dbd 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_sdp_cfg: +6dbe 47604038 bpatchx patch38_0 ,mem_patch38 +6dbf 204052b8 call l2cap_malloc_signal_channel +6dc0 68014248 fetch 2 ,mem_sdp_remote_cid +6dc1 1fe20400 copy pdata ,temp +6dc2 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_sdp_disconn: +6dc3 4760c038 bpatchx patch38_1 ,mem_patch38 +6dc4 204052b8 call l2cap_malloc_signal_channel +6dc5 68014248 fetch 2 ,mem_sdp_remote_cid +6dc6 1fe20400 copy pdata ,temp +6dc7 d9600050 arg l2cap_sdp_channel ,timeup +6dc8 204050cc call ml2cap_send_signal_disconn_req +6dc9 6800c250 fetch 1 ,mem_sdp_state +6dca 793ffe05 set0 l2cap_channel_state_rcv_cfg_res ,pdata +6dcb 6000c250 store 1 ,mem_sdp_state +6dcc 20600000 rtn + +upper_sm_send_ss_spp: +6dcd 47614038 bpatchx patch38_2 ,mem_patch38 +6dce 204052c5 call l2cap_malloc_sdp_channel +6dcf 20407138 call sdp_send_spp_request +6dd0 202050e7 branch msdp_send_req_done + +upper_sm_send_rfcomm_conn: +6dd1 4761c038 bpatchx patch38_3 ,mem_patch38 +6dd2 204052b8 call l2cap_malloc_signal_channel +6dd3 58000003 setarg psm_rfcomm +6dd4 1fe20400 copy pdata ,temp +6dd5 58000051 setarg l2cap_rfcomm_channel +6dd6 1fe21600 copy pdata ,timeup +6dd7 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_rfcomm_cfg: +6dd8 47624038 bpatchx patch38_4 ,mem_patch38 +6dd9 204052b8 call l2cap_malloc_signal_channel +6dda 6801424a fetch 2 ,mem_rfcomm_remote_cid +6ddb 1fe20400 copy pdata ,temp +6ddc 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_hid_ctrl_conn: +6ddd 4762c038 bpatchx patch38_5 ,mem_patch38 +6dde 204052b8 call l2cap_malloc_signal_channel +6ddf 58000011 setarg psm_hid_control +6de0 1fe20400 copy pdata ,temp +6de1 58000052 setarg l2cap_hid_control_channel +6de2 1fe21600 copy pdata ,timeup +6de3 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_hid_ctrl_cfg: +6de4 47634038 bpatchx patch38_6 ,mem_patch38 +6de5 204052b8 call l2cap_malloc_signal_channel +6de6 6801424c fetch 2 ,mem_hid_ctrl_remote_cid +6de7 1fe20400 copy pdata ,temp +6de8 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_hid_int_conn: +6de9 4763c038 bpatchx patch38_7 ,mem_patch38 +6dea 204052b8 call l2cap_malloc_signal_channel +6deb 58000013 setarg psm_hid_interrupt +6dec 1fe20400 copy pdata ,temp +6ded 58000053 setarg l2cap_hid_interrupt_channel +6dee 1fe21600 copy pdata ,timeup +6def 202050a8 branch ml2cap_send_signal_connect_req + +upper_sm_send_hid_int_cfg: +6df0 47644039 bpatchx patch39_0 ,mem_patch39 +6df1 204052b8 call l2cap_malloc_signal_channel +6df2 6801424e fetch 2 ,mem_hid_int_remote_cid +6df3 1fe20400 copy pdata ,temp +6df4 202050b7 branch ml2cap_send_signal_config_req + +upper_sm_send_rfcomm_sabm: +6df5 4764c039 bpatchx patch39_1 ,mem_patch39 +6df6 204052d2 call l2cap_malloc_rfcomm_channel +6df7 7004fb03 jam 3 ,mem_current_adss +6df8 7004fe1c jam 0x1c ,mem_current_fcs +6df9 20406ba9 call rfcomm_send_sabm +6dfa 70456301 jam 1 ,mem_rfcomm_initiator +6dfb 20600000 rtn + +upper_sm_send_spp_cmd_pn: +6dfc 47654039 bpatchx patch39_2 ,mem_patch39 +6dfd 204052d2 call l2cap_malloc_rfcomm_channel +6dfe 6808c564 fetcht 1 ,mem_remote_spp_channel +6dff 20406a79 call channel_to_dlci +6e00 6008c55d storet 1 ,mem_pn_dlci +6e01 20206bc4 branch rfcomm_send_param_neg_cmd + +upper_sm_send_spp_sabm: +6e02 4765c039 bpatchx patch39_3 ,mem_patch39 +6e03 204052d2 call l2cap_malloc_rfcomm_channel +6e04 6808c55d fetcht 1 ,mem_pn_dlci +6e05 20406a73 call dlci_to_address_cmd +6e06 20406a1a call rfcomm_calculate_fcs_sabm +6e07 600084fe store 1 ,mem_current_fcs +6e08 6808c55d fetcht 1 ,mem_pn_dlci +6e09 20406a73 call dlci_to_address_cmd +6e0a 600884fb storet 1 ,mem_current_adss +6e0b 20206ba9 branch rfcomm_send_sabm + +upper_sm_send_spp_cmd_ms: +6e0c 47664039 bpatchx patch39_4 ,mem_patch39 +6e0d 204052d2 call l2cap_malloc_rfcomm_channel +6e0e 6808c55d fetcht 1 ,mem_pn_dlci +6e0f 20406a73 call dlci_to_address_cmd +6e10 20206bfc branch rfcomm_send_modem_status_cmd + +sdp_process: +6e11 4766c039 bpatchx patch39_5 ,mem_patch39 +6e12 68010264 fetch 2 ,mem_l2cap_payload_ptr +6e13 98000c00 iforce contr +6e14 e8c08000 ifetch 1 ,contr +6e15 1fe22400 copy pdata ,regb +6e16 6000851b store 1 ,mem_sdp_pduid +6e17 e8c10000 ifetch 2 ,contr +6e18 6001051c store 2 ,mem_sdp_transactionid +6e19 e8c08000 ifetch 1 ,contr +6e1a 1fed1600 lshift8 pdata ,timeup +6e1b e8c08000 ifetch 1 ,contr +6e1c 99609600 iadd timeup ,timeup +6e1d 47674039 bpatchx patch39_6 ,mem_patch39 +6e1e 18c20400 copy contr ,temp +6e1f df200004 arg 4 ,loopcnt +6e20 d8a0052a arg mem_sdp_handle_list ,contw +6e21 20407ec6 call memset0 +6e22 18420c00 copy temp ,contr +6e23 1a427e00 deposit regb +6e24 c000efba beq sdp_error_res ,sdp_process_error_res +6e25 c0016e2c beq sdp_search_req ,sdp_process_ss_req +6e26 c001efba beq sdp_search_res ,sdp_process_ss_res +6e27 c0026e54 beq sdp_attribute_req ,sdp_process_sa_req +6e28 c002efba beq sdp_attribute_res ,sdp_process_sa_res +6e29 c0036f02 beq sdp_searchattrib_req ,sdp_process_ssa_req +6e2a c003efba beq sdp_searchattrib_res ,sdp_process_ssa_res +6e2b 20206fc1 branch sdp_insufficient_resource + +sdp_process_ss_req: +6e2c 4767c039 bpatchx patch39_7 ,mem_patch39 +6e2d 20406fd0 call ask_serviceclassid +6e2e 2841fe01 compare 1 ,temp ,0xff +6e2f 2020f040 branch ss_empty_rsp ,true +6e30 2841feff compare 0xff ,temp ,0xff +6e31 2020efc4 branch sdp_invalid_request_syntax ,true +6e32 e8c10000 ifetch 2 ,contr +6e33 60010522 store 2 ,mem_sdp_record_maxcnt +6e34 196097fe increase -2 ,timeup +6e35 196097ff increase -1 ,timeup +6e36 2422efbe nbranch sdp_invalid_pdu_size ,zero +6e37 d9600511 arg mem_sdp_uuid_search_ptr ,timeup +6e38 e9610000 ifetch 2 ,timeup +6e39 207a0000 rtn blank +6e3a 20407082 call search_all_uuid +6e3b 204052d0 call l2cap_get_sdp_tx_payload +6e3c 18007e03 force 3 ,pdata +6e3d e0a08000 istore 1 ,contw +6e3e 6801051c fetch 2 ,mem_sdp_transactionid +6e3f e0a10000 istore 2 ,contw +6e40 18ebfe00 lshift2 queue ,pdata +6e41 1fe0fe05 add pdata ,5 ,pdata +6e42 1fe0a605 add pdata ,5 ,regc +6e43 1ff0fe00 byteswap pdata ,pdata +6e44 e0a10000 istore 2 ,contw +6e45 18e27e00 deposit queue +6e46 1ff0fe00 byteswap pdata ,pdata +6e47 e0a10000 istore 2 ,contw +6e48 e0a10000 istore 2 ,contw +6e49 d8c0052a arg mem_sdp_handle_list ,contr +6e4a 18e27200 copy queue ,loopcnt +6e4b 2022ee4f branch ss_req_blank ,zero + +ss_req_loop: +6e4c e8c20000 ifetch 4 ,contr +6e4d e0a20000 istore 4 ,contw +6e4e c2006e4c loop ss_req_loop + +ss_req_blank: +6e4f 18007e00 force 0 ,pdata +6e50 e0a08000 istore 1 ,contw +6e51 1a627e00 deposit regc +6e52 60010275 store 2 ,mem_sdp_tx_pkt_length +6e53 20600000 rtn + +sdp_process_sa_req: +6e54 4768403a bpatchx patch3a_0 ,mem_patch3a +6e55 e8c20000 ifetch 4 ,contr +6e56 60020524 store 4 ,mem_sdp_record_handle +6e57 196097fc increase -4 ,timeup +6e58 20406f2e call sdp_store_maxbyte +6e59 60010520 store 2 ,mem_sdp_attribute_maxbyte +6e5a 196097fe increase -2 ,timeup +6e5b 20407028 call dataelementtype6 +6e5c 2022efc4 branch sdp_invalid_request_syntax ,zero +6e5d 2a21fe05 compare 5 ,rega ,0xff +6e5e 2020ee62 branch sa_judge_wholerange ,true + +sa_isnot_wholerange: +6e5f d8a0052a arg mem_sdp_attrib_list ,contw +6e60 18000e00 force 0 ,queue +6e61 20206e71 branch sa_req_loop + +sa_judge_wholerange: +6e62 e8c08000 ifetch 1 ,contr +6e63 c0856fc4 bne sdp_attribute_range ,sdp_invalid_request_syntax +6e64 e8c10000 ifetch 2 ,contr +6e65 243a6e6f nbranch sa_judge_wholerange_false1 ,blank +6e66 e8c08000 ifetch 1 ,contr +6e67 c0ffee6d bne 0xff ,sa_judge_wholerange_false2 +6e68 e8c08000 ifetch 1 ,contr +6e69 c0ffee6b bne 0xff ,sa_judge_wholerange_false3 +6e6a 20206eb8 branch sa_req_all + +sa_judge_wholerange_false3: +6e6b 18c08dfb increase -5 ,contr +6e6c 20206e5f branch sa_isnot_wholerange + +sa_judge_wholerange_false2: +6e6d 18c08dfc increase -4 ,contr +6e6e 20206e5f branch sa_isnot_wholerange + +sa_judge_wholerange_false1: +6e6f 18c08dfd increase -3 ,contr +6e70 20206e5f branch sa_isnot_wholerange + +sa_req_loop: +6e71 e8c08000 ifetch 1 ,contr +6e72 c004ee86 beq sdp_attribute_id ,sa_req_one_id +6e73 c0056e74 beq sdp_attribute_range ,sa_req_range + +sa_req_range: +6e74 e8c10000 ifetch 2 ,contr +6e75 e0a10000 istore 2 ,contw +6e76 18e08e01 increase 1 ,queue +6e77 1ff0a400 byteswap pdata ,regb +6e78 e8c10000 ifetch 2 ,contr +6e79 1ff0fe00 byteswap pdata ,pdata + +sa_req_range_id_increase: +6e7a 1a40a401 increase 1 ,regb +6e7b 9a467c00 isub regb ,null +6e7c 24216e83 nbranch sa_req_range_id_finish ,positive +6e7d 1fe22600 copy pdata ,regc +6e7e 1a50fe00 byteswap regb ,pdata +6e7f e0a10000 istore 2 ,contw +6e80 18e08e01 increase 1 ,queue +6e81 1a627e00 copy regc ,pdata +6e82 20206e7a branch sa_req_range_id_increase + +sa_req_range_id_finish: +6e83 196097fb increase -5 ,timeup +6e84 1a20a3fb increase -5 ,rega +6e85 20206e8b branch sa_req_check_next_id + +sa_req_one_id: +6e86 e8c10000 ifetch 2 ,contr +6e87 e0a10000 istore 2 ,contw +6e88 18e08e01 increase 1 ,queue +6e89 196097fd increase -3 ,timeup +6e8a 1a20a3fd increase -3 ,rega + +sa_req_check_next_id: +6e8b 24216fc4 nbranch sdp_invalid_request_syntax ,positive +6e8c 2422ee71 nbranch sa_req_loop ,zero +6e8d 196097ff increase -1 ,timeup +6e8e 2422efc4 nbranch sdp_invalid_request_syntax ,zero +6e8f 204052d0 call l2cap_get_sdp_tx_payload +6e90 18a08a0a increase 10 ,contw +6e91 da20052a arg mem_sdp_attrib_list ,rega + +sa_req_handle_attributelist_next: +6e92 18e27e00 copy queue ,pdata +6e93 203a6ea5 branch sa_req_handle_attributelist_end ,blank +6e94 ea210000 ifetch 2 ,rega +6e95 203a6ea5 branch sa_req_handle_attributelist_end ,blank +6e96 98002400 iforce regb +6e97 68020524 fetch 4 ,mem_sdp_record_handle +6e98 98000400 iforce temp +6e99 204070e7 call search_handle_attrib +6e9a 18c27e00 copy contr ,pdata +6e9b 203a6ea2 branch sa_req_handle_attributelist_notfound ,blank +6e9c 18c08dfd increase -3 ,contr +6e9d e8c18000 ifetch 3 ,contr +6e9e e0a18000 istore 3 ,contw +6e9f 2040705b call sdp_data_len +6ea0 98007200 iforce loopcnt +6ea1 20407f01 call memcpy + +sa_req_handle_attributelist_notfound: +6ea2 1a20a202 increase 2 ,rega +6ea3 18e08fff increase -1 ,queue +6ea4 20206e92 branch sa_req_handle_attributelist_next + +sa_req_handle_attributelist_end: +6ea5 da200005 arg sdp_attribute_res ,rega +6ea6 20406f84 call ssa_req_range_lastfreg_common +6ea7 68010275 fetch 2 ,mem_sdp_tx_pkt_length +6ea8 c005f043 beq 11 ,sa_empty_rsp +6ea9 20206f9a branch ssa_req_range_attrbutes_length_no_continue + +sdp_store_continue_common: +6eaa e8c08000 ifetch 1 ,contr +6eab c0006eae beq 0 ,sdp_store_continue_0byte +6eac c000eeb0 beq 1 ,sdp_store_continue_1byte +6ead c0016eb3 beq 2 ,sdp_store_continue_2byte + +sdp_store_continue_0byte: +6eae 196097ff increase -1 ,timeup +6eaf 20206eb6 branch sdp_store_continue_end + +sdp_store_continue_1byte: +6eb0 e8c08000 ifetch 1 ,contr +6eb1 196097fe increase -2 ,timeup +6eb2 20206eb6 branch sdp_store_continue_end + +sdp_store_continue_2byte: +6eb3 e8c10000 ifetch 2 ,contr +6eb4 1ff0fe00 byteswap pdata ,pdata +6eb5 196097fd increase -3 ,timeup + +sdp_store_continue_end: +6eb6 60010519 store 2 ,mem_sdp_continue_byte +6eb7 20600000 rtn + +sa_req_all: +6eb8 196097fb increase -5 ,timeup +6eb9 20406eaa call sdp_store_continue_common +6eba 2422efbe nbranch sdp_invalid_pdu_size ,zero +6ebb 680a0524 fetcht 4 ,mem_sdp_record_handle +6ebc 204070b1 call search_handle +6ebd 2422efbb nbranch sdp_invalid_service_record_handle ,zero +6ebe 18c22200 copy contr ,rega +6ebf 204052d0 call l2cap_get_sdp_tx_payload +6ec0 1a220c00 copy rega ,contr +6ec1 18a08a03 increase 3 ,contw +6ec2 18c21600 copy contr ,timeup +6ec3 20407062 call sdp_get_data +6ec4 1fe22200 copy pdata ,rega +6ec5 68010519 fetch 2 ,mem_sdp_continue_byte +6ec6 1fe22400 copy pdata ,regb +6ec7 1a227e00 copy rega ,pdata +6ec8 9a462400 isub regb ,regb +6ec9 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6eca 9a467c00 isub regb ,null +6ecb 24216ee7 nbranch sa_req_all_fragment_sdp ,positive +6ecc 78547c00 disable user +6ecd 68010519 fetch 2 ,mem_sdp_continue_byte +6ece 203a6eda branch sa_req_all_fisrt_fragment ,blank +6ecf 99608c00 iadd timeup ,contr +6ed0 1a40a403 increase 3 ,regb +6ed1 1a427200 copy regb ,loopcnt +6ed2 1f227e00 copy loopcnt ,pdata +6ed3 1fe0fe03 increase 3 ,pdata +6ed4 1ff0fe00 byteswap pdata ,pdata +6ed5 e0a10000 istore 2 ,contw +6ed6 1f227e00 copy loopcnt ,pdata +6ed7 1ff0fe00 byteswap pdata ,pdata +6ed8 e0a10000 istore 2 ,contw +6ed9 20206ef5 branch sa_req_all_answer_attributelist_full_loop + +sa_req_all_fisrt_fragment: +6eda 1a20f206 add rega ,6 ,loopcnt +6edb 20346ede branch sa_req_all_parlength_continue_byte ,user +6edc 1f30fe00 byteswap loopcnt ,pdata +6edd 20206ee1 branch sa_req_all_parlength_continue_byte_end + +sa_req_all_parlength_continue_byte: +6ede 1f227e00 copy loopcnt ,pdata +6edf 1fe0fe02 increase 2 ,pdata +6ee0 1ff0fe00 byteswap pdata ,pdata + +sa_req_all_parlength_continue_byte_end: +6ee1 e0a10000 istore 2 ,contw +6ee2 1f20f3fd increase -3 ,loopcnt +6ee3 1f30fe00 byteswap loopcnt ,pdata +6ee4 e0a10000 istore 2 ,contw +6ee5 19620c00 copy timeup ,contr +6ee6 20206ef5 branch sa_req_all_answer_attributelist_full_loop + +sa_req_all_fragment_sdp: +6ee7 78347c00 enable user +6ee8 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6ee9 1fe22200 copy pdata ,rega +6eea 1a227200 copy rega ,loopcnt +6eeb 68010519 fetch 2 ,mem_sdp_continue_byte +6eec 203a6eda branch sa_req_all_fisrt_fragment ,blank +6eed 99608c00 iadd timeup ,contr +6eee 1a227e00 copy rega ,pdata +6eef 1fe0fe05 increase 5 ,pdata +6ef0 1ff0fe00 byteswap pdata ,pdata +6ef1 e0a10000 istore 2 ,contw +6ef2 1a227e00 copy rega ,pdata +6ef3 1ff0fe00 byteswap pdata ,pdata +6ef4 e0a10000 istore 2 ,contw + +sa_req_all_answer_attributelist_full_loop: +6ef5 20407f01 call memcpy +6ef6 24346efe nbranch sa_req_all_last_frag_continue ,user +6ef7 18007e02 force 2 ,pdata +6ef8 e0a08000 istore 1 ,contw +6ef9 18c27e00 copy contr ,pdata +6efa 99667e00 isub timeup ,pdata +6efb 1ff0fe00 byteswap pdata ,pdata +6efc e0a10000 istore 2 ,contw +6efd 20206f00 branch sa_req_all_frag_end + +sa_req_all_last_frag_continue: +6efe 18007e00 force 0 ,pdata +6eff e0a08000 istore 1 ,contw + +sa_req_all_frag_end: +6f00 da200005 arg sdp_attribute_res ,rega +6f01 20206fb0 branch ssa_req_range_common + +sdp_process_ssa_req: +6f02 4768c03a bpatchx patch3a_1 ,mem_patch3a +6f03 20406fd0 call ask_serviceclassid +6f04 2841feff compare 0xff ,temp ,0xff +6f05 2020efc4 branch sdp_invalid_request_syntax ,true +6f06 20406f2e call sdp_store_maxbyte +6f07 60010520 store 2 ,mem_sdp_attribute_maxbyte +6f08 196097fe increase -2 ,timeup +6f09 20407028 call dataelementtype6 +6f0a d8a0052a arg mem_sdp_attrib_list ,contw +6f0b 18000e00 force 0 ,queue + +ssa_req_loop: +6f0c e8c08000 ifetch 1 ,contr +6f0d c0056f36 beq sdp_attribute_range ,ssa_req_range +6f0e e8c10000 ifetch 2 ,contr +6f0f e0a10000 istore 2 ,contw +6f10 18e08e01 increase 1 ,queue +6f11 196097fd increase -3 ,timeup +6f12 1a20a3fd increase -3 ,rega +6f13 24216fc4 nbranch sdp_invalid_request_syntax ,positive +6f14 2422ef0c nbranch ssa_req_loop ,zero +6f15 196097ff increase -1 ,timeup +6f16 2422efc4 nbranch sdp_invalid_request_syntax ,zero +6f17 204052d0 call l2cap_get_sdp_tx_payload +6f18 18a08a0d increase 13 ,contw +6f19 68010511 fetch 2 ,mem_sdp_uuid_search_ptr +6f1a 98002600 iforce regc +6f1b da20052a arg mem_sdp_attrib_list ,rega + +ssa_req_attributelist_next: +6f1c ea210000 ifetch 2 ,rega +6f1d 203a6f29 branch ssa_req_attributelist_end ,blank +6f1e 98002400 iforce regb +6f1f 204070c6 call search_attrib +6f20 203a6f27 branch ssa_req_attributelist_notfound ,blank +6f21 18c08dfd increase -3 ,contr +6f22 e8c18000 ifetch 3 ,contr +6f23 e0a18000 istore 3 ,contw +6f24 2040705b call sdp_data_len +6f25 98007200 iforce loopcnt +6f26 20407f01 call memcpy + +ssa_req_attributelist_notfound: +6f27 1a20a202 increase 2 ,rega +6f28 20206f1c branch ssa_req_attributelist_next + +ssa_req_attributelist_end: +6f29 20406f83 call ssa_req_range_lastfreg +6f2a 68010275 fetch 2 ,mem_sdp_tx_pkt_length +6f2b c0077046 beq 14 ,ssa_empty_rsp +6f2c 20406f9a call ssa_req_range_attrbutes_length_no_continue +6f2d 20206f9a branch ssa_req_range_attrbutes_length_no_continue + +sdp_store_maxbyte: +6f2e e8c10000 ifetch 2 ,contr +6f2f 1ff0fe00 byteswap pdata ,pdata +6f30 1fe0fffd increase -3 ,pdata +6f31 d84000c8 arg 200 ,temp +6f32 98467c00 isub temp ,null +6f33 24610000 nrtn positive +6f34 580000c8 setarg 200 +6f35 20600000 rtn + +ssa_req_range: +6f36 18c08c04 increase 4 ,contr +6f37 196097fb increase -5 ,timeup +6f38 1a20a3fb increase -5 ,rega +6f39 2422efc4 nbranch sdp_invalid_request_syntax ,zero +6f3a 20406eaa call sdp_store_continue_common +6f3b 2422efbe nbranch sdp_invalid_pdu_size ,zero +6f3c d9600511 arg mem_sdp_uuid_search_ptr ,timeup +6f3d 20407082 call search_all_uuid +6f3e 18e27e00 deposit queue +6f3f 203a7046 branch ssa_empty_rsp ,blank +6f40 6000854e store 1 ,mem_handle_humber +6f41 1a427e00 copy regb ,pdata +6f42 6001054c store 2 ,mem_sdp_all_length +6f43 d8e00000 arg 0 ,queue +6f44 da200000 arg 0 ,rega +6f45 204052d0 call l2cap_get_sdp_tx_payload +6f46 18a08a0a increase 10 ,contw + +ssa_req_range_find_handle: +6f47 20406f6c call ssa_req_range_get_length +6f48 24342a8c nbranch assert ,user +6f49 18c21600 copy contr ,timeup +6f4a 1fe22600 copy pdata ,regc +6f4b 9a20a200 iadd rega ,rega +6f4c 68010519 fetch 2 ,mem_sdp_continue_byte +6f4d 1fe22400 copy pdata ,regb +6f4e 203a6f75 branch ssa_req_range_first_freg ,blank + +ssa_req_range_later_freg_with_continue: +6f4f 1a227e00 copy rega ,pdata +6f50 9a462400 isub regb ,regb +6f51 2022ef67 branch ssa_req_range_next_handle ,zero +6f52 24216f67 nbranch ssa_req_range_next_handle ,positive +6f53 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6f54 9a467c00 isub regb ,null +6f55 2022ef5e branch ssa_req_range_maxbyte_with_continue ,zero +6f56 24216f5e nbranch ssa_req_range_maxbyte_with_continue ,positive + +ssa_req_range_send_not_maxbyte: +6f57 1a427200 copy regb ,loopcnt +6f58 20406f61 call ssa_req_range_maxbyte_with_continue_cpy +6f59 6800854e fetch 1 ,mem_handle_humber +6f5a 18e08e01 increase 1 ,queue +6f5b 98e67c00 isub queue ,null +6f5c 2022ef83 branch ssa_req_range_lastfreg ,zero +6f5d 20206fa0 branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue: +6f5e 1fe27200 copy pdata ,loopcnt +6f5f 20406f61 call ssa_req_range_maxbyte_with_continue_cpy +6f60 20206fa0 branch ssa_req_range_freg_with_continue + +ssa_req_range_maxbyte_with_continue_cpy: +6f61 18a08bfd increase -3 ,contw +6f62 1f220400 copy loopcnt ,temp +6f63 1a627e00 copy regc ,pdata +6f64 9a467e00 isub regb ,pdata +6f65 99608c00 iadd timeup ,contr +6f66 20207f01 branch memcpy + +ssa_req_range_next_handle: +6f67 6800854e fetch 1 ,mem_handle_humber +6f68 18e08e01 increase 1 ,queue +6f69 98e67c00 isub queue ,null +6f6a 20628000 rtn zero +6f6b 20206f47 branch ssa_req_range_find_handle + +ssa_req_range_get_length: +6f6c 20407fe9 call disable_user +6f6d d8c0052a arg mem_sdp_handle_list ,contr +6f6e 18ebfe00 lshift2 queue ,pdata +6f6f 98c08c00 iadd contr ,contr +6f70 e8ca0000 ifetcht 4 ,contr +6f71 204070b1 call search_handle +6f72 24628000 nrtn zero +6f73 2040705b call sdp_data_len +6f74 20207fe7 branch enable_user + +ssa_req_range_first_freg: +6f75 68010520 fetch 2 ,mem_sdp_attribute_maxbyte +6f76 9a267c00 isub rega ,null +6f77 24216f8f nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +6f78 1a227200 copy rega ,loopcnt +6f79 1f220400 copy loopcnt ,temp +6f7a 19620c00 copy timeup ,contr +6f7b 20407f01 call memcpy +6f7c 6801054c fetch 2 ,mem_sdp_all_length +6f7d 9a267c00 isub rega ,null +6f7e 2022ef81 branch ssa_req_range_freg_no_continue ,zero + +ssa_req_range_firstfreg_not_maxbyte_with_continue: +6f7f 20406fa0 call ssa_req_range_freg_with_continue +6f80 20206f94 branch ssa_req_range_attrbutes_length + +ssa_req_range_freg_no_continue: +6f81 20406f83 call ssa_req_range_lastfreg +6f82 20206f94 branch ssa_req_range_attrbutes_length + +ssa_req_range_lastfreg: +6f83 da200007 arg sdp_searchattrib_res ,rega + +ssa_req_range_lastfreg_common: +6f84 18007e00 force 0 ,pdata +6f85 e0a08000 istore 1 ,contw +6f86 20406fb0 call ssa_req_range_common +6f87 68090275 fetcht 2 ,mem_sdp_tx_pkt_length +6f88 184085fb increase -5 ,temp +6f89 1850fe00 byteswap temp ,pdata +6f8a e0a10000 istore 2 ,contw +6f8b 184085fd increase -3 ,temp +6f8c 1850fe00 byteswap temp ,pdata +6f8d e0a10000 istore 2 ,contw +6f8e 20600000 rtn + +ssa_req_range_firstfreg_maxbyte_with_continue: +6f8f 1fe27200 copy pdata ,loopcnt +6f90 1f220400 copy loopcnt ,temp +6f91 19620c00 copy timeup ,contr +6f92 20407f01 call memcpy +6f93 20406fa0 call ssa_req_range_freg_with_continue + +ssa_req_range_attrbutes_length: +6f94 58000036 setarg 0x36 +6f95 e0a08000 istore 1 ,contw +6f96 6801054c fetch 2 ,mem_sdp_all_length +6f97 1ff0fe00 byteswap pdata ,pdata +6f98 e0a10000 istore 2 ,contw +6f99 20600000 rtn + +ssa_req_range_attrbutes_length_no_continue: +6f9a 58000036 setarg 0x36 +6f9b e0a08000 istore 1 ,contw +6f9c 184085fd increase -3 ,temp +6f9d 1850fe00 byteswap temp ,pdata +6f9e e0a10000 istore 2 ,contw +6f9f 20600000 rtn + +ssa_req_range_freg_with_continue: +6fa0 da200007 arg sdp_searchattrib_res ,rega +6fa1 58000002 setarg 2 +6fa2 e0a08000 istore 1 ,contw +6fa3 68010519 fetch 2 ,mem_sdp_continue_byte +6fa4 98408400 iadd temp ,temp +6fa5 1850fe00 byteswap temp ,pdata +6fa6 e0a10000 istore 2 ,contw +6fa7 20406fb0 call ssa_req_range_common +6fa8 68090275 fetcht 2 ,mem_sdp_tx_pkt_length +6fa9 184085fb increase -5 ,temp +6faa 1850fe00 byteswap temp ,pdata +6fab e0a10000 istore 2 ,contw +6fac 184085fb increase -5 ,temp +6fad 1850fe00 byteswap temp ,pdata +6fae e0a10000 istore 2 ,contw +6faf 20600000 rtn + +ssa_req_range_common: +6fb0 68010273 fetch 2 ,mem_sdp_tx_payload_ptr +6fb1 98a67e00 isub contw ,pdata +6fb2 1fe67e00 sub pdata ,0 ,pdata +6fb3 60010275 store 2 ,mem_sdp_tx_pkt_length +6fb4 204052d0 call l2cap_get_sdp_tx_payload +6fb5 1a227e00 copy rega ,pdata +6fb6 e0a08000 istore 1 ,contw +6fb7 6801051c fetch 2 ,mem_sdp_transactionid +6fb8 e0a10000 istore 2 ,contw +6fb9 20600000 rtn + +sdp_process_ssa_res: + +sdp_process_ss_res: + +sdp_process_sa_res: + +sdp_process_error_res: +6fba 20600000 rtn + +sdp_invalid_service_record_handle: +6fbb 58000200 setarg 0x0200 +6fbc 6001054a store 2 ,mem_sdp_error_code +6fbd 20206fc6 branch sdp_error_response + +sdp_invalid_pdu_size: +6fbe 58000400 setarg 0x0400 +6fbf 6001054a store 2 ,mem_sdp_error_code +6fc0 20206fc6 branch sdp_error_response + +sdp_insufficient_resource: +6fc1 58000600 setarg 0x0600 +6fc2 6001054a store 2 ,mem_sdp_error_code +6fc3 20206fc6 branch sdp_error_response + +sdp_invalid_request_syntax: +6fc4 58000300 setarg 0x0300 +6fc5 6001054a store 2 ,mem_sdp_error_code + +sdp_error_response: +6fc6 204052d0 call l2cap_get_sdp_tx_payload +6fc7 e0a08000 istore 1 ,contw +6fc8 6801051c fetch 2 ,mem_sdp_transactionid +6fc9 e0a10000 istore 2 ,contw +6fca 58000200 setarg 0x0200 +6fcb e0a10000 istore 2 ,contw +6fcc 6801054a fetch 2 ,mem_sdp_error_code +6fcd e0a10000 istore 2 ,contw +6fce 70027507 jam 7 ,mem_sdp_tx_pkt_length +6fcf 20600000 rtn + +ask_serviceclassid: +6fd0 da400000 arg 0 ,regb +6fd1 18000400 force 0 ,temp +6fd2 d8a00511 arg mem_sdp_uuid_search_ptr ,contw +6fd3 20407028 call dataelementtype6 +6fd4 2022f026 branch asksrv_error ,zero + +classidloop: +6fd5 1a40a401 increase 1 ,regb +6fd6 e8c08000 ifetch 1 ,contr +6fd7 1a20a3ff increase -1 ,rega +6fd8 196097ff increase -1 ,timeup +6fd9 2fe1f018 compare 0x18 ,pdata ,0xf8 +6fda 2420f026 nbranch asksrv_error ,true +6fdb 2fe00e04 compare 0x04 ,pdata ,0x07 +6fdc 2420eff3 nbranch cmp032 ,true +6fdd 18000401 force 1 ,temp + +skip2bytes: +6fde e8c08000 ifetch 1 ,contr +6fdf 1a20a3ff increase -1 ,rega +6fe0 196097ff increase -1 ,timeup +6fe1 c0806fe7 bne 0x00 ,frstbwrong +6fe2 e8c08000 ifetch 1 ,contr +6fe3 1a20a3ff increase -1 ,rega +6fe4 196097ff increase -1 ,timeup +6fe5 c0006ff8 beq 0x00 ,cmpuuid +6fe6 20206fea branch scndbwrong + +frstbwrong: +6fe7 18c08c01 increase 1 ,contr +6fe8 1a20a3ff increase -1 ,rega +6fe9 196097ff increase -1 ,timeup + +scndbwrong: +6fea 18c08c02 increase 2 ,contr +6feb 1a20a3fe increase -2 ,rega +6fec 196097fe increase -2 ,timeup +6fed 2841fe00 compare 0x00 ,temp ,0xff +6fee 2020f020 branch loopornot ,true +6fef 18c08c0c increase 12 ,contr +6ff0 1a20a3f4 increase -12 ,rega +6ff1 196097f4 increase -12 ,timeup +6ff2 20207020 branch loopornot + +cmp032: +6ff3 2fe00e02 compare 0x02 ,pdata ,0x07 +6ff4 2420eff6 nbranch cmp016 ,true +6ff5 20206fde branch skip2bytes + +cmp016: +6ff6 2fe00e01 compare 0x01 ,pdata ,0x07 +6ff7 2420f026 nbranch asksrv_error ,true + +cmpuuid: +6ff8 1a20a3fe increase -2 ,rega +6ff9 196097fe increase -2 ,timeup +6ffa e8c10000 ifetch 2 ,contr +6ffb 1a467c04 sub regb ,4 ,null +6ffc 2022effe branch uuidsize ,zero +6ffd e0a10000 istore 2 ,contw + +uuidsize: +6ffe 2841fe00 compare 0x00 ,temp ,0xff +6fff 2020f020 branch loopornot ,true +7000 18c20400 copy contr ,temp +7001 e8c08000 ifetch 1 ,contr +7002 c0807019 bne 0x00 ,wrong12b +7003 e8c08000 ifetch 1 ,contr +7004 c0807019 bne 0x00 ,wrong12b +7005 e8c08000 ifetch 1 ,contr +7006 c0887019 bne 0x10 ,wrong12b +7007 e8c08000 ifetch 1 ,contr +7008 c0807019 bne 0x00 ,wrong12b +7009 e8c08000 ifetch 1 ,contr +700a c0c07019 bne 0x80 ,wrong12b +700b e8c08000 ifetch 1 ,contr +700c c0807019 bne 0x00 ,wrong12b +700d e8c08000 ifetch 1 ,contr +700e c0807019 bne 0x00 ,wrong12b +700f e8c08000 ifetch 1 ,contr +7010 c0c07019 bne 0x80 ,wrong12b +7011 e8c08000 ifetch 1 ,contr +7012 c0aff019 bne 0x5f ,wrong12b +7013 e8c08000 ifetch 1 ,contr +7014 c0cdf019 bne 0x9b ,wrong12b +7015 e8c08000 ifetch 1 ,contr +7016 c09a7019 bne 0x34 ,wrong12b +7017 e8c08000 ifetch 1 ,contr +7018 c07df01e beq 0xfb ,chck12dn + +wrong12b: +7019 18420c00 copy temp ,contr + +wrong12b1: +701a 18c08c0c increase 12 ,contr +701b 18000e00 force 0x00 ,queue +701c 18000400 force 0x00 ,temp +701d 2020701e branch chck12dn + +chck12dn: +701e 196097f4 increase -12 ,timeup +701f 1a20a3f4 increase -12 ,rega + +loopornot: +7020 18000400 force 0x00 ,temp +7021 2a21fe00 compare 0x00 ,rega ,0xff +7022 2420efd5 nbranch classidloop ,true +7023 18007e00 force 0 ,pdata +7024 e0a10000 istore 2 ,contw +7025 20600000 rtn + +asksrv_error: +7026 d84000ff arg 0xff ,temp +7027 20600000 rtn + +dataelementtype6: +7028 476a403a bpatchx patch3a_4 ,mem_patch3a +7029 e8c08000 ifetch 1 ,contr +702a 196097ff increase -1 ,timeup +702b 2fe1f030 compare 0x30 ,pdata ,0xf8 +702c 2420f03e nbranch dsize_error ,true +702d 2fe00e07 compare 0x07 ,pdata ,0x07 +702e 2020f037 branch dsize32 ,true +702f 2fe00e06 compare 0x06 ,pdata ,0x07 +7030 2020f039 branch dsize16 ,true +7031 2fe00e05 compare 0x05 ,pdata ,0x07 +7032 2420f03e nbranch dsize_error ,true +7033 e8c08000 ifetch 1 ,contr +7034 1fe22200 copy pdata ,rega +7035 196097ff increase -1 ,timeup +7036 2020703c branch dsize + +dsize32: +7037 18c08c02 increase 2 ,contr +7038 196097fe increase -2 ,timeup + +dsize16: +7039 e8c10000 ifetch 2 ,contr +703a 1ff0a200 byteswap pdata ,rega +703b 196097fe increase -2 ,timeup + +dsize: +703c 18007e01 force 0x01 ,pdata +703d 20600000 rtn + +dsize_error: +703e 18007e00 force 0x00 ,pdata +703f 20600000 rtn + +ss_empty_rsp: +7040 58000003 setarg sdp_search_res +7041 6000851b store 1 ,mem_sdp_pduid +7042 20207048 branch empty_response + +sa_empty_rsp: +7043 58000005 setarg sdp_attribute_res +7044 6000851b store 1 ,mem_sdp_pduid +7045 20207048 branch empty_response + +ssa_empty_rsp: +7046 58000007 setarg sdp_searchattrib_res +7047 6000851b store 1 ,mem_sdp_pduid + +empty_response: +7048 204052d0 call l2cap_get_sdp_tx_payload +7049 6800851b fetch 1 ,mem_sdp_pduid +704a 1fe22400 copy pdata ,regb +704b e0a08000 istore 1 ,contw +704c 6801051c fetch 2 ,mem_sdp_transactionid +704d e0a10000 istore 2 ,contw +704e 58000500 setarg 0x0500 +704f e0a10000 istore 2 ,contw +7050 2a41fe05 compare sdp_attribute_res ,regb ,0xff +7051 2020f057 branch fullsearch ,true +7052 2a41fe07 compare sdp_searchattrib_res ,regb ,0xff +7053 2020f057 branch fullsearch ,true +7054 58000000 setarg 0x000000 +7055 e0a28000 istore 5 ,contw +7056 20207059 branch outempty + +fullsearch: +7057 58350200 setarg 0x350200 +7058 e0a28000 istore 5 ,contw + +outempty: +7059 7002750a jam 10 ,mem_sdp_tx_pkt_length +705a 20600000 rtn + +sdp_data_len: +705b 20407ea2 call store_contw +705c 20407ea5 call store_contr +705d 20407062 call sdp_get_data +705e 20407e9c call get_contw +705f 20407e9f call get_contr +7060 18427e00 copy temp ,pdata +7061 20600000 rtn + +sdp_get_data: +7062 e8c08000 ifetch 1 ,contr +7063 1fe17207 and pdata ,0x7 ,loopcnt +7064 1fe97e00 rshift3 pdata ,pdata +7065 c080706c bne 0 ,sdp_get_data_type_not0 + +sdp_get_data_type0: +7066 18007e01 force 1 ,pdata +7067 18000401 force 1 ,temp +7068 20600000 rtn + +sdp_get_data_type_not0_sizeindex01234: +7069 20407e76 call left_shift_n +706a 1fe08401 add pdata ,1 ,temp +706b 20600000 rtn + +sdp_get_data_type_not0: +706c 1f227e00 deposit loopcnt +706d 1fe67c04 sub pdata ,4 ,null +706e 20217069 branch sdp_get_data_type_not0_sizeindex01234 ,positive +706f c002f073 beq 5 ,sdp_get_data_type_not0_sizeindex5 +7070 c0037076 beq 6 ,sdp_get_data_type_not0_sizeindex6 +7071 c003f07a beq 7 ,sdp_get_data_type_not0_sizeindex7 +7072 20600000 rtn + +sdp_get_data_type_not0_sizeindex5: +7073 e8c08000 ifetch 1 ,contr +7074 1fe08402 add pdata ,2 ,temp +7075 20600000 rtn + +sdp_get_data_type_not0_sizeindex6: +7076 e8c10000 ifetch 2 ,contr +7077 1ff0fe00 byteswap pdata ,pdata +7078 1fe08403 add pdata ,3 ,temp +7079 20600000 rtn + +sdp_get_data_type_not0_sizeindex7: +707a e8c10000 ifetch 2 ,contr +707b 1ff0fe00 byteswap pdata ,pdata +707c e8c90000 ifetcht 2 ,contr +707d 18508400 byteswap temp ,temp +707e 18500400 lshift16 temp ,temp +707f 9840fe00 iadd temp ,pdata +7080 1fe08405 add pdata ,5 ,temp +7081 20600000 rtn + +search_all_uuid: +7082 476ac03a bpatchx patch3a_5 ,mem_patch3a +7083 18000e00 force 0 ,queue +7084 da400000 arg 0 ,regb +7085 d8a0052a arg mem_sdp_handle_list ,contw + +search_all_uuid_llop: +7086 e9610000 ifetch 2 ,timeup +7087 207a0000 rtn blank +7088 2040708d call search_uuid +7089 18e27e00 copy queue ,pdata +708a c1038000 rtneq sdp_max_handle_number +708b 19609602 increase 2 ,timeup +708c 20207086 branch search_all_uuid_llop + +search_uuid: +708d 98002600 iforce regc +708e 68014575 fetch 2 ,mem_ui_uuid_table +708f 98000c00 iforce contr + +search_uuid_next: +7090 18e27e00 copy queue ,pdata +7091 c1038000 rtneq sdp_max_handle_number +7092 78547c00 disable user +7093 e8c08000 ifetch 1 ,contr +7094 207a0000 rtn blank +7095 98007200 iforce loopcnt + +search_uuid_loop: +7096 e8c10000 ifetch 2 ,contr +7097 9a667c00 isub regc ,null +7098 2422f09a nbranch search_uuid_not_found ,zero +7099 78347c00 enable user + +search_uuid_not_found: +709a c2007096 loop search_uuid_loop +709b e8ca0000 ifetcht 4 ,contr +709c 18c22200 copy contr ,rega +709d 243470ad nbranch search_uuid_nomatch ,user +709e d8c0052a arg mem_sdp_handle_list ,contr +709f df200007 arg sdp_max_handle_number ,loopcnt + +search_uuid_check_same_handle: +70a0 e8c20000 ifetch 4 ,contr +70a1 203a70a6 branch search_uuid_store_handle ,blank +70a2 98467c00 isub temp ,null +70a3 2022f0ad branch search_uuid_nomatch ,zero +70a4 c20070a0 loop search_uuid_check_same_handle +70a5 20600000 rtn + +search_uuid_store_handle: +70a6 e0aa0000 istoret 4 ,contw +70a7 18e08e01 increase 1 ,queue +70a8 1a220c00 copy rega ,contr +70a9 2040705b call sdp_data_len +70aa 9a40a400 iadd regb ,regb +70ab 98c08c00 iadd contr ,contr +70ac 20207090 branch search_uuid_next + +search_uuid_nomatch: +70ad 1a220c00 copy rega ,contr +70ae 20407062 call sdp_get_data +70af 98c08c00 iadd contr ,contr +70b0 20207090 branch search_uuid_next + +search_handle: +70b1 476b403a bpatchx patch3a_6 ,mem_patch3a +70b2 68014575 fetch 2 ,mem_ui_uuid_table +70b3 98000c00 iforce contr + +search_handle_loop: +70b4 e8c08000 ifetch 1 ,contr +70b5 203a7fe3 branch disable_zero ,blank +70b6 1fe3fe00 lshift pdata ,pdata +70b7 98c08c00 iadd contr ,contr +70b8 e8c20000 ifetch 4 ,contr +70b9 98467c00 isub temp ,null +70ba 20628000 rtn zero +70bb 18a27e00 deposit contw +70bc 60010abb store 2 ,mem_contw +70bd 600c0aa2 storet 8 ,mem_temp +70be 20407062 call sdp_get_data +70bf 98c08c00 iadd contr ,contr +70c0 18c27e00 copy contr ,pdata +70c1 68090abb fetcht 2 ,mem_contw +70c2 18420a00 copy temp ,contw +70c3 680c0aa2 fetcht 8 ,mem_temp +70c4 1fe20c00 copy pdata ,contr +70c5 202070b4 branch search_handle_loop + +search_attrib: +70c6 476bc03a bpatchx patch3a_7 ,mem_patch3a +70c7 68014575 fetch 2 ,mem_ui_uuid_table +70c8 98000c00 iforce contr + +search_attrib_next: +70c9 e8c08000 ifetch 1 ,contr +70ca 203a70e4 branch search_attrib_end ,blank +70cb 98007200 iforce loopcnt + +search_attrib_loop: +70cc e8c10000 ifetch 2 ,contr +70cd 9a667c00 isub regc ,null +70ce 2022f0d4 branch search_attrib_found_uuid ,zero +70cf c20070cc loop search_attrib_loop +70d0 18c08c04 increase 4 ,contr +70d1 20407062 call sdp_get_data +70d2 98c08c00 iadd contr ,contr +70d3 202070c9 branch search_attrib_next + +search_attrib_found_uuid: +70d4 1f20f3ff increase -1 ,loopcnt +70d5 1f23fe00 lshift loopcnt ,pdata +70d6 98c08c00 iadd contr ,contr +70d7 18c08c04 increase 4 ,contr +70d8 20407062 call sdp_get_data +70d9 98c09600 iadd contr ,timeup + +search_attrib_loop_attribs: +70da 18c08c01 increase 1 ,contr +70db e8c10000 ifetch 2 ,contr +70dc 9a467c00 isub regb ,null +70dd 2022ffef branch disable_blank ,zero +70de 2040705b call sdp_data_len +70df 98c08c00 iadd contr ,contr +70e0 19627e00 deposit timeup +70e1 98c67c00 isub contr ,null +70e2 2022f0e4 branch search_attrib_end ,zero +70e3 202070da branch search_attrib_loop_attribs + +search_attrib_end: +70e4 18000c00 force 0 ,contr +70e5 18007e00 force 0 ,pdata +70e6 20600000 rtn + +search_handle_attrib: +70e7 476c403b bpatchx patch3b_0 ,mem_patch3b +70e8 68014575 fetch 2 ,mem_ui_uuid_table +70e9 98000c00 iforce contr + +search_handle_attrib_next: +70ea e8c08000 ifetch 1 ,contr +70eb 203a7100 branch search_handle_attrib_end ,blank +70ec 1fe3fe00 lshift pdata ,pdata +70ed 98c08c00 iadd contr ,contr +70ee e8c20000 ifetch 4 ,contr +70ef 98467c00 isub temp ,null +70f0 2022f0f4 branch search_handl_attrib_found_handle ,zero +70f1 20407062 call sdp_get_data +70f2 98c08c00 iadd contr ,contr +70f3 202070ea branch search_handle_attrib_next + +search_handl_attrib_found_handle: +70f4 20407062 call sdp_get_data +70f5 98c09600 iadd contr ,timeup + +search_handle_attrib_loop_attribs: +70f6 18c08c01 increase 1 ,contr +70f7 e8c10000 ifetch 2 ,contr +70f8 9a467c00 isub regb ,null +70f9 20628000 rtn zero +70fa 2040705b call sdp_data_len +70fb 98c08c00 iadd contr ,contr +70fc 19627e00 deposit timeup +70fd 98c67c00 isub contr ,null +70fe 2022f100 branch search_handle_attrib_end ,zero +70ff 202070f6 branch search_handle_attrib_loop_attribs + +search_handle_attrib_end: +7100 18000c00 force 0 ,contr +7101 20600000 rtn + +search_rfcomm_cn: +7102 da400400 arg 0x0400 ,regb +7103 204070f4 call search_handl_attrib_found_handle +7104 da400300 arg 0x0300 ,regb +7105 2040710d call search_uuid_in_data +7106 24740000 nrtn user +7107 1a267c03 sub rega ,3 ,null +7108 20217fe9 branch disable_user ,positive +7109 e8c08000 ifetch 1 ,contr +710a c0847fe9 bne 0x08 ,disable_user +710b e8c08000 ifetch 1 ,contr +710c 20600000 rtn + +search_uuid_in_data: +710d 476cc03b bpatchx patch3b_1 ,mem_patch3b +710e 20407062 call sdp_get_data +710f 1fe22200 copy pdata ,rega + +search_uuid_in_data_loop: +7110 e8c08000 ifetch 1 ,contr +7111 1fe17207 and pdata ,0x7 ,loopcnt +7112 1fe97e00 rshift3 pdata ,pdata +7113 1fe67c03 sub pdata ,3 ,null +7114 2022f129 branch search_uuid_in_data_found_uuid ,zero +7115 1f227e00 copy loopcnt ,pdata +7116 c002f120 beq 5 ,search_uuid_in_data_found_element_index5 +7117 c0037123 beq 6 ,search_uuid_in_data_found_element_index6 +7118 c003f126 beq 7 ,search_uuid_in_data_found_element_index7 +7119 18c08dff increase -1 ,contr +711a 20407062 call sdp_get_data +711b 98c08c00 iadd contr ,contr +711c 1a227e00 copy rega ,pdata +711d 98462200 isub temp ,rega +711e 2022ffe9 branch disable_user ,zero +711f 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index5: +7120 1a20a3fe increase -2 ,rega +7121 18c08c01 increase 1 ,contr +7122 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index6: +7123 1a20a3fd increase -3 ,rega +7124 18c08c02 increase 2 ,contr +7125 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_element_index7: +7126 1a20a3fb increase -5 ,rega +7127 18c08c04 increase 4 ,contr +7128 20207110 branch search_uuid_in_data_loop + +search_uuid_in_data_found_uuid: +7129 1a20a3ff increase -1 ,rega +712a 1f227e00 copy loopcnt ,pdata +712b c000f132 beq 1 ,search_uuid_in_data_type_uuid_16 +712c c0017130 beq 2 ,search_uuid_in_data_type_uuid_32 +712d c002712f beq 4 ,search_uuid_in_data_type_uuid_128 +712e 20207fe9 branch disable_user + +search_uuid_in_data_type_uuid_128: +712f 1a20a3f4 increase -12 ,rega + +search_uuid_in_data_type_uuid_32: +7130 e8c10000 ifetch 2 ,contr +7131 1a20a3fe increase -2 ,rega + +search_uuid_in_data_type_uuid_16: +7132 e8c10000 ifetch 2 ,contr +7133 9a467c00 isub regb ,null +7134 2022ffe7 branch enable_user ,zero +7135 1a20a3fe increase -2 ,rega +7136 2022ffe9 branch disable_user ,zero +7137 20207110 branch search_uuid_in_data_loop + +sdp_send_spp_request: +7138 204052d0 call l2cap_get_sdp_tx_payload +7139 1fe20a00 copy pdata ,contw +713a 58000006 setarg 6 +713b e0a08000 istore 1 ,contw +713c 5800006e setarg sdp_tid_spp +713d e0a10000 istore 2 ,contw +713e 58000f00 setarg 0x0f00 +713f e0a10000 istore 2 ,contw +7140 581a0535 setarg 0x1a0535 +7141 e0a18000 istore 3 ,contw +7142 58000111 setarg 0x0111 +7143 1ff07e00 lshift16 pdata ,pdata +7144 e0a20000 istore 4 ,contw +7145 58002600 setarg 0x2600 +7146 e0a10000 istore 2 ,contw +7147 58000335 setarg 0x0335 +7148 e0a10000 istore 2 ,contw +7149 58000009 setarg 0x0009 +714a e0a10000 istore 2 ,contw +714b 58000004 setarg 0x0004 +714c e0a10000 istore 2 ,contw +714d 70027514 jam 0x14 ,mem_sdp_tx_pkt_length +714e 20600000 rtn + +function_g2: +714f 476d403b bpatchx patch3b_2 ,mem_patch3b +7150 7005e550 jam 80 ,mem_aes_cmac_data_length +7151 d8a005e6 arg memdat ,contw +7152 d8c0443a arg mem_le_srand ,contr +7153 20407ebf call memcpy16 +7154 d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +7155 20407ebd call memcpy32 +7156 d8c009be arg mem_le_pubkey_remote_x_256 ,contr +7157 20407ebd call memcpy32 +7158 2040720a call inverse_memdat +7159 d8c0042f arg mem_le_mrand ,contr +715a 20407205 call store_inverse_k +715b 204071d0 call function_aes_cmac +715c d8a00af2 arg mem_aes_cmac_temp ,contw +715d 20407201 call load_inverse_result +715e 580f4240 setarg 1000000 +715f 1fe22200 copy pdata ,rega +7160 68020af2 fetch 4 ,mem_aes_cmac_temp +7161 9a26fc00 idiv rega +7162 20407f86 call wait_div_end +7163 18077e00 remainder pdata +7164 600209ba store 4 ,mem_gkey +7165 20600000 rtn + +function_f6_eb: +7166 7005e541 jam 65 ,mem_aes_cmac_data_length +7167 d8a005e6 arg memdat ,contw +7168 204071b5 call store_addr_common_a +7169 204071b0 call store_addr_common_b +716a 6801c454 fetch 3 ,mem_le_pres + 1 +716b e0a18000 istore 3 ,contw +716c 20407176 call get_r +716d d8c0042f arg mem_le_mrand ,contr +716e 20407ebf call memcpy16 +716f d8c0443a arg mem_le_srand ,contr +7170 20407ebf call memcpy16 +7171 2040720a call inverse_memdat +7172 d8c00b12 arg mem_le_mackey ,contr +7173 d8a00ac2 arg mem_aes_cmac_k ,contw +7174 20407ebf call memcpy16 +7175 202071d0 branch function_aes_cmac + +get_r: +7176 680244c7 fetch 4 ,mem_le_tk +7177 e0a20000 istore 4 ,contw +7178 20407ecd call memset0_4 +7179 20207eca branch memset0_8 + +function_f6_ea: +717a 476dc03b bpatchx patch3b_3 ,mem_patch3b +717b 7005e541 jam 65 ,mem_aes_cmac_data_length +717c d8a005e6 arg memdat ,contw +717d 204071b0 call store_addr_common_b +717e 204071b5 call store_addr_common_a +717f 6801c44d fetch 3 ,mem_le_preq + 1 +7180 e0a18000 istore 3 ,contw +7181 20407176 call get_r +7182 d8c0443a arg mem_le_srand ,contr +7183 20407ebf call memcpy16 +7184 d8c0042f arg mem_le_mrand ,contr +7185 20407ebf call memcpy16 +7186 2040720a call inverse_memdat +7187 d8c00b12 arg mem_le_mackey ,contr +7188 d8a00ac2 arg mem_aes_cmac_k ,contw +7189 20407ebf call memcpy16 +718a 204071d0 call function_aes_cmac +718b d8a00af2 arg mem_aes_cmac_temp ,contw +718c 20207201 branch load_inverse_result + +function_f5: +718d 7005e520 jam 32 ,mem_aes_cmac_data_length +718e d8c009fe arg mem_le_dhkey_256 ,contr +718f d8a005e6 arg memdat ,contw +7190 20407ebd call memcpy32 +7191 2040720a call inverse_memdat +7192 d8c0099e arg mem_le_slat ,contr +7193 20407205 call store_inverse_k +7194 204071d0 call function_aes_cmac +7195 d8a00ac2 arg mem_aes_cmac_k ,contw +7196 20407497 call store_aes_result +7197 d8400001 arg 1 ,temp +7198 2040719f call function_f5_common +7199 d8a04419 arg mem_le_ltk ,contw +719a 20407201 call load_inverse_result +719b d8400000 arg 0 ,temp +719c 2040719f call function_f5_common +719d d8a00b12 arg mem_le_mackey ,contw +719e 20207497 branch store_aes_result + +function_f5_common: +719f 476e403b bpatchx patch3b_4 ,mem_patch3b +71a0 7005e535 jam 53 ,mem_aes_cmac_data_length +71a1 58000100 setarg 0x100 +71a2 600105e6 store 2 ,memdat +71a3 204071b0 call store_addr_common_b +71a4 204071b5 call store_addr_common_a +71a5 d8c0443a arg mem_le_srand ,contr +71a6 20407ebf call memcpy16 +71a7 d8c0042f arg mem_le_mrand ,contr +71a8 20407ebf call memcpy16 +71a9 58006c65 setarg 0x6c65 +71aa e0a10000 istore 2 ,contw +71ab 58006274 setarg 0x6274 +71ac e0a10000 istore 2 ,contw +71ad e0a88000 istoret 1 ,contw +71ae 2040720a call inverse_memdat +71af 202071d0 branch function_aes_cmac + +store_addr_common_b: +71b0 680344a0 fetch 6 ,mem_le_lap +71b1 e0a30000 istore 6 ,contw +71b2 6800c495 fetch 1 ,mem_le_conn_own_addr_type +71b3 e0a08000 istore 1 ,contw +71b4 20600000 rtn + +store_addr_common_a: +71b5 6803044f fetch 6 ,mem_le_plap +71b6 e0a30000 istore 6 ,contw +71b7 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +71b8 e0a08000 istore 1 ,contw +71b9 20600000 rtn + +function_f4_ca: +71ba 7005e541 jam 65 ,mem_aes_cmac_data_length +71bb 6800c664 fetch 1 ,mem_passkey_1bit +71bc 600085e6 store 1 ,memdat +71bd d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +71be 20407ebd call memcpy32 +71bf d8c009be arg mem_le_pubkey_remote_x_256 ,contr +71c0 20407ebd call memcpy32 +71c1 2040720a call inverse_memdat +71c2 d8c0042f arg mem_le_mrand ,contr +71c3 20407205 call store_inverse_k +71c4 202071d0 branch function_aes_cmac + +function_f4_cb: +71c5 7005e541 jam 65 ,mem_aes_cmac_data_length +71c6 6800c664 fetch 1 ,mem_passkey_1bit +71c7 600085e6 store 1 ,memdat +71c8 d8c009be arg mem_le_pubkey_remote_x_256 ,contr +71c9 20407ebd call memcpy32 +71ca d8c045d2 arg mem_le_pubkey_local_x_256 ,contr +71cb 20407ebd call memcpy32 +71cc 2040720a call inverse_memdat +71cd d8c0443a arg mem_le_srand ,contr +71ce 20407205 call store_inverse_k +71cf 202071d0 branch function_aes_cmac + +function_aes_cmac: +71d0 476ec03b bpatchx patch3b_5 ,mem_patch3b +71d1 2040721f call function_aes_cmac_generate_subkey +71d2 680085e5 fetch 1 ,mem_aes_cmac_data_length +71d3 1fe20400 copy pdata ,temp + +function_ceil16: +71d4 1fe0fe0f increase 15 ,pdata +71d5 1ff1fe00 rshift4 pdata ,pdata +71d6 1fe22400 copy pdata ,regb +71d7 203a71e2 branch function_aes_cmac_set_flag_0_balnk ,blank +71d8 18417e0f and temp ,0x0f ,pdata +71d9 243a71e5 nbranch function_aes_cmac_set_flag_0 ,blank +71da da600ad2 arg mem_aes_cmac_k1 ,regc +71db dfe005e6 arg memdat ,pdata +71dc 1fe0fff0 increase -16 ,pdata +71dd 9840a200 iadd temp ,rega +71de d8a00b02 arg mem_aes_cmac_m_last ,contw +71df df200004 arg 4 ,loopcnt +71e0 20407edd call xor_loop +71e1 202071f0 branch function_aes_cmac_aes + +function_aes_cmac_set_flag_0_balnk: +71e2 da400001 arg 1 ,regb +71e3 da200000 arg 0 ,rega +71e4 202071e6 branch function_aes_cmac_set_flag_0_common + +function_aes_cmac_set_flag_0: +71e5 1841220f and temp ,0x0f ,rega + +function_aes_cmac_set_flag_0_common: +71e6 dfe005e6 arg memdat ,pdata +71e7 9840fe00 iadd temp ,pdata +71e8 9a260c00 isub rega ,contr +71e9 d8a00af2 arg mem_aes_cmac_temp ,contw +71ea 20407245 call function_aes_cmac_padding +71eb da600ae2 arg mem_aes_cmac_k2 ,regc +71ec da200af2 arg mem_aes_cmac_temp ,rega +71ed d8a00b02 arg mem_aes_cmac_m_last ,contw +71ee df200004 arg 4 ,loopcnt +71ef 20407edd call xor_loop + +function_aes_cmac_aes: +71f0 20407491 call aes_clear_data +71f1 20407428 call aes_init +71f2 d8c005e6 arg memdat ,contr + +function_aes_cmac_aes_loop: +71f3 1a40a5ff increase -1 ,regb +71f4 1a427e00 deposit regb +71f5 203a71f9 branch function_aes_cmac_aes_loop_end ,blank +71f6 20407486 call load_data128 +71f7 20407422 call do_aes_cbc +71f8 202071f3 branch function_aes_cmac_aes_loop + +function_aes_cmac_aes_loop_end: +71f9 d8a00af2 arg mem_aes_cmac_temp ,contw +71fa 20407497 call store_aes_result +71fb d8c00b02 arg mem_aes_cmac_m_last ,contr +71fc 20407486 call load_data128 +71fd 20407428 call aes_init +71fe d8c00af2 arg mem_aes_cmac_temp ,contr +71ff 20407486 call load_data128 +7200 20207422 branch do_aes_cbc + +load_inverse_result: +7201 18a22200 copy contw ,rega +7202 20407497 call store_aes_result +7203 df200010 arg 16 ,loopcnt +7204 20207ee5 branch inverse_data + +store_inverse_k: +7205 d8a00ac2 arg mem_aes_cmac_k ,contw +7206 20407ebf call memcpy16 + +inverse_k: +7207 df200010 arg 16 ,loopcnt +7208 da200ac2 arg mem_aes_cmac_k ,rega +7209 20207ee5 branch inverse_data + +inverse_memdat: +720a 680085e5 fetch 1 ,mem_aes_cmac_data_length +720b 1fe27200 copy pdata ,loopcnt +720c da2005e6 arg memdat ,rega +720d 20207ee5 branch inverse_data + +bn_lshift_0_inverse: +720e ea208000 ifetch 1 ,rega +720f 1fe3fe00 lshift pdata ,pdata +7210 2a6ffe00 isolate1 0 ,regc +7211 7920fe00 setflag true ,0 ,pdata +7212 2feffe08 isolate1 8 ,pdata +7213 7920a600 setflag true ,0 ,regc +7214 e2208000 istore 1 ,rega +7215 1a20a3ff increase -1 ,rega +7216 c200720e loop bn_lshift_0_inverse +7217 20600000 rtn + +function_aes_cmac_k1_inverse: +7218 da200ad2 arg mem_aes_cmac_k1 ,rega + +function_aes_cmac_inverse_common: +7219 1a20a20f increase 15 ,rega +721a 18007210 force 16 ,loopcnt +721b 18002600 force 0 ,regc +721c 2020720e branch bn_lshift_0_inverse + +function_aes_cmac_k2_inverse: +721d da200ae2 arg mem_aes_cmac_k2 ,rega +721e 20207219 branch function_aes_cmac_inverse_common + +function_aes_cmac_generate_subkey: +721f d8c00ac2 arg mem_aes_cmac_k ,contr +7220 20407484 call load_key +7221 18007008 force regidx_xor ,regext_index +7222 20407492 call aes_clear +7223 20407491 call aes_clear_data +7224 2040741f call do_aes_ocb +7225 d8a00ad2 arg mem_aes_cmac_k1 ,contw +7226 20407497 call store_aes_result + +function_aes_cmac_k1: +7227 476f403b bpatchx patch3b_6 ,mem_patch3b +7228 68008ad2 fetch 1 ,mem_aes_cmac_k1 +7229 2feffe07 isolate1 7 ,pdata +722a 2420f230 nbranch function_aes_cmac_k1_0 ,true +722b 20407218 call function_aes_cmac_k1_inverse +722c da600ad2 arg mem_aes_cmac_k1 ,regc +722d d8a00ad2 arg mem_aes_cmac_k1 ,contw +722e 2040723a call function_aes_cmac_xor_rb +722f 20207231 branch function_aes_cmac_k2 + +function_aes_cmac_k1_0: +7230 20407218 call function_aes_cmac_k1_inverse + +function_aes_cmac_k2: +7231 d8c00ad2 arg mem_aes_cmac_k1 ,contr +7232 d8a00ae2 arg mem_aes_cmac_k2 ,contw +7233 20407ebf call memcpy16 +7234 68008ae2 fetch 1 ,mem_aes_cmac_k2 +7235 2feffe07 isolate1 7 ,pdata +7236 2420f21d nbranch function_aes_cmac_k2_inverse ,true +7237 2040721d call function_aes_cmac_k2_inverse +7238 da600ae2 arg mem_aes_cmac_k2 ,regc +7239 d8a00ae2 arg mem_aes_cmac_k2 ,contw + +function_aes_cmac_xor_rb: +723a df200003 arg 3 ,loopcnt + +function_aes_cmac_xor_rb_loop: +723b d8400000 arg 0 ,temp +723c 20407241 call function_aes_cmac_xor_loop_common +723d 1a60a604 increase 4 ,regc +723e c200723b loop function_aes_cmac_xor_rb_loop +723f d8408700 arg 0x8700 ,temp +7240 18500400 lshift16 temp ,temp + +function_aes_cmac_xor_loop_common: +7241 ea620000 ifetch 4 ,regc +7242 9842fe00 ixor temp ,pdata +7243 e0a20000 istore 4 ,contw +7244 20600000 rtn + +function_aes_cmac_padding: +7245 476fc03b bpatchx patch3b_7 ,mem_patch3b +7246 df200010 arg 16 ,loopcnt +7247 dfe00000 arg 0 ,pdata + +function_aes_cmac_padding_loop: +7248 9a267c00 isub rega ,null +7249 2022f250 branch function_aes_cmac_padding_beq_length ,zero +724a 20217253 branch function_aes_cmac_padding_big_length ,positive +724b e8c88000 ifetcht 1 ,contr +724c e0a88000 istoret 1 ,contw + +function_aes_cmac_padding_loop2: +724d 1fe0fe01 increase 1 ,pdata +724e c2007248 loop function_aes_cmac_padding_loop +724f 20600000 rtn + +function_aes_cmac_padding_beq_length: +7250 d8400080 arg 0x80 ,temp + +function_aes_cmac_padding_common: +7251 e0a88000 istoret 1 ,contw +7252 2020724d branch function_aes_cmac_padding_loop2 + +function_aes_cmac_padding_big_length: +7253 d8400000 arg 0 ,temp +7254 20207251 branch function_aes_cmac_padding_common + +generate_kinit: +7255 20407268 call function_e22 +7256 d8c00592 arg mem_input_store ,contr +7257 d8a00582 arg mem_kinit ,contw +7258 20207ebf branch memcpy16 + +function_e21: +7259 78547c00 disable user +725a 2040735f call function_expand +725b d8c00562 arg mem_random_number ,contr +725c d8a005a2 arg mem_x ,contw +725d 1800720f force 15 ,loopcnt +725e 20407f01 call memcpy +725f e8c08000 ifetch 1 ,contr +7260 1fe2fe06 xor_into 6 ,pdata +7261 e0a08000 istore 1 ,contw +7262 580005b2 setarg mem_y +7263 600105d6 store 2 ,memp_ar_input +7264 580005a2 setarg mem_x +7265 600105d4 store 2 ,memp_ar_key +7266 79200012 set1 mark_ar2 ,mark +7267 202072a8 branch function_ar + +function_e22: +7268 6808c689 fetcht 1 ,mem_pin_length +7269 18002410 force 16 ,regb +726a 1840a606 add temp ,6 ,regc +726b 1a667c10 sub regc ,16 ,null +726c 2021726e branch function_e22_pin_init ,positive +726d 18002610 force 16 ,regc + +function_e22_pin_init: +726e d8a005a2 arg mem_x ,contw + +function_e22_genx_pin: +726f d8c0468a arg mem_pin ,contr +7270 18427200 copy temp ,loopcnt +7271 78547c00 disable user + +function_e22_genx_loop: +7272 e8c08000 ifetch 1 ,contr +7273 e0a08000 istore 1 ,contw +7274 1a40a5ff increase -1 ,regb +7275 2022f27c branch function_e22_genx_end ,zero +7276 c2007272 loop function_e22_genx_loop +7277 2034726f branch function_e22_genx_pin ,user +7278 78347c00 enable user +7279 18007206 force 6 ,loopcnt +727a 1a220c00 copy rega ,contr +727b 20207272 branch function_e22_genx_loop + +function_e22_genx_end: +727c d8c00562 arg mem_random_number ,contr +727d d8a005b2 arg mem_y ,contw +727e 20407ebf call memcpy16 +727f 680085c1 fetch 1 ,mem_y15 +7280 9a62fe00 ixor regc ,pdata +7281 600085c1 store 1 ,mem_y15 +7282 580005b2 setarg mem_y +7283 600105d6 store 2 ,memp_ar_input +7284 580005a2 setarg mem_x +7285 600105d4 store 2 ,memp_ar_key +7286 79200012 set1 mark_ar2 ,mark +7287 202072a8 branch function_ar + +function_e1: +7288 78547c00 disable user +7289 2040735f call function_expand +728a 20207292 branch function_hash + +function_e3: +728b da200056 arg mem_aco ,rega +728c 78347c00 enable user +728d 2040735f call function_expand +728e 20407292 call function_hash +728f d8c00592 arg mem_input_store ,contr +7290 d8a00062 arg mem_kc ,contw +7291 20207ebf branch memcpy16 + +function_hash: +7292 58000562 setarg mem_random_number +7293 600105d6 store 2 ,memp_ar_input +7294 580041be setarg mem_link_key +7295 600105d4 store 2 ,memp_ar_key +7296 793f8012 set0 mark_ar2 ,mark +7297 204072a8 call function_ar +7298 da200592 arg mem_input_store ,rega +7299 da400562 arg mem_random_number ,regb +729a d8a005a2 arg mem_x ,contw +729b 20407352 call xor16 +729c da2005a2 arg mem_x ,rega +729d da4005b2 arg mem_y ,regb +729e 1a420a00 copy regb ,contw +729f 78347c00 enable user +72a0 20407350 call add16 +72a1 2040736a call key_offset +72a2 580005b2 setarg mem_y +72a3 600105d6 store 2 ,memp_ar_input +72a4 580005a2 setarg mem_x +72a5 600105d4 store 2 ,memp_ar_key +72a6 79200012 set1 mark_ar2 ,mark +72a7 202072a8 branch function_ar + +function_ar: +72a8 7005d800 jam 0 ,mem_ar_hround +72a9 680105d4 fetch 2 ,memp_ar_key +72aa 98000c00 iforce contr +72ab d8a005c2 arg mem_key_store ,contw +72ac 20407ebf call memcpy16 +72ad 680105d6 fetch 2 ,memp_ar_input +72ae 98000c00 iforce contr +72af d8a00592 arg mem_input_store ,contw +72b0 20407ebf call memcpy16 + +function_ar_loop: +72b1 204072cf call key_scheduling +72b2 78547c00 disable user +72b3 c58972b9 bmark0 mark_ar2 ,function_ar_original +72b4 680085d8 fetch 1 ,mem_ar_hround +72b5 c08272b9 bne 4 ,function_ar_original +72b6 680105d6 fetch 2 ,memp_ar_input +72b7 98002400 iforce regb +72b8 20407301 call xor_mod32_ar2 + +function_ar_original: +72b9 20407300 call xor_mod32 +72ba 20407313 call el_boxes +72bb 680085d8 fetch 1 ,mem_ar_hround +72bc 1fe0fe01 increase 1 ,pdata +72bd 600085d8 store 1 ,mem_ar_hround +72be 204072cf call key_scheduling +72bf 78347c00 enable user +72c0 20407300 call xor_mod32 +72c1 20407322 call pht +72c2 20407331 call permute +72c3 20407322 call pht +72c4 20407331 call permute +72c5 20407322 call pht +72c6 20407331 call permute +72c7 20407322 call pht +72c8 680085d8 fetch 1 ,mem_ar_hround +72c9 1fe0fe01 increase 1 ,pdata +72ca 600085d8 store 1 ,mem_ar_hround +72cb c08872b1 bne 16 ,function_ar_loop +72cc 204072cf call key_scheduling +72cd 78547c00 disable user +72ce 20207300 branch xor_mod32 + +key_scheduling: +72cf 680085d8 fetch 1 ,mem_ar_hround +72d0 d8c005c2 arg mem_key_store ,contr +72d1 203a72f6 branch key_sched_zero ,blank +72d2 98002400 iforce regb +72d3 18007211 force 17 ,loopcnt +72d4 18c20a00 copy contr ,contw + +key_rotateloop: +72d5 e8c08000 ifetch 1 ,contr +72d6 1fe98400 lshift3 pdata ,temp +72d7 1feb7e00 rshift2 pdata ,pdata +72d8 1fe97e00 rshift3 pdata ,pdata +72d9 9841fe00 ior temp ,pdata +72da e0a08000 istore 1 ,contw +72db c20072d5 loop key_rotateloop +72dc 580005c2 setarg mem_key_store +72dd 9a408c00 iadd regb ,contr +72de 18007210 force 16 ,loopcnt +72df d8a00572 arg mem_round_key ,contw + +key_select_octet_loop: +72e0 e8c08000 ifetch 1 ,contr +72e1 e0a08000 istore 1 ,contw +72e2 28c1ffd3 compare mem_key_store_end ,contr ,0xff +72e3 2420f2e5 nbranch key_select_octet_nwrap ,true +72e4 18c08def increase -17 ,contr + +key_select_octet_nwrap: +72e5 c20072e0 loop key_select_octet_loop +72e6 18002200 force 0 ,rega +72e7 1a40a7ff add regb ,-1 ,regc +72e8 1a6ba600 lshift2 regc ,regc +72e9 1a6ba600 lshift2 regc ,regc +72ea 204074b9 call enable_authrom +72eb 58008400 setarg mem_b_box +72ec 9a60a600 iadd regc ,regc +72ed d8a00572 arg mem_round_key ,contw +72ee 18007210 force 16 ,loopcnt + +bias_round_key_loop: +72ef ea688000 ifetcht 1 ,regc +72f0 e8a08000 ifetch 1 ,contw +72f1 9840fe00 iadd temp ,pdata +72f2 e0a08000 istore 1 ,contw +72f3 1a60a601 increase 1 ,regc +72f4 c20072ef loop bias_round_key_loop +72f5 202074bd branch disable_authrom + +key_sched_zero: +72f6 18007210 force 16 ,loopcnt +72f7 18000400 force 0 ,temp + +create_byte_16_loop: +72f8 e8c08000 ifetch 1 ,contr +72f9 98428400 ixor temp ,temp +72fa c20072f8 loop create_byte_16_loop +72fb 18427e00 deposit temp +72fc e0c08000 istore 1 ,contr +72fd d8c005c2 arg mem_key_store ,contr +72fe d8a00572 arg mem_round_key ,contw +72ff 20207ebf branch memcpy16 + +xor_mod32: +7300 da400572 arg mem_round_key ,regb + +xor_mod32_ar2: +7301 18007210 force 16 ,loopcnt +7302 da200592 arg mem_input_store ,rega +7303 1a220a00 copy rega ,contw + +xor_mod32_loop: +7304 ea288000 ifetcht 1 ,rega +7305 ea408000 ifetch 1 ,regb +7306 9842e000 ixor temp ,alarm +7307 1f212603 and loopcnt ,3 ,regc +7308 2434730a nbranch xor_mod32_invert ,user +7309 1a62a603 xor_into 3 ,regc + +xor_mod32_invert: +730a 1a662601 sub regc ,1 ,regc +730b 2021730d branch xor_even ,positive +730c 9840e000 iadd temp ,alarm + +xor_even: +730d 1e027e00 deposit alarm +730e e0a08000 istore 1 ,contw +730f 1a20a201 increase 1 ,rega +7310 1a40a401 increase 1 ,regb +7311 c2007304 loop xor_mod32_loop +7312 20600000 rtn + +el_boxes: +7313 204074b9 call enable_authrom +7314 18007210 force 16 ,loopcnt +7315 da200592 arg mem_input_store ,rega + +el_box_loop: +7316 ea208000 ifetch 1 ,rega +7317 d8c08500 arg mem_e_box ,contr +7318 1f212603 and loopcnt ,3 ,regc +7319 1a667c01 sub regc ,1 ,null +731a 2021731c branch e_boxes ,positive +731b d8c08600 arg mem_l_box ,contr + +e_boxes: +731c 98c08c00 iadd contr ,contr +731d e8c08000 ifetch 1 ,contr +731e e2208000 istore 1 ,rega +731f 1a20a201 increase 1 ,rega +7320 c2007316 loop el_box_loop +7321 202074bd branch disable_authrom + +pht: +7322 18007208 force 8 ,loopcnt +7323 d8c00592 arg mem_input_store ,contr +7324 18c20a00 copy contr ,contw + +pht_loop: +7325 e8c08000 ifetch 1 ,contr +7326 98002200 iforce rega +7327 e8c08000 ifetch 1 ,contr +7328 98002400 iforce regb +7329 1a23fe00 lshift rega ,pdata +732a 9a40fe00 iadd regb ,pdata +732b e0a08000 istore 1 ,contw +732c 1a227e00 deposit rega +732d 9a40fe00 iadd regb ,pdata +732e e0a08000 istore 1 ,contw +732f c2007325 loop pht_loop +7330 20600000 rtn + +permute: +7331 588ae42c setarg 0x8ae42c +7332 98000400 iforce temp +7333 18007207 force 7 ,loopcnt +7334 20407340 call permute_exchange +7335 580d751b setarg 0xd751b +7336 98000400 iforce temp +7337 18007205 force 5 ,loopcnt +7338 20407340 call permute_exchange +7339 680085a1 fetch 1 ,mem_input_store + 15 +733a 98002200 iforce rega +733b 68008595 fetch 1 ,mem_input_store + 3 +733c 600085a1 store 1 ,mem_input_store + 15 +733d 1a227e00 deposit rega +733e 60008595 store 1 ,mem_input_store + 3 +733f 20600000 rtn + +permute_exchange: +7340 1841240f and temp ,0xf ,regb + +permute_loop: +7341 18417e0f and temp ,0xf ,pdata +7342 d8a00592 arg mem_input_store ,contw +7343 98a08a00 iadd contw ,contw +7344 e8a08000 ifetch 1 ,contw +7345 98002600 iforce regc +7346 1a227e00 deposit rega +7347 e0a08000 istore 1 ,contw +7348 1a622200 copy regc ,rega +7349 18518400 rshift4 temp ,temp +734a c2007341 loop permute_loop +734b 58000592 setarg mem_input_store +734c 9a408a00 iadd regb ,contw +734d 1a227e00 deposit rega +734e e0a08000 istore 1 ,contw +734f 20600000 rtn + +add16: +7350 78347c00 enable user +7351 20207353 branch xor_add16 + +xor16: +7352 78547c00 disable user + +xor_add16: +7353 18007210 force 16 ,loopcnt + +xoradd_loop: +7354 ea288000 ifetcht 1 ,rega +7355 ea408000 ifetch 1 ,regb +7356 20347359 branch xoradd_add ,user +7357 9842fe00 ixor temp ,pdata +7358 2020735a branch xoradd_store + +xoradd_add: +7359 9840fe00 iadd temp ,pdata + +xoradd_store: +735a e0a08000 istore 1 ,contw +735b 1a20a201 increase 1 ,rega +735c 1a40a401 increase 1 ,regb +735d c2007354 loop xoradd_loop +735e 20600000 rtn + +function_expand: +735f d8a005b2 arg mem_y ,contw +7360 ea230000 ifetch 6 ,rega +7361 e0a30000 istore 6 ,contw +7362 20347365 branch expand_12 ,user +7363 ea230000 ifetch 6 ,rega +7364 20207366 branch expand_cont + +expand_12: +7365 e8c30000 ifetch 6 ,contr + +expand_cont: +7366 e0a30000 istore 6 ,contw +7367 ea220000 ifetch 4 ,rega +7368 e0a20000 istore 4 ,contw +7369 20600000 rtn + +key_offset: +736a d8c041be arg mem_link_key ,contr +736b d8a005a2 arg mem_x ,contw +736c d8400000 arg 0 ,temp +736d 588395a7 setarg 0x8395a7 +736e 2040738b call concatenate_temp24 +736f 58b3c1df setarg 0xb3c1df +7370 2040738b call concatenate_temp24 +7371 5800e5e9 setarg 0xe5e9 +7372 2040738c call concatenate_temp16 +7373 18422800 copy temp ,regab +7374 78547c00 disable user +7375 20407379 call key_addxor +7376 1a820400 copy regab ,temp +7377 78347c00 enable user +7378 20207379 branch key_addxor + +key_addxor: +7379 18007208 force 8 ,loopcnt + +key_addxor_loop: +737a e8c08000 ifetch 1 ,contr +737b 2f200201 compare 1 ,loopcnt ,1 +737c 20347380 branch key_high ,user +737d 2020f381 branch key_xor ,true + +key_add: +737e 9840fe00 iadd temp ,pdata +737f 20207382 branch key_store + +key_high: +7380 2020f37e branch key_add ,true + +key_xor: +7381 9842fe00 ixor temp ,pdata + +key_store: +7382 e0a08000 istore 1 ,contw +7383 184c8400 rshift8 temp ,temp +7384 c200737a loop key_addxor_loop +7385 20600000 rtn + +copy_aco: +7386 68030596 fetch 6 ,mem_input_store + 4 +7387 60030056 store 6 ,mem_aco +7388 e8c30000 ifetch 6 ,contr +7389 e0a30000 istore 6 ,contw +738a 20600000 rtn + +concatenate_temp24: +738b 184d0400 lshift8 temp ,temp + +concatenate_temp16: +738c 18500400 lshift16 temp ,temp +738d 98418400 ior temp ,temp +738e 20600000 rtn + +loop1: +738f 2020738f branch loop1 + +generate_stk: +7390 4770403c bpatchx patch3c_0 ,mem_patch3c +7391 2040742b call function_s1 +7392 d8a04419 arg mem_le_ltk ,contw +7393 20207497 branch store_aes_result + +authenticate_rconfirm: +7394 d8a0443a arg mem_le_srand ,contw +7395 2034f397 branch authenticate_mconfirm ,master +7396 d8a0042f arg mem_le_mrand ,contw + +authenticate_mconfirm: +7397 18c22200 copy contr ,rega +7398 20407ebf call memcpy16 +7399 20407440 call function_c1 +739a d8c0442a arg mem_le_rconfirm ,contr +739b 202074b0 branch compare_res + +generate_confirm: +739c da20042f arg mem_le_mrand ,rega +739d 2034f39f branch generate_mrand ,master +739e da20443a arg mem_le_srand ,rega + +generate_mrand: +739f 1a220a00 copy rega ,contw +73a0 2040630c call generate_random +73a1 20207440 branch function_c1 + +generate_sk: +73a2 d8c044aa arg mem_le_skdm ,contr +73a3 20407486 call load_data128 +73a4 d8c04419 arg mem_le_ltk ,contr +73a5 20407487 call load_regext +73a6 18006c38 force 0x38 ,aes_ctrl +73a7 18006c00 force 0x0 ,aes_ctrl +73a8 2040741d call wait_aes +73a9 d8a0047c arg mem_le_sk ,contw +73aa 20207497 branch store_aes_result + +first_block_counter: +73ab 18007e49 force 0x49 ,pdata +73ac 202073ae branch first_block + +first_block_data: +73ad 18007e01 force 1 ,pdata + +first_block: +73ae 18007000 force regidx_data ,regext_index +73af 184d5e00 lshift8 temp ,regext +73b0 9de1de00 ior regext ,regext +73b1 1f00f001 increase 1 ,regext_index +73b2 184cde00 rshift8 temp ,regext +73b3 1df15e00 rshift16 regext ,regext +73b4 68014411 fetch 2 ,mem_le_ivm +73b5 1ff07e00 lshift16 ,pdata ,pdata +73b6 9de1de00 ior regext ,regext +73b7 1f00f001 increase 1 ,regext_index +73b8 e8c20000 ifetch 4 ,contr +73b9 98005e00 iforce regext +73ba 1f00f001 increase 1 ,regext_index +73bb e8c10000 ifetch 2 ,contr +73bc 1a30de00 byteswap rega ,regext +73bd 1df05e00 lshift16 regext ,regext +73be 9de1de00 ior regext ,regext +73bf 1f00f001 increase 1 ,regext_index +73c0 20600000 rtn + +generate_mic: +73c1 1a608c01 add regc ,1 ,contr +73c2 e8c08000 ifetch 1 ,contr +73c3 98002200 iforce rega +73c4 204073ab call first_block_counter +73c5 2040741f call do_aes_ocb +73c6 18007000 force regidx_data ,regext_index +73c7 ea608000 ifetch 1 ,regc +73c8 1fe17e03 and_into 0x3 ,pdata +73c9 1ff05e00 lshift16 pdata ,regext +73ca 79205e08 set1 8 ,regext +73cb 2040748f call clear_hidata +73cc 20407422 call do_aes_cbc +73cd 1a227200 copy rega ,loopcnt +73ce 1a608c02 add regc ,2 ,contr +73cf 2040746e call padding_data + +generate_mic_loop: +73d0 20407478 call aes_load_data +73d1 20407422 call do_aes_cbc +73d2 1f227e00 deposit loopcnt +73d3 203a73d5 branch generate_mic_end ,blank +73d4 202073d0 branch generate_mic_loop + +generate_mic_end: +73d5 1800700c force regidx_result ,regext_index +73d6 1de27e00 deposit regext +73d7 60020417 store 4 ,mem_le_mic +73d8 20600000 rtn + +aes_crypt_data: +73d9 1a20a201 increase 1 ,rega +73da 204073ad call first_block_data +73db 1a620c00 copy regc ,contr +73dc 20407482 call aes_load_xor +73dd 20407425 call do_aes_ctr +73de 2040749e call store_enc_data +73df 1a60a610 increase 16 ,regc +73e0 1a40a5f0 increase -16 ,regb +73e1 202173d9 branch aes_crypt_data ,positive +73e2 20600000 rtn + +le_encrypt: +73e3 4770c03c bpatchx patch3c_1 ,mem_patch3c +73e4 da6043dc arg mem_le_txheader ,regc +73e5 680ac403 fetcht 5 ,mem_le_pcnt_tx +73e6 204073c1 call generate_mic +73e7 18007008 force regidx_xor ,regext_index +73e8 98005e00 iforce regext +73e9 18002200 force 0 ,rega +73ea 204073ad call first_block_data +73eb 20407425 call do_aes_ctr +73ec da6043de arg mem_le_txpayload ,regc +73ed 6800c3dd fetch 1 ,mem_le_txlen +73ee 1fe0a5ff add pdata ,-1 ,regb +73ef 9a608a00 iadd regc ,contw +73f0 1800700c force regidx_result ,regext_index +73f1 1de27e00 deposit regext +73f2 e0a20000 istore 4 ,contw +73f3 204073d9 call aes_crypt_data +73f4 6800c3dd fetch 1 ,mem_le_txlen +73f5 1fe0fe04 increase 4 ,pdata +73f6 6000c3dd store 1 ,mem_le_txlen +73f7 680ac403 fetcht 5 ,mem_le_pcnt_tx +73f8 18408401 increase 1 ,temp +73f9 600ac403 storet 5 ,mem_le_pcnt_tx +73fa 20600000 rtn + +le_decrypt: +73fb 4771403c bpatchx patch3c_2 ,mem_patch3c +73fc 680082da fetch 1 ,mem_le_rxbuf + 1 +73fd 1fe67c14 sub pdata ,20 ,null +73fe 202173ff branch le_dec_cont ,positive + +le_dec_cont: +73ff da6002db arg mem_le_rxbuf + 2 ,regc +7400 1fe0a5ff add pdata ,-1 ,regb +7401 1fe0fffc increase -4 ,pdata +7402 600082da store 1 ,mem_le_rxbuf + 1 +7403 9a608c00 iadd regc ,contr +7404 e8c20000 ifetch 4 ,contr +7405 18007008 force regidx_xor ,regext_index +7406 98005e00 iforce regext +7407 18002200 force 0 ,rega +7408 680ac408 fetcht 5 ,mem_le_pcnt_rx +7409 204073ad call first_block_data +740a 20407425 call do_aes_ctr +740b 1800700c force regidx_result ,regext_index +740c 1de27e00 deposit regext +740d 6002041b store 4 ,mem_le_peer_mic +740e 204073d9 call aes_crypt_data +740f da6002d9 arg mem_le_rxbuf ,regc +7410 204073c1 call generate_mic +7411 680a041b fetcht 4 ,mem_le_peer_mic +7412 98467e00 isub temp ,pdata +7413 247a0000 nrtn blank +7414 6802440d fetch 4 ,mem_le_last_mic +7415 98467e00 isub temp ,pdata +7416 207a0000 rtn blank +7417 600a440d storet 4 ,mem_le_last_mic +7418 6802c408 fetch 5 ,mem_le_pcnt_rx +7419 1fe0fe01 increase 1 ,pdata +741a 6002c408 store 5 ,mem_le_pcnt_rx +741b 18007e00 force 0 ,pdata +741c 20600000 rtn + +wait_aes: +741d 243bf41d nbranch wait_aes ,aes_ready +741e 20600000 rtn + +do_aes_ocb: +741f 18006c30 force 0x30 ,aes_ctrl +7420 18006c00 force 0x0 ,aes_ctrl +7421 2020741d branch wait_aes + +do_aes_cbc: +7422 18006c32 force 0x32 ,aes_ctrl +7423 18006c02 force 0x2 ,aes_ctrl +7424 2020741d branch wait_aes + +do_aes_ctr: +7425 18006c34 force 0x34 ,aes_ctrl +7426 18006c04 force 0x4 ,aes_ctrl +7427 2020741d branch wait_aes + +aes_init: +7428 18006c01 force 1 ,aes_ctrl +7429 18006c00 force 0 ,aes_ctrl +742a 20600000 rtn + +function_s1: +742b 18007000 force regidx_data ,regext_index +742c 6802042f fetch 4 ,mem_le_mrand +742d 98005e00 iforce regext +742e 1f00f001 increase 1 ,regext_index +742f e8c20000 ifetch 4 ,contr +7430 98005e00 iforce regext +7431 1f00f001 increase 1 ,regext_index +7432 6802443a fetch 4 ,mem_le_srand +7433 98005e00 iforce regext +7434 1f00f001 increase 1 ,regext_index +7435 e8c20000 ifetch 4 ,contr +7436 98005e00 iforce regext +7437 1f00f001 increase 1 ,regext_index +7438 20407492 call aes_clear +7439 1f00f1fc increase -4 ,regext_index +743a 680244c7 fetch 4 ,mem_le_tk +743b 1fe25e00 copy pdata ,regext +743c 1f00f004 increase 4 ,regext_index +743d 18006c38 force 0x38 ,aes_ctrl +743e 18006c08 force 0x8 ,aes_ctrl +743f 2020741d branch wait_aes + +function_c1: +7440 4771c03c bpatchx patch3c_3 ,mem_patch3c +7441 680344a0 fetch 6 ,mem_le_lap +7442 680b044f fetcht 6 ,mem_le_plap +7443 2034f446 branch function_c1_master ,master +7444 6803044f fetch 6 ,mem_le_plap +7445 680b44a0 fetcht 6 ,mem_le_lap + +function_c1_master: +7446 18007008 force regidx_xor ,regext_index +7447 18425e00 copy temp ,regext +7448 1f00f001 increase 1 ,regext_index +7449 184f5e00 rshift32 temp ,regext +744a 1ff07e00 lshift16 pdata ,pdata +744b 9de1de00 ior regext ,regext +744c 1f00f001 increase 1 ,regext_index +744d 1fef5e00 rshift32 pdata ,regext +744e 1f00f001 increase 1 ,regext_index +744f 18005e00 force 0 ,regext +7450 18007e00 force 0 ,pdata +7451 6800c48e fetch 1 ,mem_le_conn_peer_addr_type +7452 6808c485 fetcht 1 ,mem_le_adv_own_addr_type +7453 2434f456 nbranch function_c1_irat ,master +7454 6800c495 fetch 1 ,mem_le_conn_own_addr_type +7455 6808c48e fetcht 1 ,mem_le_conn_peer_addr_type + +function_c1_irat: +7456 6000c44a store 1 ,mem_le_iat +7457 6008c44b storet 1 ,mem_le_rat +7458 18007000 force regidx_data ,regext_index +7459 da40444a arg mem_le_iat ,regb +745a 18007204 force 4 ,loopcnt + +function_c1_loop1: +745b ea220000 ifetch 4 ,rega +745c ea4a0000 ifetcht 4 ,regb +745d 9842de00 ixor temp ,regext +745e 1f00f001 increase 1 ,regext_index +745f 1a20a204 increase 4 ,rega +7460 1a40a404 increase 4 ,regb +7461 c200745b loop function_c1_loop1 +7462 20407492 call aes_clear +7463 1f00f1fc increase -4 ,regext_index +7464 680244c7 fetch 4 ,mem_le_tk +7465 1fe25e00 copy pdata ,regext +7466 1f00f004 increase 4 ,regext_index +7467 18006c38 force 0x38 ,aes_ctrl +7468 18006c0c force 0xc ,aes_ctrl +7469 2040741d call wait_aes +746a 20407491 call aes_clear_data +746b 18006c3a force 0x3a ,aes_ctrl +746c 18006c08 force 0x8 ,aes_ctrl +746d 2020741d branch wait_aes + +padding_data: +746e 2f200600 compare 0 ,loopcnt ,3 +746f 20608000 rtn true +7470 18c27e00 deposit contr +7471 9f208a00 iadd loopcnt ,contw +7472 18007e00 force 0 ,pdata + +padding_loop: +7473 e0a08000 istore 1 ,contw +7474 1f20f201 increase 1 ,loopcnt +7475 2f200600 compare 0 ,loopcnt ,3 +7476 20608000 rtn true +7477 20207473 branch padding_loop + +aes_load_data: +7478 18007000 force regidx_data ,regext_index + +load_data_loop: +7479 1f227e00 deposit loopcnt +747a 203a747d branch load_data_padding ,blank +747b e8c20000 ifetch 4 ,contr +747c 1f20f3fc increase -4 ,loopcnt + +load_data_padding: +747d 98005e00 iforce regext +747e 1f00f001 increase 1 ,regext_index +747f 2f001e04 compare regidx_key ,regext_index ,0xf +7480 20608000 rtn true +7481 20207479 branch load_data_loop + +aes_load_xor: +7482 18007008 force regidx_xor ,regext_index +7483 20207487 branch load_regext + +load_key: +7484 18007004 force regidx_key ,regext_index +7485 20207487 branch load_regext + +load_data128: +7486 18007000 force regidx_data ,regext_index + +load_regext: +7487 18007204 force 4 ,loopcnt + +load_regext_loop: +7488 e8c20000 ifetch 4 ,contr +7489 98005e00 iforce regext +748a 1f00f001 increase 1 ,regext_index +748b c2007488 loop load_regext_loop +748c 20600000 rtn + +load_sk: +748d d8c0047c arg mem_le_sk ,contr +748e 20207484 branch load_key + +clear_hidata: +748f 18007204 force 4 ,loopcnt +7490 20207494 branch clear_data_rest + +aes_clear_data: +7491 18007000 force regidx_data ,regext_index + +aes_clear: +7492 18007204 force 4 ,loopcnt + +clear_loop: +7493 18005e00 force 0 ,regext + +clear_data_rest: +7494 1f00f001 increase 1 ,regext_index +7495 c2007493 loop clear_loop +7496 20600000 rtn + +store_aes_result: +7497 1800700c force regidx_result ,regext_index +7498 18007204 force 4 ,loopcnt + +send_aes_result_loop: +7499 1de27e00 deposit regext +749a e0a20000 istore 4 ,contw +749b 1f00f001 increase 1 ,regext_index +749c c2007499 loop send_aes_result_loop +749d 20600000 rtn + +store_enc_data: +749e 1800700c force regidx_result ,regext_index +749f 1a620a00 copy regc ,contw +74a0 1a40f201 add regb ,1 ,loopcnt +74a1 1f267c0f sub loopcnt ,15 ,null +74a2 202174a4 branch store_enc_loop ,positive +74a3 18007210 force 16 ,loopcnt + +store_enc_loop: +74a4 1de27e00 deposit regext +74a5 1f267c03 sub loopcnt ,3 ,null +74a6 202174ac branch store_enc_byte ,positive +74a7 e0a20000 istore 4 ,contw +74a8 1f20f3fc increase -4 ,loopcnt +74a9 20628000 rtn zero +74aa 1f00f001 increase 1 ,regext_index +74ab 202074a4 branch store_enc_loop + +store_enc_byte: +74ac e0a08000 istore 1 ,contw +74ad 1fecfe00 rshift8 pdata ,pdata +74ae c20074ac loop store_enc_byte +74af 20600000 rtn + +compare_res: +74b0 1800700c force regidx_result ,regext_index +74b1 18007204 force 4 ,loopcnt + +compare_res_loop: +74b2 e8c20000 ifetch 4 ,contr +74b3 9de67c00 isub regext ,null +74b4 24628000 nrtn zero +74b5 1f00f001 increase 1 ,regext_index +74b6 c20074b2 loop compare_res_loop +74b7 18007c00 force 0 ,null +74b8 20600000 rtn + +enable_authrom: +74b9 68108050 hfetch 1 ,core_clkoff +74ba 793ffe00 set0 clock_off_auth_rom ,pdata +74bb 60108050 hstore 1 ,core_clkoff +74bc 20600000 rtn + +disable_authrom: +74bd 68108050 hfetch 1 ,core_clkoff +74be 79207e00 set1 clock_off_auth_rom ,pdata +74bf 60108050 hstore 1 ,core_clkoff +74c0 20600000 rtn + +init_memp: +74c1 d8a00886 arg mem_p ,contw +74c2 3803ffff setsect 0 ,0x3ffff +74c3 3807ffff setsect 1 ,0x3ffff +74c4 380bffff setsect 2 ,0x3ffff +74c5 380ffbff setsect 3 ,0x3fbff +74c6 e0a48000 istore 9 ,contw +74c7 3803ffff setsect 0 ,0x3ffff +74c8 3807ffff setsect 1 ,0x3ffff +74c9 380bffff setsect 2 ,0x3ffff +74ca 380fffff setsect 3 ,0x3ffff +74cb e0a48000 istore 9 ,contw +74cc 3803ffff setsect 0 ,0x3ffff +74cd 3807ffff setsect 1 ,0x3ffff +74ce 380bcfff setsect 2 ,0x3cfff +74cf 380fffff setsect 3 ,0x3ffff +74d0 e0a48000 istore 9 ,contw +74d1 3803ffff setsect 0 ,0x3ffff +74d2 3807ffff setsect 1 ,0x3ffff +74d3 380bffef setsect 2 ,0x3ffef +74d4 380fffff setsect 3 ,0x3ffff +74d5 e0a48000 istore 9 ,contw +74d6 3803ffff setsect 0 ,0x3ffff +74d7 3807ffff setsect 1 ,0x3ffff +74d8 380bffff setsect 2 ,0x3ffff +74d9 380fffff setsect 3 ,0x3ffff +74da e0a48000 istore 9 ,contw +74db 3803ffff setsect 0 ,0x3ffff +74dc 38066c7f setsect 1 ,0x26c7f +74dd 3808146b setsect 2 ,0x146b +74de 380f7bb3 setsect 3 ,0x37bb3 +74df e0a48000 istore 9 ,contw +74e0 3801feb8 setsect 0 ,0x1feb8 +74e1 38050c12 setsect 1 ,0x10c12 +74e2 380ab722 setsect 2 ,0x2b722 +74e3 380e9fa6 setsect 3 ,0x29fa6 +74e4 e0a48000 istore 9 ,contw +74e5 3800e70f setsect 0 ,0xe70f +74e6 38056720 setsect 1 ,0x16720 +74e7 3808519e setsect 2 ,0x519e +74e8 380d9084 setsect 3 ,0x19084 +74e9 e0a48000 istore 9 ,contw +74ea 38031012 setsect 0 ,0x31012 +74eb 380760bf setsect 1 ,0x360bf +74ec 380bf0af setsect 2 ,0x3f0af +74ed 380c03d3 setsect 3 ,0x3d3 +74ee e0a48000 istore 9 ,contw +74ef 3803a188 setsect 0 ,0x3a188 +74f0 38043ad0 setsect 1 ,0x3ad0 +74f1 380bcbf2 setsect 2 ,0x3cbf2 +74f2 380e43d9 setsect 3 ,0x243d9 +74f3 e0a48000 istore 9 ,contw +74f4 3802b030 setsect 0 ,0x2b030 +74f5 38076a03 setsect 1 ,0x36a03 +74f6 38091188 setsect 2 ,0x11188 +74f7 380de520 setsect 3 ,0x1e520 +74f8 e0a48000 istore 9 ,contw +74f9 3803a11e setsect 0 ,0x3a11e +74fa 3804fe5d setsect 1 ,0xfe5d +74fb 3808dd57 setsect 2 ,0xdd57 +74fc 380dac93 setsect 3 ,0x1ac93 +74fd e0a48000 istore 9 ,contw +74fe 380011ed setsect 0 ,0x11ed +74ff 380618c4 setsect 1 ,0x218c4 +7500 38088da7 setsect 2 ,0x8da7 +7501 380e57ff setsect 3 ,0x257ff +7502 e0a48000 istore 9 ,contw +7503 3803192b setsect 0 ,0x3192b +7504 38074641 setsect 1 ,0x34641 +7505 3809be0c setsect 2 ,0x1be0c +7506 380f66ad setsect 3 ,0x366ad +7507 e0a48000 istore 9 ,contw +7508 38001f83 setsect 0 ,0x1f83 +7509 38055a23 setsect 1 ,0x15a23 +750a 380bf9b0 setsect 2 ,0x3f9b0 +750b 380c3949 setsect 3 ,0x3949 +750c e0a48000 istore 9 ,contw +750d 38013a51 setsect 0 ,0x13a51 +750e 380553fd setsect 1 ,0x153fd +750f 380b372a setsect 2 ,0x3372a +7510 380cf1bb setsect 3 ,0xf1bb +7511 e0a48000 istore 9 ,contw +7512 3803ae85 setsect 0 ,0x3ae85 +7513 3805eed9 setsect 1 ,0x1eed9 +7514 38089e66 setsect 2 ,0x9e66 +7515 380c01a8 setsect 3 ,0x1a8 +7516 e0a40000 istore 8 ,contw +7517 20600000 rtn + +init_memp_256: +7518 d8a0091e arg mem_p_256 ,contw +7519 3803ffff setsect 0 ,0x3ffff +751a 3807ffff setsect 1 ,0x3ffff +751b 380bffff setsect 2 ,0x3ffff +751c 380fffff setsect 3 ,0x3ffff +751d e0a48000 istore 9 ,contw +751e 3803ffff setsect 0 ,0x3ffff +751f 3804003f setsect 1 ,0x3f +7520 38080000 setsect 2 ,0x0 +7521 380c0000 setsect 3 ,0x0 +7522 e0a48000 istore 9 ,contw +7523 38000000 setsect 0 ,0x0 +7524 38040000 setsect 1 ,0x0 +7525 38081000 setsect 2 ,0x1000 +7526 380c0000 setsect 3 ,0x0 +7527 e0a48000 istore 9 ,contw +7528 3803ff00 setsect 0 ,0x3ff00 +7529 3807ffff setsect 1 ,0x3ffff +752a 380bffcf setsect 2 ,0x3ffcf +752b 380fffff setsect 3 ,0x3ffff +752c e0a48000 istore 9 ,contw +752d 3803ffff setsect 0 ,0x3ffff +752e 3807ffff setsect 1 ,0x3ffff +752f 380bffff setsect 2 ,0x3ffff +7530 380c03ff setsect 3 ,0x3ff +7531 e0a48000 istore 9 ,contw +7532 38000000 setsect 0 ,0x0 +7533 38040000 setsect 1 ,0x0 +7534 38080000 setsect 2 ,0x0 +7535 380c0000 setsect 3 ,0x0 +7536 e0a48000 istore 9 ,contw +7537 38010000 setsect 0 ,0x10000 +7538 38040000 setsect 1 ,0x0 +7539 380bf000 setsect 2 ,0x3f000 +753a 380fffff setsect 3 ,0x3ffff +753b e0a48000 istore 9 ,contw +753c 380296ff setsect 0 ,0x296ff +753d 38062630 setsect 1 ,0x22630 +753e 380b945d setsect 2 ,0x3945d +753f 380fd284 setsect 3 ,0x3d284 +7540 e0a48000 istore 9 ,contw +7541 380333a0 setsect 0 ,0x333a0 +7542 38044b7a setsect 1 ,0x4b7a +7543 380837d8 setsect 2 ,0x37d8 +7544 380fc9dc setsect 3 ,0x3c9dc +7545 e0a48000 istore 9 ,contw +7546 3803a440 setsect 0 ,0x3a440 +7547 3805b958 setsect 1 ,0x1b958 +7548 380b8bce setsect 2 ,0x38bce +7549 380d091f setsect 3 ,0x1091f +754a e0a48000 istore 9 ,contw +754b 3802e12c setsect 0 ,0x2e12c +754c 3805f47c setsect 1 ,0x1f47c +754d 380b56b1 setsect 2 ,0x356b1 +754e 380efd47 setsect 3 ,0x2fd47 +754f e0a48000 istore 9 ,contw +7550 38006837 setsect 0 ,0x6837 +7551 3806ed90 setsect 1 ,0x2ed90 +7552 3809ecec setsect 2 ,0x1ecec +7553 380dacc5 setsect 3 ,0x1acc5 +7554 e0a48000 istore 9 ,contw +7555 38023357 setsect 0 ,0x23357 +7556 38058af3 setsect 1 ,0x18af3 +7557 3808f9e1 setsect 2 ,0xf9e1 +7558 380d29f0 setsect 3 ,0x129f0 +7559 e0a48000 istore 9 ,contw +755a 3802e7eb setsect 0 ,0x2e7eb +755b 3807e6e3 setsect 1 ,0x3e6e3 +755c 380be1a7 setsect 2 ,0x3e1a7 +755d 380d0b8b setsect 3 ,0x10b8b +755e e0a48000 istore 9 ,contw +755f 38024fe3 setsect 0 ,0x24fe3 +7560 380420ef setsect 1 ,0x20ef +7561 3809b5a6 setsect 2 ,0x1b5a6 +7562 380cdc2f setsect 3 ,0xdc2f +7563 e0a48000 istore 9 ,contw +7564 38013860 setsect 0 ,0x13860 +7565 3806bd69 setsect 1 ,0x2bd69 +7566 3808391a setsect 2 ,0x391a +7567 380db222 setsect 3 ,0x1b222 +7568 e0a48000 istore 9 ,contw +7569 20600000 rtn + +publickey_init: +756a 6800c65a fetch 1 ,mem_ssp_enable +756b 243a757d nbranch sp_initialize ,blank +756c 20207a77 branch sp_initialize_256 + +sp_calc_sequence_256_check: +756d 4772403c bpatchx patch3c_4 ,mem_patch3c +756e 6800c65a fetch 1 ,mem_ssp_enable +756f 207a0000 rtn blank +7570 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +7571 c1808000 rtnne sp_key_valid +7572 6800c4be fetch 1 ,mem_le_secure_connect_enable +7573 207a0000 rtn blank +7574 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid +7575 c1018000 rtneq sp_key_valid_256 +7576 68014682 fetch 2 ,mem_ui_state_map +7577 c280757b bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +7578 6800c4c0 fetch 1 ,mem_le_sc_calc +7579 c0007a77 beq sp_calc_standby ,sp_initialize_256 +757a 20600000 rtn + +stop_publickey_calc_256: +757b 7044c000 jam sp_calc_standby ,mem_le_sc_calc +757c 20600000 rtn + +sp_initialize: +757d 4772c03c bpatchx patch3c_5 ,mem_patch3c +757e 6800c65a fetch 1 ,mem_ssp_enable +757f 203a612b branch ssp_disable ,blank +7580 20406124 call ssp_enable +7581 20407583 call sp_clear_flags +7582 2020766d branch sp_pubkey_calc + +sp_clear_flags: +7583 58000000 setarg 0 +7584 600409ae store 8 ,mem_sp_state_start +7585 600209b6 store 4 ,mem_sp_flag_start +7586 6003c65e store 7 ,mem_sp_iocap_remote +7587 20600000 rtn + +sp_generate_local_key: +7588 7009b001 jam sp_flag_commit ,mem_sp_flag +7589 2020758d branch sp_generate_local_key0 + +sp_master_generate_local_key: +758a 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +758b c000f68a beq sp_key_valid ,sp_dhkey_calc +758c 20202a8c branch assert + +sp_generate_local_key0: +758d 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +758e c000f590 beq sp_key_valid ,sp_start_send_pubkey +758f 2020766d branch sp_pubkey_calc + +sp_start_send_pubkey: +7590 2040768a call sp_dhkey_calc +7591 680089af fetch 1 ,mem_master_sp_state +7592 247a0000 nrtn blank +7593 7009ae03 jam sp_stat_key_send ,mem_sp_state +7594 20600000 rtn + +sp_calc_check_publickey_256: +7595 204075b0 call sp_calc_b256 +7596 da2009de arg mem_le_pubkey_remote_y_256 ,rega +7597 d8a00866 arg mem_t7_256 ,contw +7598 20407c79 call bn_sqrmod_256 +7599 da2009be arg mem_le_pubkey_remote_x_256 ,rega +759a d8a00826 arg mem_t2_256 ,contw +759b 20407c79 call bn_sqrmod_256 +759c da200826 arg mem_t2_256 ,rega +759d da4009be arg mem_le_pubkey_remote_x_256 ,regb +759e d8a00826 arg mem_t2_256 ,contw +759f 20407be1 call bn_mulmod_256 +75a0 da20093e arg mem_a_256 ,rega +75a1 da4009be arg mem_le_pubkey_remote_x_256 ,regb +75a2 d8a00846 arg mem_t3_256 ,contw +75a3 20407be1 call bn_mulmod_256 +75a4 da200846 arg mem_t3_256 ,rega +75a5 da400826 arg mem_t2_256 ,regb +75a6 d8a00826 arg mem_t2_256 ,contw +75a7 20407c7d call bn_addmod_256 +75a8 da200806 arg mem_t0_256 ,rega +75a9 da400826 arg mem_t2_256 ,regb +75aa d8a00806 arg mem_t0_256 ,contw +75ab 20407c7d call bn_addmod_256 +75ac df200020 arg 32 ,loopcnt +75ad da200866 arg mem_t7_256 ,rega +75ae da400806 arg mem_t0_256 ,regb +75af 20207f88 branch string_compare + +sp_calc_b256: +75b0 da20097e arg mem_gy_256 ,rega +75b1 d8a00806 arg mem_t0_256 ,contw +75b2 20407c79 call bn_sqrmod_256 +75b3 da20095e arg mem_gx_256 ,rega +75b4 d8a00826 arg mem_t2_256 ,contw +75b5 20407c79 call bn_sqrmod_256 +75b6 da200826 arg mem_t2_256 ,rega +75b7 da40095e arg mem_gx_256 ,regb +75b8 d8a00826 arg mem_t2_256 ,contw +75b9 20407be1 call bn_mulmod_256 +75ba da20093e arg mem_a_256 ,rega +75bb da40095e arg mem_gx_256 ,regb +75bc d8a00846 arg mem_t3_256 ,contw +75bd 20407be1 call bn_mulmod_256 +75be da200846 arg mem_t3_256 ,rega +75bf da400826 arg mem_t2_256 ,regb +75c0 d8a00826 arg mem_t2_256 ,contw +75c1 20407c7d call bn_addmod_256 +75c2 da200806 arg mem_t0_256 ,rega +75c3 da400826 arg mem_t2_256 ,regb +75c4 d8a00806 arg mem_t0_256 ,contw +75c5 20207c96 branch bn_submod_256 + +sp_calc_check_publickey: +75c6 204075e1 call sp_calc_b +75c7 da2009e6 arg mem_sp_pubkey_remote_y ,rega +75c8 d8a00866 arg mem_t7_256 ,contw +75c9 204077a8 call bn_sqrmod +75ca da2009c6 arg mem_sp_pubkey_remote_x ,rega +75cb d8a00826 arg mem_t2_256 ,contw +75cc 204077a8 call bn_sqrmod +75cd da200826 arg mem_t2_256 ,rega +75ce da4009c6 arg mem_sp_pubkey_remote_x ,regb +75cf d8a00826 arg mem_t2_256 ,contw +75d0 20407786 call bn_mulmod +75d1 da20089e arg mem_a ,rega +75d2 da4009c6 arg mem_sp_pubkey_remote_x ,regb +75d3 d8a00846 arg mem_t3_256 ,contw +75d4 20407786 call bn_mulmod +75d5 da200846 arg mem_t3_256 ,rega +75d6 da400826 arg mem_t2_256 ,regb +75d7 d8a00826 arg mem_t2_256 ,contw +75d8 20407755 call bn_addmod +75d9 da200806 arg mem_t0_256 ,rega +75da da400826 arg mem_t2_256 ,regb +75db d8a00806 arg mem_t0_256 ,contw +75dc 20407755 call bn_addmod +75dd df200018 arg 24 ,loopcnt +75de da200866 arg mem_t7_256 ,rega +75df da400806 arg mem_t0_256 ,regb +75e0 20207f88 branch string_compare + +sp_calc_b: +75e1 da2008e6 arg mem_gy ,rega +75e2 d8a00806 arg mem_t0_256 ,contw +75e3 204077a8 call bn_sqrmod +75e4 da2008ce arg mem_gx ,rega +75e5 d8a00826 arg mem_t2_256 ,contw +75e6 204077a8 call bn_sqrmod +75e7 da200826 arg mem_t2_256 ,rega +75e8 da4008ce arg mem_gx ,regb +75e9 d8a00826 arg mem_t2_256 ,contw +75ea 20407786 call bn_mulmod +75eb da20089e arg mem_a ,rega +75ec da4008ce arg mem_gx ,regb +75ed d8a00846 arg mem_t3_256 ,contw +75ee 20407786 call bn_mulmod +75ef da200846 arg mem_t3_256 ,rega +75f0 da400826 arg mem_t2_256 ,regb +75f1 d8a00826 arg mem_t2_256 ,contw +75f2 20407755 call bn_addmod +75f3 da200806 arg mem_t0_256 ,rega +75f4 da400826 arg mem_t2_256 ,regb +75f5 d8a00806 arg mem_t0_256 ,contw +75f6 20207758 branch bn_submod + +sp_calculate_commitment: +75f7 680089b2 fetch 1 ,mem_sp_calc +75f8 c0807615 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +75f9 20407612 call sp_local_random_key_generator +75fa d8a00a7e arg mem_sp_prarm_stack ,contw +75fb 58000a2e setarg mem_sp_random_local_end +75fc e0a10000 istore 2 ,contw +75fd 58004642 setarg mem_sp_pubkey_local_x_end +75fe e0a10000 istore 2 ,contw +75ff 580009de setarg mem_sp_pubkey_remote_x_end +7600 e0a10000 istore 2 ,contw +7601 20207609 branch sp_calculate_commitment0 + +master_sp_calculate_commitment: +7602 d8a00a7e arg mem_sp_prarm_stack ,contw +7603 58000a3e setarg mem_sp_random_remote_end +7604 e0a10000 istore 2 ,contw +7605 580009de setarg mem_sp_pubkey_remote_x_end +7606 e0a10000 istore 2 ,contw +7607 58004642 setarg mem_sp_pubkey_local_x_end +7608 e0a10000 istore 2 ,contw + +sp_calculate_commitment0: +7609 204079a0 call function_f1 +760a 680089af fetch 1 ,mem_master_sp_state +760b c002760f beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +760c 7009b001 jam sp_flag_commit ,mem_sp_flag +760d 7009ae05 jam sp_stat_commit_send ,mem_sp_state +760e 20600000 rtn + +master_sp_calculate_commitment0: +760f 7009af14 jam sp_stat_commitment_compare ,mem_master_sp_state +7610 2040758a call sp_master_generate_local_key +7611 202076d8 branch master_set_mem_master_sp_flag + +sp_local_random_key_generator: +7612 d8a00a1e arg mem_sp_random_local ,contw +7613 18000e08 force 8 ,queue +7614 202076a2 branch random_generator + +sp_calculate_commitment_wait_dhkey_calc: +7615 7009b001 jam sp_flag_commit ,mem_sp_flag +7616 20600000 rtn + +sp_confirm_check: +7617 4773403c bpatchx patch3c_6 ,mem_patch3c +7618 d8a00727 arg mem_addr_value ,contw +7619 680340a0 fetch 6 ,mem_lap +761a e0a30000 istore 6 ,contw +761b 68030040 fetch 6 ,mem_plap +761c e0a30000 istore 6 ,contw +761d 6801c65e fetch 3 ,mem_sp_iocap_remote +761e e0a18000 istore 3 ,contw +761f 20407a0d call function_f3a +7620 da200a4e arg mem_sp_calc_result_high ,rega +7621 da400a5e arg mem_sp_check_result ,regb +7622 18000e04 force 4 ,queue +7623 204076a7 call compare4 +7624 2420f631 nbranch sp_confirm_check_failed ,true +7625 20407628 call sp_confirm_check_success +7626 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 +7627 202062f8 branch tid_set_reply + +sp_confirm_check_success: +7628 680089af fetch 1 ,mem_master_sp_state +7629 c004f62e beq sp_stat_confirm_check ,sp_confirm_check_success_master +762a 7009ae0a jam sp_stat_confirm_calc ,mem_sp_state +762b 7009b001 jam sp_flag_commit ,mem_sp_flag +762c 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +762d 20600000 rtn + +sp_confirm_check_success_master: +762e 70007c03 jam lmp_accepted ,mem_lmo_opcode2 +762f 7009af15 jam sp_state_end ,mem_master_sp_state +7630 202076d8 branch master_set_mem_master_sp_flag + +sp_confirm_check_failed: +7631 680089af fetch 1 ,mem_master_sp_state +7632 c004f637 beq sp_stat_confirm_check ,sp_confirm_check_failed_master +7633 7009ae00 jam sp_stat_null ,mem_sp_state +7634 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +7635 70007e05 jam authentication_failure_error ,mem_lmo_reason2 +7636 20600000 rtn + +sp_confirm_check_failed_master: +7637 70007c04 jam lmp_not_accepted ,mem_lmo_opcode2 +7638 7009af00 jam sp_stat_null ,mem_master_sp_state +7639 20600000 rtn + +sp_confirm_calc: +763a 680089b3 fetch 1 ,mem_sp_dh_ready +763b c000f63e beq sp_flag_commit ,sp_confirm_calc_ready +763c 7009af0a jam sp_stat_confirm_calc ,mem_master_sp_state +763d 202076d8 branch master_set_mem_master_sp_flag + +sp_confirm_calc_ready: +763e d8a00727 arg mem_addr_value ,contw +763f 68030040 fetch 6 ,mem_plap +7640 e0a30000 istore 6 ,contw +7641 680340a0 fetch 6 ,mem_lap +7642 e0a30000 istore 6 ,contw +7643 6801c65b fetch 3 ,mem_sp_iocap_local +7644 e0a18000 istore 3 ,contw +7645 20407a24 call function_f3b +7646 680089af fetch 1 ,mem_master_sp_state +7647 c005764b beq sp_stat_confirm_calc ,sp_confirm_calc_master +7648 7009ae0b jam sp_stat_confirm_send ,mem_sp_state +7649 7009b001 jam sp_flag_commit ,mem_sp_flag +764a 20600000 rtn + +sp_confirm_calc_master: +764b 7009af0b jam sp_stat_confirm_send ,mem_master_sp_state +764c 7009b101 jam sp_flag_commit ,mem_master_sp_flag +764d 20600000 rtn + +sp_master_key_prarm_push: +764e d8a00a7e arg mem_sp_prarm_stack ,contw +764f 68030040 fetch 6 ,mem_plap +7650 e0a30000 istore 6 ,contw +7651 680340a0 fetch 6 ,mem_lap +7652 e0a30000 istore 6 ,contw +7653 58000a2e setarg mem_sp_random_local_end +7654 e0a10000 istore 2 ,contw +7655 58000a3e setarg mem_sp_random_remote_end +7656 e0a10000 istore 2 ,contw +7657 20207662 branch sp_link_key_calc + +sp_link_key_prarm_push: +7658 7009ae0f jam sp_stat_done ,mem_sp_state +7659 d8a00a7e arg mem_sp_prarm_stack ,contw +765a 680340a0 fetch 6 ,mem_lap +765b e0a30000 istore 6 ,contw +765c 68030040 fetch 6 ,mem_plap +765d e0a30000 istore 6 ,contw +765e 58000a3e setarg mem_sp_random_remote_end +765f e0a10000 istore 2 ,contw +7660 58000a2e setarg mem_sp_random_local_end +7661 e0a10000 istore 2 ,contw + +sp_link_key_calc: +7662 d8a00727 arg mem_addr_value ,contw +7663 68030a7e fetch 6 ,mem_sp_prarm_stack +7664 e0a30000 istore 6 ,contw +7665 68030a84 fetch 6 ,mem_sp_prarm_stack + 6 +7666 e0a30000 istore 6 ,contw +7667 204079d7 call function_f2 +7668 7041bd01 jam 1 ,mem_link_key_exists +7669 d8a041be arg mem_link_key ,contw +766a d8c00a4e arg mem_sp_calc_result_high ,contr +766b 20407ebf call memcpy16 +766c 202021c4 branch generate_linkkey_continue + +sp_pubkey_calc: +766d 4773c03c bpatchx patch3c_7 ,mem_patch3c +766e 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +766f c1800000 rtnne sp_key_invalid +7670 680089b2 fetch 1 ,mem_sp_calc +7671 c1800000 rtnne sp_calc_standby +7672 d8a04612 arg mem_sp_private_key ,contw +7673 18000e0b force 11 ,queue +7674 204076a2 call random_generator +7675 180a7e00 random pdata +7676 1fe37e00 rshift pdata ,pdata +7677 e0a10000 istore 2 ,contw +7678 d8a006be arg mem_k ,contw +7679 d8c04612 arg mem_sp_private_key ,contr +767a 20407ebe call memcpy24 +767b d8a005e6 arg mem_ax ,contw +767c d8c008ce arg mem_gx ,contr +767d 20407ebc call memcpy48 +767e d8a00616 arg mem_az ,contw +767f 20407ec5 call bn_zero +7680 70061601 jam 1 ,mem_az +7681 20407a5d call eckp_calc_init +7682 7009b201 jam sp_calc_pubkey ,mem_sp_calc +7683 20600000 rtn + +sp_pubkey_generated: +7684 d8a0462a arg mem_sp_pubkey_local ,contw +7685 d8c0062e arg mem_bx ,contr +7686 20407ebc call memcpy48 +7687 7045b101 jam sp_key_valid ,mem_sp_local_key_invalid +7688 7009b200 jam sp_calc_standby ,mem_sp_calc +7689 20600000 rtn + +sp_dhkey_calc: +768a 4774403d bpatchx patch3d_0 ,mem_patch3d +768b 680089b9 fetch 1 ,mem_sp_dhkey_invalid +768c c1800000 rtnne sp_key_invalid +768d 680089b2 fetch 1 ,mem_sp_calc +768e c1800000 rtnne sp_calc_standby +768f d8a006be arg mem_k ,contw +7690 d8c04612 arg mem_sp_private_key ,contr +7691 20407ebe call memcpy24 +7692 d8a005e6 arg mem_ax ,contw +7693 d8c009c6 arg mem_sp_pubkey_remote ,contr +7694 20407ebc call memcpy48 +7695 d8a00616 arg mem_az ,contw +7696 20407ec5 call bn_zero +7697 70061601 jam 1 ,mem_az +7698 20407a5d call eckp_calc_init +7699 7009b202 jam sp_calc_dhkey ,mem_sp_calc +769a 20600000 rtn + +sp_dhkey_generated: +769b 7009b301 jam sp_flag_commit ,mem_sp_dh_ready +769c d8a00a06 arg mem_sp_dhkey ,contw +769d d8c0062e arg mem_bx ,contr +769e 20407ebe call memcpy24 +769f 7009b901 jam sp_key_valid ,mem_sp_dhkey_invalid +76a0 7009b200 jam sp_calc_standby ,mem_sp_calc +76a1 20600000 rtn + +random_generator: +76a2 18e08fff increase -1 ,queue +76a3 24610000 nrtn positive +76a4 180a7e00 random pdata +76a5 e0a10000 istore 2 ,contw +76a6 202076a2 branch random_generator + +compare4: +76a7 18e08fff increase -1 ,queue +76a8 242176b3 nbranch compare4_success ,positive +76a9 ea220000 ifetch 4 ,rega +76aa 1fe20400 copy pdata ,temp +76ab ea420000 ifetch 4 ,regb +76ac 9842fe00 iflip temp ,pdata +76ad 2422f6b1 nbranch compare4_failed ,zero +76ae 1a20a204 increase 4 ,rega +76af 1a40a404 increase 4 ,regb +76b0 202076a7 branch compare4 + +compare4_failed: +76b1 7840fc00 disable true +76b2 20600000 rtn + +compare4_success: +76b3 7820fc00 enable true +76b4 20600000 rtn + +simple_pairing_sequence: +76b5 4774c03d bpatchx patch3d_1 ,mem_patch3d +76b6 680089b0 fetch 1 ,mem_sp_flag +76b7 207a0000 rtn blank +76b8 204062bc call lmo_fifo_check +76b9 247a0000 nrtn blank +76ba 7009b000 jam sp_flag_standby ,mem_sp_flag +76bb 680089ae fetch 1 ,mem_sp_state +76bc c001e1fd beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +76bd c002e21a beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +76be c003e225 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +76bf c005e23a beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +76c0 c0017588 beq sp_stat_key_generate ,sp_generate_local_key +76c1 c00275f7 beq sp_stat_commit_calc ,sp_calculate_commitment +76c2 c004f617 beq sp_stat_confirm_check ,sp_confirm_check +76c3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc +76c4 c0067658 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +76c5 20600000 rtn + +master_simple_paring_sequence: +76c6 4775403d bpatchx patch3d_2 ,mem_patch3d +76c7 680089b1 fetch 1 ,mem_master_sp_flag +76c8 207a0000 rtn blank +76c9 204062bc call lmo_fifo_check +76ca 247a0000 nrtn blank +76cb 7009b100 jam sp_flag_standby ,mem_master_sp_flag +76cc 680089af fetch 1 ,mem_master_sp_state +76cd c00961e0 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +76ce c009e1e5 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +76cf c001e1e9 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +76d0 c0027602 beq sp_stat_commit_calc ,master_sp_calculate_commitment +76d1 c00a61ed beq sp_stat_commitment_compare ,sp_master_commitment_compare +76d2 c003e1fb beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +76d3 c005763a beq sp_stat_confirm_calc ,sp_confirm_calc +76d4 c005e239 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +76d5 c004f617 beq sp_stat_confirm_check ,sp_confirm_check +76d6 c00ae233 beq sp_state_end ,master_sp_sm_end +76d7 20600000 rtn + +master_set_mem_master_sp_flag: +76d8 7009b101 jam sp_flag_commit ,mem_master_sp_flag +76d9 20600000 rtn + +master_clear_mem_master_sp_flag: +76da 7009b100 jam sp_flag_standby ,mem_master_sp_flag +76db 20600000 rtn + +sp_calc_sequence: +76dc 4775c03d bpatchx patch3d_3 ,mem_patch3d +76dd 6800c65a fetch 1 ,mem_ssp_enable +76de 207a0000 rtn blank +76df 680089b2 fetch 1 ,mem_sp_calc +76e0 207a0000 rtn blank +76e1 1fe0fe80 increase 0x80 ,pdata +76e2 600089b2 store 1 ,mem_sp_calc +76e3 c3838000 rtnbit1 7 +76e4 680085e3 fetch 1 ,mem_ec_loopc +76e5 203a76e7 branch sp_calc_sequence_done ,blank +76e6 20207a68 branch eckp_calc + +sp_calc_sequence_done: +76e7 204078d3 call ecunmapz +76e8 680089b2 fetch 1 ,mem_sp_calc +76e9 c000f684 beq sp_calc_pubkey ,sp_pubkey_generated +76ea c001769b beq sp_calc_dhkey ,sp_dhkey_generated +76eb 20600000 rtn + +bn_testbit: +76ec 1fe10e07 and pdata ,7 ,queue +76ed 1fe97e00 rshift3 pdata ,pdata +76ee 98c08c00 iadd contr ,contr +76ef e8c08000 ifetch 1 ,contr +76f0 afec0000 qisolate0 pdata +76f1 20600000 rtn + +ec_copy: +76f2 20407ebe call memcpy24 +76f3 20407ebe call memcpy24 +76f4 20207ebe branch memcpy24 + +bn_eq_zero: +76f5 e8c40000 ifetch 8 ,contr +76f6 247a0000 nrtn blank +76f7 e8c40000 ifetch 8 ,contr +76f8 247a0000 nrtn blank +76f9 e8c40000 ifetch 8 ,contr +76fa 20600000 rtn + +bn_eq_0: +76fb ea220000 ifetch 4 ,rega +76fc 98000400 iforce temp +76fd ea420000 ifetch 4 ,regb +76fe 98467c00 isub temp ,null +76ff 24628000 nrtn zero +7700 1a20a204 increase 4 ,rega +7701 1a40a404 increase 4 ,regb +7702 c20076fb loop bn_eq_0 +7703 20600000 rtn + +bn_bigeq: +7704 18007206 force 6 ,loopcnt +7705 1a20a214 increase 20 ,rega +7706 1a40a414 increase 20 ,regb + +bn_bigeq_0: +7707 ea420000 ifetch 4 ,regb +7708 98000400 iforce temp +7709 ea220000 ifetch 4 ,rega +770a 98467e00 isub temp ,pdata +770b 24610000 nrtn positive +770c 247a0000 nrtn blank +770d 1a20a3fc increase -4 ,rega +770e 1a40a5fc increase -4 ,regb +770f c2007707 loop bn_bigeq_0 +7710 20600000 rtn + +bn_add: +7711 18007206 force 6 ,loopcnt +7712 18002600 force 0 ,regc + +bn_add_0: +7713 ea220000 ifetch 4 ,rega +7714 98000400 iforce temp +7715 ea420000 ifetch 4 ,regb +7716 9840fe00 iadd temp ,pdata +7717 9a60fe00 iadd regc ,pdata +7718 e0a20000 istore 4 ,contw +7719 2feffe20 isolate1 32 ,pdata +771a 7920a600 setflag true ,0 ,regc +771b 1a20a204 increase 4 ,rega +771c 1a40a404 increase 4 ,regb +771d c2007713 loop bn_add_0 +771e 20600000 rtn + +bn_sub: +771f 18007206 force 6 ,loopcnt +7720 18002600 force 0 ,regc + +bn_sub_0: +7721 ea420000 ifetch 4 ,regb +7722 98000400 iforce temp +7723 ea220000 ifetch 4 ,rega +7724 98467e00 isub temp ,pdata +7725 9a667e00 isub regc ,pdata +7726 e0a20000 istore 4 ,contw +7727 2feffe20 isolate1 32 ,pdata +7728 7920a600 setflag true ,0 ,regc +7729 1a20a204 increase 4 ,rega +772a 1a40a404 increase 4 ,regb +772b c2007721 loop bn_sub_0 +772c 20600000 rtn + +bn_rshift6: +772d 18007206 force 6 ,loopcnt +772e 1a20a214 increase 20 ,rega + +bn_rshift: +772f 18002600 force 0 ,regc + +bn_rshift_0: +7730 ea220000 ifetch 4 ,rega +7731 2feffe00 isolate1 0 ,pdata +7732 7920a601 setflag true ,1 ,regc +7733 1fe37e00 rshift pdata ,pdata +7734 2a6ffe00 isolate1 0 ,regc +7735 7920fe1f setflag true ,31 ,pdata +7736 e2220000 istore 4 ,rega +7737 1a20a3fc increase -4 ,rega +7738 1a632600 rshift regc ,regc +7739 c2007730 loop bn_rshift_0 +773a 20600000 rtn + +bn_lshift: +773b 18007206 force 6 ,loopcnt +773c 18002600 force 0 ,regc + +bn_lshift_0: +773d ea220000 ifetch 4 ,rega +773e 2feffe1f isolate1 31 ,pdata +773f 7920a601 setflag true ,1 ,regc +7740 1fe3fe00 lshift pdata ,pdata +7741 2a6ffe00 isolate1 0 ,regc +7742 7920fe00 setflag true ,0 ,pdata +7743 e2220000 istore 4 ,rega +7744 1a20a204 increase 4 ,rega +7745 1a632600 rshift regc ,regc +7746 c200773d loop bn_lshift_0 +7747 20600000 rtn + +bn_lshiftmod: +7748 2040773b call bn_lshift + +bn_lshiftmod_ismod: +7749 2a6ffe00 isolate1 0 ,regc +774a 2020f751 branch bn_lshiftmod_0 ,true +774b da400886 arg mem_p ,regb +774c 1a222600 copy rega ,regc +774d 1a20a3e8 increase -24 ,rega +774e 20407704 call bn_bigeq +774f 24610000 nrtn positive +7750 1a622200 copy regc ,rega + +bn_lshiftmod_0: +7751 1a20a3e8 increase -24 ,rega +7752 da400886 arg mem_p ,regb +7753 1a220a00 copy rega ,contw +7754 2020771f branch bn_sub + +bn_addmod: +7755 20407711 call bn_add +7756 18a22200 copy contw ,rega +7757 20207749 branch bn_lshiftmod_ismod + +bn_submod: +7758 2040771f call bn_sub +7759 2a6c0000 isolate0 0 ,regc +775a 20608000 rtn true +775b da400886 arg mem_p ,regb +775c 18a0a3e8 add contw ,-24 ,rega +775d 1a220a00 copy rega ,contw +775e 20207711 branch bn_add + +bn_p192mod: +775f 18a21600 copy contw ,timeup +7760 1a226000 copy rega ,alarm +7761 da400716 arg mem_tmp2 ,regb +7762 1a420a00 copy regb ,contw +7763 1a208c18 add rega ,24 ,contr +7764 e8c40000 ifetch 8 ,contr +7765 e0a40000 istore 8 ,contw +7766 e0a40000 istore 8 ,contw +7767 18007e00 force 0 ,pdata +7768 e0a40000 istore 8 ,contw +7769 19620a00 copy timeup ,contw +776a 20407755 call bn_addmod +776b da400716 arg mem_tmp2 ,regb +776c 1a420a00 copy regb ,contw +776d 18007e00 force 0 ,pdata +776e e0a40000 istore 8 ,contw +776f 1e008c20 add alarm ,32 ,contr +7770 e8c40000 ifetch 8 ,contr +7771 e0a40000 istore 8 ,contw +7772 e0a40000 istore 8 ,contw +7773 19622200 copy timeup ,rega +7774 1a220a00 copy rega ,contw +7775 20407755 call bn_addmod +7776 da400716 arg mem_tmp2 ,regb +7777 1a420a00 copy regb ,contw +7778 1e008c28 add alarm ,40 ,contr +7779 e8c40000 ifetch 8 ,contr +777a e0a40000 istore 8 ,contw +777b e0a40000 istore 8 ,contw +777c e0a40000 istore 8 ,contw +777d 19622200 copy timeup ,rega +777e 1a220a00 copy rega ,contw +777f 20207755 branch bn_addmod + +bn_load: +7780 18007206 force 6 ,loopcnt + +bn_load_0: +7781 e8c20000 ifetch 4 ,contr +7782 98005e00 iforce regext +7783 1f00f001 increase 1 ,regext_index +7784 c2007781 loop bn_load_0 +7785 20600000 rtn + +bn_mulmod: +7786 18a21600 copy contw ,timeup +7787 d8a006e6 arg mem_tmp1 ,contw +7788 20407ec5 call bn_zero +7789 d8a006e6 arg mem_tmp1 ,contw +778a 1a220c00 copy rega ,contr +778b 18007000 force 0 ,regext_index +778c 20407780 call bn_load +778d 1a420c00 copy regb ,contr +778e 20407780 call bn_load +778f 18002400 force 0 ,regb + +bn_mulmod_1: +7790 18000400 force 0 ,temp +7791 18002606 force 6 ,regc + +bn_mulmod_0: +7792 e8a20000 ifetch 4 ,contw +7793 98002200 iforce rega +7794 1a427000 copy regb ,regext_index +7795 1de27e00 deposit regext +7796 1a627000 copy regc ,regext_index +7797 9deffe00 imul32 regext ,pdata +7798 9a20fe00 iadd rega ,pdata +7799 9840fe00 iadd temp ,pdata +779a e0a20000 istore 4 ,contw +779b 1fef0400 rshift32 pdata ,temp +779c 1a60a601 increase 1 ,regc +779d 2a61fe0c compare 12 ,regc ,0xff +779e 2420f792 nbranch bn_mulmod_0 ,true +779f 18427e00 deposit temp +77a0 e0a20000 istore 4 ,contw +77a1 18a08be8 increase -24 ,contw +77a2 1a40a401 increase 1 ,regb +77a3 2a41fe06 compare 6 ,regb ,0xff +77a4 2420f790 nbranch bn_mulmod_1 ,true +77a5 da2006e6 arg mem_tmp1 ,rega +77a6 19620a00 copy timeup ,contw +77a7 2020775f branch bn_p192mod + +bn_sqrmod: +77a8 1a222400 copy rega ,regb +77a9 20207786 branch bn_mulmod + +bn_rshifteven: +77aa 1a226000 copy rega ,alarm + +bn_rshifteven_1: +77ab 1e022200 copy alarm ,rega +77ac ea208000 ifetch 1 ,rega +77ad 2feffe00 isolate1 0 ,pdata +77ae 20608000 rtn true +77af 2040772d call bn_rshift6 +77b0 ea408000 ifetch 1 ,regb +77b1 2fec0000 isolate0 0 ,pdata +77b2 2020f7ba branch bn_rshifteven_0 ,true +77b3 da200886 arg mem_p ,rega +77b4 1a420a00 copy regb ,contw +77b5 20407711 call bn_add +77b6 ea408000 ifetch 1 ,regb +77b7 9a60fe00 iadd regc ,pdata +77b8 e2408000 istore 1 ,regb +77b9 1a40a5e8 increase -24 ,regb + +bn_rshifteven_0: +77ba 1a40a218 add regb ,24 ,rega +77bb 18007207 force 7 ,loopcnt +77bc 2040772f call bn_rshift +77bd 202077ab branch bn_rshifteven_1 + +bn_invmod: +77be 18a21600 copy contw ,timeup +77bf d8a00746 arg mem_tmp0 ,contw +77c0 20407ec5 call bn_zero +77c1 18007e00 force 0 ,pdata +77c2 600206fe store 4 ,mem_tmp5 +77c3 6002075e store 4 ,mem_t2 +77c4 70074601 jam 1 ,mem_tmp0 +77c5 d8a006e6 arg mem_tmp1 ,contw +77c6 20407ec5 call bn_zero +77c7 d8c00886 arg mem_p ,contr +77c8 d8a00716 arg mem_tmp2 ,contw +77c9 20407ebe call memcpy24 +77ca 1a220c00 copy rega ,contr +77cb d8a0072e arg mem_tmp3 ,contw +77cc 20407ebe call memcpy24 + +bn_invmod_2: +77cd d8c0072e arg mem_tmp3 ,contr +77ce 204076f5 call bn_eq_zero +77cf 203a77f6 branch bn_invmod_0 ,blank +77d0 da20072e arg mem_tmp3 ,rega +77d1 da400746 arg mem_tmp0 ,regb +77d2 204077aa call bn_rshifteven +77d3 da200716 arg mem_tmp2 ,rega +77d4 da4006e6 arg mem_tmp1 ,regb +77d5 204077aa call bn_rshifteven +77d6 da20072e arg mem_tmp3 ,rega +77d7 da400716 arg mem_tmp2 ,regb +77d8 20407704 call bn_bigeq +77d9 202177e8 branch bn_invmod_1 ,positive +77da da200716 arg mem_tmp2 ,rega +77db da40072e arg mem_tmp3 ,regb +77dc 1a220a00 copy rega ,contw +77dd 2040771f call bn_sub +77de da200746 arg mem_tmp0 ,rega +77df da4006e6 arg mem_tmp1 ,regb +77e0 1a420a00 copy regb ,contw +77e1 20407711 call bn_add +77e2 ea208000 ifetch 1 ,rega +77e3 9a60a600 iadd regc ,regc +77e4 ea408000 ifetch 1 ,regb +77e5 9a60fe00 iadd regc ,pdata +77e6 e2408000 istore 1 ,regb +77e7 202077cd branch bn_invmod_2 + +bn_invmod_1: +77e8 da20072e arg mem_tmp3 ,rega +77e9 da400716 arg mem_tmp2 ,regb +77ea 1a220a00 copy rega ,contw +77eb 2040771f call bn_sub +77ec da2006e6 arg mem_tmp1 ,rega +77ed da400746 arg mem_tmp0 ,regb +77ee 1a420a00 copy regb ,contw +77ef 20407711 call bn_add +77f0 ea208000 ifetch 1 ,rega +77f1 9a60a600 iadd regc ,regc +77f2 ea408000 ifetch 1 ,regb +77f3 9a60fe00 iadd regc ,pdata +77f4 e2408000 istore 1 ,regb +77f5 202077cd branch bn_invmod_2 + +bn_invmod_0: +77f6 d8a00746 arg mem_tmp0 ,contw +77f7 20407ec5 call bn_zero +77f8 680086fe fetch 1 ,mem_tmp5 +77f9 60008746 store 1 ,mem_tmp0 +77fa 6000874e store 1 ,mem_tmp0a +77fb da200746 arg mem_tmp0 ,rega +77fc da4006e6 arg mem_tmp1 ,regb +77fd 1a420a00 copy regb ,contw +77fe 20407755 call bn_addmod +77ff da200886 arg mem_p ,rega +7800 da4006e6 arg mem_tmp1 ,regb +7801 19620a00 copy timeup ,contw +7802 20207758 branch bn_submod + +ecdbl: +7803 da2006a6 arg mem_cz ,rega +7804 d8a0075e arg mem_t2 ,contw +7805 204077a8 call bn_sqrmod +7806 da20075e arg mem_t2 ,rega +7807 d8a00776 arg mem_t3 ,contw +7808 204077a8 call bn_sqrmod +7809 da20089e arg mem_a ,rega +780a da400776 arg mem_t3 ,regb +780b d8a00776 arg mem_t3 ,contw +780c 20407786 call bn_mulmod +780d da200676 arg mem_cx ,rega +780e d8a0075e arg mem_t2 ,contw +780f 204077a8 call bn_sqrmod +7810 d8c0075e arg mem_t2 ,contr +7811 d8a0072e arg mem_t1 ,contw +7812 20407ebe call memcpy24 +7813 da20072e arg mem_t1 ,rega +7814 20407748 call bn_lshiftmod +7815 da20075e arg mem_t2 ,rega +7816 da40072e arg mem_t1 ,regb +7817 d8a0075e arg mem_t2 ,contw +7818 20407755 call bn_addmod +7819 da20075e arg mem_t2 ,rega +781a da400776 arg mem_t3 ,regb +781b d8a0075e arg mem_t2 ,contw +781c 20407755 call bn_addmod +781d d8c00676 arg mem_cx ,contr +781e d8a0072e arg mem_t1 ,contw +781f 20407ebe call memcpy24 +7820 da20068e arg mem_cy ,rega +7821 d8a00776 arg mem_t3 ,contw +7822 204077a8 call bn_sqrmod +7823 da20072e arg mem_t1 ,rega +7824 20407748 call bn_lshiftmod +7825 da20072e arg mem_t1 ,rega +7826 20407748 call bn_lshiftmod +7827 da20072e arg mem_t1 ,rega +7828 da400776 arg mem_t3 ,regb +7829 d8a0072e arg mem_t1 ,contw +782a 20407786 call bn_mulmod +782b da200776 arg mem_t3 ,rega +782c d8a00746 arg mem_t0 ,contw +782d 204077a8 call bn_sqrmod +782e da200746 arg mem_t0 ,rega +782f 20407748 call bn_lshiftmod +7830 da200746 arg mem_t0 ,rega +7831 20407748 call bn_lshiftmod +7832 da200746 arg mem_t0 ,rega +7833 20407748 call bn_lshiftmod +7834 d8c0068e arg mem_cy ,contr +7835 d8a00776 arg mem_t3 ,contw +7836 20407ebe call memcpy24 +7837 da200776 arg mem_t3 ,rega +7838 20407748 call bn_lshiftmod +7839 da200776 arg mem_t3 ,rega +783a da4006a6 arg mem_cz ,regb +783b d8a006a6 arg mem_cz ,contw +783c 20407786 call bn_mulmod +783d da20075e arg mem_t2 ,rega +783e d8a00776 arg mem_t3 ,contw +783f 204077a8 call bn_sqrmod +7840 da200776 arg mem_t3 ,rega +7841 da40072e arg mem_t1 ,regb +7842 d8a00776 arg mem_t3 ,contw +7843 20407758 call bn_submod +7844 da200776 arg mem_t3 ,rega +7845 da40072e arg mem_t1 ,regb +7846 d8a00676 arg mem_cx ,contw +7847 20407758 call bn_submod +7848 da20072e arg mem_t1 ,rega +7849 da400676 arg mem_cx ,regb +784a d8a00776 arg mem_t3 ,contw +784b 20407758 call bn_submod +784c da200776 arg mem_t3 ,rega +784d da40075e arg mem_t2 ,regb +784e d8a00776 arg mem_t3 ,contw +784f 20407786 call bn_mulmod +7850 da200776 arg mem_t3 ,rega +7851 da400746 arg mem_t0 ,regb +7852 d8a0068e arg mem_cy ,contw +7853 20207758 branch bn_submod + +ecadd: +7854 da200616 arg mem_az ,rega +7855 d8a0078e arg mem_t7 ,contw +7856 204077a8 call bn_sqrmod +7857 da200676 arg mem_cx ,rega +7858 da40078e arg mem_t7 ,regb +7859 d8a00746 arg mem_t0 ,contw +785a 20407786 call bn_mulmod +785b da200616 arg mem_az ,rega +785c da40078e arg mem_t7 ,regb +785d d8a0078e arg mem_t7 ,contw +785e 20407786 call bn_mulmod +785f da20068e arg mem_cy ,rega +7860 da40078e arg mem_t7 ,regb +7861 d8a0072e arg mem_t1 ,contw +7862 20407786 call bn_mulmod +7863 da2006a6 arg mem_cz ,rega +7864 d8a0078e arg mem_t7 ,contw +7865 204077a8 call bn_sqrmod +7866 da2005e6 arg mem_ax ,rega +7867 da40078e arg mem_t7 ,regb +7868 d8a0075e arg mem_t2 ,contw +7869 20407786 call bn_mulmod +786a da2006a6 arg mem_cz ,rega +786b da40078e arg mem_t7 ,regb +786c d8a0078e arg mem_t7 ,contw +786d 20407786 call bn_mulmod +786e da2005fe arg mem_ay ,rega +786f da40078e arg mem_t7 ,regb +7870 d8a00776 arg mem_t3 ,contw +7871 20407786 call bn_mulmod +7872 da200746 arg mem_t0 ,rega +7873 da40075e arg mem_t2 ,regb +7874 d8a0078e arg mem_t7 ,contw +7875 20407758 call bn_submod +7876 da200746 arg mem_t0 ,rega +7877 da40075e arg mem_t2 ,regb +7878 d8a00746 arg mem_t0 ,contw +7879 20407755 call bn_addmod +787a da20072e arg mem_t1 ,rega +787b da400776 arg mem_t3 ,regb +787c d8a0075e arg mem_t2 ,contw +787d 20407758 call bn_submod +787e da20072e arg mem_t1 ,rega +787f da400776 arg mem_t3 ,regb +7880 d8a0072e arg mem_t1 ,contw +7881 20407755 call bn_addmod +7882 da20072e arg mem_t1 ,rega +7883 da40078e arg mem_t7 ,regb +7884 d8a0072e arg mem_t1 ,contw +7885 20407786 call bn_mulmod +7886 da2006a6 arg mem_cz ,rega +7887 da400616 arg mem_az ,regb +7888 d8a00776 arg mem_t3 ,contw +7889 20407786 call bn_mulmod +788a da200776 arg mem_t3 ,rega +788b da40078e arg mem_t7 ,regb +788c d8a006a6 arg mem_cz ,contw +788d 20407786 call bn_mulmod +788e da20078e arg mem_t7 ,rega +788f d8a0078e arg mem_t7 ,contw +7890 204077a8 call bn_sqrmod +7891 da20078e arg mem_t7 ,rega +7892 da400746 arg mem_t0 ,regb +7893 d8a00776 arg mem_t3 ,contw +7894 20407786 call bn_mulmod +7895 da20078e arg mem_t7 ,rega +7896 da40072e arg mem_t1 ,regb +7897 d8a0072e arg mem_t1 ,contw +7898 20407786 call bn_mulmod +7899 da20075e arg mem_t2 ,rega +789a d8a00676 arg mem_cx ,contw +789b 204077a8 call bn_sqrmod +789c da200676 arg mem_cx ,rega +789d da400776 arg mem_t3 ,regb +789e d8a00676 arg mem_cx ,contw +789f 20407758 call bn_submod +78a0 d8c00676 arg mem_cx ,contr +78a1 d8a0078e arg mem_t7 ,contw +78a2 20407ebe call memcpy24 +78a3 da20078e arg mem_t7 ,rega +78a4 20407748 call bn_lshiftmod +78a5 da200776 arg mem_t3 ,rega +78a6 da40078e arg mem_t7 ,regb +78a7 d8a00776 arg mem_t3 ,contw +78a8 20407758 call bn_submod +78a9 da200776 arg mem_t3 ,rega +78aa da40075e arg mem_t2 ,regb +78ab d8a0075e arg mem_t2 ,contw +78ac 20407786 call bn_mulmod +78ad da20075e arg mem_t2 ,rega +78ae da40072e arg mem_t1 ,regb +78af d8a0068e arg mem_cy ,contw +78b0 20407758 call bn_submod +78b1 da20068e arg mem_cy ,rega +78b2 da400886 arg mem_p ,regb +78b3 d8a0068e arg mem_cy ,contw +78b4 18002600 force 0 ,regc +78b5 6800868e fetch 1 ,mem_cy +78b6 2feffe00 isolate1 0 ,pdata +78b7 2040f711 call bn_add ,true +78b8 1a626000 copy regc ,alarm +78b9 da20068e arg mem_cy ,rega +78ba 2040772d call bn_rshift6 +78bb 680086a5 fetch 1 ,mem_cy5 +78bc 2e0ffe00 isolate1 0 ,alarm +78bd 7920fe07 setflag true ,7 ,pdata +78be 600086a5 store 1 ,mem_cy5 +78bf 20600000 rtn + +eckp_0: +78c0 680085e3 fetch 1 ,mem_ec_loopc +78c1 1fe0ffff increase -1 ,pdata +78c2 24610000 nrtn positive +78c3 600085e3 store 1 ,mem_ec_loopc +78c4 680085e2 fetch 1 ,mem_ec_infinite +78c5 205a7803 call ecdbl ,blank +78c6 680085e3 fetch 1 ,mem_ec_loopc +78c7 d8c006be arg mem_k ,contr +78c8 204076ec call bn_testbit +78c9 2020f8c0 branch eckp_0 ,true +78ca 680085e2 fetch 1 ,mem_ec_infinite +78cb 243a78ce nbranch eckp_1 ,blank +78cc 20407854 call ecadd +78cd 202078c0 branch eckp_0 + +eckp_1: +78ce 7005e200 jam 0 ,mem_ec_infinite +78cf d8c005e6 arg mem_ax ,contr +78d0 d8a00676 arg mem_cx ,contw +78d1 204076f2 call ec_copy +78d2 202078c0 branch eckp_0 + +ecunmapz: +78d3 da2006a6 arg mem_cz ,rega +78d4 d8a00776 arg mem_t3 ,contw +78d5 204077be call bn_invmod +78d6 da200776 arg mem_t3 ,rega +78d7 d8a0072e arg mem_t1 ,contw +78d8 204077a8 call bn_sqrmod +78d9 da200676 arg mem_cx ,rega +78da da40072e arg mem_t1 ,regb +78db d8a0062e arg mem_bx ,contw +78dc 20407786 call bn_mulmod +78dd da200776 arg mem_t3 ,rega +78de da40072e arg mem_t1 ,regb +78df d8a0075e arg mem_t2 ,contw +78e0 20407786 call bn_mulmod +78e1 da20068e arg mem_cy ,rega +78e2 da40075e arg mem_t2 ,regb +78e3 d8a00646 arg mem_by ,contw +78e4 20207786 branch bn_mulmod + +sha_endian_swap2: +78e5 e8c20000 ifetch 4 ,contr +78e6 18002204 force 4 ,rega +78e7 18a08a03 increase 3 ,contw + +sha_endian_loop: +78e8 e0a08000 istore 1 ,contw +78e9 1fecfe00 rshift8 pdata ,pdata +78ea 18a08bfe increase -2 ,contw +78eb 1a20a3ff increase -1 ,rega +78ec 2422f8e8 nbranch sha_endian_loop ,zero +78ed 18a08a05 increase 5 ,contw +78ee c20078e5 loop sha_endian_swap2 +78ef 20600000 rtn + +sha_getw: +78f0 18ebfe00 lshift2 queue ,pdata +78f1 99608c00 iadd timeup ,contr +78f2 e8c20000 ifetch 4 ,contr +78f3 20600000 rtn + +sha_r: +78f4 18006010 force 16 ,alarm +78f5 d96005e6 arg memdat ,timeup + +sha_r_loop: +78f6 1e008ff9 add alarm ,-7 ,queue +78f7 204078f0 call sha_getw +78f8 98000400 iforce temp +78f9 1e008ff0 add alarm ,-16 ,queue +78fa 204078f0 call sha_getw +78fb 98408400 iadd temp ,temp +78fc 1e008ffe add alarm ,-2 ,queue +78fd 204078f0 call sha_getw +78fe 1fee7e01 shasx pdata ,1 ,pdata +78ff 98408400 iadd temp ,temp +7900 1e008ff1 add alarm ,-15 ,queue +7901 204078f0 call sha_getw +7902 1fee7e00 shasx pdata ,0 ,pdata +7903 98408400 iadd temp ,temp +7904 1e0bfe00 lshift2 alarm ,pdata +7905 99608a00 iadd timeup ,contw +7906 e0aa0000 istoret 4 ,contw +7907 1e00e001 increase 1 ,alarm +7908 2e01fe40 compare 64 ,alarm ,0xff +7909 2420f8f6 nbranch sha_r_loop ,true +790a 20600000 rtn + +sha_init: +790b d8c008fe arg memh0 ,contr +790c 18007007 force 7 ,regext_index + +sha_init_0: +790d e8c20000 ifetch 4 ,contr +790e 98005e00 iforce regext +790f 1f00f1ff increase -1 ,regext_index +7910 2021790d branch sha_init_0 ,positive +7911 20600000 rtn + +sha: +7912 4776403d bpatchx patch3d_4 ,mem_patch3d +7913 204078f4 call sha_r +7914 d8a006e6 arg memahbak ,contw +7915 18007000 force 0 ,regext_index + +sha_0: +7916 1de27e00 deposit regext +7917 e0a20000 istore 4 ,contw +7918 1f00f001 increase 1 ,regext_index +7919 2f01fe08 compare 8 ,regext_index ,0xff +791a 2420f916 nbranch sha_0 ,true +791b 204074b9 call enable_authrom +791c d9608700 arg memk ,timeup +791d de0005e6 arg memdat ,alarm +791e 18007240 force 64 ,loopcnt + +sha_loop: +791f ee0a0000 ifetcht 4 ,alarm +7920 e9620000 ifetch 4 ,timeup +7921 19609604 increase 4 ,timeup +7922 1e00e004 increase 4 ,alarm +7923 9840fe00 iadd temp ,pdata +7924 18007007 force 7 ,regext_index +7925 9de08400 iadd regext ,temp +7926 18007004 force 4 ,regext_index +7927 1dee7e03 shasx regext ,3 ,pdata +7928 98408400 iadd temp ,temp +7929 18007005 force 5 ,regext_index +792a 1de27e00 deposit regext +792b 18007006 force 6 ,regext_index +792c 9de2fe00 ixor regext ,pdata +792d 18007004 force 4 ,regext_index +792e 9de17e00 iand regext ,pdata +792f 18007006 force 6 ,regext_index +7930 9de2fe00 ixor regext ,pdata +7931 98408400 iadd temp ,temp +7932 18007007 force 7 ,regext_index +7933 18425e00 copy temp ,regext +7934 18007003 force 3 ,regext_index +7935 1de27e00 deposit regext +7936 9840de00 iadd temp ,regext +7937 18007000 force 0 ,regext_index +7938 1de27e00 deposit regext +7939 18007001 force 1 ,regext_index +793a 9de10400 iand regext ,temp +793b 9de1fe00 ior regext ,pdata +793c 18007002 force 2 ,regext_index +793d 9de17e00 iand regext ,pdata +793e 98418400 ior temp ,temp +793f 18007000 force 0 ,regext_index +7940 1dee7e02 shasx regext ,2 ,pdata +7941 9840fe00 iadd temp ,pdata +7942 18007007 force 7 ,regext_index +7943 9de0de00 iadd regext ,regext +7944 980efc00 regexrot +7945 c200791f loop sha_loop +7946 d8c006e6 arg memahbak ,contr +7947 18007000 force 0 ,regext_index + +sha_1: +7948 e8c20000 ifetch 4 ,contr +7949 9de0de00 iadd regext ,regext +794a 1f00f001 increase 1 ,regext_index +794b 2f01fe08 compare 8 ,regext_index ,0xff +794c 2420f948 nbranch sha_1 ,true +794d 202074bd branch disable_authrom + +sha_result: +794e d8a00a3e arg memresult ,contw +794f 18007007 force 7 ,regext_index + +sha_regext_save: +7950 1de27e00 deposit regext +7951 e0a20000 istore 4 ,contw +7952 1f00f1ff increase -1 ,regext_index +7953 20217950 branch sha_regext_save ,positive +7954 20600000 rtn + +pad_xor: +7955 d8a005e6 arg memdat ,contw +7956 18c08dfc increase -4 ,contr +7957 1f262210 sub loopcnt ,16 ,rega + +pad_xor_0: +7958 e8c20000 ifetch 4 ,contr +7959 9842fe00 ixor temp ,pdata +795a e0a20000 istore 4 ,contw +795b 18c08df8 increase -8 ,contr +795c c2007958 loop pad_xor_0 +795d 1a227200 copy rega ,loopcnt +795e 18427e00 deposit temp + +pad_xor_1: +795f e0a20000 istore 4 ,contw +7960 c200795f loop pad_xor_1 +7961 20600000 rtn + +g_noninit_number_confirm: +7962 20407967 call g_noninit0 +7963 2040794e call sha_result +7964 2020798d branch g_common0 + +g_noninit: +7965 20407967 call g_noninit0 +7966 2020798d branch g_common0 + +g_noninit0: +7967 d8c009de arg mem_sp_pubkey_remote_x_end ,contr +7968 d8a005e6 arg memdat ,contw +7969 18007206 force 6 ,loopcnt +796a 20407a71 call memcpy_dword_swap +796b d8c04642 arg mem_sp_pubkey_local_x_end ,contr +796c 18007206 force 6 ,loopcnt +796d 20407a71 call memcpy_dword_swap +796e d8c00a3e arg mem_sp_random_remote_end ,contr +796f 20407a70 call memcpy_dword_swap4 +7970 2040790b call sha_init +7971 20407912 call sha +7972 d8c00a2e arg mem_sp_random_local_end ,contr +7973 d8a005e6 arg memdat ,contw +7974 20207984 branch g_common + +g_init: +7975 d8c04642 arg mem_sp_pubkey_local_x_end ,contr +7976 d8a005e6 arg memdat ,contw +7977 18007206 force 6 ,loopcnt +7978 20407a71 call memcpy_dword_swap +7979 d8c009de arg mem_sp_pubkey_remote_x_end ,contr +797a 18007206 force 6 ,loopcnt +797b 20407a71 call memcpy_dword_swap +797c d8c00a2e arg mem_sp_random_local_end ,contr +797d 20407a70 call memcpy_dword_swap4 +797e 2040790b call sha_init +797f 20407912 call sha +7980 d8c00a3e arg mem_sp_random_remote_end ,contr +7981 d8a005e6 arg memdat ,contw +7982 20407984 call g_common +7983 2020798d branch g_common0 + +g_common: +7984 20407a70 call memcpy_dword_swap4 +7985 58800000 setarg 0x800000 +7986 1fed7e00 lshift8 pdata ,pdata +7987 e0a20000 istore 4 ,contw +7988 18007205 force 5 ,loopcnt +7989 20407ec6 call memset0 +798a 58000280 setarg 640 +798b e0a20000 istore 4 ,contw +798c 20207912 branch sha + +g_common0: +798d 68020a3e fetch 4 ,memresult +798e da2003e8 arg 1000 ,rega +798f 9a26fc00 idiv rega +7990 20407f86 call wait_div_end +7991 18077e00 remainder pdata +7992 600209ba store 4 ,mem_gkey +7993 1807fe00 quotient pdata +7994 da2003e8 arg 1000 ,rega +7995 9a26fc00 idiv rega +7996 20407f86 call wait_div_end +7997 18077e00 remainder pdata +7998 da2003e8 arg 1000 ,rega +7999 9a2ffe00 imul32 rega ,pdata +799a 680a09ba fetcht 4 ,mem_gkey +799b 9840fe00 iadd temp ,pdata +799c 600209ba store 4 ,mem_gkey +799d 20600000 rtn + +function_f1_no_key: +799e 70466400 jam 0 ,mem_passkey_1bit +799f 202079a2 branch function_f1_common + +function_f1: +79a0 6800c662 fetch 1 ,mem_ssp_mode_flag +79a1 c081799e bne ssp_mode_passkey_entry_flag ,function_f1_no_key + +function_f1_common: +79a2 4776c03d bpatchx patch3d_5 ,mem_patch3d +79a3 58363636 setarg 0x363636 +79a4 1fed0400 lshift8 pdata ,temp +79a5 18418436 or_into 0x36 ,temp +79a6 68010a7e fetch 2 ,mem_sp_prarm_stack +79a7 1fe20c00 copy pdata ,contr +79a8 18007204 force 4 ,loopcnt +79a9 20407955 call pad_xor +79aa 2040790b call sha_init +79ab 20407912 call sha +79ac 68010a80 fetch 2 ,mem_sp_prarm_stack + 2 +79ad 1fe20c00 copy pdata ,contr +79ae d8a005e6 arg memdat ,contw +79af 18007206 force 6 ,loopcnt +79b0 20407a71 call memcpy_dword_swap +79b1 68010a82 fetch 2 ,mem_sp_prarm_stack + 4 +79b2 1fe20c00 copy pdata ,contr +79b3 18007206 force 6 ,loopcnt +79b4 20407a71 call memcpy_dword_swap +79b5 58800000 setarg 0x800000 +79b6 e0a18000 istore 3 ,contw +79b7 6800c664 fetch 1 ,mem_passkey_1bit +79b8 e0a08000 istore 1 ,contw +79b9 18007e00 force 0 ,pdata +79ba e0a40000 istore 8 ,contw +79bb 58000388 setarg 0x0388 +79bc e0a20000 istore 4 ,contw +79bd 20407912 call sha +79be 2040794e call sha_result +79bf d8c00a3e arg memresult ,contr +79c0 d8a00706 arg memahsave ,contw +79c1 20407ebd call memcpy32 +79c2 585c5c5c setarg 0x5c5c5c +79c3 1fed0400 lshift8 pdata ,temp +79c4 1841845c or_into 0x5c ,temp +79c5 68010a7e fetch 2 ,mem_sp_prarm_stack +79c6 1fe20c00 copy pdata ,contr +79c7 18007204 force 4 ,loopcnt +79c8 20407955 call pad_xor +79c9 2040790b call sha_init +79ca 20407912 call sha +79cb d8c00726 arg memahsave_end ,contr +79cc d8a005e6 arg memdat ,contw +79cd 18007208 force 8 ,loopcnt +79ce 20407a71 call memcpy_dword_swap +79cf 58800000 setarg 0x800000 +79d0 1fed7e00 lshift8 pdata ,pdata +79d1 e0a20000 istore 4 ,contw +79d2 20407ec5 call bn_zero +79d3 58000300 setarg 0x0300 +79d4 e0a20000 istore 4 ,contw +79d5 20407912 call sha +79d6 2020794e branch sha_result + +function_f2: +79d7 58363636 setarg 0x363636 +79d8 1fed0400 lshift8 pdata ,temp +79d9 18418436 or_into 0x36 ,temp +79da d8c00a1e arg mem_sp_dhkey_end ,contr +79db 18007206 force 6 ,loopcnt +79dc 20407955 call pad_xor +79dd 2040790b call sha_init +79de 20407912 call sha +79df 68010a8a fetch 2 ,mem_sp_prarm_stack + 12 +79e0 1fe20c00 copy pdata ,contr +79e1 d8a005e6 arg memdat ,contw +79e2 20407a70 call memcpy_dword_swap4 +79e3 68010a8c fetch 2 ,mem_sp_prarm_stack + 14 +79e4 1fe20c00 copy pdata ,contr +79e5 20407a70 call memcpy_dword_swap4 +79e6 5862746c setarg 0x62746c +79e7 1fed7e00 lshift8 pdata ,pdata +79e8 1fe1fe6b or_into 0x6b ,pdata +79e9 e0a20000 istore 4 ,contw +79ea d8c00733 arg mem_addr_value_end ,contr +79eb 18007203 force 3 ,loopcnt +79ec 20407a71 call memcpy_dword_swap +79ed 58800000 setarg 0x800000 +79ee 1fed7e00 lshift8 pdata ,pdata +79ef e0a20000 istore 4 ,contw +79f0 18007e00 force 0 ,pdata +79f1 e0a40000 istore 8 ,contw +79f2 58000380 setarg 0x0380 +79f3 e0a20000 istore 4 ,contw +79f4 20407912 call sha +79f5 2040794e call sha_result +79f6 d8c00a3e arg memresult ,contr +79f7 d8a00706 arg memahsave ,contw +79f8 20407ebd call memcpy32 +79f9 585c5c5c setarg 0x5c5c5c +79fa 1fed0400 lshift8 pdata ,temp +79fb 1841845c or_into 0x5c ,temp +79fc d8c00a1e arg mem_sp_dhkey_end ,contr +79fd 18007206 force 6 ,loopcnt +79fe 20407955 call pad_xor +79ff 2040790b call sha_init +7a00 20407912 call sha +7a01 d8c00726 arg memahsave_end ,contr +7a02 d8a005e6 arg memdat ,contw +7a03 18007208 force 8 ,loopcnt +7a04 20407a71 call memcpy_dword_swap +7a05 58800000 setarg 0x800000 +7a06 1fed7e00 lshift8 pdata ,pdata +7a07 e0a20000 istore 4 ,contw +7a08 20407ec5 call bn_zero +7a09 58000300 setarg 0x0300 +7a0a e0a20000 istore 4 ,contw +7a0b 20407912 call sha +7a0c 2020794e branch sha_result + +function_f3a: +7a0d 6800c662 fetch 1 ,mem_ssp_mode_flag +7a0e c0817a1e bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin + +function_f3a_common: +7a0f 4777403d bpatchx patch3d_6 ,mem_patch3d +7a10 58363636 setarg 0x363636 +7a11 1fed0400 lshift8 pdata ,temp +7a12 18418436 or_into 0x36 ,temp +7a13 d8c00a1e arg mem_sp_dhkey_end ,contr +7a14 18007206 force 6 ,loopcnt +7a15 20407955 call pad_xor +7a16 2040790b call sha_init +7a17 20407912 call sha +7a18 d8c00a3e arg mem_sp_random_remote_end ,contr +7a19 d8a005e6 arg memdat ,contw +7a1a 20407a70 call memcpy_dword_swap4 +7a1b d8c00a2e arg mem_sp_random_local_end ,contr +7a1c 20407a70 call memcpy_dword_swap4 +7a1d 20207a33 branch function_f3_common + +function_f3a_no_pin: +7a1e 58000000 setarg 0 +7a1f 6002468a store 4 ,mem_pin +7a20 20207a0f branch function_f3a_common + +function_f3b_no_pin: +7a21 58000000 setarg 0 +7a22 6002468a store 4 ,mem_pin +7a23 20207a26 branch function_f3b_common + +function_f3b: +7a24 6800c662 fetch 1 ,mem_ssp_mode_flag +7a25 c0817a21 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin + +function_f3b_common: +7a26 58363636 setarg 0x363636 +7a27 1fed0400 lshift8 pdata ,temp +7a28 18418436 or_into 0x36 ,temp +7a29 d8c00a1e arg mem_sp_dhkey_end ,contr +7a2a 18007206 force 6 ,loopcnt +7a2b 20407955 call pad_xor +7a2c 2040790b call sha_init +7a2d 20407912 call sha +7a2e d8c00a2e arg mem_sp_random_local_end ,contr +7a2f d8a005e6 arg memdat ,contw +7a30 20407a70 call memcpy_dword_swap4 +7a31 d8c00a3e arg mem_sp_random_remote_end ,contr +7a32 20407a70 call memcpy_dword_swap4 + +function_f3_common: +7a33 58000000 setarg 0x0 +7a34 e0a40000 istore 8 ,contw +7a35 e0a20000 istore 4 ,contw +7a36 6802468a fetch 4 ,mem_pin +7a37 e0a20000 istore 4 ,contw +7a38 18a20400 copy contw ,temp +7a39 70072680 jam 0x80 ,mem_addr_padding +7a3a 18420a00 copy temp ,contw +7a3b d8c00736 arg mem_addr_iocap_end ,contr +7a3c 20407a70 call memcpy_dword_swap4 +7a3d 20407912 call sha +7a3e d8a005e6 arg memdat ,contw +7a3f 18007207 force 7 ,loopcnt +7a40 20407ec6 call memset0 +7a41 e0a20000 istore 4 ,contw +7a42 580003f8 setarg 0x03F8 +7a43 e0a20000 istore 4 ,contw +7a44 20407912 call sha +7a45 2040794e call sha_result +7a46 d8c00a3e arg memresult ,contr +7a47 d8a00706 arg memahsave ,contw +7a48 20407ebd call memcpy32 +7a49 585c5c5c setarg 0x5c5c5c +7a4a 1fed0400 lshift8 pdata ,temp +7a4b 1841845c or_into 0x5c ,temp +7a4c d8c00a1e arg mem_sp_dhkey_end ,contr +7a4d 18007206 force 6 ,loopcnt +7a4e 20407955 call pad_xor +7a4f 2040790b call sha_init +7a50 20407912 call sha +7a51 d8c00726 arg memahsave_end ,contr +7a52 d8a005e6 arg memdat ,contw +7a53 18007208 force 8 ,loopcnt +7a54 20407a71 call memcpy_dword_swap +7a55 58800000 setarg 0x800000 +7a56 1fed7e00 lshift8 pdata ,pdata +7a57 e0a20000 istore 4 ,contw +7a58 20407ec5 call bn_zero +7a59 58000300 setarg 0x0300 +7a5a e0a20000 istore 4 ,contw +7a5b 20407912 call sha +7a5c 2020794e branch sha_result + +eckp_calc_init: +7a5d 7005e3c0 jam 192 ,mem_ec_loopc + +eckp_calc_init_1: +7a5e 680085e3 fetch 1 ,mem_ec_loopc +7a5f 207a0000 rtn blank +7a60 1fe0ffff increase -1 ,pdata +7a61 600085e3 store 1 ,mem_ec_loopc +7a62 d8c006be arg mem_k ,contr +7a63 204076ec call bn_testbit +7a64 2020fa5e branch eckp_calc_init_1 ,true +7a65 d8c005e6 arg mem_ax ,contr +7a66 d8a00676 arg mem_cx ,contw +7a67 202076f2 branch ec_copy + +eckp_calc: +7a68 20407803 call ecdbl +7a69 680085e3 fetch 1 ,mem_ec_loopc +7a6a 1fe0ffff increase -1 ,pdata +7a6b 600085e3 store 1 ,mem_ec_loopc +7a6c d8c006be arg mem_k ,contr +7a6d 204076ec call bn_testbit +7a6e 20608000 rtn true +7a6f 20207854 branch ecadd + +memcpy_dword_swap4: +7a70 18007204 force 4 ,loopcnt + +memcpy_dword_swap: +7a71 18c08dfc increase -4 ,contr + +memcpy_dword_swap_loop: +7a72 e8c20000 ifetch 4 ,contr +7a73 e0a20000 istore 4 ,contw +7a74 18c08df8 increase -8 ,contr +7a75 c2007a72 loop memcpy_dword_swap_loop +7a76 20600000 rtn + +sp_initialize_256: +7a77 4777c03d bpatchx patch3d_7 ,mem_patch3d +7a78 6800c4be fetch 1 ,mem_le_secure_connect_enable +7a79 203a5af0 branch le_secure_connection_disable ,blank +7a7a 20405aec call le_secure_connection_enable +7a7b 20407583 call sp_clear_flags +7a7c 20207a7d branch sp_pubkey_calc_256 + +sp_pubkey_calc_256: +7a7d 6800c4c3 fetch 1 ,mem_le_sc_local_key_invalid +7a7e c1800000 rtnne sp_key_invalid +7a7f 6800c4c0 fetch 1 ,mem_le_sc_calc +7a80 c1800000 rtnne sp_calc_standby +7a81 d8a045b2 arg mem_le_private_key_256 ,contw +7a82 18000e0f force 15 ,queue +7a83 204076a2 call random_generator +7a84 180a7e00 random pdata +7a85 1fe37e00 rshift pdata ,pdata +7a86 e0a10000 istore 2 ,contw +7a87 d8a00766 arg mem_k_256 ,contw +7a88 d8c045b2 arg mem_le_private_key_256 ,contr +7a89 20407ebd call memcpy32 +7a8a d8a00646 arg mem_ax_256 ,contw +7a8b d8c0095e arg mem_gx_256 ,contr +7a8c 20407eb3 call memcpy64 +7a8d d8a00686 arg mem_az_256 ,contw +7a8e 20407ed0 call clear_mem_256 +7a8f 70068601 jam 1 ,mem_az_256 +7a90 20407ac7 call eckp_calc_init_256 +7a91 7044c003 jam sp_calc_pubkey_256 ,mem_le_sc_calc +7a92 20600000 rtn + +sp_pubkey_generated_256: +7a93 d8a045d2 arg mem_le_pubkey_local_x_256 ,contw +7a94 d8c006a6 arg mem_bx_256 ,contr +7a95 20407eb3 call memcpy64 +7a96 7044c303 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid +7a97 7044c000 jam sp_calc_standby ,mem_le_sc_calc +7a98 20600000 rtn + +sp_dhkey_calc_256: +7a99 680089b9 fetch 1 ,mem_sp_dhkey_invalid +7a9a c1800000 rtnne sp_key_invalid +7a9b 6800c4c0 fetch 1 ,mem_le_sc_calc +7a9c c1800000 rtnne sp_calc_standby +7a9d d8a00766 arg mem_k_256 ,contw +7a9e d8c045b2 arg mem_le_private_key_256 ,contr +7a9f 20407ebd call memcpy32 +7aa0 d8a00646 arg mem_ax_256 ,contw +7aa1 d8c009be arg mem_le_pubkey_remote_x_256 ,contr +7aa2 20407eb3 call memcpy64 +7aa3 d8a00686 arg mem_az_256 ,contw +7aa4 20407ed0 call clear_mem_256 +7aa5 70068601 jam 1 ,mem_az_256 +7aa6 20407ac7 call eckp_calc_init_256 +7aa7 7044c004 jam sp_calc_dhkey_256 ,mem_le_sc_calc +7aa8 20600000 rtn + +sp_dhkey_generated_256: +7aa9 d8a009fe arg mem_le_dhkey_256 ,contw +7aaa d8c006a6 arg mem_bx_256 ,contr +7aab 20407ebd call memcpy32 +7aac 7009b903 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +7aad 7044c000 jam sp_calc_standby ,mem_le_sc_calc +7aae 20600000 rtn + +sp_calc_sequence_256: +7aaf 6800c4be fetch 1 ,mem_le_secure_connect_enable +7ab0 207a0000 rtn blank +7ab1 6800c4c0 fetch 1 ,mem_le_sc_calc +7ab2 207a0000 rtn blank +7ab3 1fe0fe80 increase 0x80 ,pdata +7ab4 6000c4c0 store 1 ,mem_le_sc_calc +7ab5 c3838000 rtnbit1 7 +7ab6 680105e3 fetch 2 ,mem_ec_loopc +7ab7 203a7ab9 branch sp_calc_sequence_done_256 ,blank +7ab8 20207abf branch eckp_calc_256 + +sp_calc_sequence_done_256: +7ab9 4778403e bpatchx patch3e_0 ,mem_patch3e +7aba 20407ad4 call ecunmapz_256 +7abb 6800c4c0 fetch 1 ,mem_le_sc_calc +7abc c001fa93 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +7abd c0027aa9 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +7abe 20600000 rtn + +eckp_calc_256: +7abf 20407ae6 call ecdbl_256 +7ac0 680105e3 fetch 2 ,mem_ec_loopc +7ac1 1fe0ffff increase -1 ,pdata +7ac2 600105e3 store 2 ,mem_ec_loopc +7ac3 d8c00766 arg mem_k_256 ,contr +7ac4 204076ec call bn_testbit +7ac5 20608000 rtn true +7ac6 20207b37 branch ecadd_256 + +eckp_calc_init_256: +7ac7 4778c03e bpatchx patch3e_1 ,mem_patch3e +7ac8 58000100 setarg 256 ,pdata +7ac9 600105e3 store 2 ,mem_ec_loopc + +eckp_calc_init_256_1: +7aca 680105e3 fetch 2 ,mem_ec_loopc +7acb 207a0000 rtn blank +7acc 1fe0ffff increase -1 ,pdata +7acd 600105e3 store 2 ,mem_ec_loopc +7ace d8c00766 arg mem_k_256 ,contr +7acf 204076ec call bn_testbit +7ad0 2020faca branch eckp_calc_init_256_1 ,true +7ad1 d8c00646 arg mem_ax_256 ,contr +7ad2 d8a00706 arg mem_cx_256 ,contw +7ad3 20207eb2 branch memcpy96 + +ecunmapz_256: +7ad4 da200746 arg mem_cz_256 ,rega +7ad5 d8a00846 arg mem_t3_256 ,contw +7ad6 20407ba3 call bn_invmod_256 +7ad7 da200846 arg mem_t3_256 ,rega +7ad8 d8a007e6 arg mem_t1_256 ,contw +7ad9 20407c79 call bn_sqrmod_256 +7ada da200706 arg mem_cx_256 ,rega +7adb da4007e6 arg mem_t1_256 ,regb +7adc d8a006a6 arg mem_bx_256 ,contw +7add 20407be1 call bn_mulmod_256 +7ade da200846 arg mem_t3_256 ,rega +7adf da4007e6 arg mem_t1_256 ,regb +7ae0 d8a00826 arg mem_t2_256 ,contw +7ae1 20407be1 call bn_mulmod_256 +7ae2 da200726 arg mem_cy_256 ,rega +7ae3 da400826 arg mem_t2_256 ,regb +7ae4 d8a006c6 arg mem_by_256 ,contw +7ae5 20207be1 branch bn_mulmod_256 + +ecdbl_256: +7ae6 da200746 arg mem_cz_256 ,rega +7ae7 d8a00826 arg mem_t2_256 ,contw +7ae8 20407c79 call bn_sqrmod_256 +7ae9 da200826 arg mem_t2_256 ,rega +7aea d8a00846 arg mem_t3_256 ,contw +7aeb 20407c79 call bn_sqrmod_256 +7aec da20093e arg mem_a_256 ,rega +7aed da400846 arg mem_t3_256 ,regb +7aee d8a00846 arg mem_t3_256 ,contw +7aef 20407be1 call bn_mulmod_256 +7af0 da200706 arg mem_cx_256 ,rega +7af1 d8a00826 arg mem_t2_256 ,contw +7af2 20407c79 call bn_sqrmod_256 +7af3 d8c00826 arg mem_t2_256 ,contr +7af4 d8a007e6 arg mem_t1_256 ,contw +7af5 20407ebd call memcpy32 +7af6 da2007e6 arg mem_t1_256 ,rega +7af7 20407c80 call bn_lshiftmod_256 +7af8 da200826 arg mem_t2_256 ,rega +7af9 da4007e6 arg mem_t1_256 ,regb +7afa d8a00826 arg mem_t2_256 ,contw +7afb 20407c7d call bn_addmod_256 +7afc da200826 arg mem_t2_256 ,rega +7afd da400846 arg mem_t3_256 ,regb +7afe d8a00826 arg mem_t2_256 ,contw +7aff 20407c7d call bn_addmod_256 +7b00 d8c00706 arg mem_cx_256 ,contr +7b01 d8a007e6 arg mem_t1_256 ,contw +7b02 20407ebd call memcpy32 +7b03 da200726 arg mem_cy_256 ,rega +7b04 d8a00846 arg mem_t3_256 ,contw +7b05 20407c79 call bn_sqrmod_256 +7b06 da2007e6 arg mem_t1_256 ,rega +7b07 20407c80 call bn_lshiftmod_256 +7b08 da2007e6 arg mem_t1_256 ,rega +7b09 20407c80 call bn_lshiftmod_256 +7b0a da2007e6 arg mem_t1_256 ,rega +7b0b da400846 arg mem_t3_256 ,regb +7b0c d8a007e6 arg mem_t1_256 ,contw +7b0d 20407be1 call bn_mulmod_256 +7b0e da200846 arg mem_t3_256 ,rega +7b0f d8a00806 arg mem_t0_256 ,contw +7b10 20407c79 call bn_sqrmod_256 +7b11 da200806 arg mem_t0_256 ,rega +7b12 20407c80 call bn_lshiftmod_256 +7b13 da200806 arg mem_t0_256 ,rega +7b14 20407c80 call bn_lshiftmod_256 +7b15 da200806 arg mem_t0_256 ,rega +7b16 20407c80 call bn_lshiftmod_256 +7b17 d8c00726 arg mem_cy_256 ,contr +7b18 d8a00846 arg mem_t3_256 ,contw +7b19 20407ebd call memcpy32 +7b1a da200846 arg mem_t3_256 ,rega +7b1b 20407c80 call bn_lshiftmod_256 +7b1c da200846 arg mem_t3_256 ,rega +7b1d da400746 arg mem_cz_256 ,regb +7b1e d8a00746 arg mem_cz_256 ,contw +7b1f 20407be1 call bn_mulmod_256 +7b20 da200826 arg mem_t2_256 ,rega +7b21 d8a00846 arg mem_t3_256 ,contw +7b22 20407c79 call bn_sqrmod_256 +7b23 da200846 arg mem_t3_256 ,rega +7b24 da4007e6 arg mem_t1_256 ,regb +7b25 d8a00846 arg mem_t3_256 ,contw +7b26 20407c96 call bn_submod_256 +7b27 da200846 arg mem_t3_256 ,rega +7b28 da4007e6 arg mem_t1_256 ,regb +7b29 d8a00706 arg mem_cx_256 ,contw +7b2a 20407c96 call bn_submod_256 +7b2b da2007e6 arg mem_t1_256 ,rega +7b2c da400706 arg mem_cx_256 ,regb +7b2d d8a00846 arg mem_t3_256 ,contw +7b2e 20407c96 call bn_submod_256 +7b2f da200846 arg mem_t3_256 ,rega +7b30 da400826 arg mem_t2_256 ,regb +7b31 d8a00846 arg mem_t3_256 ,contw +7b32 20407be1 call bn_mulmod_256 +7b33 da200846 arg mem_t3_256 ,rega +7b34 da400806 arg mem_t0_256 ,regb +7b35 d8a00726 arg mem_cy_256 ,contw +7b36 20207c96 branch bn_submod_256 + +ecadd_256: +7b37 da200686 arg mem_az_256 ,rega +7b38 d8a00866 arg mem_t7_256 ,contw +7b39 20407c79 call bn_sqrmod_256 +7b3a da200706 arg mem_cx_256 ,rega +7b3b da400866 arg mem_t7_256 ,regb +7b3c d8a00806 arg mem_t0_256 ,contw +7b3d 20407be1 call bn_mulmod_256 +7b3e da200686 arg mem_az_256 ,rega +7b3f da400866 arg mem_t7_256 ,regb +7b40 d8a00866 arg mem_t7_256 ,contw +7b41 20407be1 call bn_mulmod_256 +7b42 da200726 arg mem_cy_256 ,rega +7b43 da400866 arg mem_t7_256 ,regb +7b44 d8a007e6 arg mem_t1_256 ,contw +7b45 20407be1 call bn_mulmod_256 +7b46 da200746 arg mem_cz_256 ,rega +7b47 d8a00866 arg mem_t7_256 ,contw +7b48 20407c79 call bn_sqrmod_256 +7b49 da200646 arg mem_ax_256 ,rega +7b4a da400866 arg mem_t7_256 ,regb +7b4b d8a00826 arg mem_t2_256 ,contw +7b4c 20407be1 call bn_mulmod_256 +7b4d da200746 arg mem_cz_256 ,rega +7b4e da400866 arg mem_t7_256 ,regb +7b4f d8a00866 arg mem_t7_256 ,contw +7b50 20407be1 call bn_mulmod_256 +7b51 da200666 arg mem_ay_256 ,rega +7b52 da400866 arg mem_t7_256 ,regb +7b53 d8a00846 arg mem_t3_256 ,contw +7b54 20407be1 call bn_mulmod_256 +7b55 da400806 arg mem_t0_256 ,regb +7b56 da200826 arg mem_t2_256 ,rega +7b57 d8a00866 arg mem_t7_256 ,contw +7b58 20407c96 call bn_submod_256 +7b59 da200806 arg mem_t0_256 ,rega +7b5a da400826 arg mem_t2_256 ,regb +7b5b d8a00806 arg mem_t0_256 ,contw +7b5c 20407c7d call bn_addmod_256 +7b5d da4007e6 arg mem_t1_256 ,regb +7b5e da200846 arg mem_t3_256 ,rega +7b5f d8a00826 arg mem_t2_256 ,contw +7b60 20407c96 call bn_submod_256 +7b61 da2007e6 arg mem_t1_256 ,rega +7b62 da400846 arg mem_t3_256 ,regb +7b63 d8a007e6 arg mem_t1_256 ,contw +7b64 20407c7d call bn_addmod_256 +7b65 da2007e6 arg mem_t1_256 ,rega +7b66 da400866 arg mem_t7_256 ,regb +7b67 d8a007e6 arg mem_t1_256 ,contw +7b68 20407be1 call bn_mulmod_256 +7b69 da200746 arg mem_cz_256 ,rega +7b6a da400686 arg mem_az_256 ,regb +7b6b d8a00846 arg mem_t3_256 ,contw +7b6c 20407be1 call bn_mulmod_256 +7b6d da200846 arg mem_t3_256 ,rega +7b6e da400866 arg mem_t7_256 ,regb +7b6f d8a00746 arg mem_cz_256 ,contw +7b70 20407be1 call bn_mulmod_256 +7b71 da200866 arg mem_t7_256 ,rega +7b72 d8a00866 arg mem_t7_256 ,contw +7b73 20407c79 call bn_sqrmod_256 +7b74 da200866 arg mem_t7_256 ,rega +7b75 da400806 arg mem_t0_256 ,regb +7b76 d8a00846 arg mem_t3_256 ,contw +7b77 20407be1 call bn_mulmod_256 +7b78 da200866 arg mem_t7_256 ,rega +7b79 da4007e6 arg mem_t1_256 ,regb +7b7a d8a007e6 arg mem_t1_256 ,contw +7b7b 20407be1 call bn_mulmod_256 +7b7c da200826 arg mem_t2_256 ,rega +7b7d d8a00706 arg mem_cx_256 ,contw +7b7e 20407c79 call bn_sqrmod_256 +7b7f da200706 arg mem_cx_256 ,rega +7b80 da400846 arg mem_t3_256 ,regb +7b81 d8a00706 arg mem_cx_256 ,contw +7b82 20407c96 call bn_submod_256 +7b83 d8c00706 arg mem_cx_256 ,contr +7b84 d8a00866 arg mem_t7_256 ,contw +7b85 20407ebd call memcpy32 +7b86 da200866 arg mem_t7_256 ,rega +7b87 20407c80 call bn_lshiftmod_256 +7b88 da200846 arg mem_t3_256 ,rega +7b89 da400866 arg mem_t7_256 ,regb +7b8a d8a00846 arg mem_t3_256 ,contw +7b8b 20407c96 call bn_submod_256 +7b8c da200846 arg mem_t3_256 ,rega +7b8d da400826 arg mem_t2_256 ,regb +7b8e d8a00826 arg mem_t2_256 ,contw +7b8f 20407be1 call bn_mulmod_256 +7b90 da200826 arg mem_t2_256 ,rega +7b91 da4007e6 arg mem_t1_256 ,regb +7b92 d8a00726 arg mem_cy_256 ,contw +7b93 20407c96 call bn_submod_256 +7b94 da200726 arg mem_cy_256 ,rega +7b95 da40091e arg mem_p_256 ,regb +7b96 d8a00726 arg mem_cy_256 ,contw +7b97 18002600 force 0 ,regc +7b98 68008726 fetch 1 ,mem_cy_256 +7b99 2feffe00 isolate1 0 ,pdata +7b9a 2040fc7b call bn_add_256 ,true +7b9b 1a626000 copy regc ,alarm +7b9c da200726 arg mem_cy_256 ,rega +7b9d 20407cab call bn_rshift_256 +7b9e 68008745 fetch 1 ,mem_cy5_256 +7b9f 2e0ffe00 isolate1 0 ,alarm +7ba0 7920fe07 setflag true ,7 ,pdata +7ba1 60008745 store 1 ,mem_cy5_256 +7ba2 20600000 rtn + +bn_invmod_256: +7ba3 18a21600 copy contw ,timeup +7ba4 d8a00806 arg mem_tmp0_256 ,contw +7ba5 20407ed0 call clear_mem_256 +7ba6 18007e00 force 0 ,pdata +7ba7 60020826 store 4 ,mem_t2_256 +7ba8 70080601 jam 1 ,mem_tmp0_256 +7ba9 d8a00786 arg mem_tmp1_256 ,contw +7baa 20407ed2 call clear_mem_512 +7bab d8c0091e arg mem_p_256 ,contr +7bac d8a007c6 arg mem_tmp2_256 ,contw +7bad 20407ebd call memcpy32 +7bae 1a220c00 copy rega ,contr +7baf d8a007e6 arg mem_tmp3_256 ,contw +7bb0 20407ebd call memcpy32 + +bn_invmod_256_2: +7bb1 d8c007e6 arg mem_tmp3_256 ,contr +7bb2 20407cb5 call bn_eq_zero_256 +7bb3 203a7bda branch bn_invmod_256_0 ,blank +7bb4 da2007e6 arg mem_tmp3_256 ,rega +7bb5 da400806 arg mem_tmp0_256 ,regb +7bb6 20407cb8 call bn_rshifteven_256 +7bb7 da2007c6 arg mem_tmp2_256 ,rega +7bb8 da400786 arg mem_tmp1_256 ,regb +7bb9 20407cb8 call bn_rshifteven_256 +7bba da2007e6 arg mem_tmp3_256 ,rega +7bbb da4007c6 arg mem_tmp2_256 ,regb +7bbc 20407cb1 call bn_bigeq_256 +7bbd 20217bcc branch bn_invmod_256_1 ,positive +7bbe da2007c6 arg mem_tmp2_256 ,rega +7bbf da4007e6 arg mem_tmp3_256 ,regb +7bc0 1a220a00 copy rega ,contw +7bc1 20407ca9 call bn_sub_256 +7bc2 da200806 arg mem_tmp0_256 ,rega +7bc3 da400786 arg mem_tmp1_256 ,regb +7bc4 1a420a00 copy regb ,contw +7bc5 20407c7b call bn_add_256 +7bc6 ea208000 ifetch 1 ,rega +7bc7 9a60a600 iadd regc ,regc +7bc8 ea408000 ifetch 1 ,regb +7bc9 9a60fe00 iadd regc ,pdata +7bca e2408000 istore 1 ,regb +7bcb 20207bb1 branch bn_invmod_256_2 + +bn_invmod_256_1: +7bcc da2007e6 arg mem_tmp3_256 ,rega +7bcd da4007c6 arg mem_tmp2_256 ,regb +7bce 1a220a00 copy rega ,contw +7bcf 20407ca9 call bn_sub_256 +7bd0 da200786 arg mem_tmp1_256 ,rega +7bd1 da400806 arg mem_tmp0_256 ,regb +7bd2 1a420a00 copy regb ,contw +7bd3 20407c7b call bn_add_256 +7bd4 ea208000 ifetch 1 ,rega +7bd5 9a60a600 iadd regc ,regc +7bd6 ea408000 ifetch 1 ,regb +7bd7 9a60fe00 iadd regc ,pdata +7bd8 e2408000 istore 1 ,regb +7bd9 20207bb1 branch bn_invmod_256_2 + +bn_invmod_256_0: +7bda da200786 arg mem_tmp1_256 ,rega +7bdb 19620a00 copy timeup ,contw +7bdc 20407c0a call bn_p256mod +7bdd da20091e arg mem_p_256 ,rega +7bde 19622400 copy timeup ,regb +7bdf 19620a00 copy timeup ,contw +7be0 20207c96 branch bn_submod_256 + +bn_mulmod_256: +7be1 18a21600 copy contw ,timeup +7be2 18007000 force 0 ,regext_index +7be3 d8a00786 arg mem_tmp1_256 ,contw +7be4 20407ed2 call clear_mem_512 +7be5 d8a00ad2 arg mem_regext ,contw +7be6 20407ed2 call clear_mem_512 +7be7 1a220c00 copy rega ,contr +7be8 700ad200 jam 0 ,mem_regext +7be9 58000000 setarg 0 +7bea 20407c73 call bn_load_mem +7beb 1a420c00 copy regb ,contr +7bec 20407c77 call bn_load_256 +7bed 18000e00 force 0 ,queue +7bee d8a00786 arg mem_tmp1_256 ,contw + +bn_mulmod_256_1: +7bef d8400ad2 arg mem_regext ,temp +7bf0 18e22400 copy queue ,regb +7bf1 1a4bfe00 lshift2 regb ,pdata +7bf2 9840a400 iadd temp ,regb +7bf3 18000400 force 0 ,temp +7bf4 18002600 force 0 ,regc + +bn_mulmod_256_0: +7bf5 e8a20000 ifetch 4 ,contw +7bf6 98002200 iforce rega +7bf7 ea420000 ifetch 4 ,regb +7bf8 1a627000 copy regc ,regext_index +7bf9 9deffe00 imul32 regext ,pdata +7bfa 9a20fe00 iadd rega ,pdata +7bfb 9840fe00 iadd temp ,pdata +7bfc e0a20000 istore 4 ,contw +7bfd 1fef0400 rshift32 pdata ,temp +7bfe 1a60a601 increase 1 ,regc +7bff 2a61fe08 compare 8 ,regc ,0xff +7c00 2420fbf5 nbranch bn_mulmod_256_0 ,true +7c01 18427e00 deposit temp +7c02 e0a20000 istore 4 ,contw +7c03 18a08be0 increase -32 ,contw +7c04 18e08e01 increase 1 ,queue +7c05 28e1fe08 compare 8 ,queue ,0xff +7c06 2420fbef nbranch bn_mulmod_256_1 ,true +7c07 da200786 arg mem_tmp1_256 ,rega +7c08 19620a00 copy timeup ,contw +7c09 20207c0a branch bn_p256mod + +bn_p256mod: +7c0a 4779403e bpatchx patch3e_2 ,mem_patch3e +7c0b 18a21600 copy contw ,timeup +7c0c 1a226000 copy rega ,alarm +7c0d da4007c6 arg mem_tmp2_256 ,regb +7c0e 1a420a00 copy regb ,contw +7c0f 20407ecd call memset0_4 +7c10 e0a40000 istore 8 ,contw +7c11 1a208c2c add rega ,44 ,contr +7c12 20407eb9 call memcpy8 +7c13 20407eb5 call memcpy12 +7c14 1a422200 copy regb ,rega +7c15 20407c80 call bn_lshiftmod_256 +7c16 da4007c6 arg mem_tmp2_256 ,regb +7c17 1e022200 copy alarm ,rega +7c18 19620a00 copy timeup ,contw +7c19 20407c7d call bn_addmod_256 +7c1a da4007c6 arg mem_tmp2_256 ,regb +7c1b 1a420a00 copy regb ,contw +7c1c 20407ecd call memset0_4 +7c1d e0a40000 istore 8 ,contw +7c1e 1e008c30 add alarm ,48 ,contr +7c1f 20407ebf call memcpy16 +7c20 20407ecd call memset0_4 +7c21 1a422200 copy regb ,rega +7c22 20407c80 call bn_lshiftmod_256 +7c23 da4007c6 arg mem_tmp2_256 ,regb +7c24 19622200 copy timeup ,rega +7c25 1a220a00 copy rega ,contw +7c26 20407c7d call bn_addmod_256 +7c27 da4007c6 arg mem_tmp2_256 ,regb +7c28 1a420a00 copy regb ,contw +7c29 1e008c20 add alarm ,32 ,contr +7c2a 20407eb5 call memcpy12 +7c2b 20407ecd call memset0_4 +7c2c e0a40000 istore 8 ,contw +7c2d 1e008c38 add alarm ,56 ,contr +7c2e 20407eb9 call memcpy8 +7c2f 19622200 copy timeup ,rega +7c30 1a220a00 copy rega ,contw +7c31 20407c7d call bn_addmod_256 +7c32 da4007c6 arg mem_tmp2_256 ,regb +7c33 1a420a00 copy regb ,contw +7c34 1e008c24 add alarm ,36 ,contr +7c35 20407eb5 call memcpy12 +7c36 1e008c34 add alarm ,52 ,contr +7c37 20407eb5 call memcpy12 +7c38 1e008c34 add alarm ,52 ,contr +7c39 20407eb6 call memcpy4 +7c3a 1e008c20 add alarm ,32 ,contr +7c3b 20407eb6 call memcpy4 +7c3c 19622200 copy timeup ,rega +7c3d 1a220a00 copy rega ,contw +7c3e 20407c7d call bn_addmod_256 +7c3f da4007c6 arg mem_tmp2_256 ,regb +7c40 1a420a00 copy regb ,contw +7c41 1e008c2c add alarm ,44 ,contr +7c42 20407eb5 call memcpy12 +7c43 20407ecd call memset0_4 +7c44 e0a40000 istore 8 ,contw +7c45 1e008c20 add alarm ,32 ,contr +7c46 20407eb6 call memcpy4 +7c47 1e008c28 add alarm ,40 ,contr +7c48 20407eb6 call memcpy4 +7c49 19622200 copy timeup ,rega +7c4a 1a220a00 copy rega ,contw +7c4b 20407c96 call bn_submod_256 +7c4c da4007c6 arg mem_tmp2_256 ,regb +7c4d 1a420a00 copy regb ,contw +7c4e 1e008c30 add alarm ,48 ,contr +7c4f 20407eb9 call memcpy8 +7c50 20407eb9 call memcpy8 +7c51 18007e00 force 0 ,pdata +7c52 e0a40000 istore 8 ,contw +7c53 1e008c24 add alarm ,36 ,contr +7c54 20407eb6 call memcpy4 +7c55 1e008c2c add alarm ,44 ,contr +7c56 20407eb6 call memcpy4 +7c57 19622200 copy timeup ,rega +7c58 1a220a00 copy rega ,contw +7c59 20407c96 call bn_submod_256 +7c5a da4007c6 arg mem_tmp2_256 ,regb +7c5b 1a420a00 copy regb ,contw +7c5c 1e008c34 add alarm ,52 ,contr +7c5d 20407eb5 call memcpy12 +7c5e 1e008c20 add alarm ,32 ,contr +7c5f 20407eb5 call memcpy12 +7c60 20407ecd call memset0_4 +7c61 1e008c30 add alarm ,48 ,contr +7c62 20407eb6 call memcpy4 +7c63 19622200 copy timeup ,rega +7c64 1a220a00 copy rega ,contw +7c65 20407c96 call bn_submod_256 +7c66 da4007c6 arg mem_tmp2_256 ,regb +7c67 1a420a00 copy regb ,contw +7c68 1e008c38 add alarm ,56 ,contr +7c69 20407eb9 call memcpy8 +7c6a 20407ecd call memset0_4 +7c6b 1e008c24 add alarm ,36 ,contr +7c6c 20407eb5 call memcpy12 +7c6d 20407ecd call memset0_4 +7c6e 1e008c34 add alarm ,52 ,contr +7c6f 20407eb6 call memcpy4 +7c70 19622200 copy timeup ,rega +7c71 1a220a00 copy rega ,contw +7c72 20207c96 branch bn_submod_256 + +bn_load_mem: +7c73 18007220 force 32 ,loopcnt +7c74 d8a00ad2 arg mem_regext ,contw +7c75 98a08a00 iadd contw ,contw +7c76 20207f01 branch memcpy + +bn_load_256: +7c77 18007208 force 8 ,loopcnt +7c78 20207781 branch bn_load_0 + +bn_sqrmod_256: +7c79 1a222400 copy rega ,regb +7c7a 20207be1 branch bn_mulmod_256 + +bn_add_256: +7c7b 18007208 force 8 ,loopcnt +7c7c 20207712 branch bn_add + 1 + +bn_addmod_256: +7c7d 20407c7b call bn_add_256 +7c7e 18a22200 copy contw ,rega +7c7f 20207c81 branch bn_lshiftmod_ismod_256 + +bn_lshiftmod_256: +7c80 20407cae call bn_lshift_256 + +bn_lshiftmod_ismod_256: +7c81 2a6ffe00 isolate1 0 ,regc +7c82 2020fc8a branch bn_lshiftmod_p_256 ,true +7c83 da40091e arg mem_p_256 ,regb +7c84 1a222600 copy rega ,regc +7c85 1a20a3e0 increase -32 ,rega +7c86 20407cb1 call bn_bigeq_256 +7c87 24610000 nrtn positive +7c88 1a622200 copy regc ,rega +7c89 20207c92 branch sub_p2_256 + +bn_lshiftmod_p_256: +7c8a 20407c92 call sub_p2_256 +7c8b 1a222600 copy rega ,regc +7c8c 1a20a3e0 increase -32 ,rega +7c8d da40091e arg mem_p_256 ,regb +7c8e 20407cb1 call bn_bigeq_256 +7c8f 24610000 nrtn positive +7c90 1a622200 copy regc ,rega +7c91 20207c92 branch sub_p2_256 + +sub_p2_256: +7c92 1a20a3e0 increase -32 ,rega +7c93 da40091e arg mem_p_256 ,regb +7c94 1a220a00 copy rega ,contw +7c95 20207ca9 branch bn_sub_256 + +bn_submod_256: +7c96 20407ca9 call bn_sub_256 +7c97 2020fca0 branch bn_submod_256_np ,true +7c98 18a0a3e0 add contw ,-32 ,rega +7c99 da40091e arg mem_p_256 ,regb +7c9a 20407cb1 call bn_bigeq_256 +7c9b 24610000 nrtn positive +7c9c da40091e arg mem_p_256 ,regb +7c9d 18a0a3e0 add contw ,-32 ,rega +7c9e 1a220a00 copy rega ,contw +7c9f 20207ca9 branch bn_sub_256 + +bn_submod_256_np: +7ca0 18a0a3e0 add contw ,-32 ,rega +7ca1 da40091e arg mem_p_256 ,regb +7ca2 1a220a00 copy rega ,contw +7ca3 20407c7b call bn_add_256 +7ca4 20608000 rtn true +7ca5 18a0a3e0 add contw ,-32 ,rega +7ca6 da40091e arg mem_p_256 ,regb +7ca7 1a220a00 copy rega ,contw +7ca8 20207c7b branch bn_add_256 + +bn_sub_256: +7ca9 18007208 force 8 ,loopcnt +7caa 20207720 branch bn_sub + 1 + +bn_rshift_256: +7cab 18007208 force 8 ,loopcnt +7cac 1a20a21c increase 28 ,rega +7cad 2020772f branch bn_rshift + +bn_lshift_256: +7cae 18007208 force 8 ,loopcnt +7caf 18002600 force 0 ,regc +7cb0 2020773d branch bn_lshift_0 + +bn_bigeq_256: +7cb1 18007208 force 8 ,loopcnt +7cb2 1a20a21c increase 28 ,rega +7cb3 1a40a41c increase 28 ,regb +7cb4 20207707 branch bn_bigeq_0 + +bn_eq_zero_256: +7cb5 e8c40000 ifetch 8 ,contr +7cb6 247a0000 nrtn blank +7cb7 202076f5 branch bn_eq_zero + +bn_rshifteven_256: +7cb8 1a226000 copy rega ,alarm + +bn_rshifteven_256_1: +7cb9 1e022200 copy alarm ,rega +7cba ea208000 ifetch 1 ,rega +7cbb 2feffe00 isolate1 0 ,pdata +7cbc 20608000 rtn true +7cbd 20407cab call bn_rshift_256 +7cbe ea408000 ifetch 1 ,regb +7cbf 2fec0000 isolate0 0 ,pdata +7cc0 2020fcc8 branch bn_rshifteven_256_0 ,true +7cc1 da20091e arg mem_p_256 ,rega +7cc2 1a420a00 copy regb ,contw +7cc3 20407c7b call bn_add_256 +7cc4 ea408000 ifetch 1 ,regb +7cc5 9a60fe00 iadd regc ,pdata +7cc6 e2408000 istore 1 ,regb +7cc7 1a40a5e0 increase -32 ,regb + +bn_rshifteven_256_0: +7cc8 1a40a220 add regb ,32 ,rega +7cc9 18007209 force 9 ,loopcnt +7cca 2040772f call bn_rshift +7ccb 20207cb9 branch bn_rshifteven_256_1 + +ui_init: +7ccc 20402c65 call lpm_disable_exen_output +7ccd 20758000 rtn wake +7cce 20407cd3 call ui_button_init +7ccf 20407d75 call ui_timer_init +7cd0 20207d08 branch ui_led_init_global + +ui_dispatch: +7cd1 20407d29 call ui_led_dispatch +7cd2 20207d64 branch ui_timer_check + +ui_button_init: +7cd3 6800c686 fetch 1 ,mem_ui_button_gpio +7cd4 c17f8000 rtneq ui_button_gpio_disable +7cd5 98000400 iforce temp +7cd6 2040680e call gpio_config_output +7cd7 6808c686 fetcht 1 ,mem_ui_button_gpio +7cd8 20406825 call gpio_out_inactive +7cd9 20000064 nop 100 +7cda 6808c686 fetcht 1 ,mem_ui_button_gpio +7cdb 204067fb call gpio_config_input +7cdc 20207cdd branch ui_button_polling + +ui_button_polling: +7cdd 4779c03e bpatchx patch3e_3 ,mem_patch3e +7cde 6800c686 fetch 1 ,mem_ui_button_gpio +7cdf c17f8000 rtneq ui_button_gpio_disable +7ce0 1fe20400 copy pdata ,temp +7ce1 2040681d call gpio_get_bit +7ce2 2420fcef nbranch ui_button_up ,true + +ui_button_down: +7ce3 20407cf9 call ui_button_check_long_press +7ce4 68014682 fetch 2 ,mem_ui_state_map +7ce5 79207e0c set1 ui_state_btn_down +7ce6 60014682 store 2 ,mem_ui_state_map +7ce7 6800c679 fetch 1 ,mem_ui_button_last_state +7ce8 c1000000 rtneq ui_button_state_down +7ce9 70467900 jam ui_button_state_down ,mem_ui_button_last_state +7cea 6800c685 fetch 1 ,mem_ui_button_timeout +7ceb 6000c678 store 1 ,mem_ui_button_timer +7cec 20407d00 call lpm_button_get_wake_lock +7ced 700a992c jam bt_evt_button_down ,mem_fifo_temp +7cee 20207d86 branch ui_ipc_send_event + +ui_button_up: +7cef 68014682 fetch 2 ,mem_ui_state_map +7cf0 793ffe0c set0 ui_state_btn_down +7cf1 60014682 store 2 ,mem_ui_state_map +7cf2 6800c679 fetch 1 ,mem_ui_button_last_state +7cf3 c1008000 rtneq ui_button_state_up +7cf4 70467901 jam ui_button_state_up ,mem_ui_button_last_state +7cf5 70467800 jam 0 ,mem_ui_button_timer +7cf6 20407d02 call lpm_button_clean_wake_lock +7cf7 700a992d jam bt_evt_button_up ,mem_fifo_temp +7cf8 20207d86 branch ui_ipc_send_event + +ui_button_check_long_press: +7cf9 6800c678 fetch 1 ,mem_ui_button_timer +7cfa 207a0000 rtn blank +7cfb 1fe0ffff increase -1 ,pdata +7cfc 6000c678 store 1 ,mem_ui_button_timer +7cfd 247a0000 nrtn blank +7cfe 700a9910 jam bt_evt_button_long_pressed ,mem_fifo_temp +7cff 20207d86 branch ui_ipc_send_event + +lpm_button_get_wake_lock: +7d00 d8e00007 arg wake_lock_button ,queue +7d01 20202c32 branch lpm_get_wake_lock + +lpm_button_clean_wake_lock: +7d02 d8e00007 arg wake_lock_button ,queue +7d03 20202c36 branch lpm_put_wake_lock + +calc_curr_struct_prt: +7d04 6801421b fetch 2 ,mem_ui_led_struct_ptr +7d05 1a2fa40b mul32 rega ,led_offset_length ,regb +7d06 9a40a400 iadd regb ,regb +7d07 20600000 rtn + +ui_led_init_global: +7d08 6800c21a fetch 1 ,mem_ui_led_struct_num +7d09 207a0000 rtn blank +7d0a 1fe27200 copy pdata ,loopcnt +7d0b 6801421b fetch 2 ,mem_ui_led_struct_ptr +7d0c 1fe22400 copy pdata ,regb + +ui_led_init_loop: +7d0d 1a40a602 add regb ,led_offset_led_gpio ,regc +7d0e ea688000 ifetcht 1 ,regc +7d0f 2040680e call gpio_config_output +7d10 20407d32 call ui_led_off_static +7d11 1a40a40b increase led_offset_length ,regb +7d12 c2007d0d loop ui_led_init_loop +7d13 20600000 rtn + +ui_led_on_global: +7d14 20407d04 call calc_curr_struct_prt +7d15 58000002 setarg ui_led_state_lighting +7d16 e2408000 istore 1 ,regb +7d17 20407d5e call ui_led_stop_timer +7d18 20207d35 branch ui_led_on_static + +ui_led_blink_stop_global: + +ui_led_off_global: +7d19 20407d04 call calc_curr_struct_prt +7d1a 58000003 setarg ui_led_state_darking +7d1b e2408000 istore 1 ,regb +7d1c 20407d5e call ui_led_stop_timer +7d1d 20207d32 branch ui_led_off_static + +ui_led_blink_start_global: +7d1e 20407d04 call calc_curr_struct_prt +7d1f 58000001 setarg ui_led_state_blink_start +7d20 e2408000 istore 1 ,regb +7d21 580000ff setarg led_infinite_flash_num +7d22 e0a08000 istore 1 ,contw +7d23 20207d32 branch ui_led_off_static + +ui_led_set_style_global: +7d24 20407d04 call calc_curr_struct_prt +7d25 df20000b arg led_offset_length ,loopcnt +7d26 1a620c00 copy regc ,contr +7d27 1a420a00 copy regb ,contw +7d28 20207ef4 branch memcpy_fast + +ui_led_dispatch: +7d29 6800c21a fetch 1 ,mem_ui_led_struct_num +7d2a 207a0000 rtn blank +7d2b da200000 arg 0 ,rega + +ui_led_blink_polling: +7d2c 20407d38 call ui_led_change_style_by_type +7d2d 1a20a201 increase 1 ,rega +7d2e 6800c21a fetch 1 ,mem_ui_led_struct_num +7d2f 9a267c00 isub rega ,null +7d30 20628000 rtn zero +7d31 20207d2c branch ui_led_blink_polling + +ui_led_off_static: +7d32 1a40a602 add regb ,led_offset_led_gpio ,regc +7d33 ea688000 ifetcht 1 ,regc +7d34 20206825 branch gpio_out_inactive + +ui_led_on_static: +7d35 1a40a602 add regb ,led_offset_led_gpio ,regc +7d36 ea688000 ifetcht 1 ,regc +7d37 20206829 branch gpio_out_active + +ui_led_change_style_by_type: +7d38 1a208e0b add rega ,ui_led_blink ,queue +7d39 20407f16 call timer_check +7d3a 247a0000 nrtn blank +7d3b 20407d04 call calc_curr_struct_prt +7d3c ea408000 ifetch 1 ,regb +7d3d c0017d35 beq ui_led_state_lighting ,ui_led_on_static +7d3e c001fd32 beq ui_led_state_darking ,ui_led_off_static +7d3f c0007d32 beq ui_led_state_blink_stop ,ui_led_off_static +7d40 c002fd4c beq ui_led_state_blink_darking ,ui_led_blink_state_darking + +ui_led_blink_state_lighting: +7d41 20407d35 call ui_led_on_static +7d42 1a40a607 add regb ,led_offset_cb_ledon ,regc +7d43 20407e7c call push_stack +7d44 ea610000 ifetch 2 ,regc +7d45 20407f9c call callback_func +7d46 20407e8c call pop_stack +7d47 58000005 setarg ui_led_state_blink_darking +7d48 e2408000 istore 1 ,regb +7d49 1a40a603 add regb ,led_offset_on_time ,regc +7d4a ea610000 ifetch 2 ,regc +7d4b 20207d5c branch ui_led_blink_timer_start + +ui_led_blink_state_darking: +7d4c 20407d32 call ui_led_off_static +7d4d 1a40a609 add regb ,led_offset_cb_ledoff ,regc +7d4e 20407e7c call push_stack +7d4f ea610000 ifetch 2 ,regc +7d50 20407f9c call callback_func +7d51 20407e8c call pop_stack +7d52 1a40a601 add regb ,led_offset_blink_count ,regc +7d53 ea608000 ifetch 1 ,regc +7d54 c07ffd58 beq led_infinite_flash_num ,ui_led_blink_infinite +7d55 1fe0ffff increase -1 ,pdata +7d56 e2608000 istore 1 ,regc +7d57 203a7d19 branch ui_led_blink_stop_global ,blank + +ui_led_blink_infinite: +7d58 58000004 setarg ui_led_state_blink_lighting +7d59 e2408000 istore 1 ,regb +7d5a 1a40a605 add regb ,led_offset_off_time ,regc +7d5b ea610000 ifetch 2 ,regc + +ui_led_blink_timer_start: +7d5c 1a208e0b add rega ,ui_led_blink ,queue +7d5d 20207f08 branch timer_init + +ui_led_stop_timer: +7d5e 58000000 setarg 0 +7d5f 20207d5c branch ui_led_blink_timer_start + +ui_timer_timeout: +7d60 58001000 setarg 0x1000 +7d61 1ff07e00 lshift16 pdata ,pdata +7d62 9a40a400 iadd regb ,regb +7d63 20600000 rtn + +ui_timer_check: +7d64 477a403e bpatchx patch3e_4 ,mem_patch3e +7d65 da200000 arg 0 ,rega +7d66 680a467a fetcht 4 ,mem_ui_timer_last_btclk +7d67 1c422400 copy clkn_bt ,regb +7d68 1a427e00 copy regb ,pdata +7d69 98467c00 isub temp ,null +7d6a 24417d60 ncall ui_timer_timeout ,positive + +ui_timer_check_loop: +7d6b 1a427e00 copy regb ,pdata +7d6c 184084a0 increase 160 ,temp +7d6d 184084a0 increase 160 ,temp +7d6e 98467c00 isub temp ,null +7d6f 24217d78 nbranch ui_timer_check_end ,positive +7d70 1a20a201 increase 1 ,rega +7d71 1a217e0f and rega ,0x0f ,pdata +7d72 243a7d6b nbranch ui_timer_check_loop ,blank +7d73 da200000 arg 0 ,rega +7d74 20407d7f call ui_timer_check_send_evt + +ui_timer_init: +7d75 1c427e00 copy clkn_bt ,pdata +7d76 6002467a store 4 ,mem_ui_timer_last_btclk +7d77 20600000 rtn + +ui_timer_check_end: +7d78 477ac03e bpatchx patch3e_5 ,mem_patch3e +7d79 1a227e00 copy rega ,pdata +7d7a 207a0000 rtn blank +7d7b 18408560 increase -160 ,temp +7d7c 18408560 increase -160 ,temp +7d7d 793f841c set0 28 ,temp +7d7e 600a467a storet 4 ,mem_ui_timer_last_btclk + +ui_timer_check_send_evt: +7d7f 2020335f branch app_evt_timer + +ui_ipc_get_lock: +7d80 70466601 jam 1 ,mem_ipc_lock_bt + +ui_ipc_get_lock_wait: +7d81 6800c667 fetch 1 ,mem_ipc_lock_c51 +7d82 243a7d81 nbranch ui_ipc_get_lock_wait ,blank +7d83 20600000 rtn + +ui_ipc_put_lock: +7d84 70466600 jam 0 ,mem_ipc_lock_bt +7d85 20600000 rtn + +ui_ipc_send_event: +7d86 477b403e bpatchx patch3e_6 ,mem_patch3e +7d87 20407d80 call ui_ipc_get_lock +7d88 1a227e00 copy rega ,pdata +7d89 60020a91 store 4 ,mem_ipc_rega_temp +7d8a da204668 arg mem_ipc_fifo_bt2c51 ,rega +7d8b 20407fb8 call fifo_in +7d8c 68020a91 fetch 4 ,mem_ipc_rega_temp +7d8d 1fe22200 copy pdata ,rega +7d8e 20207d84 branch ui_ipc_put_lock + +ui_ipc_send_cmd: +7d8f 477bc03e bpatchx patch3e_7 ,mem_patch3e +7d90 20407d80 call ui_ipc_get_lock +7d91 1a227e00 copy rega ,pdata +7d92 60020a91 store 4 ,mem_ipc_rega_temp +7d93 da204670 arg mem_ipc_fifo_c512bt ,rega +7d94 20407fb8 call fifo_in +7d95 68020a91 fetch 4 ,mem_ipc_rega_temp +7d96 1fe22200 copy pdata ,rega +7d97 20207d84 branch ui_ipc_put_lock + +ui_ipc_clean_all_fifo: +7d98 58000000 setarg 0 +7d99 60044670 store util_fifo_len ,mem_ipc_fifo_c512bt +7d9a 60044668 store util_fifo_len ,mem_ipc_fifo_bt2c51 +7d9b 20600000 rtn + +check_51cmd: +7d9c 477c403f bpatchx patch3f_0 ,mem_patch3f +7d9d 6800c1ce fetch 1 ,mem_hci_cmd +7d9e 247a0000 nrtn blank +7d9f da204670 arg mem_ipc_fifo_c512bt ,rega +7da0 20407fd0 call fifo_is_empty +7da1 207a0000 rtn blank +7da2 700a9000 jam ipc_continue_process ,mem_ipc_skip_continue_proc +7da3 20407da7 call check_51cmd_once +7da4 68008a90 fetch 1 ,mem_ipc_skip_continue_proc +7da5 203a7d9c branch check_51cmd ,blank +7da6 20600000 rtn + +check_51cmd_once: +7da7 20407d80 call ui_ipc_get_lock +7da8 da204670 arg mem_ipc_fifo_c512bt ,rega +7da9 20407fc4 call fifo_out +7daa 1fe20400 copy pdata ,temp +7dab 20407d84 call ui_ipc_put_lock +7dac 477cc03f bpatchx patch3f_1 ,mem_patch3f +7dad 18427e00 copy temp ,pdata +7dae 207a0000 rtn blank +7daf c000fddd beq bt_cmd_start_discovery ,check_51cmd_start_discovery +7db0 c0017de2 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +7db1 c001fde8 beq bt_cmd_reconnect ,check_51cmd_reconnect +7db2 c003fded beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating +7db3 c0047dee beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating +7db4 c004fdef beq bt_cmd_sniff_test ,check_51cmd_sniff_test +7db5 c005fdf2 beq bt_cmd_start_inquiry ,check_51cmd_inq +7db6 c0067df3 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq +7db7 c006fdf4 beq bt_cmd_start_adv ,check_51cmd_adv +7db8 c0077dfa beq bt_cmd_stop_adv ,check_51cmd_stop_adv +7db9 c007fdff beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +7dba c0087e05 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +7dbb c009fe0f beq bt_cmd_led_off ,check_51cmd_led_off +7dbc c00a7e11 beq bt_cmd_led_on ,check_51cmd_led_on +7dbd c00afe13 beq bt_cmd_led_blink ,check_51cmd_led_start_blink +7dbe c00b7e15 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +7dbf c00bfe18 beq bt_cmd_le_start_scan ,check_51cmd_start_scan +7dc0 c00c7e1a beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +7dc1 c00cfe1d beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +7dc2 c00dfe25 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +7dc3 c00f7e2f beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +7dc4 60008a99 store 1 ,mem_fifo_temp +7dc5 477d403f bpatchx patch3f_2 ,mem_patch3f +7dc6 204062bc call lmo_fifo_check +7dc7 243a7ddb nbranch check_51cmd_restore ,blank + +check_51cmd_once_continue: +7dc8 68008a99 fetch 1 ,mem_fifo_temp +7dc9 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle +7dca c0027dea beq bt_cmd_disconnect ,check_51cmd_disconnect +7dcb c002cd17 beq bt_cmd_enter_sniff ,cmd_in_sniff +7dcc c0034d26 beq bt_cmd_exit_sniff ,cmd_exit_sniff +7dcd c0057df0 beq bt_cmd_set_pin_code ,check_51cmd_pincode +7dce c008fe0a beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +7dcf c0097e0e beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +7dd0 c00efe26 beq bt_cmd_role_switch ,check_51cmd_role_switch +7dd1 c00fe7cc beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +7dd2 c01067d0 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +7dd3 c010fe31 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +7dd4 c012e70b beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +7dd5 20600000 rtn + +check_51cmd_check_idle: +7dd6 60008a99 store 1 ,mem_fifo_temp +7dd7 20402252 call context_check_idle +7dd8 2022fddb branch check_51cmd_restore ,zero +7dd9 2040225a call context_search_plap +7dda 24628000 nrtn zero + +check_51cmd_restore: +7ddb 700a9001 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +7ddc 20207d8f branch ui_ipc_send_cmd + +check_51cmd_start_discovery: +7ddd 68014682 fetch 2 ,mem_ui_state_map +7dde 79207e06 set1 ui_state_bt_discovery +7ddf 60014682 store 2 ,mem_ui_state_map +7de0 70409303 jam 3 ,mem_scan_mode +7de1 20600000 rtn + +check_51cmd_stop_discovery: +7de2 70468000 jam 0 ,mem_hid_handshake_timer_count +7de3 70409300 jam 0 ,mem_scan_mode +7de4 68014682 fetch 2 ,mem_ui_state_map +7de5 793ffe06 set0 ui_state_bt_discovery +7de6 60014682 store 2 ,mem_ui_state_map +7de7 20600000 rtn + +check_51cmd_reconnect: +7de8 7041ce05 jam hci_cmd_create_conn ,mem_hci_cmd +7de9 20600000 rtn + +check_51cmd_disconnect: +7dea 70007c07 jam lmp_detach ,mem_lmo_opcode2 +7deb 7004ca13 jam other_end_terminated ,mem_disconn_reason_send +7dec 20600000 rtn + +check_51cmd_enter_sniff_subrating: +7ded 20600000 rtn + +check_51cmd_exit_sniff_subrating: +7dee 20600000 rtn + +check_51cmd_sniff_test: +7def 20600000 rtn + +check_51cmd_pincode: +7df0 7004d402 jam pincode_state_pincode_ready ,mem_pincode_state +7df1 20204d0a branch cmd_pair + +check_51cmd_inq: +7df2 20600000 rtn + +check_51cmd_stop_inq: +7df3 20600000 rtn + +check_51cmd_adv: +7df4 70436e01 jam on ,mem_le_adv_enable +7df5 70448400 jam adv_ind ,mem_le_adv_type +7df6 68014682 fetch 2 ,mem_ui_state_map +7df7 79207e0b set1 ui_state_ble_adv ,pdata +7df8 60014682 store 2 ,mem_ui_state_map +7df9 20600000 rtn + +check_51cmd_stop_adv: +7dfa 68014682 fetch 2 ,mem_ui_state_map +7dfb 793ffe0b set0 ui_state_ble_adv ,pdata +7dfc 60014682 store 2 ,mem_ui_state_map +7dfd 70436e00 jam off ,mem_le_adv_enable +7dfe 20600000 rtn + +check_51cmd_direct_adv: +7dff 70436e01 jam on ,mem_le_adv_enable +7e00 70448401 jam adv_direct_ind ,mem_le_adv_type +7e01 68014682 fetch 2 ,mem_ui_state_map +7e02 79207e0b set1 ui_state_ble_adv ,pdata +7e03 60014682 store 2 ,mem_ui_state_map +7e04 20600000 rtn + +check_51cmd_stop_direct_adv: +7e05 68014682 fetch 2 ,mem_ui_state_map +7e06 793ffe0b set0 ui_state_ble_adv ,pdata +7e07 60014682 store 2 ,mem_ui_state_map +7e08 70436e00 jam off ,mem_le_adv_enable +7e09 20600000 rtn + +check_51cmd_le_disconnect: +7e0a 58000014 setarg 20 +7e0b 6001046d store 2 ,mem_le_superto +7e0c 600144ba store 2 ,mem_le_init_superto +7e0d 20205c92 branch le_send_terminate_ind_user_terminated + +check_51cmd_ble_update_connect_param: +7e0e 20205abf branch le_l2cap_tx_update_req + +check_51cmd_led_off: +7e0f da200000 arg 0 ,rega +7e10 20207d19 branch ui_led_off_global + +check_51cmd_led_on: +7e11 da200000 arg 0 ,rega +7e12 20207d14 branch ui_led_on_global + +check_51cmd_led_start_blink: +7e13 da200000 arg 0 ,rega +7e14 20207d1e branch ui_led_blink_start_global + +check_51cmd_le_start_con: +7e15 70436901 jam on ,mem_le_scan_enable +7e16 7041ce1b jam hci_cmd_le_create_conn ,mem_hci_cmd +7e17 20600000 rtn + +check_51cmd_start_scan: +7e18 70436901 jam on ,mem_le_scan_enable +7e19 20600000 rtn + +check_51cmd_stop_scan: +7e1a 70436900 jam off ,mem_le_scan_enable +7e1b 7041ce00 jam 0 ,mem_hci_cmd +7e1c 20600000 rtn + +check_51cmd_hibernate: +7e1d 680141eb fetch 2 ,mem_cb_before_hibernate +7e1e 20407f9c call callback_func +7e1f 6800c686 fetch 1 ,mem_ui_button_gpio +7e20 c07ffe23 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +7e21 1fe20400 copy pdata ,temp +7e22 204067fb call gpio_config_input + +check_51cmd_hibernate_btn_disabled: +7e23 20407d98 call ui_ipc_clean_all_fifo +7e24 20202b1f branch lpm_hibernate + +check_51cmd_le_smp_sec_req: +7e25 20205b02 branch le_send_smp_security_request + +check_51cmd_role_switch: +7e26 70007c34 jam lmp_slot_offset ,mem_lmo_opcode2 +7e27 79200003 set1 mark_switch_initiated ,mark +7e28 24748000 nrtn master +7e29 70455b00 jam switch_flag_init ,mem_switch_flag +7e2a 70007c13 jam lmp_switch_req ,mem_lmo_opcode2 +7e2b 6800816d fetch 1 ,mem_connection_options +7e2c 793ffe02 set0 connection_switch ,pdata +7e2d 6000816d store 1 ,mem_connection_options +7e2e 20600000 rtn + +check_51cmd_bb_reconn_cancel: +7e2f 18000e03 force page_length_timer ,queue +7e30 20207f07 branch timer_stop + +check_51cmd_dhkey_not_accept: +7e31 204062f8 call tid_set_reply +7e32 70007d41 jam lmp_dhkey_check ,mem_lmi_opcode2 +7e33 20205f9d branch parse_lmp_dhkey_check_reject + +ui_check_paring_button: +7e34 6800c682 fetch 1 ,mem_ui_state_map +7e35 c4060000 rtnbit0 ui_state_btn_down +7e36 c4038000 rtnbit0 ui_state_bt_reconnect +7e37 20207e2f branch check_51cmd_bb_reconn_cancel + +queue_init: +7e38 68014218 fetch 2 ,mem_queue_ptr +7e39 1fe08a02 add pdata ,queue_offset_curr_num ,contw +7e3a 58000000 setarg 0 +7e3b e0a18000 istore 3 ,contw +7e3c 20600000 rtn + +queue_push: +7e3d 20407fe9 call disable_user +7e3e 20407e69 call queue_full +7e3f 207a0000 rtn blank +7e40 68014218 fetch 2 ,mem_queue_ptr +7e41 1fe0a402 add pdata ,queue_offset_curr_num ,regb +7e42 ea488000 ifetcht 1 ,regb +7e43 18408401 increase 1 ,temp +7e44 e2488000 istoret 1 ,regb +7e45 efe88000 ifetcht 1 ,pdata +7e46 18427200 copy temp ,loopcnt +7e47 1fe0a404 add pdata ,queue_offset_write_ptr ,regb +7e48 ea408000 ifetch 1 ,regb +7e49 984ffe00 imul32 temp ,pdata +7e4a 98c08a00 iadd contr ,contw +7e4b 1a220c00 copy rega ,contr + +calc_queue_next_ptr: +7e4c 20407f01 call memcpy +7e4d 20407e6d call queue_get_size +7e4e 1fe0ffff pincrease -1 +7e4f ea488000 ifetcht 1 ,regb +7e50 18408401 increase 1 ,temp +7e51 98410400 iand temp ,temp +7e52 e2488000 istoret 1 ,regb +7e53 20207fe7 branch enable_user + +queue_pop: +7e54 20407fe9 call disable_user +7e55 20407e65 call queue_empty +7e56 207a0000 rtn blank +7e57 68014218 fetch 2 ,mem_queue_ptr +7e58 1fe0a402 add pdata ,queue_offset_curr_num ,regb +7e59 ea488000 ifetcht 1 ,regb +7e5a 184085ff increase -1 ,temp +7e5b e2488000 istoret 1 ,regb +7e5c efe88000 ifetcht 1 ,pdata +7e5d 18427200 copy temp ,loopcnt +7e5e 1fe0a403 add pdata ,queue_offset_read_ptr ,regb +7e5f ea408000 ifetch 1 ,regb +7e60 984ffe00 imul32 temp ,pdata +7e61 98c08c00 iadd contr ,contr +7e62 18c08c01 increase 1 ,contr +7e63 1a220a00 copy rega ,contw +7e64 20207e4c branch calc_queue_next_ptr + +queue_empty: +7e65 68014218 fetch 2 ,mem_queue_ptr +7e66 1fe08c02 add pdata ,queue_offset_curr_num ,contr +7e67 e8c08000 ifetch 1 ,contr +7e68 20600000 rtn + +queue_full: +7e69 20407e6d call queue_get_size +7e6a e8c88000 ifetcht 1 ,contr +7e6b 98467e00 isub temp ,pdata +7e6c 20600000 rtn + +queue_get_size: +7e6d 68014218 fetch 2 ,mem_queue_ptr +7e6e 1fe08c01 add pdata ,queue_offset_length ,contr +7e6f e8c08000 ifetch 1 ,contr +7e70 20600000 rtn + +right_shift_n: +7e71 1f267c00 sub loopcnt ,0 ,null +7e72 20628000 rtn zero + +right_shift_n_loop: +7e73 1fe37e00 rshift pdata ,pdata +7e74 c2007e73 loop right_shift_n_loop +7e75 20600000 rtn + +left_shift_n: +7e76 18007e01 force 1 ,pdata +7e77 1f267c00 sub loopcnt ,0 ,null +7e78 20628000 rtn zero + +left_shift_n_loop: +7e79 1fe3fe00 lshift pdata ,pdata +7e7a c2007e79 loop left_shift_n_loop +7e7b 20600000 rtn + +push_stack: +7e7c 18a27e00 deposit contw +7e7d 60010abb store 2 ,mem_contw +7e7e 600c0aa2 storet 8 ,mem_temp +7e7f 19627e00 deposit timeup +7e80 60020aaa store 4 ,mem_timeup +7e81 20407e85 call push_stack_rega_b_c +7e82 18c27e00 deposit contr +7e83 60010ab9 store 2 ,mem_contr +7e84 20600000 rtn + +push_stack_rega_b_c: +7e85 1a227e00 deposit rega +7e86 60020aae store 4 ,mem_rega +7e87 1a427e00 deposit regb +7e88 60020ab2 store 4 ,mem_regb +7e89 1a627e00 deposit regc +7e8a 60018ab6 store 3 ,mem_regc +7e8b 20600000 rtn + +pop_stack: +7e8c 680c0aa2 fetcht 8 ,mem_temp +7e8d 68020aaa fetch 4 ,mem_timeup +7e8e 98001600 iforce timeup +7e8f 20407e95 call pop_stack_rega_b_c +7e90 68010abb fetch 2 ,mem_contw +7e91 98000a00 iforce contw +7e92 68010ab9 fetch 2 ,mem_contr +7e93 98000c00 iforce contr +7e94 20600000 rtn + +pop_stack_rega_b_c: +7e95 68020aae fetch 4 ,mem_rega +7e96 98002200 iforce rega +7e97 68020ab2 fetch 4 ,mem_regb +7e98 98002400 iforce regb +7e99 68018ab6 fetch 3 ,mem_regc +7e9a 98002600 iforce regc +7e9b 20600000 rtn + +get_contw: +7e9c 68010abb fetch 2 ,mem_contw +7e9d 1fe20a00 copy pdata ,contw +7e9e 20600000 rtn + +get_contr: +7e9f 68010ab9 fetch 2 ,mem_contr +7ea0 1fe20c00 copy pdata ,contr +7ea1 20600000 rtn + +store_contw: +7ea2 18a27e00 copy contw ,pdata +7ea3 60010abb store 2 ,mem_contw +7ea4 20600000 rtn + +store_contr: +7ea5 18c27e00 copy contr ,pdata +7ea6 60010ab9 store 2 ,mem_contr +7ea7 20600000 rtn + +save_cont_pointers: +7ea8 18a27e00 copy contw ,pdata +7ea9 60010a97 store 2 ,mem_hold_contw +7eaa 18c27e00 copy contr ,pdata +7eab 60010a95 store 2 ,mem_hold_contr +7eac 20600000 rtn + +load_cont_pointers: +7ead 68010a97 fetch 2 ,mem_hold_contw +7eae 1fe20a00 copy pdata ,contw +7eaf 68010a95 fetch 2 ,mem_hold_contr +7eb0 1fe20c00 copy pdata ,contr +7eb1 20600000 rtn + +memcpy96: +7eb2 20407ebd call memcpy32 + +memcpy64: +7eb3 20407ebd call memcpy32 +7eb4 20207ebd branch memcpy32 + +memcpy12: +7eb5 20407eb9 call memcpy8 + +memcpy4: +7eb6 e8c20000 ifetch 4 ,contr +7eb7 e0a20000 istore 4 ,contw +7eb8 20600000 rtn + +memcpy8: +7eb9 e8c40000 ifetch 8 ,contr +7eba e0a40000 istore 8 ,contw +7ebb 20600000 rtn + +memcpy48: +7ebc 20407ebf call memcpy16 + +memcpy32: +7ebd 20407eb9 call memcpy8 + +memcpy24: +7ebe 20407eb9 call memcpy8 + +memcpy16: +7ebf 20407eb9 call memcpy8 +7ec0 20207eb9 branch memcpy8 + +delay_10ms: +7ec1 df20000a arg 10 ,loopcnt + +delay_ms_wait: +7ec2 20002ee0 nop 12000 +7ec3 c2007ec2 loop delay_ms_wait +7ec4 20600000 rtn + +bn_zero: +7ec5 18007203 force 3 ,loopcnt + +memset0: +7ec6 18007e00 force 0 ,pdata + +memset8: +7ec7 e0a40000 istore 8 ,contw +7ec8 c2007ec7 loop memset8 +7ec9 20600000 rtn + +memset0_8: +7eca 18007e00 force 0 ,pdata +7ecb e0a40000 istore 8 ,contw +7ecc 20600000 rtn + +memset0_4: +7ecd 18007e00 force 0 ,pdata +7ece e0a20000 istore 4 ,contw +7ecf 20600000 rtn + +clear_mem_256: +7ed0 18007204 force 4 ,loopcnt +7ed1 20207ec6 branch memset0 + +clear_mem_512: +7ed2 18007208 force 8 ,loopcnt +7ed3 20207ec6 branch memset0 + +clear_mem: +7ed4 1f227e00 deposit loopcnt +7ed5 207a0000 rtn blank +7ed6 58000000 setarg 0 + +clear_mem_loop: +7ed7 e0a08000 istore 1 ,contw +7ed8 c2007ed7 loop clear_mem_loop +7ed9 20600000 rtn + +clear_temp_block: +7eda df200020 arg 32 ,loopcnt +7edb d8a00ac2 arg mem_temp_block0 ,contw +7edc 20207ed4 branch clear_mem + +xor_loop: +7edd ea620000 ifetch 4 ,regc +7ede ea2a0000 ifetcht 4 ,rega +7edf 9842fe00 ixor temp ,pdata +7ee0 e0a20000 istore 4 ,contw +7ee1 1a20a204 increase 4 ,rega +7ee2 1a60a604 increase 4 ,regc +7ee3 c2007edd loop xor_loop +7ee4 20600000 rtn + +inverse_data: +7ee5 477dc03f bpatchx patch3f_3 ,mem_patch3f +7ee6 1f227e00 copy loopcnt ,pdata +7ee7 1fe67c01 sub pdata ,1 ,null +7ee8 20610000 rtn positive +7ee9 9a20a400 iadd rega ,regb +7eea 1a40a5ff increase -1 ,regb +7eeb 1f237200 rshift loopcnt ,loopcnt + +inverse_loop: +7eec ea288000 ifetcht 1 ,rega +7eed ea408000 ifetch 1 ,regb +7eee e2208000 istore 1 ,rega +7eef e2488000 istoret 1 ,regb +7ef0 1a40a5ff increase -1 ,regb +7ef1 1a20a201 increase 1 ,rega +7ef2 c2007eec loop inverse_loop +7ef3 20600000 rtn + +memcpy_fast: +7ef4 1f227e00 deposit loopcnt +7ef5 207a0000 rtn blank + +memcpy_fast_loop: +7ef6 1f20f3f8 increase -8 ,loopcnt +7ef7 20417eb9 call memcpy8 ,positive +7ef8 20628000 rtn zero +7ef9 20217ef6 branch memcpy_fast_loop ,positive +7efa 1f20f208 increase 8 ,loopcnt + +memcpy_fast_loop_four: +7efb 1f20f3fc increase -4 ,loopcnt +7efc 20417eb6 call memcpy4 ,positive +7efd 20628000 rtn zero +7efe 20217efb branch memcpy_fast_loop_four ,positive +7eff 1f20f204 increase 4 ,loopcnt +7f00 20207f01 branch memcpy + +memcpy: +7f01 1f227e00 deposit loopcnt +7f02 207a0000 rtn blank + +memcpy_loop: +7f03 e8c08000 ifetch 1 ,contr +7f04 e0a08000 istore 1 ,contw +7f05 c2007f03 loop memcpy_loop +7f06 20600000 rtn + +timer_stop: +7f07 58000000 setarg 0 + +timer_init: +7f08 1c430400 rshift clkn_bt ,temp +7f09 600a4094 storet 4 ,mem_last_clkn +7f0a d8a0419d arg mem_timers ,contw +7f0b 98000400 iforce temp +7f0c 18e3fe00 lshift queue ,pdata +7f0d 98a08a00 iadd contw ,contw +7f0e e0a90000 istoret 2 ,contw +7f0f 477e403f bpatchx patch3f_4 ,mem_patch3f +7f10 20600000 rtn + +timer_check_timeout: +7f11 d9600800 arg 0x800 ,timeup +7f12 19701600 lshift16 timeup ,timeup +7f13 9960fe00 iadd timeup ,pdata +7f14 20600000 rtn + +timer_reinit: +7f15 d8e00000 arg 0 ,queue + +timer_check: +7f16 477ec03f bpatchx patch3f_5 ,mem_patch3f +7f17 680a4094 fetcht 4 ,mem_last_clkn +7f18 1c437e00 rshift clkn_bt ,pdata +7f19 60024094 store 4 ,mem_last_clkn +7f1a 98467c00 isub temp ,null +7f1b 24417f11 ncall timer_check_timeout ,positive +7f1c 98461600 isub temp ,timeup +7f1d 19620400 copy timeup ,temp +7f1e d8c0419d arg mem_timers ,contr +7f1f 18c20a00 copy contr ,contw +7f20 df200010 arg 16 ,loopcnt + +timer_loop: +7f21 e8c10000 ifetch 2 ,contr +7f22 98467e00 isub temp ,pdata +7f23 20217f25 branch timer_counting ,positive +7f24 18007e00 force 0 ,pdata + +timer_counting: +7f25 e0a10000 istore 2 ,contw +7f26 c2007f21 loop timer_loop +7f27 d8c0419d arg mem_timers ,contr +7f28 18e3fe00 lshift queue ,pdata +7f29 98c08c00 iadd contr ,contr +7f2a e8c10000 ifetch 2 ,contr +7f2b 20600000 rtn + +clk_add: +7f2c 98408400 iadd temp ,temp +7f2d 18427200 copy temp ,loopcnt +7f2e 58000ea6 setarg 3750 +7f2f 9f267e00 isub loopcnt ,pdata +7f30 20610000 rtn positive +7f31 1fe67e00 sub pdata ,0 ,pdata +7f32 18510400 rshift16 temp ,temp +7f33 18408401 increase 1 ,temp +7f34 18500400 lshift16 temp ,temp +7f35 98418400 ior temp ,temp +7f36 20600000 rtn + +clk_diff_rt: +7f37 20407f39 call clk_diff +7f38 20207f43 branch clk2rt + +clk_diff: +7f39 78547c00 disable user +7f3a 98467e00 isub temp ,pdata +7f3b 20217f3e branch clk_diff_pos ,positive +7f3c 78347c00 enable user +7f3d 1fe67e00 sub pdata ,0 ,pdata + +clk_diff_pos: +7f3e c4078000 rtnbit0 15 +7f3f d85f0ea6 arg -61786 ,temp +7f40 9840fe00 iadd temp ,pdata +7f41 793ffe40 set0 64 ,pdata +7f42 20600000 rtn + +clk2rt: +7f43 98000c00 iforce contr +7f44 1ff17e00 rshift16 pdata ,pdata +7f45 d8400ea6 arg 3750 ,temp +7f46 984ffe00 imul32 temp ,pdata +7f47 98c0fe00 iadd contr ,pdata +7f48 20600000 rtn + +clk2lpo: +7f49 1fed7e00 lshift8 pdata ,pdata +7f4a 1ff27e00 lshift4 pdata ,pdata +7f4b 6809c16f fetcht 3 ,mem_clks_per_lpo +7f4c 9846fc00 idiv temp +7f4d 20407f86 call wait_div_end +7f4e 18078400 quotient temp +7f4f 20600000 rtn + +clk2bt: +7f50 d8400ea6 arg 3750 ,temp +7f51 9846fc00 idiv temp +7f52 20407f86 call wait_div_end +7f53 1807fe00 quotient pdata +7f54 1ff07e00 lshift16 pdata ,pdata + +clk2bt2: +7f55 18070400 remainder temp +7f56 98418400 ior temp ,temp +7f57 20600000 rtn + +string2dec_from_uart: +7f58 d8400000 arg 0 ,temp + +string2dec_from_uart_done: +7f59 18422600 copy temp ,regc +7f5a e8608000 ifetch 1 ,contru +7f5b 20407f64 call uchar2dialog +7f5c 1a620400 copy regc ,temp +7f5d 20407f95 call swap +7f5e da40000a arg 10 ,regb +7f5f 9a4ffe00 imul32 regb ,pdata +7f60 9840fe00 iadd temp ,pdata +7f61 1fe20400 copy pdata ,temp +7f62 c2007f59 loop string2dec_from_uart_done +7f63 20600000 rtn + +uchar2dialog: +7f64 d840003a arg 0x3a ,temp +7f65 98467c00 isub temp ,null +7f66 24217f6d nbranch uchar2dialog_number ,positive +7f67 d8400061 arg 0x61 ,temp +7f68 98467c00 isub temp ,null +7f69 20217f70 branch uchar2dialog_a2f ,positive +7f6a d8400037 arg 0x37 ,temp +7f6b 98467e00 isub temp ,pdata +7f6c 20600000 rtn + +uchar2dialog_number: +7f6d d8400030 arg 0x30 ,temp +7f6e 98467e00 isub temp ,pdata +7f6f 20600000 rtn + +uchar2dialog_a2f: +7f70 d8400057 arg 0x57 ,temp +7f71 98467e00 isub temp ,pdata +7f72 20600000 rtn + +pn9: +7f73 18426000 copy temp ,alarm +7f74 580001ff setarg 0x1ff +7f75 18002400 force 0 ,regb + +pn9_loop: +7f76 1fe92200 rshift3 pdata ,rega +7f77 1a232200 rshift rega ,rega +7f78 9a22a200 ixor rega ,rega +7f79 2a2ffe00 isolate1 0 ,rega +7f7a 7920fe09 setflag true ,9 ,pdata +7f7b 18430400 rshift temp ,temp +7f7c 2feffe00 isolate1 0 ,pdata +7f7d 79208407 setflag true ,7 ,temp +7f7e 1fe37e00 rshift pdata ,pdata +7f7f 1a40a401 increase 1 ,regb +7f80 2a400e00 compare 0 ,regb ,0x7 +7f81 2420ff76 nbranch pn9_loop ,true +7f82 e0a88000 istoret 1 ,contw +7f83 c2007f76 loop pn9_loop +7f84 1e020400 copy alarm ,temp +7f85 20600000 rtn + +wait_div_end: +7f86 207a8000 rtn modone +7f87 20207f86 branch wait_div_end + +compare_loop: + +string_compare: +7f88 ea208000 ifetch 1 ,rega +7f89 ea488000 ifetcht 1 ,regb +7f8a 98467c00 isub temp ,null +7f8b 24628000 nrtn zero +7f8c 1a20a201 increase 1 ,rega +7f8d 1a40a401 increase 1 ,regb +7f8e c2007f88 loop string_compare +7f8f 18007c00 force 0 ,null +7f90 20600000 rtn + +ceiling: +7f91 98467c00 isub temp ,null +7f92 24610000 nrtn positive +7f93 18427e00 deposit temp +7f94 20600000 rtn + +swap: +7f95 9840fe00 iadd temp ,pdata +7f96 98460400 isub temp ,temp +7f97 98467e00 isub temp ,pdata +7f98 20600000 rtn + +clean_mem: +7f99 df200200 arg 0x200 ,loopcnt +7f9a d8a04000 arg 0x4000 ,contw +7f9b 20207ec6 branch memset0 + +callback_func: +7f9c 207a0000 rtn blank +7f9d 1fe27a00 copy pdata ,pc + +wait_uarttx: +7f9e 6811010e hfetch 2 ,core_uart_txitems +7f9f 243a7f9e nbranch wait_uarttx ,blank +7fa0 20600000 rtn + +ice_break: +7fa1 70820301 jam 0x1 ,core_ice_ctrl +7fa2 20600000 rtn + +ice_setbp: +7fa3 60110205 hstore 2 ,core_ice_break0 +7fa4 68108203 hfetch 1 ,core_ice_ctrl +7fa5 79207e04 set1 4 ,pdata +7fa6 60108203 hstore 1 ,core_ice_ctrl +7fa7 20600000 rtn + +ice_setbp2: +7fa8 60110207 hstore 2 ,core_ice_break1 +7fa9 68108203 hfetch 1 ,core_ice_ctrl +7faa 79207e06 set1 6 ,pdata +7fab 60108203 hstore 1 ,core_ice_ctrl +7fac 20600000 rtn + +ice_set_write_bp: +7fad 60110205 hstore 2 ,core_ice_break0 +7fae 70820330 jam 0x30 ,core_ice_ctrl +7faf 20600000 rtn + +test_enable_white: +7fb0 68108043 hfetch 1 ,core_config +7fb1 793ffe04 set0 whiteoff_bit ,pdata +7fb2 60108043 hstore 1 ,core_config +7fb3 20600000 rtn + +check_uart_tx_buff: +7fb4 6811010e hfetch 2 ,core_uart_txitems +7fb5 d8400200 arg uart_air_control_threshold ,temp + +pdata_sub_temp: +7fb6 98467c00 isub temp ,null +7fb7 20600000 rtn + +fifo_in: +7fb8 477f403f bpatchx patch3f_6 ,mem_patch3f +7fb9 ea2c0000 ifetcht util_fifo_len ,rega +7fba 18417eff and temp ,0xff ,pdata +7fbb 243a7fbe nbranch fifo_in_push ,blank +7fbc 184cfe00 rshift8 temp ,pdata +7fbd e2240000 istore util_fifo_len ,rega + +fifo_in_push: +7fbe 1a20a207 increase util_fifo_len + util_fifo_offset ,rega +7fbf ea208000 ifetch 1 ,rega +7fc0 243a2a8c nbranch assert ,blank +7fc1 68008a99 fetch 1 ,mem_fifo_temp +7fc2 e2208000 istore 1 ,rega +7fc3 20600000 rtn + +fifo_out: +7fc4 477fc03f bpatchx patch3f_7 ,mem_patch3f +7fc5 df200008 arg util_fifo_len ,loopcnt +7fc6 ea240000 ifetch util_fifo_len ,rega +7fc7 207a0000 rtn blank + +fifo_out_loop: +7fc8 ea208000 ifetch 1 ,rega +7fc9 243a7fcd nbranch fifo_out_end ,blank +7fca 1a20a201 increase 1 ,rega +7fcb c2007fc8 loop fifo_out_loop +7fcc 20202a8c branch assert + +fifo_out_end: +7fcd d8400000 arg 0 ,temp +7fce e2288000 istoret 1 ,rega +7fcf 20600000 rtn + +fifo_is_empty: +7fd0 ea240000 ifetch util_fifo_len ,rega +7fd1 20600000 rtn + +fifo_is_full: +7fd2 ea208000 ifetch 1 ,rega +7fd3 20600000 rtn + +fifo_is_near_full: +7fd4 ea210000 ifetch 2 ,rega +7fd5 20600000 rtn + +fifo_content_count: +7fd6 d8400000 arg 0 ,temp + +fifo_content_count_loop: +7fd7 68008006 fetch 1 ,contr +7fd8 c2007fd7 loop fifo_content_count_loop ,blank +7fd9 18408401 increase 1 ,temp +7fda c2007fd7 loop fifo_content_count_loop +7fdb 18427e00 copy temp ,pdata +7fdc 20600000 rtn + +not_greater_than: +7fdd 98467c00 isub temp ,null +7fde 24610000 nrtn positive +7fdf 18427e00 copy temp ,pdata +7fe0 20600000 rtn + +disable_positive: +7fe1 18007dff force -1 ,null +7fe2 20600000 rtn + +enable_positive: + +disable_zero: +7fe3 18007c01 force 1 ,null +7fe4 20600000 rtn + +enable_zero: +7fe5 18007c00 force 0 ,null +7fe6 20600000 rtn + +enable_user: +7fe7 78347c00 enable user +7fe8 20600000 rtn + +disable_user: +7fe9 78547c00 disable user +7fea 20600000 rtn + +enable_user2: +7feb 78367c00 enable user2 +7fec 20600000 rtn + +disable_user2: +7fed 78567c00 disable user2 +7fee 20600000 rtn + +disable_blank: +7fef 58000001 setarg 1 +7ff0 20600000 rtn + +enable_blank: +7ff1 58000000 setarg 0 +7ff2 20600000 rtn + +reverse_byte: +7ff3 1f227e00 copy loopcnt ,pdata +7ff4 207a0000 rtn blank +7ff5 18c27e00 copy contr ,pdata +7ff6 9f20fe00 iadd loopcnt ,pdata +7ff7 1fe0ffff increase -1 ,pdata +7ff8 1fe20c00 copy pdata ,contr + +reverse_loop: +7ff9 e8c08000 ifetch 1 ,contr +7ffa 18c08dfe increase -2 ,contr +7ffb e0a08000 istore 1 ,contw +7ffc c2007ff9 loop reverse_loop +7ffd 20600000 rtn + org 0x10001 + +z_entrance0: +10001 c0000004 beq zcode_00 ,z_page_wait_fhs_reply_ok +10002 c0008011 beq zcode_01 ,z_mouse_check_reconn_target +10003 20600000 rtn + +z_page_wait_fhs_reply_ok: +10004 6800800e fetch 1 ,mem_page_rcv_fhs +10005 1fe0fe01 increase 1 ,pdata +10006 6000800e store 1 ,mem_page_rcv_fhs +10007 20402435 call prepare_newconn + +z_master_newconn_loop: +10008 7920002c set1 mark_first_packet ,mark +10009 204022f2 call master_newconn_once +1000a 202c000f branch z_newconn_poll_responded ,sync +1000b 793f802c set0 mark_first_packet ,mark +1000c 20402455 call new_conn_timeout +1000d 243a0008 nbranch z_master_newconn_loop ,blank +1000e 202020fc branch page_restart + +z_newconn_poll_responded: +1000f 793f802c set0 mark_first_packet ,mark +10010 2020215f branch newconn_poll_responded + +z_mouse_check_reconn_target: +10011 20400284 call p_mouse_tx_power_init +10012 6800c720 fetch 1 ,mem_device_flag +10013 c001033e beq mode_24g_device ,p_mouse_connect_24g_mode +10014 c07f833e beq 0xff ,p_mouse_connect_24g_mode +10015 204004e5 call p_mouse_mode_bt_device1_multi_led_on +10016 6800c210 fetch 1 ,mem_xrecord_mode +10017 c0198287 beq rec_3_mode ,p_mouse3_0_check_reconn_target +10018 c01a028a beq rec_4_mode ,p_mouse4_0_check_reconn_target +10019 2020049d branch p_mouse_null_enter_hibernate_enable + org 0x20001 + +z_entrance1: +20001 c0080004 beq zcode_10 ,z_mouse_bb_disconnected +20002 c008801d beq zcode_11 ,z_hid_rx_process +20003 20600000 rtn + +z_mouse_bb_disconnected: +20004 70480800 jam 0 ,mem_mouse_enter_sniff_count +20005 7041e30e jam 0x0e ,mem_sniff_param_interval +20006 204041e7 call mouse_bb_discon_clear_stack +20007 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +20008 c283800e bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn +20009 c28033a9 bbit1 app_disc_by_button ,app_disconn_reason_clear +2000a c2808012 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing +2000b c2810015 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate +2000c c2818015 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +2000d 202042b0 branch mouse_start_discovery + +z_mouse4_0_event_bb_disconn: +2000e 204041c1 call mouse_le_clean_connect_flag +2000f 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +20010 c285042b bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +20011 202041f7 branch mouse4_0_event_bb_disconn + 2 + +z_mouse_event_light_state_pairing: +20012 c2828015 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate +20013 c2818015 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +20014 202042b0 branch mouse_start_discovery + +z_mouse_event_light_state_hibernate: +20015 68014682 fetch 2 ,mem_ui_state_map +20016 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery +20017 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason +20018 c285042b bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +20019 204033a9 call app_disconn_reason_clear +2001a 20400564 call p_mouse_check_key_gpio +2001b c002849d beq mouse_lm_button ,p_mouse_null_enter_hibernate_enable +2001c 202033a7 branch app_bb_hibernate + +z_hid_rx_process: +2001d 68010264 fetch 2 ,mem_l2cap_payload_ptr +2001e 1fe20c00 copy pdata ,contr +2001f e8c08000 ifetch 1 ,contr +20020 6000cb02 store 1 ,mem_l2cap_rcv +20021 1fe1040f and pdata ,0x0f ,temp +20022 1ff1fe00 rshift4 pdata ,pdata +20023 c0038025 beq hid_type_set_protocol ,z_hid_rx_set_protocol +20024 20204d39 branch hid_rx_process + 6 + +z_hid_rx_set_protocol: +20025 20404d53 call hid_rx_process_handshake +20026 704b0300 jam 0 ,mem_mouse_bt_boot_mode +20027 6800cb02 fetch 1 ,mem_l2cap_rcv +20028 2feffe00 isolate1 0 ,pdata +20029 20608000 rtn true +2002a 704b0301 jam 1 ,mem_mouse_bt_boot_mode +2002b 20600000 rtn + org 0x30001 + +z_entrance2: +30001 c0100003 beq zcode_20 ,z_send_lmp +30002 20600000 rtn + +z_send_lmp: +30003 78547c00 disable user +30004 204062c1 call lmo_fifo_process +30005 68008048 fetch 1 ,mem_lmp_to_send +30006 207a0000 rtn blank +30007 c283800c bbit1 7 ,z_send_lmp_escape +30008 c001801c beq lmp_accepted ,z_send_lmp_accepted +30009 c0188018 beq lmp_setup_complete ,z_send_lmp_setup_complete +3000a c00b801a beq lmp_sniff_req ,z_send_lmp_sniff_req +3000b 20206010 branch send_lmp0 + +z_send_lmp_escape: +3000c c042000f beq lmp_ext_features_res ,z_send_lmpext_features_res +3000d c0418012 beq lmp_ext_features_req ,z_send_lmpext_features_req +3000e 2020603f branch send_lmp_escape + +z_send_lmpext_features_res: +3000f 20400015 call z_check_ssp_enable +30010 68008048 fetch 1 ,mem_lmp_to_send +30011 20206099 branch send_lmpext_features_res + +z_send_lmpext_features_req: +30012 20400015 call z_check_ssp_enable +30013 68008048 fetch 1 ,mem_lmp_to_send +30014 2020610d branch send_lmpext_features_req + +z_check_ssp_enable: +30015 6800c65a fetch 1 ,mem_ssp_enable +30016 203a612b branch ssp_disable ,blank +30017 20206124 branch ssp_enable + +z_send_lmp_setup_complete: +30018 704b0101 jam 1 ,mem_bt_send_lmp_setup_complete +30019 202061c3 branch send_lmp_setup_complete + +z_send_lmp_sniff_req: +3001a 704b0904 jam 4 ,mem_mouse_bt_send_first_package_timer +3001b 202061a4 branch send_lmp_sniff_req + +z_send_lmp_accepted: +3001c 18007e02 force 2 ,pdata +3001d 20406298 call msg_send_lmp +3001e 68008049 fetch 1 ,mem_lmi_opcode +3001f e0a08000 istore 1 ,contw +30020 6000cafc store 1 ,mem_lmi_opcode_temp +30021 204062a7 call send_lmp_follow +30022 6800cafc fetch 1 ,mem_lmi_opcode_temp +30023 c0170025 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req +30024 20206051 branch send_lmp_accepted + 7 + +z_send_lmp_accepted_max_slot_req: +30025 6800caff fetch 1 ,mem_bt_rcvd_switch_req_accept +30026 207a0000 rtn blank +30027 704aff00 jam 0 ,mem_bt_rcvd_switch_req_accept +30028 6800cb01 fetch 1 ,mem_bt_send_lmp_setup_complete +30029 c1810000 rtnne 2 +3002a 704b0001 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +3002b 1c427e00 copy clkn_bt ,pdata +3002c 600204e9 store 4 ,mem_aurand_send_delay_time +3002d 20600000 rtn + org 0x40001 + +z_entrance3: +40001 c0180003 beq zcode_30 ,z_process_conn_sm +40002 20600000 rtn + +z_process_conn_sm: +40003 204062bc call lmo_fifo_check +40004 247a0000 nrtn blank + +z_process_conn_sm_continue: +40005 68008055 fetch 1 ,mem_conn_sm +40006 207a0000 rtn blank +40007 c0020025 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req +40008 c008000a beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch +40009 20206320 branch process_conn_sm_continue + 2 + +z_host_creat_conn_wait_switch: +4000a 6800c55b fetch 1 ,mem_switch_flag +4000b c1000000 rtneq switch_flag_init +4000c c000800e beq switch_flag_accept ,z_host_create_conn_switch_accept +4000d 2020635f branch host_creat_conn_wait_switch + 3 + +z_host_create_conn_switch_accept: +4000e 20748000 rtn master + +z_host_create_conn_auth_pair: +4000f 6800816d fetch 1 ,mem_connection_options +40010 c2800012 bbit1 connection_auth ,z_host_create_conn_auth_pair_true +40011 20206399 branch host_create_conn_auth_pair + 1 + +z_host_create_conn_auth_pair_true: +40012 6800cb01 fetch 1 ,mem_bt_send_lmp_setup_complete +40013 c000e39d beq 1 ,host_create_conn_auth_pair_true +40014 6800c1bd fetch 1 ,mem_link_key_exists +40015 203a63a9 branch host_create_conn_auth_pair_nokey ,blank +40016 680084d1 fetch 1 ,mem_lmp_conn_state +40017 c4018000 rtnbit0 sent_setup_complete +40018 c4010000 rtnbit0 received_setup_complete +40019 6800cb00 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch +4001a 207a0000 rtn blank +4001b 704b0000 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch +4001c 680204e9 fetch 4 ,mem_aurand_send_delay_time +4001d d8400014 arg 20 ,temp +4001e 98408400 iadd temp ,temp +4001f 1c427e00 copy clkn_bt ,pdata +40020 98467c00 isub temp ,null +40021 24210023 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive +40022 20206349 branch host_create_conn_auth + +z_bt_send_max_slot_req_accept_after_switch_wait: +40023 704b0001 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +40024 20600000 rtn + +z_host_create_conn_send_conn_req: +40025 70480914 jam 20 ,mem_mouse_send_switch_req_timer +40026 2020636f branch host_create_conn_send_conn_req + org 0x50001 + +z_entrance4: +50001 c0200004 beq zcode_40 ,z_le_update_param +50002 c0208016 beq zcode_41 ,z_le_update_channel_map +50003 20600000 rtn + +z_le_update_param: +50004 2040000c call z_mouse_le_conn_param_check +50005 2020557d branch le_update_param + 8 + +z_mouse_le_lpm_mult_reinit: +50006 6800c7c5 fetch 1 ,mem_lpm_mult_init +50007 6000c172 store 1 ,mem_lpm_mult + +z_mouse_le_conn_param_lpm_enable: +50008 7047c400 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +50009 20600000 rtn + +z_mouse_le_conn_param_lpm_disable: +5000a 7047c401 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +5000b 20600000 rtn + +z_mouse_le_conn_param_check: +5000c 6800c3d6 fetch 1 ,mem_le_new_conninterval +5000d 1fe67c0c sub pdata ,le_interval_15ms ,null +5000e 2421000a nbranch z_mouse_le_conn_param_lpm_disable ,positive +5000f 6800c3d8 fetch 1 ,mem_le_new_connslavelatency +50010 6808c7c5 fetcht 1 ,mem_lpm_mult_init +50011 98467c00 isub temp ,null +50012 20210006 branch z_mouse_le_lpm_mult_reinit ,positive +50013 6800c3d8 fetch 1 ,mem_le_new_connslavelatency +50014 6000c172 store 1 ,mem_lpm_mult +50015 20200008 branch z_mouse_le_conn_param_lpm_enable + +z_le_update_channel_map: +50016 6800843f fetch 1 ,mem_le_state +50017 c4030000 rtnbit0 lestate_update_map +50018 2040001b call z_le_channel_map_overflow_check +50019 24740000 nrtn user +5001a 202055a0 branch le_update_channel_map + 3 + +z_le_channel_map_overflow_check: +5001b 78347c00 enable user +5001c 6800845a fetch 1 ,mem_le_event_count + 1 +5001d 1ff1fe00 rshift4 pdata ,pdata +5001e c1878000 rtnne 0x0f +5001f 68008460 fetch 1 ,mem_le_instant + 1 +50020 1ff1fe00 rshift4 pdata ,pdata +50021 c1800000 rtnne 0x00 +50022 20207fe9 branch disable_user + org 0x60001 + +z_entrance5: +60001 c0280003 beq zcode_50 ,z_mouse_start_discovery +60002 20600000 rtn + +z_mouse_start_discovery: +60003 704b6b00 jam 0 ,mem_le_send_security_request_flag +60004 20400284 call p_mouse_tx_power_init +60005 70472001 jam mode_bt_device1 ,mem_device_flag +60006 70479c00 jam 0 ,mem_mouse_clear_sensor_data_flag +60007 68014682 fetch 2 ,mem_ui_state_map +60008 c2858013 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom +60009 680246d3 fetch mouse_flag_len ,mem_mouse_flag +6000a c30c0013 bbit0 mouse_enable_ble_random_addre ,z_mouse_start_discovery_norandom +6000b 20400591 call p_mouse_load_random_addr_increase_count +6000c 680947c2 fetcht 2 ,mem_random_addr_increase_count +6000d 18408401 increase 1 ,temp +6000e 600947c2 storet 2 ,mem_random_addr_increase_count +6000f 600944a1 storet 2 ,mem_le_lap + 1 +60010 204002f7 call p_mouse_store_random_addr_increase_count +60011 180a7e00 random pdata +60012 6000c4a0 store 1 ,mem_le_lap + +z_mouse_start_discovery_norandom: +60013 6801cb67 fetch 3 ,mem_le_lap_high_3b +60014 6001c4a3 store 3 ,mem_le_lap + 3 +60015 204002a0 call p_mouse_le_fast_conn_disable +60016 20403418 call app_lpm_mult_disable +60017 68014687 fetch 2 ,mem_discovery_timeout +60018 600146ac store 2 ,mem_mouse_discovery_timer +60019 70016d06 jam 6 ,mem_connection_options +6001a 58000000 setarg 0 +6001b 600146b0 store 2 ,mem_mouse_no_data_timer +6001c 600146ae store 2 ,mem_mouse_direct_timer +6001d d8e00007 arg mouse_store_eeprom_flag ,queue +6001e 204043ce call mouse_enable_function_flag +6001f 204043ca call mouse_bt_discovery_button_down_disable +60020 6800c092 fetch 1 ,mem_device_option +60021 2feffe01 isolate1 mode_4_mouse ,pdata +60022 20408027 call z_check_51cmd_adv ,true +60023 6800c092 fetch 1 ,mem_device_option +60024 2feffe00 isolate1 mode_3_mouse ,pdata +60025 2040fddd call check_51cmd_start_discovery ,true +60026 202004ea branch p_mouse_discovery_multi_led_blink + +z_check_51cmd_adv: +60027 70479f00 jam 0 ,mem_mouse_le_reconnect_flag +60028 20400299 call p_le_check_adv_flag +60029 58000005 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable +6002a e0c08000 istore 1 ,contr +6002b d8c04b10 arg mem_le_adv_swift_pair ,contr +6002c 2040059f call p_le_adv_data_update +6002d 20207df4 branch check_51cmd_adv + org 0x70001 + +z_entrance6: +70001 c0300004 beq zcode_60 ,z_g24_start_24g_mode +70002 c0308026 beq zcode_61 ,z_mouse_24g_pairing_button +70003 20600000 rtn + +z_g24_start_24g_mode: +70004 793f8026 set0 mark_24g ,mark +70005 2040019f call p_g24_syncword_crc8 +70006 204001be call p_g24_ch +70007 6800cc21 fetch 1 ,mem_24g_pairing_sm +70008 c1ff8000 rtnne state_24g_pairing_success +70009 20400018 call z_g24_tx_attemp_data_prep + +z_g24_tx_attemp_dongle: +7000a 58000000 setarg 0 +7000b 60014c3e store 2 ,mem_24g_check_dongle_times + +z_g24_tx_attemp_dongle_loop: +7000c 200007d0 nop 2000 +7000d 6800cc3e fetch 1 ,mem_24g_check_dongle_times +7000e c07fadd4 beq 0xff ,g24_stop_24g_mode +7000f 20400156 call p_g24_transmit_receive_ack +70010 242c0021 nbranch z_g24_attemp_txdata_retry ,sync +70011 24378021 nbranch z_g24_attemp_txdata_retry ,user3 + +z_g24_tx_attemp_dongle_succ: +70012 79200026 set1 mark_24g ,mark +70013 58000000 setarg 0 +70014 60014c3e store 2 ,mem_24g_check_dongle_times +70015 20402f20 call g24_app_tx_attempt_success +70016 20400153 call p_g24_txbuf_clear +70017 20200350 branch p_g24_transmit_by_interrupt_enable + +z_g24_tx_attemp_data_prep: +70018 70119eff jam 0xff ,mem_24g_common_temp +70019 6800cc12 fetch 1 ,mem_24g_data_type +7001a 6000919f store 1 ,mem_24g_common_temp + 1 +7001b 68024c48 fetch 4 ,mem_24g_device_addr +7001c 600211a0 store 4 ,mem_24g_common_temp + 2 +7001d d8400006 arg 6 ,temp +7001e da20119e arg mem_24g_common_temp ,rega +7001f 2040018d call p_g24_put_data_in_buff +70020 202001ac branch p_g24_transmit_prep + +z_g24_attemp_txdata_retry: +70021 68014c3e fetch 2 ,mem_24g_check_dongle_times +70022 1fe0fe01 increase 1 ,pdata +70023 60014c3e store 2 ,mem_24g_check_dongle_times +70024 204001be call p_g24_ch +70025 2020000c branch z_g24_tx_attemp_dongle_loop + +z_mouse_24g_pairing_button: +70026 6800c720 fetch 1 ,mem_device_flag +70027 c1008000 rtneq mode_bt_device1 +70028 680246d3 fetch mouse_flag_len ,mem_mouse_flag +70029 c4088000 rtnbit0 mouse_enable_24g +7002a c3818000 rtnbit1 mosue_24g_pairing_flag +7002b c6130000 rtnmark1 mark_24g +7002c d8e00003 arg mosue_24g_pairing_flag ,queue +7002d 204043ce call mouse_enable_function_flag +7002e 58000000 setarg 0 +7002f 600146ae store 2 ,mem_mouse_direct_timer +70030 6000c6b4 store 1 ,mem_mouse_send_blank_timer +70031 60014c3e store 2 ,mem_24g_check_dongle_times +70032 204042ca call mouse_stop_discovery +70033 20200034 branch z6_g24_start_pairing_sm1 + +z6_g24_start_pairing_sm1: +70034 79200026 set1 mark_24g ,mark +70035 20400038 call z6_g24_pair_init + +z6_g24_set_pairing_sm_1: +70036 704c2101 jam state_24g_pairing_1 ,mem_24g_pairing_sm +70037 20600000 rtn + +z6_g24_pair_init: +70038 7041de20 jam tx_power_pair ,mem_tx_power +70039 704c1000 jam 0 ,mem_24g_pid +7003a 704c1b4e jam g24_pair_ch ,mem_24g_ch +7003b 68024c1d fetch 4 ,mem_24g_paring_addr +7003c 2020019e branch p_g24_update_addr_and_synccrc8 + org 0x80001 + +z_entrance7: +80001 c0380003 beq zcode_70 ,z_g24_auto_pair_start +80002 20600000 rtn + +z_g24_auto_pair_start: +80003 793f8026 set0 mark_24g ,mark +80004 2040002c call z_g24_auto_pair_all_powerful +80005 20400019 call z7_g24_tx_attemp_data_prep + +z_g24_auto_pair_restart: +80006 704c3e00 jam 0 ,mem_24g_check_dongle_times + +z_g24_auto_pair_start_loop: +80007 200007d0 nop 2000 +80008 6800cc3e fetch 1 ,mem_24g_check_dongle_times +80009 c07fadd4 beq 0xff ,g24_stop_24g_mode +8000a 20400156 call p_g24_transmit_receive_ack +8000b 242c0022 nbranch z_g24_auto_pair_retry ,sync +8000c 24378022 nbranch z_g24_auto_pair_retry ,user3 +8000d 2040017c call p_g24_ackpayload_parse +8000e 20400284 call p_mouse_tx_power_init +8000f 68024c39 fetch 4 ,mem_24g_addr +80010 680a4c1d fetcht 4 ,mem_24g_paring_addr +80011 98467c00 isub temp ,null +80012 20228036 branch z_g24_start_pairing_sm1 ,zero +80013 79200026 set1 mark_24g ,mark +80014 58000000 setarg 0 +80015 60014c3e store 2 ,mem_24g_check_dongle_times +80016 20402f20 call g24_app_tx_attempt_success +80017 20400153 call p_g24_txbuf_clear +80018 20200350 branch p_g24_transmit_by_interrupt_enable + +z7_g24_tx_attemp_data_prep: +80019 70119eff jam 0xff ,mem_24g_common_temp +8001a 6800cc12 fetch 1 ,mem_24g_data_type +8001b 6000919f store 1 ,mem_24g_common_temp + 1 +8001c 68024c48 fetch 4 ,mem_24g_device_addr +8001d 600211a0 store 4 ,mem_24g_common_temp + 2 +8001e d8400006 arg 6 ,temp +8001f da20119e arg mem_24g_common_temp ,rega +80020 2040018d call p_g24_put_data_in_buff +80021 202001ac branch p_g24_transmit_prep + +z_g24_auto_pair_retry: +80022 6800cc3e fetch 1 ,mem_24g_check_dongle_times +80023 1fe0fe01 increase 1 ,pdata +80024 6000cc3e store 1 ,mem_24g_check_dongle_times +80025 6800cd4f fetch 1 ,mem_24g_auto_paring_switch +80026 1fe0fe01 increase 1 ,pdata +80027 1fe17e01 and_into 1 ,pdata +80028 6000cd4f store 1 ,mem_24g_auto_paring_switch +80029 c0000032 beq 0 ,z_g24_auto_pair_device_attemp +8002a c0008034 beq 1 ,z_g24_auto_pair_pair_attemp +8002b 20600000 rtn + +z_g24_auto_pair_all_powerful: +8002c 7041de20 jam tx_power_pair ,mem_tx_power +8002d 58000f0f setarg 0x0f0f +8002e 60014c39 store 2 ,mem_24g_addr +8002f e0a10000 istore 2 ,contw + +z_g24_ch_syncword_crc8_init: +80030 2040019f call p_g24_syncword_crc8 +80031 202001be branch p_g24_ch + +z_g24_auto_pair_device_attemp: +80032 2040002c call z_g24_auto_pair_all_powerful +80033 20200007 branch z_g24_auto_pair_start_loop + +z_g24_auto_pair_pair_attemp: +80034 2040003a call z_g24_pair_init +80035 20200007 branch z_g24_auto_pair_start_loop + +z_g24_start_pairing_sm1: +80036 79200026 set1 mark_24g ,mark +80037 2040003a call z_g24_pair_init + +z_g24_set_pairing_sm_1: +80038 704c2101 jam state_24g_pairing_1 ,mem_24g_pairing_sm +80039 20600000 rtn + +z_g24_pair_init: +8003a 7041de20 jam tx_power_pair ,mem_tx_power +8003b 704c1000 jam 0 ,mem_24g_pid +8003c 704c1b4e jam g24_pair_ch ,mem_24g_ch +8003d 68024c1d fetch 4 ,mem_24g_paring_addr +8003e 2020019e branch p_g24_update_addr_and_synccrc8 + org 0x90001 + +z_entrance8: +90001 c0400008 beq zcode_80 ,z_mouse_setting_config +90002 c0408004 beq zcode_81 ,z_le_addr_random_config +90003 20600000 rtn + +z_le_addr_random_config: +90004 204068a2 call load_adc_init +90005 58001122 setarg 0x1122 + +z_le_otp_adc_empty: +90006 600147c2 store 2 ,mem_random_addr_increase_count +90007 20600000 rtn + +z_mouse_setting_config: +90008 680240a0 fetch 4 ,mem_lap +90009 60024c48 store 4 ,mem_24g_device_addr +9000a 20403e6e call mouse_gpio_init +9000b 6808cb44 fetcht 1 ,mem_flash_ncs_gpio +9000c 2040680e call gpio_config_output +9000d 20403e1e call mouse_param_init +9000e 20400024 call z_mouse_bt_sdp_update +9000f 58000000 setarg 0 +90010 60014154 store 2 ,mem_lpm_interval +90011 204068a2 call load_adc_init +90012 20403e54 call mouse_adc_init +90013 20405810 call le_set_config_fixed_ltk +90014 20405839 call le_set_justwork +90015 2040582c call le_set_fixed_ltk +90016 20405818 call le_set_config_read_authentication +90017 2040058d call p_le_addr_random_config +90018 2040033c call p_flash_release_deep_power_down +90019 20400302 call p_mouse_set_24g_addr_flash +9001a 6801c700 fetch 3 ,mem_flash_base +9001b 9a40fe00 iadd regb ,pdata +9001c 20406562 call spid_read_flash +9001d 204002e8 call p_mouse_load_flash_info_check +9001e df200003 arg 3 ,loopcnt +9001f d8c04722 arg mem_device1_addr ,contr +90020 20400346 call p_pdata_0xff_check +90021 243402a0 nbranch p_mouse_le_fast_conn_disable ,user +90022 204002a2 call p_mouse_fast_conn_init +90023 20600000 rtn + +z_mouse_bt_sdp_update: +90024 204074b9 call enable_authrom +90025 d8c08c00 arg 0x8c00 ,contr +90026 d8a04876 arg mem_mouse_uuid_list ,contw +90027 df200171 arg 369 ,loopcnt +90028 20407f01 call memcpy +90029 580f0209 setarg 0x0f0209 +9002a e0a18000 istore 3 ,contw +9002b 58120009 setarg 0x120009 +9002c e0a18000 istore 3 ,contw +9002d 58100209 setarg 0x100209 +9002e e0a18000 istore 3 ,contw +9002f 58000009 setarg 0x000009 +90030 e0a18000 istore 3 ,contw +90031 d8c08d71 arg 0x8d71 ,contr +90032 df200109 arg 265 ,loopcnt +90033 20407f01 call memcpy +90034 70488d00 jam 0 ,mem_mouse_uuid_list + 23 +90035 7048856d jam 0x6d ,mem_mouse_uuid_list + 15 +90036 5800401f setarg 0x401f +90037 600149db store 2 ,mem_mouse_uuid_list + 357 +90038 58006d04 setarg 0x6d04 +90039 60014a44 store 2 ,mem_mouse_uuid_list + 462 +9003a 580016b0 setarg 0x16b0 +9003b 60014a4a store 2 ,mem_mouse_uuid_list + 468 +9003c 58004876 setarg mem_mouse_uuid_list +9003d 60014575 store 2 ,mem_ui_uuid_table +9003e 20600000 rtn + org 0xa0001 + +z_entrance9: +a0001 c0480005 beq zcode_90 ,z_g24_pairing_sm +a0002 c048801f beq zcode_91 ,z_g24_paring_mode +a0003 c0490030 beq zcode_92 ,z_mouse_24g_pairing_complete +a0004 20600000 rtn + +z_g24_pairing_sm: +a0005 6800cc16 fetch 1 ,mem_24g_ensure +a0006 c000ffe7 beq ensure_on_24g ,enable_user +a0007 6800cc21 fetch 1 ,mem_24g_pairing_sm +a0008 c000800c beq state_24g_pairing_1 ,z_g24_pairing_sm_1 +a0009 c001000f beq state_24g_pairing_2 ,z_g24_pairing_sm_2 +a000a c0018012 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 +a000b 20202a8c branch assert + +z_g24_pairing_sm_1: +a000c 704c2111 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm +a000d 70119eaa jam 0xaa ,mem_24g_common_temp +a000e 20200014 branch z_g24_pairing_sm_common + +z_g24_pairing_sm_2: +a000f 704c2112 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm +a0010 70119e55 jam 0x55 ,mem_24g_common_temp +a0011 20200014 branch z_g24_pairing_sm_common + +z_g24_pairing_sm_3: +a0012 704c2113 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm +a0013 70119e22 jam 0x22 ,mem_24g_common_temp + +z_g24_pairing_sm_common: +a0014 6800cc12 fetch 1 ,mem_24g_data_type +a0015 1fe17e07 and_into bits_data ,pdata +a0016 6000919f store 1 ,mem_24g_common_temp + 1 +a0017 68024c48 fetch 4 ,mem_24g_device_addr +a0018 600211a0 store 4 ,mem_24g_common_temp + 2 + +z_g24_put_pairing_data_in_buff: +a0019 7011a400 jam 0 ,mem_24g_common_temp + 6 +a001a da20119e arg mem_24g_common_temp ,rega +a001b d8400007 arg 7 ,temp +a001c 2040018d call p_g24_put_data_in_buff +a001d 20400117 call p_g24_txdata_enable_tx +a001e 20207fe7 branch enable_user + +z_g24_paring_mode: +a001f 2040070f call power_ctrl_pac_succ_cnt_init +a0020 6800cc21 fetch 1 ,mem_24g_pairing_sm +a0021 c17f8000 rtneq state_24g_pairing_success +a0022 c0088026 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack +a0023 c0090028 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack +a0024 c009802a beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack +a0025 20600000 rtn + +z_g24_pairing_sm_1_waiting_ack: +a0026 704c2102 jam state_24g_pairing_2 ,mem_24g_pairing_sm +a0027 2020014f branch p_g24_transmit_abandon + +z_g24_pairing_sm_2_waiting_ack: +a0028 704c2103 jam state_24g_pairing_3 ,mem_24g_pairing_sm +a0029 2020014f branch p_g24_transmit_abandon + +z_g24_pairing_sm_3_waiting_ack: +a002a 704c21ff jam state_24g_pairing_success ,mem_24g_pairing_sm +a002b 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +a002c 20407d86 call ui_ipc_send_event +a002d 68024bf1 fetch 4 ,mem_24g_rxpayload + 2 +a002e 2040019e call p_g24_update_addr_and_synccrc8 +a002f 2020014f branch p_g24_transmit_abandon + +z_mouse_24g_pairing_complete: +a0030 204002ac call p_mouse_init_sensor_reset +a0031 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable +a0032 d8e00003 arg mosue_24g_pairing_flag ,queue +a0033 204043d2 call mouse_disable_function_flag +a0034 58000000 setarg 0 +a0035 60014707 store 2 ,mem_24g_pairing_timer_count +a0036 7046a700 jam 0 ,mem_mouse_move_flag +a0037 2040405d call mouse_read_sensor_common +a0038 204004a0 call p_mouse_null_enter_hibernate_disable +a0039 20400284 call p_mouse_tx_power_init +a003a 68024c39 fetch 4 ,mem_24g_addr +a003b 6002477b store 4 ,mem_mouse_24g_addr +a003c 20404366 call mouse_cheak_select_24gdevice +a003d 202002f2 branch p_mouse_store_flash_device_info + org 0xb0001 + +z_entrancea: +b0001 c0500007 beq zcode_a0 ,z_mouse_24g_attempt_fail +b0002 c050800e beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved +b0003 c0510021 beq zcode_a2 ,z_mouse_le_bb_disconnected +b0004 c051801a beq zcode_a3 ,z_mouse_bb_event_reconn_timeout +b0005 c052002b beq zcode_a4 ,z_mouse_before_hibernate +b0006 20600000 rtn + +z_mouse_24g_attempt_fail: +b0007 204002ce call p_mouse_sensor_powerdown_check +b0008 704d5100 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +b0009 20400284 call p_mouse_tx_power_init +b000a 20400189 call p_g24_check_51cmd_stop_24g +b000b 7041bd00 jam 0 ,mem_link_key_exists +b000c 2040025f call p_mouse_setgpio_hibernate +b000d 2020049d branch p_mouse_null_enter_hibernate_enable + +z_mouse_le_conn_param_update_rsp_recieved: +b000e 68014509 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +b000f c1000000 rtneq ble_signaling_connect_parameter_update_accepted +b0010 68008441 fetch 1 ,mem_le_tsniff +b0011 1feb7e00 rshift2 pdata ,pdata +b0012 1fe67c0c sub pdata ,le_interval_15ms ,null +b0013 20610000 rtn positive +b0014 58000009 setarg le_interval_11_25ms +b0015 60014496 store 2 ,mem_le_interval_min +b0016 60014498 store 2 ,mem_le_interval_min + 2 +b0017 204003f3 call p_app_updata_le_param +b0018 7047c401 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +b0019 20600000 rtn + +z_mouse_bb_event_reconn_timeout: + +z_mouse_bb_event_reconn_failed: +b001a 68014682 fetch 2 ,mem_ui_state_map +b001b c3860000 rtnbit1 ui_state_btn_down +b001c c3830000 rtnbit1 ui_state_bt_discovery +b001d c3858000 rtnbit1 ui_state_ble_adv +b001e 680246d3 fetch mouse_flag_len ,mem_mouse_flag +b001f c3828000 rtnbit1 mouse_bt_discovery_button_down_flag +b0020 202033a7 branch app_bb_hibernate + +z_mouse_le_bb_disconnected: +b0021 204002ce call p_mouse_sensor_powerdown_check +b0022 704b6500 jam 0 ,mem_mouse_le_bb_connected_flag +b0023 58000007 setarg le_interval_8_75ms +b0024 60014496 store 2 ,mem_le_interval_min +b0025 60014498 store 2 ,mem_le_interval_min + 2 +b0026 7047c400 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +b0027 70479c00 jam 0 ,mem_mouse_clear_sensor_data_flag +b0028 20400387 call p_mouse_data_init +b0029 20405816 call le_clr_config_more_data +b002a 202041d9 branch mouse_bb_disconnected + +z_mouse_before_hibernate: +b002b 204002ce call p_mouse_sensor_powerdown_check +b002c 78347c00 enable user +b002d 68120138 hfetch 4 ,0x8138 +b002e 79347e1a setflag user ,26 ,pdata +b002f 6012004c hstore 4 ,core_lpm_reg +b0030 20402c21 call lpm_write_ctrl +b0031 204074bd call disable_authrom +b0032 20403e9f call mouse_before_hibernate_wheel_gpio_set +b0033 2040025f call p_mouse_setgpio_hibernate +b0034 20400334 call p_flash_deep_power_down +b0035 68108081 hfetch 1 ,core_gpio_sel1 +b0036 1fe17ef7 and pdata ,0xf7 ,pdata +b0037 60108081 hstore 1 ,core_gpio_sel1 +b0038 20600000 rtn + org 0xc0001 + +z_entranceb: +c0001 c0580007 beq zcode_b0 ,z_mouse_le_bb_event_connected +c0002 c0588012 beq zcode_b1 ,z_mouse_sniff_not_accept +c0003 c0590018 beq zcode_b2 ,z_mouse_enter_sniff_check +c0004 c059801d beq zcode_b3 ,z_mouse_le_ll_start_encryt +c0005 c05a0024 beq zcode_b4 ,z_mouse_bb_event_disconnected +c0006 20600000 rtn + +z_mouse_le_bb_event_connected: +c0007 204002ac call p_mouse_init_sensor_reset +c0008 6801420a fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +c0009 793ffe0a set0 app_disc_pb_button ,pdata +c000a 6001420a store app_disc_rsn_size ,mem_app_disconn_reason_flag +c000b 704b6501 jam 1 ,mem_mouse_le_bb_connected_flag +c000c 6800c79f fetch 1 ,mem_mouse_le_reconnect_flag +c000d 243a000f nbranch p_mouse_le_bb_event_connected_next ,blank +c000e 704b6a14 jam 0x14 ,mem_mouse_send_secutiry_request_timer + +p_mouse_le_bb_event_connected_next: +c000f 204004a0 call p_mouse_null_enter_hibernate_disable +c0010 20400387 call p_mouse_data_init +c0011 202041c3 branch mouse_le_bb_event_connected + +z_mouse_sniff_not_accept: +c0012 6800c808 fetch 1 ,mem_mouse_enter_sniff_count +c0013 c1010000 rtneq 2 +c0014 1fe0fe01 increase 1 ,pdata +c0015 6000c808 store 1 ,mem_mouse_enter_sniff_count +c0016 7041e312 jam 0x12 ,mem_sniff_param_interval +c0017 2020340e branch app_bt_enter_sniff + +z_mouse_enter_sniff_check: +c0018 6800c808 fetch 1 ,mem_mouse_enter_sniff_count +c0019 c1810000 rtnne 2 +c001a 70480800 jam 0 ,mem_mouse_enter_sniff_count +c001b 7041e30e jam 0x0e ,mem_sniff_param_interval +c001c 2020340e branch app_bt_enter_sniff + +z_mouse_le_ll_start_encryt: +c001d 6800c79f fetch 1 ,mem_mouse_le_reconnect_flag +c001e c0008020 beq 1 ,z_mouse_le_ll_reconn_start_encryt +c001f 20200022 branch z_mouse_le_ll_enable_start_enc_flag + +z_mouse_le_ll_reconn_start_encryt: +c0020 204003f3 call p_app_updata_le_param +c0021 7046c605 jam 5 ,mem_le_start_encrypt_timer + +z_mouse_le_ll_enable_start_enc_flag: +c0022 d8e00001 arg ll_start_enc_flag ,queue +c0023 202041b9 branch mouse_le_enable_connect_flag + +z_mouse_bb_event_disconnected: +c0024 204002ce call p_mouse_sensor_powerdown_check +c0025 704aff00 jam 0 ,mem_bt_rcvd_switch_req_accept +c0026 704b0100 jam 0 ,mem_bt_send_lmp_setup_complete +c0027 704b0a00 jam 0 ,mem_mouse_bt_send_first_package_flag +c0028 202041d9 branch mouse_bb_disconnected + Index: output/romcode.rom =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/romcode.rom (revision 5064) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/output/romcode.rom (working copy) @@ -24592,11 +24592,11 @@ 6800c720 c001033e c07f833e -204004e1 +204004e5 6800c210 c0198287 c01a028a -20200499 +2020049d c0080004 c008801d 20600000 @@ -24612,7 +24612,7 @@ 202042b0 204041c1 68014208 -c2850427 +c285042b 202041f7 c2828015 c2818015 @@ -24620,10 +24620,10 @@ 68014682 c28642b0 68014208 -c2850427 +c285042b 204033a9 -20400560 -c0028499 +20400564 +c002849d 202033a7 68010264 1fe20c00 @@ -24767,7 +24767,7 @@ c2858013 680246d3 c30c0013 -2040058d +20400591 680947c2 18408401 600947c2 @@ -24794,13 +24794,13 @@ 6800c092 2feffe00 2040fddd -202004e6 +202004ea 70479f00 20400299 58000005 e0c08000 d8c04b10 -2040059b +2040059f 20207df4 c0300004 c0308026 @@ -24808,35 +24808,35 @@ 793f8026 2040019f 204001be -6800cc20 +6800cc21 c1ff8000 20400018 58000000 -60014c3d +60014c3e 200007d0 -6800cc3d +6800cc3e c07fadd4 20400156 242c0021 24378021 79200026 58000000 -60014c3d +60014c3e 20402f20 20400153 20200350 70119eff -6800cc11 +6800cc12 6000919f -68024c47 +68024c48 600211a0 d8400006 da20119e 2040018d 202001ac -68014c3d +68014c3e 1fe0fe01 -60014c3d +60014c3e 204001be 2020000c 6800c720 @@ -24850,64 +24850,64 @@ 58000000 600146ae 6000c6b4 -60014c3d +60014c3e 204042ca 20200034 79200026 20400038 -704c2001 +704c2101 20600000 7041de20 -704c0f00 -704c1a4e -68024c1c +704c1000 +704c1b4e +68024c1d 2020019e c0380003 20600000 793f8026 2040002c 20400019 -704c3d00 +704c3e00 200007d0 -6800cc3d +6800cc3e c07fadd4 20400156 242c0022 24378022 2040017c 20400284 -68024c38 -680a4c1c +68024c39 +680a4c1d 98467c00 20228036 79200026 58000000 -60014c3d +60014c3e 20402f20 20400153 20200350 70119eff -6800cc11 +6800cc12 6000919f -68024c47 +68024c48 600211a0 d8400006 da20119e 2040018d 202001ac -6800cc3d +6800cc3e 1fe0fe01 -6000cc3d -6800cd4e +6000cc3e +6800cd4f 1fe0fe01 1fe17e01 -6000cd4e +6000cd4f c0000032 c0008034 20600000 7041de20 58000f0f -60014c38 +60014c39 e0a10000 2040019f 202001be @@ -24917,12 +24917,12 @@ 20200007 79200026 2040003a -704c2001 +704c2101 20600000 7041de20 -704c0f00 -704c1a4e -68024c1c +704c1000 +704c1b4e +68024c1d 2020019e c0400008 c0408004 @@ -24932,7 +24932,7 @@ 600147c2 20600000 680240a0 -60024c47 +60024c48 20403e6e 6808cb44 2040680e @@ -24946,7 +24946,7 @@ 20405839 2040582c 20405818 -20400589 +2040058d 2040033c 20400302 6801c700 @@ -24990,25 +24990,25 @@ c048801f c0490030 20600000 -6800cc15 +6800cc16 c000ffe7 -6800cc20 +6800cc21 c000800c c001000f c0018012 20202a8c -704c2011 +704c2111 70119eaa 20200014 -704c2012 +704c2112 70119e55 20200014 -704c2013 +704c2113 70119e22 -6800cc11 +6800cc12 1fe17e07 6000919f -68024c47 +68024c48 600211a0 7011a400 da20119e @@ -25016,21 +25016,21 @@ 2040018d 20400117 20207fe7 -2040070b -6800cc20 +2040070f +6800cc21 c17f8000 c0088026 c0090028 c009802a 20600000 -704c2002 +704c2102 2020014f -704c2003 +704c2103 2020014f -704c20ff +704c21ff 700a9939 20407d86 -68024bf0 +68024bf1 2040019e 2020014f 204002ac @@ -25041,9 +25041,9 @@ 60014707 7046a700 2040405d -2040049c +204004a0 20400284 -68024c38 +68024c39 6002477b 20404366 202002f2 @@ -25054,12 +25054,12 @@ c052002b 20600000 204002ce -704d5000 +704d5100 20400284 20400189 7041bd00 2040025f -20200499 +2020049d 68014509 c1000000 68008441 @@ -25069,7 +25069,7 @@ 58000009 60014496 60014498 -204003f0 +204003f3 7047c401 20600000 68014682 @@ -25117,7 +25117,7 @@ 6800c79f 243a000f 704b6a14 -2040049c +204004a0 20400387 202041c3 6800c808 @@ -25134,7 +25134,7 @@ 6800c79f c0008020 20200022 -204003f0 +204003f3 7046c605 d8e00001 202041b9 @@ -25143,4 +25143,4 @@ 704b0100 704b0a00 202041d9 -0000852e +0000e4a4 Index: program/patch.prog =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/program/patch.prog (revision 5064) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/program/patch.prog (working copy) @@ -1637,19 +1637,23 @@ p_mouse_idle: call ui_check_paring_button - call p_mouse_dpi_check +// call p_mouse_dpi_check call p_mouse_select_device branch mouse_wheel_check p_mouse_dpi_check: call p_mouse_check_key_gpio - beq MOUSE_RM_BUTTON,p_mouse_dpi_down + beq MOUSE_LR_BUTTON,p_mouse_dpi_change branch mouse_dpi_up - +p_mouse_dpi_change: + arg mem_mouse_dpi_time_count,regc + arg p_mouse_dpi_down,regb + branch timer_single_step p_mouse_dpi_down: fetch 1,mem_mouse_dpi_button_state rtneq DPI_BUTTON_STATE_DOWN jam DPI_BUTTON_STATE_DOWN,mem_mouse_dpi_button_state + jam 0x28,mem_mouse_dpi_time_count fetch 1,mem_mouse_dpi increase 1,pdata and pdata,0x03,pdata @@ -1657,10 +1661,9 @@ increase 2,pdata store 1,mem_mouse_multi_led_blink_count call p_mouse_dpi_multi_led_blink - call mouse_seting_dpi + call p_mouse_seting_dpi branch p_mouse_store_flash_device_info - p_mouse_priority_bb_event: copy regc,pdata ifdef BLE @@ -1769,6 +1772,7 @@ call p_mouse_adc_read call p_mouse_low_voltage_led_timer endif + call p_mouse_dpi_check call p_mouse_multi_led_blink_timer call p_mouse_wheel_trigger_timer call p_mouse_null_enter_hibernate_timer Index: sched/mouse.dat =================================================================== --- /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/sched/mouse.dat (revision 5065) +++ /branch/mouse_project/YJX_Project/YJX_1059/PB_Switch_YJX_503_Low_Voltage/sched/mouse.dat (working copy) @@ -147,6 +147,9 @@ mem_24g_device_number:02 #devie 2 :24g mode mem_adc_config_flag:00 #0 vinlpm 1 hvin 2 gpio mem_adc_channel:00 #gpio5 + +mem_mouse_dpi_time_count:28 + mem_mouse_vdd_full_vol:72 01#3.7V 18 01#mem_mouse_vdd_empty_vol:5a 00# 2.8V 2c 01#mem_mouse_vdd_low_vol:64 00 #3.0v